@codyswann/lisa 4.28.3 → 4.28.4

package/plugins/lisa-phaser-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "4.28.3",
+  "version": "4.28.4",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "4.28.3",
+  "version": "4.28.4",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "4.28.3",
+  "version": "4.28.4",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.28.3",
+  "version": "4.28.4",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.28.3",
+  "version": "4.28.4",
   "description": "Ruby on Rails-specific skills and hooks for RuboCop and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.28.3",
+  "version": "4.28.4",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.28.3",
+  "version": "4.28.4",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.28.3",
+  "version": "4.28.4",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.28.3",
+  "version": "4.28.4",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.28.3",
+  "version": "4.28.4",
   "description": "TypeScript-specific hooks for formatting, linting, and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.28.3",
+  "version": "4.28.4",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.28.3",
+  "version": "4.28.4",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.28.3",
+  "version": "4.28.4",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.28.3",
+  "version": "4.28.4",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.28.3",
+  "version": "4.28.4",
   "description": "Distributable LLM Wiki kernel — ingest, query, lint, and maintain a git-native markdown knowledge base across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.28.3",
+  "version": "4.28.4",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.28.3",
+  "version": "4.28.4",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.28.3",
+  "version": "4.28.4",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/src/base/skills/lisa-drive-pr-to-merge/SKILL.md

@@ -296,7 +296,8 @@ commit, and push. Only escalate to a human if the conflict needs design input
 surface the file list and merge state.
 
 **The project learnings ledger is a special case.** It is bound to the
-`lisa-learnings` union merge driver in `.gitattributes`, which merges concurrent
+`lisa-learnings` union merge driver in `.gitattributes`, which is enabled by default
+and merges concurrent
 learning branches by entry id. When that driver runs and still fails, it exits
 non-zero WITHOUT writing conflict markers — so the ledger on disk looks clean
 but contains **OUR SIDE ONLY**. Staging it as-is (`git add`, `git checkout
@@ -304,8 +305,11 @@ but contains **OUR SIDE ONLY**. Staging it as-is (`git add`, `git checkout
 learnings. On any conflict touching the ledger: re-union both sides by keeping
 every distinct entry id, honouring supersessions from either side, and re-run
 `lisa check-learnings-budget` before committing. If the driver was never
-registered you will instead see real conflict markers — run
-`lisa install-merge-driver .` and redo the merge rather than hand-editing them.
+registered you will instead see real conflict markers. Only an exact
+`learnings.mergeDriver: false` declines installation, and changing that setting
+does not uninstall an existing registration or remove the committed mapping. Run
+`lisa install-merge-driver .` and redo the merge rather than hand-editing markers
+unless the project explicitly opted out.
 
 ### c. Failing CI / deploy checks (`statusCheckRollup` has FAILURE)
 Inspect the failing check's logs (`gh pr checks <pr>`, `gh run view <run> --log-failed`).

package/plugins/src/base/skills/lisa-persist-learning/SKILL.md

@@ -240,4 +240,4 @@ No learning content is ever committed without a PR — there is no other write p
 - **No learning loops about learning**: never feed this skill a candidate whose triggering artifact is itself learning machinery (a `[lisa-learning-*]`-marked comment, learning PR, or handoff); the judge's Step 0 guard backstops this.
 - **Idempotent**: re-running with the same candidate posts no duplicate comment, opens no duplicate PR, and writes no duplicate entry — the fingerprint and markers guarantee it.
 - **One write path**: the learnings surface changes only through `persistLearningEntry` / `persistConsolidatedLearning` inside a PR. Never hand-edit the file, never commit it to the default branch directly.
-- **Never resolve a ledger conflict by taking one side.** Concurrent passes each work on their own `learning/<fingerprint>` branch, so two PRs routinely touch the same JSONL block. The `lisa-learnings` union merge driver reconciles them by entry id, but when it cannot it exits non-zero **without writing conflict markers** — leaving a clean-looking file that holds **OUR SIDE ONLY**. `git add`-ing it, or running `git checkout --ours`, silently deletes the other branch's learnings. Re-union both sides instead: keep every distinct entry id, honour supersessions from either side, then re-run `lisa check-learnings-budget`. Literal conflict markers in the ledger mean the driver was not registered — run `lisa install-merge-driver .` and redo the merge.
+- **Never resolve a ledger conflict by taking one side.** Concurrent passes each work on their own `learning/<fingerprint>` branch, so two PRs routinely touch the same JSONL block. The `lisa-learnings` union merge driver reconciles them by entry id, but when it cannot it exits non-zero **without writing conflict markers** — leaving a clean-looking file that holds **OUR SIDE ONLY**. Driver installation is enabled by default; only an exact `learnings.mergeDriver: false` declines it. That opt-out is non-destructive: changing the setting does not uninstall an existing registration or remove the committed mapping. `git add`-ing the failed result, or running `git checkout --ours`, silently deletes the other branch's learnings. Re-union both sides instead: keep every distinct entry id, honour supersessions from either side, then re-run `lisa check-learnings-budget`. Literal conflict markers in the ledger mean the driver was not registered — run `lisa install-merge-driver .` and redo the merge unless the project explicitly opted out.

package/scripts/verify-packed-learnings-contract.mjs

@@ -2,7 +2,14 @@
 /** Empirical proof that the packed public learnings API preserves v2 semantics. */
 import assert from "node:assert/strict";
 import { execFile } from "node:child_process";
-import { mkdir, mkdtemp, readFile, rm } from "node:fs/promises";
+import {
+  mkdir,
+  mkdtemp,
+  readFile,
+  rm,
+  symlink,
+  writeFile,
+} from "node:fs/promises";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
 import { promisify } from "node:util";
@@ -10,6 +17,8 @@ import { promisify } from "node:util";
 const executeFile = promisify(execFile);
 const root = path.resolve(import.meta.dirname, "..");
 const temporary = await mkdtemp(path.join(root, ".packed-learnings-proof-"));
+const packedConfigFile = ".lisa.config.json";
+const packedLearningsFile = "docs/knowledge/PROJECT_LEARNINGS.md";
 
 try {
   const archive = path.join(temporary, "lisa-packed.tgz");
@@ -29,6 +38,96 @@ try {
   assert.equal(learnings.MAX_STABLE_TOKEN_BYTES, 128);
   assert.equal(learnings.LEARNINGS_CONTRACT.maxTokens, 14_900);
 
+  const configProject = path.join(temporary, "config-consumer");
+  await mkdir(configProject);
+  await writeFile(
+    path.join(configProject, packedConfigFile),
+    `${JSON.stringify({
+      learnings: {
+        file: packedLearningsFile,
+        mergeDriver: false,
+      },
+    })}\n`,
+    "utf8"
+  );
+  const packedConfig = await learnings.readProjectConfig(configProject);
+  assert.deepEqual(packedConfig.learnings, {
+    file: packedLearningsFile,
+    mergeDriver: false,
+  });
+  assert.deepEqual(learnings.resolveLearningsSettings(packedConfig), {
+    learningsFile: packedLearningsFile,
+    mergeDriverEnabled: false,
+  });
+  await writeFile(
+    path.join(configProject, packedConfigFile),
+    '{"learnings":{"mergeDriver":"false"}}\n',
+    "utf8"
+  );
+  await assert.rejects(
+    learnings.readProjectConfig(configProject),
+    /learnings\.mergeDriver.*expected boolean.*received "false"/iu
+  );
+
+  const typeConsumer = path.join(temporary, "type-consumer");
+  await mkdir(path.join(typeConsumer, "node_modules", "@codyswann"), {
+    recursive: true,
+  });
+  await symlink(
+    packedRoot,
+    path.join(typeConsumer, "node_modules", "@codyswann", "lisa"),
+    "dir"
+  );
+  await writeFile(
+    path.join(typeConsumer, "tsconfig.json"),
+    `${JSON.stringify(
+      {
+        compilerOptions: {
+          module: "NodeNext",
+          moduleResolution: "NodeNext",
+          noEmit: true,
+          skipLibCheck: true,
+          strict: true,
+          target: "ES2022",
+        },
+        include: ["consumer.ts"],
+      },
+      null,
+      2
+    )}\n`,
+    "utf8"
+  );
+  await writeFile(
+    path.join(typeConsumer, "consumer.ts"),
+    `import { resolveLearningsSettings, type LearningsConfig, type ProjectConfig } from "@codyswann/lisa/learnings";
+
+const absent: LearningsConfig = {};
+const explicitTrue: LearningsConfig = { mergeDriver: true };
+const explicitFalse: LearningsConfig = { mergeDriver: false };
+const withFile: LearningsConfig = { file: "docs/LEARNINGS.md", mergeDriver: false };
+const configs: ProjectConfig[] = [
+  { learnings: absent },
+  { learnings: explicitTrue },
+  { learnings: explicitFalse },
+  { learnings: withFile },
+];
+for (const config of configs) resolveLearningsSettings(config);
+// @ts-expect-error mergeDriver is a boolean opt-out, never a string
+const invalid: LearningsConfig = { mergeDriver: "false" };
+void invalid;
+`,
+    "utf8"
+  );
+  await executeFile(
+    process.execPath,
+    [
+      path.join(root, "node_modules", "typescript", "bin", "tsc"),
+      "-p",
+      typeConsumer,
+    ],
+    { cwd: typeConsumer }
+  );
+
   const packedVictim = "packed-victim";
   const packedProvenance = "issue:#2015";
   const packedDate = "2026-08-26";
@@ -261,7 +360,7 @@ try {
   assert.equal(await readFile(overflow.file, "utf8"), beforeOverflowCollision);
 
   console.log(
-    "[EVIDENCE: packed-learnings-contract] v1=migratable legacy=bounded entries=hardened stamps=hardened race=9 stale=8 chain=stable collision=atomic overflow=fork merge=2 projection=bounded"
+    "[EVIDENCE: packed-learnings-contract] config=validated merge-driver=opt-out types=closed v1=migratable legacy=bounded entries=hardened stamps=hardened race=9 stale=8 chain=stable collision=atomic overflow=fork merge=2 projection=bounded"
   );
 } finally {
   await rm(temporary, { recursive: true, force: true });

package/dist/core/learnings-merge-driver-config.d.ts

@@ -1,7 +0,0 @@
-/**
- * Whether this project accepts the merge-driver registration.
- * @param projectRoot - Host project directory
- * @returns False only when `learnings.mergeDriver` is explicitly `false`
- */
-export declare function isLearningsMergeDriverEnabled(projectRoot: string): Promise<boolean>;
-//# sourceMappingURL=learnings-merge-driver-config.d.ts.map

package/dist/core/learnings-merge-driver-config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"learnings-merge-driver-config.d.ts","sourceRoot":"","sources":["../../src/core/learnings-merge-driver-config.ts"],"names":[],"mappings":"AA6CA;;;;GAIG;AACH,wBAAsB,6BAA6B,CACjD,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CAQlB"}

package/dist/core/learnings-merge-driver-config.js

@@ -1,58 +0,0 @@
-/**
- * Host opt-out for the project-learnings union merge driver.
- *
- * `lisa apply` registers the driver automatically, and the TypeScript stack
- * wires `lisa apply` into `postinstall` — so an ordinary `npm install` writes
- * `merge.lisa-learnings.driver` into `.git/config` with no separate human step.
- * That is not an escalation over `npm install` itself, which already runs
- * arbitrary code, but it does persist an executable hook that fires on ordinary
- * git operations for as long as the clone exists, outside npm's lifecycle. A
- * host that would rather not carry that hook needs a way to say so.
- *
- * This reads `.lisa.config.json` directly rather than extending the validated
- * `ProjectConfig` schema: `project-config.ts` sits exactly at its 300-line lint
- * cap, and forcing an extraction of its cross-cutting learnings validators to
- * make room would be a far larger change than this flag warrants. Keeping the
- * flag beside the feature it governs also means the driver's opt-out is
- * readable in one place.
- *
- * Opt-out only, and strictly `=== false`: absent, malformed, or non-boolean
- * values all leave the driver enabled, matching the zero-configuration default
- * every other Lisa guardrail uses. A malformed config must not silently disable
- * a data-integrity guard.
- * @module core/learnings-merge-driver-config
- */
-import { readFile } from "node:fs/promises";
-import * as path from "node:path";
-const CONFIG_FILE = ".lisa.config.json";
-/**
- * Read one inert own property without invoking an accessor.
- * @param candidate - Value to inspect
- * @param key - Property name to read
- * @returns The own data value, when present
- */
-function readOwn(candidate, key) {
-    if (candidate === null || typeof candidate !== "object") {
-        return undefined;
-    }
-    const descriptor = Object.getOwnPropertyDescriptor(candidate, key);
-    return descriptor !== undefined && "value" in descriptor
-        ? descriptor.value
-        : undefined;
-}
-/**
- * Whether this project accepts the merge-driver registration.
- * @param projectRoot - Host project directory
- * @returns False only when `learnings.mergeDriver` is explicitly `false`
- */
-export async function isLearningsMergeDriverEnabled(projectRoot) {
-    try {
-        const raw = await readFile(path.join(projectRoot, CONFIG_FILE), "utf8");
-        const learnings = readOwn(JSON.parse(raw), "learnings");
-        return readOwn(learnings, "mergeDriver") !== false;
-    }
-    catch {
-        return true;
-    }
-}
-//# sourceMappingURL=learnings-merge-driver-config.js.map

package/dist/core/learnings-merge-driver-config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"learnings-merge-driver-config.js","sourceRoot":"","sources":["../../src/core/learnings-merge-driver-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,WAAW,GAAG,mBAAmB,CAAC;AAExC;;;;;GAKG;AACH,SAAS,OAAO,CAAC,SAAkB,EAAE,GAAW;IAC9C,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QACxD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACnE,OAAO,UAAU,KAAK,SAAS,IAAI,OAAO,IAAI,UAAU;QACtD,CAAC,CAAC,UAAU,CAAC,KAAK;QAClB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,EAAE,WAAW,CAAC,CAAC;QACnE,OAAO,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,KAAK,KAAK,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}