@codyswann/lisa 2.264.0 → 2.266.0

package/dist/core/template-ownership.js

@@ -0,0 +1,123 @@
+const CREATE_ONLY = "create-only";
+const COPY_OVERWRITE = "copy-overwrite";
+/**
+ * Apply Lisa's exact ignore, deletion, learnings, and ownership precedence.
+ * @param input - Candidate plus precomputed project ownership state
+ * @returns Whether the candidate is applicable and, when omitted, why
+ */
+export function decideTemplateOwnership(input) {
+    if (input.ignored)
+        return { process: false, reason: "ignored" };
+    const isLearnings = input.projectLearningsPath !== undefined &&
+        input.relativePath === input.projectLearningsPath;
+    if (isLearnings &&
+        input.strategy === CREATE_ONLY &&
+        input.suppressLearningsSeed) {
+        return { process: false, reason: "suppressed-learnings-seed" };
+    }
+    if (input.pendingDeletion && !isLearnings) {
+        return { process: false, reason: "pending-deletion" };
+    }
+    if (isLearnings && input.strategy !== CREATE_ONLY) {
+        return { process: false, reason: "project-learnings-owned" };
+    }
+    const createOnlyDecision = createOnlyOwnership(input);
+    if (createOnlyDecision !== undefined)
+        return createOnlyDecision;
+    if (input.strategy !== COPY_OVERWRITE)
+        return { process: true };
+    return copyOverwriteOwnership(input);
+}
+/**
+ * Resolve same-strategy create-only ownership.
+ * @param input - Ownership inputs
+ * @returns Skip decision when another stack owns the path
+ */
+function createOnlyOwnership(input) {
+    return input.strategy === CREATE_ONLY &&
+        input.createOnlyOwner !== undefined &&
+        input.createOnlyOwner !== input.currentType
+        ? {
+            process: false,
+            reason: "create-only-override",
+            owner: input.createOnlyOwner,
+        }
+        : undefined;
+}
+/**
+ * Resolve cross-strategy and same-strategy overwrite ownership.
+ * @param input - Ownership inputs
+ * @returns Process or skip decision
+ */
+function copyOverwriteOwnership(input) {
+    if (input.createOnlyOwner !== undefined &&
+        input.createOnlyOwner !== input.currentType &&
+        isMoreSpecific(input.createOnlyOwner, input.currentType, input.orderedTypes)) {
+        return {
+            process: false,
+            reason: "create-only-cross-owner",
+            owner: input.createOnlyOwner,
+        };
+    }
+    if (input.copyOverwriteOwner !== undefined &&
+        input.copyOverwriteOwner !== input.currentType) {
+        return {
+            process: false,
+            reason: "copy-overwrite-override",
+            owner: input.copyOverwriteOwner,
+        };
+    }
+    return { process: true };
+}
+/**
+ * Render one stable human-readable skip reason.
+ * @param decision - Skip decision
+ * @returns Stable operator-facing reason
+ */
+export function templateSkipDescription(decision) {
+    const owner = decision.owner;
+    switch (decision.reason) {
+        case "suppressed-learnings-seed":
+            return "legacy learnings ledger pending relocation";
+        case "pending-deletion":
+            return "pending deletion by detected type";
+        case "project-learnings-owned":
+            return "owned by all/create-only";
+        case "create-only-override":
+            return `overridden by ${owner}/create-only`;
+        case "create-only-cross-owner":
+            return `owned by ${owner}/create-only`;
+        case "copy-overwrite-override":
+            return `overridden by ${owner}/copy-overwrite`;
+        case "ignored":
+            return "ignored";
+    }
+}
+/**
+ * Parse one trusted deletions manifest using Lisa's paths-minus-keep contract.
+ * @param candidate - Parsed deletions.json value
+ * @returns Paths that remain pending deletion
+ */
+export function pendingDeletionPaths(candidate) {
+    if (candidate === null || typeof candidate !== "object")
+        return [];
+    const paths = Reflect.get(candidate, "paths");
+    const keep = Reflect.get(candidate, "keep");
+    if (!Array.isArray(paths) || !paths.every(path => typeof path === "string")) {
+        return [];
+    }
+    const kept = new Set(Array.isArray(keep) ? keep.filter(item => typeof item === "string") : []);
+    return paths.filter(path => !kept.has(path));
+}
+/**
+ * Compare canonical stack specificity.
+ * @param candidate - Candidate stack type
+ * @param current - Current stack type
+ * @param orderedTypes - Canonical stack order
+ * @returns Whether the candidate is more specific
+ */
+function isMoreSpecific(candidate, current, orderedTypes) {
+    return orderedTypes.indexOf(candidate) > orderedTypes.indexOf(current);
+}
+/* eslint-enable jsdoc/require-param-description, jsdoc/require-returns -- restore repository documentation defaults */
+//# sourceMappingURL=template-ownership.js.map

package/dist/core/template-ownership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-ownership.js","sourceRoot":"","sources":["../../src/core/template-ownership.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,GAAG,aAAa,CAAC;AAClC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAmCxC;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAA6B;IAE7B,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAChE,MAAM,WAAW,GACf,KAAK,CAAC,oBAAoB,KAAK,SAAS;QACxC,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,oBAAoB,CAAC;IACpD,IACE,WAAW;QACX,KAAK,CAAC,QAAQ,KAAK,WAAW;QAC9B,KAAK,CAAC,qBAAqB,EAC3B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,WAAW,IAAI,KAAK,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC/D,CAAC;IACD,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,kBAAkB,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAC;IAChE,IAAI,KAAK,CAAC,QAAQ,KAAK,cAAc;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAChE,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAC1B,KAA6B;IAE7B,OAAO,KAAK,CAAC,QAAQ,KAAK,WAAW;QACnC,KAAK,CAAC,eAAe,KAAK,SAAS;QACnC,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,WAAW;QAC3C,CAAC,CAAC;YACE,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,sBAAsB;YAC9B,KAAK,EAAE,KAAK,CAAC,eAAe;SAC7B;QACH,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAC7B,KAA6B;IAE7B,IACE,KAAK,CAAC,eAAe,KAAK,SAAS;QACnC,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,WAAW;QAC3C,cAAc,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,EAC5E,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,yBAAyB;YACjC,KAAK,EAAE,KAAK,CAAC,eAAe;SAC7B,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,kBAAkB,KAAK,SAAS;QACtC,KAAK,CAAC,kBAAkB,KAAK,KAAK,CAAC,WAAW,EAC9C,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,yBAAyB;YACjC,KAAK,EAAE,KAAK,CAAC,kBAAkB;SAChC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAwE;IAExE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxB,KAAK,2BAA2B;YAC9B,OAAO,4CAA4C,CAAC;QACtD,KAAK,kBAAkB;YACrB,OAAO,mCAAmC,CAAC;QAC7C,KAAK,yBAAyB;YAC5B,OAAO,0BAA0B,CAAC;QACpC,KAAK,sBAAsB;YACzB,OAAO,iBAAiB,KAAK,cAAc,CAAC;QAC9C,KAAK,yBAAyB;YAC5B,OAAO,YAAY,KAAK,cAAc,CAAC;QACzC,KAAK,yBAAyB;YAC5B,OAAO,iBAAiB,KAAK,iBAAiB,CAAC;QACjD,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAkB;IACrD,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CACzE,CAAC;IACF,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CACrB,SAAiB,EACjB,OAAe,EACf,YAA+B;IAE/B,OAAO,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AACzE,CAAC;AACD,uHAAuH"}

package/dist/core/upstream-evidence-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upstream-evidence-manifest.d.ts","sourceRoot":"","sources":["../../src/core/upstream-evidence-manifest.ts"],"names":[],"mappings":"AACA,iFAAiF;AACjF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAk/DpE,CAAC;AAEL,4EAA4E;AAC5E,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAo+LjE,CAAC;AAEL,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAk6I/D,CAAC"}
+{"version":3,"file":"upstream-evidence-manifest.d.ts","sourceRoot":"","sources":["../../src/core/upstream-evidence-manifest.ts"],"names":[],"mappings":"AACA,iFAAiF;AACjF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAw/DpE,CAAC;AAEL,4EAA4E;AAC5E,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAq/LjE,CAAC;AAEL,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAk6I/D,CAAC"}

package/dist/core/upstream-evidence-manifest.js

@@ -208,7 +208,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "plugins/src/base/agents/pr-mining-specialist.md": "2bf5b933b43ddfbcc9c67f9b98bd68bc6c99ab0c47dca96dcd9e340960df8e55",
     "plugins/src/base/agents/product-specialist.md": "9c342b1a1c5f8c0eb874db24547fe26d259a97a74e1df5cbc26ffb635025a2e6",
     "plugins/src/base/agents/quality-specialist.md": "2a1b433fa1be1c8b23c2c83e5f247b851c61e3c253a79caf8a3eb7f326744a22",
-    "plugins/src/base/agents/security-specialist.md": "7aa6775e6e43a860338fe77e5378a61dcc34c7f76f7d3c840288ae882f6cfd38",
+    "plugins/src/base/agents/security-specialist.md": "2d592b4c2666082ef84cae8878be99b9ebd07f75ab77656409beff306f17a6b4",
     "plugins/src/base/agents/skill-evaluator.md": "83af6324ed0ee0cd5c4132429e137649c3fd616ef6fa5d4bd95579438d401894",
     "plugins/src/base/agents/spec-conformance-specialist.md": "b869bccbb1289db8ce05be6ea07827f8cdd336bb0e986167a5d08244c7936277",
     "plugins/src/base/agents/test-specialist.md": "0e6f7137b8338f76d0302cb7a930f50821b4d66dd197977012f32ab5a0c38061",
@@ -305,7 +305,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "plugins/src/base/rules/eager/automation-runbook-contract.md": "b9b4f4d82b366959e90451a2b425ac116953ac074ab6a192dc3909ec8a2be1d6",
     "plugins/src/base/rules/eager/base-rules.md": "d3a4bd518acf2c6f4e866042542f9155fdbf5b2fdad5747e1afd097bdef15351",
     "plugins/src/base/rules/eager/claim-archaeology.md": "96afa034075593dfb7433c5c990b472a6b6f7320332da42ef54b1f01fa45664b",
-    "plugins/src/base/rules/eager/claim-evidence-mapping.md": "d3428bb877c1a25639745d776e20b16c8ade7987e81c7c3bf3175fc0f12dbfb3",
+    "plugins/src/base/rules/eager/claim-evidence-mapping.md": "d12a6153b8c22db2826153c479d107c7a885e22cbcdd49e4fd8193e0cbbe8ae3",
     "plugins/src/base/rules/eager/coding-philosophy.md": "cf2c52032e0368d81f17f002fed5c957ab350d01fc4a43f66b5f366516bac54a",
     "plugins/src/base/rules/eager/config-resolution.md": "2689c1f47903a5f6c84677fbfd2f1f148096faf122b7498b21d3b0f2345c6c87",
     "plugins/src/base/rules/eager/convergent-review.md": "700e0ac9c9812316930134c92f0b2d65cee90e70cb45a27b7966edfbe6962bc3",
@@ -333,7 +333,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "plugins/src/base/rules/reference/automation-runbook-contract.md": "920469276ffb2dd3eb1bf33dbdbc740336619d68bf41ae8fda3e8a89d68ffa22",
     "plugins/src/base/rules/reference/base-rules.md": "487ea1764c4b636ca4a33b78a90e925f028bb9a54182c0795cd1bbdc437a262d",
     "plugins/src/base/rules/reference/claim-archaeology.md": "fff025d47848c768d5b2c7047de744b7151eb2e44148d2df058c87310859457b",
-    "plugins/src/base/rules/reference/claim-evidence-mapping.md": "97a7cf623f6df51d57f6d649036c04067d4fe42d4ab66230ac51306f0104b4a1",
+    "plugins/src/base/rules/reference/claim-evidence-mapping.md": "49a3bbf4e8a9a8ca9e13eeafa672517d077060cfeb5d9710881ec9f5c3f3ec75",
     "plugins/src/base/rules/reference/coding-philosophy.md": "fed8381f16a5d6793a49d84d5813d62125808cb2f4981a558b119cf63e2586d9",
     "plugins/src/base/rules/reference/config-resolution.md": "071b2c91f3b661ee493ea6f37d78f0fdea8004b4e4e7b5e94dcf232df7eceda7",
     "plugins/src/base/rules/reference/convergent-review.md": "65f309c04095179eac28f8572da3c49c0e02741c4c594fe992ff643b341a4139",
@@ -504,8 +504,8 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "plugins/src/base/skills/lisa-review-local/SKILL.md": "66defe83565ab3633a13e69ce394de64f17f2c2bddbf046bc12c8bbd0ca57f5c",
     "plugins/src/base/skills/lisa-rework-triage/SKILL.md": "3389740fc0f162be0b684625424e716a0a3e4c99c8cdb4317ec82dcfcf7b57c7",
     "plugins/src/base/skills/lisa-root-cause-analysis/SKILL.md": "2b1cb5bac2be7e8bb6b852efb0bd499cbcdca6299c342a54e0c8d872821c7364",
-    "plugins/src/base/skills/lisa-security-review/SKILL.md": "4d5c30c4d637e8438ae02f904e08eb81cde2b3c8384c55469e76ae1b91bb96bd",
-    "plugins/src/base/skills/lisa-security-zap-scan/SKILL.md": "7abb4231389b54ffeff2dd081c9100500ee6803e1e034ac2a230b173a5d1537a",
+    "plugins/src/base/skills/lisa-security-review/SKILL.md": "5a980eaf5efc4fcce66e75521ec5b1eda143a5b0d36e7157234a705dac94e3f5",
+    "plugins/src/base/skills/lisa-security-zap-scan/SKILL.md": "a5189442dbf970cc49fd089ab03c386c8a205b856e09501f6ad1966321e7e4b5",
     "plugins/src/base/skills/lisa-sentry-access/SKILL.md": "ecaf49b42bbf399781a3ebd0b1595e5a8ac44422537832e0442b2f184da0c83c",
     "plugins/src/base/skills/lisa-setup-atlassian/SKILL.md": "3820aecb57d184fde1cfa988e7e1402d8f2a766a0b3ffbb576de5a6a72b3d5c5",
     "plugins/src/base/skills/lisa-setup-automations/SKILL.md": "b7dff30df2abe6832b39b2eab8b77adc5da14acf8b44ba59603afb619b92b8fa",
@@ -908,7 +908,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "scripts/cleanup-worktrees.sh": "5215cdecc7683e8501d23eec632d0c138bbf60f12c09b0a357451a557d8ec176",
     "scripts/copy-codex-scripts.mjs": "2d7082d5033088c85f66995aee9e3ee1e7751435e65bfde8e1cb002e6689d476",
     "scripts/copy-opencode-plugin-templates.mjs": "bef79103c293b73d7c37e8a8c9fa1b4f1f2e53367898a6326b12f8a0ba8ddc43",
-    "scripts/detect-stale-workflow-inputs.mjs": "6ae55754a69157bd79e1fe2b5f5b5e6c6e0fbf966a03b9ce643ea8c5248f50b1",
+    "scripts/detect-stale-workflow-inputs.mjs": "204e64ccbd87de0edde0045668814638181dec2fa439fa4d8f06a0aaf5082af4",
     "scripts/fix-namespace-test-assertions.mjs": "bfed6f27753660b38457c3f0a032a6c866691666d2d5d61fc10c3fb2f4f4f412",
     "scripts/fix-test-assertions-pass2.mjs": "baca043a291120ff52ce61c06397206dc21ca3bef9c23a5975b9c1f896d963c7",
     "scripts/fix-test-assertions.mjs": "59b5e8cc31e7c7323d20bd180f2ae97c08a9685758483b6fe00ba77317a845f2",
@@ -927,6 +927,8 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "scripts/internal-opencode-skill-policy.json": "d7191650d8a12727549b67df61dbfa61e16cfb9cc31e461cd98d253ceab1612a",
     "scripts/lib/nest-plugin-commands.mjs": "c52b2f48edbc17edcc60ae33536549829cbc279c60c5d85d912ac6609cae9bea",
     "scripts/lib/per-agent-hook-filter.mjs": "2565e2cb414f253fa7fd014021120ec9760f4e716bf0ae69e5f7de09a5b966c1",
+    "scripts/lib/reusable-workflow-contract.d.mts": "791f01b55dd7a6b5d9a5f4cb9c44167caa146c2fc3c31a2ae4c2d8a350adc2f1",
+    "scripts/lib/reusable-workflow-contract.mjs": "134ee2a327290f066f1eb318b5ed53c711557c3e10ed462c00ff5c97cfb20863",
     "scripts/lisa-commit-and-pr-local.sh": "605409c3ce6ec38ad3275604291a1ceae98f7807a605654263bc14f811c03903",
     "scripts/lisa-github-environments.sh": "0a76e92f108519abaf3e29991299ec3b0db20ea533e69e6d2a53d802dba9c370",
     "scripts/lisa-github-repo-settings.sh": "4afbccdfb08c62ba13afee42ec8561a28facf87c61f6f4b80000115328364d54",
@@ -944,6 +946,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "scripts/update-node-version.ts": "a286750ac2006dd84209bb713e85f994d8d15d9bb596ec3e287a187672e5072d",
     "scripts/update-test-skill-paths.mjs": "e26a3ac716c33013e22bf5223a58457452f5af2038218a0e3a51c244eab5ddc9",
     "scripts/verify-health-contract-built.mjs": "9e090e3378325c4193e96ba03acff17fb63e40c9e7f2dd89296f72353ab6ba88",
+    "scripts/verify-health-deterministic-built.mjs": "ab19427ec4b1dfaa06037cc23b7fc06319b4c12d8c6b67808dddd77e5367fd12",
     "tsconfig/base.json": "d04a105ec81aa9dc69d230d4a83406d920c305b6fc13c641ebafde0c41fc658f",
     "tsconfig/build.json": "a743350ea93b0e8d2151c974c5a8a4cbcf946cd7f06c40d83146079bde70afe1",
     "tsconfig/cdk.json": "f9c0bfad5e40ce30bc037f08abf2f8feb78963484f2929ab17ec187ffe34b732",
@@ -6176,6 +6179,8 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "scripts/internal-opencode-skill-policy.json": true,
     "scripts/lib/nest-plugin-commands.mjs": true,
     "scripts/lib/per-agent-hook-filter.mjs": true,
+    "scripts/lib/reusable-workflow-contract.d.mts": true,
+    "scripts/lib/reusable-workflow-contract.mjs": true,
     "scripts/lisa-commit-and-pr-local.sh": true,
     "scripts/lisa-github-environments.sh": true,
     "scripts/lisa-github-repo-settings.sh": true,
@@ -6193,6 +6198,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "scripts/update-node-version.ts": true,
     "scripts/update-test-skill-paths.mjs": true,
     "scripts/verify-health-contract-built.mjs": true,
+    "scripts/verify-health-deterministic-built.mjs": true,
     "sgconfig.yml": true,
     "specs/.keep": true,
     "src/agy/mcp-installer.ts": true,
@@ -6322,6 +6328,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "src/core/project-config-kane.ts": true,
     "src/core/project-config.ts": true,
     "src/core/self-apply.ts": true,
+    "src/core/template-ownership.ts": true,
     "src/core/upstream-attribution-body.ts": true,
     "src/detection/detector.interface.ts": true,
     "src/detection/detectors/cdk.ts": true,
@@ -6335,10 +6342,20 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "src/detection/index.ts": true,
     "src/errors/index.ts": true,
     "src/health/contract.ts": true,
+    "src/health/deadline.ts": true,
+    "src/health/deterministic.ts": true,
     "src/health/directory-sync.ts": true,
+    "src/health/finding-utils.ts": true,
+    "src/health/governance-probes.ts": true,
+    "src/health/hook-inspection.ts": true,
     "src/health/index.ts": true,
+    "src/health/plugin-inspection.ts": true,
+    "src/health/project-probes.ts": true,
+    "src/health/read-only-fs.ts": true,
+    "src/health/ruleset-inspection.ts": true,
     "src/health/storage.ts": true,
     "src/health/strict-validation.ts": true,
+    "src/health/template-inspection.ts": true,
     "src/index.ts": true,
     "src/logging/console-logger.ts": true,
     "src/logging/index.ts": true,
@@ -6576,6 +6593,8 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "tests/unit/detection/detectors.test.ts": true,
     "tests/unit/governance-contracts.test.ts": true,
     "tests/unit/health/contract.test.ts": true,
+    "tests/unit/health/deterministic-regressions.test.ts": true,
+    "tests/unit/health/deterministic.test.ts": true,
     "tests/unit/health/directory-sync.test.ts": true,
     "tests/unit/health/gitignore.test.ts": true,
     "tests/unit/health/package-surfaces.test.ts": true,
@@ -6773,6 +6792,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "tests/unit/strategies/repair-intake-contract.test.ts": true,
     "tests/unit/strategies/repo-scope-claim.test.ts": true,
     "tests/unit/strategies/rework-triage-skill.test.ts": true,
+    "tests/unit/strategies/security-two-bucket-contract.test.ts": true,
     "tests/unit/strategies/setup-confluence-verified-parent.test.ts": true,
     "tests/unit/strategies/setup-github-prd-verified-label.test.ts": true,
     "tests/unit/strategies/setup-github-project-verification.test.ts": true,