@codyswann/lisa 2.107.2 → 2.109.0

package/package.json

@@ -82,7 +82,7 @@
     "lodash": ">=4.18.1"
   },
   "name": "@codyswann/lisa",
-  "version": "2.107.2",
+  "version": "2.109.0",
   "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
   "main": "dist/index.js",
   "exports": {

package/plugins/lisa/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.107.2",
+  "version": "2.109.0",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.107.2",
+  "version": "2.109.0",
   "description": "Universal governance: agents, skills, commands, hooks, and rules for all projects.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/scripts/project-ideation-idempotency-harness.mjs

@@ -0,0 +1,319 @@
+#!/usr/bin/env node
+/**
+ * Deterministic verification harness for project-ideation PRD dedupe.
+ *
+ * The harness runs a caller-supplied deterministic project-ideation command
+ * twice, checks that exactly one open GitHub PRD contains the expected marker,
+ * then optionally removes the automation memory file and verifies a third run
+ * recreates memory without creating a duplicate PRD. The recreated memory entry
+ * must include the advisory run fields project-ideation promises to write.
+ */
+
+import {
+  existsSync,
+  mkdirSync,
+  readFileSync,
+  renameSync,
+  rmSync,
+} from "node:fs";
+import { dirname, resolve } from "node:path";
+import { spawnSync } from "node:child_process";
+
+const args = parseArgs(process.argv.slice(2));
+
+if (args.help) {
+  printUsage();
+  process.exit(0);
+}
+
+const repo = requireValue(args.repo, "--repo");
+const marker = requireValue(args.marker, "--marker");
+const command = requireValue(args.command, "--command");
+const memoryFile = args.memoryFile ? resolve(args.memoryFile) : null;
+
+runCommand("first ideation run", command);
+const first = assertSingleOpenMarker(repo, marker, "after first run");
+
+runCommand("second ideation run", command);
+const second = assertSingleOpenMarker(repo, marker, "after second run");
+
+let missingMemory = null;
+if (memoryFile) {
+  missingMemory = runMissingMemoryVariant(repo, marker, command, memoryFile);
+}
+
+console.log(
+  JSON.stringify(
+    {
+      repo,
+      marker,
+      first,
+      second,
+      missingMemory,
+      verdict: "PASS",
+    },
+    null,
+    2
+  )
+);
+
+/**
+ * @param {string[]} argv
+ * @returns {Record<string, string | boolean>}
+ */
+function parseArgs(argv) {
+  const parsed = {};
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const token = argv[index];
+    if (token === "--help" || token === "-h") {
+      parsed.help = true;
+      continue;
+    }
+    if (!token.startsWith("--")) {
+      fail(`Unexpected positional argument: ${token}`);
+    }
+
+    const eqIndex = token.indexOf("=");
+    if (eqIndex !== -1) {
+      parsed[token.slice(2, eqIndex)] = token.slice(eqIndex + 1);
+      continue;
+    }
+
+    const key = token.slice(2);
+    const value = argv[index + 1];
+    if (!value || value.startsWith("--")) {
+      fail(`Missing value for --${key}`);
+    }
+    parsed[key] = value;
+    index += 1;
+  }
+
+  return parsed;
+}
+
+/**
+ * @param {Record<string, string | boolean>} input
+ * @param {string} key
+ * @returns {string}
+ */
+function requireValue(input, key) {
+  const normalized = key.replace(/^--/, "");
+  const value = input[normalized];
+  if (typeof value !== "string" || value.trim().length === 0) {
+    fail(`${key} is required`);
+  }
+  return value.trim();
+}
+
+/**
+ * @param {string} label
+ * @param {string} command
+ */
+function runCommand(label, command) {
+  const result = spawnSync(command, {
+    shell: true,
+    stdio: "inherit",
+    env: process.env,
+  });
+
+  if (result.status !== 0) {
+    fail(`${label} failed with exit code ${String(result.status)}`);
+  }
+}
+
+/**
+ * @param {string} repo
+ * @param {string} marker
+ * @param {string} phase
+ * @returns {{ readonly count: number, readonly issue: Record<string, any> }}
+ */
+function assertSingleOpenMarker(repo, marker, phase) {
+  const issues = queryOpenIssuesByMarker(repo, marker);
+  if (issues.length !== 1) {
+    fail(
+      `Expected exactly one open issue containing marker ${JSON.stringify(marker)} ${phase}, found ${issues.length}`
+    );
+  }
+
+  return {
+    count: issues.length,
+    issue: {
+      number: issues[0].number,
+      title: issues[0].title,
+      url: issues[0].url,
+      labels: normalizeLabels(issues[0].labels),
+    },
+  };
+}
+
+/**
+ * @param {string} repo
+ * @param {string} marker
+ * @returns {readonly Record<string, any>[]}
+ */
+function queryOpenIssuesByMarker(repo, marker) {
+  const search = runJson("gh", [
+    "issue",
+    "list",
+    "--repo",
+    repo,
+    "--state",
+    "open",
+    "--search",
+    `"${marker}" in:body`,
+    "--limit",
+    "100",
+    "--json",
+    "number,title,url,labels",
+  ]);
+
+  if (Array.isArray(search) && search.length > 0) {
+    return search;
+  }
+
+  const fallback = runJson("gh", [
+    "issue",
+    "list",
+    "--repo",
+    repo,
+    "--state",
+    "open",
+    "--limit",
+    "1000",
+    "--json",
+    "number,title,url,labels,body",
+  ]);
+
+  if (!Array.isArray(fallback)) {
+    return [];
+  }
+
+  return fallback.filter(issue => String(issue.body ?? "").includes(marker));
+}
+
+/**
+ * @param {string} repo
+ * @param {string} marker
+ * @param {string} command
+ * @param {string} memoryFile
+ * @returns {{ readonly count: number, readonly issue: Record<string, any>, readonly memoryRecreated: boolean, readonly memoryFieldsRecorded: boolean }}
+ */
+function runMissingMemoryVariant(repo, marker, command, memoryFile) {
+  const backup = `${memoryFile}.project-ideation-idempotency-backup`;
+  rmSync(backup, { force: true });
+
+  if (existsSync(memoryFile)) {
+    mkdirSync(dirname(backup), { recursive: true });
+    renameSync(memoryFile, backup);
+  }
+
+  try {
+    runCommand("missing-memory ideation run", command);
+    const result = assertSingleOpenMarker(
+      repo,
+      marker,
+      "after missing-memory run"
+    );
+    const memoryRecreated = existsSync(memoryFile);
+    const memoryFieldsRecorded =
+      memoryRecreated &&
+      memoryContainsRunEntry(memoryFile, {
+        marker,
+        prdUrl: String(result.issue.url),
+      });
+
+    if (!memoryRecreated) {
+      fail(`Expected missing-memory run to recreate ${memoryFile}`);
+    }
+    if (!memoryFieldsRecorded) {
+      fail(
+        `Expected recreated memory to record marker, PRD URL, outcome, lifecycle_role, and source_agreement`
+      );
+    }
+
+    return {
+      ...result,
+      memoryRecreated,
+      memoryFieldsRecorded,
+    };
+  } finally {
+    if (existsSync(backup)) {
+      rmSync(memoryFile, { force: true });
+      mkdirSync(dirname(memoryFile), { recursive: true });
+      renameSync(backup, memoryFile);
+    }
+  }
+}
+
+/**
+ * @param {string} memoryFile
+ * @param {{ readonly marker: string, readonly prdUrl: string }} expected
+ * @returns {boolean}
+ */
+function memoryContainsRunEntry(memoryFile, expected) {
+  const memory = readFileSync(memoryFile, "utf8");
+  const requiredFragments = [
+    expected.marker,
+    expected.prdUrl,
+    "outcome:",
+    "lifecycle_role:",
+    "source_agreement:",
+  ];
+
+  return requiredFragments.every(fragment => memory.includes(fragment));
+}
+
+/**
+ * @param {string} command
+ * @param {readonly string[]} argv
+ * @returns {any}
+ */
+function runJson(command, argv) {
+  const result = spawnSync(command, argv, {
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "pipe"],
+  });
+
+  if (result.status !== 0) {
+    fail(`${command} ${argv.join(" ")} failed:\n${result.stderr}`);
+  }
+
+  try {
+    return JSON.parse(result.stdout);
+  } catch (error) {
+    fail(`Could not parse JSON from ${command}: ${error.message}`);
+  }
+}
+
+/**
+ * @param {readonly any[] | undefined} labels
+ * @returns {readonly string[]}
+ */
+function normalizeLabels(labels) {
+  return (Array.isArray(labels) ? labels : [])
+    .map(label => (typeof label === "string" ? label : label?.name))
+    .filter(Boolean);
+}
+
+function printUsage() {
+  console.log(`Usage:
+  node plugins/lisa/scripts/project-ideation-idempotency-harness.mjs \\
+    --repo CodySwannGT/lisa \\
+    --marker "[lisa-project-ideation] idea=<stable-key>" \\
+    --command "codex exec '/lisa:project-ideation ./fixtures/project-ideation-idempotency prd_ready=true max_prds=1'" \\
+    --memory-file "$CODEX_HOME/automations/<automation_id>/memory.md"
+
+The command must be deterministic: it should select the same idea and marker on
+each run. When --memory-file is provided, the harness temporarily moves it aside
+for the missing-memory variant and restores the original file afterward.`);
+}
+
+/**
+ * @param {string} message
+ * @returns {never}
+ */
+function fail(message) {
+  console.error(message);
+  process.exit(1);
+}

package/plugins/lisa/skills/project-ideation/SKILL.md

@@ -25,6 +25,10 @@ cannot verify yourself is noise — demote it honestly.
   creates **one** PRD (the single top-ranked idea), because `lisa:research` is a heavy full flow.
   `max_prds=3` creates the top three; `max_prds=all` creates one per build-ready idea. Discovery
   Spikes and Rejected ideas are never turned into PRDs regardless of `max_prds`.
+- **`fixture=<path>`** (optional, verification-only) — a deterministic host-project fixture used
+  for idempotency verification. When present, read the fixture before ranking and honor its declared
+  single persona, single idea, existing-fit anchor, and expected dedupe marker. Do not use this
+  parameter for normal ideation runs.
 
 ## When to use
 
@@ -157,6 +161,26 @@ For each idea in the creation set, invoke `/lisa:research` with:
 `lisa:prd-source-write`. `project-ideation` never writes to the source directly — it delegates, so
 the PRD source stays switchable per project. Capture each returned PRD ref / URL / role / outcome.
 
+### Optional Codex automation memory
+
+When the run has a Codex automation id or memory path, maintain a concise local advisory ledger after
+the PRD source write returns. Resolve the memory path in this order:
+
+1. explicit `memory_file=<path>` or `automation_memory=<path>` argument, when supplied;
+2. `$CODEX_AUTOMATION_MEMORY`, when set;
+3. `$CODEX_HOME/automations/<automation_id>/memory.md`, when `automation_id=<id>` or
+   `$CODEX_AUTOMATION_ID` is available.
+
+Create the parent directory and `memory.md` if missing. Write one concise run entry keyed by the
+dedupe marker and run timestamp. The entry must include the marker, PRD URL/ref, outcome
+(`created | reused | updated | blocked`), lifecycle role (`draft | ready | blocked` or the returned
+source role), and `source_agreement` (`github-source-wins`, `memory-created`, `memory-updated`, or
+`memory-missing-runtime`). If memory says one thing but the PRD source search finds a matching open
+PRD, GitHub/source truth wins: reuse the source PRD and update memory rather than creating a
+duplicate. Keep memory advisory only; never use it to override lifecycle labels, source marker
+matches, or the PRD source writer's returned role. Do not store secrets, tokens, full PRD bodies, or
+private source excerpts in memory.
+
 ### Dedupe marker (stable, never title-based)
 
 Each created PRD carries the marker `[lisa-project-ideation] idea=<stable-key>`. Compute
@@ -232,3 +256,6 @@ Use the markdown examples in `examples/` as shape references for the idea report
   requirements.
 - `unavailable-data-rejection.md` — naming missing private/paid/unavailable sources when demoting.
 - `evidence-card-format.md` — the required evidence fields every Practical Idea card must carry.
+- `idempotency-verification-harness.md` — deterministic fixture and script procedure proving that
+  repeated `prd_ready=true` ideation keeps the open GitHub marker count at one, including the
+  missing-memory rerun variant.

package/plugins/lisa/skills/project-ideation/examples/idempotency-verification-harness.md

@@ -0,0 +1,57 @@
+# Project Ideation Idempotency Verification Harness
+
+Use this documented harness when validating that `project-ideation prd_ready=true` reuses an
+existing GitHub PRD by stable marker instead of creating duplicates.
+
+## Deterministic fixture
+
+Create an isolated fixture project with only one evidence-backed persona and one build-ready idea.
+The fixture should make the selected marker predictable:
+
+- Repo identity: `CodySwannGT/lisa`
+- Persona key: `queue-automation-operators`
+- Idea name: `Exploratory PRD run ledger`
+- Existing-fit anchor: `plugins/src/base/skills/project-ideation/SKILL.md`
+- Expected marker: `[lisa-project-ideation] idea=codyswanngt-lisa-exploratory-prd-run-ledger-queue-automation-operators-plugins-lisa-skills-project-ideation-skill-md`
+
+The fixture may be a tiny directory with:
+
+- `README.md` naming queue automation operators and their goals.
+- `.lisa.config.json` pointing `source` and `tracker` to GitHub.
+- `PROJECT_IDEATION_FIXTURE.md` listing the single persona, the single idea, and the expected
+  marker above.
+
+Invoke project ideation against that fixture with `prd_ready=true max_prds=1`. The fixture is valid
+only if the idea report selects the single expected idea and the PRD summary reports the expected
+marker.
+
+## Scripted verification
+
+Run the shipped harness after choosing the deterministic command for your runtime:
+
+```bash
+node plugins/lisa/scripts/project-ideation-idempotency-harness.mjs \
+  --repo CodySwannGT/lisa \
+  --marker "[lisa-project-ideation] idea=codyswanngt-lisa-exploratory-prd-run-ledger-queue-automation-operators-plugins-lisa-skills-project-ideation-skill-md" \
+  --command "codex exec '/lisa:project-ideation ./fixtures/project-ideation-idempotency prd_ready=true max_prds=1'" \
+  --memory-file "$CODEX_HOME/automations/<automation_id>/memory.md"
+```
+
+The harness performs the acceptance check in three phases:
+
+1. Run the deterministic ideation command once, then query open GitHub issues for the marker and
+   require exactly one match.
+2. Run the same command again, then require the open marker count to remain one.
+3. Move the automation memory file aside, run the command again, require the marker count to remain
+   one, and require the memory file to be recreated with marker, PRD URL, outcome, lifecycle role,
+   and source agreement fields. The original memory file is restored at the end.
+
+## Expected evidence
+
+Capture the harness JSON output as:
+
+- `[EVIDENCE: marker-count-one]` from the first and second marker-count checks.
+- `[EVIDENCE: memory-recreated-after-rerun]` from the missing-memory variant.
+
+The run passes only when all reported counts are `1`, the issue URL is the same across phases, and
+`memoryRecreated` and `memoryFieldsRecorded` are `true` when `--memory-file` is supplied.

package/plugins/lisa-cdk/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.107.2",
+  "version": "2.109.0",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.107.2",
+  "version": "2.109.0",
   "description": "AWS CDK-specific Lisa plugin.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.107.2",
+  "version": "2.109.0",
   "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-expo/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-expo",
-  "version": "2.107.2",
+  "version": "2.109.0",
   "description": "Expo and React Native-specific skills, agents, rules, and MCP servers.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.107.2",
+  "version": "2.109.0",
   "description": "Harper/Fabric-specific rules for TypeScript component apps",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-harper-fabric/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-harper-fabric",
-  "version": "2.107.2",
+  "version": "2.109.0",
   "description": "Harper/Fabric-specific Lisa rules for TypeScript component apps.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.107.2",
+  "version": "2.109.0",
   "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-nestjs/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-nestjs",
-  "version": "2.107.2",
+  "version": "2.109.0",
   "description": "NestJS-specific skills and migration write-protection hooks.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.107.2",
+  "version": "2.109.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-openclaw/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-openclaw",
-  "version": "2.107.2",
+  "version": "2.109.0",
   "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.107.2",
+  "version": "2.109.0",
   "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-rails/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-rails",
-  "version": "2.107.2",
+  "version": "2.109.0",
   "description": "Ruby on Rails-specific skills and hooks for RuboCop and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.107.2",
+  "version": "2.109.0",
   "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-typescript/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-typescript",
-  "version": "2.107.2",
+  "version": "2.109.0",
   "description": "TypeScript-specific hooks for formatting, linting, and ast-grep scanning on edit.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.107.2",
+  "version": "2.109.0",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "2.107.2",
+  "version": "2.109.0",
   "description": "Distributable LLM Wiki kernel — ingest, query, lint, and maintain a git-native markdown knowledge base across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/src/base/scripts/project-ideation-idempotency-harness.mjs

@@ -0,0 +1,319 @@
+#!/usr/bin/env node
+/**
+ * Deterministic verification harness for project-ideation PRD dedupe.
+ *
+ * The harness runs a caller-supplied deterministic project-ideation command
+ * twice, checks that exactly one open GitHub PRD contains the expected marker,
+ * then optionally removes the automation memory file and verifies a third run
+ * recreates memory without creating a duplicate PRD. The recreated memory entry
+ * must include the advisory run fields project-ideation promises to write.
+ */
+
+import {
+  existsSync,
+  mkdirSync,
+  readFileSync,
+  renameSync,
+  rmSync,
+} from "node:fs";
+import { dirname, resolve } from "node:path";
+import { spawnSync } from "node:child_process";
+
+const args = parseArgs(process.argv.slice(2));
+
+if (args.help) {
+  printUsage();
+  process.exit(0);
+}
+
+const repo = requireValue(args.repo, "--repo");
+const marker = requireValue(args.marker, "--marker");
+const command = requireValue(args.command, "--command");
+const memoryFile = args.memoryFile ? resolve(args.memoryFile) : null;
+
+runCommand("first ideation run", command);
+const first = assertSingleOpenMarker(repo, marker, "after first run");
+
+runCommand("second ideation run", command);
+const second = assertSingleOpenMarker(repo, marker, "after second run");
+
+let missingMemory = null;
+if (memoryFile) {
+  missingMemory = runMissingMemoryVariant(repo, marker, command, memoryFile);
+}
+
+console.log(
+  JSON.stringify(
+    {
+      repo,
+      marker,
+      first,
+      second,
+      missingMemory,
+      verdict: "PASS",
+    },
+    null,
+    2
+  )
+);
+
+/**
+ * @param {string[]} argv
+ * @returns {Record<string, string | boolean>}
+ */
+function parseArgs(argv) {
+  const parsed = {};
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const token = argv[index];
+    if (token === "--help" || token === "-h") {
+      parsed.help = true;
+      continue;
+    }
+    if (!token.startsWith("--")) {
+      fail(`Unexpected positional argument: ${token}`);
+    }
+
+    const eqIndex = token.indexOf("=");
+    if (eqIndex !== -1) {
+      parsed[token.slice(2, eqIndex)] = token.slice(eqIndex + 1);
+      continue;
+    }
+
+    const key = token.slice(2);
+    const value = argv[index + 1];
+    if (!value || value.startsWith("--")) {
+      fail(`Missing value for --${key}`);
+    }
+    parsed[key] = value;
+    index += 1;
+  }
+
+  return parsed;
+}
+
+/**
+ * @param {Record<string, string | boolean>} input
+ * @param {string} key
+ * @returns {string}
+ */
+function requireValue(input, key) {
+  const normalized = key.replace(/^--/, "");
+  const value = input[normalized];
+  if (typeof value !== "string" || value.trim().length === 0) {
+    fail(`${key} is required`);
+  }
+  return value.trim();
+}
+
+/**
+ * @param {string} label
+ * @param {string} command
+ */
+function runCommand(label, command) {
+  const result = spawnSync(command, {
+    shell: true,
+    stdio: "inherit",
+    env: process.env,
+  });
+
+  if (result.status !== 0) {
+    fail(`${label} failed with exit code ${String(result.status)}`);
+  }
+}
+
+/**
+ * @param {string} repo
+ * @param {string} marker
+ * @param {string} phase
+ * @returns {{ readonly count: number, readonly issue: Record<string, any> }}
+ */
+function assertSingleOpenMarker(repo, marker, phase) {
+  const issues = queryOpenIssuesByMarker(repo, marker);
+  if (issues.length !== 1) {
+    fail(
+      `Expected exactly one open issue containing marker ${JSON.stringify(marker)} ${phase}, found ${issues.length}`
+    );
+  }
+
+  return {
+    count: issues.length,
+    issue: {
+      number: issues[0].number,
+      title: issues[0].title,
+      url: issues[0].url,
+      labels: normalizeLabels(issues[0].labels),
+    },
+  };
+}
+
+/**
+ * @param {string} repo
+ * @param {string} marker
+ * @returns {readonly Record<string, any>[]}
+ */
+function queryOpenIssuesByMarker(repo, marker) {
+  const search = runJson("gh", [
+    "issue",
+    "list",
+    "--repo",
+    repo,
+    "--state",
+    "open",
+    "--search",
+    `"${marker}" in:body`,
+    "--limit",
+    "100",
+    "--json",
+    "number,title,url,labels",
+  ]);
+
+  if (Array.isArray(search) && search.length > 0) {
+    return search;
+  }
+
+  const fallback = runJson("gh", [
+    "issue",
+    "list",
+    "--repo",
+    repo,
+    "--state",
+    "open",
+    "--limit",
+    "1000",
+    "--json",
+    "number,title,url,labels,body",
+  ]);
+
+  if (!Array.isArray(fallback)) {
+    return [];
+  }
+
+  return fallback.filter(issue => String(issue.body ?? "").includes(marker));
+}
+
+/**
+ * @param {string} repo
+ * @param {string} marker
+ * @param {string} command
+ * @param {string} memoryFile
+ * @returns {{ readonly count: number, readonly issue: Record<string, any>, readonly memoryRecreated: boolean, readonly memoryFieldsRecorded: boolean }}
+ */
+function runMissingMemoryVariant(repo, marker, command, memoryFile) {
+  const backup = `${memoryFile}.project-ideation-idempotency-backup`;
+  rmSync(backup, { force: true });
+
+  if (existsSync(memoryFile)) {
+    mkdirSync(dirname(backup), { recursive: true });
+    renameSync(memoryFile, backup);
+  }
+
+  try {
+    runCommand("missing-memory ideation run", command);
+    const result = assertSingleOpenMarker(
+      repo,
+      marker,
+      "after missing-memory run"
+    );
+    const memoryRecreated = existsSync(memoryFile);
+    const memoryFieldsRecorded =
+      memoryRecreated &&
+      memoryContainsRunEntry(memoryFile, {
+        marker,
+        prdUrl: String(result.issue.url),
+      });
+
+    if (!memoryRecreated) {
+      fail(`Expected missing-memory run to recreate ${memoryFile}`);
+    }
+    if (!memoryFieldsRecorded) {
+      fail(
+        `Expected recreated memory to record marker, PRD URL, outcome, lifecycle_role, and source_agreement`
+      );
+    }
+
+    return {
+      ...result,
+      memoryRecreated,
+      memoryFieldsRecorded,
+    };
+  } finally {
+    if (existsSync(backup)) {
+      rmSync(memoryFile, { force: true });
+      mkdirSync(dirname(memoryFile), { recursive: true });
+      renameSync(backup, memoryFile);
+    }
+  }
+}
+
+/**
+ * @param {string} memoryFile
+ * @param {{ readonly marker: string, readonly prdUrl: string }} expected
+ * @returns {boolean}
+ */
+function memoryContainsRunEntry(memoryFile, expected) {
+  const memory = readFileSync(memoryFile, "utf8");
+  const requiredFragments = [
+    expected.marker,
+    expected.prdUrl,
+    "outcome:",
+    "lifecycle_role:",
+    "source_agreement:",
+  ];
+
+  return requiredFragments.every(fragment => memory.includes(fragment));
+}
+
+/**
+ * @param {string} command
+ * @param {readonly string[]} argv
+ * @returns {any}
+ */
+function runJson(command, argv) {
+  const result = spawnSync(command, argv, {
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "pipe"],
+  });
+
+  if (result.status !== 0) {
+    fail(`${command} ${argv.join(" ")} failed:\n${result.stderr}`);
+  }
+
+  try {
+    return JSON.parse(result.stdout);
+  } catch (error) {
+    fail(`Could not parse JSON from ${command}: ${error.message}`);
+  }
+}
+
+/**
+ * @param {readonly any[] | undefined} labels
+ * @returns {readonly string[]}
+ */
+function normalizeLabels(labels) {
+  return (Array.isArray(labels) ? labels : [])
+    .map(label => (typeof label === "string" ? label : label?.name))
+    .filter(Boolean);
+}
+
+function printUsage() {
+  console.log(`Usage:
+  node plugins/lisa/scripts/project-ideation-idempotency-harness.mjs \\
+    --repo CodySwannGT/lisa \\
+    --marker "[lisa-project-ideation] idea=<stable-key>" \\
+    --command "codex exec '/lisa:project-ideation ./fixtures/project-ideation-idempotency prd_ready=true max_prds=1'" \\
+    --memory-file "$CODEX_HOME/automations/<automation_id>/memory.md"
+
+The command must be deterministic: it should select the same idea and marker on
+each run. When --memory-file is provided, the harness temporarily moves it aside
+for the missing-memory variant and restores the original file afterward.`);
+}
+
+/**
+ * @param {string} message
+ * @returns {never}
+ */
+function fail(message) {
+  console.error(message);
+  process.exit(1);
+}

package/plugins/src/base/skills/project-ideation/SKILL.md

@@ -25,6 +25,10 @@ cannot verify yourself is noise — demote it honestly.
   creates **one** PRD (the single top-ranked idea), because `lisa:research` is a heavy full flow.
   `max_prds=3` creates the top three; `max_prds=all` creates one per build-ready idea. Discovery
   Spikes and Rejected ideas are never turned into PRDs regardless of `max_prds`.
+- **`fixture=<path>`** (optional, verification-only) — a deterministic host-project fixture used
+  for idempotency verification. When present, read the fixture before ranking and honor its declared
+  single persona, single idea, existing-fit anchor, and expected dedupe marker. Do not use this
+  parameter for normal ideation runs.
 
 ## When to use
 
@@ -157,6 +161,26 @@ For each idea in the creation set, invoke `/lisa:research` with:
 `lisa:prd-source-write`. `project-ideation` never writes to the source directly — it delegates, so
 the PRD source stays switchable per project. Capture each returned PRD ref / URL / role / outcome.
 
+### Optional Codex automation memory
+
+When the run has a Codex automation id or memory path, maintain a concise local advisory ledger after
+the PRD source write returns. Resolve the memory path in this order:
+
+1. explicit `memory_file=<path>` or `automation_memory=<path>` argument, when supplied;
+2. `$CODEX_AUTOMATION_MEMORY`, when set;
+3. `$CODEX_HOME/automations/<automation_id>/memory.md`, when `automation_id=<id>` or
+   `$CODEX_AUTOMATION_ID` is available.
+
+Create the parent directory and `memory.md` if missing. Write one concise run entry keyed by the
+dedupe marker and run timestamp. The entry must include the marker, PRD URL/ref, outcome
+(`created | reused | updated | blocked`), lifecycle role (`draft | ready | blocked` or the returned
+source role), and `source_agreement` (`github-source-wins`, `memory-created`, `memory-updated`, or
+`memory-missing-runtime`). If memory says one thing but the PRD source search finds a matching open
+PRD, GitHub/source truth wins: reuse the source PRD and update memory rather than creating a
+duplicate. Keep memory advisory only; never use it to override lifecycle labels, source marker
+matches, or the PRD source writer's returned role. Do not store secrets, tokens, full PRD bodies, or
+private source excerpts in memory.
+
 ### Dedupe marker (stable, never title-based)
 
 Each created PRD carries the marker `[lisa-project-ideation] idea=<stable-key>`. Compute
@@ -232,3 +256,6 @@ Use the markdown examples in `examples/` as shape references for the idea report
   requirements.
 - `unavailable-data-rejection.md` — naming missing private/paid/unavailable sources when demoting.
 - `evidence-card-format.md` — the required evidence fields every Practical Idea card must carry.
+- `idempotency-verification-harness.md` — deterministic fixture and script procedure proving that
+  repeated `prd_ready=true` ideation keeps the open GitHub marker count at one, including the
+  missing-memory rerun variant.

package/plugins/src/base/skills/project-ideation/examples/idempotency-verification-harness.md

@@ -0,0 +1,57 @@
+# Project Ideation Idempotency Verification Harness
+
+Use this documented harness when validating that `project-ideation prd_ready=true` reuses an
+existing GitHub PRD by stable marker instead of creating duplicates.
+
+## Deterministic fixture
+
+Create an isolated fixture project with only one evidence-backed persona and one build-ready idea.
+The fixture should make the selected marker predictable:
+
+- Repo identity: `CodySwannGT/lisa`
+- Persona key: `queue-automation-operators`
+- Idea name: `Exploratory PRD run ledger`
+- Existing-fit anchor: `plugins/src/base/skills/project-ideation/SKILL.md`
+- Expected marker: `[lisa-project-ideation] idea=codyswanngt-lisa-exploratory-prd-run-ledger-queue-automation-operators-plugins-lisa-skills-project-ideation-skill-md`
+
+The fixture may be a tiny directory with:
+
+- `README.md` naming queue automation operators and their goals.
+- `.lisa.config.json` pointing `source` and `tracker` to GitHub.
+- `PROJECT_IDEATION_FIXTURE.md` listing the single persona, the single idea, and the expected
+  marker above.
+
+Invoke project ideation against that fixture with `prd_ready=true max_prds=1`. The fixture is valid
+only if the idea report selects the single expected idea and the PRD summary reports the expected
+marker.
+
+## Scripted verification
+
+Run the shipped harness after choosing the deterministic command for your runtime:
+
+```bash
+node plugins/lisa/scripts/project-ideation-idempotency-harness.mjs \
+  --repo CodySwannGT/lisa \
+  --marker "[lisa-project-ideation] idea=codyswanngt-lisa-exploratory-prd-run-ledger-queue-automation-operators-plugins-lisa-skills-project-ideation-skill-md" \
+  --command "codex exec '/lisa:project-ideation ./fixtures/project-ideation-idempotency prd_ready=true max_prds=1'" \
+  --memory-file "$CODEX_HOME/automations/<automation_id>/memory.md"
+```
+
+The harness performs the acceptance check in three phases:
+
+1. Run the deterministic ideation command once, then query open GitHub issues for the marker and
+   require exactly one match.
+2. Run the same command again, then require the open marker count to remain one.
+3. Move the automation memory file aside, run the command again, require the marker count to remain
+   one, and require the memory file to be recreated with marker, PRD URL, outcome, lifecycle role,
+   and source agreement fields. The original memory file is restored at the end.
+
+## Expected evidence
+
+Capture the harness JSON output as:
+
+- `[EVIDENCE: marker-count-one]` from the first and second marker-count checks.
+- `[EVIDENCE: memory-recreated-after-rerun]` from the missing-memory variant.
+
+The run passes only when all reported counts are `1`, the issue URL is the same across phases, and
+`memoryRecreated` and `memoryFieldsRecorded` are `true` when `--memory-file` is supplied.