@codyswann/lisa 2.251.1 → 2.253.0

package/plugins/lisa-agy/skills/lisa-tear-down-automations/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: lisa-tear-down-automations
-description: "Remove every recurring Lisa automation that /setup-automations created for this project (the lisa-auto-<project>-* set: intake-repair, intake-prd, intake-tickets, exploratory-bugs, exploratory-prds, monitor) using the CURRENT runtime's native scheduler — Codex automations or, on Claude, /schedule. This skill is a declarative specification: it identifies WHICH automations to remove; it does not run teardown scripts. Removes only this project's Lisa automations — never other projects' automations or non-Lisa ones. The inverse of /setup-automations."
+description: "Remove every recurring Lisa automation that /setup-automations registered for this project — whatever is actually registered under the lisa-auto-<project>-* prefix, including the opt-in learnings-audit gardener — using the CURRENT runtime's native scheduler — Codex automations or, on Claude, /schedule. This skill is a declarative specification: it identifies WHICH automations to remove; it does not run teardown scripts. Carries no fixed list of loops: the registration set is the roster. Removes only this project's Lisa automations — never other projects' automations or non-Lisa ones. Leaves checked-in runbook files on disk. The inverse of /setup-automations."
 allowed-tools: ["Skill", "Bash", "Read"]
 ---
 
@@ -21,14 +21,34 @@ removes them with its **native** scheduling mechanism.
 
 ## Scope (remove only what setup created)
 
-- Remove the six automations `/setup-automations` creates for the current project, matched by the
-  stable `lisa-auto-<project>-` name prefix: `intake-repair`, `intake-prd`, `intake-tickets`,
-  `exploratory-bugs`, `exploratory-prds`, `monitor`.
+- Remove **every** automation `/setup-automations` registered for the current project — the whole
+  set found under the stable `lisa-auto-<project>-` name prefix, whatever it currently contains.
+  **Membership is registration, not a roster** (`automation-runbook-contract`): sweep the prefix and
+  remove what is there. Do **not** work from a fixed list of loop names — a list drifts the moment a
+  loop is added, which is exactly how the opt-in gardener came to be orphaned.
+- This explicitly includes the opt-in **`learnings-audit`** gardener when it is registered:
+  `/setup-automations learnings-audit=true` registers it under the same prefix, so teardown removes
+  it with the rest. A conditionally-skipped loop (e.g. `exploratory-bugs` on a stack without
+  `exploratory-qa`) simply is not in the sweep.
 - **Never** remove automations for a different project, or any non-Lisa automation (e.g. unrelated
   crawlers/ingestors). Match strictly on the `lisa-auto-<project>-` prefix for THIS project; when in
   doubt about an automation's ownership, leave it and report it rather than deleting it.
-- **Idempotent** — an automation that is already absent is a no-op, not an error.
+- **Idempotent** — an automation that is already absent is a no-op, not an error. Re-running when
+  the prefix sweep finds nothing is a clean, successful no-op.
+- **Leave the runbooks alone.** The checked-in `.lisa/automations/<loop-id>.runbook.md` files that
+  `/setup-automations` scaffolded are project knowledge and the historical record of what these
+  loops did. Teardown removes scheduler registrations only; it never deletes, edits, or moves a
+  runbook file. An operator who wants them gone removes them deliberately, in git.
 
 ## Report
 
-List each automation removed, and any in the expected set that were already absent.
+List each automation removed by name. For "already absent", compare against the one source of truth
+— the fleet `scripts/automation-status-expected-fleet.mjs` (`resolveExpectedAutomationFleet`)
+resolves for this project — and name anything it expects that the sweep did not find; that is a
+no-op, not an error. Do not invent an expected set of your own.
+
+Then state, in the operator's words, that the runbook files under `.lisa/automations/` were left on
+disk **and why**: they are the written record of what those jobs did, kept on purpose, and if you
+do not want them you delete them yourself in git. Finally, confirm that nothing outside this
+project's `lisa-auto-<project>-` prefix was touched. Write it so a non-technical operator can
+confirm what happened without reading code.

package/plugins/lisa-cdk/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.251.1",
+  "version": "2.253.0",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.251.1",
+  "version": "2.253.0",
   "description": "AWS CDK-specific Lisa plugin.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.251.1",
+  "version": "2.253.0",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.251.1",
+  "version": "2.253.0",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.251.1",
+  "version": "2.253.0",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.251.1",
+  "version": "2.253.0",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/rules/eager/automation-runbook-contract.md

@@ -0,0 +1,61 @@
+# Automation Runbook Contract (load-bearing)
+
+**Every registered automation loop carries a checked-in runbook, and every run of that loop ends in
+exactly one of six run outcomes** with a one-line, operator-readable summary. A registered loop with
+no runbook, or a run that stops without naming its outcome, is a contract violation.
+
+**One vendor-neutral contract, to be cited by (wired in the loop-conformance ticket)
+`lisa-setup-automations`, `lisa-automation-status`, `lisa-tear-down-automations`, and every
+registered loop skill** (the `leaf-only-lifecycle` / `repo-scope-split` precedent: one shared slug,
+never divergent per-loop prose).
+
+## Membership
+
+Membership is **registration, not skill-existence**: a loop is under this contract the moment it is
+registered as a scheduled automation, and registering a new one pulls it in automatically. There is
+no hardcoded roster of loops anywhere.
+
+## The six run outcomes
+
+Exactly one per run:
+**`nothing-needed | candidate-proposed | change-proved | approval-requested | recovery-required | policy-obsolete`**
+
+Health and operator action are **orthogonal** — a healthy run can still need an answer:
+
+- `nothing-needed` — the loop ran and found nothing to act on. **Healthy.** Operator action: none.
+- `candidate-proposed` — the loop proposed work (ticket, PRD, recommendation). **Healthy.** Operator
+  action: review the proposed item and flip it ready when you want it built.
+- `change-proved` — the loop made a change and proved it with evidence. **Healthy.** Operator
+  action: none (informational).
+- `approval-requested` — the loop reached a boundary it may not cross alone. **Healthy.** Operator
+  action: answer the approval question.
+- `recovery-required` — the loop itself could not complete (access, tooling, or substrate broken)
+  and escalated a decision-ready packet. **Not healthy.** Operator action: restore the named
+  capability, then close the escalation item.
+- `policy-obsolete` — the loop's own retirement policy (the retirement condition written in its
+  runbook) tripped, so it proposed its own teardown. **Healthy.** Operator action: approve the
+  teardown, decline it (close the proposal; the loop keeps running at cadence), or re-cadence it.
+
+## A run outcome is NOT a work-item lifecycle terminal state (CRITICAL)
+
+A **run outcome** describes the LOOP ITERATION. A **terminal state** describes a TICKET — Lisa
+already uses that phrase for work-item lifecycles (`lisa-intake`: "`Blocked` is a valid terminal
+state of the downstream lifecycles"). The two vocabularies never merge in an operator-facing report.
+A healthy cycle that routes a work item to `Blocked` with clarifying questions is
+`candidate-proposed` — it produced something — so it is **never `nothing-needed`**, which is
+reserved for runs that found nothing at all, and **never `recovery-required`**, which means the
+loop itself is broken, not that a work item was blocked.
+
+## No silent exit
+
+Every run — including a trivial early termination — ends by naming exactly one run outcome plus a
+one-line operator summary of what happened, recorded where the status surface can read it —
+there is no silent exit. Silence and health must never look identical to an operator.
+
+## Never block, always degrade
+
+A missing runbook, an unreadable record surface, or an absent optional dependency **degrades** the
+run — say so in the summary and finish with an outcome — it never crashes the loop, never blocks
+other work, and never leaves the run unreported.
+
+Full contract (template, outcome definitions, escalation packet, retirement): [reference/automation-runbook-contract.md](../reference/automation-runbook-contract.md).

package/plugins/lisa-copilot/rules/reference/automation-runbook-contract.md

@@ -0,0 +1,216 @@
+# Automation Runbook Contract
+
+Scheduled loops are the busiest machinery in the factory and historically the least explicitly
+contracted: what a loop maintains, what it may do on its own, what it must escalate, and when it
+should stop existing all lived implicitly in each loop's prose. The cost lands on the operator — a
+quiet run and a broken run look identical, and "what is this scheduled thing?" has a different
+answer shape for every loop. This contract writes the answer down once.
+
+It is a **single vendor-neutral contract** consumed by `lisa-setup-automations` (which scaffolds a
+runbook per registered loop), `lisa-automation-status` (which reads runbooks and run outcomes back
+to an operator), `lisa-tear-down-automations` (which acts on retirement proposals), and every
+registered loop skill (which conforms its own run to it). Each consumer cites this slug; none of
+them redefines it.
+
+**Membership is registration, not skill-existence.** A loop falls under this contract when it is
+registered as a scheduled automation on the host project's runtime scheduler — not when its skill
+file happens to exist in the plugin tree. Registering a new loop pulls it in automatically, and
+un-registering drops it. Nothing in this contract, in the scaffolder, or in the status surface may
+carry a hardcoded roster of loops; the worked example below names one loop as illustration only.
+
+## The runbook template
+
+Every registered loop's runbook has these ten sections, in this order. Each is answered in prose a
+non-technical operator can read (`factory-model` rule 5).
+
+| Section | What a good answer looks like |
+|---|---|
+| Intent | One sentence naming what this loop maintains, in outcome terms, not mechanism terms. |
+| Sources of truth | The exact surfaces the loop reads, each reachable through its access layer (`integration-access-layer`) — never a direct vendor API call. |
+| Candidate selection | The query or filter that decides what this run acts on, and the bound on how many. |
+| Scope/bounds | What the loop will never touch, and the cap that keeps one run finite. |
+| Proof | What the loop must observe before claiming it changed anything — the evidence it records. |
+| Autonomous-vs-approval boundary | The named line: what it does alone, and the first thing on the other side that requires a human. |
+| Escalation | What it files when it cannot proceed — always the decision-ready packet below. |
+| Recovery | What a human or the next run does to get the loop working again after `recovery-required`. |
+| Next-run state | What the next run can observe from this one, derived from durable surfaces (tracker, records) rather than in-process memory. |
+| Retirement condition | The stateless, tracker-derived condition under which this loop proposes its own teardown. |
+
+### Worked example — the `intake-tickets` loop
+
+```text
+Loop: intake-tickets
+
+Intent
+  Keeps the build queue moving: work items a human marked ready get built, reviewed, and shipped
+  without anyone having to hand them to an agent.
+
+Sources of truth
+  The configured tracker's build queue (the ready/claimed/done lanes from .lisa.config.json), read
+  through the tracker access layer; the item's own comments and linked PRs.
+
+Candidate selection
+  The oldest eligible leaf work item currently in the ready lane, one per run. Containers with open
+  children are repaired out of the queue, never built.
+
+Scope/bounds
+  Only items in this repo's configured queue. It never edits the ready lane's meaning, never
+  invents work items, and never processes more than its per-run cap.
+
+Proof
+  A merged pull request plus the project's own verification evidence posted back to the work item;
+  a claim of "done" without that evidence is not made.
+
+Autonomous-vs-approval boundary
+  Alone: claim, plan, implement, open the PR, drive it to merge. Requires a human: anything that
+  needs a protected deployment approval, and any item whose requirements it cannot resolve — that
+  becomes a blocked work item with clarifying questions, not a guess.
+
+Escalation
+  When the loop itself cannot proceed (tracker credentials revoked, queue unreadable), it files the
+  decision-ready packet below, labeled status:blocked + human-needed.
+
+Recovery
+  A human restores the named access, then flips the escalation item closed; the next scheduled run
+  resumes with no manual replay needed.
+
+Next-run state
+  Nothing in memory. The tracker lanes and the run records are the state: a claimed item that never
+  finished is visible as claimed, and the repair path picks it up.
+
+Retirement condition
+  Propose teardown when BOTH hold: no work item has entered this queue for 30 consecutive days, AND
+  this run proposed nothing. It files one teardown-proposal item and keeps running at its normal
+  cadence until someone approves, declines, or re-cadences it.
+```
+
+## The six run outcomes
+
+Exactly one per run. The one-line operator summary is not optional — it is what the status surface
+shows and what makes the outcome actionable.
+
+Health and operator action are **orthogonal**: several healthy outcomes still want an answer, and
+only `recovery-required` means the machinery itself is broken.
+
+| Outcome | Definition | Healthy? | Operator action? | One-line summary must contain |
+|---|---|---|---|---|
+| `nothing-needed` | The loop ran end to end and found nothing to act on. | Healthy — **no operator action** | None. | What was scanned, how much was seen, and "nothing to propose". |
+| `candidate-proposed` | The loop proposed work — a ticket, PRD, or recommendation — for a human or a downstream factory. | Healthy | Review the proposed item and flip it ready when you want it built. | What was proposed and where to find it (item refs). |
+| `change-proved` | The loop made a change and proved it with evidence. | Healthy | None — informational. | What changed and the evidence that proves it. |
+| `approval-requested` | The loop reached its autonomous/approval boundary and asked a human. | Healthy | Answer the approval question. | What is waiting, on whom, and what happens if nobody answers. |
+| `recovery-required` | The loop itself could not complete: access, tooling, or substrate is broken. | **Not healthy** — needs a human | Restore the named capability, then close the escalation item. | What broke, and the escalation item to act on. |
+| `policy-obsolete` | The loop's own retirement policy — the retirement condition written in its runbook — tripped, so it proposed its own teardown. | Healthy | Decide: approve the teardown, decline it (close the proposal; the loop continues at cadence), or re-cadence it. | Why it looks obsolete and the teardown-proposal item. |
+
+### Exemplar one-line summaries
+
+These set the register every conforming loop copies — plain, specific, and actionable without
+reading code:
+
+```text
+nothing-needed      Scanned 12 ready items; nothing to propose.
+candidate-proposed  Proposed #1810 to fix the failing checkout step; awaiting your flip to ready.
+change-proved       Merged #1811 raising coverage to 84%; CI green and evidence posted on the item.
+approval-requested  Deploy to production is waiting on your approval; nothing ships until you answer.
+recovery-required   Lost access to the tracker; filed #1812 with the one decision needed to restore it.
+policy-obsolete     No work has reached this queue in 30 days; proposed teardown in #1813.
+```
+
+**No silent exit.** Every run posts its outcome and its one-line summary before stopping —
+including the trivial early terminations (empty queue, nothing eligible, already-claimed) — so
+there is no silent exit for an operator to misread as health. A run that ends without a
+recorded outcome is indistinguishable from a crashed scheduler, which is exactly the ambiguity this
+contract removes. This generalizes `lisa-improve-harness`'s result-record discipline — every
+terminal step posts its result record before stopping, so there is no silent exit — from one flow to
+every registered loop. (The run-record substrate that stores outcomes and summaries is named here
+only; it ships with that ticket (#1797), do not assume its file is present in this branch.)
+
+## A run outcome is not a work-item lifecycle terminal state
+
+This is the highest-risk seam in the contract, so it is stated explicitly.
+
+- A **run outcome** describes the LOOP ITERATION — how this scheduled execution ended.
+- A **terminal state** describes a TICKET — Lisa already uses that phrase for work-item lifecycles
+  (`lisa-intake`: "`Blocked` is a valid terminal state of the downstream lifecycles"; see
+  `prd-lifecycle-rollup`).
+
+They never merge in an operator-facing report. A perfectly healthy cycle that routes a work item to
+`Blocked` — because the item's requirements are unresolvable and a human must answer — is
+`candidate-proposed`: the run produced something (a blocked item carrying clarifying questions), so
+it is **never `nothing-needed`**, which is reserved for runs that found nothing at all, and **never
+`recovery-required`**, which means the machinery is broken. Conflating a blocked work item with a
+broken loop would paint healthy intake cycles permanently red and train operators to ignore the
+fleet verdict.
+
+## Escalation — the decision-ready packet
+
+A loop that cannot proceed escalates by filing a tracker item (through `lisa-tracker-write`, per
+`tracked-work` and `integration-access-layer`) labeled **`status:blocked`** and **`human-needed`**,
+containing exactly these fields:
+
+| Field | Content |
+|---|---|
+| Current state | Where things stand right now, in plain terms — what is and is not working. |
+| Work already attempted | What the loop tried on its own before escalating, so nobody repeats it. |
+| Evidence | Links to the runs, items, logs, or records that show the problem (the evidence packet from the evidence PRD is the carrier; this contract names it and defines no evidence formats). |
+| Risk of inaction | What degrades or stops if nobody acts, and how soon. |
+| Smallest unresolved choice | The single smallest decision a human must make — one question, not a list — stated with **named options** (or as a yes/no), and what the loop will do with each answer. |
+| How to answer | The mechanical response path: comment on the item, flip a label, or close it — so the operator never has to guess how to reply. |
+
+The wording requirement is binding: a **non-technical operator must be able to act on the packet
+without reading code** (`factory-model` rule 5). A stack trace may be attached as evidence, but the
+packet must stand without it.
+
+## Retirement condition
+
+A loop that no longer earns its schedule should say so. The condition is **stateless — derived from
+the tracker, never from a counter or a state file** (there is no durable home for a run counter, and
+a tracker-derived condition is headless- and concurrent-safe by construction). This generalizes the
+*Retirement condition* section of `lisa-learnings-audit`, which already retires itself this way; its
+current wording still uses the older three-value "terminal states" vocabulary, and the
+loop-conformance ticket conforms it to the six run outcomes above. A loop proposes retirement when
+BOTH hold:
+
+1. **Quiet trailing window** — a date-filtered tracker search finds nothing this loop produced
+   within its trailing quiet window (sized to a small multiple of its cadence).
+2. **This run proposes nothing** — the current run yields zero candidates (it is otherwise ending
+   `nothing-needed`).
+
+When both hold, the run ends `policy-obsolete` and files **exactly ONE marker-deduped**
+teardown-proposal item — matched on the marker, never the title — carrying the date-filtered search
+result and this run's summary as evidence, and proposing either a longer cadence or
+`lisa-tear-down-automations`. The loop **keeps running at its normal cadence** until an operator
+flips that proposal one of three ways: **approve** it (`lisa-tear-down-automations` runs and the
+registration goes away), **decline** it (close the proposal — the loop simply continues), or
+**re-cadence** it (register it at the longer cadence instead of tearing it down). Retirement is a
+recommendation like any other, **never a self-executed exit**: a loop never deletes its own
+registration, and a proposal nobody answers changes nothing.
+
+## Never block, always degrade
+
+A loop degrades rather than blocking. Three triggers are expected and must never crash a run:
+
+- **A missing runbook** — the loop runs on the contract's defaults and says so.
+- **An unreadable record surface** — the loop still reports its outcome and summary in its own run
+  output, so the operator is never left with silence.
+- **An absent optional dependency** — a skill or surface that ships with a sibling ticket is not
+  yet installed; the loop skips that enrichment and continues.
+
+A degraded run still **reports its actual outcome from the same six values** — degradation does not
+mint a seventh token and, on its own, is not `recovery-required`. Its one-line summary **leads with
+the degradation**, then states the outcome:
+
+```text
+Runbook missing — ran on defaults; nothing to propose.
+```
+
+Degradation becomes `recovery-required` only when it prevents the loop from doing its actual job
+(the queue itself is unreadable, credentials are revoked) — and then it escalates the decision-ready
+packet above. A degraded run never blocks other work and never leaves the run unreported.
+
+## Citing adjacent work
+
+Cite these by name; each ships with its own ticket, do not assume its file is present in this
+branch: the runbook scaffolding that instantiates this template (#1796), the run-record substrate
+that stores outcomes and summaries (#1797), and the evidence packet defined by the evidence PRD
+(#1738) — named here, with no evidence format defined by this contract. Rejection memory
+extends `rejection-detection`; this contract neither restates nor overrides it.

package/plugins/lisa-copilot/scripts/automation-status-claude-adapter.mjs

@@ -10,6 +10,11 @@
  */
 
 import { compareAutomationFleet } from "./automation-status-contract-drift.mjs";
+import {
+  assignToAutomationGroup,
+  createAutomationGroupBins,
+  renderAutomationGroups,
+} from "./automation-status-expected-fleet.mjs";
 
 const CLAUDE_RUNTIME_LABEL = "Claude /schedule";
 const CLAUDE_ACTIVE_STATUSES = new Set([
@@ -75,10 +80,7 @@ export function inspectClaudeAutomationFleet(input) {
     automationPrefix: expectedFleet.automationPrefix,
   });
 
-  const expectedGroups = new Map([
-    ["core", []],
-    ["exploratory", []],
-  ]);
+  const expectedGroups = createAutomationGroupBins();
 
   const comparisons = compareAutomationFleet({
     expectedAutomations: expectedFleet.expected,
@@ -87,7 +89,9 @@ export function inspectClaudeAutomationFleet(input) {
 
   for (const [index, expected] of expectedFleet.expected.entries()) {
     const comparison = comparisons[index];
-    expectedGroups.get(expected.group)?.push(
+    assignToAutomationGroup(
+      expectedGroups,
+      expected.group,
       createObservedStatusItem({
         expected,
         comparison,
@@ -97,7 +101,7 @@ export function inspectClaudeAutomationFleet(input) {
   }
 
   for (const unsupported of expectedFleet.unsupported) {
-    expectedGroups.get(unsupported.group)?.push({
+    assignToAutomationGroup(expectedGroups, unsupported.group, {
       id: unsupported.automationId,
       status: "UNSUPPORTED",
       summary: unsupported.reason,
@@ -109,18 +113,7 @@ export function inspectClaudeAutomationFleet(input) {
   return {
     runtime: `${CLAUDE_RUNTIME_LABEL} listing`,
     generatedAt: now.toISOString(),
-    groups: [
-      {
-        id: "1",
-        title: "Core automations",
-        items: expectedGroups.get("core") ?? [],
-      },
-      {
-        id: "2",
-        title: "Exploratory automations",
-        items: expectedGroups.get("exploratory") ?? [],
-      },
-    ],
+    groups: renderAutomationGroups(expectedGroups),
     observedAutomations,
   };
 }
@@ -487,6 +480,13 @@ function normalizeClaudeRRule(value) {
   ) {
     return "FREQ=DAILY;INTERVAL=1";
   }
+  if (
+    cadence === "once a week" ||
+    cadence === "every week" ||
+    cadence === "weekly"
+  ) {
+    return "FREQ=WEEKLY;INTERVAL=1";
+  }
 
   const everyMinutes = cadence.match(/every (\d+) minutes?/);
   if (everyMinutes?.[1]) {
@@ -503,6 +503,11 @@ function normalizeClaudeRRule(value) {
     return `FREQ=DAILY;INTERVAL=${everyDays[1]}`;
   }
 
+  const everyWeeks = cadence.match(/every (\d+) weeks?/);
+  if (everyWeeks?.[1]) {
+    return `FREQ=WEEKLY;INTERVAL=${everyWeeks[1]}`;
+  }
+
   return undefined;
 }
 
@@ -527,6 +532,9 @@ function humanizeClaudeCadence(value) {
   if (normalized === "every day") {
     return "once a day";
   }
+  if (normalized === "weekly" || normalized === "every week") {
+    return "once a week";
+  }
   return normalized;
 }
 
@@ -556,6 +564,11 @@ function humanizeRRule(rrule) {
     return Number(daily[1]) === 1 ? "once a day" : `every ${daily[1]} days`;
   }
 
+  const weekly = rrule.match(/^FREQ=WEEKLY;INTERVAL=(\d+)$/);
+  if (weekly?.[1]) {
+    return Number(weekly[1]) === 1 ? "once a week" : `every ${weekly[1]} weeks`;
+  }
+
   return rrule;
 }
 
@@ -574,6 +587,11 @@ function cadenceLabelToIntervalMs(label) {
     return 24 * 60 * 60_000;
   }
 
+  const oncePerWeek = new Set(["once a week", "weekly"]);
+  if (oncePerWeek.has(label)) {
+    return 7 * 24 * 60 * 60_000;
+  }
+
   return null;
 }
 

package/plugins/lisa-copilot/scripts/automation-status-codex-adapter.mjs

@@ -17,6 +17,11 @@ import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 
 import { compareAutomationFleet } from "./automation-status-contract-drift.mjs";
+import {
+  assignToAutomationGroup,
+  createAutomationGroupBins,
+  renderAutomationGroups,
+} from "./automation-status-expected-fleet.mjs";
 
 const CODEx_RUNTIME_LABEL = "Codex automations";
 const RUN_TIMESTAMP_PATTERN = /20\d{2}-\d\d-\d\dT\d\d:\d\d:\d\d(?:\.\d+)?Z/;
@@ -156,10 +161,7 @@ export async function inspectCodexAutomationFleet(input) {
     automationPrefix: expectedFleet.automationPrefix,
   });
 
-  const expectedGroups = new Map([
-    ["core", []],
-    ["exploratory", []],
-  ]);
+  const expectedGroups = createAutomationGroupBins();
 
   const comparisons = compareAutomationFleet({
     expectedAutomations: expectedFleet.expected,
@@ -168,7 +170,9 @@ export async function inspectCodexAutomationFleet(input) {
 
   for (const [index, expected] of expectedFleet.expected.entries()) {
     const comparison = comparisons[index];
-    expectedGroups.get(expected.group)?.push(
+    assignToAutomationGroup(
+      expectedGroups,
+      expected.group,
       createObservedStatusItem({
         expected,
         comparison,
@@ -178,7 +182,7 @@ export async function inspectCodexAutomationFleet(input) {
   }
 
   for (const unsupported of expectedFleet.unsupported) {
-    expectedGroups.get(unsupported.group)?.push({
+    assignToAutomationGroup(expectedGroups, unsupported.group, {
       id: unsupported.automationId,
       status: "UNSUPPORTED",
       summary: unsupported.reason,
@@ -190,18 +194,7 @@ export async function inspectCodexAutomationFleet(input) {
   return {
     runtime: `${CODEx_RUNTIME_LABEL} (backing-store metadata)`,
     generatedAt: now.toISOString(),
-    groups: [
-      {
-        id: "1",
-        title: "Core automations",
-        items: expectedGroups.get("core") ?? [],
-      },
-      {
-        id: "2",
-        title: "Exploratory automations",
-        items: expectedGroups.get("exploratory") ?? [],
-      },
-    ],
+    groups: renderAutomationGroups(expectedGroups),
     observedAutomations,
   };
 }
@@ -249,21 +242,35 @@ export function deriveCodexObservedCommand(prompt) {
     return undefined;
   }
 
+  // The "with arguments" clause is optional: no-argument loops (monitor, the
+  // gardener) register without one. Requiring it made every such loop derive an
+  // undefined command and report DRIFTED forever, un-fixable by re-running setup.
   const lisaSkillMatch = prompt.match(
-    /Use the Lisa ([a-z0-9:-]+) skill with arguments `([^`]+)`/i
+    /Use the Lisa ([a-z0-9:-]+) skill(?: with arguments `([^`]*)`)?/i
   );
-  if (lisaSkillMatch?.[1] && lisaSkillMatch[2]) {
-    return `/lisa:${lisaSkillMatch[1]} ${lisaSkillMatch[2]}`.trim();
+  if (lisaSkillMatch?.[1]) {
+    return `/lisa:${lisaSkillMatch[1]} ${lisaSkillMatch[2] ?? ""}`.trim();
   }
 
   const aliasSkillMatch = prompt.match(
-    /Use the `\$([a-z0-9:-]+)` skill with arguments `([^`]+)`/i
+    /Use the `\$([a-z0-9:-]+)` skill(?: with arguments `([^`]*)`)?/i
   );
-  if (aliasSkillMatch?.[1] && aliasSkillMatch[2]) {
-    return `${canonicalizeCodexSkillAlias(aliasSkillMatch[1])} ${aliasSkillMatch[2]}`.trim();
-  }
-
-  return undefined;
+  if (aliasSkillMatch?.[1]) {
+    return `${canonicalizeCodexSkillAlias(aliasSkillMatch[1])} ${aliasSkillMatch[2] ?? ""}`.trim();
+  }
+
+  // A registration whose prompt carries the literal Lisa command on its own
+  // line — the shape `/lisa:setup-automations` bakes so a command that is not a
+  // plain skill name (`/lisa:learnings:audit`) round-trips exactly. Mirrors the
+  // Claude adapter, which has always accepted a bare `/lisa:` command. Codex
+  // stores prompts as single-line TOML, so a line break arrives either real or
+  // as the two-character escape `\n`; both delimit a line here.
+  const literalCommand = prompt
+    .split(/\r?\n|\\n/)
+    .map(segment => segment.trim())
+    .find(segment => /^\/lisa[:-]\S/.test(segment));
+
+  return literalCommand;
 }
 
 function canonicalizeCodexSkillAlias(alias) {
@@ -583,6 +590,13 @@ function humanizeAutomationCadence(rrule) {
       : `every ${everyDays[1]} days`;
   }
 
+  const everyWeeks = rrule.match(/^FREQ=WEEKLY;INTERVAL=(\d+)$/);
+  if (everyWeeks?.[1]) {
+    return Number(everyWeeks[1]) === 1
+      ? "once a week"
+      : `every ${everyWeeks[1]} weeks`;
+  }
+
   return rrule;
 }
 
@@ -606,6 +620,11 @@ function rruleToIntervalMs(rrule) {
     return Number(daily[1]) * 24 * 60 * 60_000;
   }
 
+  const weekly = rrule.match(/^FREQ=WEEKLY;INTERVAL=(\d+)$/);
+  if (weekly?.[1]) {
+    return Number(weekly[1]) * 7 * 24 * 60 * 60_000;
+  }
+
   return null;
 }
 
@@ -623,6 +642,10 @@ function cadenceLabelToIntervalMs(label) {
     return 24 * 60 * 60_000;
   }
 
+  if (label === "once a week") {
+    return 7 * 24 * 60 * 60_000;
+  }
+
   return null;
 }