@codyswann/lisa 4.69.0 → 4.69.2

package/plugins/lisa-openclaw-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-phaser-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-phaser",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "Phaser 4 game-development rules for TypeScript projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "Ruby on Rails-specific skills and hooks for RuboCop and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "TypeScript-specific hooks for formatting, linting, and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "Distributable LLM Wiki kernel — ingest, query, lint, and maintain a git-native markdown knowledge base across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.69.0",
+  "version": "4.69.2",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/scripts/update-node-version.ts

@@ -15,6 +15,7 @@
  * bun scripts/update-node-version.ts
  * ```
  */
+import { execFileSync } from "node:child_process";
 import * as fs from "node:fs";
 import * as path from "node:path";
 
@@ -35,17 +36,21 @@ interface ReplacementPattern {
 }
 
 const WORKFLOW_PATTERNS: readonly ReplacementPattern[] = [
-  // node_version: '22.21.1' (workflow input defaults)
+  // Include reusable-workflow defaults and expression fallbacks as well as
+  // ordinary callers. Only Node-shaped keys are rewritten.
   {
-    pattern: /(node_version:\s*['"])[\d.]+(['"])/g,
+    pattern: /((?:node_version|node-version):\s*['"]?)\d+\.\d+\.\d+(['"]?)/g,
     replacement: VERSION_REPLACEMENT,
   },
-  // node-version: '22.21.1' (actions/setup-node)
   {
-    pattern: /(node-version:\s*['"])[\d.]+(['"])/g,
+    pattern:
+      /(node_version:\n(?: +(?:description|type|required):[^\n]*\n)* +default: *['"])\d+\.\d+\.\d+(['"])/g,
+    replacement: VERSION_REPLACEMENT,
+  },
+  {
+    pattern: /(node-version:.*?\|\|\s*['"])\d+\.\d+\.\d+(['"])/g,
     replacement: VERSION_REPLACEMENT,
   },
-  // node-version: '22.x' (major version pattern)
   {
     pattern: /(node-version:\s*['"])\d+\.x(['"])/g,
     replacement: "$1{{major}}.x$2",
@@ -53,43 +58,39 @@ const WORKFLOW_PATTERNS: readonly ReplacementPattern[] = [
 ];
 
 const PACKAGE_JSON_PATTERN: ReplacementPattern = {
-  pattern: /("node":\s*["'])[\d.]+(["'])/g,
+  pattern: /("node":\s*["'](?:>=\s*)?)\d+\.\d+\.\d+(["'])/g,
   replacement: VERSION_REPLACEMENT,
 };
 
 /**
- * Files to update (relative to project root)
+ * Current tracked runtime surfaces, rather than the removed merge/workflow
+ * paths used by the original updater. Historical plans and test fixtures are
+ * deliberately excluded. Adding a shipped stack workflow needs no list edit.
+ * @returns Existing repository-relative files governed by shared Node policy
  */
-const FILES_TO_UPDATE: readonly string[] = [
-  // This project's workflows
-  ".github/workflows/ci.yml",
-  ".github/workflows/quality.yml",
-  ".github/workflows/publish-to-npm.yml",
-
-  // TypeScript template workflows
-  "typescript/copy-overwrite/.github/workflows/quality.yml",
-  "typescript/copy-overwrite/.github/workflows/release.yml",
-  "typescript/copy-overwrite/.github/workflows/create-github-issue-on-failure.yml",
-  "typescript/copy-overwrite/.github/workflows/create-jira-issue-on-failure.yml",
-  "typescript/copy-overwrite/.github/workflows/create-sentry-issue-on-failure.yml",
-  "typescript/merge/package.json",
-
-  // Expo template workflows
-  "expo/copy-overwrite/.github/workflows/ci.yml",
-  "expo/copy-overwrite/.github/workflows/deploy.yml",
-  "expo/copy-overwrite/.github/workflows/build.yml",
-  "expo/copy-overwrite/.github/workflows/lighthouse.yml",
-
-  // NestJS template workflows
-  "nestjs/copy-overwrite/.github/workflows/ci.yml",
-  "nestjs/copy-overwrite/.github/workflows/deploy.yml",
-
-  // CDK template workflows
-  "cdk/copy-overwrite/workflows/ci.yml",
-
-  // npm-package template workflows
-  "npm-package/copy-overwrite/.github/workflows/publish-to-npm.yml",
-];
+function filesToUpdate(): readonly string[] {
+  return execFileSync("git", ["ls-files", "-z"], {
+    cwd: PROJECT_ROOT,
+    encoding: "utf8",
+  })
+    .split("\0")
+    .filter(
+      file =>
+        [
+          "package.json",
+          "package.lisa.json",
+          "typescript/copy-overwrite/.nvmrc",
+          "expo/create-only/eas.json",
+        ].includes(file) ||
+        /^(?:typescript|cdk|nestjs|npm-package|phaser|harper-fabric)\/package-lisa\/package\.lisa\.json$/.test(
+          file
+        ) ||
+        /^\.github\/workflows\/[^/]+\.ya?ml$/.test(file) ||
+        /^(?:all|typescript|cdk|expo|nestjs|npm-package|phaser|harper-fabric)\/(?:copy-overwrite|create-only)\/\.github\/workflows\/[^/]+\.ya?ml$/.test(
+          file
+        )
+    );
+}
 
 /**
  * Reads the Node.js version from .nvmrc
@@ -100,7 +101,7 @@ function readNvmrcVersion(): string {
 
   if (!/^\d+\.\d+\.\d+$/.test(content)) {
     throw new Error(
-      `Invalid version format in .nvmrc: "${content}". Expected semver (e.g., 22.21.1)`
+      `Invalid version format in .nvmrc: "${content}". Expected semver (e.g., 22.23.3)`
     );
   }
 
@@ -133,9 +134,16 @@ function updateFile(
   let content = originalContent;
   let totalChanges = 0;
 
-  const patterns = filePath.endsWith(".json")
-    ? [PACKAGE_JSON_PATTERN]
-    : WORKFLOW_PATTERNS;
+  if (filePath.endsWith(".nvmrc")) {
+    content = `${version}\n`;
+    totalChanges = Number(content !== originalContent);
+  }
+
+  const patterns = filePath.endsWith(".nvmrc")
+    ? []
+    : filePath.endsWith(".json")
+      ? [PACKAGE_JSON_PATTERN]
+      : WORKFLOW_PATTERNS;
 
   patterns.forEach(({ pattern, replacement }) => {
     const resolvedReplacement = replacement
@@ -179,7 +187,7 @@ function main(): void {
   let filesUpdated = 0;
   let totalChanges = 0;
 
-  FILES_TO_UPDATE.forEach(file => {
+  filesToUpdate().forEach(file => {
     const result = updateFile(file, version, majorVersion);
     if (result.updated) {
       filesUpdated++;
@@ -193,7 +201,7 @@ function main(): void {
 
   if (filesUpdated > 0) {
     console.log(
-      "\nRemember to commit these changes and regenerate package-lock.json if needed."
+      "\nRemember to commit these changes and refresh the repository lockfile if needed."
     );
   }
 }

package/typescript/copy-overwrite/.github/GITHUB_ACTIONS.md

@@ -68,7 +68,7 @@ Runs on every pull request to validate code quality:
 **Configuration**:
 ```yaml
 # In ci.yml, modify these inputs:
-node_version: '22.21.1'
+node_version: '22.23.3'
 package_manager: 'bun'
 skip_jobs: 'test,test:integration,test:e2e'  # Comma-separated list
 ```
@@ -610,7 +610,7 @@ release.yml and create the environment in **Settings** > **Environments** first
 ```yaml
 uses: ./.github/workflows/quality.yml
 with:
-  node_version: '22.21.1'
+  node_version: '22.23.3'
   package_manager: 'bun'  # or npm, yarn
 ```
 

package/typescript/copy-overwrite/.nvmrc

@@ -1 +1 @@
-22.21.1
+22.23.3

package/typescript/copy-overwrite/audit.ignore.config.json

@@ -137,12 +137,6 @@
       "id": "GHSA-j759-j44w-7fr8",
       "package": "@xmldom/xmldom",
       "reason": "XML node injection via unvalidated comment serialization. Transitive via expo > @expo/config-plugins > @expo/plist; only serializes developer-authored plist files at build/prebuild time, no runtime code path serializes attacker-controlled XML."
-    },
-    {
-      "id": "GHSA-vfj7-8cjw-p6xm",
-      "cve": "CVE-2026-93687",
-      "package": "braces",
-      "reason": "Stack-exhaustion DoS (uncaught RangeError) via deeply nested brace patterns; no patched release exists. Keep this exclusion only if no runtime code path passes attacker-supplied glob or brace patterns to braces/micromatch (dev tooling expanding repo-owned globs is unaffected)."
     }
   ]
 }

package/typescript/create-only/.github/workflows/ci.yml

@@ -31,7 +31,7 @@ jobs:
       # declared a break, and says NOT DETERMINED if this line goes missing
       # (CodySwannGT/lisa#3698).
       expected_workflow_contract_major: '1'
-      node_version: '22.21.1'
+      node_version: '22.23.3'
       package_manager: 'bun'
       skip_jobs: ''
     secrets:

package/typescript/create-only/.github/workflows/review-evidence.yml

@@ -190,7 +190,7 @@ jobs:
         uses: actions/setup-node@v6
         with:
           package-manager-cache: false
-          node-version: '22.21.1'
+          node-version: '22.23.3'
 
       - name: 🕵️ Refuse a required check that reviewed nothing
         id: review_evidence

package/typescript/create-only/.github/workflows/third-party-review-evidence.yml

@@ -90,7 +90,7 @@ jobs:
         uses: actions/setup-node@v6
         with:
           package-manager-cache: false
-          node-version: ${{ vars.NODE_VERSION || '22.21.1' }}
+          node-version: ${{ vars.NODE_VERSION || '22.23.3' }}
 
       - name: 🕵️ Prove review evidence, or a posted substitute, at this head
         env:

package/typescript/package-lisa/package.lisa.json

@@ -40,26 +40,26 @@
     },
     "resolutions": {
       "@isaacs/brace-expansion": "^5.0.1",
-      "axios": ">=1.18.0",
+      "axios": ">=1.20.0",
       "esbuild": ">=0.28.1",
       "handlebars": ">=4.7.9",
       "lodash": ">=4.18.1",
       "multer": ">=2.3.0",
-      "undici": "^6.28.0",
-      "vite": ">=8.0.16",
+      "undici": "^6.28.1",
+      "vite": "^8.3.2",
       "ws": ">=8.21.0",
       "form-data": ">=4.0.6",
       "systeminformation": ">=5.31.7"
     },
     "overrides": {
       "@isaacs/brace-expansion": "^5.0.1",
-      "axios": ">=1.18.0",
+      "axios": ">=1.20.0",
       "esbuild": ">=0.28.1",
       "handlebars": ">=4.7.9",
       "lodash": ">=4.18.1",
       "multer": ">=2.3.0",
-      "undici": "^6.28.0",
-      "vite": "^8.0.16",
+      "undici": "^6.28.1",
+      "vite": "^8.3.2",
       "ws": ">=8.21.0",
       "form-data": ">=4.0.6",
       "systeminformation": ">=5.31.7"
@@ -68,12 +68,12 @@
   "defaults": {
     "devDependencies": {
       "@ast-grep/cli": "^0.40.4",
-      "@vitest/coverage-v8": "^4.1.0",
+      "@vitest/coverage-v8": "^4.1.11",
       "eslint": "^9.39.0",
       "husky": "^8.0.0",
       "prettier": "^3.3.3",
       "typescript": "^6.0.3",
-      "vitest": "^4.1.0"
+      "vitest": "^4.1.11"
     },
     "scripts": {
       "build": "node scripts/lib/worktree-dependencies.mjs && tsc",
@@ -97,7 +97,7 @@
       "yarn": "please-use-bun",
       "pnpm": "please-use-bun",
       "bun": "1.3.8",
-      "node": "22.21.1"
+      "node": "22.23.3"
     }
   },
   "merge": {

package/ui/index.html

@@ -7525,7 +7525,7 @@
                 more: [
                   "Enforced configs: eslint.config.ts, tsconfig.json, vitest.config.ts, knip.json, commitlint, Prettier, ast-grep",
                   "Seeded once: ci.yml, claude*.yml, nightly improvement workflows, eslint.config.local.ts, thresholds files",
-                  "package.json governance: lint/test/typecheck scripts forced, security overrides forced, engines bun 1.3.8 / node 22.21.1 defaulted",
+                  "package.json governance: lint/test/typecheck scripts forced, security overrides forced, engines bun 1.3.8 / node 22.23.3 defaulted",
                 ],
               },
               {
@@ -9662,7 +9662,7 @@
                 key: "node_version",
                 label: "Node version",
                 desc: "",
-                control: txt("22.21.1", { mono: true }),
+                control: txt("22.23.3", { mono: true }),
               },
               {
                 key: "verify_enforced",