@codyswann/lisa 1.48.0 → 1.49.0

package/plugins/lisa-cdk/hooks/track-plan-sessions.sh

@@ -0,0 +1,164 @@
+#!/usr/bin/env bash
+#
+# track-plan-sessions.sh - Tracks which sessions work on each plan file
+#
+# Triggered by two hooks:
+#   1. PostToolUse (Write|Edit) - Detects plan file writes via absolute path comparison,
+#      stamps session ID into the plan's ## Sessions table, and saves a session-specific
+#      marker file so subsequent UserPromptSubmit events can reliably find the active plan.
+#   2. UserPromptSubmit - Finds the active plan file by checking for a session-specific
+#      marker file first (set by PostToolUse), falling back to the most recently CREATED
+#      .md file in plans/ (ls -tU on macOS sorts by birth time). This avoids the mtime bug
+#      where another plan file's modification time (e.g., from a hook writing a session ID
+#      to it, or format-on-edit touching it) could cause the wrong file to appear "newest."
+#
+# Marker files: $PLANS_DIR/.active-plan-<session-id> contain the absolute path to the
+# active plan file. Stale markers (>24h) are cleaned up on each invocation.
+#
+# Dedup: Session ID dedup is scoped to the ## Sessions section only, not the entire
+# file. This prevents false positives when session IDs appear elsewhere in plan content
+# (e.g., scratchpad directory paths like /private/tmp/claude-501/.../SESSION_ID/...).
+#
+# Debug logging: All key decisions are logged to $PLANS_DIR/.track-plan-debug.log for
+# diagnostics if session IDs land in the wrong plan file.
+#
+# Input (via stdin): JSON with session_id, permission_mode, hook_event_name, etc.
+#
+
+set -euo pipefail
+
+INPUT=$(cat)
+
+SESSION_ID=$(echo "$INPUT" | jq -r '.session_id // empty')
+PERMISSION_MODE=$(echo "$INPUT" | jq -r '.permission_mode // "default"')
+HOOK_EVENT=$(echo "$INPUT" | jq -r '.hook_event_name // empty')
+
+# Temporarily disable this hook
+exit 0
+
+# Session ID is required
+if [[ -z "$SESSION_ID" ]]; then
+  exit 0
+fi
+
+# Resolve plans directory from settings (default ./plans)
+PLANS_DIR="./plans"
+SETTINGS_FILE="${CLAUDE_PROJECT_DIR:-.}/.claude/settings.json"
+if [[ -f "$SETTINGS_FILE" ]]; then
+  CONFIGURED_DIR=$(jq -r '.plansDirectory // empty' "$SETTINGS_FILE")
+  if [[ -n "$CONFIGURED_DIR" ]]; then
+    PLANS_DIR="$CONFIGURED_DIR"
+  fi
+fi
+
+# Debug logging
+DEBUG_LOG="$PLANS_DIR/.track-plan-debug.log"
+
+log_debug() {
+  printf '[%s] [%s] [%s] %s\n' \
+    "$(date -u +"%Y-%m-%dT%H:%M:%SZ")" \
+    "$SESSION_ID" \
+    "$HOOK_EVENT" \
+    "$1" >> "$DEBUG_LOG" 2>/dev/null || true
+}
+
+# Session-specific marker file for reliable active-plan detection
+MARKER_FILE="$PLANS_DIR/.active-plan-${SESSION_ID}"
+
+# Clean stale marker files older than 24h
+find "$PLANS_DIR" -name ".active-plan-*" -mmin +1440 -delete 2>/dev/null || true
+
+PLAN_FILE=""
+RESOLUTION_METHOD=""
+
+if [[ "$HOOK_EVENT" == "PostToolUse" ]]; then
+  # Trigger A: Plan file was written/edited
+  FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty')
+
+  if [[ -z "$FILE_PATH" ]]; then
+    log_debug "PostToolUse: no file_path in tool_input, exiting"
+    exit 0
+  fi
+
+  # Resolve PLANS_DIR to absolute path for comparison
+  ABS_PLANS_DIR=$(cd "$PLANS_DIR" 2>/dev/null && pwd)
+
+  if [[ -z "$ABS_PLANS_DIR" ]]; then
+    log_debug "PostToolUse: could not resolve PLANS_DIR=$PLANS_DIR to absolute path, exiting"
+    exit 0
+  fi
+
+  # Check if the written file is in the plans directory
+  if [[ "$FILE_PATH" == "$ABS_PLANS_DIR"/* ]]; then
+    PLAN_FILE="$FILE_PATH"
+    RESOLUTION_METHOD="PostToolUse-direct"
+    log_debug "PostToolUse: matched plan file=$PLAN_FILE"
+
+    # Save marker so UserPromptSubmit can find this plan reliably
+    echo "$PLAN_FILE" > "$MARKER_FILE"
+    log_debug "PostToolUse: saved marker file=$MARKER_FILE"
+  else
+    log_debug "PostToolUse: file_path=$FILE_PATH not in plans dir=$ABS_PLANS_DIR, exiting"
+    exit 0
+  fi
+
+elif [[ "$HOOK_EVENT" == "UserPromptSubmit" ]]; then
+  # Trigger B: Find the active plan file
+  # Priority 1: Session-specific marker file (reliable — set by PostToolUse when plan was written)
+  if [[ -f "$MARKER_FILE" ]]; then
+    PLAN_FILE=$(cat "$MARKER_FILE")
+    RESOLUTION_METHOD="marker-file"
+    log_debug "UserPromptSubmit: resolved via marker file=$PLAN_FILE"
+  else
+    # Priority 2: Most recently CREATED file (ls -tU on macOS sorts by birth time)
+    PLAN_FILE=$(ls -tU "$PLANS_DIR"/*.md 2>/dev/null | head -1)
+    RESOLUTION_METHOD="fallback-ls-tU"
+    log_debug "UserPromptSubmit: no marker file, fallback ls -tU resolved=$PLAN_FILE"
+  fi
+
+  if [[ -z "$PLAN_FILE" || ! -f "$PLAN_FILE" ]]; then
+    log_debug "UserPromptSubmit: no valid plan file found, exiting"
+    exit 0
+  fi
+else
+  exit 0
+fi
+
+# Verify the plan file exists
+if [[ ! -f "$PLAN_FILE" ]]; then
+  log_debug "plan file=$PLAN_FILE does not exist, exiting"
+  exit 0
+fi
+
+# Check if session ID already exists in the ## Sessions section (dedup)
+# Only search within the Sessions section to avoid false positives from session IDs
+# appearing in plan content (e.g., scratchpad paths contain session IDs)
+if sed -n '/^## Sessions$/,$p' "$PLAN_FILE" 2>/dev/null | grep -qF "$SESSION_ID"; then
+  log_debug "dedup: session ID already in $PLAN_FILE sessions section (resolved via $RESOLUTION_METHOD), skipping write"
+  exit 0
+fi
+
+# Determine phase from permission_mode
+PHASE=$( [[ "$PERMISSION_MODE" == "plan" ]] && echo "plan" || echo "implement" )
+TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+
+# Check if ## Sessions section exists
+if grep -q "^## Sessions" "$PLAN_FILE" 2>/dev/null; then
+  # Append row to existing table
+  printf '| %s | %s | %s |\n' "$SESSION_ID" "$TIMESTAMP" "$PHASE" >> "$PLAN_FILE"
+else
+  # Create ## Sessions section at end of file
+  {
+    echo ""
+    echo "## Sessions"
+    echo ""
+    echo "<!-- Auto-maintained by track-plan-sessions.sh -->"
+    echo "| Session ID | First Seen | Phase |"
+    echo "|------------|------------|-------|"
+    printf '| %s | %s | %s |\n' "$SESSION_ID" "$TIMESTAMP" "$PHASE"
+  } >> "$PLAN_FILE"
+fi
+
+log_debug "wrote session to $PLAN_FILE (resolved via $RESOLUTION_METHOD, phase=$PHASE)"
+
+exit 0

package/plugins/lisa-cdk/hooks/verify-completion.sh

@@ -0,0 +1,77 @@
+#!/bin/bash
+# This file is managed by Lisa.
+# Do not edit directly — changes will be overwritten on the next `lisa` run.
+# =============================================================================
+# Verification Level Enforcement Hook (Stop)
+# =============================================================================
+# Checks whether the agent declared a verification level when the session
+# involved code changes. Does NOT re-run lint/typecheck/tests (husky does that).
+#
+# Logic:
+#   1. If no Write/Edit tools were used → exit 0 (research/conversation only)
+#   2. If code was written → check last assistant message for verification level
+#   3. If verification level found → exit 0
+#   4. If missing and stop_hook_active is false → block with instructions
+#   5. If missing and stop_hook_active is true → exit 0 (avoid infinite loops)
+#
+# @see .claude/rules/verfication.md "Self-Correction Loop" section
+# =============================================================================
+
+# Read JSON input from stdin
+INPUT=$(cat)
+
+# Extract transcript path
+TRANSCRIPT_PATH=$(echo "$INPUT" | grep -o '"transcript_path"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/.*: *"//' | sed 's/"$//')
+
+# Exit silently if no transcript available
+if [ -z "$TRANSCRIPT_PATH" ] || [ ! -f "$TRANSCRIPT_PATH" ]; then
+    exit 0
+fi
+
+# Check if Write or Edit tools were used during the session
+# Look for tool_use entries with Write or Edit tool names
+if ! grep -q '"tool_name"[[:space:]]*:[[:space:]]*"\(Write\|Edit\|NotebookEdit\)"' "$TRANSCRIPT_PATH" 2>/dev/null; then
+    # No code changes — this was research/conversation, allow stop
+    exit 0
+fi
+
+# Code was written — check if a verification level was declared
+# Extract the last assistant message
+LAST_ASSISTANT=$(awk '/"type"[[:space:]]*:[[:space:]]*"assistant"/{line=$0} END{if(line) print line}' "$TRANSCRIPT_PATH" 2>/dev/null)
+
+if [ -z "$LAST_ASSISTANT" ]; then
+    exit 0
+fi
+
+# Extract the text content from the assistant message
+RESPONSE_TEXT=""
+if command -v jq >/dev/null 2>&1; then
+    RESPONSE_TEXT=$(echo "$LAST_ASSISTANT" | jq -r '.message.content[] | select(.type == "text") | .text' 2>/dev/null)
+else
+    RESPONSE_TEXT=$(echo "$LAST_ASSISTANT" | grep -o '"text"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/.*: *"//' | sed 's/"$//')
+fi
+
+if [ -z "$RESPONSE_TEXT" ]; then
+    exit 0
+fi
+
+# Check for verification level keywords (case-insensitive)
+if echo "$RESPONSE_TEXT" | grep -qi "FULLY VERIFIED\|PARTIALLY VERIFIED\|UNVERIFIED"; then
+    exit 0
+fi
+
+# Check if this is a retry (stop_hook_active flag)
+# The stop_hook_active field is set to true when a Stop hook has already blocked once
+STOP_HOOK_ACTIVE=$(echo "$INPUT" | grep -o '"stop_hook_active"[[:space:]]*:[[:space:]]*true' || echo "")
+
+if [ -n "$STOP_HOOK_ACTIVE" ]; then
+    # Already blocked once — allow stop to prevent infinite loop
+    exit 0
+fi
+
+# No verification level declared after code changes — block
+cat << 'EOF'
+{"decision":"block","reason":"You changed code but didn't declare a verification level. Run your verification, then declare FULLY VERIFIED, PARTIALLY VERIFIED, or UNVERIFIED with evidence. See .claude/rules/verfication.md for requirements."}
+EOF
+
+exit 0

package/plugins/lisa-cdk/rules/coding-philosophy.md

@@ -0,0 +1,428 @@
+# Coding Philosophy
+
+This rule enforces the core coding philosophy: **immutability**, **predictable structure**, **functional transformations**, **test-driven development**, **clean deletion**, and **simplicity**.
+
+## Guiding Principles: YAGNI + SOLID + DRY + KISS
+
+Follow these software engineering principles, **deferring to Occam's Razor/KISS whenever principles conflict**:
+
+### KISS (Keep It Simple, Stupid) - The Tiebreaker
+
+When principles conflict, **always choose the simpler solution**.
+
+```typescript
+// KISS: Simple direct approach
+const isAdmin = user.role === "admin";
+
+// Over-engineered: Abstraction without value
+const isAdmin = RoleChecker.getInstance().checkRole(user, RoleTypes.ADMIN);
+```
+
+### YAGNI (You Ain't Gonna Need It)
+
+Don't build features, abstractions, or flexibility you don't need **right now**.
+
+```typescript
+// Correct: Solve today's problem
+const formatDate = (date: Date) => date.toISOString().split("T")[0];
+
+// Wrong: Building for hypothetical future needs
+const formatDate = (date: Date, format?: string, locale?: string, timezone?: string) => {
+  // 50 lines handling cases that may never be used
+};
+```
+
+### DRY (Don't Repeat Yourself) - With KISS Constraint
+
+Extract duplication only when:
+1. The same logic appears **3+ times**
+2. The abstraction is **simpler** than the duplication
+3. The extracted code has a **clear single purpose**
+
+### SOLID Principles - Applied Pragmatically
+
+| Principle                 | Apply When                                    | Skip When                               |
+| ------------------------- | --------------------------------------------- | --------------------------------------- |
+| **S**ingle Responsibility | Function does 2+ unrelated things             | Splitting adds complexity               |
+| **O**pen/Closed           | Extension points have clear use cases         | No foreseeable extensions               |
+| **L**iskov Substitution   | Using inheritance hierarchies                 | Using composition (preferred)           |
+| **I**nterface Segregation | Consumers need different subsets              | Interface is already small              |
+| **D**ependency Inversion  | Testing requires mocking external services    | Direct dependency is simpler            |
+
+### Decision Framework
+
+When unsure, ask in order:
+1. **Do I need this now?** (YAGNI) - If no, don't build it
+2. **Is there a simpler way?** (KISS) - Choose the simpler option
+3. **Am I repeating myself 3+ times?** (DRY) - Extract if the abstraction is simpler
+4. **Does this function do one thing?** (SOLID-SRP) - Split only if clearer
+
+---
+
+## Core Principles
+
+### 1. Immutability First
+
+Never mutate data. Always create new references.
+
+```typescript
+// Correct - spread creates new object
+const updated = { ...user, name: "New Name" };
+
+// Incorrect - mutation
+user.name = "New Name";
+```
+
+### 2. Function Structure Ordering
+
+All functions, hooks, and components follow a strict ordering:
+
+```text
+1. Variable definitions and derived state (const, useState, useMemo, useCallback)
+2. Side effects (useEffect, function calls with no return value)
+3. Return statement
+```
+
+### 3. Functional Transformations
+
+Use `map`, `filter`, `reduce` instead of imperative loops and mutations.
+
+```typescript
+// Correct - functional transformation
+const names = users.map(u => u.name);
+
+// Incorrect - imperative mutation
+const names = [];
+users.forEach(u => names.push(u.name));
+```
+
+### 4. Test-Driven Development (TDD)
+
+**Always write failing tests before implementation code.** This is mandatory, not optional.
+
+```text
+TDD Cycle:
+1. RED: Write a failing test that defines expected behavior
+2. GREEN: Write the minimum code to make the test pass
+3. REFACTOR: Clean up while keeping tests green
+```
+
+### 5. Clean Deletion
+
+**Delete old code completely.** No deprecation warnings, migration shims, or backward-compatibility layers unless explicitly requested.
+
+```typescript
+// Correct: Remove the old code entirely
+const calculateScore = (player: Player): number => player.stats.overall;
+
+// Wrong: Keeping deprecated versions around
+/** @deprecated Use calculateScore instead */
+const getPlayerScore = (player: Player): number => calculateScore(player);
+```
+
+**Clean deletion rules:**
+- When replacing code, delete the old version completely
+- Never create `V2`, `New`, or `Old` suffixed functions/variables
+- Never add `@deprecated` comments - just remove the code
+- Never write migration code unless explicitly asked
+- Trust git history for recovery if needed
+
+---
+
+## Quick Reference
+
+### Variable Declaration
+
+| Pattern | Status    | Example                       |
+| ------- | --------- | ----------------------------- |
+| `const` | Required  | `const value = calculate();`  |
+| `let`   | Forbidden | Use ternary or reduce instead |
+| `var`   | Forbidden | Never use                     |
+
+### Array Operations
+
+| Instead of              | Use                                          |
+| ----------------------- | -------------------------------------------- |
+| `arr.push(item)`        | `[...arr, item]`                             |
+| `arr.pop()`             | `arr.slice(0, -1)`                           |
+| `arr.splice(i, 1)`      | `arr.filter((_, idx) => idx !== i)`          |
+| `arr.sort()`            | `[...arr].sort()`                            |
+| `arr[i] = value`        | `arr.map((v, idx) => idx === i ? value : v)` |
+| `forEach` with mutation | `reduce` or `map`                            |
+
+### Object Operations
+
+| Instead of                | Use                           |
+| ------------------------- | ----------------------------- |
+| `obj.key = value`         | `{ ...obj, key: value }`      |
+| `delete obj.key`          | `({ key: _, ...rest } = obj)` |
+| `Object.assign(obj, ...)` | `{ ...obj, ...other }`        |
+
+### Building Lookup Objects
+
+```typescript
+// Correct - reduce with spread
+const lookup = items.reduce(
+  (acc, item) => ({ ...acc, [item.id]: item }),
+  {} as Record<string, Item>
+);
+
+// Incorrect - forEach with Map.set
+const lookup = new Map();
+items.forEach(item => lookup.set(item.id, item));
+```
+
+### Conditional Values
+
+```typescript
+// Correct - ternary expression
+const status = isComplete ? "done" : "pending";
+
+// Incorrect - let with reassignment
+let status = "pending";
+if (isComplete) {
+  status = "done";
+}
+```
+
+---
+
+## Hook Structure Example
+
+```typescript
+export const usePlayerData = (playerId: string) => {
+  // 1. VARIABLES & STATE (first)
+  const [isLoading, setIsLoading] = useState(true);
+  const { data } = useQuery(GetPlayerDocument, { variables: { playerId } });
+
+  const playerName = useMemo(() => data?.player?.name ?? "Unknown", [data]);
+
+  const handleRefresh = useCallback(() => {
+    refetch();
+  }, [refetch]);
+
+  // 2. SIDE EFFECTS (second)
+  useEffect(() => {
+    console.log("Player loaded:", playerName);
+  }, [playerName]);
+
+  // 3. RETURN (last)
+  return { playerName, isLoading, handleRefresh };
+};
+```
+
+## Container Component Example
+
+```typescript
+const PlayerCardContainer: React.FC<Props> = ({ playerId }) => {
+  // 1. VARIABLES & STATE
+  const { data, loading } = useQuery(GetPlayerDocument, { variables: { playerId } });
+  const { colors } = useTheme();
+
+  const formattedStats = useMemo(
+    () => data?.stats?.map(s => ({ ...s, display: formatStat(s) })) ?? [],
+    [data?.stats]
+  );
+
+  const handlePress = useCallback(() => {
+    router.push(`/players/${playerId}`);
+  }, [playerId]);
+
+  // 2. SIDE EFFECTS (none in this example)
+
+  // 3. RETURN
+  return (
+    <PlayerCardView
+      stats={formattedStats}
+      colors={colors}
+      loading={loading}
+      onPress={handlePress}
+    />
+  );
+};
+```
+
+## Utility Function Example
+
+```typescript
+export const calculateTeamRankings = (
+  players: readonly Player[]
+): readonly TeamRanking[] => {
+  // 1. VARIABLES & DERIVED VALUES
+  const validPlayers = players.filter(p => p.team && p.score != null);
+
+  const teamScores = validPlayers.reduce(
+    (acc, player) => ({
+      ...acc,
+      [player.team.id]: {
+        teamId: player.team.id,
+        totalScore: (acc[player.team.id]?.totalScore ?? 0) + player.score,
+        count: (acc[player.team.id]?.count ?? 0) + 1,
+      },
+    }),
+    {} as Record<string, { teamId: string; totalScore: number; count: number }>
+  );
+
+  const rankings = Object.values(teamScores).map(t => ({
+    teamId: t.teamId,
+    avgScore: t.totalScore / t.count,
+  }));
+
+  const sorted = [...rankings].sort((a, b) => b.avgScore - a.avgScore);
+
+  // 2. NO SIDE EFFECTS IN PURE FUNCTIONS
+
+  // 3. RETURN
+  return sorted;
+};
+```
+
+---
+
+## Anti-Patterns to Avoid
+
+### Never use `let` for conditional assignment
+
+```typescript
+// Wrong
+let result;
+if (condition) {
+  result = valueA;
+} else {
+  result = valueB;
+}
+
+// Correct
+const result = condition ? valueA : valueB;
+```
+
+### Never mutate arrays
+
+```typescript
+// Wrong
+const items = [];
+data.forEach(d => items.push(transform(d)));
+
+// Correct
+const items = data.map(d => transform(d));
+```
+
+### Never use Map when Record suffices
+
+```typescript
+// Wrong
+const lookup = new Map<string, User>();
+users.forEach(u => lookup.set(u.id, u));
+const user = lookup.get(userId);
+
+// Correct
+const lookup = users.reduce(
+  (acc, u) => ({ ...acc, [u.id]: u }),
+  {} as Record<string, User>
+);
+const user = lookup[userId];
+```
+
+### Never sort in place
+
+```typescript
+// Wrong - mutates original
+const sorted = items.sort((a, b) => a.value - b.value);
+
+// Correct - creates new array
+const sorted = [...items].sort((a, b) => a.value - b.value);
+```
+
+### Never place useEffect before variable definitions
+
+```typescript
+// Wrong
+useEffect(() => {
+  /* ... */
+}, [value]);
+const value = useMemo(() => calculate(), [dep]);
+
+// Correct
+const value = useMemo(() => calculate(), [dep]);
+useEffect(() => {
+  /* ... */
+}, [value]);
+```
+
+---
+
+## Immutable Patterns Reference
+
+### Building Lookup Objects with Reduce
+
+```typescript
+const colorMap =
+  edges?.reduce(
+    (acc, edge) => (edge.color ? { ...acc, [edge.tagId]: edge.color } : acc),
+    {} as Record<string, string>
+  ) ?? {};
+```
+
+### Accumulating Multiple Properties
+
+```typescript
+const teamGprAccumulator = validPlayers.reduce(
+  (acc, player) => {
+    const teamId = player.team?.id;
+    if (!teamId) return acc;
+
+    const existing = acc[teamId];
+    return {
+      ...acc,
+      [teamId]: {
+        teamId,
+        teamName: player.team.name,
+        gprSum: (existing?.gprSum ?? 0) + player.gpr,
+        playerCount: (existing?.playerCount ?? 0) + 1,
+      },
+    };
+  },
+  {} as Record<string, { teamId: string; teamName: string; gprSum: number; playerCount: number }>
+);
+```
+
+### Nested Object Updates
+
+```typescript
+const updated = {
+  ...state,
+  user: {
+    ...state.user,
+    profile: {
+      ...state.user.profile,
+      avatar: newAvatar,
+    },
+  },
+};
+```
+
+### Conditional Property Addition
+
+```typescript
+const result = {
+  ...baseObj,
+  ...(condition && { optionalProp: value }),
+};
+```
+
+### Ternary Chain for Multiple Conditions
+
+```typescript
+const priority = score > 90 ? "high" : score > 70 ? "medium" : "low";
+```
+
+### Readonly Types for Function Parameters
+
+```typescript
+export const calculateTeamGprRank = (
+  leaguePlayers: readonly (PlayerWithScores | null | undefined)[],
+  myTeamId: string | null | undefined
+): number | null => {
+  // ...
+};
+```

package/plugins/lisa-cdk/rules/lisa.md

@@ -0,0 +1,37 @@
+# Lisa-Managed Files
+
+The following files are managed by Lisa and will be overwritten on every `lisa` run. Never edit them directly. Where a local override exists, edit that instead.
+
+## Files with local overrides (edit the override, not the managed file)
+
+| Managed File (do not edit) | Local Override (edit this instead) |
+|---|---|
+| `eslint.config.ts` | `eslint.config.local.ts` |
+| `jest.config.ts` | `jest.config.local.ts` |
+| `tsconfig.json` | `tsconfig.local.json` |
+
+## Create-only files (edit freely, Lisa won't overwrite)
+
+- `.claude/rules/PROJECT_RULES.md`
+- `eslint.thresholds.json`
+- `jest.thresholds.json`
+
+## Deep-merged by Lisa (Lisa wins conflicts, but project can add its own keys)
+
+- `.claude/settings.json`
+
+## Plugin-managed content (agents, skills, hooks, commands, rules)
+
+These resources are distributed via the stack Claude Code plugin (e.g., `typescript@lisa`). Rules — including this file — are injected into each prompt automatically. Do not add these files to your project directory.
+
+## Copy-overwrite files (do not edit — full list)
+
+- `.prettierrc.json`, `.prettierignore`, `.lintstagedrc.json`, `.versionrc`, `.nvmrc`
+- `.yamllint`, `.gitleaksignore`, `.coderabbit.yml`, `commitlint.config.cjs`, `sgconfig.yml`, `knip.json`
+- `.safety-net.json`, `audit.ignore.config.json`
+- `eslint.base.ts`, `eslint.typescript.ts` (+ `expo`/`nestjs`/`cdk` variants), `eslint.slow.config.ts`
+- `jest.base.ts`, `jest.typescript.ts` (+ variants)
+- `tsconfig.base.json`, `tsconfig.typescript.json` (+ variants), `tsconfig.eslint.json`, `tsconfig.build.json`, `tsconfig.spec.json`
+- `.github/workflows/quality.yml`, `release.yml`, `claude.yml`, and all other Claude/CI workflows
+- `.github/dependabot.yml`, `.github/GITHUB_ACTIONS.md`
+- `ast-grep/rules/`, `ast-grep/utils/`, `ast-grep/rule-tests/`