@codyswann/lisa 4.87.11 → 4.87.12

package/plugins/lisa-wiki-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.87.11",
+  "version": "4.87.12",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.87.11",
+  "version": "4.87.12",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.87.11",
+  "version": "4.87.12",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-devin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.87.11",
+  "version": "4.87.12",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-devin/.devin-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.87.11",
+  "version": "4.87.12",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/scripts/two-channel-couplings.json

@@ -122,7 +122,7 @@
     "workflows": 26,
     "steps": 823,
     "couplings": 40,
-    "inventory": 207
+    "inventory": 208
   },
   "counts": {
     "package-backed": 11,

package/typescript/copy-overwrite/.prettierignore

@@ -75,6 +75,7 @@ scripts/check-skipped-required-checks.mjs
 scripts/check-state-classification.mjs
 scripts/check-third-party-action-pins.mjs
 scripts/check-third-party-review-evidence.mjs
+scripts/review-evidence-event.mjs
 scripts/check-threshold-ratchet.mjs
 scripts/check-verification-coverage.mjs
 scripts/check-workflow-load-failures.mjs

package/typescript/copy-overwrite/scripts/check-skipped-required-checks.mjs

@@ -1033,9 +1033,48 @@ export function loadDeclaration(rootDir) {
   assertEnforcementMode(declaration);
   assertSkipJobDeclarations(declaration.skip_job_declarations);
   assertEvidenceBearingChecks(declaration.evidence_bearing_checks ?? {});
+  registrationContexts(declaration, {
+    contexts: declaration.required_contexts,
+  });
   return declaration;
 }
 
+/**
+ * Validate reasoned registration deferrals against the set actually judged.
+ * This only removes absence/registration observations. GitHub still requires
+ * each deferred check to pass; evidence-bearing checks can never be deferred.
+ * @param {object} declaration - Reviewed repository declaration.
+ * @param {{contexts: string[]}} requiredSet - Selected base branch or union.
+ * @returns {string[]} Contexts whose registration must still be observed.
+ */
+export function registrationContexts(declaration, requiredSet) {
+  const deferred = declaration.registration_deferred;
+  if (deferred === undefined) return requiredSet.contexts;
+  if (
+    deferred === null ||
+    typeof deferred !== "object" ||
+    Array.isArray(deferred)
+  )
+    throw new Error(
+      "check-skipped-required-checks: `registration_deferred` must be an object mapping required check names to non-empty reasons."
+    );
+  for (const [name, reason] of Object.entries(deferred)) {
+    if (typeof reason !== "string" || reason.trim() === "")
+      throw new Error(
+        `check-skipped-required-checks: registration_deferred entry ${JSON.stringify(name)} needs a non-empty reason.`
+      );
+    if (!requiredSet.contexts.includes(name))
+      throw new Error(
+        `check-skipped-required-checks: registration_deferred entry ${JSON.stringify(name)} is not in the selected required set. Refusing to judge this declaration.`
+      );
+    if (Object.hasOwn(declaration.evidence_bearing_checks ?? {}, name))
+      throw new Error(
+        `check-skipped-required-checks: registration_deferred entry ${JSON.stringify(name)} is evidence-bearing. Review evidence must still be waited for and judged.`
+      );
+  }
+  return requiredSet.contexts.filter(name => !Object.hasOwn(deferred, name));
+}
+
 /**
  * Refuses a declaration that omits one of the guard's load-bearing snapshots.
  *
@@ -1781,7 +1820,7 @@ export function evaluateAbsentRequiredChecks(
       declaration,
       options.base ?? { base: null, source: null }
     );
-  const required = requiredSet.contexts;
+  const required = registrationContexts(declaration, requiredSet);
   const judgedFor =
     requiredSet.source === "branch"
       ? ` Judged against the contexts required on base \`${requiredSet.base}\`.`
@@ -4498,7 +4537,7 @@ export function fetchSettledChecks(declaration, pr, repo, options = {}) {
     selectRequiredContexts(declaration, { base: null, source: null });
   const selectSet = options.requiredSetFor ?? (() => defaultRequiredSet);
   const missing = observed =>
-    observed.requiredSet.contexts.filter(
+    registrationContexts(declaration, observed.requiredSet).filter(
       name => !observed.checks.some(check => check.name === name)
     );
   // A substitute is useful only at the head it was actually read for. Pending
@@ -4522,6 +4561,7 @@ export function fetchSettledChecks(declaration, pr, repo, options = {}) {
     const before = initial?.headSha === undefined ? observe(pr, repo) : initial;
     initial = undefined;
     const beforeSet = selectSet(before);
+    registrationContexts(declaration, beforeSet);
     if (before.headSha === undefined) {
       return {
         checks: [],
@@ -4536,6 +4576,7 @@ export function fetchSettledChecks(declaration, pr, repo, options = {}) {
     const checks = read(pr, repo, before.headSha);
     const after = observe(pr, repo);
     const afterSet = selectSet(after);
+    registrationContexts(declaration, afterSet);
     return {
       checks,
       headSha: before.headSha,
@@ -4571,7 +4612,12 @@ export function fetchSettledChecks(declaration, pr, repo, options = {}) {
   }
   const elapsedSeconds = Math.max(0, clock() - started) / 1000;
   const unregistered = missing(observed);
-  const total = observed.requiredSet.contexts.length;
+  const total = registrationContexts(declaration, observed.requiredSet).length;
+  const deferred = Object.keys(declaration.registration_deferred ?? {});
+  const deferralNote =
+    deferred.length === 0
+      ? ""
+      : ` (${deferred.length} deferred by declaration: ${deferred.join(", ")})`;
   const present = total - unregistered.length;
   const expired = unregistered.length > 0;
   const settled = checksSettled(declaration, observed.checks);
@@ -4589,9 +4635,10 @@ export function fetchSettledChecks(declaration, pr, repo, options = {}) {
     total,
     missing: unregistered,
     expired,
+    ...(deferred.length === 0 ? {} : { deferred }),
     line: expired
-      ? `Required registration wait EXPIRED: the gate stopped waiting after ${elapsedSeconds}s; ${present} of ${total} required contexts observed; missing: ${unregistered.join(", ")}. RE-RUN this job before treating this as a finding about the change.`
-      : `Required registration settled after ${elapsedSeconds}s; ${present} of ${total} required contexts observed.`,
+      ? `Required registration wait EXPIRED: the gate stopped waiting after ${elapsedSeconds}s; ${present} of ${total} required contexts observed${deferralNote}; missing: ${unregistered.join(", ")}. RE-RUN this job before treating this as a finding about the change.`
+      : `Required registration settled after ${elapsedSeconds}s; ${present} of ${total} required contexts observed${deferralNote}.`,
   };
   return {
     checks: observed.checks,

package/typescript/create-only/.github/required-checks.json

@@ -1,5 +1,6 @@
 {
   "_readme": [
+    "Optional `registration_deferred` (#4622) maps exact required context names to non-empty reasons when those jobs register after the bounded five-minute wait introduced by #4527. The registration/absence probe excludes only these names; GitHub still requires them to pass before merge. Entries outside the selected base branch's required set, malformed reasons, and evidence-bearing checks are refused. Omit the key for unchanged behavior. A slow reviewer is never deferred: the review-evidence workflow re-evaluates on its terminal check_run or status event, using default-branch code and a fresh current-head read. This workflow is create-only; existing hosts must adopt the event job explicitly to receive the wake-up behavior.",
     "Two REVIEWED SNAPSHOTS that scripts/check-skipped-required-checks.mjs makes police each other.",
     "Neither is derivable from this repository: `required_contexts` lives in a GitHub ruleset that humans edit in an admin console, and the skip_jobs token -> job name map lives in Lisa's quality.yml, which is not vendored here.",
     "Why it matters: GitHub counts a SKIPPED required status check as SATISFIED. A job named in `skip_jobs` still reports green against its required context having run zero steps, so the merge gate can never be red and therefore can never block anything.",

package/typescript/create-only/.github/workflows/review-evidence.yml

@@ -122,6 +122,9 @@ name: 🕵️ Review Evidence
 on:
   pull_request:
     types: [opened, synchronize, reopened, ready_for_review]
+  check_run:
+    types: [completed]
+  status:
   workflow_dispatch:
     inputs:
       pr:
@@ -147,11 +150,50 @@ permissions:
   pull-requests: read
 
 concurrency:
-  group: review-evidence-${{ github.event.pull_request.number || inputs.pr || github.ref }}
+  group: review-evidence-${{ github.event_name }}-${{ github.event.pull_request.number || inputs.pr || github.event.check_run.head_sha || github.event.sha || github.ref }}-${{ github.event.check_run.name || github.event.context }}-${{ github.event.check_run.app.id || github.event.creator.id }}
   cancel-in-progress: true
 
 jobs:
+  # Reviewer completion can outlast the bounded pull_request run. Dispatch the
+  # normal gate; the event is a wake-up and never proof that a review occurred.
+  # check_run requires this file on the default branch and GitHub suppresses
+  # Actions-created suites/heads; status supports legacy reviewer statuses.
+  recheck:
+    name: 🕵️ Re-evaluate a completed reviewer
+    if: github.event_name == 'check_run' || (github.event_name == 'status' && github.event.state != 'pending')
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    permissions:
+      contents: read
+      checks: read
+      statuses: read
+      pull-requests: read
+      actions: write
+    steps:
+      # No head ref: never execute PR files with the dispatch token.
+      - name: 📥 Checkout default branch
+        uses: actions/checkout@v6
+        with:
+          persist-credentials: false
+      - name: 🔧 Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          package-manager-cache: false
+          node-version: ${{ vars.NODE_VERSION || '24.21.0' }}
+      - name: 🕵️ Dispatch the gate for current declared reviewer heads
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -eu
+          script=scripts/review-evidence-event.mjs
+          if [ ! -f "$script" ]; then
+            echo "::error::Reviewer event resolver missing; no gate was dispatched."
+            exit 1
+          fi
+          node "$script" --dispatch
+
   vacuity:
+    if: github.event_name != 'check_run' && github.event_name != 'status'
     # DECLARATIVE, NOT A QUESTION (#3917). This was `🕵️ Did the required review
     # checks do any work?`, and an unsatisfied verdict exits non-zero, so the
     # row rendered `Did the required review checks do any work?  fail`. A yes/no