@codyswann/lisa 3.45.8 → 3.45.10

package/dist/migrations/ensure-audit-ignore-local-exclusions.js

@@ -209,7 +209,7 @@ export class EnsureAuditIgnoreLocalExclusionsMigration {
             return { name: this.name, action: "noop" };
         }
         const merged = {
-            ...(local ?? {}),
+            ...local,
             exclusions: [...retained, ...additions],
         };
         const addedIds = additions

package/dist/migrations/ensure-audit-ignore-local-exclusions.js.map

@@ -1 +1 @@
-{"version":3,"file":"ensure-audit-ignore-local-exclusions.js","sourceRoot":"","sources":["../../src/migrations/ensure-audit-ignore-local-exclusions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAO7E,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAChD,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAC/C,MAAM,uBAAuB,GAAG,QAAQ,CAAC;AA8BzC;;;GAGG;AACH,MAAM,iBAAiB,GAA2B;IAChD,YAAY;IACZ,MAAM;IACN,KAAK;IACL,QAAQ;IACR,aAAa;CACd,CAAC;AAEF;;;;;;;;;GASG;AACH,KAAK,UAAU,sBAAsB,CACnC,OAAe,EACf,aAAqC;IAErC,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;QAC3E,IAAI,MAAM,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,IAA4B;IAC9C,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7C,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU;SACxB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;SACtB,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzE,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;AACtB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,aAAa,CAAI,QAAgB;IAC9C,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,CAAI,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACjD,MAAM,WAAW,GAAG,MAAM,cAAc,CACtC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CACtC,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,cAAc,CACpC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,cAAc,CAAC,CACjE,CAAC;IACF,MAAM,MAAM,GAAG;QACb,WAAW,EAAE,SAAS,EAAE,OAAO;QAC/B,WAAW,EAAE,WAAW,EAAE,OAAO;KAClC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,qBAAqB,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QACjD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAClC,OAAO,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,CACL,qBAAqB;QACrB,GAAG,CAAC,SAAS,EAAE,OAAO,IAAI,OAAO,EAAE,uBAAuB,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,yCAAyC;IAC3C,IAAI,GAAG,sCAAsC,CAAC;IAC9C,WAAW,GAClB,uGAAuG,CAAC;IAElG,QAAQ,GAAyB,EAAE,CAAC;IAE5C;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,gBAAgB,CAAC,GAAqB;QAC1C,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QAEnB,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAClE,MAAM,aAAa,GACjB,MAAM,cAAc,CAAkB,iBAAiB,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAC/C,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,aAAa,CAClB,CAAC;QACF,MAAM,QAAQ,GAAG,YAAY;YAC3B,CAAC,CAAC,MAAM,cAAc,CAAkB,YAAY,CAAC;YACrD,CAAC,CAAC,IAAI,CAAC;QAET,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAEzC,MAAM,eAAe,GAAG,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;YAC9D,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1D,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,GAAG,eAAe,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,GAAqB;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAkB,SAAS,CAAC,CAAC;QAC9D,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/D,IACE,cAAc;YACd,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,gBAAgB,CAAC,EAC/D,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc;YAC7B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,gBAAgB,CAAC;YAC9D,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;QAClB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YAC3B,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,CAAC,GAAqB;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAkB,SAAS,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,cAAc;YAC7B,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,gBAAgB,CAAC;YACzD,CAAC,CAAC,QAAQ,CAAC;QACb,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEtD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;YAC7C,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;YACpB,IACE,OAAO,EAAE,KAAK,QAAQ;gBACtB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACf,CAAC,cAAc,IAAI,EAAE,KAAK,gBAAgB,CAAC,EAC3C,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,MAAM,GAAoB;YAC9B,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YAChB,UAAU,EAAE,CAAC,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC;SACxC,CAAC;QAEF,MAAM,QAAQ,GAAG,SAAS;aACvB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;aACtB,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG;YACd,SAAS,CAAC,MAAM,GAAG,CAAC;gBAClB,CAAC,CAAC,aAAa,SAAS,CAAC,MAAM,kBAAkB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBACvE,CAAC,CAAC,EAAE;YACN,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,OAAO,+BAA+B,CAAC,CAAC,CAAC,EAAE;SACrE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClB,MAAM,OAAO,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC;QAEtE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACjD,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,SAAS;gBACjB,YAAY,EAAE,CAAC,WAAW,CAAC;gBAC3B,OAAO;aACR,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7C,MAAM,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,SAAS;YACjB,YAAY,EAAE,CAAC,WAAW,CAAC;YAC3B,OAAO;SACR,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"ensure-audit-ignore-local-exclusions.js","sourceRoot":"","sources":["../../src/migrations/ensure-audit-ignore-local-exclusions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAO7E,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAChD,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAC/C,MAAM,uBAAuB,GAAG,QAAQ,CAAC;AA8BzC;;;GAGG;AACH,MAAM,iBAAiB,GAA2B;IAChD,YAAY;IACZ,MAAM;IACN,KAAK;IACL,QAAQ;IACR,aAAa;CACd,CAAC;AAEF;;;;;;;;;GASG;AACH,KAAK,UAAU,sBAAsB,CACnC,OAAe,EACf,aAAqC;IAErC,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;QAC3E,IAAI,MAAM,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,IAA4B;IAC9C,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7C,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU;SACxB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;SACtB,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzE,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;AACtB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,aAAa,CAAI,QAAgB;IAC9C,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,CAAI,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACjD,MAAM,WAAW,GAAG,MAAM,cAAc,CACtC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CACtC,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,cAAc,CACpC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,cAAc,CAAC,CACjE,CAAC;IACF,MAAM,MAAM,GAAG;QACb,WAAW,EAAE,SAAS,EAAE,OAAO;QAC/B,WAAW,EAAE,WAAW,EAAE,OAAO;KAClC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,qBAAqB,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QACjD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAClC,OAAO,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,CACL,qBAAqB;QACrB,GAAG,CAAC,SAAS,EAAE,OAAO,IAAI,OAAO,EAAE,uBAAuB,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,yCAAyC;IAC3C,IAAI,GAAG,sCAAsC,CAAC;IAC9C,WAAW,GAClB,uGAAuG,CAAC;IAElG,QAAQ,GAAyB,EAAE,CAAC;IAE5C;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,gBAAgB,CAAC,GAAqB;QAC1C,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QAEnB,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAClE,MAAM,aAAa,GACjB,MAAM,cAAc,CAAkB,iBAAiB,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAC/C,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,aAAa,CAClB,CAAC;QACF,MAAM,QAAQ,GAAG,YAAY;YAC3B,CAAC,CAAC,MAAM,cAAc,CAAkB,YAAY,CAAC;YACrD,CAAC,CAAC,IAAI,CAAC;QAET,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAEzC,MAAM,eAAe,GAAG,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;YAC9D,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1D,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,GAAG,eAAe,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,GAAqB;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAkB,SAAS,CAAC,CAAC;QAC9D,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/D,IACE,cAAc;YACd,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,gBAAgB,CAAC,EAC/D,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc;YAC7B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,gBAAgB,CAAC;YAC9D,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;QAClB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YAC3B,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,CAAC,GAAqB;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAkB,SAAS,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,cAAc;YAC7B,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,gBAAgB,CAAC;YACzD,CAAC,CAAC,QAAQ,CAAC;QACb,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEtD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;YAC7C,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;YACpB,IACE,OAAO,EAAE,KAAK,QAAQ;gBACtB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACf,CAAC,cAAc,IAAI,EAAE,KAAK,gBAAgB,CAAC,EAC3C,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,MAAM,GAAoB;YAC9B,GAAG,KAAK;YACR,UAAU,EAAE,CAAC,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC;SACxC,CAAC;QAEF,MAAM,QAAQ,GAAG,SAAS;aACvB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;aACtB,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG;YACd,SAAS,CAAC,MAAM,GAAG,CAAC;gBAClB,CAAC,CAAC,aAAa,SAAS,CAAC,MAAM,kBAAkB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBACvE,CAAC,CAAC,EAAE;YACN,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,OAAO,+BAA+B,CAAC,CAAC,CAAC,EAAE;SACrE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClB,MAAM,OAAO,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC;QAEtE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACjD,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,SAAS;gBACjB,YAAY,EAAE,CAAC,WAAW,CAAC;gBAC3B,OAAO;aACR,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7C,MAAM,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,SAAS;YACjB,YAAY,EAAE,CAAC,WAAW,CAAC;YAC3B,OAAO;SACR,CAAC;IACJ,CAAC;CACF"}

package/dist/migrations/ensure-wiki-source-declared.js

@@ -60,8 +60,8 @@ export class EnsureWikiSourceDeclaredMigration {
         }
         const { configPath, config, wikiRoot } = state;
         const merged = {
-            ...(config ?? {}),
-            wiki: { ...(config?.wiki ?? {}), source: { path: wikiRoot } },
+            ...config,
+            wiki: { ...config?.wiki, source: { path: wikiRoot } },
         };
         const message = `Declared wiki.source.path="${wikiRoot}" in ${LISA_CONFIG}`;
         if (ctx.dryRun) {

package/dist/migrations/ensure-wiki-source-declared.js.map

@@ -1 +1 @@
-{"version":3,"file":"ensure-wiki-source-declared.js","sourceRoot":"","sources":["../../src/migrations/ensure-wiki-source-declared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAOnE,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAC/D,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAmBjC;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,iCAAiC;IACnC,IAAI,GAAG,6BAA6B,CAAC;IACrC,WAAW,GAClB,iFAAiF,CAAC;IAEpF;;;;OAIG;IACK,KAAK,CAAC,SAAS,CAAC,UAAkB;QACxC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAwB,WAAW,CAAC,CAAC;QACzE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAa,UAAU,CAAC,CAAC;QAC5D,OAAO;YACL,UAAU;YACV,MAAM;YACN,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,iBAAiB;SACjD,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,GAAqB;QACjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnD,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC;IACpE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK,CAAC,GAAqB;QAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC7C,CAAC;QACD,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;QAC/C,MAAM,MAAM,GAAG;YACb,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;YACjB,IAAI,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;SAC9D,CAAC;QAEF,MAAM,OAAO,GAAG,8BAA8B,QAAQ,QAAQ,WAAW,EAAE,CAAC;QAC5E,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,mCAAmC,QAAQ,GAAG,CAAC,CAAC;YAC/D,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,SAAS;gBACjB,YAAY,EAAE,CAAC,WAAW,CAAC;gBAC3B,OAAO;aACR,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACpC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,SAAS;YACjB,YAAY,EAAE,CAAC,WAAW,CAAC;YAC3B,OAAO;SACR,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"ensure-wiki-source-declared.js","sourceRoot":"","sources":["../../src/migrations/ensure-wiki-source-declared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAOnE,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAC/D,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAmBjC;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,iCAAiC;IACnC,IAAI,GAAG,6BAA6B,CAAC;IACrC,WAAW,GAClB,iFAAiF,CAAC;IAEpF;;;;OAIG;IACK,KAAK,CAAC,SAAS,CAAC,UAAkB;QACxC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAwB,WAAW,CAAC,CAAC;QACzE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAa,UAAU,CAAC,CAAC;QAC5D,OAAO;YACL,UAAU;YACV,MAAM;YACN,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,iBAAiB;SACjD,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,GAAqB;QACjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnD,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC;IACpE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK,CAAC,GAAqB;QAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC7C,CAAC;QACD,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;QAC/C,MAAM,MAAM,GAAG;YACb,GAAG,MAAM;YACT,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;SACtD,CAAC;QAEF,MAAM,OAAO,GAAG,8BAA8B,QAAQ,QAAQ,WAAW,EAAE,CAAC;QAC5E,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,mCAAmC,QAAQ,GAAG,CAAC,CAAC;YAC/D,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,SAAS;gBACjB,YAAY,EAAE,CAAC,WAAW,CAAC;gBAC3B,OAAO;aACR,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACpC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,SAAS;YACjB,YAAY,EAAE,CAAC,WAAW,CAAC;YAC3B,OAAO;SACR,CAAC;IACJ,CAAC;CACF"}

package/expo/copy-overwrite/scripts/bdd/discover.mjs

@@ -26,6 +26,22 @@ import * as path from "node:path";
 import { byCodeUnit } from "./contract.mjs";
 import { listFiles, posix, resolveInsideRepo } from "./parse.mjs";
 
+/**
+ * A path without its trailing slashes.
+ *
+ * An index scan rather than `.replace(/\/+$/, "")`. A quantified class pinned
+ * to `$` is re-attempted from every position before it can fail, which is
+ * super-linear in the path's length — S5852. Walking back from the end is one
+ * pass and cannot backtrack.
+ * @param {string} value - A repo-relative path or prefix.
+ * @returns {string} The same path with every trailing `/` removed.
+ */
+const withoutTrailingSlashes = value => {
+  let end = value.length;
+  while (end > 0 && value[end - 1] === "/") end -= 1;
+  return value.slice(0, end);
+};
+
 /**
  * Normalize a repo-relative path or path prefix to one comparable spelling.
  *
@@ -36,10 +52,10 @@ import { listFiles, posix, resolveInsideRepo } from "./parse.mjs";
  * @returns {string} Its canonical form; the empty string means the repo root.
  */
 const canonicalPath = value =>
-  posix(String(value))
-    .replace(/^\.\/+/, "")
-    .replace(/\/+$/, "")
-    .replace(/^\.$/, "");
+  withoutTrailingSlashes(posix(String(value)).replace(/^\.\/+/, "")).replace(
+    /^\.$/,
+    ""
+  );
 
 /**
  * Whether a repo-relative path lies at or under a path prefix, SEGMENT-WISE.

package/expo/copy-overwrite/scripts/bdd/markdown-cell.mjs

@@ -68,6 +68,12 @@ const escapePipeRun = (_match, backslashes) =>
  * failures are invisible in review:
  *
  *  - Pipes are escaped by RUN, not one at a time — see {@link escapePipeRun}.
+ *  - `(?<!\\)` in front of that run. Without it the engine may start a run
+ *    part-way into a longer one, so every position in a backslash run is a
+ *    fresh attempt and the scan is super-linear in the cell's length — S5852,
+ *    on author-supplied text. The lookbehind removes no match: a run's
+ *    leftmost backslash always wins under leftmost-match anyway, so the
+ *    later starts it forbids were never the ones chosen.
  *  - `/\r\n?|\n/` and not `/\r?\n/`. The latter only matches a CR that is
  *    FOLLOWED by an LF, so a lone `\r` survives — and CommonMark treats a lone
  *    CR as a line ending, which ends the row rather than the cell.
@@ -93,7 +99,7 @@ const escapePipeRun = (_match, backslashes) =>
  */
 export const cell = text =>
   String(text ?? "")
-    .replace(/(\\*)\|/g, escapePipeRun)
+    .replace(/(?<!\\)(\\*)\|/g, escapePipeRun)
     .replace(/\r\n?|\n/g, " ");
 
 /**

package/expo/copy-overwrite/scripts/bdd/parse.mjs

@@ -163,7 +163,13 @@ export function parseFeatureSource(source, file, platforms) {
       pending.push(...tagsOf(trimmed));
       continue;
     }
-    const featureMatch = /^Feature:\s*(.+)$/.exec(trimmed);
+    // `(\S.*)` and not `(.+)`, here and on the Scenario line below. `\s*(.+)`
+    // lets both halves claim the same run of spaces, so the engine has a
+    // choice at every one of them and the match is super-linear in the line's
+    // length — S5852, on feature files. `\S` makes the halves disjoint. The
+    // subject is already trimmed and the capture is trimmed again, so no line
+    // that used to match stops matching.
+    const featureMatch = /^Feature:\s*(\S.*)$/.exec(trimmed);
     if (featureMatch) {
       feature = featureMatch[1].trim();
       // Gherkin inherits Feature-level tags down to every scenario in the
@@ -181,7 +187,7 @@ export function parseFeatureSource(source, file, platforms) {
       backgroundSteps = [];
       continue;
     }
-    if (/^Background:/.test(trimmed)) {
+    if (trimmed.startsWith("Background:")) {
       // Background is per-Feature, so it replaces any previous one rather than
       // accumulating, and its steps are collected instead of a scenario's.
       backgroundSteps = [];
@@ -189,7 +195,7 @@ export function parseFeatureSource(source, file, platforms) {
       current = null;
       continue;
     }
-    const scenarioMatch = /^Scenario(?: Outline| Template)?:\s*(.+)$/.exec(
+    const scenarioMatch = /^Scenario(?: Outline| Template)?:\s*(\S.*)$/.exec(
       trimmed
     );
     if (scenarioMatch) {

package/expo/copy-overwrite/scripts/check-e2e-coverage.mjs

@@ -382,7 +382,7 @@ export function isExcludedFlow(source, excluded) {
  */
 function flowTags(source) {
   const lines = source.split("\n");
-  const start = lines.findIndex(line => /^tags:/u.test(line));
+  const start = lines.findIndex(line => line.startsWith("tags:"));
   if (start === -1) {
     return [];
   }
@@ -397,11 +397,17 @@ function flowTags(source) {
   for (const line of lines.slice(start + 1)) {
     // The block ends at the document separator, at a non-indented line, or at
     // anything that is not a list item. Each of those is what the regex missed.
-    const item = line.match(/^\s+-\s*(.+?)\s*$/u);
+    // The whitespace either side of the item is trimmed in JS rather than by
+    // `\s*(.+?)\s*$`. There, three quantifiers compete for the same spaces, so
+    // the engine has a choice to make at each one and the match is
+    // super-linear in the line's length — S5852, on a workflow file. `(.+)`
+    // holds the same "at least one character after the dash" condition the
+    // lazy form did, so no line changes its verdict.
+    const item = line.match(/^\s+-(.+)$/u);
     if (!item || line.startsWith("---")) {
       break;
     }
-    tags.push(item[1].replace(/^["']|["']$/gu, ""));
+    tags.push(item[1].trim().replace(/^["']|["']$/gu, ""));
   }
   return tags;
 }

package/expo/copy-overwrite/scripts/classify-maestro-failures.mjs

@@ -149,6 +149,57 @@ const PLACEHOLDER_METHODS = new Set([
   "?",
 ]);
 
+/**
+ * An `id:` line, with everything after the colon captured verbatim.
+ *
+ * Two deliberate spellings, both there to keep the match linear (S5852):
+ * `[ \t]` rather than `\s`, because this is applied to one already-split line
+ * and `\s`'s newline class only lets the indentation run overlap the next
+ * line's; and `(?:\S.*)?` rather than `.*`, because `[ \t]*(.*)` lets both
+ * halves claim the same spaces, which is a choice the engine has to make at
+ * every one of them.
+ */
+const ID_LINE = /^[ \t]*id:[ \t]*((?:\S.*)?)$/;
+
+/** A `text:` line, read the same way. */
+const TEXT_LINE = /^[ \t]*text:[ \t]*((?:\S.*)?)$/;
+
+/**
+ * A scalar value with one layer of matching quotes removed.
+ *
+ * Character comparison rather than `['"]?(...)['"]?`, because the regex form
+ * cannot express "the same quote at both ends" without a backreference, and
+ * the shape it settled for — a lazy capture between two optional quotes and a
+ * trailing `\s*$` — has three quantifiers competing for the same characters.
+ * That is super-linear in the line's length (S5852) on flow files.
+ * @param {string} value - An already-trimmed scalar.
+ * @returns {string} The value without its surrounding quote pair.
+ */
+function unquote(value) {
+  const first = value.at(0);
+  const isQuote = first === "'" || first === '"';
+  return isQuote && value.length > 1 && value.at(-1) === first
+    ? value.slice(1, -1)
+    : value;
+}
+
+/**
+ * The selector a `key: value` line declares, or null when the line is not one.
+ *
+ * An empty value reads as "no selector here" rather than as the empty
+ * selector, which is what the previous `[^'"\n]+?` (one character minimum)
+ * also did.
+ * @param {string} line - One line of flow YAML.
+ * @param {RegExp} pattern - The key's line pattern.
+ * @returns {string|null} The selector, or null.
+ */
+function scalarSelector(line, pattern) {
+  const match = pattern.exec(line);
+  if (!match) return null;
+  const value = unquote(match[1].trim());
+  return value === "" ? null : value;
+}
+
 /**
  * Pull `id:`/`text:` selectors and their ceilings out of a flow's YAML source.
  *
@@ -178,7 +229,12 @@ export function extractGates(source) {
 
   for (const line of lines) {
     if (/^\s*#/.test(line) || line.trim() === "") continue;
-    const command = line.match(/^(\s*)-?\s*(\w+):/);
+    // `(?:-\s*)?` rather than `-?\s*`: with two `\s*` runs either side of an
+    // optional dash, both can claim the same spaces and the engine has a
+    // choice at every one — super-linear in the line's length (S5852). Tying
+    // the dash to the whitespace that follows it removes the choice and
+    // recognises exactly the same lines.
+    const command = line.match(/^(\s*)(?:-\s*)?(\w+):/);
     if (command && GATE_COMMANDS.includes(command[2])) {
       if (inGate) flush();
       inGate = true;
@@ -198,18 +254,35 @@ export function extractGates(source) {
       timeout = Number(timeoutMatch[1]);
       continue;
     }
-    const idMatch = line.match(/^\s*id:\s*['"]?([^'"\n]+?)['"]?\s*$/);
-    if (idMatch) {
-      pending.push({ kind: "id", selector: idMatch[1] });
+    const idSelector = scalarSelector(line, ID_LINE);
+    if (idSelector !== null) {
+      pending.push({ kind: "id", selector: idSelector });
       continue;
     }
-    const textMatch = line.match(/^\s*text:\s*['"]?([^'"\n]+?)['"]?\s*$/);
-    if (textMatch) pending.push({ kind: "text", selector: textMatch[1] });
+    const textSelector = scalarSelector(line, TEXT_LINE);
+    if (textSelector !== null)
+      pending.push({ kind: "text", selector: textSelector });
   }
   if (inGate) flush();
   return gates;
 }
 
+/** The extension a referenced flow must carry to be followed. */
+const YAML_SUFFIX = ".yaml";
+
+/**
+ * A `runFlow: <path>` line, in the shorthand list-item form.
+ *
+ * `[ \t]` rather than `\s` throughout, and the dash tied to the whitespace
+ * that follows it. Under `m`, a `\s*` run can cross a newline into the next
+ * line's own `^`, so the scan re-attempts the same characters from many start
+ * positions — super-linear in the file's length (S5852).
+ */
+const INLINE_RUN_FLOW = /^[ \t]*(?:-[ \t]*)?runFlow:[ \t]*['"]?([^'"\s]+)/gm;
+
+/** The `file: <path>` line of the expanded `runFlow:` form. */
+const NESTED_RUN_FLOW = /^[ \t]*file:[ \t]*['"]?([^'"\s]+)/gm;
+
 /**
  * Resolve the `runFlow:` targets a flow references, as absolute paths.
  * @param {string} source - Flow YAML source
@@ -219,10 +292,18 @@ export function extractGates(source) {
 export function extractRunFlowTargets(source, flowPath) {
   const dir = path.dirname(flowPath);
   const targets = [];
-  const inline = source.matchAll(/^\s*-?\s*runFlow:\s*['"]?([^'"\s]+\.yaml)/gm);
-  for (const match of inline) targets.push(path.resolve(dir, match[1]));
-  const nested = source.matchAll(/^\s*file:\s*['"]?([^'"\s]+\.yaml)/gm);
-  for (const match of nested) targets.push(path.resolve(dir, match[1]));
+  // The `.yaml` suffix is checked in JS rather than written as `[^'"\s]+\.yaml`.
+  // A greedy class that already contains `.` has to give characters back one at
+  // a time before the literal suffix can match, at every start position a `g`
+  // scan tries — super-linear in the source's length (S5852), on flow files.
+  // The class stops at whitespace or a quote either way, so the token it
+  // captures is the same one; only the suffix test moved.
+  for (const match of source.matchAll(INLINE_RUN_FLOW))
+    if (match[1].endsWith(YAML_SUFFIX))
+      targets.push(path.resolve(dir, match[1]));
+  for (const match of source.matchAll(NESTED_RUN_FLOW))
+    if (match[1].endsWith(YAML_SUFFIX))
+      targets.push(path.resolve(dir, match[1]));
   return targets;
 }
 

package/package.json

@@ -132,7 +132,7 @@
     "ws": ">=8.21.0"
   },
   "name": "@codyswann/lisa",
-  "version": "3.45.8",
+  "version": "3.45.10",
   "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
   "main": "dist/index.js",
   "exports": {

package/plugins/lisa/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "3.45.8",
+  "version": "3.45.10",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "3.45.8",
+  "version": "3.45.10",
   "description": "Universal governance: agents, skills, commands, hooks, and rules for all projects.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/skills/lisa-detect-tooling/scripts/detect-tooling.mjs

@@ -443,8 +443,8 @@ export function satisfiedByNpm(pkg, tool) {
   const viaNpm = KNOWN_TOOLS[tool]?.viaNpm;
   if (!viaNpm) return false;
   const declared = {
-    ...(pkg?.dependencies ?? {}),
-    ...(pkg?.devDependencies ?? {}),
+    ...pkg?.dependencies,
+    ...pkg?.devDependencies,
   };
   return Object.hasOwn(declared, viaNpm);
 }

package/plugins/lisa/.codex-plugin/skills/lisa-secrets-access/scripts/surfaces.mjs

@@ -308,7 +308,7 @@ export function readConfig(cwd = process.cwd(), env = process.env) {
     rotating: cfg.rotating ?? [],
     propagating: cfg.propagating ?? [],
     namespace,
-    narrow: { ...DEFAULTS.narrow, ...(cfg.narrow ?? {}) },
+    narrow: { ...DEFAULTS.narrow, ...cfg.narrow },
     surface: cfg.surface ?? null,
     routing,
     configPath: path,

package/plugins/lisa/.codex-plugin/skills/lisa-setup-remote-env/scripts/setup-remote-env.mjs

@@ -91,7 +91,7 @@ export function readRemoteEnvConfig(cwd = process.cwd()) {
   const cfg = JSON.parse(readFileSync(path, "utf8")).remoteEnv;
   if (!cfg) return defaults;
   return {
-    tools: { require: [], install: [], ...(cfg.tools ?? {}) },
+    tools: { require: [], install: [], ...cfg.tools },
     hook: cfg.hook ?? null,
     surfaces: cfg.surfaces ?? {},
   };
@@ -879,7 +879,7 @@ export function pinEnvironment(environmentId, cwd = process.cwd()) {
     : {};
   const merged = {
     ...existing,
-    remote: { ...(existing.remote ?? {}), defaultEnvironmentId: environmentId },
+    remote: { ...existing.remote, defaultEnvironmentId: environmentId },
   };
   writeFileSync(path, `${JSON.stringify(merged, null, 2)}\n`);
   return path;

package/plugins/lisa/.codex-plugin/skills/lisa-setup-workstation/scripts/cli.mjs

@@ -204,7 +204,7 @@ export async function run(argv, io = {}) {
 
   let plan;
   try {
-    plan = planWorkstation({ agents, tools, provider, ...(io.probes ?? {}) });
+    plan = planWorkstation({ agents, tools, provider, ...io.probes });
   } catch (error) {
     // A misspelled provider stops here rather than silently provisioning the
     // wrong credential manager.

package/plugins/lisa/skills/lisa-detect-tooling/scripts/detect-tooling.mjs

@@ -443,8 +443,8 @@ export function satisfiedByNpm(pkg, tool) {
   const viaNpm = KNOWN_TOOLS[tool]?.viaNpm;
   if (!viaNpm) return false;
   const declared = {
-    ...(pkg?.dependencies ?? {}),
-    ...(pkg?.devDependencies ?? {}),
+    ...pkg?.dependencies,
+    ...pkg?.devDependencies,
   };
   return Object.hasOwn(declared, viaNpm);
 }

package/plugins/lisa/skills/lisa-secrets-access/scripts/surfaces.mjs

@@ -308,7 +308,7 @@ export function readConfig(cwd = process.cwd(), env = process.env) {
     rotating: cfg.rotating ?? [],
     propagating: cfg.propagating ?? [],
     namespace,
-    narrow: { ...DEFAULTS.narrow, ...(cfg.narrow ?? {}) },
+    narrow: { ...DEFAULTS.narrow, ...cfg.narrow },
     surface: cfg.surface ?? null,
     routing,
     configPath: path,

package/plugins/lisa/skills/lisa-setup-remote-env/scripts/setup-remote-env.mjs

@@ -91,7 +91,7 @@ export function readRemoteEnvConfig(cwd = process.cwd()) {
   const cfg = JSON.parse(readFileSync(path, "utf8")).remoteEnv;
   if (!cfg) return defaults;
   return {
-    tools: { require: [], install: [], ...(cfg.tools ?? {}) },
+    tools: { require: [], install: [], ...cfg.tools },
     hook: cfg.hook ?? null,
     surfaces: cfg.surfaces ?? {},
   };
@@ -879,7 +879,7 @@ export function pinEnvironment(environmentId, cwd = process.cwd()) {
     : {};
   const merged = {
     ...existing,
-    remote: { ...(existing.remote ?? {}), defaultEnvironmentId: environmentId },
+    remote: { ...existing.remote, defaultEnvironmentId: environmentId },
   };
   writeFileSync(path, `${JSON.stringify(merged, null, 2)}\n`);
   return path;

package/plugins/lisa/skills/lisa-setup-workstation/scripts/cli.mjs

@@ -204,7 +204,7 @@ export async function run(argv, io = {}) {
 
   let plan;
   try {
-    plan = planWorkstation({ agents, tools, provider, ...(io.probes ?? {}) });
+    plan = planWorkstation({ agents, tools, provider, ...io.probes });
   } catch (error) {
     // A misspelled provider stops here rather than silently provisioning the
     // wrong credential manager.

package/plugins/lisa-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "3.45.8",
+  "version": "3.45.10",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-agy/skills/lisa-detect-tooling/scripts/detect-tooling.mjs

@@ -443,8 +443,8 @@ export function satisfiedByNpm(pkg, tool) {
   const viaNpm = KNOWN_TOOLS[tool]?.viaNpm;
   if (!viaNpm) return false;
   const declared = {
-    ...(pkg?.dependencies ?? {}),
-    ...(pkg?.devDependencies ?? {}),
+    ...pkg?.dependencies,
+    ...pkg?.devDependencies,
   };
   return Object.hasOwn(declared, viaNpm);
 }

package/plugins/lisa-agy/skills/lisa-secrets-access/scripts/surfaces.mjs

@@ -308,7 +308,7 @@ export function readConfig(cwd = process.cwd(), env = process.env) {
     rotating: cfg.rotating ?? [],
     propagating: cfg.propagating ?? [],
     namespace,
-    narrow: { ...DEFAULTS.narrow, ...(cfg.narrow ?? {}) },
+    narrow: { ...DEFAULTS.narrow, ...cfg.narrow },
     surface: cfg.surface ?? null,
     routing,
     configPath: path,

package/plugins/lisa-agy/skills/lisa-setup-remote-env/scripts/setup-remote-env.mjs

@@ -91,7 +91,7 @@ export function readRemoteEnvConfig(cwd = process.cwd()) {
   const cfg = JSON.parse(readFileSync(path, "utf8")).remoteEnv;
   if (!cfg) return defaults;
   return {
-    tools: { require: [], install: [], ...(cfg.tools ?? {}) },
+    tools: { require: [], install: [], ...cfg.tools },
     hook: cfg.hook ?? null,
     surfaces: cfg.surfaces ?? {},
   };
@@ -879,7 +879,7 @@ export function pinEnvironment(environmentId, cwd = process.cwd()) {
     : {};
   const merged = {
     ...existing,
-    remote: { ...(existing.remote ?? {}), defaultEnvironmentId: environmentId },
+    remote: { ...existing.remote, defaultEnvironmentId: environmentId },
   };
   writeFileSync(path, `${JSON.stringify(merged, null, 2)}\n`);
   return path;

package/plugins/lisa-agy/skills/lisa-setup-workstation/scripts/cli.mjs

@@ -204,7 +204,7 @@ export async function run(argv, io = {}) {
 
   let plan;
   try {
-    plan = planWorkstation({ agents, tools, provider, ...(io.probes ?? {}) });
+    plan = planWorkstation({ agents, tools, provider, ...io.probes });
   } catch (error) {
     // A misspelled provider stops here rather than silently provisioning the
     // wrong credential manager.

package/plugins/lisa-cdk/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "3.45.8",
+  "version": "3.45.10",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "3.45.8",
+  "version": "3.45.10",
   "description": "AWS CDK-specific Lisa plugin.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "3.45.8",
+  "version": "3.45.10",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "3.45.8",
+  "version": "3.45.10",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "3.45.8",
+  "version": "3.45.10",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "3.45.8",
+  "version": "3.45.10",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/skills/lisa-detect-tooling/scripts/detect-tooling.mjs

@@ -443,8 +443,8 @@ export function satisfiedByNpm(pkg, tool) {
   const viaNpm = KNOWN_TOOLS[tool]?.viaNpm;
   if (!viaNpm) return false;
   const declared = {
-    ...(pkg?.dependencies ?? {}),
-    ...(pkg?.devDependencies ?? {}),
+    ...pkg?.dependencies,
+    ...pkg?.devDependencies,
   };
   return Object.hasOwn(declared, viaNpm);
 }

package/plugins/lisa-copilot/skills/lisa-secrets-access/scripts/surfaces.mjs

@@ -308,7 +308,7 @@ export function readConfig(cwd = process.cwd(), env = process.env) {
     rotating: cfg.rotating ?? [],
     propagating: cfg.propagating ?? [],
     namespace,
-    narrow: { ...DEFAULTS.narrow, ...(cfg.narrow ?? {}) },
+    narrow: { ...DEFAULTS.narrow, ...cfg.narrow },
     surface: cfg.surface ?? null,
     routing,
     configPath: path,

package/plugins/lisa-copilot/skills/lisa-setup-remote-env/scripts/setup-remote-env.mjs

@@ -91,7 +91,7 @@ export function readRemoteEnvConfig(cwd = process.cwd()) {
   const cfg = JSON.parse(readFileSync(path, "utf8")).remoteEnv;
   if (!cfg) return defaults;
   return {
-    tools: { require: [], install: [], ...(cfg.tools ?? {}) },
+    tools: { require: [], install: [], ...cfg.tools },
     hook: cfg.hook ?? null,
     surfaces: cfg.surfaces ?? {},
   };
@@ -879,7 +879,7 @@ export function pinEnvironment(environmentId, cwd = process.cwd()) {
     : {};
   const merged = {
     ...existing,
-    remote: { ...(existing.remote ?? {}), defaultEnvironmentId: environmentId },
+    remote: { ...existing.remote, defaultEnvironmentId: environmentId },
   };
   writeFileSync(path, `${JSON.stringify(merged, null, 2)}\n`);
   return path;

package/plugins/lisa-copilot/skills/lisa-setup-workstation/scripts/cli.mjs

@@ -204,7 +204,7 @@ export async function run(argv, io = {}) {
 
   let plan;
   try {
-    plan = planWorkstation({ agents, tools, provider, ...(io.probes ?? {}) });
+    plan = planWorkstation({ agents, tools, provider, ...io.probes });
   } catch (error) {
     // A misspelled provider stops here rather than silently provisioning the
     // wrong credential manager.

package/plugins/lisa-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "3.45.8",
+  "version": "3.45.10",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"