@codyswann/lisa 4.74.1 → 4.74.3

package/all/copy-overwrite/scripts/lib/npm-update-contract.mjs

@@ -8,7 +8,8 @@
  */
 import { required, keys } from "./npm-update-invariants.mjs";
 export { UpdaterError, required, keys } from "./npm-update-invariants.mjs";
-import { canonicalJson } from "../lisa-automation-provenance.mjs";
+// Preload dependencies must not execute the entry CLI before instrumentation.
+import { canonicalJson } from "./automation-provenance-contract.mjs";
 import { sha256 } from "./github-attestation-verifier.mjs";
 import {
   optionalLockFields,

package/all/copy-overwrite/scripts/lib/npm-update-gate-hooks.mjs

@@ -2,7 +2,8 @@
 // Do not edit directly — durable changes belong upstream in Lisa.
 
 /** Original hook transport distinguishes artifact audit from actual remote state. */
-import { canonicalJson } from "../lisa-automation-provenance.mjs";
+// Preload dependencies must not execute the entry CLI before instrumentation.
+import { canonicalJson } from "./automation-provenance-contract.mjs";
 import { required, OBJECT, keys } from "./npm-update-contract.mjs";
 import { sha256 } from "./github-attestation-verifier.mjs";
 export { managedTemplateMembers } from "./npm-update-helper-graph.mjs";

package/all/copy-overwrite/scripts/lib/npm-update-gh-grants.mjs

@@ -2,7 +2,8 @@
 // Do not edit directly — durable changes belong upstream in Lisa.
 
 /** Native successful responses grant only one exact canonical successor request. */
-import { canonicalJson } from "../lisa-automation-provenance.mjs";
+// Preload dependencies must not execute the entry CLI before instrumentation.
+import { canonicalJson } from "./automation-provenance-contract.mjs";
 import { required } from "./npm-update-contract.mjs";
 import {
   githubHierarchyArgs,

package/all/copy-overwrite/scripts/lib/npm-update-gh-requests.mjs

@@ -2,7 +2,8 @@
 // Do not edit directly — durable changes belong upstream in Lisa.
 
 /** Controller-derived literal GH requests narrow canonical parsing without replacing it. */
-import { canonicalJson } from "../lisa-automation-provenance.mjs";
+// Preload dependencies must not execute the entry CLI before instrumentation.
+import { canonicalJson } from "./automation-provenance-contract.mjs";
 import { required, keys } from "./npm-update-contract.mjs";
 import {
   githubIssueViewArgs,

package/all/copy-overwrite/scripts/lib/npm-update-orchestrator.mjs

@@ -22,7 +22,8 @@ import { fileURLToPath } from "node:url";
 import { required, keys } from "./npm-update-contract.mjs";
 import { readBytes, readJson, writeJson } from "./npm-update-process.mjs";
 import { sha256 } from "./github-attestation-verifier.mjs";
-import { canonicalJson } from "../lisa-automation-provenance.mjs";
+// Preload dependencies must not execute the entry CLI before instrumentation.
+import { canonicalJson } from "./automation-provenance-contract.mjs";
 import { controllerGraph, configuredRoute } from "./npm-update-gate-hooks.mjs";
 export { controllerGraph } from "./npm-update-gate-hooks.mjs";
 

package/all/copy-overwrite/scripts/lib/npm-update-process-core.mjs

@@ -26,7 +26,8 @@ import {
 import { join, resolve, dirname } from "node:path";
 import { tmpdir } from "node:os";
 import { randomBytes } from "node:crypto";
-import { canonicalJson } from "../lisa-automation-provenance.mjs";
+// Preload dependencies must not execute the entry CLI before instrumentation.
+import { canonicalJson } from "./automation-provenance-contract.mjs";
 import { required } from "./npm-update-contract.mjs";
 
 /** A fresh HOME and allowlist remove ambient Git/npm/issuer/write authority. */

package/all/copy-overwrite/scripts/lib/npm-update-worker-inspection.mjs

@@ -3,7 +3,8 @@
 
 /** Effective daemon observations must match all parent-selected namespace controls. @module npm-updater */
 import { required } from "./npm-update-contract.mjs";
-import { canonicalJson } from "../lisa-automation-provenance.mjs";
+// Preload dependencies must not execute the entry CLI before instrumentation.
+import { canonicalJson } from "./automation-provenance-contract.mjs";
 import { sha256 } from "./github-attestation-verifier.mjs";
 import { workerScratch } from "./npm-update-worker-policy.mjs";
 import {

package/all/copy-overwrite/scripts/lib/npm-update-worker-lifecycle.mjs

@@ -3,7 +3,8 @@
 
 /** Parent registry and real daemon exit/removal own every worker lifecycle verdict. @module npm-updater */
 import { required, UpdaterError } from "./npm-update-contract.mjs";
-import { canonicalJson } from "../lisa-automation-provenance.mjs";
+// Preload dependencies must not execute the entry CLI before instrumentation.
+import { canonicalJson } from "./automation-provenance-contract.mjs";
 import { readBytes, runProcess } from "./npm-update-process.mjs";
 import { sha256 } from "./github-attestation-verifier.mjs";
 import {

package/all/copy-overwrite/scripts/npm-updater-helper-graph.json

@@ -316,15 +316,14 @@
       "children": []
     },
     "lib/npm-update-contract.mjs": {
-      "sha256": "d5c4bf65603bb212e1e8f99a39c38d9c5eff103b1f1b28966e20557bb7f3e85d",
+      "sha256": "b41964538fbcccf9b47f88a4a9a78c00b0dcb1036e495ed0cf1fe9ad332b50ac",
       "staticImports": [
         "lib/automation-provenance-contract.mjs",
         "lib/github-attestation-verifier.mjs",
         "lib/npm-update-invariants.mjs",
         "lib/npm-update-object.mjs",
         "lib/npm-update-policy.mjs",
-        "lib/npm-update-rails-runtime-contract.mjs",
-        "lisa-automation-provenance.mjs"
+        "lib/npm-update-rails-runtime-contract.mjs"
       ],
       "dynamicImports": [],
       "children": []
@@ -398,13 +397,13 @@
       ]
     },
     "lib/npm-update-gate-hooks.mjs": {
-      "sha256": "cb235496feb720a7497bce027c137476086f172485020494744d85e6a0310a5b",
+      "sha256": "3ef6fe8fc458c6888afc511e6f246b78facbea8643a5abd572b8ba7303912c5c",
       "staticImports": [
+        "lib/automation-provenance-contract.mjs",
         "lib/github-attestation-verifier.mjs",
         "lib/npm-update-contract.mjs",
         "lib/npm-update-helper-graph.mjs",
-        "lib/npm-update-hook-installation.mjs",
-        "lisa-automation-provenance.mjs"
+        "lib/npm-update-hook-installation.mjs"
       ],
       "dynamicImports": [],
       "children": []
@@ -475,22 +474,22 @@
       "children": []
     },
     "lib/npm-update-gh-grants.mjs": {
-      "sha256": "62f81b0d6c669594356c8ad63f544d679407100f3fc46723985f286e4d033e50",
+      "sha256": "1ed12369027e4c25a54e25c119be6d1430baffae79370deba01e2b462e430c18",
       "staticImports": [
+        "lib/automation-provenance-contract.mjs",
         "lib/npm-update-contract.mjs",
-        "lisa-automation-provenance.mjs",
         "lisa-work-item.mjs"
       ],
       "dynamicImports": [],
       "children": []
     },
     "lib/npm-update-gh-requests.mjs": {
-      "sha256": "0bfd950560242d6b9ecb93f8d7162e68cb420b631e39d24663ccf803712a4c22",
+      "sha256": "54604122ee71c3597c01890499f0cba5872f7c4d807c437b5161f52f9b5133be",
       "staticImports": [
+        "lib/automation-provenance-contract.mjs",
         "lib/github-attestation-verifier.mjs",
         "lib/npm-update-contract.mjs",
         "lib/npm-update-gh-grants.mjs",
-        "lisa-automation-provenance.mjs",
         "lisa-work-item.mjs"
       ],
       "dynamicImports": [],
@@ -720,13 +719,13 @@
       "children": []
     },
     "lib/npm-update-orchestrator.mjs": {
-      "sha256": "e7756896d163affcfc0604e1e7d97c88b6633dcbd7b7982af4f05db4d13aec93",
+      "sha256": "10324c66b1ac6ea26a1f5da11dfba945d96999b11babf2d23125e7e27d626202",
       "staticImports": [
+        "lib/automation-provenance-contract.mjs",
         "lib/github-attestation-verifier.mjs",
         "lib/npm-update-contract.mjs",
         "lib/npm-update-gate-hooks.mjs",
         "lib/npm-update-process.mjs",
-        "lisa-automation-provenance.mjs",
         "node:crypto",
         "node:fs",
         "node:path",
@@ -776,11 +775,11 @@
       "children": []
     },
     "lib/npm-update-process-core.mjs": {
-      "sha256": "411b06976f7ff95a9471a23095c486b46f0add3aed2da5c2740edc98ead74af3",
+      "sha256": "5ee6e914ff039968ef327d00e66aaa2637fbca725150c11a331d2bcba6c60b64",
       "staticImports": [
+        "lib/automation-provenance-contract.mjs",
         "lib/npm-update-contract.mjs",
         "lib/npm-update-native-process.mjs",
-        "lisa-automation-provenance.mjs",
         "node:crypto",
         "node:fs",
         "node:os",
@@ -1039,20 +1038,21 @@
       "children": []
     },
     "lib/npm-update-worker-inspection.mjs": {
-      "sha256": "40f0bcfd4cc36498d16f66e24547705590ff79289c87bb9a1025d5bd6a30f2ee",
+      "sha256": "6e8fc022a5bff0ab650e7b5dde9279c8ddb1acb6dbe588db8fec67d558833fd2",
       "staticImports": [
+        "lib/automation-provenance-contract.mjs",
         "lib/github-attestation-verifier.mjs",
         "lib/npm-update-contract.mjs",
         "lib/npm-update-worker-environment.mjs",
-        "lib/npm-update-worker-policy.mjs",
-        "lisa-automation-provenance.mjs"
+        "lib/npm-update-worker-policy.mjs"
       ],
       "dynamicImports": [],
       "children": []
     },
     "lib/npm-update-worker-lifecycle.mjs": {
-      "sha256": "3b806089b16555ac1d512b91021b48a95952ae2d8d672b07034067261be58fa2",
+      "sha256": "70b53fcd7532d64d8c0605aa3347480eea8415b95e7004192f4c381d899a6292",
       "staticImports": [
+        "lib/automation-provenance-contract.mjs",
         "lib/github-attestation-verifier.mjs",
         "lib/npm-update-contract.mjs",
         "lib/npm-update-orchestrator.mjs",
@@ -1060,7 +1060,6 @@
         "lib/npm-update-worker-environment.mjs",
         "lib/npm-update-worker-inspection.mjs",
         "lib/npm-update-worker-policy.mjs",
-        "lisa-automation-provenance.mjs",
         "node:crypto",
         "node:fs"
       ],

package/cdk/create-only/.github/workflows/deploy.yml

@@ -20,6 +20,16 @@ on:
       - main
   workflow_dispatch:
     inputs:
+      rollback_commit:
+        description: 'Commit SHA to deploy for a deliberate rollback; leave empty for the run commit'
+        required: false
+        default: ''
+        type: string
+      force_stale_deploy:
+        description: "Allow a deliberate rollback to this run's old commit (may overwrite a newer deployment)"
+        required: false
+        default: false
+        type: boolean
       environment:
         description: 'Environment to deploy to'
         required: true
@@ -34,6 +44,53 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  # Re-runs retain their original SHA. Refuse an old run before release or deployment.
+  validate_deploy_commit:
+    name: 🚦 Validate Deployment Commit
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ github.event_name == 'workflow_dispatch' && inputs.rollback_commit || github.sha }}
+      # Check the actual checkout again on job-only retries; earlier jobs may not rerun.
+      - name: 🚦 Refuse stale deployment
+        shell: bash
+        env:
+          DEPLOY_BRANCH: ${{ github.event_name == 'workflow_dispatch' && inputs.environment || github.ref_name }}
+          DEPLOY_EVENT: ${{ github.event_name }}
+          FORCE_STALE_DEPLOY: ${{ github.event_name == 'workflow_dispatch' && inputs.force_stale_deploy == true }}
+        run: |
+          set -euo pipefail
+          DEPLOY_SHA=$(git rev-parse HEAD)
+          TARGET_REF="refs/heads/$DEPLOY_BRANCH"
+          if ! git check-ref-format "$TARGET_REF"; then
+            echo "::error::Invalid deployment branch: $DEPLOY_BRANCH. Choose an existing branch."
+            exit 1
+          fi
+          if ! REMOTE=$(git ls-remote --exit-code --heads origin "$TARGET_REF"); then
+            echo "::error::Cannot read the current tip of $DEPLOY_BRANCH. Nothing will be deployed. Check repository access and the branch name, then retry."
+            exit 1
+          fi
+          read -r TIP RESOLVED_REF <<< "$REMOTE"
+          if [[ ! "$TIP" =~ ^[0-9a-f]{40}$ ]] || [ "$RESOLVED_REF" != "$TARGET_REF" ]; then
+            echo "::error::Could not verify the current tip of $DEPLOY_BRANCH. Nothing will be deployed."
+            exit 1
+          fi
+          if [ "$DEPLOY_SHA" = "$TIP" ]; then
+            echo "✅ Deployment commit $DEPLOY_SHA is the current tip of $DEPLOY_BRANCH."
+            exit 0
+          fi
+          if [ "$DEPLOY_EVENT" = "workflow_dispatch" ] && [ "$FORCE_STALE_DEPLOY" = "true" ]; then
+            echo "::warning title=Deliberate stale deployment::Deploying non-tip commit $DEPLOY_SHA to $DEPLOY_BRANCH; the current branch tip is $TIP. force_stale_deploy was explicitly enabled."
+            echo "### ⚠️ Deliberate rollback: deploying $DEPLOY_SHA to $DEPLOY_BRANCH instead of current tip $TIP." >> "${GITHUB_STEP_SUMMARY:-/dev/stdout}"
+            exit 0
+          fi
+          echo "::error title=Stale deployment refused::This run would deploy $DEPLOY_SHA, but $DEPLOY_BRANCH is now at $TIP. This is probably a re-run of an old run and would roll the environment back. Re-run the latest deploy run for this branch, or start workflow_dispatch on the branch tip. For a deliberate rollback only, explicitly enable force_stale_deploy in a manual run."
+          exit 1
+
   # Environment setup
   determine_environment:
     name: 🌍 Determine Environment
@@ -93,7 +150,7 @@ jobs:
   pre_deploy_gates:
     name: 🚦 Pre-Deploy Gates
     uses: CodySwannGT/lisa/.github/workflows/gates.yml@main
-    needs: [determine_environment]
+    needs: [determine_environment, validate_deploy_commit]
     with:
       # Travels with the `uses:` line above — the two are one unit. Lisa's
       # reusable workflows are tracked at `@main`, so that file changes under

package/dist/core/lisa-owned-hash-ledger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lisa-owned-hash-ledger.d.ts","sourceRoot":"","sources":["../../src/core/lisa-owned-hash-ledger.ts"],"names":[],"mappings":"AACA,6EAA6E;AAE7E;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAC3C,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CA+/DjC,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,+BAA+B,EAAE,QAAQ,CACpD,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAk6DjC,CAAC"}
+{"version":3,"file":"lisa-owned-hash-ledger.d.ts","sourceRoot":"","sources":["../../src/core/lisa-owned-hash-ledger.ts"],"names":[],"mappings":"AACA,6EAA6E;AAE7E;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAC3C,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAwgEjC,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,+BAA+B,EAAE,QAAQ,CACpD,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CA26DjC,CAAC"}

package/dist/core/lisa-owned-hash-ledger.js

@@ -611,6 +611,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
     "scripts/lib/npm-update-contract.mjs": Object.freeze([
         "553f75ff705aa1c03d6480a377b530c4096e836e716846fbb8bed989fd32c732",
         "6905dd9d5747702ab502b66bcb38b6d4dcb30127f02466d29b3905f53c27981d",
+        "b41964538fbcccf9b47f88a4a9a78c00b0dcb1036e495ed0cf1fe9ad332b50ac",
         "c0d43613e4675bd3ec4585040d87a21821ec40b32739502d9124863f4e3e6ee0",
         "d5c4bf65603bb212e1e8f99a39c38d9c5eff103b1f1b28966e20557bb7f3e85d",
         "d8e7e94d7b33d0088ea01d32d659f00408487465f7d857a64daa1b09b16fcd8c",
@@ -636,6 +637,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "f01a20295de226bbf15c6fd2c3044525bbc7840508a84c1c1ec1e4445ebfeca5",
     ]),
     "scripts/lib/npm-update-gate-hooks.mjs": Object.freeze([
+        "3ef6fe8fc458c6888afc511e6f246b78facbea8643a5abd572b8ba7303912c5c",
         "676e5acac164284981cca96d4f414c3e336a69dcdee40c8f35232e0334fb4619",
         "cb235496feb720a7497bce027c137476086f172485020494744d85e6a0310a5b",
         "d08af0c2c920ee98b1973f82929739c475cbad0048f9253f6532fa5fdadf4359",
@@ -663,6 +665,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "d78a187dfeb31aa8f5e7ecb38b5902dd4e034d52dca1527ac115dc591de90997",
     ]),
     "scripts/lib/npm-update-gh-grants.mjs": Object.freeze([
+        "1ed12369027e4c25a54e25c119be6d1430baffae79370deba01e2b462e430c18",
         "39cdf37db1ceae3b104038c1e25735a7f805d04f2ab2a7001a853f633485718d",
         "4be8bcfa098b7f7f9cdfe6d7a1f110e5e4fb1e6181bd12d0b7f620f569293f09",
         "62f81b0d6c669594356c8ad63f544d679407100f3fc46723985f286e4d033e50",
@@ -670,6 +673,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
     "scripts/lib/npm-update-gh-requests.mjs": Object.freeze([
         "0bfd950560242d6b9ecb93f8d7162e68cb420b631e39d24663ccf803712a4c22",
         "384001f9c7910cd16a12aeae1d0fd69a18f589541c66625812f36cf0504e359d",
+        "54604122ee71c3597c01890499f0cba5872f7c4d807c437b5161f52f9b5133be",
         "851e92a7ac89561e1bd5cc962691722e5268c33141d5f31586e0b7a11f20141d",
     ]),
     "scripts/lib/npm-update-github.mjs": Object.freeze([
@@ -775,6 +779,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "b06f1bc632aeed73744fd6aa56e8f75da34c9d68fe9b6341188c60fc5fd1f25e",
     ]),
     "scripts/lib/npm-update-orchestrator.mjs": Object.freeze([
+        "10324c66b1ac6ea26a1f5da11dfba945d96999b11babf2d23125e7e27d626202",
         "3bf831d84eadaa4dc5a45b82167fc7cf7bb08515aa8741653f09de2d376d4b14",
         "e7756896d163affcfc0604e1e7d97c88b6633dcbd7b7982af4f05db4d13aec93",
     ]),
@@ -796,6 +801,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "411b06976f7ff95a9471a23095c486b46f0add3aed2da5c2740edc98ead74af3",
         "411d626bbce095871dd4598f542643504b04fe1cef7f04125a58628ed2067247",
         "5a34573de688e3173b907f1c6071fddbafbd6d33f798fa3147d233cfae4f95ea",
+        "5ee6e914ff039968ef327d00e66aaa2637fbca725150c11a331d2bcba6c60b64",
         "b693211a0dd83dde0788c464a8db2833e76371119f792854b94e1a1751e3b11c",
     ]),
     "scripts/lib/npm-update-process.mjs": Object.freeze([
@@ -886,10 +892,12 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
     "scripts/lib/npm-update-worker-inspection.mjs": Object.freeze([
         "3757c4b56ae0dc2248a663a8530baf5c7bddb0b93c19d596525ae167a2b9b07c",
         "40f0bcfd4cc36498d16f66e24547705590ff79289c87bb9a1025d5bd6a30f2ee",
+        "6e8fc022a5bff0ab650e7b5dde9279c8ddb1acb6dbe588db8fec67d558833fd2",
     ]),
     "scripts/lib/npm-update-worker-lifecycle.mjs": Object.freeze([
         "3b806089b16555ac1d512b91021b48a95952ae2d8d672b07034067261be58fa2",
         "3cd93f3fef88c10643d2e3efe318fc3fda00695b0c30bd1a846ae7fb366f3498",
+        "70b53fcd7532d64d8c0605aa3347480eea8415b95e7004192f4c381d899a6292",
     ]),
     "scripts/lib/npm-update-worker-policy.mjs": Object.freeze([
         "0a9fbd4956147c229eed2a6856064729f3102731163b2cb604e132b5b9871832",
@@ -1936,6 +1944,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
     "scripts/npm-updater-helper-graph.json": Object.freeze([
         "07349149a13f75cf3d517202317aaa1dbe6b06b8c46a45a1512097dca85157da",
         "09352aa145bc81c3c5dab282c61d084cbbe5af6242d7d12303ad764fbad53de2",
+        "0b8d6e6cd22d8a2edef3437c772a7ddf7afc7e7c61e73476323da11d0972a888",
         "15eceda920bf731bd12154af634b69d2f684d8672baff4d0f3e66f18b7a9806f",
         "1ef30003e2ae3e442ccdbe006202ba9374d9efd403961571060ce011f53ed642",
         "2124f4003b70a2123d4713c04ee2e30e4c4e186fdf9cfa8cc4ea7b5f602bdf62",
@@ -2652,6 +2661,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
     "scripts/lib/npm-update-contract.mjs": Object.freeze([
         "553f75ff705aa1c03d6480a377b530c4096e836e716846fbb8bed989fd32c732",
         "6905dd9d5747702ab502b66bcb38b6d4dcb30127f02466d29b3905f53c27981d",
+        "b41964538fbcccf9b47f88a4a9a78c00b0dcb1036e495ed0cf1fe9ad332b50ac",
         "c0d43613e4675bd3ec4585040d87a21821ec40b32739502d9124863f4e3e6ee0",
         "d5c4bf65603bb212e1e8f99a39c38d9c5eff103b1f1b28966e20557bb7f3e85d",
         "d8e7e94d7b33d0088ea01d32d659f00408487465f7d857a64daa1b09b16fcd8c",
@@ -2677,6 +2687,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "f01a20295de226bbf15c6fd2c3044525bbc7840508a84c1c1ec1e4445ebfeca5",
     ]),
     "scripts/lib/npm-update-gate-hooks.mjs": Object.freeze([
+        "3ef6fe8fc458c6888afc511e6f246b78facbea8643a5abd572b8ba7303912c5c",
         "676e5acac164284981cca96d4f414c3e336a69dcdee40c8f35232e0334fb4619",
         "cb235496feb720a7497bce027c137476086f172485020494744d85e6a0310a5b",
         "d08af0c2c920ee98b1973f82929739c475cbad0048f9253f6532fa5fdadf4359",
@@ -2704,6 +2715,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "d78a187dfeb31aa8f5e7ecb38b5902dd4e034d52dca1527ac115dc591de90997",
     ]),
     "scripts/lib/npm-update-gh-grants.mjs": Object.freeze([
+        "1ed12369027e4c25a54e25c119be6d1430baffae79370deba01e2b462e430c18",
         "39cdf37db1ceae3b104038c1e25735a7f805d04f2ab2a7001a853f633485718d",
         "4be8bcfa098b7f7f9cdfe6d7a1f110e5e4fb1e6181bd12d0b7f620f569293f09",
         "62f81b0d6c669594356c8ad63f544d679407100f3fc46723985f286e4d033e50",
@@ -2711,6 +2723,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
     "scripts/lib/npm-update-gh-requests.mjs": Object.freeze([
         "0bfd950560242d6b9ecb93f8d7162e68cb420b631e39d24663ccf803712a4c22",
         "384001f9c7910cd16a12aeae1d0fd69a18f589541c66625812f36cf0504e359d",
+        "54604122ee71c3597c01890499f0cba5872f7c4d807c437b5161f52f9b5133be",
         "851e92a7ac89561e1bd5cc962691722e5268c33141d5f31586e0b7a11f20141d",
     ]),
     "scripts/lib/npm-update-github.mjs": Object.freeze([
@@ -2816,6 +2829,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "b06f1bc632aeed73744fd6aa56e8f75da34c9d68fe9b6341188c60fc5fd1f25e",
     ]),
     "scripts/lib/npm-update-orchestrator.mjs": Object.freeze([
+        "10324c66b1ac6ea26a1f5da11dfba945d96999b11babf2d23125e7e27d626202",
         "3bf831d84eadaa4dc5a45b82167fc7cf7bb08515aa8741653f09de2d376d4b14",
         "e7756896d163affcfc0604e1e7d97c88b6633dcbd7b7982af4f05db4d13aec93",
     ]),
@@ -2837,6 +2851,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "411b06976f7ff95a9471a23095c486b46f0add3aed2da5c2740edc98ead74af3",
         "411d626bbce095871dd4598f542643504b04fe1cef7f04125a58628ed2067247",
         "5a34573de688e3173b907f1c6071fddbafbd6d33f798fa3147d233cfae4f95ea",
+        "5ee6e914ff039968ef327d00e66aaa2637fbca725150c11a331d2bcba6c60b64",
         "b693211a0dd83dde0788c464a8db2833e76371119f792854b94e1a1751e3b11c",
     ]),
     "scripts/lib/npm-update-process.mjs": Object.freeze([
@@ -2927,10 +2942,12 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
     "scripts/lib/npm-update-worker-inspection.mjs": Object.freeze([
         "3757c4b56ae0dc2248a663a8530baf5c7bddb0b93c19d596525ae167a2b9b07c",
         "40f0bcfd4cc36498d16f66e24547705590ff79289c87bb9a1025d5bd6a30f2ee",
+        "6e8fc022a5bff0ab650e7b5dde9279c8ddb1acb6dbe588db8fec67d558833fd2",
     ]),
     "scripts/lib/npm-update-worker-lifecycle.mjs": Object.freeze([
         "3b806089b16555ac1d512b91021b48a95952ae2d8d672b07034067261be58fa2",
         "3cd93f3fef88c10643d2e3efe318fc3fda00695b0c30bd1a846ae7fb366f3498",
+        "70b53fcd7532d64d8c0605aa3347480eea8415b95e7004192f4c381d899a6292",
     ]),
     "scripts/lib/npm-update-worker-policy.mjs": Object.freeze([
         "0a9fbd4956147c229eed2a6856064729f3102731163b2cb604e132b5b9871832",
@@ -3907,6 +3924,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
     "scripts/npm-updater-helper-graph.json": Object.freeze([
         "07349149a13f75cf3d517202317aaa1dbe6b06b8c46a45a1512097dca85157da",
         "09352aa145bc81c3c5dab282c61d084cbbe5af6242d7d12303ad764fbad53de2",
+        "0b8d6e6cd22d8a2edef3437c772a7ddf7afc7e7c61e73476323da11d0972a888",
         "15eceda920bf731bd12154af634b69d2f684d8672baff4d0f3e66f18b7a9806f",
         "1ef30003e2ae3e442ccdbe006202ba9374d9efd403961571060ce011f53ed642",
         "2124f4003b70a2123d4713c04ee2e30e4c4e186fdf9cfa8cc4ea7b5f602bdf62",