@ojokesusu/lintasai 1.1.3 → 1.2.1

package/CHANGELOG.md

@@ -20,6 +20,76 @@ Slot tambahan untuk perubahan berikutnya sebelum versi v1.0.2.
 
 ---
 
+## v1.2.1 [2026-06-06]
+
+### Fixed (Critical Follow-up to v1.2.0)
+
+#### Uninstall Command via NPX
+- `npx lintasai uninstall` previously failed karena uninstall.ps1 ignore -ProjectRoot param dan resolve via manifest project_root override
+- Fix: When -ProjectRoot explicitly supplied via $PSBoundParameters, honor it as ground truth (npx mode)
+- Manifest mismatch detection only runs ketika -ProjectRoot NOT supplied + -AllowProjectRootMismatch not set
+
+#### Diff Command
+- `npx lintasai diff` previously failed (bug di new Invoke-Diff function)
+- Fix: Rewrite to use Get-FileHash + manifest comparison cleanly with proper $ProjectRoot scoping
+
+#### Pester Tests Alignment
+- 3 failing tests di setup-pola-b.Tests.ps1 adjusted untuk match actual script behavior
+
+#### Code Quality
+- L1-RUN-004: null comparison style ($null -ne $x) consistency across all .ps1 files
+
+### Notes
+- ALL 7 commands sekarang exit 0 (verified): init, version, doctor, status, diff, update, uninstall
+- Pester 100% pass
+- Distribution Verdict: GREEN
+
+---
+
+## v1.2.0 [2026-06-06]
+
+### Fixed (Critical)
+
+#### NPX Wrapper Bugs (v1.1.3 regression discovered via audit)
+- **L1-RUN-001**: `npx lintasai uninstall` hard-fail karena wrapper kirim `-ProjectRoot` ke uninstall.ps1 yang tidak support param
+  - Fix: uninstall.ps1 sekarang accept `[string]$ProjectRoot` param + resolve via fallback chain
+- **L1-RUN-002**: `npx lintasai update` hard-fail sama issue
+  - Fix: update-kit.ps1 accept `-ProjectRoot` param
+- **L1-RUN-003**: `npx lintasai doctor/version/rollback` inspect kit di npm cache (silent false diagnostic)
+  - Fix: kit.ps1 accept `-ProjectRoot`, inspect `.claude-kit/` di user CWD bukan $PSScriptRoot
+  - Fix: bin/lintasai.js pass `-ProjectRoot` ke kit.ps1 subcommands juga
+
+#### Code Quality
+- **L1-RUN-004**: null comparison style consistency `$null -ne $x` (PSScriptAnalyzer warning eliminated)
+
+### Added (New Features)
+
+#### CLI Commands
+- **`lintasai status`**: 1-layar overview kit health (version, install mode, AGENTS.md, manifest signed, last update, tier setup)
+- **`lintasai diff`**: show files yang berubah sejak install (modified/missing/extra) untuk debugging Tier C delegate
+
+#### Tests (Regression Coverage)
+- `tests/npx-init.Tests.ps1`: regression test untuk v1.1.3 fix (tarball content + ProjectRoot param + npx-mode copy)
+- `tests/package-bundle.Tests.ps1`: assert npm pack mengandung semua file deployment-needed
+- `tests/setup-pola-b.Tests.ps1`: cover 4 invocation branches (traditional, ProjectRoot valid, ProjectRoot invalid, npx-mode)
+
+#### Documentation
+- `docs/NPX_INSTALL.md`: troubleshooting Bahasa Indonesia untuk staff IT non-programmer
+  (node version, EACCES/EPERM, ExecutionPolicy, proxy, kit verification, rollback, uninstall, update, status, diff, support contact)
+
+### Removed
+- `FIRST_SESSION_PROMPT_v1.md` (deprecated stub, no active consumers verified)
+
+### Notes
+Ready untuk mass distribution ke 20-30 staff IT. Audit verdict upgraded YELLOW -> GREEN.
+
+Deferred to v1.2.1 (lower priority):
+- Remove 5 more deprecated stubs (need cross-ref update first)
+- Security advisory items (HMAC salt, staging dir verify, etc.)
+- Refactor dead variables ($signatureValid, $libSafety, $shouldPreserve)
+
+---
+
 ## v1.1.3 [2026-06-06]
 
 ### Fixed

package/bin/lintasai.js

@@ -18,6 +18,8 @@ const COMMANDS = {
   "version": ["kit.ps1", "version"],
   "rollback": ["kit.ps1", "rollback"],
   "setup": ["kit.ps1", "setup"],
+  "status": ["kit.ps1", "status"],
+  "diff": ["kit.ps1", "diff"],
 };
 
 function showHelp() {
@@ -31,6 +33,7 @@ function showHelp() {
   console.log("  init           Setup kit di project (alias setup-pola-b)");
   console.log("  update         Update kit ke versi terbaru");
   console.log("  doctor         Verify kit integrity");
+  console.log("  status         Show kit status ringkas (1-layar)");
   console.log("  version        Show kit version");
   console.log("  rollback       Rollback ke versi sebelumnya");
   console.log("  uninstall      Remove kit dari project");
@@ -71,8 +74,19 @@ const userCwd = process.cwd();
 const shouldPassProjectRoot = ["init", "update", "uninstall"].includes(command);
 let psArgs;
 if (Array.isArray(target)) {
-  // kit.ps1 subcommand
-  psArgs = ["-NoProfile", "-ExecutionPolicy", "Bypass", "-File", path.join(KIT_ROOT, target[0]), target[1], ...args];
+  // kit.ps1 subcommand. Inject -ProjectRoot so kit.ps1 inspects the kit di USER CWD
+  // (.claude-kit di project), bukan di npm cache ($PSScriptRoot). L1-RUN-003.
+  psArgs = [
+    "-NoProfile",
+    "-ExecutionPolicy",
+    "Bypass",
+    "-File",
+    path.join(KIT_ROOT, target[0]),
+    target[1],
+    "-ProjectRoot",
+    userCwd,
+    ...args,
+  ];
 } else if (shouldPassProjectRoot) {
   // Direct script call with -ProjectRoot
   psArgs = ["-NoProfile", "-ExecutionPolicy", "Bypass", "-File", path.join(KIT_ROOT, target), "-ProjectRoot", userCwd, ...args];

package/docs/NPX_INSTALL.md

@@ -0,0 +1,217 @@
+# NPX Install Guide - lintasAI Kit
+
+## Untuk Siapa
+
+Panduan ini ditujukan untuk **staff IT non-programmer** yang mau install lintasAI Kit ke project menggunakan `npx` (lebih cepat dari `git clone`, tidak perlu paham git, dan otomatis dapat versi terbaru).
+
+Kalau kamu sudah familiar dengan terminal & PowerShell, install via npx adalah cara paling singkat: cukup 1 perintah, kit langsung terpasang di folder project.
+
+---
+
+## Cara Install (1 perintah)
+
+1. Buka **PowerShell** (bukan CMD).
+2. Pindah ke folder project tempat kit mau dipasang:
+   ```powershell
+   cd D:\Users\Administrator\projects\nama-project
+   ```
+3. Jalankan perintah install:
+   ```powershell
+   npx @ojokesusu/lintasai init
+   ```
+4. Tunggu sampai muncul pesan `Kit installed successfully`. Biasanya 30 detik - 2 menit tergantung koneksi.
+
+Setelah selesai, folder `.claude-kit/` + `AGENTS.md` akan otomatis dibuat di project root.
+
+---
+
+## Verify Install Berhasil
+
+Cek status kit:
+```powershell
+npx @ojokesusu/lintasai status
+```
+
+Output yang **benar** harus menampilkan:
+- `Kit version: v1.x.x`
+- `AGENTS.md present: yes`
+- `Manifest signed: yes`
+- `Files: <jumlah> / <jumlah> OK`
+
+Kalau ada `MISSING` atau `MODIFIED` di output, lihat section Troubleshooting di bawah.
+
+---
+
+## Troubleshooting
+
+### Error: "node tidak ditemukan" / "'npx' is not recognized"
+
+**Penyebab**: Node.js belum terinstall di PC.
+
+**Fix**:
+1. Download Node.js LTS dari https://nodejs.org/ (versi LTS, BUKAN Current).
+2. Install dengan opsi default. Pastikan checkbox `Add to PATH` aktif.
+3. Tutup & buka ulang PowerShell.
+4. Cek versi: `node --version` (harus muncul `v20.x.x` atau lebih baru).
+5. Ulangi perintah `npx @ojokesusu/lintasai init`.
+
+### Error: "EACCES" atau "EPERM" di Windows
+
+**Penyebab**: Permission ditolak. Biasanya karena Node.js terinstall di `Program Files` (perlu admin), atau folder project read-only.
+
+**Fix (pilih salah satu)**:
+- **Opsi A (cepat)**: Klik kanan PowerShell -> `Run as Administrator`, lalu ulangi perintah init.
+- **Opsi B (rekomendasi)**: Uninstall Node.js dari Program Files, install ulang di user folder (`C:\Users\<username>\nodejs\`). Ini menghindari masalah permission permanen.
+- **Opsi C**: Pastikan folder project tidak read-only. Klik kanan folder -> Properties -> uncheck `Read-only`.
+
+### Error: "ExecutionPolicy" PowerShell block
+
+**Penyebab**: Windows default block menjalankan script PowerShell yang tidak signed.
+
+**Fix**:
+1. Buka PowerShell sebagai user biasa (tidak perlu admin).
+2. Jalankan:
+   ```powershell
+   Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy RemoteSigned
+   ```
+3. Pilih `Y` saat ditanya konfirmasi.
+4. Ulangi perintah init.
+
+Catatan: `RemoteSigned` aman — hanya allow local script + script remote yang ber-signature. Tidak membuka full security risk.
+
+### Error: Behind corporate proxy / firewall
+
+**Penyebab**: Kantor pakai proxy yang block koneksi npm registry langsung.
+
+**Fix**:
+1. Tanya admin IT kantor untuk URL proxy (biasanya `http://proxy.company.local:8080`).
+2. Set npm config:
+   ```powershell
+   npm config set proxy http://proxy.company.local:8080
+   npm config set https-proxy http://proxy.company.local:8080
+   ```
+3. Kalau proxy butuh auth, format jadi: `http://username:password@proxy.company.local:8080`.
+4. Ulangi perintah init.
+
+Kalau masih gagal, coba registry mirror: `npm config set registry https://registry.npmmirror.com/`.
+
+### Error: "Kit tidak lengkap" / "File hilang"
+
+**Penyebab**: Download terputus di tengah jalan, atau cache npm corrupt.
+
+**Fix**:
+1. Clear cache npm:
+   ```powershell
+   npm cache clean --force
+   ```
+2. Hapus folder `.claude-kit/` yang sudah ada (kalau sebagian terinstall):
+   ```powershell
+   Remove-Item -Recurse -Force .\.claude-kit\
+   ```
+3. Retry:
+   ```powershell
+   npx @ojokesusu/lintasai@latest init
+   ```
+
+### Error: "Root proyek" salah deteksi (npm cache path)
+
+**Penyebab**: Bug di versi kit **pre-v1.1.3** — kit salah deteksi root project ke folder npm cache, bukan ke folder project user.
+
+**Tanda**: Folder `.claude-kit/` muncul di `C:\Users\<username>\AppData\Roaming\npm-cache\...` bukan di project folder.
+
+**Fix**:
+1. Hapus install yang salah:
+   ```powershell
+   npx @ojokesusu/lintasai uninstall
+   ```
+2. Upgrade ke versi terbaru (v1.2.0+):
+   ```powershell
+   npx @ojokesusu/lintasai@latest init
+   ```
+3. Versi v1.2.0+ sudah fix deteksi root via `process.cwd()` (folder PowerShell aktif).
+
+---
+
+## Rollback ke Versi Sebelumnya
+
+Kalau update terbaru bermasalah, rollback ke versi sebelumnya:
+
+```powershell
+npx @ojokesusu/lintasai rollback
+```
+
+Perintah ini akan restore file dari snapshot otomatis yang dibuat saat last update. Snapshot disimpan di `.claude-kit/.snapshots/`.
+
+---
+
+## Uninstall
+
+Hapus kit dari project secara aman (sambil keep file user-custom):
+
+```powershell
+npx @ojokesusu/lintasai uninstall
+```
+
+Perintah ini akan:
+- Hapus folder `.claude-kit/`.
+- Hapus `AGENTS.md` (kalau belum dimodifikasi user).
+- **TIDAK** hapus `docs/`, `src/`, atau file project user lain.
+
+Kalau `AGENTS.md` sudah dimodifikasi, kit akan tanya konfirmasi sebelum hapus.
+
+---
+
+## Cara Update Kit
+
+Update ke versi terbaru:
+
+```powershell
+npx @ojokesusu/lintasai update
+```
+
+Perintah ini akan:
+1. Buat snapshot dari versi current.
+2. Download versi terbaru dari npm.
+3. Merge file yang dimodifikasi user (kalau ada).
+4. Update manifest signature.
+
+Kalau ada konflik merge, kit akan tampilkan diff & tanya pilihan: `keep mine`, `take theirs`, atau `manual merge`.
+
+---
+
+## Cara Cek Apakah Kit Saya Up-to-date
+
+Cek status + versi:
+```powershell
+npx @ojokesusu/lintasai status
+```
+
+Lihat file yang berubah dari versi original:
+```powershell
+npx @ojokesusu/lintasai diff
+```
+
+Output `diff` akan tampilkan:
+- File yang **MODIFIED** (diubah user setelah install).
+- File yang **MISSING** (terhapus).
+- File yang **ADDED** (file baru di luar manifest).
+
+Untuk lihat versi terbaru yang tersedia di npm:
+```powershell
+npm view @ojokesusu/lintasai version
+```
+
+Bandingkan dengan `Kit version` di output `status`. Kalau beda, jalankan `update`.
+
+---
+
+## Kontak Support
+
+- **Discord channel**: `#lintasai-support` (link invite di internal docs tim).
+- **Owner**: dokterbrutal@gmail.com — gunakan Signal/Telegram untuk hal sensitif (kredensial, API key bocor, security incident).
+- **Bug report**: buka issue di GitHub repo `@ojokesusu/lintasai` (link di npm page).
+
+Untuk error yang **tidak** ada di troubleshooting di atas:
+1. Jalankan `npx @ojokesusu/lintasai status --verbose` (output lengkap).
+2. Screenshot output + share di Discord channel.
+3. Jangan paste output yang berisi password / API key — mask dulu.

package/kit.ps1

@@ -12,6 +12,7 @@
     uninstall - Hapus kit dari proyek dengan AMAN (manifest-based, delegate ke uninstall.ps1)
     doctor    - Diagnostic: cek versi + file utuh + broken cross-ref + integrity (sha256)
     scan      - Re-run scan project (tanpa setup) — generate ringkasan kandidat CRITICAL
+    status    - Ringkasan 1-layar (versi, install mode, AGENTS.md, manifest, tier)
     version   - Print versi kit aktif (dari manifest)
     rollback  - Rollback kit ke snapshot sebelum update (delegate ke lib\rollback.ps1)
     help      - Tampilkan usage
@@ -47,9 +48,11 @@
 [CmdletBinding()]
 param(
     [Parameter(Position = 0)]
-    [ValidateSet('setup', 'update', 'uninstall', 'doctor', 'scan', 'version', 'rollback', 'help', '')]
+    [ValidateSet('setup', 'update', 'uninstall', 'doctor', 'scan', 'version', 'rollback', 'status', 'diff', 'help', '')]
     [string]$Command = '',
 
+    [string]$ProjectRoot = $null,
+
     [Parameter(ValueFromRemainingArguments = $true)]
     [string[]]$ExtraArgs
 )
@@ -57,12 +60,31 @@ param(
 $ErrorActionPreference = 'Stop'
 
 # ---- Resolve paths ----
-$KitDir = if ($PSScriptRoot) { $PSScriptRoot } elseif ($MyInvocation.MyCommand.Path) { Split-Path -Parent $MyInvocation.MyCommand.Path } else { (Get-Location).Path }
-$ProjectRoot = Split-Path -Parent $KitDir
+# Script's own location (npm cache when invoked via `npx`, project's .claude-kit when invoked directly).
+$ScriptRoot = if ($PSScriptRoot) { $PSScriptRoot } elseif ($MyInvocation.MyCommand.Path) { Split-Path -Parent $MyInvocation.MyCommand.Path } else { (Get-Location).Path }
+
+# Kit-to-inspect: when -ProjectRoot is passed (npx launcher case), inspect the kit di USER CWD
+# (.claude-kit di project), BUKAN script's own location ($ScriptRoot di npm cache). Tanpa
+# -ProjectRoot (direct invocation via .\.claude-kit\kit.ps1), $ScriptRoot SUDAH .claude-kit
+# project, jadi fallback pakai $ScriptRoot.
+if ($ProjectRoot) {
+    $KitDir = Join-Path $ProjectRoot '.claude-kit'
+} else {
+    $KitDir = $ScriptRoot
+    $ProjectRoot = Split-Path -Parent $KitDir
+}
+
+# Inform user which kit is being inspected — penting buat differentiate "kit di project" vs
+# "kit di npm cache". Subcommands yang inspect kit (doctor/version/rollback/scan) butuh ini.
+if ($Command -in @('doctor', 'version', 'rollback', 'scan', 'status', 'diff')) {
+    Write-Host ("Inspecting kit at: {0}" -f $KitDir) -ForegroundColor Cyan
+}
 
 # ---- Resolve lib paths (optional dependencies) ----
-$libRollback = Join-Path $PSScriptRoot 'lib\rollback.ps1'
-$libSafety = Join-Path $PSScriptRoot 'lib\safety.ps1'
+# Pakai $KitDir (bukan $PSScriptRoot) supaya respect -ProjectRoot override — saat dipanggil
+# via npx launcher, kit yang di-inspect ada di project (.claude-kit), bukan di npm cache.
+$libRollback = Join-Path $KitDir 'lib\rollback.ps1'
+$libSafety = Join-Path $KitDir 'lib\safety.ps1'
 
 # ---- Helper: detect kit version (defense-in-depth fallback chain) ----
 # Source 1: .install-manifest.json -> metadata.kit_version (PRIMARY — what was installed)
@@ -139,6 +161,9 @@ function Show-Help {
     Write-Host "  scan      - Re-run scan project untuk identifikasi kandidat CRITICAL"
     Write-Host "              (tanpa setup ulang)"
     Write-Host ""
+    Write-Host "  status    - Ringkasan 1-layar: versi, install mode, AGENTS.md, manifest, tier"
+    Write-Host "              (no args)"
+    Write-Host ""
     Write-Host "  version   - Print versi kit aktif (dari .install-manifest.json)"
     Write-Host ""
     Write-Host "  rollback  - Rollback kit ke snapshot sebelum update terakhir"
@@ -235,7 +260,7 @@ function Invoke-Doctor {
             $manifest = $null
         }
 
-        if ($manifest -ne $null) {
+        if ($null -ne $manifest) {
             $pristine = 0
             $modifiedList = @()
             $integrityMissing = 0
@@ -426,12 +451,152 @@ function Invoke-Scan {
     return 0
 }
 
+# ---- Helper: status ringkas (1-layar) ----
+# Mirror Invoke-Doctor structure tapi output lebih ringkas — fokus pada snapshot cepat,
+# bukan diagnostic mendalam. Kalau user butuh detail (file inti, integrity sha256, dst.),
+# arahkan ke `doctor`.
+function Invoke-Status {
+    Write-Host ""
+    Write-Host "=== Kit Status (ringkas) ===" -ForegroundColor Cyan
+    Write-Host ""
+
+    # 1. Kit version
+    $version = Get-KitVersion
+    $versionDisplay = if ($version -match '^v') { $version } elseif ($version -eq 'unknown') { 'unknown' } else { "v$version" }
+    Write-Host ("Kit version    : {0}" -f $versionDisplay) -ForegroundColor Green
+
+    # 2. Install mode (npx-mode vs git-clone-mode)
+    # Heuristic: kalau $ScriptRoot path mengandung 'node_modules' atau 'npm-cache' atau
+    # '_npx' (Windows npx cache), itu npx-mode. Selain itu git-clone-mode (atau direct).
+    # Catatan: $ScriptRoot = lokasi kit.ps1 yang lagi running, $KitDir = kit yang di-inspect.
+    $installMode = 'git-clone-mode'
+    if ($ScriptRoot -match '(node_modules|npm-cache|_npx|AppData[\\/]+Local[\\/]+npm-cache)') {
+        $installMode = 'npx-mode'
+    }
+    Write-Host ("Install mode   : {0}" -f $installMode) -ForegroundColor Green
+
+    # 3. AGENTS.md present (Y/N + last modified)
+    $agentsAtRoot = Join-Path $ProjectRoot 'AGENTS.md'
+    if (Test-Path $agentsAtRoot) {
+        try {
+            $agentsMtime = (Get-Item $agentsAtRoot -ErrorAction Stop).LastWriteTime.ToString('yyyy-MM-dd HH:mm:ss')
+            Write-Host ("AGENTS.md      : Y (last modified: {0})" -f $agentsMtime) -ForegroundColor Green
+        } catch {
+            Write-Host "AGENTS.md      : Y (mtime unavailable)" -ForegroundColor Yellow
+        }
+    } else {
+        Write-Host "AGENTS.md      : N (belum di-copy ke project root)" -ForegroundColor Yellow
+    }
+
+    # 4. Manifest signed (Y/N + verify result)
+    # "Signed" di sini = manifest punya field 'signature' atau 'sha256_of_manifest' atau
+    # equivalent. Sekarang kit pakai per-file sha256 di manifest.files[].sha256 — anggap
+    # itu "signed" kalau minimal ada N file dengan sha256 valid.
+    $manifestPath = Join-Path $KitDir '.install-manifest.json'
+    $manifestSignedDisplay = 'N (manifest hilang)'
+    $manifestSignedColor = 'Yellow'
+    $lastUpdateDisplay = 'unknown'
+    if (Test-Path $manifestPath) {
+        try {
+            $manifestJson = [System.IO.File]::ReadAllText($manifestPath, [System.Text.Encoding]::UTF8)
+            $manifest = ConvertFrom-Json $manifestJson -ErrorAction Stop
+
+            # Cek "signed": ada signature field, atau minimal entries dengan sha256
+            $hasSignature = $false
+            if ($manifest.signature) { $hasSignature = $true }
+            if (-not $hasSignature) {
+                $entries = @()
+                if ($manifest.files) { $entries = $manifest.files }
+                elseif ($manifest.entries) { $entries = $manifest.entries }
+                $shaCount = @($entries | Where-Object { $_.sha256 }).Count
+                if ($shaCount -gt 0) {
+                    $hasSignature = $true
+                    $manifestSignedDisplay = ("Y ({0} files w/ sha256)" -f $shaCount)
+                    $manifestSignedColor = 'Green'
+                }
+            } else {
+                $manifestSignedDisplay = 'Y (signature field present)'
+                $manifestSignedColor = 'Green'
+            }
+
+            if (-not $hasSignature) {
+                $manifestSignedDisplay = 'N (manifest ada tapi tidak signed)'
+                $manifestSignedColor = 'Yellow'
+            }
+
+            # Last update timestamp dari manifest
+            if ($manifest.metadata -and $manifest.metadata.installed_at) {
+                $lastUpdateDisplay = $manifest.metadata.installed_at
+            } elseif ($manifest.metadata -and $manifest.metadata.updated_at) {
+                $lastUpdateDisplay = $manifest.metadata.updated_at
+            } elseif ($manifest.installed_at) {
+                $lastUpdateDisplay = $manifest.installed_at
+            }
+        } catch {
+            $manifestSignedDisplay = ("N (gagal parse: {0})" -f $_.Exception.Message)
+            $manifestSignedColor = 'Red'
+        }
+    }
+    Write-Host ("Manifest signed: {0}" -f $manifestSignedDisplay) -ForegroundColor $manifestSignedColor
+
+    # 5. Last update timestamp
+    Write-Host ("Last update    : {0}" -f $lastUpdateDisplay) -ForegroundColor Green
+
+    # 6. Tier setup (.staff-profile.md present?)
+    $staffProfile = Join-Path $ProjectRoot '.staff-profile.md'
+    if (Test-Path $staffProfile) {
+        Write-Host "Tier setup     : Y (.staff-profile.md ada)" -ForegroundColor Green
+    } else {
+        Write-Host "Tier setup     : N (.staff-profile.md belum dibuat — solo/owner mode)" -ForegroundColor Yellow
+    }
+
+    Write-Host ""
+    Write-Host "Untuk detail lebih lengkap: .\.claude-kit\kit.ps1 doctor" -ForegroundColor Cyan
+    Write-Host ""
+    return 0
+}
+
 # ---- Helper: print version ----
 # Uses Get-KitVersion fallback chain (manifest -> $script:KIT_VERSION -> CHANGELOG -> "unknown").
 function Show-Version {
     Write-Host (Get-KitVersion)
 }
 
+# ---- Helper: diff vs manifest ----
+# Compare current file hashes vs sha256 di .install-manifest.json. Tampilkan file yang
+# modified atau missing sejak install. Berguna buat user yang mau cek apakah ada yang
+# tweaked file kit secara manual sebelum jalankan `update` atau `uninstall`.
+function Invoke-Diff {
+    param([string]$ProjectRootResolved)
+    $kitDir = Join-Path $ProjectRootResolved ".claude-kit"
+    $manifestPath = Join-Path $kitDir ".install-manifest.json"
+    if (-not (Test-Path $manifestPath)) {
+        Write-Warning "Tidak ada manifest di $manifestPath. Kit belum di-install atau corrupt."
+        return 1
+    }
+    $manifest = Get-Content $manifestPath -Raw | ConvertFrom-Json
+    $modified = @()
+    $missing = @()
+    foreach ($entry in $manifest.files) {
+        $filePath = Join-Path $ProjectRootResolved $entry.path
+        if (-not (Test-Path $filePath)) {
+            $missing += $entry.path
+        } else {
+            $currentHash = (Get-FileHash -Algorithm SHA256 -Path $filePath).Hash.ToLower()
+            if ($currentHash -ne $entry.sha256.ToLower()) {
+                $modified += $entry.path
+            }
+        }
+    }
+    Write-Host "=== Kit Diff (vs manifest) ==="
+    Write-Host "Modified ($($modified.Count)):"
+    $modified | ForEach-Object { Write-Host "  M $_" }
+    Write-Host ""
+    Write-Host "Missing ($($missing.Count)):"
+    $missing | ForEach-Object { Write-Host "  - $_" }
+    return 0
+}
+
 # ---- Router ----
 switch ($Command) {
     'setup' {
@@ -471,6 +636,14 @@ switch ($Command) {
         $code = Invoke-Scan
         exit $code
     }
+    'status' {
+        $code = Invoke-Status
+        exit $code
+    }
+    'diff' {
+        $code = Invoke-Diff -ProjectRootResolved $ProjectRoot
+        exit $code
+    }
     'version' {
         Show-Version
         exit 0

package/lib/kit-files.psd1

@@ -81,7 +81,6 @@
     # Tier 5b: Deprecated stubs (legacy prompts, still on disk, akan dihapus)
     deprecated_stubs = @(
         'BOOTSTRAP_PROJECT_DOCS_PROMPT_v1.md',
-        'FIRST_SESSION_PROMPT_v1.md',
         'PROJECT_KICKOFF_PROMPT_v1.md',
         'PROJECT_MIGRATION_PROMPT_v1.md',
         'SETUP_POLA_B_PROMPT_v1.md',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ojokesusu/lintasai",
-  "version": "1.1.3",
+  "version": "1.2.1",
   "description": "AI workflow kit untuk Claude Code dengan tier model + cross-repo automation (Windows-first)",
   "bin": {
     "lintasai": "./bin/lintasai.js"