@codyswann/lisa 2.121.0 → 2.122.0

package/plugins/lisa-wiki-cursor/templates/llm-wiki-contract.md

@@ -0,0 +1,72 @@
+# {{displayName}} — LLM Wiki Contract
+
+> Generated by the `lisa-wiki` plugin from `{{wikiRoot}}/lisa-wiki.config.json`.
+> kernelVersion: {{kernelVersion}} · schemaVersion: {{schemaVersion}} · rendered: {{generatedDate}}
+> This snapshot keeps the wiki self-describing **without** the plugin installed. Re-render with
+> `/setup --upgrade`; do not hand-edit — change the config instead.
+
+## Purpose
+{{purpose}}
+
+## What this is
+A git-native markdown knowledge base under `{{wikiRoot}}/`, owned by **{{org}}**, maintained by the
+lisa-wiki kernel. Three layers: immutable **raw sources** (`{{wikiRoot}}/sources/`), the LLM-owned
+**synthesis** layer (the category directories), and this **schema** layer (config + this contract).
+Repository mode: **{{mode}}**.
+
+## Layout
+- `{{wikiRoot}}/index.md` — navigation map of every page (read first).
+- `{{wikiRoot}}/log.md` — append-only operation ledger.
+- `{{wikiRoot}}/start-here.md` — orientation + purpose.
+- `{{wikiRoot}}/sources/` — provenance (source notes); layout: **{{sourceLayout}}**.
+- `{{wikiRoot}}/state/` — per-source ingestion cursors (JSON).
+- `{{wikiRoot}}/staff/` — digital-staff role pages (optional).
+- Synthesis categories: {{categories}}.
+
+## Answering questions (query-first)
+When you need to answer a question about this project — its code, architecture, decisions, domain
+concepts, conventions, or documentation — reach for the wiki **first**: run `/query "<question>"`
+(Codex: `$lisa-wiki-query`) before ad-hoc code search, grep, or a web lookup. The wiki is the
+curated, cited source of truth for this project, so a query is usually faster and more accurate than
+re-deriving the answer from raw files.
+
+This is the **primary** method, not the only one. If `/query` returns nothing relevant, the answer
+is not in the wiki yet, or the question is about live/uncommitted state, fall back to reading the
+code, browsing `{{wikiRoot}}/index.md`, or other tools — and consider `/ingest` to capture any
+durable knowledge you had to reconstruct so the next query succeeds.
+
+## Ordered ingestion pipeline (never reorder)
+`source note → synthesis → index → log → verify → state → commit/PR`.
+State advances **only** after source notes + synthesis + index + log + verification all pass.
+Connectors write **only** their source note (+ run metadata); the kernel performs synthesis, index,
+log, verification, state advancement, and PR.
+
+## Standards
+- Frontmatter required on new/touched synthesis pages and source notes
+  (`type`, `created`, `updated`, `related`, `sources`[, `sensitivity`]).
+- `index.md` is a per-category table; `log.md` is an append-only table with the fixed operation
+  vocabulary: `INIT, SETUP, INGEST, CREATE, UPDATE, MERGE, DEPRECATE, LINT, QUERY, REBUILD-INDEX`.
+- Cite sources in plain text, e.g. `Source: {{wikiRoot}}/sources/<system>/<note>.md`.
+- Do not invent facts; weak or unverified material → `{{wikiRoot}}/open-questions/`.
+
+## Sources & connectors
+Enabled connectors: {{connectors}}.
+Universal sources every project may ingest: self + other registered projects' git/PR history,
+**project-scoped** memory, and roles. **Memory is project-scoped ONLY — never global/unrelated.**
+External-write connectors (e.g. Slack OAuth, CRM writeback) run only with explicit intent and never
+auto-merge. A bare full ingest runs every enabled non-external-write source.
+
+## Safety
+- Source retention: **{{sourceRetention}}**. Default sensitivity: **{{sensitivityDefault}}**.
+- Pre-commit: `git diff --check`, secret scan, tenant/contamination scan, touched-file guard.
+- Never commit secrets/OAuth artifacts. In wrapper/standalone modes, never stage child-repo contents.
+
+## Git
+{{prPolicy}}.
+
+## README
+Mode: **{{readmeMode}}** (rich keeps the public README; stub points to `/onboard-me`; preserve leaves it).
+
+## Commands
+`/ingest` · `/query` · `/lint` · `/setup` · `/migrate` · `/add-ingest` · `/add-role` · `/onboard-me` · `/doctor`
+(On Codex, invoke the matching `lisa-wiki-*` skills, e.g. `$lisa-wiki-ingest`.)

package/plugins/lisa-wiki-cursor/templates/log.md

@@ -0,0 +1,8 @@
+# {{displayName}} — Log
+
+> Append-only. One row per operation. Operations:
+> `INIT, SETUP, INGEST, CREATE, UPDATE, MERGE, DEPRECATE, LINT, QUERY, REBUILD-INDEX`.
+
+| Date | Operation | Target | Notes |
+|---|---|---|---|
+| {{generatedDate}} | SETUP | {{wikiRoot}}/ | Initialized {{displayName}} with the lisa-wiki kernel. |

package/plugins/lisa-wiki-cursor/templates/page-types/architecture.md

@@ -0,0 +1,18 @@
+---
+type: architecture
+created: {{date}}
+updated: {{date}}
+related: []
+sources: []
+---
+
+# {{title}}
+
+## Overview
+
+## Components
+
+## Data flow
+
+## Constraints & decisions
+<!-- Link relevant decision/ pages; cite source notes -->

package/plugins/lisa-wiki-cursor/templates/page-types/concept.md

@@ -0,0 +1,18 @@
+---
+type: concept
+created: {{date}}
+updated: {{date}}
+related: []
+sources: []
+---
+
+# {{title}}
+
+## Definition
+
+## Key points
+
+## Evidence
+<!-- Cite source notes, e.g. Source: sources/<system>/<note>.md -->
+
+## Open questions

package/plugins/lisa-wiki-cursor/templates/page-types/decision.md

@@ -0,0 +1,18 @@
+---
+type: decision
+created: {{date}}
+updated: {{date}}
+related: []
+sources: []
+---
+
+# {{title}}
+
+## Context
+
+## Decision
+
+## Consequences
+
+## Status
+<!-- proposed | accepted | superseded -->

package/plugins/lisa-wiki-cursor/templates/page-types/entity.md

@@ -0,0 +1,19 @@
+---
+type: entity
+created: {{date}}
+updated: {{date}}
+related: []
+sources: []
+---
+
+# {{title}}
+
+## Overview
+
+## Key capabilities
+
+## Relationships
+<!-- People, products, systems this entity connects to -->
+
+## Context & evidence
+<!-- Cite source notes -->

package/plugins/lisa-wiki-cursor/templates/page-types/open-question.md

@@ -0,0 +1,18 @@
+---
+type: open-question
+created: {{date}}
+updated: {{date}}
+related: []
+sources: []
+---
+
+# {{title}}
+
+## The question
+
+## What we know
+<!-- Cite source notes; this is where weak/unverified material lives until confirmed -->
+
+## What we still need
+
+## Owner

package/plugins/lisa-wiki-cursor/templates/page-types/playbook.md

@@ -0,0 +1,18 @@
+---
+type: playbook
+created: {{date}}
+updated: {{date}}
+related: []
+sources: []
+---
+
+# {{title}}
+
+## When to use
+
+## Steps
+
+## Verification
+<!-- How to confirm it worked -->
+
+## Pitfalls

package/plugins/lisa-wiki-cursor/templates/page-types/project.md

@@ -0,0 +1,19 @@
+---
+type: project
+created: {{date}}
+updated: {{date}}
+related: []
+sources: []
+---
+
+# {{title}}
+
+## Repository
+<!-- | Field | Value | : local path, remote, default branch, HEAD, status -->
+
+## Technology signals
+
+## Structure signals
+
+## Notes & evidence
+<!-- Cite source notes, e.g. PR #/commit -->

package/plugins/lisa-wiki-cursor/templates/page-types/requirement.md

@@ -0,0 +1,19 @@
+---
+type: requirement
+created: {{date}}
+updated: {{date}}
+related: []
+sources: []
+---
+
+# {{title}}
+
+## Summary
+
+## Acceptance criteria
+<!-- Gherkin: Given / When / Then -->
+
+## Out of scope
+
+## Notes & evidence
+<!-- Cite source notes -->

package/plugins/lisa-wiki-cursor/templates/page-types/staff.md

@@ -0,0 +1,26 @@
+---
+type: staff
+created: {{date}}
+updated: {{date}}
+related: []
+sources: []
+sensitivity: {{sensitivity}}
+---
+
+# {{role}} ({{id}})
+
+## Role
+<!-- Human or Agent; what this role is responsible for -->
+
+## Domain
+Owned categories: {{ownedCategories}}
+Owned connectors: {{ownedConnectors}}
+
+## Expertise
+{{expertise}}
+
+## Reports to
+
+## Notes
+<!-- The runnable subagent for this role lives at .claude/agents/{{id}}.md and .codex/agents/{{id}}.toml.
+     Whether it is ever invoked/scheduled is out of scope for the wiki. -->

package/plugins/lisa-wiki-cursor/templates/start-here.md

@@ -0,0 +1,24 @@
+# Start here — {{displayName}}
+
+## Purpose
+{{purpose}}
+
+## What this is
+A git-native LLM Wiki owned by **{{org}}** and maintained by the `lisa-wiki` kernel. It is the
+durable home for this project's knowledge (and documentation). Raw sources are preserved under
+`{{wikiRoot}}/sources/`; distilled knowledge lives in the category pages; the rules are in
+`{{wikiRoot}}/schema/llm-wiki-contract.md`.
+
+## How to use it
+- **New here?** Run `/onboard-me` (Codex: `$lisa-wiki-onboard-me`) for a guided tour + sample questions.
+- **Find/answer something:** `/query "<question>"` — cited answers from the wiki.
+- **Add knowledge:** `/ingest <url|file|prompt>` (Codex: `$lisa-wiki-ingest`), or `/ingest` with no
+  argument for a full ingest across all enabled non-external-write sources (external-write sources
+  require explicit intent).
+- **Browse:** [index.md](index.md).
+- **Check health:** `/lint`.
+
+## Map
+Synthesis categories: {{categories}}.
+Sources: `{{wikiRoot}}/sources/` · State: `{{wikiRoot}}/state/` · Contract:
+`{{wikiRoot}}/schema/llm-wiki-contract.md` · Log: `{{wikiRoot}}/log.md`.

package/plugins/lisa-wiki-cursor/templates/state-readme.md

@@ -0,0 +1,20 @@
+# state/ — ingestion cursors
+
+JSON cursors that let ingestion resume incrementally — one file per source/connector at
+`state/<system>/*.json`. A cursor is advanced **only after** its source notes + synthesis + index +
+log + verification all pass (never before). Common envelope:
+
+```json
+{
+  "connector": "git",
+  "profile": "default",
+  "lastSuccessfulRunAt": "1970-01-01T00:00:00Z",
+  "cursor": {},
+  "sourceNotes": [],
+  "synthesisPages": [],
+  "schemaVersion": "1.0.0"
+}
+```
+
+The post-migration / post-setup verification report is written to
+`state/migration/doctor-report.json` by `/doctor`.

package/plugins/lisa-wiki-cursor/templates/wrapper-gitignore.txt

@@ -0,0 +1,19 @@
+# BEGIN: AI GUARDRAILS WIKI
+# Managed by the lisa-wiki kernel. Do not edit between these markers — re-run
+# /lisa-wiki:setup (or the equivalent script) to update. Patterns outside the
+# block are preserved untouched. The "WIKI" suffix lets this block coexist
+# with the base lisa plugin's "# BEGIN: AI GUARDRAILS" block when both are
+# installed (the copy-contents strategy keys on the marker suffix).
+
+# Claude Code per-session git worktrees. Each Claude session that needs an
+# isolated working copy spawns one under .claude/worktrees/ (via
+# `git worktree add`). They are transient, large (often hundreds of MB each),
+# and per-developer; they must never be committed.
+/.claude/worktrees/
+
+# Codex CLI per-session worktrees (Codex equivalent of the above).
+/.codex/worktrees/
+
+# Lisa backup snapshots (created by `lisa` runs).
+/.lisabak/
+# END: AI GUARDRAILS WIKI

package/scripts/build-plugins.sh

@@ -43,17 +43,19 @@ build_plugin() {
   echo "Built plugins/$out_name (v$VERSION)"
 }
 
-# Generate a Pattern B per-agent variant for the base plugin only.
-# Variants are derived from the built Claude artifact at plugins/lisa/
-# and land at plugins/lisa-<agent>/.
+# Generate a Pattern B per-agent variant for a built plugin.
+# Variants are derived from a built Claude artifact at plugins/<src_name>/
+# and land at plugins/<out_name>/.
 build_per_agent_variant() {
   local agent="$1"
-  local src="$PLUGINS_DIR/lisa"
+  local src_name="$2"
+  local out_name="$3"
+  local src="$PLUGINS_DIR/$src_name"
   if [ ! -d "$src" ]; then
-    echo "Skipping per-agent variant lisa-$agent (no plugins/lisa source)"
+    echo "Skipping per-agent variant $out_name (no plugins/$src_name source)"
     return 0
   fi
-  local out="$PLUGINS_DIR/lisa-$agent"
+  local out="$PLUGINS_DIR/$out_name"
   node "$ROOT_DIR/scripts/generate-${agent}-plugin-artifacts.mjs" "$src" "$out" "$VERSION"
 }
 
@@ -72,12 +74,27 @@ for name in "${STANDALONE[@]}"; do
   build_plugin "$name" "lisa-$name"
 done
 
-# Pattern B per-agent variants of the base Lisa plugin.
-# Codex is NOT generated as a separate plugins/lisa-codex/ artifact — Codex
-# reads .codex-plugin/plugin.json from plugins/lisa/ directly (the existing
-# dual-pointer pattern, preserved per
+# Pattern B per-agent variants. Codex is NOT generated as a separate
+# plugins/lisa-codex/ artifact — Codex reads .codex-plugin/plugin.json from the
+# Claude artifact directly (the existing dual-pointer pattern, preserved per
 # wiki/architecture/pattern-b-fan-out-spec.md).
+#
+# Fan out EVERY built Claude plugin (base + every stack + standalones) to each
+# per-agent runtime so cursor/agy/copilot reach parity with Claude/Codex on
+# stack-specific functionality, not just the base governance plugin. The base
+# keeps its short name `lisa-<agent>`; every other plugin becomes
+# `<plugin>-<agent>` (e.g. lisa-typescript-cursor).
 PER_AGENT_VARIANTS=(cursor agy copilot)
+FANOUT_SOURCES=(lisa)
+for stack in "${STACKS[@]}"; do FANOUT_SOURCES+=("lisa-$stack"); done
+for name in "${STANDALONE[@]}"; do FANOUT_SOURCES+=("lisa-$name"); done
 for agent in "${PER_AGENT_VARIANTS[@]}"; do
-  build_per_agent_variant "$agent"
+  for src_name in "${FANOUT_SOURCES[@]}"; do
+    if [ "$src_name" = "lisa" ]; then
+      out_name="lisa-$agent"
+    else
+      out_name="$src_name-$agent"
+    fi
+    build_per_agent_variant "$agent" "$src_name" "$out_name"
+  done
 done

package/scripts/generate-codex-plugin-artifacts.mjs

@@ -468,24 +468,33 @@ function main() {
  * @param {object} claudeManifest Parsed contents of .claude-plugin/plugin.json.
  */
 function emitCodexHooks(pluginDir, claudeManifest) {
-  const codexPluginDir = path.join(pluginDir, ".codex-plugin");
-  const hooksJsonPath = path.join(codexPluginDir, "hooks.json");
-  const hooksScriptsDir = path.join(codexPluginDir, "hooks");
+  // Codex auto-discovers a plugin's hooks at <plugin-root>/hooks/hooks.json and
+  // resolves the manifest hooks pointer + ${PLUGIN_ROOT} relative to the plugin
+  // root (developers.openai.com/codex/plugins/build). The hook scripts already
+  // ship at <plugin-root>/hooks/ (copied from plugins/src by the Claude build),
+  // so the Codex hooks.json lives alongside them and no script copy is needed.
+  const hooksDir = path.join(pluginDir, "hooks");
+  const hooksJsonPath = path.join(hooksDir, "hooks.json");
+  // Clean up the pre-2.121 layout (hooks.json + copied scripts under
+  // .codex-plugin/) so a rebuilt plugin never ships both.
+  const legacyCodexPluginDir = path.join(pluginDir, ".codex-plugin");
+  fs.rmSync(path.join(legacyCodexPluginDir, "hooks.json"), { force: true });
+  fs.rmSync(path.join(legacyCodexPluginDir, "hooks"), {
+    force: true,
+    recursive: true,
+  });
   const filtered = filterCodexHooks(claudeManifest.hooks);
   if (filtered === null) {
-    // Nothing survived the filter. Remove any stale hooks artifacts from a
-    // prior build so componentPointers() doesn't keep advertising removed
-    // hooks via the ./hooks.json pointer.
+    // Nothing survived the filter. Remove any stale hooks.json so
+    // componentPointers() doesn't keep advertising removed hooks.
     fs.rmSync(hooksJsonPath, { force: true });
-    fs.rmSync(hooksScriptsDir, { force: true, recursive: true });
     return;
   }
-  fs.mkdirSync(codexPluginDir, { recursive: true });
+  fs.mkdirSync(hooksDir, { recursive: true });
   fs.writeFileSync(
     hooksJsonPath,
     `${JSON.stringify(buildCodexHooksDocument(filtered), null, 2)}\n`
   );
-  copyCodexHookScripts(pluginDir, filtered);
 }
 
 /**
@@ -540,8 +549,8 @@ function componentPointers(pluginDir) {
     ...(fs.existsSync(path.join(pluginDir, ".mcp.json"))
       ? { mcpServers: "./.mcp.json" }
       : {}),
-    ...(fs.existsSync(path.join(pluginDir, ".codex-plugin", "hooks.json"))
-      ? { hooks: "./hooks.json" }
+    ...(fs.existsSync(path.join(pluginDir, "hooks", "hooks.json"))
+      ? { hooks: "./hooks/hooks.json" }
       : {}),
   };
 }
@@ -551,8 +560,9 @@ function componentPointers(pluginDir) {
  * Claude plugin.json hooks block:
  *   - Drop every `entire hooks claude-code *` command (Claude-only).
  *   - Drop every reference to `enforce-team-first.sh` (Claude-team-specific).
- *   - Rewrite ${CLAUDE_PLUGIN_ROOT}/hooks/<script>.sh to ./hooks/<script>.sh
- *     (Codex resolves plugin paths relative to .codex-plugin/plugin.json).
+ *   - Rewrite ${CLAUDE_PLUGIN_ROOT}/hooks/<script>.sh to
+ *     ${PLUGIN_ROOT}/hooks/<script>.sh (Codex exposes the installed plugin
+ *     root to hook commands as ${PLUGIN_ROOT}).
  *   - Drop matchers that produce no surviving handlers.
  *
  * When the resulting block is empty, no hooks.json is written and the
@@ -590,11 +600,13 @@ export function filterCodexHooks(hooksBlock) {
           return [
             {
               ...h,
-              // Codex hook commands resolve relative to .codex-plugin/plugin.json;
-              // rewrite to a path the hooks.json sibling will find.
+              // Codex exposes the installed plugin root as ${PLUGIN_ROOT} to hook
+              // commands (developers.openai.com/codex/plugins/build). A bare
+              // ./hooks/ path would resolve against the session cwd, not the
+              // plugin, so rewrite to the plugin-root env var.
               command: h.command.replaceAll(
                 "${CLAUDE_PLUGIN_ROOT}/hooks/",
-                "./hooks/"
+                "${PLUGIN_ROOT}/hooks/"
               ),
             },
           ];
@@ -613,38 +625,6 @@ export function filterCodexHooks(hooksBlock) {
   return Object.keys(out).length > 0 ? out : null;
 }
 
-/**
- * Copy hook scripts that survived filterCodexHooks into the Codex artifact.
- *
- * Scripts land at <pluginDir>/.codex-plugin/hooks/ so the hooks.json pointer
- * "./hooks/<n>.sh" resolves correctly when Codex loads the plugin.
- *
- * @param {string} pluginDir Built Claude plugin directory.
- * @param {object} hooks Codex-shaped hooks block from filterCodexHooks.
- */
-function copyCodexHookScripts(pluginDir, hooks) {
-  const srcHooksDir = path.join(pluginDir, "hooks");
-  if (!fs.existsSync(srcHooksDir)) return;
-  const referenced = new Set();
-  for (const entries of Object.values(hooks)) {
-    for (const entry of entries) {
-      for (const h of entry.hooks ?? []) {
-        if (typeof h.command !== "string") continue;
-        const m = /^\.\/hooks\/([^/\s]+\.sh)/.exec(h.command);
-        if (m) referenced.add(m[1]);
-      }
-    }
-  }
-  if (referenced.size === 0) return;
-  const dstHooksDir = path.join(pluginDir, ".codex-plugin", "hooks");
-  fs.mkdirSync(dstHooksDir, { recursive: true });
-  for (const name of referenced) {
-    const src = path.join(srcHooksDir, name);
-    if (!fs.existsSync(src)) continue;
-    fs.copyFileSync(src, path.join(dstHooksDir, name));
-  }
-}
-
 function metadataFor(pluginName, claudeManifest) {
   const map = {
     lisa: {

package/scripts/generate-copilot-plugin-artifacts.mjs

@@ -139,6 +139,11 @@ export function generateCopilotVariant(srcDir, outDir, version) {
   copyDir(srcDir, outDir, relPath => {
     if (relPath.startsWith(".codex-plugin/") || relPath === ".codex-plugin")
       return false;
+    // Drop the Codex hooks manifest the base build emits at hooks/hooks.json —
+    // Copilot reads its (camelCase) hooks from .claude-plugin/plugin.json, not
+    // this Codex-shaped (PascalCase, ${PLUGIN_ROOT}) file. Keeping it would ship
+    // a spurious, wrong-shaped hooks manifest in the Copilot variant.
+    if (relPath === path.join("hooks", "hooks.json")) return false;
     // Drop Codex-specific per-skill openai.yaml artifacts — Copilot does not use them.
     if (/^skills\/[^/]+\/agents\/openai\.ya?ml$/.test(relPath)) return false;
     const skillsPrefix = path.join("skills") + path.sep;

package/scripts/generate-cursor-plugin-artifacts.mjs

@@ -105,6 +105,10 @@ export function generateCursorVariant(srcDir, outDir, version) {
     // Drop the `.codex-plugin/` directory — Cursor does not consume it.
     if (relPath.startsWith(".codex-plugin/") || relPath === ".codex-plugin")
       return false;
+    // Drop the Codex hooks manifest the base build emits at hooks/hooks.json —
+    // Cursor reads its (filtered) hooks from .claude-plugin/plugin.json, not this
+    // Codex-shaped file. The surviving .sh scripts in hooks/ are kept below.
+    if (relPath === path.join("hooks", "hooks.json")) return false;
     // Drop Codex-specific per-skill openai.yaml artifacts — Cursor does not use them.
     // These live at skills/<n>/agents/openai.yaml and are generated by the Codex
     // artifact builder; the per-agent variants ship only the SKILL.md.

package/scripts/internal-copilot-runtime-probe.json

@@ -1,7 +1,13 @@
 {
-  "_comment": "Cached Copilot runtime probe results. Updated by Wave 3 verification probes (Task #17) and consumed by scripts/generate-copilot-plugin-artifacts.mjs. Missing values fall through to conservative defaults.",
-  "cliVersion": null,
+  "_comment": "Cached Copilot runtime probe results consumed by scripts/generate-copilot-plugin-artifacts.mjs. Populated 2026-05-28 by empirical probes against GitHub Copilot CLI 1.0.55 (see _evidence). Missing/null values fall through to conservative generator defaults.",
+  "cliVersion": "1.0.55",
   "pluginRootEnvVar": null,
-  "rulesAutoLoads": null,
-  "agentPathOverrideAccepted": null
+  "rulesAutoLoads": false,
+  "agentPathOverrideAccepted": false,
+  "_evidence": {
+    "cliVersion": "[VERIFIED-BY-RUN] `copilot --version` => 'GitHub Copilot CLI 1.0.55.'",
+    "rulesAutoLoads": "[VERIFIED-BY-RUN] A plugin's bundled rules/ directory is NOT auto-loaded. Probe: `copilot --plugin-dir <pkg> -p 'plugin codeword?'` with a sentinel rule in <pkg>/rules/sentinel.md and no .github/copilot-instructions.md returned 'UNKNOWN'. (Copilot DOES auto-load .github/copilot-instructions.md — a separate project file — but that template only points at the plugin, so inject-rules.sh must still ship. Hence false: do NOT strip inject-rules.sh.)",
+    "agentPathOverrideAccepted": "[PARTIAL] With an explicit manifest 'agents: ./agents/' pointer, `copilot --plugin-dir <pkg> --agent <ns>:<name>` loaded a non-.agent.md file (agents/probeagent.md) and it responded. However that is session-only --plugin-dir loading; the marketplace-install auto-discovery path is unverified and .agent.md loads in every observed context. Kept false so the generator retains the universally-safe rename to <name>.agent.md.",
+    "pluginRootEnvVar": "[VERIFIED-DOC] GitHub Copilot CLI plugin reference documents ${COPILOT_PLUGIN_DATA} is also exposed as ${CLAUDE_PLUGIN_DATA}; Copilot aliases the CLAUDE_* plugin env vars, so the ${CLAUDE_PLUGIN_ROOT} form the generator emits in hook commands is supported. null => generator keeps ${CLAUDE_PLUGIN_ROOT}. Direct hook-fire env capture was not achievable via --plugin-dir in -p mode (hook did not fire; firing likely requires a real `copilot plugin install` and/or interactive trust — unverified)."
+  }
 }

package/plugins/lisa/.codex-plugin/hooks/block-no-verify.sh

@@ -1,37 +0,0 @@
-#!/usr/bin/env bash
-# PreToolUse hook for Bash: blocks any command containing --no-verify.
-# --no-verify on git commit/push (and equivalents) bypasses pre-commit/pre-push
-# hooks that exist for a reason. The fix is to address the underlying issue,
-# not silence the check. See feedback_never_no_verify in user memory.
-#
-# Word-boundary match avoids false positives on flags like --no-verify-ssl,
-# --no-verify-host, etc.
-set -euo pipefail
-
-input="$(cat)"
-
-tool_name="$(printf '%s' "$input" | jq -r '.tool_name // empty')"
-if [ "$tool_name" != "Bash" ]; then
-  exit 0
-fi
-
-command_str="$(printf '%s' "$input" | jq -r '.tool_input.command // empty')"
-if [ -z "$command_str" ]; then
-  exit 0
-fi
-
-# Match --no-verify bounded by non-token characters (not alphanumeric, _, or -).
-# This catches all syntactic positions including subshells (e.g. `(git commit --no-verify)`)
-# while excluding longer flags like --no-verify-ssl, --no-verify-host, etc.
-if printf '%s' "$command_str" | grep -Eq '(^|[^[:alnum:]_-])--no-verify($|[^[:alnum:]_-])'; then
-  cat >&2 <<'EOF'
-Blocked: --no-verify bypasses pre-commit/pre-push hooks. Fix the underlying
-issue (lint error, failing test, formatting) or ask the user before bypassing.
-
-If the user has explicitly authorized the bypass for this specific command,
-re-run after they confirm.
-EOF
-  exit 2
-fi
-
-exit 0

package/plugins/lisa/.codex-plugin/hooks/inject-flow-context.sh

@@ -1,12 +0,0 @@
-#!/usr/bin/env bash
-# Tells subagents not to ask users for flow selection.
-# The parent agent has already determined the flow and work type.
-# Used by SubagentStart hook.
-set -euo pipefail
-
-jq -n '{
-  "hookSpecificOutput": {
-    "hookEventName": "SubagentStart",
-    "additionalContext": "You are a subagent operating within an established flow. Your parent agent has already determined the flow and work type. Do NOT ask the user to choose a flow or classify the request. Execute your assigned work within the context provided by your parent agent."
-  }
-}'

package/plugins/lisa/.codex-plugin/hooks/inject-rules.sh

@@ -1,33 +0,0 @@
-#!/usr/bin/env bash
-# Reads all .md files from the plugin's rules/eager/ directory and injects them
-# into the session context via additionalContext.
-# Used by SessionStart and SubagentStart hooks.
-#
-# The split between eager and reference rules is documented in
-# rules/eager/00-bootstrap.md (or the equivalent README). Reference bodies
-# under rules/reference/ are installed alongside but loaded only when the
-# eager breadcrumb points to them.
-set -euo pipefail
-
-RULES_DIR="${CLAUDE_PLUGIN_ROOT}/rules/eager"
-
-# Backward compatibility: if the eager subdir is absent (older Lisa install),
-# fall back to the flat rules/ directory so a partial upgrade still ships rules.
-if [ ! -d "$RULES_DIR" ]; then
-  RULES_DIR="${CLAUDE_PLUGIN_ROOT}/rules"
-fi
-
-# Bail silently if no rules directory at all
-[ -d "$RULES_DIR" ] || exit 0
-
-CONTEXT=""
-for file in "$RULES_DIR"/*.md; do
-  [ -f "$file" ] || continue
-  CONTEXT+="$(cat "$file")"$'\n\n'
-done
-
-# Bail if no rules found
-[ -n "$CONTEXT" ] || exit 0
-
-# Output as JSON — jq handles escaping
-jq -n --arg ctx "$CONTEXT" '{"additionalContext": $ctx}'