auriga-cli 1.20.0 → 1.20.1

package/dist/catalog.json

@@ -1,5 +1,5 @@
 {
-  "generatedAt": "2026-05-13T06:35:46.774Z",
+  "generatedAt": "2026-05-13T12:23:25.619Z",
   "workflowSkills": [
     {
       "name": "brainstorming",

package/dist/plugins.js

@@ -3,7 +3,7 @@ import os from "node:os";
 import path from "node:path";
 import { checkbox, select } from "@inquirer/prompts";
 import { parse as parseToml, stringify as stringifyToml } from "smol-toml";
-import { codexManifestPath, validateCodexInstallConfig, validateCodexMarketplace, } from "./codex-plugin-config.js";
+import { codexLocalPluginPath, codexManifestPath, validateCodexInstallConfig, validateCodexMarketplace, } from "./codex-plugin-config.js";
 import { validateMarketplaceField } from "./marketplace.js";
 import { atomicWriteFile, exec, execAsync, fetchExtraContent, log, withEsc } from "./utils.js";
 // Plugin names and plugin-package names end up in `claude plugins ...`
@@ -23,6 +23,7 @@ const MIGRATED_WORKFLOW_SKILLS = [
 const NOTIFY_PLUGIN_NAME = "auriga-notify";
 const WORKFLOW_SKILLS_PLUGIN_NAME = "auriga-workflow-skills";
 const LEGACY_NOTIFY_MARKER = "auriga:notify";
+const CODEX_PLUGIN_VERSION_RE = /^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/;
 export function validatePluginsConfig(raw) {
     if (!raw || typeof raw !== "object") {
         throw new Error("plugins.json: root must be an object");
@@ -177,10 +178,8 @@ function cleanupMigratedWorkflowSkillInstalls(opts, runtimes) {
         for (const runtime of runtimes) {
             const dir = legacySkillDir(opts, runtime, name);
             const stat = fs.lstatSync(dir, { throwIfNoEntry: false });
-            if (!stat) {
-                emitMigrationLog(opts, `${runtimeSkillRoot(runtime)}/skills/${name} not present`);
+            if (!stat)
                 continue;
-            }
             if (scope === "project" && isWorkflowPluginDevSymlink(dir, cwd, name)) {
                 emitMigrationLog(opts, `preserved ${runtimeSkillRoot(runtime)}/skills/${name} development symlink`);
                 continue;
@@ -338,6 +337,16 @@ function pluginHasHooks(packageRoot, plugin) {
     const manifest = JSON.parse(fs.readFileSync(manifestPath, "utf-8"));
     return typeof manifest.hooks === "string" || Array.isArray(manifest.hooks);
 }
+function resolveSelectedCodexMarketplacePlugins(localMarketplace, localSelected) {
+    const localMpByName = new Map(localMarketplace.plugins.map((p) => [p.name, p]));
+    return localSelected.map((p) => {
+        const plugin = localMpByName.get(p.name);
+        if (!plugin) {
+            throw new Error(`Codex install.json: plugin ${p.name} is not present in marketplace.json`);
+        }
+        return plugin;
+    });
+}
 async function ensureCodexPluginManifests(packageRoot, plugins) {
     for (const plugin of plugins) {
         const manifestPath = codexManifestPath(plugin);
@@ -349,6 +358,38 @@ async function ensureCodexPluginManifests(packageRoot, plugins) {
         await fetchExtraContent(packageRoot, manifestPath);
     }
 }
+function readCodexPluginVersion(packageRoot, plugin) {
+    const manifestPath = codexManifestPath(plugin);
+    if (!manifestPath) {
+        throw new Error(`Codex marketplace.json: plugin ${plugin.name} must use a local source.path`);
+    }
+    const manifest = JSON.parse(fs.readFileSync(path.join(packageRoot, manifestPath), "utf-8"));
+    if (typeof manifest.version !== "string" || !CODEX_PLUGIN_VERSION_RE.test(manifest.version)) {
+        throw new Error(`Codex plugin ${plugin.name} manifest must include a safe string version`);
+    }
+    return manifest.version;
+}
+function materializeLocalCodexPluginCache(packageRoot, marketplaceName, plugins) {
+    const cacheRoot = path.join(codexHome(), "plugins", "cache");
+    for (const plugin of plugins) {
+        const sourcePath = codexLocalPluginPath(plugin);
+        if (!sourcePath) {
+            throw new Error(`Codex marketplace.json: plugin ${plugin.name} must use a local source.path`);
+        }
+        const version = readCodexPluginVersion(packageRoot, plugin);
+        const sourceDir = path.join(packageRoot, sourcePath);
+        const destDir = path.join(cacheRoot, marketplaceName, plugin.name, version);
+        const tmpDir = `${destDir}.tmp-${process.pid}-${Date.now()}`;
+        fs.rmSync(tmpDir, { recursive: true, force: true });
+        fs.mkdirSync(path.dirname(destDir), { recursive: true });
+        fs.cpSync(sourceDir, tmpDir, { recursive: true });
+        fs.rmSync(destDir, { recursive: true, force: true });
+        fs.renameSync(tmpDir, destDir);
+        if (!fs.existsSync(path.join(destDir, ".codex-plugin", "plugin.json"))) {
+            throw new Error(`Codex plugin ${plugin.name} cache materialization did not produce plugin.json`);
+        }
+    }
+}
 function ensureTomlBoolean(content, section, key, value) {
     const line = `${key} = ${value ? "true" : "false"}`;
     const header = `[${section}]`;
@@ -477,19 +518,10 @@ async function addCodexMarketplaceWithRetry(marketplaceName, addCommand, opts, m
 // manifest at install time. Acceptable while no external plugin ships
 // hooks; once one does, prefer fetching the manifest or adding an
 // explicit `requiresPluginHooks: true` field on the install.json entry.
-async function composeCodexPluginKeys(packageRoot, localMarketplace, localSelected, externalSelected) {
+async function composeCodexPluginKeys(packageRoot, localMarketplace, selectedMarketplacePlugins, externalSelected) {
     const pluginKeys = [];
     let needsPluginHooks = false;
     if (localMarketplace) {
-        const localMpByName = new Map(localMarketplace.plugins.map((p) => [p.name, p]));
-        const selectedMarketplacePlugins = localSelected.map((p) => {
-            const plugin = localMpByName.get(p.name);
-            if (!plugin) {
-                throw new Error(`Codex install.json: plugin ${p.name} is not present in marketplace.json`);
-            }
-            return plugin;
-        });
-        await ensureCodexPluginManifests(packageRoot, selectedMarketplacePlugins);
         for (const plugin of selectedMarketplacePlugins) {
             pluginKeys.push(`${plugin.name}@${localMarketplace.name}`);
             if (pluginHasHooks(packageRoot, plugin))
@@ -568,7 +600,14 @@ async function installCodexPlugins(packageRoot, opts) {
         await addCodexMarketplaceWithRetry(mp.name, codexExternalMarketplaceAddCommand(mp.source), opts, marketplaceExecOpts, failures);
     }
     if (failures.length === 0) {
-        const { pluginKeys, needsPluginHooks } = await composeCodexPluginKeys(packageRoot, localMarketplace, localSelected, externalSelected);
+        const selectedMarketplacePlugins = localMarketplace
+            ? resolveSelectedCodexMarketplacePlugins(localMarketplace, localSelected)
+            : [];
+        await ensureCodexPluginManifests(packageRoot, selectedMarketplacePlugins);
+        if (localMarketplace) {
+            materializeLocalCodexPluginCache(packageRoot, localMarketplace.name, selectedMarketplacePlugins);
+        }
+        const { pluginKeys, needsPluginHooks } = await composeCodexPluginKeys(packageRoot, localMarketplace, selectedMarketplacePlugins, externalSelected);
         enableCodexPluginConfig(path.join(codexHome(), "config.toml"), pluginKeys, needsPluginHooks);
         for (const plugin of [...localSelected, ...externalSelected]) {
             log.ok(`${plugin.name} enabled for Codex`);

package/dist/utils.js

@@ -152,6 +152,49 @@ const CONTENT_FILES = [
     ".agents/plugins/marketplace.json",
     ".agents/plugins/install.json",
     ".claude/hooks/hooks.json",
+    "plugins/auriga-go/.claude-plugin/plugin.json",
+    "plugins/auriga-go/.codex-plugin/plugin.json",
+    "plugins/auriga-go/README.md",
+    "plugins/auriga-go/skills/auriga-go/SKILL.md",
+    "plugins/auriga-go/skills/goalify/SKILL.md",
+    "plugins/auriga-git-guards/.claude-plugin/plugin.json",
+    "plugins/auriga-git-guards/.codex-plugin/plugin.json",
+    "plugins/auriga-git-guards/README.md",
+    "plugins/auriga-git-guards/hooks/hooks.json",
+    "plugins/auriga-git-guards/scripts/commit-reminder.mjs",
+    "plugins/auriga-git-guards/scripts/pr-create-guard.mjs",
+    "plugins/auriga-git-guards/scripts/pr-ready-guard.mjs",
+    "plugins/auriga-git-guards/skills/git-workflow/SKILL.md",
+    "plugins/auriga-workflow-skills/.claude-plugin/plugin.json",
+    "plugins/auriga-workflow-skills/.codex-plugin/plugin.json",
+    "plugins/auriga-workflow-skills/README.md",
+    "plugins/auriga-workflow-skills/skills/incremental-impl/SKILL.md",
+    "plugins/auriga-workflow-skills/skills/session-compound/SKILL.md",
+    "plugins/auriga-workflow-skills/skills/session-compound/analyzers/claude-code.mjs",
+    "plugins/auriga-workflow-skills/skills/session-compound/analyzers/codex.mjs",
+    "plugins/auriga-workflow-skills/skills/session-compound/template.html",
+    "plugins/auriga-workflow-skills/skills/test-designer/SKILL.md",
+    "plugins/session-instructions-loader/.codex-plugin/plugin.json",
+    "plugins/session-instructions-loader/README.md",
+    "plugins/session-instructions-loader/hooks/hooks.json",
+    "plugins/session-instructions-loader/scripts/session-start.mjs",
+    "plugins/deep-review/.claude-plugin/plugin.json",
+    "plugins/deep-review/.codex-plugin/plugin.json",
+    "plugins/deep-review/README.md",
+    "plugins/deep-review/skills/deep-review/SKILL.md",
+    "plugins/deep-review/skills/deep-review/references/reviewers/code-quality.md",
+    "plugins/deep-review/skills/deep-review/references/reviewers/correctness.md",
+    "plugins/deep-review/skills/deep-review/references/reviewers/docs-sync.md",
+    "plugins/deep-review/skills/deep-review/references/reviewers/performance.md",
+    "plugins/deep-review/skills/deep-review/references/reviewers/robustness.md",
+    "plugins/deep-review/skills/deep-review/references/reviewers/security.md",
+    "plugins/deep-review/skills/deep-review/references/reviewers/skill-plugin-quality.md",
+    "plugins/deep-review/skills/deep-review/references/reviewers/spec-conformance.md",
+    "plugins/deep-review/skills/deep-review/references/reviewers/structure.md",
+    "plugins/deep-review/skills/deep-review/references/reviewers/test-quality.md",
+    "plugins/deep-review/skills/deep-review/references/reviewers/ux.md",
+    "plugins/deep-review/skills/reviewer-creator/SKILL.md",
+    "plugins/deep-review/skills/reviewer-creator/references/template.md",
 ];
 async function fetchFile(file) {
     const ref = resolveContentRef();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auriga-cli",
-  "version": "1.20.0",
+  "version": "1.20.1",
   "description": "Interactive CLI to install Claude Code harness modules (Workflow, Skills, Recommended Skills, Plugins, Hooks)",
   "license": "MIT",
   "repository": {