@ciandt-flow/cli 1.0.4 → 1.0.5-beta.49

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +1 -5
  2. package/dist/index.js +49 -45
  3. package/package.json +11 -7
package/README.md CHANGED
@@ -168,10 +168,6 @@ flow health
168
168
 
169
169
  ---
170
170
 
171
- ## Versioning
172
-
173
- This project follows [Semantic Versioning](https://semver.org/). See [CHANGELOG.md](https://github.com/CI-T-HyperX/flow-plugins-cli/blob/main/CHANGELOG.md) for release history.
174
-
175
171
  ## License
176
172
 
177
- MIT
173
+ Copyright (c) CI&T Inc. All rights reserved. See LICENSE.md for details.
package/dist/index.js CHANGED
@@ -1,75 +1,79 @@
1
1
  #!/usr/bin/env node
2
- import {Box,Text,render,useInput}from'ink';import ao,{useMemo,useEffect,useState,useCallback,useRef}from'react';import {jsxs,jsx,Fragment}from'react/jsx-runtime';import {create}from'zustand';import Jr,{HTTPError}from'ky';import {StatusCodes}from'http-status-codes';import Lr from'conf';import*as E from'fs';import E__default,{readFileSync,existsSync,chmodSync,realpathSync}from'fs';import*as q from'path';import q__default,{join}from'path';import*as Q from'os';import Q__default,{homedir}from'os';import eo from'ink-big-text';import to from'ink-gradient';import x from'chalk';import bo from'ink-spinner';import*as N from'fs/promises';import ko from'extract-zip';import Ro from'proper-lockfile';import {randomUUID}from'crypto';import Ct from'semver';import {Command}from'commander';var kr=16;function Bt({label:e,value:t,onChange:n,masked:r=false,isActive:o,error:i}){let s=useRef(t);useEffect(()=>{s.current=t;},[t]),useInput((u,c)=>{if(c.backspace||c.delete){let m=s.current.slice(0,-1);s.current=m,n(m);}else if(u&&!c.ctrl&&!c.meta&&!c.escape&&!c.return&&!c.tab&&!c.upArrow&&!c.downArrow&&!c.leftArrow&&!c.rightArrow){let m=s.current+u;s.current=m,n(m);}},{isActive:o});let a=r?"\u2022".repeat(t.length):t;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{children:[jsx(Text,{color:o?"cyan":"gray",children:o?"\u25B8 ":" "}),jsx(Text,{color:o?"white":"gray",bold:o,children:e.padEnd(kr)}),jsx(Text,{color:o?"cyan":"gray",children:a}),o&&jsx(Text,{color:"cyan",children:"\u2588"})]}),i&&jsx(Box,{paddingLeft:3,children:jsxs(Text,{color:"red",children:["\u26A0 ",i]})})]})}var j=create(e=>({credentials:null,isAuthenticated:false,justAuthenticated:false,setCredentials:t=>e({credentials:t,isAuthenticated:true}),clearCredentials:()=>e({credentials:null,isAuthenticated:false,justAuthenticated:false}),setJustAuthenticated:t=>e({justAuthenticated:t})}));var p=create(e=>({activeTab:"discover",focus:"list",selectedIndex:0,actionMenuOpen:false,notification:null,loading:false,loadingMessage:"",catalogError:null,setActiveTab:t=>e({activeTab:t}),setFocus:t=>e({focus:t}),setSelectedIndex:t=>e({selectedIndex:t}),setActionMenuOpen:t=>e({actionMenuOpen:t}),showNotification:(t,n)=>e({notification:{message:t,type:n}}),clearNotification:()=>e({notification:null}),setLoading:(t,n="")=>e({loading:t,loadingMessage:t?n:""}),setCatalogError:t=>e({catalogError:t})}));var Oe="FLOW",b="flow-skills";var Z=new Lr({projectName:Oe});function jt(){try{chmodSync(Z.path,384);}catch{}}function C(){let e=Z.get("credentials");if(!e)return null;try{return JSON.parse(e)}catch{return null}}function _t(e){Z.set("credentials",JSON.stringify(e)),jt();}function Kt(){Z.delete("credentials"),Z.delete("tokenCache");}function Jt(){return Z.path}function qt(e){Z.set("tokenCache",{accessToken:e.accessToken,expiresAt:e.expiresAt}),jt();}function lt(){let e=Z.get("tokenCache");return e?{accessToken:e.accessToken,expiresAt:e.expiresAt}:null}function D(){let e=lt();return e?new Date(e.expiresAt)>new Date:false}var Ur=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^0\.0\.0\.0$/,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i];function Dr(e){return Ur.some(t=>t.test(e))}function Or(e,t){let n=process.env[e]??t;if(!n)throw new Error(`Missing required environment variable: ${e}`);return n}function Fe(e,t){let n=Or(e,t),r;try{r=new URL(n);}catch{throw new Error(`${e} must be a valid URL. Got: "${n}"`)}if(r.protocol!=="https:")throw new Error(`${e} must be an HTTPS URL. Got protocol: "${r.protocol}"`);if(r.username||r.password)throw new Error(`${e} must not contain embedded credentials (user:pass@host is not allowed)`);if(Dr(r.hostname))throw new Error(`${e} must not point to a private/loopback address. Got: "${r.hostname}"`);return n}var Fr=/Bearer\s+[A-Za-z0-9\-._~+/]+=*/g,Nr=/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,Br=/[A-Za-z0-9+/]{40,}={0,2}/g;function ct(e){return e.replace(Fr,"Bearer ***").replace(Nr,"***").replace(Br,"***")}var Pe=class{context;constructor(t){this.context=t;}write(t){let n=this.context==="tui"?this.formatTui(t):this.formatCli(t);process.stderr.write(n+`
3
- `);}formatTui(t){return `[flow:${t.module}] ${t.message}`}formatCli(t){let n=String(t.timestamp.getHours()).padStart(2,"0"),r=String(t.timestamp.getMinutes()).padStart(2,"0"),o=String(t.timestamp.getSeconds()).padStart(2,"0");return `[${n}:${r}:${o}] [${t.level.toUpperCase()}] ${t.message}`}};var Ie=".claude",Ht=".flow";function Vt(e,t){return q.join(Q.homedir(),Ie,"plugins","cache",b,e,t)}function ut(e){return q.join(Q.homedir(),Ie,"plugins","marketplaces",b,"plugins","native",e)}function Ne(){return q.join(Q.homedir(),Ie,"plugins","marketplaces",b,".claude-plugin","marketplace.json")}function zt(){return q.join(Q.homedir(),Ie,"plugins","known_marketplaces.json")}function Gt(){return q.join(Q.homedir(),Ie,"plugins","marketplaces",b)}function Xt(){return q.join(Q.homedir(),Ht,"cache","install.lock")}function Wt(){return q.join(Q.homedir(),Ht,"logs","flowsetup.log")}var jr=5*1024*1024,_r=3,Be=class{filePath;constructor(){this.filePath=Wt(),this.ensureDir(),this.rotateIfNeeded();}write(t){let n=`[${t.timestamp.toISOString()}] [${t.level.toUpperCase()}] [${t.module}] ${t.message}
4
- `;try{E.appendFileSync(this.filePath,n,"utf-8");}catch{}}ensureDir(){try{let t=q.dirname(this.filePath);E.mkdirSync(t,{recursive:!0});}catch{}}rotateIfNeeded(){try{if(E.statSync(this.filePath).size>jr){let n=new Date().toISOString().replace(/[:.]/g,"-"),r=this.filePath.replace(".log",`-${n}.log`);E.renameSync(this.filePath,r),this.cleanOldBackups();}}catch{}}cleanOldBackups(){try{let t=q.dirname(this.filePath),n=q.basename(this.filePath,".log"),r=E.readdirSync(t).filter(o=>o.startsWith(n+"-")&&o.endsWith(".log")).sort().reverse();for(let o of r.slice(_r))E.unlinkSync(q.join(t,o));}catch{}}};var je=class{write(t){process.stdout.write(t.message+`
5
- `);}};var fe={debug:0,info:1,warn:2,error:3},le={context:"cli",transports:[],minLevel:"warn",debugModules:null};function Kr(){let e=process.env.DEBUG;if(!e)return null;let t=e.split(",").map(r=>r.trim()).filter(Boolean);for(let r of t)if(r==="flow:*")return "all";let n=new Set;for(let r of t)r.startsWith("flow:")&&n.add(r.slice(5));return n.size>0?n:null}function _(e,t){if(e==="tui"){let n=Kr();le={context:e,transports:[new Pe("tui"),new Be],minLevel:n?"debug":"warn",debugModules:n};}else t?.silent?le={context:e,transports:[],minLevel:"error",debugModules:null}:t?.verbose?le={context:e,transports:[new Pe("cli")],minLevel:"debug",debugModules:null}:le={context:e,transports:[new je],minLevel:"info",debugModules:null};}function Zt(){return le.transports}function Qt(e,t){let{debugModules:n,minLevel:r}=le;return le.context==="tui"&&n&&n!=="all"?n.has(t)?fe[e]>=fe.debug:fe[e]>=fe.warn:fe[e]>=fe[r]}var Yt=new Map;function _e(e,t,n){if(!Qt(e,t))return;let r={level:e,module:t,message:ct(n),timestamp:new Date};for(let o of Zt())o.write(r);}function S(e){let t=Yt.get(e);if(t)return t;let n={debug:r=>_e("debug",e,r),info:r=>_e("info",e,r),warn:r=>_e("warn",e,r),error:r=>_e("error",e,r)};return Yt.set(e,n),n}var dt=S("api:auth"),Hr=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function Vr(e){if(!Hr.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var en={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};async function zr(e){if(e instanceof HTTPError){let t=e.response.status;dt.error(`HTTP error during authentication [status=${t}]`);let n="";try{let r=await e.response.text(),o=JSON.parse(r);typeof o.error=="string"&&(n=o.error);}catch{}return n&&en[n]?new Error(en[n]):t===StatusCodes.UNAUTHORIZED||t===StatusCodes.FORBIDDEN||t===StatusCodes.INTERNAL_SERVER_ERROR?new Error("Invalid credentials"):t>=StatusCodes.BAD_REQUEST&&t<StatusCodes.INTERNAL_SERVER_ERROR?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}return e instanceof Error?(dt.debug(`Non-HTTP error during authentication: ${e.message}`),e):(dt.debug("Unknown error during authentication"),new Error("Authentication failed"))}async function Ee(e){let t=Fe("AUTH_ENGINE_URL","https://flow.ciandt.com/auth-engine-api/v2/api-key/token");Vr(e.tenant);let n;try{n=await Jr.post(t,{headers:{FlowTenant:e.tenant},json:{clientSecret:e.clientSecret}}).json();}catch(o){throw await zr(o)}let r=n.expires_at??new Date(Date.now()+(n.expires_in??3600)*1e3).toISOString();_t(e),qt({accessToken:n.access_token,expiresAt:r});}async function tn(){if(D()){let e=lt();if(!e)throw new Error("Flow CLI not configured. Run: flow-cli auth login");return e.accessToken}throw new Error("Flow CLI not configured or token expired. Run: flow-cli auth login")}var O=["clientId","clientSecret","tenant"],Xr={clientId:"Client ID",clientSecret:"Client Secret",tenant:"Tenant"};function nn(){let[e,t]=useState({clientId:"",clientSecret:"",tenant:""}),[n,r]=useState("clientId"),[o,i]=useState({}),[s,a]=useState(null),[u,c]=useState(false),{setCredentials:m,setJustAuthenticated:h}=j(),{setFocus:T}=p();useInput((l,d)=>{if(!u){if(d.shift&&d.tab){let f=O.indexOf(n);f>0&&r(O[f-1]);}else if(d.tab){let f=O.indexOf(n);f<O.length-1&&r(O[f+1]);}else if(d.return)if(n==="tenant")ie();else {let f=O.indexOf(n);r(O[f+1]);}}},{isActive:true});let ie=async()=>{let l={};for(let d of O)e[d].trim()||(l[d]="This field is required");if(Object.keys(l).length>0){i(l);let d=O.find(f=>l[f]);d&&r(d);return}c(true),a(null);try{await Ee({clientId:e.clientId.trim(),clientSecret:e.clientSecret.trim(),tenant:e.tenant.trim()});let{clientSecret:d,...f}=e;m(f),h(!0),T("list");}catch(d){a(d instanceof Error?d.message:"Authentication failed");}finally{c(false),t(d=>({...d,clientSecret:""}));}},se=l=>d=>{t(f=>({...f,[l]:d})),o[l]&&i(f=>({...f,[l]:void 0}));};return jsxs(Box,{flexDirection:"column",padding:2,children:[jsx(Box,{marginBottom:1,children:jsxs(Text,{bold:true,color:"cyan",children:[Oe," \u2014 Initial Setup"]})}),jsx(Box,{flexDirection:"column",children:O.map(l=>jsx(Box,{marginBottom:1,children:jsx(Bt,{label:Xr[l],value:e[l],onChange:se(l),masked:l==="clientSecret",isActive:n===l&&!u,error:o[l]})},l))}),u&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"cyan",children:"Authenticating..."})}),s&&jsx(Box,{marginTop:1,children:jsxs(Text,{color:"red",children:["\u26A0 ",s]})}),jsx(Box,{marginTop:1,children:jsx(Text,{dimColor:true,children:"Tab next field \xB7 Enter confirm"})})]})}var Qr=JSON.parse(readFileSync(join(import.meta.dirname,"..","package.json"),"utf8")),Je=Qr.version;function sn(){return jsxs(Box,{flexDirection:"column",alignItems:"center",children:[jsx(to,{name:"morning",children:jsx(eo,{text:"FLOW",font:"block"})}),jsx(Box,{marginTop:-1,marginBottom:1,children:jsxs(Text,{dimColor:true,children:["Marketplace \xB7 v",Je]})})]})}var gt={discover:"Discover",installed:"Installed"},no=Object.keys(gt);function ln(){let e=p(t=>t.activeTab);return jsxs(Box,{paddingX:1,paddingBottom:1,children:[no.map(t=>jsx(Box,{marginRight:2,children:t===e?jsx(Text,{bold:true,underline:true,color:"cyan",children:gt[t]}):jsx(Text,{dimColor:true,children:gt[t]})},t)),jsx(Text,{dimColor:true,children:"(Tab to cycle)"})]})}var F=create(e=>({query:"",setQuery:t=>e({query:t}),resetQuery:()=>e({query:""})}));function un(){let e=p(r=>r.focus),t=F(r=>r.query),n=e==="search";return jsxs(Box,{borderStyle:"single",borderTop:false,borderBottom:true,borderLeft:false,borderRight:false,paddingX:1,marginX:1,marginBottom:1,children:[jsx(Text,{color:n?"cyan":"gray",children:"\u03C1 "}),n?jsxs(Fragment,{children:[jsx(Text,{color:"white",children:t}),jsx(Text,{color:"cyan",children:"\u2588"})]}):jsx(Text,{dimColor:true,children:t||"Search..."})]})}function I(e){return e.replace(/\x1b\[[0-9;:<=>?]*[ -/]*[@-~]/g,"").replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g,"").replace(/\x1b./g,"").replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g,"")}function me(e){process.stdout.write(x.green(` \u2713 ${I(e)}
6
- `));}function P(e){process.stderr.write(x.red(` \u2717 ${I(e)}
7
- `));}function w(e){process.stdout.write(x.cyan(` \u2139 ${I(e)}
8
- `));}function ze(e,t){let n=t.map(a=>a.map(I)),r=[e,...n],o=e.map((a,u)=>Math.max(...r.map(c=>(c[u]??"").length))),i=o.map(a=>"\u2500".repeat(a)).join(" "),s=a=>a.map((u,c)=>u.padEnd(o[c])).join(" ");process.stdout.write(`
2
+ import {Box,Text,render,useInput}from'ink';import Qo,{useState,useEffect,useMemo,useCallback,useRef}from'react';import {jsxs,jsx,Fragment}from'react/jsx-runtime';import {create}from'zustand';import Do,{HTTPError}from'ky';import {StatusCodes}from'http-status-codes';import*as me from'crypto';import {randomUUID}from'crypto';import*as I from'fs';import I__default,{readFileSync,existsSync,realpathSync}from'fs';import*as q from'path';import q__default,{join}from'path';import*as Q from'os';import Q__default,{homedir}from'os';import {execFile,exec,spawn}from'child_process';import {promisify}from'util';import*as Pn from'readline';import Xe from'keytar';import $n from'conf';import qo from'ink-big-text';import Ho from'ink-gradient';import x from'chalk';import ui from'ink-spinner';import*as F from'fs/promises';import vi from'extract-zip';import xi from'proper-lockfile';import Yt from'semver';import {Command}from'commander';var so=16;function cn({label:e,value:t,onChange:n,masked:r=false,isActive:o,error:i}){let s=useRef(t);useEffect(()=>{s.current=t;},[t]),useInput((u,c)=>{if(c.backspace||c.delete){let m=s.current.slice(0,-1);s.current=m,n(m);}else if(u&&!c.ctrl&&!c.meta&&!c.escape&&!c.return&&!c.tab&&!c.upArrow&&!c.downArrow&&!c.leftArrow&&!c.rightArrow){let m=s.current+u;s.current=m,n(m);}},{isActive:o});let a=r?"\u2022".repeat(t.length):t;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{children:[jsx(Text,{color:o?"cyan":"gray",children:o?"\u25B8 ":" "}),jsx(Text,{color:o?"white":"gray",bold:o,children:e.padEnd(so)}),jsx(Text,{color:o?"cyan":"gray",children:a}),o&&jsx(Text,{color:"cyan",children:"\u2588"})]}),i&&jsx(Box,{paddingLeft:3,children:jsxs(Text,{color:"red",children:["\u26A0 ",i]})})]})}var _=create(e=>({credentials:null,isAuthenticated:false,justAuthenticated:false,setCredentials:t=>e({credentials:t,isAuthenticated:true}),clearCredentials:()=>e({credentials:null,isAuthenticated:false,justAuthenticated:false}),setJustAuthenticated:t=>e({justAuthenticated:t})}));var d=create(e=>({activeTab:"discover",focus:"list",selectedIndex:0,actionMenuOpen:false,notification:null,loading:false,loadingMessage:"",catalogError:null,setActiveTab:t=>e({activeTab:t}),setFocus:t=>e({focus:t}),setSelectedIndex:t=>e({selectedIndex:t}),setActionMenuOpen:t=>e({actionMenuOpen:t}),showNotification:(t,n)=>e({notification:{message:t,type:n}}),clearNotification:()=>e({notification:null}),setLoading:(t,n="")=>e({loading:t,loadingMessage:t?n:""}),setCatalogError:t=>e({catalogError:t})}));var un="FLOW",b="flow-skills",Ve=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;var Je="aes-256-gcm",co=16,pn=16,$e=class{key;constructor(t){if(t.length!==32)throw new Error(`Invalid key length: expected 32 bytes, got ${t.length}`);this.key=t;}encrypt(t){let n=me.randomBytes(co),r=me.createCipheriv(Je,this.key,n,{authTagLength:pn}),o=Buffer.concat([r.update(t,"utf8"),r.final()]),i=r.getAuthTag();return {iv:n.toString("hex"),authTag:i.toString("hex"),ciphertext:o.toString("hex"),algorithm:Je}}decrypt(t){if(t.algorithm!==Je)throw new Error(`Unsupported encryption algorithm: ${t.algorithm}`);let n=me.createDecipheriv(Je,this.key,Buffer.from(t.iv,"hex"),{authTagLength:pn});return n.setAuthTag(Buffer.from(t.authTag,"hex")),Buffer.concat([n.update(Buffer.from(t.ciphertext,"hex")),n.final()]).toString("utf8")}};var uo=/Bearer\s+[A-Za-z0-9\-._~+/]+=*/g,po=/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,fo=/[A-Za-z0-9+/]{40,}={0,2}/g;function xt(e){return e.replace(uo,"Bearer ***").replace(po,"***").replace(fo,"***")}var ke=class{context;constructor(t){this.context=t;}write(t){let n=this.context==="tui"?this.formatTui(t):this.formatCli(t);process.stderr.write(n+`
3
+ `);}formatTui(t){return `[flow:${t.module}] ${t.message}`}formatCli(t){let n=String(t.timestamp.getHours()).padStart(2,"0"),r=String(t.timestamp.getMinutes()).padStart(2,"0"),o=String(t.timestamp.getSeconds()).padStart(2,"0");return `[${n}:${r}:${o}] [${t.level.toUpperCase()}] ${t.message}`}};var Re=".claude",dn=".flow";function fn(e,t){return q.join(Q.homedir(),Re,"plugins","cache",b,e,t)}function bt(e){return q.join(Q.homedir(),Re,"plugins","marketplaces",b,"plugins","native",e)}function qe(){return q.join(Q.homedir(),Re,"plugins","marketplaces",b,".claude-plugin","marketplace.json")}function mn(){return q.join(Q.homedir(),Re,"plugins","known_marketplaces.json")}function gn(){return q.join(Q.homedir(),Re,"plugins","marketplaces",b)}function hn(){return q.join(Q.homedir(),dn,"cache","install.lock")}function yn(){return q.join(Q.homedir(),dn,"logs","flowsetup.log")}var mo=5*1024*1024,go=3,He=class{filePath;constructor(){this.filePath=yn(),this.ensureDir(),this.rotateIfNeeded();}write(t){let n=`[${t.timestamp.toISOString()}] [${t.level.toUpperCase()}] [${t.module}] ${t.message}
4
+ `;try{I.appendFileSync(this.filePath,n,"utf-8");}catch{}}ensureDir(){try{let t=q.dirname(this.filePath);I.mkdirSync(t,{recursive:!0});}catch{}}rotateIfNeeded(){try{if(I.statSync(this.filePath).size>mo){let n=new Date().toISOString().replace(/[:.]/g,"-"),r=this.filePath.replace(".log",`-${n}.log`);I.renameSync(this.filePath,r),this.cleanOldBackups();}}catch{}}cleanOldBackups(){try{let t=q.dirname(this.filePath),n=q.basename(this.filePath,".log"),r=I.readdirSync(t).filter(o=>o.startsWith(n+"-")&&o.endsWith(".log")).sort().reverse();for(let o of r.slice(go))I.unlinkSync(q.join(t,o));}catch{}}};var ze=class{write(t){process.stdout.write(t.message+`
5
+ `);}};var ge={debug:0,info:1,warn:2,error:3},ce={context:"cli",transports:[],minLevel:"warn",debugModules:null};function ho(){let e=process.env.DEBUG;if(!e)return null;let t=e.split(",").map(r=>r.trim()).filter(Boolean);for(let r of t)if(r==="flow:*")return "all";let n=new Set;for(let r of t)r.startsWith("flow:")&&n.add(r.slice(5));return n.size>0?n:null}function j(e,t){if(e==="tui"){let n=ho();ce={context:e,transports:[new ke("tui"),new He],minLevel:n?"debug":"warn",debugModules:n};}else t?.silent?ce={context:e,transports:[],minLevel:"error",debugModules:null}:t?.verbose?ce={context:e,transports:[new ke("cli")],minLevel:"debug",debugModules:null}:ce={context:e,transports:[new ze],minLevel:"info",debugModules:null};}function wn(){return ce.transports}function vn(e,t){let{debugModules:n,minLevel:r}=ce;return ce.context==="tui"&&n&&n!=="all"?n.has(t)?ge[e]>=ge.debug:ge[e]>=ge.warn:ge[e]>=ge[r]}var xn=new Map;function Ge(e,t,n){if(!vn(e,t))return;let r={level:e,module:t,message:xt(n),timestamp:new Date};for(let o of wn())o.write(r);}function y(e){let t=xn.get(e);if(t)return t;let n={debug:r=>Ge("debug",e,r),info:r=>Ge("info",e,r),warn:r=>Ge("warn",e,r),error:r=>Ge("error",e,r)};return xn.set(e,n),n}var St=y("encryption"),Pt="__encrypted__";function yo(e){return typeof e=="object"&&e!==null&&Pt in e&&e[Pt]===true}function Et(e){return {serialize(t){let n=JSON.stringify(t),r=e.encrypt(n),o={[Pt]:true,envelope:r};return JSON.stringify(o,null," ")},deserialize(t){let n;try{n=JSON.parse(t);}catch{return St.warn("Config file contains unparseable data, treating as empty"),{}}if(yo(n))try{let r=e.decrypt(n.envelope);return JSON.parse(r)}catch(r){return St.error(`Decryption failed: ${r instanceof Error?r.message:"unknown error"}. Config will be treated as empty. Re-authentication may be required.`),{}}return St.info("Detected plaintext config \u2014 will encrypt on next write"),n}}}var It=promisify(execFile),xo=promisify(exec),he=class{static async isAvailable(){try{return await xo("command -v security"),!0}catch{return false}}async getSecret(t,n){try{let{stdout:r}=await It("security",["find-generic-password","-w","-a",n,"-s",t]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await It("security",["add-generic-password","-U","-a",n,"-s",t,"-w",r]);}async deleteSecret(t,n){try{return await It("security",["delete-generic-password","-a",n,"-s",t]),!0}catch{return false}}getStoragePath(){return "macOS Keychain (security)"}};var Sn=promisify(execFile),Tt=promisify(exec),Eo=[{name:"apt",command:"sudo apt install -y libsecret-tools"},{name:"dnf",command:"sudo dnf install -y libsecret"},{name:"pacman",command:"sudo pacman -S --noconfirm libsecret"},{name:"apk",command:"sudo apk add libsecret-tools"},{name:"zypper",command:"sudo zypper install -y libsecret-tools"}],We=y("encryption:linux-keyvault");function Io(e){let t=Pn.createInterface({input:process.stdin,output:process.stdout});return new Promise(n=>{t.question(e,r=>{t.close(),n(r.trim().toLowerCase());});})}var ee=class e{static async isAvailable(){try{return await Tt("command -v secret-tool"),!0}catch{return false}}static async detectPackageManager(){for(let t of Eo)try{return await Tt(`command -v ${t.name}`),t}catch{}return null}static async ensureInstalled(){if(await e.isAvailable())return true;We.info("Secure credential storage requires 'secret-tool' (libsecret). This tool allows us to store your encryption key in the OS keyring, so your credentials are protected even if someone copies the config file.");let t=await e.detectPackageManager();if(!t)return We.warn("Could not detect a supported package manager. Please install libsecret manually."),false;let n=await Io(" ? Install secret-tool? This requires sudo. (y/N) ");if(n!=="y"&&n!=="yes")return false;try{return We.info(`Running: ${t.command}`),await Tt(t.command),e.isAvailable()}catch{return We.warn("Installation failed. Falling back to derived key."),false}}async getSecret(t,n){try{let{stdout:r}=await Sn("secret-tool",["lookup","service",t,"account",n]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await new Promise((o,i)=>{let s=spawn("secret-tool",["store","--label",t,"service",t,"account",n]);s.stdin.end(r,"utf8"),s.on("close",a=>{a===0?o():i(new Error(`secret-tool exited with code ${a}`));}),s.on("error",i);});}async deleteSecret(t,n){try{return await Sn("secret-tool",["clear","service",t,"account",n]),!0}catch{return false}}getStoragePath(){return "Linux Secret Service (secret-tool)"}};var In=y("encryption:windows-keyvault"),ye=class{static async isAvailable(){try{return await Xe.getPassword("__flow_probe__","__flow_probe__"),!0}catch{return false}}async getSecret(t,n){try{return await Xe.getPassword(t,n)}catch(r){let o=r instanceof Error?r.message.split(`
6
+ `)[0]:"unknown error";return In.error(`Failed to read secret from Windows Credential Manager [service="${t}", account="${n}"]: ${o}`),null}}async setSecret(t,n,r){try{await Xe.setPassword(t,n,r);}catch(o){let i=o instanceof Error?o.message.split(`
7
+ `)[0]:"unknown error",s=`Failed to store secret in Windows Credential Manager [service="${t}", account="${n}"]: ${i}`;throw In.error(s),new Error(s)}}async deleteSecret(t,n){try{return await Xe.deletePassword(t,n)}catch{return false}}getStoragePath(){return "Windows Credential Manager (keytar)"}};var To=32,Ao="flow-plugins-cli-fallback",kn="flow-plugins-cli-fallback",$o={linux:"install secret-tool (e.g. sudo apt install libsecret-tools)",darwin:"ensure the Keychain is accessible (security binary must be available)",win32:"ensure Credential Manager is available (cmdkey must be in PATH)"};function ko(){let e=`${Q.hostname()}${Q.userInfo().username}`;return me.scryptSync(e,Ao,To)}function Ro(){let e=ko(),t=new $e(e),n=Et(t);return new $n({projectName:kn,serialize:n.serialize,deserialize:n.deserialize})}var At=null;function Ze(){return At||(At=Ro()),At}var K=class{warned=false;async getSecret(t,n){return Ze().get(`${t}:${n}`)??null}async setSecret(t,n,r){if(!this.warned){let o=$o[process.platform]??"ensure the OS keyring is available";process.stderr.write(`\u26A0 Secure keyring unavailable. Credentials are stored in an encrypted file
8
+ using a machine-derived key. For stronger security, ${o}.
9
+ `),this.warned=true;}Ze().set(`${t}:${n}`,r);}async deleteSecret(t,n){let r=Ze(),o=`${t}:${n}`;return r.has(o)?(r.delete(o),true):false}getStoragePath(){return Ze().path}static hasExistingData(){try{let t=new $n({projectName:kn});return I.existsSync(t.path)}catch{return false}}};async function $t(){if(K.hasExistingData())return new K;switch(process.platform){case "darwin":return await he.isAvailable()?new he:new K;case "linux":return await ee.isAvailable()?new ee:await ee.ensureInstalled()?new ee:new K;case "win32":return await ye.isAvailable()?new ye:new K;default:throw new Error(`Unsupported platform: ${process.platform}`)}}var Co=y("config:credentials"),we="flow-plugins-cli",Rt="credentials",Ct="token-cache",kt=null;async function ve(){return kt||(kt=$t()),kt}async function C(){let t=await(await ve()).getSecret(we,Rt);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function Rn(e){let{clientId:t,clientSecret:n,tenant:r}=e,o=[!t?.trim()&&"clientId",!n?.trim()&&"clientSecret",!r?.trim()&&"tenant"].filter(Boolean);if(o.length>0)throw Co.error(`missing or empty fields: ${o.join(", ")}`),new Error("Cannot save credentials: clientId, clientSecret, and tenant are required");await(await ve()).setSecret(we,Rt,JSON.stringify(e));}async function Cn(){let e=await ve();await e.deleteSecret(we,Rt),await e.deleteSecret(we,Ct);}async function Ln(){return (await ve()).getStoragePath()}async function Mn(e){await(await ve()).setSecret(we,Ct,JSON.stringify(e));}async function Lt(){let t=await(await ve()).getSecret(we,Ct);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function D(){let e=await Lt();return e?new Date(e.expiresAt)>new Date:false}var Lo=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^0\.0\.0\.0$/,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i];function Mo(e){return Lo.some(t=>t.test(e))}function Uo(e,t){let n=process.env[e]??t;if(!n)throw new Error(`Missing required environment variable: ${e}`);return n}function Ye(e,t){let n=Uo(e,t),r;try{r=new URL(n);}catch{throw new Error(`${e} must be a valid URL. Got: "${n}"`)}if(r.protocol!=="https:")throw new Error(`${e} must be an HTTPS URL. Got protocol: "${r.protocol}"`);if(r.username||r.password)throw new Error(`${e} must not contain embedded credentials (user:pass@host is not allowed)`);if(Mo(r.hostname))throw new Error(`${e} must not point to a private/loopback address. Got: "${r.hostname}"`);return n}var Mt=y("api:auth");function No(e){if(!Ve.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var Un={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};async function Fo(e){if(e instanceof HTTPError){let t=e.response.status;Mt.error(`HTTP error during authentication [status=${t}]`);let n="";try{let r=await e.response.text(),o=JSON.parse(r);typeof o.error=="string"&&(n=o.error);}catch{}return n&&Un[n]?new Error(Un[n]):t===StatusCodes.UNAUTHORIZED||t===StatusCodes.FORBIDDEN||t===StatusCodes.INTERNAL_SERVER_ERROR?new Error("Invalid credentials"):t>=StatusCodes.BAD_REQUEST&&t<StatusCodes.INTERNAL_SERVER_ERROR?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}return e instanceof Error?(Mt.debug(`Non-HTTP error during authentication: ${e.message}`),e):(Mt.debug("Unknown error during authentication"),new Error("Authentication failed"))}async function Le(e){let t=Ye("AUTH_ENGINE_URL","https://flow.ciandt.com/auth-engine-api/v2/api-key/token");No(e.tenant);let n;try{n=await Do.post(t,{headers:{FlowTenant:e.tenant},json:{clientSecret:e.clientSecret}}).json();}catch(o){throw await Fo(o)}let r=n.expires_at??new Date(Date.now()+(n.expires_in??3600)*1e3).toISOString();await Rn(e),await Mn({accessToken:n.access_token,expiresAt:r});}async function Dn(){if(await D()){let t=await Lt();if(!t)throw new Error("Flow CLI not configured. Run: flow-cli auth login");return t.accessToken}throw new Error("Flow CLI not configured or token expired. Run: flow-cli auth login")}var O=["clientId","clientSecret","tenant"],_o={clientId:"Client ID",clientSecret:"Client Secret",tenant:"Tenant"};function On(){let[e,t]=useState({clientId:"",clientSecret:"",tenant:""}),[n,r]=useState("clientId"),[o,i]=useState({}),[s,a]=useState(null),[u,c]=useState(false),{setCredentials:m,setJustAuthenticated:h}=_(),{setFocus:T}=d();useInput((l,p)=>{if(!u){if(p.shift&&p.tab){let f=O.indexOf(n);f>0&&r(O[f-1]);}else if(p.tab){let f=O.indexOf(n);f<O.length-1&&r(O[f+1]);}else if(p.return)if(n==="tenant")se();else {let f=O.indexOf(n);r(O[f+1]);}}},{isActive:true});let se=async()=>{let l={};for(let p of O)e[p].trim()||(l[p]="This field is required");if(Object.keys(l).length>0){i(l);let p=O.find(f=>l[f]);p&&r(p);return}c(true),a(null);try{await Le({clientId:e.clientId.trim(),clientSecret:e.clientSecret.trim(),tenant:e.tenant.trim()});let{clientSecret:p,...f}=e;m(f),h(!0),T("list");}catch(p){a(p instanceof Error?p.message:"Authentication failed");}finally{c(false),t(p=>({...p,clientSecret:""}));}},ae=l=>p=>{t(f=>({...f,[l]:p})),o[l]&&i(f=>({...f,[l]:void 0}));};return jsxs(Box,{flexDirection:"column",padding:2,children:[jsx(Box,{marginBottom:1,children:jsxs(Text,{bold:true,color:"cyan",children:[un," \u2014 Initial Setup"]})}),jsx(Box,{flexDirection:"column",children:O.map(l=>jsx(Box,{marginBottom:1,children:jsx(cn,{label:_o[l],value:e[l],onChange:ae(l),masked:l==="clientSecret",isActive:n===l&&!u,error:o[l]})},l))}),u&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"cyan",children:"Authenticating..."})}),s&&jsx(Box,{marginTop:1,children:jsxs(Text,{color:"red",children:["\u26A0 ",s]})}),jsx(Box,{marginTop:1,children:jsx(Text,{dimColor:true,children:"Tab next field \xB7 Enter confirm"})})]})}var Vo=JSON.parse(readFileSync(join(import.meta.dirname,"..","package.json"),"utf8")),tt=Vo.version;function Bn(){return jsxs(Box,{flexDirection:"column",alignItems:"center",children:[jsx(Ho,{name:"morning",children:jsx(qo,{text:"FLOW",font:"block"})}),jsx(Box,{marginTop:-1,marginBottom:1,children:jsxs(Text,{dimColor:true,children:["Marketplace \xB7 v",tt]})})]})}var Nt={discover:"Discover",installed:"Installed"},zo=Object.keys(Nt);function jn(){let e=d(t=>t.activeTab);return jsxs(Box,{paddingX:1,paddingBottom:1,children:[zo.map(t=>jsx(Box,{marginRight:2,children:t===e?jsx(Text,{bold:true,underline:true,color:"cyan",children:Nt[t]}):jsx(Text,{dimColor:true,children:Nt[t]})},t)),jsx(Text,{dimColor:true,children:"(Tab to cycle)"})]})}var N=create(e=>({query:"",setQuery:t=>e({query:t}),resetQuery:()=>e({query:""})}));function Vn(){let e=d(r=>r.focus),t=N(r=>r.query),n=e==="search";return jsxs(Box,{borderStyle:"single",borderTop:false,borderBottom:true,borderLeft:false,borderRight:false,paddingX:1,marginX:1,marginBottom:1,children:[jsx(Text,{color:n?"cyan":"gray",children:"\u03C1 "}),n?jsxs(Fragment,{children:[jsx(Text,{color:"white",children:t}),jsx(Text,{color:"cyan",children:"\u2588"})]}):jsx(Text,{dimColor:true,children:t||"Search..."})]})}function E(e){return e==null?"":e.replace(/\x1b\[[0-9;:<=>?]*[ -/]*[@-~]/g,"").replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g,"").replace(/\x1b./g,"").replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g,"")}function xe(e){process.stdout.write(x.green(` \u2713 ${E(e)}
10
+ `));}function P(e){process.stderr.write(x.red(` \u2717 ${E(e)}
11
+ `));}function v(e){process.stdout.write(x.cyan(` \u2139 ${E(e)}
12
+ `));}function it(e,t){let n=t.map(a=>a.map(E)),r=[e,...n],o=e.map((a,u)=>Math.max(...r.map(c=>(c[u]??"").length))),i=o.map(a=>"\u2500".repeat(a)).join(" "),s=a=>a.map((u,c)=>u.padEnd(o[c])).join(" ");process.stdout.write(`
9
13
  `),process.stdout.write(` ${x.bold(s(e))}
10
14
  `),process.stdout.write(` ${x.dim(i)}
11
15
  `);for(let a of n)process.stdout.write(` ${s(a)}
12
16
  `);process.stdout.write(`
13
- `);}function Ge(e){process.stdout.write(JSON.stringify(e,null,2)+`
14
- `);}function Xe(e){let t=new Date(e);return isNaN(t.getTime())?"\u2014":new Intl.DateTimeFormat("en-US",{dateStyle:"short"}).format(t)}var dn=ao.memo(function({item:t,isSelected:n}){let r=t.status==="disabled"?"yellow":"green";return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:n?"cyan":"gray",children:n?"\u203A ":"\u25CB "}),jsx(Text,{bold:n,color:n?"cyan":"white",children:t.name}),jsxs(Text,{dimColor:true,children:[t.authorName?` \xB7 ${t.authorName}`:""," \xB7 v",t.version]}),t.status&&jsxs(Text,{color:r,children:[" [",t.status,"]"]}),t.updateAvailable&&jsx(Text,{color:"yellow",children:" [\u2191 update available]"}),t.installedBadge&&jsx(Text,{color:"cyan",children:" [installed]"}),t.installedAt&&jsxs(Text,{dimColor:true,children:[" \xB7 ",Xe(t.installedAt)]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:t.description})})]})});function fn({message:e}){return jsx(Box,{paddingX:2,paddingY:1,children:jsx(Text,{dimColor:true,children:e??"No items found."})})}var wt=5;function gn({items:e,emptyMessage:t}){let n=p(u=>u.selectedIndex);if(e.length===0)return jsx(fn,{message:t});let r=Math.max(0,n-Math.floor(wt/2)),o=Math.min(e.length,r+wt);o===e.length&&(r=Math.max(0,o-wt));let i=e.slice(r,o),s=r,a=e.length-o;return jsxs(Box,{flexDirection:"column",children:[s>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",s," more above"]})}),i.map((u,c)=>jsx(dn,{item:u,isSelected:r+c===n},u.name)),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",a," more below"]})})]})}var uo={discover:"Discover plugins",installed:"Installed plugins"};function yn({items:e,tabId:t,emptyMessage:n}){return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{paddingX:1,paddingBottom:1,children:[jsx(Text,{bold:true,children:uo[t]}),jsxs(Text,{dimColor:true,children:[" (",e.length,")"]})]}),jsx(un,{}),jsx(gn,{items:e,emptyMessage:n})]})}function wn({filteredItems:e,emptyMessage:t}){let n=p(r=>r.activeTab);return jsx(Box,{flexDirection:"column",flexGrow:1,children:n==="discover"?jsx(yn,{items:e,tabId:"discover",emptyMessage:t},"discover"):jsx(yn,{items:e,tabId:"installed",emptyMessage:t},"installed")})}var mo={tabs:"Tab: switch tab | \u2191\u2193: navigate | Enter: select | /: search | q: quit",list:"Tab: switch tab | \u2191\u2193: navigate | Enter: select | /: search | q: quit",search:"Type to filter | Esc: cancel search | Enter: confirm",actionMenu:"\u2191\u2193: navigate options | Enter: confirm | Esc: close menu",auth:"Tab: next field | Enter: confirm | Ctrl+C: quit"};function bn(){let e=p(t=>t.focus);return jsx(Box,{borderStyle:"single",borderTop:true,borderBottom:false,borderLeft:false,borderRight:false,children:jsx(Text,{dimColor:true,children:mo[e]})})}function vn({message:e,type:t}){return e?jsx(Box,{paddingX:1,children:jsxs(Text,{color:t==="success"?"green":t==="info"?"cyan":"red",children:[t==="success"?"\u2713":t==="info"?"(i)":"\u2717"," ",e]})}):null}function En({message:e}){return jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(bo,{type:"dots"})}),jsxs(Text,{children:[" ",e]})]})}function $n({message:e,onRetry:t,onBack:n}){return useInput((r,o)=>{r==="r"&&t?t():o.escape&&n&&n();}),jsxs(Box,{flexDirection:"column",paddingX:2,paddingY:1,children:[jsxs(Text,{color:"red",children:["\u2717 ",e]}),t&&jsx(Text,{dimColor:true,children:"Press r to retry"}),n&&jsx(Text,{dimColor:true,children:"Press Escape to go back"})]})}function Ze({itemName:e,actions:t,onAction:n,onClose:r}){let o=p(a=>a.focus),[i,s]=useState(0);return useInput((a,u)=>{u.upArrow?s(c=>c>0?c-1:c):u.downArrow?s(c=>c<t.length-1?c+1:c):u.return?n(t[i]):u.escape&&r();},{isActive:o==="actionMenu"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Text,{bold:true,children:e}),jsx(Box,{flexDirection:"column",marginTop:1,children:t.map((a,u)=>jsx(Box,{children:jsxs(Text,{bold:u===i,color:u===i?"cyan":void 0,children:[u===i?"\u203A ":" ",a]})},u))})]})}function Cn({itemName:e,onInstall:t,onClose:n}){return jsx(Ze,{itemName:e,actions:["Install","Cancel"],onAction:i=>{i==="Install"?t():n();},onClose:n})}function Un({itemName:e,itemStatus:t,updateAvailable:n,catalogVersion:r,onUninstall:o,onToggleStatus:i,onUpdate:s,onClose:a}){let[u,c]=useState(false),m=p(l=>l.focus);if(useInput((l,d)=>{d.escape||l==="n"?c(false):l==="y"&&o();},{isActive:u&&m==="actionMenu"}),u)return jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Uninstall "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]});let h=t==="enabled"?"Disable":"Enable",T=r?`Update to v${r}`:"Update";return jsx(Ze,{itemName:e,actions:n?["Uninstall",h,T,"Cancel"]:["Uninstall",h,"Cancel"],onAction:l=>{l==="Uninstall"?c(true):l===h?i():l.startsWith("Update")?s?.():a();},onClose:a})}async function Dn(e,t){let n=q.resolve(t);await N.mkdir(n,{recursive:true});let r=q.join(q.dirname(n),`${randomUUID()}.zip`);try{await N.writeFile(r,e),await ko(r,{dir:n,onEntry(o){if((o.externalFileAttributes>>16&61440)===40960)throw new Error(`Zip Slip (symlink): entry "${o.fileName}" is a symbolic link and was rejected`);let s=q.resolve(n,o.fileName);if(!s.startsWith(n+q.sep)&&s!==n)throw new Error(`Zip Slip detected: entry "${o.fileName}" would escape target directory`)}});try{let o=realpathSync(n);if(!o.startsWith(q.resolve(q.dirname(n))))throw new Error(`Zip Slip (post-extract): resolved path "${o}" is outside expected parent`)}catch(o){if(o.code!=="ENOENT")throw o}}finally{try{await N.unlink(r);}catch{}}}async function Et(e){await N.rm(e,{recursive:true,force:true});}async function te(){let e=Xt();await N.mkdir(q.dirname(e),{recursive:true});try{await N.writeFile(e,"",{flag:"wx"});}catch(n){if(n.code!=="EEXIST")throw n}return await Ro.lock(e,{stale:1e4,retries:{retries:2,minTimeout:500,maxTimeout:500}})}function Lo(){return {$schema:"https://anthropic.com/claude-code/marketplace.schema.json",name:b,description:"Flow Skills marketplace",owner:{name:"Flow Team",email:"flow@ciandt.com"},plugins:[]}}function Fn(){let e=Ne();if(!E__default.existsSync(e))return null;try{return JSON.parse(E__default.readFileSync(e,"utf-8"))}catch{return null}}function Mo(){let e=Fn();if(e)return e;let t=Lo(),n=Ne();return E__default.mkdirSync(q__default.dirname(n),{recursive:true}),Tt(t),t}function Tt(e){let t=Ne(),n=`${t}.tmp`;E__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),E__default.renameSync(n,t);}function Uo(){let e=zt(),t={};try{E__default.existsSync(e)&&(t=JSON.parse(E__default.readFileSync(e,"utf-8")));}catch{t={};}if(t[b])return;t[b]={source:{source:"github",repo:"CI-T-HyperX/flow-skills"},installLocation:Gt(),lastUpdated:new Date().toISOString()};let n=`${e}.tmp`;E__default.writeFileSync(n,JSON.stringify(t,null,2),"utf-8"),E__default.renameSync(n,e);}function Nn(e,t){Uo();let n=ut(e.name);E__default.mkdirSync(q__default.dirname(n),{recursive:true});try{E__default.lstatSync(n),E__default.rmSync(n,{recursive:!0,force:!0});}catch{}E__default.symlinkSync(t,n);let r=Mo();r.plugins.some(i=>i.name===e.name)||(r.plugins.push({name:e.name,description:e.description,version:e.version,author:e.author,source:`./plugins/native/${e.name}`,category:e.category}),Tt(r));}function Bn(e){let t=ut(e);try{E__default.rmSync(t,{recursive:!0,force:!0});}catch{}let n=Fn();if(!n)return;let r=n.plugins.length;n.plugins=n.plugins.filter(o=>o.name!==e),n.plugins.length!==r&&Tt(n);}var J=S("storage");function jn(){return q__default.join(Q__default.homedir(),".claude","plugins","installed_plugins.json")}function Do(){return q__default.join(Q__default.homedir(),".claude","plugins")}function Oo(e){let t=q__default.resolve(e),n=q__default.resolve(Do());if(!t.startsWith(n+q__default.sep)&&t!==n)throw new Error(`Security error: installPath '${e}' is outside the plugins directory`)}function _n(){return q__default.join(Q__default.homedir(),".claude","settings.json")}function H(){let e=jn();if(!E__default.existsSync(e))return {version:2,plugins:{}};try{return JSON.parse(E__default.readFileSync(e,"utf-8"))}catch{return {version:2,plugins:{}}}}function Ce(e){let t=jn();E__default.mkdirSync(q__default.dirname(t),{recursive:true});let n=`${t}.tmp`;E__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),E__default.renameSync(n,t);}function Re(e){let t=e.lastIndexOf("@");return t===-1?{name:e,marketplace:""}:{name:e.slice(0,t),marketplace:e.slice(t+1)}}function Fo(e){let t=q__default.join(e,".claude-plugin","plugin.json");if(!E__default.existsSync(t))return null;try{return JSON.parse(E__default.readFileSync(t,"utf-8"))}catch{return null}}function $t(){let e=_n();if(!E__default.existsSync(e))return {};try{return JSON.parse(E__default.readFileSync(e,"utf-8"))}catch{return {}}}function Kn(e){let t=_n(),n=`${t}.tmp`;E__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),E__default.renameSync(n,t);}function No(){return $t().enabledPlugins??{}}function Bo(e){let t=$t(),n=t.enabledPlugins;if(!n||!(e in n))return;let{[e]:r,...o}=n;t.enabledPlugins=o,Kn(t);}function kt(e,t){let n=$t(),r=n.enabledPlugins??{};n.enabledPlugins={...r,[e]:t},Kn(n);}function R(){let e=H(),t=No();return Object.entries(e.plugins).map(([n,r])=>{let o=r[0],{name:i,marketplace:s}=Re(n),a=Fo(o.installPath),u=t[n];return {name:i,marketplace:s,version:o.version,installedAt:o.installedAt,installPath:o.installPath,scope:o.scope,description:a?.description,author:a?.author,status:u===false?"disabled":"enabled"}})}async function Ye(e){J.debug(`[${e}] Acquiring lock to uninstall`);let t=await te();try{let{name:n,marketplace:r}=Re(e),o=H(),i;if(r?(i=`${n}@${r}`,o.plugins[i]||(i=void 0)):i=Object.keys(o.plugins).filter(h=>Re(h).name===n)[0],!i)throw J.error(`[${n}] Plugin is not installed`),new Error(`Plugin '${n}' is not installed`);J.debug(`[${n}] Resolved key: ${i}`);let s=o.plugins[i][0].installPath;Oo(s);let a=q__default.dirname(s);J.debug(`[${n}] Removing directory: ${a}`),E__default.rmSync(a,{recursive:!0,force:!0}),Bn(n);let{[i]:u,...c}=o.plugins;Ce({...o,plugins:c}),Bo(i),J.debug(`[${n}] Uninstalled successfully`);}finally{await t();}}async function Le(e,t){J.debug(`[${e}] Acquiring lock to set status \u2192 ${t}`);let n=await te();try{let{name:r}=Re(e),o=H(),i=Object.keys(o.plugins).filter(s=>Re(s).name===r);if(i.length===0)throw J.error(`[${r}] Plugin is not installed`),new Error(`Plugin '${r}' is not installed`);J.debug(`[${r}] Resolved key: ${i[0]}`),kt(i[0],t==="enabled"),J.debug(`[${r}] Status updated to ${t}`);}finally{await n();}}var V=create(e=>({installedItems:[],setInstalledItems:t=>e({installedItems:t}),loadFromDisk:()=>e({installedItems:R()})}));var L=["discover","installed"];function Jn(e,t,n){if(t.rightArrow||t.tab){let r=L.indexOf(n.activeTab);return [{type:"setTab",tab:L[(r+1)%L.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}if(t.leftArrow){let r=L.indexOf(n.activeTab);return [{type:"setTab",tab:L[(r-1+L.length)%L.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}return t.downArrow?[{type:"setFocus",focus:"list"}]:[]}function qn(e,t,n,r){if(t.upArrow&&n.selectedIndex>0)return [{type:"setSelectedIndex",index:n.selectedIndex-1}];if(t.downArrow&&n.selectedIndex<r-1)return [{type:"setSelectedIndex",index:n.selectedIndex+1}];if(t.tab){let o=L.indexOf(n.activeTab);return [{type:"setTab",tab:L[(o+1)%L.length]},{type:"setSelectedIndex",index:0}]}return t.return?[{type:"setActionMenuOpen",open:true},{type:"setFocus",focus:"actionMenu"}]:e==="/"?[{type:"setFocus",focus:"search"}]:[]}function Hn(e,t){return t.escape?[{type:"setActionMenuOpen",open:false},{type:"setFocus",focus:"list"}]:[]}function Vn(e,t){return t.escape?{actions:[{type:"setFocus",focus:"list"}],queryUpdate:"reset"}:t.return?{actions:[{type:"setFocus",focus:"list"}],queryUpdate:null}:t.backspace||t.delete?{actions:[],queryUpdate:{backspace:true}}:e&&!t.ctrl&&!t.meta?{actions:[],queryUpdate:{append:e}}:{actions:[],queryUpdate:null}}function et(e){let{setActiveTab:t,setFocus:n,setSelectedIndex:r,setActionMenuOpen:o}=p.getState();for(let i of e)i.type==="setTab"?t(i.tab):i.type==="setFocus"?n(i.focus):i.type==="setSelectedIndex"?r(i.index):i.type==="setActionMenuOpen"&&o(i.open);}function Gn({listLength:e}){let t=p(l=>l.focus),n=p(l=>l.selectedIndex),r=p(l=>l.actionMenuOpen),o=p(l=>l.setFocus),i=p(l=>l.setActionMenuOpen),s=F(l=>l.query),a=F(l=>l.setQuery),u=F(l=>l.resetQuery),c=useRef(e);useEffect(()=>{c.current=e;},[e]);let[m,h]=useState("");useEffect(()=>{let l=setTimeout(()=>h(s),300);return ()=>clearTimeout(l)},[s]),useInput((l,d)=>{l==="q"&&process.exit(0);},{isActive:t!=="search"&&t!=="auth"}),useInput((l,d)=>{let{activeTab:f,selectedIndex:y,actionMenuOpen:M}=p.getState();et(Jn(l,d,{activeTab:f}));},{isActive:t==="tabs"}),useInput((l,d)=>{let{activeTab:f,selectedIndex:y,actionMenuOpen:M}=p.getState();et(qn(l,d,{activeTab:f,selectedIndex:y},c.current));},{isActive:t==="list"}),useInput((l,d)=>{et(Hn(l,d));},{isActive:t==="actionMenu"}),useInput((l,d)=>{let f=Vn(l,d),y=f.queryUpdate;et(f.actions),y==="reset"?(u(),h("")):y!==null&&("backspace"in y?a(F.getState().query.slice(0,-1)):a(F.getState().query+y.append));},{isActive:t==="search"});let T=useCallback(()=>{i(false),o("list");},[i,o]),ie=useCallback(l=>{let{setSelectedIndex:d,selectedIndex:f}=p.getState();l===0?d(0):f>=l&&d(l-1);},[]),se=useCallback(l=>{if(!m)return c.current=l.length,l;let d=m.toLowerCase(),f=l.filter(y=>y.name.toLowerCase().includes(d)||y.description?.toLowerCase().includes(d));return c.current=f.length,f},[m]);return {actionMenuOpen:r,closeMenu:T,selectedIndex:n,clampIndex:ie,filteredItems:se}}function Wn(){let e=p(a=>a.notification),t=p(a=>a.showNotification),n=p(a=>a.clearNotification),r=j(a=>a.justAuthenticated),o=j(a=>a.credentials),i=j(a=>a.setJustAuthenticated);return useEffect(()=>{r&&o&&(t(`Authenticated. Tenant: ${o.tenant}`,"success"),i(false));},[r,o]),useEffect(()=>{if(!e)return;let a=setTimeout(n,3e3);return ()=>clearTimeout(a)},[e]),{notify:(a,u)=>{t(a,u);}}}var ye=class extends Error{constructor(n,r){super(`${n} v${r} is already installed. Use --force to reinstall.`);this.pluginName=n;this.version=r;this.name="AlreadyInstalledError";}},ne=class extends Error{constructor(n,r){super(`${n} is already up to date (v${r})`);this.pluginName=n;this.version=r;this.name="AlreadyUpToDateError";}};var qo=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function tt(){return Jr.create({prefixUrl:Fe("PROMPT_MANAGER_URL","https://flow.ciandt.com/prompt-manager-api/"),hooks:{beforeRequest:[async e=>{let t=await tn();e.headers.set("Authorization",`Bearer ${t}`);let n=C();n?.tenant&&qo.test(n.tenant)&&e.headers.set("FlowTenant",n.tenant);}]}})}var Ho=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function Zn(e){if(!e||!Ho.test(e))throw new Error(`Invalid plugin name: "${e}". Must be 1-64 chars, lowercase alphanumeric and hyphens only.`)}async function z(){try{let{plugins:e}=await tt().get("v1/plugins/catalog").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow-cli auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching plugin catalog"):new Error(`Failed to fetch plugin catalog: ${e.message}`):e}}async function we(e){Zn(e);try{return await tt().get(`v1/plugins/${e}/manifest`).json()}catch(t){throw t instanceof Error?t.message.includes("404")?new Error(`Plugin '${e}' not found in catalog`):t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to fetch plugin manifest: ${t.message}`):t}}async function Qn(e){Zn(e);try{let t=await tt().get(`v1/plugins/${e}/archive`);return Buffer.from(await t.arrayBuffer())}catch(t){throw t instanceof Error?t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to download plugin: ${t.message}`):t}}var Vo=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function zo(e){if(!Vo.test(e))throw new Error(`Invalid plugin name from manifest: "${e}". Plugin names must be lowercase alphanumeric and hyphens (1-64 chars).`)}var Ue=S("installer");function Go(e,t){let n=`${e}@${b}`,o=H().plugins[n];if(o&&!t)throw new ye(e,o[0].version);return {pluginKey:n,alreadyInstalled:o}}async function Xo(e,t,n){n&&await Et(t);try{Ue.debug(`Extracting to ${t}...`),await Dn(e,t);}catch(r){throw await Et(t),r}}function Wo(e,t,n){let r=H(),o={scope:"user",installPath:t,version:n,installedAt:new Date().toISOString()};r.plugins[e]=[o],Ce(r),kt(e,true);}async function xe(e,t={}){let n=Date.now(),r=null;try{Ue.debug(`[${e}] Acquiring lock...`),r=await te();let{pluginKey:o,alreadyInstalled:i}=Go(e,t.force);Ue.debug(`[${e}] Fetching manifest...`);let s=await we(e);zo(s.name),Ue.debug(`[${e}] Downloading archive...`);let a=await Qn(e),u=Vt(s.name,s.version);await Xo(a,u,!!i&&!!t.force),Wo(o,u,s.version),Nn(s,u);let c=Date.now()-n;return Ue.debug(`[${e}] Installed successfully in ${c}ms`),{name:s.name,version:s.version,path:u,duration_ms:c}}finally{r&&await r();}}function G(e,t,n=false){return n?true:!Ct.valid(e)||!Ct.valid(t)?false:Ct.gt(t,e)}var re=S("updater");function Zo(e){let t=H(),n=`${e}@${b}`,r=t.plugins[n];return !r||r.length===0?null:{pluginKey:n,entry:r[0]}}async function nt(e,t={}){let n=Date.now(),r=null;try{re.debug(`[${e}] Acquiring lock...`),r=await te();let o=Zo(e);if(!o)throw re.error(`[${e}] Plugin is not installed`),new Error(`Plugin "${e}" is not installed`);let{entry:i}=o,s=i.version,a=i.installPath;re.debug(`[${e}] Fetching manifest...`);let c=(await we(e)).version;if(!G(s,c,t.force))throw re.debug(`[${e}] Already up to date (v${s})`),new ne(e,s);re.info(`[${e}] Updating v${s} \u2192 v${c}...`),await r(),r=null;try{let m=await xe(e,{force:!0}),h=Date.now()-n;return re.debug(`[${e}] Updated successfully in ${h}ms`),{name:m.name,previousVersion:s,newVersion:m.version,path:m.path,duration_ms:h}}catch(m){re.warn(`[${e}] Install failed, rolling back to v${s}...`),r=await te();let h=H(),T=`${e}@${b}`;throw h.plugins[T]&&(h.plugins[T][0].version=s,h.plugins[T][0].installPath=a,Ce(h),re.info(`[${e}] Rollback completed, restored to v${s}`)),m}}finally{r&&await r();}}function Yn(){let e=V(s=>s.installedItems),t=V(s=>s.setInstalledItems),n=useCallback(async s=>{await xe(s.name),V.getState().loadFromDisk();},[]),r=useCallback(async s=>{await Ye(s),t(e.filter(a=>a.name!==s));},[e,t]),o=useCallback(async s=>{let u=e.find(c=>c.name===s)?.status==="enabled"?"disabled":"enabled";await Le(s,u),t(e.map(c=>c.name===s?{...c,status:u}:c));},[e,t]),i=useCallback(async s=>{await nt(s),V.getState().loadFromDisk();},[]);return {install:n,uninstall:r,toggle:o,update:i}}function er({selectedItem:e,selectedCatalogItem:t,items:n,closeMenu:r,clampIndex:o,notify:i}){let s=p(d=>d.setLoading),{install:a,uninstall:u,toggle:c,update:m}=Yn(),h=async(d,f,y)=>{s(true,d),r();try{await f(),o(n.length),i(y,"success");}catch(M){i(M instanceof Error?M.message:"Something went wrong","error");}finally{s(false);}};return {handleInstall:()=>{e&&t&&h(`Installing ${e.name}...`,()=>a(t),"\u2713 Installed successfully");},handleUninstall:()=>{e&&h(`Uninstalling ${e.name}...`,()=>u(e.name),"\u2713 Uninstalled");},handleToggleStatus:()=>{if(!e)return;let d=e.status==="enabled";h(d?`Disabling ${e.name}...`:`Enabling ${e.name}...`,()=>c(e.name),d?"\u2713 Disabled":"\u2713 Enabled");},handleUpdate:()=>{if(!e)return;let d=t?` to v${t.version}`:"";(async()=>{s(true,`Updating ${e.name}${d}...`),r();try{await m(e.name),o(n.length),i(`\u2713 Updated ${e.name}${d}`,"success");}catch(y){y instanceof ne?i(y.message,"info"):i(y instanceof Error?y.message:"Something went wrong","error");}finally{s(false);}})();}}}function tr(){let[e,t]=useState([]),[n,r]=useState(true),[o,i]=useState(null),s=useCallback(async()=>{r(true),i(null);try{let a=await z();t(a);}catch(a){i(a instanceof Error?a:new Error(String(a))),t([]);}finally{r(false);}},[]);return useEffect(()=>{s();},[s]),{catalog:e,isLoading:n,error:o,refetch:s}}function nr(){return {items:V(t=>t.installedItems)}}var ti=S("catalog");function ni(e){return {name:e.name,version:e.version,description:e.description,authorName:e.author.name,updateAvailable:e.updateAvailable}}function ri(e){return {name:e.name,version:e.version,description:e.description,authorName:e.author?.name,status:e.status,updateAvailable:e.updateAvailable,installedAt:e.installedAt}}function rr(){let e=p(g=>g.activeTab),t=p(g=>g.notification),n=p(g=>g.loading),r=p(g=>g.loadingMessage),o=p(g=>g.catalogError),i=p(g=>g.setCatalogError),s=F(g=>g.query),{catalog:a,isLoading:u,error:c,refetch:m}=tr(),{items:h}=nr(),T=V(g=>g.loadFromDisk),ie=useMemo(()=>new Set(h.map(g=>`${g.name}|${g.author?.name??""}|${g.marketplace}`)),[h]),se=useMemo(()=>{let g=new Map(a.map(pe=>[pe.name,pe.version]));return h.map(pe=>{let Nt=g.get(pe.name),Er=!!Nt&&G(pe.version,Nt);return {...pe,updateAvailable:Er}})},[h,a]),l=e==="discover"?a.filter(g=>!ie.has(`${g.name}|${g.author.name}|${b}`)).map(g=>ni(g)):se.map(g=>ri(g)),{actionMenuOpen:d,closeMenu:f,selectedIndex:y,clampIndex:M,filteredItems:wr}=Gn({listLength:l.length}),De=wr(l),U=De[y]??null,Ft=useMemo(()=>U?a.find(g=>g.name===U.name)??null:null,[a,U]),xr=e==="installed"?"No plugins installed \u2014 explore the Discover tab!":s?`No plugins found for '${s}'`:"No plugins available in the catalog",{notify:br}=Wn(),{handleInstall:vr,handleUninstall:Pr,handleToggleStatus:Ir,handleUpdate:Sr}=er({selectedItem:U,selectedCatalogItem:Ft,items:l,closeMenu:f,clampIndex:M,notify:br});return useEffect(()=>{T();},[]),useEffect(()=>{M(De.length);},[De.length,M]),useEffect(()=>{c&&(ti.error(`[usePluginCatalog] ${c instanceof Error?c.message:String(c)}`),i("Failed to load catalog"));},[c]),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(sn,{}),jsx(ln,{}),jsx(wn,{filteredItems:De,emptyMessage:xr}),(n||u)&&jsx(En,{message:n?r:"Loading catalog..."}),o&&!u&&e==="discover"&&jsx($n,{message:o,onRetry:()=>{i(null),m();},onBack:()=>i(null)}),t&&jsx(vn,{message:t.message,type:t.type}),d&&U&&e==="discover"&&jsx(Cn,{itemName:U.name,onInstall:vr,onClose:f}),d&&U&&e==="installed"&&jsx(Un,{itemName:U.name,itemStatus:U.status??"enabled",updateAvailable:U.updateAvailable??false,catalogVersion:Ft?.version,onUninstall:Pr,onToggleStatus:Ir,onUpdate:Sr,onClose:f}),jsx(bn,{})]})}var or=C();if(or&&D()){let{clientSecret:e,...t}=or;j.getState().setCredentials(t),p.getState().setFocus("list");}else p.getState().setFocus("auth");function sr(){return j(t=>t.isAuthenticated)?jsx(rr,{}):jsx(nn,{})}var W=S("auth");function ot(e,t={}){return new Promise((n,r)=>{let{masked:o=false,defaultValue:i=""}=t;process.stdout.write(e+i);let s=i,a=m=>{if(m===""){u(),r(new Error("SIGINT"));return}if(m==="\r"||m===`
17
+ `);}function st(e){process.stdout.write(JSON.stringify(e,null,2)+`
18
+ `);}function at(e){let t=new Date(e);return isNaN(t.getTime())?"\u2014":new Intl.DateTimeFormat("en-US",{dateStyle:"short"}).format(t)}var Jn=Qo.memo(function({item:t,isSelected:n}){let r=t.status==="disabled"?"yellow":"green";return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:n?"cyan":"gray",children:n?"\u203A ":"\u25CB "}),jsx(Text,{bold:n,color:n?"cyan":"white",children:t.name}),jsxs(Text,{dimColor:true,children:[t.authorName?` \xB7 ${t.authorName}`:""," \xB7 v",t.version]}),t.status&&jsxs(Text,{color:r,children:[" [",t.status,"]"]}),t.updateAvailable&&jsx(Text,{color:"yellow",children:" [\u2191 update available]"}),t.installedBadge&&jsx(Text,{color:"cyan",children:" [installed]"}),t.installedAt&&jsxs(Text,{dimColor:true,children:[" \xB7 ",at(t.installedAt)]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:t.description})})]})});function Hn({message:e}){return jsx(Box,{paddingX:2,paddingY:1,children:jsx(Text,{dimColor:true,children:e??"No items found."})})}var _t=5;function Gn({items:e,emptyMessage:t}){let n=d(u=>u.selectedIndex);if(e.length===0)return jsx(Hn,{message:t});let r=Math.max(0,n-Math.floor(_t/2)),o=Math.min(e.length,r+_t);o===e.length&&(r=Math.max(0,o-_t));let i=e.slice(r,o),s=r,a=e.length-o;return jsxs(Box,{flexDirection:"column",children:[s>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",s," more above"]})}),i.map((u,c)=>jsx(Jn,{item:u,isSelected:r+c===n},u.name)),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",a," more below"]})})]})}var ti={discover:"Discover plugins",installed:"Installed plugins"};function Xn({items:e,tabId:t,emptyMessage:n}){return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{paddingX:1,paddingBottom:1,children:[jsx(Text,{bold:true,children:ti[t]}),jsxs(Text,{dimColor:true,children:[" (",e.length,")"]})]}),jsx(Vn,{}),jsx(Gn,{items:e,emptyMessage:n})]})}function Zn({filteredItems:e,emptyMessage:t}){let n=d(r=>r.activeTab);return jsx(Box,{flexDirection:"column",flexGrow:1,children:n==="discover"?jsx(Xn,{items:e,tabId:"discover",emptyMessage:t},"discover"):jsx(Xn,{items:e,tabId:"installed",emptyMessage:t},"installed")})}var oi={tabs:"Tab: switch tab | \u2191\u2193: navigate | Enter: select | /: search | q: quit",list:"Tab: switch tab | \u2191\u2193: navigate | Enter: select | /: search | q: quit",search:"Type to filter | Esc: cancel search | Enter: confirm",actionMenu:"\u2191\u2193: navigate options | Enter: confirm | Esc: close menu",auth:"Tab: next field | Enter: confirm | Ctrl+C: quit"};function Yn(){let e=d(t=>t.focus);return jsx(Box,{borderStyle:"single",borderTop:true,borderBottom:false,borderLeft:false,borderRight:false,children:jsx(Text,{dimColor:true,children:oi[e]})})}function er({message:e,type:t}){return e?jsx(Box,{paddingX:1,children:jsxs(Text,{color:t==="success"?"green":t==="info"?"cyan":"red",children:[t==="success"?"\u2713":t==="info"?"(i)":"\u2717"," ",e]})}):null}function or({message:e}){return jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(ui,{type:"dots"})}),jsxs(Text,{children:[" ",e]})]})}function ar({message:e,onRetry:t,onBack:n}){return useInput((r,o)=>{r==="r"&&t?t():o.escape&&n&&n();}),jsxs(Box,{flexDirection:"column",paddingX:2,paddingY:1,children:[jsxs(Text,{color:"red",children:["\u2717 ",e]}),t&&jsx(Text,{dimColor:true,children:"Press r to retry"}),n&&jsx(Text,{dimColor:true,children:"Press Escape to go back"})]})}function ct({itemName:e,actions:t,onAction:n,onClose:r}){let o=d(a=>a.focus),[i,s]=useState(0);return useInput((a,u)=>{u.upArrow?s(c=>c>0?c-1:c):u.downArrow?s(c=>c<t.length-1?c+1:c):u.return?n(t[i]):u.escape&&r();},{isActive:o==="actionMenu"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Text,{bold:true,children:e}),jsx(Box,{flexDirection:"column",marginTop:1,children:t.map((a,u)=>jsx(Box,{children:jsxs(Text,{bold:u===i,color:u===i?"cyan":void 0,children:[u===i?"\u203A ":" ",a]})},u))})]})}function ur({itemName:e,onInstall:t,onClose:n}){return jsx(ct,{itemName:e,actions:["Install","Cancel"],onAction:i=>{i==="Install"?t():n();},onClose:n})}function fr({itemName:e,itemStatus:t,updateAvailable:n,catalogVersion:r,onUninstall:o,onToggleStatus:i,onUpdate:s,onClose:a}){let[u,c]=useState(false),m=d(l=>l.focus);if(useInput((l,p)=>{p.escape||l==="n"?c(false):l==="y"&&o();},{isActive:u&&m==="actionMenu"}),u)return jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Uninstall "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]});let h=t==="enabled"?"Disable":"Enable",T=r?`Update to v${r}`:"Update";return jsx(ct,{itemName:e,actions:n?["Uninstall",h,T,"Cancel"]:["Uninstall",h,"Cancel"],onAction:l=>{l==="Uninstall"?c(true):l===h?i():l.startsWith("Update")?s?.():a();},onClose:a})}async function mr(e,t){let n=q.resolve(t);await F.mkdir(n,{recursive:true});let r=q.join(q.dirname(n),`${randomUUID()}.zip`);try{await F.writeFile(r,e),await vi(r,{dir:n,onEntry(o){if((o.externalFileAttributes>>16&61440)===40960)throw new Error(`Zip Slip (symlink): entry "${o.fileName}" is a symbolic link and was rejected`);let s=q.resolve(n,o.fileName);if(!s.startsWith(n+q.sep)&&s!==n)throw new Error(`Zip Slip detected: entry "${o.fileName}" would escape target directory`)}});try{let o=realpathSync(n);if(!o.startsWith(q.resolve(q.dirname(n))))throw new Error(`Zip Slip (post-extract): resolved path "${o}" is outside expected parent`)}catch(o){if(o.code!=="ENOENT")throw o}}finally{try{await F.unlink(r);}catch{}}}async function zt(e){await F.rm(e,{recursive:true,force:true});}async function ne(){let e=hn();await F.mkdir(q.dirname(e),{recursive:true});try{await F.writeFile(e,"",{flag:"wx"});}catch(n){if(n.code!=="EEXIST")throw n}return await xi.lock(e,{stale:1e4,retries:{retries:2,minTimeout:500,maxTimeout:500}})}function Si(){return {$schema:"https://anthropic.com/claude-code/marketplace.schema.json",name:b,description:"Flow Skills marketplace",owner:{name:"Flow Team",email:"flow@ciandt.com"},plugins:[]}}function hr(){let e=qe();if(!I__default.existsSync(e))return null;try{return JSON.parse(I__default.readFileSync(e,"utf-8"))}catch{return null}}function Pi(){let e=hr();if(e)return e;let t=Si(),n=qe();return I__default.mkdirSync(q__default.dirname(n),{recursive:true}),Gt(t),t}function Gt(e){let t=qe(),n=`${t}.tmp`;I__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),I__default.renameSync(n,t);}function Ei(){let e=mn(),t={};try{I__default.existsSync(e)&&(t=JSON.parse(I__default.readFileSync(e,"utf-8")));}catch{t={};}if(t[b])return;t[b]={source:{source:"github",repo:"CI-T-HyperX/flow-skills"},installLocation:gn(),lastUpdated:new Date().toISOString()};let n=`${e}.tmp`;I__default.writeFileSync(n,JSON.stringify(t,null,2),"utf-8"),I__default.renameSync(n,e);}function yr(e,t){Ei();let n=bt(e.name);I__default.mkdirSync(q__default.dirname(n),{recursive:true});try{I__default.lstatSync(n),I__default.rmSync(n,{recursive:!0,force:!0});}catch{}I__default.symlinkSync(t,n);let r=Pi();r.plugins.some(i=>i.name===e.name)||(r.plugins.push({name:e.name,description:e.description,version:e.version,author:e.author,source:`./plugins/native/${e.name}`,category:e.category}),Gt(r));}function wr(e){let t=bt(e);try{I__default.rmSync(t,{recursive:!0,force:!0});}catch{}let n=hr();if(!n)return;let r=n.plugins.length;n.plugins=n.plugins.filter(o=>o.name!==e),n.plugins.length!==r&&Gt(n);}var J=y("storage");function vr(){return q__default.join(Q__default.homedir(),".claude","plugins","installed_plugins.json")}function Ii(){return q__default.join(Q__default.homedir(),".claude","plugins")}function Ti(e){let t=q__default.resolve(e),n=q__default.resolve(Ii());if(!t.startsWith(n+q__default.sep)&&t!==n)throw new Error(`Security error: installPath '${e}' is outside the plugins directory`)}function xr(){return q__default.join(Q__default.homedir(),".claude","settings.json")}function H(){let e=vr();if(!I__default.existsSync(e))return {version:2,plugins:{}};try{return JSON.parse(I__default.readFileSync(e,"utf-8"))}catch{return {version:2,plugins:{}}}}function Fe(e){let t=vr();I__default.mkdirSync(q__default.dirname(t),{recursive:true});let n=`${t}.tmp`;I__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),I__default.renameSync(n,t);}function Ne(e){let t=e.lastIndexOf("@");return t===-1?{name:e,marketplace:""}:{name:e.slice(0,t),marketplace:e.slice(t+1)}}function Ai(e){let t=q__default.join(e,".claude-plugin","plugin.json");if(!I__default.existsSync(t))return null;try{return JSON.parse(I__default.readFileSync(t,"utf-8"))}catch{return null}}function Xt(){let e=xr();if(!I__default.existsSync(e))return {};try{return JSON.parse(I__default.readFileSync(e,"utf-8"))}catch{return {}}}function br(e){let t=xr(),n=`${t}.tmp`;I__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),I__default.renameSync(n,t);}function $i(){return Xt().enabledPlugins??{}}function ki(e){let t=Xt(),n=t.enabledPlugins;if(!n||!(e in n))return;let{[e]:r,...o}=n;t.enabledPlugins=o,br(t);}function Zt(e,t){let n=Xt(),r=n.enabledPlugins??{};n.enabledPlugins={...r,[e]:t},br(n);}function R(){let e=H(),t=$i();return Object.entries(e.plugins).map(([n,r])=>{let o=r[0],{name:i,marketplace:s}=Ne(n),a=Ai(o.installPath),u=t[n];return {name:i,marketplace:s,version:o.version,installedAt:o.installedAt,installPath:o.installPath,scope:o.scope,description:a?.description,author:a?.author,status:u===false?"disabled":"enabled"}})}async function pt(e){J.debug(`[${e}] Acquiring lock to uninstall`);let t=await ne();try{let{name:n,marketplace:r}=Ne(e),o=H(),i;if(r?(i=`${n}@${r}`,o.plugins[i]||(i=void 0)):i=Object.keys(o.plugins).filter(h=>Ne(h).name===n)[0],!i)throw J.error(`[${n}] Plugin is not installed`),new Error(`Plugin '${n}' is not installed`);J.debug(`[${n}] Resolved key: ${i}`);let s=o.plugins[i][0].installPath;Ti(s);let a=q__default.dirname(s);J.debug(`[${n}] Removing directory: ${a}`),I__default.rmSync(a,{recursive:!0,force:!0}),wr(n);let{[i]:u,...c}=o.plugins;Fe({...o,plugins:c}),ki(i),J.debug(`[${n}] Uninstalled successfully`);}finally{await t();}}async function Be(e,t){J.debug(`[${e}] Acquiring lock to set status \u2192 ${t}`);let n=await ne();try{let{name:r}=Ne(e),o=H(),i=Object.keys(o.plugins).filter(s=>Ne(s).name===r);if(i.length===0)throw J.error(`[${r}] Plugin is not installed`),new Error(`Plugin '${r}' is not installed`);J.debug(`[${r}] Resolved key: ${i[0]}`),Zt(i[0],t==="enabled"),J.debug(`[${r}] Status updated to ${t}`);}finally{await n();}}var z=create(e=>({installedItems:[],setInstalledItems:t=>e({installedItems:t}),loadFromDisk:()=>e({installedItems:R()})}));var L=["discover","installed"];function Sr(e,t,n){if(t.rightArrow||t.tab){let r=L.indexOf(n.activeTab);return [{type:"setTab",tab:L[(r+1)%L.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}if(t.leftArrow){let r=L.indexOf(n.activeTab);return [{type:"setTab",tab:L[(r-1+L.length)%L.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}return t.downArrow?[{type:"setFocus",focus:"list"}]:[]}function Pr(e,t,n,r){if(t.upArrow&&n.selectedIndex>0)return [{type:"setSelectedIndex",index:n.selectedIndex-1}];if(t.downArrow&&n.selectedIndex<r-1)return [{type:"setSelectedIndex",index:n.selectedIndex+1}];if(t.tab){let o=L.indexOf(n.activeTab);return [{type:"setTab",tab:L[(o+1)%L.length]},{type:"setSelectedIndex",index:0}]}return t.return?[{type:"setActionMenuOpen",open:true},{type:"setFocus",focus:"actionMenu"}]:e==="/"?[{type:"setFocus",focus:"search"}]:[]}function Er(e,t){return t.escape?[{type:"setActionMenuOpen",open:false},{type:"setFocus",focus:"list"}]:[]}function Ir(e,t){return t.escape?{actions:[{type:"setFocus",focus:"list"}],queryUpdate:"reset"}:t.return?{actions:[{type:"setFocus",focus:"list"}],queryUpdate:null}:t.backspace||t.delete?{actions:[],queryUpdate:{backspace:true}}:e&&!t.ctrl&&!t.meta?{actions:[],queryUpdate:{append:e}}:{actions:[],queryUpdate:null}}function dt(e){let{setActiveTab:t,setFocus:n,setSelectedIndex:r,setActionMenuOpen:o}=d.getState();for(let i of e)i.type==="setTab"?t(i.tab):i.type==="setFocus"?n(i.focus):i.type==="setSelectedIndex"?r(i.index):i.type==="setActionMenuOpen"&&o(i.open);}function Ar({listLength:e}){let t=d(l=>l.focus),n=d(l=>l.selectedIndex),r=d(l=>l.actionMenuOpen),o=d(l=>l.setFocus),i=d(l=>l.setActionMenuOpen),s=N(l=>l.query),a=N(l=>l.setQuery),u=N(l=>l.resetQuery),c=useRef(e);useEffect(()=>{c.current=e;},[e]);let[m,h]=useState("");useEffect(()=>{let l=setTimeout(()=>h(s),300);return ()=>clearTimeout(l)},[s]),useInput((l,p)=>{l==="q"&&process.exit(0);},{isActive:t!=="search"&&t!=="auth"}),useInput((l,p)=>{let{activeTab:f,selectedIndex:w,actionMenuOpen:M}=d.getState();dt(Sr(l,p,{activeTab:f}));},{isActive:t==="tabs"}),useInput((l,p)=>{let{activeTab:f,selectedIndex:w,actionMenuOpen:M}=d.getState();dt(Pr(l,p,{activeTab:f,selectedIndex:w},c.current));},{isActive:t==="list"}),useInput((l,p)=>{dt(Er(l,p));},{isActive:t==="actionMenu"}),useInput((l,p)=>{let f=Ir(l,p),w=f.queryUpdate;dt(f.actions),w==="reset"?(u(),h("")):w!==null&&("backspace"in w?a(N.getState().query.slice(0,-1)):a(N.getState().query+w.append));},{isActive:t==="search"});let T=useCallback(()=>{i(false),o("list");},[i,o]),se=useCallback(l=>{let{setSelectedIndex:p,selectedIndex:f}=d.getState();l===0?p(0):f>=l&&p(l-1);},[]),ae=useCallback(l=>{if(!m)return c.current=l.length,l;let p=m.toLowerCase(),f=l.filter(w=>w.name.toLowerCase().includes(p)||w.description?.toLowerCase().includes(p));return c.current=f.length,f},[m]);return {actionMenuOpen:r,closeMenu:T,selectedIndex:n,clampIndex:se,filteredItems:ae}}function kr(){let e=d(a=>a.notification),t=d(a=>a.showNotification),n=d(a=>a.clearNotification),r=_(a=>a.justAuthenticated),o=_(a=>a.credentials),i=_(a=>a.setJustAuthenticated);return useEffect(()=>{r&&o&&(t(`Authenticated. Tenant: ${o.tenant}`,"success"),i(false));},[r,o]),useEffect(()=>{if(!e)return;let a=setTimeout(n,3e3);return ()=>clearTimeout(a)},[e]),{notify:(a,u)=>{t(a,u);}}}var Pe=class extends Error{constructor(n,r){super(`${n} v${r} is already installed. Use --force to reinstall.`);this.pluginName=n;this.version=r;this.name="AlreadyInstalledError";}pluginName;version},re=class extends Error{constructor(n,r){super(`${n} is already up to date (v${r})`);this.pluginName=n;this.version=r;this.name="AlreadyUpToDateError";}pluginName;version};function ft(){return Do.create({prefixUrl:Ye("PROMPT_MANAGER_URL","https://flow.ciandt.com/prompt-manager-api/"),hooks:{beforeRequest:[async e=>{let t=await Dn();e.headers.set("Authorization",`Bearer ${t}`);let n=await C();n?.tenant&&Ve.test(n.tenant)&&e.headers.set("FlowTenant",n.tenant);}]}})}var Ui=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function Rr(e){if(!e||!Ui.test(e))throw new Error(`Invalid plugin name: "${e}". Must be 1-64 chars, lowercase alphanumeric and hyphens only.`)}async function G(){try{let{plugins:e}=await ft().get("v1/plugins/catalog").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow-cli auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching plugin catalog"):new Error(`Failed to fetch plugin catalog: ${e.message}`):e}}async function Ee(e){Rr(e);try{return await ft().get(`v1/plugins/${e}/manifest`).json()}catch(t){throw t instanceof Error?t.message.includes("404")?new Error(`Plugin '${e}' not found in catalog`):t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to fetch plugin manifest: ${t.message}`):t}}async function Cr(e){Rr(e);try{let t=await ft().get(`v1/plugins/${e}/archive`);return Buffer.from(await t.arrayBuffer())}catch(t){throw t instanceof Error?t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to download plugin: ${t.message}`):t}}var Di=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function Oi(e){if(!Di.test(e))throw new Error(`Invalid plugin name from manifest: "${e}". Plugin names must be lowercase alphanumeric and hyphens (1-64 chars).`)}var je=y("installer");function Ni(e,t){let n=`${e}@${b}`,o=H().plugins[n];if(o&&!t)throw new Pe(e,o[0].version);return {pluginKey:n,alreadyInstalled:o}}async function Fi(e,t,n){n&&await zt(t);try{je.debug(`Extracting to ${t}...`),await mr(e,t);}catch(r){throw await zt(t),r}}function Bi(e,t,n){let r=H(),o={scope:"user",installPath:t,version:n,installedAt:new Date().toISOString()};r.plugins[e]=[o],Fe(r),Zt(e,true);}async function Ie(e,t={}){let n=Date.now(),r=null;try{je.debug(`[${e}] Acquiring lock...`),r=await ne();let{pluginKey:o,alreadyInstalled:i}=Ni(e,t.force);je.debug(`[${e}] Fetching manifest...`);let s=await Ee(e);Oi(s.name),je.debug(`[${e}] Downloading archive...`);let a=await Cr(e),u=fn(s.name,s.version);await Fi(a,u,!!i&&!!t.force),Bi(o,u,s.version),yr(s,u);let c=Date.now()-n;return je.debug(`[${e}] Installed successfully in ${c}ms`),{name:s.name,version:s.version,path:u,duration_ms:c}}finally{r&&await r();}}function W(e,t,n=false){return n?true:!Yt.valid(e)||!Yt.valid(t)?false:Yt.gt(t,e)}var oe=y("updater");function _i(e){let t=H(),n=`${e}@${b}`,r=t.plugins[n];return !r||r.length===0?null:{pluginKey:n,entry:r[0]}}async function mt(e,t={}){let n=Date.now(),r=null;try{oe.debug(`[${e}] Acquiring lock...`),r=await ne();let o=_i(e);if(!o)throw oe.error(`[${e}] Plugin is not installed`),new Error(`Plugin "${e}" is not installed`);let{entry:i}=o,s=i.version,a=i.installPath;oe.debug(`[${e}] Fetching manifest...`);let c=(await Ee(e)).version;if(!W(s,c,t.force))throw oe.debug(`[${e}] Already up to date (v${s})`),new re(e,s);oe.info(`[${e}] Updating v${s} \u2192 v${c}...`),await r(),r=null;try{let m=await Ie(e,{force:!0}),h=Date.now()-n;return oe.debug(`[${e}] Updated successfully in ${h}ms`),{name:m.name,previousVersion:s,newVersion:m.version,path:m.path,duration_ms:h}}catch(m){oe.warn(`[${e}] Install failed, rolling back to v${s}...`),r=await ne();let h=H(),T=`${e}@${b}`;throw h.plugins[T]&&(h.plugins[T][0].version=s,h.plugins[T][0].installPath=a,Fe(h),oe.info(`[${e}] Rollback completed, restored to v${s}`)),m}}finally{r&&await r();}}function Lr(){let e=z(s=>s.installedItems),t=z(s=>s.setInstalledItems),n=useCallback(async s=>{await Ie(s.name),z.getState().loadFromDisk();},[]),r=useCallback(async s=>{await pt(s),t(e.filter(a=>a.name!==s));},[e,t]),o=useCallback(async s=>{let u=e.find(c=>c.name===s)?.status==="enabled"?"disabled":"enabled";await Be(s,u),t(e.map(c=>c.name===s?{...c,status:u}:c));},[e,t]),i=useCallback(async s=>{await mt(s),z.getState().loadFromDisk();},[]);return {install:n,uninstall:r,toggle:o,update:i}}function Mr({selectedItem:e,selectedCatalogItem:t,items:n,closeMenu:r,clampIndex:o,notify:i}){let s=d(p=>p.setLoading),{install:a,uninstall:u,toggle:c,update:m}=Lr(),h=async(p,f,w)=>{s(true,p),r();try{await f(),o(n.length),i(w,"success");}catch(M){i(M instanceof Error?M.message:"Something went wrong","error");}finally{s(false);}};return {handleInstall:()=>{e&&t&&h(`Installing ${e.name}...`,()=>a(t),"\u2713 Installed successfully");},handleUninstall:()=>{e&&h(`Uninstalling ${e.name}...`,()=>u(e.name),"\u2713 Uninstalled");},handleToggleStatus:()=>{if(!e)return;let p=e.status==="enabled";h(p?`Disabling ${e.name}...`:`Enabling ${e.name}...`,()=>c(e.name),p?"\u2713 Disabled":"\u2713 Enabled");},handleUpdate:()=>{if(!e)return;let p=t?` to v${t.version}`:"";(async()=>{s(true,`Updating ${e.name}${p}...`),r();try{await m(e.name),o(n.length),i(`\u2713 Updated ${e.name}${p}`,"success");}catch(w){w instanceof re?i(w.message,"info"):i(w instanceof Error?w.message:"Something went wrong","error");}finally{s(false);}})();}}}function Ur(){let[e,t]=useState([]),[n,r]=useState(true),[o,i]=useState(null),s=useCallback(async()=>{r(true),i(null);try{let a=await G();t(a);}catch(a){i(a instanceof Error?a:new Error(String(a))),t([]);}finally{r(false);}},[]);return useEffect(()=>{s();},[s]),{catalog:e,isLoading:n,error:o,refetch:s}}function Dr(){return {items:z(t=>t.installedItems)}}var Ji=y("catalog");function qi(e){return {name:e.name,version:e.version,description:e.description,authorName:e.author.name,updateAvailable:e.updateAvailable}}function Hi(e){return {name:e.name,version:e.version,description:e.description,authorName:e.author?.name,status:e.status,updateAvailable:e.updateAvailable,installedAt:e.installedAt}}function Or(){let e=d(g=>g.activeTab),t=d(g=>g.notification),n=d(g=>g.loading),r=d(g=>g.loadingMessage),o=d(g=>g.catalogError),i=d(g=>g.setCatalogError),s=N(g=>g.query),{catalog:a,isLoading:u,error:c,refetch:m}=Ur(),{items:h}=Dr(),T=z(g=>g.loadFromDisk),se=useMemo(()=>new Set(h.map(g=>`${g.name}|${g.author?.name??""}|${g.marketplace}`)),[h]),ae=useMemo(()=>{let g=new Map(a.map(fe=>[fe.name,fe.version]));return h.map(fe=>{let ln=g.get(fe.name),no=!!ln&&W(fe.version,ln);return {...fe,updateAvailable:no}})},[h,a]),l=e==="discover"?a.filter(g=>!se.has(`${g.name}|${g.author.name}|${b}`)).map(g=>qi(g)):ae.map(g=>Hi(g)),{actionMenuOpen:p,closeMenu:f,selectedIndex:w,clampIndex:M,filteredItems:Wr}=Ar({listLength:l.length}),Ke=Wr(l),U=Ke[w]??null,an=useMemo(()=>U?a.find(g=>g.name===U.name)??null:null,[a,U]),Xr=e==="installed"?"No plugins installed \u2014 explore the Discover tab!":s?`No plugins found for '${s}'`:"No plugins available in the catalog",{notify:Zr}=kr(),{handleInstall:Qr,handleUninstall:Yr,handleToggleStatus:eo,handleUpdate:to}=Mr({selectedItem:U,selectedCatalogItem:an,items:l,closeMenu:f,clampIndex:M,notify:Zr});return useEffect(()=>{T();},[]),useEffect(()=>{M(Ke.length);},[Ke.length,M]),useEffect(()=>{c&&(Ji.error(`[usePluginCatalog] ${c instanceof Error?c.message:String(c)}`),i("Failed to load catalog"));},[c]),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Bn,{}),jsx(jn,{}),jsx(Zn,{filteredItems:Ke,emptyMessage:Xr}),(n||u)&&jsx(or,{message:n?r:"Loading catalog..."}),o&&!u&&e==="discover"&&jsx(ar,{message:o,onRetry:()=>{i(null),m();},onBack:()=>i(null)}),t&&jsx(er,{message:t.message,type:t.type}),p&&U&&e==="discover"&&jsx(ur,{itemName:U.name,onInstall:Qr,onClose:f}),p&&U&&e==="installed"&&jsx(fr,{itemName:U.name,itemStatus:U.status??"enabled",updateAvailable:U.updateAvailable??false,catalogVersion:an?.version,onUninstall:Yr,onToggleStatus:eo,onUpdate:to,onClose:f}),jsx(Yn,{})]})}async function Xi(){let e=await C(),t=await D();if(e&&t){let{clientSecret:n,...r}=e;_.getState().setCredentials(r),d.getState().setFocus("list");}else d.getState().setFocus("auth");}function Nr(){let e=_(r=>r.isAuthenticated),[t,n]=useState(false);return useEffect(()=>{Xi().then(()=>n(true));},[]),t?e?jsx(Or,{}):jsx(On,{}):jsx(Fragment,{})}var Z=y("auth");function ht(e,t={}){return new Promise((n,r)=>{let{masked:o=false,defaultValue:i=""}=t;process.stdout.write(e+i);let s=i,a=m=>{if(m===""){u(),r(new Error("SIGINT"));return}if(m==="\r"||m===`
15
19
  `){u(),process.stdout.write(`
16
- `),n(s);return}if(m==="\x7F"){s.length>0&&(s=s.slice(0,-1),process.stdout.write("\b \b"));return}m.startsWith("\x1B")||(s+=m,process.stdout.write(o?"*".repeat(m.length):m));};function u(){process.stdin.setRawMode(false),process.stdin.removeListener("data",a),process.removeListener("uncaughtException",c),process.removeListener("unhandledRejection",c);}function c(){try{process.stdin.setRawMode(!1);}catch{}}process.on("uncaughtException",c),process.on("unhandledRejection",c),process.stdin.setRawMode(true),process.stdin.resume(),process.stdin.setEncoding("utf8"),process.stdin.on("data",a);})}async function ii(e){W.debug(`Authenticating tenant: ${e.tenant}`);try{return await Ee(e),W.info(`Authentication successful for tenant: ${e.tenant}`),process.stdout.write(x.green(` \u2713 Setup complete. Tenant: ${e.tenant}
20
+ `),n(s);return}if(m==="\x7F"){s.length>0&&(s=s.slice(0,-1),process.stdout.write("\b \b"));return}m.startsWith("\x1B")||(s+=m,process.stdout.write(o?"*".repeat(m.length):m));};function u(){process.stdin.setRawMode(false),process.stdin.removeListener("data",a),process.removeListener("uncaughtException",c),process.removeListener("unhandledRejection",c);}function c(){try{process.stdin.setRawMode(!1);}catch{}}process.on("uncaughtException",c),process.on("unhandledRejection",c),process.stdin.setRawMode(true),process.stdin.resume(),process.stdin.setEncoding("utf8"),process.stdin.on("data",a);})}async function Qi(e){Z.debug(`Authenticating tenant: ${e.tenant}`);try{return await Le(e),Z.info(`Authentication successful for tenant: ${e.tenant}`),process.stdout.write(x.green(` \u2713 Setup complete. Tenant: ${e.tenant}
17
21
 
18
- `)),0}catch(t){let n=I(t instanceof Error?t.message:"unknown error");return W.error(`Authentication failed: ${n}`),process.stderr.write(x.red(` \u2717 Authentication failed: ${n}
19
- `)),1}}async function si(){W.debug("Starting interactive authentication");try{process.stdout.write(`
20
- `);let e=(await ot(x.cyan(" ? ")+"Client ID: ")).trim(),t=(await ot(x.cyan(" ? ")+"Client Secret: ",{masked:!0})).trim(),n=(await ot(x.cyan(" ? ")+"Tenant: ")).trim();if(!e||!t||!n)return W.error("Validation failed: all fields are required"),process.stderr.write(x.red(` \u2717 All fields are required
21
- `)),1;W.debug(`Authenticating tenant: ${n}`);try{await Ee({clientId:e,clientSecret:t,tenant:n});}catch(r){let o=I(r instanceof Error?r.message:"unknown error");return W.error(`Authentication failed: ${o}`),process.stderr.write(x.red(` \u2717 Authentication failed: ${o}
22
- `)),1}return W.info(`Authentication successful for tenant: ${n}`),process.stdout.write(x.green(` \u2713 Setup complete. Tenant: ${n}
22
+ `)),0}catch(t){let n=E(t instanceof Error?t.message:"unknown error");return Z.error(`Authentication failed: ${n}`),process.stderr.write(x.red(` \u2717 Authentication failed: ${n}
23
+ `)),1}}async function Yi(){Z.debug("Starting interactive authentication");try{process.stdout.write(`
24
+ `);let e=(await ht(x.cyan(" ? ")+"Client ID: ")).trim(),t=(await ht(x.cyan(" ? ")+"Client Secret: ",{masked:!0})).trim(),n=(await ht(x.cyan(" ? ")+"Tenant: ")).trim();if(!e||!t||!n)return Z.error("Validation failed: all fields are required"),process.stderr.write(x.red(` \u2717 All fields are required
25
+ `)),1;Z.debug(`Authenticating tenant: ${n}`);try{await Le({clientId:e,clientSecret:t,tenant:n});}catch(r){let o=E(r instanceof Error?r.message:"unknown error");return Z.error(`Authentication failed: ${o}`),process.stderr.write(x.red(` \u2717 Authentication failed: ${o}
26
+ `)),1}return Z.info(`Authentication successful for tenant: ${n}`),process.stdout.write(x.green(` \u2713 Setup complete. Tenant: ${n}
23
27
 
24
- `)),0}catch(e){if(e instanceof Error&&e.message==="SIGINT")throw e;let t=I(e instanceof Error?e.message:"unknown error");return W.error(`Unexpected error: ${t}`),process.stderr.write(x.red(` \u2717 Unexpected error: ${t}
25
- `)),1}}async function Dt(e={}){if(e.clientId&&e.clientSecret&&e.tenant)return ii({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant});try{return await si()}catch(t){if(t instanceof Error&&t.message==="SIGINT")return process.stdout.write(`
26
- `),130;throw t}}async function ai(){try{return process.stdout.write(`
27
- `),(await ot(x.cyan(" ? ")+"Are you sure? This will remove your local credentials. (y/N): ")).toLowerCase()!=="y"?(process.stdout.write(x.yellow(` \u26A0 Logout cancelled
28
+ `)),0}catch(e){if(e instanceof Error&&e.message==="SIGINT")throw e;let t=E(e instanceof Error?e.message:"unknown error");return Z.error(`Unexpected error: ${t}`),process.stderr.write(x.red(` \u2717 Unexpected error: ${t}
29
+ `)),1}}async function on(e={}){if(e.clientId&&e.clientSecret&&e.tenant)return Qi({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant});try{return await Yi()}catch(t){if(t instanceof Error&&t.message==="SIGINT")return process.stdout.write(`
30
+ `),130;throw t}}async function es(){try{return process.stdout.write(`
31
+ `),(await ht(x.cyan(" ? ")+"Are you sure? This will remove your local credentials. (y/N): ")).toLowerCase()!=="y"?(process.stdout.write(x.yellow(` \u26A0 Logout cancelled
28
32
  `)),0):null}catch(e){if(e instanceof Error&&e.message==="SIGINT")return process.stdout.write(`
29
- `),130;throw e}}async function ar(e){if(!C())return process.stdout.write(x.yellow(` \u26A0 You are not authenticated
30
- `)),0;if(!e){let t=await ai();if(t!==null)return t}try{return Kt(),process.stdout.write(x.green(` \u2713 Credentials removed successfully
33
+ `),130;throw e}}async function Fr(e){if(!await C())return process.stdout.write(x.yellow(` \u26A0 You are not authenticated
34
+ `)),0;if(!e){let t=await es();if(t!==null)return t}try{return await Cn(),process.stdout.write(x.green(` \u2713 Credentials removed successfully
31
35
  `)),0}catch{return process.stderr.write(x.red(` \u2717 Error removing credentials
32
- `)),1}}async function lr(){let e=C();return e?D()?(process.stdout.write(`
36
+ `)),1}}async function Br(){let e=await C();return e?await D()?(process.stdout.write(`
33
37
  `+x.bold(` Authenticated
34
- `)),process.stdout.write(x.dim(" Tenant: ")+I(e.tenant)+`
35
- `),process.stdout.write(x.dim(" Client ID: ")+I(e.clientId)+`
36
- `),process.stdout.write(x.dim(" Config: ")+I(Jt())+`
38
+ `)),process.stdout.write(x.dim(" Tenant: ")+E(e.tenant)+`
39
+ `),process.stdout.write(x.dim(" Client ID: ")+E(e.clientId)+`
40
+ `),process.stdout.write(x.dim(" Config: ")+E(await Ln())+`
37
41
  `),process.stdout.write(`
38
- `),0):(process.stdout.write(x.yellow(" \u26A0 Session expired. Run `flow-cli auth login` to re-authenticate.\n")),0):(process.stdout.write(x.yellow(" \u26A0 Not authenticated. Run `flow-cli auth login` to set up.\n")),0)}function oe(){return C()?D()?true:(P("Session expired. Run: flow-cli auth login"),false):(P("Not authenticated. Run: flow-cli auth login"),false)}async function li(e){let t=R(),n;try{n=await z();}catch{n=[];}let r=new Set(t.map(o=>o.name));return e.json?(Ge(n.map(o=>({...o,installed:r.has(o.name)}))),0):(ze(["","Name","Version","Category","Status"],n.map(o=>[r.has(o.name)?"*":" ",o.name,o.version,o.category,r.has(o.name)?"installed":"available"])),0)}async function ci(e){let t=R(),n=await z(),r=new Map(n.map(i=>[i.name,i])),o=t.map(i=>{let s=r.get(i.name);return s&&G(i.version,s.version)?{...i,availableVersion:s.version}:null}).filter(i=>i!==null);return o.length===0?(w("All plugins are up to date."),0):e.json?(Ge(o),0):(ze(["Name","Installed","Available"],o.map(i=>[i.name,i.version,i.availableVersion])),process.stdout.write(`
42
+ `),0):(process.stdout.write(x.yellow(" \u26A0 Session expired. Run `flow-cli auth login` to re-authenticate.\n")),0):(process.stdout.write(x.yellow(" \u26A0 Not authenticated. Run `flow-cli auth login` to set up.\n")),0)}async function ie(){return await C()?await D()?true:(P("Session expired. Run: flow-cli auth login"),false):(P("Not authenticated. Run: flow-cli auth login"),false)}async function ts(e){let t=R(),n;try{n=await G();}catch{n=[];}let r=new Set(t.map(o=>o.name));return e.json?(st(n.map(o=>({...o,installed:r.has(o.name)}))),0):(it(["","Name","Version","Category","Status"],n.map(o=>[r.has(o.name)?"*":" ",o.name??"",o.version??"",o.category??"",r.has(o.name)?"installed":"available"])),0)}async function ns(e){let t=R(),n=await G(),r=new Map(n.map(i=>[i.name,i])),o=t.map(i=>{let s=r.get(i.name);return s&&W(i.version,s.version)?{...i,availableVersion:s.version}:null}).filter(i=>i!==null);return o.length===0?(v("All plugins are up to date."),0):e.json?(st(o),0):(it(["Name","Installed","Available"],o.map(i=>[i.name??"",i.version??"",i.availableVersion??""])),process.stdout.write(`
39
43
  ${o.length} plugin(s) outdated.
40
- `),0)}function ui(e){let t=R();return t.length===0?(w("No plugins installed. Use `flow plugin install <name>` to install one."),0):e.json?(Ge(t),0):(ze(["Name","Version","Installed at"],t.map(n=>[n.name,n.version,Xe(n.installedAt)])),process.stdout.write(`
44
+ `),0)}function rs(e){let t=R();return t.length===0?(v("No plugins installed. Use `flow plugin install <name>` to install one."),0):e.json?(st(t),0):(it(["Name","Version","Installed at"],t.map(n=>[n.name??"",n.version??"",at(n.installedAt??"")])),process.stdout.write(`
41
45
  ${t.length} plugin(s) installed.
42
- `),0)}async function cr(e){if(!oe())return 1;try{return e.available?await li(e):e.outdated?await ci(e):ui(e)}catch(t){return P(t instanceof Error?t.message:"Failed to list plugins."),1}}var v=S("manage");function ue(e){process.stdout.write(JSON.stringify(e)+`
43
- `);}function Ot(e){process.stderr.write(JSON.stringify(e)+`
44
- `);}function B(e){return e instanceof Error?e.message:String(e)}async function di(e,t,n){n.silent||w(`${t}Installing ${e}...`);try{let r=await xe(e,n);return n.silent?ue({status:"success",plugin:r.name,version:r.version,duration_ms:r.duration_ms}):me(`${t}${r.name} v${r.version} installed successfully`),{name:e,success:!0,version:r.version,duration_ms:r.duration_ms}}catch(r){if(r instanceof ye)return n.silent?ue({status:"already_installed",plugin:e,message:r.message}):w(`${t}${r.message}`),{name:e,success:true};let o=B(r);return n.silent?Ot({status:"error",plugin:e,message:o}):P(`${t}Failed to install ${e}: ${o}`),{name:e,success:false,error:o}}}function pi(e){let t=e.filter(r=>r.success).length,n=e.filter(r=>!r.success).length;w(`
45
- Installation summary: ${t} succeeded, ${n} failed`);}async function ur(e,t={}){if(!oe())return 1;let n=[];for(let r=0;r<e.length;r++){let o=e.length>1?`[${r+1}/${e.length}] `:"",i=await di(e[r],o,t);n.push(i);}return e.length>1&&(t.silent?ue({status:"summary",succeeded:n.filter(r=>r.success).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.error?{error:r.error}:{}}))}):pi(n)),n.some(r=>!r.success)?1:0}async function dr(e,t){if(!oe())return 1;if(v.debug(`[${e}] Looking up installed plugin`),!t.force){let n=R().find(s=>s.name===e);if(!n)return v.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;let r=I(n.name),o=I(n.version);if(!await fi(`Remove ${r} v${o}? [y/N] `))return v.debug(`[${e}] Uninstall cancelled by user`),w("Operation cancelled."),0}try{return v.debug(`[${e}] Uninstalling plugin`),await Ye(e),v.info(`[${e}] Uninstalled successfully`),me("Plugin removed successfully"),0}catch(n){return v.error(`[${e}] Failed to uninstall: ${B(n)}`),P(B(n)),1}}async function fi(e){let n=(await import('readline')).default.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{n.question(e,o=>{n.close(),r(o.toLowerCase()==="y");});})}async function pr(e){if(!oe())return 1;v.debug(`[${e}] Looking up installed plugin`);let t=R().find(n=>n.name===e);if(!t)return v.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;if(t.status==="enabled")return v.debug(`[${e}] Already enabled, skipping`),w(`${t.name} is already enabled`),0;try{return v.debug(`[${e}] Enabling plugin (current status: ${t.status})`),await Le(e,"enabled"),v.info(`[${e}] Enabled successfully`),me(`${t.name} enabled successfully`),0}catch(n){return v.error(`[${e}] Failed to enable: ${B(n)}`),P(B(n)),1}}async function fr(e){if(!oe())return 1;v.debug(`[${e}] Looking up installed plugin`);let t=R().find(n=>n.name===e);if(!t)return v.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;if(t.status==="disabled")return v.debug(`[${e}] Already disabled, skipping`),w(`${t.name} is already disabled`),0;try{return v.debug(`[${e}] Disabling plugin (current status: ${t.status})`),await Le(e,"disabled"),v.info(`[${e}] Disabled successfully`),me(`${t.name} disabled successfully`),0}catch(n){return v.error(`[${e}] Failed to disable: ${B(n)}`),P(B(n)),1}}async function mr(e,t,n){n.silent||w(`${t}Updating ${e}...`);try{let r=await nt(e,n);return n.silent?ue({status:"updated",plugin:r.name,previousVersion:r.previousVersion,newVersion:r.newVersion,duration_ms:r.duration_ms}):me(`${t}${r.name} v${r.previousVersion} \u2192 v${r.newVersion}`),{name:e,success:!0}}catch(r){if(r instanceof ne)return n.silent?ue({status:"up_to_date",plugin:e,message:r.message}):w(`${t}${r.message}`),{name:e,success:true,skipped:true};let o=B(r);return n.silent?Ot({status:"error",plugin:e,message:o}):P(`${t}Failed to update ${e}: ${o}`),{name:e,success:false,error:o}}}function mi(e){let t=e.filter(o=>o.success&&!o.skipped).length,n=e.filter(o=>o.skipped).length,r=e.filter(o=>!o.success).length;w(`
46
- Update summary: ${t} updated, ${n} already up to date, ${r} failed`);}async function gi(e,t,n){try{let r=await we(e);G(t,r.version,n.force)?w(`Would update ${e}: v${t} \u2192 v${r.version}`):w(`${e} is already up to date (v${t})`);}catch(r){return P(B(r)),1}return 0}function hi(e){return new Map(e.map(t=>[t.name,t.version]))}function yi(e,t,n){let r=t.get(e.name);return r?G(e.version,r,n)?(w(`Would update ${e.name}: v${e.version} \u2192 v${r}`),true):(w(`${e.name} is already up to date (v${e.version})`),false):(w(`Skipping ${e.name}: not found in catalog`),false)}async function wi(e,t){try{let n=await z(),r=hi(n),o=0;for(let i of e)yi(i,r,t.force)&&o++;o===0&&w("All plugins are up to date");}catch(n){return P(B(n)),1}return 0}async function xi(e,t){let n=[];for(let r=0;r<e.length;r++){let o=`[${r+1}/${e.length}] `,i=await mr(e[r].name,o,t);n.push(i);}return t.silent?ue({status:"summary",updated:n.filter(r=>r.success&&!r.skipped).length,upToDate:n.filter(r=>r.skipped).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.skipped?{skipped:true}:{},...r.error?{error:r.error}:{}}))}):mi(n),n.some(r=>!r.success)?1:0}async function gr(e,t={}){if(!oe())return 1;if(e){let o=R().find(s=>s.name===e);return o?t.dryRun?gi(e,o.version,t):(await mr(e,"",t)).success?0:1:(t.silent?Ot({status:"error",plugin:e,message:`Plugin "${e}" is not installed`}):P(`Plugin "${e}" is not installed`),1)}let r=R().filter(o=>o.marketplace===b);return r.length===0?(t.silent?ue({status:"empty",message:"No plugins installed"}):w("No plugins installed"),0):t.dryRun?wi(r,t):xi(r,t)}function Ii(){return C()?{passed:true,message:"Credentials configured"}:{passed:false,message:"Credentials not configured \u2014 Run `flow-cli auth login`"}}async function Si(){let e=Date.now();try{await z();let t=Date.now()-e;return {passed:!0,message:`Prompt Manager accessible (${t}ms)`,latency:t}}catch(t){return t instanceof Error&&t.name==="TimeoutError"?{passed:false,message:"Timeout after 5s \u2014 check your connection"}:{passed:false,message:`Connection error: ${t instanceof Error?t.message:"Unknown"}`}}}function Ei(){return D()?{passed:true,message:"Token is valid"}:{passed:false,message:"Token expired \u2014 run `flow-cli auth login` to re-authenticate"}}function Ti(){let e=join(homedir(),".claude","settings.json");return existsSync(e)?{passed:true,message:"Claude Code detected"}:{passed:false,message:"Claude Code not detected"}}async function hr(){process.stdout.write(`
46
+ `),0)}async function _r(e){if(!await ie())return 1;try{return e.available?await ts(e):e.outdated?await ns(e):rs(e)}catch(t){return P(t instanceof Error?t.message:"Failed to list plugins."),1}}var S=y("manage");function pe(e){process.stdout.write(JSON.stringify(e)+`
47
+ `);}function sn(e){process.stderr.write(JSON.stringify(e)+`
48
+ `);}function B(e){return e instanceof Error?e.message:String(e)}async function os(e,t,n){n.silent||v(`${t}Installing ${e}...`);try{let r=await Ie(e,n);return n.silent?pe({status:"success",plugin:r.name,version:r.version,duration_ms:r.duration_ms}):xe(`${t}${r.name} v${r.version} installed successfully`),{name:e,success:!0,version:r.version,duration_ms:r.duration_ms}}catch(r){if(r instanceof Pe)return n.silent?pe({status:"already_installed",plugin:e,message:r.message}):v(`${t}${r.message}`),{name:e,success:true};let o=B(r);return n.silent?sn({status:"error",plugin:e,message:o}):P(`${t}Failed to install ${e}: ${o}`),{name:e,success:false,error:o}}}function is(e){let t=e.filter(r=>r.success).length,n=e.filter(r=>!r.success).length;v(`
49
+ Installation summary: ${t} succeeded, ${n} failed`);}async function jr(e,t={}){if(!await ie())return 1;let n=[];for(let r=0;r<e.length;r++){let o=e.length>1?`[${r+1}/${e.length}] `:"",i=await os(e[r],o,t);n.push(i);}return e.length>1&&(t.silent?pe({status:"summary",succeeded:n.filter(r=>r.success).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.error?{error:r.error}:{}}))}):is(n)),n.some(r=>!r.success)?1:0}async function Kr(e,t){if(!await ie())return 1;if(S.debug(`[${e}] Looking up installed plugin`),!t.force){let n=R().find(s=>s.name===e);if(!n)return S.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;let r=E(n.name),o=E(n.version);if(!await ss(`Remove ${r} v${o}? [y/N] `))return S.debug(`[${e}] Uninstall cancelled by user`),v("Operation cancelled."),0}try{return S.debug(`[${e}] Uninstalling plugin`),await pt(e),S.info(`[${e}] Uninstalled successfully`),xe("Plugin removed successfully"),0}catch(n){return S.error(`[${e}] Failed to uninstall: ${B(n)}`),P(B(n)),1}}async function ss(e){let n=(await import('readline')).default.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{n.question(e,o=>{n.close(),r(o.toLowerCase()==="y");});})}async function Vr(e){if(!await ie())return 1;S.debug(`[${e}] Looking up installed plugin`);let t=R().find(n=>n.name===e);if(!t)return S.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;if(t.status==="enabled")return S.debug(`[${e}] Already enabled, skipping`),v(`${t.name} is already enabled`),0;try{return S.debug(`[${e}] Enabling plugin (current status: ${t.status})`),await Be(e,"enabled"),S.info(`[${e}] Enabled successfully`),xe(`${t.name} enabled successfully`),0}catch(n){return S.error(`[${e}] Failed to enable: ${B(n)}`),P(B(n)),1}}async function Jr(e){if(!await ie())return 1;S.debug(`[${e}] Looking up installed plugin`);let t=R().find(n=>n.name===e);if(!t)return S.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;if(t.status==="disabled")return S.debug(`[${e}] Already disabled, skipping`),v(`${t.name} is already disabled`),0;try{return S.debug(`[${e}] Disabling plugin (current status: ${t.status})`),await Be(e,"disabled"),S.info(`[${e}] Disabled successfully`),xe(`${t.name} disabled successfully`),0}catch(n){return S.error(`[${e}] Failed to disable: ${B(n)}`),P(B(n)),1}}async function qr(e,t,n){n.silent||v(`${t}Updating ${e}...`);try{let r=await mt(e,n);return n.silent?pe({status:"updated",plugin:r.name,previousVersion:r.previousVersion,newVersion:r.newVersion,duration_ms:r.duration_ms}):xe(`${t}${r.name} v${r.previousVersion} \u2192 v${r.newVersion}`),{name:e,success:!0}}catch(r){if(r instanceof re)return n.silent?pe({status:"up_to_date",plugin:e,message:r.message}):v(`${t}${r.message}`),{name:e,success:true,skipped:true};let o=B(r);return n.silent?sn({status:"error",plugin:e,message:o}):P(`${t}Failed to update ${e}: ${o}`),{name:e,success:false,error:o}}}function as(e){let t=e.filter(o=>o.success&&!o.skipped).length,n=e.filter(o=>o.skipped).length,r=e.filter(o=>!o.success).length;v(`
50
+ Update summary: ${t} updated, ${n} already up to date, ${r} failed`);}async function ls(e,t,n){try{let r=await Ee(e);W(t,r.version,n.force)?v(`Would update ${e}: v${t} \u2192 v${r.version}`):v(`${e} is already up to date (v${t})`);}catch(r){return P(B(r)),1}return 0}function cs(e){return new Map(e.map(t=>[t.name,t.version]))}function us(e,t,n){let r=t.get(e.name);return r?W(e.version,r,n)?(v(`Would update ${e.name}: v${e.version} \u2192 v${r}`),true):(v(`${e.name} is already up to date (v${e.version})`),false):(v(`Skipping ${e.name}: not found in catalog`),false)}async function ps(e,t){try{let n=await G(),r=cs(n),o=0;for(let i of e)us(i,r,t.force)&&o++;o===0&&v("All plugins are up to date");}catch(n){return P(B(n)),1}return 0}async function ds(e,t){let n=[];for(let r=0;r<e.length;r++){let o=`[${r+1}/${e.length}] `,i=await qr(e[r].name,o,t);n.push(i);}return t.silent?pe({status:"summary",updated:n.filter(r=>r.success&&!r.skipped).length,upToDate:n.filter(r=>r.skipped).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.skipped?{skipped:true}:{},...r.error?{error:r.error}:{}}))}):as(n),n.some(r=>!r.success)?1:0}async function Hr(e,t={}){if(!await ie())return 1;if(e){let o=R().find(s=>s.name===e);return o?t.dryRun?ls(e,o.version,t):(await qr(e,"",t)).success?0:1:(t.silent?sn({status:"error",plugin:e,message:`Plugin "${e}" is not installed`}):P(`Plugin "${e}" is not installed`),1)}let r=R().filter(o=>o.marketplace===b);return r.length===0?(t.silent?pe({status:"empty",message:"No plugins installed"}):v("No plugins installed"),0):t.dryRun?ps(r,t):ds(r,t)}async function hs(){return await C()?{passed:true,message:"Credentials configured"}:{passed:false,message:"Credentials not configured \u2014 Run `flow-cli auth login`"}}async function ys(){let e=Date.now();try{await G();let t=Date.now()-e;return {passed:!0,message:`Prompt Manager accessible (${t}ms)`,latency:t}}catch(t){return t instanceof Error&&t.name==="TimeoutError"?{passed:false,message:"Timeout after 5s \u2014 check your connection"}:{passed:false,message:`Connection error: ${t instanceof Error?t.message:"Unknown"}`}}}async function ws(){return await D()?{passed:true,message:"Token is valid"}:{passed:false,message:"Token expired \u2014 run `flow-cli auth login` to re-authenticate"}}function vs(){let e=join(homedir(),".claude","settings.json");return existsSync(e)?{passed:true,message:"Claude Code detected"}:{passed:false,message:"Claude Code not detected"}}async function zr(){process.stdout.write(`
47
51
  `+x.bold(` FlowSetup CLI Diagnostics
48
52
 
49
- `));let e=[{name:"Credentials",fn:Ii},{name:"Prompt Manager",fn:Si},{name:"Valid Token",fn:Ei},{name:"Claude Code",fn:Ti}],t=true;for(let n of e){let r=await n.fn(),o="",i=x.green;r.passed?o=x.green("[OK] "):(o=x.red("[FAIL]"),i=x.red,t=false);let s=` ${o} ${i(n.name.padEnd(18))} ${I(r.message)}`;process.stdout.write(s+`
53
+ `));let e=[{name:"Credentials",fn:hs},{name:"Prompt Manager",fn:ys},{name:"Valid Token",fn:ws},{name:"Claude Code",fn:vs}],t=true;for(let n of e){let r=await n.fn(),o="",i=x.green;r.passed?o=x.green("[OK] "):(o=x.red("[FAIL]"),i=x.red,t=false);let s=` ${o} ${i(n.name.padEnd(18))} ${E(r.message)}`;process.stdout.write(s+`
50
54
  `);}return process.stdout.write(`
51
55
  `),t?(process.stdout.write(x.green(` \u2713 All checks passed!
52
56
 
53
57
  `)),0):(process.stdout.write(x.red(` \u2717 Some checks failed \u2014 verify your configuration
54
58
 
55
- `)),1)}function yr(e){let t=new Command;t.name("flow").description("FlowSetup CLI \u2014 Manage Flow plugins in your Claude Code").version(`@flow/cli v${Je}`,"-V, --version","Display the CLI version").addHelpText("after",`
59
+ `)),1)}function Gr(e){let t=new Command;t.name("flow").description("FlowSetup CLI \u2014 Manage Flow plugins in your Claude Code").version(`@flow/cli v${tt}`,"-V, --version","Display the CLI version").addHelpText("after",`
56
60
  Without arguments, opens the interactive interface (TUI).
57
61
  Use 'flow <command> --help' for details on each command.`).action(()=>{e();});let n=new Command("setup").description("Configure the CLI by detecting Claude Code credentials");n.command("init").description("Initialize the Flow CLI configuration").addHelpText("after",`
58
62
  Examples:
59
- $ flow setup init`).action(async()=>{let i=await Dt();process.exit(i);}),t.addCommand(n);let r=new Command("plugin").description("Manage plugins from the Findr catalog installed in your Claude Code");r.command("list").description("List available or installed plugins").option("--available","show full catalog with installation status",false).option("--outdated","show only plugins with updates available",false).option("--json","output as JSON",false).addHelpText("after",`
63
+ $ flow setup init`).action(async()=>{let i=await on();process.exit(i);}),t.addCommand(n);let r=new Command("plugin").description("Manage plugins from the Findr catalog installed in your Claude Code");r.command("list").description("List available or installed plugins").option("--available","show full catalog with installation status",false).option("--outdated","show only plugins with updates available",false).option("--json","output as JSON",false).addHelpText("after",`
60
64
  Examples:
61
65
  $ flow plugin list
62
66
  $ flow plugin list --available
63
67
  $ flow plugin list --outdated
64
- $ flow plugin list --json`).action(async i=>{let s=await cr(i);process.exit(s);}),r.command("install").description("Install one or more plugins from the Findr catalog into Claude Code").argument("<name...>","Name(s) of the plugin(s) to install (space-separated)").option("--force","Reinstall even if the version is already installed").option("--verbose","Display each step of the installation process").option("--silent","Output in JSON only").addHelpText("after",`
68
+ $ flow plugin list --json`).action(async i=>{let s=await _r(i);process.exit(s);}),r.command("install").description("Install one or more plugins from the Findr catalog into Claude Code").argument("<name...>","Name(s) of the plugin(s) to install (space-separated)").option("--force","Reinstall even if the version is already installed").option("--verbose","Display each step of the installation process").option("--silent","Output in JSON only").addHelpText("after",`
65
69
  Examples:
66
70
  $ flow plugin install flow-adr-writer
67
71
  $ flow plugin install flow-adr-writer flow-prd-writer startup-pack-ai
68
72
  $ flow plugin install flow-adr-writer --force
69
- $ flow plugin install flow-adr-writer --silent`).action(async(i,s)=>{_("cli",{verbose:s.verbose,silent:s.silent});let a=await ur(i,s);process.exit(a);}),r.command("uninstall").description("Remove an installed plugin from Claude Code").argument("<name>","Name of the plugin to remove").option("--force","Skip interactive confirmation").addHelpText("after",`
73
+ $ flow plugin install flow-adr-writer --silent`).action(async(i,s)=>{j("cli",{verbose:s.verbose,silent:s.silent});let a=await jr(i,s);process.exit(a);}),r.command("uninstall").description("Remove an installed plugin from Claude Code").argument("<name>","Name of the plugin to remove").option("--force","Skip interactive confirmation").addHelpText("after",`
70
74
  Examples:
71
75
  $ flow plugin uninstall flow-adr-writer
72
- $ flow plugin uninstall startup-pack-ai --force`).action(async(i,s)=>{let a=await dr(i,s);process.exit(a);}),r.command("update").description("Update plugins to the latest version").argument("[name]","Name of the plugin to update (omit to update all)").option("--force","Force update even if already on latest version").option("--dry-run","Show what would be updated without making changes").option("--verbose","Display each step of the update process").option("--silent","Output in JSON only").addHelpText("after",`
76
+ $ flow plugin uninstall startup-pack-ai --force`).action(async(i,s)=>{let a=await Kr(i,s);process.exit(a);}),r.command("update").description("Update plugins to the latest version").argument("[name]","Name of the plugin to update (omit to update all)").option("--force","Force update even if already on latest version").option("--dry-run","Show what would be updated without making changes").option("--verbose","Display each step of the update process").option("--silent","Output in JSON only").addHelpText("after",`
73
77
  Examples:
74
78
  $ flow plugin update flow-adr-writer
75
79
  $ flow plugin update flow-adr-writer --force
@@ -77,19 +81,19 @@ Examples:
77
81
  $ flow plugin update flow-adr-writer --verbose
78
82
  $ flow plugin update flow-adr-writer --silent
79
83
  $ flow plugin update
80
- $ flow plugin update --dry-run`).action(async(i,s)=>{_("cli",{verbose:s.verbose,silent:s.silent});let a=await gr(i??null,s);process.exit(a);}),r.command("enable").description("Enable an installed plugin").argument("<name>","Name of the plugin to enable").addHelpText("after",`
84
+ $ flow plugin update --dry-run`).action(async(i,s)=>{j("cli",{verbose:s.verbose,silent:s.silent});let a=await Hr(i??null,s);process.exit(a);}),r.command("enable").description("Enable an installed plugin").argument("<name>","Name of the plugin to enable").addHelpText("after",`
81
85
  Examples:
82
- $ flow plugin enable flow-adr-writer`).action(async i=>{_("cli");let s=await pr(i);process.exit(s);}),r.command("disable").description("Disable an installed plugin").argument("<name>","Name of the plugin to disable").addHelpText("after",`
86
+ $ flow plugin enable flow-adr-writer`).action(async i=>{j("cli");let s=await Vr(i);process.exit(s);}),r.command("disable").description("Disable an installed plugin").argument("<name>","Name of the plugin to disable").addHelpText("after",`
83
87
  Examples:
84
- $ flow plugin disable flow-adr-writer`).action(async i=>{_("cli");let s=await fr(i);process.exit(s);}),t.addCommand(r);let o=new Command("auth").description("Manage authentication credentials");return o.command("login").description("Authenticate and save credentials locally").option("--client-id <id>","Client ID for non-interactive authentication").option("--client-secret <secret>","Client Secret for non-interactive authentication").option("--tenant <tenant>","Tenant for non-interactive authentication").option("--verbose","Display each step of the authentication process").addHelpText("after",`
88
+ $ flow plugin disable flow-adr-writer`).action(async i=>{j("cli");let s=await Jr(i);process.exit(s);}),t.addCommand(r);let o=new Command("auth").description("Manage authentication credentials");return o.command("login").description("Authenticate and save credentials locally").option("--client-id <id>","Client ID for non-interactive authentication").option("--client-secret <secret>","Client Secret for non-interactive authentication").option("--tenant <tenant>","Tenant for non-interactive authentication").option("--verbose","Display each step of the authentication process").addHelpText("after",`
85
89
  Examples:
86
90
  $ flow auth login
87
91
  $ flow auth login --client-id ID --client-secret SECRET --tenant TENANT
88
- $ flow auth login --verbose`).action(async i=>{_("cli",{verbose:i.verbose});let s=await Dt(i);process.exit(s);}),o.command("logout").description("Remove locally saved credentials").option("--force","Skip interactive confirmation").addHelpText("after",`
92
+ $ flow auth login --verbose`).action(async i=>{j("cli",{verbose:i.verbose});let s=await on(i);process.exit(s);}),o.command("logout").description("Remove locally saved credentials").option("--force","Skip interactive confirmation").addHelpText("after",`
89
93
  Examples:
90
94
  $ flow auth logout
91
- $ flow auth logout --force`).action(async i=>{let s=await ar(i.force);process.exit(s);}),o.command("status").description("Display the current authentication status").addHelpText("after",`
95
+ $ flow auth logout --force`).action(async i=>{let s=await Fr(i.force);process.exit(s);}),o.command("status").description("Display the current authentication status").addHelpText("after",`
92
96
  Examples:
93
- $ flow auth status`).action(async()=>{let i=await lr();process.exit(i);}),t.addCommand(o),t.command("health").description("Check the CLI configuration and connectivity").addHelpText("after",`
97
+ $ flow auth status`).action(async()=>{let i=await Br();process.exit(i);}),t.addCommand(o),t.command("health").description("Check the CLI configuration and connectivity").addHelpText("after",`
94
98
  Examples:
95
- $ flow health`).action(async()=>{let i=await hr();process.exit(i);}),t}var $i=yr(()=>{_("tui"),render(jsx(sr,{}));});$i.parse();
99
+ $ flow health`).action(async()=>{let i=await zr();process.exit(i);}),t}var bs=Gr(()=>{j("tui"),render(jsx(Nr,{}));});bs.parse();
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@ciandt-flow/cli",
3
- "version": "1.0.4",
3
+ "version": "1.0.5-beta.49",
4
4
  "description": "TUI for browsing and installing Claude Code plugins from the Flow ecosystem",
5
5
  "type": "module",
6
6
  "main": "dist/index.js",
@@ -48,7 +48,10 @@
48
48
  "claude",
49
49
  "tui"
50
50
  ],
51
- "author": "queryCLient",
51
+ "author": {
52
+ "name": "CI&T Flow Team",
53
+ "email": "flow@ciandt.com"
54
+ },
52
55
  "dependencies": {
53
56
  "@tanstack/react-query": "^5.90.21",
54
57
  "boxen": "^8.0.1",
@@ -63,6 +66,7 @@
63
66
  "ink-big-text": "2.0.0",
64
67
  "ink-gradient": "4.0.0",
65
68
  "ink-spinner": "5.0.0",
69
+ "keytar": "^7.9.0",
66
70
  "ky": "1.14.3",
67
71
  "proper-lockfile": "4.1.2",
68
72
  "react": "19.2.5",
@@ -80,7 +84,7 @@
80
84
  "@types/react-dom": "^19.0.0",
81
85
  "@types/semver": "^7.7.1",
82
86
  "@vitejs/plugin-react": "^4.0.0",
83
- "@vitest/coverage-v8": "^2.0.0",
87
+ "@vitest/coverage-v8": "^3.2.4",
84
88
  "eslint": "^9.39.2",
85
89
  "eslint-config-prettier": "^10.1.8",
86
90
  "eslint-plugin-prettier": "^5.5.5",
@@ -92,15 +96,15 @@
92
96
  "tsx": "^4.7.0",
93
97
  "typescript": "^5.3.3",
94
98
  "typescript-eslint": "^8.54.0",
95
- "vitest": "^2.0.0"
99
+ "vitest": "^3.2.4"
96
100
  },
97
101
  "engines": {
98
102
  "node": ">=22.0.0"
99
103
  },
100
104
  "overrides": {
101
- "ajv": "^6.12.6",
102
105
  "flatted": ">=3.4.2",
103
106
  "esbuild": ">=0.25.0",
104
- "picomatch": ">=4.0.4"
107
+ "picomatch": ">=4.0.4",
108
+ "vite": "^6.4.2"
105
109
  }
106
- }
110
+ }