@codyswann/lisa 4.22.9 → 4.22.11

package/scripts/check-release-package-identity.mjs

@@ -90,6 +90,33 @@ function tarMember(tarballPath, member) {
   }
 }
 
+/** Create the one npm archive whose bytes will be published. */
+function createCandidateArchive(root, packDestination) {
+  mkdirSync(packDestination, { recursive: true });
+  if (readdirSync(packDestination).length !== 0) {
+    mismatch(`pack destination must be empty (${packDestination})`);
+  }
+  try {
+    return String(
+      boundedExecFileSync(
+        "npm",
+        [
+          "pack",
+          "--ignore-scripts",
+          "--silent",
+          "--pack-destination",
+          packDestination,
+        ],
+        { cwd: root, encoding: "utf8", timeout: 120_000 }
+      )
+    );
+  } catch (error) {
+    mismatch(
+      `npm pack failed before publication (${error instanceof Error ? error.message : String(error)})`
+    );
+  }
+}
+
 /** Extract the one workspace package version certified by generated bytes. */
 function certificateVersion(bytes, label) {
   const match = String(bytes).match(
@@ -115,18 +142,24 @@ export function assertReleaseCommit(releaseCommit) {
  * @returns {{headCommit: string, tagCommit: string, releaseCommit: string}}
  */
 export function assertCheckoutIdentity({ root, releaseCommit, tag }) {
-  assertReleaseCommit(releaseCommit);
+  const validatedReleaseCommit = assertReleaseCommit(releaseCommit);
   const headCommit = gitCommit(root, "HEAD");
-  if (headCommit !== releaseCommit) {
+  if (headCommit !== validatedReleaseCommit) {
     mismatch(
-      `HEAD ${headCommit} does not match release commit ${releaseCommit}`
+      `HEAD ${headCommit} does not match release commit ${validatedReleaseCommit}`
     );
   }
   const tagCommit = gitCommit(root, tag);
-  if (tagCommit !== releaseCommit) {
-    mismatch(`tag ${tag} resolves ${tagCommit}, expected ${releaseCommit}`);
+  if (tagCommit !== validatedReleaseCommit) {
+    mismatch(
+      `tag ${tag} resolves ${tagCommit}, expected ${validatedReleaseCommit}`
+    );
   }
-  return Object.freeze({ headCommit, tagCommit, releaseCommit });
+  return Object.freeze({
+    headCommit,
+    tagCommit,
+    releaseCommit: validatedReleaseCommit,
+  });
 }
 
 /**
@@ -140,21 +173,21 @@ export function packAndValidateReleaseCandidate({
   releaseCommit,
   packDestination,
 }) {
-  assertReleaseCommit(releaseCommit);
+  const validatedReleaseCommit = assertReleaseCommit(releaseCommit);
   const packageJson = readJson(path.join(root, "package.json"), "package.json");
   if (packageJson.version !== version) {
     mismatch(
       `package.json version ${JSON.stringify(packageJson.version)} expected ${version}`
     );
   }
-  if (packageJson.lisaReleaseCommit !== releaseCommit) {
+  if (packageJson.lisaReleaseCommit !== validatedReleaseCommit) {
     mismatch(
-      `package.json lisaReleaseCommit ${JSON.stringify(packageJson.lisaReleaseCommit)} expected ${releaseCommit}`
+      `package.json lisaReleaseCommit ${JSON.stringify(packageJson.lisaReleaseCommit)} expected ${validatedReleaseCommit}`
     );
   }
-  if (packageJson.gitHead !== releaseCommit) {
+  if (packageJson.gitHead !== validatedReleaseCommit) {
     mismatch(
-      `package.json gitHead ${JSON.stringify(packageJson.gitHead)} expected ${releaseCommit}`
+      `package.json gitHead ${JSON.stringify(packageJson.gitHead)} expected ${validatedReleaseCommit}`
     );
   }
 
@@ -172,30 +205,7 @@ export function packAndValidateReleaseCandidate({
     }
   }
 
-  mkdirSync(packDestination, { recursive: true });
-  if (readdirSync(packDestination).length !== 0) {
-    mismatch(`pack destination must be empty (${packDestination})`);
-  }
-  let packOutput;
-  try {
-    packOutput = String(
-      boundedExecFileSync(
-        "npm",
-        [
-          "pack",
-          "--ignore-scripts",
-          "--silent",
-          "--pack-destination",
-          packDestination,
-        ],
-        { cwd: root, encoding: "utf8", timeout: 120_000 }
-      )
-    );
-  } catch (error) {
-    mismatch(
-      `npm pack failed before publication (${error instanceof Error ? error.message : String(error)})`
-    );
-  }
+  const packOutput = createCandidateArchive(root, packDestination);
   const candidates = readdirSync(packDestination).filter(file =>
     file.endsWith(".tgz")
   );
@@ -223,14 +233,14 @@ export function packAndValidateReleaseCandidate({
       `packed package version ${JSON.stringify(packedPackage.version)} expected ${version}`
     );
   }
-  if (packedPackage.lisaReleaseCommit !== releaseCommit) {
+  if (packedPackage.lisaReleaseCommit !== validatedReleaseCommit) {
     mismatch(
-      `packed lisaReleaseCommit ${JSON.stringify(packedPackage.lisaReleaseCommit)} expected ${releaseCommit}`
+      `packed lisaReleaseCommit ${JSON.stringify(packedPackage.lisaReleaseCommit)} expected ${validatedReleaseCommit}`
     );
   }
-  if (packedPackage.gitHead !== releaseCommit) {
+  if (packedPackage.gitHead !== validatedReleaseCommit) {
     mismatch(
-      `packed gitHead ${JSON.stringify(packedPackage.gitHead)} expected ${releaseCommit}`
+      `packed gitHead ${JSON.stringify(packedPackage.gitHead)} expected ${validatedReleaseCommit}`
     );
   }
 
@@ -241,7 +251,7 @@ export function packAndValidateReleaseCandidate({
     packedCertificateVersion = certificateVersion(member, "packed certificate");
     if (packedCertificateVersion !== version) {
       mismatch(
-        `packed certificate names ${packedCertificateVersion}, expected ${version} at release commit ${releaseCommit} (${PACKED_CERTIFICATE})`
+        `packed certificate names ${packedCertificateVersion}, expected ${version} at release commit ${validatedReleaseCommit} (${PACKED_CERTIFICATE})`
       );
     }
     certificateMemberSha256 = sha256(member);
@@ -249,7 +259,7 @@ export function packAndValidateReleaseCandidate({
 
   return Object.freeze({
     version,
-    releaseCommit,
+    releaseCommit: validatedReleaseCommit,
     certificateVersion: packedCertificateVersion,
     tarballPath,
     tarballSha256: sha256(tarballBytes),

package/scripts/lisa-remote-env/session-start.sh

@@ -46,8 +46,27 @@ here="$(CDPATH='' cd -- "$(dirname -- "$0")" && pwd)"
 # SessionStart hosts are fail-open, so they surface that result and still allow
 # the agent session to continue.
 bash "${here}/setup.sh" --phase=toolchain "$@"
+
+# The toolchain child cannot export into this parent shell. Its durable output
+# is linked into ~/.local/bin, so make that directory visible before the next
+# child tries to execute the provider CLI it just installed.
+case ":$PATH:" in
+  *":$HOME/.local/bin:"*) ;;
+  *) PATH="$HOME/.local/bin:$PATH"; export PATH ;;
+esac
+
 bash "${here}/setup.sh" --phase=secrets "$@"
 
+# Materialization writes a Lisa-owned block into .profile that sources the
+# generated environment and removes ambient AWS credential poison. The project
+# hook is another non-login child, so load that block here and let the child
+# inherit the exact environment materialization just produced.
+if [ -r "$HOME/.profile" ]; then
+  # The materializer owns this runtime path.
+  # shellcheck disable=SC1090
+  . "$HOME/.profile"
+fi
+
 # A project hook is part of the remote toolchain contract too. It covers tools
 # that cannot be expressed by the pinned manifest, so skipping it on a cached
 # session can leave fresh credentials with no client capable of using them.

package/scripts/lisa-remote-env/setup.sh

@@ -132,6 +132,7 @@ for candidate in \
   ".claude/skills/lisa-setup-remote-env/scripts/setup-remote-env.mjs" \
   ".agents/skills/lisa-setup-remote-env/scripts/setup-remote-env.mjs" \
   ".codex/skills/lisa-setup-remote-env/scripts/setup-remote-env.mjs" \
+  ".opencode/skills/lisa/lisa-setup-remote-env/scripts/setup-remote-env.mjs" \
   "plugins/lisa/skills/lisa-setup-remote-env/scripts/setup-remote-env.mjs" \
   "node_modules/@codyswann/lisa/plugins/lisa/skills/lisa-setup-remote-env/scripts/setup-remote-env.mjs"; do
   if [ -f "$candidate" ]; then

package/scripts/two-channel-couplings.json

@@ -7,7 +7,7 @@
     "workflows": 23,
     "steps": 639,
     "couplings": 27,
-    "inventory": 57
+    "inventory": 58
   },
   "counts": {
     "package-backed": 10,

package/typescript/copy-contents/.husky/pre-push

@@ -553,7 +553,7 @@ fi
 # measured, and the honest command for such a project is still `test:cov` —
 # slower, but answering to the floor that was configured for what it runs.
 COVERAGE_SCRIPT="test:cov"
-if node -e 'const s=require("./package.json").scripts||{};const u=s["test:cov:unit"];process.exit(typeof u==="string"&&u.includes("LISA_COVERAGE_SCOPE=unit")?0:1)' >/dev/null 2>&1; then
+if node -e 'const s=require("./package.json").scripts||{};const u=s["test:cov:unit"];const marker=/^(?:env(?:\s+-\S+)*\s+)?(?:[A-Za-z_][A-Za-z0-9_]*=\S+\s+)*LISA_COVERAGE_SCOPE=unit(?:\s|$)/;process.exit(typeof u==="string"&&marker.test(u.trim())?0:1)' >/dev/null 2>&1; then
   COVERAGE_SCRIPT="test:cov:unit"
 fi
 

package/typescript/copy-overwrite/scripts/threshold-ratchet-families.mjs

@@ -95,11 +95,11 @@ export const FAMILIES = [
  * Unknown keys stay unwatched until their direction is explicit here.
  * @type {Readonly<Record<string, "min"|"max">>}
  */
-export const LIGHTHOUSE_ASSERTION_DIRECTIONS = {
+export const LIGHTHOUSE_ASSERTION_DIRECTIONS = Object.freeze({
   minScore: "min",
   maxNumericValue: "max",
   maxLength: "max",
-};
+});
 
 /**
  * Extract numeric Lighthouse assertions with a direction chosen per key.
@@ -112,10 +112,22 @@ export const LIGHTHOUSE_ASSERTION_DIRECTIONS = {
  */
 export function extractLighthouseAssertions(conf) {
   const out = new Map();
-  const assertions =
+  const root =
     conf && typeof conf === "object" && !Array.isArray(conf)
-      ? /** @type {Record<string, unknown>} */ (conf).assertions
+      ? /** @type {Record<string, unknown>} */ (conf)
       : undefined;
+  const ci =
+    root?.ci && typeof root.ci === "object" && !Array.isArray(root.ci)
+      ? /** @type {Record<string, unknown>} */ (root.ci)
+      : undefined;
+  const assert =
+    ci?.assert && typeof ci.assert === "object" && !Array.isArray(ci.assert)
+      ? /** @type {Record<string, unknown>} */ (ci.assert)
+      : undefined;
+  // Lighthouse CI's canonical shape is `ci.assert.assertions`. Keep the
+  // historical top-level shape as a compatibility lane for already-generated
+  // project configs, but never merge the two into an ambiguous hybrid.
+  const assertions = assert?.assertions ?? root?.assertions;
   if (
     !assertions ||
     typeof assertions !== "object" ||
@@ -124,9 +136,21 @@ export function extractLighthouseAssertions(conf) {
     return out;
   }
   for (const [audit, spec] of Object.entries(assertions)) {
-    if (!spec || typeof spec !== "object" || Array.isArray(spec)) continue;
-    for (const [key, value] of Object.entries(spec)) {
-      const direction = LIGHTHOUSE_ASSERTION_DIRECTIONS[key];
+    const options =
+      Array.isArray(spec) &&
+      spec.length >= 2 &&
+      spec[1] &&
+      typeof spec[1] === "object" &&
+      !Array.isArray(spec[1])
+        ? /** @type {Record<string, unknown>} */ (spec[1])
+        : spec && typeof spec === "object" && !Array.isArray(spec)
+          ? /** @type {Record<string, unknown>} */ (spec)
+          : undefined;
+    if (!options) continue;
+    for (const [key, value] of Object.entries(options)) {
+      const direction = Object.hasOwn(LIGHTHOUSE_ASSERTION_DIRECTIONS, key)
+        ? LIGHTHOUSE_ASSERTION_DIRECTIONS[key]
+        : undefined;
       if (direction && typeof value === "number" && Number.isFinite(value)) {
         out.set(`${audit}.${key}`, { value, direction });
       }

package/typescript/package-lisa/package.lisa.json

@@ -7,7 +7,7 @@
       "format": "prettier --check . --write",
       "test": "vitest run",
       "test:unit": "vitest run --exclude='**/integration/**'",
-      "test:integration:lisa": "vitest run '.integration.' 'integration/' --passWithNoTests",
+      "test:integration:lisa": "vitest run '.integration.' 'integration/'",
       "test:cov": "vitest run --coverage",
       "test:cov:unit": "LISA_COVERAGE_SCOPE=unit vitest run --coverage --exclude='**/integration/**'",
       "test:mutation": "node scripts/lisa-mutation.mjs",