@codyswann/lisa 3.15.0 → 3.16.0

package/expo/copy-overwrite/scripts/bdd/markdown-cell.mjs

@@ -0,0 +1,128 @@
+// This file is managed by Lisa and IS replaced on each `lisa` run.
+// Do not edit directly — durable changes belong upstream in Lisa.
+
+/**
+ * Markdown table-cell escaping, shared by the BDD burndown renderer and the
+ * Maestro failure classifier.
+ *
+ * Waiver reasons, scenario titles, discovered test names and Maestro failure
+ * messages are repo data that lands inside a generated Markdown table. A single
+ * `|` ends the cell early and shifts every column after it, so the columns to
+ * its right silently misreport — in a generated file nobody re-reads. A line
+ * ending is worse: it ends the ROW, so one record becomes two and every column
+ * after the break is read against the wrong header.
+ *
+ * This module exists because the escaper was module-private and DUPLICATED —
+ * `cell` inside `scripts/bdd/render.mjs` and `escapeCell` inside
+ * `scripts/classify-maestro-failures.mjs`. Neither copy could be reached by a
+ * unit test, so both could only be exercised indirectly through a whole
+ * rendered document, and the two had already drifted: one stripped `\r\n` and
+ * `\n`, the other only `\n`. Both leaked live column separators.
+ *
+ * The contract predicates below are exported alongside it deliberately, so
+ * "table safe" has one definition rather than one per test. That is worth
+ * having and it is NOT sufficient: the first fix on this defect shipped with
+ * `hasUnescapedPipe` already asserting the right answer for `\\|` while `cell`
+ * was never fed that input, so the escaper leaked at every even backslash run
+ * with the yardstick sitting right there, correct and unused. A shared
+ * predicate only helps once something SWEEPS the subject with it. Enumerate the
+ * property; the named instances are documentation.
+ *
+ * @module scripts/bdd/markdown-cell
+ */
+
+/**
+ * Escape one pipe together with the WHOLE backslash run in front of it.
+ *
+ * The rule is the same one {@link hasUnescapedPipe} measures, stated once:
+ * a pipe is a live column separator exactly when an EVEN number of backslashes
+ * (zero included) precedes it. So an even run needs one more backslash; an odd
+ * run is already an escape and must be left alone, or the escaper would grow
+ * the run on every pass and stop being idempotent.
+ *
+ * Two nearby spellings are wrong and both look right:
+ *
+ *  - `/\\?\|/` — consumes at most ONE preceding backslash, so `\\|` (escaped
+ *    backslash, live pipe) is seen as an escape that is already present and is
+ *    passed through untouched. It leaks at every even run: measured live at
+ *    runs 2, 4, 6 and 8. That was this defect's first fix and was itself a bug —
+ *    the report named two INSTANCES, and fixing those is not fixing the
+ *    property.
+ *  - `/((?:\\\\)*)\|/` with a `"$1\\|"` replacement — an even-run pattern with
+ *    no left anchor. The engine simply slides one character right and matches
+ *    an even run INSIDE an odd one, so `\|` becomes `\\\|`. Measured: 60 leaks
+ *    over the same sweep. A `(?<!\\)` lookbehind fixes it, but the arithmetic
+ *    below says the same thing without needing that argument.
+ *
+ * @param {string} _match - The whole match; unused.
+ * @param {string} backslashes - The backslash run preceding the pipe.
+ * @returns {string} The run, escaped, plus the pipe.
+ */
+const escapePipeRun = (_match, backslashes) =>
+  `${backslashes}${backslashes.length % 2 === 0 ? "\\" : ""}|`;
+
+/**
+ * Make author-supplied text safe inside a Markdown table cell.
+ *
+ * Both steps exist because the obvious spelling of each was wrong, and both
+ * failures are invisible in review:
+ *
+ *  - Pipes are escaped by RUN, not one at a time — see {@link escapePipeRun}.
+ *  - `/\r\n?|\n/` and not `/\r?\n/`. The latter only matches a CR that is
+ *    FOLLOWED by an LF, so a lone `\r` survives — and CommonMark treats a lone
+ *    CR as a line ending, which ends the row rather than the cell.
+ *
+ * The `?? ""` guard is load-bearing and must stay: without it a nullish waiver
+ * field prints the literal text "null" or "undefined" into the ledger, which
+ * reads as data.
+ *
+ * SCOPE — this is SAFETY, not FIDELITY, and the difference is deliberate. The
+ * only promise made is that no live column separator and no line ending reach
+ * the table; it is NOT promised that a reader can recover the input byte for
+ * byte. Lone backslashes are left exactly as they arrive, so Markdown consumes
+ * them pairwise and a cell holding N backslashes DISPLAYS `floor(N / 2)` of
+ * them. A round-trip-safe escaper is one step longer —
+ * `.replace(/\\/g, "\\\\").replace(/\|/g, "\\|")` — and was not chosen: it
+ * rewrites every backslash in every waiver reason and scenario title in the
+ * repo, which churns the generated ledger for a fidelity nobody consumes, and
+ * it is not what {@link hasUnescapedPipe} measures. If a caller ever needs the
+ * input back out of the table, it needs that escaper and a matching
+ * unescaper — not a patch to this one.
+ * @param {unknown} text - Arbitrary cell content.
+ * @returns {string} Text safe to interpolate into a table row.
+ */
+export const cell = text =>
+  String(text ?? "")
+    .replace(/(\\*)\|/g, escapePipeRun)
+    .replace(/\r\n?|\n/g, " ");
+
+/**
+ * Whether `text` still carries a line ending. A cell containing one splits the
+ * table row it sits in, so this is the second half of the safety contract.
+ * @param {string} text - Text already passed through {@link cell}.
+ * @returns {boolean} True when a CR or an LF survives.
+ */
+export const hasLineEnding = text => /[\r\n]/.test(String(text));
+
+/**
+ * Whether `text` still carries a pipe that Markdown will read as a column
+ * separator.
+ *
+ * A pipe is escaped only when an ODD number of backslashes precedes it: `\|` is
+ * a literal pipe, but `\\|` is an escaped backslash followed by a LIVE pipe.
+ * That distinction is the whole reason this predicate is not a regex.
+ * @param {string} text - Text already passed through {@link cell}.
+ * @returns {boolean} True when a column-separating pipe survives.
+ */
+export const hasUnescapedPipe = text => {
+  let backslashes = 0;
+  for (const character of String(text)) {
+    if (character === "\\") {
+      backslashes += 1;
+      continue;
+    }
+    if (character === "|" && backslashes % 2 === 0) return true;
+    backslashes = 0;
+  }
+  return false;
+};

package/expo/copy-overwrite/scripts/bdd/render.mjs

@@ -11,6 +11,7 @@
  * @module scripts/bdd/render
  */
 import { byCodeUnit } from "./contract.mjs";
+import { cell } from "./markdown-cell.mjs";
 
 /**
  * Format a coverage figure, refusing to print "100%" for an empty
@@ -25,20 +26,6 @@ const fmt = value =>
     ? "n/a (no obligations)"
     : `${value.covered}/${value.total} (${value.percentage.toFixed(1)}%)`;
 
-/**
- * Make author-supplied text safe inside a Markdown table cell.
- *
- * Waiver reasons and scenario titles are repo data. A single `|` ends the
- * cell early and shifts every column after it, so the Ticket and Expires
- * columns silently misreport — in a generated file nobody re-reads.
- * @param {unknown} text - Arbitrary cell content.
- * @returns {string} Text safe to interpolate into a table row.
- */
-const cell = text =>
-  String(text ?? "")
-    .replace(/\|/g, "\\|")
-    .replace(/\r?\n/g, " ");
-
 /**
  * Render the per-platform traceability table.
  * @param {object} report - The coverage report.

package/expo/copy-overwrite/scripts/bdd-matrix.mjs

@@ -21,12 +21,13 @@
  */
 import * as fs from "node:fs";
 import * as path from "node:path";
-import { fileURLToPath, pathToFileURL } from "node:url";
+import { fileURLToPath } from "node:url";
 
 import { byCodeUnit, declaredPlatforms, trackerUrl } from "./bdd/contract.mjs";
 import { loadScenarios } from "./bdd/parse.mjs";
 import { indexResults } from "./bdd/report.mjs";
 import { loadExecutionResults } from "./check-bdd-coverage.mjs";
+import { invokedAsScript } from "./lib/invoked-as-script.mjs";
 
 const PACKAGE_ROOT = path.resolve(
   path.dirname(fileURLToPath(import.meta.url)),
@@ -250,5 +251,4 @@ function main() {
   console.log(`[bdd-matrix] wrote ${OUT_REL}`);
 }
 
-if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href)
-  main();
+if (invokedAsScript(import.meta.url)) main();

package/expo/copy-overwrite/scripts/check-bdd-coverage.mjs

@@ -43,7 +43,7 @@
  */
 import * as fs from "node:fs";
 import * as path from "node:path";
-import { fileURLToPath, pathToFileURL } from "node:url";
+import { fileURLToPath } from "node:url";
 
 import {
   ADOPTION_STATES,
@@ -81,6 +81,7 @@ import {
   validateTrackerTags,
 } from "./bdd/validate.mjs";
 import { ISO_DATE, validateWaivers } from "./bdd/waivers.mjs";
+import { invokedAsScript } from "./lib/invoked-as-script.mjs";
 
 const PACKAGE_ROOT = path.resolve(
   path.dirname(fileURLToPath(import.meta.url)),
@@ -796,5 +797,4 @@ function printHuman(gateRun, envelope) {
   console.error(`[bdd-coverage] ${envelope.summary.headline}`);
 }
 
-if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href)
-  main();
+if (invokedAsScript(import.meta.url)) main();

package/expo/copy-overwrite/scripts/check-e2e-coverage.mjs

@@ -32,7 +32,8 @@
  */
 import * as fs from "node:fs";
 import * as path from "node:path";
-import { pathToFileURL } from "node:url";
+
+import { invokedAsScript } from "./lib/invoked-as-script.mjs";
 
 export const defaultThresholds = {
   playwright: { routes: 80 },
@@ -389,9 +390,6 @@ function main() {
 }
 
 // Run only when invoked directly — importing for tests must have no side effects.
-if (
-  process.argv[1] &&
-  import.meta.url === pathToFileURL(process.argv[1]).href
-) {
+if (invokedAsScript(import.meta.url)) {
   main();
 }

package/expo/copy-overwrite/scripts/classify-maestro-failures.mjs

@@ -104,7 +104,9 @@
  */
 import * as fs from "node:fs";
 import * as path from "node:path";
-import { pathToFileURL } from "node:url";
+
+import { cell } from "./bdd/markdown-cell.mjs";
+import { invokedAsScript } from "./lib/invoked-as-script.mjs";
 
 /**
  * Wait commands whose `timeout:` is a ceiling the command burns before failing.
@@ -667,7 +669,7 @@ export function renderMarkdown({ report, failures, defects }) {
         ? `${failure.intermittent.ratePercent}% (${failure.intermittent.failures}/${failure.intermittent.runs}, measured ${failure.intermittent.measuredAt})`
         : "—";
       lines.push(
-        `| \`${failure.flow}\` | ${escapeCell(failure.message)} | ${known} |`
+        `| \`${failure.flow}\` | ${cell(failure.message)} | ${known} |`
       );
     }
     lines.push("");
@@ -696,15 +698,6 @@ export function renderMarkdown({ report, failures, defects }) {
   return lines.join("\n");
 }
 
-/**
- * Escape a value so it cannot break out of a markdown table cell.
- * @param {string} value - Raw text
- * @returns {string} Escaped text
- */
-function escapeCell(value) {
-  return String(value).replace(/\|/g, "\\|").replace(/\n/g, " ");
-}
-
 /**
  * Render one report's classification as plain text.
  * @param {{report: string, failures: object[], defects: object[]}} result - One report's result
@@ -770,9 +763,6 @@ function main(argv) {
   }
 }
 
-if (
-  process.argv[1] &&
-  import.meta.url === pathToFileURL(process.argv[1]).href
-) {
+if (invokedAsScript(import.meta.url)) {
   main(process.argv.slice(2));
 }

package/expo/copy-overwrite/scripts/lib/invoked-as-script.mjs

@@ -0,0 +1,96 @@
+// This file is managed by Lisa and IS replaced on each `lisa` run.
+// Do not edit directly — durable changes belong upstream in Lisa.
+
+/**
+ * invoked-as-script — the one implementation of "was this module run as the CLI
+ * entry point?", shared by every guarded `.mjs` entry point Lisa ships.
+ *
+ * @remarks
+ * ## Why this is shared rather than copied
+ *
+ * The obvious spelling is `import.meta.url === pathToFileURL(process.argv[1]).href`,
+ * and it is wrong in a way that cannot be seen in review. `import.meta.url` is
+ * normally the REAL path — node resolves ESM through `realpath` unless
+ * `--preserve-symlinks` or `--preserve-symlinks-main` is set — while `argv[1]`
+ * is whatever spelling the caller typed. Naming only the first of those two
+ * flags is what let a second instance of this very defect survive review here:
+ * `--preserve-symlinks-main` is a SEPARATE flag that applies to the entry
+ * module specifically, which is exactly the module this guard runs in, so it is
+ * the one that matters most and the one easiest to leave out. See the section
+ * on realpathing both sides below.
+ * Reached through a symlinked checkout, a symlinked bin shim, or a
+ * `/tmp` path on macOS (`/tmp` is itself a symlink to `/private/tmp`), the two
+ * differ, the guard is false, `main()` never runs, and the process exits 0
+ * having done nothing.
+ *
+ * That failure mode is not symmetric. A no-op GENERATOR usually fails closed —
+ * whatever consumes its output notices the missing artifact. A no-op CHECK
+ * fails **OPEN**: it prints nothing, exits 0, and the npm script "succeeds", so
+ * a gate that is meant to block a merge silently stops having an opinion. Every
+ * `check-*.mjs` in this tree is in the second category, and git worktrees —
+ * which every Lisa-driven agent uses — put a symlinked path on that code path
+ * as a matter of routine.
+ *
+ * ## `moduleUrl` is REQUIRED, and is the FIRST parameter
+ *
+ * A deliberate deviation from the obvious signature
+ * `invokedAsScript(argv1 = process.argv[1], moduleUrl = import.meta.url)`. A
+ * defaulted `import.meta.url` inside a SHARED module resolves to *this* file,
+ * which is never anybody's `process.argv[1]` — so a caller that forgot the
+ * second argument would get `false` forever and no-op silently. That is exactly
+ * the fail-open defect this module exists to remove, re-introduced by its own
+ * convenience default. Making it required and first means a call site cannot be
+ * written wrong.
+ *
+ * ## Why ANY resolution error returns false
+ *
+ * `realpathSync` throws ENOENT, EACCES, ELOOP and ENOTDIR, not just ENOENT. A
+ * fallback that narrows to ENOENT and then compares `resolve(argv1)` reinstates
+ * the un-normalized comparison the realpath exists to avoid, so the symlink
+ * defect survives on precisely the path meant to be the safety net.
+ *
+ * Returning `false` on an unresolvable `argv[1]` is sound rather than merely
+ * convenient: node resolved and LOADED the entry point from that path moments
+ * earlier, so a path that cannot be resolved now is not the path this module
+ * was loaded through. Comparing an unnormalized spelling instead would answer
+ * "maybe" with a confident "yes".
+ *
+ * ## Why BOTH sides are realpath'd, not just `argv[1]`
+ *
+ * "`import.meta.url` is always the real path" is true by default and false under
+ * `--preserve-symlinks-main`, which tells node not to resolve the main entry.
+ * Normalizing only `argv[1]` then compares a real path against a symlinked one
+ * and answers `false` for an entry point that WAS invoked directly — the same
+ * fail-open this module exists to remove, reappearing on the flag that most
+ * looks like it should not matter. Measured: a symlinked entry point reports
+ * `true` normally and `false` under the flag.
+ *
+ * Realpathing both sides is free in the ordinary case, where `moduleUrl` is
+ * already canonical and `realpathSync` is the identity.
+ *
+ * @module scripts/lib/invoked-as-script
+ */
+import { realpathSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+
+/**
+ * True when `moduleUrl` names the module node was asked to run.
+ *
+ * Both sides are realpath'd before comparison — see the module remarks for why a
+ * raw comparison silently answers "no" under a symlinked path, and why
+ * normalizing only `argv[1]` leaves the same hole open under
+ * `--preserve-symlinks-main`.
+ * @param {string} moduleUrl - The caller's own `import.meta.url`.
+ * @param {string | undefined} [argv1] - Entry path; defaults to `process.argv[1]`.
+ * @returns {boolean} Whether the caller should run its CLI body.
+ */
+export function invokedAsScript(moduleUrl, argv1 = process.argv[1]) {
+  // `node -e`, `node --eval`, `node --print` and the REPL leave `argv[1]`
+  // undefined. Nothing was asked to run, so nothing should.
+  if (!argv1) return false;
+  try {
+    return realpathSync(argv1) === realpathSync(fileURLToPath(moduleUrl));
+  } catch {
+    return false;
+  }
+}

package/package.json

@@ -125,7 +125,7 @@
     }
   },
   "name": "@codyswann/lisa",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
   "main": "dist/index.js",
   "exports": {

package/plugins/lisa/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Universal governance: agents, skills, commands, hooks, and rules for all projects.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "AWS CDK-specific Lisa plugin.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Expo and React Native-specific skills, agents, rules, and MCP servers.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Harper/Fabric-specific Lisa rules for TypeScript component apps.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "NestJS-specific skills and migration write-protection hooks.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"