@codyswann/lisa 1.85.3 → 1.85.5

package/dist/utils/postinstall-trampoline.d.ts

@@ -1,3 +1,18 @@
+/**
+ * Known package managers whose lockfiles must be regenerated when Lisa's apply
+ * mutates package.json (e.g., adds/updates resolutions or overrides entries).
+ */
+export type PackageManager = "bun" | "npm" | "pnpm" | "yarn";
+/**
+ * Description of a package manager's lockfile file + the command Lisa should run
+ * to rebuild the lockfile without running install scripts.
+ */
+export interface LockfileRegenPlan {
+    readonly pm: PackageManager;
+    readonly lockfile: string;
+    readonly command: string;
+    readonly args: readonly string[];
+}
 /**
  * Determine whether this Lisa invocation is running as a package-manager lifecycle
  * script (postinstall, prepare, etc.). Works across npm, bun, yarn, and pnpm since
@@ -44,6 +59,31 @@ export declare function shouldSchedulePostinstallReconciliation(dryRun: boolean)
  * @returns Absolute path to the Lisa dist directory
  */
 export declare function getLisaDistDir(moduleUrl: string): string;
+/**
+ * Detect which package managers the project uses based on lockfile presence.
+ *
+ * A project may have more than one lockfile (the CDK dual-lockfile pattern
+ * keeps `bun.lock` for local dev while publishing `package-lock.json` for
+ * consumers), in which case every present lockfile must be regenerated so both
+ * stay in sync with package.json.
+ * @param projectDir - Absolute path to the project directory
+ * @returns Ordered list of detected package managers (possibly empty)
+ */
+export declare function detectPackageManagers(projectDir: string): readonly PackageManager[];
+/**
+ * Get the regen plan (command/args/lockfile) for a given package manager.
+ * @param pm - Package manager to look up
+ * @returns Regen plan describing which command to spawn
+ */
+export declare function getLockfileRegenPlan(pm: PackageManager): LockfileRegenPlan;
+/**
+ * Hash a file's contents (sha256, hex-encoded). Returns null if the file
+ * does not exist or cannot be read. Used to detect whether Lisa mutated
+ * package.json during its apply so we only regenerate lockfiles when needed.
+ * @param filePath - Absolute path to the file
+ * @returns Hex-encoded sha256 hash, or null if the file is unavailable
+ */
+export declare function hashFile(filePath: string): string | null;
 /**
  * Spawn a fully detached child process that waits for the parent package manager
  * to exit, then re-runs Lisa to reconcile package.json. The child is detached

package/dist/utils/postinstall-trampoline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postinstall-trampoline.d.ts","sourceRoot":"","sources":["../../src/utils/postinstall-trampoline.ts"],"names":[],"mappings":"AAiDA;;;;;GAKG;AACH,wBAAgB,0BAA0B,IAAI,OAAO,CAEpD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CAE/C;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,uCAAuC,CACrD,MAAM,EAAE,OAAO,GACd,OAAO,CAIT;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAIxD;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,IAAI,CA4BN"}
+{"version":3,"file":"postinstall-trampoline.d.ts","sourceRoot":"","sources":["../../src/utils/postinstall-trampoline.ts"],"names":[],"mappings":"AAmCA;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;AAE7D;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AA6DD;;;;;GAKG;AACH,wBAAgB,0BAA0B,IAAI,OAAO,CAEpD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CAE/C;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,uCAAuC,CACrD,MAAM,EAAE,OAAO,GACd,OAAO,CAIT;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAIxD;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,GACjB,SAAS,cAAc,EAAE,CAI3B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,cAAc,GAAG,iBAAiB,CAE1E;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOxD;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,IAAI,CA6BN"}

package/dist/utils/postinstall-trampoline.js

@@ -1,4 +1,6 @@
 import { spawn } from "node:child_process";
+import { createHash } from "node:crypto";
+import { existsSync, readFileSync } from "node:fs";
 import * as path from "node:path";
 import { fileURLToPath } from "node:url";
 /**
@@ -25,6 +27,45 @@ const POLL_INTERVAL_MS = 100;
  * writes a moment to quiesce before Lisa re-applies its changes.
  */
 const SETTLE_DELAY_MS = 250;
+/**
+ * Per-PM lockfile + regen command mapping. The regen commands are all
+ * "sync lockfile without running scripts" variants — we do NOT want to
+ * re-run lifecycle scripts (that would re-trigger the trampoline).
+ *
+ * bun: `bun install` is the canonical way to sync bun.lock after package.json
+ * changes. As of bun 1.x there is no `--lockfile-only` flag; `bun install`
+ * is already fast when node_modules is up-to-date and will simply update
+ * bun.lock to match package.json. We pass `--ignore-scripts` to avoid re-running
+ * the parent PM's lifecycle hooks (which triggered this trampoline to begin with).
+ */
+const INSTALL = "install";
+const IGNORE_SCRIPTS = "--ignore-scripts";
+const LOCKFILE_REGEN_PLANS = {
+    bun: {
+        pm: "bun",
+        lockfile: "bun.lock",
+        command: "bun",
+        args: [INSTALL, IGNORE_SCRIPTS],
+    },
+    npm: {
+        pm: "npm",
+        lockfile: "package-lock.json",
+        command: "npm",
+        args: [INSTALL, "--package-lock-only", IGNORE_SCRIPTS],
+    },
+    pnpm: {
+        pm: "pnpm",
+        lockfile: "pnpm-lock.yaml",
+        command: "pnpm",
+        args: [INSTALL, "--lockfile-only", IGNORE_SCRIPTS],
+    },
+    yarn: {
+        pm: "yarn",
+        lockfile: "yarn.lock",
+        command: "yarn",
+        args: [INSTALL, "--mode", "update-lockfile"],
+    },
+};
 /**
  * Read an env var by name without widening the project-wide process.env ban.
  * Lisa's CLI isn't a Lambda handler or Nest service; it has to introspect its
@@ -100,6 +141,45 @@ export function getLisaDistDir(moduleUrl) {
     // Walk from <dist>/utils/postinstall-trampoline.js → <dist>
     return path.resolve(path.dirname(filename), "..");
 }
+/**
+ * Detect which package managers the project uses based on lockfile presence.
+ *
+ * A project may have more than one lockfile (the CDK dual-lockfile pattern
+ * keeps `bun.lock` for local dev while publishing `package-lock.json` for
+ * consumers), in which case every present lockfile must be regenerated so both
+ * stay in sync with package.json.
+ * @param projectDir - Absolute path to the project directory
+ * @returns Ordered list of detected package managers (possibly empty)
+ */
+export function detectPackageManagers(projectDir) {
+    return Object.values(LOCKFILE_REGEN_PLANS)
+        .filter(plan => existsSync(path.join(projectDir, plan.lockfile)))
+        .map(plan => plan.pm);
+}
+/**
+ * Get the regen plan (command/args/lockfile) for a given package manager.
+ * @param pm - Package manager to look up
+ * @returns Regen plan describing which command to spawn
+ */
+export function getLockfileRegenPlan(pm) {
+    return LOCKFILE_REGEN_PLANS[pm];
+}
+/**
+ * Hash a file's contents (sha256, hex-encoded). Returns null if the file
+ * does not exist or cannot be read. Used to detect whether Lisa mutated
+ * package.json during its apply so we only regenerate lockfiles when needed.
+ * @param filePath - Absolute path to the file
+ * @returns Hex-encoded sha256 hash, or null if the file is unavailable
+ */
+export function hashFile(filePath) {
+    try {
+        const contents = readFileSync(filePath);
+        return createHash("sha256").update(contents).digest("hex");
+    }
+    catch {
+        return null;
+    }
+}
 /**
  * Spawn a fully detached child process that waits for the parent package manager
  * to exit, then re-runs Lisa to reconcile package.json. The child is detached
@@ -121,6 +201,7 @@ export function scheduleReconciliationChild(projectDir, lisaDistDir, parentPid)
         projectDir,
         nodeBin,
         trampolineEnvVar: TRAMPOLINE_ENV_VAR,
+        lockfileRegenPlans: LOCKFILE_REGEN_PLANS,
     });
     const child = spawn(nodeBin, ["-e", trampolineSource], {
         cwd: projectDir,
@@ -151,58 +232,166 @@ function inheritedEnv() {
  * Build the inline JS source that runs inside the detached trampoline child.
  * The source is passed to `node -e` so it must be self-contained (no imports that
  * require resolution via package.json, which is exactly the file we're racing).
+ *
+ * The trampoline now runs in two phases inside the child:
+ * 1. Wait for the parent PM to exit, then re-invoke Lisa to reconcile package.json.
+ * 2. If Lisa's re-invocation mutated package.json, regenerate whichever lockfiles
+ *    are present in the project so `bun install --frozen-lockfile` / `npm ci` in
+ *    downstream CI jobs do not fail with "lockfile had changes, but lockfile is
+ *    frozen." Lockfile regen runs with `--ignore-scripts` so the parent PM's
+ *    lifecycle hooks are not re-invoked (which would retrigger this trampoline).
  * @param params - Embedded constants to inline into the trampoline source
  * @returns JS source suitable for `node -e`
  */
 function buildTrampolineSource(params) {
     // JSON.stringify gives us safe inline literals for all primitive types.
-    const parentPid = JSON.stringify(params.parentPid);
-    const pollIntervalMs = JSON.stringify(params.pollIntervalMs);
-    const maxWaitMs = JSON.stringify(params.maxWaitMs);
-    const settleDelayMs = JSON.stringify(params.settleDelayMs);
-    const lisaEntry = JSON.stringify(params.lisaEntry);
-    const projectDir = JSON.stringify(params.projectDir);
-    const nodeBin = JSON.stringify(params.nodeBin);
-    const trampolineEnvVar = JSON.stringify(params.trampolineEnvVar);
+    const literals = {
+        parentPid: JSON.stringify(params.parentPid),
+        pollIntervalMs: JSON.stringify(params.pollIntervalMs),
+        maxWaitMs: JSON.stringify(params.maxWaitMs),
+        settleDelayMs: JSON.stringify(params.settleDelayMs),
+        lisaEntry: JSON.stringify(params.lisaEntry),
+        projectDir: JSON.stringify(params.projectDir),
+        nodeBin: JSON.stringify(params.nodeBin),
+        trampolineEnvVar: JSON.stringify(params.trampolineEnvVar),
+        lockfilePlans: JSON.stringify(params.lockfileRegenPlans),
+    };
+    return [
+        buildTrampolinePrelude(literals),
+        buildTrampolineHelpers(literals),
+        buildTrampolineMain(literals),
+    ].join("\n");
+}
+/**
+ * Inline `require` prelude + the lockfile plan table. Kept separate so each
+ * chunk of the trampoline source stays under the 75-line max-lines-per-function
+ * cap enforced by eslint.
+ * @param literals - Inlined JSON-safe literals
+ * @param literals.lockfilePlans - JSON-serialized lockfile plan table
+ * @returns JS source fragment
+ */
+function buildTrampolinePrelude(literals) {
     return `
     const { spawn } = require("node:child_process");
+    const { createHash } = require("node:crypto");
+    const { existsSync, readFileSync } = require("node:fs");
+    const path = require("node:path");
 
+    const LOCKFILE_PLANS = ${literals.lockfilePlans};
+  `;
+}
+/**
+ * Helper functions inlined into the trampoline child: parent-liveness probe,
+ * file hasher, package-manager detector, Lisa re-invoker, and best-effort
+ * lockfile regenerator. Each mirrors an exported TS helper in this module so
+ * the logic stays test-covered via the exported versions.
+ * @param literals - Inlined JSON-safe literals
+ * @param literals.parentPid - Parent package-manager PID for liveness probe
+ * @param literals.pollIntervalMs - Poll interval for parent-liveness checks
+ * @param literals.maxWaitMs - Max wait deadline before bailing out
+ * @param literals.nodeBin - Node binary path to re-invoke Lisa with
+ * @param literals.lisaEntry - Absolute path to Lisa's dist/index.js
+ * @param literals.projectDir - Project directory Lisa will reconcile
+ * @param literals.trampolineEnvVar - Env var name used to mark child as trampoline
+ * @returns JS source fragment
+ */
+function buildTrampolineHelpers(literals) {
+    return `
     function isAlive(pid) {
       if (!pid || pid <= 1) return false;
       try { process.kill(pid, 0); return true; } catch { return false; }
     }
 
-    // Returns true when the parent has exited, false when the deadline elapsed
-    // while the parent was still alive. Timing out MUST NOT re-run Lisa —
-    // that would reintroduce the package.json race the trampoline is designed
-    // to avoid (parent PM still writing).
+    function hashFile(p) {
+      try { return createHash("sha256").update(readFileSync(p)).digest("hex"); }
+      catch { return null; }
+    }
+
+    function detectPackageManagers(dir) {
+      return Object.values(LOCKFILE_PLANS)
+        .filter((plan) => existsSync(path.join(dir, plan.lockfile)))
+        .map((plan) => plan.pm);
+    }
+
     async function waitForParent() {
-      const deadline = Date.now() + ${maxWaitMs};
+      const deadline = Date.now() + ${literals.maxWaitMs};
       while (Date.now() < deadline) {
-        if (!isAlive(${parentPid})) return true;
-        await new Promise((r) => setTimeout(r, ${pollIntervalMs}));
+        if (!isAlive(${literals.parentPid})) return true;
+        await new Promise((r) => setTimeout(r, ${literals.pollIntervalMs}));
       }
       return false;
     }
 
+    function spawnChild(command, args) {
+      return new Promise((resolve) => {
+        try {
+          const child = spawn(command, args, {
+            cwd: ${literals.projectDir},
+            stdio: "ignore",
+            env: Object.assign({}, process.env, { [${literals.trampolineEnvVar}]: "1" }),
+          });
+          child.on("exit", (code) => resolve(code === 0));
+          child.on("error", () => resolve(false));
+        } catch {
+          resolve(false);
+        }
+      });
+    }
+
+    function runLisa() {
+      return spawnChild(${literals.nodeBin}, [${literals.lisaEntry}, "--yes", "--skip-git-check", ${literals.projectDir}]);
+    }
+
+    async function regenerateLockfiles() {
+      for (const pm of detectPackageManagers(${literals.projectDir})) {
+        const plan = LOCKFILE_PLANS[pm];
+        if (!plan) continue;
+        // Best-effort: failures are intentionally swallowed so a missing PM
+        // binary (e.g., no global bun on the PATH) does not cascade into an
+        // install failure.
+        await spawnChild(plan.command, plan.args);
+      }
+    }
+  `;
+}
+/**
+ * Top-level async IIFE that orchestrates the trampoline child:
+ * 1) wait for parent PM to exit,
+ * 2) hash package.json,
+ * 3) re-run Lisa,
+ * 4) if Lisa changed package.json, regenerate lockfiles.
+ *
+ * Timing out MUST NOT re-run Lisa — that would reintroduce the package.json
+ * race the trampoline is designed to avoid (parent PM still writing).
+ * @param literals - Inlined JSON-safe literals
+ * @param literals.settleDelayMs - Settle delay before re-invoking Lisa
+ * @param literals.projectDir - Project directory Lisa will reconcile
+ * @returns JS source fragment
+ */
+function buildTrampolineMain(literals) {
+    return `
     (async () => {
       try {
         const parentExited = await waitForParent();
         if (!parentExited) {
-          // Parent still running after max wait — bail rather than race the PM.
           process.exit(0);
         }
-        await new Promise((r) => setTimeout(r, ${settleDelayMs}));
-        const child = spawn(
-          ${nodeBin},
-          [${lisaEntry}, "--yes", "--skip-git-check", ${projectDir}],
-          {
-            cwd: ${projectDir},
-            stdio: "ignore",
-            env: Object.assign({}, process.env, { [${trampolineEnvVar}]: "1" }),
-          }
-        );
-        child.on("exit", () => process.exit(0));
+        await new Promise((r) => setTimeout(r, ${literals.settleDelayMs}));
+
+        const pkgPath = path.join(${literals.projectDir}, "package.json");
+        const preHash = hashFile(pkgPath);
+
+        const lisaOk = await runLisa();
+
+        const postHash = hashFile(pkgPath);
+        const packageJsonChanged =
+          lisaOk && preHash !== null && postHash !== null && preHash !== postHash;
+
+        if (packageJsonChanged) {
+          await regenerateLockfiles();
+        }
+
+        process.exit(0);
       } catch {
         process.exit(0);
       }

package/dist/utils/postinstall-trampoline.js.map

@@ -1 +1 @@
-{"version":3,"file":"postinstall-trampoline.js","sourceRoot":"","sources":["../../src/utils/postinstall-trampoline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;;GAGG;AACH,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAE7C;;;GAGG;AACH,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AAEzD;;;GAGG;AACH,MAAM,WAAW,GAAG,OAAO,CAAC;AAE5B;;GAEG;AACH,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B;;;GAGG;AACH,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B;;;;;;;;;;GAUG;AACH,SAAS,OAAO,CAAC,IAAY;IAC3B,4IAA4I;IAC5I,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,OAAO,CAAC,kBAAkB,CAAC,KAAK,GAAG,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,uCAAuC,CACrD,MAAe;IAEf,IAAI,MAAM;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,qBAAqB,EAAE;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,0BAA0B,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC1C,4DAA4D;IAC5D,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAAkB,EAClB,WAAmB,EACnB,SAAiB;IAEjB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAErD,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;QAC7C,SAAS;QACT,cAAc,EAAE,gBAAgB;QAChC,SAAS,EAAE,WAAW;QACtB,aAAa,EAAE,eAAe;QAC9B,SAAS;QACT,UAAU;QACV,OAAO;QACP,gBAAgB,EAAE,kBAAkB;KACrC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE;QACrD,GAAG,EAAE,UAAU;QACf,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE;YACH,GAAG,YAAY,EAAE;YACjB,8EAA8E;YAC9E,6EAA6E;YAC7E,CAAC,iBAAiB,CAAC,EAAE,EAAE;YACvB,CAAC,kBAAkB,CAAC,EAAE,GAAG;SAC1B;KACF,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY;IACnB,8JAA8J;IAC9J,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAC5B,CAAC;AAiBD;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,MAA8B;IAC3D,wEAAwE;IACxE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAEjE,OAAO;;;;;;;;;;;;;sCAa6B,SAAS;;uBAExB,SAAS;iDACiB,cAAc;;;;;;;;;;;;iDAYd,aAAa;;YAElD,OAAO;aACN,SAAS,kCAAkC,UAAU;;mBAE/C,UAAU;;qDAEwB,gBAAgB;;;;;;;;GAQlE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"postinstall-trampoline.js","sourceRoot":"","sources":["../../src/utils/postinstall-trampoline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;;GAGG;AACH,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAE7C;;;GAGG;AACH,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AAEzD;;;GAGG;AACH,MAAM,WAAW,GAAG,OAAO,CAAC;AAE5B;;GAEG;AACH,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B;;;GAGG;AACH,MAAM,eAAe,GAAG,GAAG,CAAC;AAmB5B;;;;;;;;;;GAUG;AACH,MAAM,OAAO,GAAG,SAAS,CAAC;AAC1B,MAAM,cAAc,GAAG,kBAAkB,CAAC;AAE1C,MAAM,oBAAoB,GAEtB;IACF,GAAG,EAAE;QACH,EAAE,EAAE,KAAK;QACT,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC;KAChC;IACD,GAAG,EAAE;QACH,EAAE,EAAE,KAAK;QACT,QAAQ,EAAE,mBAAmB;QAC7B,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,OAAO,EAAE,qBAAqB,EAAE,cAAc,CAAC;KACvD;IACD,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM;QACV,QAAQ,EAAE,gBAAgB;QAC1B,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,OAAO,EAAE,iBAAiB,EAAE,cAAc,CAAC;KACnD;IACD,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM;QACV,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,iBAAiB,CAAC;KAC7C;CACO,CAAC;AAEX;;;;;;;;;;GAUG;AACH,SAAS,OAAO,CAAC,IAAY;IAC3B,4IAA4I;IAC5I,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,OAAO,CAAC,kBAAkB,CAAC,KAAK,GAAG,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,uCAAuC,CACrD,MAAe;IAEf,IAAI,MAAM;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,qBAAqB,EAAE;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,0BAA0B,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC1C,4DAA4D;IAC5D,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAkB;IAElB,OAAO,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC;SACvC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;SAChE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAkB;IACrD,OAAO,oBAAoB,CAAC,EAAE,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAAkB,EAClB,WAAmB,EACnB,SAAiB;IAEjB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAErD,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;QAC7C,SAAS;QACT,cAAc,EAAE,gBAAgB;QAChC,SAAS,EAAE,WAAW;QACtB,aAAa,EAAE,eAAe;QAC9B,SAAS;QACT,UAAU;QACV,OAAO;QACP,gBAAgB,EAAE,kBAAkB;QACpC,kBAAkB,EAAE,oBAAoB;KACzC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE;QACrD,GAAG,EAAE,UAAU;QACf,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE;YACH,GAAG,YAAY,EAAE;YACjB,8EAA8E;YAC9E,6EAA6E;YAC7E,CAAC,iBAAiB,CAAC,EAAE,EAAE;YACvB,CAAC,kBAAkB,CAAC,EAAE,GAAG;SAC1B;KACF,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY;IACnB,8JAA8J;IAC9J,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAC5B,CAAC;AAoBD;;;;;;;;;;;;;;GAcG;AACH,SAAS,qBAAqB,CAAC,MAA8B;IAC3D,wEAAwE;IACxE,MAAM,QAAQ,GAAG;QACf,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;QAC3C,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC;QACrD,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;QAC3C,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC;QACnD,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;QAC3C,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC;QAC7C,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;QACvC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACzD,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,kBAAkB,CAAC;KAChD,CAAC;IAEX,OAAO;QACL,sBAAsB,CAAC,QAAQ,CAAC;QAChC,sBAAsB,CAAC,QAAQ,CAAC;QAChC,mBAAmB,CAAC,QAAQ,CAAC;KAC9B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAAC,QAE/B;IACC,OAAO;;;;;;6BAMoB,QAAQ,CAAC,aAAa;GAChD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,sBAAsB,CAAC,QAQ/B;IACC,OAAO;;;;;;;;;;;;;;;;;;sCAkB6B,QAAQ,CAAC,SAAS;;uBAEjC,QAAQ,CAAC,SAAS;iDACQ,QAAQ,CAAC,cAAc;;;;;;;;;mBASrD,QAAQ,CAAC,UAAU;;qDAEe,QAAQ,CAAC,gBAAgB;;;;;;;;;;;0BAWpD,QAAQ,CAAC,OAAO,MAAM,QAAQ,CAAC,SAAS,kCAAkC,QAAQ,CAAC,UAAU;;;;+CAIxE,QAAQ,CAAC,UAAU;;;;;;;;;GAS/D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,mBAAmB,CAAC,QAG5B;IACC,OAAO;;;;;;;iDAOwC,QAAQ,CAAC,aAAa;;oCAEnC,QAAQ,CAAC,UAAU;;;;;;;;;;;;;;;;;;GAkBpD,CAAC;AACJ,CAAC"}

package/expo/copy-overwrite/tsconfig.expo.json

@@ -1,5 +1,5 @@
 {
-  "extends": ["expo/tsconfig.base", "./tsconfig.base.json"],
+  "extends": ["expo/tsconfig.base", "@codyswann/lisa/tsconfig/base"],
   "compilerOptions": {
     "strict": true,
     "jsx": "react-native",

package/nestjs/copy-overwrite/tsconfig.nestjs.json

@@ -1,5 +1,5 @@
 {
-  "extends": "./tsconfig.base.json",
+  "extends": "@codyswann/lisa/tsconfig/base",
   "compilerOptions": {
     "module": "commonjs",
     "target": "ES2021",

package/package.json

@@ -78,7 +78,7 @@
     "lodash": ">=4.18.1"
   },
   "name": "@codyswann/lisa",
-  "version": "1.85.3",
+  "version": "1.85.5",
   "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
   "main": "dist/index.js",
   "exports": {

package/plugins/lisa/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "1.85.3",
+  "version": "1.85.5",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "1.85.3",
+  "version": "1.85.5",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "1.85.3",
+  "version": "1.85.5",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "1.85.3",
+  "version": "1.85.5",
   "description": "NestJS-specific skills (GraphQL, TypeORM)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "1.85.3",
+  "version": "1.85.5",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "1.85.3",
+  "version": "1.85.5",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/scripts/install-claude-plugins.sh

@@ -24,24 +24,76 @@ cd "$PROJECT_ROOT"
 # explicit `lisa:update` (npx @codyswann/lisa@latest .) or the project's own
 # postinstall script (defaults.scripts.postinstall in package.lisa.json).
 
-# Strip the hooks key from .claude/settings.json if .claude/hooks/ is now empty/absent
-# (hooks moved to plugin.json; all .claude/hooks/*.sh scripts are deleted by lisa update)
+# Strip only hook entries that reference deleted .claude/hooks/*.sh scripts
+# (hooks moved to plugin.json; file-path hooks would produce "No such file or directory" errors).
+# Preserve inline command hooks (e.g. `command -v entire ...`, `echo ...`) and stack-template hooks
+# from rails/merge/.claude/settings.json.
 SETTINGS_FILE="$PROJECT_ROOT/.claude/settings.json"
-HOOKS_DIR="$PROJECT_ROOT/.claude/hooks"
 if [ -f "$SETTINGS_FILE" ] && command -v python3 >/dev/null 2>&1; then
-  if [ ! -d "$HOOKS_DIR" ] || [ -z "$(ls -A "$HOOKS_DIR" 2>/dev/null)" ]; then
-    python3 - "$SETTINGS_FILE" <<'PYEOF'
+  python3 - "$SETTINGS_FILE" <<'PYEOF'
 import json, sys
 path = sys.argv[1]
 with open(path) as f:
     d = json.load(f)
-if "hooks" in d:
-    del d["hooks"]
+
+hooks = d.get("hooks")
+if not isinstance(hooks, dict):
+    sys.exit(0)
+
+def is_stale(entry):
+    # Stale = hook entry whose command references the deleted .claude/hooks/ dir.
+    if not isinstance(entry, dict):
+        return False
+    cmd = entry.get("command", "")
+    return isinstance(cmd, str) and "$CLAUDE_PROJECT_DIR/.claude/hooks/" in cmd
+
+changed = False
+new_hooks = {}
+for category, matchers in hooks.items():
+    if not isinstance(matchers, list):
+        new_hooks[category] = matchers
+        continue
+    new_matchers = []
+    for matcher in matchers:
+        if not isinstance(matcher, dict):
+            new_matchers.append(matcher)
+            continue
+        if "hooks" not in matcher:
+            new_matchers.append(matcher)
+            continue
+
+        entries = matcher.get("hooks")
+        if isinstance(entries, list):
+            kept = [e for e in entries if not is_stale(e)]
+            if len(kept) != len(entries):
+                changed = True
+            if kept:
+                new_matcher = dict(matcher)
+                new_matcher["hooks"] = kept
+                new_matchers.append(new_matcher)
+            elif entries:
+                # drop matcher only when pruning emptied a previously non-empty hooks list
+                changed = True
+            else:
+                # preserve pre-existing empty matcher blocks unchanged
+                new_matchers.append(matcher)
+        else:
+            new_matchers.append(matcher)
+    if new_matchers:
+        new_hooks[category] = new_matchers
+    else:
+        # drop empty category
+        changed = True
+
+if changed:
+    if new_hooks:
+        d["hooks"] = new_hooks
+    else:
+        del d["hooks"]
     with open(path, "w") as f:
         json.dump(d, f, indent=2)
         f.write("\n")
 PYEOF
-  fi
 fi
 
 # Install plugins only when claude CLI is available