@codyswann/lisa 2.26.0 → 2.26.2

package/dist/codex/hooks-installer.d.ts

@@ -1,6 +1,13 @@
 import type { ProjectType } from "../core/config.js";
 /** Subdirectory inside `.codex/` for Lisa-managed hook scripts */
 export declare const LISA_HOOKS_SUBDIR: string;
+/**
+ * Shared shell helper sourced by every edit-aware hook to resolve the file
+ * path(s) a tool touches (handles single-file Edit/Write and multi-file
+ * apply_patch). Copied alongside the hook scripts whenever an edit hook is
+ * installed so the apply_patch parsing lives in exactly one place.
+ */
+export declare const EDIT_PATHS_LIB = "_extract-edit-paths.sh";
 /** Subdirectory inside `.codex/` for Lisa rules content (read by inject-rules) */
 export declare const LISA_RULES_SUBDIR = "lisa-rules";
 /** Filename of the Codex hooks config file inside `.codex/` */

package/dist/codex/hooks-installer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hooks-installer.d.ts","sourceRoot":"","sources":["../../src/codex/hooks-installer.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAUrD,kEAAkE;AAClE,eAAO,MAAM,iBAAiB,QAA6B,CAAC;AAE5D,kFAAkF;AAClF,eAAO,MAAM,iBAAiB,eAAe,CAAC;AAE9C,+DAA+D;AAC/D,eAAO,MAAM,cAAc,eAAe,CAAC;AA+G3C,uCAAuC;AACvC,MAAM,WAAW,kBAAkB;IACjC,yEAAyE;IACzE,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,0DAA0D;IAC1D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,SAAS,WAAW,EAAE,GACpC,OAAO,CAAC,kBAAkB,CAAC,CA2C7B"}
+{"version":3,"file":"hooks-installer.d.ts","sourceRoot":"","sources":["../../src/codex/hooks-installer.ts"],"names":[],"mappings":"AAuCA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAUrD,kEAAkE;AAClE,eAAO,MAAM,iBAAiB,QAA6B,CAAC;AAE5D;;;;;GAKG;AACH,eAAO,MAAM,cAAc,2BAA2B,CAAC;AAEvD,kFAAkF;AAClF,eAAO,MAAM,iBAAiB,eAAe,CAAC;AAE9C,+DAA+D;AAC/D,eAAO,MAAM,cAAc,eAAe,CAAC;AA0H3C,uCAAuC;AACvC,MAAM,WAAW,kBAAkB;IACjC,yEAAyE;IACzE,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,0DAA0D;IAC1D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,SAAS,WAAW,EAAE,GACpC,OAAO,CAAC,kBAAkB,CAAC,CA4D7B"}

package/dist/codex/hooks-installer.js

@@ -7,10 +7,24 @@
  *   3. For inject-rules: also mirror Lisa rules into `.codex/lisa-rules/`
  *   4. Tagged-merge `.codex/hooks.json`
  *
- * Codex hook event support map (vs. Lisa's existing Claude Code hooks):
+ * Codex hook event support map (vs. Lisa's existing Claude Code hooks),
+ * verified against codex-cli 0.125.0 by source-read + runtime tests:
  *   - SessionStart, PreToolUse, PostToolUse, UserPromptSubmit, Stop  ✅
  *   - PermissionRequest                                             ✅ (Codex-only)
  *   - SubagentStart, SessionEnd, Notification, PreCompact           ❌ (Codex doesn't have these)
+ *
+ * Claude hooks intentionally NOT ported (no Codex equivalent):
+ *   - enforce-team-first.sh — gates Claude's TeamCreate/Skill/ToolSearch agent-
+ *     team orchestration; Codex's multi-agent model is different.
+ *   - inject-flow-context.sh — fires on SubagentStart, which Codex lacks.
+ *   - the SessionEnd `entire` hook — Codex has no SessionEnd event.
+ * inject-rules also fires on SubagentStart under Claude; on Codex only its
+ * SessionStart variant applies (Codex has no per-subagent start event).
+ *
+ * Codex does NOT execute plugin-bundled hooks (a `.codex-plugin` `hooks`
+ * pointer / `hooks/hooks.json` never fires), so this installer writes hooks
+ * into the project's own `.codex/hooks.json` instead. See
+ * scripts/generate-codex-plugin-artifacts.mjs for the build-side counterpart.
  * @module codex/hooks-installer
  */
 import * as fse from "fs-extra";
@@ -20,6 +34,13 @@ import { fileURLToPath } from "node:url";
 import { mergeLisaHooks, parseHooksFile, serializeHooksFile, } from "./hooks-merger.js";
 /** Subdirectory inside `.codex/` for Lisa-managed hook scripts */
 export const LISA_HOOKS_SUBDIR = path.join("hooks", "lisa");
+/**
+ * Shared shell helper sourced by every edit-aware hook to resolve the file
+ * path(s) a tool touches (handles single-file Edit/Write and multi-file
+ * apply_patch). Copied alongside the hook scripts whenever an edit hook is
+ * installed so the apply_patch parsing lives in exactly one place.
+ */
+export const EDIT_PATHS_LIB = "_extract-edit-paths.sh";
 /** Subdirectory inside `.codex/` for Lisa rules content (read by inject-rules) */
 export const LISA_RULES_SUBDIR = "lisa-rules";
 /** Filename of the Codex hooks config file inside `.codex/` */
@@ -85,6 +106,7 @@ const HOOK_CATALOG = [
         matcher: WRITE_MATCHER,
         scriptFilename: "format-on-edit.sh",
         forProjectTypes: ["typescript"],
+        needsEditPathLib: true,
     },
     {
         id: "lint-on-edit",
@@ -92,13 +114,15 @@ const HOOK_CATALOG = [
         matcher: WRITE_MATCHER,
         scriptFilename: "lint-on-edit.sh",
         forProjectTypes: ["typescript"],
+        needsEditPathLib: true,
     },
     {
         id: "sg-scan-on-edit",
         event: "PostToolUse",
         matcher: WRITE_MATCHER,
         scriptFilename: "sg-scan-on-edit.sh",
-        forProjectTypes: ["typescript"],
+        forProjectTypes: ["typescript", "rails"],
+        needsEditPathLib: true,
     },
     {
         id: "rubocop-on-edit",
@@ -106,6 +130,7 @@ const HOOK_CATALOG = [
         matcher: WRITE_MATCHER,
         scriptFilename: "rubocop-on-edit.sh",
         forProjectTypes: ["rails"],
+        needsEditPathLib: true,
     },
     {
         id: "block-migration-edits",
@@ -113,6 +138,7 @@ const HOOK_CATALOG = [
         matcher: WRITE_MATCHER,
         scriptFilename: "block-migration-edits.sh",
         forProjectTypes: ["nestjs"],
+        needsEditPathLib: true,
     },
 ];
 /**
@@ -138,6 +164,17 @@ export async function installHooks(lisaDir, destDir, detectedTypes) {
         await chmod(scriptDest, 0o755);
         return path.join(LISA_HOOKS_SUBDIR, entry.scriptFilename);
     }));
+    // Step 1b: copy the shared edit-path helper when any installed hook sources
+    // it. Edit-aware hooks (format/lint/sg-scan/rubocop/block-migration) source
+    // this for apply_patch path parsing.
+    const libFiles = applicable.some(e => e.needsEditPathLib)
+        ? await (async () => {
+            const libDest = path.join(hooksDir, EDIT_PATHS_LIB);
+            await copyFile(resolveBundledScript(EDIT_PATHS_LIB), libDest);
+            await chmod(libDest, 0o755);
+            return [path.join(LISA_HOOKS_SUBDIR, EDIT_PATHS_LIB)];
+        })()
+        : [];
     // Step 2: mirror rules from Lisa into .codex/lisa-rules/ (only when
     // inject-rules is being installed — i.e., always, since it's a "*" hook)
     const ruleFiles = applicable.some(e => e.id === "inject-rules")
@@ -150,7 +187,12 @@ export async function installHooks(lisaDir, destDir, detectedTypes) {
     const merged = mergeLisaHooks(existing, lisaHookSpecs);
     await writeFile(hooksFilePath, serializeHooksFile(merged), "utf8");
     return {
-        managedFiles: Object.freeze([...scriptFiles, ...ruleFiles, HOOKS_FILENAME]),
+        managedFiles: Object.freeze([
+            ...scriptFiles,
+            ...libFiles,
+            ...ruleFiles,
+            HOOKS_FILENAME,
+        ]),
         hookEntries: lisaHookSpecs.length,
     };
 }

package/dist/codex/hooks-installer.js.map

@@ -1 +1 @@
-{"version":3,"file":"hooks-installer.js","sourceRoot":"","sources":["../../src/codex/hooks-installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EACL,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAIL,cAAc,EACd,cAAc,EACd,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAE3B,kEAAkE;AAClE,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAE5D,kFAAkF;AAClF,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAE9C,+DAA+D;AAC/D,MAAM,CAAC,MAAM,cAAc,GAAG,YAAY,CAAC;AAE3C;;;;GAIG;AACH,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAkB/C;;;;;;;;GAQG;AACH,MAAM,YAAY,GAAgC;IAChD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,EAAE;QACX,cAAc,EAAE,iBAAiB;QACjC,eAAe,EAAE,CAAC,GAAG,CAAC;QACtB,aAAa,EAAE,2CAA2C;KAC3D;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,SAAS;QAClB,cAAc,EAAE,iBAAiB;QACjC,eAAe,EAAE,CAAC,GAAG,CAAC;QACtB,aAAa,EAAE,+BAA+B;KAC/C;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,EAAE;QACX,cAAc,EAAE,mBAAmB;QACnC,eAAe,EAAE,CAAC,GAAG,CAAC;QACtB,aAAa,EAAE,kCAAkC;KAClD;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,MAAM;QACf,cAAc,EAAE,oBAAoB;QACpC,eAAe,EAAE,CAAC,GAAG,CAAC;QACtB,aAAa,EAAE,+BAA+B;KAC/C;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,EAAE;QACX,cAAc,EAAE,gBAAgB;QAChC,eAAe,EAAE,CAAC,GAAG,CAAC;KACvB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,aAAa;QACtB,cAAc,EAAE,mBAAmB;QACnC,eAAe,EAAE,CAAC,YAAY,CAAC;KAChC;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,aAAa;QACtB,cAAc,EAAE,iBAAiB;QACjC,eAAe,EAAE,CAAC,YAAY,CAAC;KAChC;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,aAAa;QACtB,cAAc,EAAE,oBAAoB;QACpC,eAAe,EAAE,CAAC,YAAY,CAAC;KAChC;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,aAAa;QACtB,cAAc,EAAE,oBAAoB;QACpC,eAAe,EAAE,CAAC,OAAO,CAAC;KAC3B;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,aAAa;QACtB,cAAc,EAAE,0BAA0B;QAC1C,eAAe,EAAE,CAAC,QAAQ,CAAC;KAC5B;CACF,CAAC;AAUF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAe,EACf,OAAe,EACf,aAAqC;IAErC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACxD,MAAM,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAE9B,MAAM,UAAU,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAEvD,wEAAwE;IACxE,MAAM,WAAW,GAAsB,MAAM,OAAO,CAAC,GAAG,CACtD,UAAU,CAAC,GAAG,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE;QAC3B,MAAM,YAAY,GAAG,oBAAoB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QAC7D,MAAM,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACzC,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5D,CAAC,CAAC,CACH,CAAC;IAEF,oEAAoE;IACpE,yEAAyE;IACzE,MAAM,SAAS,GAAsB,UAAU,CAAC,IAAI,CAClD,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,cAAc,CAC7B;QACC,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAC/D,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,CACnC;QACH,CAAC,CAAC,EAAE,CAAC;IAEP,kCAAkC;IAClC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,aAAa,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAC3C,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CACnC,CAAC;IACF,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACvD,MAAM,SAAS,CAAC,aAAa,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IAEnE,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,WAAW,EAAE,GAAG,SAAS,EAAE,cAAc,CAAC,CAAC;QAC3E,WAAW,EAAE,aAAa,CAAC,MAAM;KAClC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAC3B,aAAqC;IAErC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,aAAa,CAAC,CAAC;IACnD,OAAO,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACjC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CACjE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,kBAAkB,CACzB,KAAuB,EACvB,QAAgB;IAEhB,MAAM,OAAO,GAAG,oEAAoE,iBAAiB,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC;IACjI,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO;QACP,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE;YACxC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAAC,aAAqB;IAChD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAClD,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,WAAW,CACxB,OAAe,EACf,YAAoB,EACpB,aAAqC;IAErC,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IAE3E,4DAA4D;IAC5D,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CACrC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAC,UAAU,EAAC,EAAE;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACrE,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,EAAc,EAAE,CAAC;QAC9C,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CACrD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CACrB,CAAC;QACF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC,CAAC,CACH,CAAC;IAEF,0DAA0D;IAC1D,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAC7B,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,CAClD,CAAC;QACF,MAAM,IAAI,KAAK,CACb,iCAAiC,SAAS,IAAI,SAAS,oCAAoC,CAC5F,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,MAAM,OAAO,CAAC,GAAG,CACf,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CACzC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CACf,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CACpE,CACF,CACF,CACF,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC"}
+{"version":3,"file":"hooks-installer.js","sourceRoot":"","sources":["../../src/codex/hooks-installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EACL,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAIL,cAAc,EACd,cAAc,EACd,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAE3B,kEAAkE;AAClE,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,wBAAwB,CAAC;AAEvD,kFAAkF;AAClF,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAE9C,+DAA+D;AAC/D,MAAM,CAAC,MAAM,cAAc,GAAG,YAAY,CAAC;AAE3C;;;;GAIG;AACH,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAwB/C;;;;;;;;GAQG;AACH,MAAM,YAAY,GAAgC;IAChD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,EAAE;QACX,cAAc,EAAE,iBAAiB;QACjC,eAAe,EAAE,CAAC,GAAG,CAAC;QACtB,aAAa,EAAE,2CAA2C;KAC3D;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,SAAS;QAClB,cAAc,EAAE,iBAAiB;QACjC,eAAe,EAAE,CAAC,GAAG,CAAC;QACtB,aAAa,EAAE,+BAA+B;KAC/C;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,EAAE;QACX,cAAc,EAAE,mBAAmB;QACnC,eAAe,EAAE,CAAC,GAAG,CAAC;QACtB,aAAa,EAAE,kCAAkC;KAClD;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,MAAM;QACf,cAAc,EAAE,oBAAoB;QACpC,eAAe,EAAE,CAAC,GAAG,CAAC;QACtB,aAAa,EAAE,+BAA+B;KAC/C;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,EAAE;QACX,cAAc,EAAE,gBAAgB;QAChC,eAAe,EAAE,CAAC,GAAG,CAAC;KACvB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,aAAa;QACtB,cAAc,EAAE,mBAAmB;QACnC,eAAe,EAAE,CAAC,YAAY,CAAC;QAC/B,gBAAgB,EAAE,IAAI;KACvB;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,aAAa;QACtB,cAAc,EAAE,iBAAiB;QACjC,eAAe,EAAE,CAAC,YAAY,CAAC;QAC/B,gBAAgB,EAAE,IAAI;KACvB;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,aAAa;QACtB,cAAc,EAAE,oBAAoB;QACpC,eAAe,EAAE,CAAC,YAAY,EAAE,OAAO,CAAC;QACxC,gBAAgB,EAAE,IAAI;KACvB;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,aAAa;QACtB,cAAc,EAAE,oBAAoB;QACpC,eAAe,EAAE,CAAC,OAAO,CAAC;QAC1B,gBAAgB,EAAE,IAAI;KACvB;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,aAAa;QACtB,cAAc,EAAE,0BAA0B;QAC1C,eAAe,EAAE,CAAC,QAAQ,CAAC;QAC3B,gBAAgB,EAAE,IAAI;KACvB;CACF,CAAC;AAUF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAe,EACf,OAAe,EACf,aAAqC;IAErC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACxD,MAAM,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAE9B,MAAM,UAAU,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAEvD,wEAAwE;IACxE,MAAM,WAAW,GAAsB,MAAM,OAAO,CAAC,GAAG,CACtD,UAAU,CAAC,GAAG,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE;QAC3B,MAAM,YAAY,GAAG,oBAAoB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QAC7D,MAAM,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACzC,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5D,CAAC,CAAC,CACH,CAAC;IAEF,4EAA4E;IAC5E,4EAA4E;IAC5E,qCAAqC;IACrC,MAAM,QAAQ,GAAsB,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC1E,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAChB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YACpD,MAAM,QAAQ,CAAC,oBAAoB,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9D,MAAM,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,EAAE;QACN,CAAC,CAAC,EAAE,CAAC;IAEP,oEAAoE;IACpE,yEAAyE;IACzE,MAAM,SAAS,GAAsB,UAAU,CAAC,IAAI,CAClD,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,cAAc,CAC7B;QACC,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAC/D,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,CACnC;QACH,CAAC,CAAC,EAAE,CAAC;IAEP,kCAAkC;IAClC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,aAAa,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAC3C,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CACnC,CAAC;IACF,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACvD,MAAM,SAAS,CAAC,aAAa,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IAEnE,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC;YAC1B,GAAG,WAAW;YACd,GAAG,QAAQ;YACX,GAAG,SAAS;YACZ,cAAc;SACf,CAAC;QACF,WAAW,EAAE,aAAa,CAAC,MAAM;KAClC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAC3B,aAAqC;IAErC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,aAAa,CAAC,CAAC;IACnD,OAAO,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACjC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CACjE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,kBAAkB,CACzB,KAAuB,EACvB,QAAgB;IAEhB,MAAM,OAAO,GAAG,oEAAoE,iBAAiB,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC;IACjI,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO;QACP,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE;YACxC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAAC,aAAqB;IAChD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAClD,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,WAAW,CACxB,OAAe,EACf,YAAoB,EACpB,aAAqC;IAErC,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IAE3E,4DAA4D;IAC5D,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CACrC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAC,UAAU,EAAC,EAAE;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACrE,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,EAAc,EAAE,CAAC;QAC9C,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CACrD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CACrB,CAAC;QACF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC,CAAC,CACH,CAAC;IAEF,0DAA0D;IAC1D,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAC7B,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,CAClD,CAAC;QACF,MAAM,IAAI,KAAK,CACb,iCAAiC,SAAS,IAAI,SAAS,oCAAoC,CAC5F,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,MAAM,OAAO,CAAC,GAAG,CACf,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CACzC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CACf,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CACpE,CACF,CACF,CACF,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC"}

package/dist/codex/scripts/_extract-edit-paths.sh

@@ -0,0 +1,49 @@
+#!/usr/bin/env bash
+# Lisa-managed Codex hook helper (sourced, not executed directly).
+#
+# Provides `lisa_extract_edit_paths`, the single source of truth for turning a
+# Codex Pre/PostToolUse hook envelope into the list of file paths the tool
+# touches. Every edit-aware Lisa hook (format/lint/sg-scan/rubocop/block-
+# migration) sources this so the apply_patch parsing lives in exactly one place.
+#
+# Tool envelope shapes (verified against codex-cli 0.125.0 by capturing real
+# hook stdin):
+#   Edit / Write   → tool_input.file_path  (single string)
+#   apply_patch    → tool_input.command    (a STRING containing the full patch,
+#                                            NOT an array — there is no command[1])
+#
+# An apply_patch patch encodes its targets as header lines:
+#   *** Add File: <path>
+#   *** Update File: <path>
+#   *** Delete File: <path>
+# A single patch may carry MANY files, so callers must loop over the output.
+
+# Print, one per line, every file path the tool envelope intends to write.
+# Emits nothing (and returns 0) when jq is unavailable or no path is found, so
+# callers can fail open.
+#
+# $1 - the full hook stdin JSON
+lisa_extract_edit_paths() {
+  local json="$1"
+  command -v jq >/dev/null 2>&1 || return 0
+
+  local tool_name
+  tool_name="$(printf '%s' "$json" | jq -r '.tool_name // .tool // empty')"
+
+  if [ "$tool_name" = "apply_patch" ]; then
+    local patch_text
+    patch_text="$(printf '%s' "$json" | jq -r '.tool_input.command // empty')"
+    [ -n "$patch_text" ] || return 0
+    # Walk the patch line-by-line with bash-native string ops (NOT grep/sed on
+    # JSON — see .claude/rules/PROJECT_RULES.md) to pull out every file header.
+    while IFS= read -r line; do
+      case "$line" in
+        "*** Add File: "* | "*** Update File: "* | "*** Delete File: "*)
+          printf '%s\n' "${line#*File: }"
+          ;;
+      esac
+    done <<<"$patch_text"
+  else
+    printf '%s' "$json" | jq -r '.tool_input.file_path // empty'
+  fi
+}

package/dist/codex/scripts/block-migration-edits.sh

@@ -4,59 +4,23 @@
 # to regenerate from entity diffs instead — hand-written migrations drift
 # from entity metadata and break the schema/migration contract.
 #
-# Codex blocks the tool call when stdout has hookSpecificOutput.permissionDecision
-# set to "deny", or when the script exits non-zero with a deny message.
-#
-# Tool envelope shapes (Codex CLI 0.125.0):
-#   Edit / Write     → tool_input.file_path        (single string)
-#   apply_patch      → tool_input.command          (["apply_patch", "<patch>"])
-#
-# The patch text encodes target file paths via "*** Update File: <path>" /
-# "*** Add File: <path>" / "*** Delete File: <path>" directives. We must
-# extract every such path so apply_patch can't sneak past this guard.
-set -euo pipefail
+# Codex blocks the tool call when the script exits non-zero with a deny message
+# on stderr (exit 2). The shared extractor resolves every target path from the
+# tool envelope — including multi-file apply_patch patches — so an edit can't
+# slip a migration change past this guard.
+set -uo pipefail
 
 JSON_INPUT="$(cat)"
 
-if ! command -v jq >/dev/null 2>&1; then
-  # Without jq we can't reliably parse — fail open (allow the edit). This
-  # matches the project rule against grep/sed/cut/awk-based JSON parsing.
-  exit 0
-fi
-
-# Determine which tool fired. Codex puts the tool name at .tool_name on
-# every PreToolUse envelope; falling back to .tool just in case.
-TOOL_NAME="$(echo "$JSON_INPUT" | jq -r '.tool_name // .tool // empty')"
+# Without jq we can't reliably parse — fail open (allow the edit). This matches
+# the project rule against grep/sed/cut/awk-based JSON parsing.
+command -v jq >/dev/null 2>&1 || exit 0
 
-# Collect every candidate path the tool intends to write. Newline-separated.
-CANDIDATE_PATHS=""
-case "$TOOL_NAME" in
-  apply_patch)
-    # Pull the full patch string out of tool_input.command[1], then extract
-    # every "*** {Update,Add,Delete} File: <path>" header line. jq handles
-    # the JSON; we use bash-native string splitting (NOT grep/cut on JSON)
-    # to walk the patch text line-by-line.
-    PATCH_TEXT="$(echo "$JSON_INPUT" | jq -r '.tool_input.command[1] // empty')"
-    if [ -n "${PATCH_TEXT}" ]; then
-      while IFS= read -r line; do
-        case "$line" in
-          "*** Update File: "*|"*** Add File: "*|"*** Delete File: "*)
-            CANDIDATE_PATHS+="${line#*: }"$'\n'
-            ;;
-        esac
-      done <<<"${PATCH_TEXT}"
-    fi
-    ;;
-  *)
-    # Edit / Write / anything else: single file under tool_input.file_path
-    SINGLE_PATH="$(echo "$JSON_INPUT" | jq -r '.tool_input.file_path // empty')"
-    [ -n "${SINGLE_PATH}" ] && CANDIDATE_PATHS="${SINGLE_PATH}"
-    ;;
-esac
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=/dev/null
+. "${SCRIPT_DIR}/_extract-edit-paths.sh"
 
-[ -n "${CANDIDATE_PATHS}" ] || exit 0
-
-# Walk every candidate; deny on the first migration match.
+# Walk every candidate path; deny on the first migration match.
 while IFS= read -r FILE_PATH; do
   [ -n "${FILE_PATH}" ] || continue
   case "${FILE_PATH}" in
@@ -73,6 +37,8 @@ EOF
       exit 2
       ;;
   esac
-done <<<"${CANDIDATE_PATHS}"
+done <<EOF
+$(lisa_extract_edit_paths "$JSON_INPUT")
+EOF
 
 exit 0

package/dist/codex/scripts/format-on-edit.sh

@@ -1,15 +1,9 @@
 #!/usr/bin/env bash
 # Lisa-managed Codex hook script (PostToolUse Edit|Write|apply_patch).
-# Runs Prettier on the just-edited file. Reads tool_input.file_path from
-# stdin JSON.
-#
-# Note on apply_patch: Codex's apply_patch tool envelope exposes the patch
-# under tool_input.command (an array), not tool_input.file_path. This script
-# only formats single-file Edit/Write tool calls. apply_patch fires get
-# silently skipped (FILE_PATH empty) — that's acceptable here because the
-# next save/edit will still run the formatter, and the user can always run
-# `prettier --write` against modified files manually.
-set -euo pipefail
+# Runs Prettier on every just-edited file. Resolves the target file(s) from the
+# tool envelope via the shared extractor, which handles both single-file
+# Edit/Write (tool_input.file_path) and multi-file apply_patch (tool_input.command).
+set -uo pipefail
 
 JSON_INPUT="$(cat)"
 
@@ -17,19 +11,30 @@ JSON_INPUT="$(cat)"
 # with grep/sed/cut/awk — always use jq. Fail open without jq so we don't
 # block the agent on missing tooling.
 command -v jq >/dev/null 2>&1 || exit 0
-FILE_PATH="$(echo "$JSON_INPUT" | jq -r '.tool_input.file_path // empty')"
 
-[ -n "${FILE_PATH}" ] || exit 0
-[ -f "${FILE_PATH}" ] || exit 0
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=/dev/null
+. "${SCRIPT_DIR}/_extract-edit-paths.sh"
 
-case "${FILE_PATH##*.}" in
-  ts|tsx|js|jsx|mjs|cjs|json|md|yaml|yml|css|scss|html) ;;
-  *) exit 0 ;;
-esac
-
-# Prefer the project-local prettier; fall back to a globally installed one
+# Resolve the formatter once, up front.
 if [ -x "./node_modules/.bin/prettier" ]; then
-  ./node_modules/.bin/prettier --write "${FILE_PATH}" >/dev/null 2>&1 || true
+  PRETTIER="./node_modules/.bin/prettier"
 elif command -v prettier >/dev/null 2>&1; then
-  prettier --write "${FILE_PATH}" >/dev/null 2>&1 || true
+  PRETTIER="prettier"
+else
+  exit 0
 fi
+
+while IFS= read -r FILE_PATH; do
+  [ -n "${FILE_PATH}" ] || continue
+  [ -f "${FILE_PATH}" ] || continue
+  case "${FILE_PATH##*.}" in
+    ts | tsx | js | jsx | mjs | cjs | json | md | yaml | yml | css | scss | html) ;;
+    *) continue ;;
+  esac
+  "$PRETTIER" --write "${FILE_PATH}" >/dev/null 2>&1 || true
+done <<EOF
+$(lisa_extract_edit_paths "$JSON_INPUT")
+EOF
+
+exit 0

package/dist/codex/scripts/lint-on-edit.sh

@@ -1,23 +1,19 @@
 #!/usr/bin/env bash
 # Lisa-managed Codex hook script (PostToolUse Edit|Write|apply_patch).
-# Runs ESLint --fix on the just-edited file. If unfixable errors remain,
-# exits non-zero so Codex sees the failure and the agent self-corrects.
-set -euo pipefail
+# Runs ESLint --fix on every just-edited file. If unfixable errors remain on
+# any file, exits non-zero so Codex sees the failure and the agent self-corrects.
+# Resolves target file(s) via the shared extractor (Edit/Write + apply_patch).
+set -uo pipefail
 
 JSON_INPUT="$(cat)"
 
 # Project rule (.claude/rules/PROJECT_RULES.md): never parse JSON in shell
 # with grep/sed/cut/awk — always use jq. Fail open without jq.
 command -v jq >/dev/null 2>&1 || exit 0
-FILE_PATH="$(echo "$JSON_INPUT" | jq -r '.tool_input.file_path // empty')"
 
-[ -n "${FILE_PATH}" ] || exit 0
-[ -f "${FILE_PATH}" ] || exit 0
-
-case "${FILE_PATH##*.}" in
-  ts|tsx|js|jsx|mjs|cjs) ;;
-  *) exit 0 ;;
-esac
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=/dev/null
+. "${SCRIPT_DIR}/_extract-edit-paths.sh"
 
 if [ -x "./node_modules/.bin/eslint" ]; then
   ESLINT="./node_modules/.bin/eslint"
@@ -27,6 +23,19 @@ else
   exit 0
 fi
 
-# Auto-fix what we can; surface anything left so the agent fixes it itself
-"$ESLINT" --fix "${FILE_PATH}" >/dev/null 2>&1 || true
-"$ESLINT" --quiet "${FILE_PATH}"
+STATUS=0
+while IFS= read -r FILE_PATH; do
+  [ -n "${FILE_PATH}" ] || continue
+  [ -f "${FILE_PATH}" ] || continue
+  case "${FILE_PATH##*.}" in
+    ts | tsx | js | jsx | mjs | cjs) ;;
+    *) continue ;;
+  esac
+  # Auto-fix what we can; surface anything left so the agent fixes it itself.
+  "$ESLINT" --fix "${FILE_PATH}" >/dev/null 2>&1 || true
+  "$ESLINT" --quiet "${FILE_PATH}" || STATUS=1
+done <<EOF
+$(lisa_extract_edit_paths "$JSON_INPUT")
+EOF
+
+exit "$STATUS"

package/dist/codex/scripts/rubocop-on-edit.sh

@@ -1,24 +1,20 @@
 #!/usr/bin/env bash
 # Lisa-managed Codex hook script (PostToolUse Edit|Write|apply_patch).
-# Runs RuboCop -a (safe autocorrect) on the just-edited Ruby file, then
-# checks for remaining unfixable errors. Blocking — non-zero exit forces
-# the agent to fix.
-set -euo pipefail
+# Runs RuboCop -a (safe autocorrect) on every just-edited Ruby file, then checks
+# for remaining unfixable errors. Blocking — a non-zero exit on any file forces
+# the agent to fix. Resolves target file(s) via the shared extractor
+# (Edit/Write + apply_patch).
+set -uo pipefail
 
 JSON_INPUT="$(cat)"
 
 # Project rule (.claude/rules/PROJECT_RULES.md): never parse JSON in shell
 # with grep/sed/cut/awk — always use jq. Fail open without jq.
 command -v jq >/dev/null 2>&1 || exit 0
-FILE_PATH="$(echo "$JSON_INPUT" | jq -r '.tool_input.file_path // empty')"
 
-[ -n "${FILE_PATH}" ] || exit 0
-[ -f "${FILE_PATH}" ] || exit 0
-
-case "${FILE_PATH##*.}" in
-  rb|rake) ;;
-  *) exit 0 ;;
-esac
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=/dev/null
+. "${SCRIPT_DIR}/_extract-edit-paths.sh"
 
 if command -v bundle >/dev/null 2>&1 && [ -f "./Gemfile" ]; then
   RUBOCOP=(bundle exec rubocop)
@@ -28,5 +24,18 @@ else
   exit 0
 fi
 
-"${RUBOCOP[@]}" -a "${FILE_PATH}" >/dev/null 2>&1 || true
-"${RUBOCOP[@]}" "${FILE_PATH}"
+STATUS=0
+while IFS= read -r FILE_PATH; do
+  [ -n "${FILE_PATH}" ] || continue
+  [ -f "${FILE_PATH}" ] || continue
+  case "${FILE_PATH##*.}" in
+    rb | rake) ;;
+    *) continue ;;
+  esac
+  "${RUBOCOP[@]}" -a "${FILE_PATH}" >/dev/null 2>&1 || true
+  "${RUBOCOP[@]}" "${FILE_PATH}" || STATUS=1
+done <<EOF
+$(lisa_extract_edit_paths "$JSON_INPUT")
+EOF
+
+exit "$STATUS"

package/dist/codex/scripts/sg-scan-on-edit.sh

@@ -1,23 +1,20 @@
 #!/usr/bin/env bash
 # Lisa-managed Codex hook script (PostToolUse Edit|Write|apply_patch).
-# Runs ast-grep scan against the project, reporting only errors involving
-# the just-edited file. Blocking — non-zero exit forces the agent to fix.
-set -euo pipefail
+# Runs ast-grep scan on every just-edited source file (TypeScript/JS or Ruby),
+# reporting only errors involving those files. Blocking — a non-zero exit on any
+# file forces the agent to fix. Resolves target file(s) via the shared extractor
+# (Edit/Write + apply_patch).
+set -uo pipefail
 
 JSON_INPUT="$(cat)"
 
 # Project rule (.claude/rules/PROJECT_RULES.md): never parse JSON in shell
 # with grep/sed/cut/awk — always use jq. Fail open without jq.
 command -v jq >/dev/null 2>&1 || exit 0
-FILE_PATH="$(echo "$JSON_INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null || true)"
 
-[ -n "${FILE_PATH}" ] || exit 0
-[ -f "${FILE_PATH}" ] || exit 0
-
-case "${FILE_PATH##*.}" in
-  ts|tsx|js|jsx|mjs|cjs) ;;
-  *) exit 0 ;;
-esac
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=/dev/null
+. "${SCRIPT_DIR}/_extract-edit-paths.sh"
 
 if [ -x "./node_modules/.bin/ast-grep" ]; then
   AST_GREP="./node_modules/.bin/ast-grep"
@@ -31,4 +28,17 @@ fi
 
 [ -f "./sgconfig.yml" ] || exit 0
 
-"$AST_GREP" scan "${FILE_PATH}" 2>&1
+STATUS=0
+while IFS= read -r FILE_PATH; do
+  [ -n "${FILE_PATH}" ] || continue
+  [ -f "${FILE_PATH}" ] || continue
+  case "${FILE_PATH##*.}" in
+    ts | tsx | js | jsx | mjs | cjs | rb | rake) ;;
+    *) continue ;;
+  esac
+  "$AST_GREP" scan "${FILE_PATH}" 2>&1 || STATUS=1
+done <<EOF
+$(lisa_extract_edit_paths "$JSON_INPUT")
+EOF
+
+exit "$STATUS"

package/package.json

@@ -82,7 +82,7 @@
     "lodash": ">=4.18.1"
   },
   "name": "@codyswann/lisa",
-  "version": "2.26.0",
+  "version": "2.26.2",
   "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
   "main": "dist/index.js",
   "exports": {

package/plugins/lisa/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.26.0",
+  "version": "2.26.2",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.26.0",
+  "version": "2.26.2",
   "description": "Universal governance: agents, skills, commands, hooks, and rules for all projects.",
   "author": {
     "name": "Cody Swann"
@@ -12,7 +12,6 @@
     "workflow"
   ],
   "skills": "./skills/",
-  "hooks": "./hooks/hooks.json",
   "interface": {
     "displayName": "Lisa",
     "shortDescription": "Universal project governance workflows",

package/plugins/lisa/rules/base-rules.md

@@ -8,7 +8,7 @@ After echoing the chosen flow and BEFORE doing any work, state the orchestration
 
 Default to an agent team for Research, Plan, Implement (Build/Fix/Improve/Investigate-Only), and any flow that invokes the Review sub-flow. Use a single agent only for Verify (standalone) and Monitor (standalone). See the `intent-routing` rule's Orchestration section for the full decision matrix.
 
-When the mode is `agent team` **and you are not already operating inside an agent team**, your FIRST tool calls after the classification echo MUST establish team orchestration before any content-gathering work. Use `TeamCreate` if available. In Claude, if `TeamCreate` has not been loaded yet, first use `ToolSearch` with `query: "select:TeamCreate"` to load its schema. If `TeamCreate` is not available, use the current runtime's tool-discovery mechanism (for Codex, `tool_search`) to discover available multi-agent/team tools, then call the appropriate team creation tool. If no team creation tool is available, explicitly state that team orchestration is unavailable in this runtime, continue as the lead agent, and preserve the workflow's review, verification, and task-tracking obligations locally. Do not reach for `TaskCreate`, `Agent`, `Skill`, MCP tools, `Read`, `Bash`, or any other content-gathering call before the team exists or the no-team fallback has been declared — those are bypass paths that skip durable task state and parallel review. Reading the ticket, exploring the code, querying the API are all tasks for the team, not for the lead session before orchestration exists.
+When the mode is `agent team` **and you are not already operating inside an agent team**, your FIRST tool calls after the classification echo MUST establish team orchestration before any content-gathering work. Use the team tool for the current runtime: Claude uses `TeamCreate` (first `ToolSearch` with `query: "select:TeamCreate"` if needed); Codex must not call `TeamCreate` because Codex does not expose that Claude tool. In Codex, use `tool_search` with a query like `multi-agent tools` to load `multi_agent_v1`, then use `multi_agent_v1.spawn_agent` for teammate delegation and treat the first successful `spawn_agent` call as establishing team orchestration. Other runtimes should use their current tool-discovery mechanism to discover and call the appropriate multi-agent/team tool. If no team creation or subagent delegation tool is available, explicitly state that team orchestration is unavailable in this runtime, continue as the lead agent, and preserve the workflow's review, verification, and task-tracking obligations locally. Do not reach for `TaskCreate`, `Agent`, `Skill`, MCP tools, `Read`, `Bash`, or any other content-gathering call before the team exists, the first Codex teammate has been spawned, or the no-team fallback has been declared — those are bypass paths that skip durable task state and parallel review. Reading the ticket, exploring the code, querying the API are all tasks for the team, not for the lead session before orchestration exists.
 
 Requirement Verification:
 

package/plugins/lisa/skills/debrief/SKILL.md

@@ -10,11 +10,17 @@ Walk the original Plan for `$ARGUMENTS`, mine the completed work items and their
 
 ## Orchestration: agent team
 
-If you are NOT already operating inside an agent team (no prior successful team-creation tool call in this session, not spawned into a team context), the very first thing you do is establish team orchestration.
+If you are NOT already operating inside an agent team (no prior successful team-creation or subagent-delegation tool call in this session, not spawned into a team context), the very first thing you do is establish team orchestration.
 
-Use `TeamCreate` if available. In Claude, if `TeamCreate` has not been loaded yet, first use `ToolSearch` with `query: "select:TeamCreate"` to load its schema. If `TeamCreate` is not available, use the current runtime's tool-discovery mechanism (for Codex, `tool_search`) to discover available multi-agent/team tools, then call the appropriate team creation tool. If no team creation tool is available, explicitly state that team orchestration is unavailable in this runtime, continue as the lead agent, and preserve the workflow's review, verification, and task-tracking obligations locally.
+Use the team tool for the current runtime:
 
-Until the team is established or the no-team fallback has been declared, do NOT call any of: `Agent`, `TaskCreate`, `Skill`, MCP tools (Atlassian / Linear / GitHub / Notion), `Read`, `Write`, `Edit`, `Bash`, `Grep`, `Glob`. Resolving the work-item set, fetching tickets, walking PRs — all of those are tasks for the team you are about to create, not for the lead session before orchestration exists.
+- Claude: use `TeamCreate`. If `TeamCreate` has not been loaded yet, first use `ToolSearch` with `query: "select:TeamCreate"` to load its schema.
+- Codex: do not call `TeamCreate`; Codex does not expose that Claude tool. Use `tool_search` with a query like `multi-agent tools` to load `multi_agent_v1`, then use `multi_agent_v1.spawn_agent` for teammate delegation. Treat the first successful `spawn_agent` call as establishing team orchestration.
+- Other runtimes: use the current runtime's tool-discovery mechanism to discover and call the appropriate multi-agent/team tool.
+
+If no team creation or subagent delegation tool is available, explicitly state that team orchestration is unavailable in this runtime, continue as the lead agent, and preserve the workflow's review, verification, and task-tracking obligations locally.
+
+Until the team is established, the first Codex teammate has been spawned, or the no-team fallback has been declared, do NOT call any of: `Agent`, `TaskCreate`, `Skill`, MCP tools (Atlassian / Linear / GitHub / Notion), `Read`, `Write`, `Edit`, `Bash`, `Grep`, `Glob`. Resolving the work-item set, fetching tickets, walking PRs — all of those are tasks for the team you are about to create, not for the lead session before orchestration exists.
 
 If you ARE already inside an agent team (e.g., a teammate invoked this skill via the Skill tool), do NOT create a second team — many harnesses reject double-creates. Continue within the existing team.
 

package/plugins/lisa/skills/implement/SKILL.md

@@ -7,13 +7,19 @@ description: This skill should be used for any non-trivial request — features,
 
 ## Orchestration: agent team
 
-Implement is a **team-first** flow. Bug, Build, Improve, and Investigate-Only all compose multiple specialists (Reproduce → debug → fix → review → verify). Single-agent mode is not permitted based on task complexity — the only exception is when no team creation tool is available in the current runtime (see no-team fallback in the paragraph below).
+Implement is a **team-first** flow. Bug, Build, Improve, and Investigate-Only all compose multiple specialists (Reproduce → debug → fix → review → verify). Single-agent mode is not permitted based on task complexity — the only exception is when no team creation or subagent delegation tool is available in the current runtime (see no-team fallback in the paragraph below).
 
-If you are NOT already operating inside an agent team (no prior successful team-creation tool call in this session, not spawned into a team context), the very first thing you do is establish team orchestration.
+If you are NOT already operating inside an agent team (no prior successful team-creation or subagent-delegation tool call in this session, not spawned into a team context), the very first thing you do is establish team orchestration.
 
-Use `TeamCreate` if available. In Claude, if `TeamCreate` has not been loaded yet, first use `ToolSearch` with `query: "select:TeamCreate"` to load its schema. If `TeamCreate` is not available, use the current runtime's tool-discovery mechanism (for Codex, `tool_search`) to discover available multi-agent/team tools, then call the appropriate team creation tool. If no team creation tool is available, explicitly state that team orchestration is unavailable in this runtime, continue as the lead agent, and preserve the workflow's review, verification, and task-tracking obligations locally. Every team must include the Explore agent.
+Use the team tool for the current runtime:
 
-Until the team is established or the no-team fallback has been declared, do NOT call any of: `Agent`, `TaskCreate`, `Skill` (including `lisa:tracker-read`, `lisa:jira-read-ticket`, `lisa:github-read-issue`), MCP tools (Atlassian / Linear / GitHub / Notion), `Read`, `Write`, `Edit`, `Bash`, `Grep`, `Glob`. Reading the ticket, exploring the code, fetching context — every one of those is a task for the team you are about to create, not for the lead session before orchestration exists. Doing them inline is the exact bypass path that produces a 1-agent ad-hoc fix instead of a real team flow.
+- Claude: use `TeamCreate`. If `TeamCreate` has not been loaded yet, first use `ToolSearch` with `query: "select:TeamCreate"` to load its schema.
+- Codex: do not call `TeamCreate`; Codex does not expose that Claude tool. Use `tool_search` with a query like `multi-agent tools` to load `multi_agent_v1`, then use `multi_agent_v1.spawn_agent` for teammate delegation. Treat the first successful `spawn_agent` call as establishing team orchestration.
+- Other runtimes: use the current runtime's tool-discovery mechanism to discover and call the appropriate multi-agent/team tool.
+
+If no team creation or subagent delegation tool is available, explicitly state that team orchestration is unavailable in this runtime, continue as the lead agent, and preserve the workflow's review, verification, and task-tracking obligations locally. Every team must include the Explore agent.
+
+Until the team is established, the first Codex teammate has been spawned, or the no-team fallback has been declared, do NOT call any of: `Agent`, `TaskCreate`, `Skill` (including `lisa:tracker-read`, `lisa:jira-read-ticket`, `lisa:github-read-issue`), MCP tools (Atlassian / Linear / GitHub / Notion), `Read`, `Write`, `Edit`, `Bash`, `Grep`, `Glob`. Reading the ticket, exploring the code, fetching context — every one of those is a task for the team you are about to create, not for the lead session before orchestration exists. Doing them inline is the exact bypass path that produces a 1-agent ad-hoc fix instead of a real team flow.
 
 If you ARE already inside an agent team (e.g., a teammate invoked this skill via the Skill tool, or `lisa:intake` is running this skill per Ready ticket), do NOT create a second team — many harnesses reject double-creates. Continue within the existing team. The team lead created the team; teammates inherit it.