@codyswann/lisa 2.178.2 → 2.178.4

package/dist/codex/scripts/install-pkgs.sh

@@ -7,7 +7,33 @@ set -uo pipefail
 repo_root="$(git rev-parse --show-toplevel 2>/dev/null || pwd)"
 cd "$repo_root" 2>/dev/null || exit 0
 
-if [ -d "node_modules" ] || [ ! -f "package.json" ]; then
+if [ ! -f "package.json" ]; then
+  exit 0
+fi
+
+link_primary_worktree_node_modules() {
+  [ ! -e "node_modules" ] && [ ! -L "node_modules" ] || return 1
+
+  case "$repo_root" in
+    */.claude/worktrees/*)
+      primary_root="${repo_root%%/.claude/worktrees/*}"
+      ;;
+    *)
+      return 1
+      ;;
+  esac
+
+  [ "$primary_root" != "$repo_root" ] || return 1
+  [ -d "$primary_root/node_modules" ] || return 1
+
+  ln -s "$primary_root/node_modules" "node_modules"
+}
+
+if [ -d "node_modules" ]; then
+  exit 0
+fi
+
+if link_primary_worktree_node_modules && [ -d "node_modules" ]; then
   exit 0
 fi
 

package/dist/opencode/plugin-templates/lisa-session-bootstrap.ts

@@ -23,7 +23,7 @@ export const LisaSessionBootstrap = async ({
   worktree: string;
 }) => {
   const root = worktree;
-  const { existsSync, mkdirSync, readFileSync, writeFileSync } =
+  const { existsSync, mkdirSync, readFileSync, symlinkSync, writeFileSync } =
     await import("node:fs");
 
   // install-pkgs: bootstrap dependencies when they're missing.
@@ -32,16 +32,29 @@ export const LisaSessionBootstrap = async ({
       existsSync(`${root}/package.json`) &&
       !existsSync(`${root}/node_modules`)
     ) {
+      let linkedPrimaryNodeModules = false;
+      const marker = "/.claude/worktrees/";
+      if (root.includes(marker)) {
+        const primaryRoot = root.slice(0, root.indexOf(marker));
+        const primaryNodeModules = `${primaryRoot}/node_modules`;
+        if (primaryRoot && existsSync(primaryNodeModules)) {
+          symlinkSync(primaryNodeModules, `${root}/node_modules`);
+          linkedPrimaryNodeModules = true;
+        }
+      }
+
       const has = (f: string) => existsSync(`${root}/${f}`);
       const install = async (cmd: string) => {
         if (Bun.which(cmd)) {
           await $`${cmd} install`.cwd(root).quiet().nothrow();
         }
       };
-      if (has("bun.lockb") || has("bun.lock")) await install("bun");
-      else if (has("pnpm-lock.yaml")) await install("pnpm");
-      else if (has("yarn.lock")) await install("yarn");
-      else await install("npm");
+      if (!linkedPrimaryNodeModules) {
+        if (has("bun.lockb") || has("bun.lock")) await install("bun");
+        else if (has("pnpm-lock.yaml")) await install("pnpm");
+        else if (has("yarn.lock")) await install("yarn");
+        else await install("npm");
+      }
     }
   } catch {
     // fail open — never block startup on a dependency-install error

package/package.json

@@ -91,7 +91,7 @@
     "ws": ">=8.20.1"
   },
   "name": "@codyswann/lisa",
-  "version": "2.178.2",
+  "version": "2.178.4",
   "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
   "main": "dist/index.js",
   "exports": {

package/plugins/lisa/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.178.2",
+  "version": "2.178.4",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.178.2",
+  "version": "2.178.4",
   "description": "Universal governance: agents, skills, commands, hooks, and rules for all projects.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/hooks/install-pkgs.sh

@@ -2,12 +2,37 @@
 # This file is managed by Lisa.
 # Do not edit directly — changes will be overwritten on the next `lisa` run.
 
+link_primary_worktree_node_modules() {
+  [ -f "package.json" ] || return 1
+  [ ! -e "node_modules" ] && [ ! -L "node_modules" ] || return 1
+
+  repo_root="$(git rev-parse --show-toplevel 2>/dev/null || pwd)"
+  case "$repo_root" in
+    */.claude/worktrees/*)
+      primary_root="${repo_root%%/.claude/worktrees/*}"
+      ;;
+    *)
+      return 1
+      ;;
+  esac
+
+  [ "$primary_root" != "$repo_root" ] || return 1
+  [ -d "$primary_root/node_modules" ] || return 1
+
+  ln -s "$primary_root/node_modules" "node_modules"
+  echo "Linked node_modules from primary worktree: $primary_root/node_modules"
+}
+
 # Only run package installation when node_modules are missing.
 # This covers remote environments, new worktrees, fresh clones, and CI.
 if [ -d "node_modules" ]; then
   exit 0
 fi
 
+if link_primary_worktree_node_modules && [ -d "node_modules" ]; then
+  exit 0
+fi
+
 # Detect the package manager this project wants, honoring explicit opt-outs.
 # Precedence: packageManager field > engines "please-use-<pm>" sentinel >
 # lockfile presence (minus any PM the engines forbid) > npm default.
@@ -88,4 +113,4 @@ if [ -n "$CHROME_PATH" ]; then
   echo "Chromium installed at: $CHROME_PATH"
 fi
 
-exit 0
+exit 0

package/plugins/lisa-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.178.2",
+  "version": "2.178.4",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.178.2",
+  "version": "2.178.4",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.178.2",
+  "version": "2.178.4",
   "description": "AWS CDK-specific Lisa plugin.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.178.2",
+  "version": "2.178.4",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.178.2",
+  "version": "2.178.4",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.178.2",
+  "version": "2.178.4",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.178.2",
+  "version": "2.178.4",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/hooks/install-pkgs.sh

@@ -2,12 +2,37 @@
 # This file is managed by Lisa.
 # Do not edit directly — changes will be overwritten on the next `lisa` run.
 
+link_primary_worktree_node_modules() {
+  [ -f "package.json" ] || return 1
+  [ ! -e "node_modules" ] && [ ! -L "node_modules" ] || return 1
+
+  repo_root="$(git rev-parse --show-toplevel 2>/dev/null || pwd)"
+  case "$repo_root" in
+    */.claude/worktrees/*)
+      primary_root="${repo_root%%/.claude/worktrees/*}"
+      ;;
+    *)
+      return 1
+      ;;
+  esac
+
+  [ "$primary_root" != "$repo_root" ] || return 1
+  [ -d "$primary_root/node_modules" ] || return 1
+
+  ln -s "$primary_root/node_modules" "node_modules"
+  echo "Linked node_modules from primary worktree: $primary_root/node_modules"
+}
+
 # Only run package installation when node_modules are missing.
 # This covers remote environments, new worktrees, fresh clones, and CI.
 if [ -d "node_modules" ]; then
   exit 0
 fi
 
+if link_primary_worktree_node_modules && [ -d "node_modules" ]; then
+  exit 0
+fi
+
 # Detect the package manager this project wants, honoring explicit opt-outs.
 # Precedence: packageManager field > engines "please-use-<pm>" sentinel >
 # lockfile presence (minus any PM the engines forbid) > npm default.
@@ -88,4 +113,4 @@ if [ -n "$CHROME_PATH" ]; then
   echo "Chromium installed at: $CHROME_PATH"
 fi
 
-exit 0
+exit 0

package/plugins/lisa-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.178.2",
+  "version": "2.178.4",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cursor/hooks/install-pkgs.sh

@@ -2,12 +2,37 @@
 # This file is managed by Lisa.
 # Do not edit directly — changes will be overwritten on the next `lisa` run.
 
+link_primary_worktree_node_modules() {
+  [ -f "package.json" ] || return 1
+  [ ! -e "node_modules" ] && [ ! -L "node_modules" ] || return 1
+
+  repo_root="$(git rev-parse --show-toplevel 2>/dev/null || pwd)"
+  case "$repo_root" in
+    */.claude/worktrees/*)
+      primary_root="${repo_root%%/.claude/worktrees/*}"
+      ;;
+    *)
+      return 1
+      ;;
+  esac
+
+  [ "$primary_root" != "$repo_root" ] || return 1
+  [ -d "$primary_root/node_modules" ] || return 1
+
+  ln -s "$primary_root/node_modules" "node_modules"
+  echo "Linked node_modules from primary worktree: $primary_root/node_modules"
+}
+
 # Only run package installation when node_modules are missing.
 # This covers remote environments, new worktrees, fresh clones, and CI.
 if [ -d "node_modules" ]; then
   exit 0
 fi
 
+if link_primary_worktree_node_modules && [ -d "node_modules" ]; then
+  exit 0
+fi
+
 # Detect the package manager this project wants, honoring explicit opt-outs.
 # Precedence: packageManager field > engines "please-use-<pm>" sentinel >
 # lockfile presence (minus any PM the engines forbid) > npm default.
@@ -88,4 +113,4 @@ if [ -n "$CHROME_PATH" ]; then
   echo "Chromium installed at: $CHROME_PATH"
 fi
 
-exit 0
+exit 0

package/plugins/lisa-expo/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.178.2",
+  "version": "2.178.4",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.178.2",
+  "version": "2.178.4",
   "description": "Expo and React Native-specific skills, agents, rules, and MCP servers.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo/skills/atomic-design-gluestack/SKILL.md

@@ -10,6 +10,14 @@ description: |
 
 This skill enforces Brad Frost's atomic design methodology adapted for React Native/Expo projects using Gluestack UI v3 + NativeWind v4. It provides clear guidelines for component categorization, directory structure, composition patterns, and testing strategies for each atomic level.
 
+## Sealed Design System Guard
+
+Before applying this skill, check whether the target project has a sealed or closed design system. Common markers include `.claude/rules/use-the-design-library.md`, `.claude/rules/figma-design-system.md`, design-system ESLint rules, or a project-owned `@/components/atoms` barrel paired with design-system docs/configuration.
+
+If a sealed design system is present, defer to the project's design-library rules and skills instead, such as `use-the-design-library` and `add-design-library-item`. Keep the atomic hierarchy concepts only when they match the local seal. Do not redefine the atom library as `@/components/ui`, use Gluestack compound trees as canonical atoms, or recommend `className` and raw Gluestack tokens where the project seal forbids them.
+
+For open Gluestack UI v3 + NativeWind v4 projects without those seal markers, continue with the guidance below.
+
 ## Core Principles
 
 ### The Atomic Hierarchy

package/plugins/lisa-expo/skills/atomic-design-gluestack/scripts/test_validate_atomic_structure.py

@@ -0,0 +1,240 @@
+"""
+Tests for validate_atomic_structure.py seal detection helpers.
+
+Covers:
+- find_project_roots: should return ALL ancestor roots (not just first)
+- has_design_system_eslint_rule: should only match actual rule/plugin syntax
+- has_design_system_eslint_rule: should check .eslintrc.yaml/.yml, eslint.config.mts/.cts
+- has_design_system_eslint_rule: should parse package.json eslintConfig field
+"""
+
+import json
+import sys
+import tempfile
+import unittest
+from pathlib import Path
+
+# Allow importing the module under test
+sys.path.insert(0, str(Path(__file__).parent))
+from validate_atomic_structure import (
+    find_project_roots,
+    has_design_system_eslint_rule,
+    has_sealed_design_system,
+)
+
+
+class TestFindProjectRoots(unittest.TestCase):
+    """find_project_roots should return ALL package boundaries, not just the nearest."""
+
+    def test_returns_all_ancestor_roots_in_monorepo(self) -> None:
+        """In a monorepo, both the inner package root and the workspace root are returned."""
+        with tempfile.TemporaryDirectory() as tmp:
+            workspace = Path(tmp) / "workspace"
+            inner = workspace / "apps" / "mobile"
+            inner.mkdir(parents=True)
+
+            # workspace root: has .git
+            (workspace / ".git").mkdir()
+            # inner package: has package.json
+            (inner / "package.json").write_text("{}", encoding="utf-8")
+
+            source_file = inner / "src" / "components"
+            source_file.mkdir(parents=True)
+
+            roots = find_project_roots(str(source_file))
+            # Both the inner package root and the workspace root should be returned.
+            # Use .resolve() to handle symlinked temp dirs (e.g. /var → /private/var on macOS).
+            self.assertIn(inner.resolve(), roots)
+            self.assertIn(workspace.resolve(), roots)
+
+    def test_returns_single_root_for_simple_project(self) -> None:
+        """A flat project returns its single root."""
+        with tempfile.TemporaryDirectory() as tmp:
+            project = Path(tmp) / "project"
+            project.mkdir()
+            (project / "package.json").write_text("{}", encoding="utf-8")
+            (project / ".git").mkdir()
+
+            roots = find_project_roots(str(project / "src"))
+            self.assertEqual(len(roots), 1)
+            # Use .resolve() to handle symlinked temp dirs (e.g. /var → /private/var on macOS).
+            self.assertEqual(roots[0], project.resolve())
+
+    def test_falls_back_to_current_directory_when_no_root_found(self) -> None:
+        """When no package.json or .git exists, returns the starting path."""
+        with tempfile.TemporaryDirectory() as tmp:
+            orphan = Path(tmp) / "orphan" / "dir"
+            orphan.mkdir(parents=True)
+            roots = find_project_roots(str(orphan))
+            self.assertEqual(len(roots), 1)
+
+
+class TestHasDesignSystemEslintRule(unittest.TestCase):
+    """has_design_system_eslint_rule should match actual rule/plugin identifiers only."""
+
+    def test_ignores_comment_containing_design_system_substring(self) -> None:
+        """A comment that mentions 'design-system' without a slash must not trigger the seal."""
+        with tempfile.TemporaryDirectory() as tmp:
+            root = Path(tmp)
+            eslint = root / ".eslintrc.json"
+            eslint.write_text(
+                '{"rules": {}, "// note": "do not use design-system here"}',
+                encoding="utf-8",
+            )
+            self.assertFalse(
+                has_design_system_eslint_rule(root),
+                msg="Plain 'design-system' substring in a comment must not match",
+            )
+
+    def test_matches_design_system_slash_rule_syntax(self) -> None:
+        """An ESLint rule like 'design-system/no-raw-colors' should trigger the seal."""
+        with tempfile.TemporaryDirectory() as tmp:
+            root = Path(tmp)
+            eslint = root / ".eslintrc.json"
+            eslint.write_text(
+                '{"rules": {"design-system/no-raw-colors": "error"}}',
+                encoding="utf-8",
+            )
+            self.assertTrue(has_design_system_eslint_rule(root))
+
+    def test_checks_eslintrc_yaml(self) -> None:
+        """.eslintrc.yaml is a valid ESLint config and must be checked."""
+        with tempfile.TemporaryDirectory() as tmp:
+            root = Path(tmp)
+            yaml_config = root / ".eslintrc.yaml"
+            yaml_config.write_text(
+                'rules:\n  design-system/no-raw-colors: error\n',
+                encoding="utf-8",
+            )
+            self.assertTrue(has_design_system_eslint_rule(root))
+
+    def test_checks_eslintrc_yml(self) -> None:
+        """.eslintrc.yml is a valid ESLint config and must be checked."""
+        with tempfile.TemporaryDirectory() as tmp:
+            root = Path(tmp)
+            yml_config = root / ".eslintrc.yml"
+            yml_config.write_text(
+                'rules:\n  design-system/no-raw-colors: error\n',
+                encoding="utf-8",
+            )
+            self.assertTrue(has_design_system_eslint_rule(root))
+
+    def test_checks_eslint_config_mts(self) -> None:
+        """eslint.config.mts is a valid ESLint flat-config entry point and must be checked."""
+        with tempfile.TemporaryDirectory() as tmp:
+            root = Path(tmp)
+            mts_config = root / "eslint.config.mts"
+            mts_config.write_text(
+                'export default [{"rules": {"design-system/no-raw-colors": "error"}}];',
+                encoding="utf-8",
+            )
+            self.assertTrue(has_design_system_eslint_rule(root))
+
+    def test_checks_eslint_config_cts(self) -> None:
+        """eslint.config.cts is a valid ESLint flat-config entry point and must be checked."""
+        with tempfile.TemporaryDirectory() as tmp:
+            root = Path(tmp)
+            cts_config = root / "eslint.config.cts"
+            cts_config.write_text(
+                'module.exports = [{"rules": {"design-system/no-raw-colors": "error"}}];',
+                encoding="utf-8",
+            )
+            self.assertTrue(has_design_system_eslint_rule(root))
+
+    def test_checks_package_json_eslintconfig_field(self) -> None:
+        """The eslintConfig key in package.json must be checked for design-system rules."""
+        with tempfile.TemporaryDirectory() as tmp:
+            root = Path(tmp)
+            pkg = {
+                "name": "my-app",
+                "eslintConfig": {
+                    "rules": {"design-system/no-raw-colors": "error"}
+                },
+            }
+            (root / "package.json").write_text(json.dumps(pkg), encoding="utf-8")
+            self.assertTrue(has_design_system_eslint_rule(root))
+
+    def test_package_json_non_eslintconfig_does_not_trigger(self) -> None:
+        """A 'design-system' substring in package.json outside eslintConfig must not match."""
+        with tempfile.TemporaryDirectory() as tmp:
+            root = Path(tmp)
+            pkg = {
+                "name": "my-app",
+                "dependencies": {"design-system": "^1.0.0"},
+            }
+            (root / "package.json").write_text(json.dumps(pkg), encoding="utf-8")
+            self.assertFalse(
+                has_design_system_eslint_rule(root),
+                msg="'design-system' in dependencies must not trigger the ESLint seal check",
+            )
+
+
+class TestHasSealedDesignSystem(unittest.TestCase):
+    """has_sealed_design_system seal-detection logic."""
+
+    def test_seal_marker_alone_is_sufficient(self) -> None:
+        """A seal marker without an atom barrel or .claude/rules directory seals the project."""
+        with tempfile.TemporaryDirectory() as tmp:
+            project = Path(tmp) / "project"
+            project.mkdir()
+            (project / ".git").mkdir()
+            docs = project / "docs"
+            docs.mkdir()
+            (docs / "design-system-rfc.md").write_text("", encoding="utf-8")
+            # Deliberately NO atom barrel and NO .claude/rules directory.
+
+            self.assertTrue(
+                has_sealed_design_system(str(project)),
+                msg="A single seal marker must be sufficient to detect a sealed design system",
+            )
+
+    def test_atom_barrel_alone_is_sufficient(self) -> None:
+        """A project exposing only an atoms barrel is treated as having a sealed design system."""
+        with tempfile.TemporaryDirectory() as tmp:
+            project = Path(tmp) / "project"
+            project.mkdir()
+            (project / ".git").mkdir()
+            atoms = project / "src" / "components" / "atoms"
+            atoms.mkdir(parents=True)
+            (atoms / "index.ts").write_text("", encoding="utf-8")
+            # Deliberately NO seal marker and NO .claude/rules directory.
+
+            self.assertTrue(
+                has_sealed_design_system(str(project)),
+                msg="An atoms barrel alone must be sufficient to detect a sealed design system",
+            )
+
+
+class TestHasSealedDesignSystemMonorepo(unittest.TestCase):
+    """has_sealed_design_system should find seal markers in ancestor (workspace) roots."""
+
+    def test_finds_seal_marker_at_workspace_root_not_inner_package(self) -> None:
+        """Seal markers placed at the workspace root must be respected for inner packages."""
+        with tempfile.TemporaryDirectory() as tmp:
+            workspace = Path(tmp) / "workspace"
+            inner = workspace / "apps" / "mobile"
+            inner.mkdir(parents=True)
+
+            # workspace root: .git + seal marker
+            (workspace / ".git").mkdir()
+            rules_dir = workspace / ".claude" / "rules"
+            rules_dir.mkdir(parents=True)
+            (rules_dir / "use-the-design-library.md").write_text("", encoding="utf-8")
+
+            # inner package: package.json + atom barrel
+            (inner / "package.json").write_text("{}", encoding="utf-8")
+            atoms = inner / "components" / "atoms"
+            atoms.mkdir(parents=True)
+            (atoms / "index.ts").write_text("", encoding="utf-8")
+
+            target_dir = inner / "src" / "components" / "atoms"
+            target_dir.mkdir(parents=True)
+
+            self.assertTrue(
+                has_sealed_design_system(str(target_dir)),
+                msg="Seal marker at workspace root must be detected even for nested packages",
+            )
+
+
+if __name__ == "__main__":
+    unittest.main()