@codyswann/lisa 4.38.8 → 4.40.0

package/plugins/lisa-typescript/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.38.8",
+  "version": "4.40.0",
   "description": "TypeScript-specific hooks for formatting, linting, and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.38.8",
+  "version": "4.40.0",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.38.8",
+  "version": "4.40.0",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.38.8",
+  "version": "4.40.0",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.38.8",
+  "version": "4.40.0",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.38.8",
+  "version": "4.40.0",
   "description": "Distributable LLM Wiki kernel — ingest, query, lint, and maintain a git-native markdown knowledge base across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.38.8",
+  "version": "4.40.0",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.38.8",
+  "version": "4.40.0",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.38.8",
+  "version": "4.40.0",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/rails/deletions.json

@@ -15,5 +15,22 @@
     ".github/workflows/claude-nightly-test-coverage.yml",
     ".github/workflows/claude-nightly-test-improvement.yml",
     ".github/workflows/claude-sync-down-branches.yml"
-  ]
+  ],
+  "basis": {
+    ".overcommit.yml": "needs-review",
+    ".claude/skills/action-controller-best-practices": "needs-review",
+    ".claude/skills/action-view-best-practices": "needs-review",
+    ".claude/skills/active-record-model-best-practices": "needs-review",
+    ".claude/skills/plan-add-test-coverage": "needs-review",
+    ".claude/skills/plan-fix-linter-error": "needs-review",
+    ".claude/skills/plan-lower-code-complexity": "needs-review",
+    ".claude/skills/plan-reduce-max-lines": "needs-review",
+    ".claude/skills/plan-reduce-max-lines-per-function": "needs-review",
+    ".claude/rules/rails-conventions.md": "needs-review",
+    ".github/workflows/claude-code-review-response.yml": "needs-review",
+    ".github/workflows/claude-nightly-code-complexity.yml": "needs-review",
+    ".github/workflows/claude-nightly-test-coverage.yml": "needs-review",
+    ".github/workflows/claude-nightly-test-improvement.yml": "needs-review",
+    ".github/workflows/claude-sync-down-branches.yml": "needs-review"
+  }
 }

package/scripts/check-deletion-basis.mjs

@@ -0,0 +1,126 @@
+#!/usr/bin/env node
+/**
+ * Refuse a `deletions.json` that declares a path without saying why it may go.
+ *
+ * This is the AUTHORING gate. `Lisa.processDeletionsFile` has its own runtime
+ * fail-safe that keeps an unclassified path in a consumer's repository; the two
+ * are deliberately separate mechanisms. The runtime rule protects a consumer
+ * whatever manifest they happen to have, including one authored before either
+ * existed. This one stops an unclassified path being written here in the first
+ * place, so the manifest cannot silently regrow the problem the moment somebody
+ * adds entry 256.
+ *
+ * Without this, the whole change is a one-time sweep. With it, it is a standing
+ * property.
+ *
+ * Also reports the outstanding `needs-review` count, because that number is the
+ * debt this change deliberately took on and it should be visible on every run
+ * rather than discovered later.
+ *
+ * Usage: node scripts/check-deletion-basis.mjs
+ * @module scripts/check-deletion-basis
+ */
+import { readFileSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const REPO_ROOT = path.resolve(
+  path.dirname(fileURLToPath(import.meta.url)),
+  ".."
+);
+
+const MANIFESTS = [
+  "all",
+  "typescript",
+  "expo",
+  "rails",
+  "nestjs",
+  "cdk",
+  "phaser",
+  "harper-fabric",
+];
+
+const NEEDS_REVIEW = "needs-review";
+const OWNED = "owned";
+const LEGACY_PREFIX = "legacy:";
+
+/**
+ * Whether one declared path carries a usable basis.
+ *
+ * Mirrors `resolveDeletionBasis` in `src/core/deletion-basis.ts`. Kept as plain
+ * ESM so this check runs with no build step — a gate that needs `dist/` cannot
+ * run in a pre-commit hook on a tree that does not compile.
+ * @param {object} manifest - Parsed deletions.json.
+ * @param {string} declaredPath - The declared path.
+ * @returns {boolean} True when the manifest says why the path may be removed.
+ */
+function isClassified(manifest, declaredPath) {
+  const forced = manifest.force?.[declaredPath];
+  if (typeof forced === "string" && forced.trim() !== "") return true;
+  const declared = manifest.basis?.[declaredPath];
+  if (typeof declared !== "string") return false;
+  const value = declared.trim();
+  if (value === NEEDS_REVIEW || value === OWNED) return true;
+  // A `legacy` basis with no prose is unclassified in substance: the point of
+  // the kind is that somebody wrote down WHY.
+  if (value.startsWith(LEGACY_PREFIX))
+    return value.slice(LEGACY_PREFIX.length).trim() !== "";
+  return false;
+}
+
+let unclassified = 0;
+let needsReview = 0;
+let classified = 0;
+
+for (const stack of MANIFESTS) {
+  const file = path.join(REPO_ROOT, stack, "deletions.json");
+  let manifest;
+  try {
+    manifest = JSON.parse(readFileSync(file, "utf8"));
+  } catch (error) {
+    if (error.code === "ENOENT") continue;
+    console.error(
+      `${stack}/deletions.json could not be read: ${error.message}`
+    );
+    process.exitCode = 1;
+    continue;
+  }
+  const keep = new Set(manifest.keep ?? []);
+  for (const declaredPath of manifest.paths ?? []) {
+    if (keep.has(declaredPath)) continue;
+    if (!isClassified(manifest, declaredPath)) {
+      if (unclassified === 0)
+        console.error(
+          "Declared for deletion with no basis — say why each may be removed:\n"
+        );
+      console.error(`  ${stack}/deletions.json  ${declaredPath}`);
+      unclassified++;
+      continue;
+    }
+    classified++;
+    if (manifest.basis?.[declaredPath]?.trim() === NEEDS_REVIEW) needsReview++;
+  }
+}
+
+if (unclassified > 0) {
+  console.error(
+    `\n${unclassified} declared path(s) carry no basis.\n\n` +
+      "Add one to that manifest's `basis` map:\n" +
+      '  "owned"                    Lisa installs this path today\n' +
+      '  "legacy: <reason>"         Lisa shipped it once and no longer does\n' +
+      '  "needs-review"             declared before the basis field; debt, but countable\n' +
+      "or a `force` entry when the removal is a ruling that must reach an edited copy.\n\n" +
+      "An unclassified path is KEPT at apply time rather than deleted, so leaving\n" +
+      "it unclassified does not merely fail this check — it stops the removal\n" +
+      "reaching consumers at all."
+  );
+  process.exitCode = 1;
+} else {
+  console.log(
+    `deletion basis: ${classified} declared path(s) classified, of which ${needsReview} still carry \`${NEEDS_REVIEW}\`.`
+  );
+  if (needsReview > 0)
+    console.log(
+      `  ${needsReview} reason(s) remain unwritten. Each one replaced by \`legacy: <reason>\` is a path whose removal somebody has justified in writing.`
+    );
+}

package/scripts/two-channel-couplings.json

@@ -7,7 +7,7 @@
     "workflows": 22,
     "steps": 716,
     "couplings": 34,
-    "inventory": 73
+    "inventory": 74
   },
   "counts": {
     "package-backed": 10,

package/typescript/copy-contents/.husky/pre-commit

@@ -107,6 +107,46 @@ if [ -f ".lintstagedrc.json" ]; then
   fi
 fi
 
+# ---------------------------------------------------------------------------
+# Cross-worktree staged-blob guard.
+#
+# Refuses a commit that stages a NEW file byte-identical to uncommitted work
+# sitting in a different linked worktree. Where several agents share one
+# repository through worktrees, one agent's in-progress file can be committed
+# by another: the file is real, the branch is real, the commit succeeds and
+# every other gate passes, so nothing reports it. Confirmed once — a 284-line
+# test file staged in one worktree, committed an hour later from elsewhere,
+# byte-identical, under a reworded subject.
+#
+# HERE RATHER THAN IN THE GATE REGISTRY, deliberately. This is a property of
+# the machine — which other worktrees exist and what is sitting in them —
+# not of the project, so there is no task a project could declare to prove it.
+# It also has to run on EVERY commit: the whole failure mode is that nobody
+# notices, so a check that waits to be invoked is a check that was not running
+# on the commit where it mattered.
+#
+# Fails OPEN when the script is missing, unlike the lint-staged preflight
+# above. That preflight guards a tool that reports success for work it did not
+# do, so skipping it cannot be read as a pass. This one only ever adds a
+# refusal — a repository without it is exactly as safe as it was before the
+# guard existed, and blocking every commit in a project that has not yet
+# re-applied templates would be a worse trade than the window it closes.
+# ---------------------------------------------------------------------------
+CROSS_WORKTREE_GUARD="node_modules/@codyswann/lisa/all/copy-overwrite/scripts/lisa-cross-worktree-guard.mjs"
+if [ ! -f "$CROSS_WORKTREE_GUARD" ]; then
+  CROSS_WORKTREE_GUARD="scripts/lisa-cross-worktree-guard.mjs"
+fi
+if [ ! -f "$CROSS_WORKTREE_GUARD" ]; then
+  CROSS_WORKTREE_GUARD="all/copy-overwrite/scripts/lisa-cross-worktree-guard.mjs"
+fi
+if [ -f "$CROSS_WORKTREE_GUARD" ] && command -v node >/dev/null 2>&1; then
+  node "$CROSS_WORKTREE_GUARD"
+  CROSS_WORKTREE_GUARD_STATUS=$?
+  if [ $CROSS_WORKTREE_GUARD_STATUS -ne 0 ]; then
+    exit $CROSS_WORKTREE_GUARD_STATUS
+  fi
+fi
+
 # ---------------------------------------------------------------------------
 # Gate-driven checks.
 #

package/typescript/copy-overwrite/.prettierignore

@@ -80,6 +80,7 @@ scripts/check-verification-coverage.mjs
 scripts/classify-maestro-failures.mjs
 scripts/lisa-command-envelope.mjs
 scripts/lisa-commit-msg-gates.mjs
+scripts/lisa-cross-worktree-guard.mjs
 scripts/lisa-destructive-guard.mjs
 scripts/lisa-environment-prepare.mjs
 scripts/lisa-floor-collisions.mjs

package/typescript/deletions.json

@@ -59,5 +59,53 @@
     ".github/workflows/reusable-auto-update-pr-branches.yml": "Removed fleet-wide (CodySwannGT/lisa#3590): it force-updated PR branches with the workflow's own github.token, and GitHub will not start runs from such a push, so required checks went ABSENT at head and pull requests silently stopped becoming mergeable. An edited copy does the same damage, so this removal overrides workflow ownership.",
     ".github/workflows/reusable-auto-update-pr-branches-dispatch.yml": "Removed fleet-wide (CodySwannGT/lisa#3590): it force-updated PR branches with the workflow's own github.token, and GitHub will not start runs from such a push, so required checks went ABSENT at head and pull requests silently stopped becoming mergeable. An edited copy does the same damage, so this removal overrides workflow ownership.",
     ".github/workflows/required-checks-drift.yml": "Removed fleet-wide (CodySwannGT/lisa#3599): it read the live ruleset over the GitHub API, which needs administration:read and therefore a personal access token held in a permanent repository secret. An edited copy still asks for that token, so this removal overrides workflow ownership."
+  },
+  "basis": {
+    "jest.config.js": "needs-review",
+    ".claude/hooks/install_pkgs.sh": "needs-review",
+    ".claude/hooks/format-on-edit.sh": "needs-review",
+    ".claude/hooks/install-pkgs.sh": "needs-review",
+    ".claude/hooks/lint-on-edit.sh": "needs-review",
+    ".claude/hooks/sg-scan-on-edit.sh": "needs-review",
+    ".claude/skills/jira-add-journey": "needs-review",
+    ".claude/skills/jira-create": "needs-review",
+    ".claude/skills/jira-evidence": "needs-review",
+    ".claude/skills/jira-journey": "needs-review",
+    ".claude/skills/jira-verify": "needs-review",
+    ".claude/skills/jsdoc-best-practices": "needs-review",
+    "eslint-plugin-code-organization": "needs-review",
+    "eslint.base.ts": "needs-review",
+    "eslint.typescript.ts": "needs-review",
+    "jest.base.ts": "needs-review",
+    "jest.typescript.ts": "needs-review",
+    "tsconfig.base.json": "needs-review",
+    "tsconfig.typescript.json": "needs-review",
+    ".github/workflows/quality.yml": "needs-review",
+    ".github/workflows/release.yml": "needs-review",
+    ".github/workflows/create-issue-on-failure.yml": "needs-review",
+    ".github/workflows/create-github-issue-on-failure.yml": "needs-review",
+    ".github/workflows/create-jira-issue-on-failure.yml": "needs-review",
+    ".github/workflows/create-sentry-issue-on-failure.yml": "needs-review",
+    ".github/workflows/reusable-claude.yml": "needs-review",
+    ".github/workflows/reusable-claude-ci-auto-fix.yml": "needs-review",
+    ".github/workflows/reusable-claude-code-review-response.yml": "needs-review",
+    ".github/workflows/reusable-claude-deploy-auto-fix.yml": "needs-review",
+    ".github/workflows/reusable-claude-nightly-code-complexity.yml": "needs-review",
+    ".github/workflows/reusable-claude-nightly-test-coverage.yml": "needs-review",
+    ".github/workflows/reusable-claude-nightly-test-improvement.yml": "needs-review",
+    ".github/workflows/load-test.yml": "needs-review",
+    ".github/workflows/claude-ci-auto-fix.yml": "needs-review",
+    ".github/workflows/claude-code-review-response.yml": "needs-review",
+    ".github/workflows/claude-deploy-auto-fix.yml": "needs-review",
+    ".github/workflows/claude-nightly-code-complexity.yml": "needs-review",
+    ".github/workflows/claude-nightly-test-coverage.yml": "needs-review",
+    ".github/workflows/claude-nightly-test-improvement.yml": "needs-review",
+    ".github/workflows/claude-sync-down-branches.yml": "needs-review",
+    ".github/workflows/claude.yml": "needs-review",
+    ".github/workflows/reusable-claude-sync-down-branches.yml": "needs-review",
+    ".github/workflows/reusable-claude-nightly-code-complexity-rails.yml": "needs-review",
+    ".github/workflows/reusable-claude-nightly-jira-triage.yml": "needs-review",
+    ".github/workflows/reusable-claude-nightly-test-coverage-rails.yml": "needs-review",
+    ".github/workflows/reusable-claude-nightly-test-improvement-rails.yml": "needs-review"
   }
 }