@codyswann/lisa 2.128.1 → 2.129.0

package/package.json

@@ -83,7 +83,7 @@
     "lodash": ">=4.18.1"
   },
   "name": "@codyswann/lisa",
-  "version": "2.128.1",
+  "version": "2.129.0",
   "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
   "main": "dist/index.js",
   "exports": {

package/plugins/lisa/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.128.1",
+  "version": "2.129.0",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.128.1",
+  "version": "2.129.0",
   "description": "Universal governance: agents, skills, commands, hooks, and rules for all projects.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/scripts/doctor-report.mjs

@@ -6,6 +6,11 @@
  * repo adds real readiness probes. Keep this file dependency-free so future
  * doctor scripts can reuse it from plugin distributions and downstream repos.
  */
+import { existsSync } from "node:fs";
+import path from "node:path";
+import process from "node:process";
+
+import { getPluginSyncResult } from "./plugin-sync-explain.mjs";
 
 export const DOCTOR_STATUSES = ["PASS", "WARN", "FAIL", "SKIP"];
 export const DOCTOR_VERDICTS = ["READY", "READY_WITH_WARNINGS", "NOT_READY"];
@@ -34,6 +39,90 @@ export const DOCTOR_VERDICTS = ["READY", "READY_WITH_WARNINGS", "NOT_READY"];
  * }} DoctorReportInput
  */
 
+/**
+ * @param {string} root
+ * @returns {DoctorGroup}
+ */
+export function createPluginSyncDoctorGroup(root = process.cwd()) {
+  const repoRoot = path.resolve(root);
+  if (
+    !existsSync(path.join(repoRoot, "plugins", "src")) &&
+    !existsSync(path.join(repoRoot, "plugins"))
+  ) {
+    return {
+      id: "plugin-sync",
+      title: "Plugin source/generated sync",
+      checks: [
+        {
+          id: "plugin-sync",
+          status: "SKIP",
+          summary: "plugin sync check is not applicable",
+          observed:
+            "No plugins/ or plugins/src/ directory was found in this repository.",
+        },
+      ],
+    };
+  }
+
+  try {
+    const result = getPluginSyncResult(repoRoot);
+    if (!result.readOnly) {
+      return {
+        id: "plugin-sync",
+        title: "Plugin source/generated sync",
+        checks: [
+          {
+            id: "plugin-sync",
+            status: "FAIL",
+            summary: "plugin sync readiness check mutated the working tree",
+            observed:
+              "Git status changed while collecting plugin sync evidence.",
+            remediation:
+              "Run `git status --short`, inspect the unexpected changes, and fix plugin-sync-explain before trusting doctor output.",
+          },
+        ],
+      };
+    }
+
+    return {
+      id: "plugin-sync",
+      title: "Plugin source/generated sync",
+      checks: [
+        {
+          id: "plugin-sync",
+          status: result.verdict,
+          summary:
+            result.verdict === "PASS"
+              ? "plugin source and generated artifacts are in sync"
+              : `plugin sync drift detected: ${result.driftClass}`,
+          observed: renderPluginSyncObserved(result),
+          remediation:
+            result.remediations.length > 0
+              ? result.remediations
+                  .map(item => `${item.path}: ${item.nextAction}`)
+                  .join(" ")
+              : undefined,
+        },
+      ],
+    };
+  } catch (error) {
+    return {
+      id: "plugin-sync",
+      title: "Plugin source/generated sync",
+      checks: [
+        {
+          id: "plugin-sync",
+          status: "FAIL",
+          summary: "plugin sync readiness check failed",
+          observed: error instanceof Error ? error.message : String(error),
+          remediation:
+            "Run `/lisa:plugin-sync-explain` or `bun run check:plugins` to inspect plugin sync health directly.",
+        },
+      ],
+    };
+  }
+}
+
 /**
  * @param {readonly DoctorGroup[]} groups
  * @returns {DoctorVerdict}
@@ -141,3 +230,17 @@ function normalizeCheck(check) {
     status: normalizedStatus,
   };
 }
+
+/**
+ * @param {import("./plugin-sync-explain.mjs").PluginSyncResult} result
+ * @returns {string}
+ */
+function renderPluginSyncObserved(result) {
+  if (result.verdict === "PASS") {
+    return "Drift class IN_SYNC; plugin sync evidence was collected read-only.";
+  }
+  const paths = result.affectedPaths.length
+    ? result.affectedPaths.join(", ")
+    : "none";
+  return `Drift class ${result.driftClass}; affected paths: ${paths}.`;
+}

package/plugins/lisa/scripts/plugin-sync-explain.mjs

@@ -50,6 +50,25 @@ const GIT_BIN = "/usr/bin/git";
  *   readonly readOnly: boolean
  *   readonly text: string
  * }} PluginSyncReport
+ *
+ * @typedef {{
+ *   readonly path: string
+ *   readonly counterpart?: string
+ *   readonly classification: string
+ *   readonly nextAction: string
+ * }} PluginSyncRemediation
+ *
+ * @typedef {{
+ *   readonly root: string
+ *   readonly verdict: "PASS" | "WARN"
+ *   readonly driftClass: string
+ *   readonly affectedPaths: readonly string[]
+ *   readonly remediations: readonly PluginSyncRemediation[]
+ *   readonly findings: readonly PluginSyncFinding[]
+ *   readonly statusBefore: string
+ *   readonly statusAfter: string
+ *   readonly readOnly: boolean
+ * }} PluginSyncResult
  */
 
 /**
@@ -57,6 +76,25 @@ const GIT_BIN = "/usr/bin/git";
  * @returns {PluginSyncReport}
  */
 export function explainPluginSync(root = process.cwd()) {
+  const result = getPluginSyncResult(root);
+
+  return {
+    root: result.root,
+    findings: result.findings,
+    statusBefore: result.statusBefore,
+    statusAfter: result.statusAfter,
+    readOnly: result.readOnly,
+    text: renderPluginSyncReport(result),
+  };
+}
+
+/**
+ * Return a structured, read-only plugin sync result for readiness surfaces such
+ * as doctor. CLI callers should still render this through renderPluginSyncReport.
+ * @param {string} root
+ * @returns {PluginSyncResult}
+ */
+export function getPluginSyncResult(root = process.cwd()) {
   const repoRoot = path.resolve(root);
   const statusBefore = gitStatus(repoRoot);
   const statusEntries = parseGitStatus(statusBefore);
@@ -71,20 +109,23 @@ export function explainPluginSync(root = process.cwd()) {
   ];
   const statusAfter = gitStatus(repoRoot);
   const readOnly = statusAfter === statusBefore;
+  const driftClass = highestClassification(findings);
 
   return {
     root: repoRoot,
+    verdict: findings.length === 0 ? "PASS" : "WARN",
+    driftClass,
+    affectedPaths: affectedPaths(findings),
+    remediations: findings.map(finding => ({
+      path: finding.path,
+      counterpart: finding.counterpart,
+      classification: finding.classification,
+      nextAction: finding.nextAction,
+    })),
     findings,
     statusBefore,
     statusAfter,
     readOnly,
-    text: renderPluginSyncReport({
-      root: repoRoot,
-      findings,
-      statusBefore,
-      statusAfter,
-      readOnly,
-    }),
   };
 }
 
@@ -142,6 +183,22 @@ function highestClassification(findings) {
   return "IN_SYNC";
 }
 
+/**
+ * @param {readonly PluginSyncFinding[]} findings
+ * @returns {string[]}
+ */
+function affectedPaths(findings) {
+  return [
+    ...new Set(
+      findings.flatMap(finding =>
+        [finding.path, finding.counterpart].filter(
+          pathValue => typeof pathValue === "string" && pathValue.length > 0
+        )
+      )
+    ),
+  ];
+}
+
 /**
  * @param {readonly { readonly code: string, readonly file: string }[]} entries
  * @param {ReadonlyMap<string, Buffer> | undefined} expectedGeneratedFiles

package/plugins/lisa-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.128.1",
+  "version": "2.129.0",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-agy/scripts/doctor-report.mjs

@@ -6,6 +6,11 @@
  * repo adds real readiness probes. Keep this file dependency-free so future
  * doctor scripts can reuse it from plugin distributions and downstream repos.
  */
+import { existsSync } from "node:fs";
+import path from "node:path";
+import process from "node:process";
+
+import { getPluginSyncResult } from "./plugin-sync-explain.mjs";
 
 export const DOCTOR_STATUSES = ["PASS", "WARN", "FAIL", "SKIP"];
 export const DOCTOR_VERDICTS = ["READY", "READY_WITH_WARNINGS", "NOT_READY"];
@@ -34,6 +39,90 @@ export const DOCTOR_VERDICTS = ["READY", "READY_WITH_WARNINGS", "NOT_READY"];
  * }} DoctorReportInput
  */
 
+/**
+ * @param {string} root
+ * @returns {DoctorGroup}
+ */
+export function createPluginSyncDoctorGroup(root = process.cwd()) {
+  const repoRoot = path.resolve(root);
+  if (
+    !existsSync(path.join(repoRoot, "plugins", "src")) &&
+    !existsSync(path.join(repoRoot, "plugins"))
+  ) {
+    return {
+      id: "plugin-sync",
+      title: "Plugin source/generated sync",
+      checks: [
+        {
+          id: "plugin-sync",
+          status: "SKIP",
+          summary: "plugin sync check is not applicable",
+          observed:
+            "No plugins/ or plugins/src/ directory was found in this repository.",
+        },
+      ],
+    };
+  }
+
+  try {
+    const result = getPluginSyncResult(repoRoot);
+    if (!result.readOnly) {
+      return {
+        id: "plugin-sync",
+        title: "Plugin source/generated sync",
+        checks: [
+          {
+            id: "plugin-sync",
+            status: "FAIL",
+            summary: "plugin sync readiness check mutated the working tree",
+            observed:
+              "Git status changed while collecting plugin sync evidence.",
+            remediation:
+              "Run `git status --short`, inspect the unexpected changes, and fix plugin-sync-explain before trusting doctor output.",
+          },
+        ],
+      };
+    }
+
+    return {
+      id: "plugin-sync",
+      title: "Plugin source/generated sync",
+      checks: [
+        {
+          id: "plugin-sync",
+          status: result.verdict,
+          summary:
+            result.verdict === "PASS"
+              ? "plugin source and generated artifacts are in sync"
+              : `plugin sync drift detected: ${result.driftClass}`,
+          observed: renderPluginSyncObserved(result),
+          remediation:
+            result.remediations.length > 0
+              ? result.remediations
+                  .map(item => `${item.path}: ${item.nextAction}`)
+                  .join(" ")
+              : undefined,
+        },
+      ],
+    };
+  } catch (error) {
+    return {
+      id: "plugin-sync",
+      title: "Plugin source/generated sync",
+      checks: [
+        {
+          id: "plugin-sync",
+          status: "FAIL",
+          summary: "plugin sync readiness check failed",
+          observed: error instanceof Error ? error.message : String(error),
+          remediation:
+            "Run `/lisa:plugin-sync-explain` or `bun run check:plugins` to inspect plugin sync health directly.",
+        },
+      ],
+    };
+  }
+}
+
 /**
  * @param {readonly DoctorGroup[]} groups
  * @returns {DoctorVerdict}
@@ -141,3 +230,17 @@ function normalizeCheck(check) {
     status: normalizedStatus,
   };
 }
+
+/**
+ * @param {import("./plugin-sync-explain.mjs").PluginSyncResult} result
+ * @returns {string}
+ */
+function renderPluginSyncObserved(result) {
+  if (result.verdict === "PASS") {
+    return "Drift class IN_SYNC; plugin sync evidence was collected read-only.";
+  }
+  const paths = result.affectedPaths.length
+    ? result.affectedPaths.join(", ")
+    : "none";
+  return `Drift class ${result.driftClass}; affected paths: ${paths}.`;
+}

package/plugins/lisa-agy/scripts/plugin-sync-explain.mjs

@@ -50,6 +50,25 @@ const GIT_BIN = "/usr/bin/git";
  *   readonly readOnly: boolean
  *   readonly text: string
  * }} PluginSyncReport
+ *
+ * @typedef {{
+ *   readonly path: string
+ *   readonly counterpart?: string
+ *   readonly classification: string
+ *   readonly nextAction: string
+ * }} PluginSyncRemediation
+ *
+ * @typedef {{
+ *   readonly root: string
+ *   readonly verdict: "PASS" | "WARN"
+ *   readonly driftClass: string
+ *   readonly affectedPaths: readonly string[]
+ *   readonly remediations: readonly PluginSyncRemediation[]
+ *   readonly findings: readonly PluginSyncFinding[]
+ *   readonly statusBefore: string
+ *   readonly statusAfter: string
+ *   readonly readOnly: boolean
+ * }} PluginSyncResult
  */
 
 /**
@@ -57,6 +76,25 @@ const GIT_BIN = "/usr/bin/git";
  * @returns {PluginSyncReport}
  */
 export function explainPluginSync(root = process.cwd()) {
+  const result = getPluginSyncResult(root);
+
+  return {
+    root: result.root,
+    findings: result.findings,
+    statusBefore: result.statusBefore,
+    statusAfter: result.statusAfter,
+    readOnly: result.readOnly,
+    text: renderPluginSyncReport(result),
+  };
+}
+
+/**
+ * Return a structured, read-only plugin sync result for readiness surfaces such
+ * as doctor. CLI callers should still render this through renderPluginSyncReport.
+ * @param {string} root
+ * @returns {PluginSyncResult}
+ */
+export function getPluginSyncResult(root = process.cwd()) {
   const repoRoot = path.resolve(root);
   const statusBefore = gitStatus(repoRoot);
   const statusEntries = parseGitStatus(statusBefore);
@@ -71,20 +109,23 @@ export function explainPluginSync(root = process.cwd()) {
   ];
   const statusAfter = gitStatus(repoRoot);
   const readOnly = statusAfter === statusBefore;
+  const driftClass = highestClassification(findings);
 
   return {
     root: repoRoot,
+    verdict: findings.length === 0 ? "PASS" : "WARN",
+    driftClass,
+    affectedPaths: affectedPaths(findings),
+    remediations: findings.map(finding => ({
+      path: finding.path,
+      counterpart: finding.counterpart,
+      classification: finding.classification,
+      nextAction: finding.nextAction,
+    })),
     findings,
     statusBefore,
     statusAfter,
     readOnly,
-    text: renderPluginSyncReport({
-      root: repoRoot,
-      findings,
-      statusBefore,
-      statusAfter,
-      readOnly,
-    }),
   };
 }
 
@@ -142,6 +183,22 @@ function highestClassification(findings) {
   return "IN_SYNC";
 }
 
+/**
+ * @param {readonly PluginSyncFinding[]} findings
+ * @returns {string[]}
+ */
+function affectedPaths(findings) {
+  return [
+    ...new Set(
+      findings.flatMap(finding =>
+        [finding.path, finding.counterpart].filter(
+          pathValue => typeof pathValue === "string" && pathValue.length > 0
+        )
+      )
+    ),
+  ];
+}
+
 /**
  * @param {readonly { readonly code: string, readonly file: string }[]} entries
  * @param {ReadonlyMap<string, Buffer> | undefined} expectedGeneratedFiles

package/plugins/lisa-cdk/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.128.1",
+  "version": "2.129.0",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.128.1",
+  "version": "2.129.0",
   "description": "AWS CDK-specific Lisa plugin.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.128.1",
+  "version": "2.129.0",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.128.1",
+  "version": "2.129.0",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.128.1",
+  "version": "2.129.0",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.128.1",
+  "version": "2.129.0",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/scripts/doctor-report.mjs

@@ -6,6 +6,11 @@
  * repo adds real readiness probes. Keep this file dependency-free so future
  * doctor scripts can reuse it from plugin distributions and downstream repos.
  */
+import { existsSync } from "node:fs";
+import path from "node:path";
+import process from "node:process";
+
+import { getPluginSyncResult } from "./plugin-sync-explain.mjs";
 
 export const DOCTOR_STATUSES = ["PASS", "WARN", "FAIL", "SKIP"];
 export const DOCTOR_VERDICTS = ["READY", "READY_WITH_WARNINGS", "NOT_READY"];
@@ -34,6 +39,90 @@ export const DOCTOR_VERDICTS = ["READY", "READY_WITH_WARNINGS", "NOT_READY"];
  * }} DoctorReportInput
  */
 
+/**
+ * @param {string} root
+ * @returns {DoctorGroup}
+ */
+export function createPluginSyncDoctorGroup(root = process.cwd()) {
+  const repoRoot = path.resolve(root);
+  if (
+    !existsSync(path.join(repoRoot, "plugins", "src")) &&
+    !existsSync(path.join(repoRoot, "plugins"))
+  ) {
+    return {
+      id: "plugin-sync",
+      title: "Plugin source/generated sync",
+      checks: [
+        {
+          id: "plugin-sync",
+          status: "SKIP",
+          summary: "plugin sync check is not applicable",
+          observed:
+            "No plugins/ or plugins/src/ directory was found in this repository.",
+        },
+      ],
+    };
+  }
+
+  try {
+    const result = getPluginSyncResult(repoRoot);
+    if (!result.readOnly) {
+      return {
+        id: "plugin-sync",
+        title: "Plugin source/generated sync",
+        checks: [
+          {
+            id: "plugin-sync",
+            status: "FAIL",
+            summary: "plugin sync readiness check mutated the working tree",
+            observed:
+              "Git status changed while collecting plugin sync evidence.",
+            remediation:
+              "Run `git status --short`, inspect the unexpected changes, and fix plugin-sync-explain before trusting doctor output.",
+          },
+        ],
+      };
+    }
+
+    return {
+      id: "plugin-sync",
+      title: "Plugin source/generated sync",
+      checks: [
+        {
+          id: "plugin-sync",
+          status: result.verdict,
+          summary:
+            result.verdict === "PASS"
+              ? "plugin source and generated artifacts are in sync"
+              : `plugin sync drift detected: ${result.driftClass}`,
+          observed: renderPluginSyncObserved(result),
+          remediation:
+            result.remediations.length > 0
+              ? result.remediations
+                  .map(item => `${item.path}: ${item.nextAction}`)
+                  .join(" ")
+              : undefined,
+        },
+      ],
+    };
+  } catch (error) {
+    return {
+      id: "plugin-sync",
+      title: "Plugin source/generated sync",
+      checks: [
+        {
+          id: "plugin-sync",
+          status: "FAIL",
+          summary: "plugin sync readiness check failed",
+          observed: error instanceof Error ? error.message : String(error),
+          remediation:
+            "Run `/lisa:plugin-sync-explain` or `bun run check:plugins` to inspect plugin sync health directly.",
+        },
+      ],
+    };
+  }
+}
+
 /**
  * @param {readonly DoctorGroup[]} groups
  * @returns {DoctorVerdict}
@@ -141,3 +230,17 @@ function normalizeCheck(check) {
     status: normalizedStatus,
   };
 }
+
+/**
+ * @param {import("./plugin-sync-explain.mjs").PluginSyncResult} result
+ * @returns {string}
+ */
+function renderPluginSyncObserved(result) {
+  if (result.verdict === "PASS") {
+    return "Drift class IN_SYNC; plugin sync evidence was collected read-only.";
+  }
+  const paths = result.affectedPaths.length
+    ? result.affectedPaths.join(", ")
+    : "none";
+  return `Drift class ${result.driftClass}; affected paths: ${paths}.`;
+}