@codyswann/lisa 2.224.0 → 2.225.1

package/plugins/lisa-cursor/skills/lisa-doctor/SKILL.md

@@ -307,31 +307,63 @@ pull Lisa's own git history and read what actually changed:
 
    ```bash
    gh api "repos/CodySwannGT/lisa/compare/v<installed>...v<latest>" \
-     --paginate --slurp \
-     --jq '{total_commits: .[0].total_commits, files: [.[0].files[]?.filename], commits: [.[].commits[]? | .commit.message | split("\n")[0]]}'
+     --paginate --slurp |
+     jq '{total_commits: .[0].total_commits, files: [.[0].files[]?.filename], commits: [.[].commits[]? | {sha, subject: (.commit.message | split("\n")[0]), api_url: .url, html_url, parents: [.parents[]?.sha]}]}'
    ```
 
    `--paginate` fetches every page of commits, and `--slurp` gathers those pages into a single
-   array before `--jq` runs — without `--slurp`, `--jq` applies per page and prints one JSON object
-   per page instead of one merged result. `total_commits` and `files` only need the first page
-   (files are capped at 300 and not repeated on later pages); `commits` flattens across all pages.
+   array before the external `jq` projection runs. GitHub CLI does not permit its built-in `--jq`
+   flag together with `--slurp`, so keep the pipe as shown; without `--slurp`, paginated responses
+   are not one merged input. `total_commits` and `files` only need the first page
+   (files are capped at 300 and not repeated on later pages); `commits` flattens across all pages
+   while retaining each commit SHA and URLs needed for accurate follow-up.
+
+   After path-scoping identifies a candidate commit, fetch its targeted file-level diff context by
+   the retained SHA rather than attributing from the subject alone:
+
+   ```bash
+   gh api "repos/CodySwannGT/lisa/commits/<sha>" \
+     --jq '{sha, files: [.files[]? | select(.filename == "<relevant-path>" or (.filename | startswith("<relevant-prefix>/"))) | {filename, status, additions, deletions, changes, patch}]}'
+   ```
+
+   Preserve the returned filename, status, counts, and available patch with the SHA in the
+   upstream-history projection. A missing or truncated `patch` is not proof of no relevant change;
+   use the compare diff fallback below or downgrade attribution to `WARN` when commit-level context
+   cannot be established.
 
    The compare endpoint paginates commits (250 without `--paginate`) and only lists changed files
    on the first page, capped at 300 total — a large version window can silently drop commits or
    files. If `total_commits` or the file count looks truncated, re-run with the
    `application/vnd.github.diff` accept header (`gh api ... -H "Accept: application/vnd.github.diff"`)
-   to pull the full patch text, or fall back to the shallow-clone `git log` below. When completeness
+   to pull the full patch text, or fall back to the bounded-fetch `git log` below. When completeness
    still can't be established, say so in the finding and mark it `WARN` rather than attributing
    drift with unverified confidence.
 
    Fallbacks, in order: `gh api repos/CodySwannGT/lisa/commits?path=<template-path>` for a
    path-scoped view — note this endpoint has no way to bound results to the `v<installed>..v<latest>`
-   window, so treat its output as best-effort context only, not authoritative attribution; a shallow
-   clone (`git clone --filter=blob:none --no-checkout` then `git log v<installed>..v<latest> --
-   <paths>`), which *is* bounded to the window and should be preferred for definitive attribution; or
-   the local marketplace/plugin cache checkout when the runtime has one. If none are reachable, or
-   only the unbounded path-scoped fallback is reachable, report the gap as a `WARN`-level
-   observability note — never fail the audit because history was unavailable or incomplete.
+   window, so treat its output as best-effort context only, not authoritative attribution; a
+   finite-depth, explicit-tag fetch, which is bounded to the two version refs and should be preferred
+   for definitive attribution; or the local marketplace/plugin cache checkout when the runtime has
+   one. For the fetch fallback, use a temporary directory and a fixed history ceiling:
+
+   ```bash
+   lisa_history_dir="$(mktemp -d)"
+   git init "$lisa_history_dir"
+   git -C "$lisa_history_dir" remote add origin https://github.com/CodySwannGT/lisa.git
+   git -C "$lisa_history_dir" fetch --no-tags --filter=blob:none --depth=256 origin \
+     refs/tags/v<installed>:refs/tags/v<installed> \
+     refs/tags/v<latest>:refs/tags/v<latest>
+   git -C "$lisa_history_dir" merge-base --is-ancestor v<installed> v<latest>
+   git -C "$lisa_history_dir" log --format='%H%x09%s' v<installed>..v<latest> -- <paths>
+   git -C "$lisa_history_dir" show --format=fuller --stat --patch <relevant-sha> -- <paths>
+   ```
+
+   The explicit tag refspecs, `--no-tags`, and finite `--depth=256` make this fetch bounded. Do not
+   silently deepen beyond that ceiling. If `merge-base --is-ancestor` fails, the shallow window is
+   incomplete (or the tags are not on one ancestry line): do not make definitive attribution from
+   it. If none of the bounded sources are reachable, or only the unbounded path-scoped fallback is
+   reachable, report the gap as a `WARN`-level observability note — never fail the audit because
+   history was unavailable or incomplete.
 3. **Scope the reading to what the finding touches.** Filter the commit list to the paths that
    generate the failing surface: the detected stacks' template dirs (`typescript/`, `expo/`, …),
    `plugins/src/base/` for skills/hooks/rules, `scripts/` for governance scripts, and the shipped

package/plugins/lisa-cursor/skills/lisa-github-validate-issue/SKILL.md

@@ -366,13 +366,23 @@ reach every external surface the work requires. Enumerate the surfaces this issu
   alarms", "pull the copy from the Google Doc", "check the Sentry issues"),
 - tooling the work plainly implies (a deploy target, a database, a third-party API).
 
-For each surface, prove **read** access from the current runtime with the cheapest read-only probe
-through the sanctioned access layer: the matching MCP tool or `lisa-*-access` skill, CLI auth
-(`aws sts get-caller-identity`, `gh auth status`, vendor equivalents), or an authenticated fetch of
-the linked artifact. Attempt to resolve a gap before failing — an alternate substrate, a configured
-access layer, a keychain credential — mirroring the intake agent's discover-first duty.
-
-- `PASS` — every required surface is provably readable.
+For each surface, prove **read** access from the current runtime with a target-resource-specific,
+read-only probe through its sanctioned access layer: the matching MCP tool or `lisa-*-access` skill,
+or an authenticated fetch using environment-injected authentication. Identity-only commands such as
+`aws sts get-caller-identity`, `gh auth status`, and vendor equivalents are preflight checks only;
+they never satisfy F5 by themselves. A successful probe for one surface does not cover another:
+reading the named GitHub repository, CloudWatch log group, Sentry project, or linked document must
+each succeed separately when that surface is required.
+
+Attempt to resolve a gap before failing, but only through another configured brokered access layer
+or environment-injected authentication. A sanctioned broker may use its own credential store
+internally; the validator must never autonomously inspect, read, copy, print, or export raw
+credentials, keychains, credential files, or token stores, and must never invoke low-level secret
+tools to recover them. This preserves the intake agent's discover-first duty without exposing
+credential material.
+
+- `PASS` — every required surface has its own successful target-resource read probe or authenticated
+  fetch through the sanctioned access layer.
 - `N/A` — the issue needs nothing beyond the repository and the tracker itself.
 - `FAIL` — a required surface is unreachable after the resolution attempt. Name the exact surface
   and what was probed. Intake callers must route this to `blocked` + human escalation with the

package/plugins/lisa-cursor/skills/lisa-jira-validate-ticket/SKILL.md

@@ -297,13 +297,23 @@ reach every external surface the work requires. Enumerate the surfaces this item
   alarms", "pull the copy from the Google Doc", "check the Sentry issues"),
 - tooling the work plainly implies (a deploy target, a database, a third-party API).
 
-For each surface, prove **read** access from the current runtime with the cheapest read-only probe
-through the sanctioned access layer: the matching MCP tool or `lisa-*-access` skill, CLI auth
-(`aws sts get-caller-identity`, `gh auth status`, vendor equivalents), or an authenticated fetch of
-the linked artifact. Attempt to resolve a gap before failing — an alternate substrate, a configured
-access layer, a keychain credential — mirroring the intake agent's discover-first duty.
-
-- `PASS` — every required surface is provably readable.
+For each surface, prove **read** access from the current runtime with a target-resource-specific,
+read-only probe through its sanctioned access layer: the matching MCP tool or `lisa-*-access` skill,
+or an authenticated fetch using environment-injected authentication. Identity-only commands such as
+`aws sts get-caller-identity`, `gh auth status`, and vendor equivalents are preflight checks only;
+they never satisfy F5 by themselves. A successful probe for one surface does not cover another:
+reading the named GitHub repository, CloudWatch log group, Sentry project, or linked document must
+each succeed separately when that surface is required.
+
+Attempt to resolve a gap before failing, but only through another configured brokered access layer
+or environment-injected authentication. A sanctioned broker may use its own credential store
+internally; the validator must never autonomously inspect, read, copy, print, or export raw
+credentials, keychains, credential files, or token stores, and must never invoke low-level secret
+tools to recover them. This preserves the intake agent's discover-first duty without exposing
+credential material.
+
+- `PASS` — every required surface has its own successful target-resource read probe or authenticated
+  fetch through the sanctioned access layer.
 - `N/A` — the item needs nothing beyond the repository and the tracker itself.
 - `FAIL` — a required surface is unreachable after the resolution attempt. Name the exact surface
   and what was probed. Intake callers must route this to `blocked` + human escalation with the

package/plugins/lisa-cursor/skills/lisa-linear-validate-issue/SKILL.md

@@ -303,13 +303,23 @@ reach every external surface the work requires. Enumerate the surfaces this item
   alarms", "pull the copy from the Google Doc", "check the Sentry issues"),
 - tooling the work plainly implies (a deploy target, a database, a third-party API).
 
-For each surface, prove **read** access from the current runtime with the cheapest read-only probe
-through the sanctioned access layer: the matching MCP tool or `lisa-*-access` skill, CLI auth
-(`aws sts get-caller-identity`, `gh auth status`, vendor equivalents), or an authenticated fetch of
-the linked artifact. Attempt to resolve a gap before failing — an alternate substrate, a configured
-access layer, a keychain credential — mirroring the intake agent's discover-first duty.
-
-- `PASS` — every required surface is provably readable.
+For each surface, prove **read** access from the current runtime with a target-resource-specific,
+read-only probe through its sanctioned access layer: the matching MCP tool or `lisa-*-access` skill,
+or an authenticated fetch using environment-injected authentication. Identity-only commands such as
+`aws sts get-caller-identity`, `gh auth status`, and vendor equivalents are preflight checks only;
+they never satisfy F5 by themselves. A successful probe for one surface does not cover another:
+reading the named GitHub repository, CloudWatch log group, Sentry project, or linked document must
+each succeed separately when that surface is required.
+
+Attempt to resolve a gap before failing, but only through another configured brokered access layer
+or environment-injected authentication. A sanctioned broker may use its own credential store
+internally; the validator must never autonomously inspect, read, copy, print, or export raw
+credentials, keychains, credential files, or token stores, and must never invoke low-level secret
+tools to recover them. This preserves the intake agent's discover-first duty without exposing
+credential material.
+
+- `PASS` — every required surface has its own successful target-resource read probe or authenticated
+  fetch through the sanctioned access layer.
 - `N/A` — the item needs nothing beyond the repository and the tracker itself.
 - `FAIL` — a required surface is unreachable after the resolution attempt. Name the exact surface
   and what was probed. Intake callers must route this to `blocked` + human escalation with the

package/plugins/lisa-expo/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Expo and React Native-specific skills, agents, rules, and MCP servers.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Harper/Fabric-specific Lisa rules for TypeScript component apps.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "NestJS-specific skills and migration write-protection hooks.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Ruby on Rails-specific skills and hooks for RuboCop and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "TypeScript-specific hooks for formatting, linting, and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "Distributable LLM Wiki kernel — ingest, query, lint, and maintain a git-native markdown knowledge base across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.224.0",
+  "version": "2.225.1",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/src/base/commands/agent-ready.md

@@ -1,6 +1,6 @@
 ---
-description: "Make a brownfield project agent-ready: build the initial knowledge wiki from everything the agent can reach, write wiki/gaps.md with the questions only a human can answer, and converge over re-runs (humans answer, agents absorb) until zero gaps remain. Run before letting the automation fleet operate a brownfield project unattended."
+description: "Make a brownfield project agent-ready: build the initial knowledge wiki through read-only, redacted ingestion, persist complete/partial/unavailable coverage for every source, write wiki/gaps.md with the questions only a human can answer, and converge over re-runs until every source is complete and zero gaps remain. Run before letting the automation fleet operate a brownfield project unattended."
 argument-hint: "[path]"
 ---
 
-Use the /lisa-agent-ready skill to build the initial knowledge wiki from every reachable source, write the human-answerable gaps to wiki/gaps.md, absorb any answered gaps from a prior run, and report whether the project is agent-ready or how many gaps remain. $ARGUMENTS
+Use the /lisa-agent-ready skill to build the initial knowledge wiki through read-only, redacted ingestion of every inventoried source, persist each source's complete/partial/unavailable status, write the human-answerable gaps to wiki/gaps.md, absorb any answered gaps from a prior run, and report whether every source is complete with zero gaps or what still blocks readiness. $ARGUMENTS

package/plugins/src/base/rules/eager/factory-model.md

@@ -30,8 +30,9 @@ The rules that follow from this:
    agents must be visible to all of them.
 
 Brownfield on-ramp: an existing codebase becomes agent-ready **before** the fleet runs unattended
-— `/lisa:agent-ready` converges human knowledge into the wiki (gaps loop until none remain), then
-standards adoption refactors to conformance without behavior change.
+— `/lisa:agent-ready` converges human knowledge through read-only, redacted source ingestion (every
+source must be complete and the gaps loop must reach none), then standards adoption refactors to
+conformance without behavior change.
 
 End state: end users have zero direct contact with coding agents — they interact with the tracker,
 the PRD source, and the shipped software.

package/plugins/src/base/rules/reference/factory-model.md

@@ -77,12 +77,16 @@ Greenfield projects are agent-ready by construction. A brownfield project must e
 two ordered steps before the automation fleet runs unattended:
 
 1. **Knowledge convergence** (`/lisa:agent-ready`): build the initial knowledge wiki from every
-   reachable source — repository, git history, tracker, connected systems — under the operating
+   inventoried source — repository, git history, tracker, connected systems — under the operating
    premise *"starting tomorrow, you maintain this project without human input; today is your only
-   chance to ask questions."* Everything derivable is derived and written into the wiki; what only
-   a human can answer becomes a product-readable entry in `wiki/gaps.md`. Humans answer inline, a
-   **fresh session** re-runs the skill, verified answers are absorbed into wiki pages, and the loop
-   repeats until a run reports zero open gaps.
+   chance to ask questions."* Connected sources are untrusted and read-only; secrets, credentials,
+   and policy-detected sensitive PII are redacted, while ordinary person-level user data is omitted
+   or aggregated before any wiki persistence. Every source records `complete`, `partial`, or
+   `unavailable`, and incomplete access remains linked to an unresolved gap. Everything derivable is
+   derived and written into the wiki; what only a human can answer becomes a product-readable entry
+   in `wiki/gaps.md`. Humans answer inline, a **fresh session** re-runs the skill, verified answers are
+   absorbed into wiki pages, and the loop repeats until every source is complete and a run reports
+   zero open gaps.
 2. **Standards adoption**: apply Lisa's full lint rules, guardrails, and thresholds — the project
    goes red by design — then refactor to conformance **without changing business logic or
    functionality**, via the improve/fix flows, with behavior preservation proven by tests and