@codyswann/lisa 4.55.11 → 4.55.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (68) hide show
  1. package/dist/codex/scripts/install-pkgs.sh +1 -1
  2. package/dist/core/nightly-e2e-guard-behavior-certificate.js +2 -2
  3. package/dist/core/upstream-evidence-manifest.js +4 -4
  4. package/dist/utils/package-manager-detect.d.ts +2 -2
  5. package/dist/utils/package-manager-detect.js +2 -2
  6. package/package.json +4 -4
  7. package/plugins/lisa/.claude-plugin/plugin.json +1 -1
  8. package/plugins/lisa/.codex-plugin/plugin.json +1 -1
  9. package/plugins/lisa/.codex-plugin/skills/lisa-generate-claude-remote-build-script/SKILL.md +1 -1
  10. package/plugins/lisa/hooks/install-pkgs.sh +1 -1
  11. package/plugins/lisa/skills/lisa-generate-claude-remote-build-script/SKILL.md +1 -1
  12. package/plugins/lisa-agy/plugin.json +1 -1
  13. package/plugins/lisa-agy/skills/lisa-generate-claude-remote-build-script/SKILL.md +1 -1
  14. package/plugins/lisa-cdk/.claude-plugin/plugin.json +1 -1
  15. package/plugins/lisa-cdk/.codex-plugin/plugin.json +1 -1
  16. package/plugins/lisa-cdk-agy/plugin.json +1 -1
  17. package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json +1 -1
  18. package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json +1 -1
  19. package/plugins/lisa-copilot/.claude-plugin/plugin.json +1 -1
  20. package/plugins/lisa-copilot/hooks/install-pkgs.sh +1 -1
  21. package/plugins/lisa-copilot/skills/lisa-generate-claude-remote-build-script/SKILL.md +1 -1
  22. package/plugins/lisa-cursor/.claude-plugin/plugin.json +1 -1
  23. package/plugins/lisa-cursor/hooks/install-pkgs.sh +1 -1
  24. package/plugins/lisa-cursor/skills/lisa-generate-claude-remote-build-script/SKILL.md +1 -1
  25. package/plugins/lisa-expo/.claude-plugin/plugin.json +1 -1
  26. package/plugins/lisa-expo/.codex-plugin/plugin.json +1 -1
  27. package/plugins/lisa-expo-agy/plugin.json +1 -1
  28. package/plugins/lisa-expo-copilot/.claude-plugin/plugin.json +1 -1
  29. package/plugins/lisa-expo-cursor/.claude-plugin/plugin.json +1 -1
  30. package/plugins/lisa-harper-fabric/.claude-plugin/plugin.json +1 -1
  31. package/plugins/lisa-harper-fabric/.codex-plugin/plugin.json +1 -1
  32. package/plugins/lisa-harper-fabric-agy/plugin.json +1 -1
  33. package/plugins/lisa-harper-fabric-copilot/.claude-plugin/plugin.json +1 -1
  34. package/plugins/lisa-harper-fabric-cursor/.claude-plugin/plugin.json +1 -1
  35. package/plugins/lisa-nestjs/.claude-plugin/plugin.json +1 -1
  36. package/plugins/lisa-nestjs/.codex-plugin/plugin.json +1 -1
  37. package/plugins/lisa-nestjs-agy/plugin.json +1 -1
  38. package/plugins/lisa-nestjs-copilot/.claude-plugin/plugin.json +1 -1
  39. package/plugins/lisa-nestjs-cursor/.claude-plugin/plugin.json +1 -1
  40. package/plugins/lisa-openclaw/.claude-plugin/plugin.json +1 -1
  41. package/plugins/lisa-openclaw/.codex-plugin/plugin.json +1 -1
  42. package/plugins/lisa-openclaw-agy/plugin.json +1 -1
  43. package/plugins/lisa-openclaw-copilot/.claude-plugin/plugin.json +1 -1
  44. package/plugins/lisa-openclaw-cursor/.claude-plugin/plugin.json +1 -1
  45. package/plugins/lisa-phaser/.claude-plugin/plugin.json +1 -1
  46. package/plugins/lisa-phaser/.codex-plugin/plugin.json +1 -1
  47. package/plugins/lisa-phaser-agy/plugin.json +1 -1
  48. package/plugins/lisa-phaser-copilot/.claude-plugin/plugin.json +1 -1
  49. package/plugins/lisa-phaser-cursor/.claude-plugin/plugin.json +1 -1
  50. package/plugins/lisa-rails/.claude-plugin/plugin.json +1 -1
  51. package/plugins/lisa-rails/.codex-plugin/plugin.json +1 -1
  52. package/plugins/lisa-rails-agy/plugin.json +1 -1
  53. package/plugins/lisa-rails-copilot/.claude-plugin/plugin.json +1 -1
  54. package/plugins/lisa-rails-cursor/.claude-plugin/plugin.json +1 -1
  55. package/plugins/lisa-typescript/.claude-plugin/plugin.json +1 -1
  56. package/plugins/lisa-typescript/.codex-plugin/plugin.json +1 -1
  57. package/plugins/lisa-typescript-agy/plugin.json +1 -1
  58. package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json +1 -1
  59. package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json +1 -1
  60. package/plugins/lisa-wiki/.claude-plugin/plugin.json +1 -1
  61. package/plugins/lisa-wiki/.codex-plugin/plugin.json +1 -1
  62. package/plugins/lisa-wiki-agy/plugin.json +1 -1
  63. package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json +1 -1
  64. package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json +1 -1
  65. package/plugins/src/base/hooks/install-pkgs.sh +1 -1
  66. package/plugins/src/base/skills/lisa-generate-claude-remote-build-script/SKILL.md +1 -1
  67. package/scripts/claude-remote-setup.sh +1 -1
  68. package/typescript/copy-contents/.husky/pre-push +1 -1
@@ -57,7 +57,7 @@ fi
57
57
  # This must NOT key on lockfile presence alone. An npm-only project
58
58
  # (engines.bun = "please-use-npm", CI runs `npm ci`) that picks up a stray
59
59
  # bun.lock would otherwise get `bun install`, re-create the bun.lock, and break
60
- # — the SE-5221 regression. The engines/packageManager signals are
60
+ # — the package-manager selection regression. The engines/packageManager signals are
61
61
  # authoritative; lockfiles are only a fallback and never override an opt-out.
62
62
  detect_package_manager() {
63
63
  _field="" _forced="" _forbidden=""
@@ -41,9 +41,9 @@ export const NIGHTLY_E2E_GUARD_BEHAVIOR_CERTIFICATES = Object.freeze({
41
41
  }),
42
42
  cd02b94b4db5134984c7b69f905af71c96bb5aac09a18fb3c6aef5ab0c22cf17: Object.freeze({
43
43
  contractVersion: "1.9.0",
44
- packageVersions: Object.freeze(["4.55.11"]),
44
+ packageVersions: Object.freeze(["4.55.12"]),
45
45
  provenances: Object.freeze([
46
- "workspace package @codyswann/lisa@4.55.11 (typescript/copy-overwrite/scripts/check-nightly-e2e-health.mjs)",
46
+ "workspace package @codyswann/lisa@4.55.12 (typescript/copy-overwrite/scripts/check-nightly-e2e-health.mjs)",
47
47
  ]),
48
48
  }),
49
49
  dfd2fef680de5ef03e63075e8a61c62ca4d95cdfdff6201939b79c748d3397f6: Object.freeze({
@@ -394,7 +394,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
394
394
  "plugins/src/base/hooks/inject-resolved-config.mjs": "87dd7051ae0818c89f2d8e1b6aa0cde5e883d032974dfa24e39065570aea1afb",
395
395
  "plugins/src/base/hooks/inject-resolved-config.sh": "bc73e118afff35f455241647c24da6e23caaf30d189eb6d3a48814e9a8309613",
396
396
  "plugins/src/base/hooks/inject-rules.sh": "9d2d3352f57099fdb7a3442ddd266c672cd83d484d1216f341168323f5e354ca",
397
- "plugins/src/base/hooks/install-pkgs.sh": "e9a13faba849a277410dde911ab102ee6f88ef915b33571bb1d4eef904172db5",
397
+ "plugins/src/base/hooks/install-pkgs.sh": "51e9847de1cae1e1582f595d4b4e711de7bb1816a53c8e1507826e528b743af0",
398
398
  "plugins/src/base/hooks/operational-hazards.mjs": "f29f1a3a7d48bdcdd8ef1e154361b10577a8ea091c3c0c41b7ece47ffb8dfaa9",
399
399
  "plugins/src/base/hooks/operational-hazards.sh": "d924b576559ea341d1b5bea88a44db7c3bf0b357ed62aab0611e6660ef5f155f",
400
400
  "plugins/src/base/hooks/parity-safety-net-heredoc.py": "f21b1232ac82bd0e42d2ba43c68f4cc4546334fc885ba31747881f427097ef78",
@@ -562,7 +562,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
562
562
  "plugins/src/base/skills/lisa-evaluation-suite/SKILL.md": "96b5c2091ccd22a565935a7b0b917f67998881b81055ce3e4d518319472eac8b",
563
563
  "plugins/src/base/skills/lisa-exploratory-qa/SKILL.md": "254b15d65f8da6bfc6a930814004892e4a32ba8946ff1b68c27fec2a57d9e5b4",
564
564
  "plugins/src/base/skills/lisa-fix-linter-error/SKILL.md": "3a8f01f014ac7f7ac37024c67df1ba07202331542d269d27da3356a7fa0a5599",
565
- "plugins/src/base/skills/lisa-generate-claude-remote-build-script/SKILL.md": "9ae66050b046b3d5bcf4acb582928cb56f295d4d869b712e85b6e0717b67dc7b",
565
+ "plugins/src/base/skills/lisa-generate-claude-remote-build-script/SKILL.md": "214ed34793b9758a65930ef2a79eea8e44ee1f6c85a35b92fbc621cb539e0c69",
566
566
  "plugins/src/base/skills/lisa-git-commit/SKILL.md": "56320566e9278fb43b4d51c00854f3714dc61edc960292d51962a6f49116ac0f",
567
567
  "plugins/src/base/skills/lisa-git-prune/SKILL.md": "11fad06d109538f1a8ee4ef8043bb0e083672e3c9a7cb7ae8a7233c5411d6dd2",
568
568
  "plugins/src/base/skills/lisa-git-submit-pr/SKILL.md": "7847ee39ea3a14445fbf1d459e3cd7d93ed67dcdcf8b6f161ca64bb307233245",
@@ -1143,7 +1143,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
1143
1143
  "scripts/check-workflow-contract-assertions.mjs": "ea31f1ddaf2cea36177dc1415e8dd5e324b2c36d26453c43f4ae100cbf68471d",
1144
1144
  "scripts/check-workflow-load-failures.ts": "494113253fd4830e79e658429c15533c045ac8c5ad3ec365e3dc2a39742f8d2c",
1145
1145
  "scripts/check-workflow-package-paths.mjs": "d057c7666ad048cfbd11a1ef83ad1e13fb1c61a9d399ec83221c99c4256728a1",
1146
- "scripts/claude-remote-setup.sh": "0e33accf8aa057c70497f01c38bef9f9f3801d649272f583578d89201b242655",
1146
+ "scripts/claude-remote-setup.sh": "5947c48ee78f2efdf321f6a516e0aad427ac77345ce26d4e29d0eecc5cd5d307",
1147
1147
  "scripts/clean-dist.mjs": "04970d768464acbf96ebeb77c16a6a3b3da56c744eef0da64c573c6152ee0dc7",
1148
1148
  "scripts/cleanup-amplify-branches.sh": "eb9db90b07818dd156dd48d04b6350a10b39be8ffe0267d72cc13705c8eb5350",
1149
1149
  "scripts/cleanup-github-branches.sh": "88d7442700c3277cbf96c0f3250b8169fdd43812d585ddac417843a65e2b548c",
@@ -1247,7 +1247,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
1247
1247
  "typescript/copy-contents/.husky/post-checkout": "f3abc4528e12d3ad2bc48b236d19f105e2817595c744156a558c62ae5551ccfb",
1248
1248
  "typescript/copy-contents/.husky/post-merge": "8155564c7aed71d04bada189d66623e32a00d80598a8194782b6ecabec5134c0",
1249
1249
  "typescript/copy-contents/.husky/pre-commit": "170a599896e3cf0773fcbc9fa12d49051a864698220b70e8f4b1ea6cca063365",
1250
- "typescript/copy-contents/.husky/pre-push": "a80f2b79a3ef7a7c742642a48e1472abb3b53ad755609cc590aa0dde4300db9f",
1250
+ "typescript/copy-contents/.husky/pre-push": "4498f26ea035a6d24dd845f18f9ce718330d6184780482f88458cf7ab3e22380",
1251
1251
  "typescript/copy-contents/.husky/prepare-commit-msg": "4a719c20da65653f266e7c8a346b5546ad05f1dfa34665fc7fec47e89d2f58d1",
1252
1252
  "typescript/copy-overwrite/.claude/hooks/worktree-create.sh": "888cfd16bd1ac04f9f8a835eae62f8bd2c956de654bce12ce9a6a52947b121ca",
1253
1253
  "typescript/copy-overwrite/.github/GITHUB_ACTIONS.md": "4289146bae8e112049387d4be86941c563b02376a06f0238364aaf3e61c2b127",
@@ -34,7 +34,7 @@ export declare const LOCKFILE_REGEN_PLANS: Readonly<Record<PackageManager, Lockf
34
34
  * npm-only project sets `engines.bun = "please-use-npm"`). Such a manager must
35
35
  * never have its lockfile regenerated — even if a stray lockfile for it is
36
36
  * present — because doing so re-creates the stray lockfile via that manager's
37
- * `install`. That is the SE-5221 regression: a stray `bun.lock` in an npm-only
37
+ * `install`. That is the package-manager selection regression: a stray `bun.lock` in an npm-only
38
38
  * project kept alive by `bun install`, which then misroutes the pre-push hook's
39
39
  * package-manager detection to the bun branch.
40
40
  * @param projectDir - Absolute path to the project directory
@@ -52,7 +52,7 @@ export declare function enginesForbiddenManagers(projectDir: string): ReadonlySe
52
52
  *
53
53
  * Managers opted out via an `engines` sentinel (e.g. `bun = "please-use-npm"`)
54
54
  * are dropped even when their lockfile is present, so the reconciliation never
55
- * re-creates a stray lockfile the project deliberately disallows (SE-5221).
55
+ * re-creates a stray lockfile the project deliberately disallows.
56
56
  * @param projectDir - Absolute path to the project directory
57
57
  * @returns Ordered list of detected package managers (possibly empty)
58
58
  */
@@ -55,7 +55,7 @@ export const LOCKFILE_REGEN_PLANS = {
55
55
  * npm-only project sets `engines.bun = "please-use-npm"`). Such a manager must
56
56
  * never have its lockfile regenerated — even if a stray lockfile for it is
57
57
  * present — because doing so re-creates the stray lockfile via that manager's
58
- * `install`. That is the SE-5221 regression: a stray `bun.lock` in an npm-only
58
+ * `install`. That is the package-manager selection regression: a stray `bun.lock` in an npm-only
59
59
  * project kept alive by `bun install`, which then misroutes the pre-push hook's
60
60
  * package-manager detection to the bun branch.
61
61
  * @param projectDir - Absolute path to the project directory
@@ -87,7 +87,7 @@ export function enginesForbiddenManagers(projectDir) {
87
87
  *
88
88
  * Managers opted out via an `engines` sentinel (e.g. `bun = "please-use-npm"`)
89
89
  * are dropped even when their lockfile is present, so the reconciliation never
90
- * re-creates a stray lockfile the project deliberately disallows (SE-5221).
90
+ * re-creates a stray lockfile the project deliberately disallows.
91
91
  * @param projectDir - Absolute path to the project directory
92
92
  * @returns Ordered list of detected package managers (possibly empty)
93
93
  */
package/package.json CHANGED
@@ -187,7 +187,7 @@
187
187
  "zod-validation-error": "^4.0.0"
188
188
  },
189
189
  "name": "@codyswann/lisa",
190
- "version": "4.55.11",
190
+ "version": "4.55.12",
191
191
  "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
192
192
  "main": "dist/index.js",
193
193
  "exports": {
@@ -336,7 +336,7 @@
336
336
  "test": "tests"
337
337
  },
338
338
  "types": "./dist/index.d.ts",
339
- "lisaReleaseCommit": "4936a1c0995d3406d00b906b4390ffe2e7f03c59",
340
- "gitHead": "4936a1c0995d3406d00b906b4390ffe2e7f03c59",
341
- "lisaReleaseTag": "v4.55.11"
339
+ "lisaReleaseCommit": "89b58b2d263fe97a8579fc54500ba188243824d3",
340
+ "gitHead": "89b58b2d263fe97a8579fc54500ba188243824d3",
341
+ "lisaReleaseTag": "v4.55.12"
342
342
  }
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Universal governance: agents, skills, commands, hooks, and rules for all projects.",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -169,7 +169,7 @@ require() { need "$1" || { echo "FATAL: required tool '$1' missing and install f
169
169
  # Resolve the PM from packageManager/engines/lockfiles — emit the manager the
170
170
  # `packageManager` inventory field reported, NEVER a hardcoded bun. An npm-only
171
171
  # project (engines.bun = "please-use-npm") must install with npm; emitting
172
- # `bun install` would create a stray bun.lock and break it (the SE-5221
172
+ # `bun install` would create a stray bun.lock and break it (the package-manager selection
173
173
  # regression). Only install/PATH-export the manager actually selected below.
174
174
  detect_package_manager() {
175
175
  _field="" _forced="" _forbidden=""
@@ -53,7 +53,7 @@ fi
53
53
  # This must NOT key on lockfile presence alone. An npm-only project
54
54
  # (engines.bun = "please-use-npm", CI runs `npm ci`) that picks up a stray
55
55
  # bun.lock would otherwise get `bun install`, re-create the bun.lock, and break
56
- # — the SE-5221 regression. The engines/packageManager signals are
56
+ # — the package-manager selection regression. The engines/packageManager signals are
57
57
  # authoritative; lockfiles are only a fallback and never override an opt-out.
58
58
  detect_package_manager() {
59
59
  _field="" _forced="" _forbidden=""
@@ -169,7 +169,7 @@ require() { need "$1" || { echo "FATAL: required tool '$1' missing and install f
169
169
  # Resolve the PM from packageManager/engines/lockfiles — emit the manager the
170
170
  # `packageManager` inventory field reported, NEVER a hardcoded bun. An npm-only
171
171
  # project (engines.bun = "please-use-npm") must install with npm; emitting
172
- # `bun install` would create a stray bun.lock and break it (the SE-5221
172
+ # `bun install` would create a stray bun.lock and break it (the package-manager selection
173
173
  # regression). Only install/PATH-export the manager actually selected below.
174
174
  detect_package_manager() {
175
175
  _field="" _forced="" _forbidden=""
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -169,7 +169,7 @@ require() { need "$1" || { echo "FATAL: required tool '$1' missing and install f
169
169
  # Resolve the PM from packageManager/engines/lockfiles — emit the manager the
170
170
  # `packageManager` inventory field reported, NEVER a hardcoded bun. An npm-only
171
171
  # project (engines.bun = "please-use-npm") must install with npm; emitting
172
- # `bun install` would create a stray bun.lock and break it (the SE-5221
172
+ # `bun install` would create a stray bun.lock and break it (the package-manager selection
173
173
  # regression). Only install/PATH-export the manager actually selected below.
174
174
  detect_package_manager() {
175
175
  _field="" _forced="" _forbidden=""
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-cdk",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "AWS CDK-specific plugin",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-cdk",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "AWS CDK-specific Lisa plugin.",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-cdk",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "AWS CDK-specific plugin",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-cdk",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "AWS CDK-specific plugin",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-cdk",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "AWS CDK-specific plugin",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -53,7 +53,7 @@ fi
53
53
  # This must NOT key on lockfile presence alone. An npm-only project
54
54
  # (engines.bun = "please-use-npm", CI runs `npm ci`) that picks up a stray
55
55
  # bun.lock would otherwise get `bun install`, re-create the bun.lock, and break
56
- # — the SE-5221 regression. The engines/packageManager signals are
56
+ # — the package-manager selection regression. The engines/packageManager signals are
57
57
  # authoritative; lockfiles are only a fallback and never override an opt-out.
58
58
  detect_package_manager() {
59
59
  _field="" _forced="" _forbidden=""
@@ -169,7 +169,7 @@ require() { need "$1" || { echo "FATAL: required tool '$1' missing and install f
169
169
  # Resolve the PM from packageManager/engines/lockfiles — emit the manager the
170
170
  # `packageManager` inventory field reported, NEVER a hardcoded bun. An npm-only
171
171
  # project (engines.bun = "please-use-npm") must install with npm; emitting
172
- # `bun install` would create a stray bun.lock and break it (the SE-5221
172
+ # `bun install` would create a stray bun.lock and break it (the package-manager selection
173
173
  # regression). Only install/PATH-export the manager actually selected below.
174
174
  detect_package_manager() {
175
175
  _field="" _forced="" _forbidden=""
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -53,7 +53,7 @@ fi
53
53
  # This must NOT key on lockfile presence alone. An npm-only project
54
54
  # (engines.bun = "please-use-npm", CI runs `npm ci`) that picks up a stray
55
55
  # bun.lock would otherwise get `bun install`, re-create the bun.lock, and break
56
- # — the SE-5221 regression. The engines/packageManager signals are
56
+ # — the package-manager selection regression. The engines/packageManager signals are
57
57
  # authoritative; lockfiles are only a fallback and never override an opt-out.
58
58
  detect_package_manager() {
59
59
  _field="" _forced="" _forbidden=""
@@ -169,7 +169,7 @@ require() { need "$1" || { echo "FATAL: required tool '$1' missing and install f
169
169
  # Resolve the PM from packageManager/engines/lockfiles — emit the manager the
170
170
  # `packageManager` inventory field reported, NEVER a hardcoded bun. An npm-only
171
171
  # project (engines.bun = "please-use-npm") must install with npm; emitting
172
- # `bun install` would create a stray bun.lock and break it (the SE-5221
172
+ # `bun install` would create a stray bun.lock and break it (the package-manager selection
173
173
  # regression). Only install/PATH-export the manager actually selected below.
174
174
  detect_package_manager() {
175
175
  _field="" _forced="" _forbidden=""
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-expo",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-expo",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Expo and React Native-specific skills, agents, rules, and MCP servers.",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-expo",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-expo",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-expo",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-harper-fabric",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Harper/Fabric-specific rules for TypeScript component apps",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-harper-fabric",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Harper/Fabric-specific Lisa rules for TypeScript component apps.",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-harper-fabric",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Harper/Fabric-specific rules for TypeScript component apps",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-harper-fabric",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Harper/Fabric-specific rules for TypeScript component apps",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-harper-fabric",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Harper/Fabric-specific rules for TypeScript component apps",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-nestjs",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-nestjs",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "NestJS-specific skills and migration write-protection hooks.",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-nestjs",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-nestjs",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-nestjs",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-openclaw",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-openclaw",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, across Claude and Codex.",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-openclaw",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-openclaw",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-openclaw",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-phaser",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Phaser 4 game-development rules for TypeScript projects",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-phaser",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Phaser 4 game-development rules for TypeScript projects",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-phaser",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Phaser 4 game-development rules for TypeScript projects",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-phaser",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Phaser 4 game-development rules for TypeScript projects",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-phaser",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Phaser 4 game-development rules for TypeScript projects",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-rails",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-rails",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Ruby on Rails-specific skills and hooks for RuboCop and ast-grep scanning on edit.",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-rails",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-rails",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-rails",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-typescript",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-typescript",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "TypeScript-specific hooks for formatting, linting, and ast-grep scanning on edit.",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-typescript",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-typescript",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-typescript",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-wiki",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-wiki",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "Distributable LLM Wiki kernel — ingest, query, lint, and maintain a git-native markdown knowledge base across Claude and Codex.",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-wiki",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-wiki",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-wiki",
3
- "version": "4.55.11",
3
+ "version": "4.55.12",
4
4
  "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -53,7 +53,7 @@ fi
53
53
  # This must NOT key on lockfile presence alone. An npm-only project
54
54
  # (engines.bun = "please-use-npm", CI runs `npm ci`) that picks up a stray
55
55
  # bun.lock would otherwise get `bun install`, re-create the bun.lock, and break
56
- # — the SE-5221 regression. The engines/packageManager signals are
56
+ # — the package-manager selection regression. The engines/packageManager signals are
57
57
  # authoritative; lockfiles are only a fallback and never override an opt-out.
58
58
  detect_package_manager() {
59
59
  _field="" _forced="" _forbidden=""
@@ -169,7 +169,7 @@ require() { need "$1" || { echo "FATAL: required tool '$1' missing and install f
169
169
  # Resolve the PM from packageManager/engines/lockfiles — emit the manager the
170
170
  # `packageManager` inventory field reported, NEVER a hardcoded bun. An npm-only
171
171
  # project (engines.bun = "please-use-npm") must install with npm; emitting
172
- # `bun install` would create a stray bun.lock and break it (the SE-5221
172
+ # `bun install` would create a stray bun.lock and break it (the package-manager selection
173
173
  # regression). Only install/PATH-export the manager actually selected below.
174
174
  detect_package_manager() {
175
175
  _field="" _forced="" _forbidden=""
@@ -92,7 +92,7 @@ require gitleaks
92
92
  # Resolve the package manager from packageManager/engines/lockfiles rather than
93
93
  # hardcoding bun: an npm-only project (engines.bun = "please-use-npm", CI runs
94
94
  # `npm ci`) must install with npm, never `bun install` — which would create a
95
- # stray bun.lock and break the project (the SE-5221 regression). jq is required
95
+ # stray bun.lock and break the project (the package-manager selection regression). jq is required
96
96
  # above, so the package.json signals are always available here.
97
97
  # bun has known proxy package-fetch issues in cloud sessions; retry transient failures.
98
98
  detect_package_manager() {
@@ -774,7 +774,7 @@ else
774
774
  # npm branch (`npm audit --production`) and the yarn branch
775
775
  # (`yarn audit --groups dependencies`). Without it, bun audits
776
776
  # devDependencies too and the gate fails on dev-only CVEs that never ship —
777
- # the SE-5221 false positive. bun honours `--production` even though
777
+ # the package-manager selection false positive. bun honours `--production` even though
778
778
  # `bun audit --help` omits it from the flag list.
779
779
  # Normalize bun's transport before parsing, or this gate FAILS OPEN.
780
780
  #