@drisp/cli 0.5.14 → 0.5.15

package/dist/{WorkflowInstallWizard-7Y5PWAKW.js → WorkflowInstallWizard-AY4CPQS2.js}

@@ -8,7 +8,7 @@ import {
   installWorkflowPlugins,
   resolveWorkflow,
   writeGlobalConfig
-} from "./chunk-7E54JMXH.js";
+} from "./chunk-SOW2QPXY.js";
 
 // src/setup/steps/WorkflowInstallWizard.tsx
 import { useState, useEffect, useCallback, useRef } from "react";
@@ -92,4 +92,4 @@ function WorkflowInstallWizard({ source, onDone }) {
 export {
   WorkflowInstallWizard as default
 };
-//# sourceMappingURL=WorkflowInstallWizard-7Y5PWAKW.js.map
+//# sourceMappingURL=WorkflowInstallWizard-AY4CPQS2.js.map

package/dist/athena-gateway.js

@@ -3,7 +3,7 @@ import {
   loadOrCreateToken,
   requireTokenForBind,
   timingSafeTokenEqual
-} from "./chunk-MRAM6EYI.js";
+} from "./chunk-D4W7RB25.js";
 import {
   CHANNEL_REQUEST_ID_REGEX,
   createUdsServerTransport,
@@ -19,7 +19,7 @@ import {
   trackGatewayTransportConnect,
   trackGatewayTransportDisconnect,
   writeGatewayTrace
-} from "./chunk-BTY7MYYT.js";
+} from "./chunk-WRHKXH5M.js";
 
 // src/gateway/daemon.ts
 import fs4 from "fs";
@@ -2440,7 +2440,7 @@ var cachedVersion = null;
 function readVersion() {
   if (cachedVersion !== null) return cachedVersion;
   try {
-    const injected = "0.5.14";
+    const injected = "0.5.15";
     if (typeof injected === "string" && injected.length > 0) {
       cachedVersion = injected;
       return cachedVersion;

package/dist/{chunk-MRAM6EYI.js → chunk-D4W7RB25.js}

@@ -1,6 +1,6 @@
 import {
   isLoopbackHost
-} from "./chunk-BTY7MYYT.js";
+} from "./chunk-WRHKXH5M.js";
 
 // src/gateway/auth.ts
 import crypto from "crypto";
@@ -73,4 +73,4 @@ export {
   timingSafeTokenEqual,
   requireTokenForBind
 };
-//# sourceMappingURL=chunk-MRAM6EYI.js.map
+//# sourceMappingURL=chunk-D4W7RB25.js.map

package/dist/{chunk-7E54JMXH.js → chunk-SOW2QPXY.js}

@@ -1,12 +1,150 @@
 // src/infra/plugins/workflowResolver.ts
-import fs2 from "fs";
+import fs3 from "fs";
 import path2 from "path";
 
 // src/infra/plugins/marketplaceShared.ts
-import { execFileSync } from "child_process";
-import fs from "fs";
+import { execFileSync as execFileSync2 } from "child_process";
+import fs2 from "fs";
 import os from "os";
 import path from "path";
+
+// src/infra/plugins/marketplaceRefresh.ts
+import { execFileSync } from "child_process";
+import fs from "fs";
+var MarketplaceRefreshError = class extends Error {
+  kind;
+  marketplace;
+  constructor(outcome) {
+    super(outcome.message);
+    this.name = "MarketplaceRefreshError";
+    this.kind = outcome.kind;
+    this.marketplace = outcome.marketplace;
+  }
+};
+var NETWORK_OR_AUTH_SIGNATURES = [
+  "could not resolve host",
+  "could not resolve proxy",
+  "couldn\u2019t resolve host",
+  "name or service not known",
+  "temporary failure in name resolution",
+  "failed to connect",
+  "connection timed out",
+  "connection refused",
+  "connection reset",
+  "network is unreachable",
+  "network unavailable",
+  "unable to access",
+  "ssl certificate problem",
+  "gnutls_handshake",
+  "authentication failed",
+  "could not read username",
+  "could not read password",
+  "permission denied (publickey)",
+  "terminal prompts disabled",
+  "invalid username or password",
+  "403 forbidden",
+  "access denied",
+  "repository not found",
+  "remote: not found"
+];
+function classifyGitFailure(message) {
+  const haystack = message.toLowerCase();
+  for (const signature of NETWORK_OR_AUTH_SIGNATURES) {
+    if (haystack.includes(signature)) {
+      return "network-or-auth";
+    }
+  }
+  return "unrecoverable-cache";
+}
+function repoUrlFor(owner, repo) {
+  return `https://github.com/${owner}/${repo}.git`;
+}
+var GIT_STDIO = ["ignore", "ignore", "pipe"];
+function gitFailureText(error) {
+  const err = error;
+  const stderr = err.stderr == null ? "" : err.stderr.toString().trim();
+  const message = err.message ?? "";
+  return stderr ? `${message} ${stderr}`.trim() : message;
+}
+function cloneInto(repoUrl, repoDir) {
+  fs.mkdirSync(repoDir, { recursive: true });
+  try {
+    execFileSync("git", ["clone", "--depth", "1", repoUrl, repoDir], {
+      stdio: GIT_STDIO
+    });
+  } catch (error) {
+    fs.rmSync(repoDir, { recursive: true, force: true });
+    throw error;
+  }
+}
+function failureOutcome(kind, marketplace, cause, backupDir) {
+  const message = kind === "network-or-auth" ? `Could not refresh the "${marketplace}" marketplace: the remote could not be reached (connectivity or authentication problem). ${cause}` : `Could not refresh the "${marketplace}" marketplace: the cached copy is corrupt and could not be rebuilt.${backupDir ? ` Previous cache preserved at ${backupDir}.` : ""} ${cause}`;
+  return {
+    ok: false,
+    kind,
+    marketplace,
+    message,
+    cause,
+    ...backupDir ? { backupDir } : {}
+  };
+}
+function refreshMarketplaceRepo(owner, repo) {
+  const marketplace = `${owner}/${repo}`;
+  const repoDir = marketplaceRepoCacheDir(owner, repo);
+  const repoUrl = repoUrlFor(owner, repo);
+  if (!fs.existsSync(repoDir)) {
+    try {
+      cloneInto(repoUrl, repoDir);
+      return { ok: true, repoDir };
+    } catch (cloneError) {
+      const cause = gitFailureText(cloneError);
+      return failureOutcome(classifyGitFailure(cause), marketplace, cause);
+    }
+  }
+  try {
+    execFileSync("git", ["pull", "--ff-only"], {
+      cwd: repoDir,
+      stdio: GIT_STDIO
+    });
+    return { ok: true, repoDir };
+  } catch {
+    const backupDir = `${repoDir}.backup-${Date.now()}`;
+    try {
+      fs.renameSync(repoDir, backupDir);
+      cloneInto(repoUrl, repoDir);
+      return { ok: true, repoDir, selfHealed: true, backupDir };
+    } catch (recoveryError) {
+      const cause = gitFailureText(recoveryError);
+      return failureOutcome(
+        classifyGitFailure(cause),
+        marketplace,
+        cause,
+        backupDir
+      );
+    }
+  }
+}
+function ensureFailureOutcome(kind, marketplace, cause) {
+  const message = kind === "network-or-auth" ? `Could not reach the "${marketplace}" marketplace: the remote could not be reached (connectivity or authentication problem). ${cause}` : `Could not clone the "${marketplace}" marketplace: the local cache could not be created. ${cause}`;
+  return { ok: false, kind, marketplace, message, cause };
+}
+function ensureRepo(owner, repo) {
+  const repoDir = marketplaceRepoCacheDir(owner, repo);
+  if (!fs.existsSync(repoDir)) {
+    const marketplace = `${owner}/${repo}`;
+    try {
+      cloneInto(repoUrlFor(owner, repo), repoDir);
+    } catch (error) {
+      const cause = gitFailureText(error);
+      throw new MarketplaceRefreshError(
+        ensureFailureOutcome(classifyGitFailure(cause), marketplace, cause)
+      );
+    }
+  }
+  return repoDir;
+}
+
+// src/infra/plugins/marketplaceShared.ts
 var MARKETPLACE_REF_RE = /^[a-zA-Z0-9_-]+@[a-zA-Z0-9_.-]+\/[a-zA-Z0-9_.-]+$/;
 var MARKETPLACE_SLUG_RE = /^[a-zA-Z0-9_.-]+\/[a-zA-Z0-9_.-]+$/;
 function marketplacesCacheDir() {
@@ -23,17 +161,17 @@ function resolvePluginManifestPath(repoDir) {
     "marketplace.json"
   );
   const legacyManifestPath = resolveLegacyPluginManifestPath(repoDir);
-  return fs.existsSync(preferredManifestPath) ? preferredManifestPath : legacyManifestPath;
+  return fs2.existsSync(preferredManifestPath) ? preferredManifestPath : legacyManifestPath;
 }
 function resolveLegacyPluginManifestPath(repoDir) {
   return path.join(repoDir, ".claude-plugin", "marketplace.json");
 }
 function readManifest(manifestPath) {
-  if (!fs.existsSync(manifestPath)) {
+  if (!fs2.existsSync(manifestPath)) {
     throw new Error(`Marketplace manifest not found: ${manifestPath}`);
   }
   return JSON.parse(
-    fs.readFileSync(manifestPath, "utf-8")
+    fs2.readFileSync(manifestPath, "utf-8")
   );
 }
 function entryRelativeSourcePath(entry, pluginName) {
@@ -91,7 +229,7 @@ function resolvePluginDirFromManifest(pluginName, repoDir, manifestPath) {
     repoDir,
     entryRelativeSourcePath(entry, pluginName)
   );
-  if (!fs.existsSync(pluginDir)) {
+  if (!fs2.existsSync(pluginDir)) {
     throw new Error(`Plugin source directory not found: ${pluginDir}`);
   }
   return pluginDir;
@@ -140,9 +278,9 @@ function resolvePluginVersionFromDir(pluginDir) {
     path.join(pluginDir, ".claude-plugin", "plugin.json")
   ];
   for (const manifestPath of manifestPaths) {
-    if (!fs.existsSync(manifestPath)) continue;
+    if (!fs2.existsSync(manifestPath)) continue;
     try {
-      const manifest = JSON.parse(fs.readFileSync(manifestPath, "utf-8"));
+      const manifest = JSON.parse(fs2.readFileSync(manifestPath, "utf-8"));
       if (typeof manifest.version === "string" && manifest.version.length > 0) {
         return manifest.version;
       }
@@ -153,12 +291,12 @@ function resolvePluginVersionFromDir(pluginDir) {
 }
 function resolvePackagedArtifactLayout(pluginRoot, version) {
   const releasePath = path.join(pluginRoot, "dist", version, "release.json");
-  if (!fs.existsSync(releasePath)) {
+  if (!fs2.existsSync(releasePath)) {
     return void 0;
   }
   try {
     const release = JSON.parse(
-      fs.readFileSync(releasePath, "utf-8")
+      fs2.readFileSync(releasePath, "utf-8")
     );
     if (release.version !== version) {
       return void 0;
@@ -179,7 +317,7 @@ function resolvePackagedArtifactLayout(pluginRoot, version) {
     if (!isPathWithinRoot(releaseDir, claudeArtifactDir) || !isPathWithinRoot(releaseDir, resolvedCodexMarketplacePath) || !isPathWithinRoot(releaseDir, codexPluginDir)) {
       return void 0;
     }
-    if (!fs.existsSync(claudeArtifactDir) || !fs.existsSync(resolvedCodexMarketplacePath) || !fs.existsSync(codexPluginDir)) {
+    if (!fs2.existsSync(claudeArtifactDir) || !fs2.existsSync(resolvedCodexMarketplacePath) || !fs2.existsSync(codexPluginDir)) {
       return void 0;
     }
     return {
@@ -191,27 +329,9 @@ function resolvePackagedArtifactLayout(pluginRoot, version) {
     return void 0;
   }
 }
-function ensureRepo(owner, repo) {
-  const repoDir = marketplaceRepoCacheDir(owner, repo);
-  if (!fs.existsSync(repoDir)) {
-    const repoUrl = `https://github.com/${owner}/${repo}.git`;
-    fs.mkdirSync(repoDir, { recursive: true });
-    try {
-      execFileSync("git", ["clone", "--depth", "1", repoUrl, repoDir], {
-        stdio: "ignore"
-      });
-    } catch (error) {
-      fs.rmSync(repoDir, { recursive: true, force: true });
-      throw new Error(
-        `Failed to clone marketplace repo ${owner}/${repo}: ${error.message}`
-      );
-    }
-  }
-  return repoDir;
-}
 function requireGitForMarketplace(kind) {
   try {
-    execFileSync("git", ["--version"], { stdio: "ignore" });
+    execFileSync2("git", ["--version"], { stdio: "ignore" });
   } catch {
     throw new Error(
       `git is not installed. Install git to use marketplace ${kind}.`
@@ -270,14 +390,14 @@ var WorkflowVersionNotFoundError = class extends Error {
 function resolveWorkflowManifestPath(repoDir) {
   const preferred = path2.join(repoDir, ".athena-workflow", "marketplace.json");
   const legacy = path2.join(repoDir, ".claude-plugin", "marketplace.json");
-  return fs2.existsSync(preferred) ? preferred : legacy;
+  return fs3.existsSync(preferred) ? preferred : legacy;
 }
 function preferCanonicalWorkflowPath(repoDir, workflowPath) {
   const relativePath = path2.relative(repoDir, workflowPath);
   const segments = relativePath.split(path2.sep);
   if (segments[0] !== ".workflows") return workflowPath;
   const canonical = path2.join(repoDir, "workflows", ...segments.slice(1));
-  return fs2.existsSync(canonical) ? canonical : workflowPath;
+  return fs3.existsSync(canonical) ? canonical : workflowPath;
 }
 function resolveWorkflowEntryPath(entry, manifest, repoDir) {
   if (typeof entry.source !== "string") {
@@ -297,7 +417,7 @@ function resolveWorkflowEntryPath(entry, manifest, repoDir) {
     );
   }
   const resolved = preferCanonicalWorkflowPath(repoDir, workflowPath);
-  if (!fs2.existsSync(resolved)) {
+  if (!fs3.existsSync(resolved)) {
     throw new Error(`Workflow source not found: ${resolved}`);
   }
   return resolved;
@@ -331,7 +451,7 @@ function listWorkflowEntriesFromManifest(repoDir, manifestPath, source) {
 function findMarketplaceRepoDir(startPath) {
   let currentDir = path2.resolve(startPath);
   for (; ; ) {
-    if (fs2.existsSync(resolveWorkflowManifestPath(currentDir)) || fs2.existsSync(resolvePluginManifestPath(currentDir))) {
+    if (fs3.existsSync(resolveWorkflowManifestPath(currentDir)) || fs3.existsSync(resolvePluginManifestPath(currentDir))) {
       return currentDir;
     }
     const parentDir = path2.dirname(currentDir);
@@ -342,7 +462,7 @@ function findMarketplaceRepoDir(startPath) {
 function resolveWorkflowMarketplaceSource(source) {
   const trimmed = source.trim();
   const resolvedPath = path2.resolve(trimmed);
-  if (!fs2.existsSync(resolvedPath) && isMarketplaceSlug(trimmed)) {
+  if (!fs3.existsSync(resolvedPath) && isMarketplaceSlug(trimmed)) {
     const slashIdx = trimmed.indexOf("/");
     return {
       kind: "remote",
@@ -388,10 +508,10 @@ function resolveMarketplaceWorkflow(ref) {
 function gatherMarketplaceWorkflowSources(source) {
   const trimmed = source.trim();
   const resolvedPath = path2.resolve(trimmed);
-  if (fs2.existsSync(resolvedPath) && fs2.statSync(resolvedPath).isFile()) {
-    return [{ kind: "filesystem", workflowPath: fs2.realpathSync(resolvedPath) }];
+  if (fs3.existsSync(resolvedPath) && fs3.statSync(resolvedPath).isFile()) {
+    return [{ kind: "filesystem", workflowPath: fs3.realpathSync(resolvedPath) }];
   }
-  if (!fs2.existsSync(resolvedPath) && isMarketplaceSlug(trimmed)) {
+  if (!fs3.existsSync(resolvedPath) && isMarketplaceSlug(trimmed)) {
     const slashIdx = trimmed.indexOf("/");
     const owner = trimmed.slice(0, slashIdx);
     const repo = trimmed.slice(slashIdx + 1);
@@ -421,7 +541,7 @@ function gatherMarketplaceWorkflowSources(source) {
       `Marketplace source not found: ${trimmed}. Expected a marketplace repo root, a path inside one, or an owner/repo slug.`
     );
   }
-  const canonicalRepoDir = fs2.realpathSync(repoDir);
+  const canonicalRepoDir = fs3.realpathSync(repoDir);
   const manifestPath = resolveWorkflowManifestPath(canonicalRepoDir);
   return listWorkflowEntriesFromManifest(canonicalRepoDir, manifestPath, {
     kind: "local",
@@ -485,8 +605,8 @@ function resolveWorkflowInstall(sourceOrName, configuredSources) {
     };
   }
   const resolvedPath = path2.resolve(sourceOrName);
-  if (fs2.existsSync(resolvedPath) && fs2.statSync(resolvedPath).isFile()) {
-    return { kind: "filesystem", workflowPath: fs2.realpathSync(resolvedPath) };
+  if (fs3.existsSync(resolvedPath) && fs3.statSync(resolvedPath).isFile()) {
+    return { kind: "filesystem", workflowPath: fs3.realpathSync(resolvedPath) };
   }
   const { bareName, pinnedVersion } = parseBareWorkflowName(sourceOrName);
   if (bareName.includes("/") || bareName.includes("\\")) {
@@ -530,13 +650,9 @@ function resolveWorkflowInstall(sourceOrName, configuredSources) {
   return allListings[0];
 }
 
-// src/infra/plugins/marketplace.ts
+// src/infra/plugins/versionedPluginResolution.ts
 import { execFileSync as execFileSync3 } from "child_process";
 import fs4 from "fs";
-
-// src/infra/plugins/versionedPluginResolution.ts
-import { execFileSync as execFileSync2 } from "child_process";
-import fs3 from "fs";
 import os2 from "os";
 import path3 from "path";
 var PLUGIN_NPM_SCOPE = "@athenaflow";
@@ -554,7 +670,7 @@ function resolveVersionedPluginDir(owner, repo, pluginName, version) {
     pluginName,
     version
   );
-  return fs3.existsSync(cacheDir) ? cacheDir : void 0;
+  return fs4.existsSync(cacheDir) ? cacheDir : void 0;
 }
 function fetchPluginPackage(owner, repo, pluginName, version) {
   const npmPkg = pluginNpmPackageName(pluginName);
@@ -565,46 +681,46 @@ function fetchPluginPackage(owner, repo, pluginName, version) {
     pluginName,
     version
   );
-  if (fs3.existsSync(destDir)) {
+  if (fs4.existsSync(destDir)) {
     return destDir;
   }
   const cacheBase = versionedPluginCacheDir();
-  fs3.mkdirSync(cacheBase, { recursive: true });
-  const tmpDir = fs3.mkdtempSync(path3.join(cacheBase, ".tmp-"));
+  fs4.mkdirSync(cacheBase, { recursive: true });
+  const tmpDir = fs4.mkdtempSync(path3.join(cacheBase, ".tmp-"));
   try {
-    const tarball = execFileSync2(
+    const tarball = execFileSync3(
       "npm",
       ["pack", `${npmPkg}@${version}`, "--pack-destination", tmpDir],
       { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }
     ).trim();
     const tarballPath = path3.join(tmpDir, tarball);
-    if (!fs3.existsSync(tarballPath)) {
+    if (!fs4.existsSync(tarballPath)) {
       throw new Error(`npm pack did not produce expected tarball: ${tarball}`);
     }
     const extractDir = path3.join(tmpDir, "extracted");
-    fs3.mkdirSync(extractDir, { recursive: true });
-    execFileSync2("tar", ["xzf", tarballPath, "-C", extractDir], {
+    fs4.mkdirSync(extractDir, { recursive: true });
+    execFileSync3("tar", ["xzf", tarballPath, "-C", extractDir], {
       stdio: "ignore"
     });
     const packageDir = path3.join(extractDir, "package");
-    if (!fs3.existsSync(packageDir)) {
+    if (!fs4.existsSync(packageDir)) {
       throw new Error(
         "Extracted tarball does not contain a package/ directory"
       );
     }
-    fs3.mkdirSync(path3.dirname(destDir), { recursive: true });
+    fs4.mkdirSync(path3.dirname(destDir), { recursive: true });
     try {
-      fs3.renameSync(packageDir, destDir);
+      fs4.renameSync(packageDir, destDir);
     } catch (error) {
       const code = typeof error === "object" && error !== null && "code" in error && typeof error.code === "string" ? error.code : void 0;
-      if ((code === "EEXIST" || code === "ENOTEMPTY") && fs3.existsSync(destDir)) {
+      if ((code === "EEXIST" || code === "ENOTEMPTY") && fs4.existsSync(destDir)) {
         return destDir;
       }
       throw error;
     }
     return destDir;
   } finally {
-    fs3.rmSync(tmpDir, { recursive: true, force: true });
+    fs4.rmSync(tmpDir, { recursive: true, force: true });
   }
 }
 function resolvePackagedArtifactsOrThrow(pluginName, version, pluginRoot, stage) {
@@ -648,7 +764,7 @@ function resolveMarketplaceSourceFallback(ref, pluginName, version, repoDir) {
   );
 }
 function describeSourceFallbackRejection(owner, repo, pluginName, version, repoDir) {
-  if (!fs3.existsSync(repoDir)) {
+  if (!fs4.existsSync(repoDir)) {
     return `source fallback was unavailable because marketplace repo ${owner}/${repo} is not cached locally`;
   }
   let entry;
@@ -701,7 +817,7 @@ function resolveVersionedMarketplacePluginTarget(ref, version, sourceRepoDir, op
     npmError = error;
   }
   const repoDir = sourceRepoDir ?? ensureRepo(owner, repo);
-  const fallbackTarget = fs3.existsSync(repoDir) ? resolveMarketplaceSourceFallback(ref, pluginName, version, repoDir) : void 0;
+  const fallbackTarget = fs4.existsSync(repoDir) ? resolveMarketplaceSourceFallback(ref, pluginName, version, repoDir) : void 0;
   if (fallbackTarget) {
     return fallbackTarget;
   }
@@ -724,44 +840,6 @@ function refreshVersionedMarketplacePluginTarget(ref, version, sourceRepoDir) {
 }
 
 // src/infra/plugins/marketplace.ts
-function pullMarketplaceRepo(owner, repo) {
-  const repoDir = marketplaceRepoCacheDir(owner, repo);
-  const repoUrl = `https://github.com/${owner}/${repo}.git`;
-  if (!fs4.existsSync(repoDir)) {
-    cloneMarketplaceRepo(owner, repo, repoUrl, repoDir);
-    return;
-  }
-  try {
-    execFileSync3("git", ["pull", "--ff-only"], {
-      cwd: repoDir,
-      stdio: "ignore"
-    });
-    return;
-  } catch (pullError) {
-    const backupDir = `${repoDir}.backup-${Date.now()}`;
-    try {
-      fs4.renameSync(repoDir, backupDir);
-      cloneMarketplaceRepo(owner, repo, repoUrl, repoDir);
-    } catch (recoveryError) {
-      throw new Error(
-        `Failed to refresh marketplace repo ${owner}/${repo}: ${pullError.message}. Recovery clone failed: ${recoveryError.message}. Preserved previous cache at ${backupDir}.`
-      );
-    }
-  }
-}
-function cloneMarketplaceRepo(owner, repo, repoUrl, repoDir) {
-  fs4.mkdirSync(repoDir, { recursive: true });
-  try {
-    execFileSync3("git", ["clone", "--depth", "1", repoUrl, repoDir], {
-      stdio: "ignore"
-    });
-  } catch (error) {
-    fs4.rmSync(repoDir, { recursive: true, force: true });
-    throw new Error(
-      `Failed to clone marketplace repo ${owner}/${repo}: ${error.message}`
-    );
-  }
-}
 function resolveMarketplacePlugin(ref) {
   requireGitForMarketplace("plugins");
   const { pluginName, owner, repo } = parseRef(ref);
@@ -1464,13 +1542,22 @@ function installWorkflowFromSource(source, name) {
   writeWorkflowSourceMetadata(destDir, metadata);
   return workflowName;
 }
-function reResolveFromMetadata(metadata) {
+function reResolveFromMetadata(metadata, refresh = refreshMarketplaceRepo, onSelfHeal) {
   if (metadata.kind === "marketplace-remote") {
     const slug = metadata.ref.slice(metadata.ref.indexOf("@") + 1);
     const slashIdx = slug.indexOf("/");
     const owner = slug.slice(0, slashIdx);
     const repo = slug.slice(slashIdx + 1);
-    pullMarketplaceRepo(owner, repo);
+    const refreshed = refresh(owner, repo);
+    if (!refreshed.ok) {
+      throw new MarketplaceRefreshError(refreshed);
+    }
+    if (refreshed.selfHealed) {
+      onSelfHeal?.({
+        marketplace: `${owner}/${repo}`,
+        backupDir: refreshed.backupDir
+      });
+    }
     return resolveWorkflowInstall(metadata.ref, []);
   }
   if (metadata.kind === "marketplace-local") {
@@ -1493,7 +1580,7 @@ function reResolveFromMetadata(metadata) {
   }
   return { kind: "filesystem", workflowPath: metadata.path };
 }
-function updateWorkflow(name) {
+function updateWorkflow(name, refresh = refreshMarketplaceRepo, onSelfHeal) {
   const workflowDir = path7.join(registryDir(), name);
   const metadata = readWorkflowSourceMetadata(workflowDir);
   if (!metadata) {
@@ -1501,11 +1588,52 @@ function updateWorkflow(name) {
       `Workflow "${name}" has no recorded source. Reinstall it with: athena-flow workflow install <source>`
     );
   }
-  const source = reResolveFromMetadata(metadata);
+  const source = reResolveFromMetadata(metadata, refresh, onSelfHeal);
   const installedName = installWorkflowFromSource(source, name);
   refreshPinnedWorkflowPlugins(resolveWorkflow(installedName));
   return installedName;
 }
+function updateWorkflows(names) {
+  const refreshCache = /* @__PURE__ */ new Map();
+  const refresh = (owner, repo) => {
+    const key = `${owner}/${repo}`;
+    const cached = refreshCache.get(key);
+    if (cached) return cached;
+    const outcome = refreshMarketplaceRepo(owner, repo);
+    refreshCache.set(key, outcome);
+    return outcome;
+  };
+  const upgraded = [];
+  const marketplaceFailures = [];
+  const reportedMarketplaces = /* @__PURE__ */ new Set();
+  const workflowFailures = [];
+  const selfHealed = [];
+  const selfHealedMarketplaces = /* @__PURE__ */ new Set();
+  const onSelfHeal = (info) => {
+    if (!selfHealedMarketplaces.has(info.marketplace)) {
+      selfHealedMarketplaces.add(info.marketplace);
+      selfHealed.push(info);
+    }
+  };
+  for (const name of names) {
+    try {
+      upgraded.push(updateWorkflow(name, refresh, onSelfHeal));
+    } catch (error) {
+      if (error instanceof MarketplaceRefreshError) {
+        if (!reportedMarketplaces.has(error.marketplace)) {
+          reportedMarketplaces.add(error.marketplace);
+          marketplaceFailures.push({ marketplace: error.marketplace, error });
+        }
+      } else {
+        workflowFailures.push({
+          name,
+          error: error instanceof Error ? error : new Error(String(error))
+        });
+      }
+    }
+  }
+  return { upgraded, marketplaceFailures, workflowFailures, selfHealed };
+}
 function listWorkflows() {
   const dir = registryDir();
   const installed = fs9.existsSync(dir) ? fs9.readdirSync(dir, { withFileTypes: true }).filter(
@@ -2103,9 +2231,10 @@ export {
   resolveWorkflow,
   installWorkflowFromSource,
   updateWorkflow,
+  updateWorkflows,
   listWorkflows,
   removeWorkflow,
   compileWorkflowPlan,
   collectMcpServersWithOptions
 };
-//# sourceMappingURL=chunk-7E54JMXH.js.map
+//# sourceMappingURL=chunk-SOW2QPXY.js.map

package/dist/{chunk-XZDDQJUX.js → chunk-UAZ2R7F3.js}

@@ -23,7 +23,7 @@ import {
   traceGatewayFrame,
   trackGatewayTransportReconnect,
   writeGatewayTrace
-} from "./chunk-BTY7MYYT.js";
+} from "./chunk-WRHKXH5M.js";
 import {
   compileWorkflowPlan,
   createWorkflowRunner,
@@ -34,7 +34,7 @@ import {
   resolveWorkflow,
   resolveWorkflowInstall,
   resolveWorkflowPlugins
-} from "./chunk-7E54JMXH.js";
+} from "./chunk-SOW2QPXY.js";
 
 // src/infra/daemon/stateDir.ts
 import fs from "fs";
@@ -3058,6 +3058,24 @@ function validateConflicts(config) {
   return warnings;
 }
 
+// src/core/compaction/handoffInstructions.ts
+var HANDOFF_COMPACT_INSTRUCTIONS = `When compacting this conversation, write the compacted summary as a handoff so a fresh agent can continue the work without re-reading the history. Preserve:
+- The current task and goal, and where it stands right now.
+- Decisions already made (and why) and any open questions still to resolve.
+- Files and locations touched, referenced by path \u2014 do not paste file contents.
+- A "Suggested next steps / skills" section naming what to do or invoke next.
+
+Reference existing artifacts (PRDs, plans, ADRs, issues, commits, diffs) by path or URL instead of duplicating their content. Redact secrets \u2014 API keys, passwords, tokens, or personally identifiable information.`;
+var HANDOFF_COMPACT_PROMPT = `Summarize the conversation so far as a handoff document that lets a fresh agent continue the work without re-reading the history.
+
+Include:
+- The current task and goal, and its present status.
+- Decisions already made (with rationale) and any open questions still to resolve.
+- Files and locations touched, referenced by path \u2014 do not reproduce file contents.
+- A "Suggested next steps / skills" section naming what to do or invoke next.
+
+Reference existing artifacts (PRDs, plans, ADRs, issues, commits, diffs) by path or URL rather than duplicating them. Redact any sensitive information such as API keys, passwords, tokens, or personally identifiable information.`;
+
 // src/harnesses/claude/process/spawn.ts
 function makePreflightError(failureCode, message) {
   const error = new Error(message);
@@ -3110,6 +3128,20 @@ function runSpawnPreflight(hookSocketPath) {
   }
   validateSocketPath(hookSocketPath);
 }
+var HANDOFF_COMPACT_SYSTEM_PROMPT = `## Compact Instructions
+
+${HANDOFF_COMPACT_INSTRUCTIONS}`;
+function appendHandoffCompactInstructions(config) {
+  return {
+    ...config,
+    appendSystemPrompt: [
+      config.appendSystemPrompt,
+      HANDOFF_COMPACT_SYSTEM_PROMPT
+    ].filter(
+      (part) => typeof part === "string" && part.length > 0
+    ).join("\n\n")
+  };
+}
 function spawnClaude(options) {
   const {
     prompt,
@@ -3130,13 +3162,13 @@ function spawnClaude(options) {
   const hookSocketPath = explicitHookSocketPath ?? resolveHookSocketPath(instanceId);
   runSpawnPreflight(hookSocketPath);
   const isolationConfig = resolveIsolationConfig(isolation);
-  const streamingConfig = {
+  const streamingConfig = appendHandoffCompactInstructions({
     ...isolationConfig,
     // Athena depends on the stream-json event feed for live token/context
     // updates, so opt in unless a caller explicitly disables it.
     verbose: isolationConfig.verbose ?? true,
     includePartialMessages: isolationConfig.includePartialMessages ?? true
-  };
+  });
   const portableAuth = resolveRuntimeAuthOverlay({ cwd: projectDir });
   const { settingsPath, cleanup } = generateHookSettings(void 0, portableAuth);
   registerCleanupOnExit(cleanup);
@@ -6671,6 +6703,9 @@ function buildCodexPromptOptions(input) {
     plugins: resolveCodexWorkflowPlugins(input.workflowPlan),
     config: {
       model_auto_compact_token_limit: 175e3,
+      // Steer Codex's history compaction toward a handoff-style summary.
+      // `compact_prompt` replaces the default summarization prompt.
+      compact_prompt: HANDOFF_COMPACT_PROMPT,
       ...resolveCodexMcpConfig(input.pluginMcpConfig, input.workflowPlan) ?? {}
     },
     ephemeral: input.ephemeral,
@@ -18202,4 +18237,4 @@ export {
   startUdsServer,
   sendUdsRequest
 };
-//# sourceMappingURL=chunk-XZDDQJUX.js.map
+//# sourceMappingURL=chunk-UAZ2R7F3.js.map

package/dist/{chunk-BTY7MYYT.js → chunk-WRHKXH5M.js}

@@ -170,7 +170,7 @@ function isLoopbackHost(host) {
 
 // src/infra/telemetry/client.ts
 import { PostHog } from "posthog-node";
-var POSTHOG_API_KEY = true ? "" : "";
+var POSTHOG_API_KEY = true ? "phc_4UifMvZlZcJdgf3uDqzgEdIlQt98yAeUqVX5tobJcuD\n" : "";
 var POSTHOG_HOST = "https://us.i.posthog.com";
 var client = null;
 var deviceId = null;
@@ -772,4 +772,4 @@ export {
   trackSetupCompleted,
   refreshDashboardAccessToken
 };
-//# sourceMappingURL=chunk-BTY7MYYT.js.map
+//# sourceMappingURL=chunk-WRHKXH5M.js.map

package/dist/cli.js

@@ -2,7 +2,7 @@
 import "./chunk-HXBCZAP7.js";
 import {
   rotateGatewayToken
-} from "./chunk-MRAM6EYI.js";
+} from "./chunk-D4W7RB25.js";
 import {
   CREDENTIAL_SOURCES_TRIED,
   EXEC_EXIT_CODE,
@@ -97,7 +97,7 @@ import {
   writeAttachmentMirror,
   writeGatewayClientConfig,
   wsClientOptionsForEndpoint
-} from "./chunk-XZDDQJUX.js";
+} from "./chunk-UAZ2R7F3.js";
 import {
   generateId as generateId2
 } from "./chunk-BTKQ67RE.js";
@@ -121,7 +121,7 @@ import {
   trackTelemetryOptedOut,
   writeDashboardClientConfig,
   writeGatewayTrace
-} from "./chunk-BTY7MYYT.js";
+} from "./chunk-WRHKXH5M.js";
 import {
   McpOptionsStep,
   StepSelector,
@@ -153,10 +153,11 @@ import {
   resolveWorkflowInstall,
   resolveWorkflowMarketplaceSource,
   updateWorkflow,
+  updateWorkflows,
   useWorkflowSessionController,
   writeGlobalConfig,
   writeProjectConfig
-} from "./chunk-7E54JMXH.js";
+} from "./chunk-SOW2QPXY.js";
 
 // src/app/entry/cli.tsx
 import { render } from "ink";
@@ -12127,6 +12128,7 @@ function runWorkflowCommand(input, deps = {}) {
   const remove = deps.removeWorkflow ?? removeWorkflow;
   const resolveInstalledWorkflow = deps.resolveWorkflow ?? resolveWorkflow;
   const upgrade = deps.updateWorkflow ?? updateWorkflow;
+  const upgradeAll = deps.updateWorkflows ?? updateWorkflows;
   const gatherSources = deps.gatherMarketplaceWorkflowSources ?? gatherMarketplaceWorkflowSources;
   const readGlobal = deps.readGlobalConfig ?? readGlobalConfig;
   const readProject = deps.readProjectConfig ?? readConfig;
@@ -12134,6 +12136,12 @@ function runWorkflowCommand(input, deps = {}) {
   const writeProject = deps.writeProjectConfig ?? writeProjectConfig;
   const logError = deps.logError ?? console.error;
   const logOut = deps.logOut ?? console.log;
+  const logWarn = deps.logWarn ?? console.warn;
+  const warnSelfHeal = (info) => {
+    logWarn(
+      `Warning: rebuilt the cached copy of marketplace ${info.marketplace} because it was unusable.${info.backupDir ? ` Previous cache preserved at ${info.backupDir}.` : ""}`
+    );
+  };
   const fmtError = (error) => `Error: ${error instanceof Error ? error.message : String(error)}`;
   const formatWorkflowLabel = (name) => {
     try {
@@ -12229,7 +12237,7 @@ function runWorkflowCommand(input, deps = {}) {
       const name = input.subcommandArgs[0];
       if (name) {
         try {
-          const updatedName = upgrade(name);
+          const updatedName = upgrade(name, void 0, warnSelfHeal);
           logOut(
             `Upgraded workflow: ${formatWorkflowLabel(updatedName)}${formatSourceSuffix(updatedName)}`
           );
@@ -12245,19 +12253,22 @@ function runWorkflowCommand(input, deps = {}) {
         logOut("No installed workflows to upgrade.");
         return 0;
       }
-      let failures = 0;
-      for (const wfName of all) {
-        try {
-          const updatedName = upgrade(wfName);
-          logOut(
-            `Upgraded workflow: ${formatWorkflowLabel(updatedName)}${formatSourceSuffix(updatedName)}`
-          );
-        } catch (error) {
-          logError(`Failed to upgrade "${wfName}": ${fmtError(error)}`);
-          failures++;
-        }
+      const report = upgradeAll(all);
+      for (const upgradedName of report.upgraded) {
+        logOut(
+          `Upgraded workflow: ${formatWorkflowLabel(upgradedName)}${formatSourceSuffix(upgradedName)}`
+        );
+      }
+      for (const info of report.selfHealed) {
+        warnSelfHeal(info);
+      }
+      for (const { error } of report.marketplaceFailures) {
+        logError(fmtError(error));
+      }
+      for (const { name: failedName, error } of report.workflowFailures) {
+        logError(`Failed to upgrade "${failedName}": ${fmtError(error)}`);
       }
-      return failures > 0 ? 1 : 0;
+      return report.marketplaceFailures.length + report.workflowFailures.length > 0 ? 1 : 0;
     }
     case "remove": {
       const name = input.subcommandArgs[0];
@@ -12670,7 +12681,7 @@ var cachedVersion = null;
 function readPackageVersion() {
   if (cachedVersion !== null) return cachedVersion;
   try {
-    const injected = "0.5.14";
+    const injected = "0.5.15";
     if (typeof injected === "string" && injected.length > 0) {
       cachedVersion = injected;
       return cachedVersion;
@@ -15417,7 +15428,7 @@ Available commands: ${[...KNOWN_COMMANDS].join(", ")}`
         await exitWith(1);
         return;
       }
-      const { default: WorkflowInstallWizard } = await import("./WorkflowInstallWizard-7Y5PWAKW.js");
+      const { default: WorkflowInstallWizard } = await import("./WorkflowInstallWizard-AY4CPQS2.js");
       const { waitUntilExit } = render(
         /* @__PURE__ */ jsx25(
           WorkflowInstallWizard,

package/dist/dashboard-daemon.js

@@ -3,13 +3,13 @@ import {
   ensureDaemonStateDir,
   runDashboardRuntimeDaemon,
   startUdsServer
-} from "./chunk-XZDDQJUX.js";
+} from "./chunk-UAZ2R7F3.js";
 import "./chunk-BTKQ67RE.js";
 import {
   readDashboardClientConfig,
   refreshDashboardAccessToken
-} from "./chunk-BTY7MYYT.js";
-import "./chunk-7E54JMXH.js";
+} from "./chunk-WRHKXH5M.js";
+import "./chunk-SOW2QPXY.js";
 
 // src/infra/daemon/logFile.ts
 import fs from "fs";

package/package.json

@@ -17,7 +17,7 @@
 		"hooks",
 		"dashboard"
 	],
-	"version": "0.5.14",
+	"version": "0.5.15",
 	"license": "MIT",
 	"bin": {
 		"athena": "dist/cli.js",