@codyswann/lisa 2.151.0 → 2.152.1

package/dist/opencode/hooks-installer.js

@@ -0,0 +1,300 @@
+/**
+ * Install Lisa-managed OpenCode hooks into a host project.
+ *
+ * Unlike Codex (which drives every hook through shell scripts wired into
+ * `.codex/hooks.json`), OpenCode is mapped to its NATIVE surfaces first, then
+ * falls back to runtime plugins only where genuine behavior is required:
+ *
+ *   - block-no-verify → `permission.bash` deny rules in `opencode.json`. Cheaper
+ *     and more robust than a hook: OpenCode evaluates the parsed command against
+ *     glob patterns and rejects matches before they run (verified-by-run on
+ *     opencode 1.16.2: `git commit … --no-verify` and `HUSKY=0 …` are denied).
+ *   - format-on-edit → OpenCode's BUILT-IN prettier formatter already formats on
+ *     edit, so Lisa emits no formatter config (overriding it would be worse than
+ *     the default). This is why there is no format plugin below.
+ *   - inject-rules → not needed; rules ship via the canonical `AGENTS.md`, which
+ *     OpenCode reads natively (handled by the skills/AGENTS.md emit).
+ *   - everything that needs runtime behavior (blocking suppression directives /
+ *     migration edits, linting / scanning just-edited files, session bootstrap)
+ *     → a `.opencode/plugin/lisa-*.ts` module. OpenCode loads project plugins
+ *     and fires their `tool.execute.before` / `tool.execute.after` hooks under
+ *     `opencode run` headless (verified-by-run; unlike agy / Copilot).
+ *
+ * The plugin templates live in `src/opencode/plugin-templates/` and are copied
+ * verbatim into the host's `.opencode/plugin/`. Stack-specific plugins are gated
+ * by `forProjectTypes` so they ship only when the relevant project type is
+ * detected, exactly like the Codex hook catalog.
+ * @module opencode/hooks-installer
+ */
+import * as fse from "fs-extra";
+import { copyFile, readFile, readdir, rm, writeFile } from "node:fs/promises";
+import * as path from "node:path";
+import { fileURLToPath } from "node:url";
+import { applyEdits, modify, parse as parseJsonc, } from "jsonc-parser";
+import { OPENCODE_CONFIG_DIR } from "./manifest.js";
+import { OPENCODE_SCHEMA_URL } from "./settings-installer.js";
+/** Subdirectory inside `.opencode/` where OpenCode discovers project plugins */
+export const OPENCODE_PLUGIN_SUBDIR = "plugin";
+/** Filename of the OpenCode project config merged at the host root */
+export const OPENCODE_CONFIG_FILENAME = "opencode.json";
+/** Prefix every Lisa-managed plugin filename carries (used for stale cleanup) */
+const LISA_PLUGIN_PREFIX = "lisa-";
+/**
+ * `permission.bash` deny patterns that replace Lisa's `block-no-verify` hook.
+ * Each glob is matched against the parsed shell command; `*` matches any run of
+ * characters. Deny-only (no catch-all allow) so non-matching commands fall
+ * through to the host's / OpenCode's default posture.
+ */
+const NO_VERIFY_DENY_PATTERNS = {
+    "*--no-verify*": "deny",
+    "*HUSKY=0*": "deny",
+    "*HUSKY_SKIP_HOOKS=*": "deny",
+    "*core.hooksPath*/dev/null*": "deny",
+};
+/**
+ * Plugin catalog — the OpenCode counterpart of the Codex HOOK_CATALOG. Adding a
+ * plugin? Drop a template in `plugin-templates/`, add an entry here, add tests.
+ */
+const PLUGIN_CATALOG = [
+    {
+        id: "session-bootstrap",
+        templateFilename: "lisa-session-bootstrap.ts",
+        forProjectTypes: ["*"],
+    },
+    {
+        id: "block-suppress-directives",
+        templateFilename: "lisa-block-suppress-directives.ts",
+        forProjectTypes: ["typescript"],
+    },
+    {
+        id: "lint-on-edit",
+        templateFilename: "lisa-lint-on-edit.ts",
+        forProjectTypes: ["typescript"],
+    },
+    {
+        id: "sg-scan-on-edit",
+        templateFilename: "lisa-sg-scan-on-edit.ts",
+        forProjectTypes: ["typescript", "rails"],
+    },
+    {
+        id: "block-migration-edits",
+        templateFilename: "lisa-block-migration-edits.ts",
+        forProjectTypes: ["nestjs"],
+    },
+    {
+        id: "rubocop-on-edit",
+        templateFilename: "lisa-rubocop-on-edit.ts",
+        forProjectTypes: ["rails"],
+    },
+];
+/**
+ * Install Lisa's OpenCode hooks: merge `permission.bash` deny rules into
+ * `opencode.json` and emit the applicable `.opencode/plugin/lisa-*.ts` modules.
+ *
+ * `opencode.json` lives at the host ROOT (outside `.opencode/`), is a shared
+ * merged file, and is intentionally NOT returned in `managedFiles` — the
+ * `.opencode/`-relative manifest never deletes it. Plugin files under
+ * `.opencode/plugin/` ARE tracked so renames clean up stale modules.
+ * @param destDir - Absolute path to the host project root.
+ * @param detectedTypes - Project types Lisa detected; gates stack-specific
+ *   plugins. Universal plugins/config install regardless.
+ * @param previousManagedFiles - Files Lisa managed last run (relative to
+ *   `.opencode/`); used to detect stale plugin modules.
+ * @returns Result describing what was written + removed.
+ */
+export async function installHooks(destDir, detectedTypes, previousManagedFiles) {
+    const configCreated = await mergeOpencodeConfig(destDir);
+    const pluginDir = path.join(destDir, OPENCODE_CONFIG_DIR, OPENCODE_PLUGIN_SUBDIR);
+    await fse.ensureDir(pluginDir);
+    const applicable = filterCatalogByTypes(detectedTypes);
+    const managedFiles = await Promise.all(applicable.map(async (entry) => {
+        const source = resolveTemplate(entry.templateFilename);
+        const dest = path.join(pluginDir, entry.templateFilename);
+        await copyFile(source, dest);
+        return path.join(OPENCODE_PLUGIN_SUBDIR, entry.templateFilename);
+    }));
+    const currentFilenames = new Set(applicable.map(entry => entry.templateFilename));
+    const deleted = await deleteStalePlugins(previousManagedFiles, currentFilenames, destDir);
+    return {
+        managedFiles: Object.freeze(managedFiles),
+        pluginCount: applicable.length,
+        configCreated,
+        deleted,
+    };
+}
+/**
+ * Filter the catalog by detected project types. Universal plugins (`"*"`)
+ * always pass; stack-specific plugins pass only if their type is detected.
+ * @param detectedTypes - Project types Lisa detected for the host.
+ * @returns The catalog entries that apply to this host.
+ */
+function filterCatalogByTypes(detectedTypes) {
+    const detectedSet = new Set(detectedTypes);
+    return PLUGIN_CATALOG.filter(entry => entry.forProjectTypes.some(t => t === "*" || detectedSet.has(t)));
+}
+/**
+ * Resolve a bundled plugin template path. Templates ship alongside the compiled
+ * installer at `dist/opencode/plugin-templates/<name>` (copied there by
+ * `scripts/copy-opencode-plugin-templates.mjs`).
+ * @param filename - Template filename (e.g. "lisa-lint-on-edit.ts").
+ * @returns Absolute path to the bundled template.
+ */
+function resolveTemplate(filename) {
+    const moduleDir = path.dirname(fileURLToPath(import.meta.url));
+    return path.join(moduleDir, "plugin-templates", filename);
+}
+/**
+ * Delete Lisa plugin modules that were managed last run but aren't shipped this
+ * run (e.g. a project type stopped being detected, or a template was renamed).
+ * Only files under `.opencode/plugin/` with the `lisa-` prefix are eligible, so
+ * host-authored plugins are never touched.
+ * @param previousManagedFiles - Files Lisa managed last run (relative to
+ *   `.opencode/`).
+ * @param currentFilenames - Plugin filenames Lisa is shipping this run.
+ * @param destDir - Absolute path to the host project root.
+ * @returns Sorted list of stale plugin filenames that were deleted.
+ */
+async function deleteStalePlugins(previousManagedFiles, currentFilenames, destDir) {
+    const prefix = `${OPENCODE_PLUGIN_SUBDIR}${path.sep}`;
+    const stale = previousManagedFiles
+        .filter(file => file.startsWith(prefix))
+        .map(file => file.slice(prefix.length))
+        .filter(name => name.startsWith(LISA_PLUGIN_PREFIX) &&
+        !name.includes(path.sep) &&
+        !currentFilenames.has(name));
+    await Promise.all(stale.map(async (name) => {
+        const absPath = path.join(destDir, OPENCODE_CONFIG_DIR, OPENCODE_PLUGIN_SUBDIR, name);
+        if (await fse.pathExists(absPath)) {
+            await rm(absPath, { force: true });
+        }
+    }));
+    return Object.freeze([...new Set(stale)].sort((a, b) => a.localeCompare(b)));
+}
+/** JSONC edit formatting — 2-space indent, matching the repo's JSON style. */
+const FORMATTING_OPTIONS = {
+    formattingOptions: { tabSize: 2, insertSpaces: true },
+};
+/**
+ * Merge Lisa's `permission.bash` deny rules into the host's `opencode.json`,
+ * preserving every other key, comment, and formatting choice. Creates the file
+ * (with `$schema`) when absent.
+ *
+ * Edits the document surgically via `jsonc-parser` — the same host-preserving
+ * approach the sibling OpenCode settings/MCP installers use, so the three
+ * writers compose into one `opencode.json` without clobbering each other or a
+ * host's JSONC comments.
+ * @param destDir - Absolute path to the host project root.
+ * @returns Whether the config file was created (vs merged into an existing one).
+ */
+async function mergeOpencodeConfig(destDir) {
+    const configPath = path.join(destDir, OPENCODE_CONFIG_FILENAME);
+    const exists = await fse.pathExists(configPath);
+    const existing = exists ? await readFile(configPath, "utf8") : "";
+    await writeFile(configPath, mergeNoVerifyDenyRules(existing), "utf8");
+    return !exists;
+}
+/**
+ * Merge the `block-no-verify` deny globs into an `opencode.json` (JSONC) body.
+ * Pure function for testability; `mergeOpencodeConfig` is the I/O wrapper.
+ *
+ * Empty input yields a clean Lisa-authored document. A host `permission.bash`
+ * set to a bare string (e.g. `"allow"`) is re-seeded as a `{ "*": <string> }`
+ * catch-all so the host's posture survives alongside the deny rules. Otherwise
+ * each deny glob is added as its own key, preserving host bash patterns. `$schema`
+ * is set only when absent. Throws on invalid JSONC so a corrupt host file is
+ * surfaced, not silently overwritten.
+ * @param existingJsonc - Current contents of `opencode.json` (or "").
+ * @returns Merged JSON/JSONC string with host content preserved.
+ */
+export function mergeNoVerifyDenyRules(existingJsonc) {
+    if (existingJsonc.trim().length === 0) {
+        const fresh = {
+            $schema: OPENCODE_SCHEMA_URL,
+            permission: { bash: { ...NO_VERIFY_DENY_PATTERNS } },
+        };
+        return `${JSON.stringify(fresh, null, 2)}\n`;
+    }
+    const current = parseJsoncOrThrow(existingJsonc);
+    const permission = isPlainObject(current["permission"])
+        ? current["permission"]
+        : {};
+    const existingBash = permission["bash"];
+    const withBash = typeof existingBash === "string"
+        ? // Replace the whole string posture with an object that keeps it as the
+            // catch-all and adds the deny globs.
+            upsertKey(existingJsonc, ["permission", "bash"], { "*": existingBash, ...NO_VERIFY_DENY_PATTERNS }, undefined)
+        : addDenyGlobs(existingJsonc, isPlainObject(existingBash) ? existingBash : undefined);
+    const withSchema = current["$schema"] === undefined
+        ? upsertKey(withBash, ["$schema"], OPENCODE_SCHEMA_URL, undefined)
+        : withBash;
+    return withSchema.endsWith("\n") ? withSchema : `${withSchema}\n`;
+}
+/**
+ * Add each deny glob under `permission.bash` as an individual key, preserving
+ * any host bash patterns (and their comments) already present.
+ * @param text - Current document text.
+ * @param currentBash - The host's `permission.bash` object, if any.
+ * @returns The edited document text.
+ */
+function addDenyGlobs(text, currentBash) {
+    return Object.entries(NO_VERIFY_DENY_PATTERNS).reduce((acc, [pattern, value]) => upsertKey(acc, ["permission", "bash", pattern], value, currentBash?.[pattern]), text);
+}
+/**
+ * Set `value` at `keyPath` via a surgical JSONC edit, skipping the write when
+ * the document already holds that value (keeps re-runs no-op-clean).
+ * @param text - Current document text.
+ * @param keyPath - JSON path to the key.
+ * @param value - Value to set.
+ * @param currentValue - The value already present at `keyPath` (or undefined).
+ * @returns The edited document text.
+ */
+function upsertKey(text, keyPath, value, currentValue) {
+    if (currentValue === value) {
+        return text;
+    }
+    const edits = modify(text, [...keyPath], value, FORMATTING_OPTIONS);
+    return applyEdits(text, edits);
+}
+/**
+ * Parse JSONC, throwing on the first syntax error so a corrupt host config is
+ * surfaced rather than silently clobbered. Comments and trailing commas are
+ * tolerated (OpenCode permits both).
+ * @param jsonc - Raw `opencode.json` contents.
+ * @returns The parsed object (empty object if the root is a non-object).
+ */
+function parseJsoncOrThrow(jsonc) {
+    const errors = [];
+    const parsed = parseJsonc(jsonc, errors, {
+        allowTrailingComma: true,
+        disallowComments: false,
+    });
+    if (errors.length > 0) {
+        throw new Error(`Invalid ${OPENCODE_CONFIG_FILENAME} (JSONC syntax error at offset ${errors[0]?.offset ?? 0}); refusing to overwrite host config`);
+    }
+    return isPlainObject(parsed) ? parsed : {};
+}
+/**
+ * Narrow an unknown value to a plain (non-array, non-null) object record.
+ * @param value - The value to test.
+ * @returns Whether `value` is a plain object.
+ */
+function isPlainObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/**
+ * Enumerate the Lisa plugin filenames currently present in a host's
+ * `.opencode/plugin/` directory. Exposed for tests/diagnostics.
+ * @param destDir - Absolute path to the host project root.
+ * @returns Sorted list of `lisa-*.ts` filenames (empty if the dir is absent).
+ */
+export async function listInstalledPluginFiles(destDir) {
+    const pluginDir = path.join(destDir, OPENCODE_CONFIG_DIR, OPENCODE_PLUGIN_SUBDIR);
+    if (!(await fse.pathExists(pluginDir))) {
+        return [];
+    }
+    const entries = await readdir(pluginDir);
+    return entries
+        .filter(name => name.startsWith(LISA_PLUGIN_PREFIX) && name.endsWith(".ts"))
+        .sort((a, b) => a.localeCompare(b));
+}
+//# sourceMappingURL=hooks-installer.js.map

package/dist/opencode/hooks-installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks-installer.js","sourceRoot":"","sources":["../../src/opencode/hooks-installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,UAAU,EACV,MAAM,EACN,KAAK,IAAI,UAAU,GAEpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9D,gFAAgF;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG,QAAQ,CAAC;AAE/C,sEAAsE;AACtE,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAC;AAExD,iFAAiF;AACjF,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,uBAAuB,GAAqC;IAChE,eAAe,EAAE,MAAM;IACvB,WAAW,EAAE,MAAM;IACnB,qBAAqB,EAAE,MAAM;IAC7B,4BAA4B,EAAE,MAAM;CACrC,CAAC;AAYF;;;GAGG;AACH,MAAM,cAAc,GAAkC;IACpD;QACE,EAAE,EAAE,mBAAmB;QACvB,gBAAgB,EAAE,2BAA2B;QAC7C,eAAe,EAAE,CAAC,GAAG,CAAC;KACvB;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,gBAAgB,EAAE,mCAAmC;QACrD,eAAe,EAAE,CAAC,YAAY,CAAC;KAChC;IACD;QACE,EAAE,EAAE,cAAc;QAClB,gBAAgB,EAAE,sBAAsB;QACxC,eAAe,EAAE,CAAC,YAAY,CAAC;KAChC;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,gBAAgB,EAAE,yBAAyB;QAC3C,eAAe,EAAE,CAAC,YAAY,EAAE,OAAO,CAAC;KACzC;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,gBAAgB,EAAE,+BAA+B;QACjD,eAAe,EAAE,CAAC,QAAQ,CAAC;KAC5B;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,gBAAgB,EAAE,yBAAyB;QAC3C,eAAe,EAAE,CAAC,OAAO,CAAC;KAC3B;CACF,CAAC;AAcF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAe,EACf,aAAqC,EACrC,oBAAuC;IAEvC,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAEzD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACzB,OAAO,EACP,mBAAmB,EACnB,sBAAsB,CACvB,CAAC;IACF,MAAM,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAE/B,MAAM,UAAU,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CACpC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE;QAC3B,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC1D,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACnE,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAChD,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,kBAAkB,CACtC,oBAAoB,EACpB,gBAAgB,EAChB,OAAO,CACR,CAAC;IAEF,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QACzC,WAAW,EAAE,UAAU,CAAC,MAAM;QAC9B,aAAa;QACb,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAC3B,aAAqC;IAErC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,aAAa,CAAC,CAAC;IACnD,OAAO,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CACjE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,QAAgB;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,EAAE,QAAQ,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,kBAAkB,CAC/B,oBAAuC,EACvC,gBAAqC,EACrC,OAAe;IAEf,MAAM,MAAM,GAAG,GAAG,sBAAsB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtD,MAAM,KAAK,GAAG,oBAAoB;SAC/B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;SACvC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;SACtC,MAAM,CACL,IAAI,CAAC,EAAE,CACL,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC;QACnC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QACxB,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAC9B,CAAC;IACJ,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CACvB,OAAO,EACP,mBAAmB,EACnB,sBAAsB,EACtB,IAAI,CACL,CAAC;QACF,IAAI,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,8EAA8E;AAC9E,MAAM,kBAAkB,GAAG;IACzB,iBAAiB,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE;CAC7C,CAAC;AAEX;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,mBAAmB,CAAC,OAAe;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,SAAS,CAAC,UAAU,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,OAAO,CAAC,MAAM,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,aAAqB;IAC1D,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG;YACZ,OAAO,EAAE,mBAAmB;YAC5B,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,uBAAuB,EAAE,EAAE;SACrD,CAAC;QACF,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACrD,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QACvB,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAExC,MAAM,QAAQ,GACZ,OAAO,YAAY,KAAK,QAAQ;QAC9B,CAAC,CAAC,uEAAuE;YACvE,qCAAqC;YACrC,SAAS,CACP,aAAa,EACb,CAAC,YAAY,EAAE,MAAM,CAAC,EACtB,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,uBAAuB,EAAE,EACjD,SAAS,CACV;QACH,CAAC,CAAC,YAAY,CACV,aAAa,EACb,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CACvD,CAAC;IAER,MAAM,UAAU,GACd,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS;QAC9B,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC;QAClE,CAAC,CAAC,QAAQ,CAAC;IAEf,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CACnB,IAAY,EACZ,WAAgD;IAEhD,OAAO,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,MAAM,CACnD,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CACxB,SAAS,CACP,GAAG,EACH,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EACL,WAAW,EAAE,CAAC,OAAO,CAAC,CACvB,EACH,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,SAAS,CAChB,IAAY,EACZ,OAAqC,EACrC,KAAc,EACd,YAAqB;IAErB,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACpE,OAAO,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE;QACvC,kBAAkB,EAAE,IAAI;QACxB,gBAAgB,EAAE,KAAK;KACxB,CAAY,CAAC;IACd,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,WAAW,wBAAwB,kCACjC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CACvB,sCAAsC,CACvC,CAAC;IACJ,CAAC;IACD,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAe;IAEf,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACzB,OAAO,EACP,mBAAmB,EACnB,sBAAsB,CACvB,CAAC;IACF,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,OAAO,OAAO;SACX,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SAC3E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC"}

package/dist/opencode/plugin-templates/lisa-block-migration-edits.ts

@@ -0,0 +1,44 @@
+/**
+ * Lisa-managed OpenCode plugin (tool.execute.before).
+ *
+ * Blocks edits to TypeORM migration files. Use `bun run migration:generate`
+ * to regenerate from entity diffs instead — hand-written migrations drift from
+ * entity metadata and break the schema/migration contract.
+ *
+ * Port of Lisa's Codex hook `block-migration-edits.sh`. OpenCode exposes only
+ * `edit` / `write` filesystem tools (no `apply_patch`), so the file path comes
+ * straight from `output.args.filePath`. Throwing in `tool.execute.before`
+ * cancels the tool call and surfaces the message to the agent (verified-by-run
+ * on opencode 1.16.2).
+ *
+ * NOTE: This file is a template Lisa copies verbatim into a host project's
+ * `.opencode/plugin/`. It is intentionally excluded from this repo's tsconfig
+ * and eslint config — it runs under OpenCode's Bun runtime, not here.
+ */
+export /**
+ *
+ */
+const LisaBlockMigrationEdits = async () => {
+  const MIGRATION_RE = /\/migrations\/[^/]*\d[^/]*-[^/]*\.ts$/;
+  return {
+    "tool.execute.before": async (
+      input: { tool: string },
+      output: { args?: { filePath?: string } }
+    ) => {
+      if (input.tool !== "edit" && input.tool !== "write") return;
+      const filePath = String(output.args?.filePath ?? "");
+      if (!filePath || !MIGRATION_RE.test(filePath)) return;
+      throw new Error(
+        [
+          `block-migration-edits: refusing to modify ${filePath}.`,
+          "",
+          "TypeORM migrations must be regenerated from entity diffs:",
+          "  bun run migration:generate -- src/database/migrations/<descriptive-name>",
+          "",
+          "Hand-written migrations drift from entity metadata and break the",
+          "schema contract. Modify the entity, run the generator, then commit.",
+        ].join("\n")
+      );
+    },
+  };
+};

package/dist/opencode/plugin-templates/lisa-block-suppress-directives.ts

@@ -0,0 +1,57 @@
+/**
+ * Lisa-managed OpenCode plugin (tool.execute.before).
+ *
+ * Blocks adding error-suppression directives (@ts-ignore, @ts-nocheck,
+ * eslint-disable, biome-ignore, prettier-ignore) to JS/TS source. Suppressing
+ * the type checker, linter, or formatter hides real defects — fix the
+ * underlying error. @ts-expect-error is intentionally NOT matched (it is the
+ * safer alternative).
+ *
+ * Port of Lisa's Codex hook `block-suppress-directives.sh`. OpenCode exposes
+ * `edit` (oldString/newString) and `write` (content) tools — there is no
+ * multi-file apply_patch — so the new text comes straight from the tool args.
+ * Throwing in `tool.execute.before` cancels the call and surfaces the message
+ * to the agent (verified-by-run on opencode 1.16.2).
+ *
+ * NOTE: This file is a template Lisa copies verbatim into a host project's
+ * `.opencode/plugin/`. It is intentionally excluded from this repo's tsconfig
+ * and eslint config — it runs under OpenCode's Bun runtime, not here.
+ */
+export const LisaBlockSuppressDirectives = async () => {
+  // Comment-syntax-only match: // or /* opener, optional whitespace, directive.
+  const DIRECTIVE_RE =
+    /(\/\/|\/\*)\s*(@ts-(ignore|nocheck)|eslint-disable|biome-ignore|prettier-ignore)/;
+  const JS_TS = new Set(["ts", "tsx", "js", "jsx", "mjs", "cjs"]);
+  const extOf = (p: string) => p.split(".").pop()?.toLowerCase() ?? "";
+  return {
+    "tool.execute.before": async (
+      input: { tool: string },
+      output: {
+        args?: { filePath?: string; content?: string; newString?: string };
+      }
+    ) => {
+      if (input.tool !== "edit" && input.tool !== "write") return;
+      const filePath = String(output.args?.filePath ?? "");
+      if (!filePath || !JS_TS.has(extOf(filePath))) return;
+      const newText =
+        input.tool === "write"
+          ? String(output.args?.content ?? "")
+          : String(output.args?.newString ?? "");
+      if (!DIRECTIVE_RE.test(newText)) return;
+      throw new Error(
+        [
+          `block-suppress-directives: refusing to add an error-suppression directive to ${filePath}.`,
+          "",
+          "@ts-ignore / @ts-nocheck / eslint-disable / biome-ignore / prettier-ignore",
+          "silence the type checker, linter, or formatter instead of fixing the problem.",
+          "Fix the underlying type/lint error — add the missing annotation, narrow the",
+          "type, or restructure the code so the rule passes.",
+          "",
+          "Suppression is a last resort. If there is genuinely no other way, STOP and get",
+          "the user's approval first, prefer @ts-expect-error over @ts-ignore, scope the",
+          'disable to one line and one rule, and add a "-- <reason>" description.',
+        ].join("\n")
+      );
+    },
+  };
+};

package/dist/opencode/plugin-templates/lisa-lint-on-edit.ts

@@ -0,0 +1,53 @@
+/**
+ * Lisa-managed OpenCode plugin (tool.execute.after).
+ *
+ * Runs ESLint --fix on every just-edited JS/TS file, then re-checks. If
+ * unfixable problems remain, throws so OpenCode marks the tool call failed and
+ * the agent self-corrects (the equivalent of the Codex hook's non-zero exit).
+ * Fails open when ESLint isn't installed.
+ *
+ * Port of Lisa's Codex hook `lint-on-edit.sh`. OpenCode passes the edited file
+ * via `input.args.filePath`; `tool.execute.after` runs after a successful
+ * edit/write (verified-by-run on opencode 1.16.2: a throw here surfaces the
+ * message to the agent).
+ *
+ * NOTE: This file is a template Lisa copies verbatim into a host project's
+ * `.opencode/plugin/`. It is intentionally excluded from this repo's tsconfig
+ * and eslint config — it runs under OpenCode's Bun runtime, not here.
+ */
+export const LisaLintOnEdit = async ({
+  $,
+  directory,
+}: {
+  $: (strings: TemplateStringsArray, ...exprs: unknown[]) => any;
+  directory: string;
+}) => {
+  const EXTS = new Set(["ts", "tsx", "js", "jsx", "mjs", "cjs"]);
+  const extOf = (p: string) => p.split(".").pop()?.toLowerCase() ?? "";
+  const { existsSync } = await import("node:fs");
+  const resolveBin = (name: string): string | null => {
+    const local = `${directory}/node_modules/.bin/${name}`;
+    if (existsSync(local)) return local;
+    return Bun.which(name);
+  };
+  return {
+    "tool.execute.after": async (input: {
+      tool: string;
+      args?: { filePath?: string };
+    }) => {
+      if (input.tool !== "edit" && input.tool !== "write") return;
+      const filePath = String(input.args?.filePath ?? "");
+      if (!filePath || !EXTS.has(extOf(filePath))) return;
+      const eslint = resolveBin("eslint");
+      if (!eslint) return; // fail open — no ESLint installed
+      await $`${eslint} --fix ${filePath}`.quiet().nothrow();
+      const res = await $`${eslint} --quiet ${filePath}`.quiet().nothrow();
+      if (res.exitCode === 0) return;
+      const out =
+        `${res.stdout?.toString() ?? ""}${res.stderr?.toString() ?? ""}`.trim();
+      throw new Error(
+        `lint-on-edit: ESLint reported unfixable problems in ${filePath}:\n${out}`
+      );
+    },
+  };
+};

package/dist/opencode/plugin-templates/lisa-rubocop-on-edit.ts

@@ -0,0 +1,54 @@
+/**
+ * Lisa-managed OpenCode plugin (tool.execute.after).
+ *
+ * Runs RuboCop -a (safe autocorrect) on every just-edited Ruby file, then
+ * re-checks for remaining unfixable offenses. If any remain, throws so OpenCode
+ * marks the tool call failed and the agent fixes them. Prefers `bundle exec
+ * rubocop` when a Gemfile is present. Fails open when RuboCop isn't installed.
+ *
+ * Port of Lisa's Codex hook `rubocop-on-edit.sh`.
+ *
+ * NOTE: This file is a template Lisa copies verbatim into a host project's
+ * `.opencode/plugin/`. It is intentionally excluded from this repo's tsconfig
+ * and eslint config — it runs under OpenCode's Bun runtime, not here.
+ */
+export const LisaRubocopOnEdit = async ({
+  $,
+  directory,
+}: {
+  $: (strings: TemplateStringsArray, ...exprs: unknown[]) => any;
+  directory: string;
+}) => {
+  const EXTS = new Set(["rb", "rake"]);
+  const extOf = (p: string) => p.split(".").pop()?.toLowerCase() ?? "";
+  const { existsSync } = await import("node:fs");
+  const resolveRunner = (): string[] | null => {
+    const bundle = Bun.which("bundle");
+    if (bundle && existsSync(`${directory}/Gemfile`)) {
+      return [bundle, "exec", "rubocop"];
+    }
+    const rubocop = Bun.which("rubocop");
+    return rubocop ? [rubocop] : null;
+  };
+  return {
+    "tool.execute.after": async (input: {
+      tool: string;
+      args?: { filePath?: string };
+    }) => {
+      if (input.tool !== "edit" && input.tool !== "write") return;
+      const filePath = String(input.args?.filePath ?? "");
+      if (!filePath || !EXTS.has(extOf(filePath))) return;
+      const runner = resolveRunner();
+      if (!runner) return; // fail open — no RuboCop installed
+      const [bin, ...rest] = runner;
+      await $`${bin} ${rest} -a ${filePath}`.quiet().nothrow();
+      const res = await $`${bin} ${rest} ${filePath}`.quiet().nothrow();
+      if (res.exitCode === 0) return;
+      const out =
+        `${res.stdout?.toString() ?? ""}${res.stderr?.toString() ?? ""}`.trim();
+      throw new Error(
+        `rubocop-on-edit: RuboCop reported unfixable offenses in ${filePath}:\n${out}`
+      );
+    },
+  };
+};

package/dist/opencode/plugin-templates/lisa-session-bootstrap.ts

@@ -0,0 +1,76 @@
+/**
+ * Lisa-managed OpenCode plugin (session bootstrap).
+ *
+ * OpenCode runs a plugin's factory function once when it loads the plugin at
+ * session start, which is the natural home for Lisa's Codex SessionStart hooks:
+ *   - install-pkgs.sh   → install dependencies when node_modules is missing
+ *   - setup-jira-cli.sh → write jira-cli config from environment variables
+ *
+ * Both are fully fail-open (wrapped in try/catch) so a package-manager or
+ * filesystem hiccup never bricks OpenCode startup, mirroring the Codex scripts.
+ * install only runs on the first session of a fresh checkout (node_modules
+ * absent), so the common case is a cheap no-op.
+ *
+ * NOTE: This file is a template Lisa copies verbatim into a host project's
+ * `.opencode/plugin/`. It is intentionally excluded from this repo's tsconfig
+ * and eslint config — it runs under OpenCode's Bun runtime, not here.
+ */
+export const LisaSessionBootstrap = async ({
+  $,
+  worktree,
+}: {
+  $: (strings: TemplateStringsArray, ...exprs: unknown[]) => any;
+  worktree: string;
+}) => {
+  const root = worktree;
+  const { existsSync, mkdirSync, writeFileSync } = await import("node:fs");
+
+  // install-pkgs: bootstrap dependencies when they're missing.
+  try {
+    if (
+      existsSync(`${root}/package.json`) &&
+      !existsSync(`${root}/node_modules`)
+    ) {
+      const has = (f: string) => existsSync(`${root}/${f}`);
+      const install = async (cmd: string) => {
+        if (Bun.which(cmd)) {
+          await $`${cmd} install`.cwd(root).quiet().nothrow();
+        }
+      };
+      if (has("bun.lockb") || has("bun.lock")) await install("bun");
+      else if (has("pnpm-lock.yaml")) await install("pnpm");
+      else if (has("yarn.lock")) await install("yarn");
+      else await install("npm");
+    }
+  } catch {
+    // fail open — never block startup on a dependency-install error
+  }
+
+  // setup-jira-cli: write jira-cli config from environment variables.
+  try {
+    const server = process.env.JIRA_SERVER;
+    const login = process.env.JIRA_LOGIN;
+    const home = process.env.HOME;
+    if (server && login && home) {
+      const dir = `${home}/.config/.jira`;
+      mkdirSync(dir, { recursive: true });
+      const config = [
+        `installation: ${process.env.JIRA_INSTALLATION ?? "cloud"}`,
+        `server: ${server}`,
+        `login: ${login}`,
+        `project: ${process.env.JIRA_PROJECT ?? ""}`,
+        `board: "${process.env.JIRA_BOARD ?? ""}"`,
+        "auth_type: basic",
+        "epic:",
+        "  name: Epic Name",
+        "  link: Epic Link",
+        "",
+      ].join("\n");
+      writeFileSync(`${dir}/.config.yml`, config);
+    }
+  } catch {
+    // fail open — never block startup on a jira-cli config error
+  }
+
+  return {};
+};

package/dist/opencode/plugin-templates/lisa-sg-scan-on-edit.ts

@@ -0,0 +1,50 @@
+/**
+ * Lisa-managed OpenCode plugin (tool.execute.after).
+ *
+ * Runs `ast-grep scan` on every just-edited source file (TypeScript/JS or
+ * Ruby) when the project ships an `sgconfig.yml`. If ast-grep reports findings,
+ * throws so OpenCode marks the tool call failed and the agent fixes them.
+ * Fails open when ast-grep or sgconfig.yml is absent.
+ *
+ * Port of Lisa's Codex hook `sg-scan-on-edit.sh`.
+ *
+ * NOTE: This file is a template Lisa copies verbatim into a host project's
+ * `.opencode/plugin/`. It is intentionally excluded from this repo's tsconfig
+ * and eslint config — it runs under OpenCode's Bun runtime, not here.
+ */
+export const LisaSgScanOnEdit = async ({
+  $,
+  directory,
+}: {
+  $: (strings: TemplateStringsArray, ...exprs: unknown[]) => any;
+  directory: string;
+}) => {
+  const EXTS = new Set(["ts", "tsx", "js", "jsx", "mjs", "cjs", "rb", "rake"]);
+  const extOf = (p: string) => p.split(".").pop()?.toLowerCase() ?? "";
+  const { existsSync } = await import("node:fs");
+  const resolveBin = (): string | null => {
+    const local = `${directory}/node_modules/.bin/ast-grep`;
+    if (existsSync(local)) return local;
+    return Bun.which("ast-grep") ?? Bun.which("sg");
+  };
+  return {
+    "tool.execute.after": async (input: {
+      tool: string;
+      args?: { filePath?: string };
+    }) => {
+      if (input.tool !== "edit" && input.tool !== "write") return;
+      const filePath = String(input.args?.filePath ?? "");
+      if (!filePath || !EXTS.has(extOf(filePath))) return;
+      if (!existsSync(`${directory}/sgconfig.yml`)) return; // fail open
+      const astGrep = resolveBin();
+      if (!astGrep) return; // fail open — no ast-grep installed
+      const res = await $`${astGrep} scan ${filePath}`.quiet().nothrow();
+      if (res.exitCode === 0) return;
+      const out =
+        `${res.stdout?.toString() ?? ""}${res.stderr?.toString() ?? ""}`.trim();
+      throw new Error(
+        `sg-scan-on-edit: ast-grep reported findings in ${filePath}:\n${out}`
+      );
+    },
+  };
+};