@codyswann/lisa 4.69.5 → 4.70.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (75) hide show
  1. package/all/copy-overwrite/scripts/lib/history-secret-git.mjs +212 -0
  2. package/all/copy-overwrite/scripts/lib/history-secret-policy.mjs +39 -0
  3. package/all/copy-overwrite/scripts/lib/history-secret-scanner.mjs +353 -0
  4. package/all/copy-overwrite/scripts/lisa-gates.mjs +26 -10
  5. package/all/copy-overwrite/scripts/lisa-history-secrets.mjs +122 -0
  6. package/all/copy-overwrite/scripts/lisa-rails-prepush.mjs +90 -0
  7. package/dist/core/lisa-owned-hash-ledger.d.ts.map +1 -1
  8. package/dist/core/lisa-owned-hash-ledger.js +46 -0
  9. package/dist/core/lisa-owned-hash-ledger.js.map +1 -1
  10. package/dist/core/nightly-e2e-guard-behavior-certificate.js +2 -2
  11. package/dist/core/upstream-evidence-manifest.d.ts.map +1 -1
  12. package/dist/core/upstream-evidence-manifest.js +28 -4
  13. package/dist/core/upstream-evidence-manifest.js.map +1 -1
  14. package/dist/migrations/ensure-required-history-secret-gate.d.ts +19 -0
  15. package/dist/migrations/ensure-required-history-secret-gate.d.ts.map +1 -0
  16. package/dist/migrations/ensure-required-history-secret-gate.js +94 -0
  17. package/dist/migrations/ensure-required-history-secret-gate.js.map +1 -0
  18. package/dist/migrations/index.d.ts +1 -0
  19. package/dist/migrations/index.d.ts.map +1 -1
  20. package/dist/migrations/index.js +3 -0
  21. package/dist/migrations/index.js.map +1 -1
  22. package/package.json +4 -4
  23. package/plugins/lisa/.claude-plugin/plugin.json +1 -1
  24. package/plugins/lisa/.codex-plugin/plugin.json +1 -1
  25. package/plugins/lisa-agy/plugin.json +1 -1
  26. package/plugins/lisa-cdk/.claude-plugin/plugin.json +1 -1
  27. package/plugins/lisa-cdk/.codex-plugin/plugin.json +1 -1
  28. package/plugins/lisa-cdk-agy/plugin.json +1 -1
  29. package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json +1 -1
  30. package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json +1 -1
  31. package/plugins/lisa-copilot/.claude-plugin/plugin.json +1 -1
  32. package/plugins/lisa-cursor/.claude-plugin/plugin.json +1 -1
  33. package/plugins/lisa-expo/.claude-plugin/plugin.json +1 -1
  34. package/plugins/lisa-expo/.codex-plugin/plugin.json +1 -1
  35. package/plugins/lisa-expo-agy/plugin.json +1 -1
  36. package/plugins/lisa-expo-copilot/.claude-plugin/plugin.json +1 -1
  37. package/plugins/lisa-expo-cursor/.claude-plugin/plugin.json +1 -1
  38. package/plugins/lisa-harper-fabric/.claude-plugin/plugin.json +1 -1
  39. package/plugins/lisa-harper-fabric/.codex-plugin/plugin.json +1 -1
  40. package/plugins/lisa-harper-fabric-agy/plugin.json +1 -1
  41. package/plugins/lisa-harper-fabric-copilot/.claude-plugin/plugin.json +1 -1
  42. package/plugins/lisa-harper-fabric-cursor/.claude-plugin/plugin.json +1 -1
  43. package/plugins/lisa-nestjs/.claude-plugin/plugin.json +1 -1
  44. package/plugins/lisa-nestjs/.codex-plugin/plugin.json +1 -1
  45. package/plugins/lisa-nestjs-agy/plugin.json +1 -1
  46. package/plugins/lisa-nestjs-copilot/.claude-plugin/plugin.json +1 -1
  47. package/plugins/lisa-nestjs-cursor/.claude-plugin/plugin.json +1 -1
  48. package/plugins/lisa-openclaw/.claude-plugin/plugin.json +1 -1
  49. package/plugins/lisa-openclaw/.codex-plugin/plugin.json +1 -1
  50. package/plugins/lisa-openclaw-agy/plugin.json +1 -1
  51. package/plugins/lisa-openclaw-copilot/.claude-plugin/plugin.json +1 -1
  52. package/plugins/lisa-openclaw-cursor/.claude-plugin/plugin.json +1 -1
  53. package/plugins/lisa-phaser/.claude-plugin/plugin.json +1 -1
  54. package/plugins/lisa-phaser/.codex-plugin/plugin.json +1 -1
  55. package/plugins/lisa-phaser-agy/plugin.json +1 -1
  56. package/plugins/lisa-phaser-copilot/.claude-plugin/plugin.json +1 -1
  57. package/plugins/lisa-phaser-cursor/.claude-plugin/plugin.json +1 -1
  58. package/plugins/lisa-rails/.claude-plugin/plugin.json +1 -1
  59. package/plugins/lisa-rails/.codex-plugin/plugin.json +1 -1
  60. package/plugins/lisa-rails-agy/plugin.json +1 -1
  61. package/plugins/lisa-rails-copilot/.claude-plugin/plugin.json +1 -1
  62. package/plugins/lisa-rails-cursor/.claude-plugin/plugin.json +1 -1
  63. package/plugins/lisa-typescript/.claude-plugin/plugin.json +1 -1
  64. package/plugins/lisa-typescript/.codex-plugin/plugin.json +1 -1
  65. package/plugins/lisa-typescript-agy/plugin.json +1 -1
  66. package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json +1 -1
  67. package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json +1 -1
  68. package/plugins/lisa-wiki/.claude-plugin/plugin.json +1 -1
  69. package/plugins/lisa-wiki/.codex-plugin/plugin.json +1 -1
  70. package/plugins/lisa-wiki-agy/plugin.json +1 -1
  71. package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json +1 -1
  72. package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json +1 -1
  73. package/rails/copy-overwrite/lefthook.yml +2 -1
  74. package/scripts/two-channel-couplings.json +31 -7
  75. package/typescript/copy-overwrite/.prettierignore +2 -0
@@ -13,6 +13,9 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
13
13
  "all/copy-overwrite/scripts/check-workflow-load-failures.mjs": "fddbb47321be74b6d0a1a5e2508e0e08268560d36126d834f9de3b91f1dff15c",
14
14
  "all/copy-overwrite/scripts/lib/bounded-spawn.mjs": "72e277ada531914d7bc51c3cb8dc67b8881aa817d96fa2f9f4d81668a3d3bbc1",
15
15
  "all/copy-overwrite/scripts/lib/gate-failure-diagnosis.mjs": "c565984dcd33bc5d26a126c25cec9a0734d87c0d9540479168a77f51b980809f",
16
+ "all/copy-overwrite/scripts/lib/history-secret-git.mjs": "102276aef106e07b2b385fe8f2d3b54a9d30381633a22e07d5d74a5db9ddf320",
17
+ "all/copy-overwrite/scripts/lib/history-secret-policy.mjs": "ca75ebbc45fca4c52400612ae818d231a28289b50a70f6cdee6feb51b144896f",
18
+ "all/copy-overwrite/scripts/lib/history-secret-scanner.mjs": "6afcb5ea42d8f9046a17e2253d4ddbefdf9025b150870afda23db77796f05f25",
16
19
  "all/copy-overwrite/scripts/lib/invoked-as-script.mjs": "fbb9b88fc85a3e22f21af39e1c17acf67ff83fc6b5a6cdc8081bde333c48faa7",
17
20
  "all/copy-overwrite/scripts/lib/kill-marks.mjs": "13388da7203b02ba84a845abd7885074bc8a495e215437a97122060d69367030",
18
21
  "all/copy-overwrite/scripts/lib/placeholder-expiry.mjs": "101e8e230618aa817c88534c3b22d069afa5d30fc8e742a681af2f5edff6f1af",
@@ -35,7 +38,8 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
35
38
  "all/copy-overwrite/scripts/lisa-enforcement-fallback.sh": "3ded18220361672c577baa73768ce1ab20260feaca7aef11f2c4d7d638e44a37",
36
39
  "all/copy-overwrite/scripts/lisa-environment-prepare.mjs": "94d1d76b5c25059d93ee888dc824d1621adc8e3dbe368904543b37a82259c4a3",
37
40
  "all/copy-overwrite/scripts/lisa-floor-collisions.mjs": "345832c63c85df32acbed9b183b06239fc10ccb1491bd11607b5840ac1d18573",
38
- "all/copy-overwrite/scripts/lisa-gates.mjs": "ae742fef65b049aea83029056456a1f3495a4d1aef83c1a959c6d9ec784f1477",
41
+ "all/copy-overwrite/scripts/lisa-gates.mjs": "f8cd07bdcdfc4066467635d86dc2a17337d4adacdd8829745482877dbd838f5e",
42
+ "all/copy-overwrite/scripts/lisa-history-secrets.mjs": "6887f865cee4cca397cac9f0efb366f2e5b9d4c68596f0306775709e354a85d2",
39
43
  "all/copy-overwrite/scripts/lisa-hooks/block-blind-automerge.sh": "b17d73c02245d64ae96ba4b9ec642f5a54a827accb1af292a4600a98e1a596f4",
40
44
  "all/copy-overwrite/scripts/lisa-hooks/block-direct-issue-create.sh": "ae15912552e4151f745f7df6901a935cdc8a7ee70a798793bff870362e4a62ba",
41
45
  "all/copy-overwrite/scripts/lisa-hooks/block-instruction-file-edits.sh": "73ac5af581d16992dd9cc273b4e2f6b55bd6a2629abe23b7658563cf433e082c",
@@ -50,6 +54,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
50
54
  "all/copy-overwrite/scripts/lisa-hooks/worktree-binding-guard.sh": "9b0d2d4690850a550ccc79a8c3bb1c0de1cca1f2d8a3550e2bed6daa7afcf7c4",
51
55
  "all/copy-overwrite/scripts/lisa-lint-staged-preflight.mjs": "2379d4fc5174ae4727997a0d88d43a0212941d91bdebaf790caadd20a8c59810",
52
56
  "all/copy-overwrite/scripts/lisa-postinstall.mjs": "2a826523a4f4fc58bfa0a24e2cf02504218dd68b4baffb346966dff705dea9b0",
57
+ "all/copy-overwrite/scripts/lisa-rails-prepush.mjs": "b963ce2647fd6daa95ceb5607691c5fb7d9f847a54d93a3d36718c5f7567905c",
53
58
  "all/copy-overwrite/scripts/lisa-reconcile-policy.mjs": "263860fba7fadae3c1096973eaf4f25dca1683ef2ce64279dea6845ac90faf6a",
54
59
  "all/copy-overwrite/scripts/lisa-run-gates.mjs": "7e04168dffa0caa5d8dfb127a9be462a81f4512e86a57455df5708154bfb19b0",
55
60
  "all/copy-overwrite/scripts/lisa-schema-validate.mjs": "f70ecd3712dd2ca77a8851c7505ce79f948a57e5a2e28f56c5d0ccd047712688",
@@ -1103,7 +1108,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
1103
1108
  "rails/copy-overwrite/ast-grep/rules/ruby/no-update-columns.yml": "5036436ebb4baa703987f3a818d0e33411daa07656611c334fb110316f98cd99",
1104
1109
  "rails/copy-overwrite/ast-grep/utils/.gitkeep": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1105
1110
  "rails/copy-overwrite/config/initializers/version.rb": "9304268500aada31d8bd158dca4274888d10db4e30f8dadd9bf23a01d67f2480",
1106
- "rails/copy-overwrite/lefthook.yml": "c0969fba8a2826155c4009cfaa8bcf986ebd0cc1513867fe7f9aa8077005edb3",
1111
+ "rails/copy-overwrite/lefthook.yml": "193bd1a14ffbd97a669922dd9d9dd5a8a849d07b4c09e4cdc4d73a36fa6ab176",
1107
1112
  "rails/copy-overwrite/scripts/check-threshold-ratchet.mjs": "5806cdc3c80757100f0cd24a8cbd3c581f9a381a925f9ebdd1f4d79881e5de2a",
1108
1113
  "rails/copy-overwrite/scripts/lisa-clean-git-env.sh": "d15af6f13eedbca41046070972380e69fc0af8f7d903aac12b8644389b9a0c91",
1109
1114
  "rails/copy-overwrite/scripts/lisa-scratch-run.sh": "ef3c38f8d1d2f48ba265e21f841310d25142228dac57b0a5742c7d902113ca9a",
@@ -1247,7 +1252,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
1247
1252
  "scripts/run-artifact-checks.mjs": "2992d673bb3c1ebfa50bda9ed323b8410afdab2ffc925eee6eab19fcab312a90",
1248
1253
  "scripts/setup-deploy-key.sh": "2bed19346810b7af18a5225fd463c4d553a7bcc7b2f11a21bd47b93e6b5e1719",
1249
1254
  "scripts/test-intent-routing.sh": "97b9dc86cbd805df8a7fdb8c99ffab9b8c5e751ba2e84c05420b2a124f80635d",
1250
- "scripts/two-channel-couplings.json": "d8e22c6970c604df7588d313fdf79ba7676fff01740e6151b6a5fc77391cae02",
1255
+ "scripts/two-channel-couplings.json": "ec4f8ed2fb9faecb88420b54bdb9a23d37303d4d458ef225171dc6f5cb27f637",
1251
1256
  "scripts/update-node-version.ts": "0059067c14001c2f7e75beb2628d1a46f935c7b01ce61871db71b6849ef62dca",
1252
1257
  "scripts/update-test-skill-paths.mjs": "e26a3ac716c33013e22bf5223a58457452f5af2038218a0e3a51c244eab5ddc9",
1253
1258
  "scripts/verify-health-agentic-built.mjs": "4b0d20b2c94390ff6f5af881fc50c5c225215a282891db0b3e3d84a7e6455367",
@@ -1279,7 +1284,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
1279
1284
  "typescript/copy-overwrite/.github/GITHUB_ACTIONS.md": "4cd22faec1ca477e34bf7f61640b7eb20329d097b19add57a9909f5905fd37ed",
1280
1285
  "typescript/copy-overwrite/.lintstagedrc.json": "058f6bb7ce5b734ba3e62774b1f769c94053c574f2b4db3e59515c325e49c0ef",
1281
1286
  "typescript/copy-overwrite/.nvmrc": "6d07ac247e81cd42c2c20abf8dfe504413d6b2422e4aba9b2c975a776f155921",
1282
- "typescript/copy-overwrite/.prettierignore": "e2538ae1b5ef5d64733c3d6c07292495ead71603dfca2b37fda4a9ed080deb9a",
1287
+ "typescript/copy-overwrite/.prettierignore": "dc5f2388b59cd594d3ac54884272b93a281b9fe0f34852797d6466d8db25e0a8",
1283
1288
  "typescript/copy-overwrite/.prettierrc.json": "a20621f79a064486fba53cc0ea3000a2ece3f312ff38495c6a6606a27d2a727c",
1284
1289
  "typescript/copy-overwrite/.versionrc": "96d51e3087892bb795788dbd0ca3e5ebe7b67252e58adae5bbc469eaf424af35",
1285
1290
  "typescript/copy-overwrite/.yamllint": "685de50b905e024ac8882cdf6443850e96a44744ac03366cae636ceb384dd4e0",
@@ -1439,6 +1444,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
1439
1444
  ".github/workflows/duplicate-versions.yml": true,
1440
1445
  ".github/workflows/environment-prepare.yml": true,
1441
1446
  ".github/workflows/gates.yml": true,
1447
+ ".github/workflows/history-secrets.yml": true,
1442
1448
  ".github/workflows/lifecycle-drift-sweep.yml": true,
1443
1449
  ".github/workflows/lifecycle-terminal-transition.yml": true,
1444
1450
  ".github/workflows/lighthouse.yml": true,
@@ -1498,6 +1504,9 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
1498
1504
  "all/copy-overwrite/scripts/check-workflow-load-failures.mjs": true,
1499
1505
  "all/copy-overwrite/scripts/lib/bounded-spawn.mjs": true,
1500
1506
  "all/copy-overwrite/scripts/lib/gate-failure-diagnosis.mjs": true,
1507
+ "all/copy-overwrite/scripts/lib/history-secret-git.mjs": true,
1508
+ "all/copy-overwrite/scripts/lib/history-secret-policy.mjs": true,
1509
+ "all/copy-overwrite/scripts/lib/history-secret-scanner.mjs": true,
1501
1510
  "all/copy-overwrite/scripts/lib/invoked-as-script.mjs": true,
1502
1511
  "all/copy-overwrite/scripts/lib/kill-marks.mjs": true,
1503
1512
  "all/copy-overwrite/scripts/lib/placeholder-expiry.mjs": true,
@@ -1521,6 +1530,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
1521
1530
  "all/copy-overwrite/scripts/lisa-environment-prepare.mjs": true,
1522
1531
  "all/copy-overwrite/scripts/lisa-floor-collisions.mjs": true,
1523
1532
  "all/copy-overwrite/scripts/lisa-gates.mjs": true,
1533
+ "all/copy-overwrite/scripts/lisa-history-secrets.mjs": true,
1524
1534
  "all/copy-overwrite/scripts/lisa-hooks/block-blind-automerge.sh": true,
1525
1535
  "all/copy-overwrite/scripts/lisa-hooks/block-direct-issue-create.sh": true,
1526
1536
  "all/copy-overwrite/scripts/lisa-hooks/block-instruction-file-edits.sh": true,
@@ -1535,6 +1545,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
1535
1545
  "all/copy-overwrite/scripts/lisa-hooks/worktree-binding-guard.sh": true,
1536
1546
  "all/copy-overwrite/scripts/lisa-lint-staged-preflight.mjs": true,
1537
1547
  "all/copy-overwrite/scripts/lisa-postinstall.mjs": true,
1548
+ "all/copy-overwrite/scripts/lisa-rails-prepush.mjs": true,
1538
1549
  "all/copy-overwrite/scripts/lisa-reconcile-policy.mjs": true,
1539
1550
  "all/copy-overwrite/scripts/lisa-run-gates.mjs": true,
1540
1551
  "all/copy-overwrite/scripts/lisa-schema-validate.mjs": true,
@@ -7979,6 +7990,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
7979
7990
  "src/migrations/ensure-playwright-dedicated-caller.ts": true,
7980
7991
  "src/migrations/ensure-push-default-safe.ts": true,
7981
7992
  "src/migrations/ensure-quality-caller-scopes.ts": true,
7993
+ "src/migrations/ensure-required-history-secret-gate.ts": true,
7982
7994
  "src/migrations/ensure-seeded-gates.ts": true,
7983
7995
  "src/migrations/ensure-sonar-excludes-lisa-harness.ts": true,
7984
7996
  "src/migrations/ensure-third-party-action-pins.ts": true,
@@ -8132,6 +8144,14 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
8132
8144
  "tests/fixtures/edit-time-pre-facade/typescript-format-on-edit.sh": true,
8133
8145
  "tests/fixtures/edit-time-pre-facade/typescript-lint-on-edit.sh": true,
8134
8146
  "tests/fixtures/edit-time-pre-facade/typescript-sg-scan-on-edit.sh": true,
8147
+ "tests/fixtures/git-history-secrets/errors.mjs": true,
8148
+ "tests/fixtures/git-history-secrets/graphs.mjs": true,
8149
+ "tests/fixtures/git-history-secrets/harness.mjs": true,
8150
+ "tests/fixtures/git-history-secrets/journey.mjs": true,
8151
+ "tests/fixtures/git-history-secrets/native-push.mjs": true,
8152
+ "tests/fixtures/git-history-secrets/package.mjs": true,
8153
+ "tests/fixtures/git-history-secrets/report-mode.mjs": true,
8154
+ "tests/fixtures/git-history-secrets/vendor-errors.mjs": true,
8135
8155
  "tests/fixtures/harness-parity-council/first-round-failed.json": true,
8136
8156
  "tests/fixtures/harness-parity-council/first-round-responded.json": true,
8137
8157
  "tests/fixtures/harness-parity-council/first-round-timed-out.json": true,
@@ -8335,6 +8355,8 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
8335
8355
  "tests/integration/gate-shipped-as-operator-surfaces.test.ts": true,
8336
8356
  "tests/integration/hardcoded-invocation-fixture.ts": true,
8337
8357
  "tests/integration/hardcoded-invocation-inventory.test.ts": true,
8358
+ "tests/integration/history-secret-bootstrap.test.ts": true,
8359
+ "tests/integration/history-secret-workflow.test.ts": true,
8338
8360
  "tests/integration/host-lint-gate-survives-apply.test.ts": true,
8339
8361
  "tests/integration/host-test-scripts-survive-apply.test.ts": true,
8340
8362
  "tests/integration/inventory-covers-shipped-artifacts.test.ts": true,
@@ -9135,6 +9157,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
9135
9157
  "tests/unit/migrations/ensure-playwright-dedicated-caller.test.ts": true,
9136
9158
  "tests/unit/migrations/ensure-push-default-safe.test.ts": true,
9137
9159
  "tests/unit/migrations/ensure-quality-caller-scopes.test.ts": true,
9160
+ "tests/unit/migrations/ensure-required-history-secret-gate.test.ts": true,
9138
9161
  "tests/unit/migrations/ensure-seeded-gates.test.ts": true,
9139
9162
  "tests/unit/migrations/ensure-sonar-excludes-lisa-harness.test.ts": true,
9140
9163
  "tests/unit/migrations/ensure-third-party-action-pins.test.ts": true,
@@ -9273,6 +9296,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
9273
9296
  "tests/unit/scripts/generate-two-channel-couplings.test.ts": true,
9274
9297
  "tests/unit/scripts/generated-artifact-merge-coverage.test.ts": true,
9275
9298
  "tests/unit/scripts/github-governance.test.ts": true,
9299
+ "tests/unit/scripts/history-secret-contract.test.ts": true,
9276
9300
  "tests/unit/scripts/install-claude-plugins-self.test.ts": true,
9277
9301
  "tests/unit/scripts/invoked-as-script.test.ts": true,
9278
9302
  "tests/unit/scripts/jira-cli-config-consumption.test.ts": true,