@arthai/agents 1.0.9 → 1.0.11

package/VERSION

@@ -1 +1 @@
-1.0.9
+1.0.11

package/dist/plugins/canvas/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "canvas",
   "description": "Design-driven development — adversarial design critique + frontend",
-  "version": "1.0.9",
+  "version": "1.0.11",
   "author": {
     "name": "Arth AI"
   }

package/dist/plugins/canvas/VERSION

@@ -1 +1 @@
-1.0.9
+1.0.11

package/dist/plugins/canvas/hooks/hooks.json

@@ -11,6 +11,18 @@
           }
         ]
       }
+    ],
+    "UserPromptSubmit": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "${CLAUDE_PLUGIN_ROOT}/hooks/project-setup.sh",
+            "timeout": 5
+          }
+        ]
+      }
     ]
   }
 }

package/dist/plugins/canvas/hooks/project-setup.sh

@@ -37,14 +37,86 @@ MANAGED_START="<!-- >>> claude-agents toolkit (DO NOT EDIT THIS BLOCK) >>> -->"
 MANAGED_END="<!-- <<< claude-agents toolkit <<< -->"
 GITIGNORE_START="# >>> claude-agents managed (DO NOT EDIT THIS BLOCK) >>>"
 
-# Check marker file — skip if current version is already set up
+# Check marker file — skip SETUP if current version is already done
+# But ALWAYS run license check (even if setup is done)
+SETUP_NEEDED=true
 if [ -f "$MARKER_FILE" ]; then
     STORED_VERSION=$(cat "$MARKER_FILE" 2>/dev/null | tr -d '[:space:]' || echo "")
     if [ "$STORED_VERSION" = "$TOOLKIT_VERSION" ]; then
-        exit 0
+        SETUP_NEEDED=false
     fi
 fi
 
+# ---------------------------------------------------------------------------
+# License validation (marketplace gate)
+# ---------------------------------------------------------------------------
+# Check key: ARTHAI_LICENSE_KEY env → ~/.claude-agents/.license → ~/.arthai/license
+WORKER_URL="https://license-worker.muddassar-shaikh.workers.dev"
+KEY_FORMAT='^ARTH-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}$'
+LICENSE_CACHE="$PROJECT_DIR/.claude/.license-validated"
+CACHE_TTL=86400
+
+REAL_HOME=$(eval echo ~"$(id -un)")
+LICENSE_KEY="${ARTHAI_LICENSE_KEY:-}"
+[ -z "$LICENSE_KEY" ] && [ -f "$REAL_HOME/.claude-agents/.license" ] && LICENSE_KEY=$(cat "$REAL_HOME/.claude-agents/.license" 2>/dev/null | tr -d '[:space:]')
+[ -z "$LICENSE_KEY" ] && [ -f "$REAL_HOME/.arthai/license" ] && LICENSE_KEY=$(cat "$REAL_HOME/.arthai/license" 2>/dev/null | tr -d '[:space:]')
+
+if [ -z "$LICENSE_KEY" ]; then
+    echo "LICENSE REQUIRED — No license key found for marketplace plugin."
+    echo "Run: npx @arthai/agents activate ARTH-XXXX-XXXX-XXXX-XXXX"
+    echo "Get a key: productive@getarth.ai"
+    exit 0
+fi
+
+# Validate format
+if ! echo "$LICENSE_KEY" | grep -qE "$KEY_FORMAT"; then
+    echo "LICENSE INVALID — Key format incorrect."
+    exit 0
+fi
+
+# Check cache (24h TTL)
+LICENSE_VALID=false
+NOW=$(date +%s)
+if [ -f "$LICENSE_CACHE" ]; then
+    CACHED_TIME=$(cat "$LICENSE_CACHE" 2>/dev/null | tr -d '[:space:]' || echo "0")
+    ELAPSED=$((NOW - CACHED_TIME))
+    if [ "$ELAPSED" -ge 0 ] && [ "$ELAPSED" -lt "$CACHE_TTL" ]; then
+        LICENSE_VALID=true
+    fi
+fi
+
+if ! $LICENSE_VALID; then
+    # Call Worker — same logic as sync-agents.sh
+    PAYLOAD=$(printf '{"key":"%s"}' "$LICENSE_KEY")
+    RESPONSE=$(printf '%s' "$PAYLOAD" | curl -sf -m 5 -X POST "$WORKER_URL/validate" \
+        -H "Content-Type: application/json" --data "@-" 2>/dev/null) || RESPONSE=""
+
+    if [ -n "$RESPONSE" ]; then
+        VALID=$(echo "$RESPONSE" | python3 -c "import json,sys; print(json.load(sys.stdin).get('valid',False))" 2>/dev/null) || VALID="False"
+        if [ "$VALID" = "True" ]; then
+            LICENSE_VALID=true
+            mkdir -p "$PROJECT_DIR/.claude"
+            echo "$NOW" > "$LICENSE_CACHE"
+        else
+            # Definitive invalid — no fallback
+            echo "LICENSE INVALID — Key not recognized."
+            echo "Check your key or get one at productive@getarth.ai"
+            exit 0
+        fi
+    else
+        # Network error — allow gracefully (don't block on Worker outage)
+        LICENSE_VALID=true
+    fi
+fi
+
+# ---------------------------------------------------------------------------
+# Project setup (only runs if license is valid AND setup is needed)
+# ---------------------------------------------------------------------------
+
+if ! $SETUP_NEEDED; then
+    exit 0
+fi
+
 CLAUDE_MD="$PROJECT_DIR/CLAUDE.md"
 GITIGNORE="$PROJECT_DIR/.gitignore"
 

package/dist/plugins/compass/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "compass",
   "description": "Product strategy — PM, GTM, user research, content strategy",
-  "version": "1.0.9",
+  "version": "1.0.11",
   "author": {
     "name": "Arth AI"
   }

package/dist/plugins/compass/VERSION

@@ -1 +1 @@
-1.0.9
+1.0.11

package/dist/plugins/compass/hooks/hooks.json

@@ -11,6 +11,18 @@
           }
         ]
       }
+    ],
+    "UserPromptSubmit": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "${CLAUDE_PLUGIN_ROOT}/hooks/project-setup.sh",
+            "timeout": 5
+          }
+        ]
+      }
     ]
   }
 }

package/dist/plugins/compass/hooks/project-setup.sh

@@ -37,14 +37,86 @@ MANAGED_START="<!-- >>> claude-agents toolkit (DO NOT EDIT THIS BLOCK) >>> -->"
 MANAGED_END="<!-- <<< claude-agents toolkit <<< -->"
 GITIGNORE_START="# >>> claude-agents managed (DO NOT EDIT THIS BLOCK) >>>"
 
-# Check marker file — skip if current version is already set up
+# Check marker file — skip SETUP if current version is already done
+# But ALWAYS run license check (even if setup is done)
+SETUP_NEEDED=true
 if [ -f "$MARKER_FILE" ]; then
     STORED_VERSION=$(cat "$MARKER_FILE" 2>/dev/null | tr -d '[:space:]' || echo "")
     if [ "$STORED_VERSION" = "$TOOLKIT_VERSION" ]; then
-        exit 0
+        SETUP_NEEDED=false
     fi
 fi
 
+# ---------------------------------------------------------------------------
+# License validation (marketplace gate)
+# ---------------------------------------------------------------------------
+# Check key: ARTHAI_LICENSE_KEY env → ~/.claude-agents/.license → ~/.arthai/license
+WORKER_URL="https://license-worker.muddassar-shaikh.workers.dev"
+KEY_FORMAT='^ARTH-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}$'
+LICENSE_CACHE="$PROJECT_DIR/.claude/.license-validated"
+CACHE_TTL=86400
+
+REAL_HOME=$(eval echo ~"$(id -un)")
+LICENSE_KEY="${ARTHAI_LICENSE_KEY:-}"
+[ -z "$LICENSE_KEY" ] && [ -f "$REAL_HOME/.claude-agents/.license" ] && LICENSE_KEY=$(cat "$REAL_HOME/.claude-agents/.license" 2>/dev/null | tr -d '[:space:]')
+[ -z "$LICENSE_KEY" ] && [ -f "$REAL_HOME/.arthai/license" ] && LICENSE_KEY=$(cat "$REAL_HOME/.arthai/license" 2>/dev/null | tr -d '[:space:]')
+
+if [ -z "$LICENSE_KEY" ]; then
+    echo "LICENSE REQUIRED — No license key found for marketplace plugin."
+    echo "Run: npx @arthai/agents activate ARTH-XXXX-XXXX-XXXX-XXXX"
+    echo "Get a key: productive@getarth.ai"
+    exit 0
+fi
+
+# Validate format
+if ! echo "$LICENSE_KEY" | grep -qE "$KEY_FORMAT"; then
+    echo "LICENSE INVALID — Key format incorrect."
+    exit 0
+fi
+
+# Check cache (24h TTL)
+LICENSE_VALID=false
+NOW=$(date +%s)
+if [ -f "$LICENSE_CACHE" ]; then
+    CACHED_TIME=$(cat "$LICENSE_CACHE" 2>/dev/null | tr -d '[:space:]' || echo "0")
+    ELAPSED=$((NOW - CACHED_TIME))
+    if [ "$ELAPSED" -ge 0 ] && [ "$ELAPSED" -lt "$CACHE_TTL" ]; then
+        LICENSE_VALID=true
+    fi
+fi
+
+if ! $LICENSE_VALID; then
+    # Call Worker — same logic as sync-agents.sh
+    PAYLOAD=$(printf '{"key":"%s"}' "$LICENSE_KEY")
+    RESPONSE=$(printf '%s' "$PAYLOAD" | curl -sf -m 5 -X POST "$WORKER_URL/validate" \
+        -H "Content-Type: application/json" --data "@-" 2>/dev/null) || RESPONSE=""
+
+    if [ -n "$RESPONSE" ]; then
+        VALID=$(echo "$RESPONSE" | python3 -c "import json,sys; print(json.load(sys.stdin).get('valid',False))" 2>/dev/null) || VALID="False"
+        if [ "$VALID" = "True" ]; then
+            LICENSE_VALID=true
+            mkdir -p "$PROJECT_DIR/.claude"
+            echo "$NOW" > "$LICENSE_CACHE"
+        else
+            # Definitive invalid — no fallback
+            echo "LICENSE INVALID — Key not recognized."
+            echo "Check your key or get one at productive@getarth.ai"
+            exit 0
+        fi
+    else
+        # Network error — allow gracefully (don't block on Worker outage)
+        LICENSE_VALID=true
+    fi
+fi
+
+# ---------------------------------------------------------------------------
+# Project setup (only runs if license is valid AND setup is needed)
+# ---------------------------------------------------------------------------
+
+if ! $SETUP_NEEDED; then
+    exit 0
+fi
+
 CLAUDE_MD="$PROJECT_DIR/CLAUDE.md"
 GITIGNORE="$PROJECT_DIR/.gitignore"
 

package/dist/plugins/counsel/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "counsel",
   "description": "AI consulting toolkit — client discovery, proposals, deliverables",
-  "version": "1.0.9",
+  "version": "1.0.11",
   "author": {
     "name": "Arth AI"
   }

package/dist/plugins/counsel/VERSION

@@ -1 +1 @@
-1.0.9
+1.0.11

package/dist/plugins/counsel/hooks/hooks.json

@@ -22,6 +22,18 @@
         ]
       }
     ],
+    "UserPromptSubmit": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "${CLAUDE_PLUGIN_ROOT}/hooks/project-setup.sh",
+            "timeout": 5
+          }
+        ]
+      }
+    ],
     "PostToolUse": [
       {
         "matcher": "Bash",

package/dist/plugins/counsel/hooks/project-setup.sh

@@ -37,14 +37,86 @@ MANAGED_START="<!-- >>> claude-agents toolkit (DO NOT EDIT THIS BLOCK) >>> -->"
 MANAGED_END="<!-- <<< claude-agents toolkit <<< -->"
 GITIGNORE_START="# >>> claude-agents managed (DO NOT EDIT THIS BLOCK) >>>"
 
-# Check marker file — skip if current version is already set up
+# Check marker file — skip SETUP if current version is already done
+# But ALWAYS run license check (even if setup is done)
+SETUP_NEEDED=true
 if [ -f "$MARKER_FILE" ]; then
     STORED_VERSION=$(cat "$MARKER_FILE" 2>/dev/null | tr -d '[:space:]' || echo "")
     if [ "$STORED_VERSION" = "$TOOLKIT_VERSION" ]; then
-        exit 0
+        SETUP_NEEDED=false
     fi
 fi
 
+# ---------------------------------------------------------------------------
+# License validation (marketplace gate)
+# ---------------------------------------------------------------------------
+# Check key: ARTHAI_LICENSE_KEY env → ~/.claude-agents/.license → ~/.arthai/license
+WORKER_URL="https://license-worker.muddassar-shaikh.workers.dev"
+KEY_FORMAT='^ARTH-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}$'
+LICENSE_CACHE="$PROJECT_DIR/.claude/.license-validated"
+CACHE_TTL=86400
+
+REAL_HOME=$(eval echo ~"$(id -un)")
+LICENSE_KEY="${ARTHAI_LICENSE_KEY:-}"
+[ -z "$LICENSE_KEY" ] && [ -f "$REAL_HOME/.claude-agents/.license" ] && LICENSE_KEY=$(cat "$REAL_HOME/.claude-agents/.license" 2>/dev/null | tr -d '[:space:]')
+[ -z "$LICENSE_KEY" ] && [ -f "$REAL_HOME/.arthai/license" ] && LICENSE_KEY=$(cat "$REAL_HOME/.arthai/license" 2>/dev/null | tr -d '[:space:]')
+
+if [ -z "$LICENSE_KEY" ]; then
+    echo "LICENSE REQUIRED — No license key found for marketplace plugin."
+    echo "Run: npx @arthai/agents activate ARTH-XXXX-XXXX-XXXX-XXXX"
+    echo "Get a key: productive@getarth.ai"
+    exit 0
+fi
+
+# Validate format
+if ! echo "$LICENSE_KEY" | grep -qE "$KEY_FORMAT"; then
+    echo "LICENSE INVALID — Key format incorrect."
+    exit 0
+fi
+
+# Check cache (24h TTL)
+LICENSE_VALID=false
+NOW=$(date +%s)
+if [ -f "$LICENSE_CACHE" ]; then
+    CACHED_TIME=$(cat "$LICENSE_CACHE" 2>/dev/null | tr -d '[:space:]' || echo "0")
+    ELAPSED=$((NOW - CACHED_TIME))
+    if [ "$ELAPSED" -ge 0 ] && [ "$ELAPSED" -lt "$CACHE_TTL" ]; then
+        LICENSE_VALID=true
+    fi
+fi
+
+if ! $LICENSE_VALID; then
+    # Call Worker — same logic as sync-agents.sh
+    PAYLOAD=$(printf '{"key":"%s"}' "$LICENSE_KEY")
+    RESPONSE=$(printf '%s' "$PAYLOAD" | curl -sf -m 5 -X POST "$WORKER_URL/validate" \
+        -H "Content-Type: application/json" --data "@-" 2>/dev/null) || RESPONSE=""
+
+    if [ -n "$RESPONSE" ]; then
+        VALID=$(echo "$RESPONSE" | python3 -c "import json,sys; print(json.load(sys.stdin).get('valid',False))" 2>/dev/null) || VALID="False"
+        if [ "$VALID" = "True" ]; then
+            LICENSE_VALID=true
+            mkdir -p "$PROJECT_DIR/.claude"
+            echo "$NOW" > "$LICENSE_CACHE"
+        else
+            # Definitive invalid — no fallback
+            echo "LICENSE INVALID — Key not recognized."
+            echo "Check your key or get one at productive@getarth.ai"
+            exit 0
+        fi
+    else
+        # Network error — allow gracefully (don't block on Worker outage)
+        LICENSE_VALID=true
+    fi
+fi
+
+# ---------------------------------------------------------------------------
+# Project setup (only runs if license is valid AND setup is needed)
+# ---------------------------------------------------------------------------
+
+if ! $SETUP_NEEDED; then
+    exit 0
+fi
+
 CLAUDE_MD="$PROJECT_DIR/CLAUDE.md"
 GITIGNORE="$PROJECT_DIR/.gitignore"
 

package/dist/plugins/cruise/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "cruise",
   "description": "Autopilot mode — autonomous task execution (requires forge+scalpel+sentinel)",
-  "version": "1.0.9",
+  "version": "1.0.11",
   "author": {
     "name": "Arth AI"
   }

package/dist/plugins/cruise/VERSION

@@ -1 +1 @@
-1.0.9
+1.0.11

package/dist/plugins/cruise/hooks/hooks.json

@@ -11,6 +11,18 @@
           }
         ]
       }
+    ],
+    "UserPromptSubmit": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "${CLAUDE_PLUGIN_ROOT}/hooks/project-setup.sh",
+            "timeout": 5
+          }
+        ]
+      }
     ]
   }
 }

package/dist/plugins/cruise/hooks/project-setup.sh

@@ -37,14 +37,86 @@ MANAGED_START="<!-- >>> claude-agents toolkit (DO NOT EDIT THIS BLOCK) >>> -->"
 MANAGED_END="<!-- <<< claude-agents toolkit <<< -->"
 GITIGNORE_START="# >>> claude-agents managed (DO NOT EDIT THIS BLOCK) >>>"
 
-# Check marker file — skip if current version is already set up
+# Check marker file — skip SETUP if current version is already done
+# But ALWAYS run license check (even if setup is done)
+SETUP_NEEDED=true
 if [ -f "$MARKER_FILE" ]; then
     STORED_VERSION=$(cat "$MARKER_FILE" 2>/dev/null | tr -d '[:space:]' || echo "")
     if [ "$STORED_VERSION" = "$TOOLKIT_VERSION" ]; then
-        exit 0
+        SETUP_NEEDED=false
     fi
 fi
 
+# ---------------------------------------------------------------------------
+# License validation (marketplace gate)
+# ---------------------------------------------------------------------------
+# Check key: ARTHAI_LICENSE_KEY env → ~/.claude-agents/.license → ~/.arthai/license
+WORKER_URL="https://license-worker.muddassar-shaikh.workers.dev"
+KEY_FORMAT='^ARTH-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}$'
+LICENSE_CACHE="$PROJECT_DIR/.claude/.license-validated"
+CACHE_TTL=86400
+
+REAL_HOME=$(eval echo ~"$(id -un)")
+LICENSE_KEY="${ARTHAI_LICENSE_KEY:-}"
+[ -z "$LICENSE_KEY" ] && [ -f "$REAL_HOME/.claude-agents/.license" ] && LICENSE_KEY=$(cat "$REAL_HOME/.claude-agents/.license" 2>/dev/null | tr -d '[:space:]')
+[ -z "$LICENSE_KEY" ] && [ -f "$REAL_HOME/.arthai/license" ] && LICENSE_KEY=$(cat "$REAL_HOME/.arthai/license" 2>/dev/null | tr -d '[:space:]')
+
+if [ -z "$LICENSE_KEY" ]; then
+    echo "LICENSE REQUIRED — No license key found for marketplace plugin."
+    echo "Run: npx @arthai/agents activate ARTH-XXXX-XXXX-XXXX-XXXX"
+    echo "Get a key: productive@getarth.ai"
+    exit 0
+fi
+
+# Validate format
+if ! echo "$LICENSE_KEY" | grep -qE "$KEY_FORMAT"; then
+    echo "LICENSE INVALID — Key format incorrect."
+    exit 0
+fi
+
+# Check cache (24h TTL)
+LICENSE_VALID=false
+NOW=$(date +%s)
+if [ -f "$LICENSE_CACHE" ]; then
+    CACHED_TIME=$(cat "$LICENSE_CACHE" 2>/dev/null | tr -d '[:space:]' || echo "0")
+    ELAPSED=$((NOW - CACHED_TIME))
+    if [ "$ELAPSED" -ge 0 ] && [ "$ELAPSED" -lt "$CACHE_TTL" ]; then
+        LICENSE_VALID=true
+    fi
+fi
+
+if ! $LICENSE_VALID; then
+    # Call Worker — same logic as sync-agents.sh
+    PAYLOAD=$(printf '{"key":"%s"}' "$LICENSE_KEY")
+    RESPONSE=$(printf '%s' "$PAYLOAD" | curl -sf -m 5 -X POST "$WORKER_URL/validate" \
+        -H "Content-Type: application/json" --data "@-" 2>/dev/null) || RESPONSE=""
+
+    if [ -n "$RESPONSE" ]; then
+        VALID=$(echo "$RESPONSE" | python3 -c "import json,sys; print(json.load(sys.stdin).get('valid',False))" 2>/dev/null) || VALID="False"
+        if [ "$VALID" = "True" ]; then
+            LICENSE_VALID=true
+            mkdir -p "$PROJECT_DIR/.claude"
+            echo "$NOW" > "$LICENSE_CACHE"
+        else
+            # Definitive invalid — no fallback
+            echo "LICENSE INVALID — Key not recognized."
+            echo "Check your key or get one at productive@getarth.ai"
+            exit 0
+        fi
+    else
+        # Network error — allow gracefully (don't block on Worker outage)
+        LICENSE_VALID=true
+    fi
+fi
+
+# ---------------------------------------------------------------------------
+# Project setup (only runs if license is valid AND setup is needed)
+# ---------------------------------------------------------------------------
+
+if ! $SETUP_NEEDED; then
+    exit 0
+fi
+
 CLAUDE_MD="$PROJECT_DIR/CLAUDE.md"
 GITIGNORE="$PROJECT_DIR/.gitignore"
 

package/dist/plugins/forge/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "forge",
   "description": "Full development workflow — plan, build, test, ship",
-  "version": "1.0.9",
+  "version": "1.0.11",
   "author": {
     "name": "Arth AI"
   }

package/dist/plugins/forge/VERSION

@@ -1 +1 @@
-1.0.9
+1.0.11

package/dist/plugins/forge/hooks/hooks.json

@@ -13,6 +13,16 @@
       }
     ],
     "UserPromptSubmit": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "${CLAUDE_PLUGIN_ROOT}/hooks/project-setup.sh",
+            "timeout": 5
+          }
+        ]
+      },
       {
         "matcher": "",
         "hooks": [

package/dist/plugins/forge/hooks/project-setup.sh

@@ -37,14 +37,86 @@ MANAGED_START="<!-- >>> claude-agents toolkit (DO NOT EDIT THIS BLOCK) >>> -->"
 MANAGED_END="<!-- <<< claude-agents toolkit <<< -->"
 GITIGNORE_START="# >>> claude-agents managed (DO NOT EDIT THIS BLOCK) >>>"
 
-# Check marker file — skip if current version is already set up
+# Check marker file — skip SETUP if current version is already done
+# But ALWAYS run license check (even if setup is done)
+SETUP_NEEDED=true
 if [ -f "$MARKER_FILE" ]; then
     STORED_VERSION=$(cat "$MARKER_FILE" 2>/dev/null | tr -d '[:space:]' || echo "")
     if [ "$STORED_VERSION" = "$TOOLKIT_VERSION" ]; then
-        exit 0
+        SETUP_NEEDED=false
     fi
 fi
 
+# ---------------------------------------------------------------------------
+# License validation (marketplace gate)
+# ---------------------------------------------------------------------------
+# Check key: ARTHAI_LICENSE_KEY env → ~/.claude-agents/.license → ~/.arthai/license
+WORKER_URL="https://license-worker.muddassar-shaikh.workers.dev"
+KEY_FORMAT='^ARTH-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}$'
+LICENSE_CACHE="$PROJECT_DIR/.claude/.license-validated"
+CACHE_TTL=86400
+
+REAL_HOME=$(eval echo ~"$(id -un)")
+LICENSE_KEY="${ARTHAI_LICENSE_KEY:-}"
+[ -z "$LICENSE_KEY" ] && [ -f "$REAL_HOME/.claude-agents/.license" ] && LICENSE_KEY=$(cat "$REAL_HOME/.claude-agents/.license" 2>/dev/null | tr -d '[:space:]')
+[ -z "$LICENSE_KEY" ] && [ -f "$REAL_HOME/.arthai/license" ] && LICENSE_KEY=$(cat "$REAL_HOME/.arthai/license" 2>/dev/null | tr -d '[:space:]')
+
+if [ -z "$LICENSE_KEY" ]; then
+    echo "LICENSE REQUIRED — No license key found for marketplace plugin."
+    echo "Run: npx @arthai/agents activate ARTH-XXXX-XXXX-XXXX-XXXX"
+    echo "Get a key: productive@getarth.ai"
+    exit 0
+fi
+
+# Validate format
+if ! echo "$LICENSE_KEY" | grep -qE "$KEY_FORMAT"; then
+    echo "LICENSE INVALID — Key format incorrect."
+    exit 0
+fi
+
+# Check cache (24h TTL)
+LICENSE_VALID=false
+NOW=$(date +%s)
+if [ -f "$LICENSE_CACHE" ]; then
+    CACHED_TIME=$(cat "$LICENSE_CACHE" 2>/dev/null | tr -d '[:space:]' || echo "0")
+    ELAPSED=$((NOW - CACHED_TIME))
+    if [ "$ELAPSED" -ge 0 ] && [ "$ELAPSED" -lt "$CACHE_TTL" ]; then
+        LICENSE_VALID=true
+    fi
+fi
+
+if ! $LICENSE_VALID; then
+    # Call Worker — same logic as sync-agents.sh
+    PAYLOAD=$(printf '{"key":"%s"}' "$LICENSE_KEY")
+    RESPONSE=$(printf '%s' "$PAYLOAD" | curl -sf -m 5 -X POST "$WORKER_URL/validate" \
+        -H "Content-Type: application/json" --data "@-" 2>/dev/null) || RESPONSE=""
+
+    if [ -n "$RESPONSE" ]; then
+        VALID=$(echo "$RESPONSE" | python3 -c "import json,sys; print(json.load(sys.stdin).get('valid',False))" 2>/dev/null) || VALID="False"
+        if [ "$VALID" = "True" ]; then
+            LICENSE_VALID=true
+            mkdir -p "$PROJECT_DIR/.claude"
+            echo "$NOW" > "$LICENSE_CACHE"
+        else
+            # Definitive invalid — no fallback
+            echo "LICENSE INVALID — Key not recognized."
+            echo "Check your key or get one at productive@getarth.ai"
+            exit 0
+        fi
+    else
+        # Network error — allow gracefully (don't block on Worker outage)
+        LICENSE_VALID=true
+    fi
+fi
+
+# ---------------------------------------------------------------------------
+# Project setup (only runs if license is valid AND setup is needed)
+# ---------------------------------------------------------------------------
+
+if ! $SETUP_NEEDED; then
+    exit 0
+fi
+
 CLAUDE_MD="$PROJECT_DIR/CLAUDE.md"
 GITIGNORE="$PROJECT_DIR/.gitignore"
 

package/dist/plugins/prime/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "prime",
   "description": "Everything — all agents, skills, and hooks in one plugin",
-  "version": "1.0.9",
+  "version": "1.0.11",
   "author": {
     "name": "Arth AI"
   }

package/dist/plugins/prime/VERSION

@@ -1 +1 @@
-1.0.9
+1.0.11