@codyswann/lisa 2.121.0 → 2.121.1

package/scripts/generate-codex-plugin-artifacts.mjs

@@ -468,24 +468,33 @@ function main() {
  * @param {object} claudeManifest Parsed contents of .claude-plugin/plugin.json.
  */
 function emitCodexHooks(pluginDir, claudeManifest) {
-  const codexPluginDir = path.join(pluginDir, ".codex-plugin");
-  const hooksJsonPath = path.join(codexPluginDir, "hooks.json");
-  const hooksScriptsDir = path.join(codexPluginDir, "hooks");
+  // Codex auto-discovers a plugin's hooks at <plugin-root>/hooks/hooks.json and
+  // resolves the manifest hooks pointer + ${PLUGIN_ROOT} relative to the plugin
+  // root (developers.openai.com/codex/plugins/build). The hook scripts already
+  // ship at <plugin-root>/hooks/ (copied from plugins/src by the Claude build),
+  // so the Codex hooks.json lives alongside them and no script copy is needed.
+  const hooksDir = path.join(pluginDir, "hooks");
+  const hooksJsonPath = path.join(hooksDir, "hooks.json");
+  // Clean up the pre-2.121 layout (hooks.json + copied scripts under
+  // .codex-plugin/) so a rebuilt plugin never ships both.
+  const legacyCodexPluginDir = path.join(pluginDir, ".codex-plugin");
+  fs.rmSync(path.join(legacyCodexPluginDir, "hooks.json"), { force: true });
+  fs.rmSync(path.join(legacyCodexPluginDir, "hooks"), {
+    force: true,
+    recursive: true,
+  });
   const filtered = filterCodexHooks(claudeManifest.hooks);
   if (filtered === null) {
-    // Nothing survived the filter. Remove any stale hooks artifacts from a
-    // prior build so componentPointers() doesn't keep advertising removed
-    // hooks via the ./hooks.json pointer.
+    // Nothing survived the filter. Remove any stale hooks.json so
+    // componentPointers() doesn't keep advertising removed hooks.
     fs.rmSync(hooksJsonPath, { force: true });
-    fs.rmSync(hooksScriptsDir, { force: true, recursive: true });
     return;
   }
-  fs.mkdirSync(codexPluginDir, { recursive: true });
+  fs.mkdirSync(hooksDir, { recursive: true });
   fs.writeFileSync(
     hooksJsonPath,
     `${JSON.stringify(buildCodexHooksDocument(filtered), null, 2)}\n`
   );
-  copyCodexHookScripts(pluginDir, filtered);
 }
 
 /**
@@ -540,8 +549,8 @@ function componentPointers(pluginDir) {
     ...(fs.existsSync(path.join(pluginDir, ".mcp.json"))
       ? { mcpServers: "./.mcp.json" }
       : {}),
-    ...(fs.existsSync(path.join(pluginDir, ".codex-plugin", "hooks.json"))
-      ? { hooks: "./hooks.json" }
+    ...(fs.existsSync(path.join(pluginDir, "hooks", "hooks.json"))
+      ? { hooks: "./hooks/hooks.json" }
       : {}),
   };
 }
@@ -551,8 +560,9 @@ function componentPointers(pluginDir) {
  * Claude plugin.json hooks block:
  *   - Drop every `entire hooks claude-code *` command (Claude-only).
  *   - Drop every reference to `enforce-team-first.sh` (Claude-team-specific).
- *   - Rewrite ${CLAUDE_PLUGIN_ROOT}/hooks/<script>.sh to ./hooks/<script>.sh
- *     (Codex resolves plugin paths relative to .codex-plugin/plugin.json).
+ *   - Rewrite ${CLAUDE_PLUGIN_ROOT}/hooks/<script>.sh to
+ *     ${PLUGIN_ROOT}/hooks/<script>.sh (Codex exposes the installed plugin
+ *     root to hook commands as ${PLUGIN_ROOT}).
  *   - Drop matchers that produce no surviving handlers.
  *
  * When the resulting block is empty, no hooks.json is written and the
@@ -590,11 +600,13 @@ export function filterCodexHooks(hooksBlock) {
           return [
             {
               ...h,
-              // Codex hook commands resolve relative to .codex-plugin/plugin.json;
-              // rewrite to a path the hooks.json sibling will find.
+              // Codex exposes the installed plugin root as ${PLUGIN_ROOT} to hook
+              // commands (developers.openai.com/codex/plugins/build). A bare
+              // ./hooks/ path would resolve against the session cwd, not the
+              // plugin, so rewrite to the plugin-root env var.
               command: h.command.replaceAll(
                 "${CLAUDE_PLUGIN_ROOT}/hooks/",
-                "./hooks/"
+                "${PLUGIN_ROOT}/hooks/"
               ),
             },
           ];
@@ -613,38 +625,6 @@ export function filterCodexHooks(hooksBlock) {
   return Object.keys(out).length > 0 ? out : null;
 }
 
-/**
- * Copy hook scripts that survived filterCodexHooks into the Codex artifact.
- *
- * Scripts land at <pluginDir>/.codex-plugin/hooks/ so the hooks.json pointer
- * "./hooks/<n>.sh" resolves correctly when Codex loads the plugin.
- *
- * @param {string} pluginDir Built Claude plugin directory.
- * @param {object} hooks Codex-shaped hooks block from filterCodexHooks.
- */
-function copyCodexHookScripts(pluginDir, hooks) {
-  const srcHooksDir = path.join(pluginDir, "hooks");
-  if (!fs.existsSync(srcHooksDir)) return;
-  const referenced = new Set();
-  for (const entries of Object.values(hooks)) {
-    for (const entry of entries) {
-      for (const h of entry.hooks ?? []) {
-        if (typeof h.command !== "string") continue;
-        const m = /^\.\/hooks\/([^/\s]+\.sh)/.exec(h.command);
-        if (m) referenced.add(m[1]);
-      }
-    }
-  }
-  if (referenced.size === 0) return;
-  const dstHooksDir = path.join(pluginDir, ".codex-plugin", "hooks");
-  fs.mkdirSync(dstHooksDir, { recursive: true });
-  for (const name of referenced) {
-    const src = path.join(srcHooksDir, name);
-    if (!fs.existsSync(src)) continue;
-    fs.copyFileSync(src, path.join(dstHooksDir, name));
-  }
-}
-
 function metadataFor(pluginName, claudeManifest) {
   const map = {
     lisa: {

package/scripts/generate-copilot-plugin-artifacts.mjs

@@ -139,6 +139,11 @@ export function generateCopilotVariant(srcDir, outDir, version) {
   copyDir(srcDir, outDir, relPath => {
     if (relPath.startsWith(".codex-plugin/") || relPath === ".codex-plugin")
       return false;
+    // Drop the Codex hooks manifest the base build emits at hooks/hooks.json —
+    // Copilot reads its (camelCase) hooks from .claude-plugin/plugin.json, not
+    // this Codex-shaped (PascalCase, ${PLUGIN_ROOT}) file. Keeping it would ship
+    // a spurious, wrong-shaped hooks manifest in the Copilot variant.
+    if (relPath === path.join("hooks", "hooks.json")) return false;
     // Drop Codex-specific per-skill openai.yaml artifacts — Copilot does not use them.
     if (/^skills\/[^/]+\/agents\/openai\.ya?ml$/.test(relPath)) return false;
     const skillsPrefix = path.join("skills") + path.sep;

package/scripts/generate-cursor-plugin-artifacts.mjs

@@ -105,6 +105,10 @@ export function generateCursorVariant(srcDir, outDir, version) {
     // Drop the `.codex-plugin/` directory — Cursor does not consume it.
     if (relPath.startsWith(".codex-plugin/") || relPath === ".codex-plugin")
       return false;
+    // Drop the Codex hooks manifest the base build emits at hooks/hooks.json —
+    // Cursor reads its (filtered) hooks from .claude-plugin/plugin.json, not this
+    // Codex-shaped file. The surviving .sh scripts in hooks/ are kept below.
+    if (relPath === path.join("hooks", "hooks.json")) return false;
     // Drop Codex-specific per-skill openai.yaml artifacts — Cursor does not use them.
     // These live at skills/<n>/agents/openai.yaml and are generated by the Codex
     // artifact builder; the per-agent variants ship only the SKILL.md.

package/scripts/internal-copilot-runtime-probe.json

@@ -1,7 +1,13 @@
 {
-  "_comment": "Cached Copilot runtime probe results. Updated by Wave 3 verification probes (Task #17) and consumed by scripts/generate-copilot-plugin-artifacts.mjs. Missing values fall through to conservative defaults.",
-  "cliVersion": null,
+  "_comment": "Cached Copilot runtime probe results consumed by scripts/generate-copilot-plugin-artifacts.mjs. Populated 2026-05-28 by empirical probes against GitHub Copilot CLI 1.0.55 (see _evidence). Missing/null values fall through to conservative generator defaults.",
+  "cliVersion": "1.0.55",
   "pluginRootEnvVar": null,
-  "rulesAutoLoads": null,
-  "agentPathOverrideAccepted": null
+  "rulesAutoLoads": false,
+  "agentPathOverrideAccepted": false,
+  "_evidence": {
+    "cliVersion": "[VERIFIED-BY-RUN] `copilot --version` => 'GitHub Copilot CLI 1.0.55.'",
+    "rulesAutoLoads": "[VERIFIED-BY-RUN] A plugin's bundled rules/ directory is NOT auto-loaded. Probe: `copilot --plugin-dir <pkg> -p 'plugin codeword?'` with a sentinel rule in <pkg>/rules/sentinel.md and no .github/copilot-instructions.md returned 'UNKNOWN'. (Copilot DOES auto-load .github/copilot-instructions.md — a separate project file — but that template only points at the plugin, so inject-rules.sh must still ship. Hence false: do NOT strip inject-rules.sh.)",
+    "agentPathOverrideAccepted": "[PARTIAL] With an explicit manifest 'agents: ./agents/' pointer, `copilot --plugin-dir <pkg> --agent <ns>:<name>` loaded a non-.agent.md file (agents/probeagent.md) and it responded. However that is session-only --plugin-dir loading; the marketplace-install auto-discovery path is unverified and .agent.md loads in every observed context. Kept false so the generator retains the universally-safe rename to <name>.agent.md.",
+    "pluginRootEnvVar": "[VERIFIED-DOC] GitHub Copilot CLI plugin reference documents ${COPILOT_PLUGIN_DATA} is also exposed as ${CLAUDE_PLUGIN_DATA}; Copilot aliases the CLAUDE_* plugin env vars, so the ${CLAUDE_PLUGIN_ROOT} form the generator emits in hook commands is supported. null => generator keeps ${CLAUDE_PLUGIN_ROOT}. Direct hook-fire env capture was not achievable via --plugin-dir in -p mode (hook did not fire; firing likely requires a real `copilot plugin install` and/or interactive trust — unverified)."
+  }
 }

package/plugins/lisa/.codex-plugin/hooks/block-no-verify.sh

@@ -1,37 +0,0 @@
-#!/usr/bin/env bash
-# PreToolUse hook for Bash: blocks any command containing --no-verify.
-# --no-verify on git commit/push (and equivalents) bypasses pre-commit/pre-push
-# hooks that exist for a reason. The fix is to address the underlying issue,
-# not silence the check. See feedback_never_no_verify in user memory.
-#
-# Word-boundary match avoids false positives on flags like --no-verify-ssl,
-# --no-verify-host, etc.
-set -euo pipefail
-
-input="$(cat)"
-
-tool_name="$(printf '%s' "$input" | jq -r '.tool_name // empty')"
-if [ "$tool_name" != "Bash" ]; then
-  exit 0
-fi
-
-command_str="$(printf '%s' "$input" | jq -r '.tool_input.command // empty')"
-if [ -z "$command_str" ]; then
-  exit 0
-fi
-
-# Match --no-verify bounded by non-token characters (not alphanumeric, _, or -).
-# This catches all syntactic positions including subshells (e.g. `(git commit --no-verify)`)
-# while excluding longer flags like --no-verify-ssl, --no-verify-host, etc.
-if printf '%s' "$command_str" | grep -Eq '(^|[^[:alnum:]_-])--no-verify($|[^[:alnum:]_-])'; then
-  cat >&2 <<'EOF'
-Blocked: --no-verify bypasses pre-commit/pre-push hooks. Fix the underlying
-issue (lint error, failing test, formatting) or ask the user before bypassing.
-
-If the user has explicitly authorized the bypass for this specific command,
-re-run after they confirm.
-EOF
-  exit 2
-fi
-
-exit 0

package/plugins/lisa/.codex-plugin/hooks/inject-flow-context.sh

@@ -1,12 +0,0 @@
-#!/usr/bin/env bash
-# Tells subagents not to ask users for flow selection.
-# The parent agent has already determined the flow and work type.
-# Used by SubagentStart hook.
-set -euo pipefail
-
-jq -n '{
-  "hookSpecificOutput": {
-    "hookEventName": "SubagentStart",
-    "additionalContext": "You are a subagent operating within an established flow. Your parent agent has already determined the flow and work type. Do NOT ask the user to choose a flow or classify the request. Execute your assigned work within the context provided by your parent agent."
-  }
-}'

package/plugins/lisa/.codex-plugin/hooks/inject-rules.sh

@@ -1,33 +0,0 @@
-#!/usr/bin/env bash
-# Reads all .md files from the plugin's rules/eager/ directory and injects them
-# into the session context via additionalContext.
-# Used by SessionStart and SubagentStart hooks.
-#
-# The split between eager and reference rules is documented in
-# rules/eager/00-bootstrap.md (or the equivalent README). Reference bodies
-# under rules/reference/ are installed alongside but loaded only when the
-# eager breadcrumb points to them.
-set -euo pipefail
-
-RULES_DIR="${CLAUDE_PLUGIN_ROOT}/rules/eager"
-
-# Backward compatibility: if the eager subdir is absent (older Lisa install),
-# fall back to the flat rules/ directory so a partial upgrade still ships rules.
-if [ ! -d "$RULES_DIR" ]; then
-  RULES_DIR="${CLAUDE_PLUGIN_ROOT}/rules"
-fi
-
-# Bail silently if no rules directory at all
-[ -d "$RULES_DIR" ] || exit 0
-
-CONTEXT=""
-for file in "$RULES_DIR"/*.md; do
-  [ -f "$file" ] || continue
-  CONTEXT+="$(cat "$file")"$'\n\n'
-done
-
-# Bail if no rules found
-[ -n "$CONTEXT" ] || exit 0
-
-# Output as JSON — jq handles escaping
-jq -n --arg ctx "$CONTEXT" '{"additionalContext": $ctx}'

package/plugins/lisa/.codex-plugin/hooks/install-pkgs.sh

@@ -1,69 +0,0 @@
-#!/bin/bash
-# This file is managed by Lisa.
-# Do not edit directly — changes will be overwritten on the next `lisa` run.
-
-# Only run package installation when node_modules are missing.
-# This covers remote environments, new worktrees, fresh clones, and CI.
-if [ -d "node_modules" ]; then
-  exit 0
-fi
-
-# Detect package manager based on lock file presence
-if [ -f "bun.lockb" ] || [ -f "bun.lock" ]; then
-  bun install
-elif [ -f "pnpm-lock.yaml" ]; then
-  pnpm install
-elif [ -f "yarn.lock" ]; then
-  yarn install
-elif [ -f "package-lock.json" ]; then
-  npm install
-else
-  npm install
-fi
-
-# The tools below use Linux-specific binaries and paths — skip on other platforms.
-if [ "$(uname -s)" != "Linux" ]; then
-  exit 0
-fi
-
-# Install Gitleaks for secret detection (pre-commit hook)
-echo "Installing Gitleaks for secret detection..."
-GITLEAKS_VERSION="8.18.4"
-curl -sSfL "https://github.com/gitleaks/gitleaks/releases/download/v${GITLEAKS_VERSION}/gitleaks_${GITLEAKS_VERSION}_linux_x64.tar.gz" | tar -xz -C /usr/local/bin gitleaks
-echo "Gitleaks installed: $(gitleaks version)"
-
-# Install jira-cli for JIRA integration
-# The tarball nests the binary at jira_VERSION_linux_x86_64/bin/jira,
-# so we extract to a temp dir and copy the binary out.
-echo "Installing jira-cli for JIRA integration..."
-JIRA_CLI_VERSION="1.7.0"
-JIRA_TMPDIR=$(mktemp -d)
-curl -sSfL "https://github.com/ankitpokhrel/jira-cli/releases/download/v${JIRA_CLI_VERSION}/jira_${JIRA_CLI_VERSION}_linux_x86_64.tar.gz" \
-  | tar -xz -C "${JIRA_TMPDIR}"
-cp "${JIRA_TMPDIR}/jira_${JIRA_CLI_VERSION}_linux_x86_64/bin/jira" /usr/local/bin/jira
-chmod +x /usr/local/bin/jira
-rm -rf "${JIRA_TMPDIR}"
-echo "jira-cli installed: $(jira version)"
-
-# Install Chromium for Lighthouse CI (pre-push hook)
-# Playwright's bundled Chromium works with @lhci/cli
-echo "Installing Chromium for Lighthouse CI..."
-npx playwright install chromium
-
-# Find and export CHROME_PATH for Lighthouse CI
-# Use sort to ensure deterministic selection of the latest version
-CHROME_PATH=$(find ~/.cache/ms-playwright -name "chrome" -type f 2>/dev/null | grep "chrome-linux" | sort | tail -n 1)
-if [ -n "$CHROME_PATH" ]; then
-  # Append to ~/.bashrc for shell sessions (idempotent)
-  if ! grep -q "export CHROME_PATH=" ~/.bashrc 2>/dev/null; then
-    echo "export CHROME_PATH=\"$CHROME_PATH\"" >> ~/.bashrc
-  else
-    # Update existing CHROME_PATH in bashrc
-    sed -i "s|^export CHROME_PATH=.*|export CHROME_PATH=\"$CHROME_PATH\"|" ~/.bashrc
-  fi
-
-  export CHROME_PATH="$CHROME_PATH"
-  echo "Chromium installed at: $CHROME_PATH"
-fi
-
-exit 0

package/plugins/lisa/.codex-plugin/hooks/notify-ntfy.sh

@@ -1,183 +0,0 @@
-#!/bin/bash
-# This file is managed by Lisa.
-# Do not edit directly — changes will be overwritten on the next `lisa` run.
-# =============================================================================
-# ntfy.sh Notification Hook for Claude Code
-# =============================================================================
-# Sends desktop and mobile notifications via ntfy.sh when Claude needs
-# attention or finishes a task.
-#
-# Setup:
-#   1. Install ntfy app on mobile (iOS App Store / Android Play Store)
-#   2. Subscribe to your unique topic in the app
-#   3. Set NTFY_TOPIC environment variable (e.g., in ~/.bashrc or ~/.zshrc):
-#      export NTFY_TOPIC="my-claude-alerts-xyz123"
-#
-# @see https://ntfy.sh
-# =============================================================================
-
-# Read JSON input from stdin
-INPUT=$(cat)
-
-# Extract hook event name
-HOOK_EVENT=$(echo "$INPUT" | grep -o '"hook_event_name"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/.*: *"//' | sed 's/"$//')
-
-# Extract notification type (for Notification hooks)
-NOTIFICATION_TYPE=$(echo "$INPUT" | grep -o '"notification_type"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/.*: *"//' | sed 's/"$//')
-
-# Extract message if available
-MESSAGE=$(echo "$INPUT" | grep -o '"message"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/.*: *"//' | sed 's/"$//')
-
-# Extract session ID (first 8 chars for brevity)
-FULL_SESSION_ID=$(echo "$INPUT" | grep -o '"session_id"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/.*: *"//' | sed 's/"$//')
-SESSION_ID="${FULL_SESSION_ID:0:8}"
-
-# Extract transcript path for task summary
-TRANSCRIPT_PATH=$(echo "$INPUT" | grep -o '"transcript_path"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/.*: *"//' | sed 's/"$//')
-
-# Determine source (Web vs Local)
-if [ "$CLAUDE_CODE_REMOTE" = "true" ]; then
-    SOURCE="Web"
-else
-    SOURCE="Local"
-fi
-
-# Get project name from current directory
-PROJECT_NAME=$(basename "$CLAUDE_PROJECT_DIR" 2>/dev/null || basename "$(pwd)")
-
-# Load NTFY_TOPIC from local config if not already set
-if [ -z "$NTFY_TOPIC" ]; then
-    # Check for project-local config (gitignored)
-    if [ -f "$CLAUDE_PROJECT_DIR/.claude/env.local" ]; then
-        # shellcheck source=/dev/null
-        source "$CLAUDE_PROJECT_DIR/.claude/env.local"
-    fi
-    # Check for user-global config
-    if [ -z "$NTFY_TOPIC" ] && [ -f "$HOME/.claude/env.local" ]; then
-        # shellcheck source=/dev/null
-        source "$HOME/.claude/env.local"
-    fi
-fi
-
-# Exit silently if still not configured
-if [ -z "$NTFY_TOPIC" ]; then
-    exit 0
-fi
-
-# Extract task summary from transcript (last assistant message, truncated)
-TASK_SUMMARY=""
-if [ -n "$TRANSCRIPT_PATH" ] && [ -f "$TRANSCRIPT_PATH" ]; then
-    # Get the last assistant message from the JSONL transcript
-    # The transcript contains lines with "type":"assistant" and "message" content
-    # Use awk for cross-platform compatibility (tac is not available on macOS)
-    LAST_ASSISTANT=$(awk '/"type"[[:space:]]*:[[:space:]]*"assistant"/{line=$0} END{if(line) print line}' "$TRANSCRIPT_PATH" 2>/dev/null)
-    if [ -n "$LAST_ASSISTANT" ]; then
-        # Extract the message content - look for text content in the message
-        # Format: {"message":{"content":[{"type":"text","text":"..."}]}}
-        # Use jq for robust JSON parsing when available, fallback to grep/sed
-        if command -v jq >/dev/null 2>&1; then
-            RAW_SUMMARY=$(echo "$LAST_ASSISTANT" | jq -r '.message.content[] | select(.type == "text") | .text' 2>/dev/null | head -1)
-        else
-            # Fallback: simple regex extraction (may fail on escaped quotes)
-            RAW_SUMMARY=$(echo "$LAST_ASSISTANT" | grep -o '"text"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1 | sed 's/.*: *"//' | sed 's/"$//')
-        fi
-        if [ -n "$RAW_SUMMARY" ]; then
-            # Truncate to 100 chars and clean up newlines
-            TASK_SUMMARY=$(echo "$RAW_SUMMARY" | tr '\n' ' ' | cut -c1-100)
-            # Add ellipsis if truncated
-            if [ ${#RAW_SUMMARY} -gt 100 ]; then
-                TASK_SUMMARY="${TASK_SUMMARY}..."
-            fi
-        fi
-    fi
-fi
-
-# Build session info string (shown in body)
-SESSION_INFO=""
-if [ -n "$SESSION_ID" ]; then
-    SESSION_INFO="Session: $SESSION_ID"
-fi
-
-# Determine notification title and body based on hook type
-case "$HOOK_EVENT" in
-    "Notification")
-        case "$NOTIFICATION_TYPE" in
-            "permission_prompt")
-                TITLE="Claude [$SOURCE] - Permission Required"
-                BODY="${MESSAGE:-Claude needs your permission to continue}"
-                if [ -n "$SESSION_INFO" ]; then
-                    BODY="$SESSION_INFO
-$BODY"
-                fi
-                PRIORITY="high"
-                TAGS="warning"
-                ;;
-            "idle_prompt")
-                TITLE="Claude [$SOURCE] - Waiting"
-                BODY="${MESSAGE:-Claude is waiting for your input}"
-                if [ -n "$SESSION_INFO" ]; then
-                    BODY="$SESSION_INFO
-$BODY"
-                fi
-                PRIORITY="default"
-                TAGS="hourglass"
-                ;;
-            *)
-                TITLE="Claude [$SOURCE] - Attention"
-                BODY="${MESSAGE:-Claude needs your attention}"
-                if [ -n "$SESSION_INFO" ]; then
-                    BODY="$SESSION_INFO
-$BODY"
-                fi
-                PRIORITY="default"
-                TAGS="bell"
-                ;;
-        esac
-        ;;
-    "Stop")
-        TITLE="Claude [$SOURCE] - Finished"
-        BODY="$PROJECT_NAME"
-        if [ -n "$SESSION_INFO" ]; then
-            BODY="$SESSION_INFO | $BODY"
-        fi
-        if [ -n "$TASK_SUMMARY" ]; then
-            BODY="$BODY
-$TASK_SUMMARY"
-        fi
-        PRIORITY="default"
-        TAGS="white_check_mark"
-        ;;
-    "SubagentStop")
-        TITLE="Claude [$SOURCE] - Subagent Done"
-        BODY="$PROJECT_NAME"
-        if [ -n "$SESSION_INFO" ]; then
-            BODY="$SESSION_INFO | $BODY"
-        fi
-        if [ -n "$TASK_SUMMARY" ]; then
-            BODY="$BODY
-$TASK_SUMMARY"
-        fi
-        PRIORITY="low"
-        TAGS="checkered_flag"
-        ;;
-    *)
-        TITLE="Claude [$SOURCE]"
-        BODY="${MESSAGE:-Event: $HOOK_EVENT}"
-        if [ -n "$SESSION_INFO" ]; then
-            BODY="$SESSION_INFO
-$BODY"
-        fi
-        PRIORITY="default"
-        TAGS="robot"
-        ;;
-esac
-
-# Send notification via ntfy.sh
-curl -s \
-    -H "Title: $TITLE" \
-    -H "Priority: $PRIORITY" \
-    -H "Tags: $TAGS" \
-    -d "$BODY" \
-    "https://ntfy.sh/$NTFY_TOPIC" > /dev/null 2>&1
-
-exit 0

package/plugins/lisa/.codex-plugin/hooks/setup-jira-cli.sh

@@ -1,51 +0,0 @@
-#!/usr/bin/env bash
-##
-# Writes the JIRA CLI config file from environment variables.
-# Runs on SessionStart so the config is available for every session.
-#
-# Required env vars (must be created in your Claude Code Web environment):
-#   JIRA_INSTALLATION - cloud or local
-#   JIRA_SERVER       - Atlassian instance URL
-#   JIRA_LOGIN        - login email
-#   JIRA_PROJECT      - default project key
-#   JIRA_API_TOKEN    - already expected by jira-cli natively
-#
-# Optional env vars:
-#   JIRA_BOARD        - default board name
-##
-
-set -euo pipefail
-
-# Fix jira-cli installation if install-pkgs.sh failed to extract correctly.
-# Only attempt on Linux — the binary download is Linux-only.
-if [[ "$(uname -s)" == "Linux" ]] && ! command -v jira &>/dev/null; then
-  JIRA_CLI_VERSION="1.7.0"
-  TMPDIR=$(mktemp -d)
-  curl -sSfL "https://github.com/ankitpokhrel/jira-cli/releases/download/v${JIRA_CLI_VERSION}/jira_${JIRA_CLI_VERSION}_linux_x86_64.tar.gz" \
-    | tar -xz -C "${TMPDIR}"
-  cp "${TMPDIR}/jira_${JIRA_CLI_VERSION}_linux_x86_64/bin/jira" /usr/local/bin/jira
-  chmod +x /usr/local/bin/jira
-  rm -rf "${TMPDIR}"
-fi
-
-CONFIG_DIR="${HOME}/.config/.jira"
-CONFIG_FILE="${CONFIG_DIR}/.config.yml"
-
-# Skip config write if required vars are missing
-if [[ -z "${JIRA_SERVER:-}" || -z "${JIRA_LOGIN:-}" ]]; then
-  exit 0
-fi
-
-mkdir -p "${CONFIG_DIR}"
-
-cat > "${CONFIG_FILE}" << EOF
-installation: ${JIRA_INSTALLATION:-cloud}
-server: ${JIRA_SERVER}
-login: ${JIRA_LOGIN}
-project: ${JIRA_PROJECT:-}
-board: "${JIRA_BOARD:-}"
-auth_type: basic
-epic:
-  name: Epic Name
-  link: Epic Link
-EOF

package/plugins/lisa-harper-fabric/.codex-plugin/hooks/inject-rules.sh

@@ -1,16 +0,0 @@
-#!/usr/bin/env bash
-# Reads all .md files from the plugin's rules/ directory and injects them
-# into Claude context at session/subagent start.
-set -euo pipefail
-
-ROOT="${CLAUDE_PLUGIN_ROOT:-${CODEX_PLUGIN_ROOT:-$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)}}"
-RULES_DIR="$ROOT/rules"
-
-[ -d "$RULES_DIR" ] || exit 0
-
-for rule in "$RULES_DIR"/*.md; do
-  [ -f "$rule" ] || continue
-  printf '\n<lisa-harper-fabric-rule path="%s">\n' "$rule"
-  cat "$rule"
-  printf '\n</lisa-harper-fabric-rule>\n'
-done

package/plugins/lisa-nestjs/.codex-plugin/hooks/block-migration-edits.sh

@@ -1,60 +0,0 @@
-#!/bin/bash
-# This file is managed by Lisa.
-# Do not edit directly — changes will be overwritten on the next `lisa` run.
-
-# PreToolUse hook: block Write/Edit on TypeORM migration files.
-# NestJS projects must use `bun run migration:generate` to create migrations
-# from entity diffs. Hand-written migrations drift from entity metadata and
-# break the schema/migration contract.
-# Reference: https://docs.claude.com/en/docs/claude-code/hooks
-# Exit code 2 blocks the tool call and surfaces stderr to Claude.
-
-JSON_INPUT=$(cat)
-
-if ! command -v jq >/dev/null 2>&1; then
-  echo "⚠ block-migration-edits: jq not available, allowing edit" >&2
-  exit 0
-fi
-
-FILE_PATH=$(echo "$JSON_INPUT" | jq -r '.tool_input.file_path // empty')
-
-if [ -z "$FILE_PATH" ]; then
-  exit 0
-fi
-
-case "$FILE_PATH" in
-  */migrations/*.ts|*/migrations/*.js)
-    cat >&2 <<EOF
-❌ Blocked: Direct edits to TypeORM migration files are not allowed.
-
-File: $FILE_PATH
-
-Entity files (src/database/entities/*.ts) are the single source of
-truth for the database schema in this project. Migrations are a derived
-artifact — generate them from entity diffs:
-
-  1. Edit the entity to express the desired schema.
-  2. Run: bun run migration:generate --name=<DescriptiveName>
-  3. Review the generated migration; commit entity + migration together.
-
-If a schema change cannot be expressed via the entity model, the entity
-model is wrong — fix the entity, do not hand-write the migration.
-
-OUT-OF-BAND MIGRATIONS (seed data, backfills, data transformations,
-one-off cleanup): these genuinely cannot come from entity diffs. They
-are legitimate but they bypass the entity-as-source-of-truth contract.
-
-If you believe this edit is an out-of-band migration:
-  1. STOP and tell the user what change is needed and why it cannot
-     be expressed via the entity model.
-  2. Get explicit approval before proceeding.
-  3. Document the rationale in the migration's class comment.
-
-Do NOT silently hand-write a migration. See the nestjs-rules skill
-for the full rationale.
-EOF
-    exit 2
-    ;;
-esac
-
-exit 0

package/plugins/lisa-rails/.codex-plugin/hooks/inject-rules.sh

@@ -1,22 +0,0 @@
-#!/usr/bin/env bash
-# Reads all .md files from the plugin's rules/ directory and injects them
-# into the session context via additionalContext.
-# Used by SessionStart and SubagentStart hooks.
-set -euo pipefail
-
-RULES_DIR="${CLAUDE_PLUGIN_ROOT}/rules"
-
-# Bail silently if no rules directory
-[ -d "$RULES_DIR" ] || exit 0
-
-CONTEXT=""
-for file in "$RULES_DIR"/*.md; do
-  [ -f "$file" ] || continue
-  CONTEXT+="$(cat "$file")"$'\n\n'
-done
-
-# Bail if no rules found
-[ -n "$CONTEXT" ] || exit 0
-
-# Output as JSON — jq handles escaping
-jq -n --arg ctx "$CONTEXT" '{"additionalContext": $ctx}'