@codyswann/lisa 2.163.7 → 2.164.1

package/plugins/lisa-typescript-cursor/hooks/lint-on-edit.sh

@@ -4,17 +4,15 @@
 # =============================================================================
 # Lint-on-Edit Hook (PostToolUse - Write|Edit)
 # =============================================================================
-# Runs oxlint --fix, then ESLint --fix --quiet --cache on each edited
-# TypeScript file. Part of the inline self-correction pipeline:
-#   prettier → ast-grep → oxlint --fix → eslint --fix
+# Runs oxlint on each edited TypeScript file. Full ESLint remains enforced at
+# the commit/CI chokepoint via the project lint scripts.
 #
-# oxlint runs first because it's a Rust-native linter (~1000x faster) that
-# covers the majority of rules, leaving only the slow / type-aware / plugin
-# rules for ESLint to handle.
+# oxlint is Rust-native and covers the fast-feedback rule tier in milliseconds;
+# ESLint stays out of the edit-time path.
 #
 # Behavior:
-#   - Exit 0: lint passes or auto-fix resolved all errors
-#   - Exit 2: unfixable errors remain — blocks Claude so it fixes them immediately
+#   - Exit 0: lint passes
+#   - Exit 2: oxlint errors remain - blocks Claude so it fixes them immediately
 #
 # @see .claude/rules/verfication.md "Self-Correction Loop" section
 # =============================================================================
@@ -49,7 +47,7 @@ esac
 
 cd "$CLAUDE_PROJECT_DIR" || exit 0
 
-# Resolve oxlint and ESLint binaries — prefer local node_modules/.bin
+# Resolve oxlint binary - prefer local node_modules/.bin
 if [ -x "./node_modules/.bin/oxlint" ]; then
     OXLINT_CMD="./node_modules/.bin/oxlint"
 elif [ -f "bun.lockb" ] || [ -f "bun.lock" ]; then
@@ -62,19 +60,7 @@ else
     OXLINT_CMD="npx oxlint"
 fi
 
-if [ -x "./node_modules/.bin/eslint" ]; then
-    ESLINT_CMD="./node_modules/.bin/eslint"
-elif [ -f "bun.lockb" ] || [ -f "bun.lock" ]; then
-    ESLINT_CMD="bunx eslint"
-elif [ -f "pnpm-lock.yaml" ]; then
-    ESLINT_CMD="pnpm exec eslint"
-elif [ -f "yarn.lock" ]; then
-    ESLINT_CMD="yarn exec eslint"
-else
-    ESLINT_CMD="npx eslint"
-fi
-
-# 1) oxlint --fix (REQUIRED in the Phase 2 hybrid pipeline)
+# oxlint (REQUIRED in the Phase 2 hybrid pipeline)
 # If oxlint is missing the project is out of sync with the current Lisa
 # governance — fail loudly rather than silently skipping. ESLint alone is
 # no longer a complete lint pass.
@@ -89,46 +75,14 @@ if [ ! -f ".oxlintrc.json" ] && [ ! -f ".oxlintrc.jsonc" ] && [ ! -f "oxlint.con
     exit 2
 fi
 
-echo "Running oxlint --fix on: $FILE_PATH"
-OX_OUTPUT=$($OXLINT_CMD --fix --quiet "$FILE_PATH" 2>&1)
+echo "Running oxlint on: $FILE_PATH"
+OX_OUTPUT=$($OXLINT_CMD --quiet "$FILE_PATH" 2>&1)
 OX_EXIT=$?
 if [ $OX_EXIT -ne 0 ]; then
-    # Re-run without --fix to capture remaining errors
-    OX_OUTPUT=$($OXLINT_CMD --quiet "$FILE_PATH" 2>&1)
-    OX_EXIT=$?
-    if [ $OX_EXIT -ne 0 ]; then
-        echo "oxlint found unfixable errors in: $FILE_PATH" >&2
-        echo "$OX_OUTPUT" >&2
-        exit 2
-    fi
-fi
-
-# 2) ESLint --fix --quiet --cache
-# --quiet: suppress warnings, only show errors
-# --cache: use ESLint cache for performance
-# --rule: disable no-unused-vars auto-fix to prevent removing imports that Claude
-#         plans to use in a subsequent edit (pre-commit hook still catches them)
-echo "Running ESLint --fix on: $FILE_PATH"
-
-# First pass: attempt auto-fix
-OUTPUT=$($ESLINT_CMD --fix --quiet --cache --rule '@typescript-eslint/no-unused-vars: off' "$FILE_PATH" 2>&1)
-FIX_EXIT=$?
-
-if [ $FIX_EXIT -eq 0 ]; then
-    echo "ESLint: No errors in $(basename "$FILE_PATH")"
-    exit 0
-fi
-
-# Auto-fix resolved some issues but errors remain — re-run to get remaining errors
-OUTPUT=$($ESLINT_CMD --quiet --cache "$FILE_PATH" 2>&1)
-LINT_EXIT=$?
-
-if [ $LINT_EXIT -eq 0 ]; then
-    echo "ESLint: Auto-fixed all errors in $(basename "$FILE_PATH")"
-    exit 0
+    echo "oxlint found errors in: $FILE_PATH" >&2
+    echo "$OX_OUTPUT" >&2
+    exit 2
 fi
 
-# Unfixable errors remain — block with feedback
-echo "ESLint found unfixable errors in: $FILE_PATH" >&2
-echo "$OUTPUT" >&2
-exit 2
+echo "oxlint: No errors in $(basename "$FILE_PATH")"
+exit 0

package/plugins/lisa-wiki/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.163.7",
+  "version": "2.164.1",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.163.7",
+  "version": "2.164.1",
   "description": "Distributable LLM Wiki kernel — ingest, query, lint, and maintain a git-native markdown knowledge base across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.163.7",
+  "version": "2.164.1",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.163.7",
+  "version": "2.164.1",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.163.7",
+  "version": "2.164.1",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/src/base/.claude-plugin/plugin.json

@@ -40,6 +40,12 @@
           { "type": "command", "command": "command -v entire >/dev/null 2>&1 && entire hooks claude-code post-todo || true" }
         ]
       },
+      {
+        "matcher": "Bash",
+        "hooks": [
+          { "type": "command", "command": "${CLAUDE_PLUGIN_ROOT}/hooks/shell-write-nudge.sh" }
+        ]
+      },
       {
         "matcher": "TeamCreate",
         "hooks": [

package/plugins/src/base/hooks/shell-write-nudge.sh

@@ -0,0 +1,86 @@
+#!/usr/bin/env bash
+# This file is managed by Lisa.
+# Do not edit directly — changes will be overwritten on the next `lisa` run.
+# =============================================================================
+# Shell Write Nudge Hook (PostToolUse - Bash)
+# =============================================================================
+# Emits a one-line, non-blocking notice when a Bash command appears to mutate a
+# tracked repository file directly. This keeps shell escape hatches visible
+# without blocking legitimate scripts or codemods.
+# =============================================================================
+set -uo pipefail
+
+JSON_INPUT="$(cat)"
+
+command -v jq >/dev/null 2>&1 || exit 0
+
+COMMAND="$(printf '%s' "$JSON_INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null || true)"
+[ -n "$COMMAND" ] || exit 0
+
+case "$COMMAND" in
+  bun\ run* | npm\ run* | pnpm\ run* | yarn\ run* | node\ scripts/* | bun\ scripts/* | bash\ scripts/* | sh\ scripts/*)
+    exit 0
+    ;;
+esac
+
+repo_root="$(git rev-parse --show-toplevel 2>/dev/null || pwd)"
+cd "$repo_root" 2>/dev/null || exit 0
+
+is_tracked_file() {
+  local candidate="$1"
+  [ -n "$candidate" ] || return 1
+  candidate="${candidate#./}"
+  git ls-files --error-unmatch -- "$candidate" >/dev/null 2>&1
+}
+
+# Returns 0 when an inline runtime command (python -c / node -e / bun -e) contains
+# explicit write-intent indicators.  Read-only operations such as open(f).read() or
+# readFileSync should not trigger the nudge.
+inline_runtime_intends_to_write() {
+  local cmd="$1"
+  # Python: open() with write/append mode as second positional argument
+  [[ "$cmd" == *", 'w'"* || "$cmd" == *", 'a'"* || "$cmd" == *", 'wb'"* || "$cmd" == *", 'ab'"* ]] && return 0
+  [[ "$cmd" == *', "w"'* || "$cmd" == *', "a"'* || "$cmd" == *', "wb"'* || "$cmd" == *', "ab"'* ]] && return 0
+  # Python / general: explicit .write( method call
+  [[ "$cmd" == *'.write('* ]] && return 0
+  # Node/Bun fs write functions
+  [[ "$cmd" == *'writeFile'* || "$cmd" == *'appendFile'* || "$cmd" == *'createWriteStream'* ]] && return 0
+  return 1
+}
+
+command_mentions_tracked_write() {
+  local token
+  local sed_command_re='(^|[[:space:];&|])sed[[:space:]]'
+  local inline_runtime_re='(^|[[:space:];&|])(python3?|node|bun)[[:space:]]+-[ce][[:space:]]'
+
+  if [[ "$COMMAND" =~ $sed_command_re && "$COMMAND" == *"-i"* ]]; then
+    while IFS= read -r token; do
+      is_tracked_file "$token" && return 0
+    done < <(printf '%s\n' "$COMMAND" | tr ' ' '\n' | sed 's/^[\"'\'']//; s/[\"'\'',;|&)]$//')
+  fi
+
+  while IFS= read -r token; do
+    token="${token#./}"
+    is_tracked_file "$token" && return 0
+  done < <(
+    printf '%s\n' "$COMMAND" |
+      grep -Eo '(^|[[:space:]])(>>?|tee([[:space:]]+-a)?|cat[[:space:]]+<<[^[:space:]]+[[:space:]]*>)[[:space:]]*[^[:space:];|&]+' |
+      sed -E 's/^[[:space:]]*(>>?|tee([[:space:]]+-a)?|cat[[:space:]]+<<[^[:space:]]+[[:space:]]*>)[[:space:]]*//; s/^[\"'\'']//; s/[\"'\'']$//'
+  )
+
+  if [[ "$COMMAND" =~ $inline_runtime_re ]] && inline_runtime_intends_to_write "$COMMAND"; then
+    while IFS= read -r token; do
+      is_tracked_file "$token" && return 0
+    done < <(git ls-files | while IFS= read -r file; do
+      [[ "$COMMAND" == *"$file"* ]] && printf '%s\n' "$file"
+    done)
+  fi
+
+  return 1
+}
+
+if command_mentions_tracked_write; then
+  echo "Lisa notice: prefer Edit/Write for tracked file edits so lint-on-edit can see the change." >&2
+fi
+
+exit 0

package/plugins/src/typescript/hooks/lint-on-edit.sh

@@ -4,17 +4,15 @@
 # =============================================================================
 # Lint-on-Edit Hook (PostToolUse - Write|Edit)
 # =============================================================================
-# Runs oxlint --fix, then ESLint --fix --quiet --cache on each edited
-# TypeScript file. Part of the inline self-correction pipeline:
-#   prettier → ast-grep → oxlint --fix → eslint --fix
+# Runs oxlint on each edited TypeScript file. Full ESLint remains enforced at
+# the commit/CI chokepoint via the project lint scripts.
 #
-# oxlint runs first because it's a Rust-native linter (~1000x faster) that
-# covers the majority of rules, leaving only the slow / type-aware / plugin
-# rules for ESLint to handle.
+# oxlint is Rust-native and covers the fast-feedback rule tier in milliseconds;
+# ESLint stays out of the edit-time path.
 #
 # Behavior:
-#   - Exit 0: lint passes or auto-fix resolved all errors
-#   - Exit 2: unfixable errors remain — blocks Claude so it fixes them immediately
+#   - Exit 0: lint passes
+#   - Exit 2: oxlint errors remain - blocks Claude so it fixes them immediately
 #
 # @see .claude/rules/verfication.md "Self-Correction Loop" section
 # =============================================================================
@@ -49,7 +47,7 @@ esac
 
 cd "$CLAUDE_PROJECT_DIR" || exit 0
 
-# Resolve oxlint and ESLint binaries — prefer local node_modules/.bin
+# Resolve oxlint binary - prefer local node_modules/.bin
 if [ -x "./node_modules/.bin/oxlint" ]; then
     OXLINT_CMD="./node_modules/.bin/oxlint"
 elif [ -f "bun.lockb" ] || [ -f "bun.lock" ]; then
@@ -62,19 +60,7 @@ else
     OXLINT_CMD="npx oxlint"
 fi
 
-if [ -x "./node_modules/.bin/eslint" ]; then
-    ESLINT_CMD="./node_modules/.bin/eslint"
-elif [ -f "bun.lockb" ] || [ -f "bun.lock" ]; then
-    ESLINT_CMD="bunx eslint"
-elif [ -f "pnpm-lock.yaml" ]; then
-    ESLINT_CMD="pnpm exec eslint"
-elif [ -f "yarn.lock" ]; then
-    ESLINT_CMD="yarn exec eslint"
-else
-    ESLINT_CMD="npx eslint"
-fi
-
-# 1) oxlint --fix (REQUIRED in the Phase 2 hybrid pipeline)
+# oxlint (REQUIRED in the Phase 2 hybrid pipeline)
 # If oxlint is missing the project is out of sync with the current Lisa
 # governance — fail loudly rather than silently skipping. ESLint alone is
 # no longer a complete lint pass.
@@ -89,46 +75,14 @@ if [ ! -f ".oxlintrc.json" ] && [ ! -f ".oxlintrc.jsonc" ] && [ ! -f "oxlint.con
     exit 2
 fi
 
-echo "Running oxlint --fix on: $FILE_PATH"
-OX_OUTPUT=$($OXLINT_CMD --fix --quiet "$FILE_PATH" 2>&1)
+echo "Running oxlint on: $FILE_PATH"
+OX_OUTPUT=$($OXLINT_CMD --quiet "$FILE_PATH" 2>&1)
 OX_EXIT=$?
 if [ $OX_EXIT -ne 0 ]; then
-    # Re-run without --fix to capture remaining errors
-    OX_OUTPUT=$($OXLINT_CMD --quiet "$FILE_PATH" 2>&1)
-    OX_EXIT=$?
-    if [ $OX_EXIT -ne 0 ]; then
-        echo "oxlint found unfixable errors in: $FILE_PATH" >&2
-        echo "$OX_OUTPUT" >&2
-        exit 2
-    fi
-fi
-
-# 2) ESLint --fix --quiet --cache
-# --quiet: suppress warnings, only show errors
-# --cache: use ESLint cache for performance
-# --rule: disable no-unused-vars auto-fix to prevent removing imports that Claude
-#         plans to use in a subsequent edit (pre-commit hook still catches them)
-echo "Running ESLint --fix on: $FILE_PATH"
-
-# First pass: attempt auto-fix
-OUTPUT=$($ESLINT_CMD --fix --quiet --cache --rule '@typescript-eslint/no-unused-vars: off' "$FILE_PATH" 2>&1)
-FIX_EXIT=$?
-
-if [ $FIX_EXIT -eq 0 ]; then
-    echo "ESLint: No errors in $(basename "$FILE_PATH")"
-    exit 0
-fi
-
-# Auto-fix resolved some issues but errors remain — re-run to get remaining errors
-OUTPUT=$($ESLINT_CMD --quiet --cache "$FILE_PATH" 2>&1)
-LINT_EXIT=$?
-
-if [ $LINT_EXIT -eq 0 ]; then
-    echo "ESLint: Auto-fixed all errors in $(basename "$FILE_PATH")"
-    exit 0
+    echo "oxlint found errors in: $FILE_PATH" >&2
+    echo "$OX_OUTPUT" >&2
+    exit 2
 fi
 
-# Unfixable errors remain — block with feedback
-echo "ESLint found unfixable errors in: $FILE_PATH" >&2
-echo "$OUTPUT" >&2
-exit 2
+echo "oxlint: No errors in $(basename "$FILE_PATH")"
+exit 0