@codyswann/lisa 2.325.1 → 2.325.2

package/dist/core/upstream-evidence-manifest.js

@@ -425,7 +425,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "plugins/src/base/skills/lisa-debrief/SKILL.md": "47e4cda36b07994ff47ab15fb04a17dd6b0c310ad804f9cae9d69637edaaa72a",
     "plugins/src/base/skills/lisa-delivery-effectiveness/SKILL.md": "21bc55fa0e86a9694bd22269fd089dbfae0c54c199262f46a4955447acea0f35",
     "plugins/src/base/skills/lisa-detect-tooling/SKILL.md": "1778a009d06099b3bd2d9a33b37bec34836b295e21fad220ae926491d3557208",
-    "plugins/src/base/skills/lisa-detect-tooling/scripts/detect-tooling.mjs": "90086ca11dafb5250ee930fa78fd3cc7d4bd601ad57f3e3c1a49920f7d7a1493",
+    "plugins/src/base/skills/lisa-detect-tooling/scripts/detect-tooling.mjs": "ccbd2cf7251e792467ca74c664088a22b1c50ead579ad2279a55daa5d0ba0693",
     "plugins/src/base/skills/lisa-doctor/SKILL.md": "fb41a1e63c5332d47a46e715aff52551f3df867033b5e4f37dfaeee30019b891",
     "plugins/src/base/skills/lisa-drive-pr-to-merge/SKILL.md": "c78ae2ba32c830d0b2cd7d24de91adf99e2b3cef4c7cab1c417580d86f41351f",
     "plugins/src/base/skills/lisa-epic-triage/SKILL.md": "d02760411249bddbd396f283191fe3e82bb7b95bf9393a19a7025dc5a57c3ab7",

package/package.json

@@ -115,7 +115,7 @@
     "brace-expansion": ">=5.0.9"
   },
   "name": "@codyswann/lisa",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
   "main": "dist/index.js",
   "exports": {

package/plugins/lisa/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Universal governance: agents, skills, commands, hooks, and rules for all projects.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/skills/lisa-detect-tooling/scripts/detect-tooling.mjs

@@ -51,8 +51,13 @@ const KNOWN_TOOLS = Object.freeze({
     viaNpm: "@playwright/test",
   },
   linear: {
-    why: "Linear is wired as an MCP server, which needs browser OAuth and so cannot authenticate in a container.",
+    why: "Linear reaches a container through lisa-linear-access with LINEAR_API_KEY; only the MCP path needs browser OAuth, and there is no official CLI to pin.",
     mcpFallback: "linear-server",
+    // No official Linear CLI exists, so no proposal can name one. Kept even
+    // though the substrate allowlist normally removes Linear before this
+    // point: a second signal reaching here must not resurrect a binary that
+    // does not exist.
+    noCli: true,
   },
 });
 
@@ -107,18 +112,35 @@ export function toolsFromScripts(pkg) {
  * Treating the MCP server as CLI evidence would push operators toward an
  * arbitrary third-party executable instead of the access-layer contract.
  */
+/** Prefix marking evidence that shows a path is missing, not what fills it. */
+const MCP_EVIDENCE = "MCP";
+
+/** What to ask when the only evidence is an MCP-only integration. */
+const REMOTE_PATH_QUESTION =
+  "no manifest entry proposed — confirm how this reaches a container: a CLI, " +
+  "a key-authenticated API call, or deliberately local-only";
+
 const MCP_ACCESS_LAYER_SUBSTRATES = Object.freeze({
   "linear-server":
     "lisa-linear-access uses LINEAR_API_KEY in headless sessions",
 });
 
 /**
- * Tools implied by MCP servers that also have a CLI.
+ * Integrations wired only as an MCP server — the weakest signal here, and the
+ * easiest to over-read.
+ *
+ * True: an MCP server that authenticates interactively cannot authenticate in a
+ * container, so THAT path does not survive the trip.
  *
- * An MCP server is not a substitute for the binary. Several authenticate by
- * browser OAuth, which a container cannot do at all, so a project relying on one
- * remotely has no integration rather than a degraded one — the CLI is the form
- * that survives the trip.
+ * Not implied: that the integration is unavailable, or that a CLI is the
+ * answer. Linear proves both halves — its MCP server needs browser OAuth, and
+ * its GraphQL API is key-authenticated, so `lisa-linear-access` already reaches
+ * it headlessly with LINEAR_API_KEY and there is no official CLI to pin at all.
+ * A server whose access layer owns headless auth is skipped entirely.
+ *
+ * For anything else, this raises a QUESTION rather than asserting a need: this
+ * integration has no remote path as configured, confirm it has one. The answer
+ * may be a CLI, may be a direct API call, and may be "local-only on purpose".
  * @param {object|null} mcp Parsed .mcp.json.
  * @returns {Map<string, string>} Tool name to the server that implies it.
  */
@@ -139,7 +161,8 @@ export function toolsFromMcp(mcp) {
     if (server) {
       found.set(
         tool,
-        `MCP server "${server}" (browser OAuth cannot run remotely)`
+        `${MCP_EVIDENCE} server "${server}" — an interactively authenticated ` +
+          `MCP server has no remote path; confirm this integration has one`
       );
     }
   }
@@ -263,6 +286,17 @@ export function detectTooling(cwd = process.cwd()) {
  * @returns {{install: object[], require: object[]}} Manifest skeletons.
  */
 export function proposedEntries(proposal) {
+  // Whether a binary can be proposed is a fact about the TOOL, not about how it
+  // was detected. Keying this on "the evidence was an MCP server" suppressed
+  // exactly the wrong case: the substrate allowlist already removes Linear
+  // before it becomes evidence, so the only tools reaching that branch were
+  // ones like Maestro that genuinely do have a CLI — the binary the Expo
+  // template invokes and nothing installs.
+  //
+  // So the question is asked only where there is no pinnable CLI to name.
+  if (KNOWN_TOOLS[proposal.name]?.noCli) {
+    return { install: [], require: [], question: REMOTE_PATH_QUESTION };
+  }
   const viaNpm = KNOWN_TOOLS[proposal.name]?.viaNpm;
   if (viaNpm) {
     // npm resolves per platform, so one entry serves every surface.
@@ -317,6 +351,7 @@ if (process.argv[1] && import.meta.url === `file://${process.argv[1]}`) {
         console.log(`    evidence: ${evidence}`);
       }
       const entries = proposedEntries(proposal);
+      if (entries.question) console.log(`    ${entries.question}`);
       for (const entry of entries.install) {
         console.log(`    tools.install: ${JSON.stringify(entry)}`);
       }

package/plugins/lisa/skills/lisa-detect-tooling/scripts/detect-tooling.mjs

@@ -51,8 +51,13 @@ const KNOWN_TOOLS = Object.freeze({
     viaNpm: "@playwright/test",
   },
   linear: {
-    why: "Linear is wired as an MCP server, which needs browser OAuth and so cannot authenticate in a container.",
+    why: "Linear reaches a container through lisa-linear-access with LINEAR_API_KEY; only the MCP path needs browser OAuth, and there is no official CLI to pin.",
     mcpFallback: "linear-server",
+    // No official Linear CLI exists, so no proposal can name one. Kept even
+    // though the substrate allowlist normally removes Linear before this
+    // point: a second signal reaching here must not resurrect a binary that
+    // does not exist.
+    noCli: true,
   },
 });
 
@@ -107,18 +112,35 @@ export function toolsFromScripts(pkg) {
  * Treating the MCP server as CLI evidence would push operators toward an
  * arbitrary third-party executable instead of the access-layer contract.
  */
+/** Prefix marking evidence that shows a path is missing, not what fills it. */
+const MCP_EVIDENCE = "MCP";
+
+/** What to ask when the only evidence is an MCP-only integration. */
+const REMOTE_PATH_QUESTION =
+  "no manifest entry proposed — confirm how this reaches a container: a CLI, " +
+  "a key-authenticated API call, or deliberately local-only";
+
 const MCP_ACCESS_LAYER_SUBSTRATES = Object.freeze({
   "linear-server":
     "lisa-linear-access uses LINEAR_API_KEY in headless sessions",
 });
 
 /**
- * Tools implied by MCP servers that also have a CLI.
+ * Integrations wired only as an MCP server — the weakest signal here, and the
+ * easiest to over-read.
+ *
+ * True: an MCP server that authenticates interactively cannot authenticate in a
+ * container, so THAT path does not survive the trip.
  *
- * An MCP server is not a substitute for the binary. Several authenticate by
- * browser OAuth, which a container cannot do at all, so a project relying on one
- * remotely has no integration rather than a degraded one — the CLI is the form
- * that survives the trip.
+ * Not implied: that the integration is unavailable, or that a CLI is the
+ * answer. Linear proves both halves — its MCP server needs browser OAuth, and
+ * its GraphQL API is key-authenticated, so `lisa-linear-access` already reaches
+ * it headlessly with LINEAR_API_KEY and there is no official CLI to pin at all.
+ * A server whose access layer owns headless auth is skipped entirely.
+ *
+ * For anything else, this raises a QUESTION rather than asserting a need: this
+ * integration has no remote path as configured, confirm it has one. The answer
+ * may be a CLI, may be a direct API call, and may be "local-only on purpose".
  * @param {object|null} mcp Parsed .mcp.json.
  * @returns {Map<string, string>} Tool name to the server that implies it.
  */
@@ -139,7 +161,8 @@ export function toolsFromMcp(mcp) {
     if (server) {
       found.set(
         tool,
-        `MCP server "${server}" (browser OAuth cannot run remotely)`
+        `${MCP_EVIDENCE} server "${server}" — an interactively authenticated ` +
+          `MCP server has no remote path; confirm this integration has one`
       );
     }
   }
@@ -263,6 +286,17 @@ export function detectTooling(cwd = process.cwd()) {
  * @returns {{install: object[], require: object[]}} Manifest skeletons.
  */
 export function proposedEntries(proposal) {
+  // Whether a binary can be proposed is a fact about the TOOL, not about how it
+  // was detected. Keying this on "the evidence was an MCP server" suppressed
+  // exactly the wrong case: the substrate allowlist already removes Linear
+  // before it becomes evidence, so the only tools reaching that branch were
+  // ones like Maestro that genuinely do have a CLI — the binary the Expo
+  // template invokes and nothing installs.
+  //
+  // So the question is asked only where there is no pinnable CLI to name.
+  if (KNOWN_TOOLS[proposal.name]?.noCli) {
+    return { install: [], require: [], question: REMOTE_PATH_QUESTION };
+  }
   const viaNpm = KNOWN_TOOLS[proposal.name]?.viaNpm;
   if (viaNpm) {
     // npm resolves per platform, so one entry serves every surface.
@@ -317,6 +351,7 @@ if (process.argv[1] && import.meta.url === `file://${process.argv[1]}`) {
         console.log(`    evidence: ${evidence}`);
       }
       const entries = proposedEntries(proposal);
+      if (entries.question) console.log(`    ${entries.question}`);
       for (const entry of entries.install) {
         console.log(`    tools.install: ${JSON.stringify(entry)}`);
       }

package/plugins/lisa-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-agy/skills/lisa-detect-tooling/scripts/detect-tooling.mjs

@@ -51,8 +51,13 @@ const KNOWN_TOOLS = Object.freeze({
     viaNpm: "@playwright/test",
   },
   linear: {
-    why: "Linear is wired as an MCP server, which needs browser OAuth and so cannot authenticate in a container.",
+    why: "Linear reaches a container through lisa-linear-access with LINEAR_API_KEY; only the MCP path needs browser OAuth, and there is no official CLI to pin.",
     mcpFallback: "linear-server",
+    // No official Linear CLI exists, so no proposal can name one. Kept even
+    // though the substrate allowlist normally removes Linear before this
+    // point: a second signal reaching here must not resurrect a binary that
+    // does not exist.
+    noCli: true,
   },
 });
 
@@ -107,18 +112,35 @@ export function toolsFromScripts(pkg) {
  * Treating the MCP server as CLI evidence would push operators toward an
  * arbitrary third-party executable instead of the access-layer contract.
  */
+/** Prefix marking evidence that shows a path is missing, not what fills it. */
+const MCP_EVIDENCE = "MCP";
+
+/** What to ask when the only evidence is an MCP-only integration. */
+const REMOTE_PATH_QUESTION =
+  "no manifest entry proposed — confirm how this reaches a container: a CLI, " +
+  "a key-authenticated API call, or deliberately local-only";
+
 const MCP_ACCESS_LAYER_SUBSTRATES = Object.freeze({
   "linear-server":
     "lisa-linear-access uses LINEAR_API_KEY in headless sessions",
 });
 
 /**
- * Tools implied by MCP servers that also have a CLI.
+ * Integrations wired only as an MCP server — the weakest signal here, and the
+ * easiest to over-read.
+ *
+ * True: an MCP server that authenticates interactively cannot authenticate in a
+ * container, so THAT path does not survive the trip.
  *
- * An MCP server is not a substitute for the binary. Several authenticate by
- * browser OAuth, which a container cannot do at all, so a project relying on one
- * remotely has no integration rather than a degraded one — the CLI is the form
- * that survives the trip.
+ * Not implied: that the integration is unavailable, or that a CLI is the
+ * answer. Linear proves both halves — its MCP server needs browser OAuth, and
+ * its GraphQL API is key-authenticated, so `lisa-linear-access` already reaches
+ * it headlessly with LINEAR_API_KEY and there is no official CLI to pin at all.
+ * A server whose access layer owns headless auth is skipped entirely.
+ *
+ * For anything else, this raises a QUESTION rather than asserting a need: this
+ * integration has no remote path as configured, confirm it has one. The answer
+ * may be a CLI, may be a direct API call, and may be "local-only on purpose".
  * @param {object|null} mcp Parsed .mcp.json.
  * @returns {Map<string, string>} Tool name to the server that implies it.
  */
@@ -139,7 +161,8 @@ export function toolsFromMcp(mcp) {
     if (server) {
       found.set(
         tool,
-        `MCP server "${server}" (browser OAuth cannot run remotely)`
+        `${MCP_EVIDENCE} server "${server}" — an interactively authenticated ` +
+          `MCP server has no remote path; confirm this integration has one`
       );
     }
   }
@@ -263,6 +286,17 @@ export function detectTooling(cwd = process.cwd()) {
  * @returns {{install: object[], require: object[]}} Manifest skeletons.
  */
 export function proposedEntries(proposal) {
+  // Whether a binary can be proposed is a fact about the TOOL, not about how it
+  // was detected. Keying this on "the evidence was an MCP server" suppressed
+  // exactly the wrong case: the substrate allowlist already removes Linear
+  // before it becomes evidence, so the only tools reaching that branch were
+  // ones like Maestro that genuinely do have a CLI — the binary the Expo
+  // template invokes and nothing installs.
+  //
+  // So the question is asked only where there is no pinnable CLI to name.
+  if (KNOWN_TOOLS[proposal.name]?.noCli) {
+    return { install: [], require: [], question: REMOTE_PATH_QUESTION };
+  }
   const viaNpm = KNOWN_TOOLS[proposal.name]?.viaNpm;
   if (viaNpm) {
     // npm resolves per platform, so one entry serves every surface.
@@ -317,6 +351,7 @@ if (process.argv[1] && import.meta.url === `file://${process.argv[1]}`) {
         console.log(`    evidence: ${evidence}`);
       }
       const entries = proposedEntries(proposal);
+      if (entries.question) console.log(`    ${entries.question}`);
       for (const entry of entries.install) {
         console.log(`    tools.install: ${JSON.stringify(entry)}`);
       }

package/plugins/lisa-cdk/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "AWS CDK-specific Lisa plugin.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/skills/lisa-detect-tooling/scripts/detect-tooling.mjs

@@ -51,8 +51,13 @@ const KNOWN_TOOLS = Object.freeze({
     viaNpm: "@playwright/test",
   },
   linear: {
-    why: "Linear is wired as an MCP server, which needs browser OAuth and so cannot authenticate in a container.",
+    why: "Linear reaches a container through lisa-linear-access with LINEAR_API_KEY; only the MCP path needs browser OAuth, and there is no official CLI to pin.",
     mcpFallback: "linear-server",
+    // No official Linear CLI exists, so no proposal can name one. Kept even
+    // though the substrate allowlist normally removes Linear before this
+    // point: a second signal reaching here must not resurrect a binary that
+    // does not exist.
+    noCli: true,
   },
 });
 
@@ -107,18 +112,35 @@ export function toolsFromScripts(pkg) {
  * Treating the MCP server as CLI evidence would push operators toward an
  * arbitrary third-party executable instead of the access-layer contract.
  */
+/** Prefix marking evidence that shows a path is missing, not what fills it. */
+const MCP_EVIDENCE = "MCP";
+
+/** What to ask when the only evidence is an MCP-only integration. */
+const REMOTE_PATH_QUESTION =
+  "no manifest entry proposed — confirm how this reaches a container: a CLI, " +
+  "a key-authenticated API call, or deliberately local-only";
+
 const MCP_ACCESS_LAYER_SUBSTRATES = Object.freeze({
   "linear-server":
     "lisa-linear-access uses LINEAR_API_KEY in headless sessions",
 });
 
 /**
- * Tools implied by MCP servers that also have a CLI.
+ * Integrations wired only as an MCP server — the weakest signal here, and the
+ * easiest to over-read.
+ *
+ * True: an MCP server that authenticates interactively cannot authenticate in a
+ * container, so THAT path does not survive the trip.
  *
- * An MCP server is not a substitute for the binary. Several authenticate by
- * browser OAuth, which a container cannot do at all, so a project relying on one
- * remotely has no integration rather than a degraded one — the CLI is the form
- * that survives the trip.
+ * Not implied: that the integration is unavailable, or that a CLI is the
+ * answer. Linear proves both halves — its MCP server needs browser OAuth, and
+ * its GraphQL API is key-authenticated, so `lisa-linear-access` already reaches
+ * it headlessly with LINEAR_API_KEY and there is no official CLI to pin at all.
+ * A server whose access layer owns headless auth is skipped entirely.
+ *
+ * For anything else, this raises a QUESTION rather than asserting a need: this
+ * integration has no remote path as configured, confirm it has one. The answer
+ * may be a CLI, may be a direct API call, and may be "local-only on purpose".
  * @param {object|null} mcp Parsed .mcp.json.
  * @returns {Map<string, string>} Tool name to the server that implies it.
  */
@@ -139,7 +161,8 @@ export function toolsFromMcp(mcp) {
     if (server) {
       found.set(
         tool,
-        `MCP server "${server}" (browser OAuth cannot run remotely)`
+        `${MCP_EVIDENCE} server "${server}" — an interactively authenticated ` +
+          `MCP server has no remote path; confirm this integration has one`
       );
     }
   }
@@ -263,6 +286,17 @@ export function detectTooling(cwd = process.cwd()) {
  * @returns {{install: object[], require: object[]}} Manifest skeletons.
  */
 export function proposedEntries(proposal) {
+  // Whether a binary can be proposed is a fact about the TOOL, not about how it
+  // was detected. Keying this on "the evidence was an MCP server" suppressed
+  // exactly the wrong case: the substrate allowlist already removes Linear
+  // before it becomes evidence, so the only tools reaching that branch were
+  // ones like Maestro that genuinely do have a CLI — the binary the Expo
+  // template invokes and nothing installs.
+  //
+  // So the question is asked only where there is no pinnable CLI to name.
+  if (KNOWN_TOOLS[proposal.name]?.noCli) {
+    return { install: [], require: [], question: REMOTE_PATH_QUESTION };
+  }
   const viaNpm = KNOWN_TOOLS[proposal.name]?.viaNpm;
   if (viaNpm) {
     // npm resolves per platform, so one entry serves every surface.
@@ -317,6 +351,7 @@ if (process.argv[1] && import.meta.url === `file://${process.argv[1]}`) {
         console.log(`    evidence: ${evidence}`);
       }
       const entries = proposedEntries(proposal);
+      if (entries.question) console.log(`    ${entries.question}`);
       for (const entry of entries.install) {
         console.log(`    tools.install: ${JSON.stringify(entry)}`);
       }

package/plugins/lisa-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cursor/skills/lisa-detect-tooling/scripts/detect-tooling.mjs

@@ -51,8 +51,13 @@ const KNOWN_TOOLS = Object.freeze({
     viaNpm: "@playwright/test",
   },
   linear: {
-    why: "Linear is wired as an MCP server, which needs browser OAuth and so cannot authenticate in a container.",
+    why: "Linear reaches a container through lisa-linear-access with LINEAR_API_KEY; only the MCP path needs browser OAuth, and there is no official CLI to pin.",
     mcpFallback: "linear-server",
+    // No official Linear CLI exists, so no proposal can name one. Kept even
+    // though the substrate allowlist normally removes Linear before this
+    // point: a second signal reaching here must not resurrect a binary that
+    // does not exist.
+    noCli: true,
   },
 });
 
@@ -107,18 +112,35 @@ export function toolsFromScripts(pkg) {
  * Treating the MCP server as CLI evidence would push operators toward an
  * arbitrary third-party executable instead of the access-layer contract.
  */
+/** Prefix marking evidence that shows a path is missing, not what fills it. */
+const MCP_EVIDENCE = "MCP";
+
+/** What to ask when the only evidence is an MCP-only integration. */
+const REMOTE_PATH_QUESTION =
+  "no manifest entry proposed — confirm how this reaches a container: a CLI, " +
+  "a key-authenticated API call, or deliberately local-only";
+
 const MCP_ACCESS_LAYER_SUBSTRATES = Object.freeze({
   "linear-server":
     "lisa-linear-access uses LINEAR_API_KEY in headless sessions",
 });
 
 /**
- * Tools implied by MCP servers that also have a CLI.
+ * Integrations wired only as an MCP server — the weakest signal here, and the
+ * easiest to over-read.
+ *
+ * True: an MCP server that authenticates interactively cannot authenticate in a
+ * container, so THAT path does not survive the trip.
  *
- * An MCP server is not a substitute for the binary. Several authenticate by
- * browser OAuth, which a container cannot do at all, so a project relying on one
- * remotely has no integration rather than a degraded one — the CLI is the form
- * that survives the trip.
+ * Not implied: that the integration is unavailable, or that a CLI is the
+ * answer. Linear proves both halves — its MCP server needs browser OAuth, and
+ * its GraphQL API is key-authenticated, so `lisa-linear-access` already reaches
+ * it headlessly with LINEAR_API_KEY and there is no official CLI to pin at all.
+ * A server whose access layer owns headless auth is skipped entirely.
+ *
+ * For anything else, this raises a QUESTION rather than asserting a need: this
+ * integration has no remote path as configured, confirm it has one. The answer
+ * may be a CLI, may be a direct API call, and may be "local-only on purpose".
  * @param {object|null} mcp Parsed .mcp.json.
  * @returns {Map<string, string>} Tool name to the server that implies it.
  */
@@ -139,7 +161,8 @@ export function toolsFromMcp(mcp) {
     if (server) {
       found.set(
         tool,
-        `MCP server "${server}" (browser OAuth cannot run remotely)`
+        `${MCP_EVIDENCE} server "${server}" — an interactively authenticated ` +
+          `MCP server has no remote path; confirm this integration has one`
       );
     }
   }
@@ -263,6 +286,17 @@ export function detectTooling(cwd = process.cwd()) {
  * @returns {{install: object[], require: object[]}} Manifest skeletons.
  */
 export function proposedEntries(proposal) {
+  // Whether a binary can be proposed is a fact about the TOOL, not about how it
+  // was detected. Keying this on "the evidence was an MCP server" suppressed
+  // exactly the wrong case: the substrate allowlist already removes Linear
+  // before it becomes evidence, so the only tools reaching that branch were
+  // ones like Maestro that genuinely do have a CLI — the binary the Expo
+  // template invokes and nothing installs.
+  //
+  // So the question is asked only where there is no pinnable CLI to name.
+  if (KNOWN_TOOLS[proposal.name]?.noCli) {
+    return { install: [], require: [], question: REMOTE_PATH_QUESTION };
+  }
   const viaNpm = KNOWN_TOOLS[proposal.name]?.viaNpm;
   if (viaNpm) {
     // npm resolves per platform, so one entry serves every surface.
@@ -317,6 +351,7 @@ if (process.argv[1] && import.meta.url === `file://${process.argv[1]}`) {
         console.log(`    evidence: ${evidence}`);
       }
       const entries = proposedEntries(proposal);
+      if (entries.question) console.log(`    ${entries.question}`);
       for (const entry of entries.install) {
         console.log(`    tools.install: ${JSON.stringify(entry)}`);
       }

package/plugins/lisa-expo/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Expo and React Native-specific skills, agents, rules, and MCP servers.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Harper/Fabric-specific Lisa rules for TypeScript component apps.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "NestJS-specific skills and migration write-protection hooks.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Ruby on Rails-specific skills and hooks for RuboCop and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "TypeScript-specific hooks for formatting, linting, and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "Distributable LLM Wiki kernel — ingest, query, lint, and maintain a git-native markdown knowledge base across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.325.1",
+  "version": "2.325.2",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/src/base/skills/lisa-detect-tooling/scripts/detect-tooling.mjs

@@ -51,8 +51,13 @@ const KNOWN_TOOLS = Object.freeze({
     viaNpm: "@playwright/test",
   },
   linear: {
-    why: "Linear is wired as an MCP server, which needs browser OAuth and so cannot authenticate in a container.",
+    why: "Linear reaches a container through lisa-linear-access with LINEAR_API_KEY; only the MCP path needs browser OAuth, and there is no official CLI to pin.",
     mcpFallback: "linear-server",
+    // No official Linear CLI exists, so no proposal can name one. Kept even
+    // though the substrate allowlist normally removes Linear before this
+    // point: a second signal reaching here must not resurrect a binary that
+    // does not exist.
+    noCli: true,
   },
 });
 
@@ -107,18 +112,35 @@ export function toolsFromScripts(pkg) {
  * Treating the MCP server as CLI evidence would push operators toward an
  * arbitrary third-party executable instead of the access-layer contract.
  */
+/** Prefix marking evidence that shows a path is missing, not what fills it. */
+const MCP_EVIDENCE = "MCP";
+
+/** What to ask when the only evidence is an MCP-only integration. */
+const REMOTE_PATH_QUESTION =
+  "no manifest entry proposed — confirm how this reaches a container: a CLI, " +
+  "a key-authenticated API call, or deliberately local-only";
+
 const MCP_ACCESS_LAYER_SUBSTRATES = Object.freeze({
   "linear-server":
     "lisa-linear-access uses LINEAR_API_KEY in headless sessions",
 });
 
 /**
- * Tools implied by MCP servers that also have a CLI.
+ * Integrations wired only as an MCP server — the weakest signal here, and the
+ * easiest to over-read.
+ *
+ * True: an MCP server that authenticates interactively cannot authenticate in a
+ * container, so THAT path does not survive the trip.
  *
- * An MCP server is not a substitute for the binary. Several authenticate by
- * browser OAuth, which a container cannot do at all, so a project relying on one
- * remotely has no integration rather than a degraded one — the CLI is the form
- * that survives the trip.
+ * Not implied: that the integration is unavailable, or that a CLI is the
+ * answer. Linear proves both halves — its MCP server needs browser OAuth, and
+ * its GraphQL API is key-authenticated, so `lisa-linear-access` already reaches
+ * it headlessly with LINEAR_API_KEY and there is no official CLI to pin at all.
+ * A server whose access layer owns headless auth is skipped entirely.
+ *
+ * For anything else, this raises a QUESTION rather than asserting a need: this
+ * integration has no remote path as configured, confirm it has one. The answer
+ * may be a CLI, may be a direct API call, and may be "local-only on purpose".
  * @param {object|null} mcp Parsed .mcp.json.
  * @returns {Map<string, string>} Tool name to the server that implies it.
  */
@@ -139,7 +161,8 @@ export function toolsFromMcp(mcp) {
     if (server) {
       found.set(
         tool,
-        `MCP server "${server}" (browser OAuth cannot run remotely)`
+        `${MCP_EVIDENCE} server "${server}" — an interactively authenticated ` +
+          `MCP server has no remote path; confirm this integration has one`
       );
     }
   }
@@ -263,6 +286,17 @@ export function detectTooling(cwd = process.cwd()) {
  * @returns {{install: object[], require: object[]}} Manifest skeletons.
  */
 export function proposedEntries(proposal) {
+  // Whether a binary can be proposed is a fact about the TOOL, not about how it
+  // was detected. Keying this on "the evidence was an MCP server" suppressed
+  // exactly the wrong case: the substrate allowlist already removes Linear
+  // before it becomes evidence, so the only tools reaching that branch were
+  // ones like Maestro that genuinely do have a CLI — the binary the Expo
+  // template invokes and nothing installs.
+  //
+  // So the question is asked only where there is no pinnable CLI to name.
+  if (KNOWN_TOOLS[proposal.name]?.noCli) {
+    return { install: [], require: [], question: REMOTE_PATH_QUESTION };
+  }
   const viaNpm = KNOWN_TOOLS[proposal.name]?.viaNpm;
   if (viaNpm) {
     // npm resolves per platform, so one entry serves every surface.
@@ -317,6 +351,7 @@ if (process.argv[1] && import.meta.url === `file://${process.argv[1]}`) {
         console.log(`    evidence: ${evidence}`);
       }
       const entries = proposedEntries(proposal);
+      if (entries.question) console.log(`    ${entries.question}`);
       for (const entry of entries.install) {
         console.log(`    tools.install: ${JSON.stringify(entry)}`);
       }