@codyswann/lisa 4.69.0 → 4.69.1

package/README.md

@@ -186,6 +186,22 @@ any direct override in the current directory's `package.json`. It preserves the
 original error and does not change dependencies. Nested selectors and unreadable
 manifests remain unverified; this diagnostic is not a full lockfile audit.
 
+Clean TypeScript and CDK hosts receive the shared Node 22.23.3 baseline,
+Vitest and coverage-v8 4.1.11 minimums, and a Vite 8.3.2 minimum within Vite 8.
+Lisa retains the TypeScript 6, ESLint 9, Knip 5, Husky 8 and Vitest 4 families.
+Applying twice with the same Lisa version keeps managed content unchanged.
+Install dependencies after applying, then verify the installed versions and
+lockfile alongside the host's test, typecheck and offline synth commands.
+
+Package template ownership still applies. Explicit TypeScript Node and test-tool
+`defaults` survive an apply, while CDK's `force` test tools advance to the shared
+patch floor. Existing create-only workflow and Expo EAS files stay host-owned.
+The overwritten `.nvmrc` supplies the shared Node runtime. Review older explicit
+pins and create-only workflow inputs before adopting this baseline in an
+existing host. Maintainers can run `bun run update-node-version` after changing
+the root `.nvmrc` to update current tracked runtime surfaces without rewriting
+historical plans or generic test fixtures.
+
 When Lisa is invoked during installation it prints this next step. Package
 managers that do not run its lifecycle scripts cannot display that notice.
 

package/all/create-only/.github/workflows/continuous-gates.yml

@@ -73,7 +73,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@v6
         with:
-          node-version: '22.21.1'
+          node-version: '22.23.3'
       # This prerequisite belongs to this scheduled caller. Other callers of
       # gates.yml keep their existing behavior when a moment declares no gates.
       - name: Require checks for this environment
@@ -116,7 +116,7 @@ jobs:
       # (CodySwannGT/lisa#3698).
       expected_workflow_contract_major: '1'
       moment: continuous:${{ inputs.environment || 'production' }}
-      node_version: '22.21.1'
+      node_version: '22.23.3'
       package_manager: 'npm'
   # No `secrets:` key, deliberately. `gates.yml` declares none in its
   # `workflow_call` and contains zero occurrences of the string `secret`, so

package/all/create-only/.github/workflows/workflow-load-failure-sweep.yml

@@ -22,7 +22,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@v6
         with:
-          node-version: '22.21.1'
+          node-version: '22.23.3'
           package-manager-cache: false
       # Keep this a local script: the detector must run when an upstream
       # reusable workflow cannot load. It needs Node and gh, with no dependencies.

package/cdk/create-only/.github/workflows/ci.yml

@@ -149,7 +149,7 @@ jobs:
         uses: actions/setup-node@v6
         with:
           package-manager-cache: false
-          node-version: '22.21.1'
+          node-version: '22.23.3'
 
       - name: 📦 Install dependencies
         run: npm ci
@@ -230,7 +230,7 @@ jobs:
       # declared a break, and says NOT DETERMINED if this line goes missing
       # (CodySwannGT/lisa#3698).
       expected_workflow_contract_major: '1'
-      node_version: '22.21.1'
+      node_version: '22.23.3'
       package_manager: 'npm'
     secrets:
       SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

package/cdk/create-only/.github/workflows/deploy.yml

@@ -103,7 +103,7 @@ jobs:
       # (CodySwannGT/lisa#3698).
       expected_workflow_contract_major: '1'
       moment: pre-deploy:${{ needs.determine_environment.outputs.environment }}
-      node_version: '22.21.1'
+      node_version: '22.23.3'
       package_manager: 'npm'
     # No `secrets:` key: gates.yml declares none in its `workflow_call`, so
     # passing any grants everything to a callee that reads nothing (#3065).
@@ -132,7 +132,7 @@ jobs:
       require_signatures: false
       generate_sbom: true
       override_blackout: true
-      node_version: '22.21.1'
+      node_version: '22.23.3'
       package_manager: 'npm'
     secrets:
       DEPLOY_KEY: ${{ secrets.DEPLOY_KEY }}
@@ -171,7 +171,7 @@ jobs:
       # (CodySwannGT/lisa#3698).
       expected_workflow_contract_major: '1'
       moment: post-deploy:${{ needs.determine_environment.outputs.environment }}
-      node_version: '22.21.1'
+      node_version: '22.23.3'
       package_manager: 'npm'
     # No `secrets:` key: gates.yml declares none in its `workflow_call`, so
     # passing any grants everything to a callee that reads nothing (#3065).

package/cdk/package-lisa/package.lisa.json

@@ -25,9 +25,9 @@
     "devDependencies": {
       "aws-cdk": "^2.1127.0",
       "esbuild": "^0.28.1",
-      "vite": "^8.0.16",
-      "vitest": "^4.1.0",
-      "@vitest/coverage-v8": "^4.1.0",
+      "vite": "^8.3.2",
+      "vitest": "^4.1.11",
+      "@vitest/coverage-v8": "^4.1.11",
       "eslint-plugin-oxlint": "^1.62.0",
       "oxlint": "^1.62.0",
       "oxlint-tsgolint": "^0.24.0",
@@ -59,7 +59,7 @@
       "yarn": "please-use-npm",
       "pnpm": "please-use-npm",
       "bun": "please-use-npm",
-      "node": "22.21.1"
+      "node": "22.23.3"
     },
     "scripts": {
       "lint": "$npm_execpath run lint:lisa",

package/dist/core/nightly-e2e-guard-behavior-certificate.js

@@ -48,9 +48,9 @@ export const NIGHTLY_E2E_GUARD_BEHAVIOR_CERTIFICATES = Object.freeze({
     }),
     f87e6eee47ddb6416f2c639b79b96a68173c9c562999fbad98abe012ac913d28: Object.freeze({
         contractVersion: "1.9.0",
-        packageVersions: Object.freeze(["4.69.0"]),
+        packageVersions: Object.freeze(["4.69.1"]),
         provenances: Object.freeze([
-            "workspace package @codyswann/lisa@4.69.0 (typescript/copy-overwrite/scripts/check-nightly-e2e-health.mjs)",
+            "workspace package @codyswann/lisa@4.69.1 (typescript/copy-overwrite/scripts/check-nightly-e2e-health.mjs)",
         ]),
     }),
 });

package/dist/core/upstream-evidence-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upstream-evidence-manifest.d.ts","sourceRoot":"","sources":["../../src/core/upstream-evidence-manifest.ts"],"names":[],"mappings":"AACA,iFAAiF;AACjF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAonFpE,CAAC;AAEL,4EAA4E;AAC5E,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CA8lRjE,CAAC;AAEL,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAk6I/D,CAAC"}
+{"version":3,"file":"upstream-evidence-manifest.d.ts","sourceRoot":"","sources":["../../src/core/upstream-evidence-manifest.ts"],"names":[],"mappings":"AACA,iFAAiF;AACjF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAonFpE,CAAC;AAEL,4EAA4E;AAC5E,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CA2rRjE,CAAC;AAEL,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAk6I/D,CAAC"}

package/dist/core/upstream-evidence-manifest.js

@@ -59,8 +59,8 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "all/copy-overwrite/scripts/schemas/lisa-command-envelope.v1.schema.json": "d153b7c2953a30f180e38f09e98240c63327f5196eeba9bdf545e5a1f125a879",
     "all/copy-overwrite/scripts/schemas/lisa-state-contract.v1.schema.json": "6b7afe4ffeba8aaa53871d8855172f7eacde05953b1321145218ec638ff5c1c4",
     "all/create-only/.agents/rules/README.md": "d4fda2b0b5862afa92c4ddf29daa53218df0d5fe4f051901cdfc53ac266bdbf8",
-    "all/create-only/.github/workflows/continuous-gates.yml": "7ef94a95dee4650e91a2b226122936fa4609ad57f3acbb50f4a9f357e486d2eb",
-    "all/create-only/.github/workflows/workflow-load-failure-sweep.yml": "3ce24f9d82495a2f327c1705333c049bbb7c7a65170329d530295d23c6c7ad2d",
+    "all/create-only/.github/workflows/continuous-gates.yml": "42ec4cb8e0ba45e0288f07881b8f93497468afd3cba3ef0cbb4d0ea4c4ae240a",
+    "all/create-only/.github/workflows/workflow-load-failure-sweep.yml": "eaf0dc7d59b83a8525207c763db4c955ccef05c4fab16b9407d36d1b53513670",
     "all/create-only/.lisaignore": "735dc0a28a19e3aebc3d71b1ddf8b077e96ab17013d0f1c49d87c08558a315df",
     "all/create-only/scripts/remote-agent-aws-setup.sh": "bb0e67a52ea5badd0f291961c3a9fb25559f1f35e3042642d389a49eb47f7e31",
     "all/create-only/specs/.keep": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
@@ -80,8 +80,8 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "cdk/copy-overwrite/tsconfig.json": "bd960df819bb1ce01163ac4b28721eea3f07d482f6c454cfea9a8dc90191033a",
     "cdk/copy-overwrite/vitest.cdk.ts": "030158b11bec4f10b39585feb98f498981f307faa1fa314c7522e6def5d73c94",
     "cdk/copy-overwrite/vitest.config.ts": "c7f309d4f43d9188b9c067cb4900b2bdbacfbd28d135a6a2e6313cb0a37b030f",
-    "cdk/create-only/.github/workflows/ci.yml": "7c5aaf999dbfea2f8480de470a9b3feef2a27cce6e4517d9aa438d343c62cc22",
-    "cdk/create-only/.github/workflows/deploy.yml": "023cf9e80efc77f8401b61927d5b5a2bd7becdb3233e03ecbd112df16a371561",
+    "cdk/create-only/.github/workflows/ci.yml": "49cb9ae3db7a90fd427b866406126b159bcd59962926047d672b6628cac88683",
+    "cdk/create-only/.github/workflows/deploy.yml": "0b906d71ba35b4824c6638c89a8a7ddde6cf7a2130155cac55bcc1e70226f74d",
     "cdk/create-only/cdk.json": "f89030d8fe145a1dbabd59d89ddee4e16984f222d737f7fcf6b778d911e9fe40",
     "cdk/create-only/stryker.conf.json": "9ccc4dc3fc72f8bb848794214a7784d233fa35558f12514ce16cf0fba59aa4be",
     "cdk/create-only/tsconfig.local.json": "d26253827e21fd7c41d30565fe3d339675f119e00bb24c5713a01f57ccd06602",
@@ -90,7 +90,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "cdk/deletions.json": "3469a25e885836f301e8d24599dd13f5195ef86ffdea1f03f3fbb86d6b1f1674",
     "cdk/merge/.claude/settings.json": "bc5eecf114d94f4894f8781e15248930d4a8009dce6431ec44e54cc5ee947300",
     "cdk/merge/.oxlintrc.json": "f7d248cf8a89561374d7e68e24aa780f4a6a523938475ad685f034ce0194d75c",
-    "cdk/package-lisa/package.lisa.json": "79e2e4333973f1a3d553b7a284c1cd1d9b2939ad2442057e2b7702ec63991040",
+    "cdk/package-lisa/package.lisa.json": "86267110cd76829442a003ab398a9c107385b2355dc589194f0e10ccd586955d",
     "eslint-plugin-code-organization/README.md": "e70c9e262ce3a97e1f9fe1897ffa71e3d1b124f10486b90ead5d4a5252977826",
     "eslint-plugin-code-organization/__tests__/enforce-statement-order.test.js": "27e8e2cdf9bae3c35c22f17407570a163cfe52bd848ec40f7f2f1068e97c10c9",
     "eslint-plugin-code-organization/index.js": "9be5ecb135bc30cf39a3371825e94f8a379d8339653297bd7e48c07624923c83",
@@ -155,21 +155,21 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "expo/copy-overwrite/tsconfig.json": "c92e2c2c109e8794ee351f634361ef46297f5a0cd606aaf5c19911da836df307",
     "expo/create-only/.github/nightly-e2e-policy.json": "a6fc52bbaa7943523fba35bd1ab51d8da4b29354bf0133b47aa299b725f51e8c",
     "expo/create-only/.github/required-checks.json": "8d40acc337c42fbdfc55638dc4ab43b541b975270ecae8fffec9897c13a42884",
-    "expo/create-only/.github/workflows/ci.yml": "830c60686fef5d1f773812f622a3c40832344a078acf22122c1740ebaa6db18b",
-    "expo/create-only/.github/workflows/deploy.yml": "44e110314e660fc15f332cb4ae0885692b79be89dadd32e3ba10d23dfbb50d3e",
+    "expo/create-only/.github/workflows/ci.yml": "84651096cc79e3e05a57f917540dce2835ea6c5e701146368b62c08a0a6b0c85",
+    "expo/create-only/.github/workflows/deploy.yml": "33947a64659bc48baa0b187f453d401bb02af47ed4e4f531610f2c5562388f0d",
     "expo/create-only/.github/workflows/maestro-e2e.yml": "11e6db515412702672edea910223b808be168b3d1f9ec15c349f44f3edcff247",
-    "expo/create-only/.github/workflows/nightly-e2e-bypass-reaper.yml": "02c9ddf80eaaec34eae35abf70cc8f39a7c6e43245cd742421acc188ea59b208",
+    "expo/create-only/.github/workflows/nightly-e2e-bypass-reaper.yml": "c5219d7968ca772fb7fb1a4edc8b9e519996fe5cc497c562395dec4cd2706048",
     "expo/create-only/.github/workflows/nightly-e2e-health.yml": "560d40504494ca7d98a99dbe27535f91aceff19e8f98b51ddf9a8f24f559e535",
     "expo/create-only/.github/workflows/nightly-e2e-report.yml": "002f9a3bb88e1ff964195f413e385313c6d6f868e6d003b787663903d6bbd3a9",
     "expo/create-only/.github/workflows/nightly-e2e-tracking.yml": "b1b181a8362c6891480f8e333ca5f7fdd29f6dbc4973d07fd0b70592ba16e881",
-    "expo/create-only/.github/workflows/playwright-e2e.yml": "05f379b75c60e51711f58074b5eeac3e4105a54a8c840b3f3fa43f8b5f8d92fd",
+    "expo/create-only/.github/workflows/playwright-e2e.yml": "0729c66cc30f7910cec1396f35fb9a93b8fd4d1bc9cc753291864fdcbc3bf0b3",
     "expo/create-only/.maestro/flake-classification.json": "8a9469ac2d3b7cb885b4a48ea2dc942aa4ad5deb1a12b05818f62811cac6b0d5",
     "expo/create-only/.zap/baseline.conf": "ab18d74ba5270dd5d795e740cd6b1292bb78dc36c79a20c1e7b752d14c0c55f5",
     "expo/create-only/babel.config.js": "86503c2f3ccf13749e1c7674c97ab8df4cb28a8d346bd5ddcb65787290b5a9a3",
     "expo/create-only/bdd/coverage-map.json": "dca3b037b3740bbcc228c85fc63feccc7a5295da5a925e60420accda3eac4059",
     "expo/create-only/bdd/features/.keep": "b807c9c94a3b00b93d2463a9b098dac41db227ac1f5b0b1cb746e5e6f68de15d",
     "expo/create-only/e2e.thresholds.json": "23ac9bab7fe84cfa542785156425e020af9baabdbeb1a53293ae7e2395e4dd92",
-    "expo/create-only/eas.json": "3d710e6c1ac1d40e60aab765c8766f276a5ee1012057b0eda405eac54d301321",
+    "expo/create-only/eas.json": "68ab4e1c0ba0a90d49a8b605394569f0738d2a042be03c9487884f0226db1799",
     "expo/create-only/jest.config.local.ts": "0647741c9df4cecc1b7c285e28bfbec217994f0b7984eecf81ca47095e936754",
     "expo/create-only/jest.config.react-native-mock.js": "f146fea09b0308ac3332f1f06cf8f22ee5c88b06b5fd227860b36204566de5f1",
     "expo/create-only/jest.setup.local.ts": "f0266cf872f41b6599e476e135f0b8947c3d226abe5bc4e02fb4087c836abac0",
@@ -188,7 +188,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "expo/package-lisa/package.lisa.json": "471e463f9d4384614f594a7f2789de571e84651a3f2c094c862c877991fb76df",
     "harper-fabric/copy-contents/.prettierignore": "478c782f4c5611187e21584dfd5522e37fc636c5eb03394fea3db45321c6712c",
     "harper-fabric/copy-contents/gitignore": "d091c40fd0ea3068491f1be0d6510090ae872ca95d0d058ef4595d6492d13897",
-    "harper-fabric/copy-overwrite/.github/workflows/ci.yml": "ccef2ec19da13266bf47c44e1de9bdac4afc65c60037b8e3f4c43e20b3b7f9cd",
+    "harper-fabric/copy-overwrite/.github/workflows/ci.yml": "1e51fd8cb8156ff3e79931bbed80e646b6fb46744b6c1bd39fa5a1da966f64aa",
     "harper-fabric/copy-overwrite/ast-grep/rules/harper/no-early-return-in-search-loop.yml": "8b9f1c93ebdd4f760978df01b166de90a78e751f7b4c907bded98f2862b4ac01",
     "harper-fabric/copy-overwrite/ast-grep/rules/harper/no-empty-conditions-with-sort.yml": "716642455575045ecda3de8f275939993dee9065ac04bba30fe2fbb15d092cb2",
     "harper-fabric/copy-overwrite/ast-grep/rules/harper/no-full-table-scan.yml": "147bd3f3c2f82812acc3fdadb21d484594ec31a2e8015a2c90e041f659da92b5",
@@ -198,14 +198,14 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "harper-fabric/copy-overwrite/tsconfig.eslint.json": "63ddc31cbbdf91ba4def5f04ed76b2a8b61ced456d4472aea77a55cc037a62e1",
     "harper-fabric/copy-overwrite/tsconfig.json": "64b9f2e919160568712e2641b125aa21bec486532249a7b17e4fb2f4bb3988cc",
     "harper-fabric/copy-overwrite/vitest.config.ts": "94ee60be0e9a4b735cf1b053143751c9968465ff04fb59fbdfc252e7413ff337",
-    "harper-fabric/create-only/.github/workflows/deploy.yml": "ffe74236f7896488c041f46c63d43a7b31f9ba45b9c8d47b47326888386f3ef9",
-    "harper-fabric/create-only/.github/workflows/zap-baseline.yml": "068d8bea3d2ccf4fca97b8d3f8f23734b9feb37b3faea6d5a10ed219e0cc783b",
+    "harper-fabric/create-only/.github/workflows/deploy.yml": "4cf724370ecff208906ee9f0bc9ea4fb31bddea20bd68b8c6ef5364d71548f0f",
+    "harper-fabric/create-only/.github/workflows/zap-baseline.yml": "74cc5f02e862e090a0332c5b244936d27a9926220738466482221ff7dcf20a27",
     "harper-fabric/create-only/.zap/baseline.conf": "68aae4b1b9b5b7253b5aeb792d72b58f64e5eda1dcf8f3062bd9d77494a5a22f",
     "harper-fabric/create-only/scripts/zap-baseline.sh": "00f5a2bdf6c9ecf0d7a1c74ec629364b09bab1f79c4ea71779826288702d76aa",
     "harper-fabric/deletions.json": "699c6e445c053bc95cdf4b7ef6a852e243d1073d21087ed7c08db69d1d29ac9c",
     "harper-fabric/merge/.claude/settings.json": "3368043731215c6e2f107f1599eff1c90abc70d09a1d798f4ed79a280c4f3ffb",
     "harper-fabric/merge/.oxlintrc.json": "b41ea588eed47e0f1532aab5f6226b82586269b84edd1947bdde603e0a8513fa",
-    "harper-fabric/package-lisa/package.lisa.json": "d93162a4077db908b8fe589fc269cd347f94f0f4c18d3b57e988cf524ba0c062",
+    "harper-fabric/package-lisa/package.lisa.json": "dbfca02e64339a8702e7d071859b12d9d3b444fb6724a0c486c4c1408804be95",
     "nestjs/copy-overwrite/eslint.config.ts": "300895743cd8e3041f164902e1c8e509d8ef07474848a70621ac354d73595477",
     "nestjs/copy-overwrite/eslint.nestjs.ts": "50986c80ebfcbef86b6c24d6a50ace0964d43fe85c65a732230388caffab453c",
     "nestjs/copy-overwrite/eslint.slow.config.ts": "602a21f47370a0a947e92bced1b93bf8fa4c146e07c944ffe1d56ef50914a688",
@@ -239,8 +239,8 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "nestjs/create-only/.github/k6/thresholds/relaxed.json": "350c18b2c588fd628db8a6e82fc5c0b3ffc8a09f1c89b64d1f530350bc64a9ca",
     "nestjs/create-only/.github/k6/thresholds/strict.json": "e121ec72de4596b95c013a8c71f03653bcdf057cf7f8d1fec6f0e13c1381867f",
     "nestjs/create-only/.github/required-checks.json": "6de377accd8355091e31ee7b3e412187d2268650ecbeb6c2cba42923c594cfc0",
-    "nestjs/create-only/.github/workflows/ci.yml": "fb85b8dc792dfc493c532cddb305a86255c7442881653ff3a4ddb8cd25bece7e",
-    "nestjs/create-only/.github/workflows/deploy.yml": "47f2978590a6b6da863b986475faaaf70f8d174b9b88cc395d2eaa31f4d972bb",
+    "nestjs/create-only/.github/workflows/ci.yml": "800a0147bbda0ddb4f3b54af88494ad873e3df3be7151a7224d1189ad98954af",
+    "nestjs/create-only/.github/workflows/deploy.yml": "07c1be9e329492fd2ae5311e134f6369404991a7512c0851a2d52c4712f7b13d",
     "nestjs/create-only/.zap/baseline.conf": "a7cd559b014555ef2efe7a6ce129384ec376ce4d66d5bc3ae9e2f3f883172c4d",
     "nestjs/create-only/scripts/zap-baseline.sh": "9d81fdb3419753ca4ec5509e37365543d7608c7a9924635ef1acb4734cb3bbd1",
     "nestjs/create-only/tsconfig.local.json": "0b720ddad0d18f52dadf33bdc4a0aec0eb65c506bc8ebb692f880bdf31d1011d",
@@ -249,9 +249,9 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "nestjs/deletions.json": "25a66a505f9ef5c71169e2293c9f1b263f0a1e42b69851825c3cd3cc6e3f0b00",
     "nestjs/merge/.claude/settings.json": "28b1221fa0d18657af1b89392a1854c77777889f27c82162a9c37b79c81be5f8",
     "nestjs/merge/.oxlintrc.json": "1de29d135744df0258e8659ee0b684acf84e687bbefade51db0576813e6ff097",
-    "nestjs/package-lisa/package.lisa.json": "80137280d2fc3b24f7668b131ed21d6a65178aa88eb15c36c13637fd852f25a7",
+    "nestjs/package-lisa/package.lisa.json": "45f56767727b1f536825c4efae969f3307774fd07887edce8f0cce06ebd2959d",
     "npm-package/create-only/.github/workflows/publish-to-npm.yml": "20760529dd59186baf870fb2d0ac555ff95bc3dc75ea96ba4564bf37d61f708e",
-    "npm-package/package-lisa/package.lisa.json": "7d6a779d8ae0ee211b1c3983a5fbbca31b5f12ed3e95fd3f76104f11bd91abaa",
+    "npm-package/package-lisa/package.lisa.json": "2a61fd5f0e27578e58ac9b1368cf5d6ad4df15591348f1f3ea97cd2c6d24974f",
     "oxlint/base.json": "8cbc563bdfbbaf455742cef24d33676f45b55baf1ea62b529018b2d112d70f8a",
     "oxlint/cdk.json": "9070da081a42990d8e32a58d1fdc577f9a75cc14040bf2fbf74b145179213d6f",
     "oxlint/expo.json": "75cd8305a86230d8493fc2cc136796c58b9ff77a92f12299b1ae93f9b5f0ad95",
@@ -261,7 +261,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "oxlint/typescript.json": "c7352af5d92a97da1386edfbff873f284c932f5413dce87c4af27520097389aa",
     "phaser/copy-contents/.prettierignore": "3bd2e016bd4bd23f76d186a4a4ba72f47719b9aa1df5d3352ad5719d93e0bf49",
     "phaser/copy-contents/gitignore": "4b8d1a5817d35f64f5d4859f9184ebe2e1dc42e63f8e9269fff233e2ec258d6c",
-    "phaser/copy-overwrite/.github/workflows/ci.yml": "d5e2561c51b95bf12bbd566e7a95b2609041bc59d5932f50b3a088fc765b3769",
+    "phaser/copy-overwrite/.github/workflows/ci.yml": "04db4432eb98857e99bf98a211ef527a98bcec40db43f63e2dfdef2d7fae6538",
     "phaser/copy-overwrite/.husky/pre-push.verify": "d03bc6d18e20c368d37abd4d1000589cbbfb67afab0ad58da4f18ed73ec65ee9",
     "phaser/copy-overwrite/ast-grep/rule-tests/.gitkeep": "fd9b902271d9cbaca0ead2a1e659776db904c10b06ceed7e5bc43fa57b89aba1",
     "phaser/copy-overwrite/ast-grep/rules/no-day-truncating-file-age-predicate.yml": "6fad69e83ab937f6d929305be46fbe38390cd30c8b525ab0a24a5ac65d377ef6",
@@ -279,7 +279,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "phaser/deletions.json": "699c6e445c053bc95cdf4b7ef6a852e243d1073d21087ed7c08db69d1d29ac9c",
     "phaser/merge/.claude/settings.json": "67214a76e1902a8a04a58eb938dba9eb8de39b55fda9f748eb9e7c4bbd31da99",
     "phaser/merge/.oxlintrc.json": "02c0d70e6e07bc0e981f94a1e2ccd01a2c295c4c66e8b8ea9b2f363d44fa5c06",
-    "phaser/package-lisa/package.lisa.json": "955c3e7489877e16e29641859be3c77a4de8a356dc837f66577f5ea60511bf79",
+    "phaser/package-lisa/package.lisa.json": "43af75dea40431d7c6daac5f38046cba768c8860749e465ba81c2429d7859ad5",
     "plugins/src/base/agents/architecture-specialist.md": "2346c37ddce2b1ff059938d71be05f5f23acfe28066bcba4f9a1070ed6727a93",
     "plugins/src/base/agents/bug-fixer.md": "04b49321519b050a654e83e64749fe5126fa552189c2bbc9a9cef853a089295d",
     "plugins/src/base/agents/builder.md": "ce8b611df9c0f4bbafc9032c9e72c78177c0b2b22065c9bafc4999189870284a",
@@ -1248,7 +1248,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "scripts/setup-deploy-key.sh": "2bed19346810b7af18a5225fd463c4d553a7bcc7b2f11a21bd47b93e6b5e1719",
     "scripts/test-intent-routing.sh": "97b9dc86cbd805df8a7fdb8c99ffab9b8c5e751ba2e84c05420b2a124f80635d",
     "scripts/two-channel-couplings.json": "6bade15e5b356d121a535981c177c6ed5df3bf46a40fce483d428db2ea0a90ca",
-    "scripts/update-node-version.ts": "dcfec9f8666f65925deb9efdc8a4bebb6c3f41d9fa1c1365be23edb82c40fffa",
+    "scripts/update-node-version.ts": "0059067c14001c2f7e75beb2628d1a46f935c7b01ce61871db71b6849ef62dca",
     "scripts/update-test-skill-paths.mjs": "e26a3ac716c33013e22bf5223a58457452f5af2038218a0e3a51c244eab5ddc9",
     "scripts/verify-health-agentic-built.mjs": "4b0d20b2c94390ff6f5af881fc50c5c225215a282891db0b3e3d84a7e6455367",
     "scripts/verify-health-consumer-built.mjs": "bd0676f7e76e4ebceb3a94c89a2b40f4c0266ab0ef7280a9bebbcb388c2731c3",
@@ -1274,9 +1274,9 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "typescript/copy-contents/.husky/pre-push": "7e2c82cbd021548b2cb7f7032d305e55ce81d75fdbefb5296c6eaaef87ae54bd",
     "typescript/copy-contents/.husky/prepare-commit-msg": "4a719c20da65653f266e7c8a346b5546ad05f1dfa34665fc7fec47e89d2f58d1",
     "typescript/copy-overwrite/.claude/hooks/worktree-create.sh": "888cfd16bd1ac04f9f8a835eae62f8bd2c956de654bce12ce9a6a52947b121ca",
-    "typescript/copy-overwrite/.github/GITHUB_ACTIONS.md": "4289146bae8e112049387d4be86941c563b02376a06f0238364aaf3e61c2b127",
+    "typescript/copy-overwrite/.github/GITHUB_ACTIONS.md": "4cd22faec1ca477e34bf7f61640b7eb20329d097b19add57a9909f5905fd37ed",
     "typescript/copy-overwrite/.lintstagedrc.json": "058f6bb7ce5b734ba3e62774b1f769c94053c574f2b4db3e59515c325e49c0ef",
-    "typescript/copy-overwrite/.nvmrc": "0775c6feb7638122e8b68d611cd709bf270f7b5adb5d0d2baa9afab8a6c0fc42",
+    "typescript/copy-overwrite/.nvmrc": "6d07ac247e81cd42c2c20abf8dfe504413d6b2422e4aba9b2c975a776f155921",
     "typescript/copy-overwrite/.prettierignore": "e2538ae1b5ef5d64733c3d6c07292495ead71603dfca2b37fda4a9ed080deb9a",
     "typescript/copy-overwrite/.prettierrc.json": "a20621f79a064486fba53cc0ea3000a2ece3f312ff38495c6a6606a27d2a727c",
     "typescript/copy-overwrite/.versionrc": "96d51e3087892bb795788dbd0ca3e5ebe7b67252e58adae5bbc469eaf424af35",
@@ -1289,7 +1289,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "typescript/copy-overwrite/ast-grep/rules/no-missing-fs-extra-namespace-member-js.yml": "a1c25176b326e26070870d65dcd6e4651880f4121563fc0082022e7f525e5e1b",
     "typescript/copy-overwrite/ast-grep/rules/no-missing-fs-extra-namespace-member.yml": "599df22bafdcf588a4cceac134dbca203266fd77ae4ac0c33b351b545372488c",
     "typescript/copy-overwrite/ast-grep/utils/.gitkeep": "6792ca57f00ff5a84a4713a08308a8ab3144858b0b0d9f8251b8c26c48948fb7",
-    "typescript/copy-overwrite/audit.ignore.config.json": "c19a374d02e01a484cd1965522879839ba7945b3cc06c9b22e05e6742ecb2b09",
+    "typescript/copy-overwrite/audit.ignore.config.json": "8635c912e0d41177f545f22248b2acc9f9683b3c04e5ade7829a8fa809966a0d",
     "typescript/copy-overwrite/commitlint.config.cjs": "a9f07b7097eee82e531dedfe3c1011ec61dc8c85c26d5430314a5999dc0675cc",
     "typescript/copy-overwrite/eslint.config.ts": "1a2f6eb5dd19a7dfc445c61bac8bd08a5f8908f023655c920aff08b633b30fb6",
     "typescript/copy-overwrite/eslint.ignore.config.json": "cc6704b53aef78138a6a37a983d895981073c62ac33a78007d088722984398b2",
@@ -1317,9 +1317,9 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "typescript/copy-overwrite/tsconfig.json": "8f4257fcd2cfd4b23e83e0fdd4908d41ee8f1ae75bb95d632e653a0ac13d58e4",
     "typescript/copy-overwrite/vitest.config.ts": "dc140e617db43da38f456bcc909ae621a62996fe25e7b0babd5e81941308365c",
     "typescript/create-only/.github/required-checks.json": "9be2f3170b7c57cad1a483752d3c882213e90f36ece677d1dd4a1b1c1c66b76a",
-    "typescript/create-only/.github/workflows/ci.yml": "694f9b9c15f55b8f81352a054521018c1297f22c3da0dca138282ca6eff905e7",
-    "typescript/create-only/.github/workflows/review-evidence.yml": "42ecfb09718a16695259ace28875f8fbb2fa59bcafc799302bb797d000d45654",
-    "typescript/create-only/.github/workflows/third-party-review-evidence.yml": "8f1a3b04fa483c59ac4513a2d16eabf4a3e3bba447a562734b1f35fba2552769",
+    "typescript/create-only/.github/workflows/ci.yml": "1fb1da5cf5623b2e44d1d33f104daf65ca44cee1bb0e46df063916ed8bca951b",
+    "typescript/create-only/.github/workflows/review-evidence.yml": "b1d0df98c55d06e44cbf3f8186a16763881a5155949c5189825fdc88589ed4c1",
+    "typescript/create-only/.github/workflows/third-party-review-evidence.yml": "ef20afa53051eb899996d86b8b696ee5407892d73a737b372e50f5d023a0df8d",
     "typescript/create-only/.gitleaksignore": "6927d376648675331801c798a4390b652a22a3e5d350cd26f36d42c10af02d67",
     "typescript/create-only/audit.ignore.local.json": "096eba7c600446a2f906369a6ff747804a51b9ad3153ca10d9a1d673e416b337",
     "typescript/create-only/eslint.config.local.ts": "9194ea9f5d7696a5354022475774813aebde504bbf53a4fecbe1e97f2af75b2b",
@@ -1335,9 +1335,9 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "typescript/github-rulesets/quality-checks.json": "3aa1c6dbc703ad2ecd87c6f7fdff1aae118696dba95c9795c2c954c6b8a444d9",
     "typescript/merge/.claude/settings.json": "a455fb55d5bf99f7f71136a3a4f8f21b283b9627556c3b22d039b01d093eb2a9",
     "typescript/merge/.oxlintrc.json": "9504c20db80470c242c4ffe8cccad6951ed8141dfb5bf6503053e0b2712ab276",
-    "typescript/package-lisa/package.lisa.json": "25be68dbba6cdc730e57b8d5785e80022ca745adab841c80cb1b6d8fd0b7fb77",
+    "typescript/package-lisa/package.lisa.json": "7def55c6827128599f12306354266781d1a1bc22a3a468471822153841ed280c",
     "ui/README.md": "7a67d7bdd49ff214ca204cc4e54ba70c37aa05fd6cc1e314fd9441a53eafc752",
-    "ui/index.html": "6d00b131fc789170c79e119f2ec7dd89c45bf0abf21033d41b929f5ef4247631",
+    "ui/index.html": "3ca3e2ef53fa35ffee3d54b8eeaecd9a6a29a019a9db5b46184affd010b34f1d",
 });
 /** Exact paths tracked by the public Lisa repository at generation time. */
 export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
@@ -1688,6 +1688,90 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "evidence/1537/authenticated-real-values.png": true,
     "evidence/1537/probe-failure-degrades-not-fabricates.png": true,
     "evidence/1537/unauthenticated-unknown-states.png": true,
+    "evidence/4326/README.md": true,
+    "evidence/4326/cdk-template.json": true,
+    "evidence/4326/diagnosis/focused-1.log": true,
+    "evidence/4326/diagnosis/focused-2.log": true,
+    "evidence/4326/diagnosis/focused-3.log": true,
+    "evidence/4326/diagnosis/state.json": true,
+    "evidence/4326/failed-normal-push.log": true,
+    "evidence/4326/fixed-success-and-edge.log": true,
+    "evidence/4326/focused-case-title-followup/README.md": true,
+    "evidence/4326/focused-case-title-followup/baseline-regression.log": true,
+    "evidence/4326/focused-case-title-followup/baseline-report.json": true,
+    "evidence/4326/focused-case-title-followup/fixed-report.json": true,
+    "evidence/4326/focused-case-title-followup/fixed-success-and-edge.log": true,
+    "evidence/4326/focused-case-title-followup/focused-command.json": true,
+    "evidence/4326/focused-case-title-followup/handoff.json": true,
+    "evidence/4326/focused-case-title-followup/independent-review.json": true,
+    "evidence/4326/focused-case-title-followup/inventory.json": true,
+    "evidence/4326/focused-case-title-followup/quality-and-template-review.log": true,
+    "evidence/4326/focused-case-title-followup/scoped-quality.json": true,
+    "evidence/4326/focused-case-title-followup/validator-error-observed.txt": true,
+    "evidence/4326/focused-case-title-followup/validator-failure.json": true,
+    "evidence/4326/focused-case-title-followup/validator-green.json": true,
+    "evidence/4326/forced-http-floor-repair/README.md": true,
+    "evidence/4326/forced-http-floor-repair/baseline-regression.log": true,
+    "evidence/4326/forced-http-floor-repair/fixed-success-and-edge.log": true,
+    "evidence/4326/forced-http-floor-repair/green-final-receipt.json": true,
+    "evidence/4326/forced-http-floor-repair/implementation-summary.json": true,
+    "evidence/4326/forced-http-floor-repair/inventory.json": true,
+    "evidence/4326/forced-http-floor-repair/learning-capture-disposition.json": true,
+    "evidence/4326/forced-http-floor-repair/primary-advisory-research.json": true,
+    "evidence/4326/forced-http-floor-repair/quality-and-template-review.log": true,
+    "evidence/4326/forced-http-floor-repair/red-final-61580-receipt.json": true,
+    "evidence/4326/forced-http-floor-repair/review.json": true,
+    "evidence/4326/forced-http-floor-typecheck-followup/README.md": true,
+    "evidence/4326/forced-http-floor-typecheck-followup/baseline-regression.log": true,
+    "evidence/4326/forced-http-floor-typecheck-followup/fixed-success-and-edge.log": true,
+    "evidence/4326/forced-http-floor-typecheck-followup/implementation-summary.json": true,
+    "evidence/4326/forced-http-floor-typecheck-followup/independent-review.json": true,
+    "evidence/4326/forced-http-floor-typecheck-followup/inventory.json": true,
+    "evidence/4326/forced-http-floor-typecheck-followup/quality-and-template-review.log": true,
+    "evidence/4326/history/baseline-regression.log": true,
+    "evidence/4326/history/baseline-state.json": true,
+    "evidence/4326/history/quality-gates.log": true,
+    "evidence/4326/history/quality-state.json": true,
+    "evidence/4326/inventory.json": true,
+    "evidence/4326/main-468-reconciliation/README.md": true,
+    "evidence/4326/main-468-reconciliation/baseline-regression.log": true,
+    "evidence/4326/main-468-reconciliation/before-merge.json": true,
+    "evidence/4326/main-468-reconciliation/fixed-success-and-edge.log": true,
+    "evidence/4326/main-468-reconciliation/independent-review.json": true,
+    "evidence/4326/main-468-reconciliation/inventory.json": true,
+    "evidence/4326/main-468-reconciliation/managed-scope-reconciliation.json": true,
+    "evidence/4326/main-468-reconciliation/merge-exit.json": true,
+    "evidence/4326/main-468-reconciliation/merge.log": true,
+    "evidence/4326/main-468-reconciliation/merged-build-dist.log": true,
+    "evidence/4326/main-468-reconciliation/merged-frozen-install.log": true,
+    "evidence/4326/main-468-reconciliation/merged-install-build.json": true,
+    "evidence/4326/main-468-reconciliation/quality-and-template-review.log": true,
+    "evidence/4326/main-468-reconciliation/upstream-root-audit-ignore.json": true,
+    "evidence/4326/main-468-reconciliation/upstream-shared-audit-ignore.json": true,
+    "evidence/4326/nested-host-admission-repair/README.md": true,
+    "evidence/4326/nested-host-admission-repair/baseline-identical-final-regression-proof.json": true,
+    "evidence/4326/nested-host-admission-repair/baseline-regression.log": true,
+    "evidence/4326/nested-host-admission-repair/capacity-one-green-proof.json": true,
+    "evidence/4326/nested-host-admission-repair/capacity-one-old-fixture-red-proof.json": true,
+    "evidence/4326/nested-host-admission-repair/controlled-input-comparison.json": true,
+    "evidence/4326/nested-host-admission-repair/final-frozen6.json": true,
+    "evidence/4326/nested-host-admission-repair/fixed-success-and-edge.log": true,
+    "evidence/4326/nested-host-admission-repair/handoff.json": true,
+    "evidence/4326/nested-host-admission-repair/independent-review.json": true,
+    "evidence/4326/nested-host-admission-repair/inventory.json": true,
+    "evidence/4326/nested-host-admission-repair/learning-capture.json": true,
+    "evidence/4326/nested-host-admission-repair/margin-measurement-code.json": true,
+    "evidence/4326/nested-host-admission-repair/original-timeout-regression.log": true,
+    "evidence/4326/nested-host-admission-repair/owned-container-cleanup.json": true,
+    "evidence/4326/nested-host-admission-repair/quality-and-template-review.log": true,
+    "evidence/4326/policy-test-report.json": true,
+    "evidence/4326/quality-and-template-review.log": true,
+    "evidence/4326/security-audit-inventory.json": true,
+    "evidence/4326/security-audit-observation.json": true,
+    "evidence/4326/security-audit-production.json": true,
+    "evidence/4326/security-audit-review.md": true,
+    "evidence/4326/state.json": true,
+    "evidence/4326/verdict.json": true,
     "evidence/copilot-hook-mcp-probe-1056.md": true,
     "evidence/cursor-rule-probe-1055.md": true,
     "expo/copy-overwrite/.easignore.extra": true,
@@ -8073,6 +8157,11 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "tests/fixtures/queue-status-prd-readers/github.json": true,
     "tests/fixtures/queue-status-prd-readers/linear.json": true,
     "tests/fixtures/queue-status-prd-readers/notion.json": true,
+    "tests/fixtures/shared-runtime-hosts/artifact.ts": true,
+    "tests/fixtures/shared-runtime-hosts/assertions.ts": true,
+    "tests/fixtures/shared-runtime-hosts/host.ts": true,
+    "tests/fixtures/shared-runtime-hosts/journey.ts": true,
+    "tests/fixtures/shared-runtime-hosts/process.ts": true,
     "tests/fixtures/state-contract/adopter/migrations/0001_initial.sql": true,
     "tests/fixtures/state-contract/adopter/state/inventory.json": true,
     "tests/fixtures/state-contract/adopter/state/state-contract.json": true,
@@ -8356,6 +8445,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "tests/integration/self-pin-drift-gate-wiring.test.ts": true,
     "tests/integration/sentry-deploy-workflow.test.ts": true,
     "tests/integration/sentry-release-config.test.ts": true,
+    "tests/integration/shared-runtime-packed-hosts.test.ts": true,
     "tests/integration/shell-guard-allow-controls.test.ts": true,
     "tests/integration/shell-guard-refusals.test.ts": true,
     "tests/integration/skipped-required-checks-gate-fail-closed.test.ts": true,
@@ -8633,6 +8723,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "tests/unit/config/expo-view-purity-gate.test.ts": true,
     "tests/unit/config/fast-uri-audit-suppression.test.ts": true,
     "tests/unit/config/fast-xml-parser-security-floor.test.ts": true,
+    "tests/unit/config/forced-http-security-floors.test.ts": true,
     "tests/unit/config/gate-default-tasks-resolve.test.ts": true,
     "tests/unit/config/gate-task-shipped-to-templates.test.ts": true,
     "tests/unit/config/gitleaks-template.test.ts": true,
@@ -8801,6 +8892,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "tests/unit/core/reusable-workflow-pin.test.ts": true,
     "tests/unit/core/role-agent-template-contract.test.ts": true,
     "tests/unit/core/self-apply.test.ts": true,
+    "tests/unit/core/shared-runtime-policy.test.ts": true,
     "tests/unit/core/skill-frontmatter-contract.test.ts": true,
     "tests/unit/core/skip-git-check-decoupling.test.ts": true,
     "tests/unit/core/sonar-integration.test.ts": true,
@@ -8822,6 +8914,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "tests/unit/detection/cdk-app-shape.test.ts": true,
     "tests/unit/detection/detectors.test.ts": true,
     "tests/unit/docs/onboarding-walkthrough.test.ts": true,
+    "tests/unit/fixtures/shared-runtime-native-deadline.test.ts": true,
     "tests/unit/governance-contracts.test.ts": true,
     "tests/unit/health/agentic.test.ts": true,
     "tests/unit/health/consumer.test.ts": true,