@codyswann/lisa 4.27.5 → 4.27.6

package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.27.5",
+  "version": "4.27.6",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.27.5",
+  "version": "4.27.6",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/src/base/skills/lisa-setup-automations/SKILL.md

@@ -207,6 +207,29 @@ project: the per-check marker dedupe converges under a single scheduled runner,
 and two concurrent runs can both observe an empty open-ticket set and both
 file. Tear-down removes it with the rest of the `lisa-auto-<project>-*` set.
 
+**Optional automation — the fleet enforcement census.** Register
+`lisa-auto-<project>-enforcement-census` running `/lisa:enforcement-census`
+once a **day** only when BOTH are true of the repository being set up: it
+maintains a fleet roster (`.lisa.workspaces.json`, the machine-local list of
+host checkouts), and it provides the `/lisa:enforcement-census` command. Both
+hold in the Lisa monorepo and in no ordinary host project, which is the point —
+the census measures OTHER checkouts on the same machine, so only the workstation
+holding the roster has a fleet to measure. Where either is absent, register
+nothing — a host project has no fleet, and scheduling a command it does not
+have would be a loop that fails every night — and report the census as SKIPPED
+naming which prerequisite was missing, per the report contract. Registering
+nothing is correct; omitting it from the report is not, because a silently
+absent loop is indistinguishable from one that was never asked for.
+
+It **reports and never gates**: no finding about the fleet changes an exit
+status, and no run files a ticket. Enforcement resolves from the checkout an
+agent is working in, so a checkout resolving no guard is protected by nothing
+while looking identical, from inside a session, to one protected by an old
+policy — and nothing was re-measuring that (CodySwannGT/lisa#3490). The
+per-checkout half of the same finding is carried by `lisa doctor`, which every
+host does get. Tear-down removes it with the rest of the `lisa-auto-<project>-*`
+set.
+
 **Exploratory PRD pressure gate.** `auto-start-prds=true` means "create PRDs in the ready PRD
 lifecycle when the PRD queue has capacity," not "always create a new ready PRD." The
 `exploratory-prds` automation uses the same PRD source queue and pressure roles reported by

package/scripts/lisa-enforcement-census.mjs

@@ -0,0 +1,168 @@
+#!/usr/bin/env node
+/**
+ * Fleet enforcement census — re-measures how many host checkouts resolve a
+ * Lisa enforcement guard, and reports it.
+ *
+ * The per-session staleness notice in `scripts/lisa-enforcement-fallback.sh`
+ * tells THIS session about THIS checkout, which is right and is not the gap.
+ * The gap is that nobody was looking at the fleet, so the only fleet-wide
+ * number that ever existed was taken by hand and frozen in a comment
+ * (CodySwannGT/lisa#3490). This runs the measurement again, every time.
+ *
+ * Two properties it must keep:
+ *
+ *   - It REPORTS. Its exit status is 0 for every finding about the fleet,
+ *     including a fleet where every checkout is stale. A census that could
+ *     redden someone's build would be routed around.
+ *   - It keeps "resolves nothing" apart from "resolves something old". They are
+ *     different failures with different remedies, and folding them loses the
+ *     serious half.
+ *
+ * Usage:
+ *   node scripts/lisa-enforcement-census.mjs [options]
+ *
+ * Options:
+ *   --roster <path>    Roster file (default: .lisa.workspaces.json beside this repo)
+ *   --scan <dir>       Also discover checkouts under <dir>. Repeatable.
+ *   --depth <n>        How deep --scan descends (default 2)
+ *   --reference <ver>  Compare against this version instead of the newest found
+ *   --redact           Replace real paths with stable anonymous labels
+ *   --json             Emit the measured fleet as JSON
+ *
+ * Exit status: 0 for every fleet finding. 1 only when an explicitly named
+ * roster cannot be read, and 2 for a usage error — both are failures of the
+ * census's own inputs, never findings about the fleet.
+ */
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const here = path.dirname(fileURLToPath(import.meta.url));
+const repoRoot = path.resolve(here, "..");
+
+const census = await import(
+  path.join(repoRoot, "dist", "core", "enforcement-census.js")
+).catch(error => {
+  process.stderr.write(
+    `Could not load the census from dist/. Run \`bun run build:dist\` first.\n${error.message}\n`
+  );
+  process.exit(2);
+});
+const report = await import(
+  path.join(repoRoot, "dist", "core", "enforcement-census-report.js")
+);
+
+const options = {
+  roster: null,
+  scans: [],
+  depth: 2,
+  reference: null,
+  redact: false,
+  json: false,
+};
+
+const argv = process.argv.slice(2);
+for (let index = 0; index < argv.length; index += 1) {
+  const flag = argv[index];
+  const value = argv[index + 1];
+  // A value-taking flag left at the end of the line has no value. Assigning
+  // `undefined` there silently falls back to the default roster or drops the
+  // requested setting, so the run measures something other than what was
+  // asked for and says nothing about it — a census reporting the wrong fleet
+  // is worse than one that refuses. This is the census's own input being
+  // wrong, so it exits 2 like any other usage error and never as a finding.
+  const VALUE_FLAGS = ["--roster", "--scan", "--depth", "--reference"];
+  if (VALUE_FLAGS.includes(flag) && value === undefined) {
+    process.stderr.write(`${flag} requires a value\n`);
+    process.exit(2);
+  }
+  if (flag === "--roster") {
+    options.roster = value;
+    index += 1;
+  } else if (flag === "--scan") {
+    options.scans.push(value);
+    index += 1;
+  } else if (flag === "--depth") {
+    options.depth = Number.parseInt(value ?? "", 10);
+    index += 1;
+  } else if (flag === "--reference") {
+    options.reference = value;
+    index += 1;
+  } else if (flag === "--redact") {
+    options.redact = true;
+  } else if (flag === "--json") {
+    options.json = true;
+  } else if (flag === "--help" || flag === "-h") {
+    process.stdout.write(
+      "Usage: node scripts/lisa-enforcement-census.mjs [--roster <path>] [--scan <dir>] [--depth <n>] [--reference <ver>] [--redact] [--json]\n"
+    );
+    process.exit(0);
+  } else {
+    process.stderr.write(`Unknown option: ${flag}\n`);
+    process.exit(2);
+  }
+}
+
+if (!Number.isInteger(options.depth) || options.depth < 0) {
+  process.stderr.write("--depth must be a non-negative integer\n");
+  process.exit(2);
+}
+
+const rosterPath =
+  options.roster ?? path.join(repoRoot, census.DEFAULT_ROSTER_FILE);
+const rosterEntries = await census.readFleetRoster(rosterPath);
+
+// An explicitly named roster that cannot be read is an input error, not a
+// finding: the operator asked for a specific file and did not get it. A missing
+// DEFAULT roster is neither — this repository is simply not a fleet hub — so it
+// reports an empty fleet and still exits 0.
+if (rosterEntries === null && options.roster !== null) {
+  process.stderr.write(`Could not read the roster: ${rosterPath}\n`);
+  process.exit(1);
+}
+
+const scanned = (
+  await Promise.all(
+    options.scans.map(directory =>
+      census.scanForCheckouts(directory, options.depth)
+    )
+  )
+).flat();
+
+const roster = await census.dedupeRoster([
+  ...(rosterEntries ?? []),
+  ...scanned,
+]);
+
+const origins = [
+  rosterEntries === null ? null : rosterPath,
+  ...options.scans.map(directory => `scan of ${directory}`),
+].filter(Boolean);
+
+const seedVersion = await import(path.join(repoRoot, "package.json"), {
+  with: { type: "json" },
+})
+  .then(module => module.default.version ?? null)
+  .catch(() => null);
+
+const measured = await census.runFleetCensus({
+  roster,
+  rosterOrigin: origins.length === 0 ? "no roster found" : origins.join(" + "),
+  seedVersion,
+  reference: options.reference,
+});
+
+const output = options.redact ? report.redactCensus(measured) : measured;
+
+process.stdout.write(
+  options.json
+    ? `${JSON.stringify(output, null, 2)}\n`
+    : report.renderFleetCensusReport(output)
+);
+
+// Unconditional. Nothing above may change it.
+//
+// Set rather than called: `process.exit()` tears the process down synchronously
+// and can drop a pending `process.stdout.write` when stdout is a pipe, which is
+// exactly how this is read — piped to a pager, a file, or a scheduled loop's
+// log. A truncated census reports a smaller fleet than it measured, silently.
+process.exitCode = 0;

package/scripts/lisa-enforcement-fallback.sh

@@ -404,10 +404,33 @@ fi
 #   - `main` cut 80 releases in 24 hours, median gap 10 minutes. "Behind the
 #     newest Lisa on this disk" is the DEFAULT state of a checkout within
 #     minutes of being cut, through nothing anyone did wrong.
-#   - Across the 27 host checkouts in this fleet, 12 resolve guards at all, and
-#     ALL TWELVE are behind or undateable. None is current. Eight carry no
-#     apply receipt; four are behind by a whole MAJOR (3.23.0, 3.23.1, 3.46.3,
-#     3.54.4 against 4.17.2).
+#   - Measured once across the host checkouts on one fleet: of those that
+#     resolved guards at all, every one was behind or undateable and none was
+#     current, several by a whole MAJOR — while a larger number resolved NO
+#     guard at all.
+#
+# That second reading used to be written here as a set of counts, and that was
+# the wrong place for it. A number in a comment is a measurement, not a monitor:
+# it was true on the day it was taken and nothing re-took it, so the drift after
+# that date was unobserved — which is the same defect the number documents. The
+# counts are therefore not restated here. Re-derive them:
+#
+# Run these FROM A LISA MONOREPO CHECKOUT — the census and the fleet roster are
+# Lisa-monorepo artifacts, and this comment travels into host projects where
+# neither exists. The script wrapper builds `dist/` first, which a fresh clone
+# does not have:
+#
+#   bun run lisa:enforcement-census              # roster on this machine
+#   bun run lisa:enforcement-census -- --redact  # safe to quote publicly
+#
+# In a host project the local half of the same question is `lisa doctor`, which
+# reports what THIS checkout resolves and needs no roster.
+#
+# The census reports and never gates, and it keeps "resolves NO guard" apart
+# from "resolves something old" — different failures, different remedies, and
+# folding them is what made the unenforced checkouts easy to miss
+# (CodySwannGT/lisa#3490). `lisa doctor` carries the same finding for the single
+# checkout it is run in.
 #
 # So no distance threshold rescues it — even the strictest version predicate is
 # permanently true across the fleet. The noise is the REPETITION, not the