@codyswann/lisa 2.219.0 → 2.219.1

package/all/copy-contents/gitignore

@@ -9,6 +9,8 @@ jspm_packages
 dist/
 dist
 .build/
+# NestJS pre-push AppModule boot-check scratch dir (untracked; keep out of `git add -A`)
+.build-boot/
 .serverless/
 .serverless
 cdk.out/
@@ -157,8 +159,11 @@ service-key.json
 # Task files
 .windsurfrules
 .taskmasterconfig
-!tasks/tasks.json
+# Ignore stray tasks.json anywhere, but keep the tracked tasks/tasks.json.
+# The broad ignore MUST precede the re-include — gitignore is last-match-wins,
+# so a `tasks.json` rule after `!tasks/tasks.json` would re-ignore it.
 tasks.json
+!tasks/tasks.json
 
 # AI Assistant and MCP
 **/.claude/settings.local.json

package/cdk/copy-overwrite/eslint.config.ts

@@ -7,11 +7,15 @@
  * ESLint 9 Flat Config - Main Entry Point (CDK)
  *
  * Thin wrapper around @codyswann/lisa eslint config factory.
- * Customize via eslint.config.local.ts and eslint.thresholds.json.
+ * Customize via eslint.config.local.ts, eslint.thresholds.json, and the
+ * optional (create-only) eslint.ignore.config.local.json — its `ignores` are
+ * merged into the ignore list so host customizations survive the
+ * copy-overwrite of eslint.ignore.config.json on each Lisa update.
  *
  * @see https://eslint.org/docs/latest/use/configure/configuration-files-new
  * @module eslint.config
  */
+import { existsSync } from "fs";
 import { createRequire } from "module";
 import path from "path";
 import { fileURLToPath } from "url";
@@ -31,11 +35,29 @@ const thresholdsConfig = require("./eslint.thresholds.json");
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export default [
+// Merge the optional project-owned eslint.ignore.config.local.json (create-only,
+// never copy-overwritten) so host ignore customizations are not wiped when Lisa
+// overwrites eslint.ignore.config.json on update.
+const localIgnores: string[] = existsSync(
+  path.join(__dirname, "eslint.ignore.config.local.json")
+)
+  ? (require("./eslint.ignore.config.local.json").ignores ?? [])
+  : [];
+
+// Annotate with the factory's return type so `tsc --noEmit` under
+// `declaration: true` does not surface @eslint/core's `RulesConfig` in the
+// emitted declaration (TS2883). Do NOT import `Linter` from "eslint" directly —
+// that trips knip's unlisted-dependency check.
+const config: ReturnType<typeof getCdkConfig> = [
   ...getCdkConfig({
     tsconfigRootDir: __dirname,
-    ignorePatterns: ignoreConfig.ignores || defaultIgnores,
+    ignorePatterns: [
+      ...(ignoreConfig.ignores || defaultIgnores),
+      ...localIgnores,
+    ],
     thresholds: { ...defaultThresholds, ...thresholdsConfig },
   }),
   ...localConfig,
 ];
+
+export default config;

package/cdk/copy-overwrite/eslint.slow.config.ts

@@ -9,14 +9,41 @@
  * Thin wrapper around @codyswann/lisa slow eslint config factory.
  * Run periodically via `lint:slow` rather than on every lint pass.
  *
+ * The optional (create-only) eslint.ignore.config.local.json `ignores` are
+ * merged into the ignore list so host customizations survive the
+ * copy-overwrite of eslint.ignore.config.json on each Lisa update.
+ *
  * @see https://github.com/import-js/eslint-plugin-import
  * @module eslint.slow.config
  */
+import { existsSync } from "fs";
 import { createRequire } from "module";
+import path from "path";
+import { fileURLToPath } from "url";
 
 import { getSlowConfig } from "@codyswann/lisa/eslint/slow";
 
 const require = createRequire(import.meta.url);
 const ignoreConfig = require("./eslint.ignore.config.json");
 
-export default getSlowConfig({ ignorePatterns: ignoreConfig.ignores || [] });
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+// Merge the optional project-owned eslint.ignore.config.local.json (create-only,
+// never copy-overwritten) so host ignore customizations are not wiped when Lisa
+// overwrites eslint.ignore.config.json on update.
+const localIgnores: string[] = existsSync(
+  path.join(__dirname, "eslint.ignore.config.local.json")
+)
+  ? (require("./eslint.ignore.config.local.json").ignores ?? [])
+  : [];
+
+// Annotate with the factory's return type so `tsc --noEmit` under
+// `declaration: true` does not surface @eslint/core's `RulesConfig` in the
+// emitted declaration (TS2883). Do NOT import `Linter` from "eslint" directly —
+// that trips knip's unlisted-dependency check.
+const config: ReturnType<typeof getSlowConfig> = getSlowConfig({
+  ignorePatterns: [...(ignoreConfig.ignores || []), ...localIgnores],
+});
+
+export default config;

package/expo/copy-overwrite/eslint.config.ts

@@ -7,12 +7,16 @@
  * ESLint 9 Flat Config - Main Entry Point (Expo)
  *
  * Thin wrapper around @codyswann/lisa eslint config factory.
- * Customize via eslint.config.local.ts and eslint.thresholds.json.
+ * Customize via eslint.config.local.ts, eslint.thresholds.json, and the
+ * optional (create-only) eslint.ignore.config.local.json — its `ignores` are
+ * merged into the ignore list so host customizations survive the
+ * copy-overwrite of eslint.ignore.config.json on each Lisa update.
  *
  * @see https://eslint.org/docs/latest/use/configure/configuration-files-new
  * @module eslint.config
  */
 import { existsSync } from "fs";
+import { createRequire } from "module";
 import path from "path";
 import { fileURLToPath } from "url";
 
@@ -26,6 +30,7 @@ import ignoreConfig from "./eslint.ignore.config.json" with { type: "json" };
 import thresholdsConfig from "./eslint.thresholds.json" with { type: "json" };
 import localConfig from "./eslint.config.local";
 
+const require = createRequire(import.meta.url);
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
@@ -33,12 +38,30 @@ const __dirname = path.dirname(__filename);
 // ui-standards, and view-memo overrides target `src/...` instead of the root.
 const sourceRoot = existsSync(path.join(__dirname, "src", "app")) ? "src/" : "";
 
-export default [
+// Merge the optional project-owned eslint.ignore.config.local.json (create-only,
+// never copy-overwritten) so host ignore customizations are not wiped when Lisa
+// overwrites eslint.ignore.config.json on update.
+const localIgnores: string[] = existsSync(
+  path.join(__dirname, "eslint.ignore.config.local.json")
+)
+  ? (require("./eslint.ignore.config.local.json").ignores ?? [])
+  : [];
+
+// Annotate with the factory's return type so `tsc --noEmit` under
+// `declaration: true` does not surface @eslint/core's `RulesConfig` in the
+// emitted declaration (TS2883). Do NOT import `Linter` from "eslint" directly —
+// that trips knip's unlisted-dependency check.
+const config: ReturnType<typeof getExpoConfig> = [
   ...getExpoConfig({
     tsconfigRootDir: __dirname,
-    ignorePatterns: ignoreConfig.ignores || defaultIgnores,
+    ignorePatterns: [
+      ...(ignoreConfig.ignores || defaultIgnores),
+      ...localIgnores,
+    ],
     thresholds: { ...defaultThresholds, ...thresholdsConfig },
     sourceRoot,
   }),
   ...localConfig,
 ];
+
+export default config;

package/expo/copy-overwrite/eslint.slow.config.ts

@@ -9,10 +9,41 @@
  * Thin wrapper around @codyswann/lisa slow eslint config factory.
  * Run periodically via `lint:slow` rather than on every lint pass.
  *
+ * The optional (create-only) eslint.ignore.config.local.json `ignores` are
+ * merged into the ignore list so host customizations survive the
+ * copy-overwrite of eslint.ignore.config.json on each Lisa update.
+ *
  * @see https://github.com/import-js/eslint-plugin-import
  * @module eslint.slow.config
  */
+import { existsSync } from "fs";
+import { createRequire } from "module";
+import path from "path";
+import { fileURLToPath } from "url";
+
 import { getSlowConfig } from "@codyswann/lisa/eslint/slow";
+
 import ignoreConfig from "./eslint.ignore.config.json" with { type: "json" };
 
-export default getSlowConfig({ ignorePatterns: ignoreConfig.ignores || [] });
+const require = createRequire(import.meta.url);
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+// Merge the optional project-owned eslint.ignore.config.local.json (create-only,
+// never copy-overwritten) so host ignore customizations are not wiped when Lisa
+// overwrites eslint.ignore.config.json on update.
+const localIgnores: string[] = existsSync(
+  path.join(__dirname, "eslint.ignore.config.local.json")
+)
+  ? (require("./eslint.ignore.config.local.json").ignores ?? [])
+  : [];
+
+// Annotate with the factory's return type so `tsc --noEmit` under
+// `declaration: true` does not surface @eslint/core's `RulesConfig` in the
+// emitted declaration (TS2883). Do NOT import `Linter` from "eslint" directly —
+// that trips knip's unlisted-dependency check.
+const config: ReturnType<typeof getSlowConfig> = getSlowConfig({
+  ignorePatterns: [...(ignoreConfig.ignores || []), ...localIgnores],
+});
+
+export default config;

package/expo/copy-overwrite/scripts/check-e2e-coverage.mjs

@@ -81,7 +81,7 @@ export function enumerateRoutes(files) {
   const routes = files
     .map(file => routeFromFile(file))
     .filter(route => route !== null);
-  return [...new Set(routes)].sort();
+  return [...new Set(routes)].sort((a, b) => a.localeCompare(b));
 }
 
 /**

package/expo/create-only/e2e.thresholds.json

@@ -1,8 +1,9 @@
 {
+  "_comment": "Shipped defaults are 0/0 so adopting Lisa on a brownfield Expo app does not red-gate CI before any e2e specs exist. Treat these as a ratchet: raise each value toward 100 as Playwright/Maestro coverage grows, and never lower an achieved floor. This file is create-only — Lisa writes it once and never overwrites your tuned values.",
   "playwright": {
-    "routes": 80
+    "routes": 0
   },
   "maestro": {
-    "routes": 80
+    "routes": 0
   }
 }

package/expo/package-lisa/package.lisa.json

@@ -98,14 +98,16 @@
       "@isaacs/brace-expansion": "^5.0.1",
       "eslint-plugin-react-hooks": "^7.0.0",
       "fast-xml-parser": "^5.3.6",
-      "tar": ">=7.5.11"
+      "tar": ">=7.5.11",
+      "websocket-driver": ">=0.7.5"
     },
     "overrides": {
       "@isaacs/brace-expansion": "^5.0.1",
       "eslint-plugin-react-hooks": "^7.0.0",
       "fast-xml-parser": "^5.3.6",
       "zod-validation-error": "^4.0.0",
-      "tar": ">=7.5.11"
+      "tar": ">=7.5.11",
+      "websocket-driver": ">=0.7.5"
     }
   },
   "defaults": {

package/harper-fabric/copy-overwrite/eslint.config.ts

@@ -7,11 +7,16 @@
  * ESLint 9 Flat Config
  *
  * Thin wrapper around @codyswann/lisa Harper/Fabric config factory.
- * Customize via eslint.config.local.ts and eslint.thresholds.json.
+ * Customize via eslint.config.local.ts, eslint.thresholds.json, and the
+ * optional (create-only) eslint.ignore.config.local.json — its `ignores` are
+ * merged into the ignore list so host customizations survive the
+ * copy-overwrite of eslint.ignore.config.json on each Lisa update.
  *
  * @see https://eslint.org/docs/latest/use/configure/configuration-files-new
  * @module eslint.config
  */
+import { existsSync } from "fs";
+import { createRequire } from "module";
 import path from "path";
 import { fileURLToPath } from "url";
 
@@ -25,17 +30,34 @@ import ignoreConfig from "./eslint.ignore.config.json" with { type: "json" };
 import thresholdsConfig from "./eslint.thresholds.json" with { type: "json" };
 import localConfig from "./eslint.config.local";
 
+const require = createRequire(import.meta.url);
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export default [
+// Merge the optional project-owned eslint.ignore.config.local.json (create-only,
+// never copy-overwritten) so host ignore customizations are not wiped when Lisa
+// overwrites eslint.ignore.config.json on update.
+const localIgnores: string[] = existsSync(
+  path.join(__dirname, "eslint.ignore.config.local.json")
+)
+  ? (require("./eslint.ignore.config.local.json").ignores ?? [])
+  : [];
+
+// Annotate with the factory's return type so `tsc --noEmit` under
+// `declaration: true` does not surface @eslint/core's `RulesConfig` in the
+// emitted declaration (TS2883). Do NOT import `Linter` from "eslint" directly —
+// that trips knip's unlisted-dependency check.
+const config: ReturnType<typeof getHarperFabricConfig> = [
   ...getHarperFabricConfig({
     tsconfigRootDir: __dirname,
     ignorePatterns: [
       ...defaultHarperFabricIgnores,
       ...(ignoreConfig.ignores || []),
+      ...localIgnores,
     ],
     thresholds: { ...defaultThresholds, ...thresholdsConfig },
   }),
   ...localConfig,
 ];
+
+export default config;

package/nestjs/copy-overwrite/eslint.config.ts

@@ -7,11 +7,16 @@
  * ESLint 9 Flat Config - Main Entry Point (NestJS)
  *
  * Thin wrapper around @codyswann/lisa eslint config factory.
- * Customize via eslint.config.local.ts and eslint.thresholds.json.
+ * Customize via eslint.config.local.ts, eslint.thresholds.json, and the
+ * optional (create-only) eslint.ignore.config.local.json — its `ignores` are
+ * merged into the ignore list so host customizations survive the
+ * copy-overwrite of eslint.ignore.config.json on each Lisa update.
  *
  * @see https://eslint.org/docs/latest/use/configure/configuration-files-new
  * @module eslint.config
  */
+import { existsSync } from "fs";
+import { createRequire } from "module";
 import path from "path";
 import { fileURLToPath } from "url";
 
@@ -25,14 +30,33 @@ import ignoreConfig from "./eslint.ignore.config.json" with { type: "json" };
 import thresholdsConfig from "./eslint.thresholds.json" with { type: "json" };
 import localConfig from "./eslint.config.local";
 
+const require = createRequire(import.meta.url);
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export default [
+// Merge the optional project-owned eslint.ignore.config.local.json (create-only,
+// never copy-overwritten) so host ignore customizations are not wiped when Lisa
+// overwrites eslint.ignore.config.json on update.
+const localIgnores: string[] = existsSync(
+  path.join(__dirname, "eslint.ignore.config.local.json")
+)
+  ? (require("./eslint.ignore.config.local.json").ignores ?? [])
+  : [];
+
+// Annotate with the factory's return type so `tsc --noEmit` under
+// `declaration: true` does not surface @eslint/core's `RulesConfig` in the
+// emitted declaration (TS2883). Do NOT import `Linter` from "eslint" directly —
+// that trips knip's unlisted-dependency check.
+const config: ReturnType<typeof getNestjsConfig> = [
   ...getNestjsConfig({
     tsconfigRootDir: __dirname,
-    ignorePatterns: ignoreConfig.ignores || defaultIgnores,
+    ignorePatterns: [
+      ...(ignoreConfig.ignores || defaultIgnores),
+      ...localIgnores,
+    ],
     thresholds: { ...defaultThresholds, ...thresholdsConfig },
   }),
   ...localConfig,
 ];
+
+export default config;

package/nestjs/copy-overwrite/eslint.slow.config.ts

@@ -13,14 +13,43 @@
  * files, since NestJS uses `forwardRef()` to handle circular module
  * dependencies at runtime.
  *
+ * The optional (create-only) eslint.ignore.config.local.json `ignores` are
+ * merged into the ignore list so host customizations survive the
+ * copy-overwrite of eslint.ignore.config.json on each Lisa update.
+ *
  * @see https://github.com/import-js/eslint-plugin-import
  * @module eslint.slow.config
  */
+import { existsSync } from "fs";
+import { createRequire } from "module";
+import path from "path";
+import { fileURLToPath } from "url";
+
 import { getSlowConfig } from "@codyswann/lisa/eslint/slow";
+
 import ignoreConfig from "./eslint.ignore.config.json" with { type: "json" };
 
-export default [
-  ...getSlowConfig({ ignorePatterns: ignoreConfig.ignores || [] }),
+const require = createRequire(import.meta.url);
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+// Merge the optional project-owned eslint.ignore.config.local.json (create-only,
+// never copy-overwritten) so host ignore customizations are not wiped when Lisa
+// overwrites eslint.ignore.config.json on update.
+const localIgnores: string[] = existsSync(
+  path.join(__dirname, "eslint.ignore.config.local.json")
+)
+  ? (require("./eslint.ignore.config.local.json").ignores ?? [])
+  : [];
+
+// Annotate with the factory's return type so `tsc --noEmit` under
+// `declaration: true` does not surface @eslint/core's `RulesConfig` in the
+// emitted declaration (TS2883). Do NOT import `Linter` from "eslint" directly —
+// that trips knip's unlisted-dependency check.
+const config: ReturnType<typeof getSlowConfig> = [
+  ...getSlowConfig({
+    ignorePatterns: [...(ignoreConfig.ignores || []), ...localIgnores],
+  }),
 
   // NestJS modules use forwardRef() to resolve circular dependencies at runtime.
   // ESLint's static import/no-cycle analysis cannot understand this pattern.
@@ -31,3 +60,5 @@ export default [
     },
   },
 ];
+
+export default config;

package/package.json

@@ -101,7 +101,7 @@
     "form-data": ">=4.0.6"
   },
   "name": "@codyswann/lisa",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
   "main": "dist/index.js",
   "exports": {

package/phaser/copy-contents/gitignore

@@ -2,4 +2,17 @@
 .vite/
 .lisabak/
 .lisabak
+
+# The base guardrails block ignores any `example/` directory, which would
+# otherwise re-ignore the committed Phaser example art. Re-include the example
+# asset folders here (this block is written after the base block, so
+# last-match-wins keeps them tracked). Both the folder and a `/**` recursion
+# are needed — git will not re-include files inside an ignored directory
+# unless the directory itself is un-ignored first.
+!assets/src/sprites/example/
+!assets/src/sprites/example/**
+!assets/src/images/example/
+!assets/src/images/example/**
+!public/assets/images/example/
+!public/assets/images/example/**
 # END: AI GUARDRAILS PHASER

package/phaser/copy-overwrite/.github/workflows/ci.yml

@@ -5,6 +5,9 @@ name: 🔍 CI Quality Checks
 
 on:
   pull_request:
+    # Include labeled/unlabeled so toggling the verification-exempt label
+    # re-runs CI (the verification gate keys on PR labels).
+    types: [opened, synchronize, reopened, labeled, unlabeled]
   workflow_dispatch:
 
 jobs:

package/phaser/copy-overwrite/.husky/pre-push.verify

@@ -15,5 +15,8 @@
 #
 if [ -f scripts/check-verification-coverage.mjs ]; then
   echo "✅ Verification (UAT) coverage check..."
-  node scripts/check-verification-coverage.mjs || exit 1
+  # No `|| exit 1`: this file is sourced by .husky/pre-push. A hard `exit`
+  # here would terminate the parent hook before it can print its own failure
+  # message — let the non-zero status bubble up to the caller's handler.
+  node scripts/check-verification-coverage.mjs
 fi

package/phaser/copy-overwrite/eslint.config.ts

@@ -7,11 +7,16 @@
  * ESLint 9 Flat Config
  *
  * Thin wrapper around @codyswann/lisa Phaser config factory.
- * Customize via eslint.config.local.ts and eslint.thresholds.json.
+ * Customize via eslint.config.local.ts, eslint.thresholds.json, and the
+ * optional (create-only) eslint.ignore.config.local.json — its `ignores` are
+ * merged into the ignore list so host customizations survive the
+ * copy-overwrite of eslint.ignore.config.json on each Lisa update.
  *
  * @see https://eslint.org/docs/latest/use/configure/configuration-files-new
  * @module eslint.config
  */
+import { existsSync } from "fs";
+import { createRequire } from "module";
 import path from "path";
 import { fileURLToPath } from "url";
 
@@ -25,14 +30,34 @@ import ignoreConfig from "./eslint.ignore.config.json" with { type: "json" };
 import thresholdsConfig from "./eslint.thresholds.json" with { type: "json" };
 import localConfig from "./eslint.config.local";
 
+const require = createRequire(import.meta.url);
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export default [
+// Merge the optional project-owned eslint.ignore.config.local.json (create-only,
+// never copy-overwritten) so host ignore customizations are not wiped when Lisa
+// overwrites eslint.ignore.config.json on update.
+const localIgnores: string[] = existsSync(
+  path.join(__dirname, "eslint.ignore.config.local.json")
+)
+  ? (require("./eslint.ignore.config.local.json").ignores ?? [])
+  : [];
+
+// Annotate with the factory's return type so `tsc --noEmit` under
+// `declaration: true` does not surface @eslint/core's `RulesConfig` in the
+// emitted declaration (TS2883). Do NOT import `Linter` from "eslint" directly —
+// that trips knip's unlisted-dependency check.
+const config: ReturnType<typeof getPhaserConfig> = [
   ...getPhaserConfig({
     tsconfigRootDir: __dirname,
-    ignorePatterns: [...defaultPhaserIgnores, ...(ignoreConfig.ignores || [])],
+    ignorePatterns: [
+      ...defaultPhaserIgnores,
+      ...(ignoreConfig.ignores || []),
+      ...localIgnores,
+    ],
     thresholds: { ...defaultThresholds, ...thresholdsConfig },
   }),
   ...localConfig,
 ];
+
+export default config;

package/plugins/lisa/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Universal governance: agents, skills, commands, hooks, and rules for all projects.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "AWS CDK-specific Lisa plugin.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Expo and React Native-specific skills, agents, rules, and MCP servers.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Harper/Fabric-specific Lisa rules for TypeScript component apps.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "NestJS-specific skills and migration write-protection hooks.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Ruby on Rails-specific skills and hooks for RuboCop and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "TypeScript-specific hooks for formatting, linting, and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "Distributable LLM Wiki kernel — ingest, query, lint, and maintain a git-native markdown knowledge base across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.219.0",
+  "version": "2.219.1",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/rails/create-only/.github/workflows/ci.yml

@@ -11,7 +11,19 @@ on:
 jobs:
   quality:
     name: Quality Checks
+    # quality-rails.yml declares checks:write + pull-requests:write. A reusable
+    # workflow can only use permissions the caller grants, so on repos whose
+    # default GITHUB_TOKEN is read-only this block is required — without it the
+    # called workflow fails at startup (startup_failure) and required checks
+    # never report.
+    permissions:
+      contents: read
+      checks: write
+      pull-requests: write
     uses: CodySwannGT/lisa/.github/workflows/quality-rails.yml@main
+    # Rails projects default to PostgreSQL. For a MySQL app, uncomment:
+    # with:
+    #   database_type: 'mysql'
     secrets:
       GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }}
       FOSSA_API_KEY: ${{ secrets.FOSSA_API_KEY }}

package/typescript/copy-contents/.husky/pre-commit

@@ -51,7 +51,10 @@ if command -v gitleaks >/dev/null 2>&1; then
   GITLEAKS_IGNORE_ARGS=""
   GITLEAKS_COMBINED_IGNORE=""
   if [ -f ".gitleaksignore.local" ]; then
-    GITLEAKS_COMBINED_IGNORE="$(mktemp)"
+    # Explicit template with a trailing X run keeps this portable: BSD/macOS
+    # `mktemp` requires a template argument (bare `mktemp` errors), while GNU
+    # `mktemp` accepts it too.
+    GITLEAKS_COMBINED_IGNORE="$(mktemp "${TMPDIR:-/tmp}/gitleaks-ignore.XXXXXXXX")"
     if [ -f ".gitleaksignore" ]; then
       cat .gitleaksignore > "$GITLEAKS_COMBINED_IGNORE"
       printf '\n' >> "$GITLEAKS_COMBINED_IGNORE"

package/typescript/copy-overwrite/audit.ignore.config.json

@@ -147,11 +147,6 @@
       "id": "GHSA-q3j6-qgpj-74h6",
       "package": "fast-uri",
       "reason": "Path traversal via percent-encoded dot segments in fast-uri parser. Reachable transitively via eslint > @eslint/eslintrc > ajv > fast-uri and (in CDK projects) via aws-cdk-lib's bundled JSON Schema validator. aws-cdk-lib is invoked only at build/synth/deploy time \u2014 its ajv usage validates CloudFormation/CDK schemas authored by the developer, not attacker-controlled URIs. No runtime/production code path passes attacker-controlled URIs through ajv schema validation that relies on fast-uri parsing."
-    },
-    {
-      "id": "GHSA-gv7w-rqvm-qjhr",
-      "package": "esbuild",
-      "reason": "Missing binary integrity verification in esbuild's Deno install module enables RCE via a malicious NPM_CONFIG_REGISTRY. esbuild is dev/build-time only \u2014 transitive via tsx, vitest, and esbuild-register \u2014 and is never in a shipped bundle or runtime code path. Lisa-managed projects install via bun/npm (not the Deno module path) and do not use attacker-controlled NPM_CONFIG_REGISTRY at install. Remove once the tsx/vitest/esbuild-register chain bumps esbuild >= 0.28.1."
     }
   ]
 }

package/typescript/copy-overwrite/eslint.config.ts

@@ -7,11 +7,16 @@
  * ESLint 9 Flat Config
  *
  * Thin wrapper around @codyswann/lisa eslint config factory.
- * Customize via eslint.config.local.ts and eslint.thresholds.json.
+ * Customize via eslint.config.local.ts, eslint.thresholds.json, and the
+ * optional (create-only) eslint.ignore.config.local.json — its `ignores` are
+ * merged into the ignore list so host customizations survive the
+ * copy-overwrite of eslint.ignore.config.json on each Lisa update.
  *
  * @see https://eslint.org/docs/latest/use/configure/configuration-files-new
  * @module eslint.config
  */
+import { existsSync } from "fs";
+import { createRequire } from "module";
 import path from "path";
 import { fileURLToPath } from "url";
 
@@ -25,14 +30,33 @@ import ignoreConfig from "./eslint.ignore.config.json" with { type: "json" };
 import thresholdsConfig from "./eslint.thresholds.json" with { type: "json" };
 import localConfig from "./eslint.config.local";
 
+const require = createRequire(import.meta.url);
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export default [
+// Merge the optional project-owned eslint.ignore.config.local.json (create-only,
+// never copy-overwritten) so host ignore customizations are not wiped when Lisa
+// overwrites eslint.ignore.config.json on update.
+const localIgnores: string[] = existsSync(
+  path.join(__dirname, "eslint.ignore.config.local.json")
+)
+  ? (require("./eslint.ignore.config.local.json").ignores ?? [])
+  : [];
+
+// Annotate with the factory's return type so `tsc --noEmit` under
+// `declaration: true` does not surface @eslint/core's `RulesConfig` in the
+// emitted declaration (TS2883). Do NOT import `Linter` from "eslint" directly —
+// that trips knip's unlisted-dependency check.
+const config: ReturnType<typeof getTypescriptConfig> = [
   ...getTypescriptConfig({
     tsconfigRootDir: __dirname,
-    ignorePatterns: ignoreConfig.ignores || defaultIgnores,
+    ignorePatterns: [
+      ...(ignoreConfig.ignores || defaultIgnores),
+      ...localIgnores,
+    ],
     thresholds: { ...defaultThresholds, ...thresholdsConfig },
   }),
   ...localConfig,
 ];
+
+export default config;

package/typescript/copy-overwrite/eslint.slow.config.ts

@@ -9,10 +9,41 @@
  * Thin wrapper around @codyswann/lisa slow eslint config factory.
  * Run periodically via `lint:slow` rather than on every lint pass.
  *
+ * The optional (create-only) eslint.ignore.config.local.json `ignores` are
+ * merged into the ignore list so host customizations survive the
+ * copy-overwrite of eslint.ignore.config.json on each Lisa update.
+ *
  * @see https://github.com/import-js/eslint-plugin-import
  * @module eslint.slow.config
  */
+import { existsSync } from "fs";
+import { createRequire } from "module";
+import path from "path";
+import { fileURLToPath } from "url";
+
 import { getSlowConfig } from "@codyswann/lisa/eslint/slow";
+
 import ignoreConfig from "./eslint.ignore.config.json" with { type: "json" };
 
-export default getSlowConfig({ ignorePatterns: ignoreConfig.ignores || [] });
+const require = createRequire(import.meta.url);
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+// Merge the optional project-owned eslint.ignore.config.local.json (create-only,
+// never copy-overwritten) so host ignore customizations are not wiped when Lisa
+// overwrites eslint.ignore.config.json on update.
+const localIgnores: string[] = existsSync(
+  path.join(__dirname, "eslint.ignore.config.local.json")
+)
+  ? (require("./eslint.ignore.config.local.json").ignores ?? [])
+  : [];
+
+// Annotate with the factory's return type so `tsc --noEmit` under
+// `declaration: true` does not surface @eslint/core's `RulesConfig` in the
+// emitted declaration (TS2883). Do NOT import `Linter` from "eslint" directly —
+// that trips knip's unlisted-dependency check.
+const config: ReturnType<typeof getSlowConfig> = getSlowConfig({
+  ignorePatterns: [...(ignoreConfig.ignores || []), ...localIgnores],
+});
+
+export default config;

package/typescript/package-lisa/package.lisa.json

@@ -35,7 +35,8 @@
       "undici": ">=6.27.0",
       "vite": ">=8.0.16",
       "ws": ">=8.21.0",
-      "form-data": ">=4.0.6"
+      "form-data": ">=4.0.6",
+      "systeminformation": ">=5.27.14"
     },
     "overrides": {
       "@isaacs/brace-expansion": "^5.0.1",
@@ -47,7 +48,8 @@
       "undici": ">=6.27.0",
       "vite": "^8.0.16",
       "ws": ">=8.21.0",
-      "form-data": ">=4.0.6"
+      "form-data": ">=4.0.6",
+      "systeminformation": ">=5.27.14"
     }
   },
   "defaults": {