@codyswann/lisa 1.37.0 → 1.39.0

package/rails/create-only/.github/workflows/release.yml

@@ -0,0 +1,94 @@
+name: Release
+
+on:
+  push:
+    branches: [main, staging]
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    name: Release
+    runs-on: ubuntu-latest
+    steps:
+      - uses: webfactory/ssh-agent@v0.9.0
+        with:
+          ssh-private-key: ${{ secrets.DEPLOY_KEY }}
+
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          ssh-key: ${{ secrets.DEPLOY_KEY }}
+
+      - name: Check for skip conditions
+        id: skip
+        run: |
+          COMMIT_MSG=$(git log -1 --pretty=%B)
+
+          # Skip if last commit is a version bump
+          if echo "$COMMIT_MSG" | grep -q "^chore(release):"; then
+            echo "skip=true" >> $GITHUB_OUTPUT
+            exit 0
+          fi
+
+          # Skip promotion merges (environment branch → main) only on main
+          if [ "$GITHUB_REF_NAME" = "main" ]; then
+            ENV_BRANCHES="dev|staging"
+
+            # Message-based detection: merge commits
+            # Pattern: "Merge branch 'staging' into main"
+            if echo "$COMMIT_MSG" | grep -qiE "^Merge branch ['\"]?($ENV_BRANCHES)['\"]? into"; then
+              echo "skip=true" >> $GITHUB_OUTPUT
+              exit 0
+            fi
+
+            # Pattern: "Merge pull request #123 from org/staging"
+            if echo "$COMMIT_MSG" | grep -qiE "^Merge pull request.*from .*/($ENV_BRANCHES)$"; then
+              echo "skip=true" >> $GITHUB_OUTPUT
+              exit 0
+            fi
+
+            # Git-based detection: squash/fast-forward promotions
+            for ENV_BRANCH in dev staging; do
+              git fetch origin "$ENV_BRANCH" 2>/dev/null || continue
+              if git merge-base --is-ancestor HEAD "origin/$ENV_BRANCH" 2>/dev/null; then
+                echo "skip=true" >> $GITHUB_OUTPUT
+                exit 0
+              fi
+            done
+          fi
+
+          echo "skip=false" >> $GITHUB_OUTPUT
+
+      - uses: actions/setup-node@v4
+        if: steps.skip.outputs.skip != 'true'
+        with:
+          node-version: '22'
+
+      - name: Configure Git
+        if: steps.skip.outputs.skip != 'true'
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+
+      - name: Bump version and create tag
+        if: steps.skip.outputs.skip != 'true'
+        run: npx standard-version@9
+
+      - name: Push changes
+        if: steps.skip.outputs.skip != 'true'
+        run: |
+          git remote set-url origin git@github.com:${{ github.repository }}.git
+          git push --follow-tags origin ${{ github.ref_name }}
+
+      - name: Create GitHub Release
+        if: steps.skip.outputs.skip != 'true' && github.ref_name == 'main'
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          VERSION=$(cat VERSION)
+          gh release create "v${VERSION}" \
+            --title "v${VERSION}" \
+            --generate-notes

package/rails/create-only/.reek.yml

@@ -24,6 +24,9 @@ directories:
   'app/helpers':
     UtilityFunction:
       enabled: false
+  'app/jobs':
+    UtilityFunction:
+      enabled: false
   'db/migrate':
     IrresponsibleModule:
       enabled: false

package/rails/create-only/.rubocop.local.yml

@@ -2,8 +2,21 @@
 # This file is NOT managed by Lisa — edit freely.
 # Add or override any RuboCop cops below.
 
-# Example:
-# Metrics/MethodLength:
-#   Max: 25
+# Align with Reek's UncommunicativeVariableName (which rejects single-char names)
+Naming/RescuedExceptionsVariableName:
+  PreferredName: error
+
+# Add staging to known environments if your app uses a staging Rails env
+# Rails/UnknownEnv:
+#   Environments:
+#     - development
+#     - test
+#     - staging
+#     - production
+
+# Auto-generated schema files can exceed block length limits
+# Metrics/BlockLength:
 #   Exclude:
-#     - 'app/controllers/api/v1/**/*'
+#     - 'db/queue_schema.rb'
+#     - 'db/cable_schema.rb'
+#     - 'db/cache_schema.rb'

package/rails/create-only/VERSION

@@ -0,0 +1 @@
+0.0.1

package/typescript/copy-contents/.husky/pre-push

@@ -85,11 +85,7 @@ elif [ "$PACKAGE_MANAGER" = "bun" ]; then
   # Parent packages pin ^4.4.1; fix requires major version 5.x (incompatible)
   # Risk: None - CLI build tool, not a production runtime dependency
 
-  # Excluding GHSA-43fc-jf86-j433: axios DoS via __proto__ key in mergeConfig
-  # Transitive dependency via aws-amplify > @aws-amplify/api-rest > axios
-  # bun overrides/resolutions cannot reach nested node_modules copies
-  # Risk: Low - only affects server-side mergeConfig with attacker-controlled input
-  if ! bun audit --audit-level=high --ignore GHSA-5j98-mcp5-4vw2 --ignore GHSA-8qq5-rm4j-mr97 --ignore GHSA-37qj-frw5-hhjh --ignore GHSA-43fc-jf86-j433; then
+  if ! bun audit --audit-level=high --ignore GHSA-5j98-mcp5-4vw2 --ignore GHSA-8qq5-rm4j-mr97 --ignore GHSA-37qj-frw5-hhjh; then
     echo "⚠️ Security audit failed. Please fix high/critical vulnerabilities before pushing."
     exit 1
   fi

package/typescript/copy-overwrite/.claude/settings.json

@@ -1,13 +1,31 @@
 {
+  "attribution": {
+    "commit": "🤖 Generated with Claude Code\n\nCo-Authored-By: Claude",
+    "pr": "🤖 Generated with Claude Code"
+  },
+  "enabledPlugins": {
+    "typescript-lsp@claude-plugins-official": true,
+    "safety-net@cc-marketplace": true,
+    "code-simplifier@claude-plugins-official": true,
+    "code-review@claude-plugins-official": true,
+    "playwright@claude-plugins-official": true,
+    "coderabbit@claude-plugins-official": true
+  },
+  "env": {
+    "BASH_DEFAULT_TIMEOUT_MS": "1800000",
+    "BASH_MAX_TIMEOUT_MS": "7200000",
+    "CLAUDE_DEBUG": "0",
+    "CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS": "1"
+  },
   "hooks": {
-    "UserPromptSubmit": [
+    "Notification": [
       {
-        "matcher": "",
+        "matcher": "permission_prompt|idle_prompt",
         "hooks": [
           {
             "type": "command",
-            "command": "echo 'REMINDER: Start your response with \"I'\\''m tired boss\" as required by CLAUDE.md.'",
-            "timeout": 1
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/notify-ntfy.sh",
+            "timeout": 5
           }
         ]
       },
@@ -16,11 +34,13 @@
         "hooks": [
           {
             "type": "command",
-            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/enforce-plan-rules.sh",
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/debug-hook.sh",
             "timeout": 5
           }
         ]
-      },
+      }
+    ],
+    "PermissionRequest": [
       {
         "matcher": "",
         "hooks": [
@@ -32,24 +52,26 @@
         ]
       }
     ],
-    "SessionStart": [
+    "PostToolUse": [
       {
-        "matcher": "startup",
+        "matcher": "Write|Edit",
         "hooks": [
           {
             "type": "command",
-            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/install_pkgs.sh",
-            "timeout": 480
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/format-on-edit.sh"
+          },
+          {
+            "type": "command",
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/sg-scan-on-edit.sh"
           }
         ]
       },
       {
-        "matcher": "",
+        "matcher": "TaskCreate|TaskUpdate",
         "hooks": [
           {
             "type": "command",
-            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/setup-jira-cli.sh",
-            "timeout": 5
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/sync-tasks.sh"
           }
         ]
       },
@@ -58,13 +80,30 @@
         "hooks": [
           {
             "type": "command",
-            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/debug-hook.sh",
-            "timeout": 5
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/debug-hook.sh"
+          }
+        ]
+      },
+      {
+        "matcher": "Task",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "command -v entire >/dev/null 2>&1 && entire hooks claude-code post-task || true"
+          }
+        ]
+      },
+      {
+        "matcher": "TodoWrite",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "command -v entire >/dev/null 2>&1 && entire hooks claude-code post-todo || true"
           }
         ]
       }
     ],
-    "SessionEnd": [
+    "PostToolUseFailure": [
       {
         "matcher": "",
         "hooks": [
@@ -76,7 +115,7 @@
         ]
       }
     ],
-    "Setup": [
+    "PreCompact": [
       {
         "matcher": "",
         "hooks": [
@@ -94,35 +133,42 @@
         "hooks": [
           {
             "type": "command",
-            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/debug-hook.sh",
-            "timeout": 5
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/debug-hook.sh"
+          }
+        ]
+      },
+      {
+        "matcher": "Task",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "command -v entire >/dev/null 2>&1 && entire hooks claude-code pre-task || true"
           }
         ]
       }
     ],
-    "PostToolUse": [
+    "SessionEnd": [
       {
-        "matcher": "Write|Edit",
+        "matcher": "",
         "hooks": [
           {
             "type": "command",
-            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/format-on-edit.sh",
-            "timeout": 10
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/debug-hook.sh"
           },
           {
             "type": "command",
-            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/sg-scan-on-edit.sh",
-            "timeout": 30
+            "command": "command -v entire >/dev/null 2>&1 && entire hooks claude-code session-end || true"
           }
         ]
-      },
+      }
+    ],
+    "SessionStart": [
       {
-        "matcher": "TaskCreate|TaskUpdate",
+        "matcher": "startup",
         "hooks": [
           {
             "type": "command",
-            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/sync-tasks.sh",
-            "timeout": 10
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/install-pkgs.sh"
           }
         ]
       },
@@ -131,25 +177,25 @@
         "hooks": [
           {
             "type": "command",
-            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/debug-hook.sh",
-            "timeout": 5
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/setup-jira-cli.sh"
+          },
+          {
+            "type": "command",
+            "command": "command -v entire >/dev/null 2>&1 && entire hooks claude-code session-start || true"
           }
         ]
-      }
-    ],
-    "PostToolUseFailure": [
+      },
       {
         "matcher": "",
         "hooks": [
           {
             "type": "command",
-            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/debug-hook.sh",
-            "timeout": 5
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/debug-hook.sh"
           }
         ]
       }
     ],
-    "PermissionRequest": [
+    "Setup": [
       {
         "matcher": "",
         "hooks": [
@@ -161,41 +207,43 @@
         ]
       }
     ],
-    "SubagentStart": [
+    "Stop": [
       {
         "matcher": "",
         "hooks": [
           {
             "type": "command",
-            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/debug-hook.sh",
-            "timeout": 5
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/notify-ntfy.sh"
+          },
+          {
+            "type": "command",
+            "command": "command -v entire >/dev/null 2>&1 && entire hooks claude-code stop || true"
           }
         ]
-      }
-    ],
-    "SubagentStop": [
+      },
       {
         "matcher": "",
         "hooks": [
           {
             "type": "command",
-            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/debug-hook.sh",
-            "timeout": 5
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/debug-hook.sh"
           }
         ]
       }
     ],
-    "Notification": [
+    "SubagentStart": [
       {
-        "matcher": "permission_prompt|idle_prompt",
+        "matcher": "",
         "hooks": [
           {
             "type": "command",
-            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/notify-ntfy.sh",
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/debug-hook.sh",
             "timeout": 5
           }
         ]
-      },
+      }
+    ],
+    "SubagentStop": [
       {
         "matcher": "",
         "hooks": [
@@ -207,14 +255,17 @@
         ]
       }
     ],
-    "Stop": [
+    "UserPromptSubmit": [
       {
         "matcher": "",
         "hooks": [
           {
             "type": "command",
-            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/notify-ntfy.sh",
-            "timeout": 5
+            "command": "echo 'REMINDER: Start your response with \"I'\\''m tired boss\" as required by CLAUDE.md.'"
+          },
+          {
+            "type": "command",
+            "command": "command -v entire >/dev/null 2>&1 && entire hooks claude-code user-prompt-submit || true"
           }
         ]
       },
@@ -223,42 +274,25 @@
         "hooks": [
           {
             "type": "command",
-            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/debug-hook.sh",
-            "timeout": 5
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/enforce-plan-rules.sh"
           }
         ]
-      }
-    ],
-    "PreCompact": [
+      },
       {
         "matcher": "",
         "hooks": [
           {
             "type": "command",
-            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/debug-hook.sh",
-            "timeout": 5
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/debug-hook.sh"
           }
         ]
       }
     ]
   },
-  "env": {
-    "BASH_DEFAULT_TIMEOUT_MS": "1800000",
-    "BASH_MAX_TIMEOUT_MS": "7200000",
-    "CLAUDE_DEBUG": "0",
-    "CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS": "1"
-  },
-  "attribution": {
-    "commit": "🤖 Generated with Claude Code\n\nCo-Authored-By: Claude",
-    "pr": "🤖 Generated with Claude Code"
+  "permissions": {
+    "deny": [
+      "Read(./.entire/metadata/**)"
+    ]
   },
-  "plansDirectory": "./plans",
-  "enabledPlugins": {
-    "typescript-lsp@claude-plugins-official": true,
-    "safety-net@cc-marketplace": true,
-    "code-simplifier@claude-plugins-official": true,
-    "code-review@claude-plugins-official": true,
-    "playwright@claude-plugins-official": true,
-    "coderabbit@claude-plugins-official": true
-  }
-}
+  "plansDirectory": "./plans"
+}

package/typescript/copy-overwrite/.github/workflows/quality.yml

@@ -1015,11 +1015,7 @@ jobs:
             # Parent packages pin ^4.4.1; fix requires major version 5.x (incompatible)
             # Risk: None - CLI build tool, not a production runtime dependency
 
-            # Excluding GHSA-43fc-jf86-j433: axios DoS via __proto__ key in mergeConfig
-            # Transitive dependency via aws-amplify > @aws-amplify/api-rest > axios
-            # bun overrides/resolutions cannot reach nested node_modules copies
-            # Risk: Low - only affects server-side mergeConfig with attacker-controlled input
-            if ! bun audit --audit-level=high --ignore GHSA-5j98-mcp5-4vw2 --ignore GHSA-8qq5-rm4j-mr97 --ignore GHSA-37qj-frw5-hhjh --ignore GHSA-43fc-jf86-j433; then
+            if ! bun audit --audit-level=high --ignore GHSA-5j98-mcp5-4vw2 --ignore GHSA-8qq5-rm4j-mr97 --ignore GHSA-37qj-frw5-hhjh; then
               echo "::warning::Found high or critical vulnerabilities"
               exit 1
             fi