@codyswann/lisa 2.217.3 → 2.217.4

package/dist/cli/doctor-monitor-thresholds.d.ts

@@ -1,8 +1,11 @@
-import type { DoctorCheck } from "./doctor.js";
 /**
- * Warn when projects still carry deprecated monitor threshold keys.
+ * Find legacy monitor keys in committed and local config independently.
  * @param targetPath - Project path to inspect
- * @returns Doctor check result
+ * @returns One named doctor check result
  */
-export declare function checkLegacyMonitorThresholds(targetPath: string): Promise<DoctorCheck>;
+export declare function checkLegacyMonitorThresholds(targetPath: string): Promise<{
+    name: string;
+    status: "ok" | "warn";
+    detail: string;
+}>;
 //# sourceMappingURL=doctor-monitor-thresholds.d.ts.map

package/dist/cli/doctor-monitor-thresholds.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor-monitor-thresholds.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-monitor-thresholds.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAwE/C;;;;GAIG;AACH,wBAAsB,4BAA4B,CAChD,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,WAAW,CAAC,CA4BtB"}
+{"version":3,"file":"doctor-monitor-thresholds.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-monitor-thresholds.ts"],"names":[],"mappings":"AAqEA;;;;GAIG;AACH,wBAAsB,4BAA4B,CAChD,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;IACT,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,IAAI,GAAG,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CA6BD"}

package/dist/cli/doctor-monitor-thresholds.js

@@ -1,90 +1,81 @@
 import { existsSync } from "node:fs";
 import { readFile } from "node:fs/promises";
 import * as path from "node:path";
-const CHECK_NAME = "Monitor threshold keys current?";
-const COMMITTED_CONFIG = ".lisa.config.json";
-const LOCAL_CONFIG = ".lisa.config.local.json";
-const MONITOR_THRESHOLDS_PREFIX = "monitor.thresholds.";
-const LEGACY_MONITOR_THRESHOLD_KEYS = [
+const MONITOR_THRESHOLD_CONFIG_CHECK_NAME = "Monitor threshold keys current?";
+const CONFIG_FILES = [".lisa.config.json", ".lisa.config.local.json"];
+const LEGACY_MONITOR_THRESHOLDS = [
     {
-        legacy: `${MONITOR_THRESHOLDS_PREFIX}sentryMinEvents24h`,
-        replacement: `${MONITOR_THRESHOLDS_PREFIX}minEvents24h`,
+        legacy: "monitor.thresholds.sentryMinEvents24h",
+        current: "monitor.thresholds.minEvents24h",
+        property: "sentryMinEvents24h",
     },
     {
-        legacy: `${MONITOR_THRESHOLDS_PREFIX}xrayFaultRatePct`,
-        replacement: `${MONITOR_THRESHOLDS_PREFIX}faultRatePct`,
+        legacy: "monitor.thresholds.xrayFaultRatePct",
+        current: "monitor.thresholds.faultRatePct",
+        property: "xrayFaultRatePct",
     },
 ];
 /**
- * Safely parse a Lisa config file for non-blocking advisory checks.
- * @param configPath - Config path to parse
- * @returns Parsed config or undefined when unavailable/malformed
+ * Return an object-shaped value as a string-keyed record.
+ * @param value - Value to narrow
+ * @returns Record for objects, otherwise undefined
  */
-async function readConfigForAdvisoryCheck(configPath) {
-    if (!existsSync(configPath)) {
-        return undefined;
-    }
-    try {
-        return JSON.parse(await readFile(configPath, "utf8"));
-    }
-    catch {
-        return undefined;
-    }
+function asRecord(value) {
+    return typeof value === "object" && value !== null
+        ? value
+        : undefined;
 }
 /**
- * Determine whether an object owns a dotted config path.
- * @param value - Object to inspect
- * @param segments - Config key path segments
- * @returns True when every segment exists as an own property
+ * Find legacy monitor threshold keys in one raw config file.
+ * Parse failures are reported by doctor's existing project-config check.
+ * @param targetPath - Project path to inspect
+ * @param fileName - Raw config file to inspect
+ * @returns Legacy-path migration findings
  */
-function hasConfigPathSegments(value, segments) {
-    if (segments.length === 0) {
-        return true;
-    }
-    if (value === null || typeof value !== "object") {
-        return false;
-    }
-    const segment = segments[0];
-    const remaining = segments.slice(1);
-    if (segment === undefined) {
-        return true;
+async function legacyFindingsForFile(targetPath, fileName) {
+    const configPath = path.join(targetPath, fileName);
+    if (!existsSync(configPath))
+        return { findings: [] };
+    try {
+        const config = asRecord(JSON.parse(await readFile(configPath, "utf8")));
+        const monitor = asRecord(config?.["monitor"]);
+        const thresholds = asRecord(monitor?.["thresholds"]);
+        return {
+            findings: LEGACY_MONITOR_THRESHOLDS.filter(threshold => Object.hasOwn(thresholds ?? {}, threshold.property)).map(threshold => `${fileName}: ${threshold.legacy} -> ${threshold.current}`),
+        };
     }
-    if (!Object.prototype.hasOwnProperty.call(value, segment)) {
-        return false;
+    catch {
+        return { findings: [], uninspectable: fileName };
     }
-    return hasConfigPathSegments(value[segment], remaining);
-}
-/**
- * Determine whether an object owns a dotted config path.
- * @param value - Object to inspect
- * @param dottedPath - Dot-separated config key path
- * @returns True when every segment exists as an own property
- */
-function hasConfigPath(value, dottedPath) {
-    return hasConfigPathSegments(value, dottedPath.split("."));
 }
 /**
- * Warn when projects still carry deprecated monitor threshold keys.
+ * Find legacy monitor keys in committed and local config independently.
  * @param targetPath - Project path to inspect
- * @returns Doctor check result
+ * @returns One named doctor check result
  */
 export async function checkLegacyMonitorThresholds(targetPath) {
-    const configs = await Promise.all([COMMITTED_CONFIG, LOCAL_CONFIG].map(async (fileName) => ({
-        fileName,
-        config: await readConfigForAdvisoryCheck(path.join(targetPath, fileName)),
-    })));
-    const findings = configs.flatMap(({ fileName, config }) => LEGACY_MONITOR_THRESHOLD_KEYS.filter(({ legacy }) => hasConfigPath(config, legacy)).map(({ legacy, replacement }) => `${fileName}: ${legacy} -> ${replacement}`));
-    if (findings.length === 0) {
-        return {
-            name: CHECK_NAME,
+    const inspections = await Promise.all(CONFIG_FILES.map(fileName => legacyFindingsForFile(targetPath, fileName)));
+    const findings = inspections.flatMap(inspection => inspection.findings);
+    const uninspectable = inspections.flatMap(inspection => inspection.uninspectable ? [inspection.uninspectable] : []);
+    return findings.length === 0 && uninspectable.length === 0
+        ? {
+            name: MONITOR_THRESHOLD_CONFIG_CHECK_NAME,
             status: "ok",
-            detail: "No legacy monitor threshold keys present",
+            detail: "No legacy monitor threshold keys found",
+        }
+        : {
+            name: MONITOR_THRESHOLD_CONFIG_CHECK_NAME,
+            status: "warn",
+            detail: [
+                findings.length > 0
+                    ? `Replace legacy monitor threshold keys: ${findings.join(", ")}`
+                    : undefined,
+                uninspectable.length > 0
+                    ? `Could not inspect monitor threshold keys in: ${uninspectable.join(", ")}`
+                    : undefined,
+            ]
+                .filter((message) => message !== undefined)
+                .join(". "),
         };
-    }
-    return {
-        name: CHECK_NAME,
-        status: "warn",
-        detail: `Legacy monitor threshold keys found; migrate ${findings.join(", ")}`,
-    };
 }
 //# sourceMappingURL=doctor-monitor-thresholds.js.map

package/dist/cli/doctor-monitor-thresholds.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor-monitor-thresholds.js","sourceRoot":"","sources":["../../src/cli/doctor-monitor-thresholds.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,MAAM,UAAU,GAAG,iCAAiC,CAAC;AACrD,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAC7C,MAAM,YAAY,GAAG,yBAAyB,CAAC;AAC/C,MAAM,yBAAyB,GAAG,qBAAqB,CAAC;AACxD,MAAM,6BAA6B,GAAG;IACpC;QACE,MAAM,EAAE,GAAG,yBAAyB,oBAAoB;QACxD,WAAW,EAAE,GAAG,yBAAyB,cAAc;KACxD;IACD;QACE,MAAM,EAAE,GAAG,yBAAyB,kBAAkB;QACtD,WAAW,EAAE,GAAG,yBAAyB,cAAc;KACxD;CACO,CAAC;AAEX;;;;GAIG;AACH,KAAK,UAAU,0BAA0B,CACvC,UAAkB;IAElB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAY,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,KAAc,EAAE,QAAkB;IAC/D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,qBAAqB,CACzB,KAAiC,CAAC,OAAO,CAAC,EAC3C,SAAS,CACV,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,KAAc,EAAE,UAAkB;IACvD,OAAO,qBAAqB,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,UAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,KAAK,EAAC,QAAQ,EAAC,EAAE,CAAC,CAAC;QACtD,QAAQ;QACR,MAAM,EAAE,MAAM,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;KAC1E,CAAC,CAAC,CACJ,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CACxD,6BAA6B,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAClD,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAC9B,CAAC,GAAG,CACH,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,GAAG,QAAQ,KAAK,MAAM,OAAO,WAAW,EAAE,CACxE,CACF,CAAC;IAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,0CAA0C;SACnD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,gDAAgD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KAC9E,CAAC;AACJ,CAAC"}
+{"version":3,"file":"doctor-monitor-thresholds.js","sourceRoot":"","sources":["../../src/cli/doctor-monitor-thresholds.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,mCAAmC,GAAG,iCAAiC,CAAC;AAE9E,MAAM,YAAY,GAAG,CAAC,mBAAmB,EAAE,yBAAyB,CAAU,CAAC;AAE/E,MAAM,yBAAyB,GAAG;IAChC;QACE,MAAM,EAAE,uCAAuC;QAC/C,OAAO,EAAE,iCAAiC;QAC1C,QAAQ,EAAE,oBAAoB;KAC/B;IACD;QACE,MAAM,EAAE,qCAAqC;QAC7C,OAAO,EAAE,iCAAiC;QAC1C,QAAQ,EAAE,kBAAkB;KAC7B;CACO,CAAC;AAQX;;;;GAIG;AACH,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAChD,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,qBAAqB,CAClC,UAAkB,EAClB,QAAuC;IAEvC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAErD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAErD,OAAO;YACL,QAAQ,EAAE,yBAAyB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CACrD,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,SAAS,CAAC,QAAQ,CAAC,CACpD,CAAC,GAAG,CACH,SAAS,CAAC,EAAE,CAAC,GAAG,QAAQ,KAAK,SAAS,CAAC,MAAM,OAAO,SAAS,CAAC,OAAO,EAAE,CACxE;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;IACnD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,UAAkB;IAMlB,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CACnC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,qBAAqB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAC1E,CAAC;IACF,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CACrD,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAC3D,CAAC;IAEF,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QACxD,CAAC,CAAC;YACE,IAAI,EAAE,mCAAmC;YACzC,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,wCAAwC;SACjD;QACH,CAAC,CAAC;YACE,IAAI,EAAE,mCAAmC;YACzC,MAAM,EAAE,MAAM;YACd,MAAM,EAAE;gBACN,QAAQ,CAAC,MAAM,GAAG,CAAC;oBACjB,CAAC,CAAC,0CAA0C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACjE,CAAC,CAAC,SAAS;gBACb,aAAa,CAAC,MAAM,GAAG,CAAC;oBACtB,CAAC,CAAC,gDAAgD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBAC5E,CAAC,CAAC,SAAS;aACd;iBACE,MAAM,CAAC,CAAC,OAAO,EAAqB,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC;iBAC7D,IAAI,CAAC,IAAI,CAAC;SACd,CAAC;AACR,CAAC"}

package/package.json

@@ -95,7 +95,7 @@
     "ws": ">=8.20.1"
   },
   "name": "@codyswann/lisa",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
   "main": "dist/index.js",
   "exports": {

package/plugins/lisa/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Universal governance: agents, skills, commands, hooks, and rules for all projects.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/skills/lisa-monitor/SKILL.md

@@ -15,14 +15,69 @@ Spot-check application health, **audit observability completeness**, and **file
 - `--all-gaps` — also file `recommended`-tier gaps (session replay, product analytics, etc.), not just `core`. Does not change anomaly thresholds.
 - `max_candidates=<n>` — cap tickets filed this run (default 20; config `monitor.maxCandidates`).
 
-## Threshold compatibility
-
-Resolve monitor thresholds from `.lisa.config.local.json` first and `.lisa.config.json` second, using the local-overrides-global semantics from the `config-resolution` rule. For renamed thresholds, prefer the provider-neutral key when present, then fall back to the legacy provider-named key, then fall back to the documented default:
-
-- `monitor.thresholds.minEvents24h` falls back to `monitor.thresholds.sentryMinEvents24h`, then default `1`.
-- `monitor.thresholds.faultRatePct` falls back to `monitor.thresholds.xrayFaultRatePct`, then default `5`.
-
-A project carrying both keys uses the provider-neutral value. A project carrying only the legacy key keeps using that explicit legacy value; never silently substitute the new default just because the new key is absent.
+## Monitor threshold compatibility
+
+Before resolving anomaly thresholds, inspect the committed
+`.lisa.config.json` and local `.lisa.config.local.json` separately with `jq`.
+Use a literal, fixed-path projection that returns presence and value for only
+these four exact paths; do not use `Read`, `cat`, interpolation, or a filter
+that emits either entire config into agent context:
+
+- `monitor.thresholds.minEvents24h`, then
+  `monitor.thresholds.sentryMinEvents24h`.
+- `monitor.thresholds.faultRatePct`, then
+  `monitor.thresholds.xrayFaultRatePct`.
+
+Run this fixed filter once with literal final argument `.lisa.config.json` and
+once with literal final argument `.lisa.config.local.json` when the respective
+file exists:
+
+```bash
+jq 'def threshold($object; $name):
+    if ($object | has($name)) then
+      ($object[$name] | type) as $type |
+      if $type == "number" then
+        if ($object[$name] | isfinite and (isnan | not)) then
+          {present: true, valid: true, type: "number", value: $object[$name]}
+        else
+          {present: true, valid: false, type: "non-finite-number"}
+        end
+      else
+        {present: true, valid: false, type: $type}
+      end
+    else
+      {present: false, valid: false, type: "missing"}
+    end;
+  (.monitor.thresholds | if type == "object" then . else {} end) as $t |
+  {
+    "monitor.thresholds.minEvents24h": threshold($t; "minEvents24h"),
+    "monitor.thresholds.sentryMinEvents24h": threshold($t; "sentryMinEvents24h"),
+    "monitor.thresholds.faultRatePct": threshold($t; "faultRatePct"),
+    "monitor.thresholds.xrayFaultRatePct": threshold($t; "xrayFaultRatePct")
+  }' .lisa.config.json
+```
+
+A nonzero `jq` result fails threshold collection; do not treat an uninspectable
+present file as if it were absent.
+
+For each exact path, keep the raw `jq` presence/value result from each file;
+do not inject defaults during this merge. Local presence overrides committed
+presence per path. After that merge, resolve the current key before the legacy
+key, then use default `1` for `monitor.thresholds.minEvents24h` or default `5`
+for `monitor.thresholds.faultRatePct`. Current key wins over legacy key even
+when its configured value is invalid.
+
+Every configured threshold must be a finite JSON number. If the selected path
+is null, a string, a boolean, an object, an array, or otherwise non-finite,
+fail threshold collection and report the exact path and source without echoing
+the invalid value; never fall through to a legacy value or default. Never quote
+or report either whole config. The fixed `jq` projection itself must redact
+invalid configured content: it emits only presence, validity, and a fixed type
+classification, and includes the numeric `value` field only for a finite number.
+For a valid resolution, the monitor report must include the resolved value and
+source. Report only a validated numeric resolved value and one fixed source enum:
+`local-current`, `committed-current`, `local-legacy`, `committed-legacy`, or
+`default`.
 
 ## Orchestration: agent team
 

package/plugins/lisa/skills/lisa-monitor/SKILL.md

@@ -15,14 +15,69 @@ Spot-check application health, **audit observability completeness**, and **file
 - `--all-gaps` — also file `recommended`-tier gaps (session replay, product analytics, etc.), not just `core`. Does not change anomaly thresholds.
 - `max_candidates=<n>` — cap tickets filed this run (default 20; config `monitor.maxCandidates`).
 
-## Threshold compatibility
-
-Resolve monitor thresholds from `.lisa.config.local.json` first and `.lisa.config.json` second, using the local-overrides-global semantics from the `config-resolution` rule. For renamed thresholds, prefer the provider-neutral key when present, then fall back to the legacy provider-named key, then fall back to the documented default:
-
-- `monitor.thresholds.minEvents24h` falls back to `monitor.thresholds.sentryMinEvents24h`, then default `1`.
-- `monitor.thresholds.faultRatePct` falls back to `monitor.thresholds.xrayFaultRatePct`, then default `5`.
-
-A project carrying both keys uses the provider-neutral value. A project carrying only the legacy key keeps using that explicit legacy value; never silently substitute the new default just because the new key is absent.
+## Monitor threshold compatibility
+
+Before resolving anomaly thresholds, inspect the committed
+`.lisa.config.json` and local `.lisa.config.local.json` separately with `jq`.
+Use a literal, fixed-path projection that returns presence and value for only
+these four exact paths; do not use `Read`, `cat`, interpolation, or a filter
+that emits either entire config into agent context:
+
+- `monitor.thresholds.minEvents24h`, then
+  `monitor.thresholds.sentryMinEvents24h`.
+- `monitor.thresholds.faultRatePct`, then
+  `monitor.thresholds.xrayFaultRatePct`.
+
+Run this fixed filter once with literal final argument `.lisa.config.json` and
+once with literal final argument `.lisa.config.local.json` when the respective
+file exists:
+
+```bash
+jq 'def threshold($object; $name):
+    if ($object | has($name)) then
+      ($object[$name] | type) as $type |
+      if $type == "number" then
+        if ($object[$name] | isfinite and (isnan | not)) then
+          {present: true, valid: true, type: "number", value: $object[$name]}
+        else
+          {present: true, valid: false, type: "non-finite-number"}
+        end
+      else
+        {present: true, valid: false, type: $type}
+      end
+    else
+      {present: false, valid: false, type: "missing"}
+    end;
+  (.monitor.thresholds | if type == "object" then . else {} end) as $t |
+  {
+    "monitor.thresholds.minEvents24h": threshold($t; "minEvents24h"),
+    "monitor.thresholds.sentryMinEvents24h": threshold($t; "sentryMinEvents24h"),
+    "monitor.thresholds.faultRatePct": threshold($t; "faultRatePct"),
+    "monitor.thresholds.xrayFaultRatePct": threshold($t; "xrayFaultRatePct")
+  }' .lisa.config.json
+```
+
+A nonzero `jq` result fails threshold collection; do not treat an uninspectable
+present file as if it were absent.
+
+For each exact path, keep the raw `jq` presence/value result from each file;
+do not inject defaults during this merge. Local presence overrides committed
+presence per path. After that merge, resolve the current key before the legacy
+key, then use default `1` for `monitor.thresholds.minEvents24h` or default `5`
+for `monitor.thresholds.faultRatePct`. Current key wins over legacy key even
+when its configured value is invalid.
+
+Every configured threshold must be a finite JSON number. If the selected path
+is null, a string, a boolean, an object, an array, or otherwise non-finite,
+fail threshold collection and report the exact path and source without echoing
+the invalid value; never fall through to a legacy value or default. Never quote
+or report either whole config. The fixed `jq` projection itself must redact
+invalid configured content: it emits only presence, validity, and a fixed type
+classification, and includes the numeric `value` field only for a finite number.
+For a valid resolution, the monitor report must include the resolved value and
+source. Report only a validated numeric resolved value and one fixed source enum:
+`local-current`, `committed-current`, `local-legacy`, `committed-legacy`, or
+`default`.
 
 ## Orchestration: agent team
 

package/plugins/lisa-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-agy/skills/lisa-monitor/SKILL.md

@@ -15,14 +15,69 @@ Spot-check application health, **audit observability completeness**, and **file
 - `--all-gaps` — also file `recommended`-tier gaps (session replay, product analytics, etc.), not just `core`. Does not change anomaly thresholds.
 - `max_candidates=<n>` — cap tickets filed this run (default 20; config `monitor.maxCandidates`).
 
-## Threshold compatibility
-
-Resolve monitor thresholds from `.lisa.config.local.json` first and `.lisa.config.json` second, using the local-overrides-global semantics from the `config-resolution` rule. For renamed thresholds, prefer the provider-neutral key when present, then fall back to the legacy provider-named key, then fall back to the documented default:
-
-- `monitor.thresholds.minEvents24h` falls back to `monitor.thresholds.sentryMinEvents24h`, then default `1`.
-- `monitor.thresholds.faultRatePct` falls back to `monitor.thresholds.xrayFaultRatePct`, then default `5`.
-
-A project carrying both keys uses the provider-neutral value. A project carrying only the legacy key keeps using that explicit legacy value; never silently substitute the new default just because the new key is absent.
+## Monitor threshold compatibility
+
+Before resolving anomaly thresholds, inspect the committed
+`.lisa.config.json` and local `.lisa.config.local.json` separately with `jq`.
+Use a literal, fixed-path projection that returns presence and value for only
+these four exact paths; do not use `Read`, `cat`, interpolation, or a filter
+that emits either entire config into agent context:
+
+- `monitor.thresholds.minEvents24h`, then
+  `monitor.thresholds.sentryMinEvents24h`.
+- `monitor.thresholds.faultRatePct`, then
+  `monitor.thresholds.xrayFaultRatePct`.
+
+Run this fixed filter once with literal final argument `.lisa.config.json` and
+once with literal final argument `.lisa.config.local.json` when the respective
+file exists:
+
+```bash
+jq 'def threshold($object; $name):
+    if ($object | has($name)) then
+      ($object[$name] | type) as $type |
+      if $type == "number" then
+        if ($object[$name] | isfinite and (isnan | not)) then
+          {present: true, valid: true, type: "number", value: $object[$name]}
+        else
+          {present: true, valid: false, type: "non-finite-number"}
+        end
+      else
+        {present: true, valid: false, type: $type}
+      end
+    else
+      {present: false, valid: false, type: "missing"}
+    end;
+  (.monitor.thresholds | if type == "object" then . else {} end) as $t |
+  {
+    "monitor.thresholds.minEvents24h": threshold($t; "minEvents24h"),
+    "monitor.thresholds.sentryMinEvents24h": threshold($t; "sentryMinEvents24h"),
+    "monitor.thresholds.faultRatePct": threshold($t; "faultRatePct"),
+    "monitor.thresholds.xrayFaultRatePct": threshold($t; "xrayFaultRatePct")
+  }' .lisa.config.json
+```
+
+A nonzero `jq` result fails threshold collection; do not treat an uninspectable
+present file as if it were absent.
+
+For each exact path, keep the raw `jq` presence/value result from each file;
+do not inject defaults during this merge. Local presence overrides committed
+presence per path. After that merge, resolve the current key before the legacy
+key, then use default `1` for `monitor.thresholds.minEvents24h` or default `5`
+for `monitor.thresholds.faultRatePct`. Current key wins over legacy key even
+when its configured value is invalid.
+
+Every configured threshold must be a finite JSON number. If the selected path
+is null, a string, a boolean, an object, an array, or otherwise non-finite,
+fail threshold collection and report the exact path and source without echoing
+the invalid value; never fall through to a legacy value or default. Never quote
+or report either whole config. The fixed `jq` projection itself must redact
+invalid configured content: it emits only presence, validity, and a fixed type
+classification, and includes the numeric `value` field only for a finite number.
+For a valid resolution, the monitor report must include the resolved value and
+source. Report only a validated numeric resolved value and one fixed source enum:
+`local-current`, `committed-current`, `local-legacy`, `committed-legacy`, or
+`default`.
 
 ## Orchestration: agent team
 

package/plugins/lisa-cdk/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "AWS CDK-specific Lisa plugin.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/skills/lisa-monitor/SKILL.md

@@ -15,14 +15,69 @@ Spot-check application health, **audit observability completeness**, and **file
 - `--all-gaps` — also file `recommended`-tier gaps (session replay, product analytics, etc.), not just `core`. Does not change anomaly thresholds.
 - `max_candidates=<n>` — cap tickets filed this run (default 20; config `monitor.maxCandidates`).
 
-## Threshold compatibility
-
-Resolve monitor thresholds from `.lisa.config.local.json` first and `.lisa.config.json` second, using the local-overrides-global semantics from the `config-resolution` rule. For renamed thresholds, prefer the provider-neutral key when present, then fall back to the legacy provider-named key, then fall back to the documented default:
-
-- `monitor.thresholds.minEvents24h` falls back to `monitor.thresholds.sentryMinEvents24h`, then default `1`.
-- `monitor.thresholds.faultRatePct` falls back to `monitor.thresholds.xrayFaultRatePct`, then default `5`.
-
-A project carrying both keys uses the provider-neutral value. A project carrying only the legacy key keeps using that explicit legacy value; never silently substitute the new default just because the new key is absent.
+## Monitor threshold compatibility
+
+Before resolving anomaly thresholds, inspect the committed
+`.lisa.config.json` and local `.lisa.config.local.json` separately with `jq`.
+Use a literal, fixed-path projection that returns presence and value for only
+these four exact paths; do not use `Read`, `cat`, interpolation, or a filter
+that emits either entire config into agent context:
+
+- `monitor.thresholds.minEvents24h`, then
+  `monitor.thresholds.sentryMinEvents24h`.
+- `monitor.thresholds.faultRatePct`, then
+  `monitor.thresholds.xrayFaultRatePct`.
+
+Run this fixed filter once with literal final argument `.lisa.config.json` and
+once with literal final argument `.lisa.config.local.json` when the respective
+file exists:
+
+```bash
+jq 'def threshold($object; $name):
+    if ($object | has($name)) then
+      ($object[$name] | type) as $type |
+      if $type == "number" then
+        if ($object[$name] | isfinite and (isnan | not)) then
+          {present: true, valid: true, type: "number", value: $object[$name]}
+        else
+          {present: true, valid: false, type: "non-finite-number"}
+        end
+      else
+        {present: true, valid: false, type: $type}
+      end
+    else
+      {present: false, valid: false, type: "missing"}
+    end;
+  (.monitor.thresholds | if type == "object" then . else {} end) as $t |
+  {
+    "monitor.thresholds.minEvents24h": threshold($t; "minEvents24h"),
+    "monitor.thresholds.sentryMinEvents24h": threshold($t; "sentryMinEvents24h"),
+    "monitor.thresholds.faultRatePct": threshold($t; "faultRatePct"),
+    "monitor.thresholds.xrayFaultRatePct": threshold($t; "xrayFaultRatePct")
+  }' .lisa.config.json
+```
+
+A nonzero `jq` result fails threshold collection; do not treat an uninspectable
+present file as if it were absent.
+
+For each exact path, keep the raw `jq` presence/value result from each file;
+do not inject defaults during this merge. Local presence overrides committed
+presence per path. After that merge, resolve the current key before the legacy
+key, then use default `1` for `monitor.thresholds.minEvents24h` or default `5`
+for `monitor.thresholds.faultRatePct`. Current key wins over legacy key even
+when its configured value is invalid.
+
+Every configured threshold must be a finite JSON number. If the selected path
+is null, a string, a boolean, an object, an array, or otherwise non-finite,
+fail threshold collection and report the exact path and source without echoing
+the invalid value; never fall through to a legacy value or default. Never quote
+or report either whole config. The fixed `jq` projection itself must redact
+invalid configured content: it emits only presence, validity, and a fixed type
+classification, and includes the numeric `value` field only for a finite number.
+For a valid resolution, the monitor report must include the resolved value and
+source. Report only a validated numeric resolved value and one fixed source enum:
+`local-current`, `committed-current`, `local-legacy`, `committed-legacy`, or
+`default`.
 
 ## Orchestration: agent team
 

package/plugins/lisa-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cursor/skills/lisa-monitor/SKILL.md

@@ -15,14 +15,69 @@ Spot-check application health, **audit observability completeness**, and **file
 - `--all-gaps` — also file `recommended`-tier gaps (session replay, product analytics, etc.), not just `core`. Does not change anomaly thresholds.
 - `max_candidates=<n>` — cap tickets filed this run (default 20; config `monitor.maxCandidates`).
 
-## Threshold compatibility
-
-Resolve monitor thresholds from `.lisa.config.local.json` first and `.lisa.config.json` second, using the local-overrides-global semantics from the `config-resolution` rule. For renamed thresholds, prefer the provider-neutral key when present, then fall back to the legacy provider-named key, then fall back to the documented default:
-
-- `monitor.thresholds.minEvents24h` falls back to `monitor.thresholds.sentryMinEvents24h`, then default `1`.
-- `monitor.thresholds.faultRatePct` falls back to `monitor.thresholds.xrayFaultRatePct`, then default `5`.
-
-A project carrying both keys uses the provider-neutral value. A project carrying only the legacy key keeps using that explicit legacy value; never silently substitute the new default just because the new key is absent.
+## Monitor threshold compatibility
+
+Before resolving anomaly thresholds, inspect the committed
+`.lisa.config.json` and local `.lisa.config.local.json` separately with `jq`.
+Use a literal, fixed-path projection that returns presence and value for only
+these four exact paths; do not use `Read`, `cat`, interpolation, or a filter
+that emits either entire config into agent context:
+
+- `monitor.thresholds.minEvents24h`, then
+  `monitor.thresholds.sentryMinEvents24h`.
+- `monitor.thresholds.faultRatePct`, then
+  `monitor.thresholds.xrayFaultRatePct`.
+
+Run this fixed filter once with literal final argument `.lisa.config.json` and
+once with literal final argument `.lisa.config.local.json` when the respective
+file exists:
+
+```bash
+jq 'def threshold($object; $name):
+    if ($object | has($name)) then
+      ($object[$name] | type) as $type |
+      if $type == "number" then
+        if ($object[$name] | isfinite and (isnan | not)) then
+          {present: true, valid: true, type: "number", value: $object[$name]}
+        else
+          {present: true, valid: false, type: "non-finite-number"}
+        end
+      else
+        {present: true, valid: false, type: $type}
+      end
+    else
+      {present: false, valid: false, type: "missing"}
+    end;
+  (.monitor.thresholds | if type == "object" then . else {} end) as $t |
+  {
+    "monitor.thresholds.minEvents24h": threshold($t; "minEvents24h"),
+    "monitor.thresholds.sentryMinEvents24h": threshold($t; "sentryMinEvents24h"),
+    "monitor.thresholds.faultRatePct": threshold($t; "faultRatePct"),
+    "monitor.thresholds.xrayFaultRatePct": threshold($t; "xrayFaultRatePct")
+  }' .lisa.config.json
+```
+
+A nonzero `jq` result fails threshold collection; do not treat an uninspectable
+present file as if it were absent.
+
+For each exact path, keep the raw `jq` presence/value result from each file;
+do not inject defaults during this merge. Local presence overrides committed
+presence per path. After that merge, resolve the current key before the legacy
+key, then use default `1` for `monitor.thresholds.minEvents24h` or default `5`
+for `monitor.thresholds.faultRatePct`. Current key wins over legacy key even
+when its configured value is invalid.
+
+Every configured threshold must be a finite JSON number. If the selected path
+is null, a string, a boolean, an object, an array, or otherwise non-finite,
+fail threshold collection and report the exact path and source without echoing
+the invalid value; never fall through to a legacy value or default. Never quote
+or report either whole config. The fixed `jq` projection itself must redact
+invalid configured content: it emits only presence, validity, and a fixed type
+classification, and includes the numeric `value` field only for a finite number.
+For a valid resolution, the monitor report must include the resolved value and
+source. Report only a validated numeric resolved value and one fixed source enum:
+`local-current`, `committed-current`, `local-legacy`, `committed-legacy`, or
+`default`.
 
 ## Orchestration: agent team
 

package/plugins/lisa-expo/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Expo and React Native-specific skills, agents, rules, and MCP servers.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Harper/Fabric-specific Lisa rules for TypeScript component apps.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "NestJS-specific skills and migration write-protection hooks.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Ruby on Rails-specific skills and hooks for RuboCop and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "TypeScript-specific hooks for formatting, linting, and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "Distributable LLM Wiki kernel — ingest, query, lint, and maintain a git-native markdown knowledge base across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.217.3",
+  "version": "2.217.4",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/src/base/skills/lisa-monitor/SKILL.md

@@ -15,14 +15,69 @@ Spot-check application health, **audit observability completeness**, and **file
 - `--all-gaps` — also file `recommended`-tier gaps (session replay, product analytics, etc.), not just `core`. Does not change anomaly thresholds.
 - `max_candidates=<n>` — cap tickets filed this run (default 20; config `monitor.maxCandidates`).
 
-## Threshold compatibility
-
-Resolve monitor thresholds from `.lisa.config.local.json` first and `.lisa.config.json` second, using the local-overrides-global semantics from the `config-resolution` rule. For renamed thresholds, prefer the provider-neutral key when present, then fall back to the legacy provider-named key, then fall back to the documented default:
-
-- `monitor.thresholds.minEvents24h` falls back to `monitor.thresholds.sentryMinEvents24h`, then default `1`.
-- `monitor.thresholds.faultRatePct` falls back to `monitor.thresholds.xrayFaultRatePct`, then default `5`.
-
-A project carrying both keys uses the provider-neutral value. A project carrying only the legacy key keeps using that explicit legacy value; never silently substitute the new default just because the new key is absent.
+## Monitor threshold compatibility
+
+Before resolving anomaly thresholds, inspect the committed
+`.lisa.config.json` and local `.lisa.config.local.json` separately with `jq`.
+Use a literal, fixed-path projection that returns presence and value for only
+these four exact paths; do not use `Read`, `cat`, interpolation, or a filter
+that emits either entire config into agent context:
+
+- `monitor.thresholds.minEvents24h`, then
+  `monitor.thresholds.sentryMinEvents24h`.
+- `monitor.thresholds.faultRatePct`, then
+  `monitor.thresholds.xrayFaultRatePct`.
+
+Run this fixed filter once with literal final argument `.lisa.config.json` and
+once with literal final argument `.lisa.config.local.json` when the respective
+file exists:
+
+```bash
+jq 'def threshold($object; $name):
+    if ($object | has($name)) then
+      ($object[$name] | type) as $type |
+      if $type == "number" then
+        if ($object[$name] | isfinite and (isnan | not)) then
+          {present: true, valid: true, type: "number", value: $object[$name]}
+        else
+          {present: true, valid: false, type: "non-finite-number"}
+        end
+      else
+        {present: true, valid: false, type: $type}
+      end
+    else
+      {present: false, valid: false, type: "missing"}
+    end;
+  (.monitor.thresholds | if type == "object" then . else {} end) as $t |
+  {
+    "monitor.thresholds.minEvents24h": threshold($t; "minEvents24h"),
+    "monitor.thresholds.sentryMinEvents24h": threshold($t; "sentryMinEvents24h"),
+    "monitor.thresholds.faultRatePct": threshold($t; "faultRatePct"),
+    "monitor.thresholds.xrayFaultRatePct": threshold($t; "xrayFaultRatePct")
+  }' .lisa.config.json
+```
+
+A nonzero `jq` result fails threshold collection; do not treat an uninspectable
+present file as if it were absent.
+
+For each exact path, keep the raw `jq` presence/value result from each file;
+do not inject defaults during this merge. Local presence overrides committed
+presence per path. After that merge, resolve the current key before the legacy
+key, then use default `1` for `monitor.thresholds.minEvents24h` or default `5`
+for `monitor.thresholds.faultRatePct`. Current key wins over legacy key even
+when its configured value is invalid.
+
+Every configured threshold must be a finite JSON number. If the selected path
+is null, a string, a boolean, an object, an array, or otherwise non-finite,
+fail threshold collection and report the exact path and source without echoing
+the invalid value; never fall through to a legacy value or default. Never quote
+or report either whole config. The fixed `jq` projection itself must redact
+invalid configured content: it emits only presence, validity, and a fixed type
+classification, and includes the numeric `value` field only for a finite number.
+For a valid resolution, the monitor report must include the resolved value and
+source. Report only a validated numeric resolved value and one fixed source enum:
+`local-current`, `committed-current`, `local-legacy`, `committed-legacy`, or
+`default`.
 
 ## Orchestration: agent team