@codyswann/lisa 1.48.0 → 1.49.0

package/plugins/lisa-rails/hooks/notify-ntfy.sh

@@ -0,0 +1,183 @@
+#!/bin/bash
+# This file is managed by Lisa.
+# Do not edit directly — changes will be overwritten on the next `lisa` run.
+# =============================================================================
+# ntfy.sh Notification Hook for Claude Code
+# =============================================================================
+# Sends desktop and mobile notifications via ntfy.sh when Claude needs
+# attention or finishes a task.
+#
+# Setup:
+#   1. Install ntfy app on mobile (iOS App Store / Android Play Store)
+#   2. Subscribe to your unique topic in the app
+#   3. Set NTFY_TOPIC environment variable (e.g., in ~/.bashrc or ~/.zshrc):
+#      export NTFY_TOPIC="my-claude-alerts-xyz123"
+#
+# @see https://ntfy.sh
+# =============================================================================
+
+# Read JSON input from stdin
+INPUT=$(cat)
+
+# Extract hook event name
+HOOK_EVENT=$(echo "$INPUT" | grep -o '"hook_event_name"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/.*: *"//' | sed 's/"$//')
+
+# Extract notification type (for Notification hooks)
+NOTIFICATION_TYPE=$(echo "$INPUT" | grep -o '"notification_type"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/.*: *"//' | sed 's/"$//')
+
+# Extract message if available
+MESSAGE=$(echo "$INPUT" | grep -o '"message"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/.*: *"//' | sed 's/"$//')
+
+# Extract session ID (first 8 chars for brevity)
+FULL_SESSION_ID=$(echo "$INPUT" | grep -o '"session_id"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/.*: *"//' | sed 's/"$//')
+SESSION_ID="${FULL_SESSION_ID:0:8}"
+
+# Extract transcript path for task summary
+TRANSCRIPT_PATH=$(echo "$INPUT" | grep -o '"transcript_path"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/.*: *"//' | sed 's/"$//')
+
+# Determine source (Web vs Local)
+if [ "$CLAUDE_CODE_REMOTE" = "true" ]; then
+    SOURCE="Web"
+else
+    SOURCE="Local"
+fi
+
+# Get project name from current directory
+PROJECT_NAME=$(basename "$CLAUDE_PROJECT_DIR" 2>/dev/null || basename "$(pwd)")
+
+# Load NTFY_TOPIC from local config if not already set
+if [ -z "$NTFY_TOPIC" ]; then
+    # Check for project-local config (gitignored)
+    if [ -f "$CLAUDE_PROJECT_DIR/.claude/env.local" ]; then
+        # shellcheck source=/dev/null
+        source "$CLAUDE_PROJECT_DIR/.claude/env.local"
+    fi
+    # Check for user-global config
+    if [ -z "$NTFY_TOPIC" ] && [ -f "$HOME/.claude/env.local" ]; then
+        # shellcheck source=/dev/null
+        source "$HOME/.claude/env.local"
+    fi
+fi
+
+# Exit silently if still not configured
+if [ -z "$NTFY_TOPIC" ]; then
+    exit 0
+fi
+
+# Extract task summary from transcript (last assistant message, truncated)
+TASK_SUMMARY=""
+if [ -n "$TRANSCRIPT_PATH" ] && [ -f "$TRANSCRIPT_PATH" ]; then
+    # Get the last assistant message from the JSONL transcript
+    # The transcript contains lines with "type":"assistant" and "message" content
+    # Use awk for cross-platform compatibility (tac is not available on macOS)
+    LAST_ASSISTANT=$(awk '/"type"[[:space:]]*:[[:space:]]*"assistant"/{line=$0} END{if(line) print line}' "$TRANSCRIPT_PATH" 2>/dev/null)
+    if [ -n "$LAST_ASSISTANT" ]; then
+        # Extract the message content - look for text content in the message
+        # Format: {"message":{"content":[{"type":"text","text":"..."}]}}
+        # Use jq for robust JSON parsing when available, fallback to grep/sed
+        if command -v jq >/dev/null 2>&1; then
+            RAW_SUMMARY=$(echo "$LAST_ASSISTANT" | jq -r '.message.content[] | select(.type == "text") | .text' 2>/dev/null | head -1)
+        else
+            # Fallback: simple regex extraction (may fail on escaped quotes)
+            RAW_SUMMARY=$(echo "$LAST_ASSISTANT" | grep -o '"text"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1 | sed 's/.*: *"//' | sed 's/"$//')
+        fi
+        if [ -n "$RAW_SUMMARY" ]; then
+            # Truncate to 100 chars and clean up newlines
+            TASK_SUMMARY=$(echo "$RAW_SUMMARY" | tr '\n' ' ' | cut -c1-100)
+            # Add ellipsis if truncated
+            if [ ${#RAW_SUMMARY} -gt 100 ]; then
+                TASK_SUMMARY="${TASK_SUMMARY}..."
+            fi
+        fi
+    fi
+fi
+
+# Build session info string (shown in body)
+SESSION_INFO=""
+if [ -n "$SESSION_ID" ]; then
+    SESSION_INFO="Session: $SESSION_ID"
+fi
+
+# Determine notification title and body based on hook type
+case "$HOOK_EVENT" in
+    "Notification")
+        case "$NOTIFICATION_TYPE" in
+            "permission_prompt")
+                TITLE="Claude [$SOURCE] - Permission Required"
+                BODY="${MESSAGE:-Claude needs your permission to continue}"
+                if [ -n "$SESSION_INFO" ]; then
+                    BODY="$SESSION_INFO
+$BODY"
+                fi
+                PRIORITY="high"
+                TAGS="warning"
+                ;;
+            "idle_prompt")
+                TITLE="Claude [$SOURCE] - Waiting"
+                BODY="${MESSAGE:-Claude is waiting for your input}"
+                if [ -n "$SESSION_INFO" ]; then
+                    BODY="$SESSION_INFO
+$BODY"
+                fi
+                PRIORITY="default"
+                TAGS="hourglass"
+                ;;
+            *)
+                TITLE="Claude [$SOURCE] - Attention"
+                BODY="${MESSAGE:-Claude needs your attention}"
+                if [ -n "$SESSION_INFO" ]; then
+                    BODY="$SESSION_INFO
+$BODY"
+                fi
+                PRIORITY="default"
+                TAGS="bell"
+                ;;
+        esac
+        ;;
+    "Stop")
+        TITLE="Claude [$SOURCE] - Finished"
+        BODY="$PROJECT_NAME"
+        if [ -n "$SESSION_INFO" ]; then
+            BODY="$SESSION_INFO | $BODY"
+        fi
+        if [ -n "$TASK_SUMMARY" ]; then
+            BODY="$BODY
+$TASK_SUMMARY"
+        fi
+        PRIORITY="default"
+        TAGS="white_check_mark"
+        ;;
+    "SubagentStop")
+        TITLE="Claude [$SOURCE] - Subagent Done"
+        BODY="$PROJECT_NAME"
+        if [ -n "$SESSION_INFO" ]; then
+            BODY="$SESSION_INFO | $BODY"
+        fi
+        if [ -n "$TASK_SUMMARY" ]; then
+            BODY="$BODY
+$TASK_SUMMARY"
+        fi
+        PRIORITY="low"
+        TAGS="checkered_flag"
+        ;;
+    *)
+        TITLE="Claude [$SOURCE]"
+        BODY="${MESSAGE:-Event: $HOOK_EVENT}"
+        if [ -n "$SESSION_INFO" ]; then
+            BODY="$SESSION_INFO
+$BODY"
+        fi
+        PRIORITY="default"
+        TAGS="robot"
+        ;;
+esac
+
+# Send notification via ntfy.sh
+curl -s \
+    -H "Title: $TITLE" \
+    -H "Priority: $PRIORITY" \
+    -H "Tags: $TAGS" \
+    -d "$BODY" \
+    "https://ntfy.sh/$NTFY_TOPIC" > /dev/null 2>&1
+
+exit 0

package/plugins/lisa-rails/hooks/setup-jira-cli.sh

@@ -0,0 +1,52 @@
+#!/usr/bin/env bash
+##
+# Writes the JIRA CLI config file from environment variables.
+# Runs on SessionStart so the config is available for every session.
+#
+# Required env vars (must be created in your Claude Code Web environment):
+#   JIRA_INSTALLATION - cloud or local
+#   JIRA_SERVER       - Atlassian instance URL
+#   JIRA_LOGIN        - login email
+#   JIRA_PROJECT      - default project key
+#   JIRA_API_TOKEN    - already expected by jira-cli natively
+#
+# Optional env vars:
+#   JIRA_BOARD        - default board name
+##
+
+set -euo pipefail
+
+# Fix jira-cli installation if install-pkgs.sh failed to extract correctly.
+# The tarball nests the binary at jira_VERSION_linux_x86_64/bin/jira,
+# but install-pkgs.sh expects a top-level "jira" file.
+if ! command -v jira &>/dev/null; then
+  JIRA_CLI_VERSION="1.7.0"
+  TMPDIR=$(mktemp -d)
+  curl -sSfL "https://github.com/ankitpokhrel/jira-cli/releases/download/v${JIRA_CLI_VERSION}/jira_${JIRA_CLI_VERSION}_linux_x86_64.tar.gz" \
+    | tar -xz -C "${TMPDIR}"
+  cp "${TMPDIR}/jira_${JIRA_CLI_VERSION}_linux_x86_64/bin/jira" /usr/local/bin/jira
+  chmod +x /usr/local/bin/jira
+  rm -rf "${TMPDIR}"
+fi
+
+CONFIG_DIR="${HOME}/.config/.jira"
+CONFIG_FILE="${CONFIG_DIR}/.config.yml"
+
+# Skip config write if required vars are missing
+if [[ -z "${JIRA_SERVER:-}" || -z "${JIRA_LOGIN:-}" ]]; then
+  exit 0
+fi
+
+mkdir -p "${CONFIG_DIR}"
+
+cat > "${CONFIG_FILE}" << EOF
+installation: ${JIRA_INSTALLATION:-cloud}
+server: ${JIRA_SERVER}
+login: ${JIRA_LOGIN}
+project: ${JIRA_PROJECT:-}
+board: "${JIRA_BOARD:-}"
+auth_type: basic
+epic:
+  name: Epic Name
+  link: Epic Link
+EOF

package/plugins/lisa-rails/hooks/sg-scan-on-edit.sh

@@ -0,0 +1,68 @@
+#!/bin/bash
+# This file is managed by Lisa.
+# Do not edit directly — changes will be overwritten on the next `lisa` run.
+
+# Hook script to run ast-grep scan after Claude edits files
+# This script receives JSON input via stdin with tool information
+# Reference: https://docs.claude.com/en/docs/claude-code/hooks
+# Note: This hook is BLOCKING - it returns non-zero exit codes so Claude must fix issues
+
+# Extract file path from JSON input
+FILE_PATH=$(cat | grep -o '"file_path":"[^"]*"' | head -1 | cut -d'"' -f4)
+
+if [ -z "$FILE_PATH" ] || [ ! -f "$FILE_PATH" ]; then
+    exit 0
+fi
+
+# Check if file type is supported (TypeScript, JavaScript)
+case "${FILE_PATH##*.}" in
+    ts|tsx|js|jsx|mjs|cjs) ;;
+    *) exit 0 ;;
+esac
+
+# Validate project directory
+if [ -z "${CLAUDE_PROJECT_DIR:-}" ]; then
+    exit 0
+fi
+
+# Check if file is in a source directory
+RELATIVE_PATH="${FILE_PATH#$CLAUDE_PROJECT_DIR/}"
+case "$RELATIVE_PATH" in
+    src/*|apps/*|libs/*|test/*|tests/*|features/*|components/*|hooks/*|screens/*|app/*|constants/*|utils/*|providers/*|stores/*) ;;
+    *) exit 0 ;;
+esac
+
+cd "$CLAUDE_PROJECT_DIR" || exit 0
+
+# Verify ast-grep configuration exists
+if [ ! -f "sgconfig.yml" ]; then
+    exit 0
+fi
+
+# Verify rules are defined
+RULE_COUNT=$(find ast-grep/rules -name "*.yml" -o -name "*.yaml" 2>/dev/null | grep -v ".gitkeep" | wc -l | tr -d ' ')
+if [ "$RULE_COUNT" -eq 0 ]; then
+    exit 0
+fi
+
+# Detect package manager
+if [ -f "bun.lockb" ] || [ -f "bun.lock" ]; then
+    PKG_MANAGER="bun"
+elif [ -f "pnpm-lock.yaml" ]; then
+    PKG_MANAGER="pnpm"
+elif [ -f "yarn.lock" ]; then
+    PKG_MANAGER="yarn"
+else
+    PKG_MANAGER="npm"
+fi
+
+# Run ast-grep scan
+echo "Running ast-grep scan on: $FILE_PATH"
+if OUTPUT=$($PKG_MANAGER run sg:scan "$FILE_PATH" 2>&1); then
+    echo "ast-grep: No issues found in $(basename "$FILE_PATH")"
+    exit 0
+else
+    echo "ast-grep found issues in: $FILE_PATH" >&2
+    echo "$OUTPUT" >&2
+    exit 1
+fi

package/plugins/lisa-rails/hooks/sync-tasks.sh

@@ -0,0 +1,107 @@
+#!/usr/bin/env bash
+#
+# sync-tasks.sh - Syncs Claude Code tasks to project directories
+#
+# This hook is triggered on PostToolUse for TaskCreate and TaskUpdate.
+# It reads the task metadata to determine the project and syncs
+# task JSON files to ./projects/{project}/tasks/{session-id}/
+#
+# This session-based structure preserves task history across /clear commands,
+# preventing overwrites when new sessions create tasks with the same IDs.
+#
+# Input (via stdin): JSON with tool_name, tool_input, tool_response
+#
+
+# Temporarily disable this hook
+exit 0
+
+set -euo pipefail
+
+# Read JSON input from stdin
+INPUT=$(cat)
+
+# Extract tool name
+TOOL_NAME=$(echo "$INPUT" | jq -r '.tool_name // empty')
+
+# Only process TaskCreate and TaskUpdate
+if [[ "$TOOL_NAME" != "TaskCreate" && "$TOOL_NAME" != "TaskUpdate" ]]; then
+  exit 0
+fi
+
+# Try to get project from multiple sources:
+# 1. Task metadata (passed in tool_input)
+# 2. .claude-active-project marker file
+
+PROJECT=""
+
+# Check tool_input metadata for project
+PROJECT=$(echo "$INPUT" | jq -r '.tool_input.metadata.project // empty')
+
+# If no project in metadata, check marker file
+if [[ -z "$PROJECT" && -f ".claude-active-project" ]]; then
+  PROJECT=$(cat .claude-active-project | tr -d '[:space:]')
+fi
+
+# If still no project, skip syncing
+if [[ -z "$PROJECT" ]]; then
+  exit 0
+fi
+
+# Validate project name (kebab-case, no path traversal)
+if [[ ! "$PROJECT" =~ ^[a-z0-9-]+$ ]]; then
+  echo "Warning: Invalid project name '$PROJECT', skipping sync" >&2
+  exit 0
+fi
+
+# Get task ID
+TASK_ID=""
+if [[ "$TOOL_NAME" == "TaskCreate" ]]; then
+  # For TaskCreate, ID is in tool_response.task.id
+  TASK_ID=$(echo "$INPUT" | jq -r '.tool_response.task.id // empty')
+elif [[ "$TOOL_NAME" == "TaskUpdate" ]]; then
+  # For TaskUpdate, ID is in tool_input
+  TASK_ID=$(echo "$INPUT" | jq -r '.tool_input.taskId // empty')
+fi
+
+if [[ -z "$TASK_ID" ]]; then
+  exit 0
+fi
+
+# Find the task file in ~/.claude/tasks/
+# Tasks are stored in ~/.claude/tasks/{session-uuid}/{id}.json
+CLAUDE_TASKS_DIR="${HOME}/.claude/tasks"
+TASK_FILE=""
+
+# Get session ID from hook input (preferred - 100% accurate)
+SESSION_ID=$(echo "$INPUT" | jq -r '.session_id // empty')
+
+if [[ -n "$SESSION_ID" && -f "${CLAUDE_TASKS_DIR}/${SESSION_ID}/${TASK_ID}.json" ]]; then
+  # Use session ID directly - guaranteed correct session
+  TASK_FILE="${CLAUDE_TASKS_DIR}/${SESSION_ID}/${TASK_ID}.json"
+else
+  # Fallback: find most recently modified task file with this ID
+  # This handles edge cases where session_id isn't available
+  TASK_FILE=$(find "$CLAUDE_TASKS_DIR" -name "${TASK_ID}.json" -exec stat -f '%m %N' {} \; 2>/dev/null | sort -rn | head -1 | cut -d' ' -f2-)
+fi
+
+if [[ -z "$TASK_FILE" || ! -f "$TASK_FILE" ]]; then
+  exit 0
+fi
+
+# Require session ID for proper history tracking
+if [[ -z "$SESSION_ID" ]]; then
+  echo "Warning: No session_id available, skipping sync" >&2
+  exit 0
+fi
+
+# Ensure project tasks directory exists (includes session ID for history preservation)
+PROJECT_TASKS_DIR="./projects/${PROJECT}/tasks/${SESSION_ID}"
+mkdir -p "$PROJECT_TASKS_DIR"
+
+# Copy task file to project directory
+cp "$TASK_FILE" "${PROJECT_TASKS_DIR}/${TASK_ID}.json"
+
+# Optionally stage the file for git (non-blocking)
+git add "${PROJECT_TASKS_DIR}/${TASK_ID}.json" 2>/dev/null || true
+
+exit 0

package/plugins/lisa-rails/hooks/ticket-sync-reminder.sh

@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+# Ticket sync reminder hook
+# Runs on TaskUpdate to remind about updating linked tickets
+# Non-blocking (exit 0) - this is a reminder, not enforcement
+
+# Temporarily disable this hook
+exit 0
+
+PLANS_DIR="${CLAUDE_PROJECT_DIR}/plans"
+
+# Find the active plan file (most recently modified .md in plans/)
+ACTIVE_PLAN=$(find "$PLANS_DIR" -maxdepth 1 -name "*.md" -type f 2>/dev/null | head -1)
+
+if [ -z "$ACTIVE_PLAN" ]; then
+  exit 0
+fi
+
+# Check if the plan contains a ticket URL (JIRA, Linear, GitHub Issues)
+if grep -qiE "(https?://.*(atlassian|jira|linear|github\.com/.*/issues))" "$ACTIVE_PLAN" 2>/dev/null; then
+  echo "REMINDER: This plan is linked to a ticket. Consider running /jira:sync to update the ticket with current progress."
+fi
+
+exit 0

package/plugins/lisa-rails/hooks/track-plan-sessions.sh

@@ -0,0 +1,164 @@
+#!/usr/bin/env bash
+#
+# track-plan-sessions.sh - Tracks which sessions work on each plan file
+#
+# Triggered by two hooks:
+#   1. PostToolUse (Write|Edit) - Detects plan file writes via absolute path comparison,
+#      stamps session ID into the plan's ## Sessions table, and saves a session-specific
+#      marker file so subsequent UserPromptSubmit events can reliably find the active plan.
+#   2. UserPromptSubmit - Finds the active plan file by checking for a session-specific
+#      marker file first (set by PostToolUse), falling back to the most recently CREATED
+#      .md file in plans/ (ls -tU on macOS sorts by birth time). This avoids the mtime bug
+#      where another plan file's modification time (e.g., from a hook writing a session ID
+#      to it, or format-on-edit touching it) could cause the wrong file to appear "newest."
+#
+# Marker files: $PLANS_DIR/.active-plan-<session-id> contain the absolute path to the
+# active plan file. Stale markers (>24h) are cleaned up on each invocation.
+#
+# Dedup: Session ID dedup is scoped to the ## Sessions section only, not the entire
+# file. This prevents false positives when session IDs appear elsewhere in plan content
+# (e.g., scratchpad directory paths like /private/tmp/claude-501/.../SESSION_ID/...).
+#
+# Debug logging: All key decisions are logged to $PLANS_DIR/.track-plan-debug.log for
+# diagnostics if session IDs land in the wrong plan file.
+#
+# Input (via stdin): JSON with session_id, permission_mode, hook_event_name, etc.
+#
+
+set -euo pipefail
+
+INPUT=$(cat)
+
+SESSION_ID=$(echo "$INPUT" | jq -r '.session_id // empty')
+PERMISSION_MODE=$(echo "$INPUT" | jq -r '.permission_mode // "default"')
+HOOK_EVENT=$(echo "$INPUT" | jq -r '.hook_event_name // empty')
+
+# Temporarily disable this hook
+exit 0
+
+# Session ID is required
+if [[ -z "$SESSION_ID" ]]; then
+  exit 0
+fi
+
+# Resolve plans directory from settings (default ./plans)
+PLANS_DIR="./plans"
+SETTINGS_FILE="${CLAUDE_PROJECT_DIR:-.}/.claude/settings.json"
+if [[ -f "$SETTINGS_FILE" ]]; then
+  CONFIGURED_DIR=$(jq -r '.plansDirectory // empty' "$SETTINGS_FILE")
+  if [[ -n "$CONFIGURED_DIR" ]]; then
+    PLANS_DIR="$CONFIGURED_DIR"
+  fi
+fi
+
+# Debug logging
+DEBUG_LOG="$PLANS_DIR/.track-plan-debug.log"
+
+log_debug() {
+  printf '[%s] [%s] [%s] %s\n' \
+    "$(date -u +"%Y-%m-%dT%H:%M:%SZ")" \
+    "$SESSION_ID" \
+    "$HOOK_EVENT" \
+    "$1" >> "$DEBUG_LOG" 2>/dev/null || true
+}
+
+# Session-specific marker file for reliable active-plan detection
+MARKER_FILE="$PLANS_DIR/.active-plan-${SESSION_ID}"
+
+# Clean stale marker files older than 24h
+find "$PLANS_DIR" -name ".active-plan-*" -mmin +1440 -delete 2>/dev/null || true
+
+PLAN_FILE=""
+RESOLUTION_METHOD=""
+
+if [[ "$HOOK_EVENT" == "PostToolUse" ]]; then
+  # Trigger A: Plan file was written/edited
+  FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty')
+
+  if [[ -z "$FILE_PATH" ]]; then
+    log_debug "PostToolUse: no file_path in tool_input, exiting"
+    exit 0
+  fi
+
+  # Resolve PLANS_DIR to absolute path for comparison
+  ABS_PLANS_DIR=$(cd "$PLANS_DIR" 2>/dev/null && pwd)
+
+  if [[ -z "$ABS_PLANS_DIR" ]]; then
+    log_debug "PostToolUse: could not resolve PLANS_DIR=$PLANS_DIR to absolute path, exiting"
+    exit 0
+  fi
+
+  # Check if the written file is in the plans directory
+  if [[ "$FILE_PATH" == "$ABS_PLANS_DIR"/* ]]; then
+    PLAN_FILE="$FILE_PATH"
+    RESOLUTION_METHOD="PostToolUse-direct"
+    log_debug "PostToolUse: matched plan file=$PLAN_FILE"
+
+    # Save marker so UserPromptSubmit can find this plan reliably
+    echo "$PLAN_FILE" > "$MARKER_FILE"
+    log_debug "PostToolUse: saved marker file=$MARKER_FILE"
+  else
+    log_debug "PostToolUse: file_path=$FILE_PATH not in plans dir=$ABS_PLANS_DIR, exiting"
+    exit 0
+  fi
+
+elif [[ "$HOOK_EVENT" == "UserPromptSubmit" ]]; then
+  # Trigger B: Find the active plan file
+  # Priority 1: Session-specific marker file (reliable — set by PostToolUse when plan was written)
+  if [[ -f "$MARKER_FILE" ]]; then
+    PLAN_FILE=$(cat "$MARKER_FILE")
+    RESOLUTION_METHOD="marker-file"
+    log_debug "UserPromptSubmit: resolved via marker file=$PLAN_FILE"
+  else
+    # Priority 2: Most recently CREATED file (ls -tU on macOS sorts by birth time)
+    PLAN_FILE=$(ls -tU "$PLANS_DIR"/*.md 2>/dev/null | head -1)
+    RESOLUTION_METHOD="fallback-ls-tU"
+    log_debug "UserPromptSubmit: no marker file, fallback ls -tU resolved=$PLAN_FILE"
+  fi
+
+  if [[ -z "$PLAN_FILE" || ! -f "$PLAN_FILE" ]]; then
+    log_debug "UserPromptSubmit: no valid plan file found, exiting"
+    exit 0
+  fi
+else
+  exit 0
+fi
+
+# Verify the plan file exists
+if [[ ! -f "$PLAN_FILE" ]]; then
+  log_debug "plan file=$PLAN_FILE does not exist, exiting"
+  exit 0
+fi
+
+# Check if session ID already exists in the ## Sessions section (dedup)
+# Only search within the Sessions section to avoid false positives from session IDs
+# appearing in plan content (e.g., scratchpad paths contain session IDs)
+if sed -n '/^## Sessions$/,$p' "$PLAN_FILE" 2>/dev/null | grep -qF "$SESSION_ID"; then
+  log_debug "dedup: session ID already in $PLAN_FILE sessions section (resolved via $RESOLUTION_METHOD), skipping write"
+  exit 0
+fi
+
+# Determine phase from permission_mode
+PHASE=$( [[ "$PERMISSION_MODE" == "plan" ]] && echo "plan" || echo "implement" )
+TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+
+# Check if ## Sessions section exists
+if grep -q "^## Sessions" "$PLAN_FILE" 2>/dev/null; then
+  # Append row to existing table
+  printf '| %s | %s | %s |\n' "$SESSION_ID" "$TIMESTAMP" "$PHASE" >> "$PLAN_FILE"
+else
+  # Create ## Sessions section at end of file
+  {
+    echo ""
+    echo "## Sessions"
+    echo ""
+    echo "<!-- Auto-maintained by track-plan-sessions.sh -->"
+    echo "| Session ID | First Seen | Phase |"
+    echo "|------------|------------|-------|"
+    printf '| %s | %s | %s |\n' "$SESSION_ID" "$TIMESTAMP" "$PHASE"
+  } >> "$PLAN_FILE"
+fi
+
+log_debug "wrote session to $PLAN_FILE (resolved via $RESOLUTION_METHOD, phase=$PHASE)"
+
+exit 0

package/plugins/lisa-rails/hooks/verify-completion.sh

@@ -0,0 +1,77 @@
+#!/bin/bash
+# This file is managed by Lisa.
+# Do not edit directly — changes will be overwritten on the next `lisa` run.
+# =============================================================================
+# Verification Level Enforcement Hook (Stop)
+# =============================================================================
+# Checks whether the agent declared a verification level when the session
+# involved code changes. Does NOT re-run lint/typecheck/tests (husky does that).
+#
+# Logic:
+#   1. If no Write/Edit tools were used → exit 0 (research/conversation only)
+#   2. If code was written → check last assistant message for verification level
+#   3. If verification level found → exit 0
+#   4. If missing and stop_hook_active is false → block with instructions
+#   5. If missing and stop_hook_active is true → exit 0 (avoid infinite loops)
+#
+# @see .claude/rules/verfication.md "Self-Correction Loop" section
+# =============================================================================
+
+# Read JSON input from stdin
+INPUT=$(cat)
+
+# Extract transcript path
+TRANSCRIPT_PATH=$(echo "$INPUT" | grep -o '"transcript_path"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/.*: *"//' | sed 's/"$//')
+
+# Exit silently if no transcript available
+if [ -z "$TRANSCRIPT_PATH" ] || [ ! -f "$TRANSCRIPT_PATH" ]; then
+    exit 0
+fi
+
+# Check if Write or Edit tools were used during the session
+# Look for tool_use entries with Write or Edit tool names
+if ! grep -q '"tool_name"[[:space:]]*:[[:space:]]*"\(Write\|Edit\|NotebookEdit\)"' "$TRANSCRIPT_PATH" 2>/dev/null; then
+    # No code changes — this was research/conversation, allow stop
+    exit 0
+fi
+
+# Code was written — check if a verification level was declared
+# Extract the last assistant message
+LAST_ASSISTANT=$(awk '/"type"[[:space:]]*:[[:space:]]*"assistant"/{line=$0} END{if(line) print line}' "$TRANSCRIPT_PATH" 2>/dev/null)
+
+if [ -z "$LAST_ASSISTANT" ]; then
+    exit 0
+fi
+
+# Extract the text content from the assistant message
+RESPONSE_TEXT=""
+if command -v jq >/dev/null 2>&1; then
+    RESPONSE_TEXT=$(echo "$LAST_ASSISTANT" | jq -r '.message.content[] | select(.type == "text") | .text' 2>/dev/null)
+else
+    RESPONSE_TEXT=$(echo "$LAST_ASSISTANT" | grep -o '"text"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/.*: *"//' | sed 's/"$//')
+fi
+
+if [ -z "$RESPONSE_TEXT" ]; then
+    exit 0
+fi
+
+# Check for verification level keywords (case-insensitive)
+if echo "$RESPONSE_TEXT" | grep -qi "FULLY VERIFIED\|PARTIALLY VERIFIED\|UNVERIFIED"; then
+    exit 0
+fi
+
+# Check if this is a retry (stop_hook_active flag)
+# The stop_hook_active field is set to true when a Stop hook has already blocked once
+STOP_HOOK_ACTIVE=$(echo "$INPUT" | grep -o '"stop_hook_active"[[:space:]]*:[[:space:]]*true' || echo "")
+
+if [ -n "$STOP_HOOK_ACTIVE" ]; then
+    # Already blocked once — allow stop to prevent infinite loop
+    exit 0
+fi
+
+# No verification level declared after code changes — block
+cat << 'EOF'
+{"decision":"block","reason":"You changed code but didn't declare a verification level. Run your verification, then declare FULLY VERIFIED, PARTIALLY VERIFIED, or UNVERIFIED with evidence. See .claude/rules/verfication.md for requirements."}
+EOF
+
+exit 0