@codyswann/lisa 1.85.4 → 1.85.6

package/dist/detection/detectors/rails.js

@@ -4,7 +4,6 @@
  * Identifies Ruby on Rails projects by checking for definitive Rails signals:
  * `bin/rails` (primary) or `config/application.rb` (secondary). These markers
  * avoid false positives from other Ruby frameworks like Hanami.
- *
  * @module detection/detectors/rails
  */
 import * as path from "node:path";

package/dist/detection/detectors/rails.js.map

@@ -1 +1 @@
-{"version":3,"file":"rails.js","sourceRoot":"","sources":["../../../src/detection/detectors/rails.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD;;;GAGG;AACH,MAAM,OAAO,aAAa;IACf,IAAI,GAAG,OAAgB,CAAC;IAEjC;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,OAAe;QAC1B,0CAA0C;QAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,MAAM,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,wDAAwD;QACxD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QACrE,OAAO,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC;IACzC,CAAC;CACF"}
+{"version":3,"file":"rails.js","sourceRoot":"","sources":["../../../src/detection/detectors/rails.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD;;;GAGG;AACH,MAAM,OAAO,aAAa;IACf,IAAI,GAAG,OAAgB,CAAC;IAEjC;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,OAAe;QAC1B,0CAA0C;QAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,MAAM,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,wDAAwD;QACxD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QACrE,OAAO,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC;IACzC,CAAC;CACF"}

package/dist/utils/fibonacci.d.ts

@@ -12,7 +12,6 @@
  * Uses a two-element pair to track consecutive values, yielding the leading
  * element on each iteration and advancing the pair forward. Each call returns
  * an independent iterator, so multiple consumers never interfere.
- *
  * @yields The next Fibonacci number (0n, 1n, 1n, 2n, 3n, 5n, …)
  * @example
  * ```typescript
@@ -27,7 +26,6 @@ export declare function fibonacciGenerator(): Generator<bigint, never, unknown>;
  *
  * Collects n + 1 values from the generator and returns the final element,
  * delegating the recurrence to fibonacciGenerator for DRY.
- *
  * @param n - Zero-based position in the Fibonacci sequence (non-negative integer)
  * @returns The nth Fibonacci number as a BigInt
  * @throws {RangeError} When n is negative, fractional, NaN, or infinite
@@ -45,7 +43,6 @@ export declare const fibonacci: (n: number) => bigint;
  * Spreads an empty array of the requested size and maps each slot to the
  * next generator value, delegating the recurrence to fibonacciGenerator for DRY.
  * Returns a fresh array on every call so callers can safely consume the result.
- *
  * @param length - How many Fibonacci numbers to collect (non-negative integer)
  * @returns A new readonly array of the first `length` Fibonacci numbers
  * @throws {RangeError} When length is negative, fractional, NaN, or infinite

package/dist/utils/fibonacci.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fibonacci.d.ts","sourceRoot":"","sources":["../../src/utils/fibonacci.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;;;;;;;;;GAcG;AACH,wBAAiB,kBAAkB,IAAI,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CASvE;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,SAAS,MAAO,MAAM,KAAG,MAYrC,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,iBAAiB,WAAY,MAAM,KAAG,SAAS,MAAM,EASjE,CAAC"}
+{"version":3,"file":"fibonacci.d.ts","sourceRoot":"","sources":["../../src/utils/fibonacci.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;;;;;;;;GAaG;AACH,wBAAiB,kBAAkB,IAAI,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CASvE;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,SAAS,MAAO,MAAM,KAAG,MAYrC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,iBAAiB,WAAY,MAAM,KAAG,SAAS,MAAM,EASjE,CAAC"}

package/dist/utils/fibonacci.js

@@ -12,7 +12,6 @@
  * Uses a two-element pair to track consecutive values, yielding the leading
  * element on each iteration and advancing the pair forward. Each call returns
  * an independent iterator, so multiple consumers never interfere.
- *
  * @yields The next Fibonacci number (0n, 1n, 1n, 2n, 3n, 5n, …)
  * @example
  * ```typescript
@@ -35,7 +34,6 @@ export function* fibonacciGenerator() {
  *
  * Collects n + 1 values from the generator and returns the final element,
  * delegating the recurrence to fibonacciGenerator for DRY.
- *
  * @param n - Zero-based position in the Fibonacci sequence (non-negative integer)
  * @returns The nth Fibonacci number as a BigInt
  * @throws {RangeError} When n is negative, fractional, NaN, or infinite
@@ -59,7 +57,6 @@ export const fibonacci = (n) => {
  * Spreads an empty array of the requested size and maps each slot to the
  * next generator value, delegating the recurrence to fibonacciGenerator for DRY.
  * Returns a fresh array on every call so callers can safely consume the result.
- *
  * @param length - How many Fibonacci numbers to collect (non-negative integer)
  * @returns A new readonly array of the first `length` Fibonacci numbers
  * @throws {RangeError} When length is negative, fractional, NaN, or infinite

package/dist/utils/fibonacci.js.map

@@ -1 +1 @@
-{"version":3,"file":"fibonacci.js","sourceRoot":"","sources":["../../src/utils/fibonacci.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,SAAS,CAAC,CAAC,kBAAkB;IACjC,+GAA+G;IAC/G,IAAI,IAAI,GAA8B,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/C,oFAAoF;IAEpF,SAAS,CAAC;QACR,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAS,EAAU,EAAE;IAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,UAAU,CAClB,8CAA8C,MAAM,CAAC,CAAC,CAAC,EAAE,CAC1D,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CACzC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,EACtB,EAAE,CACH,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAc,EAAqB,EAAE;IACrE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,UAAU,CAClB,mDAAmD,MAAM,CAAC,MAAM,CAAC,EAAE,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC,CAAC"}
+{"version":3,"file":"fibonacci.js","sourceRoot":"","sources":["../../src/utils/fibonacci.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;;;;;;;;GAaG;AACH,MAAM,SAAS,CAAC,CAAC,kBAAkB;IACjC,+GAA+G;IAC/G,IAAI,IAAI,GAA8B,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/C,oFAAoF;IAEpF,SAAS,CAAC;QACR,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAS,EAAU,EAAE;IAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,UAAU,CAClB,8CAA8C,MAAM,CAAC,CAAC,CAAC,EAAE,CAC1D,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CACzC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,EACtB,EAAE,CACH,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAc,EAAqB,EAAE;IACrE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,UAAU,CAClB,mDAAmD,MAAM,CAAC,MAAM,CAAC,EAAE,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC,CAAC"}

package/dist/utils/postinstall-trampoline.d.ts

@@ -1,3 +1,18 @@
+/**
+ * Known package managers whose lockfiles must be regenerated when Lisa's apply
+ * mutates package.json (e.g., adds/updates resolutions or overrides entries).
+ */
+export type PackageManager = "bun" | "npm" | "pnpm" | "yarn";
+/**
+ * Description of a package manager's lockfile file + the command Lisa should run
+ * to rebuild the lockfile without running install scripts.
+ */
+export interface LockfileRegenPlan {
+    readonly pm: PackageManager;
+    readonly lockfile: string;
+    readonly command: string;
+    readonly args: readonly string[];
+}
 /**
  * Determine whether this Lisa invocation is running as a package-manager lifecycle
  * script (postinstall, prepare, etc.). Works across npm, bun, yarn, and pnpm since
@@ -11,6 +26,16 @@ export declare function isRunningAsLifecycleScript(): boolean;
  * @returns true when running inside the detached reconciliation child
  */
 export declare function isRunningAsTrampoline(): boolean;
+/**
+ * Detect whether Lisa is running inside a CI environment.
+ *
+ * Returns false when running inside a Vitest or Jest test runner, even if
+ * `CI=true` is set, because test runners are not package-manager processes
+ * and the trampoline's parent-liveness check would never terminate.
+ * @returns true when common CI env vars indicate we're in a CI runner AND we
+ *   are not currently inside a test runner process
+ */
+export declare function isRunningInCI(): boolean;
 /**
  * Decide whether Lisa should spawn a post-install reconciliation trampoline.
  *
@@ -45,13 +70,51 @@ export declare function shouldSchedulePostinstallReconciliation(dryRun: boolean)
  */
 export declare function getLisaDistDir(moduleUrl: string): string;
 /**
- * Spawn a fully detached child process that waits for the parent package manager
- * to exit, then re-runs Lisa to reconcile package.json. The child is detached
- * (independent process group, stdio ignored, unref'd) so the parent package
- * manager does not wait for it.
+ * Detect which package managers the project uses based on lockfile presence.
+ *
+ * A project may have more than one lockfile (the CDK dual-lockfile pattern
+ * keeps `bun.lock` for local dev while publishing `package-lock.json` for
+ * consumers), in which case every present lockfile must be regenerated so both
+ * stay in sync with package.json.
+ * @param projectDir - Absolute path to the project directory
+ * @returns Ordered list of detected package managers (possibly empty)
+ */
+export declare function detectPackageManagers(projectDir: string): readonly PackageManager[];
+/**
+ * Get the regen plan (command/args/lockfile) for a given package manager.
+ * @param pm - Package manager to look up
+ * @returns Regen plan describing which command to spawn
+ */
+export declare function getLockfileRegenPlan(pm: PackageManager): LockfileRegenPlan;
+/**
+ * Hash a file's contents (sha256, hex-encoded). Returns null if the file
+ * does not exist or cannot be read. Used to detect whether Lisa mutated
+ * package.json during its apply so we only regenerate lockfiles when needed.
+ * @param filePath - Absolute path to the file
+ * @returns Hex-encoded sha256 hash, or null if the file is unavailable
+ */
+export declare function hashFile(filePath: string): string | null;
+/**
+ * Spawn a reconciliation child process that waits for the parent package manager
+ * to exit, then re-runs Lisa to reconcile package.json.
+ *
+ * The child is always spawned fully detached (independent process group, stdio
+ * ignored, unref'd) so the parent package manager can exit normally. The
+ * trampoline child then detects the parent exiting and re-runs Lisa after the
+ * package manager has finished writing package.json.
+ *
+ * A blocking (non-detached) CI variant was previously attempted so that the
+ * parent would wait for reconciliation before the next CI step ran. However,
+ * this created a circular deadlock: the package manager blocks waiting for Lisa
+ * (postinstall), Lisa blocks waiting for the trampoline child, and the
+ * trampoline child polls `parentPid` (the package manager) waiting for it to
+ * exit — a wait that can never complete. After the 120 s `MAX_WAIT_MS` timeout
+ * the child exits without running reconciliation at all. Always using the
+ * detached pattern avoids this deadlock and ensures reconciliation actually runs.
  * @param projectDir - Absolute path to the project directory Lisa will reconcile
  * @param lisaDistDir - Absolute path to Lisa's dist directory (where index.js lives)
  * @param parentPid - PID of the package-manager process to wait on (usually process.ppid)
+ * @returns Promise that resolves immediately after spawning the detached child
  */
-export declare function scheduleReconciliationChild(projectDir: string, lisaDistDir: string, parentPid: number): void;
+export declare function scheduleReconciliationChild(projectDir: string, lisaDistDir: string, parentPid: number): Promise<void>;
 //# sourceMappingURL=postinstall-trampoline.d.ts.map

package/dist/utils/postinstall-trampoline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postinstall-trampoline.d.ts","sourceRoot":"","sources":["../../src/utils/postinstall-trampoline.ts"],"names":[],"mappings":"AAiDA;;;;;GAKG;AACH,wBAAgB,0BAA0B,IAAI,OAAO,CAEpD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CAE/C;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,uCAAuC,CACrD,MAAM,EAAE,OAAO,GACd,OAAO,CAIT;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAIxD;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,IAAI,CA4BN"}
+{"version":3,"file":"postinstall-trampoline.d.ts","sourceRoot":"","sources":["../../src/utils/postinstall-trampoline.ts"],"names":[],"mappings":"AAmCA;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;AAE7D;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AA6DD;;;;;GAKG;AACH,wBAAgB,0BAA0B,IAAI,OAAO,CAEpD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CAE/C;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,IAAI,OAAO,CASvC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,uCAAuC,CACrD,MAAM,EAAE,OAAO,GACd,OAAO,CAIT;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAIxD;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,GACjB,SAAS,cAAc,EAAE,CAI3B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,cAAc,GAAG,iBAAiB,CAE1E;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOxD;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,2BAA2B,CAC/C,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAgCf"}

package/dist/utils/postinstall-trampoline.js

@@ -1,4 +1,6 @@
 import { spawn } from "node:child_process";
+import { createHash } from "node:crypto";
+import { existsSync, readFileSync } from "node:fs";
 import * as path from "node:path";
 import { fileURLToPath } from "node:url";
 /**
@@ -25,6 +27,45 @@ const POLL_INTERVAL_MS = 100;
  * writes a moment to quiesce before Lisa re-applies its changes.
  */
 const SETTLE_DELAY_MS = 250;
+/**
+ * Per-PM lockfile + regen command mapping. The regen commands are all
+ * "sync lockfile without running scripts" variants — we do NOT want to
+ * re-run lifecycle scripts (that would re-trigger the trampoline).
+ *
+ * bun: `bun install` is the canonical way to sync bun.lock after package.json
+ * changes. As of bun 1.x there is no `--lockfile-only` flag; `bun install`
+ * is already fast when node_modules is up-to-date and will simply update
+ * bun.lock to match package.json. We pass `--ignore-scripts` to avoid re-running
+ * the parent PM's lifecycle hooks (which triggered this trampoline to begin with).
+ */
+const INSTALL = "install";
+const IGNORE_SCRIPTS = "--ignore-scripts";
+const LOCKFILE_REGEN_PLANS = {
+    bun: {
+        pm: "bun",
+        lockfile: "bun.lock",
+        command: "bun",
+        args: [INSTALL, IGNORE_SCRIPTS],
+    },
+    npm: {
+        pm: "npm",
+        lockfile: "package-lock.json",
+        command: "npm",
+        args: [INSTALL, "--package-lock-only", IGNORE_SCRIPTS],
+    },
+    pnpm: {
+        pm: "pnpm",
+        lockfile: "pnpm-lock.yaml",
+        command: "pnpm",
+        args: [INSTALL, "--lockfile-only", IGNORE_SCRIPTS],
+    },
+    yarn: {
+        pm: "yarn",
+        lockfile: "yarn.lock",
+        command: "yarn",
+        args: [INSTALL, "--mode", "update-lockfile"],
+    },
+};
 /**
  * Read an env var by name without widening the project-wide process.env ban.
  * Lisa's CLI isn't a Lambda handler or Nest service; it has to introspect its
@@ -57,6 +98,25 @@ export function isRunningAsLifecycleScript() {
 export function isRunningAsTrampoline() {
     return readEnv(TRAMPOLINE_ENV_VAR) === "1";
 }
+/**
+ * Detect whether Lisa is running inside a CI environment.
+ *
+ * Returns false when running inside a Vitest or Jest test runner, even if
+ * `CI=true` is set, because test runners are not package-manager processes
+ * and the trampoline's parent-liveness check would never terminate.
+ * @returns true when common CI env vars indicate we're in a CI runner AND we
+ *   are not currently inside a test runner process
+ */
+export function isRunningInCI() {
+    if (readEnv("VITEST") !== undefined)
+        return false;
+    if (readEnv("JEST_WORKER_ID") !== undefined)
+        return false;
+    return (readEnv("CI") === "true" ||
+        readEnv("CI") === "1" ||
+        readEnv("GITHUB_ACTIONS") === "true" ||
+        readEnv("CONTINUOUS_INTEGRATION") === "true");
+}
 /**
  * Decide whether Lisa should spawn a post-install reconciliation trampoline.
  *
@@ -101,15 +161,67 @@ export function getLisaDistDir(moduleUrl) {
     return path.resolve(path.dirname(filename), "..");
 }
 /**
- * Spawn a fully detached child process that waits for the parent package manager
- * to exit, then re-runs Lisa to reconcile package.json. The child is detached
- * (independent process group, stdio ignored, unref'd) so the parent package
- * manager does not wait for it.
+ * Detect which package managers the project uses based on lockfile presence.
+ *
+ * A project may have more than one lockfile (the CDK dual-lockfile pattern
+ * keeps `bun.lock` for local dev while publishing `package-lock.json` for
+ * consumers), in which case every present lockfile must be regenerated so both
+ * stay in sync with package.json.
+ * @param projectDir - Absolute path to the project directory
+ * @returns Ordered list of detected package managers (possibly empty)
+ */
+export function detectPackageManagers(projectDir) {
+    return Object.values(LOCKFILE_REGEN_PLANS)
+        .filter(plan => existsSync(path.join(projectDir, plan.lockfile)))
+        .map(plan => plan.pm);
+}
+/**
+ * Get the regen plan (command/args/lockfile) for a given package manager.
+ * @param pm - Package manager to look up
+ * @returns Regen plan describing which command to spawn
+ */
+export function getLockfileRegenPlan(pm) {
+    return LOCKFILE_REGEN_PLANS[pm];
+}
+/**
+ * Hash a file's contents (sha256, hex-encoded). Returns null if the file
+ * does not exist or cannot be read. Used to detect whether Lisa mutated
+ * package.json during its apply so we only regenerate lockfiles when needed.
+ * @param filePath - Absolute path to the file
+ * @returns Hex-encoded sha256 hash, or null if the file is unavailable
+ */
+export function hashFile(filePath) {
+    try {
+        const contents = readFileSync(filePath);
+        return createHash("sha256").update(contents).digest("hex");
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Spawn a reconciliation child process that waits for the parent package manager
+ * to exit, then re-runs Lisa to reconcile package.json.
+ *
+ * The child is always spawned fully detached (independent process group, stdio
+ * ignored, unref'd) so the parent package manager can exit normally. The
+ * trampoline child then detects the parent exiting and re-runs Lisa after the
+ * package manager has finished writing package.json.
+ *
+ * A blocking (non-detached) CI variant was previously attempted so that the
+ * parent would wait for reconciliation before the next CI step ran. However,
+ * this created a circular deadlock: the package manager blocks waiting for Lisa
+ * (postinstall), Lisa blocks waiting for the trampoline child, and the
+ * trampoline child polls `parentPid` (the package manager) waiting for it to
+ * exit — a wait that can never complete. After the 120 s `MAX_WAIT_MS` timeout
+ * the child exits without running reconciliation at all. Always using the
+ * detached pattern avoids this deadlock and ensures reconciliation actually runs.
  * @param projectDir - Absolute path to the project directory Lisa will reconcile
  * @param lisaDistDir - Absolute path to Lisa's dist directory (where index.js lives)
  * @param parentPid - PID of the package-manager process to wait on (usually process.ppid)
+ * @returns Promise that resolves immediately after spawning the detached child
  */
-export function scheduleReconciliationChild(projectDir, lisaDistDir, parentPid) {
+export async function scheduleReconciliationChild(projectDir, lisaDistDir, parentPid) {
     const nodeBin = process.execPath;
     const lisaEntry = path.join(lisaDistDir, "index.js");
     const trampolineSource = buildTrampolineSource({
@@ -121,6 +233,7 @@ export function scheduleReconciliationChild(projectDir, lisaDistDir, parentPid)
         projectDir,
         nodeBin,
         trampolineEnvVar: TRAMPOLINE_ENV_VAR,
+        lockfileRegenPlans: LOCKFILE_REGEN_PLANS,
     });
     const child = spawn(nodeBin, ["-e", trampolineSource], {
         cwd: projectDir,
@@ -134,6 +247,8 @@ export function scheduleReconciliationChild(projectDir, lisaDistDir, parentPid)
             [TRAMPOLINE_ENV_VAR]: "1",
         },
     });
+    // Fully detach so the parent package manager can exit. The child's
+    // waitForParent() will detect the exit and trigger reconciliation.
     child.unref();
 }
 /**
@@ -151,58 +266,166 @@ function inheritedEnv() {
  * Build the inline JS source that runs inside the detached trampoline child.
  * The source is passed to `node -e` so it must be self-contained (no imports that
  * require resolution via package.json, which is exactly the file we're racing).
+ *
+ * The trampoline now runs in two phases inside the child:
+ * 1. Wait for the parent PM to exit, then re-invoke Lisa to reconcile package.json.
+ * 2. If Lisa's re-invocation mutated package.json, regenerate whichever lockfiles
+ *    are present in the project so `bun install --frozen-lockfile` / `npm ci` in
+ *    downstream CI jobs do not fail with "lockfile had changes, but lockfile is
+ *    frozen." Lockfile regen runs with `--ignore-scripts` so the parent PM's
+ *    lifecycle hooks are not re-invoked (which would retrigger this trampoline).
  * @param params - Embedded constants to inline into the trampoline source
  * @returns JS source suitable for `node -e`
  */
 function buildTrampolineSource(params) {
     // JSON.stringify gives us safe inline literals for all primitive types.
-    const parentPid = JSON.stringify(params.parentPid);
-    const pollIntervalMs = JSON.stringify(params.pollIntervalMs);
-    const maxWaitMs = JSON.stringify(params.maxWaitMs);
-    const settleDelayMs = JSON.stringify(params.settleDelayMs);
-    const lisaEntry = JSON.stringify(params.lisaEntry);
-    const projectDir = JSON.stringify(params.projectDir);
-    const nodeBin = JSON.stringify(params.nodeBin);
-    const trampolineEnvVar = JSON.stringify(params.trampolineEnvVar);
+    const literals = {
+        parentPid: JSON.stringify(params.parentPid),
+        pollIntervalMs: JSON.stringify(params.pollIntervalMs),
+        maxWaitMs: JSON.stringify(params.maxWaitMs),
+        settleDelayMs: JSON.stringify(params.settleDelayMs),
+        lisaEntry: JSON.stringify(params.lisaEntry),
+        projectDir: JSON.stringify(params.projectDir),
+        nodeBin: JSON.stringify(params.nodeBin),
+        trampolineEnvVar: JSON.stringify(params.trampolineEnvVar),
+        lockfilePlans: JSON.stringify(params.lockfileRegenPlans),
+    };
+    return [
+        buildTrampolinePrelude(literals),
+        buildTrampolineHelpers(literals),
+        buildTrampolineMain(literals),
+    ].join("\n");
+}
+/**
+ * Inline `require` prelude + the lockfile plan table. Kept separate so each
+ * chunk of the trampoline source stays under the 75-line max-lines-per-function
+ * cap enforced by eslint.
+ * @param literals - Inlined JSON-safe literals
+ * @param literals.lockfilePlans - JSON-serialized lockfile plan table
+ * @returns JS source fragment
+ */
+function buildTrampolinePrelude(literals) {
     return `
     const { spawn } = require("node:child_process");
+    const { createHash } = require("node:crypto");
+    const { existsSync, readFileSync } = require("node:fs");
+    const path = require("node:path");
 
+    const LOCKFILE_PLANS = ${literals.lockfilePlans};
+  `;
+}
+/**
+ * Helper functions inlined into the trampoline child: parent-liveness probe,
+ * file hasher, package-manager detector, Lisa re-invoker, and best-effort
+ * lockfile regenerator. Each mirrors an exported TS helper in this module so
+ * the logic stays test-covered via the exported versions.
+ * @param literals - Inlined JSON-safe literals
+ * @param literals.parentPid - Parent package-manager PID for liveness probe
+ * @param literals.pollIntervalMs - Poll interval for parent-liveness checks
+ * @param literals.maxWaitMs - Max wait deadline before bailing out
+ * @param literals.nodeBin - Node binary path to re-invoke Lisa with
+ * @param literals.lisaEntry - Absolute path to Lisa's dist/index.js
+ * @param literals.projectDir - Project directory Lisa will reconcile
+ * @param literals.trampolineEnvVar - Env var name used to mark child as trampoline
+ * @returns JS source fragment
+ */
+function buildTrampolineHelpers(literals) {
+    return `
     function isAlive(pid) {
       if (!pid || pid <= 1) return false;
       try { process.kill(pid, 0); return true; } catch { return false; }
     }
 
-    // Returns true when the parent has exited, false when the deadline elapsed
-    // while the parent was still alive. Timing out MUST NOT re-run Lisa —
-    // that would reintroduce the package.json race the trampoline is designed
-    // to avoid (parent PM still writing).
+    function hashFile(p) {
+      try { return createHash("sha256").update(readFileSync(p)).digest("hex"); }
+      catch { return null; }
+    }
+
+    function detectPackageManagers(dir) {
+      return Object.values(LOCKFILE_PLANS)
+        .filter((plan) => existsSync(path.join(dir, plan.lockfile)))
+        .map((plan) => plan.pm);
+    }
+
     async function waitForParent() {
-      const deadline = Date.now() + ${maxWaitMs};
+      const deadline = Date.now() + ${literals.maxWaitMs};
       while (Date.now() < deadline) {
-        if (!isAlive(${parentPid})) return true;
-        await new Promise((r) => setTimeout(r, ${pollIntervalMs}));
+        if (!isAlive(${literals.parentPid})) return true;
+        await new Promise((r) => setTimeout(r, ${literals.pollIntervalMs}));
       }
       return false;
     }
 
+    function spawnChild(command, args) {
+      return new Promise((resolve) => {
+        try {
+          const child = spawn(command, args, {
+            cwd: ${literals.projectDir},
+            stdio: "ignore",
+            env: Object.assign({}, process.env, { [${literals.trampolineEnvVar}]: "1" }),
+          });
+          child.on("exit", (code) => resolve(code === 0));
+          child.on("error", () => resolve(false));
+        } catch {
+          resolve(false);
+        }
+      });
+    }
+
+    function runLisa() {
+      return spawnChild(${literals.nodeBin}, [${literals.lisaEntry}, "--yes", "--skip-git-check", ${literals.projectDir}]);
+    }
+
+    async function regenerateLockfiles() {
+      for (const pm of detectPackageManagers(${literals.projectDir})) {
+        const plan = LOCKFILE_PLANS[pm];
+        if (!plan) continue;
+        // Best-effort: failures are intentionally swallowed so a missing PM
+        // binary (e.g., no global bun on the PATH) does not cascade into an
+        // install failure.
+        await spawnChild(plan.command, plan.args);
+      }
+    }
+  `;
+}
+/**
+ * Top-level async IIFE that orchestrates the trampoline child:
+ * 1) wait for parent PM to exit,
+ * 2) hash package.json,
+ * 3) re-run Lisa,
+ * 4) if Lisa changed package.json, regenerate lockfiles.
+ *
+ * Timing out MUST NOT re-run Lisa — that would reintroduce the package.json
+ * race the trampoline is designed to avoid (parent PM still writing).
+ * @param literals - Inlined JSON-safe literals
+ * @param literals.settleDelayMs - Settle delay before re-invoking Lisa
+ * @param literals.projectDir - Project directory Lisa will reconcile
+ * @returns JS source fragment
+ */
+function buildTrampolineMain(literals) {
+    return `
     (async () => {
       try {
         const parentExited = await waitForParent();
         if (!parentExited) {
-          // Parent still running after max wait — bail rather than race the PM.
           process.exit(0);
         }
-        await new Promise((r) => setTimeout(r, ${settleDelayMs}));
-        const child = spawn(
-          ${nodeBin},
-          [${lisaEntry}, "--yes", "--skip-git-check", ${projectDir}],
-          {
-            cwd: ${projectDir},
-            stdio: "ignore",
-            env: Object.assign({}, process.env, { [${trampolineEnvVar}]: "1" }),
-          }
-        );
-        child.on("exit", () => process.exit(0));
+        await new Promise((r) => setTimeout(r, ${literals.settleDelayMs}));
+
+        const pkgPath = path.join(${literals.projectDir}, "package.json");
+        const preHash = hashFile(pkgPath);
+
+        const lisaOk = await runLisa();
+
+        const postHash = hashFile(pkgPath);
+        const packageJsonChanged =
+          lisaOk && preHash !== null && postHash !== null && preHash !== postHash;
+
+        if (packageJsonChanged) {
+          await regenerateLockfiles();
+        }
+
+        process.exit(0);
       } catch {
         process.exit(0);
       }

package/dist/utils/postinstall-trampoline.js.map

@@ -1 +1 @@
-{"version":3,"file":"postinstall-trampoline.js","sourceRoot":"","sources":["../../src/utils/postinstall-trampoline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;;GAGG;AACH,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAE7C;;;GAGG;AACH,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AAEzD;;;GAGG;AACH,MAAM,WAAW,GAAG,OAAO,CAAC;AAE5B;;GAEG;AACH,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B;;;GAGG;AACH,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B;;;;;;;;;;GAUG;AACH,SAAS,OAAO,CAAC,IAAY;IAC3B,4IAA4I;IAC5I,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,OAAO,CAAC,kBAAkB,CAAC,KAAK,GAAG,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,uCAAuC,CACrD,MAAe;IAEf,IAAI,MAAM;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,qBAAqB,EAAE;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,0BAA0B,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC1C,4DAA4D;IAC5D,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAAkB,EAClB,WAAmB,EACnB,SAAiB;IAEjB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAErD,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;QAC7C,SAAS;QACT,cAAc,EAAE,gBAAgB;QAChC,SAAS,EAAE,WAAW;QACtB,aAAa,EAAE,eAAe;QAC9B,SAAS;QACT,UAAU;QACV,OAAO;QACP,gBAAgB,EAAE,kBAAkB;KACrC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE;QACrD,GAAG,EAAE,UAAU;QACf,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE;YACH,GAAG,YAAY,EAAE;YACjB,8EAA8E;YAC9E,6EAA6E;YAC7E,CAAC,iBAAiB,CAAC,EAAE,EAAE;YACvB,CAAC,kBAAkB,CAAC,EAAE,GAAG;SAC1B;KACF,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY;IACnB,8JAA8J;IAC9J,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAC5B,CAAC;AAiBD;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,MAA8B;IAC3D,wEAAwE;IACxE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAEjE,OAAO;;;;;;;;;;;;;sCAa6B,SAAS;;uBAExB,SAAS;iDACiB,cAAc;;;;;;;;;;;;iDAYd,aAAa;;YAElD,OAAO;aACN,SAAS,kCAAkC,UAAU;;mBAE/C,UAAU;;qDAEwB,gBAAgB;;;;;;;;GAQlE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"postinstall-trampoline.js","sourceRoot":"","sources":["../../src/utils/postinstall-trampoline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;;GAGG;AACH,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAE7C;;;GAGG;AACH,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AAEzD;;;GAGG;AACH,MAAM,WAAW,GAAG,OAAO,CAAC;AAE5B;;GAEG;AACH,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B;;;GAGG;AACH,MAAM,eAAe,GAAG,GAAG,CAAC;AAmB5B;;;;;;;;;;GAUG;AACH,MAAM,OAAO,GAAG,SAAS,CAAC;AAC1B,MAAM,cAAc,GAAG,kBAAkB,CAAC;AAE1C,MAAM,oBAAoB,GAEtB;IACF,GAAG,EAAE;QACH,EAAE,EAAE,KAAK;QACT,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC;KAChC;IACD,GAAG,EAAE;QACH,EAAE,EAAE,KAAK;QACT,QAAQ,EAAE,mBAAmB;QAC7B,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,OAAO,EAAE,qBAAqB,EAAE,cAAc,CAAC;KACvD;IACD,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM;QACV,QAAQ,EAAE,gBAAgB;QAC1B,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,OAAO,EAAE,iBAAiB,EAAE,cAAc,CAAC;KACnD;IACD,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM;QACV,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,iBAAiB,CAAC;KAC7C;CACO,CAAC;AAEX;;;;;;;;;;GAUG;AACH,SAAS,OAAO,CAAC,IAAY;IAC3B,4IAA4I;IAC5I,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,OAAO,CAAC,kBAAkB,CAAC,KAAK,GAAG,CAAC;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa;IAC3B,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,OAAO,CAAC,gBAAgB,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAO,CACL,OAAO,CAAC,IAAI,CAAC,KAAK,MAAM;QACxB,OAAO,CAAC,IAAI,CAAC,KAAK,GAAG;QACrB,OAAO,CAAC,gBAAgB,CAAC,KAAK,MAAM;QACpC,OAAO,CAAC,wBAAwB,CAAC,KAAK,MAAM,CAC7C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,uCAAuC,CACrD,MAAe;IAEf,IAAI,MAAM;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,qBAAqB,EAAE;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,0BAA0B,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC1C,4DAA4D;IAC5D,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAkB;IAElB,OAAO,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC;SACvC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;SAChE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAkB;IACrD,OAAO,oBAAoB,CAAC,EAAE,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,UAAkB,EAClB,WAAmB,EACnB,SAAiB;IAEjB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAErD,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;QAC7C,SAAS;QACT,cAAc,EAAE,gBAAgB;QAChC,SAAS,EAAE,WAAW;QACtB,aAAa,EAAE,eAAe;QAC9B,SAAS;QACT,UAAU;QACV,OAAO;QACP,gBAAgB,EAAE,kBAAkB;QACpC,kBAAkB,EAAE,oBAAoB;KACzC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE;QACrD,GAAG,EAAE,UAAU;QACf,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE;YACH,GAAG,YAAY,EAAE;YACjB,8EAA8E;YAC9E,6EAA6E;YAC7E,CAAC,iBAAiB,CAAC,EAAE,EAAE;YACvB,CAAC,kBAAkB,CAAC,EAAE,GAAG;SAC1B;KACF,CAAC,CAAC;IAEH,mEAAmE;IACnE,mEAAmE;IACnE,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY;IACnB,8JAA8J;IAC9J,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAC5B,CAAC;AAoBD;;;;;;;;;;;;;;GAcG;AACH,SAAS,qBAAqB,CAAC,MAA8B;IAC3D,wEAAwE;IACxE,MAAM,QAAQ,GAAG;QACf,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;QAC3C,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC;QACrD,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;QAC3C,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC;QACnD,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;QAC3C,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC;QAC7C,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;QACvC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACzD,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,kBAAkB,CAAC;KAChD,CAAC;IAEX,OAAO;QACL,sBAAsB,CAAC,QAAQ,CAAC;QAChC,sBAAsB,CAAC,QAAQ,CAAC;QAChC,mBAAmB,CAAC,QAAQ,CAAC;KAC9B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAAC,QAE/B;IACC,OAAO;;;;;;6BAMoB,QAAQ,CAAC,aAAa;GAChD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,sBAAsB,CAAC,QAQ/B;IACC,OAAO;;;;;;;;;;;;;;;;;;sCAkB6B,QAAQ,CAAC,SAAS;;uBAEjC,QAAQ,CAAC,SAAS;iDACQ,QAAQ,CAAC,cAAc;;;;;;;;;mBASrD,QAAQ,CAAC,UAAU;;qDAEe,QAAQ,CAAC,gBAAgB;;;;;;;;;;;0BAWpD,QAAQ,CAAC,OAAO,MAAM,QAAQ,CAAC,SAAS,kCAAkC,QAAQ,CAAC,UAAU;;;;+CAIxE,QAAQ,CAAC,UAAU;;;;;;;;;GAS/D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,mBAAmB,CAAC,QAG5B;IACC,OAAO;;;;;;;iDAOwC,QAAQ,CAAC,aAAa;;oCAEnC,QAAQ,CAAC,UAAU;;;;;;;;;;;;;;;;;;GAkBpD,CAAC;AACJ,CAAC"}

package/expo/copy-overwrite/tsconfig.expo.json

@@ -1,5 +1,5 @@
 {
-  "extends": ["expo/tsconfig.base", "./tsconfig.base.json"],
+  "extends": ["expo/tsconfig.base", "@codyswann/lisa/tsconfig/base"],
   "compilerOptions": {
     "strict": true,
     "jsx": "react-native",

package/nestjs/copy-overwrite/tsconfig.nestjs.json

@@ -1,5 +1,5 @@
 {
-  "extends": "./tsconfig.base.json",
+  "extends": "@codyswann/lisa/tsconfig/base",
   "compilerOptions": {
     "module": "commonjs",
     "target": "ES2021",

package/package.json

@@ -78,7 +78,7 @@
     "lodash": ">=4.18.1"
   },
   "name": "@codyswann/lisa",
-  "version": "1.85.4",
+  "version": "1.85.6",
   "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
   "main": "dist/index.js",
   "exports": {

package/plugins/lisa/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "1.85.4",
+  "version": "1.85.6",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "1.85.4",
+  "version": "1.85.6",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "1.85.4",
+  "version": "1.85.6",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "1.85.4",
+  "version": "1.85.6",
   "description": "NestJS-specific skills (GraphQL, TypeORM)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "1.85.4",
+  "version": "1.85.6",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "1.85.4",
+  "version": "1.85.6",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"