Skip to content

Order Samurai v1.0.0 — DEPRECATED, use v1.0.1

Choose a tag to compare

@Gemkai Gemkai released this 10 Aug 11:42
· 254 commits to main since this release

⚠️ DEPRECATED — do not use. This release does not protect anything.

If you installed v1.0.0, you were never protected. Please upgrade to
v1.0.1
and re-run samurai install.

samurai install registered its hooks into ~/.claude/hooks/settings.json using entries
shaped {"name", "command", "async"}. Claude Code loads ~/.claude/settings.json and
parses {"matcher", "hooks": [{"type": "command", ...}]} — so neither the path nor the
schema matched. The prompt-injection guard and secret scrubber never ran.

samurai doctor reported 5/5 checks passed throughout, because it accepted Order
Samurai's own ~/.samurai/settings.json as proof of registration. A passing health check
on this version is not evidence that you were protected.

Two further defects in this release:

  • samurai uninstall could damage your Claude Code configuration. It deregistered by
    name, then restored the newest settings.json.bak.* — but both settings files share that
    basename, so it could write Order Samurai's file over your real ~/.claude/settings.json.
  • samurai uninstall silently deleted a paid Pro license. It removed ~/.samurai
    wholesale, taking license.json with it.

Upgrading

curl -fsSL https://www.ordersamurai.ai/install.sh | bash
export PATH="$HOME/.samurai/core/bin:$PATH"
samurai install     # registers the hooks (this step was missing from v1.0.0's instructions)
samurai doctor      # now fails honestly if the guard is not wired

v1.0.1 also removes the stale v1.0.0 hook file on uninstall. Full detail:
CHANGELOG.


Order Samurai v1.0.0 - Local-First Governance & Security Layer for Autonomous Coding Agent Fleets