@codyswann/lisa 2.227.0 → 2.229.0

package/dist/cli/ui-status.js

@@ -0,0 +1,221 @@
+/**
+ * Live-status probe contract and bounded execution for `lisa ui`.
+ * @module cli/ui-status
+ */
+import { execFile } from "node:child_process";
+import { normalizeProbeResult } from "./ui-status-json.js";
+/** Error used internally to distinguish a bounded probe timeout. */
+class ProbeTimeoutError extends Error {
+    /**
+     * Create a probe timeout error.
+     * @param timeoutMs - Configured timeout in milliseconds
+     */
+    constructor(timeoutMs) {
+        super(`Probe timed out after ${timeoutMs}ms`);
+        this.name = "ProbeTimeoutError";
+    }
+}
+/**
+ * Convert arbitrary thrown data into a stable failure classification.
+ * @param error - Value thrown by a probe
+ * @returns Timeout classification and non-empty human-readable message
+ */
+function classifyProbeError(error) {
+    try {
+        const timedOut = error instanceof ProbeTimeoutError;
+        const rawMessage = error instanceof Error ? error.message : String(error);
+        return {
+            timedOut,
+            message: rawMessage.trim().length > 0
+                ? rawMessage
+                : "Probe failed without an error message",
+        };
+    }
+    catch {
+        return {
+            timedOut: false,
+            message: "Probe failed with an unreadable error",
+        };
+    }
+}
+/**
+ * Run one probe without allowing it to block siblings or fabricate data.
+ * @param probe - Probe to execute
+ * @returns Explicit result, or unknown for invalid input, failure, or timeout
+ */
+export async function runProbe(probe) {
+    if (!Number.isFinite(probe.timeoutMs) || probe.timeoutMs < 0) {
+        return {
+            state: "unknown",
+            reason: "invalid-timeout",
+            message: `Probe timeout must be a finite non-negative number; received ${String(probe.timeoutMs)}`,
+        };
+    }
+    const controller = new AbortController();
+    const timeout = new Promise((_resolve, reject) => {
+        controller.signal.addEventListener("abort", () => reject(controller.signal.reason), { once: true });
+    });
+    const timer = setTimeout(() => controller.abort(new ProbeTimeoutError(probe.timeoutMs)), probe.timeoutMs);
+    try {
+        const result = await Promise.race([probe.run(controller.signal), timeout]);
+        return normalizeProbeResult(result);
+    }
+    catch (error) {
+        const { timedOut, message } = classifyProbeError(error);
+        return {
+            state: "unknown",
+            reason: timedOut ? "timeout" : "probe-failed",
+            message,
+        };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/**
+ * Execute `gh auth status` without invoking a shell.
+ * @param cwd - Project root used as the command working directory
+ * @param timeoutMs - Child-process timeout in milliseconds
+ * @param signal - Cancellation signal controlled by the probe runner
+ * @param hostname - Project origin hostname whose active account is checked
+ * @returns Authentication state when the command runs
+ */
+const runGithubAuthStatus = async (cwd, timeoutMs, signal, hostname) => await new Promise((resolve, reject) => {
+    const ghExecutable = "gh";
+    execFile(
+    // eslint-disable-next-line sonarjs/no-os-command-from-path -- fixed user-installed gh executable
+    ghExecutable, ["auth", "status", "--active", "--hostname", hostname, "--json", "hosts"], { cwd, signal, timeout: timeoutMs, encoding: "utf8" }, (error, stdout) => {
+        if (error !== null) {
+            reject(error);
+            return;
+        }
+        try {
+            const parsed = JSON.parse(stdout);
+            if (typeof parsed !== "object" || parsed === null) {
+                throw new TypeError("GitHub auth status did not return an object");
+            }
+            const hosts = Reflect.get(parsed, "hosts");
+            if (typeof hosts !== "object" || hosts === null) {
+                throw new TypeError("GitHub auth status omitted its hosts map");
+            }
+            const accounts = Reflect.get(hosts, hostname);
+            const authenticated = Array.isArray(accounts) &&
+                accounts.some(account => typeof account === "object" &&
+                    account !== null &&
+                    Reflect.get(account, "active") === true &&
+                    Reflect.get(account, "state") === "success");
+            resolve(authenticated ? "authenticated" : "not-authenticated");
+        }
+        catch (parseError) {
+            reject(parseError);
+        }
+    });
+});
+/**
+ * Read the effective origin URL through git without invoking a shell.
+ * @param cwd - Project root
+ * @param timeoutMs - Child-process timeout
+ * @param signal - Probe cancellation signal
+ * @returns Origin remote URL
+ */
+async function readOriginRemote(cwd, timeoutMs, signal) {
+    return await new Promise((resolve, reject) => {
+        const gitExecutable = "git";
+        execFile(
+        // eslint-disable-next-line sonarjs/no-os-command-from-path -- fixed user-installed git executable
+        gitExecutable, ["-C", cwd, "remote", "get-url", "origin"], { cwd, signal, timeout: timeoutMs, encoding: "utf8" }, (error, stdout) => {
+            if (error !== null) {
+                reject(error);
+                return;
+            }
+            const remote = stdout.trim();
+            if (remote.length === 0) {
+                reject(new Error("Project origin remote is empty"));
+                return;
+            }
+            resolve(remote);
+        });
+    });
+}
+/**
+ * Extract a hostname from URL-form and scp-form git remotes.
+ * @param remote - Git remote URL
+ * @returns Hostname used by `gh auth status`
+ */
+function remoteHostname(remote) {
+    const normalize = (hostname) => {
+        const normalized = hostname.toLowerCase();
+        return normalized.endsWith(".") ? normalized.slice(0, -1) : normalized;
+    };
+    if (!remote.includes("://")) {
+        const separator = remote.indexOf(":");
+        const authority = separator > 0 ? remote.slice(0, separator) : "";
+        const host = authority.slice(authority.lastIndexOf("@") + 1);
+        const looksLikeWindowsPath = authority.length === 1 && /[A-Za-z]/u.test(authority);
+        if (host.length > 0 &&
+            !looksLikeWindowsPath &&
+            !Array.from(host).some(character => /\s/u.test(character))) {
+            return normalize(host);
+        }
+    }
+    try {
+        const hostname = new URL(remote).hostname;
+        if (hostname.length > 0) {
+            return normalize(hostname);
+        }
+    }
+    catch {
+        // Fall through to the explicit error below.
+    }
+    throw new Error(`Unable to determine GitHub hostname from origin: ${remote}`);
+}
+/**
+ * Create the reference GitHub authentication probe.
+ * @param cwd - Project root used as the command working directory
+ * @param check - Injectable command check used by focused tests
+ * @param readRemote - Injectable effective-origin reader used by focused tests
+ * @returns Reference probe for the live-status transport
+ */
+export function createGithubAuthProbe(cwd, check = runGithubAuthStatus, readRemote = readOriginRemote) {
+    const timeoutMs = 5_000;
+    return {
+        id: "github-auth",
+        timeoutMs,
+        run: async (signal) => {
+            const remote = await readRemote(cwd, timeoutMs + 250, signal);
+            const hostname = remoteHostname(remote);
+            const state = await check(cwd, timeoutMs + 250, signal, hostname);
+            return state === "authenticated"
+                ? { state: "value", value: true }
+                : {
+                    state: "unknown",
+                    reason: "not-authenticated",
+                    message: "GitHub CLI is not authenticated",
+                };
+        },
+    };
+}
+/**
+ * Validate probe keys before binding a server so status snapshots cannot lose data.
+ * @param probes - Registered status probes
+ */
+export function validateStatusProbes(probes) {
+    for (const [index, probe] of probes.entries()) {
+        if (probe.id.trim().length === 0) {
+            throw new Error("Probe id must contain a non-whitespace character");
+        }
+        if (probes.slice(0, index).some(candidate => candidate.id === probe.id)) {
+            throw new Error(`Duplicate probe id: ${probe.id}`);
+        }
+    }
+}
+/**
+ * Execute all probes concurrently, with failures isolated per probe.
+ * @param probes - Probes to execute
+ * @returns Results keyed by stable probe identifier
+ */
+export async function readStatusSnapshot(probes) {
+    const entries = await Promise.all(probes.map(async (probe) => [probe.id, await runProbe(probe)]));
+    return Object.fromEntries(entries);
+}
+//# sourceMappingURL=ui-status.js.map

package/dist/cli/ui-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-status.js","sourceRoot":"","sources":["../../src/cli/ui-status.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EAAE,oBAAoB,EAAoB,MAAM,qBAAqB,CAAC;AA4B7E,oEAAoE;AACpE,MAAM,iBAAkB,SAAQ,KAAK;IACnC;;;OAGG;IACH,YAAY,SAAiB;QAC3B,KAAK,CAAC,yBAAyB,SAAS,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,KAAc;IAIxC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,KAAK,YAAY,iBAAiB,CAAC;QACpD,MAAM,UAAU,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1E,OAAO;YACL,QAAQ;YACR,OAAO,EACL,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;gBAC1B,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,uCAAuC;SAC9C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,uCAAuC;SACjD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAqB;IAErB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;QAC7D,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,gEAAgE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;SACnG,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACtD,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAChC,OAAO,EACP,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EACtC,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAC9D,KAAK,CAAC,SAAS,CAChB,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3E,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACxD,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc;YAC7C,OAAO;SACR,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,mBAAmB,GAAoB,KAAK,EAChD,GAAG,EACH,SAAS,EACT,MAAM,EACN,QAAQ,EACR,EAAE,CACF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IACpC,MAAM,YAAY,GAAG,IAAI,CAAC;IAC1B,QAAQ;IACN,iGAAiG;IACjG,YAAY,EACZ,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,EACzE,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EACrD,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QAChB,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,CAAC,KAAK,CAAC,CAAC;YACd,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY,CAAC;YAC7C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAClD,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAY,CAAC;YACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAChD,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;YAClE,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAY,CAAC;YACzD,MAAM,aAAa,GACjB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACvB,QAAQ,CAAC,IAAI,CACX,OAAO,CAAC,EAAE,CACR,OAAO,OAAO,KAAK,QAAQ;oBAC3B,OAAO,KAAK,IAAI;oBAChB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,IAAI;oBACvC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,SAAS,CAC9C,CAAC;YACJ,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,MAAM,CAAC,UAAU,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAAW,EACX,SAAiB,EACjB,MAAmB;IAEnB,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,aAAa,GAAG,KAAK,CAAC;QAC5B,QAAQ;QACN,kGAAkG;QAClG,aAAa,EACb,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAC1C,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EACrD,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAChB,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAU,EAAE;QAC7C,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC1C,OAAO,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACzE,CAAC,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,MAAM,oBAAoB,GACxB,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxD,IACE,IAAI,CAAC,MAAM,GAAG,CAAC;YACf,CAAC,oBAAoB;YACrB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAC1D,CAAC;YACD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;QAC1C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,MAAM,EAAE,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAW,EACX,QAAyB,mBAAmB,EAC5C,aAA8B,gBAAgB;IAE9C,MAAM,SAAS,GAAG,KAAK,CAAC;IACxB,OAAO;QACL,EAAE,EAAE,aAAa;QACjB,SAAS;QACT,GAAG,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE;YAClB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,SAAS,GAAG,GAAG,EAAE,MAAM,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,SAAS,GAAG,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAClE,OAAO,KAAK,KAAK,eAAe;gBAC9B,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE;gBACjC,CAAC,CAAC;oBACE,KAAK,EAAE,SAAS;oBAChB,MAAM,EAAE,mBAAmB;oBAC3B,OAAO,EAAE,iCAAiC;iBAC3C,CAAC;QACR,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA8B;IACjE,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAA8B;IAE9B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAU,CAAC,CACtE,CAAC;IACF,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC"}

package/dist/core/lisa.d.ts

@@ -226,11 +226,76 @@ export declare class Lisa {
      */
     private registerPlugins;
     /**
-     * Install each plugin and refresh the Lisa marketplace cache
+     * Install each plugin and refresh the Lisa marketplace cache.
+     *
+     * Version-gated (perf): `claude plugin marketplace update` is a network git
+     * pull of the Lisa repo and every `claude plugin install` spawns the Claude
+     * CLI (seconds each); re-running all of it on every apply made a single
+     * `bun add` cost minutes across the repeated apply passes. A full sync
+     * (marketplace refresh + install every plugin) still runs whenever the
+     * installed Lisa version differs from the `.claude/.lisa-plugins-synced`
+     * marker; between version changes only plugins missing for this project are
+     * installed, so the self-heal property (a removed plugin comes back on the
+     * next install) survives at the cost of one `claude plugin list` call.
      * @param execAsync - Promisified exec function for running shell commands
      * @param plugins - Plugin identifiers from enabledPlugins (e.g. "lisa@lisa")
      */
     private installPluginsAndUpdateMarketplace;
+    /**
+     * Decide whether this apply needs a full plugin sync and which plugins to
+     * install.
+     * @param execAsync - Promisified exec function for running shell commands
+     * @param plugins - Plugin identifiers from enabledPlugins
+     * @returns Sync plan: fullSync (version changed), plugins to install, and
+     *   the current Lisa version
+     */
+    private computePluginSyncPlan;
+    /**
+     * Refresh the cached Lisa marketplace via the Claude CLI.
+     * @param execAsync - Promisified exec function for running shell commands
+     * @param announce - Whether to log the outcome (silent for the pre-install
+     *   best-effort refresh)
+     * @returns Promise that resolves when the refresh attempt completes
+     */
+    private updateLisaMarketplace;
+    /**
+     * Install a single plugin at project scope via the Claude CLI.
+     * @param execAsync - Promisified exec function for running shell commands
+     * @param plugin - Plugin identifier (already validated)
+     * @returns Promise that resolves when the install attempt completes
+     */
+    private installPlugin;
+    /**
+     * Exec options shared by all Claude CLI plugin commands.
+     * @returns Options object with the project cwd and POSIX shell
+     */
+    private pluginExecOptions;
+    /**
+     * Absolute path of the plugin sync marker recording the last fully-synced
+     * Lisa version for this project. Shared with install-claude-plugins.sh.
+     * @returns Marker path under the project's .claude directory
+     */
+    private pluginSyncMarkerPath;
+    /**
+     * Absolute path of the host project's package.json.
+     * @returns package.json path under the destination directory
+     */
+    private hostPackageJsonPath;
+    /**
+     * Read the plugin ids already installed for this project via
+     * `claude plugin list --json`.
+     * @param execAsync - Promisified exec function for running shell commands
+     * @returns Set of installed plugin ids, or null when the list cannot be
+     *   obtained (older CLI, parse failure) so callers fall back to installing
+     *   everything — the pre-existing behavior
+     */
+    private readInstalledPluginIds;
+    /**
+     * Record the Lisa version whose plugin set was last fully synced.
+     * @param version - Lisa package version to record
+     * @returns Promise that resolves when the marker is written (best-effort)
+     */
+    private writePluginSyncMarker;
     /**
      * Finalize operation
      * @returns Promise that resolves when finalization is complete
@@ -387,6 +452,14 @@ export declare class Lisa {
      * The trampoline is always fully detached so the package manager can exit
      * normally; the child then detects the exit and re-runs Lisa. See
      * utils/postinstall-trampoline.ts for details.
+     *
+     * Skipped when this apply did not mutate package.json: the trampoline exists
+     * solely to redo package.json changes that the parent package manager's
+     * end-of-command rewrite clobbers (#383). With no mutation there is nothing
+     * to clobber — the rewrite restores identical content — and scheduling a
+     * detached re-apply (plus its lockfile regen) is pure waste. File-based
+     * template writes are not clobbered and need no reconciliation.
+     * @param prePackageJsonHash - Hash of package.json captured before apply mutated anything (null if the file did not exist)
      * @returns Promise that resolves immediately after the detached child is spawned
      */
     private schedulePostinstallReconciliation;

package/dist/core/lisa.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lisa.d.ts","sourceRoot":"","sources":["../../src/core/lisa.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAyBnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAOzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,iBAAiB,EAGlB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAwB,MAAM,wBAAwB,CAAC;AAChF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAc9D,OAAO,KAAK,EAIV,UAAU,EACV,UAAU,EAGX,MAAM,aAAa,CAAC;AAWrB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAkBpD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,cAAc,CAAC;IACvC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;CAC/C;AAED;;GAEG;AACH,qBAAa,IAAI;IA4Eb,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IA5EvB,OAAO,CAAC,QAAQ,CAA8C;IAC9D,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,cAAc,CAGpB;IACF;;;;;;OAMG;IACH,OAAO,CAAC,gBAAgB,CAA0B;IAClD;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,mBAAmB,CAAkC;IAC7D;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,OAAO,CAAC,sBAAsB,CAAkC;IAChE,2EAA2E;IAC3E,OAAO,CAAC,oBAAoB,CAAmC;IAC/D,4EAA4E;IAC5E,OAAO,CAAC,kCAAkC,CAAS;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8C;IACxE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmB;IAEpD;;;;OAIG;IACH,OAAO,CAAC,SAAS,CAAS;IAE1B;;;;OAIG;gBAEgB,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,gBAAgB;IAGzC;;;;;;;;OAQG;IACH,OAAO,CAAC,oCAAoC;IAI5C;;OAEG;YACW,YAAY;IAQ1B;;OAEG;YACW,WAAW;IAUzB;;;;;;OAMG;YACW,eAAe;IAa7B;;OAEG;YACW,qBAAqB;IAyBnC;;;;;;;;;;;;;;;OAeG;YACW,oBAAoB;IAWlC;;;;OAIG;YACW,wBAAwB;IAYtC;;;;;;;;;;;;;;;;;;;;;;OAsBG;YACW,uBAAuB;IAsCrC;;;;;;;;;;;OAWG;YACW,0BAA0B;IAqBxC;;;;;;;OAOG;YACW,2BAA2B;IAyBzC;;OAEG;YACW,gBAAgB;IAoB9B;;;OAGG;YACW,oBAAoB;IA2BlC;;;OAGG;YACW,qBAAqB;IAoDnC;;;OAGG;YACW,6BAA6B;IAc3C;;OAEG;YACW,iBAAiB;IAgB/B;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAW/B;;OAEG;YACW,eAAe;IA+C7B;;;;OAIG;YACW,kCAAkC;IAgDhD;;;OAGG;YACW,QAAQ;IAQtB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAWxB;;;;OAIG;YACW,gBAAgB;IAqB9B;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC;IA6ClC;;;;;;;;;;;;;;;;;;;OAmBG;YACW,2BAA2B;IAqBzC;;;;;;;;;OASG;YACW,gBAAgB;IAoC9B;;;;;;;;OAQG;YACW,iBAAiB;IA0B/B;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;YACW,cAAc;IA+E5B;;;;;;;OAOG;IACH,OAAO,CAAC,qBAAqB;IAM7B;;;;;;;;;OASG;YACW,kBAAkB;IAoDhC;;;;;;;;;;;;;;OAcG;YACW,mBAAmB;IAsGjC;;;;;;;;;;;;;;;;OAgBG;YACW,gCAAgC;IAiB9C;;;;;;;;;;;OAWG;YACW,iCAAiC;IAmB/C;;;OAGG;IACG,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC;IAKrC;;;OAGG;YACW,kBAAkB;IAuBhC;;;;;;;OAOG;YACW,gBAAgB;IAuD9B;;;;;;;OAOG;IACH,OAAO,CAAC,0BAA0B;IAelC;;;;;OAKG;IACH,OAAO,CAAC,sBAAsB;IAO9B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,iBAAiB;IA4CzB;;;;;OAKG;IACH,OAAO,CAAC,0BAA0B;IAyBlC;;;;;;;OAOG;IACH,OAAO,CAAC,kBAAkB;IAK1B;;;;;;OAMG;IACH,OAAO,CAAC,OAAO;IAaf;;;;;;OAMG;YACW,qBAAqB;IAyBnC;;;;OAIG;YACW,QAAQ;IAatB;;;OAGG;IACH,OAAO,CAAC,cAAc;IAqBtB;;;;OAIG;IACH,OAAO,CAAC,UAAU;IAKlB;;;OAGG;IACH,OAAO,CAAC,SAAS;IAqCjB;;OAEG;YACW,mBAAmB;IAajC;;OAEG;YACW,gBAAgB;IA+B9B;;OAEG;IACH,OAAO,CAAC,WAAW;IA4BnB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAgB1B;;;;;;OAMG;IACH,OAAO,CAAC,aAAa;IAYrB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAmB1B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA6BxB;;OAEG;IACH,OAAO,CAAC,eAAe;IA6BvB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAezB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAazB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAgB7B;;OAEG;IACH,OAAO,CAAC,YAAY;IAOpB;;;;;OAKG;YACW,WAAW;IAQzB;;;;;OAKG;YACW,qBAAqB;CAqDpC"}
+{"version":3,"file":"lisa.d.ts","sourceRoot":"","sources":["../../src/core/lisa.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AA0BnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAOzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,iBAAiB,EAGlB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAwB,MAAM,wBAAwB,CAAC;AAChF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAc9D,OAAO,KAAK,EAIV,UAAU,EACV,UAAU,EAGX,MAAM,aAAa,CAAC;AAWrB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAkBpD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,cAAc,CAAC;IACvC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;CAC/C;AAUD;;GAEG;AACH,qBAAa,IAAI;IA4Eb,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IA5EvB,OAAO,CAAC,QAAQ,CAA8C;IAC9D,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,cAAc,CAGpB;IACF;;;;;;OAMG;IACH,OAAO,CAAC,gBAAgB,CAA0B;IAClD;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,mBAAmB,CAAkC;IAC7D;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,OAAO,CAAC,sBAAsB,CAAkC;IAChE,2EAA2E;IAC3E,OAAO,CAAC,oBAAoB,CAAmC;IAC/D,4EAA4E;IAC5E,OAAO,CAAC,kCAAkC,CAAS;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8C;IACxE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmB;IAEpD;;;;OAIG;IACH,OAAO,CAAC,SAAS,CAAS;IAE1B;;;;OAIG;gBAEgB,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,gBAAgB;IAGzC;;;;;;;;OAQG;IACH,OAAO,CAAC,oCAAoC;IAI5C;;OAEG;YACW,YAAY;IAQ1B;;OAEG;YACW,WAAW;IAUzB;;;;;;OAMG;YACW,eAAe;IAa7B;;OAEG;YACW,qBAAqB;IAyBnC;;;;;;;;;;;;;;;OAeG;YACW,oBAAoB;IAWlC;;;;OAIG;YACW,wBAAwB;IAYtC;;;;;;;;;;;;;;;;;;;;;;OAsBG;YACW,uBAAuB;IAsCrC;;;;;;;;;;;OAWG;YACW,0BAA0B;IAqBxC;;;;;;;OAOG;YACW,2BAA2B;IAyBzC;;OAEG;YACW,gBAAgB;IAoB9B;;;OAGG;YACW,oBAAoB;IA2BlC;;;OAGG;YACW,qBAAqB;IAoDnC;;;OAGG;YACW,6BAA6B;IAc3C;;OAEG;YACW,iBAAiB;IAgB/B;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAW/B;;OAEG;YACW,eAAe;IA+C7B;;;;;;;;;;;;;;OAcG;YACW,kCAAkC;IA4ChD;;;;;;;OAOG;YACW,qBAAqB;IAuBnC;;;;;;OAMG;YACW,qBAAqB;IAoBnC;;;;;OAKG;YACW,aAAa;IAgB3B;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAIzB;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAI5B;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAI3B;;;;;;;OAOG;YACW,sBAAsB;IA0BpC;;;;OAIG;YACW,qBAAqB;IAUnC;;;OAGG;YACW,QAAQ;IAQtB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAWxB;;;;OAIG;YACW,gBAAgB;IAqB9B;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC;IA+ClC;;;;;;;;;;;;;;;;;;;OAmBG;YACW,2BAA2B;IAqBzC;;;;;;;;;OASG;YACW,gBAAgB;IAoC9B;;;;;;;;OAQG;YACW,iBAAiB;IA0B/B;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;YACW,cAAc;IA+E5B;;;;;;;OAOG;IACH,OAAO,CAAC,qBAAqB;IAM7B;;;;;;;;;OASG;YACW,kBAAkB;IAoDhC;;;;;;;;;;;;;;OAcG;YACW,mBAAmB;IAsGjC;;;;;;;;;;;;;;;;OAgBG;YACW,gCAAgC;IAiB9C;;;;;;;;;;;;;;;;;;;OAmBG;YACW,iCAAiC;IA8B/C;;;OAGG;IACG,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC;IAKrC;;;OAGG;YACW,kBAAkB;IAuBhC;;;;;;;OAOG;YACW,gBAAgB;IAuD9B;;;;;;;OAOG;IACH,OAAO,CAAC,0BAA0B;IAelC;;;;;OAKG;IACH,OAAO,CAAC,sBAAsB;IAO9B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,iBAAiB;IA4CzB;;;;;OAKG;IACH,OAAO,CAAC,0BAA0B;IAyBlC;;;;;;;OAOG;IACH,OAAO,CAAC,kBAAkB;IAK1B;;;;;;OAMG;IACH,OAAO,CAAC,OAAO;IAaf;;;;;;OAMG;YACW,qBAAqB;IAyBnC;;;;OAIG;YACW,QAAQ;IAatB;;;OAGG;IACH,OAAO,CAAC,cAAc;IAqBtB;;;;OAIG;IACH,OAAO,CAAC,UAAU;IAKlB;;;OAGG;IACH,OAAO,CAAC,SAAS;IAqCjB;;OAEG;YACW,mBAAmB;IAajC;;OAEG;YACW,gBAAgB;IA+B9B;;OAEG;IACH,OAAO,CAAC,WAAW;IA4BnB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAgB1B;;;;;;OAMG;IACH,OAAO,CAAC,aAAa;IAYrB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAmB1B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA6BxB;;OAEG;IACH,OAAO,CAAC,eAAe;IA6BvB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAezB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAazB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAgB7B;;OAEG;IACH,OAAO,CAAC,YAAY;IAOpB;;;;;OAKG;YACW,WAAW;IAQzB;;;;;OAKG;YACW,qBAAqB;CAqDpC"}

package/dist/core/lisa.js

@@ -4,6 +4,7 @@ import { existsSync } from "node:fs";
 import { readFile, stat } from "node:fs/promises";
 import * as path from "node:path";
 import pc from "picocolors";
+import { getPackageVersion } from "../cli/version.js";
 import { installAgentsMd } from "../codex/agents-md-installer.js";
 import { installCodexProjectOverlay } from "../codex/project-overlay.js";
 import { installAgyPlugin } from "../agy/plugin-installer.js";
@@ -491,49 +492,171 @@ export class Lisa {
         await this.installPluginsAndUpdateMarketplace(execAsync, plugins);
     }
     /**
-     * Install each plugin and refresh the Lisa marketplace cache
+     * Install each plugin and refresh the Lisa marketplace cache.
+     *
+     * Version-gated (perf): `claude plugin marketplace update` is a network git
+     * pull of the Lisa repo and every `claude plugin install` spawns the Claude
+     * CLI (seconds each); re-running all of it on every apply made a single
+     * `bun add` cost minutes across the repeated apply passes. A full sync
+     * (marketplace refresh + install every plugin) still runs whenever the
+     * installed Lisa version differs from the `.claude/.lisa-plugins-synced`
+     * marker; between version changes only plugins missing for this project are
+     * installed, so the self-heal property (a removed plugin comes back on the
+     * next install) survives at the cost of one `claude plugin list` call.
      * @param execAsync - Promisified exec function for running shell commands
      * @param plugins - Plugin identifiers from enabledPlugins (e.g. "lisa@lisa")
      */
     async installPluginsAndUpdateMarketplace(execAsync, plugins) {
         const { logger } = this.deps;
         const validPluginName = /^[\w@./-]+$/;
-        logger.info("Registering plugins with Claude Code (project scope)...");
-        try {
-            await execAsync("claude plugin marketplace update lisa", {
-                cwd: this.config.destDir,
-                shell: "/bin/sh",
-            });
+        const { fullSync, toInstall, version } = await this.computePluginSyncPlan(execAsync, plugins);
+        if (!fullSync && toInstall.length === 0) {
+            logger.info(pc.gray(`Plugins already in sync for Lisa ${version}; skipping`));
+            return;
         }
-        catch {
+        logger.info("Registering plugins with Claude Code (project scope)...");
+        if (fullSync) {
             // Best-effort cache refresh. Individual plugin installs below will still
             // report whether the marketplace entry is available.
+            await this.updateLisaMarketplace(execAsync, false);
         }
-        for (const plugin of plugins) {
+        for (const plugin of toInstall) {
             if (!validPluginName.test(plugin)) {
                 logger.warn(`Skipping invalid plugin name: ${plugin}`);
                 continue;
             }
-            try {
-                await execAsync(`claude plugin install ${plugin} --scope project`, {
-                    cwd: this.config.destDir,
-                    shell: "/bin/sh",
-                });
-                logger.success(`Registered plugin: ${plugin}`);
+            await this.installPlugin(execAsync, plugin);
+        }
+        // Post-install refresh must run whenever installs happened: installing can
+        // register the marketplace for the first time, and without a refresh newly
+        // added skills are not discovered ("Unknown skill" in nightly CI — #320).
+        await this.updateLisaMarketplace(execAsync, true);
+        if (fullSync) {
+            await this.writePluginSyncMarker(version);
+        }
+    }
+    /**
+     * Decide whether this apply needs a full plugin sync and which plugins to
+     * install.
+     * @param execAsync - Promisified exec function for running shell commands
+     * @param plugins - Plugin identifiers from enabledPlugins
+     * @returns Sync plan: fullSync (version changed), plugins to install, and
+     *   the current Lisa version
+     */
+    async computePluginSyncPlan(execAsync, plugins) {
+        const version = getPackageVersion();
+        const syncedVersion = await readFile(this.pluginSyncMarkerPath(), "utf-8")
+            .then(content => content.trim())
+            .catch(() => null);
+        const fullSync = syncedVersion !== version;
+        const installed = fullSync
+            ? null
+            : await this.readInstalledPluginIds(execAsync);
+        const toInstall = installed === null
+            ? plugins
+            : plugins.filter(plugin => !installed.has(plugin));
+        return { fullSync, toInstall, version };
+    }
+    /**
+     * Refresh the cached Lisa marketplace via the Claude CLI.
+     * @param execAsync - Promisified exec function for running shell commands
+     * @param announce - Whether to log the outcome (silent for the pre-install
+     *   best-effort refresh)
+     * @returns Promise that resolves when the refresh attempt completes
+     */
+    async updateLisaMarketplace(execAsync, announce) {
+        const { logger } = this.deps;
+        try {
+            await execAsync("claude plugin marketplace update lisa", this.pluginExecOptions());
+            if (announce) {
+                logger.success("Updated marketplace: lisa");
             }
-            catch {
-                logger.warn(`Could not register plugin: ${plugin}`);
+        }
+        catch {
+            if (announce) {
+                logger.warn("Could not update marketplace: lisa");
             }
         }
+    }
+    /**
+     * Install a single plugin at project scope via the Claude CLI.
+     * @param execAsync - Promisified exec function for running shell commands
+     * @param plugin - Plugin identifier (already validated)
+     * @returns Promise that resolves when the install attempt completes
+     */
+    async installPlugin(execAsync, plugin) {
+        const { logger } = this.deps;
+        try {
+            await execAsync(`claude plugin install ${plugin} --scope project`, this.pluginExecOptions());
+            logger.success(`Registered plugin: ${plugin}`);
+        }
+        catch {
+            logger.warn(`Could not register plugin: ${plugin}`);
+        }
+    }
+    /**
+     * Exec options shared by all Claude CLI plugin commands.
+     * @returns Options object with the project cwd and POSIX shell
+     */
+    pluginExecOptions() {
+        return { cwd: this.config.destDir, shell: "/bin/sh" };
+    }
+    /**
+     * Absolute path of the plugin sync marker recording the last fully-synced
+     * Lisa version for this project. Shared with install-claude-plugins.sh.
+     * @returns Marker path under the project's .claude directory
+     */
+    pluginSyncMarkerPath() {
+        return path.join(this.config.destDir, ".claude", ".lisa-plugins-synced");
+    }
+    /**
+     * Absolute path of the host project's package.json.
+     * @returns package.json path under the destination directory
+     */
+    hostPackageJsonPath() {
+        return path.join(this.config.destDir, "package.json");
+    }
+    /**
+     * Read the plugin ids already installed for this project via
+     * `claude plugin list --json`.
+     * @param execAsync - Promisified exec function for running shell commands
+     * @returns Set of installed plugin ids, or null when the list cannot be
+     *   obtained (older CLI, parse failure) so callers fall back to installing
+     *   everything — the pre-existing behavior
+     */
+    async readInstalledPluginIds(execAsync) {
         try {
-            await execAsync("claude plugin marketplace update lisa", {
+            const result = (await execAsync("claude plugin list --json", {
                 cwd: this.config.destDir,
                 shell: "/bin/sh",
-            });
-            logger.success("Updated marketplace: lisa");
+            }));
+            const parsed = JSON.parse(String(result.stdout ?? ""));
+            if (!Array.isArray(parsed)) {
+                return null;
+            }
+            const destPath = path.resolve(this.config.destDir);
+            const ids = parsed
+                .filter((entry) => typeof entry.id === "string" &&
+                entry.projectPath === destPath)
+                .map(entry => entry.id);
+            return new Set(ids);
         }
         catch {
-            logger.warn("Could not update marketplace: lisa");
+            return null;
+        }
+    }
+    /**
+     * Record the Lisa version whose plugin set was last fully synced.
+     * @param version - Lisa package version to record
+     * @returns Promise that resolves when the marker is written (best-effort)
+     */
+    async writePluginSyncMarker(version) {
+        try {
+            await fse.ensureDir(path.join(this.config.destDir, ".claude"));
+            await fse.writeFile(this.pluginSyncMarkerPath(), `${version}\n`, "utf-8");
+        }
+        catch {
+            // Best-effort: a missing marker only costs a redundant full sync next run.
         }
     }
     /* v8 ignore stop */
@@ -602,8 +725,12 @@ export class Lisa {
             await this.loadPendingDeletions();
             await this.loadCreateOnlyOwnership();
             await this.loadCopyOverwriteOwnership();
+            // Captured BEFORE any mutation (migrations included): the hash gates both
+            // the detached trampoline and the in-process lockfile reconcile, and
+            // before-strategies migrations can wire scripts.postinstall — a change the
+            // package manager's end-of-command rewrite would clobber (#383).
+            const prePackageJsonHash = hashFile(this.hostPackageJsonPath());
             await this.runMigrationsBeforeStrategies();
-            const prePackageJsonHash = hashFile(path.join(this.config.destDir, "package.json"));
             await this.processConfigurations();
             if (this.selfApply) {
                 this.deps.logger.info(pc.gray("Self-apply (Lisa source repo): skipped deletions.json processing"));
@@ -622,7 +749,7 @@ export class Lisa {
             await this.finalize();
             this.printSummary();
             await this.printMigrationNotices(this.config.destDir);
-            await this.schedulePostinstallReconciliation();
+            await this.schedulePostinstallReconciliation(prePackageJsonHash);
             await this.reconcileLockfilesInProcess(prePackageJsonHash);
             return this.getSuccessResult();
         }
@@ -657,7 +784,7 @@ export class Lisa {
             return;
         if (shouldSchedulePostinstallReconciliation(this.config.dryRun))
             return;
-        const pkgPath = path.join(this.config.destDir, "package.json");
+        const pkgPath = this.hostPackageJsonPath();
         const postHash = hashFile(pkgPath);
         if (prePackageJsonHash === null ||
             postHash === null ||
@@ -987,9 +1114,22 @@ export class Lisa {
      * The trampoline is always fully detached so the package manager can exit
      * normally; the child then detects the exit and re-runs Lisa. See
      * utils/postinstall-trampoline.ts for details.
+     *
+     * Skipped when this apply did not mutate package.json: the trampoline exists
+     * solely to redo package.json changes that the parent package manager's
+     * end-of-command rewrite clobbers (#383). With no mutation there is nothing
+     * to clobber — the rewrite restores identical content — and scheduling a
+     * detached re-apply (plus its lockfile regen) is pure waste. File-based
+     * template writes are not clobbered and need no reconciliation.
+     * @param prePackageJsonHash - Hash of package.json captured before apply mutated anything (null if the file did not exist)
      * @returns Promise that resolves immediately after the detached child is spawned
      */
-    async schedulePostinstallReconciliation() {
+    async schedulePostinstallReconciliation(prePackageJsonHash) {
+        const postHash = hashFile(this.hostPackageJsonPath());
+        if (prePackageJsonHash === postHash) {
+            this.deps.logger.info(pc.gray("Postinstall reconciliation skipped: package.json unchanged by this apply"));
+            return;
+        }
         if (!shouldSchedulePostinstallReconciliation(this.config.dryRun)) {
             return;
         }