@codyswann/lisa 3.26.0 → 3.26.1

package/plugins/lisa-cursor/hooks/block-managed-file-edits.sh

@@ -1,10 +1,9 @@
 #!/usr/bin/env bash
 # PreToolUse hook: refuse agent writes to files Lisa overwrites on every apply.
 #
-# Lisa ships templates in three modes, and only one of them destroys host edits:
+# Lisa ships templates in three modes, and only one of them is unsafe to edit:
 #
-#   copy-overwrite — replaced wholesale on every `lisa apply`. An edit here is
-#                    gone at the next `bun install`, silently.
+#   copy-overwrite — see below; the harm depends on the file.
 #   copy-contents  — Lisa APPENDS its lines; host content survives.
 #   create-only    — skipped when the file exists; the host owns it outright.
 #
@@ -12,6 +11,21 @@
 # would stop agents editing files they are supposed to own, which is worse than
 # the problem being solved.
 #
+# WITHIN copy-overwrite there are two populations with OPPOSITE consequences,
+# and an earlier version of this guard described only one of them:
+#
+#   hash-tracked guards (the `.mjs` scripts, listed in the Lisa-owned ledger)
+#     — an edit classifies as `host-modified` and `lisa apply` PRESERVES it.
+#       The file silently forks and stops receiving upstream fixes while looking
+#       current. Nothing is deleted; that is what makes it hard to notice.
+#   everything else (`.json` configs and friends)
+#     — replaced wholesale on the next apply, which runs on every install.
+#       The edit vanishes.
+#
+# The refusal branches on ledger membership so it states the consequence that
+# actually applies, rather than describing both and leaving the reader to work
+# out which they are in.
+#
 # Measured, not hypothetical. Nothing enforced this, so downstream copies were
 # edited and then silently diverged: `classify-maestro-failures.mjs` reached
 # 36,061 bytes in one fleet repo against 29,586 shipped, and five gate files in
@@ -67,6 +81,71 @@ if [ -f "$project_root/package.json" ] &&
   exit 0
 fi
 
+# Whether the project has claimed a path in `.lisaignore`.
+#
+# THIS IS THE OWNERSHIP QUESTION, and it decides whether blocking is right at
+# all. `lisa apply` skips an ignored path — it logs `Kept (.lisaignore)` and
+# counts it as ignored rather than overwritten — so the file is the project's,
+# its edits survive, and refusing them would be refusing someone access to their
+# own file. `doctor-lisa-owned-artifacts` already consults this list; this guard
+# did not, which would have blocked deliberate forks.
+#
+# The real matcher is minimatch in `src/utils/ignore-patterns.ts` and cannot be
+# reproduced faithfully in shell. This covers the common shapes — exact path,
+# directory prefix, glob, and a bare pattern matching any segment — and where it
+# is unsure it ALLOWS. Wrongly allowing costs an edit that apply may overwrite,
+# which is the behaviour before this guard existed; wrongly blocking locks
+# someone out of a file they own.
+lisaignored() {
+  local rel="$1"
+  local list="$project_root/.lisaignore"
+  [ -f "$list" ] || return 1
+  local pattern
+  while IFS= read -r pattern || [ -n "$pattern" ]; do
+    pattern="${pattern#"${pattern%%[![:space:]]*}"}"
+    pattern="${pattern%"${pattern##*[![:space:]]}"}"
+    [ -n "$pattern" ] || continue
+    case "$pattern" in \#*) continue ;; esac
+    # A leading `!` is not gitignore negation here. The real matcher passes
+    # patterns to minimatch, which negates by default, and it combines them with
+    # `.some()` — so a single `!scripts/a.mjs` line reports EVERY OTHER PATH as
+    # ignored. Measured:
+    #
+    #   patterns=["!scripts/a.mjs"]  path=scripts/a.mjs -> ignored=false
+    #   patterns=["!scripts/a.mjs"]  path=scripts/b.mjs -> ignored=TRUE
+    #
+    # Reproducing that faithfully would mean disabling this guard on a typo.
+    # Reproducing the intuitive gitignore reading would mean blocking files the
+    # matcher considers ignored. Both are wrong, so the file is treated as
+    # claimed and the write is allowed — the same direction this function errs
+    # everywhere else. Filed upstream; when the matcher stops negating, delete
+    # this branch rather than teaching it a second wrong answer.
+    case "$pattern" in !*) return 0 ;; esac
+    case "$pattern" in
+      */)
+        case "$rel" in "${pattern%/}"/* | "${pattern%/}") return 0 ;; esac
+        ;;
+    esac
+    # shellcheck disable=SC2254 -- the pattern is a glob on purpose.
+    case "$rel" in $pattern) return 0 ;; esac
+    case "$pattern" in
+      */*) ;;
+      *)
+        # shellcheck disable=SC2254 -- ditto, matched against the basename.
+        case "${rel##*/}" in $pattern) return 0 ;; esac
+        ;;
+    esac
+  done <"$list"
+  return 1
+}
+
+# A candidate rewritten relative to the project, so an absolute target from a
+# tool payload and a relative one from a shell command classify identically.
+relative_path() {
+  local rel="${1#"$project_root"/}"
+  printf '%s' "${rel#./}"
+}
+
 # Whether a host-relative path is shipped as a copy-overwrite template.
 #
 # A few stat calls rather than an enumeration: the same relative path is probed
@@ -77,10 +156,11 @@ managed_source() {
   case "$candidate" in
     */node_modules/* | node_modules/* | */dist/* | dist/*) return 1 ;;
   esac
-  # Normalise to a project-relative path so an absolute target still matches.
-  local rel="${candidate#"$project_root"/}"
-  rel="${rel#./}"
+  local rel
+  rel="$(relative_path "$candidate")"
   [ -n "$rel" ] || return 1
+  # Claimed by the project, so not ours to refuse.
+  lisaignored "$rel" && return 1
   local stack
   for stack in "$package_root"/*/copy-overwrite; do
     [ -d "$stack" ] || continue
@@ -92,19 +172,44 @@ managed_source() {
   return 1
 }
 
+# Whether a destination is a ledger-tracked Lisa-owned guard.
+#
+# The two populations behind this guard have OPPOSITE consequences, so the
+# refusal has to know which one it is looking at rather than describing both and
+# leaving the reader to guess. A guard in the content-hash ledger classifies as
+# `host-modified` once edited and `lisa apply` PRESERVES it; anything else is
+# replaced wholesale. Both are bad, for different reasons, and the right next
+# step differs too.
+ledger_tracked() {
+  local rel="$1"
+  local ledger="$package_root/dist/core/lisa-owned-hash-ledger.js"
+  [ -f "$ledger" ] || return 1
+  grep -q "\"$rel\"" "$ledger" 2>/dev/null
+}
+
 refuse() {
   local target="$1"
   local source="$2"
+  local rel="$3"
+  local consequence
+  if ledger_tracked "$rel"; then
+    consequence="This is a Lisa-owned guard, tracked by content hash. \`lisa apply\`
+will PRESERVE your edit rather than overwrite it — and that is the trap. The
+file silently forks: it keeps looking current while every upstream fix stops
+reaching it. One repository in this fleet is carrying 243 lines of divergence
+nobody knew about, in a guard that had quietly stopped receiving fixes."
+  else
+    consequence="This template is not hash-tracked, so \`lisa apply\` REPLACES it
+wholesale — and apply runs on every \`bun install\`. Your edit survives until the
+next install and then vanishes, with nothing reporting that it had."
+  fi
   cat >&2 <<EOF
 BLOCKED: refusing to write \`$target\`.
 
-WHY: this file is Lisa-managed. It is shipped as a **copy-overwrite** template
-(\`$source\` in the installed package) and is replaced wholesale on every
-\`lisa apply\` — which runs on every \`bun install\`. Your edit would survive
-until the next install and then vanish, with nothing reporting that it had.
+WHY: this file is Lisa-managed, shipped as a **copy-overwrite** template
+(\`$source\` in the installed package).
 
-That is not hypothetical: downstream copies edited this way diverged silently
-until they stopped receiving upstream fixes entirely.
+$consequence
 
 WHERE IT GOES INSTEAD — take the first one that fits:
 
@@ -122,7 +227,23 @@ WHERE IT GOES INSTEAD — take the first one that fits:
    proves each one, so a project can substitute its own task without touching a
    shipped file.
 
-4. You believe this file should not be Lisa-managed at all. That is a real
+4. This project has deliberately FORKED this file and means to keep its own
+   version. What to do depends on which population it is, and \`.lisaignore\` is
+   the WRONG answer for a hash-tracked guard:
+
+   - **A Lisa-owned guard (hash-tracked).** Do NOT add it to \`.lisaignore\`. The
+     ledger already preserves your version, so ignoring it buys nothing — and it
+     silences the standoff \`lisa doctor\` reports on every run, replacing a true
+     warning with the line "Enforcement guards match the installed Lisa
+     version", which is then false. A visible, resolvable fork becomes a silent
+     permanent one. Keep the warning and resolve the fork: upstream what is
+     general, or accept the standoff knowingly. To make this one edit, use the
+     override below.
+   - **Any other template.** \`.lisaignore\` is the right answer. Nothing else
+     preserves it, and the entry declares the divergence where the next person
+     can see it.
+
+5. You believe this file should not be Lisa-managed at all. That is a real
    argument and it belongs upstream, not in a local edit that will be erased.
 
 If a human explicitly asked for this edit, they can re-run with
@@ -142,7 +263,7 @@ case "$tool_name" in
     while IFS= read -r candidate; do
       [ -n "$candidate" ] || continue
       if source_path="$(managed_source "$candidate")"; then
-        refuse "$candidate" "$source_path"
+        refuse "$candidate" "$source_path" "$(relative_path "$candidate")"
       fi
     done <<EOF
 $paths
@@ -157,7 +278,7 @@ EOF
     while IFS= read -r token; do
       [ -n "$token" ] || continue
       if source_path="$(managed_source "$token")"; then
-        refuse "$token" "$source_path"
+        refuse "$token" "$source_path" "$(relative_path "$token")"
       fi
     done <<EOF
 $(printf '%s' "$command_str" |

package/plugins/lisa-expo/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Expo and React Native-specific skills, agents, rules, and MCP servers.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Harper/Fabric-specific Lisa rules for TypeScript component apps.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "NestJS-specific skills and migration write-protection hooks.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Ruby on Rails-specific skills and hooks for RuboCop and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "TypeScript-specific hooks for formatting, linting, and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "Distributable LLM Wiki kernel — ingest, query, lint, and maintain a git-native markdown knowledge base across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "3.26.0",
+  "version": "3.26.1",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"