@codyswann/lisa 3.12.0 → 3.13.0

package/plugins/lisa-nestjs/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "NestJS-specific skills and migration write-protection hooks.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "Ruby on Rails-specific skills and hooks for RuboCop and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "TypeScript-specific hooks for formatting, linting, and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "Distributable LLM Wiki kernel — ingest, query, lint, and maintain a git-native markdown knowledge base across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/src/base/hooks/block-no-verify.sh

@@ -5,9 +5,22 @@
 # check. See feedback_never_no_verify in user memory.
 #
 # Blocked bypass vectors:
-#   1. the --no-verify long flag (any subcommand, any position, incl. subshells);
+#   1. --no-verify, and any prefix abbreviation git would accept for it;
 #   2. HUSKY=0 / HUSKY_SKIP_HOOKS=... — disables husky-managed git hooks;
-#   3. core.hooksPath pointed at /dev/null or set empty — disables ALL git hooks.
+#   3. core.hooksPath pointed anywhere but an allowlisted in-repo hooks dir;
+#   4. --config-env=core.hooksPath=VAR, in both the one- and two-token spellings;
+#   5. GIT_CONFIG_KEY_<n>=core.hooksPath env-var-style command-scope config.
+#
+# The line below is what lets `lisa apply` tell a downstream copy of this guard
+# that is BEHIND from one that is AHEAD. Byte comparison cannot: both look like
+# "differs from mine", and guessing "behind" is how a fork's stronger guard gets
+# silently replaced by a weaker upstream one. Refresh compares the two declared
+# sets, and refuses to overwrite a copy declaring anything this one does not.
+#
+# Add a name here in the same commit that closes a vector. A hardening that
+# forgets to is invisible to refresh, and shows up as an unexplained diff at
+# review time instead of a named capability.
+# lisa-guard-capabilities: no-verify-abbrev, husky-env, hookspath-allowlist, config-env, git-config-key
 #
 # Shell-token matching avoids false positives from issue bodies, heredocs, and
 # commit-message prose while still catching quoted real argv values such as

package/rails/create-only/.github/workflows/claude-code-review-response.yml

@@ -1,4 +1,5 @@
-# This file was created by Lisa on first setup.
+# Seeded by Lisa on first setup — this file is YOURS.
+# Lisa will not overwrite it. (copy-overwrite assets ARE replaced each run.)
 # You can customize this file — Lisa will not overwrite it.
 
 name: Claude Code Review Response

package/rails/create-only/.github/workflows/claude-nightly-code-complexity.yml

@@ -1,4 +1,5 @@
-# This file was created by Lisa on first setup.
+# Seeded by Lisa on first setup — this file is YOURS.
+# Lisa will not overwrite it. (copy-overwrite assets ARE replaced each run.)
 # You can customize this file — Lisa will not overwrite it.
 
 name: Claude Nightly Code Complexity

package/rails/create-only/.github/workflows/claude-nightly-test-coverage.yml

@@ -1,4 +1,5 @@
-# This file was created by Lisa on first setup.
+# Seeded by Lisa on first setup — this file is YOURS.
+# Lisa will not overwrite it. (copy-overwrite assets ARE replaced each run.)
 # You can customize this file — Lisa will not overwrite it.
 
 name: Claude Nightly Test Coverage

package/rails/create-only/.github/workflows/claude-nightly-test-improvement.yml

@@ -1,4 +1,5 @@
-# This file was created by Lisa on first setup.
+# Seeded by Lisa on first setup — this file is YOURS.
+# Lisa will not overwrite it. (copy-overwrite assets ARE replaced each run.)
 # You can customize this file — Lisa will not overwrite it.
 
 name: Claude Nightly Test Improvement

package/rails/create-only/.github/workflows/claude-sync-down-branches.yml

@@ -1,4 +1,5 @@
-# This file was created by Lisa on first setup.
+# Seeded by Lisa on first setup — this file is YOURS.
+# Lisa will not overwrite it. (copy-overwrite assets ARE replaced each run.)
 # You can customize this file — Lisa will not overwrite it.
 #
 # Back-syncs merges down the env chain so hotfixes propagate.

package/rails/create-only/.github/workflows/deploy.yml

@@ -1,4 +1,5 @@
-# This file is created by Lisa (create-only — edit freely, Lisa won't overwrite).
+# Seeded by Lisa on first setup — this file is YOURS.
+# Lisa will not overwrite it. (copy-overwrite assets ARE replaced each run.)
 # Release + Deploy workflow for Rails on AWS ECS Fargate.
 #
 # Step 1: Call the reusable release workflow for version bumping and tagging.

package/rails/create-only/.mutant.yml

@@ -1,3 +1,6 @@
+# Seeded by Lisa on first setup — this file is YOURS.
+# Lisa will not overwrite it. (copy-overwrite assets ARE replaced each run.)
+
 # Mutant configuration (project-owned).
 # Docs: https://github.com/mbj/mutant/blob/main/docs/configuration.md
 #

package/rails/create-only/.reek.yml

@@ -1,3 +1,6 @@
+# Seeded by Lisa on first setup — this file is YOURS.
+# Lisa will not overwrite it. (copy-overwrite assets ARE replaced each run.)
+
 ---
 detectors:
   IrresponsibleModule:

package/rails/create-only/.rubocop_todo.yml

@@ -1,3 +1,6 @@
+# Seeded by Lisa on first setup — this file is YOURS.
+# Lisa will not overwrite it. (copy-overwrite assets ARE replaced each run.)
+
 # This is the standard RuboCop "fix later" file.
 # Lisa creates it empty so .rubocop.yml's `inherit_from` resolves cleanly
 # in projects that don't yet have legacy violations to track.

package/rails/create-only/mutation.gate.yml

@@ -1,3 +1,6 @@
+# Seeded by Lisa on first setup — this file is YOURS.
+# Lisa will not overwrite it. (copy-overwrite assets ARE replaced each run.)
+
 # Mutation-testing gate toggle (project-owned).
 # Flip `enabled` to true to turn on the diff-only mutant gate in the pre-push
 # hook and CI. The mutation subjects are configured in `.mutant.yml`.

package/rails/create-only/rubocop.thresholds.yml

@@ -1,3 +1,6 @@
+# Seeded by Lisa on first setup — this file is YOURS.
+# Lisa will not overwrite it. (copy-overwrite assets ARE replaced each run.)
+
 # RuboCop complexity thresholds — nightly workflows adjust these programmatically.
 # This file is create-only: Lisa won't overwrite it after initial setup.
 

package/rails/create-only/spec/rails_helper.rb

@@ -1,4 +1,6 @@
 # frozen_string_literal: true
+# Seeded by Lisa on first setup — this file is YOURS.
+# Lisa will not overwrite it. (copy-overwrite assets ARE replaced each run.)
 
 require 'spec_helper'
 

package/rails/create-only/spec/spec_helper.rb

@@ -1,4 +1,6 @@
 # frozen_string_literal: true
+# Seeded by Lisa on first setup — this file is YOURS.
+# Lisa will not overwrite it. (copy-overwrite assets ARE replaced each run.)
 
 require 'simplecov'
 

package/scripts/generate-lisa-owned-hash-ledger.mjs

@@ -0,0 +1,226 @@
+#!/usr/bin/env node
+/**
+ * Generate the ledger of every content hash Lisa has ever shipped at each
+ * Lisa-owned destination path.
+ *
+ * Refresh uses it to tell a host copy that is *behind* Lisa (its bytes are some
+ * past Lisa release, so overwriting is correct) from one that is *ahead* (its
+ * bytes match no Lisa release, so overwriting would delete downstream work).
+ *
+ * Two properties are load-bearing:
+ *
+ * - **Keyed by destination, not source.** Several stacks ship a variant of the
+ *   same installed path; a host has exactly one of them and refresh must accept
+ *   whichever it has. The union across stacks is the honest answer to "has Lisa
+ *   ever shipped these bytes here?".
+ * - **Append-only.** Existing entries are unioned in, never dropped. That makes
+ *   the generator safe under a shallow clone: less history yields fewer new
+ *   hashes, never the loss of known-good ones. Losing a hash would reclassify a
+ *   legitimately stale file as host-modified and stop refreshing it — failing
+ *   safe, but permanently.
+ */
+import { execFileSync } from "node:child_process";
+import { createHash } from "node:crypto";
+import { readFileSync, writeFileSync } from "node:fs";
+import path from "node:path";
+
+const repoRoot = path.resolve(import.meta.dirname, "..");
+const outputPath = path.join(repoRoot, "src/core/lisa-owned-hash-ledger.ts");
+const COPY_OVERWRITE = "copy-overwrite";
+const LISA_NAMESPACE_PREFIX = "lisa-";
+
+/**
+ * Run a git command in the repository and return stdout as latin1 text.
+ *
+ * Blobs are read as `binary` so arbitrary bytes survive the round trip into the
+ * Buffer that gets hashed; decoding as UTF-8 would corrupt any non-text file.
+ * @param {readonly string[]} args - Arguments passed to git
+ * @returns {string} Command stdout, or an empty string when git fails
+ */
+function git(args) {
+  try {
+    return execFileSync("git", args, {
+      cwd: repoRoot,
+      encoding: "buffer",
+      maxBuffer: 64 * 1024 * 1024,
+      stdio: ["ignore", "pipe", "ignore"],
+    }).toString("binary");
+  } catch {
+    return "";
+  }
+}
+
+/**
+ * Whether a destination path sits in the namespace Lisa owns outright.
+ *
+ * Mirrors `isLisaOwnedTemplate` in `src/core/lisa-owned-templates.ts`. The
+ * duplication is deliberate — this script runs before the TypeScript build, so
+ * it cannot import the compiled module — and a test asserts the two agree.
+ *
+ * This is also the ledger's boundary, and it is inherited rather than chosen.
+ * The `lisa-` path segment is what decides which files refresh at all, so a file
+ * outside it is never refreshed after its initial create and has nothing for
+ * provenance to decide — recording hashes for it would add a regeneration gate
+ * to ~120 more templates and buy nothing today. If that predicate is ever
+ * replaced (CodySwannGT/lisa#2491 tracks it freezing non-`lisa-` guards at
+ * whatever version first landed), widening enrolment is this one function: the
+ * ledger answers "has Lisa ever shipped these bytes here?" for any managed path.
+ * @param {string} destination - Repo-relative destination path
+ * @returns {boolean} True when Lisa owns the file outright
+ */
+function isLisaOwned(destination) {
+  return destination
+    .split("/")
+    .some(segment => segment.startsWith(LISA_NAMESPACE_PREFIX));
+}
+
+/**
+ * Every tracked copy-overwrite source that installs a Lisa-owned file.
+ * @returns {Map<string, string[]>} Destination path to the source paths producing it
+ */
+function lisaOwnedSources() {
+  const byDestination = new Map();
+  const marker = `/${COPY_OVERWRITE}/`;
+  for (const tracked of git(["ls-files"]).split("\n")) {
+    const at = tracked.indexOf(marker);
+    if (at === -1) continue;
+    const destination = tracked.slice(at + marker.length);
+    if (!isLisaOwned(destination)) continue;
+    const sources = byDestination.get(destination) ?? [];
+    sources.push(tracked);
+    byDestination.set(destination, sources);
+  }
+  return byDestination;
+}
+
+/**
+ * Hex sha256 of a blob's bytes.
+ * @param {Buffer} bytes - Blob contents
+ * @returns {string} Lower-case hex digest
+ */
+function digest(bytes) {
+  return createHash("sha256").update(bytes).digest("hex");
+}
+
+/**
+ * Every hash this source path has ever had, across all of its history.
+ *
+ * `--follow` keeps a renamed guard's earlier hashes, which is exactly the case
+ * where a host is most likely to be running an older copy.
+ * @param {string} source - Repo-relative source path
+ * @returns {string[]} Hashes of every historical revision plus the checked-in copy
+ */
+function historicalHashes(source) {
+  const hashes = [];
+  const current = git(["show", `HEAD:${source}`]);
+  if (current !== "") hashes.push(digest(Buffer.from(current, "binary")));
+
+  // `--name-only` is what makes rename-following actually work. Asking for the
+  // commit list alone and then reading `<rev>:<source>` fails for every revision
+  // before a rename, because the file did not live at that path yet — the very
+  // revisions a long-installed host is most likely to be running.
+  const log = git([
+    "log",
+    "--format=%H",
+    "--follow",
+    "--name-only",
+    "--",
+    source,
+  ]).split("\n");
+  let revision = "";
+  for (const line of log) {
+    if (/^[0-9a-f]{40}$/.test(line)) {
+      revision = line;
+      continue;
+    }
+    if (line === "" || revision === "") continue;
+    const blob = git(["show", `${revision}:${line}`]);
+    if (blob !== "") hashes.push(digest(Buffer.from(blob, "binary")));
+  }
+  return hashes;
+}
+
+/**
+ * Hashes already recorded in the checked-in ledger, so none is ever lost.
+ * @returns {Map<string, string[]>} Destination path to previously recorded hashes
+ */
+function existingLedger() {
+  const previous = new Map();
+  let source = "";
+  try {
+    source = readFileSync(outputPath, "utf8");
+  } catch {
+    return previous;
+  }
+  const entry = /"([^"]+)": Object\.freeze\(\[([^\]]*)\]\)/g;
+  for (const match of source.matchAll(entry)) {
+    previous.set(
+      match[1],
+      [...match[2].matchAll(/"([0-9a-f]{64})"/g)].map(hash => hash[1])
+    );
+  }
+  return previous;
+}
+
+/**
+ * Render the ledger module.
+ * @param {Map<string, string[]>} ledger - Destination path to known-good hashes
+ * @returns {string} TypeScript module source
+ */
+function render(ledger) {
+  const entries = [...ledger.entries()]
+    .sort(([left], [right]) => (left < right ? -1 : 1))
+    // Indentation matches what Prettier produces. `lint-staged` reformats every
+    // staged file, so a generator whose output Prettier would reindent leaves
+    // `--check` failing immediately after the commit that regenerated it.
+    .map(([destination, hashes]) => {
+      const rendered = hashes.map(hash => `    "${hash}",`).join("\n");
+      return `  "${destination}": Object.freeze([\n${rendered}\n  ]),`;
+    })
+    .join("\n");
+  return `/** Generated by scripts/generate-lisa-owned-hash-ledger.mjs. Do not edit. */
+
+/**
+ * Every content hash Lisa has published at each Lisa-owned destination path.
+ *
+ * A host copy whose hash appears here is provably an older Lisa artifact and may
+ * be refreshed. One that appears nowhere here was edited downstream, and refresh
+ * refuses rather than risk deleting a stronger guard. See
+ * \`src/core/lisa-owned-provenance.ts\`.
+ */
+export const LISA_OWNED_HASH_LEDGER: Readonly<
+  Record<string, readonly string[]>
+> = Object.freeze({
+${entries}
+});
+`;
+}
+
+const ledger = new Map(existingLedger());
+for (const [destination, sources] of lisaOwnedSources()) {
+  const known = new Set(ledger.get(destination) ?? []);
+  for (const source of sources) {
+    for (const hash of historicalHashes(source)) known.add(hash);
+  }
+  ledger.set(destination, [...known].sort());
+}
+
+const rendered = render(ledger);
+if (process.argv.includes("--check")) {
+  let actual = "";
+  try {
+    actual = readFileSync(outputPath, "utf8");
+  } catch {
+    actual = "";
+  }
+  if (actual !== rendered) {
+    process.stderr.write(
+      "Lisa-owned hash ledger is out of date. Run `bun run build:lisa-owned-hash-ledger` and commit the result.\n"
+    );
+    process.exit(1);
+  }
+  process.stdout.write("Lisa-owned hash ledger is current.\n");
+} else {
+  writeFileSync(outputPath, rendered);
+  process.stdout.write(`Wrote ${ledger.size} ledger entries.\n`);
+}

package/typescript/create-only/.github/workflows/auto-update-pr-branches-dispatch.yml

@@ -1,4 +1,5 @@
-# This file was created by Lisa on first setup.
+# Seeded by Lisa on first setup — this file is YOURS.
+# Lisa will not overwrite it. (copy-overwrite assets ARE replaced each run.)
 # You can customize this file — Lisa will not overwrite it.
 
 name: Auto-update PR branches (Dispatch Handler)