@codyswann/lisa 3.54.7 → 3.55.0

package/package.json

@@ -141,7 +141,7 @@
     "zod-validation-error": "^4.0.0"
   },
   "name": "@codyswann/lisa",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
   "main": "dist/index.js",
   "exports": {

package/plugins/lisa/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Universal governance: agents, skills, commands, hooks, and rules for all projects.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/hooks/sonar-secrets.sh

@@ -83,6 +83,21 @@ is_inactive() {
 # portable form. A timeout leaves `value` empty, which the caller treats as "the
 # provider had nothing" — the warn path, never a block.
 #
+# Ten seconds is the ceiling a consumer gets, and that is a product decision, not
+# a tuning constant: this runs in front of every prompt and every file read, so
+# it must not hang a session. `LISA_SONAR_RESOLVER_TIMEOUT_S` lets a caller that
+# is NOT a session say so. The only caller that is not a session is this repo's
+# own suite, where the "provider" is a local `node` script rather than a network
+# call and the cost of starting it is unbounded under load — a spawn measured
+# 45-50ms here at a 1-minute load average of 50, against an 18ms quiet figure,
+# and the read lost its whole ten seconds to one at ~98 concurrent test workers
+# (CodySwannGT/lisa#2905). The suite scales this the same way it scales its own
+# budgets, and stages a hang by shrinking it.
+#
+# Unset, empty, or unparseable all end in the warn path: `:-10` covers the first
+# two, and `read -t garbage` fails immediately, which leaves `value` empty. There
+# is no value of this variable that turns a warn into a block.
+#
 # Giving up on the read is not the same as stopping the work: a resolver blocked
 # on the network otherwise outlives the hook that started it, and this runs in
 # front of every prompt and every file read. So the child is killed and reaped,
@@ -108,7 +123,7 @@ resolve_secret() {
   fi
   node "$resolver" get "$name" >"$fifo" 2>/dev/null &
   child=$!
-  IFS= read -r -t 10 value < "$fifo" || true
+  IFS= read -r -t "${LISA_SONAR_RESOLVER_TIMEOUT_S:-10}" value < "$fifo" || true
   kill -9 "$child" 2>/dev/null
   wait "$child" 2>/dev/null
   rm -rf "$dir"

package/plugins/lisa-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "AWS CDK-specific Lisa plugin.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/hooks/sonar-secrets.sh

@@ -83,6 +83,21 @@ is_inactive() {
 # portable form. A timeout leaves `value` empty, which the caller treats as "the
 # provider had nothing" — the warn path, never a block.
 #
+# Ten seconds is the ceiling a consumer gets, and that is a product decision, not
+# a tuning constant: this runs in front of every prompt and every file read, so
+# it must not hang a session. `LISA_SONAR_RESOLVER_TIMEOUT_S` lets a caller that
+# is NOT a session say so. The only caller that is not a session is this repo's
+# own suite, where the "provider" is a local `node` script rather than a network
+# call and the cost of starting it is unbounded under load — a spawn measured
+# 45-50ms here at a 1-minute load average of 50, against an 18ms quiet figure,
+# and the read lost its whole ten seconds to one at ~98 concurrent test workers
+# (CodySwannGT/lisa#2905). The suite scales this the same way it scales its own
+# budgets, and stages a hang by shrinking it.
+#
+# Unset, empty, or unparseable all end in the warn path: `:-10` covers the first
+# two, and `read -t garbage` fails immediately, which leaves `value` empty. There
+# is no value of this variable that turns a warn into a block.
+#
 # Giving up on the read is not the same as stopping the work: a resolver blocked
 # on the network otherwise outlives the hook that started it, and this runs in
 # front of every prompt and every file read. So the child is killed and reaped,
@@ -108,7 +123,7 @@ resolve_secret() {
   fi
   node "$resolver" get "$name" >"$fifo" 2>/dev/null &
   child=$!
-  IFS= read -r -t 10 value < "$fifo" || true
+  IFS= read -r -t "${LISA_SONAR_RESOLVER_TIMEOUT_S:-10}" value < "$fifo" || true
   kill -9 "$child" 2>/dev/null
   wait "$child" 2>/dev/null
   rm -rf "$dir"

package/plugins/lisa-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cursor/hooks/sonar-secrets.sh

@@ -83,6 +83,21 @@ is_inactive() {
 # portable form. A timeout leaves `value` empty, which the caller treats as "the
 # provider had nothing" — the warn path, never a block.
 #
+# Ten seconds is the ceiling a consumer gets, and that is a product decision, not
+# a tuning constant: this runs in front of every prompt and every file read, so
+# it must not hang a session. `LISA_SONAR_RESOLVER_TIMEOUT_S` lets a caller that
+# is NOT a session say so. The only caller that is not a session is this repo's
+# own suite, where the "provider" is a local `node` script rather than a network
+# call and the cost of starting it is unbounded under load — a spawn measured
+# 45-50ms here at a 1-minute load average of 50, against an 18ms quiet figure,
+# and the read lost its whole ten seconds to one at ~98 concurrent test workers
+# (CodySwannGT/lisa#2905). The suite scales this the same way it scales its own
+# budgets, and stages a hang by shrinking it.
+#
+# Unset, empty, or unparseable all end in the warn path: `:-10` covers the first
+# two, and `read -t garbage` fails immediately, which leaves `value` empty. There
+# is no value of this variable that turns a warn into a block.
+#
 # Giving up on the read is not the same as stopping the work: a resolver blocked
 # on the network otherwise outlives the hook that started it, and this runs in
 # front of every prompt and every file read. So the child is killed and reaped,
@@ -108,7 +123,7 @@ resolve_secret() {
   fi
   node "$resolver" get "$name" >"$fifo" 2>/dev/null &
   child=$!
-  IFS= read -r -t 10 value < "$fifo" || true
+  IFS= read -r -t "${LISA_SONAR_RESOLVER_TIMEOUT_S:-10}" value < "$fifo" || true
   kill -9 "$child" 2>/dev/null
   wait "$child" 2>/dev/null
   rm -rf "$dir"

package/plugins/lisa-expo/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Expo and React Native-specific skills, agents, rules, and MCP servers.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Harper/Fabric-specific Lisa rules for TypeScript component apps.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "NestJS-specific skills and migration write-protection hooks.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Ruby on Rails-specific skills and hooks for RuboCop and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "TypeScript-specific hooks for formatting, linting, and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "Distributable LLM Wiki kernel — ingest, query, lint, and maintain a git-native markdown knowledge base across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "3.54.7",
+  "version": "3.55.0",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/src/base/hooks/sonar-secrets.sh

@@ -83,6 +83,21 @@ is_inactive() {
 # portable form. A timeout leaves `value` empty, which the caller treats as "the
 # provider had nothing" — the warn path, never a block.
 #
+# Ten seconds is the ceiling a consumer gets, and that is a product decision, not
+# a tuning constant: this runs in front of every prompt and every file read, so
+# it must not hang a session. `LISA_SONAR_RESOLVER_TIMEOUT_S` lets a caller that
+# is NOT a session say so. The only caller that is not a session is this repo's
+# own suite, where the "provider" is a local `node` script rather than a network
+# call and the cost of starting it is unbounded under load — a spawn measured
+# 45-50ms here at a 1-minute load average of 50, against an 18ms quiet figure,
+# and the read lost its whole ten seconds to one at ~98 concurrent test workers
+# (CodySwannGT/lisa#2905). The suite scales this the same way it scales its own
+# budgets, and stages a hang by shrinking it.
+#
+# Unset, empty, or unparseable all end in the warn path: `:-10` covers the first
+# two, and `read -t garbage` fails immediately, which leaves `value` empty. There
+# is no value of this variable that turns a warn into a block.
+#
 # Giving up on the read is not the same as stopping the work: a resolver blocked
 # on the network otherwise outlives the hook that started it, and this runs in
 # front of every prompt and every file read. So the child is killed and reaped,
@@ -108,7 +123,7 @@ resolve_secret() {
   fi
   node "$resolver" get "$name" >"$fifo" 2>/dev/null &
   child=$!
-  IFS= read -r -t 10 value < "$fifo" || true
+  IFS= read -r -t "${LISA_SONAR_RESOLVER_TIMEOUT_S:-10}" value < "$fifo" || true
   kill -9 "$child" 2>/dev/null
   wait "$child" 2>/dev/null
   rm -rf "$dir"