@codyswann/lisa 4.22.12 → 4.22.14

package/all/copy-overwrite/scripts/lib/gate-failure-diagnosis.mjs

@@ -488,8 +488,10 @@ function classify(output, code) {
     return {
       kind: DIAGNOSIS.UNCAPTURED,
       summary:
-        "no output was captured, so this failure has no diagnosis " +
-        "(set LISA_GATES_CAPTURE=1 and re-run to get one)",
+        "no output was captured, so this failure has no diagnosis. Capture " +
+        "is on by default; it is off when LISA_GATES_CAPTURE=0 is set, when " +
+        "the shell has no `tee`, or when a temporary directory could not be " +
+        "created. Restore capture capability before re-running",
       evidence: [],
     };
   }

package/all/copy-overwrite/scripts/lib/process-tree-runner.mjs

@@ -19,6 +19,16 @@ import { spawn, spawnSync } from "node:child_process";
 import { invokedAsScript } from "./invoked-as-script.mjs";
 
 const KILL_GRACE_MS = 750;
+const REAP_POLL_MS = 25;
+const WINDOWS_TIMEOUT_EXIT_CODE = 255;
+const TERMINATING_SIGNALS = ["SIGINT", "SIGTERM", "SIGHUP"];
+const DEFAULT_REAP_CONTROLS = Object.freeze({
+  kill: killTree,
+  exists: treeExists,
+  now: Date.now,
+  wait: milliseconds =>
+    new Promise(resolve => setTimeout(resolve, milliseconds)),
+});
 
 function parseArguments(argv) {
   const timeoutArg = argv.find(value => value.startsWith("--timeout-ms="));
@@ -49,6 +59,36 @@ function killTree(pid, signal) {
   }
 }
 
+function treeExists(pid) {
+  if (process.platform === "win32") return false;
+  try {
+    process.kill(-pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+async function waitForTreeExit(pid, deadline, controls) {
+  while (controls.exists(pid)) {
+    if (controls.now() >= deadline) return false;
+    await controls.wait(REAP_POLL_MS);
+  }
+  return true;
+}
+
+export async function reapTree(pid, controls = DEFAULT_REAP_CONTROLS) {
+  controls.kill(pid, "SIGTERM");
+  if (await waitForTreeExit(pid, controls.now() + KILL_GRACE_MS, controls)) {
+    return;
+  }
+
+  controls.kill(pid, "SIGKILL");
+  if (!(await waitForTreeExit(pid, controls.now() + KILL_GRACE_MS, controls))) {
+    throw new Error(`gate process tree ${pid} survived SIGKILL`);
+  }
+}
+
 export function supervise(command, timeoutMs) {
   return new Promise((resolve, reject) => {
     const shell =
@@ -72,42 +112,83 @@ export function supervise(command, timeoutMs) {
 
     let timedOut = false;
     let settled = false;
-    const finish = (code, signal) => {
+    let terminating = false;
+    const signalHandlers = new Map();
+    const cleanup = () => {
+      clearTimeout(deadline);
+      for (const [signal, handler] of signalHandlers) {
+        process.off(signal, handler);
+      }
+      signalHandlers.clear();
+    };
+    const finish = async (code, signal) => {
       if (settled) return;
       settled = true;
-      clearTimeout(deadline);
+      cleanup();
       // A command may leave a background descendant after its direct shell
-      // exits. Reap that residue before returning a verdict too.
-      killTree(pid, "SIGTERM");
-      resolve({ code, signal });
+      // exits. Reap that residue fully before returning a verdict too.
+      try {
+        await reapTree(pid);
+        resolve({ code, signal });
+      } catch (error) {
+        reject(error);
+      }
+    };
+
+    const reportReapFailure = error => {
+      console.error(
+        `gate process-tree supervisor failed: ${error instanceof Error ? error.message : String(error)}`
+      );
+      process.exitCode = 1;
     };
 
+    const relaySignal = signal => {
+      if (terminating) return;
+      terminating = true;
+      cleanup();
+      reapTree(pid).then(() => {
+        // Restore the signal-shaped exit after the detached tree is gone.
+        process.kill(process.pid, signal);
+      }, reportReapFailure);
+    };
+    for (const signal of TERMINATING_SIGNALS) {
+      const handler = () => relaySignal(signal);
+      signalHandlers.set(signal, handler);
+      process.once(signal, handler);
+    }
+
     const deadline = setTimeout(() => {
       timedOut = true;
-      killTree(pid, "SIGTERM");
-      setTimeout(() => {
-        killTree(pid, "SIGKILL");
+      cleanup();
+      reapTree(pid).then(() => {
         // A signal-shaped result is the existing gate runner vocabulary for
         // "no verdict". It also prevents an ordinary exit code such as 124
         // from being confused with a user command that returned that code.
         if (process.platform === "win32") {
-          process.exit(124);
+          // Windows has no signal-shaped process result. 255 is a dedicated
+          // supervisor timeout code with a documented (but unavoidable)
+          // collision risk, well outside ordinary command exit conventions.
+          process.exit(WINDOWS_TIMEOUT_EXIT_CODE);
         } else {
           process.kill(process.pid, "SIGKILL");
         }
-      }, KILL_GRACE_MS);
+      }, reportReapFailure);
     }, timeoutMs);
 
     child.once("error", error => {
-      clearTimeout(deadline);
-      killTree(pid, "SIGKILL");
-      reject(error);
+      if (settled) return;
+      settled = true;
+      cleanup();
+      reapTree(pid).then(
+        () => reject(error),
+        reapError => reject(reapError)
+      );
     });
     child.once("close", (code, signal) => {
       // On timeout, wait for the forced group reap above before this supervisor
       // ends. Exiting on the direct shell's close is the race that used to leave
       // its descendants alive.
-      if (!timedOut) finish(code, signal);
+      if (!timedOut) void finish(code, signal);
     });
   });
 }

package/all/copy-overwrite/scripts/lisa-environment-prepare.mjs

@@ -395,8 +395,17 @@ function readPackageScripts(cwd) {
 export function runCli(argv = process.argv.slice(2), cwd = process.cwd()) {
   const env = readFlag(argv, "env");
   const verbsFlag = readFlag(argv, "verbs");
+  if (verbsFlag === null && argv.includes("--verbs")) {
+    console.error(
+      "❌ environment preparation refused: environment_verb_unknown"
+    );
+    console.error(
+      "   --verbs takes its value with an equals sign, as --verbs=reset,reseed."
+    );
+    return 1;
+  }
   const verbs =
-    verbsFlag === null && !argv.includes("--verbs")
+    verbsFlag === null
       ? FACADE_VERBS
       : (verbsFlag ?? "")
           .split(",")

package/all/copy-overwrite/scripts/lisa-floor-collisions.mjs

@@ -100,6 +100,7 @@ function parseBranchVersion(branch) {
   );
   if (operator) cursor = cursor.slice(operator.length);
   cursor = cursor.trimStart();
+  while (cursor.startsWith("v")) cursor = cursor.slice(1);
 
   let end = 0;
   while (end < cursor.length) {

package/all/copy-overwrite/scripts/lisa-hooks/block-no-verify.sh

@@ -26,7 +26,7 @@
 # Add a name here in the same commit that closes a vector. A hardening that
 # forgets to is invisible to refresh, and shows up as an unexplained diff at
 # review time instead of a named capability.
-# lisa-guard-capabilities: no-verify-abbrev, husky-env, hookspath-allowlist, config-env, git-config-key, git-config-parameters, git-config-parameters-append, git-config-parameters-expansion, heredoc-shell-word, herestring-aware, no-verify-short
+# lisa-guard-capabilities: no-verify-abbrev, husky-env, hookspath-allowlist, config-env, git-config-key, git-config-parameters, git-config-parameters-append, git-config-parameters-expansion, heredoc-shell-word, herestring-aware, no-verify-short, nested-shell-no-verify
 #
 # Shell-token matching avoids false positives from issue bodies, heredocs, and
 # commit-message prose while still catching quoted real argv values such as
@@ -219,6 +219,9 @@ COMMAND_SEPARATORS = {
     ";", "|", "||", "&", "&&", "(", ")", "<", ">", ">>", "<<", "&|",
 }
 
+SHELL_PROGRAMS = {"bash", "dash", "ksh", "sh", "zsh"}
+MAX_SHELL_NESTING = 8
+
 # git's own options that take a SEPARATE value token, which therefore must be
 # skipped when looking for the subcommand: `git -c core.hooksPath=x commit` and
 # `git -C /repo commit` both reach `commit`.
@@ -336,6 +339,8 @@ def commit_bypasses_verification(argv):
         if token.startswith("--"):
             if token in COMMIT_LONG_SEPARATE_VALUE:
                 index += 1
+            elif disables_verification(token):
+                return True
             continue
         # A bare `-` is git's stdin placeholder, not an option cluster.
         if not token.startswith("-") or token == "-":
@@ -369,11 +374,25 @@ def subcommand_after_git(tokens, start):
     return None
 
 
-def git_commit_skips_verification(text):
+def shell_starts_command(tokens, index):
+    """Whether a recognized shell token occupies command position."""
+    start = index - 1
+    while start >= 0 and tokens[start] not in COMMAND_SEPARATORS:
+        start -= 1
+    prefix = tokens[start + 1:index]
+    if not prefix:
+        return True
+    if prefix[0] == "env":
+        prefix = prefix[1:]
+    return all("=" in token and not token.startswith("=") for token in prefix)
+
+
+def git_commit_skips_verification(text, depth=0):
     """Whether the command runs `git commit` with the short `-n` bypass.
 
     Args:
         text: The command line, heredoc payloads already stripped.
+        depth: Number of recognized shell payloads already traversed.
 
     Returns:
         True if any `git commit` invocation on the line skips verification.
@@ -390,6 +409,28 @@ def git_commit_skips_verification(text):
         found = subcommand_after_git(scoped_tokens, index + 1)
         if found and found[0] == "commit" and commit_bypasses_verification(found[1]):
             return True
+    if depth >= MAX_SHELL_NESTING:
+        return False
+    for index, token in enumerate(scoped_tokens):
+        program = token.rsplit("/", 1)[-1]
+        if program not in SHELL_PROGRAMS or not shell_starts_command(
+            scoped_tokens, index
+        ):
+            continue
+        cursor = index + 1
+        while cursor < len(scoped_tokens):
+            option = scoped_tokens[cursor]
+            if option in COMMAND_SEPARATORS or not option.startswith("-"):
+                break
+            cursor += 1
+            if "c" not in option[1:]:
+                continue
+            if cursor >= len(scoped_tokens):
+                break
+            payload = scoped_tokens[cursor]
+            if git_commit_skips_verification(payload, depth + 1):
+                return True
+            break
     return False
 
 

package/all/copy-overwrite/scripts/lisa-hooks/parity-safety-net.sh

@@ -727,6 +727,10 @@ classify_rm_target() {
       set +f
       block "recursive forced delete of the current directory (rm -rf .)"
       ;;
+    .git | .git/* | */.git | */.git/*)
+      set +f
+      block "recursive forced delete of the git control plane (.git holds every commit, branch and stash not already pushed; nothing in the working tree can rebuild it)"
+      ;;
     .. | ../* | */.. | */../*)
       set +f
       block "recursive forced delete of a path outside the project (.. traversal)"
@@ -1034,11 +1038,16 @@ fi
 # purpose, and blocking those would be the collision that gets a guard switched
 # off. The trailing `([/[:space:]'"$qc"']|$)` is what draws that line.
 readonly GIT_CONTROL_PLANE='(^|[[:space:]='"$qc"'./])\.git([/[:space:]'"$qc"']|$)'
-if matches_cs "$RM_RF_CLUSTER" || matches_cs "$RM_RF_SPLIT"; then
-  if matches_cs "$GIT_CONTROL_PLANE"; then
+while IFS= read -r git_stmt; do
+  [ -n "$git_stmt" ] || continue
+  if ! scan -E "$git_stmt" "$RM_RF_CLUSTER" \
+    && ! scan -E "$git_stmt" "$RM_RF_SPLIT"; then
+    continue
+  fi
+  if scan -E "$git_stmt" "$GIT_CONTROL_PLANE"; then
     block "recursive forced delete of the git control plane (.git holds every commit, branch and stash not already pushed; nothing in the working tree can rebuild it). Delete a specific ignored artifact instead, or re-clone if the checkout is genuinely to be discarded."
   fi
-fi
+done <<< "$(printf '%s' "$normalized_command_str" | tr '&|;' '\n')"
 
 # 15. Credential stores. Reading one into an agent transcript is disclosure even
 # when nothing is copied anywhere: the value lands in a log, a context window,
@@ -1080,14 +1089,19 @@ has_private_dotenv_path() {
     | grep -Eio -- '(^|[[:space:]='"$qc"'./])\.env(\.[[:alnum:]_-]+)?')" \
     || dotenv_scan_status=$?
   if [ "$dotenv_scan_status" -gt 1 ]; then
-    block "dotenv path classification failed; denying the credential-store read fail-closed."
+    scan_failed "$dotenv_scan_status"
   fi
 
   while IFS= read -r candidate; do
     [ -n "$candidate" ] || continue
+    dotenv_normalize_status=0
     candidate="$(printf '%s' "$candidate" \
       | tr '[:upper:]' '[:lower:]' \
-      | grep -Eo -- '\.env(\.[[:alnum:]_-]+)?')"
+      | grep -Eo -- '\.env(\.[[:alnum:]_-]+)?')" \
+      || dotenv_normalize_status=$?
+    if [ "$dotenv_normalize_status" -gt 1 ] || [ -z "$candidate" ]; then
+      scan_failed "$dotenv_normalize_status"
+    fi
     case "$candidate" in
       .env.example | .env.sample | .env.template | .env.dist | .env.schema | .env.defaults) ;;
       *) return 0 ;;

package/all/copy-overwrite/scripts/lisa-reconcile-policy.mjs

@@ -681,10 +681,12 @@ export function reconcileContexts({
   homes = {},
   pins = {},
   records,
+  awaited = [],
 }) {
   const liveContexts = live ?? [];
   const declaredNames = new Set(declared ?? []);
   const byName = (a, b) => a.localeCompare(b);
+  const awaitedContexts = new Set(awaited);
 
   // The unit of declaration is a (ruleset, context) PAIR, not a name. A name
   // set cannot hold `build` required by both `base` and `release`, so a live
@@ -723,6 +725,14 @@ export function reconcileContexts({
     // and repair converge. A gate-derived record names no ruleset and remains
     // name-only: it never declared which app may satisfy it.
     if (record.ruleset !== undefined) {
+      if (
+        record.integration_id === undefined &&
+        awaitedContexts.has(record.context)
+      ) {
+        return (
+          entry.integration_id === null || entry.integration_id === undefined
+        );
+      }
       const expected = record.integration_id ?? ACTIONS_INTEGRATION_ID;
       return entry.integration_id === expected;
     }
@@ -1412,6 +1422,7 @@ export function reconcile({
   ghMissing = false,
 }) {
   const configured = declaredChecks(requiredChecks);
+  const awaited = awaitedContexts(gates, moment);
   const declared = [
     ...new Set([
       ...contextsFor(gates, { moment, workflowName, previousLabels }),
@@ -1466,6 +1477,7 @@ export function reconcile({
     homes: configured.homes,
     pins: configured.pins,
     records: configured.records,
+    awaited,
   });
   const resolvedAwaitedHome = awaitedHome(live, rulesetName);
   const settings = reconcileSettings({ policy, live });
@@ -1487,7 +1499,7 @@ export function reconcile({
         live,
         prune,
         rulesetName,
-        awaited: awaitedContexts(gates, moment),
+        awaited,
         pins: { ...configured.pins, ...awaitedPins(gates, moment) },
         // An awaited context has no ruleset in its declaration — it is declared
         // on a GATE. Its home defaults to the ruleset Lisa generates from

package/all/copy-overwrite/scripts/lisa-schema-validate.mjs

@@ -212,7 +212,7 @@ function assertSupportedKeywords(schema, instancePath) {
  * @throws {Error} When a validating keyword sits beside a `$ref`
  */
 function assertNoRefSiblings(schema, where) {
-  if (!("$ref" in schema)) {
+  if (!Object.hasOwn(schema, "$ref")) {
     return;
   }
   const siblings = Object.keys(schema).filter(
@@ -370,7 +370,7 @@ function checkObjectKeywords(value, schema, root, instancePath, errors) {
 function validateNode(value, schema, root, instancePath, errors) {
   assertSupportedKeywords(schema, instancePath);
 
-  if (typeof schema.$ref === "string") {
+  if (Object.hasOwn(schema, "$ref") && typeof schema.$ref === "string") {
     validateNode(
       value,
       resolveRef(schema.$ref, root),

package/dist/core/lisa-owned-hash-ledger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lisa-owned-hash-ledger.d.ts","sourceRoot":"","sources":["../../src/core/lisa-owned-hash-ledger.ts"],"names":[],"mappings":"AACA,6EAA6E;AAE7E;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAC3C,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CA8tBjC,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,+BAA+B,EAAE,QAAQ,CACpD,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAioBjC,CAAC"}
+{"version":3,"file":"lisa-owned-hash-ledger.d.ts","sourceRoot":"","sources":["../../src/core/lisa-owned-hash-ledger.ts"],"names":[],"mappings":"AACA,6EAA6E;AAE7E;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAC3C,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CA6uBjC,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,+BAA+B,EAAE,QAAQ,CACpD,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAgpBjC,CAAC"}

package/dist/core/lisa-owned-hash-ledger.js

@@ -150,6 +150,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
     "scripts/check-nightly-e2e-health.mjs": Object.freeze([
         "03f57b46c1611806737203980ed0991f478177f883739cc8c3df2c8f219566af",
         "0cf6e997c623adacd198fe650b3900dce06558ebfd2637e6f6df562eee7e10f8",
+        "11608828a0ca51d4505e37742f8120102e68e081a92e054b631876b8d3a6d0bc",
         "191608d272178a8fd3126d5b3e4923fadb50e01b699d0376625248d541b14f50",
         "1c79ec49e5f4a3bba700bc1d97e9fc0f4f1799dec3acdf2bed5e3e5b866a0efd",
         "1e5d6787f99af1190b465903956a90270320eeca022c3a3ab6716e1a8b3ec57f",
@@ -219,6 +220,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "c04a78cb52beaa2e852846e03f42172a4e4a180222dcd54f4c305911249b68b1",
         "d386d621db2538ab7c5dfaa73f927c9ea87692d1a9e0ac02330a960c64af206e",
         "d649aaf3abf584272bb886b1a722afe16ea861186214284ac61f96b3386e63d7",
+        "da2e191a8fbfa4042b3bfff331bc2ee19077acb972b5cfc9cf35eba383115959",
         "dac550c4fd908149fb579625268b16d03657b626417633d8f743875d355ab173",
         "dc609502f848965baeee2576b4622cde502adc15f82ac282c0f30acf06342b77",
         "df59cbee6aaa71a3ccddfcba5d9d08b29610f98fa048519ec4fc35382d698183",
@@ -274,6 +276,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "503b51e9239411d07ce6b51dbe2b3079bb12e94bf7c0310e76247af19ff667e6",
         "6742cc12ea14fc99b7bef31ff03df68d5c4610b56fad43107790372e6d777eb1",
         "6b72a6a71078c838fdb0531e74898a5e36d942cad424b20480e2cd370b5264eb",
+        "a36a7bd7845878e5f1f991e896739ba4cc468e50f562b71a251ebe193ca151b6",
         "b4a0b1a0df6e944313b4a197925a0003fb9aed517fbd5708deda2a2a67f53faf",
         "d234617dc907bb563455419957f2f419702fcd1c10b9d39e19d5bab8ca962008",
         "e07bab7dc4c4c296e2007cf26fab694b1238545dc37816e88d849606d8f9e760",
@@ -289,6 +292,10 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "82191900c818a88208669a39563cfed8de1512de699a9ccf7155743e5eff859e",
     ]),
     "scripts/lib/process-tree-runner.mjs": Object.freeze([
+        "07c78da8a8e40e28cc59a40c3d19e798ae291fae0a0d4cd13a2e5c047d8e5ac7",
+        "2444f81b8a05af19f2bdc61d75cc6baa40a19c79f60dc815cafc6746dffda714",
+        "757c74e96c16a9a51c8b099c5e5caa7a2086a9fbdc41cc41348619d993d36a5c",
+        "eb73088635fddf236fca92d1c94324a889c503843155d436835b96d3ed6fa1f1",
         "fb68902c68b4cd156f26d2f743364f611a54b833bc445b5144b4c844f553f188",
     ]),
     "scripts/lisa-clean-git-env.sh": Object.freeze([
@@ -333,6 +340,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "63879152ebb67f289e900167daf035f2d03d7773c6e110ed5ab708c95417c55c",
         "9f42451a38eabd69e453fbaabd34de2490dfbc8ab79b1d7a2f27f574d3314090",
         "c765c7a44ea81d54c7820f2068c8811fb73ca3e5f063cb55a8c30391d1326323",
+        "f82f3af91663988d003d30542f96189ad65210e0aa4dcc1b42e6c7c8752d5618",
         "f8c8e276fa6d68ed661f07882f20ee095d18a5e8a90136f78f1ed2b032ce33d4",
         "f936bc8a038a7901ade1ba58cc52e5f5a8b8b2a52a9f0c1516567cc80eb02ccb",
     ]),
@@ -345,6 +353,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "41060648b4394d417528f4f560a52f296b4df5b6ec8a5633e08afe4588b6a088",
         "557065f223dfc0715a20c3de76bafee0aefe22f52385c52e17cfc7b9398cce2d",
         "8870dba7b299ddb528e01fee32ec01cd8994a72118708ea8d3255be3daedfa72",
+        "8da563431ebfeb01ff6681fe47317bad1524863289460cc6ccdc7c8e07014aa7",
         "9cba6e0103c27850703323da25ac149c0136225172f1a1640abe3b3ac4e50a8e",
         "a612f172282d13ba9318fe5e03689d7c6ff42a0122d0c9d5d39051e1967b93dc",
         "ed0ded7369071c8fbb93cfa4e216177279d75d769cc78f24cce6239997e95659",
@@ -512,6 +521,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "33e2bd341eb992036059b0c4606db35a218adcfeca7e44d174fedf8ebdff29d2",
         "3b93a0affab6413e3c14a6f43de5acb586286ed1819ece0a66b30429b4d00490",
         "3ff7255f395a9552366faaac34d383f4c95fecfb39882cd1d57854356422fe61",
+        "6fbfd93da39c9a1077f0e9e265fc2b2f82873ba82abdca0cd757cffd272fe9ac",
         "759dfd7552c1a4a8bf7172ffd88671a37571155877ea2459d26f6a79c6ab57ee",
         "7790a560850c9d38709dbaccdaa10733e632c1bd4d975cbec7e3cc5a8650b36a",
         "83a8b8108654086afb6a6f23a8f09f9f041eb2cd4094c5531fa7ab1f75e873dc",
@@ -548,6 +558,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "9404c374cbd90a0860410080f1044d087c51d84bb4c0a37343c2b632c3a9d03b",
         "a211f1a06aecddb841851463da302f694ab0eafff6bab75ee944b0a58aac431d",
         "a22fd1b7c483f1a538202353ee85c82be17a8910e03c0a930635ce8cb3595c64",
+        "b5505f55a5092f1d451ae5a01ada85a031e5b063d08fc0ce5527d94b67191a60",
         "b83c5043a0f29b2d8851258acfe6906aab7922cd80f486e25220e55f26a8c0a5",
         "baf3c78b7c333735142cc1a7bc19369f953a4699f7be517bb4e3c12167d5c60b",
         "c4a51de3f1512e7e18935612137e4ddaf548db68f878d8239fcc85436b0f27c7",
@@ -583,6 +594,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "587ab62a419ca6f104f5b82a3bd89c11f04600faec1824876ba536699ad59f7e",
         "600e0643ff88168c5bccea564cca9fcfea0005ca79bfc2206403ffcca8a4a193",
         "660d0b833ac5ffcb93cb3c478b6b840492a0ae049ff3b6f87275f78537ef7258",
+        "6c95bb777c84908023c02d8b98ed87e4a09567e9f62cf63275673d696b7bb874",
         "6e41817a015d5360336ca4e078fa1c787d9976b762e8d9a07d62c41a2fb52f25",
         "7d8d24dea151ef2178807046e97aea7ebfadd9c88eb50347feb7bb4bb190227d",
         "7ea75f5ff66b71ec551b7116ef855ac1d1c48a3ce3d7b51b3aea893a017dcd0c",
@@ -611,6 +623,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "3c062d0b79961a9a93a822507e893dcdaa71d65d735557727d20464c2489d812",
         "3e67eb4b0710ec195ad7efa4a8c2fd64063897d67725ea2627cf869c7e066201",
         "4b383ff960d7da53e0dd46e37632ef55c5a38b004fb4aabfe91a25a9fe02d88f",
+        "5408b14528557c2301b69a4d93a64d7930d3b66dc416702c9f33a72759a66c5c",
         "5c6b8a6ff3010b11f78b70eda0e73e78e1155b634a781b8abec79e40ac286eb7",
         "6261f7630e71bd95792083f5459a2802382cae95101c724a7311e3810af6c576",
         "9b613888c4c1cc6cc2b1fb6e162a4c766012eab0ec4f8b7f2ac1bc3da6622c97",
@@ -663,6 +676,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "8a1684f5c2b4d37fc782d2090273772814f7ad6c61e7ae5459163a1f28b7a5dc",
         "9dd145c0f9dac6ed252b13d32e130dbab964da6cd357981b58541780ecb2f981",
         "bd72dc7d240509eeb4a8f10e8ff64976d8223c1a270a482ac12a0daeae68a5c7",
+        "f70ecd3712dd2ca77a8851c7505ce79f948a57e5a2e28f56c5d0ccd047712688",
     ]),
     "scripts/lisa-test-node.mjs": Object.freeze([
         "31b338144af00e20e3de02202982846d7333433a9bbda76a8c77d50e6fdbc47b",
@@ -736,6 +750,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "39cb2fb53f1cc939675e7f8d5530a760abac420c2259fc97108d21f15c0275e9",
         "47d44b2bca383ae395b4e415e06c97a127327ab13762ee95b8c43d0198639bbb",
         "8fa58cc7276add0b2edf1de92bdcc32d81d840811ef0614ddc724010b59a888c",
+        "9281e995587ad2c73e15c4381ec4ecfa40fd789f171c0698cdcf8dea32539e62",
         "93190f926689725418c1ec9eae15c55910b128cff6e3cb10185e466c7b90cc4f",
         "db14245ed89b483912af287bdee917a7a921dc21bb29b49be37fc799c05c413f",
         "f50e35d11295a836bd5b6d818aed6daea68ff70bdffbbdf9f67b09984a2628da",
@@ -894,6 +909,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
     "scripts/check-nightly-e2e-health.mjs": Object.freeze([
         "03f57b46c1611806737203980ed0991f478177f883739cc8c3df2c8f219566af",
         "0cf6e997c623adacd198fe650b3900dce06558ebfd2637e6f6df562eee7e10f8",
+        "11608828a0ca51d4505e37742f8120102e68e081a92e054b631876b8d3a6d0bc",
         "191608d272178a8fd3126d5b3e4923fadb50e01b699d0376625248d541b14f50",
         "1c79ec49e5f4a3bba700bc1d97e9fc0f4f1799dec3acdf2bed5e3e5b866a0efd",
         "1e5d6787f99af1190b465903956a90270320eeca022c3a3ab6716e1a8b3ec57f",
@@ -950,6 +966,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "c04a78cb52beaa2e852846e03f42172a4e4a180222dcd54f4c305911249b68b1",
         "d386d621db2538ab7c5dfaa73f927c9ea87692d1a9e0ac02330a960c64af206e",
         "d649aaf3abf584272bb886b1a722afe16ea861186214284ac61f96b3386e63d7",
+        "da2e191a8fbfa4042b3bfff331bc2ee19077acb972b5cfc9cf35eba383115959",
         "dac550c4fd908149fb579625268b16d03657b626417633d8f743875d355ab173",
         "dc609502f848965baeee2576b4622cde502adc15f82ac282c0f30acf06342b77",
         "df59cbee6aaa71a3ccddfcba5d9d08b29610f98fa048519ec4fc35382d698183",
@@ -1002,6 +1019,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "4503ddbe7bd54cd553db2b5952972d5319d6b6eb39a258b7c58577b61c7e7ce7",
         "503b51e9239411d07ce6b51dbe2b3079bb12e94bf7c0310e76247af19ff667e6",
         "6742cc12ea14fc99b7bef31ff03df68d5c4610b56fad43107790372e6d777eb1",
+        "a36a7bd7845878e5f1f991e896739ba4cc468e50f562b71a251ebe193ca151b6",
         "b4a0b1a0df6e944313b4a197925a0003fb9aed517fbd5708deda2a2a67f53faf",
         "d234617dc907bb563455419957f2f419702fcd1c10b9d39e19d5bab8ca962008",
         "e07bab7dc4c4c296e2007cf26fab694b1238545dc37816e88d849606d8f9e760",
@@ -1017,6 +1035,10 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "82191900c818a88208669a39563cfed8de1512de699a9ccf7155743e5eff859e",
     ]),
     "scripts/lib/process-tree-runner.mjs": Object.freeze([
+        "07c78da8a8e40e28cc59a40c3d19e798ae291fae0a0d4cd13a2e5c047d8e5ac7",
+        "2444f81b8a05af19f2bdc61d75cc6baa40a19c79f60dc815cafc6746dffda714",
+        "757c74e96c16a9a51c8b099c5e5caa7a2086a9fbdc41cc41348619d993d36a5c",
+        "eb73088635fddf236fca92d1c94324a889c503843155d436835b96d3ed6fa1f1",
         "fb68902c68b4cd156f26d2f743364f611a54b833bc445b5144b4c844f553f188",
     ]),
     "scripts/lisa-clean-git-env.sh": Object.freeze([
@@ -1060,6 +1082,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "63879152ebb67f289e900167daf035f2d03d7773c6e110ed5ab708c95417c55c",
         "9f42451a38eabd69e453fbaabd34de2490dfbc8ab79b1d7a2f27f574d3314090",
         "c765c7a44ea81d54c7820f2068c8811fb73ca3e5f063cb55a8c30391d1326323",
+        "f82f3af91663988d003d30542f96189ad65210e0aa4dcc1b42e6c7c8752d5618",
         "f8c8e276fa6d68ed661f07882f20ee095d18a5e8a90136f78f1ed2b032ce33d4",
         "f936bc8a038a7901ade1ba58cc52e5f5a8b8b2a52a9f0c1516567cc80eb02ccb",
     ]),
@@ -1071,6 +1094,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "41060648b4394d417528f4f560a52f296b4df5b6ec8a5633e08afe4588b6a088",
         "557065f223dfc0715a20c3de76bafee0aefe22f52385c52e17cfc7b9398cce2d",
         "8870dba7b299ddb528e01fee32ec01cd8994a72118708ea8d3255be3daedfa72",
+        "8da563431ebfeb01ff6681fe47317bad1524863289460cc6ccdc7c8e07014aa7",
         "9cba6e0103c27850703323da25ac149c0136225172f1a1640abe3b3ac4e50a8e",
         "a612f172282d13ba9318fe5e03689d7c6ff42a0122d0c9d5d39051e1967b93dc",
         "ed0ded7369071c8fbb93cfa4e216177279d75d769cc78f24cce6239997e95659",
@@ -1195,6 +1219,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "33e2bd341eb992036059b0c4606db35a218adcfeca7e44d174fedf8ebdff29d2",
         "3b93a0affab6413e3c14a6f43de5acb586286ed1819ece0a66b30429b4d00490",
         "3ff7255f395a9552366faaac34d383f4c95fecfb39882cd1d57854356422fe61",
+        "6fbfd93da39c9a1077f0e9e265fc2b2f82873ba82abdca0cd757cffd272fe9ac",
         "759dfd7552c1a4a8bf7172ffd88671a37571155877ea2459d26f6a79c6ab57ee",
         "7790a560850c9d38709dbaccdaa10733e632c1bd4d975cbec7e3cc5a8650b36a",
         "83a8b8108654086afb6a6f23a8f09f9f041eb2cd4094c5531fa7ab1f75e873dc",
@@ -1230,6 +1255,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "9404c374cbd90a0860410080f1044d087c51d84bb4c0a37343c2b632c3a9d03b",
         "a211f1a06aecddb841851463da302f694ab0eafff6bab75ee944b0a58aac431d",
         "a22fd1b7c483f1a538202353ee85c82be17a8910e03c0a930635ce8cb3595c64",
+        "b5505f55a5092f1d451ae5a01ada85a031e5b063d08fc0ce5527d94b67191a60",
         "b83c5043a0f29b2d8851258acfe6906aab7922cd80f486e25220e55f26a8c0a5",
         "c4a51de3f1512e7e18935612137e4ddaf548db68f878d8239fcc85436b0f27c7",
         "c57b70eed03b74e7c8335c40b0c2b1102e217e507337b71fcf3d2bec5a450bf8",
@@ -1258,6 +1284,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "4ba3e8b081a4eb115d2da9e73b8a763a38ab8feb2646def7412dfd00ed18b4b0",
         "587ab62a419ca6f104f5b82a3bd89c11f04600faec1824876ba536699ad59f7e",
         "660d0b833ac5ffcb93cb3c478b6b840492a0ae049ff3b6f87275f78537ef7258",
+        "6c95bb777c84908023c02d8b98ed87e4a09567e9f62cf63275673d696b7bb874",
         "6e41817a015d5360336ca4e078fa1c787d9976b762e8d9a07d62c41a2fb52f25",
         "7d8d24dea151ef2178807046e97aea7ebfadd9c88eb50347feb7bb4bb190227d",
         "86fd0c6f6b8106a10af937bfbce94927603ffa8adcb188e350a659c96e3fc502",
@@ -1280,6 +1307,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "395897d1dc3f0ac92d7c892eaa9b9ddf12078181bb9f5b228965478190b09a91",
         "3c062d0b79961a9a93a822507e893dcdaa71d65d735557727d20464c2489d812",
         "3e67eb4b0710ec195ad7efa4a8c2fd64063897d67725ea2627cf869c7e066201",
+        "5408b14528557c2301b69a4d93a64d7930d3b66dc416702c9f33a72759a66c5c",
         "5c6b8a6ff3010b11f78b70eda0e73e78e1155b634a781b8abec79e40ac286eb7",
         "6261f7630e71bd95792083f5459a2802382cae95101c724a7311e3810af6c576",
         "9b613888c4c1cc6cc2b1fb6e162a4c766012eab0ec4f8b7f2ac1bc3da6622c97",
@@ -1324,6 +1352,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "8a1684f5c2b4d37fc782d2090273772814f7ad6c61e7ae5459163a1f28b7a5dc",
         "9dd145c0f9dac6ed252b13d32e130dbab964da6cd357981b58541780ecb2f981",
         "bd72dc7d240509eeb4a8f10e8ff64976d8223c1a270a482ac12a0daeae68a5c7",
+        "f70ecd3712dd2ca77a8851c7505ce79f948a57e5a2e28f56c5d0ccd047712688",
     ]),
     "scripts/lisa-test-node.mjs": Object.freeze([
         "31b338144af00e20e3de02202982846d7333433a9bbda76a8c77d50e6fdbc47b",
@@ -1393,6 +1422,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "39cb2fb53f1cc939675e7f8d5530a760abac420c2259fc97108d21f15c0275e9",
         "47d44b2bca383ae395b4e415e06c97a127327ab13762ee95b8c43d0198639bbb",
         "8fa58cc7276add0b2edf1de92bdcc32d81d840811ef0614ddc724010b59a888c",
+        "9281e995587ad2c73e15c4381ec4ecfa40fd789f171c0698cdcf8dea32539e62",
         "93190f926689725418c1ec9eae15c55910b128cff6e3cb10185e466c7b90cc4f",
         "db14245ed89b483912af287bdee917a7a921dc21bb29b49be37fc799c05c413f",
         "f50e35d11295a836bd5b6d818aed6daea68ff70bdffbbdf9f67b09984a2628da",