@codyswann/lisa 4.34.21 → 4.35.1

package/dist/migrations/ensure-lisa-postinstall.d.ts

@@ -1,48 +1,17 @@
 import type { Migration, MigrationContext, MigrationResult } from "./migration.interface.js";
-/**
- * What the operator sees on stderr when the bootstrap apply fails.
- *
- * Written for someone scrolling past a wall of install output who may not know
- * what Lisa is: it says what stopped working (templates and guardrails are no
- * longer arriving), that the real error is directly above, and the two commands
- * that reproduce and diagnose it. ASCII and free of `"`, `$`, and backticks so
- * it survives being embedded in a JSON string inside a `sh -c` command.
- */
-export declare const APPLY_FAILURE_NOTICE: string;
 /**
  * The bootstrap invocation chained into a host project's `postinstall`.
  *
- * Shape: **loud and fatal**. Two earlier shapes each discarded the apply's exit
- * code. `2>/dev/null || true` discarded its stderr too, so a totally failed
- * apply was byte-for-byte indistinguishable from success and a repo could
- * silently stop receiving template updates (CodySwannGT/lisa#2467). Replacing
- * `true` with `echo` recovered the reason but not the fact: `echo` also exits 0,
- * so a failed apply still reported success and the one warning line scrolled
- * away in a wall of install output (CodySwannGT/lisa#3466). The failure branch
- * now prints the notice and exits 1.
- *
- * Failing the install is a deliberate trade against the previous reasoning,
- * which was that a non-zero postinstall would convert a template-sync problem
- * into an install outage across the fleet. Two things bound that risk. The
- * `[ -n "$CI" ] ||` guard means this branch never executes when `CI` is set, so
- * no CI pipeline can be broken by it and the exposure is local installs only;
- * and `CI=1` remains the escape hatch for anyone who needs to install past a
- * broken apply. Against that, the apply receipt this failed run did NOT write —
- * previously offered as the durable signal — cannot tell `lisa doctor` that an
- * apply *failed*, only that none has succeeded recently, which is equally true
- * of a project that was never applied or was deliberately skipped. The exit code
- * is the only signal that distinguishes them.
- *
- * The cost, stated plainly: {@link composePostinstall} builds
- * `<lisa> && <the host's own postinstall>`, so a failed apply now also skips
- * whatever the host chained after it (`patch-package` and friends). That is the
- * honest outcome — the install genuinely did not complete — but it is a wider
- * change than the exit code alone.
+ * Shape: bounded, loud, durable, and deliberately non-fatal. The runner owns
+ * the timeout, exposes the real error, and records a marker for `lisa doctor`;
+ * `|| true` keeps a template failure from stranding the host before it can
+ * install the fix. This is the same invocation the package template writes,
+ * so a migration cannot leave older callers on the superseded direct apply.
  *
  * Exported so tests can execute the real script under `sh` rather than assert
  * on a string.
  */
-export declare const LISA_INVOCATION = "[ -n \"$CI\" ] || LISA_BOOTSTRAP=1 LISA_POSTINSTALL=1 node node_modules/@codyswann/lisa/dist/index.js --yes --skip-git-check . || { echo \"lisa: TEMPLATE APPLY FAILED - this project is NOT receiving Lisa template or guardrail updates. The error is above. Reproduce it with: LISA_POSTINSTALL=1 node node_modules/@codyswann/lisa/dist/index.js --yes --skip-git-check . - then run: node node_modules/@codyswann/lisa/dist/index.js doctor\" >&2; exit 1; }";
+export declare const LISA_INVOCATION = "[ -n \"$CI\" ] || LISA_BOOTSTRAP=1 node node_modules/@codyswann/lisa/all/copy-overwrite/scripts/lisa-postinstall.mjs || true";
 /**
  * Migration: ensure Node-based projects chain Lisa into their postinstall script.
  *

package/dist/migrations/ensure-lisa-postinstall.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ensure-lisa-postinstall.d.ts","sourceRoot":"","sources":["../../src/migrations/ensure-lisa-postinstall.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,SAAS,EACT,gBAAgB,EAChB,eAAe,EAChB,MAAM,0BAA0B,CAAC;AAqBlC;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,QAG8C,CAAC;AAYhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,eAAe,scAAyG,CAAC;AA0FtI;;;;;;;;;GASG;AACH,qBAAa,8BAA+B,YAAW,SAAS;IAC9D,QAAQ,CAAC,IAAI,6BAA6B;IAC1C,QAAQ,CAAC,WAAW,qEACgD;IAEpE;;;;;;;;;;;;;OAaG;IACG,OAAO,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IAyBtD;;;;OAIG;IACG,KAAK,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;CAqC7D"}
+{"version":3,"file":"ensure-lisa-postinstall.d.ts","sourceRoot":"","sources":["../../src/migrations/ensure-lisa-postinstall.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,SAAS,EACT,gBAAgB,EAChB,eAAe,EAChB,MAAM,0BAA0B,CAAC;AASlC;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,iIAAmF,CAAC;AAoGhH;;;;;;;;;GASG;AACH,qBAAa,8BAA+B,YAAW,SAAS;IAC9D,QAAQ,CAAC,IAAI,6BAA6B;IAC1C,QAAQ,CAAC,WAAW,qEACgD;IAEpE;;;;;;;;;;;;;OAaG;IACG,OAAO,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IA0BtD;;;;OAIG;IACG,KAAK,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;CAqC7D"}

package/dist/migrations/ensure-lisa-postinstall.js

@@ -4,76 +4,21 @@ import { readJsonOrNull, writeJson } from "../utils/json-utils.js";
 const PACKAGE_JSON = "package.json";
 const CI_GUARD_PREFIX = '[ -n "$CI" ] || ';
 const BOOTSTRAP_PREFIX = "LISA_BOOTSTRAP=1 ";
-/**
- * The hook's declaration that it is a package-manager install lifecycle.
- *
- * This — not `--skip-git-check` — is what selects the reduced
- * `postinstall-safe` apply (CodySwannGT/lisa#3066). It is spelled as an
- * environment prefix rather than a flag on purpose: the command tail stays
- * byte-identical, so {@link LISA_INVOCATION_RE} keeps matching every hook
- * already installed in a consumer's `package.json` with one added alternative
- * in a group it already had.
- */
-const POSTINSTALL_PREFIX = "LISA_POSTINSTALL=1 ";
-const LISA_MARKER = "node_modules/@codyswann/lisa/dist/index.js";
-const LISA_APPLY_COMMAND = `node ${LISA_MARKER} --yes --skip-git-check .`;
-/** The apply command with the declaration, as an operator would reproduce it. */
-const LISA_APPLY_COMMAND_AS_POSTINSTALL = `${POSTINSTALL_PREFIX}${LISA_APPLY_COMMAND}`;
-/**
- * What the operator sees on stderr when the bootstrap apply fails.
- *
- * Written for someone scrolling past a wall of install output who may not know
- * what Lisa is: it says what stopped working (templates and guardrails are no
- * longer arriving), that the real error is directly above, and the two commands
- * that reproduce and diagnose it. ASCII and free of `"`, `$`, and backticks so
- * it survives being embedded in a JSON string inside a `sh -c` command.
- */
-export const APPLY_FAILURE_NOTICE = "lisa: TEMPLATE APPLY FAILED - this project is NOT receiving Lisa template " +
-    "or guardrail updates. The error is above. Reproduce it with: " +
-    `${LISA_APPLY_COMMAND_AS_POSTINSTALL} - then run: node ${LISA_MARKER} doctor`;
-/**
- * The failure branch: say why, then exit non-zero.
- *
- * `exit 1` rather than a bare `false` because this invocation is routinely
- * chained (`<lisa> && <the host's own postinstall>`); `exit` ends the script at
- * the failure regardless of what a consumer composed around it, so the status
- * cannot be overwritten by a later command in the chain.
- */
-const APPLY_FAILURE_TAIL = ` || { echo "${APPLY_FAILURE_NOTICE}" >&2; exit 1; }`;
+const LEGACY_LISA_MARKER = "node_modules/@codyswann/lisa/dist/index.js";
+const POSTINSTALL_RUNNER_MARKER = "node_modules/@codyswann/lisa/all/copy-overwrite/scripts/lisa-postinstall.mjs";
 /**
  * The bootstrap invocation chained into a host project's `postinstall`.
  *
- * Shape: **loud and fatal**. Two earlier shapes each discarded the apply's exit
- * code. `2>/dev/null || true` discarded its stderr too, so a totally failed
- * apply was byte-for-byte indistinguishable from success and a repo could
- * silently stop receiving template updates (CodySwannGT/lisa#2467). Replacing
- * `true` with `echo` recovered the reason but not the fact: `echo` also exits 0,
- * so a failed apply still reported success and the one warning line scrolled
- * away in a wall of install output (CodySwannGT/lisa#3466). The failure branch
- * now prints the notice and exits 1.
- *
- * Failing the install is a deliberate trade against the previous reasoning,
- * which was that a non-zero postinstall would convert a template-sync problem
- * into an install outage across the fleet. Two things bound that risk. The
- * `[ -n "$CI" ] ||` guard means this branch never executes when `CI` is set, so
- * no CI pipeline can be broken by it and the exposure is local installs only;
- * and `CI=1` remains the escape hatch for anyone who needs to install past a
- * broken apply. Against that, the apply receipt this failed run did NOT write —
- * previously offered as the durable signal — cannot tell `lisa doctor` that an
- * apply *failed*, only that none has succeeded recently, which is equally true
- * of a project that was never applied or was deliberately skipped. The exit code
- * is the only signal that distinguishes them.
- *
- * The cost, stated plainly: {@link composePostinstall} builds
- * `<lisa> && <the host's own postinstall>`, so a failed apply now also skips
- * whatever the host chained after it (`patch-package` and friends). That is the
- * honest outcome — the install genuinely did not complete — but it is a wider
- * change than the exit code alone.
+ * Shape: bounded, loud, durable, and deliberately non-fatal. The runner owns
+ * the timeout, exposes the real error, and records a marker for `lisa doctor`;
+ * `|| true` keeps a template failure from stranding the host before it can
+ * install the fix. This is the same invocation the package template writes,
+ * so a migration cannot leave older callers on the superseded direct apply.
  *
  * Exported so tests can execute the real script under `sh` rather than assert
  * on a string.
  */
-export const LISA_INVOCATION = `${CI_GUARD_PREFIX}${BOOTSTRAP_PREFIX}${POSTINSTALL_PREFIX}${LISA_APPLY_COMMAND}${APPLY_FAILURE_TAIL}`;
+export const LISA_INVOCATION = `${CI_GUARD_PREFIX}${BOOTSTRAP_PREFIX}node ${POSTINSTALL_RUNNER_MARKER} || true`;
 /**
  * Project types that do not use Node.js postinstall hooks (e.g. Rails).
  * Projects detected as only these types are skipped by this migration.
@@ -108,11 +53,15 @@ async function readPackageJson(projectDir) {
  * never re-applies keeps its old spelling forever, which is why an old
  * alternative may never be removed.
  */
-const LISA_INVOCATION_RE = new RegExp('(?:(?:\\[ -n "\\$CI" \\] \\|\\| )|(?:LISA_BOOTSTRAP=1 )|(?:LISA_POSTINSTALL=1 ))*' +
+const LEGACY_LISA_INVOCATION_RE = new RegExp('(?:(?:\\[ -n "\\$CI" \\] \\|\\| )|(?:LISA_BOOTSTRAP=1 )|(?:LISA_POSTINSTALL=1 ))*' +
     "node node_modules/@codyswann/lisa/dist/index\\.js --yes --skip-git-check \\." +
     "(?: 2>/dev/null \\|\\| true" +
     '| \\|\\| \\{ echo "[^"]*" >&2; exit 1; \\}' +
     '| \\|\\| echo "[^"]*" >&2)?');
+/** The bounded runner spelling currently written by Lisa. */
+const POSTINSTALL_RUNNER_RE = new RegExp('(?:(?:\\[ -n "\\$CI" \\] \\|\\| )|(?:LISA_BOOTSTRAP=1 ))*' +
+    "node node_modules/@codyswann/lisa/all/copy-overwrite/scripts/" +
+    "lisa-postinstall\\.mjs(?: \\|\\| true)?");
 /**
  * Compose the new postinstall, prepending the Lisa invocation to any existing command.
  * If the existing script already contains a legacy Lisa invocation (no CI guard),
@@ -125,8 +74,11 @@ function composePostinstall(existing) {
     if (!trimmed) {
         return LISA_INVOCATION;
     }
-    if (trimmed.includes(LISA_MARKER)) {
-        return trimmed.replace(LISA_INVOCATION_RE, LISA_INVOCATION);
+    if (trimmed.includes(POSTINSTALL_RUNNER_MARKER)) {
+        return trimmed.replace(POSTINSTALL_RUNNER_RE, LISA_INVOCATION);
+    }
+    if (trimmed.includes(LEGACY_LISA_MARKER)) {
+        return trimmed.replace(LEGACY_LISA_INVOCATION_RE, LISA_INVOCATION);
     }
     return `${LISA_INVOCATION} && ${trimmed}`;
 }
@@ -187,7 +139,8 @@ export class EnsureLisaPostinstallMigration {
         }
         const normalizedPostinstall = composePostinstall(postinstall);
         if (!hasNodePostinstallType(ctx.detectedTypes)) {
-            return (postinstall.includes(LISA_MARKER) &&
+            return ((postinstall.includes(LEGACY_LISA_MARKER) ||
+                postinstall.includes(POSTINSTALL_RUNNER_MARKER)) &&
                 normalizedPostinstall !== postinstall);
         }
         return normalizedPostinstall !== postinstall;

package/dist/migrations/ensure-lisa-postinstall.js.map

@@ -1 +1 @@
-{"version":3,"file":"ensure-lisa-postinstall.js","sourceRoot":"","sources":["../../src/migrations/ensure-lisa-postinstall.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAOnE,MAAM,YAAY,GAAG,cAAc,CAAC;AACpC,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAC3C,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAC7C;;;;;;;;;GASG;AACH,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AACjD,MAAM,WAAW,GAAG,4CAA4C,CAAC;AACjE,MAAM,kBAAkB,GAAG,QAAQ,WAAW,2BAA2B,CAAC;AAC1E,iFAAiF;AACjF,MAAM,iCAAiC,GAAG,GAAG,kBAAkB,GAAG,kBAAkB,EAAE,CAAC;AAEvF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAC/B,4EAA4E;IAC5E,+DAA+D;IAC/D,GAAG,iCAAiC,qBAAqB,WAAW,SAAS,CAAC;AAEhF;;;;;;;GAOG;AACH,MAAM,kBAAkB,GAAG,eAAe,oBAAoB,kBAAkB,CAAC;AAEjF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,eAAe,GAAG,gBAAgB,GAAG,kBAAkB,GAAG,kBAAkB,GAAG,kBAAkB,EAAE,CAAC;AAEtI;;;GAGG;AACH,MAAM,cAAc,GAA2B,CAAC,OAAO,CAAC,CAAC;AAUzD;;;;GAIG;AACH,KAAK,UAAU,eAAe,CAC5B,UAAkB;IAElB,OAAO,cAAc,CAAc,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,kBAAkB,GAAG,IAAI,MAAM,CACnC,mFAAmF;IACjF,8EAA8E;IAC9E,6BAA6B;IAC7B,4CAA4C;IAC5C,6BAA6B,CAChC,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,QAA4B;IACtD,MAAM,OAAO,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,eAAe,OAAO,OAAO,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAC7B,aAAqC;IAErC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,8BAA8B;IAChC,IAAI,GAAG,yBAAyB,CAAC;IACjC,WAAW,GAClB,iEAAiE,CAAC;IAEpE;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,OAAO,CAAC,GAAqB;QACjC,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,KAAK,CAAC;QACf,CAAC;QACD,wEAAwE;QACxE,2EAA2E;QAC3E,gEAAgE;QAChE,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC;QAC7C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,sBAAsB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,qBAAqB,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAC9D,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YAC/C,OAAO,CACL,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACjC,qBAAqB,KAAK,WAAW,CACtC,CAAC;QACJ,CAAC;QACD,OAAO,qBAAqB,KAAK,WAAW,CAAC;IAC/C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK,CAAC,GAAqB;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,kBAAkB,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACtE,MAAM,OAAO,GAAgB;YAC3B,GAAG,GAAG;YACN,OAAO,EAAE,EAAE,GAAG,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE;SAC5D,CAAC;QAEF,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW;YACxC,CAAC,CAAC,2CAA2C,cAAc,EAAE;YAC7D,CAAC,CAAC,uCAAuC,cAAc,EAAE,CAAC;QAE5D,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;YAChE,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,SAAS;gBACjB,YAAY,EAAE,CAAC,YAAY,CAAC;gBAC5B,OAAO;aACR,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,SAAS;YACjB,YAAY,EAAE,CAAC,YAAY,CAAC;YAC5B,OAAO;SACR,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"ensure-lisa-postinstall.js","sourceRoot":"","sources":["../../src/migrations/ensure-lisa-postinstall.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAOnE,MAAM,YAAY,GAAG,cAAc,CAAC;AACpC,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAC3C,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAC7C,MAAM,kBAAkB,GAAG,4CAA4C,CAAC;AACxE,MAAM,yBAAyB,GAC7B,8EAA8E,CAAC;AAEjF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,eAAe,GAAG,gBAAgB,QAAQ,yBAAyB,UAAU,CAAC;AAEhH;;;GAGG;AACH,MAAM,cAAc,GAA2B,CAAC,OAAO,CAAC,CAAC;AAUzD;;;;GAIG;AACH,KAAK,UAAU,eAAe,CAC5B,UAAkB;IAElB,OAAO,cAAc,CAAc,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,yBAAyB,GAAG,IAAI,MAAM,CAC1C,mFAAmF;IACjF,8EAA8E;IAC9E,6BAA6B;IAC7B,4CAA4C;IAC5C,6BAA6B,CAChC,CAAC;AAEF,6DAA6D;AAC7D,MAAM,qBAAqB,GAAG,IAAI,MAAM,CACtC,2DAA2D;IACzD,+DAA+D;IAC/D,yCAAyC,CAC5C,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,QAA4B;IACtD,MAAM,OAAO,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAChD,OAAO,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACzC,OAAO,OAAO,CAAC,OAAO,CAAC,yBAAyB,EAAE,eAAe,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,eAAe,OAAO,OAAO,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAC7B,aAAqC;IAErC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,8BAA8B;IAChC,IAAI,GAAG,yBAAyB,CAAC;IACjC,WAAW,GAClB,iEAAiE,CAAC;IAEpE;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,OAAO,CAAC,GAAqB;QACjC,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,KAAK,CAAC;QACf,CAAC;QACD,wEAAwE;QACxE,2EAA2E;QAC3E,gEAAgE;QAChE,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC;QAC7C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,sBAAsB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,qBAAqB,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAC9D,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YAC/C,OAAO,CACL,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC;gBACvC,WAAW,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC;gBAClD,qBAAqB,KAAK,WAAW,CACtC,CAAC;QACJ,CAAC;QACD,OAAO,qBAAqB,KAAK,WAAW,CAAC;IAC/C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK,CAAC,GAAqB;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,kBAAkB,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACtE,MAAM,OAAO,GAAgB;YAC3B,GAAG,GAAG;YACN,OAAO,EAAE,EAAE,GAAG,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE;SAC5D,CAAC;QAEF,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW;YACxC,CAAC,CAAC,2CAA2C,cAAc,EAAE;YAC7D,CAAC,CAAC,uCAAuC,cAAc,EAAE,CAAC;QAE5D,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;YAChE,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,SAAS;gBACjB,YAAY,EAAE,CAAC,YAAY,CAAC;gBAC5B,OAAO;aACR,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,SAAS;YACjB,YAAY,EAAE,CAAC,YAAY,CAAC;YAC5B,OAAO;SACR,CAAC;IACJ,CAAC;CACF"}

package/dist/opencode/plugin-templates/parity-safety-net.sh

@@ -179,12 +179,14 @@ EOF
 # The patch file is per-worktree: `mktemp` names it, so nothing has to invent a
 # filename, and it lives in this agent's own TMPDIR where no sibling can reach
 # it. Untracked files are unaffected by both refused operations, so `git diff`
-# captures everything at risk.
+# captures everything at risk. `HEAD` includes staged and unstaged changes, and
+# `--binary` keeps binary edits recoverable rather than emitting a text-only
+# placeholder that cannot be applied.
 PRESERVE_GUIDANCE="$(
   cat <<'EOF'
 Preserve the work first, per-worktree:
 
-  git diff [-- <path>] > "$(mktemp "${TMPDIR:-/tmp}/lisa-preserve-XXXXXX.patch")"
+  git diff --binary HEAD [-- <path>] > "$(mktemp "${TMPDIR:-/tmp}/lisa-preserve-XXXXXX.patch")"
 
 and restore it later with `git apply <that file>`.
 
@@ -444,6 +446,7 @@ follow_refuse() {
 # so peak process count never rises. The latency was the whole problem.
 follow_unwrapped=""
 follow_operand_index=0
+follow_located=""
 
 # Strip substitution, quote and alias wrappers off one token. A sibling of
 # strip_subst_wrappers() below rather than a call to it: that one is defined
@@ -568,6 +571,7 @@ follow_add_base() {
 # this hook cannot evaluate.
 follow_locate() {
   local token="$1" home="${HOME:-}" tmp="${TMPDIR:-/tmp}" proj="${CLAUDE_PROJECT_DIR:-$PWD}" base
+  follow_located=""
   tmp="${tmp%/}"
   [ -n "$tmp" ] || tmp="/tmp"
   # The tilde arms below are LITERAL text: this is the unexpanded spelling the
@@ -589,14 +593,14 @@ follow_locate() {
     "" | *'$'* | *'*'* | *'?'* | *'`'* | *'{'* | *'['*) return 1 ;;
     /*)
       [ -f "$token" ] && [ -r "$token" ] || return 1
-      printf '%s' "$token"
+      follow_located="$token"
       return 0
       ;;
   esac
   while IFS= read -r base; do
     [ -n "$base" ] || continue
     if [ -f "$base/$token" ] && [ -r "$base/$token" ]; then
-      printf '%s' "$base/$token"
+      follow_located="$base/$token"
       return 0
     fi
   done <<<"$PWD"$'\n'"$proj$follow_bases"
@@ -641,12 +645,13 @@ follow_take() {
 follow_target() {
   local token="$1" depth="$2" path=""
   [ -n "$token" ] || return 0
-  if ! path="$(follow_locate "$token")"; then
+  if ! follow_locate "$token"; then
     if [ "$depth" -eq 0 ]; then
       follow_refuse "$token" "no readable file could be resolved for it"
     fi
     return 0
   fi
+  path="$follow_located"
   follow_take "$path" "$depth"
 }
 
@@ -667,11 +672,18 @@ follow_target() {
 # Accepted residual: a shebang script whose relative path resolves only from a
 # working directory this hook does not share is not followed.
 follow_direct() {
-  local token="$1" depth="$2" path="" first=""
-  if ! path="$(follow_locate "$token")"; then
+  local token="$1" depth="$2" path="" first="" raw="" char="" k=0
+  local LC_ALL=C
+  if ! follow_locate "$token"; then
     return 0
   fi
-  first="$(LC_ALL=C head -c 256 -- "$path" 2>/dev/null | LC_ALL=C head -n 1 2>/dev/null | LC_ALL=C tr -dc '[:print:]' 2>/dev/null)" || first=""
+  path="$follow_located"
+  IFS= read -r -n 256 raw <"$path" 2>/dev/null || true
+  while [ "$k" -lt "${#raw}" ]; do
+    char="${raw:k:1}"
+    case "$char" in [[:print:]]) first="$first$char" ;; esac
+    k=$((k + 1))
+  done
   case "$first" in
     '#!'*[/[:space:]]bash* | '#!'*[/[:space:]]sh* | '#!'*[/[:space:]]zsh* \
       | '#!'*[/[:space:]]ksh* | '#!'*[/[:space:]]dash* | '#!'*[/[:space:]]ash*) ;;
@@ -701,7 +713,7 @@ follow_next_operand() {
 follow_scan() {
   local text="$1" depth="$2"
   local split_out line sep stmt t tj i j n cmd_pos eval_mode inline arg_exec
-  local heredoc redirected pipe_cat prev_cat pending_operand
+  local heredoc redirected pipe_cat prev_cat pending_operand stdin_mode
   local find_mode dispatch_pending
   local -a toks=()
   split_out="$(follow_split "$text")"
@@ -888,6 +900,7 @@ follow_scan() {
         inline=0
         redirected=""
         heredoc=0
+        stdin_mode=0
         j=$((i + 1))
         while [ "$j" -lt "$n" ]; do
           follow_unwrap "${toks[j]}"
@@ -920,6 +933,7 @@ follow_scan() {
               ;;
             --*) j=$((j + 1)) ;;
             -*c*) inline=1; j=$((j + 1)) ;;
+            -s | -[a-zA-Z]*s[a-zA-Z]*) stdin_mode=1; j=$((j + 1)) ;;
             -*) j=$((j + 1)) ;;
             *) break ;;
           esac
@@ -944,6 +958,14 @@ follow_scan() {
           i="$j"
           continue
         fi
+        if [ "$stdin_mode" -eq 1 ]; then
+          # `sh -s -- -y` reads its program from stdin; tokens after `--` are
+          # positional arguments to that program, never a script path.
+          [ -z "$pipe_cat" ] || follow_target "$pipe_cat" "$depth"
+          cmd_pos=0
+          i="$n"
+          continue
+        fi
         if [ "$j" -ge "$n" ]; then
           # A dispatcher supplies the script from ANOTHER command's output, so
           # the operand exists but is unreadable here. That is the fail-closed
@@ -1806,15 +1828,14 @@ readonly SQL_TRUNCATE_EVIDENCE='\btruncate[[:space:]]+(table[[:space:]]+[[:alnum
 # the same command must also invoke a command-line database client. Prose in a
 # tracker filing or a commit message invokes none, which is exactly the
 # difference the text scan could not see on its own.
-readonly SQL_CLIENT='(^|[^[:alnum:]_./-])([[:alnum:]_./-]*/)?(psql|pgcli|mysql|mysqladmin|mysqlsh|mariadb|mycli|sqlite3|sqlcmd|cqlsh|clickhouse-client|cockroach|mongosh|duckdb|usql)([[:space:]]|$)'
-readonly SQL_TRUNCATE_BARE='\btruncate[[:space:]]+(only[[:space:]]+)?[[:alnum:]_."`]'
+readonly SQL_CLIENT_TRUNCATE='(^|[;&|()][[:space:]]*)([[:alnum:]_./-]*/)?(psql|pgcli|mysql|mysqladmin|mysqlsh|mariadb|mycli|sqlite3|sqlcmd|cqlsh|clickhouse-client|cockroach|mongosh|duckdb|usql)([[:space:]]+[^;&|()]*)?[[:space:]]+(-e|-c|--command|--eval)(=|[[:space:]]+)[^;&|()]*\btruncate[[:space:]]+(only[[:space:]]+)?[[:alnum:]_."`]'
 # Residual, accepted and stated: a bare `TRUNCATE <name>` with no terminator,
 # no qualification and no recognized client in the same command goes unmatched
 # — the same trade the `drop` arm has always made for `drop the ball`. No DROP
 # shape is weakened, and the guard still fails in the safe direction.
 if matches "$SQL_DROP" \
   || matches "$SQL_TRUNCATE_EVIDENCE" \
-  || { matches "$SQL_CLIENT" && matches "$SQL_TRUNCATE_BARE"; }; then
+  || matches "$SQL_CLIENT_TRUNCATE"; then
   block "destructive SQL (DROP/TRUNCATE) detected"
 fi
 

package/package.json

@@ -166,7 +166,7 @@
     "zod-validation-error": "^4.0.0"
   },
   "name": "@codyswann/lisa",
-  "version": "4.34.21",
+  "version": "4.35.1",
   "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
   "main": "dist/index.js",
   "exports": {
@@ -314,7 +314,7 @@
     "test": "tests"
   },
   "types": "./dist/index.d.ts",
-  "lisaReleaseCommit": "f65b16b98f562acb7a06c20b6e01a2cc6c37e200",
-  "gitHead": "f65b16b98f562acb7a06c20b6e01a2cc6c37e200",
-  "lisaReleaseTag": "v4.34.21"
+  "lisaReleaseCommit": "6fb4eaca043a1b6e8d96be3392dc4a42abd9ce11",
+  "gitHead": "6fb4eaca043a1b6e8d96be3392dc4a42abd9ce11",
+  "lisaReleaseTag": "v4.35.1"
 }

package/plugins/lisa/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "4.34.21",
+  "version": "4.35.1",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "4.34.21",
+  "version": "4.35.1",
   "description": "Universal governance: agents, skills, commands, hooks, and rules for all projects.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/hooks/block-direct-issue-create.sh

@@ -1426,7 +1426,11 @@ EXEC_WRAPPERS = {
     "nohup": (frozenset(), 0),
     "setsid": (frozenset(), 0),
     "stdbuf": (frozenset({"-i", "-o", "-e"}), 0),
-    "sudo": (frozenset({"-u", "--user", "-g", "--group", "-C", "--close-from"}), 0),
+    "sudo": (frozenset({
+        "-u", "--user", "-g", "--group", "-C", "--close-from",
+        "-p", "--prompt", "-h", "--host", "-r", "--role",
+        "-t", "--type", "-U", "--other-user",
+    }), 0),
     "time": (frozenset(), 0),
     "timeout": (frozenset({"-k", "--kill-after", "-s", "--signal"}), 1),
 }
@@ -1447,6 +1451,31 @@ NO_SCRIPT_OPTIONS = {
     "ruby": {"-e"},
 }
 
+# Interpreter switches whose value is a separate token, followed by the real
+# script operand. Treating the value as the script makes the guard inspect a
+# preload or option value and never reach what the interpreter executes.
+INTERPRETER_VALUE_OPTIONS = {
+    "bash": {"-o", "--option"},
+    "dash": {"-o"},
+    "deno": {"-c", "--config"},
+    "ksh": {"-o"},
+    "node": {"-r", "--require"},
+    "nodejs": {"-r", "--require"},
+    "sh": {"-o"},
+    "zsh": {"-o"},
+}
+
+# Runtime subcommands that introduce the script path rather than name it.
+INTERPRETER_SUBCOMMANDS = {
+    "bun": {"run"},
+    "deno": {"run"},
+}
+
+
+def is_assignment_word(token):
+    """Whether token is a POSIX shell assignment in command-prefix position."""
+    return re.match(r"^[A-Za-z_][A-Za-z0-9_]*\+?=", token) is not None
+
 # Programs that READ their operands and never execute them as programs.
 #
 # This is an allowlist of readers rather than the inverse, and the asymmetry is
@@ -1501,7 +1530,7 @@ def executing_command(argv):
     index = 0
     while index < len(argv):
         token = argv[index]
-        if "=" in token and not token.startswith(("=", "-")):
+        if is_assignment_word(token):
             index += 1
             continue
         program = basename(token)
@@ -1568,16 +1597,20 @@ def executed_operand(argv):
     # shebang — `./create.sh` names no interpreter and runs all the same.
     if program not in EXECUTING_INTERPRETERS and resolve_operand(token) is not None:
         return token
-    # `bash < create.sh` runs that file as surely as `bash create.sh` does, and
-    # `<` is not a segment boundary, so the pair survives in one argv.
-    for index, argument in enumerate(args):
-        if argument == "<" and index + 1 < len(args):
-            return args[index + 1]
     # Reached by a known interpreter AND by a program this parser cannot name.
     # The unknown case is followed on purpose — see READ_ONLY_PROGRAMS.
-    for argument in args:
-        if argument == "--":
+    redirected = None
+    index = 0
+    while index < len(args):
+        argument = args[index]
+        if argument == "<":
+            if index + 1 < len(args):
+                redirected = args[index + 1]
+            index += 2
             continue
+        if argument == "--":
+            index += 1
+            return args[index] if index < len(args) else redirected
         if argument.startswith("-"):
             # A command string or a module name; no script file follows.
             head = argument.split("=", 1)[0]
@@ -1588,9 +1621,15 @@ def executed_operand(argv):
                     return None
             elif head in NO_SCRIPT_OPTIONS.get(program, set()):
                 return None
+            takes_value = head in INTERPRETER_VALUE_OPTIONS.get(program, set())
+            index += 2 if takes_value and "=" not in argument else 1
+            continue
+        if argument in INTERPRETER_SUBCOMMANDS.get(program, set()):
+            index += 1
             continue
         return argument
-    return None
+    # `bash < create.sh` runs stdin only when no explicit script was named.
+    return redirected
 
 
 def file_operands(argv):

package/plugins/lisa/hooks/block-managed-file-edits.sh

@@ -90,7 +90,7 @@
 # from mine", and guessing "behind" is how a fork's stronger guard gets silently
 # replaced by a weaker upstream one. Add a name here in the same commit that
 # closes a vector.
-# lisa-guard-capabilities: managed-path-resolution, lisaignore-precedence, generated-path-rebuild, redirect-target, tee-target, sed-in-place-all-spellings, executed-script-reach, source-builtin-reach, stdin-redirect-reach, wrapper-positional-operand, direct-script-command-reach, analyzer-failure-visible
+# lisa-guard-capabilities: managed-path-resolution, lisaignore-precedence, generated-path-rebuild, redirect-target, tee-target, sed-in-place-all-spellings, executed-script-reach, source-builtin-reach, stdin-redirect-reach, wrapper-positional-operand, direct-script-command-reach, analyzer-failure-visible, apply-patch-parse-failure-visible, apply-patch-move-target, shell-command-string-reach
 set -euo pipefail
 
 input="$(cat)"
@@ -399,6 +399,7 @@ case "$tool_name" in
     #   *** Add File: <path>
     #   *** Update File: <path>
     #   *** Delete File: <path>
+    #   *** Move to: <path>
     #
     # So every header is walked and each target classified; one managed
     # target anywhere in a multi-file patch refuses the whole call, because
@@ -415,14 +416,25 @@ case "$tool_name" in
     # legitimately cannot be one file. What is NOT restated is the
     # classification: `managed_source` and `refuse` are the single copy here,
     # exactly as for every other arm.
-    patch_text="$(printf '%s' "$input" | jq -r '.tool_input.command // empty' 2>/dev/null || true)"
+    if ! patch_text="$(printf '%s' "$input" | jq -er '
+      if ((.tool_input.command? // "") | type) == "string"
+      then (.tool_input.command? // "")
+      else error("tool_input.command must be a string")
+      end')"; then
+      printf 'block-managed-file-edits: could not parse the apply_patch command; managed-file protection refused the edit\n' >&2
+      exit 2
+    fi
     [ -n "$patch_text" ] || exit 0
     while IFS= read -r patch_line; do
       case "$patch_line" in
-        "*** Add File: "* | "*** Update File: "* | "*** Delete File: "*) ;;
+        "*** Add File: "* | "*** Update File: "* | "*** Delete File: "*)
+          candidate="${patch_line#*File: }"
+          ;;
+        "*** Move to: "*)
+          candidate="${patch_line#*** Move to: }"
+          ;;
         *) continue ;;
       esac
-      candidate="${patch_line#*File: }"
       [ -n "$candidate" ] || continue
       if source_path="$(managed_source "$candidate")"; then
         refuse "$candidate" "$source_path" "$(relative_path "$candidate")"
@@ -712,6 +724,29 @@ def shell_script_operand(args):
     return None
 
 
+def shell_command_string(statement):
+    """The inline command a shell executes with `-c`, or None.
+
+    Args:
+        statement: One statement's tokens.
+
+    Returns:
+        The command string operand, or None when this is not a shell `-c` call.
+    """
+    _token, program, args = command_word(statement)
+    if program not in SHELL_PROGRAMS:
+        return None
+    for index, token in enumerate(args):
+        if token == "--":
+            return None
+        if token.startswith("-") and not token.startswith("--") and "c" in token[1:]:
+            command_index = index + 1
+            if command_index < len(args) and args[command_index] == "--":
+                command_index += 1
+            return args[command_index] if command_index < len(args) else None
+    return None
+
+
 def write_targets(statement):
     """Paths this statement WRITES.
 
@@ -834,6 +869,9 @@ def collect(text, depth, seen, out):
         if not statement:
             continue
         out.extend(write_targets(statement))
+        nested = shell_command_string(statement)
+        if nested is not None and depth < FOLLOW_MAX_DEPTH:
+            collect(nested, depth + 1, seen, out)
         operand = executed_script(statement)
         if operand is None:
             continue