@codyswann/lisa 1.16.0 → 1.18.0

package/all/copy-overwrite/.claude/hooks/track-plan-sessions.sh

@@ -15,6 +15,10 @@
 # Marker files: $PLANS_DIR/.active-plan-<session-id> contain the absolute path to the
 # active plan file. Stale markers (>24h) are cleaned up on each invocation.
 #
+# Dedup: Session ID dedup is scoped to the ## Sessions section only, not the entire
+# file. This prevents false positives when session IDs appear elsewhere in plan content
+# (e.g., scratchpad directory paths like /private/tmp/claude-501/.../SESSION_ID/...).
+#
 # Debug logging: All key decisions are logged to $PLANS_DIR/.track-plan-debug.log for
 # diagnostics if session IDs land in the wrong plan file.
 #
@@ -123,9 +127,11 @@ if [[ ! -f "$PLAN_FILE" ]]; then
   exit 0
 fi
 
-# Check if session ID already exists in the file (dedup)
-if grep -qF "$SESSION_ID" "$PLAN_FILE" 2>/dev/null; then
-  log_debug "dedup: session ID already in $PLAN_FILE (resolved via $RESOLUTION_METHOD), skipping write"
+# Check if session ID already exists in the ## Sessions section (dedup)
+# Only search within the Sessions section to avoid false positives from session IDs
+# appearing in plan content (e.g., scratchpad paths contain session IDs)
+if sed -n '/^## Sessions$/,$p' "$PLAN_FILE" 2>/dev/null | grep -qF "$SESSION_ID"; then
+  log_debug "dedup: session ID already in $PLAN_FILE sessions section (resolved via $RESOLUTION_METHOD), skipping write"
   exit 0
 fi
 

package/all/copy-overwrite/.claude/rules/lisa.md

@@ -0,0 +1,37 @@
+# Lisa-Managed Files
+
+The following files are managed by Lisa and will be overwritten on every `lisa` run. Never edit them directly. Where a local override exists, edit that instead.
+
+## Files with local overrides (edit the override, not the managed file)
+
+| Managed File (do not edit) | Local Override (edit this instead) |
+|---|---|
+| `eslint.config.ts` | `eslint.config.local.ts` |
+| `jest.config.ts` | `jest.config.local.ts` |
+| `tsconfig.json` | `tsconfig.local.json` |
+| `eslint.ignore.config.json` | `eslint.config.local.ts` |
+| `eslint.thresholds.json` | Edit directly (create-only, Lisa won't overwrite) |
+| `jest.thresholds.json` | Edit directly (create-only, Lisa won't overwrite) |
+| `.claude/rules/coding-philosophy.md` | `.claude/rules/PROJECT_RULES.md` |
+| `.claude/rules/plan.md` | `.claude/rules/PROJECT_RULES.md` |
+| `.claude/rules/verfication.md` | `.claude/rules/PROJECT_RULES.md` |
+
+## Files and directories with NO local override (do not edit at all)
+
+- `CLAUDE.md`, `HUMAN.md`, `.safety-net.json`
+- `.prettierrc.json`, `.prettierignore`, `.lintstagedrc.json`, `.versionrc`, `.nvmrc`
+- `.yamllint`, `.gitleaksignore`, `commitlint.config.cjs`, `sgconfig.yml`, `knip.json`
+- `eslint.base.ts`, `eslint.typescript.ts`, `eslint.expo.ts`, `eslint.nestjs.ts`, `eslint.cdk.ts`, `eslint.slow.config.ts`
+- `jest.base.ts`, `jest.typescript.ts`, `jest.expo.ts`, `jest.nestjs.ts`, `jest.cdk.ts`
+- `tsconfig.base.json`, `tsconfig.typescript.json`, `tsconfig.expo.json`, `tsconfig.nestjs.json`, `tsconfig.cdk.json`
+- `tsconfig.eslint.json`, `tsconfig.build.json`, `tsconfig.spec.json`
+- `eslint-plugin-code-organization/*`, `eslint-plugin-component-structure/*`, `eslint-plugin-ui-standards/*`
+- `.claude/settings.json`, `.claude/hooks/*`, `.claude/skills/*`, `.claude/commands/*`, `.claude/agents/*`
+- `.claude/README.md`, `.claude/REFERENCE.md`
+- `.github/workflows/quality.yml`, `.github/workflows/release.yml`, `.github/workflows/claude.yml`
+- `.github/workflows/build.yml`, `.github/workflows/lighthouse.yml` (Expo)
+- `.github/workflows/load-test.yml`, `.github/workflows/zap-baseline.yml` (NestJS)
+- `.github/dependabot.yml`, `.github/GITHUB_ACTIONS.md`, `.github/k6/*`
+- `lighthouserc.js`, `.mcp.json`, `.easignore.extra` (Expo)
+- `scripts/zap-baseline.sh`, `.zap/*`
+- `ast-grep/*`

package/all/copy-overwrite/.claude/rules/plan.md

@@ -10,7 +10,7 @@ When making a plan:
 - Always make sure you understand the correct versions of third party libraries
 - Always save the plan with a name befitting the actual plan contents
 - Always look for code that can be reused for implementation
-- The plan MUST including written instructions to create a task list using TaskCreate for each task. The list should contain items related to the plan and specify that subagents should handle as many in parallel as possible. The following should always be included in the task list
+- The plan MUST include written instructions to create a task list using TaskCreate for each task (following the Task Creation Specification below). The list should contain items related to the plan and specify that subagents should handle as many in parallel as possible. The following should always be included in the task list
   - update/add/remove tests, containing the tests that need to get updated, added or removed
   - update/add/remove documentation (jsdocs, markdown files, etc), containing the documentation that need to get updated, added or removed
   - archive the plan (to be completed after all other tasks have been completed). This task should explcitly say to:
@@ -27,3 +27,53 @@ When making a plan:
 - If referencing a ticket (jira, linear, etc), always add a comment to the ticket with the finalized plan
 - The `## Sessions` section in plan files is auto-maintained by the `track-plan-sessions.sh` hook — do not manually edit it
 
+## Task Creation Specification
+
+When plans include TaskCreate instructions, each task must use this format:
+
+### Parameters
+
+- **subject**: Imperative form (e.g., "Add logout button to header")
+- **activeForm**: Present continuous form (e.g., "Adding logout button to header")
+
+### Description Template
+
+Every task description must be a markdown document with these sections:
+
+**Type:** Bug | Task | Epic | Story
+
+**Description:** Clear description based on type (Bug: symptoms/root cause; Story: Gherkin Given/When/Then; Task: clear goal; Epic: goal with sub-tasks)
+
+**Acceptance Criteria:** Checkbox list of completion criteria
+
+**Relevant Research:** Code references, patterns, architecture constraints extracted from research
+
+**Skills to Invoke:** `/coding-philosophy` is always required, plus other applicable skills
+
+**Implementation Details:** Files to modify, functions to implement, edge cases
+
+**Testing Requirements:** Unit tests (with `describe/it` structure), Integration tests, E2E tests (or "N/A")
+
+**Verification:** Every task MUST have empirical verification (see `verfication.md` for types). Include: verification type, proof command, and expected output.
+
+**Learnings:** On task completion, use `TaskUpdate` to save discoveries: `metadata: { learnings: ["Learning 1", ...] }`
+
+### Metadata
+
+```json
+{
+  "plan": "<plan-name>",
+  "type": "bug|task|epic|story",
+  "skills": ["/coding-philosophy", ...],
+  "verification": {
+    "type": "test|ui-recording|test-coverage|api-test|manual-check|documentation",
+    "command": "the proof command",
+    "expected": "what success looks like"
+  }
+}
+```
+
+### Task Sizing
+
+Each task must be small enough to have a **single, specific verification**. Ask: "Can I prove this is done with ONE command?" Split tasks that require multiple verifications.
+

package/nestjs/copy-overwrite/eslint.slow.config.ts

@@ -0,0 +1,103 @@
+/**
+ * This file is managed by Lisa.
+ * Do not edit directly — changes will be overwritten on the next `lisa` run.
+ */
+
+/**
+ * ESLint 9 Flat Config - Slow Rules Only (NestJS)
+ *
+ * This configuration runs ONLY slow linting rules that are disabled in the
+ * main eslint.config.ts for performance. Run this periodically via `lint:slow`
+ * rather than on every lint pass.
+ *
+ * Rules included:
+ * - import/namespace - Type checks all namespace imports (slow)
+ * - import/no-cycle - Detects circular dependencies (very slow)
+ *
+ * NestJS-specific adjustments:
+ * - sonarjs/deprecation disabled (NestJS ecosystem APIs evolve frequently)
+ * - import/no-cycle disabled for *.module.ts (NestJS forwardRef pattern)
+ *
+ * @see https://github.com/import-js/eslint-plugin-import
+ * @module eslint.slow.config
+ */
+import importPlugin from "eslint-plugin-import";
+import sonarjsPlugin from "eslint-plugin-sonarjs";
+import tseslint from "typescript-eslint";
+
+import ignoreConfig from "./eslint.ignore.config.json" with { type: "json" };
+
+const ignorePatterns = ignoreConfig.ignores || [];
+
+// Get the TypeScript flat config from the import plugin
+const importTypescriptConfig = importPlugin.flatConfigs.typescript;
+
+export default [
+  // Use same ignores as main config, plus ignore all non-TS files
+  // This prevents errors from inline eslint directives in JS files
+  // that reference rules not loaded in this minimal config
+  // Also ignore template files in type-specific directories that don't have tsconfig
+  {
+    ignores: [
+      ...ignorePatterns,
+      "**/*.js",
+      "**/*.mjs",
+      "**/*.cjs",
+      "**/*.jsx",
+      "**/__tests__/**",
+      "cdk/**",
+      "expo/**",
+      "nestjs/**",
+      "typescript/**",
+      "npm-package/**",
+    ],
+  },
+
+  // TypeScript files - slow import rules only
+  {
+    files: ["**/*.ts", "**/*.tsx"],
+    linterOptions: {
+      // Ignore inline eslint-disable comments since they reference rules
+      // from the main config that aren't loaded in this minimal config
+      noInlineConfig: true,
+    },
+    languageOptions: {
+      parser: tseslint.parser,
+      parserOptions: {
+        project: "tsconfig.eslint.json",
+      },
+    },
+    plugins: {
+      ...(importTypescriptConfig?.plugins ?? {}),
+      sonarjs: sonarjsPlugin,
+    },
+    settings: {
+      ...(importTypescriptConfig?.settings ?? {}),
+      "import/resolver": {
+        ...((importTypescriptConfig?.settings?.["import/resolver"] as Record<
+          string,
+          unknown
+        >) ?? {}),
+        typescript: true,
+      },
+    },
+    rules: {
+      // ONLY slow rules - everything else runs in the main config
+      "import/namespace": "error",
+      "import/no-cycle": "error",
+
+      // NestJS ecosystem APIs evolve frequently with deprecation notices
+      // that are not immediately actionable (e.g., OpenAI SDK, MCP SDK)
+      "sonarjs/deprecation": "off",
+    },
+  },
+
+  // NestJS module files use forwardRef() to handle circular dependencies
+  // at runtime. ESLint's import/no-cycle doesn't understand this pattern.
+  {
+    files: ["**/*.module.ts"],
+    rules: {
+      "import/no-cycle": "off",
+    },
+  },
+];

package/nestjs/copy-overwrite/tsconfig.json

@@ -1,5 +1,5 @@
 {
   "extends": ["./tsconfig.nestjs.json", "./tsconfig.local.json"],
   "include": ["src/**/*"],
-  "exclude": ["node_modules", ".build"]
+  "exclude": ["node_modules", ".build", "dist", "**/*.test.ts", "**/*.spec.ts"]
 }

package/package.json

@@ -85,7 +85,7 @@
   },
   "resolutions": {},
   "name": "@codyswann/lisa",
-  "version": "1.16.0",
+  "version": "1.18.0",
   "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
   "main": "dist/index.js",
   "bin": {