@codyswann/lisa 4.60.2 → 4.60.4

package/plugins/lisa-phaser-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "4.60.2",
+  "version": "4.60.4",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "4.60.2",
+  "version": "4.60.4",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "4.60.2",
+  "version": "4.60.4",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.60.2",
+  "version": "4.60.4",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.60.2",
+  "version": "4.60.4",
   "description": "Ruby on Rails-specific skills and hooks for RuboCop and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.60.2",
+  "version": "4.60.4",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.60.2",
+  "version": "4.60.4",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.60.2",
+  "version": "4.60.4",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.60.2",
+  "version": "4.60.4",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.60.2",
+  "version": "4.60.4",
   "description": "TypeScript-specific hooks for formatting, linting, and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.60.2",
+  "version": "4.60.4",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.60.2",
+  "version": "4.60.4",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.60.2",
+  "version": "4.60.4",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.60.2",
+  "version": "4.60.4",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.60.2",
+  "version": "4.60.4",
   "description": "Distributable LLM Wiki kernel — ingest, query, lint, and maintain a git-native markdown knowledge base across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.60.2",
+  "version": "4.60.4",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.60.2",
+  "version": "4.60.4",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.60.2",
+  "version": "4.60.4",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/src/base/hooks/block-instruction-file-edits.sh

@@ -49,7 +49,8 @@ if [ -r "$lisa_guard_dedupe_lib" ]; then
   # shellcheck source=guard-dedupe.bash
   . "$lisa_guard_dedupe_lib"
   trap 'lisa_guard_dedupe_record $?' EXIT
-  lisa_guard_dedupe block-instruction-file-edits "$input"
+  lisa_guard_dedupe block-instruction-file-edits "$input" \
+    "$lisa_guard_hook_dir/parity-safety-net-heredoc.py"
 fi
 
 command -v jq >/dev/null 2>&1 || exit 0
@@ -184,6 +185,15 @@ EOF
       grep -Eqi '(agents|claude|copilot-instructions)\.md'; then
       exit 0
     fi
+    # Literal printf/echo arguments are content. The shared projection keeps
+    # the real redirect target, and leaves executable/ambiguous syntax intact.
+    if [[ "$command_str" =~ ^[[:blank:]]*(printf|echo)[[:blank:]] ]] \
+      && command -v python3 >/dev/null 2>&1; then
+      if display_projection="$(printf '%s' "$command_str" | python3 \
+        "$lisa_guard_hook_dir/parity-safety-net-heredoc.py" --literal-display 2>/dev/null)"; then
+        command_str="$display_projection"
+      fi
+    fi
     # Write signatures only. A bare mention (`cat AGENTS.md`, `rg x AGENTS.md`)
     # is a read and must stay allowed — the filename has to appear as the target
     # of a redirection, a tee, or an in-place sed.

package/plugins/src/base/hooks/parity-safety-net-heredoc.py

@@ -226,6 +226,46 @@ def shell_tokens(prefix: str) -> list[str] | None:
         return None
 
 
+def literal_display_projection(command: str) -> str:
+    """Remove data from one literal printer, retaining its real output target.
+
+    Reuse the literal simple-command grammar: pipes, chains, substitutions,
+    comments and ambiguous syntax keep the original scan. This is not a shell
+    parser or an execution exemption. ANSI-C quoting and computed targets also
+    keep their original scan rather than guessing their expanded spelling.
+    """
+    if "$'" in command:
+        return command
+
+    def printer(text: str) -> bool:
+        tokens = shell_tokens(text)
+        if not tokens or len(tokens) < 2:
+            return False
+        if tokens[0] == "echo":
+            return True
+        if tokens[0] != "printf":
+            return False
+        arguments = tokens[2:] if tokens[1] == "--" else tokens[1:]
+        if not arguments or arguments[0].startswith("-"):
+            return False
+        # %n writes a variable (including an evaluated array subscript), and a
+        # dynamic format could select it. Only known display conversions qualify.
+        remaining = re.sub(r"%%|%[sbqQ]", "", arguments[0])
+        return not any(char in remaining for char in "%$`*?[]~")
+
+    if printer(command):
+        return "printf '%s' literal-display-content"
+    for redirect in re.finditer(r">>|>\||>", command):
+        if not printer(command[:redirect.start()]):
+            continue
+        target = shell_tokens(command[redirect.end():])
+        if target and len(target) == 1 and not any(
+            char in target[0] for char in "$`\\\n\r*?[]~"
+        ):
+            return "printf '%s' literal-display-content " + redirect[0] + " " + shlex.quote(target[0])
+    return command
+
+
 def is_allowed_gh(tokens: list[str]) -> bool:
     return (
         len(tokens) >= 3
@@ -902,6 +942,9 @@ def marker_is_closed(command: str, marker: Marker) -> bool:
 
 def main() -> int:
     command = sys.stdin.read()
+    if sys.argv[1:] == ["--literal-display"]:
+        print(literal_display_projection(command), end="")
+        return SAFE
     if "<<" not in command:
         print(command, end="")
         return SAFE

package/plugins/src/base/hooks/parity-safety-net.sh

@@ -428,6 +428,18 @@ case "$command_str" in
     ;;
 esac
 
+custom_command_for_guards="$command_for_guards"
+# A single literal printer writes data, not shell commands. Keep its actual
+# redirection in the scan; unsupported syntax and unavailable parsing retain
+# the original text. Chained commands and shell substitutions never qualify.
+if [[ "$command_for_guards" =~ ^[[:blank:]]*(printf|echo)[[:blank:]] ]] \
+  && command -v python3 >/dev/null 2>&1; then
+  if display_projection="$(printf '%s' "$command_for_guards" | python3 \
+    "$lisa_guard_hook_dir/parity-safety-net-heredoc.py" --literal-display 2>/dev/null)"; then
+    command_for_guards="$display_projection"
+  fi
+fi
+
 # ─── Follow execution into the file a command RUNS (issue #3612) ─────────────
 #
 # Every guard below classifies SHELL COMMAND TEXT, and until this block existed
@@ -2377,6 +2389,9 @@ fi
 # 16. Project-local custom rules. Each non-comment line is an ERE; a match blocks.
 rules_file="${SAFETY_NET_RULES_FILE:-${CLAUDE_PROJECT_DIR:-$PWD}/.claude/safety-net-rules.txt}"
 if [ -f "$rules_file" ]; then
+  # Custom rules can intentionally govern text itself, so preserve their input.
+  custom_command_str="$(printf '%s\n%s' "$custom_command_for_guards" "$followed_text" \
+    | awk '{ if (sub(/\\$/, "")) printf "%s ", $0; else print }')"
   while IFS= read -r rule || [ -n "$rule" ]; do
     case "$rule" in
       '' | '#'*) continue ;;
@@ -2390,7 +2405,7 @@ if [ -f "$rules_file" ]; then
     # not a refusal. The `||` puts the pipeline in a condition context, where
     # a non-zero status is expected rather than fatal.
     rule_status=0
-    printf '%s' "$normalized_command_str" | grep -Eiq -- "$rule" || rule_status=$?
+    printf '%s' "$custom_command_str" | grep -Eiq -- "$rule" || rule_status=$?
     case "$rule_status" in
       0) block "matched a project custom safety rule (${rules_file##*/}): $rule" ;;
       1) ;; # no match

package/scripts/lib/worktree-dependencies.d.mts

@@ -0,0 +1,5 @@
+// This file is managed by Lisa and IS replaced on each `lisa` run.
+// Do not edit directly — durable changes belong upstream in Lisa.
+
+/** Diagnose upward dependency resolution from an uninstalled nested worktree. */
+export function worktreeDependencyProblem(cwd?: string): string | null;

package/scripts/lib/worktree-dependencies.mjs

@@ -0,0 +1,65 @@
+// This file is managed by Lisa and IS replaced on each `lisa` run.
+// Do not edit directly — durable changes belong upstream in Lisa.
+
+import { existsSync, readFileSync, realpathSync, statSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+
+import { invokedAsScript } from "./invoked-as-script.mjs";
+
+/**
+ * Identify upward dependency resolution outside a nested linked worktree.
+ * Reads Git's worktree metadata without installing, moving or modifying anything.
+ * Local node_modules, including an explicit symlink, are an intentional install.
+ * @param {string} [cwd] Directory from which the tool will resolve dependencies.
+ * @returns {string|null} Setup diagnosis, or null when this condition is absent.
+ */
+export function worktreeDependencyProblem(cwd = process.cwd()) {
+  try {
+    let root = realpathSync(cwd);
+    let localModules = false;
+    while (!existsSync(join(root, ".git"))) {
+      localModules ||= existsSync(join(root, "node_modules"));
+      const parent = dirname(root);
+      if (parent === root) return null;
+      root = parent;
+    }
+    if (localModules || existsSync(join(root, "node_modules"))) return null;
+    const marker = join(root, ".git");
+    if (!statSync(marker).isFile()) return null;
+    const gitdir = readFileSync(marker, "utf8")
+      .split("\n")
+      .find(line => line.startsWith("gitdir:"))
+      ?.slice("gitdir:".length)
+      .trim();
+    if (!gitdir) return null;
+    const control = resolve(root, gitdir.trim());
+    // commondir distinguishes a linked worktree from a submodule's .git file.
+    realpathSync(
+      resolve(control, readFileSync(join(control, "commondir"), "utf8").trim())
+    );
+    let modules = "";
+    let enclosingCheckout = false;
+    for (let parent = dirname(root); ; parent = dirname(parent)) {
+      if (!modules && existsSync(join(parent, "node_modules")))
+        modules = join(parent, "node_modules");
+      // The enclosing checkout may itself be a linked worktree. Its physical
+      // location, not the common Git directory, controls Node's upward search.
+      // Node continues past an enclosing checkout that has no dependencies.
+      enclosingCheckout ||= existsSync(join(parent, ".git"));
+      if (enclosingCheckout && modules)
+        return `This nested worktree has no dependencies of its own: ${root}. Node can resolve packages from the parent checkout at ${modules}. This is a worktree setup problem, not evidence of a defect in this branch. Install dependencies in this worktree with CI=1 using the project's package manager, or use an isolated checkout. No tool was run.`;
+      if (parent === dirname(parent)) break;
+    }
+  } catch {
+    // Not every caller is a normal linked Git worktree; do not invent a diagnosis.
+  }
+  return null;
+}
+
+if (invokedAsScript(import.meta.url)) {
+  const problem = worktreeDependencyProblem();
+  if (problem) {
+    console.error(problem);
+    process.exitCode = 1;
+  }
+}

package/scripts/two-channel-couplings.json

@@ -97,7 +97,7 @@
     "workflows": 23,
     "steps": 781,
     "couplings": 33,
-    "inventory": 78
+    "inventory": 80
   },
   "counts": {
     "package-backed": 10,

package/typescript/copy-contents/.husky/pre-push

@@ -1029,7 +1029,7 @@ fi
 # measured, and the honest command for such a project is still `test:cov` —
 # slower, but answering to the floor that was configured for what it runs.
 COVERAGE_SCRIPT="test:cov"
-if node -e 'const s=require("./package.json").scripts||{};const resolve=(k,d)=>{const v=s[k];const hop=/^\$npm_execpath\s+run\s+(\S+)$/.exec((v||"").trim());return hop&&d<4?resolve(hop[1],d+1):v;};const u=resolve("test:cov:unit",0);const marker=/^(?:env(?:\s+-\S+)*\s+)?(?:[A-Za-z_][A-Za-z0-9_]*=\S+\s+)*LISA_COVERAGE_SCOPE=unit(?:\s|$)/;process.exit(typeof u==="string"&&marker.test(u.trim())?0:1)' >/dev/null 2>&1; then
+if node -e 'const s=require("./package.json").scripts||{};const preflight="node scripts/lib/worktree-dependencies.mjs && ";const resolve=(k,d)=>{const raw=s[k];const v=typeof raw==="string"&&raw.startsWith(preflight)?raw.slice(preflight.length):raw;const hop=/^\$npm_execpath\s+run\s+(\S+)$/.exec((v||"").trim());return hop&&d<4?resolve(hop[1],d+1):v;};const u=resolve("test:cov:unit",0);const marker=/^(?:env(?:\s+-\S+)*\s+)?(?:[A-Za-z_][A-Za-z0-9_]*=\S+\s+)*LISA_COVERAGE_SCOPE=unit(?:\s|$)/;process.exit(typeof u==="string"&&marker.test(u.trim())?0:1)' >/dev/null 2>&1; then
   COVERAGE_SCRIPT="test:cov:unit"
 fi
 

package/typescript/package-lisa/package.lisa.json

@@ -8,27 +8,27 @@
       "check:verification": "node scripts/check-verification-coverage.mjs",
       "check:work-item": "node scripts/lisa-work-item.mjs validate-pr",
       "check:work-item:push": "node scripts/lisa-work-item.mjs validate-push",
-      "format": "prettier --check . --write",
-      "format:check:lisa": "prettier --check .",
-      "knip:check:lisa": "knip",
-      "knip:fix": "knip --fix",
-      "lint:fix": "oxlint --fix && eslint . --fix",
-      "lint:lisa": "oxlint && eslint . --quiet",
-      "lint:slow:lisa": "eslint . --config eslint.slow.config.ts --quiet",
+      "format": "node scripts/lib/worktree-dependencies.mjs && prettier --check . --write",
+      "format:check:lisa": "node scripts/lib/worktree-dependencies.mjs && prettier --check .",
+      "knip:check:lisa": "node scripts/lib/worktree-dependencies.mjs && knip",
+      "knip:fix": "node scripts/lib/worktree-dependencies.mjs && knip --fix",
+      "lint:fix": "node scripts/lib/worktree-dependencies.mjs && oxlint --fix && eslint . --fix",
+      "lint:lisa": "node scripts/lib/worktree-dependencies.mjs && oxlint && eslint . --quiet",
+      "lint:slow:lisa": "node scripts/lib/worktree-dependencies.mjs && eslint . --config eslint.slow.config.ts --quiet",
       "nightly:health": "node scripts/check-nightly-e2e-health.mjs",
       "prepare": "node -e \"if (process.env.INIT_CWD?.includes('.serverless')) process.exit(0); process.exit(1);\" || husky install || true",
       "setup:deploy-key": "setup-deploy-key",
-      "sg:scan:lisa": "ast-grep scan",
-      "sg:test": "ast-grep test",
-      "test:cov:lisa": "lisa-test-run --profile typescript --adapter vitest -- vitest run --coverage",
-      "test:cov:unit:lisa": "LISA_COVERAGE_SCOPE=unit lisa-test-run --profile typescript --adapter vitest -- vitest run --coverage --exclude='**/integration/**'",
-      "test:integration:lisa": "lisa-test-run --profile typescript --adapter vitest -- vitest run '.integration.' 'integration/'",
-      "test:lisa": "lisa-test-run --profile typescript --adapter vitest -- vitest run",
-      "test:mutation": "LISA_TEST_SCRATCH_PREFIXES='[\"lisa-mutation-\",\"worker-\"]' lisa-test-run --profile typescript --adapter direct -- node scripts/lisa-mutation.mjs",
-      "test:node:lisa": "LISA_TEST_SCRATCH_PREFIXES='[\"node-\"]' lisa-test-run --profile typescript --adapter direct -- node scripts/lisa-test-node.mjs",
-      "test:unit:lisa": "lisa-test-run --profile typescript --adapter vitest -- vitest run --exclude='**/integration/**'",
-      "test:watch:lisa": "lisa-test-run --profile typescript --adapter vitest -- vitest",
-      "typecheck:lisa": "tsc --noEmit"
+      "sg:scan:lisa": "node scripts/lib/worktree-dependencies.mjs && ast-grep scan",
+      "sg:test": "node scripts/lib/worktree-dependencies.mjs && ast-grep test",
+      "test:cov:lisa": "node scripts/lib/worktree-dependencies.mjs && lisa-test-run --profile typescript --adapter vitest -- vitest run --coverage",
+      "test:cov:unit:lisa": "node scripts/lib/worktree-dependencies.mjs && LISA_COVERAGE_SCOPE=unit lisa-test-run --profile typescript --adapter vitest -- vitest run --coverage --exclude='**/integration/**'",
+      "test:integration:lisa": "node scripts/lib/worktree-dependencies.mjs && lisa-test-run --profile typescript --adapter vitest -- vitest run '.integration.' 'integration/'",
+      "test:lisa": "node scripts/lib/worktree-dependencies.mjs && lisa-test-run --profile typescript --adapter vitest -- vitest run",
+      "test:mutation": "node scripts/lib/worktree-dependencies.mjs && LISA_TEST_SCRATCH_PREFIXES='[\"lisa-mutation-\",\"worker-\"]' lisa-test-run --profile typescript --adapter direct -- node scripts/lisa-mutation.mjs",
+      "test:node:lisa": "node scripts/lib/worktree-dependencies.mjs && LISA_TEST_SCRATCH_PREFIXES='[\"node-\"]' lisa-test-run --profile typescript --adapter direct -- node scripts/lisa-test-node.mjs",
+      "test:unit:lisa": "node scripts/lib/worktree-dependencies.mjs && lisa-test-run --profile typescript --adapter vitest -- vitest run --exclude='**/integration/**'",
+      "test:watch:lisa": "node scripts/lib/worktree-dependencies.mjs && lisa-test-run --profile typescript --adapter vitest -- vitest",
+      "typecheck:lisa": "node scripts/lib/worktree-dependencies.mjs && tsc --noEmit"
     },
     "devDependencies": {
       "eslint-plugin-oxlint": "^1.62.0",
@@ -76,7 +76,7 @@
       "vitest": "^4.1.0"
     },
     "scripts": {
-      "build": "tsc",
+      "build": "node scripts/lib/worktree-dependencies.mjs && tsc",
       "format:check": "$npm_execpath run format:check:lisa",
       "knip:check": "$npm_execpath run knip:check:lisa",
       "lint": "$npm_execpath run lint:lisa",