@codyswann/lisa 2.321.0 → 2.321.2

package/dist/core/upstream-evidence-manifest.js

@@ -93,7 +93,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "expo/github-rulesets/playwright.json": "b57ccd12f768a1466a9681528858e59764bd0efedcbcb3a96c2fb40719bbd579",
     "expo/merge/.claude/settings.json": "e97b33d7ad86b71abba94ab957d725e34c3cafca455e92fba0b29ebabc3b73d1",
     "expo/merge/.oxlintrc.json": "2a0ea2191abd5b377aed4b525a4a97d3eefb1d9e41c845c02ee0daac75df6b1f",
-    "expo/package-lisa/package.lisa.json": "430a2e42be94f5eda106d8e89ec33d1927813fe66851575d5f3453a8f2b2ab98",
+    "expo/package-lisa/package.lisa.json": "c0d30ba53a179acb8720c4443b5f5fd6df092f735b9e3fbcea34f6b4995def0f",
     "harper-fabric/copy-contents/.prettierignore": "478c782f4c5611187e21584dfd5522e37fc636c5eb03394fea3db45321c6712c",
     "harper-fabric/copy-contents/gitignore": "d091c40fd0ea3068491f1be0d6510090ae872ca95d0d058ef4595d6492d13897",
     "harper-fabric/copy-overwrite/.github/dependabot.yml": "e28fde0d906478b3fb7d6b7fc16f7fc5a4a0a20d8160f547f2b4be97c90578b7",
@@ -559,10 +559,10 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "plugins/src/base/skills/lisa-setup-linear/SKILL.md": "ec76f832a6df6f58b163f7f5ba6826ed2fcbddc91e44a8372e874858e4d0c518",
     "plugins/src/base/skills/lisa-setup-notion/SKILL.md": "f5a1e9290789fd1c33675168d30461fb24a11c98a433ef777c1f536bc2f905ef",
     "plugins/src/base/skills/lisa-setup-remote-aws/SKILL.md": "80fbf157f9c562c033886c25a99b37356602edd9e61cd2d492f339769ddcf97e",
-    "plugins/src/base/skills/lisa-setup-remote-env/SKILL.md": "21de7c108a5f372d76416dfd3e2d229053d0d23c84fe88e646719a97405bd1e9",
+    "plugins/src/base/skills/lisa-setup-remote-env/SKILL.md": "313d1b96500950b566a3e22bc1620662a76635c89c6c90c2648d48e0497574b7",
     "plugins/src/base/skills/lisa-setup-remote-env/assets/session-start.sh": "6e3871ec2f8d56b8ebb85376ebdd3956f3ed8fa4f7b278c2ed90ca9b8845897c",
-    "plugins/src/base/skills/lisa-setup-remote-env/assets/setup.sh": "a043074dd52e3f9b4b4a32bdd8b5eaa728160e5a0622a8a18388e6e26c7d25e3",
-    "plugins/src/base/skills/lisa-setup-remote-env/scripts/setup-remote-env.mjs": "5e79d25368ddbc51ab2d9616a921b6eaea0e7fbee65de74a404b7b880f54fd9e",
+    "plugins/src/base/skills/lisa-setup-remote-env/assets/setup.sh": "f1b492196f41adcceb1c2a2ada048355e7f36735de3be0dfe028e472b452f28c",
+    "plugins/src/base/skills/lisa-setup-remote-env/scripts/setup-remote-env.mjs": "0ac27775b2a11cc7ab6368aba4df7466cbf8cf57fd5470a807e24547b36cc94f",
     "plugins/src/base/skills/lisa-setup-remote-env/scripts/toolchain.mjs": "ff66d33ba41a068d09be18f81ac68988238c2afa1d4e3733ae906b73eea74324",
     "plugins/src/base/skills/lisa-setup-remote-env/scripts/verify-remote-env.mjs": "82bc2a27a0a5afb2ff413a88365c619fd7f0eaada5de3ccabf2000938f0607a4",
     "plugins/src/base/skills/lisa-setup-sonar/SKILL.md": "53fbd8acce4b5e47e88195a7b90d5be424fa6ef7ad872f52c50467c690664c3b",
@@ -1077,7 +1077,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "typescript/github-rulesets/quality-checks.json": "d92599b203071b99b8fac1422b8493d2546138961ef04ba98176bc400af60945",
     "typescript/merge/.claude/settings.json": "834e6456cae81f45073bbbb08bf731fef043efb30cae2658cb4a59f17e66d165",
     "typescript/merge/.oxlintrc.json": "4debc093acfd263eb81ae15894073ebf098513204f45f40b83fb8fa5353fa1f8",
-    "typescript/package-lisa/package.lisa.json": "6a70ca152ac9daf5f1546cbaa876818b9a63360cf784870879d8d199fafe22d4",
+    "typescript/package-lisa/package.lisa.json": "5d66792e54b1ed0ca1f2103e504f77a6afb8187660404ddba24936b049568934",
     "ui/README.md": "deeb35e767ea5dd2883268835ea3ad21cbad9fa63ec8d8ff5e200f0e2a7d2751",
     "ui/index.html": "400088617ed6f16b4e52da5bfa81242d75cb09bc3ad6929eadb9f06e5365b4b6",
 });

package/expo/package-lisa/package.lisa.json

@@ -98,7 +98,7 @@
     },
     "resolutions": {
       "@isaacs/brace-expansion": "^5.0.1",
-      "brace-expansion": ">=5.0.8",
+      "brace-expansion": ">=5.0.9",
       "eslint-plugin-react-hooks": "^7.0.0",
       "fast-xml-parser": "^5.10.1",
       "tar": ">=7.5.19",
@@ -106,7 +106,7 @@
     },
     "overrides": {
       "@isaacs/brace-expansion": "^5.0.1",
-      "brace-expansion": ">=5.0.8",
+      "brace-expansion": ">=5.0.9",
       "eslint-plugin-react-hooks": "^7.0.0",
       "fast-xml-parser": "^5.10.1",
       "zod-validation-error": "^4.0.0",

package/package.json

@@ -97,7 +97,7 @@
     "postcss": ">=8.5.18",
     "undici": "^6.27.0",
     "form-data": ">=4.0.6",
-    "brace-expansion": ">=5.0.8"
+    "brace-expansion": ">=5.0.9"
   },
   "overrides": {
     "@isaacs/brace-expansion": "^5.0.1",
@@ -112,10 +112,10 @@
     "postcss": ">=8.5.18",
     "undici": "^6.27.0",
     "form-data": ">=4.0.6",
-    "brace-expansion": ">=5.0.8"
+    "brace-expansion": ">=5.0.9"
   },
   "name": "@codyswann/lisa",
-  "version": "2.321.0",
+  "version": "2.321.2",
   "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
   "main": "dist/index.js",
   "exports": {

package/plugins/lisa/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.321.0",
+  "version": "2.321.2",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.321.0",
+  "version": "2.321.2",
   "description": "Universal governance: agents, skills, commands, hooks, and rules for all projects.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/skills/lisa-setup-remote-env/SKILL.md

@@ -161,6 +161,8 @@ It reads the project's own install command from its lockfile and the bootstrap n
 
 - **`gh` is not pre-installed.** If the project's flows shell out to it, add it to `remoteEnv.tools.install`, pinned and checksummed like anything else.
 - **A proxied credential reads as the literal string `proxy-injected`.** Tools that authenticate through the GitHub proxy work; a script that reads the variable directly gets the placeholder. The read-back asserts this rather than leaving it to be discovered against a live service.
+- **The setup field runs from `$HOME`, not from the checkout.** The emitted setup command starts with `cd <repo-name>` on purpose; without it the package install runs one directory above the clone and cannot find `package.json`.
+- **Trusted network access is not enough for provider CLIs.** Use Custom and include package registries, GitHub, cloud SDK hosts, and the bootstrap credential manager API.
 
 ### One environment per project, pinned locally
 

package/plugins/lisa/.codex-plugin/skills/lisa-setup-remote-env/assets/setup.sh

@@ -13,6 +13,16 @@
 # and emphatically not in a vendor settings field.
 set -euo pipefail
 
+# Claude Code web runs the environment setup field from $HOME, while the
+# checkout lives at $HOME/<repo>. If this installed copy is invoked by absolute
+# path, move back to the repository root before resolving project-local files.
+script_dir="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd -P)"
+case "$script_dir" in
+  */scripts/lisa-remote-env)
+    cd "$script_dir/../.."
+    ;;
+esac
+
 # Node is the one thing that cannot be installed by the installer, since the
 # installer is written in it. Fail with an actionable message rather than a
 # "command not found" forty lines deep.

package/plugins/lisa/.codex-plugin/skills/lisa-setup-remote-env/scripts/setup-remote-env.mjs

@@ -37,7 +37,7 @@ import {
   rmSync,
   writeFileSync,
 } from "node:fs";
-import { dirname, join, resolve } from "node:path";
+import { basename, dirname, join, resolve } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 
 import { assertPinned, extractVersion, planToolchain } from "./toolchain.mjs";
@@ -337,11 +337,12 @@ export function pinEnvironment(environmentId, cwd = process.cwd()) {
  * settings page, no direct URL, and no endpoint. Emit is not a degraded option
  * here, it is the only one — so the read-back in `verify-remote-env.mjs` is
  * what makes the result trustworthy, exactly as it would be at any other tier.
- * @param {{bootstrapKey: string|null, install: string}} options Project details.
+ * @param {{bootstrapKey: string|null, install: string, repoDir?: string}} options Project details.
  * @returns {string} Text to show the operator.
  */
-export function emitClaudeWeb({ bootstrapKey, install }) {
+export function emitClaudeWeb({ bootstrapKey, install, repoDir = "lisa" }) {
   const key = bootstrapKey ?? "<secrets.bootstrap.key is not configured>";
+  const setup = `cd ${shellQuote(repoDir)} && ${install} && bash scripts/lisa-remote-env/setup.sh`;
   return [
     "Provisioning tier: EMIT — and for this surface that is the only tier.",
     "  A Claude cloud environment is account-scoped configuration edited in the",
@@ -350,7 +351,8 @@ export function emitClaudeWeb({ bootstrapKey, install }) {
     "",
     "Paste into the environment dialog",
     "---------------------------------",
-    "  Network access:  Trusted, or Custom plus any host your project needs",
+    "  Network access:  Custom plus your package registries, GitHub, cloud SDK",
+    "                   hosts, and the bootstrap credential manager API",
     "",
     "  Environment variables:",
     `    ${key}=<read this from your credential manager>`,
@@ -362,11 +364,13 @@ export function emitClaudeWeb({ bootstrapKey, install }) {
     "    is why exactly one value needs to live here.",
     "",
     "  Setup script:",
-    `    ${install} && bash scripts/lisa-remote-env/setup.sh`,
+    `    ${setup}`,
     "",
-    "    The install must come first. On a fresh container node_modules is the",
-    "    only copy of the Lisa skills present, because Claude receives them as",
-    "    an installed plugin rather than as part of the clone.",
+    `    Claude runs this field from $HOME, while the checkout is $HOME/${repoDir}.`,
+    "    The `cd` must come first, and the install must run before the setup",
+    "    script. On a fresh container node_modules is the only copy of the Lisa",
+    "    skills present, because Claude receives them as an installed plugin",
+    "    rather than as part of the clone.",
     "",
     "Commit to the repository",
     "------------------------",
@@ -467,6 +471,35 @@ export function detectInstallCommand(cwd = process.cwd()) {
   return "<your install command>";
 }
 
+/**
+ * Name the directory Claude creates under $HOME when it clones this repository.
+ *
+ * Claude cloud runs the environment setup field from $HOME, not from the
+ * checkout. The setup line therefore has to `cd` into the clone before running
+ * the project install. Prefer the configured GitHub repo name because it is the
+ * thing Claude clones; fall back to the current directory for non-GitHub tests
+ * and local dry runs.
+ * @param {string} [cwd] Repository root.
+ * @returns {string} Directory name to place after `cd`.
+ */
+export function detectRepositoryDirectory(cwd = process.cwd()) {
+  const path = join(cwd, ".lisa.config.json");
+  if (existsSync(path)) {
+    const repo = JSON.parse(readFileSync(path, "utf8")).github?.repo;
+    if (repo && !repo.includes("/") && !repo.includes("\0")) return repo;
+  }
+  return basename(cwd);
+}
+
+/**
+ * Quote a value for POSIX shell usage.
+ * @param {string} value Raw value.
+ * @returns {string} Single-quoted shell literal.
+ */
+function shellQuote(value) {
+  return "'" + String(value).replaceAll("'", "'\\''") + "'";
+}
+
 /**
  * Read the bootstrap key name, which is the one value the operator must paste.
  * @param {string} [cwd] Repository root.
@@ -519,6 +552,7 @@ async function main() {
       emitClaudeWeb({
         bootstrapKey: readBootstrapKey(),
         install: detectInstallCommand(),
+        repoDir: detectRepositoryDirectory(),
       })
     );
     return;

package/plugins/lisa/skills/lisa-setup-remote-env/SKILL.md

@@ -161,6 +161,8 @@ It reads the project's own install command from its lockfile and the bootstrap n
 
 - **`gh` is not pre-installed.** If the project's flows shell out to it, add it to `remoteEnv.tools.install`, pinned and checksummed like anything else.
 - **A proxied credential reads as the literal string `proxy-injected`.** Tools that authenticate through the GitHub proxy work; a script that reads the variable directly gets the placeholder. The read-back asserts this rather than leaving it to be discovered against a live service.
+- **The setup field runs from `$HOME`, not from the checkout.** The emitted setup command starts with `cd <repo-name>` on purpose; without it the package install runs one directory above the clone and cannot find `package.json`.
+- **Trusted network access is not enough for provider CLIs.** Use Custom and include package registries, GitHub, cloud SDK hosts, and the bootstrap credential manager API.
 
 ### One environment per project, pinned locally
 

package/plugins/lisa/skills/lisa-setup-remote-env/assets/setup.sh

@@ -13,6 +13,16 @@
 # and emphatically not in a vendor settings field.
 set -euo pipefail
 
+# Claude Code web runs the environment setup field from $HOME, while the
+# checkout lives at $HOME/<repo>. If this installed copy is invoked by absolute
+# path, move back to the repository root before resolving project-local files.
+script_dir="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd -P)"
+case "$script_dir" in
+  */scripts/lisa-remote-env)
+    cd "$script_dir/../.."
+    ;;
+esac
+
 # Node is the one thing that cannot be installed by the installer, since the
 # installer is written in it. Fail with an actionable message rather than a
 # "command not found" forty lines deep.

package/plugins/lisa/skills/lisa-setup-remote-env/scripts/setup-remote-env.mjs

@@ -37,7 +37,7 @@ import {
   rmSync,
   writeFileSync,
 } from "node:fs";
-import { dirname, join, resolve } from "node:path";
+import { basename, dirname, join, resolve } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 
 import { assertPinned, extractVersion, planToolchain } from "./toolchain.mjs";
@@ -337,11 +337,12 @@ export function pinEnvironment(environmentId, cwd = process.cwd()) {
  * settings page, no direct URL, and no endpoint. Emit is not a degraded option
  * here, it is the only one — so the read-back in `verify-remote-env.mjs` is
  * what makes the result trustworthy, exactly as it would be at any other tier.
- * @param {{bootstrapKey: string|null, install: string}} options Project details.
+ * @param {{bootstrapKey: string|null, install: string, repoDir?: string}} options Project details.
  * @returns {string} Text to show the operator.
  */
-export function emitClaudeWeb({ bootstrapKey, install }) {
+export function emitClaudeWeb({ bootstrapKey, install, repoDir = "lisa" }) {
   const key = bootstrapKey ?? "<secrets.bootstrap.key is not configured>";
+  const setup = `cd ${shellQuote(repoDir)} && ${install} && bash scripts/lisa-remote-env/setup.sh`;
   return [
     "Provisioning tier: EMIT — and for this surface that is the only tier.",
     "  A Claude cloud environment is account-scoped configuration edited in the",
@@ -350,7 +351,8 @@ export function emitClaudeWeb({ bootstrapKey, install }) {
     "",
     "Paste into the environment dialog",
     "---------------------------------",
-    "  Network access:  Trusted, or Custom plus any host your project needs",
+    "  Network access:  Custom plus your package registries, GitHub, cloud SDK",
+    "                   hosts, and the bootstrap credential manager API",
     "",
     "  Environment variables:",
     `    ${key}=<read this from your credential manager>`,
@@ -362,11 +364,13 @@ export function emitClaudeWeb({ bootstrapKey, install }) {
     "    is why exactly one value needs to live here.",
     "",
     "  Setup script:",
-    `    ${install} && bash scripts/lisa-remote-env/setup.sh`,
+    `    ${setup}`,
     "",
-    "    The install must come first. On a fresh container node_modules is the",
-    "    only copy of the Lisa skills present, because Claude receives them as",
-    "    an installed plugin rather than as part of the clone.",
+    `    Claude runs this field from $HOME, while the checkout is $HOME/${repoDir}.`,
+    "    The `cd` must come first, and the install must run before the setup",
+    "    script. On a fresh container node_modules is the only copy of the Lisa",
+    "    skills present, because Claude receives them as an installed plugin",
+    "    rather than as part of the clone.",
     "",
     "Commit to the repository",
     "------------------------",
@@ -467,6 +471,35 @@ export function detectInstallCommand(cwd = process.cwd()) {
   return "<your install command>";
 }
 
+/**
+ * Name the directory Claude creates under $HOME when it clones this repository.
+ *
+ * Claude cloud runs the environment setup field from $HOME, not from the
+ * checkout. The setup line therefore has to `cd` into the clone before running
+ * the project install. Prefer the configured GitHub repo name because it is the
+ * thing Claude clones; fall back to the current directory for non-GitHub tests
+ * and local dry runs.
+ * @param {string} [cwd] Repository root.
+ * @returns {string} Directory name to place after `cd`.
+ */
+export function detectRepositoryDirectory(cwd = process.cwd()) {
+  const path = join(cwd, ".lisa.config.json");
+  if (existsSync(path)) {
+    const repo = JSON.parse(readFileSync(path, "utf8")).github?.repo;
+    if (repo && !repo.includes("/") && !repo.includes("\0")) return repo;
+  }
+  return basename(cwd);
+}
+
+/**
+ * Quote a value for POSIX shell usage.
+ * @param {string} value Raw value.
+ * @returns {string} Single-quoted shell literal.
+ */
+function shellQuote(value) {
+  return "'" + String(value).replaceAll("'", "'\\''") + "'";
+}
+
 /**
  * Read the bootstrap key name, which is the one value the operator must paste.
  * @param {string} [cwd] Repository root.
@@ -519,6 +552,7 @@ async function main() {
       emitClaudeWeb({
         bootstrapKey: readBootstrapKey(),
         install: detectInstallCommand(),
+        repoDir: detectRepositoryDirectory(),
       })
     );
     return;

package/plugins/lisa-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.321.0",
+  "version": "2.321.2",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-agy/skills/lisa-setup-remote-env/SKILL.md

@@ -161,6 +161,8 @@ It reads the project's own install command from its lockfile and the bootstrap n
 
 - **`gh` is not pre-installed.** If the project's flows shell out to it, add it to `remoteEnv.tools.install`, pinned and checksummed like anything else.
 - **A proxied credential reads as the literal string `proxy-injected`.** Tools that authenticate through the GitHub proxy work; a script that reads the variable directly gets the placeholder. The read-back asserts this rather than leaving it to be discovered against a live service.
+- **The setup field runs from `$HOME`, not from the checkout.** The emitted setup command starts with `cd <repo-name>` on purpose; without it the package install runs one directory above the clone and cannot find `package.json`.
+- **Trusted network access is not enough for provider CLIs.** Use Custom and include package registries, GitHub, cloud SDK hosts, and the bootstrap credential manager API.
 
 ### One environment per project, pinned locally
 

package/plugins/lisa-agy/skills/lisa-setup-remote-env/assets/setup.sh

@@ -13,6 +13,16 @@
 # and emphatically not in a vendor settings field.
 set -euo pipefail
 
+# Claude Code web runs the environment setup field from $HOME, while the
+# checkout lives at $HOME/<repo>. If this installed copy is invoked by absolute
+# path, move back to the repository root before resolving project-local files.
+script_dir="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd -P)"
+case "$script_dir" in
+  */scripts/lisa-remote-env)
+    cd "$script_dir/../.."
+    ;;
+esac
+
 # Node is the one thing that cannot be installed by the installer, since the
 # installer is written in it. Fail with an actionable message rather than a
 # "command not found" forty lines deep.

package/plugins/lisa-agy/skills/lisa-setup-remote-env/scripts/setup-remote-env.mjs

@@ -37,7 +37,7 @@ import {
   rmSync,
   writeFileSync,
 } from "node:fs";
-import { dirname, join, resolve } from "node:path";
+import { basename, dirname, join, resolve } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 
 import { assertPinned, extractVersion, planToolchain } from "./toolchain.mjs";
@@ -337,11 +337,12 @@ export function pinEnvironment(environmentId, cwd = process.cwd()) {
  * settings page, no direct URL, and no endpoint. Emit is not a degraded option
  * here, it is the only one — so the read-back in `verify-remote-env.mjs` is
  * what makes the result trustworthy, exactly as it would be at any other tier.
- * @param {{bootstrapKey: string|null, install: string}} options Project details.
+ * @param {{bootstrapKey: string|null, install: string, repoDir?: string}} options Project details.
  * @returns {string} Text to show the operator.
  */
-export function emitClaudeWeb({ bootstrapKey, install }) {
+export function emitClaudeWeb({ bootstrapKey, install, repoDir = "lisa" }) {
   const key = bootstrapKey ?? "<secrets.bootstrap.key is not configured>";
+  const setup = `cd ${shellQuote(repoDir)} && ${install} && bash scripts/lisa-remote-env/setup.sh`;
   return [
     "Provisioning tier: EMIT — and for this surface that is the only tier.",
     "  A Claude cloud environment is account-scoped configuration edited in the",
@@ -350,7 +351,8 @@ export function emitClaudeWeb({ bootstrapKey, install }) {
     "",
     "Paste into the environment dialog",
     "---------------------------------",
-    "  Network access:  Trusted, or Custom plus any host your project needs",
+    "  Network access:  Custom plus your package registries, GitHub, cloud SDK",
+    "                   hosts, and the bootstrap credential manager API",
     "",
     "  Environment variables:",
     `    ${key}=<read this from your credential manager>`,
@@ -362,11 +364,13 @@ export function emitClaudeWeb({ bootstrapKey, install }) {
     "    is why exactly one value needs to live here.",
     "",
     "  Setup script:",
-    `    ${install} && bash scripts/lisa-remote-env/setup.sh`,
+    `    ${setup}`,
     "",
-    "    The install must come first. On a fresh container node_modules is the",
-    "    only copy of the Lisa skills present, because Claude receives them as",
-    "    an installed plugin rather than as part of the clone.",
+    `    Claude runs this field from $HOME, while the checkout is $HOME/${repoDir}.`,
+    "    The `cd` must come first, and the install must run before the setup",
+    "    script. On a fresh container node_modules is the only copy of the Lisa",
+    "    skills present, because Claude receives them as an installed plugin",
+    "    rather than as part of the clone.",
     "",
     "Commit to the repository",
     "------------------------",
@@ -467,6 +471,35 @@ export function detectInstallCommand(cwd = process.cwd()) {
   return "<your install command>";
 }
 
+/**
+ * Name the directory Claude creates under $HOME when it clones this repository.
+ *
+ * Claude cloud runs the environment setup field from $HOME, not from the
+ * checkout. The setup line therefore has to `cd` into the clone before running
+ * the project install. Prefer the configured GitHub repo name because it is the
+ * thing Claude clones; fall back to the current directory for non-GitHub tests
+ * and local dry runs.
+ * @param {string} [cwd] Repository root.
+ * @returns {string} Directory name to place after `cd`.
+ */
+export function detectRepositoryDirectory(cwd = process.cwd()) {
+  const path = join(cwd, ".lisa.config.json");
+  if (existsSync(path)) {
+    const repo = JSON.parse(readFileSync(path, "utf8")).github?.repo;
+    if (repo && !repo.includes("/") && !repo.includes("\0")) return repo;
+  }
+  return basename(cwd);
+}
+
+/**
+ * Quote a value for POSIX shell usage.
+ * @param {string} value Raw value.
+ * @returns {string} Single-quoted shell literal.
+ */
+function shellQuote(value) {
+  return "'" + String(value).replaceAll("'", "'\\''") + "'";
+}
+
 /**
  * Read the bootstrap key name, which is the one value the operator must paste.
  * @param {string} [cwd] Repository root.
@@ -519,6 +552,7 @@ async function main() {
       emitClaudeWeb({
         bootstrapKey: readBootstrapKey(),
         install: detectInstallCommand(),
+        repoDir: detectRepositoryDirectory(),
       })
     );
     return;

package/plugins/lisa-cdk/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.321.0",
+  "version": "2.321.2",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.321.0",
+  "version": "2.321.2",
   "description": "AWS CDK-specific Lisa plugin.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.321.0",
+  "version": "2.321.2",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.321.0",
+  "version": "2.321.2",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.321.0",
+  "version": "2.321.2",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.321.0",
+  "version": "2.321.2",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/skills/lisa-setup-remote-env/SKILL.md

@@ -161,6 +161,8 @@ It reads the project's own install command from its lockfile and the bootstrap n
 
 - **`gh` is not pre-installed.** If the project's flows shell out to it, add it to `remoteEnv.tools.install`, pinned and checksummed like anything else.
 - **A proxied credential reads as the literal string `proxy-injected`.** Tools that authenticate through the GitHub proxy work; a script that reads the variable directly gets the placeholder. The read-back asserts this rather than leaving it to be discovered against a live service.
+- **The setup field runs from `$HOME`, not from the checkout.** The emitted setup command starts with `cd <repo-name>` on purpose; without it the package install runs one directory above the clone and cannot find `package.json`.
+- **Trusted network access is not enough for provider CLIs.** Use Custom and include package registries, GitHub, cloud SDK hosts, and the bootstrap credential manager API.
 
 ### One environment per project, pinned locally
 

package/plugins/lisa-copilot/skills/lisa-setup-remote-env/assets/setup.sh

@@ -13,6 +13,16 @@
 # and emphatically not in a vendor settings field.
 set -euo pipefail
 
+# Claude Code web runs the environment setup field from $HOME, while the
+# checkout lives at $HOME/<repo>. If this installed copy is invoked by absolute
+# path, move back to the repository root before resolving project-local files.
+script_dir="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd -P)"
+case "$script_dir" in
+  */scripts/lisa-remote-env)
+    cd "$script_dir/../.."
+    ;;
+esac
+
 # Node is the one thing that cannot be installed by the installer, since the
 # installer is written in it. Fail with an actionable message rather than a
 # "command not found" forty lines deep.