@codyswann/lisa 4.45.7 → 4.45.9

package/package.json

@@ -65,7 +65,7 @@
     "check:empty-subject-guards": "node scripts/check-empty-subject-guards.mjs",
     "check:cwd-resolution-corpus": "node scripts/check-cwd-resolution-corpus.mjs",
     "check:probe-absence-direction": "node scripts/check-probe-absence-direction.mjs",
-    "check:shell-guard-refusals": "bun run build && $npm_execpath run lisa-test-run -- --adapter direct -- node scripts/check-shell-guard-refusal-coverage.mjs",
+    "check:shell-guard-refusals": "bun run build && $npm_execpath run lisa-test-run -- --adapter direct -- node scripts/check-shell-guard-refusal-coverage.mjs --trace-out .lisa/shell-guard-trace.jsonl",
     "check:workflow-inputs": "node scripts/detect-stale-workflow-inputs.mjs --project . --project typescript/create-only --project rails/create-only --json",
     "check:conflict-markers": "node all/copy-overwrite/scripts/check-conflict-markers.mjs",
     "check:vacuous-required-checks": "node typescript/copy-overwrite/scripts/check-skipped-required-checks.mjs --vacuity",
@@ -176,7 +176,7 @@
     "zod-validation-error": "^4.0.0"
   },
   "name": "@codyswann/lisa",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
   "main": "dist/index.js",
   "exports": {
@@ -324,7 +324,7 @@
     "test": "tests"
   },
   "types": "./dist/index.d.ts",
-  "lisaReleaseCommit": "5de1e912eae997ab749d9af9df76095e2be3232b",
-  "gitHead": "5de1e912eae997ab749d9af9df76095e2be3232b",
-  "lisaReleaseTag": "v4.45.7"
+  "lisaReleaseCommit": "c0d381c7a25074565c6c1ec3fb10dde1af36b937",
+  "gitHead": "c0d381c7a25074565c6c1ec3fb10dde1af36b937",
+  "lisaReleaseTag": "v4.45.9"
 }

package/plugins/lisa/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"
@@ -293,6 +293,14 @@
             "command": "command -v entire >/dev/null 2>&1 && entire hooks claude-code session-start || true"
           }
         ]
+      },
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "${CLAUDE_PLUGIN_ROOT}/hooks/worktree-binding-guard.sh"
+          }
+        ]
       }
     ],
     "SubagentStart": [

package/plugins/lisa/.codex-plugin/hooks.json

@@ -206,6 +206,14 @@
             "command": "${PLUGIN_ROOT}/hooks/secrets-preflight.sh"
           }
         ]
+      },
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "${PLUGIN_ROOT}/hooks/worktree-binding-guard.sh"
+          }
+        ]
       }
     ],
     "SubagentStart": [

package/plugins/lisa/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Universal governance: agents, skills, commands, hooks, and rules for all projects.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/hooks/worktree-binding-guard.mjs

@@ -547,6 +547,63 @@ function claimedRoot(toolInput, cwd) {
   return null;
 }
 
+/**
+ * Record where the session STARTED, so its first guarded call is checked
+ * against a baseline rather than establishing one.
+ *
+ * ## Why the first call could not be checked before
+ *
+ * It established the baseline instead of testing one, which is
+ * trust-on-first-use — and TOFU is only as safe as its first use. Here the
+ * first use is assigned by the harness, unasked (CodySwannGT/lisa#3864), so the
+ * one moment the guard trusted was the moment the session had least control
+ * over. A session already sitting in a foreign worktree when it first acted
+ * bound to that tree and was never refused, and every later call was then
+ * checked faithfully against the wrong baseline — defending the session INTO
+ * the wrong worktree rather than out of it (CodySwannGT/lisa#3955).
+ *
+ * ## Why an earlier observation separates what a cleverer check cannot
+ *
+ * At the first guarded call, "I was displaced before I acted" and "I
+ * legitimately started here" present identically: one session id, one observed
+ * root, no prior state. No comparison can tell them apart, because the
+ * information is not in the hook's inputs at that instant.
+ *
+ * At session start it is. The displacement mechanism actually observed is a
+ * PEER's `EnterWorktree` moving this session (CodySwannGT/lisa#3712), which
+ * happens during the session — after it has started. A baseline taken at start
+ * is therefore recorded BEFORE the event that moves it, and the first guarded
+ * call becomes an ordinary comparison against a baseline that already exists.
+ * It reaches the same refusal a later displacement produces, because by then it
+ * is one.
+ *
+ * ## What this does NOT achieve
+ *
+ * #3955 asks for a baseline from the ASSIGNER rather than from observation.
+ * That is not what this is and Lisa cannot build it: Lisa does not own
+ * `EnterWorktree`, and nothing the harness writes names a session's assigned
+ * worktree in a form a hook can read. This is still an observation, just an
+ * earlier one. It closes the window between session start and the first guarded
+ * call; it leaves open a session LAUNCHED already displaced, where start
+ * observes the foreign tree and trust-on-first-use still applies.
+ *
+ * Returns nothing on purpose, like its sibling below: SessionStart has no call
+ * to refuse, so every path through it allows.
+ * @param sessionId - The session this baseline belongs to
+ * @param observed - The worktree root the session started in
+ */
+function recordBaseline(sessionId, observed) {
+  // Never overwrite. A resumed session, a reconnect, or anything else that
+  // fires the event twice must not be able to launder a displaced binding into
+  // a fresh baseline — which is the whole failure this exists to close.
+  if (readState(sessionId)?.boundRoot) return;
+  writeState(sessionId, {
+    boundRoot: observed,
+    claimedRoot: null,
+    updatedAt: new Date().toISOString(),
+  });
+}
+
 /**
  * Record what `EnterWorktree` just claimed, for the next tool call to check.
  *
@@ -648,6 +705,10 @@ function evaluate(payload) {
   const observed = worktreeRoot(cwd);
   if (!observed) return 0;
 
+  if (payload.hook_event_name === "SessionStart") {
+    recordBaseline(sessionId, observed);
+    return 0;
+  }
   if (payload.tool_name === "EnterWorktree") {
     recordClaim(payload, observed);
     return 0;
@@ -659,6 +720,13 @@ function evaluate(payload) {
 
   const state = readState(sessionId);
   if (!state?.boundRoot) {
+    // No baseline means SessionStart did not run for this session — an older
+    // install, a runtime that fires no such event, a harness that skips it.
+    // Absence of a baseline is absence of evidence, not evidence of
+    // displacement, so this records one exactly as it always did rather than
+    // refusing. Treating it as a refusal would turn a floor into a wall on
+    // every surface where the event does not fire, and a wall gets switched
+    // off, which costs the whole guard.
     writeState(sessionId, {
       boundRoot: observed,
       claimedRoot: null,

package/plugins/lisa-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "AWS CDK-specific Lisa plugin.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"
@@ -212,6 +212,14 @@
             "command": "${CLAUDE_PLUGIN_ROOT}/hooks/secrets-preflight.sh"
           }
         ]
+      },
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "${CLAUDE_PLUGIN_ROOT}/hooks/worktree-binding-guard.sh"
+          }
+        ]
       }
     ],
     "sessionEnd": [

package/plugins/lisa-copilot/hooks/worktree-binding-guard.mjs

@@ -547,6 +547,63 @@ function claimedRoot(toolInput, cwd) {
   return null;
 }
 
+/**
+ * Record where the session STARTED, so its first guarded call is checked
+ * against a baseline rather than establishing one.
+ *
+ * ## Why the first call could not be checked before
+ *
+ * It established the baseline instead of testing one, which is
+ * trust-on-first-use — and TOFU is only as safe as its first use. Here the
+ * first use is assigned by the harness, unasked (CodySwannGT/lisa#3864), so the
+ * one moment the guard trusted was the moment the session had least control
+ * over. A session already sitting in a foreign worktree when it first acted
+ * bound to that tree and was never refused, and every later call was then
+ * checked faithfully against the wrong baseline — defending the session INTO
+ * the wrong worktree rather than out of it (CodySwannGT/lisa#3955).
+ *
+ * ## Why an earlier observation separates what a cleverer check cannot
+ *
+ * At the first guarded call, "I was displaced before I acted" and "I
+ * legitimately started here" present identically: one session id, one observed
+ * root, no prior state. No comparison can tell them apart, because the
+ * information is not in the hook's inputs at that instant.
+ *
+ * At session start it is. The displacement mechanism actually observed is a
+ * PEER's `EnterWorktree` moving this session (CodySwannGT/lisa#3712), which
+ * happens during the session — after it has started. A baseline taken at start
+ * is therefore recorded BEFORE the event that moves it, and the first guarded
+ * call becomes an ordinary comparison against a baseline that already exists.
+ * It reaches the same refusal a later displacement produces, because by then it
+ * is one.
+ *
+ * ## What this does NOT achieve
+ *
+ * #3955 asks for a baseline from the ASSIGNER rather than from observation.
+ * That is not what this is and Lisa cannot build it: Lisa does not own
+ * `EnterWorktree`, and nothing the harness writes names a session's assigned
+ * worktree in a form a hook can read. This is still an observation, just an
+ * earlier one. It closes the window between session start and the first guarded
+ * call; it leaves open a session LAUNCHED already displaced, where start
+ * observes the foreign tree and trust-on-first-use still applies.
+ *
+ * Returns nothing on purpose, like its sibling below: SessionStart has no call
+ * to refuse, so every path through it allows.
+ * @param sessionId - The session this baseline belongs to
+ * @param observed - The worktree root the session started in
+ */
+function recordBaseline(sessionId, observed) {
+  // Never overwrite. A resumed session, a reconnect, or anything else that
+  // fires the event twice must not be able to launder a displaced binding into
+  // a fresh baseline — which is the whole failure this exists to close.
+  if (readState(sessionId)?.boundRoot) return;
+  writeState(sessionId, {
+    boundRoot: observed,
+    claimedRoot: null,
+    updatedAt: new Date().toISOString(),
+  });
+}
+
 /**
  * Record what `EnterWorktree` just claimed, for the next tool call to check.
  *
@@ -648,6 +705,10 @@ function evaluate(payload) {
   const observed = worktreeRoot(cwd);
   if (!observed) return 0;
 
+  if (payload.hook_event_name === "SessionStart") {
+    recordBaseline(sessionId, observed);
+    return 0;
+  }
   if (payload.tool_name === "EnterWorktree") {
     recordClaim(payload, observed);
     return 0;
@@ -659,6 +720,13 @@ function evaluate(payload) {
 
   const state = readState(sessionId);
   if (!state?.boundRoot) {
+    // No baseline means SessionStart did not run for this session — an older
+    // install, a runtime that fires no such event, a harness that skips it.
+    // Absence of a baseline is absence of evidence, not evidence of
+    // displacement, so this records one exactly as it always did rather than
+    // refusing. Treating it as a refusal would turn a floor into a wall on
+    // every surface where the event does not fire, and a wall gets switched
+    // off, which costs the whole guard.
     writeState(sessionId, {
       boundRoot: observed,
       claimedRoot: null,

package/plugins/lisa-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cursor/hooks/hooks.json

@@ -105,6 +105,9 @@
       },
       {
         "command": "${CURSOR_PLUGIN_ROOT}/hooks/secrets-preflight.sh"
+      },
+      {
+        "command": "${CURSOR_PLUGIN_ROOT}/hooks/worktree-binding-guard.sh"
       }
     ],
     "subagentStart": [

package/plugins/lisa-cursor/hooks/worktree-binding-guard.mjs

@@ -547,6 +547,63 @@ function claimedRoot(toolInput, cwd) {
   return null;
 }
 
+/**
+ * Record where the session STARTED, so its first guarded call is checked
+ * against a baseline rather than establishing one.
+ *
+ * ## Why the first call could not be checked before
+ *
+ * It established the baseline instead of testing one, which is
+ * trust-on-first-use — and TOFU is only as safe as its first use. Here the
+ * first use is assigned by the harness, unasked (CodySwannGT/lisa#3864), so the
+ * one moment the guard trusted was the moment the session had least control
+ * over. A session already sitting in a foreign worktree when it first acted
+ * bound to that tree and was never refused, and every later call was then
+ * checked faithfully against the wrong baseline — defending the session INTO
+ * the wrong worktree rather than out of it (CodySwannGT/lisa#3955).
+ *
+ * ## Why an earlier observation separates what a cleverer check cannot
+ *
+ * At the first guarded call, "I was displaced before I acted" and "I
+ * legitimately started here" present identically: one session id, one observed
+ * root, no prior state. No comparison can tell them apart, because the
+ * information is not in the hook's inputs at that instant.
+ *
+ * At session start it is. The displacement mechanism actually observed is a
+ * PEER's `EnterWorktree` moving this session (CodySwannGT/lisa#3712), which
+ * happens during the session — after it has started. A baseline taken at start
+ * is therefore recorded BEFORE the event that moves it, and the first guarded
+ * call becomes an ordinary comparison against a baseline that already exists.
+ * It reaches the same refusal a later displacement produces, because by then it
+ * is one.
+ *
+ * ## What this does NOT achieve
+ *
+ * #3955 asks for a baseline from the ASSIGNER rather than from observation.
+ * That is not what this is and Lisa cannot build it: Lisa does not own
+ * `EnterWorktree`, and nothing the harness writes names a session's assigned
+ * worktree in a form a hook can read. This is still an observation, just an
+ * earlier one. It closes the window between session start and the first guarded
+ * call; it leaves open a session LAUNCHED already displaced, where start
+ * observes the foreign tree and trust-on-first-use still applies.
+ *
+ * Returns nothing on purpose, like its sibling below: SessionStart has no call
+ * to refuse, so every path through it allows.
+ * @param sessionId - The session this baseline belongs to
+ * @param observed - The worktree root the session started in
+ */
+function recordBaseline(sessionId, observed) {
+  // Never overwrite. A resumed session, a reconnect, or anything else that
+  // fires the event twice must not be able to launder a displaced binding into
+  // a fresh baseline — which is the whole failure this exists to close.
+  if (readState(sessionId)?.boundRoot) return;
+  writeState(sessionId, {
+    boundRoot: observed,
+    claimedRoot: null,
+    updatedAt: new Date().toISOString(),
+  });
+}
+
 /**
  * Record what `EnterWorktree` just claimed, for the next tool call to check.
  *
@@ -648,6 +705,10 @@ function evaluate(payload) {
   const observed = worktreeRoot(cwd);
   if (!observed) return 0;
 
+  if (payload.hook_event_name === "SessionStart") {
+    recordBaseline(sessionId, observed);
+    return 0;
+  }
   if (payload.tool_name === "EnterWorktree") {
     recordClaim(payload, observed);
     return 0;
@@ -659,6 +720,13 @@ function evaluate(payload) {
 
   const state = readState(sessionId);
   if (!state?.boundRoot) {
+    // No baseline means SessionStart did not run for this session — an older
+    // install, a runtime that fires no such event, a harness that skips it.
+    // Absence of a baseline is absence of evidence, not evidence of
+    // displacement, so this records one exactly as it always did rather than
+    // refusing. Treating it as a refusal would turn a floor into a wall on
+    // every surface where the event does not fire, and a wall gets switched
+    // off, which costs the whole guard.
     writeState(sessionId, {
       boundRoot: observed,
       claimedRoot: null,

package/plugins/lisa-expo/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Expo and React Native-specific skills, agents, rules, and MCP servers.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Harper/Fabric-specific Lisa rules for TypeScript component apps.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "NestJS-specific skills and migration write-protection hooks.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "4.45.7",
+  "version": "4.45.9",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"