@codyswann/lisa 2.162.0 → 2.163.0

package/plugins/lisa-harper-fabric-cursor/hooks/enforce-config-extensions.mjs

@@ -0,0 +1,143 @@
+#!/usr/bin/env node
+import { createRequire } from "node:module";
+import { readFileSync } from "node:fs";
+import { spawnSync } from "node:child_process";
+import path from "node:path";
+
+const BLOCKED = 2;
+const ALLOWED = 0;
+const CONFIG_PATH = "harper-app/config.yaml";
+const ALLOWLIST_PATH = ".lisa/harper-config-extension-allowlist.json";
+
+const readStdin = () => {
+  try {
+    return readFileSync(0, "utf8");
+  } catch {
+    return "";
+  }
+};
+
+const parseHookInput = raw => {
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return {};
+  }
+};
+
+const normalizePath = filePath =>
+  filePath.replace(/\\/g, "/").replace(/^\.\//, "");
+
+const isConfigPath = filePath => {
+  const normalized = normalizePath(filePath);
+  return normalized === CONFIG_PATH || normalized.endsWith(`/${CONFIG_PATH}`);
+};
+
+const repoRelativeConfigPath = filePath => {
+  const normalized = normalizePath(filePath);
+  const index = normalized.lastIndexOf(CONFIG_PATH);
+  return index === -1 ? normalized : normalized.slice(index);
+};
+
+const loadYaml = () => {
+  const require = createRequire(import.meta.url);
+  return require("js-yaml");
+};
+
+const topLevelExtensionKeys = yamlText => {
+  const yaml = loadYaml();
+  let parsed;
+  try {
+    parsed = yaml.load(yamlText);
+  } catch {
+    return null;
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return [];
+  return Object.keys(parsed).sort();
+};
+
+const gitEnv = () =>
+  Object.fromEntries(
+    Object.entries(process.env).filter(([key]) => !key.startsWith("GIT_"))
+  );
+
+const readGitBlob = repoRoot => {
+  const result = spawnSync(
+    "git",
+    ["-C", repoRoot, "show", `HEAD:${CONFIG_PATH}`],
+    {
+      encoding: "utf8",
+      env: gitEnv(),
+    }
+  );
+  return result.status === 0 ? result.stdout : null;
+};
+
+const readAllowlist = (repoRoot, configPath) => {
+  const allowlistFile = path.join(repoRoot, ALLOWLIST_PATH);
+  let parsed;
+  try {
+    parsed = JSON.parse(readFileSync(allowlistFile, "utf8"));
+  } catch {
+    return new Set();
+  }
+
+  const entry = parsed?.[configPath] ?? parsed?.[CONFIG_PATH];
+  const values = Array.isArray(entry)
+    ? entry
+    : Array.isArray(entry?.allowedRemovedExtensions)
+      ? entry.allowedRemovedExtensions
+      : [];
+  return new Set(values.filter(value => typeof value === "string"));
+};
+
+const main = () => {
+  const input = parseHookInput(readStdin());
+  const filePath = input?.tool_input?.file_path;
+  if (typeof filePath !== "string" || !isConfigPath(filePath)) return ALLOWED;
+
+  const repoRoot = process.cwd();
+  const configPath = repoRelativeConfigPath(filePath);
+  let currentText;
+  try {
+    currentText = readFileSync(path.join(repoRoot, configPath), "utf8");
+  } catch {
+    return ALLOWED;
+  }
+
+  const previousText = readGitBlob(repoRoot);
+  if (previousText === null) return ALLOWED;
+
+  const previousExtensions = topLevelExtensionKeys(previousText);
+  const currentExtensionKeys = topLevelExtensionKeys(currentText);
+  if (previousExtensions === null || currentExtensionKeys === null)
+    return ALLOWED;
+  const currentExtensions = new Set(currentExtensionKeys);
+  const allowedRemovals = readAllowlist(repoRoot, configPath);
+  const missing = previousExtensions.filter(
+    extension =>
+      !currentExtensions.has(extension) && !allowedRemovals.has(extension)
+  );
+
+  if (missing.length === 0) return ALLOWED;
+
+  process.stderr
+    .write(`Blocked: harper-app/config.yaml dropped required Harper extension(s).
+
+Missing extension(s): ${missing.join(", ")}
+
+Harper does not merge a custom config.yaml with defaults. Removing a top-level
+extension silently disables that runtime surface and may only fail after deploy.
+Re-add the missing extension(s), or document an intentional removal in
+${ALLOWLIST_PATH}:
+
+{
+  "${CONFIG_PATH}": {
+    "allowedRemovedExtensions": ["${missing[0]}"]
+  }
+}
+`);
+  return BLOCKED;
+};
+
+process.exitCode = main();

package/plugins/lisa-harper-fabric-cursor/hooks/enforce-config-extensions.sh

@@ -0,0 +1,19 @@
+#!/bin/bash
+# This file is managed by Lisa.
+# Do not edit directly - changes will be overwritten on the next `lisa` run.
+
+# PostToolUse hook: after a harper-app/config.yaml edit, compare the edited
+# extension set against HEAD and block silent removals. Harper does not merge a
+# custom config.yaml with defaults, so removing a top-level extension can disable
+# runtime surfaces without a build-time failure.
+
+PLUGIN_ROOT=${CLAUDE_PLUGIN_ROOT:-}
+if [ -z "$PLUGIN_ROOT" ]; then
+  PLUGIN_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+fi
+
+if command -v bun >/dev/null 2>&1; then
+  exec bun "$PLUGIN_ROOT/hooks/enforce-config-extensions.mjs"
+fi
+
+exec node "$PLUGIN_ROOT/hooks/enforce-config-extensions.mjs"

package/plugins/lisa-harper-fabric-cursor/hooks/hooks.json

@@ -6,6 +6,12 @@
         "command": "${CURSOR_PLUGIN_ROOT}/hooks/block-generated-artifact-edits.sh",
         "matcher": "Write|Edit|MultiEdit"
       }
+    ],
+    "postToolUse": [
+      {
+        "command": "${CURSOR_PLUGIN_ROOT}/hooks/enforce-config-extensions.sh",
+        "matcher": "Write|Edit|MultiEdit"
+      }
     ]
   }
 }

package/plugins/lisa-harper-fabric-cursor/rules/harper-fabric.mdc

@@ -17,6 +17,7 @@ These rules apply to Harper/Fabric component apps managed by Lisa.
 
 - TypeScript under `src/` is the source of truth for Harper resources, browser modules, shared libraries, and operational scripts.
 - `harper-app/config.yaml`, `harper-app/schema.graphql`, HTML, CSS, docs, and research fixtures are source assets.
+- `harper-app/config.yaml` does not merge with Harper defaults. Keep every required top-level extension declared when editing it; the Harper Fabric hook blocks accidental extension drops unless the removal is documented in `.lisa/harper-config-extension-allowlist.json`.
 - `harper-app/resources.js` and `harper-app/web/**/*.js` are generated deploy artifacts. Never edit them directly; change the matching TypeScript and run `bun run build`.
 - Deployment, bootstrap, smoke, seed, verify, preview, token, crawl, ingest, and extraction commands must run from compiled JavaScript or generated Harper assets, not stale checked-in JavaScript.
 

package/plugins/lisa-nestjs/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "NestJS-specific skills and migration write-protection hooks.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "Ruby on Rails-specific skills and hooks for RuboCop and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "TypeScript-specific hooks for formatting, linting, and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "Distributable LLM Wiki kernel — ingest, query, lint, and maintain a git-native markdown knowledge base across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.162.0",
+  "version": "2.163.0",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/src/harper-fabric/.claude-plugin/plugin.json

@@ -13,6 +13,14 @@
         ]
       }
     ],
+    "PostToolUse": [
+      {
+        "matcher": "Write|Edit|MultiEdit",
+        "hooks": [
+          { "type": "command", "command": "${CLAUDE_PLUGIN_ROOT}/hooks/enforce-config-extensions.sh" }
+        ]
+      }
+    ],
     "SessionStart": [
       { "matcher": "", "hooks": [{ "type": "command", "command": "${CLAUDE_PLUGIN_ROOT}/hooks/inject-rules.sh" }] }
     ],

package/plugins/src/harper-fabric/hooks/enforce-config-extensions.mjs

@@ -0,0 +1,143 @@
+#!/usr/bin/env node
+import { createRequire } from "node:module";
+import { readFileSync } from "node:fs";
+import { spawnSync } from "node:child_process";
+import path from "node:path";
+
+const BLOCKED = 2;
+const ALLOWED = 0;
+const CONFIG_PATH = "harper-app/config.yaml";
+const ALLOWLIST_PATH = ".lisa/harper-config-extension-allowlist.json";
+
+const readStdin = () => {
+  try {
+    return readFileSync(0, "utf8");
+  } catch {
+    return "";
+  }
+};
+
+const parseHookInput = raw => {
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return {};
+  }
+};
+
+const normalizePath = filePath =>
+  filePath.replace(/\\/g, "/").replace(/^\.\//, "");
+
+const isConfigPath = filePath => {
+  const normalized = normalizePath(filePath);
+  return normalized === CONFIG_PATH || normalized.endsWith(`/${CONFIG_PATH}`);
+};
+
+const repoRelativeConfigPath = filePath => {
+  const normalized = normalizePath(filePath);
+  const index = normalized.lastIndexOf(CONFIG_PATH);
+  return index === -1 ? normalized : normalized.slice(index);
+};
+
+const loadYaml = () => {
+  const require = createRequire(import.meta.url);
+  return require("js-yaml");
+};
+
+const topLevelExtensionKeys = yamlText => {
+  const yaml = loadYaml();
+  let parsed;
+  try {
+    parsed = yaml.load(yamlText);
+  } catch {
+    return null;
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return [];
+  return Object.keys(parsed).sort();
+};
+
+const gitEnv = () =>
+  Object.fromEntries(
+    Object.entries(process.env).filter(([key]) => !key.startsWith("GIT_"))
+  );
+
+const readGitBlob = repoRoot => {
+  const result = spawnSync(
+    "git",
+    ["-C", repoRoot, "show", `HEAD:${CONFIG_PATH}`],
+    {
+      encoding: "utf8",
+      env: gitEnv(),
+    }
+  );
+  return result.status === 0 ? result.stdout : null;
+};
+
+const readAllowlist = (repoRoot, configPath) => {
+  const allowlistFile = path.join(repoRoot, ALLOWLIST_PATH);
+  let parsed;
+  try {
+    parsed = JSON.parse(readFileSync(allowlistFile, "utf8"));
+  } catch {
+    return new Set();
+  }
+
+  const entry = parsed?.[configPath] ?? parsed?.[CONFIG_PATH];
+  const values = Array.isArray(entry)
+    ? entry
+    : Array.isArray(entry?.allowedRemovedExtensions)
+      ? entry.allowedRemovedExtensions
+      : [];
+  return new Set(values.filter(value => typeof value === "string"));
+};
+
+const main = () => {
+  const input = parseHookInput(readStdin());
+  const filePath = input?.tool_input?.file_path;
+  if (typeof filePath !== "string" || !isConfigPath(filePath)) return ALLOWED;
+
+  const repoRoot = process.cwd();
+  const configPath = repoRelativeConfigPath(filePath);
+  let currentText;
+  try {
+    currentText = readFileSync(path.join(repoRoot, configPath), "utf8");
+  } catch {
+    return ALLOWED;
+  }
+
+  const previousText = readGitBlob(repoRoot);
+  if (previousText === null) return ALLOWED;
+
+  const previousExtensions = topLevelExtensionKeys(previousText);
+  const currentExtensionKeys = topLevelExtensionKeys(currentText);
+  if (previousExtensions === null || currentExtensionKeys === null)
+    return ALLOWED;
+  const currentExtensions = new Set(currentExtensionKeys);
+  const allowedRemovals = readAllowlist(repoRoot, configPath);
+  const missing = previousExtensions.filter(
+    extension =>
+      !currentExtensions.has(extension) && !allowedRemovals.has(extension)
+  );
+
+  if (missing.length === 0) return ALLOWED;
+
+  process.stderr
+    .write(`Blocked: harper-app/config.yaml dropped required Harper extension(s).
+
+Missing extension(s): ${missing.join(", ")}
+
+Harper does not merge a custom config.yaml with defaults. Removing a top-level
+extension silently disables that runtime surface and may only fail after deploy.
+Re-add the missing extension(s), or document an intentional removal in
+${ALLOWLIST_PATH}:
+
+{
+  "${CONFIG_PATH}": {
+    "allowedRemovedExtensions": ["${missing[0]}"]
+  }
+}
+`);
+  return BLOCKED;
+};
+
+process.exitCode = main();

package/plugins/src/harper-fabric/hooks/enforce-config-extensions.sh

@@ -0,0 +1,19 @@
+#!/bin/bash
+# This file is managed by Lisa.
+# Do not edit directly - changes will be overwritten on the next `lisa` run.
+
+# PostToolUse hook: after a harper-app/config.yaml edit, compare the edited
+# extension set against HEAD and block silent removals. Harper does not merge a
+# custom config.yaml with defaults, so removing a top-level extension can disable
+# runtime surfaces without a build-time failure.
+
+PLUGIN_ROOT=${CLAUDE_PLUGIN_ROOT:-}
+if [ -z "$PLUGIN_ROOT" ]; then
+  PLUGIN_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+fi
+
+if command -v bun >/dev/null 2>&1; then
+  exec bun "$PLUGIN_ROOT/hooks/enforce-config-extensions.mjs"
+fi
+
+exec node "$PLUGIN_ROOT/hooks/enforce-config-extensions.mjs"

package/plugins/src/harper-fabric/rules/harper-fabric.md

@@ -12,6 +12,7 @@ These rules apply to Harper/Fabric component apps managed by Lisa.
 
 - TypeScript under `src/` is the source of truth for Harper resources, browser modules, shared libraries, and operational scripts.
 - `harper-app/config.yaml`, `harper-app/schema.graphql`, HTML, CSS, docs, and research fixtures are source assets.
+- `harper-app/config.yaml` does not merge with Harper defaults. Keep every required top-level extension declared when editing it; the Harper Fabric hook blocks accidental extension drops unless the removal is documented in `.lisa/harper-config-extension-allowlist.json`.
 - `harper-app/resources.js` and `harper-app/web/**/*.js` are generated deploy artifacts. Never edit them directly; change the matching TypeScript and run `bun run build`.
 - Deployment, bootstrap, smoke, seed, verify, preview, token, crawl, ingest, and extraction commands must run from compiled JavaScript or generated Harper assets, not stale checked-in JavaScript.