@codyswann/lisa 4.10.9 → 4.10.11

package/plugins/lisa-phaser-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "4.10.9",
+  "version": "4.10.11",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "4.10.9",
+  "version": "4.10.11",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.10.9",
+  "version": "4.10.11",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.10.9",
+  "version": "4.10.11",
   "description": "Ruby on Rails-specific skills and hooks for RuboCop and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.10.9",
+  "version": "4.10.11",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.10.9",
+  "version": "4.10.11",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.10.9",
+  "version": "4.10.11",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.10.9",
+  "version": "4.10.11",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.10.9",
+  "version": "4.10.11",
   "description": "TypeScript-specific hooks for formatting, linting, and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.10.9",
+  "version": "4.10.11",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.10.9",
+  "version": "4.10.11",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.10.9",
+  "version": "4.10.11",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.10.9",
+  "version": "4.10.11",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.10.9",
+  "version": "4.10.11",
   "description": "Distributable LLM Wiki kernel — ingest, query, lint, and maintain a git-native markdown knowledge base across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.10.9",
+  "version": "4.10.11",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.10.9",
+  "version": "4.10.11",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.10.9",
+  "version": "4.10.11",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/src/base/hooks/block-no-verify.agy.sh

@@ -60,15 +60,24 @@ def strip_heredocs(text: str) -> str:
     output = []
     pending = []
     marker_pattern = re.compile(
-        r"(?<!<)<<-?(?!<)\s*(?:'([^']+)'|\"([^\"]+)\"|([A-Za-z_][A-Za-z0-9_]*))"
+        r'''(?<!<)<<-?(?!<)\s*((?:'[^']*'|"(?:[^"\\]|\\.)*"|\\.|[^\s;&|<>()])+)'''
     )
+
+    def marker_word(raw: str):
+        try:
+            words = shlex.split(raw, posix=True)
+        except ValueError:
+            return None
+        return words[0] if len(words) == 1 and words[0] else None
+
     index = 0
     while index < len(lines):
         line = lines[index]
         output.append(line)
         pending.extend(
-            next(group for group in match.groups() if group)
+            marker
             for match in marker_pattern.finditer(line)
+            if (marker := marker_word(match.group(1))) is not None
         )
         index += 1
         while pending and index < len(lines):
@@ -358,6 +367,8 @@ for i, token in enumerate(normalized_tokens):
         sys.exit(1)
     if re.match(r"git_config_parameters\+?=", lowered):
         parameters = token.split("=", 1)[1]
+        if "$" in parameters or "`" in parameters:
+            sys.exit(1)
         try:
             configured = shlex.split(parameters, posix=True)
         except ValueError:

package/plugins/src/base/hooks/block-no-verify.sh

@@ -23,7 +23,7 @@
 # Add a name here in the same commit that closes a vector. A hardening that
 # forgets to is invisible to refresh, and shows up as an unexplained diff at
 # review time instead of a named capability.
-# lisa-guard-capabilities: no-verify-abbrev, husky-env, hookspath-allowlist, config-env, git-config-key, git-config-parameters, git-config-parameters-append, herestring-aware, no-verify-short
+# lisa-guard-capabilities: no-verify-abbrev, husky-env, hookspath-allowlist, config-env, git-config-key, git-config-parameters, git-config-parameters-append, git-config-parameters-expansion, heredoc-shell-word, herestring-aware, no-verify-short
 #
 # Shell-token matching avoids false positives from issue bodies, heredocs, and
 # commit-message prose while still catching quoted real argv values such as
@@ -101,15 +101,24 @@ def strip_heredocs(text: str) -> str:
     output = []
     pending = []
     marker_pattern = re.compile(
-        r"(?<!<)<<-?(?!<)\s*(?:'([^']+)'|\"([^\"]+)\"|([A-Za-z_][A-Za-z0-9_]*))"
+        r'''(?<!<)<<-?(?!<)\s*((?:'[^']*'|"(?:[^"\\]|\\.)*"|\\.|[^\s;&|<>()])+)'''
     )
+
+    def marker_word(raw: str):
+        try:
+            words = shlex.split(raw, posix=True)
+        except ValueError:
+            return None
+        return words[0] if len(words) == 1 and words[0] else None
+
     index = 0
     while index < len(lines):
         line = lines[index]
         output.append(line)
         pending.extend(
-            next(group for group in match.groups() if group)
+            marker
             for match in marker_pattern.finditer(line)
+            if (marker := marker_word(match.group(1))) is not None
         )
         index += 1
         while pending and index < len(lines):
@@ -451,6 +460,12 @@ for i, token in enumerate(normalized_tokens):
     # key from an unrelated value that merely contains the same text.
     if re.match(r"git_config_parameters\+?=", lowered):
         parameters = token.split("=", 1)[1]
+        # The guard sees the command before the shell expands assignments. A
+        # variable or command substitution can therefore hide hooksPath from
+        # this parser and reveal it only to Git. Refuse unresolved values; the
+        # guard cannot safely prove what configuration they will become.
+        if "$" in parameters or "`" in parameters:
+            sys.exit(1)
         try:
             configured = shlex.split(parameters, posix=True)
         except ValueError:

package/typescript/copy-contents/.husky/pre-push

@@ -545,8 +545,15 @@ fi
 # without node, whereas jq may legitimately be absent — the audit block above
 # says so in as many words. Deciding this with jq would hand every jq-less
 # machine the slow path without a word.
+# The unit script is selected only when it carries LISA_COVERAGE_SCOPE=unit.
+# That marker is not decoration: the threshold factory reads it and enforces the
+# `unit` block, so a `test:cov:unit` without it is measured against the floor
+# written for the FULL suite while running a strictly smaller population. That
+# is a gate whose thresholds describe a different population than the one it
+# measured, and the honest command for such a project is still `test:cov` —
+# slower, but answering to the floor that was configured for what it runs.
 COVERAGE_SCRIPT="test:cov"
-if node -e 'const s=require("./package.json").scripts||{};process.exit(s["test:cov:unit"]?0:1)' >/dev/null 2>&1; then
+if node -e 'const s=require("./package.json").scripts||{};const u=s["test:cov:unit"];process.exit(typeof u==="string"&&u.includes("LISA_COVERAGE_SCOPE=unit")?0:1)' >/dev/null 2>&1; then
   COVERAGE_SCRIPT="test:cov:unit"
 fi
 

package/typescript/copy-overwrite/scripts/lisa-mutation.mjs

@@ -1073,12 +1073,30 @@ export const readGate = cwd => {
 
 /**
  * A boolean environment override, or undefined when unset.
+ *
+ * A variable that is SET BUT EMPTY reads as unset, for the same reason
+ * {@link resolveTimeoutShareCeiling} treats an empty share ceiling that way: an
+ * empty value is what GitHub Actions produces when an unset workflow input is
+ * mapped into `env:` — `MUTATION_ENABLED: ${{ inputs.mutation }}` on a caller
+ * that passes nothing sets the variable to "". The declaration is the caller's
+ * and the emptiness is the harness's, so reading the harness's silence as a
+ * deliberate `false` lets an absent input beat a project whose
+ * `mutation.gate.json` says `enabled: true`. The gate stands down, the run goes
+ * green, and nothing anywhere says the gate was asked to.
+ *
+ * Empty was also the only spelling with that asymmetry: every other unrecognised
+ * value — `"yes"`, `"maybe"` — is an operator writing something, and answering
+ * `false` to it is a real reading of a real input. Nobody types the empty string.
+ *
+ * `false` stays reachable, because `false` stays typeable. What changes is that
+ * disabling a gate has to be asked for in a character rather than arrived at
+ * through an absent one.
  * @param {string} name - Variable name.
  * @returns {boolean | undefined} The override.
  */
 export const envFlag = name => {
   const value = process.env[name];
-  if (value === undefined) return undefined;
+  if (value === undefined || value.trim() === "") return undefined;
   return value === "true" || value === "1";
 };
 

package/typescript/package-lisa/package.lisa.json

@@ -9,7 +9,7 @@
       "test:unit": "vitest run --exclude='**/integration/**'",
       "test:integration:lisa": "vitest run '.integration.' 'integration/'",
       "test:cov": "vitest run --coverage",
-      "test:cov:unit": "vitest run --coverage --exclude='**/integration/**'",
+      "test:cov:unit": "LISA_COVERAGE_SCOPE=unit vitest run --coverage --exclude='**/integration/**'",
       "test:mutation": "node scripts/lisa-mutation.mjs",
       "test:watch": "vitest",
       "lint:fix": "oxlint --fix && eslint . --fix",