@ciandt-flow/cli 1.0.5-beta.49 → 1.0.5-beta.57

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/dist/index.js +40 -40
  2. package/package.json +1 -1
package/dist/index.js CHANGED
@@ -1,79 +1,79 @@
1
1
  #!/usr/bin/env node
2
- import {Box,Text,render,useInput}from'ink';import Qo,{useState,useEffect,useMemo,useCallback,useRef}from'react';import {jsxs,jsx,Fragment}from'react/jsx-runtime';import {create}from'zustand';import Do,{HTTPError}from'ky';import {StatusCodes}from'http-status-codes';import*as me from'crypto';import {randomUUID}from'crypto';import*as I from'fs';import I__default,{readFileSync,existsSync,realpathSync}from'fs';import*as q from'path';import q__default,{join}from'path';import*as Q from'os';import Q__default,{homedir}from'os';import {execFile,exec,spawn}from'child_process';import {promisify}from'util';import*as Pn from'readline';import Xe from'keytar';import $n from'conf';import qo from'ink-big-text';import Ho from'ink-gradient';import x from'chalk';import ui from'ink-spinner';import*as F from'fs/promises';import vi from'extract-zip';import xi from'proper-lockfile';import Yt from'semver';import {Command}from'commander';var so=16;function cn({label:e,value:t,onChange:n,masked:r=false,isActive:o,error:i}){let s=useRef(t);useEffect(()=>{s.current=t;},[t]),useInput((u,c)=>{if(c.backspace||c.delete){let m=s.current.slice(0,-1);s.current=m,n(m);}else if(u&&!c.ctrl&&!c.meta&&!c.escape&&!c.return&&!c.tab&&!c.upArrow&&!c.downArrow&&!c.leftArrow&&!c.rightArrow){let m=s.current+u;s.current=m,n(m);}},{isActive:o});let a=r?"\u2022".repeat(t.length):t;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{children:[jsx(Text,{color:o?"cyan":"gray",children:o?"\u25B8 ":" "}),jsx(Text,{color:o?"white":"gray",bold:o,children:e.padEnd(so)}),jsx(Text,{color:o?"cyan":"gray",children:a}),o&&jsx(Text,{color:"cyan",children:"\u2588"})]}),i&&jsx(Box,{paddingLeft:3,children:jsxs(Text,{color:"red",children:["\u26A0 ",i]})})]})}var _=create(e=>({credentials:null,isAuthenticated:false,justAuthenticated:false,setCredentials:t=>e({credentials:t,isAuthenticated:true}),clearCredentials:()=>e({credentials:null,isAuthenticated:false,justAuthenticated:false}),setJustAuthenticated:t=>e({justAuthenticated:t})}));var d=create(e=>({activeTab:"discover",focus:"list",selectedIndex:0,actionMenuOpen:false,notification:null,loading:false,loadingMessage:"",catalogError:null,setActiveTab:t=>e({activeTab:t}),setFocus:t=>e({focus:t}),setSelectedIndex:t=>e({selectedIndex:t}),setActionMenuOpen:t=>e({actionMenuOpen:t}),showNotification:(t,n)=>e({notification:{message:t,type:n}}),clearNotification:()=>e({notification:null}),setLoading:(t,n="")=>e({loading:t,loadingMessage:t?n:""}),setCatalogError:t=>e({catalogError:t})}));var un="FLOW",b="flow-skills",Ve=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;var Je="aes-256-gcm",co=16,pn=16,$e=class{key;constructor(t){if(t.length!==32)throw new Error(`Invalid key length: expected 32 bytes, got ${t.length}`);this.key=t;}encrypt(t){let n=me.randomBytes(co),r=me.createCipheriv(Je,this.key,n,{authTagLength:pn}),o=Buffer.concat([r.update(t,"utf8"),r.final()]),i=r.getAuthTag();return {iv:n.toString("hex"),authTag:i.toString("hex"),ciphertext:o.toString("hex"),algorithm:Je}}decrypt(t){if(t.algorithm!==Je)throw new Error(`Unsupported encryption algorithm: ${t.algorithm}`);let n=me.createDecipheriv(Je,this.key,Buffer.from(t.iv,"hex"),{authTagLength:pn});return n.setAuthTag(Buffer.from(t.authTag,"hex")),Buffer.concat([n.update(Buffer.from(t.ciphertext,"hex")),n.final()]).toString("utf8")}};var uo=/Bearer\s+[A-Za-z0-9\-._~+/]+=*/g,po=/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,fo=/[A-Za-z0-9+/]{40,}={0,2}/g;function xt(e){return e.replace(uo,"Bearer ***").replace(po,"***").replace(fo,"***")}var ke=class{context;constructor(t){this.context=t;}write(t){let n=this.context==="tui"?this.formatTui(t):this.formatCli(t);process.stderr.write(n+`
3
- `);}formatTui(t){return `[flow:${t.module}] ${t.message}`}formatCli(t){let n=String(t.timestamp.getHours()).padStart(2,"0"),r=String(t.timestamp.getMinutes()).padStart(2,"0"),o=String(t.timestamp.getSeconds()).padStart(2,"0");return `[${n}:${r}:${o}] [${t.level.toUpperCase()}] ${t.message}`}};var Re=".claude",dn=".flow";function fn(e,t){return q.join(Q.homedir(),Re,"plugins","cache",b,e,t)}function bt(e){return q.join(Q.homedir(),Re,"plugins","marketplaces",b,"plugins","native",e)}function qe(){return q.join(Q.homedir(),Re,"plugins","marketplaces",b,".claude-plugin","marketplace.json")}function mn(){return q.join(Q.homedir(),Re,"plugins","known_marketplaces.json")}function gn(){return q.join(Q.homedir(),Re,"plugins","marketplaces",b)}function hn(){return q.join(Q.homedir(),dn,"cache","install.lock")}function yn(){return q.join(Q.homedir(),dn,"logs","flowsetup.log")}var mo=5*1024*1024,go=3,He=class{filePath;constructor(){this.filePath=yn(),this.ensureDir(),this.rotateIfNeeded();}write(t){let n=`[${t.timestamp.toISOString()}] [${t.level.toUpperCase()}] [${t.module}] ${t.message}
4
- `;try{I.appendFileSync(this.filePath,n,"utf-8");}catch{}}ensureDir(){try{let t=q.dirname(this.filePath);I.mkdirSync(t,{recursive:!0});}catch{}}rotateIfNeeded(){try{if(I.statSync(this.filePath).size>mo){let n=new Date().toISOString().replace(/[:.]/g,"-"),r=this.filePath.replace(".log",`-${n}.log`);I.renameSync(this.filePath,r),this.cleanOldBackups();}}catch{}}cleanOldBackups(){try{let t=q.dirname(this.filePath),n=q.basename(this.filePath,".log"),r=I.readdirSync(t).filter(o=>o.startsWith(n+"-")&&o.endsWith(".log")).sort().reverse();for(let o of r.slice(go))I.unlinkSync(q.join(t,o));}catch{}}};var ze=class{write(t){process.stdout.write(t.message+`
5
- `);}};var ge={debug:0,info:1,warn:2,error:3},ce={context:"cli",transports:[],minLevel:"warn",debugModules:null};function ho(){let e=process.env.DEBUG;if(!e)return null;let t=e.split(",").map(r=>r.trim()).filter(Boolean);for(let r of t)if(r==="flow:*")return "all";let n=new Set;for(let r of t)r.startsWith("flow:")&&n.add(r.slice(5));return n.size>0?n:null}function j(e,t){if(e==="tui"){let n=ho();ce={context:e,transports:[new ke("tui"),new He],minLevel:n?"debug":"warn",debugModules:n};}else t?.silent?ce={context:e,transports:[],minLevel:"error",debugModules:null}:t?.verbose?ce={context:e,transports:[new ke("cli")],minLevel:"debug",debugModules:null}:ce={context:e,transports:[new ze],minLevel:"info",debugModules:null};}function wn(){return ce.transports}function vn(e,t){let{debugModules:n,minLevel:r}=ce;return ce.context==="tui"&&n&&n!=="all"?n.has(t)?ge[e]>=ge.debug:ge[e]>=ge.warn:ge[e]>=ge[r]}var xn=new Map;function Ge(e,t,n){if(!vn(e,t))return;let r={level:e,module:t,message:xt(n),timestamp:new Date};for(let o of wn())o.write(r);}function y(e){let t=xn.get(e);if(t)return t;let n={debug:r=>Ge("debug",e,r),info:r=>Ge("info",e,r),warn:r=>Ge("warn",e,r),error:r=>Ge("error",e,r)};return xn.set(e,n),n}var St=y("encryption"),Pt="__encrypted__";function yo(e){return typeof e=="object"&&e!==null&&Pt in e&&e[Pt]===true}function Et(e){return {serialize(t){let n=JSON.stringify(t),r=e.encrypt(n),o={[Pt]:true,envelope:r};return JSON.stringify(o,null," ")},deserialize(t){let n;try{n=JSON.parse(t);}catch{return St.warn("Config file contains unparseable data, treating as empty"),{}}if(yo(n))try{let r=e.decrypt(n.envelope);return JSON.parse(r)}catch(r){return St.error(`Decryption failed: ${r instanceof Error?r.message:"unknown error"}. Config will be treated as empty. Re-authentication may be required.`),{}}return St.info("Detected plaintext config \u2014 will encrypt on next write"),n}}}var It=promisify(execFile),xo=promisify(exec),he=class{static async isAvailable(){try{return await xo("command -v security"),!0}catch{return false}}async getSecret(t,n){try{let{stdout:r}=await It("security",["find-generic-password","-w","-a",n,"-s",t]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await It("security",["add-generic-password","-U","-a",n,"-s",t,"-w",r]);}async deleteSecret(t,n){try{return await It("security",["delete-generic-password","-a",n,"-s",t]),!0}catch{return false}}getStoragePath(){return "macOS Keychain (security)"}};var Sn=promisify(execFile),Tt=promisify(exec),Eo=[{name:"apt",command:"sudo apt install -y libsecret-tools"},{name:"dnf",command:"sudo dnf install -y libsecret"},{name:"pacman",command:"sudo pacman -S --noconfirm libsecret"},{name:"apk",command:"sudo apk add libsecret-tools"},{name:"zypper",command:"sudo zypper install -y libsecret-tools"}],We=y("encryption:linux-keyvault");function Io(e){let t=Pn.createInterface({input:process.stdin,output:process.stdout});return new Promise(n=>{t.question(e,r=>{t.close(),n(r.trim().toLowerCase());});})}var ee=class e{static async isAvailable(){try{return await Tt("command -v secret-tool"),!0}catch{return false}}static async detectPackageManager(){for(let t of Eo)try{return await Tt(`command -v ${t.name}`),t}catch{}return null}static async ensureInstalled(){if(await e.isAvailable())return true;We.info("Secure credential storage requires 'secret-tool' (libsecret). This tool allows us to store your encryption key in the OS keyring, so your credentials are protected even if someone copies the config file.");let t=await e.detectPackageManager();if(!t)return We.warn("Could not detect a supported package manager. Please install libsecret manually."),false;let n=await Io(" ? Install secret-tool? This requires sudo. (y/N) ");if(n!=="y"&&n!=="yes")return false;try{return We.info(`Running: ${t.command}`),await Tt(t.command),e.isAvailable()}catch{return We.warn("Installation failed. Falling back to derived key."),false}}async getSecret(t,n){try{let{stdout:r}=await Sn("secret-tool",["lookup","service",t,"account",n]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await new Promise((o,i)=>{let s=spawn("secret-tool",["store","--label",t,"service",t,"account",n]);s.stdin.end(r,"utf8"),s.on("close",a=>{a===0?o():i(new Error(`secret-tool exited with code ${a}`));}),s.on("error",i);});}async deleteSecret(t,n){try{return await Sn("secret-tool",["clear","service",t,"account",n]),!0}catch{return false}}getStoragePath(){return "Linux Secret Service (secret-tool)"}};var In=y("encryption:windows-keyvault"),ye=class{static async isAvailable(){try{return await Xe.getPassword("__flow_probe__","__flow_probe__"),!0}catch{return false}}async getSecret(t,n){try{return await Xe.getPassword(t,n)}catch(r){let o=r instanceof Error?r.message.split(`
6
- `)[0]:"unknown error";return In.error(`Failed to read secret from Windows Credential Manager [service="${t}", account="${n}"]: ${o}`),null}}async setSecret(t,n,r){try{await Xe.setPassword(t,n,r);}catch(o){let i=o instanceof Error?o.message.split(`
7
- `)[0]:"unknown error",s=`Failed to store secret in Windows Credential Manager [service="${t}", account="${n}"]: ${i}`;throw In.error(s),new Error(s)}}async deleteSecret(t,n){try{return await Xe.deletePassword(t,n)}catch{return false}}getStoragePath(){return "Windows Credential Manager (keytar)"}};var To=32,Ao="flow-plugins-cli-fallback",kn="flow-plugins-cli-fallback",$o={linux:"install secret-tool (e.g. sudo apt install libsecret-tools)",darwin:"ensure the Keychain is accessible (security binary must be available)",win32:"ensure Credential Manager is available (cmdkey must be in PATH)"};function ko(){let e=`${Q.hostname()}${Q.userInfo().username}`;return me.scryptSync(e,Ao,To)}function Ro(){let e=ko(),t=new $e(e),n=Et(t);return new $n({projectName:kn,serialize:n.serialize,deserialize:n.deserialize})}var At=null;function Ze(){return At||(At=Ro()),At}var K=class{warned=false;async getSecret(t,n){return Ze().get(`${t}:${n}`)??null}async setSecret(t,n,r){if(!this.warned){let o=$o[process.platform]??"ensure the OS keyring is available";process.stderr.write(`\u26A0 Secure keyring unavailable. Credentials are stored in an encrypted file
2
+ import {Box,Text,render,useInput}from'ink';import ti,{useState,useEffect,useMemo,useCallback,useRef}from'react';import {jsxs,jsx,Fragment}from'react/jsx-runtime';import {create}from'zustand';import Fo,{HTTPError}from'ky';import {StatusCodes}from'http-status-codes';import*as me from'crypto';import {randomUUID}from'crypto';import*as I from'fs';import I__default,{readFileSync,existsSync,realpathSync}from'fs';import*as q from'path';import q__default,{join}from'path';import*as Q from'os';import Q__default,{homedir}from'os';import {execFile,exec,spawn}from'child_process';import {promisify}from'util';import*as Tn from'readline';import Xe from'keytar';import Rt from'conf';import Go from'ink-big-text';import Wo from'ink-gradient';import x from'chalk';import fi from'ink-spinner';import*as B from'fs/promises';import Si from'extract-zip';import Pi from'proper-lockfile';import nn from'semver';import {Command}from'commander';var lo=16;function dn({label:e,value:t,onChange:n,masked:r=false,isActive:o,error:i}){let s=useRef(t);useEffect(()=>{s.current=t;},[t]),useInput((u,c)=>{if(c.backspace||c.delete){let m=s.current.slice(0,-1);s.current=m,n(m);}else if(u&&!c.ctrl&&!c.meta&&!c.escape&&!c.return&&!c.tab&&!c.upArrow&&!c.downArrow&&!c.leftArrow&&!c.rightArrow){let m=s.current+u;s.current=m,n(m);}},{isActive:o});let a=r?"\u2022".repeat(t.length):t;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{children:[jsx(Text,{color:o?"cyan":"gray",children:o?"\u25B8 ":" "}),jsx(Text,{color:o?"white":"gray",bold:o,children:e.padEnd(lo)}),jsx(Text,{color:o?"cyan":"gray",children:a}),o&&jsx(Text,{color:"cyan",children:"\u2588"})]}),i&&jsx(Box,{paddingLeft:3,children:jsxs(Text,{color:"red",children:["\u26A0 ",i]})})]})}var j=create(e=>({credentials:null,isAuthenticated:false,justAuthenticated:false,setCredentials:t=>e({credentials:t,isAuthenticated:true}),clearCredentials:()=>e({credentials:null,isAuthenticated:false,justAuthenticated:false}),setJustAuthenticated:t=>e({justAuthenticated:t})}));var d=create(e=>({activeTab:"discover",focus:"list",selectedIndex:0,actionMenuOpen:false,notification:null,loading:false,loadingMessage:"",catalogError:null,setActiveTab:t=>e({activeTab:t}),setFocus:t=>e({focus:t}),setSelectedIndex:t=>e({selectedIndex:t}),setActionMenuOpen:t=>e({actionMenuOpen:t}),showNotification:(t,n)=>e({notification:{message:t,type:n}}),clearNotification:()=>e({notification:null}),setLoading:(t,n="")=>e({loading:t,loadingMessage:t?n:""}),setCatalogError:t=>e({catalogError:t})}));var fn="FLOW",b="flow-skills",Ve=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;var Je="aes-256-gcm",po=16,mn=16,$e=class{key;constructor(t){if(t.length!==32)throw new Error(`Invalid key length: expected 32 bytes, got ${t.length}`);this.key=t;}encrypt(t){let n=me.randomBytes(po),r=me.createCipheriv(Je,this.key,n,{authTagLength:mn}),o=Buffer.concat([r.update(t,"utf8"),r.final()]),i=r.getAuthTag();return {iv:n.toString("hex"),authTag:i.toString("hex"),ciphertext:o.toString("hex"),algorithm:Je}}decrypt(t){if(t.algorithm!==Je)throw new Error(`Unsupported encryption algorithm: ${t.algorithm}`);let n=me.createDecipheriv(Je,this.key,Buffer.from(t.iv,"hex"),{authTagLength:mn});return n.setAuthTag(Buffer.from(t.authTag,"hex")),Buffer.concat([n.update(Buffer.from(t.ciphertext,"hex")),n.final()]).toString("utf8")}};var fo=/Bearer\s+[A-Za-z0-9\-._~+/]+=*/g,mo=/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,go=/[A-Za-z0-9+/]{40,}={0,2}/g;function Pt(e){return e.replace(fo,"Bearer ***").replace(mo,"***").replace(go,"***")}var ke=class{context;constructor(t){this.context=t;}write(t){let n=this.context==="tui"?this.formatTui(t):this.formatCli(t);process.stderr.write(n+`
3
+ `);}formatTui(t){return `[flow:${t.module}] ${t.message}`}formatCli(t){let n=String(t.timestamp.getHours()).padStart(2,"0"),r=String(t.timestamp.getMinutes()).padStart(2,"0"),o=String(t.timestamp.getSeconds()).padStart(2,"0");return `[${n}:${r}:${o}] [${t.level.toUpperCase()}] ${t.message}`}};var Re=".claude",gn=".flow";function hn(e,t){return q.join(Q.homedir(),Re,"plugins","cache",b,e,t)}function Et(e){return q.join(Q.homedir(),Re,"plugins","marketplaces",b,"plugins","native",e)}function qe(){return q.join(Q.homedir(),Re,"plugins","marketplaces",b,".claude-plugin","marketplace.json")}function yn(){return q.join(Q.homedir(),Re,"plugins","known_marketplaces.json")}function wn(){return q.join(Q.homedir(),Re,"plugins","marketplaces",b)}function vn(){return q.join(Q.homedir(),gn,"cache","install.lock")}function xn(){return q.join(Q.homedir(),gn,"logs","flowsetup.log")}var ho=5*1024*1024,yo=3,He=class{filePath;constructor(){this.filePath=xn(),this.ensureDir(),this.rotateIfNeeded();}write(t){let n=`[${t.timestamp.toISOString()}] [${t.level.toUpperCase()}] [${t.module}] ${t.message}
4
+ `;try{I.appendFileSync(this.filePath,n,"utf-8");}catch{}}ensureDir(){try{let t=q.dirname(this.filePath);I.mkdirSync(t,{recursive:!0});}catch{}}rotateIfNeeded(){try{if(I.statSync(this.filePath).size>ho){let n=new Date().toISOString().replace(/[:.]/g,"-"),r=this.filePath.replace(".log",`-${n}.log`);I.renameSync(this.filePath,r),this.cleanOldBackups();}}catch{}}cleanOldBackups(){try{let t=q.dirname(this.filePath),n=q.basename(this.filePath,".log"),r=I.readdirSync(t).filter(o=>o.startsWith(n+"-")&&o.endsWith(".log")).sort().reverse();for(let o of r.slice(yo))I.unlinkSync(q.join(t,o));}catch{}}};var ze=class{write(t){process.stdout.write(t.message+`
5
+ `);}};var ge={debug:0,info:1,warn:2,error:3},ce={context:"cli",transports:[],minLevel:"warn",debugModules:null};function wo(){let e=process.env.DEBUG;if(!e)return null;let t=e.split(",").map(r=>r.trim()).filter(Boolean);for(let r of t)if(r==="flow:*")return "all";let n=new Set;for(let r of t)r.startsWith("flow:")&&n.add(r.slice(5));return n.size>0?n:null}function K(e,t){if(e==="tui"){let n=wo();ce={context:e,transports:[new ke("tui"),new He],minLevel:n?"debug":"warn",debugModules:n};}else t?.silent?ce={context:e,transports:[],minLevel:"error",debugModules:null}:t?.verbose?ce={context:e,transports:[new ke("cli")],minLevel:"debug",debugModules:null}:ce={context:e,transports:[new ze],minLevel:"info",debugModules:null};}function bn(){return ce.transports}function Sn(e,t){let{debugModules:n,minLevel:r}=ce;return ce.context==="tui"&&n&&n!=="all"?n.has(t)?ge[e]>=ge.debug:ge[e]>=ge.warn:ge[e]>=ge[r]}var Pn=new Map;function Ge(e,t,n){if(!Sn(e,t))return;let r={level:e,module:t,message:Pt(n),timestamp:new Date};for(let o of bn())o.write(r);}function y(e){let t=Pn.get(e);if(t)return t;let n={debug:r=>Ge("debug",e,r),info:r=>Ge("info",e,r),warn:r=>Ge("warn",e,r),error:r=>Ge("error",e,r)};return Pn.set(e,n),n}var It=y("encryption"),Tt="__encrypted__";function vo(e){return typeof e=="object"&&e!==null&&Tt in e&&e[Tt]===true}function At(e){return {serialize(t){let n=JSON.stringify(t),r=e.encrypt(n),o={[Tt]:true,envelope:r};return JSON.stringify(o,null," ")},deserialize(t){let n;try{n=JSON.parse(t);}catch{return It.warn("Config file contains unparseable data, treating as empty"),{}}if(vo(n))try{let r=e.decrypt(n.envelope);return JSON.parse(r)}catch(r){return It.error(`Decryption failed: ${r instanceof Error?r.message:"unknown error"}. Config will be treated as empty. Re-authentication may be required.`),{}}return It.info("Detected plaintext config \u2014 will encrypt on next write"),n}}}var $t=promisify(execFile),So=promisify(exec),he=class{static async isAvailable(){try{return await So("command -v security"),!0}catch{return false}}async getSecret(t,n){try{let{stdout:r}=await $t("security",["find-generic-password","-w","-a",n,"-s",t]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await $t("security",["add-generic-password","-U","-a",n,"-s",t,"-w",r]);}async deleteSecret(t,n){try{return await $t("security",["delete-generic-password","-a",n,"-s",t]),!0}catch{return false}}getStoragePath(){return "macOS Keychain (security)"}};var In=promisify(execFile),kt=promisify(exec),To=[{name:"apt",command:"sudo apt install -y libsecret-tools"},{name:"dnf",command:"sudo dnf install -y libsecret"},{name:"pacman",command:"sudo pacman -S --noconfirm libsecret"},{name:"apk",command:"sudo apk add libsecret-tools"},{name:"zypper",command:"sudo zypper install -y libsecret-tools"}],We=y("encryption:linux-keyvault");async function Ao(e,t){let n=["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"],r=0,o=setInterval(()=>{process.stderr.write(`\r${n[r++%n.length]} ${e}`);},80);try{return await t()}finally{clearInterval(o),process.stderr.write("\r\x1B[2K");}}function $o(e){let t=Tn.createInterface({input:process.stdin,output:process.stdout});return new Promise(n=>{t.question(e,r=>{t.close(),n(r.trim().toLowerCase());});})}var ee=class e{static async isAvailable(){try{return await kt("command -v secret-tool"),!0}catch{return false}}static async detectPackageManager(){for(let t of To)try{return await kt(`command -v ${t.name}`),t}catch{}return null}static async ensureInstalled(){if(await e.isAvailable())return true;We.info("Secure credential storage requires 'secret-tool' (libsecret). This tool allows us to store your encryption key in the OS keyring, so your credentials are protected even if someone copies the config file.");let t=await e.detectPackageManager();if(!t)return We.warn("Could not detect a supported package manager. Please install libsecret manually."),false;let n=await $o(" ? Install secret-tool? This requires sudo. (y/N) ");if(n!=="y"&&n!=="yes")return false;try{return We.info(`Running: ${t.command}`),await Ao("Installing secret-tool...",()=>kt(t.command)),e.isAvailable()}catch{return We.warn("Installation failed. Falling back to derived key."),false}}async getSecret(t,n){try{let{stdout:r}=await In("secret-tool",["lookup","service",t,"account",n]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await new Promise((o,i)=>{let s=spawn("secret-tool",["store","--label",t,"service",t,"account",n]);s.stdin.end(r,"utf8"),s.on("close",a=>{a===0?o():i(new Error(`secret-tool exited with code ${a}`));}),s.on("error",i);});}async deleteSecret(t,n){try{return await In("secret-tool",["clear","service",t,"account",n]),!0}catch{return false}}getStoragePath(){return "Linux Secret Service (secret-tool)"}};var $n=y("encryption:windows-keyvault"),ye=class{static async isAvailable(){try{return await Xe.getPassword("__flow_probe__","__flow_probe__"),!0}catch{return false}}async getSecret(t,n){try{return await Xe.getPassword(t,n)}catch(r){let o=r instanceof Error?r.message.split(`
6
+ `)[0]:"unknown error";return $n.error(`Failed to read secret from Windows Credential Manager [service="${t}", account="${n}"]: ${o}`),null}}async setSecret(t,n,r){try{await Xe.setPassword(t,n,r);}catch(o){let i=o instanceof Error?o.message.split(`
7
+ `)[0]:"unknown error",s=`Failed to store secret in Windows Credential Manager [service="${t}", account="${n}"]: ${i}`;throw $n.error(s),new Error(s)}}async deleteSecret(t,n){try{return await Xe.deletePassword(t,n)}catch{return false}}getStoragePath(){return "Windows Credential Manager (keytar)"}};var ko=32,Ro="flow-plugins-cli-fallback",Ct="flow-plugins-cli-fallback",Co={linux:"install secret-tool (e.g. sudo apt install libsecret-tools)",darwin:"ensure the Keychain is accessible (security binary must be available)",win32:"ensure Credential Manager is available (cmdkey must be in PATH)"};function Lo(){let e=`${Q.hostname()}${Q.userInfo().username}`;return me.scryptSync(e,Ro,ko)}function Mo(){let e=Lo(),t=new $e(e),n=At(t);return new Rt({projectName:Ct,serialize:n.serialize,deserialize:n.deserialize})}var Qe=null;function Ze(){return Qe||(Qe=Mo()),Qe}var C=class{warned=false;async getSecret(t,n){return Ze().get(`${t}:${n}`)??null}async setSecret(t,n,r){if(!this.warned){let o=Co[process.platform]??"ensure the OS keyring is available";process.stderr.write(`\u26A0 Secure keyring unavailable. Credentials are stored in an encrypted file
8
8
  using a machine-derived key. For stronger security, ${o}.
9
- `),this.warned=true;}Ze().set(`${t}:${n}`,r);}async deleteSecret(t,n){let r=Ze(),o=`${t}:${n}`;return r.has(o)?(r.delete(o),true):false}getStoragePath(){return Ze().path}static hasExistingData(){try{let t=new $n({projectName:kn});return I.existsSync(t.path)}catch{return false}}};async function $t(){if(K.hasExistingData())return new K;switch(process.platform){case "darwin":return await he.isAvailable()?new he:new K;case "linux":return await ee.isAvailable()?new ee:await ee.ensureInstalled()?new ee:new K;case "win32":return await ye.isAvailable()?new ye:new K;default:throw new Error(`Unsupported platform: ${process.platform}`)}}var Co=y("config:credentials"),we="flow-plugins-cli",Rt="credentials",Ct="token-cache",kt=null;async function ve(){return kt||(kt=$t()),kt}async function C(){let t=await(await ve()).getSecret(we,Rt);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function Rn(e){let{clientId:t,clientSecret:n,tenant:r}=e,o=[!t?.trim()&&"clientId",!n?.trim()&&"clientSecret",!r?.trim()&&"tenant"].filter(Boolean);if(o.length>0)throw Co.error(`missing or empty fields: ${o.join(", ")}`),new Error("Cannot save credentials: clientId, clientSecret, and tenant are required");await(await ve()).setSecret(we,Rt,JSON.stringify(e));}async function Cn(){let e=await ve();await e.deleteSecret(we,Rt),await e.deleteSecret(we,Ct);}async function Ln(){return (await ve()).getStoragePath()}async function Mn(e){await(await ve()).setSecret(we,Ct,JSON.stringify(e));}async function Lt(){let t=await(await ve()).getSecret(we,Ct);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function D(){let e=await Lt();return e?new Date(e.expiresAt)>new Date:false}var Lo=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^0\.0\.0\.0$/,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i];function Mo(e){return Lo.some(t=>t.test(e))}function Uo(e,t){let n=process.env[e]??t;if(!n)throw new Error(`Missing required environment variable: ${e}`);return n}function Ye(e,t){let n=Uo(e,t),r;try{r=new URL(n);}catch{throw new Error(`${e} must be a valid URL. Got: "${n}"`)}if(r.protocol!=="https:")throw new Error(`${e} must be an HTTPS URL. Got protocol: "${r.protocol}"`);if(r.username||r.password)throw new Error(`${e} must not contain embedded credentials (user:pass@host is not allowed)`);if(Mo(r.hostname))throw new Error(`${e} must not point to a private/loopback address. Got: "${r.hostname}"`);return n}var Mt=y("api:auth");function No(e){if(!Ve.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var Un={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};async function Fo(e){if(e instanceof HTTPError){let t=e.response.status;Mt.error(`HTTP error during authentication [status=${t}]`);let n="";try{let r=await e.response.text(),o=JSON.parse(r);typeof o.error=="string"&&(n=o.error);}catch{}return n&&Un[n]?new Error(Un[n]):t===StatusCodes.UNAUTHORIZED||t===StatusCodes.FORBIDDEN||t===StatusCodes.INTERNAL_SERVER_ERROR?new Error("Invalid credentials"):t>=StatusCodes.BAD_REQUEST&&t<StatusCodes.INTERNAL_SERVER_ERROR?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}return e instanceof Error?(Mt.debug(`Non-HTTP error during authentication: ${e.message}`),e):(Mt.debug("Unknown error during authentication"),new Error("Authentication failed"))}async function Le(e){let t=Ye("AUTH_ENGINE_URL","https://flow.ciandt.com/auth-engine-api/v2/api-key/token");No(e.tenant);let n;try{n=await Do.post(t,{headers:{FlowTenant:e.tenant},json:{clientSecret:e.clientSecret}}).json();}catch(o){throw await Fo(o)}let r=n.expires_at??new Date(Date.now()+(n.expires_in??3600)*1e3).toISOString();await Rn(e),await Mn({accessToken:n.access_token,expiresAt:r});}async function Dn(){if(await D()){let t=await Lt();if(!t)throw new Error("Flow CLI not configured. Run: flow-cli auth login");return t.accessToken}throw new Error("Flow CLI not configured or token expired. Run: flow-cli auth login")}var O=["clientId","clientSecret","tenant"],_o={clientId:"Client ID",clientSecret:"Client Secret",tenant:"Tenant"};function On(){let[e,t]=useState({clientId:"",clientSecret:"",tenant:""}),[n,r]=useState("clientId"),[o,i]=useState({}),[s,a]=useState(null),[u,c]=useState(false),{setCredentials:m,setJustAuthenticated:h}=_(),{setFocus:T}=d();useInput((l,p)=>{if(!u){if(p.shift&&p.tab){let f=O.indexOf(n);f>0&&r(O[f-1]);}else if(p.tab){let f=O.indexOf(n);f<O.length-1&&r(O[f+1]);}else if(p.return)if(n==="tenant")se();else {let f=O.indexOf(n);r(O[f+1]);}}},{isActive:true});let se=async()=>{let l={};for(let p of O)e[p].trim()||(l[p]="This field is required");if(Object.keys(l).length>0){i(l);let p=O.find(f=>l[f]);p&&r(p);return}c(true),a(null);try{await Le({clientId:e.clientId.trim(),clientSecret:e.clientSecret.trim(),tenant:e.tenant.trim()});let{clientSecret:p,...f}=e;m(f),h(!0),T("list");}catch(p){a(p instanceof Error?p.message:"Authentication failed");}finally{c(false),t(p=>({...p,clientSecret:""}));}},ae=l=>p=>{t(f=>({...f,[l]:p})),o[l]&&i(f=>({...f,[l]:void 0}));};return jsxs(Box,{flexDirection:"column",padding:2,children:[jsx(Box,{marginBottom:1,children:jsxs(Text,{bold:true,color:"cyan",children:[un," \u2014 Initial Setup"]})}),jsx(Box,{flexDirection:"column",children:O.map(l=>jsx(Box,{marginBottom:1,children:jsx(cn,{label:_o[l],value:e[l],onChange:ae(l),masked:l==="clientSecret",isActive:n===l&&!u,error:o[l]})},l))}),u&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"cyan",children:"Authenticating..."})}),s&&jsx(Box,{marginTop:1,children:jsxs(Text,{color:"red",children:["\u26A0 ",s]})}),jsx(Box,{marginTop:1,children:jsx(Text,{dimColor:true,children:"Tab next field \xB7 Enter confirm"})})]})}var Vo=JSON.parse(readFileSync(join(import.meta.dirname,"..","package.json"),"utf8")),tt=Vo.version;function Bn(){return jsxs(Box,{flexDirection:"column",alignItems:"center",children:[jsx(Ho,{name:"morning",children:jsx(qo,{text:"FLOW",font:"block"})}),jsx(Box,{marginTop:-1,marginBottom:1,children:jsxs(Text,{dimColor:true,children:["Marketplace \xB7 v",tt]})})]})}var Nt={discover:"Discover",installed:"Installed"},zo=Object.keys(Nt);function jn(){let e=d(t=>t.activeTab);return jsxs(Box,{paddingX:1,paddingBottom:1,children:[zo.map(t=>jsx(Box,{marginRight:2,children:t===e?jsx(Text,{bold:true,underline:true,color:"cyan",children:Nt[t]}):jsx(Text,{dimColor:true,children:Nt[t]})},t)),jsx(Text,{dimColor:true,children:"(Tab to cycle)"})]})}var N=create(e=>({query:"",setQuery:t=>e({query:t}),resetQuery:()=>e({query:""})}));function Vn(){let e=d(r=>r.focus),t=N(r=>r.query),n=e==="search";return jsxs(Box,{borderStyle:"single",borderTop:false,borderBottom:true,borderLeft:false,borderRight:false,paddingX:1,marginX:1,marginBottom:1,children:[jsx(Text,{color:n?"cyan":"gray",children:"\u03C1 "}),n?jsxs(Fragment,{children:[jsx(Text,{color:"white",children:t}),jsx(Text,{color:"cyan",children:"\u2588"})]}):jsx(Text,{dimColor:true,children:t||"Search..."})]})}function E(e){return e==null?"":e.replace(/\x1b\[[0-9;:<=>?]*[ -/]*[@-~]/g,"").replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g,"").replace(/\x1b./g,"").replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g,"")}function xe(e){process.stdout.write(x.green(` \u2713 ${E(e)}
9
+ `),this.warned=true;}Ze().set(`${t}:${n}`,r);}async deleteSecret(t,n){let r=Ze(),o=`${t}:${n}`;return r.has(o)?(r.delete(o),true):false}getStoragePath(){return Ze().path}static hasExistingData(){try{let t=new Rt({projectName:Ct});return I.existsSync(t.path)}catch{return false}}static clearFallbackFile(){try{let t=new Rt({projectName:Ct});I.rmSync(t.path,{force:!0});}catch{}Qe=null;}};async function Lt(){if(C.hasExistingData())return new C;switch(process.platform){case "darwin":return await he.isAvailable()?new he:new C;case "linux":return await ee.isAvailable()?new ee:await ee.ensureInstalled()?new ee:new C;case "win32":return await ye.isAvailable()?new ye:new C;default:throw new Error(`Unsupported platform: ${process.platform}`)}}var Uo=y("config:credentials"),we="flow-plugins-cli",Mt="credentials",Ut="token-cache",tt=null;async function ve(){return tt||(tt=Lt()),tt}function Rn(){tt=null;}async function L(){let t=await(await ve()).getSecret(we,Mt);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function Cn(e){let{clientId:t,clientSecret:n,tenant:r}=e,o=[!t?.trim()&&"clientId",!n?.trim()&&"clientSecret",!r?.trim()&&"tenant"].filter(Boolean);if(o.length>0)throw Uo.error(`missing or empty fields: ${o.join(", ")}`),new Error("Cannot save credentials: clientId, clientSecret, and tenant are required");await(await ve()).setSecret(we,Mt,JSON.stringify(e));}async function Ln(){let e=await ve();await e.deleteSecret(we,Mt),await e.deleteSecret(we,Ut);}async function Mn(){return (await ve()).getStoragePath()}async function Un(e){await(await ve()).setSecret(we,Ut,JSON.stringify(e));}async function Dt(){let t=await(await ve()).getSecret(we,Ut);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function O(){let e=await Dt();return e?new Date(e.expiresAt)>new Date:false}var Do=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^0\.0\.0\.0$/,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i];function Oo(e){return Do.some(t=>t.test(e))}function No(e,t){let n=process.env[e]??t;if(!n)throw new Error(`Missing required environment variable: ${e}`);return n}function nt(e,t){let n=No(e,t),r;try{r=new URL(n);}catch{throw new Error(`${e} must be a valid URL. Got: "${n}"`)}if(r.protocol!=="https:")throw new Error(`${e} must be an HTTPS URL. Got protocol: "${r.protocol}"`);if(r.username||r.password)throw new Error(`${e} must not contain embedded credentials (user:pass@host is not allowed)`);if(Oo(r.hostname))throw new Error(`${e} must not point to a private/loopback address. Got: "${r.hostname}"`);return n}var Ot=y("api:auth");function _o(e){if(!Ve.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var Dn={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};async function jo(e){if(e instanceof HTTPError){let t=e.response.status;Ot.error(`HTTP error during authentication [status=${t}]`);let n="";try{let r=await e.response.text(),o=JSON.parse(r);typeof o.error=="string"&&(n=o.error);}catch{}return n&&Dn[n]?new Error(Dn[n]):t===StatusCodes.UNAUTHORIZED||t===StatusCodes.FORBIDDEN||t===StatusCodes.INTERNAL_SERVER_ERROR?new Error("Invalid credentials"):t>=StatusCodes.BAD_REQUEST&&t<StatusCodes.INTERNAL_SERVER_ERROR?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}return e instanceof Error?(Ot.debug(`Non-HTTP error during authentication: ${e.message}`),e):(Ot.debug("Unknown error during authentication"),new Error("Authentication failed"))}async function Le(e){let t=nt("AUTH_ENGINE_URL","https://flow.ciandt.com/auth-engine-api/v2/api-key/token");_o(e.tenant);let n;try{n=await Fo.post(t,{headers:{FlowTenant:e.tenant},json:{clientSecret:e.clientSecret}}).json();}catch(o){throw await jo(o)}let r=n.expires_at??new Date(Date.now()+(n.expires_in??3600)*1e3).toISOString();await Cn(e),await Un({accessToken:n.access_token,expiresAt:r});}async function On(){if(await O()){let t=await Dt();if(!t)throw new Error("Flow CLI not configured. Run: flow-cli auth login");return t.accessToken}throw new Error("Flow CLI not configured or token expired. Run: flow-cli auth login")}var N=["clientId","clientSecret","tenant"],Vo={clientId:"Client ID",clientSecret:"Client Secret",tenant:"Tenant"};function Nn(){let[e,t]=useState({clientId:"",clientSecret:"",tenant:""}),[n,r]=useState("clientId"),[o,i]=useState({}),[s,a]=useState(null),[u,c]=useState(false),{setCredentials:m,setJustAuthenticated:h}=j(),{setFocus:T}=d();useInput((l,p)=>{if(!u){if(p.shift&&p.tab){let f=N.indexOf(n);f>0&&r(N[f-1]);}else if(p.tab){let f=N.indexOf(n);f<N.length-1&&r(N[f+1]);}else if(p.return)if(n==="tenant")se();else {let f=N.indexOf(n);r(N[f+1]);}}},{isActive:true});let se=async()=>{let l={};for(let p of N)e[p].trim()||(l[p]="This field is required");if(Object.keys(l).length>0){i(l);let p=N.find(f=>l[f]);p&&r(p);return}c(true),a(null);try{await Le({clientId:e.clientId.trim(),clientSecret:e.clientSecret.trim(),tenant:e.tenant.trim()});let{clientSecret:p,...f}=e;m(f),h(!0),T("list");}catch(p){a(p instanceof Error?p.message:"Authentication failed");}finally{c(false),t(p=>({...p,clientSecret:""}));}},ae=l=>p=>{t(f=>({...f,[l]:p})),o[l]&&i(f=>({...f,[l]:void 0}));};return jsxs(Box,{flexDirection:"column",padding:2,children:[jsx(Box,{marginBottom:1,children:jsxs(Text,{bold:true,color:"cyan",children:[fn," \u2014 Initial Setup"]})}),jsx(Box,{flexDirection:"column",children:N.map(l=>jsx(Box,{marginBottom:1,children:jsx(dn,{label:Vo[l],value:e[l],onChange:ae(l),masked:l==="clientSecret",isActive:n===l&&!u,error:o[l]})},l))}),u&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"cyan",children:"Authenticating..."})}),s&&jsx(Box,{marginTop:1,children:jsxs(Text,{color:"red",children:["\u26A0 ",s]})}),jsx(Box,{marginTop:1,children:jsx(Text,{dimColor:true,children:"Tab next field \xB7 Enter confirm"})})]})}var Ho=JSON.parse(readFileSync(join(import.meta.dirname,"..","package.json"),"utf8")),ot=Ho.version;function _n(){return jsxs(Box,{flexDirection:"column",alignItems:"center",children:[jsx(Wo,{name:"morning",children:jsx(Go,{text:"FLOW",font:"block"})}),jsx(Box,{marginTop:-1,marginBottom:1,children:jsxs(Text,{dimColor:true,children:["Marketplace \xB7 v",ot]})})]})}var _t={discover:"Discover",installed:"Installed"},Xo=Object.keys(_t);function Kn(){let e=d(t=>t.activeTab);return jsxs(Box,{paddingX:1,paddingBottom:1,children:[Xo.map(t=>jsx(Box,{marginRight:2,children:t===e?jsx(Text,{bold:true,underline:true,color:"cyan",children:_t[t]}):jsx(Text,{dimColor:true,children:_t[t]})},t)),jsx(Text,{dimColor:true,children:"(Tab to cycle)"})]})}var F=create(e=>({query:"",setQuery:t=>e({query:t}),resetQuery:()=>e({query:""})}));function Jn(){let e=d(r=>r.focus),t=F(r=>r.query),n=e==="search";return jsxs(Box,{borderStyle:"single",borderTop:false,borderBottom:true,borderLeft:false,borderRight:false,paddingX:1,marginX:1,marginBottom:1,children:[jsx(Text,{color:n?"cyan":"gray",children:"\u03C1 "}),n?jsxs(Fragment,{children:[jsx(Text,{color:"white",children:t}),jsx(Text,{color:"cyan",children:"\u2588"})]}):jsx(Text,{dimColor:true,children:t||"Search..."})]})}function E(e){return e==null?"":e.replace(/\x1b\[[0-9;:<=>?]*[ -/]*[@-~]/g,"").replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g,"").replace(/\x1b./g,"").replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g,"")}function xe(e){process.stdout.write(x.green(` \u2713 ${E(e)}
10
10
  `));}function P(e){process.stderr.write(x.red(` \u2717 ${E(e)}
11
11
  `));}function v(e){process.stdout.write(x.cyan(` \u2139 ${E(e)}
12
- `));}function it(e,t){let n=t.map(a=>a.map(E)),r=[e,...n],o=e.map((a,u)=>Math.max(...r.map(c=>(c[u]??"").length))),i=o.map(a=>"\u2500".repeat(a)).join(" "),s=a=>a.map((u,c)=>u.padEnd(o[c])).join(" ");process.stdout.write(`
12
+ `));}function lt(e,t){let n=t.map(a=>a.map(E)),r=[e,...n],o=e.map((a,u)=>Math.max(...r.map(c=>(c[u]??"").length))),i=o.map(a=>"\u2500".repeat(a)).join(" "),s=a=>a.map((u,c)=>u.padEnd(o[c])).join(" ");process.stdout.write(`
13
13
  `),process.stdout.write(` ${x.bold(s(e))}
14
14
  `),process.stdout.write(` ${x.dim(i)}
15
15
  `);for(let a of n)process.stdout.write(` ${s(a)}
16
16
  `);process.stdout.write(`
17
- `);}function st(e){process.stdout.write(JSON.stringify(e,null,2)+`
18
- `);}function at(e){let t=new Date(e);return isNaN(t.getTime())?"\u2014":new Intl.DateTimeFormat("en-US",{dateStyle:"short"}).format(t)}var Jn=Qo.memo(function({item:t,isSelected:n}){let r=t.status==="disabled"?"yellow":"green";return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:n?"cyan":"gray",children:n?"\u203A ":"\u25CB "}),jsx(Text,{bold:n,color:n?"cyan":"white",children:t.name}),jsxs(Text,{dimColor:true,children:[t.authorName?` \xB7 ${t.authorName}`:""," \xB7 v",t.version]}),t.status&&jsxs(Text,{color:r,children:[" [",t.status,"]"]}),t.updateAvailable&&jsx(Text,{color:"yellow",children:" [\u2191 update available]"}),t.installedBadge&&jsx(Text,{color:"cyan",children:" [installed]"}),t.installedAt&&jsxs(Text,{dimColor:true,children:[" \xB7 ",at(t.installedAt)]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:t.description})})]})});function Hn({message:e}){return jsx(Box,{paddingX:2,paddingY:1,children:jsx(Text,{dimColor:true,children:e??"No items found."})})}var _t=5;function Gn({items:e,emptyMessage:t}){let n=d(u=>u.selectedIndex);if(e.length===0)return jsx(Hn,{message:t});let r=Math.max(0,n-Math.floor(_t/2)),o=Math.min(e.length,r+_t);o===e.length&&(r=Math.max(0,o-_t));let i=e.slice(r,o),s=r,a=e.length-o;return jsxs(Box,{flexDirection:"column",children:[s>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",s," more above"]})}),i.map((u,c)=>jsx(Jn,{item:u,isSelected:r+c===n},u.name)),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",a," more below"]})})]})}var ti={discover:"Discover plugins",installed:"Installed plugins"};function Xn({items:e,tabId:t,emptyMessage:n}){return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{paddingX:1,paddingBottom:1,children:[jsx(Text,{bold:true,children:ti[t]}),jsxs(Text,{dimColor:true,children:[" (",e.length,")"]})]}),jsx(Vn,{}),jsx(Gn,{items:e,emptyMessage:n})]})}function Zn({filteredItems:e,emptyMessage:t}){let n=d(r=>r.activeTab);return jsx(Box,{flexDirection:"column",flexGrow:1,children:n==="discover"?jsx(Xn,{items:e,tabId:"discover",emptyMessage:t},"discover"):jsx(Xn,{items:e,tabId:"installed",emptyMessage:t},"installed")})}var oi={tabs:"Tab: switch tab | \u2191\u2193: navigate | Enter: select | /: search | q: quit",list:"Tab: switch tab | \u2191\u2193: navigate | Enter: select | /: search | q: quit",search:"Type to filter | Esc: cancel search | Enter: confirm",actionMenu:"\u2191\u2193: navigate options | Enter: confirm | Esc: close menu",auth:"Tab: next field | Enter: confirm | Ctrl+C: quit"};function Yn(){let e=d(t=>t.focus);return jsx(Box,{borderStyle:"single",borderTop:true,borderBottom:false,borderLeft:false,borderRight:false,children:jsx(Text,{dimColor:true,children:oi[e]})})}function er({message:e,type:t}){return e?jsx(Box,{paddingX:1,children:jsxs(Text,{color:t==="success"?"green":t==="info"?"cyan":"red",children:[t==="success"?"\u2713":t==="info"?"(i)":"\u2717"," ",e]})}):null}function or({message:e}){return jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(ui,{type:"dots"})}),jsxs(Text,{children:[" ",e]})]})}function ar({message:e,onRetry:t,onBack:n}){return useInput((r,o)=>{r==="r"&&t?t():o.escape&&n&&n();}),jsxs(Box,{flexDirection:"column",paddingX:2,paddingY:1,children:[jsxs(Text,{color:"red",children:["\u2717 ",e]}),t&&jsx(Text,{dimColor:true,children:"Press r to retry"}),n&&jsx(Text,{dimColor:true,children:"Press Escape to go back"})]})}function ct({itemName:e,actions:t,onAction:n,onClose:r}){let o=d(a=>a.focus),[i,s]=useState(0);return useInput((a,u)=>{u.upArrow?s(c=>c>0?c-1:c):u.downArrow?s(c=>c<t.length-1?c+1:c):u.return?n(t[i]):u.escape&&r();},{isActive:o==="actionMenu"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Text,{bold:true,children:e}),jsx(Box,{flexDirection:"column",marginTop:1,children:t.map((a,u)=>jsx(Box,{children:jsxs(Text,{bold:u===i,color:u===i?"cyan":void 0,children:[u===i?"\u203A ":" ",a]})},u))})]})}function ur({itemName:e,onInstall:t,onClose:n}){return jsx(ct,{itemName:e,actions:["Install","Cancel"],onAction:i=>{i==="Install"?t():n();},onClose:n})}function fr({itemName:e,itemStatus:t,updateAvailable:n,catalogVersion:r,onUninstall:o,onToggleStatus:i,onUpdate:s,onClose:a}){let[u,c]=useState(false),m=d(l=>l.focus);if(useInput((l,p)=>{p.escape||l==="n"?c(false):l==="y"&&o();},{isActive:u&&m==="actionMenu"}),u)return jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Uninstall "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]});let h=t==="enabled"?"Disable":"Enable",T=r?`Update to v${r}`:"Update";return jsx(ct,{itemName:e,actions:n?["Uninstall",h,T,"Cancel"]:["Uninstall",h,"Cancel"],onAction:l=>{l==="Uninstall"?c(true):l===h?i():l.startsWith("Update")?s?.():a();},onClose:a})}async function mr(e,t){let n=q.resolve(t);await F.mkdir(n,{recursive:true});let r=q.join(q.dirname(n),`${randomUUID()}.zip`);try{await F.writeFile(r,e),await vi(r,{dir:n,onEntry(o){if((o.externalFileAttributes>>16&61440)===40960)throw new Error(`Zip Slip (symlink): entry "${o.fileName}" is a symbolic link and was rejected`);let s=q.resolve(n,o.fileName);if(!s.startsWith(n+q.sep)&&s!==n)throw new Error(`Zip Slip detected: entry "${o.fileName}" would escape target directory`)}});try{let o=realpathSync(n);if(!o.startsWith(q.resolve(q.dirname(n))))throw new Error(`Zip Slip (post-extract): resolved path "${o}" is outside expected parent`)}catch(o){if(o.code!=="ENOENT")throw o}}finally{try{await F.unlink(r);}catch{}}}async function zt(e){await F.rm(e,{recursive:true,force:true});}async function ne(){let e=hn();await F.mkdir(q.dirname(e),{recursive:true});try{await F.writeFile(e,"",{flag:"wx"});}catch(n){if(n.code!=="EEXIST")throw n}return await xi.lock(e,{stale:1e4,retries:{retries:2,minTimeout:500,maxTimeout:500}})}function Si(){return {$schema:"https://anthropic.com/claude-code/marketplace.schema.json",name:b,description:"Flow Skills marketplace",owner:{name:"Flow Team",email:"flow@ciandt.com"},plugins:[]}}function hr(){let e=qe();if(!I__default.existsSync(e))return null;try{return JSON.parse(I__default.readFileSync(e,"utf-8"))}catch{return null}}function Pi(){let e=hr();if(e)return e;let t=Si(),n=qe();return I__default.mkdirSync(q__default.dirname(n),{recursive:true}),Gt(t),t}function Gt(e){let t=qe(),n=`${t}.tmp`;I__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),I__default.renameSync(n,t);}function Ei(){let e=mn(),t={};try{I__default.existsSync(e)&&(t=JSON.parse(I__default.readFileSync(e,"utf-8")));}catch{t={};}if(t[b])return;t[b]={source:{source:"github",repo:"CI-T-HyperX/flow-skills"},installLocation:gn(),lastUpdated:new Date().toISOString()};let n=`${e}.tmp`;I__default.writeFileSync(n,JSON.stringify(t,null,2),"utf-8"),I__default.renameSync(n,e);}function yr(e,t){Ei();let n=bt(e.name);I__default.mkdirSync(q__default.dirname(n),{recursive:true});try{I__default.lstatSync(n),I__default.rmSync(n,{recursive:!0,force:!0});}catch{}I__default.symlinkSync(t,n);let r=Pi();r.plugins.some(i=>i.name===e.name)||(r.plugins.push({name:e.name,description:e.description,version:e.version,author:e.author,source:`./plugins/native/${e.name}`,category:e.category}),Gt(r));}function wr(e){let t=bt(e);try{I__default.rmSync(t,{recursive:!0,force:!0});}catch{}let n=hr();if(!n)return;let r=n.plugins.length;n.plugins=n.plugins.filter(o=>o.name!==e),n.plugins.length!==r&&Gt(n);}var J=y("storage");function vr(){return q__default.join(Q__default.homedir(),".claude","plugins","installed_plugins.json")}function Ii(){return q__default.join(Q__default.homedir(),".claude","plugins")}function Ti(e){let t=q__default.resolve(e),n=q__default.resolve(Ii());if(!t.startsWith(n+q__default.sep)&&t!==n)throw new Error(`Security error: installPath '${e}' is outside the plugins directory`)}function xr(){return q__default.join(Q__default.homedir(),".claude","settings.json")}function H(){let e=vr();if(!I__default.existsSync(e))return {version:2,plugins:{}};try{return JSON.parse(I__default.readFileSync(e,"utf-8"))}catch{return {version:2,plugins:{}}}}function Fe(e){let t=vr();I__default.mkdirSync(q__default.dirname(t),{recursive:true});let n=`${t}.tmp`;I__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),I__default.renameSync(n,t);}function Ne(e){let t=e.lastIndexOf("@");return t===-1?{name:e,marketplace:""}:{name:e.slice(0,t),marketplace:e.slice(t+1)}}function Ai(e){let t=q__default.join(e,".claude-plugin","plugin.json");if(!I__default.existsSync(t))return null;try{return JSON.parse(I__default.readFileSync(t,"utf-8"))}catch{return null}}function Xt(){let e=xr();if(!I__default.existsSync(e))return {};try{return JSON.parse(I__default.readFileSync(e,"utf-8"))}catch{return {}}}function br(e){let t=xr(),n=`${t}.tmp`;I__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),I__default.renameSync(n,t);}function $i(){return Xt().enabledPlugins??{}}function ki(e){let t=Xt(),n=t.enabledPlugins;if(!n||!(e in n))return;let{[e]:r,...o}=n;t.enabledPlugins=o,br(t);}function Zt(e,t){let n=Xt(),r=n.enabledPlugins??{};n.enabledPlugins={...r,[e]:t},br(n);}function R(){let e=H(),t=$i();return Object.entries(e.plugins).map(([n,r])=>{let o=r[0],{name:i,marketplace:s}=Ne(n),a=Ai(o.installPath),u=t[n];return {name:i,marketplace:s,version:o.version,installedAt:o.installedAt,installPath:o.installPath,scope:o.scope,description:a?.description,author:a?.author,status:u===false?"disabled":"enabled"}})}async function pt(e){J.debug(`[${e}] Acquiring lock to uninstall`);let t=await ne();try{let{name:n,marketplace:r}=Ne(e),o=H(),i;if(r?(i=`${n}@${r}`,o.plugins[i]||(i=void 0)):i=Object.keys(o.plugins).filter(h=>Ne(h).name===n)[0],!i)throw J.error(`[${n}] Plugin is not installed`),new Error(`Plugin '${n}' is not installed`);J.debug(`[${n}] Resolved key: ${i}`);let s=o.plugins[i][0].installPath;Ti(s);let a=q__default.dirname(s);J.debug(`[${n}] Removing directory: ${a}`),I__default.rmSync(a,{recursive:!0,force:!0}),wr(n);let{[i]:u,...c}=o.plugins;Fe({...o,plugins:c}),ki(i),J.debug(`[${n}] Uninstalled successfully`);}finally{await t();}}async function Be(e,t){J.debug(`[${e}] Acquiring lock to set status \u2192 ${t}`);let n=await ne();try{let{name:r}=Ne(e),o=H(),i=Object.keys(o.plugins).filter(s=>Ne(s).name===r);if(i.length===0)throw J.error(`[${r}] Plugin is not installed`),new Error(`Plugin '${r}' is not installed`);J.debug(`[${r}] Resolved key: ${i[0]}`),Zt(i[0],t==="enabled"),J.debug(`[${r}] Status updated to ${t}`);}finally{await n();}}var z=create(e=>({installedItems:[],setInstalledItems:t=>e({installedItems:t}),loadFromDisk:()=>e({installedItems:R()})}));var L=["discover","installed"];function Sr(e,t,n){if(t.rightArrow||t.tab){let r=L.indexOf(n.activeTab);return [{type:"setTab",tab:L[(r+1)%L.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}if(t.leftArrow){let r=L.indexOf(n.activeTab);return [{type:"setTab",tab:L[(r-1+L.length)%L.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}return t.downArrow?[{type:"setFocus",focus:"list"}]:[]}function Pr(e,t,n,r){if(t.upArrow&&n.selectedIndex>0)return [{type:"setSelectedIndex",index:n.selectedIndex-1}];if(t.downArrow&&n.selectedIndex<r-1)return [{type:"setSelectedIndex",index:n.selectedIndex+1}];if(t.tab){let o=L.indexOf(n.activeTab);return [{type:"setTab",tab:L[(o+1)%L.length]},{type:"setSelectedIndex",index:0}]}return t.return?[{type:"setActionMenuOpen",open:true},{type:"setFocus",focus:"actionMenu"}]:e==="/"?[{type:"setFocus",focus:"search"}]:[]}function Er(e,t){return t.escape?[{type:"setActionMenuOpen",open:false},{type:"setFocus",focus:"list"}]:[]}function Ir(e,t){return t.escape?{actions:[{type:"setFocus",focus:"list"}],queryUpdate:"reset"}:t.return?{actions:[{type:"setFocus",focus:"list"}],queryUpdate:null}:t.backspace||t.delete?{actions:[],queryUpdate:{backspace:true}}:e&&!t.ctrl&&!t.meta?{actions:[],queryUpdate:{append:e}}:{actions:[],queryUpdate:null}}function dt(e){let{setActiveTab:t,setFocus:n,setSelectedIndex:r,setActionMenuOpen:o}=d.getState();for(let i of e)i.type==="setTab"?t(i.tab):i.type==="setFocus"?n(i.focus):i.type==="setSelectedIndex"?r(i.index):i.type==="setActionMenuOpen"&&o(i.open);}function Ar({listLength:e}){let t=d(l=>l.focus),n=d(l=>l.selectedIndex),r=d(l=>l.actionMenuOpen),o=d(l=>l.setFocus),i=d(l=>l.setActionMenuOpen),s=N(l=>l.query),a=N(l=>l.setQuery),u=N(l=>l.resetQuery),c=useRef(e);useEffect(()=>{c.current=e;},[e]);let[m,h]=useState("");useEffect(()=>{let l=setTimeout(()=>h(s),300);return ()=>clearTimeout(l)},[s]),useInput((l,p)=>{l==="q"&&process.exit(0);},{isActive:t!=="search"&&t!=="auth"}),useInput((l,p)=>{let{activeTab:f,selectedIndex:w,actionMenuOpen:M}=d.getState();dt(Sr(l,p,{activeTab:f}));},{isActive:t==="tabs"}),useInput((l,p)=>{let{activeTab:f,selectedIndex:w,actionMenuOpen:M}=d.getState();dt(Pr(l,p,{activeTab:f,selectedIndex:w},c.current));},{isActive:t==="list"}),useInput((l,p)=>{dt(Er(l,p));},{isActive:t==="actionMenu"}),useInput((l,p)=>{let f=Ir(l,p),w=f.queryUpdate;dt(f.actions),w==="reset"?(u(),h("")):w!==null&&("backspace"in w?a(N.getState().query.slice(0,-1)):a(N.getState().query+w.append));},{isActive:t==="search"});let T=useCallback(()=>{i(false),o("list");},[i,o]),se=useCallback(l=>{let{setSelectedIndex:p,selectedIndex:f}=d.getState();l===0?p(0):f>=l&&p(l-1);},[]),ae=useCallback(l=>{if(!m)return c.current=l.length,l;let p=m.toLowerCase(),f=l.filter(w=>w.name.toLowerCase().includes(p)||w.description?.toLowerCase().includes(p));return c.current=f.length,f},[m]);return {actionMenuOpen:r,closeMenu:T,selectedIndex:n,clampIndex:se,filteredItems:ae}}function kr(){let e=d(a=>a.notification),t=d(a=>a.showNotification),n=d(a=>a.clearNotification),r=_(a=>a.justAuthenticated),o=_(a=>a.credentials),i=_(a=>a.setJustAuthenticated);return useEffect(()=>{r&&o&&(t(`Authenticated. Tenant: ${o.tenant}`,"success"),i(false));},[r,o]),useEffect(()=>{if(!e)return;let a=setTimeout(n,3e3);return ()=>clearTimeout(a)},[e]),{notify:(a,u)=>{t(a,u);}}}var Pe=class extends Error{constructor(n,r){super(`${n} v${r} is already installed. Use --force to reinstall.`);this.pluginName=n;this.version=r;this.name="AlreadyInstalledError";}pluginName;version},re=class extends Error{constructor(n,r){super(`${n} is already up to date (v${r})`);this.pluginName=n;this.version=r;this.name="AlreadyUpToDateError";}pluginName;version};function ft(){return Do.create({prefixUrl:Ye("PROMPT_MANAGER_URL","https://flow.ciandt.com/prompt-manager-api/"),hooks:{beforeRequest:[async e=>{let t=await Dn();e.headers.set("Authorization",`Bearer ${t}`);let n=await C();n?.tenant&&Ve.test(n.tenant)&&e.headers.set("FlowTenant",n.tenant);}]}})}var Ui=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function Rr(e){if(!e||!Ui.test(e))throw new Error(`Invalid plugin name: "${e}". Must be 1-64 chars, lowercase alphanumeric and hyphens only.`)}async function G(){try{let{plugins:e}=await ft().get("v1/plugins/catalog").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow-cli auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching plugin catalog"):new Error(`Failed to fetch plugin catalog: ${e.message}`):e}}async function Ee(e){Rr(e);try{return await ft().get(`v1/plugins/${e}/manifest`).json()}catch(t){throw t instanceof Error?t.message.includes("404")?new Error(`Plugin '${e}' not found in catalog`):t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to fetch plugin manifest: ${t.message}`):t}}async function Cr(e){Rr(e);try{let t=await ft().get(`v1/plugins/${e}/archive`);return Buffer.from(await t.arrayBuffer())}catch(t){throw t instanceof Error?t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to download plugin: ${t.message}`):t}}var Di=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function Oi(e){if(!Di.test(e))throw new Error(`Invalid plugin name from manifest: "${e}". Plugin names must be lowercase alphanumeric and hyphens (1-64 chars).`)}var je=y("installer");function Ni(e,t){let n=`${e}@${b}`,o=H().plugins[n];if(o&&!t)throw new Pe(e,o[0].version);return {pluginKey:n,alreadyInstalled:o}}async function Fi(e,t,n){n&&await zt(t);try{je.debug(`Extracting to ${t}...`),await mr(e,t);}catch(r){throw await zt(t),r}}function Bi(e,t,n){let r=H(),o={scope:"user",installPath:t,version:n,installedAt:new Date().toISOString()};r.plugins[e]=[o],Fe(r),Zt(e,true);}async function Ie(e,t={}){let n=Date.now(),r=null;try{je.debug(`[${e}] Acquiring lock...`),r=await ne();let{pluginKey:o,alreadyInstalled:i}=Ni(e,t.force);je.debug(`[${e}] Fetching manifest...`);let s=await Ee(e);Oi(s.name),je.debug(`[${e}] Downloading archive...`);let a=await Cr(e),u=fn(s.name,s.version);await Fi(a,u,!!i&&!!t.force),Bi(o,u,s.version),yr(s,u);let c=Date.now()-n;return je.debug(`[${e}] Installed successfully in ${c}ms`),{name:s.name,version:s.version,path:u,duration_ms:c}}finally{r&&await r();}}function W(e,t,n=false){return n?true:!Yt.valid(e)||!Yt.valid(t)?false:Yt.gt(t,e)}var oe=y("updater");function _i(e){let t=H(),n=`${e}@${b}`,r=t.plugins[n];return !r||r.length===0?null:{pluginKey:n,entry:r[0]}}async function mt(e,t={}){let n=Date.now(),r=null;try{oe.debug(`[${e}] Acquiring lock...`),r=await ne();let o=_i(e);if(!o)throw oe.error(`[${e}] Plugin is not installed`),new Error(`Plugin "${e}" is not installed`);let{entry:i}=o,s=i.version,a=i.installPath;oe.debug(`[${e}] Fetching manifest...`);let c=(await Ee(e)).version;if(!W(s,c,t.force))throw oe.debug(`[${e}] Already up to date (v${s})`),new re(e,s);oe.info(`[${e}] Updating v${s} \u2192 v${c}...`),await r(),r=null;try{let m=await Ie(e,{force:!0}),h=Date.now()-n;return oe.debug(`[${e}] Updated successfully in ${h}ms`),{name:m.name,previousVersion:s,newVersion:m.version,path:m.path,duration_ms:h}}catch(m){oe.warn(`[${e}] Install failed, rolling back to v${s}...`),r=await ne();let h=H(),T=`${e}@${b}`;throw h.plugins[T]&&(h.plugins[T][0].version=s,h.plugins[T][0].installPath=a,Fe(h),oe.info(`[${e}] Rollback completed, restored to v${s}`)),m}}finally{r&&await r();}}function Lr(){let e=z(s=>s.installedItems),t=z(s=>s.setInstalledItems),n=useCallback(async s=>{await Ie(s.name),z.getState().loadFromDisk();},[]),r=useCallback(async s=>{await pt(s),t(e.filter(a=>a.name!==s));},[e,t]),o=useCallback(async s=>{let u=e.find(c=>c.name===s)?.status==="enabled"?"disabled":"enabled";await Be(s,u),t(e.map(c=>c.name===s?{...c,status:u}:c));},[e,t]),i=useCallback(async s=>{await mt(s),z.getState().loadFromDisk();},[]);return {install:n,uninstall:r,toggle:o,update:i}}function Mr({selectedItem:e,selectedCatalogItem:t,items:n,closeMenu:r,clampIndex:o,notify:i}){let s=d(p=>p.setLoading),{install:a,uninstall:u,toggle:c,update:m}=Lr(),h=async(p,f,w)=>{s(true,p),r();try{await f(),o(n.length),i(w,"success");}catch(M){i(M instanceof Error?M.message:"Something went wrong","error");}finally{s(false);}};return {handleInstall:()=>{e&&t&&h(`Installing ${e.name}...`,()=>a(t),"\u2713 Installed successfully");},handleUninstall:()=>{e&&h(`Uninstalling ${e.name}...`,()=>u(e.name),"\u2713 Uninstalled");},handleToggleStatus:()=>{if(!e)return;let p=e.status==="enabled";h(p?`Disabling ${e.name}...`:`Enabling ${e.name}...`,()=>c(e.name),p?"\u2713 Disabled":"\u2713 Enabled");},handleUpdate:()=>{if(!e)return;let p=t?` to v${t.version}`:"";(async()=>{s(true,`Updating ${e.name}${p}...`),r();try{await m(e.name),o(n.length),i(`\u2713 Updated ${e.name}${p}`,"success");}catch(w){w instanceof re?i(w.message,"info"):i(w instanceof Error?w.message:"Something went wrong","error");}finally{s(false);}})();}}}function Ur(){let[e,t]=useState([]),[n,r]=useState(true),[o,i]=useState(null),s=useCallback(async()=>{r(true),i(null);try{let a=await G();t(a);}catch(a){i(a instanceof Error?a:new Error(String(a))),t([]);}finally{r(false);}},[]);return useEffect(()=>{s();},[s]),{catalog:e,isLoading:n,error:o,refetch:s}}function Dr(){return {items:z(t=>t.installedItems)}}var Ji=y("catalog");function qi(e){return {name:e.name,version:e.version,description:e.description,authorName:e.author.name,updateAvailable:e.updateAvailable}}function Hi(e){return {name:e.name,version:e.version,description:e.description,authorName:e.author?.name,status:e.status,updateAvailable:e.updateAvailable,installedAt:e.installedAt}}function Or(){let e=d(g=>g.activeTab),t=d(g=>g.notification),n=d(g=>g.loading),r=d(g=>g.loadingMessage),o=d(g=>g.catalogError),i=d(g=>g.setCatalogError),s=N(g=>g.query),{catalog:a,isLoading:u,error:c,refetch:m}=Ur(),{items:h}=Dr(),T=z(g=>g.loadFromDisk),se=useMemo(()=>new Set(h.map(g=>`${g.name}|${g.author?.name??""}|${g.marketplace}`)),[h]),ae=useMemo(()=>{let g=new Map(a.map(fe=>[fe.name,fe.version]));return h.map(fe=>{let ln=g.get(fe.name),no=!!ln&&W(fe.version,ln);return {...fe,updateAvailable:no}})},[h,a]),l=e==="discover"?a.filter(g=>!se.has(`${g.name}|${g.author.name}|${b}`)).map(g=>qi(g)):ae.map(g=>Hi(g)),{actionMenuOpen:p,closeMenu:f,selectedIndex:w,clampIndex:M,filteredItems:Wr}=Ar({listLength:l.length}),Ke=Wr(l),U=Ke[w]??null,an=useMemo(()=>U?a.find(g=>g.name===U.name)??null:null,[a,U]),Xr=e==="installed"?"No plugins installed \u2014 explore the Discover tab!":s?`No plugins found for '${s}'`:"No plugins available in the catalog",{notify:Zr}=kr(),{handleInstall:Qr,handleUninstall:Yr,handleToggleStatus:eo,handleUpdate:to}=Mr({selectedItem:U,selectedCatalogItem:an,items:l,closeMenu:f,clampIndex:M,notify:Zr});return useEffect(()=>{T();},[]),useEffect(()=>{M(Ke.length);},[Ke.length,M]),useEffect(()=>{c&&(Ji.error(`[usePluginCatalog] ${c instanceof Error?c.message:String(c)}`),i("Failed to load catalog"));},[c]),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Bn,{}),jsx(jn,{}),jsx(Zn,{filteredItems:Ke,emptyMessage:Xr}),(n||u)&&jsx(or,{message:n?r:"Loading catalog..."}),o&&!u&&e==="discover"&&jsx(ar,{message:o,onRetry:()=>{i(null),m();},onBack:()=>i(null)}),t&&jsx(er,{message:t.message,type:t.type}),p&&U&&e==="discover"&&jsx(ur,{itemName:U.name,onInstall:Qr,onClose:f}),p&&U&&e==="installed"&&jsx(fr,{itemName:U.name,itemStatus:U.status??"enabled",updateAvailable:U.updateAvailable??false,catalogVersion:an?.version,onUninstall:Yr,onToggleStatus:eo,onUpdate:to,onClose:f}),jsx(Yn,{})]})}async function Xi(){let e=await C(),t=await D();if(e&&t){let{clientSecret:n,...r}=e;_.getState().setCredentials(r),d.getState().setFocus("list");}else d.getState().setFocus("auth");}function Nr(){let e=_(r=>r.isAuthenticated),[t,n]=useState(false);return useEffect(()=>{Xi().then(()=>n(true));},[]),t?e?jsx(Or,{}):jsx(On,{}):jsx(Fragment,{})}var Z=y("auth");function ht(e,t={}){return new Promise((n,r)=>{let{masked:o=false,defaultValue:i=""}=t;process.stdout.write(e+i);let s=i,a=m=>{if(m===""){u(),r(new Error("SIGINT"));return}if(m==="\r"||m===`
17
+ `);}function ct(e){process.stdout.write(JSON.stringify(e,null,2)+`
18
+ `);}function ut(e){let t=new Date(e);return isNaN(t.getTime())?"\u2014":new Intl.DateTimeFormat("en-US",{dateStyle:"short"}).format(t)}var qn=ti.memo(function({item:t,isSelected:n}){let r=t.status==="disabled"?"yellow":"green";return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:n?"cyan":"gray",children:n?"\u203A ":"\u25CB "}),jsx(Text,{bold:n,color:n?"cyan":"white",children:t.name}),jsxs(Text,{dimColor:true,children:[t.authorName?` \xB7 ${t.authorName}`:""," \xB7 v",t.version]}),t.status&&jsxs(Text,{color:r,children:[" [",t.status,"]"]}),t.updateAvailable&&jsx(Text,{color:"yellow",children:" [\u2191 update available]"}),t.installedBadge&&jsx(Text,{color:"cyan",children:" [installed]"}),t.installedAt&&jsxs(Text,{dimColor:true,children:[" \xB7 ",ut(t.installedAt)]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:t.description})})]})});function zn({message:e}){return jsx(Box,{paddingX:2,paddingY:1,children:jsx(Text,{dimColor:true,children:e??"No items found."})})}var Vt=5;function Wn({items:e,emptyMessage:t}){let n=d(u=>u.selectedIndex);if(e.length===0)return jsx(zn,{message:t});let r=Math.max(0,n-Math.floor(Vt/2)),o=Math.min(e.length,r+Vt);o===e.length&&(r=Math.max(0,o-Vt));let i=e.slice(r,o),s=r,a=e.length-o;return jsxs(Box,{flexDirection:"column",children:[s>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",s," more above"]})}),i.map((u,c)=>jsx(qn,{item:u,isSelected:r+c===n},u.name)),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",a," more below"]})})]})}var oi={discover:"Discover plugins",installed:"Installed plugins"};function Zn({items:e,tabId:t,emptyMessage:n}){return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{paddingX:1,paddingBottom:1,children:[jsx(Text,{bold:true,children:oi[t]}),jsxs(Text,{dimColor:true,children:[" (",e.length,")"]})]}),jsx(Jn,{}),jsx(Wn,{items:e,emptyMessage:n})]})}function Qn({filteredItems:e,emptyMessage:t}){let n=d(r=>r.activeTab);return jsx(Box,{flexDirection:"column",flexGrow:1,children:n==="discover"?jsx(Zn,{items:e,tabId:"discover",emptyMessage:t},"discover"):jsx(Zn,{items:e,tabId:"installed",emptyMessage:t},"installed")})}var ai={tabs:"Tab: switch tab | \u2191\u2193: navigate | Enter: select | /: search | q: quit",list:"Tab: switch tab | \u2191\u2193: navigate | Enter: select | /: search | q: quit",search:"Type to filter | Esc: cancel search | Enter: confirm",actionMenu:"\u2191\u2193: navigate options | Enter: confirm | Esc: close menu",auth:"Tab: next field | Enter: confirm | Ctrl+C: quit"};function er(){let e=d(t=>t.focus);return jsx(Box,{borderStyle:"single",borderTop:true,borderBottom:false,borderLeft:false,borderRight:false,children:jsx(Text,{dimColor:true,children:ai[e]})})}function tr({message:e,type:t}){return e?jsx(Box,{paddingX:1,children:jsxs(Text,{color:t==="success"?"green":t==="info"?"cyan":"red",children:[t==="success"?"\u2713":t==="info"?"(i)":"\u2717"," ",e]})}):null}function ir({message:e}){return jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(fi,{type:"dots"})}),jsxs(Text,{children:[" ",e]})]})}function lr({message:e,onRetry:t,onBack:n}){return useInput((r,o)=>{r==="r"&&t?t():o.escape&&n&&n();}),jsxs(Box,{flexDirection:"column",paddingX:2,paddingY:1,children:[jsxs(Text,{color:"red",children:["\u2717 ",e]}),t&&jsx(Text,{dimColor:true,children:"Press r to retry"}),n&&jsx(Text,{dimColor:true,children:"Press Escape to go back"})]})}function dt({itemName:e,actions:t,onAction:n,onClose:r}){let o=d(a=>a.focus),[i,s]=useState(0);return useInput((a,u)=>{u.upArrow?s(c=>c>0?c-1:c):u.downArrow?s(c=>c<t.length-1?c+1:c):u.return?n(t[i]):u.escape&&r();},{isActive:o==="actionMenu"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Text,{bold:true,children:e}),jsx(Box,{flexDirection:"column",marginTop:1,children:t.map((a,u)=>jsx(Box,{children:jsxs(Text,{bold:u===i,color:u===i?"cyan":void 0,children:[u===i?"\u203A ":" ",a]})},u))})]})}function pr({itemName:e,onInstall:t,onClose:n}){return jsx(dt,{itemName:e,actions:["Install","Cancel"],onAction:i=>{i==="Install"?t():n();},onClose:n})}function mr({itemName:e,itemStatus:t,updateAvailable:n,catalogVersion:r,onUninstall:o,onToggleStatus:i,onUpdate:s,onClose:a}){let[u,c]=useState(false),m=d(l=>l.focus);if(useInput((l,p)=>{p.escape||l==="n"?c(false):l==="y"&&o();},{isActive:u&&m==="actionMenu"}),u)return jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Uninstall "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]});let h=t==="enabled"?"Disable":"Enable",T=r?`Update to v${r}`:"Update";return jsx(dt,{itemName:e,actions:n?["Uninstall",h,T,"Cancel"]:["Uninstall",h,"Cancel"],onAction:l=>{l==="Uninstall"?c(true):l===h?i():l.startsWith("Update")?s?.():a();},onClose:a})}async function gr(e,t){let n=q.resolve(t);await B.mkdir(n,{recursive:true});let r=q.join(q.dirname(n),`${randomUUID()}.zip`);try{await B.writeFile(r,e),await Si(r,{dir:n,onEntry(o){if((o.externalFileAttributes>>16&61440)===40960)throw new Error(`Zip Slip (symlink): entry "${o.fileName}" is a symbolic link and was rejected`);let s=q.resolve(n,o.fileName);if(!s.startsWith(n+q.sep)&&s!==n)throw new Error(`Zip Slip detected: entry "${o.fileName}" would escape target directory`)}});try{let o=realpathSync(n);if(!o.startsWith(q.resolve(q.dirname(n))))throw new Error(`Zip Slip (post-extract): resolved path "${o}" is outside expected parent`)}catch(o){if(o.code!=="ENOENT")throw o}}finally{try{await B.unlink(r);}catch{}}}async function Xt(e){await B.rm(e,{recursive:true,force:true});}async function ne(){let e=vn();await B.mkdir(q.dirname(e),{recursive:true});try{await B.writeFile(e,"",{flag:"wx"});}catch(n){if(n.code!=="EEXIST")throw n}return await Pi.lock(e,{stale:1e4,retries:{retries:2,minTimeout:500,maxTimeout:500}})}function Ii(){return {$schema:"https://anthropic.com/claude-code/marketplace.schema.json",name:b,description:"Flow Skills marketplace",owner:{name:"Flow Team",email:"flow@ciandt.com"},plugins:[]}}function yr(){let e=qe();if(!I__default.existsSync(e))return null;try{return JSON.parse(I__default.readFileSync(e,"utf-8"))}catch{return null}}function Ti(){let e=yr();if(e)return e;let t=Ii(),n=qe();return I__default.mkdirSync(q__default.dirname(n),{recursive:true}),Zt(t),t}function Zt(e){let t=qe(),n=`${t}.tmp`;I__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),I__default.renameSync(n,t);}function Ai(){let e=yn(),t={};try{I__default.existsSync(e)&&(t=JSON.parse(I__default.readFileSync(e,"utf-8")));}catch{t={};}if(t[b])return;t[b]={source:{source:"github",repo:"CI-T-HyperX/flow-skills"},installLocation:wn(),lastUpdated:new Date().toISOString()};let n=`${e}.tmp`;I__default.writeFileSync(n,JSON.stringify(t,null,2),"utf-8"),I__default.renameSync(n,e);}function wr(e,t){Ai();let n=Et(e.name);I__default.mkdirSync(q__default.dirname(n),{recursive:true});try{I__default.lstatSync(n),I__default.rmSync(n,{recursive:!0,force:!0});}catch{}I__default.symlinkSync(t,n);let r=Ti();r.plugins.some(i=>i.name===e.name)||(r.plugins.push({name:e.name,description:e.description,version:e.version,author:e.author,source:`./plugins/native/${e.name}`,category:e.category}),Zt(r));}function vr(e){let t=Et(e);try{I__default.rmSync(t,{recursive:!0,force:!0});}catch{}let n=yr();if(!n)return;let r=n.plugins.length;n.plugins=n.plugins.filter(o=>o.name!==e),n.plugins.length!==r&&Zt(n);}var J=y("storage");function xr(){return q__default.join(Q__default.homedir(),".claude","plugins","installed_plugins.json")}function $i(){return q__default.join(Q__default.homedir(),".claude","plugins")}function ki(e){let t=q__default.resolve(e),n=q__default.resolve($i());if(!t.startsWith(n+q__default.sep)&&t!==n)throw new Error(`Security error: installPath '${e}' is outside the plugins directory`)}function br(){return q__default.join(Q__default.homedir(),".claude","settings.json")}function H(){let e=xr();if(!I__default.existsSync(e))return {version:2,plugins:{}};try{return JSON.parse(I__default.readFileSync(e,"utf-8"))}catch{return {version:2,plugins:{}}}}function Fe(e){let t=xr();I__default.mkdirSync(q__default.dirname(t),{recursive:true});let n=`${t}.tmp`;I__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),I__default.renameSync(n,t);}function Ne(e){let t=e.lastIndexOf("@");return t===-1?{name:e,marketplace:""}:{name:e.slice(0,t),marketplace:e.slice(t+1)}}function Ri(e){let t=q__default.join(e,".claude-plugin","plugin.json");if(!I__default.existsSync(t))return null;try{return JSON.parse(I__default.readFileSync(t,"utf-8"))}catch{return null}}function Yt(){let e=br();if(!I__default.existsSync(e))return {};try{return JSON.parse(I__default.readFileSync(e,"utf-8"))}catch{return {}}}function Sr(e){let t=br(),n=`${t}.tmp`;I__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),I__default.renameSync(n,t);}function Ci(){return Yt().enabledPlugins??{}}function Li(e){let t=Yt(),n=t.enabledPlugins;if(!n||!(e in n))return;let{[e]:r,...o}=n;t.enabledPlugins=o,Sr(t);}function en(e,t){let n=Yt(),r=n.enabledPlugins??{};n.enabledPlugins={...r,[e]:t},Sr(n);}function R(){let e=H(),t=Ci();return Object.entries(e.plugins).map(([n,r])=>{let o=r[0],{name:i,marketplace:s}=Ne(n),a=Ri(o.installPath),u=t[n];return {name:i,marketplace:s,version:o.version,installedAt:o.installedAt,installPath:o.installPath,scope:o.scope,description:a?.description,author:a?.author,status:u===false?"disabled":"enabled"}})}async function mt(e){J.debug(`[${e}] Acquiring lock to uninstall`);let t=await ne();try{let{name:n,marketplace:r}=Ne(e),o=H(),i;if(r?(i=`${n}@${r}`,o.plugins[i]||(i=void 0)):i=Object.keys(o.plugins).filter(h=>Ne(h).name===n)[0],!i)throw J.error(`[${n}] Plugin is not installed`),new Error(`Plugin '${n}' is not installed`);J.debug(`[${n}] Resolved key: ${i}`);let s=o.plugins[i][0].installPath;ki(s);let a=q__default.dirname(s);J.debug(`[${n}] Removing directory: ${a}`),I__default.rmSync(a,{recursive:!0,force:!0}),vr(n);let{[i]:u,...c}=o.plugins;Fe({...o,plugins:c}),Li(i),J.debug(`[${n}] Uninstalled successfully`);}finally{await t();}}async function Be(e,t){J.debug(`[${e}] Acquiring lock to set status \u2192 ${t}`);let n=await ne();try{let{name:r}=Ne(e),o=H(),i=Object.keys(o.plugins).filter(s=>Ne(s).name===r);if(i.length===0)throw J.error(`[${r}] Plugin is not installed`),new Error(`Plugin '${r}' is not installed`);J.debug(`[${r}] Resolved key: ${i[0]}`),en(i[0],t==="enabled"),J.debug(`[${r}] Status updated to ${t}`);}finally{await n();}}var z=create(e=>({installedItems:[],setInstalledItems:t=>e({installedItems:t}),loadFromDisk:()=>e({installedItems:R()})}));var M=["discover","installed"];function Pr(e,t,n){if(t.rightArrow||t.tab){let r=M.indexOf(n.activeTab);return [{type:"setTab",tab:M[(r+1)%M.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}if(t.leftArrow){let r=M.indexOf(n.activeTab);return [{type:"setTab",tab:M[(r-1+M.length)%M.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}return t.downArrow?[{type:"setFocus",focus:"list"}]:[]}function Er(e,t,n,r){if(t.upArrow&&n.selectedIndex>0)return [{type:"setSelectedIndex",index:n.selectedIndex-1}];if(t.downArrow&&n.selectedIndex<r-1)return [{type:"setSelectedIndex",index:n.selectedIndex+1}];if(t.tab){let o=M.indexOf(n.activeTab);return [{type:"setTab",tab:M[(o+1)%M.length]},{type:"setSelectedIndex",index:0}]}return t.return?[{type:"setActionMenuOpen",open:true},{type:"setFocus",focus:"actionMenu"}]:e==="/"?[{type:"setFocus",focus:"search"}]:[]}function Ir(e,t){return t.escape?[{type:"setActionMenuOpen",open:false},{type:"setFocus",focus:"list"}]:[]}function Tr(e,t){return t.escape?{actions:[{type:"setFocus",focus:"list"}],queryUpdate:"reset"}:t.return?{actions:[{type:"setFocus",focus:"list"}],queryUpdate:null}:t.backspace||t.delete?{actions:[],queryUpdate:{backspace:true}}:e&&!t.ctrl&&!t.meta?{actions:[],queryUpdate:{append:e}}:{actions:[],queryUpdate:null}}function gt(e){let{setActiveTab:t,setFocus:n,setSelectedIndex:r,setActionMenuOpen:o}=d.getState();for(let i of e)i.type==="setTab"?t(i.tab):i.type==="setFocus"?n(i.focus):i.type==="setSelectedIndex"?r(i.index):i.type==="setActionMenuOpen"&&o(i.open);}function $r({listLength:e}){let t=d(l=>l.focus),n=d(l=>l.selectedIndex),r=d(l=>l.actionMenuOpen),o=d(l=>l.setFocus),i=d(l=>l.setActionMenuOpen),s=F(l=>l.query),a=F(l=>l.setQuery),u=F(l=>l.resetQuery),c=useRef(e);useEffect(()=>{c.current=e;},[e]);let[m,h]=useState("");useEffect(()=>{let l=setTimeout(()=>h(s),300);return ()=>clearTimeout(l)},[s]),useInput((l,p)=>{l==="q"&&process.exit(0);},{isActive:t!=="search"&&t!=="auth"}),useInput((l,p)=>{let{activeTab:f,selectedIndex:w,actionMenuOpen:U}=d.getState();gt(Pr(l,p,{activeTab:f}));},{isActive:t==="tabs"}),useInput((l,p)=>{let{activeTab:f,selectedIndex:w,actionMenuOpen:U}=d.getState();gt(Er(l,p,{activeTab:f,selectedIndex:w},c.current));},{isActive:t==="list"}),useInput((l,p)=>{gt(Ir(l,p));},{isActive:t==="actionMenu"}),useInput((l,p)=>{let f=Tr(l,p),w=f.queryUpdate;gt(f.actions),w==="reset"?(u(),h("")):w!==null&&("backspace"in w?a(F.getState().query.slice(0,-1)):a(F.getState().query+w.append));},{isActive:t==="search"});let T=useCallback(()=>{i(false),o("list");},[i,o]),se=useCallback(l=>{let{setSelectedIndex:p,selectedIndex:f}=d.getState();l===0?p(0):f>=l&&p(l-1);},[]),ae=useCallback(l=>{if(!m)return c.current=l.length,l;let p=m.toLowerCase(),f=l.filter(w=>w.name.toLowerCase().includes(p)||w.description?.toLowerCase().includes(p));return c.current=f.length,f},[m]);return {actionMenuOpen:r,closeMenu:T,selectedIndex:n,clampIndex:se,filteredItems:ae}}function Rr(){let e=d(a=>a.notification),t=d(a=>a.showNotification),n=d(a=>a.clearNotification),r=j(a=>a.justAuthenticated),o=j(a=>a.credentials),i=j(a=>a.setJustAuthenticated);return useEffect(()=>{r&&o&&(t(`Authenticated. Tenant: ${o.tenant}`,"success"),i(false));},[r,o]),useEffect(()=>{if(!e)return;let a=setTimeout(n,3e3);return ()=>clearTimeout(a)},[e]),{notify:(a,u)=>{t(a,u);}}}var Pe=class extends Error{constructor(n,r){super(`${n} v${r} is already installed. Use --force to reinstall.`);this.pluginName=n;this.version=r;this.name="AlreadyInstalledError";}pluginName;version},re=class extends Error{constructor(n,r){super(`${n} is already up to date (v${r})`);this.pluginName=n;this.version=r;this.name="AlreadyUpToDateError";}pluginName;version};function ht(){return Fo.create({prefixUrl:nt("PROMPT_MANAGER_URL","https://flow.ciandt.com/prompt-manager-api/"),hooks:{beforeRequest:[async e=>{let t=await On();e.headers.set("Authorization",`Bearer ${t}`);let n=await L();n?.tenant&&Ve.test(n.tenant)&&e.headers.set("FlowTenant",n.tenant);}]}})}var Ni=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function Cr(e){if(!e||!Ni.test(e))throw new Error(`Invalid plugin name: "${e}". Must be 1-64 chars, lowercase alphanumeric and hyphens only.`)}async function G(){try{let{plugins:e}=await ht().get("v1/plugins/catalog").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow-cli auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching plugin catalog"):new Error(`Failed to fetch plugin catalog: ${e.message}`):e}}async function Ee(e){Cr(e);try{return await ht().get(`v1/plugins/${e}/manifest`).json()}catch(t){throw t instanceof Error?t.message.includes("404")?new Error(`Plugin '${e}' not found in catalog`):t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to fetch plugin manifest: ${t.message}`):t}}async function Lr(e){Cr(e);try{let t=await ht().get(`v1/plugins/${e}/archive`);return Buffer.from(await t.arrayBuffer())}catch(t){throw t instanceof Error?t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to download plugin: ${t.message}`):t}}var Fi=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function Bi(e){if(!Fi.test(e))throw new Error(`Invalid plugin name from manifest: "${e}". Plugin names must be lowercase alphanumeric and hyphens (1-64 chars).`)}var je=y("installer");function _i(e,t){let n=`${e}@${b}`,o=H().plugins[n];if(o&&!t)throw new Pe(e,o[0].version);return {pluginKey:n,alreadyInstalled:o}}async function ji(e,t,n){n&&await Xt(t);try{je.debug(`Extracting to ${t}...`),await gr(e,t);}catch(r){throw await Xt(t),r}}function Ki(e,t,n){let r=H(),o={scope:"user",installPath:t,version:n,installedAt:new Date().toISOString()};r.plugins[e]=[o],Fe(r),en(e,true);}async function Ie(e,t={}){let n=Date.now(),r=null;try{je.debug(`[${e}] Acquiring lock...`),r=await ne();let{pluginKey:o,alreadyInstalled:i}=_i(e,t.force);je.debug(`[${e}] Fetching manifest...`);let s=await Ee(e);Bi(s.name),je.debug(`[${e}] Downloading archive...`);let a=await Lr(e),u=hn(s.name,s.version);await ji(a,u,!!i&&!!t.force),Ki(o,u,s.version),wr(s,u);let c=Date.now()-n;return je.debug(`[${e}] Installed successfully in ${c}ms`),{name:s.name,version:s.version,path:u,duration_ms:c}}finally{r&&await r();}}function W(e,t,n=false){return n?true:!nn.valid(e)||!nn.valid(t)?false:nn.gt(t,e)}var oe=y("updater");function Vi(e){let t=H(),n=`${e}@${b}`,r=t.plugins[n];return !r||r.length===0?null:{pluginKey:n,entry:r[0]}}async function yt(e,t={}){let n=Date.now(),r=null;try{oe.debug(`[${e}] Acquiring lock...`),r=await ne();let o=Vi(e);if(!o)throw oe.error(`[${e}] Plugin is not installed`),new Error(`Plugin "${e}" is not installed`);let{entry:i}=o,s=i.version,a=i.installPath;oe.debug(`[${e}] Fetching manifest...`);let c=(await Ee(e)).version;if(!W(s,c,t.force))throw oe.debug(`[${e}] Already up to date (v${s})`),new re(e,s);oe.info(`[${e}] Updating v${s} \u2192 v${c}...`),await r(),r=null;try{let m=await Ie(e,{force:!0}),h=Date.now()-n;return oe.debug(`[${e}] Updated successfully in ${h}ms`),{name:m.name,previousVersion:s,newVersion:m.version,path:m.path,duration_ms:h}}catch(m){oe.warn(`[${e}] Install failed, rolling back to v${s}...`),r=await ne();let h=H(),T=`${e}@${b}`;throw h.plugins[T]&&(h.plugins[T][0].version=s,h.plugins[T][0].installPath=a,Fe(h),oe.info(`[${e}] Rollback completed, restored to v${s}`)),m}}finally{r&&await r();}}function Mr(){let e=z(s=>s.installedItems),t=z(s=>s.setInstalledItems),n=useCallback(async s=>{await Ie(s.name),z.getState().loadFromDisk();},[]),r=useCallback(async s=>{await mt(s),t(e.filter(a=>a.name!==s));},[e,t]),o=useCallback(async s=>{let u=e.find(c=>c.name===s)?.status==="enabled"?"disabled":"enabled";await Be(s,u),t(e.map(c=>c.name===s?{...c,status:u}:c));},[e,t]),i=useCallback(async s=>{await yt(s),z.getState().loadFromDisk();},[]);return {install:n,uninstall:r,toggle:o,update:i}}function Ur({selectedItem:e,selectedCatalogItem:t,items:n,closeMenu:r,clampIndex:o,notify:i}){let s=d(p=>p.setLoading),{install:a,uninstall:u,toggle:c,update:m}=Mr(),h=async(p,f,w)=>{s(true,p),r();try{await f(),o(n.length),i(w,"success");}catch(U){i(U instanceof Error?U.message:"Something went wrong","error");}finally{s(false);}};return {handleInstall:()=>{e&&t&&h(`Installing ${e.name}...`,()=>a(t),"\u2713 Installed successfully");},handleUninstall:()=>{e&&h(`Uninstalling ${e.name}...`,()=>u(e.name),"\u2713 Uninstalled");},handleToggleStatus:()=>{if(!e)return;let p=e.status==="enabled";h(p?`Disabling ${e.name}...`:`Enabling ${e.name}...`,()=>c(e.name),p?"\u2713 Disabled":"\u2713 Enabled");},handleUpdate:()=>{if(!e)return;let p=t?` to v${t.version}`:"";(async()=>{s(true,`Updating ${e.name}${p}...`),r();try{await m(e.name),o(n.length),i(`\u2713 Updated ${e.name}${p}`,"success");}catch(w){w instanceof re?i(w.message,"info"):i(w instanceof Error?w.message:"Something went wrong","error");}finally{s(false);}})();}}}function Dr(){let[e,t]=useState([]),[n,r]=useState(true),[o,i]=useState(null),s=useCallback(async()=>{r(true),i(null);try{let a=await G();t(a);}catch(a){i(a instanceof Error?a:new Error(String(a))),t([]);}finally{r(false);}},[]);return useEffect(()=>{s();},[s]),{catalog:e,isLoading:n,error:o,refetch:s}}function Or(){return {items:z(t=>t.installedItems)}}var zi=y("catalog");function Gi(e){return {name:e.name,version:e.version,description:e.description,authorName:e.author.name,updateAvailable:e.updateAvailable}}function Wi(e){return {name:e.name,version:e.version,description:e.description,authorName:e.author?.name,status:e.status,updateAvailable:e.updateAvailable,installedAt:e.installedAt}}function Nr(){let e=d(g=>g.activeTab),t=d(g=>g.notification),n=d(g=>g.loading),r=d(g=>g.loadingMessage),o=d(g=>g.catalogError),i=d(g=>g.setCatalogError),s=F(g=>g.query),{catalog:a,isLoading:u,error:c,refetch:m}=Dr(),{items:h}=Or(),T=z(g=>g.loadFromDisk),se=useMemo(()=>new Set(h.map(g=>`${g.name}|${g.author?.name??""}|${g.marketplace}`)),[h]),ae=useMemo(()=>{let g=new Map(a.map(fe=>[fe.name,fe.version]));return h.map(fe=>{let pn=g.get(fe.name),oo=!!pn&&W(fe.version,pn);return {...fe,updateAvailable:oo}})},[h,a]),l=e==="discover"?a.filter(g=>!se.has(`${g.name}|${g.author.name}|${b}`)).map(g=>Gi(g)):ae.map(g=>Wi(g)),{actionMenuOpen:p,closeMenu:f,selectedIndex:w,clampIndex:U,filteredItems:Zr}=$r({listLength:l.length}),Ke=Zr(l),D=Ke[w]??null,un=useMemo(()=>D?a.find(g=>g.name===D.name)??null:null,[a,D]),Qr=e==="installed"?"No plugins installed \u2014 explore the Discover tab!":s?`No plugins found for '${s}'`:"No plugins available in the catalog",{notify:Yr}=Rr(),{handleInstall:eo,handleUninstall:to,handleToggleStatus:no,handleUpdate:ro}=Ur({selectedItem:D,selectedCatalogItem:un,items:l,closeMenu:f,clampIndex:U,notify:Yr});return useEffect(()=>{T();},[]),useEffect(()=>{U(Ke.length);},[Ke.length,U]),useEffect(()=>{c&&(zi.error(`[usePluginCatalog] ${c instanceof Error?c.message:String(c)}`),i("Failed to load catalog"));},[c]),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(_n,{}),jsx(Kn,{}),jsx(Qn,{filteredItems:Ke,emptyMessage:Qr}),(n||u)&&jsx(ir,{message:n?r:"Loading catalog..."}),o&&!u&&e==="discover"&&jsx(lr,{message:o,onRetry:()=>{i(null),m();},onBack:()=>i(null)}),t&&jsx(tr,{message:t.message,type:t.type}),p&&D&&e==="discover"&&jsx(pr,{itemName:D.name,onInstall:eo,onClose:f}),p&&D&&e==="installed"&&jsx(mr,{itemName:D.name,itemStatus:D.status??"enabled",updateAvailable:D.updateAvailable??false,catalogVersion:un?.version,onUninstall:to,onToggleStatus:no,onUpdate:ro,onClose:f}),jsx(er,{})]})}async function Yi(){let e=await L(),t=await O();if(e&&t){let{clientSecret:n,...r}=e;j.getState().setCredentials(r),d.getState().setFocus("list");}else d.getState().setFocus("auth");}function Fr(){let e=j(r=>r.isAuthenticated),[t,n]=useState(false);return useEffect(()=>{Yi().then(()=>n(true));},[]),t?e?jsx(Nr,{}):jsx(Nn,{}):jsx(Fragment,{})}var Z=y("auth");function Br(){C.clearFallbackFile(),Rn();}function vt(e,t={}){return new Promise((n,r)=>{let{masked:o=false,defaultValue:i=""}=t;process.stdout.write(e+i);let s=i,a=m=>{if(m===""){u(),r(new Error("SIGINT"));return}if(m==="\r"||m===`
19
19
  `){u(),process.stdout.write(`
20
- `),n(s);return}if(m==="\x7F"){s.length>0&&(s=s.slice(0,-1),process.stdout.write("\b \b"));return}m.startsWith("\x1B")||(s+=m,process.stdout.write(o?"*".repeat(m.length):m));};function u(){process.stdin.setRawMode(false),process.stdin.removeListener("data",a),process.removeListener("uncaughtException",c),process.removeListener("unhandledRejection",c);}function c(){try{process.stdin.setRawMode(!1);}catch{}}process.on("uncaughtException",c),process.on("unhandledRejection",c),process.stdin.setRawMode(true),process.stdin.resume(),process.stdin.setEncoding("utf8"),process.stdin.on("data",a);})}async function Qi(e){Z.debug(`Authenticating tenant: ${e.tenant}`);try{return await Le(e),Z.info(`Authentication successful for tenant: ${e.tenant}`),process.stdout.write(x.green(` \u2713 Setup complete. Tenant: ${e.tenant}
20
+ `),n(s);return}if(m==="\x7F"){s.length>0&&(s=s.slice(0,-1),process.stdout.write("\b \b"));return}m.startsWith("\x1B")||(s+=m,process.stdout.write(o?"*".repeat(m.length):m));};function u(){process.stdin.setRawMode(false),process.stdin.removeListener("data",a),process.removeListener("uncaughtException",c),process.removeListener("unhandledRejection",c);}function c(){try{process.stdin.setRawMode(!1);}catch{}}process.on("uncaughtException",c),process.on("unhandledRejection",c),process.stdin.setRawMode(true),process.stdin.resume(),process.stdin.setEncoding("utf8"),process.stdin.on("data",a);})}async function ts(e){Br(),Z.debug(`Authenticating tenant: ${e.tenant}`);try{return await Le(e),Z.info(`Authentication successful for tenant: ${e.tenant}`),process.stdout.write(x.green(` \u2713 Setup complete. Tenant: ${e.tenant}
21
21
 
22
22
  `)),0}catch(t){let n=E(t instanceof Error?t.message:"unknown error");return Z.error(`Authentication failed: ${n}`),process.stderr.write(x.red(` \u2717 Authentication failed: ${n}
23
- `)),1}}async function Yi(){Z.debug("Starting interactive authentication");try{process.stdout.write(`
24
- `);let e=(await ht(x.cyan(" ? ")+"Client ID: ")).trim(),t=(await ht(x.cyan(" ? ")+"Client Secret: ",{masked:!0})).trim(),n=(await ht(x.cyan(" ? ")+"Tenant: ")).trim();if(!e||!t||!n)return Z.error("Validation failed: all fields are required"),process.stderr.write(x.red(` \u2717 All fields are required
23
+ `)),1}}async function ns(){Br(),Z.debug("Starting interactive authentication");try{process.stdout.write(`
24
+ `);let e=(await vt(x.cyan(" ? ")+"Client ID: ")).trim(),t=(await vt(x.cyan(" ? ")+"Client Secret: ",{masked:!0})).trim(),n=(await vt(x.cyan(" ? ")+"Tenant: ")).trim();if(!e||!t||!n)return Z.error("Validation failed: all fields are required"),process.stderr.write(x.red(` \u2717 All fields are required
25
25
  `)),1;Z.debug(`Authenticating tenant: ${n}`);try{await Le({clientId:e,clientSecret:t,tenant:n});}catch(r){let o=E(r instanceof Error?r.message:"unknown error");return Z.error(`Authentication failed: ${o}`),process.stderr.write(x.red(` \u2717 Authentication failed: ${o}
26
26
  `)),1}return Z.info(`Authentication successful for tenant: ${n}`),process.stdout.write(x.green(` \u2713 Setup complete. Tenant: ${n}
27
27
 
28
28
  `)),0}catch(e){if(e instanceof Error&&e.message==="SIGINT")throw e;let t=E(e instanceof Error?e.message:"unknown error");return Z.error(`Unexpected error: ${t}`),process.stderr.write(x.red(` \u2717 Unexpected error: ${t}
29
- `)),1}}async function on(e={}){if(e.clientId&&e.clientSecret&&e.tenant)return Qi({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant});try{return await Yi()}catch(t){if(t instanceof Error&&t.message==="SIGINT")return process.stdout.write(`
30
- `),130;throw t}}async function es(){try{return process.stdout.write(`
31
- `),(await ht(x.cyan(" ? ")+"Are you sure? This will remove your local credentials. (y/N): ")).toLowerCase()!=="y"?(process.stdout.write(x.yellow(` \u26A0 Logout cancelled
29
+ `)),1}}async function ln(e={}){if(e.clientId&&e.clientSecret&&e.tenant)return ts({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant});try{return await ns()}catch(t){if(t instanceof Error&&t.message==="SIGINT")return process.stdout.write(`
30
+ `),130;throw t}}async function rs(){try{return process.stdout.write(`
31
+ `),(await vt(x.cyan(" ? ")+"Are you sure? This will remove your local credentials. (y/N): ")).toLowerCase()!=="y"?(process.stdout.write(x.yellow(` \u26A0 Logout cancelled
32
32
  `)),0):null}catch(e){if(e instanceof Error&&e.message==="SIGINT")return process.stdout.write(`
33
- `),130;throw e}}async function Fr(e){if(!await C())return process.stdout.write(x.yellow(` \u26A0 You are not authenticated
34
- `)),0;if(!e){let t=await es();if(t!==null)return t}try{return await Cn(),process.stdout.write(x.green(` \u2713 Credentials removed successfully
33
+ `),130;throw e}}async function _r(e){if(!await L())return process.stdout.write(x.yellow(` \u26A0 You are not authenticated
34
+ `)),0;if(!e){let t=await rs();if(t!==null)return t}try{return await Ln(),process.stdout.write(x.green(` \u2713 Credentials removed successfully
35
35
  `)),0}catch{return process.stderr.write(x.red(` \u2717 Error removing credentials
36
- `)),1}}async function Br(){let e=await C();return e?await D()?(process.stdout.write(`
36
+ `)),1}}async function jr(){let e=await L();return e?await O()?(process.stdout.write(`
37
37
  `+x.bold(` Authenticated
38
38
  `)),process.stdout.write(x.dim(" Tenant: ")+E(e.tenant)+`
39
39
  `),process.stdout.write(x.dim(" Client ID: ")+E(e.clientId)+`
40
- `),process.stdout.write(x.dim(" Config: ")+E(await Ln())+`
40
+ `),process.stdout.write(x.dim(" Config: ")+E(await Mn())+`
41
41
  `),process.stdout.write(`
42
- `),0):(process.stdout.write(x.yellow(" \u26A0 Session expired. Run `flow-cli auth login` to re-authenticate.\n")),0):(process.stdout.write(x.yellow(" \u26A0 Not authenticated. Run `flow-cli auth login` to set up.\n")),0)}async function ie(){return await C()?await D()?true:(P("Session expired. Run: flow-cli auth login"),false):(P("Not authenticated. Run: flow-cli auth login"),false)}async function ts(e){let t=R(),n;try{n=await G();}catch{n=[];}let r=new Set(t.map(o=>o.name));return e.json?(st(n.map(o=>({...o,installed:r.has(o.name)}))),0):(it(["","Name","Version","Category","Status"],n.map(o=>[r.has(o.name)?"*":" ",o.name??"",o.version??"",o.category??"",r.has(o.name)?"installed":"available"])),0)}async function ns(e){let t=R(),n=await G(),r=new Map(n.map(i=>[i.name,i])),o=t.map(i=>{let s=r.get(i.name);return s&&W(i.version,s.version)?{...i,availableVersion:s.version}:null}).filter(i=>i!==null);return o.length===0?(v("All plugins are up to date."),0):e.json?(st(o),0):(it(["Name","Installed","Available"],o.map(i=>[i.name??"",i.version??"",i.availableVersion??""])),process.stdout.write(`
42
+ `),0):(process.stdout.write(x.yellow(" \u26A0 Session expired. Run `flow-cli auth login` to re-authenticate.\n")),0):(process.stdout.write(x.yellow(" \u26A0 Not authenticated. Run `flow-cli auth login` to set up.\n")),0)}async function ie(){return await L()?await O()?true:(P("Session expired. Run: flow-cli auth login"),false):(P("Not authenticated. Run: flow-cli auth login"),false)}async function os(e){let t=R(),n;try{n=await G();}catch{n=[];}let r=new Set(t.map(o=>o.name));return e.json?(ct(n.map(o=>({...o,installed:r.has(o.name)}))),0):(lt(["","Name","Version","Category","Status"],n.map(o=>[r.has(o.name)?"*":" ",o.name??"",o.version??"",o.category??"",r.has(o.name)?"installed":"available"])),0)}async function is(e){let t=R(),n=await G(),r=new Map(n.map(i=>[i.name,i])),o=t.map(i=>{let s=r.get(i.name);return s&&W(i.version,s.version)?{...i,availableVersion:s.version}:null}).filter(i=>i!==null);return o.length===0?(v("All plugins are up to date."),0):e.json?(ct(o),0):(lt(["Name","Installed","Available"],o.map(i=>[i.name??"",i.version??"",i.availableVersion??""])),process.stdout.write(`
43
43
  ${o.length} plugin(s) outdated.
44
- `),0)}function rs(e){let t=R();return t.length===0?(v("No plugins installed. Use `flow plugin install <name>` to install one."),0):e.json?(st(t),0):(it(["Name","Version","Installed at"],t.map(n=>[n.name??"",n.version??"",at(n.installedAt??"")])),process.stdout.write(`
44
+ `),0)}function ss(e){let t=R();return t.length===0?(v("No plugins installed. Use `flow plugin install <name>` to install one."),0):e.json?(ct(t),0):(lt(["Name","Version","Installed at"],t.map(n=>[n.name??"",n.version??"",ut(n.installedAt??"")])),process.stdout.write(`
45
45
  ${t.length} plugin(s) installed.
46
- `),0)}async function _r(e){if(!await ie())return 1;try{return e.available?await ts(e):e.outdated?await ns(e):rs(e)}catch(t){return P(t instanceof Error?t.message:"Failed to list plugins."),1}}var S=y("manage");function pe(e){process.stdout.write(JSON.stringify(e)+`
47
- `);}function sn(e){process.stderr.write(JSON.stringify(e)+`
48
- `);}function B(e){return e instanceof Error?e.message:String(e)}async function os(e,t,n){n.silent||v(`${t}Installing ${e}...`);try{let r=await Ie(e,n);return n.silent?pe({status:"success",plugin:r.name,version:r.version,duration_ms:r.duration_ms}):xe(`${t}${r.name} v${r.version} installed successfully`),{name:e,success:!0,version:r.version,duration_ms:r.duration_ms}}catch(r){if(r instanceof Pe)return n.silent?pe({status:"already_installed",plugin:e,message:r.message}):v(`${t}${r.message}`),{name:e,success:true};let o=B(r);return n.silent?sn({status:"error",plugin:e,message:o}):P(`${t}Failed to install ${e}: ${o}`),{name:e,success:false,error:o}}}function is(e){let t=e.filter(r=>r.success).length,n=e.filter(r=>!r.success).length;v(`
49
- Installation summary: ${t} succeeded, ${n} failed`);}async function jr(e,t={}){if(!await ie())return 1;let n=[];for(let r=0;r<e.length;r++){let o=e.length>1?`[${r+1}/${e.length}] `:"",i=await os(e[r],o,t);n.push(i);}return e.length>1&&(t.silent?pe({status:"summary",succeeded:n.filter(r=>r.success).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.error?{error:r.error}:{}}))}):is(n)),n.some(r=>!r.success)?1:0}async function Kr(e,t){if(!await ie())return 1;if(S.debug(`[${e}] Looking up installed plugin`),!t.force){let n=R().find(s=>s.name===e);if(!n)return S.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;let r=E(n.name),o=E(n.version);if(!await ss(`Remove ${r} v${o}? [y/N] `))return S.debug(`[${e}] Uninstall cancelled by user`),v("Operation cancelled."),0}try{return S.debug(`[${e}] Uninstalling plugin`),await pt(e),S.info(`[${e}] Uninstalled successfully`),xe("Plugin removed successfully"),0}catch(n){return S.error(`[${e}] Failed to uninstall: ${B(n)}`),P(B(n)),1}}async function ss(e){let n=(await import('readline')).default.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{n.question(e,o=>{n.close(),r(o.toLowerCase()==="y");});})}async function Vr(e){if(!await ie())return 1;S.debug(`[${e}] Looking up installed plugin`);let t=R().find(n=>n.name===e);if(!t)return S.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;if(t.status==="enabled")return S.debug(`[${e}] Already enabled, skipping`),v(`${t.name} is already enabled`),0;try{return S.debug(`[${e}] Enabling plugin (current status: ${t.status})`),await Be(e,"enabled"),S.info(`[${e}] Enabled successfully`),xe(`${t.name} enabled successfully`),0}catch(n){return S.error(`[${e}] Failed to enable: ${B(n)}`),P(B(n)),1}}async function Jr(e){if(!await ie())return 1;S.debug(`[${e}] Looking up installed plugin`);let t=R().find(n=>n.name===e);if(!t)return S.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;if(t.status==="disabled")return S.debug(`[${e}] Already disabled, skipping`),v(`${t.name} is already disabled`),0;try{return S.debug(`[${e}] Disabling plugin (current status: ${t.status})`),await Be(e,"disabled"),S.info(`[${e}] Disabled successfully`),xe(`${t.name} disabled successfully`),0}catch(n){return S.error(`[${e}] Failed to disable: ${B(n)}`),P(B(n)),1}}async function qr(e,t,n){n.silent||v(`${t}Updating ${e}...`);try{let r=await mt(e,n);return n.silent?pe({status:"updated",plugin:r.name,previousVersion:r.previousVersion,newVersion:r.newVersion,duration_ms:r.duration_ms}):xe(`${t}${r.name} v${r.previousVersion} \u2192 v${r.newVersion}`),{name:e,success:!0}}catch(r){if(r instanceof re)return n.silent?pe({status:"up_to_date",plugin:e,message:r.message}):v(`${t}${r.message}`),{name:e,success:true,skipped:true};let o=B(r);return n.silent?sn({status:"error",plugin:e,message:o}):P(`${t}Failed to update ${e}: ${o}`),{name:e,success:false,error:o}}}function as(e){let t=e.filter(o=>o.success&&!o.skipped).length,n=e.filter(o=>o.skipped).length,r=e.filter(o=>!o.success).length;v(`
50
- Update summary: ${t} updated, ${n} already up to date, ${r} failed`);}async function ls(e,t,n){try{let r=await Ee(e);W(t,r.version,n.force)?v(`Would update ${e}: v${t} \u2192 v${r.version}`):v(`${e} is already up to date (v${t})`);}catch(r){return P(B(r)),1}return 0}function cs(e){return new Map(e.map(t=>[t.name,t.version]))}function us(e,t,n){let r=t.get(e.name);return r?W(e.version,r,n)?(v(`Would update ${e.name}: v${e.version} \u2192 v${r}`),true):(v(`${e.name} is already up to date (v${e.version})`),false):(v(`Skipping ${e.name}: not found in catalog`),false)}async function ps(e,t){try{let n=await G(),r=cs(n),o=0;for(let i of e)us(i,r,t.force)&&o++;o===0&&v("All plugins are up to date");}catch(n){return P(B(n)),1}return 0}async function ds(e,t){let n=[];for(let r=0;r<e.length;r++){let o=`[${r+1}/${e.length}] `,i=await qr(e[r].name,o,t);n.push(i);}return t.silent?pe({status:"summary",updated:n.filter(r=>r.success&&!r.skipped).length,upToDate:n.filter(r=>r.skipped).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.skipped?{skipped:true}:{},...r.error?{error:r.error}:{}}))}):as(n),n.some(r=>!r.success)?1:0}async function Hr(e,t={}){if(!await ie())return 1;if(e){let o=R().find(s=>s.name===e);return o?t.dryRun?ls(e,o.version,t):(await qr(e,"",t)).success?0:1:(t.silent?sn({status:"error",plugin:e,message:`Plugin "${e}" is not installed`}):P(`Plugin "${e}" is not installed`),1)}let r=R().filter(o=>o.marketplace===b);return r.length===0?(t.silent?pe({status:"empty",message:"No plugins installed"}):v("No plugins installed"),0):t.dryRun?ps(r,t):ds(r,t)}async function hs(){return await C()?{passed:true,message:"Credentials configured"}:{passed:false,message:"Credentials not configured \u2014 Run `flow-cli auth login`"}}async function ys(){let e=Date.now();try{await G();let t=Date.now()-e;return {passed:!0,message:`Prompt Manager accessible (${t}ms)`,latency:t}}catch(t){return t instanceof Error&&t.name==="TimeoutError"?{passed:false,message:"Timeout after 5s \u2014 check your connection"}:{passed:false,message:`Connection error: ${t instanceof Error?t.message:"Unknown"}`}}}async function ws(){return await D()?{passed:true,message:"Token is valid"}:{passed:false,message:"Token expired \u2014 run `flow-cli auth login` to re-authenticate"}}function vs(){let e=join(homedir(),".claude","settings.json");return existsSync(e)?{passed:true,message:"Claude Code detected"}:{passed:false,message:"Claude Code not detected"}}async function zr(){process.stdout.write(`
46
+ `),0)}async function Kr(e){if(!await ie())return 1;try{return e.available?await os(e):e.outdated?await is(e):ss(e)}catch(t){return P(t instanceof Error?t.message:"Failed to list plugins."),1}}var S=y("manage");function pe(e){process.stdout.write(JSON.stringify(e)+`
47
+ `);}function cn(e){process.stderr.write(JSON.stringify(e)+`
48
+ `);}function _(e){return e instanceof Error?e.message:String(e)}async function as(e,t,n){n.silent||v(`${t}Installing ${e}...`);try{let r=await Ie(e,n);return n.silent?pe({status:"success",plugin:r.name,version:r.version,duration_ms:r.duration_ms}):xe(`${t}${r.name} v${r.version} installed successfully`),{name:e,success:!0,version:r.version,duration_ms:r.duration_ms}}catch(r){if(r instanceof Pe)return n.silent?pe({status:"already_installed",plugin:e,message:r.message}):v(`${t}${r.message}`),{name:e,success:true};let o=_(r);return n.silent?cn({status:"error",plugin:e,message:o}):P(`${t}Failed to install ${e}: ${o}`),{name:e,success:false,error:o}}}function ls(e){let t=e.filter(r=>r.success).length,n=e.filter(r=>!r.success).length;v(`
49
+ Installation summary: ${t} succeeded, ${n} failed`);}async function Vr(e,t={}){if(!await ie())return 1;let n=[];for(let r=0;r<e.length;r++){let o=e.length>1?`[${r+1}/${e.length}] `:"",i=await as(e[r],o,t);n.push(i);}return e.length>1&&(t.silent?pe({status:"summary",succeeded:n.filter(r=>r.success).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.error?{error:r.error}:{}}))}):ls(n)),n.some(r=>!r.success)?1:0}async function Jr(e,t){if(!await ie())return 1;if(S.debug(`[${e}] Looking up installed plugin`),!t.force){let n=R().find(s=>s.name===e);if(!n)return S.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;let r=E(n.name),o=E(n.version);if(!await cs(`Remove ${r} v${o}? [y/N] `))return S.debug(`[${e}] Uninstall cancelled by user`),v("Operation cancelled."),0}try{return S.debug(`[${e}] Uninstalling plugin`),await mt(e),S.info(`[${e}] Uninstalled successfully`),xe("Plugin removed successfully"),0}catch(n){return S.error(`[${e}] Failed to uninstall: ${_(n)}`),P(_(n)),1}}async function cs(e){let n=(await import('readline')).default.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{n.question(e,o=>{n.close(),r(o.toLowerCase()==="y");});})}async function qr(e){if(!await ie())return 1;S.debug(`[${e}] Looking up installed plugin`);let t=R().find(n=>n.name===e);if(!t)return S.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;if(t.status==="enabled")return S.debug(`[${e}] Already enabled, skipping`),v(`${t.name} is already enabled`),0;try{return S.debug(`[${e}] Enabling plugin (current status: ${t.status})`),await Be(e,"enabled"),S.info(`[${e}] Enabled successfully`),xe(`${t.name} enabled successfully`),0}catch(n){return S.error(`[${e}] Failed to enable: ${_(n)}`),P(_(n)),1}}async function Hr(e){if(!await ie())return 1;S.debug(`[${e}] Looking up installed plugin`);let t=R().find(n=>n.name===e);if(!t)return S.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;if(t.status==="disabled")return S.debug(`[${e}] Already disabled, skipping`),v(`${t.name} is already disabled`),0;try{return S.debug(`[${e}] Disabling plugin (current status: ${t.status})`),await Be(e,"disabled"),S.info(`[${e}] Disabled successfully`),xe(`${t.name} disabled successfully`),0}catch(n){return S.error(`[${e}] Failed to disable: ${_(n)}`),P(_(n)),1}}async function zr(e,t,n){n.silent||v(`${t}Updating ${e}...`);try{let r=await yt(e,n);return n.silent?pe({status:"updated",plugin:r.name,previousVersion:r.previousVersion,newVersion:r.newVersion,duration_ms:r.duration_ms}):xe(`${t}${r.name} v${r.previousVersion} \u2192 v${r.newVersion}`),{name:e,success:!0}}catch(r){if(r instanceof re)return n.silent?pe({status:"up_to_date",plugin:e,message:r.message}):v(`${t}${r.message}`),{name:e,success:true,skipped:true};let o=_(r);return n.silent?cn({status:"error",plugin:e,message:o}):P(`${t}Failed to update ${e}: ${o}`),{name:e,success:false,error:o}}}function us(e){let t=e.filter(o=>o.success&&!o.skipped).length,n=e.filter(o=>o.skipped).length,r=e.filter(o=>!o.success).length;v(`
50
+ Update summary: ${t} updated, ${n} already up to date, ${r} failed`);}async function ps(e,t,n){try{let r=await Ee(e);W(t,r.version,n.force)?v(`Would update ${e}: v${t} \u2192 v${r.version}`):v(`${e} is already up to date (v${t})`);}catch(r){return P(_(r)),1}return 0}function ds(e){return new Map(e.map(t=>[t.name,t.version]))}function fs(e,t,n){let r=t.get(e.name);return r?W(e.version,r,n)?(v(`Would update ${e.name}: v${e.version} \u2192 v${r}`),true):(v(`${e.name} is already up to date (v${e.version})`),false):(v(`Skipping ${e.name}: not found in catalog`),false)}async function ms(e,t){try{let n=await G(),r=ds(n),o=0;for(let i of e)fs(i,r,t.force)&&o++;o===0&&v("All plugins are up to date");}catch(n){return P(_(n)),1}return 0}async function gs(e,t){let n=[];for(let r=0;r<e.length;r++){let o=`[${r+1}/${e.length}] `,i=await zr(e[r].name,o,t);n.push(i);}return t.silent?pe({status:"summary",updated:n.filter(r=>r.success&&!r.skipped).length,upToDate:n.filter(r=>r.skipped).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.skipped?{skipped:true}:{},...r.error?{error:r.error}:{}}))}):us(n),n.some(r=>!r.success)?1:0}async function Gr(e,t={}){if(!await ie())return 1;if(e){let o=R().find(s=>s.name===e);return o?t.dryRun?ps(e,o.version,t):(await zr(e,"",t)).success?0:1:(t.silent?cn({status:"error",plugin:e,message:`Plugin "${e}" is not installed`}):P(`Plugin "${e}" is not installed`),1)}let r=R().filter(o=>o.marketplace===b);return r.length===0?(t.silent?pe({status:"empty",message:"No plugins installed"}):v("No plugins installed"),0):t.dryRun?ms(r,t):gs(r,t)}async function vs(){return await L()?{passed:true,message:"Credentials configured"}:{passed:false,message:"Credentials not configured \u2014 Run `flow-cli auth login`"}}async function xs(){let e=Date.now();try{await G();let t=Date.now()-e;return {passed:!0,message:`Prompt Manager accessible (${t}ms)`,latency:t}}catch(t){return t instanceof Error&&t.name==="TimeoutError"?{passed:false,message:"Timeout after 5s \u2014 check your connection"}:{passed:false,message:`Connection error: ${t instanceof Error?t.message:"Unknown"}`}}}async function bs(){return await O()?{passed:true,message:"Token is valid"}:{passed:false,message:"Token expired \u2014 run `flow-cli auth login` to re-authenticate"}}function Ss(){let e=join(homedir(),".claude","settings.json");return existsSync(e)?{passed:true,message:"Claude Code detected"}:{passed:false,message:"Claude Code not detected"}}async function Wr(){process.stdout.write(`
51
51
  `+x.bold(` FlowSetup CLI Diagnostics
52
52
 
53
- `));let e=[{name:"Credentials",fn:hs},{name:"Prompt Manager",fn:ys},{name:"Valid Token",fn:ws},{name:"Claude Code",fn:vs}],t=true;for(let n of e){let r=await n.fn(),o="",i=x.green;r.passed?o=x.green("[OK] "):(o=x.red("[FAIL]"),i=x.red,t=false);let s=` ${o} ${i(n.name.padEnd(18))} ${E(r.message)}`;process.stdout.write(s+`
53
+ `));let e=[{name:"Credentials",fn:vs},{name:"Prompt Manager",fn:xs},{name:"Valid Token",fn:bs},{name:"Claude Code",fn:Ss}],t=true;for(let n of e){let r=await n.fn(),o="",i=x.green;r.passed?o=x.green("[OK] "):(o=x.red("[FAIL]"),i=x.red,t=false);let s=` ${o} ${i(n.name.padEnd(18))} ${E(r.message)}`;process.stdout.write(s+`
54
54
  `);}return process.stdout.write(`
55
55
  `),t?(process.stdout.write(x.green(` \u2713 All checks passed!
56
56
 
57
57
  `)),0):(process.stdout.write(x.red(` \u2717 Some checks failed \u2014 verify your configuration
58
58
 
59
- `)),1)}function Gr(e){let t=new Command;t.name("flow").description("FlowSetup CLI \u2014 Manage Flow plugins in your Claude Code").version(`@flow/cli v${tt}`,"-V, --version","Display the CLI version").addHelpText("after",`
59
+ `)),1)}function Xr(e){let t=new Command;t.name("flow").description("FlowSetup CLI \u2014 Manage Flow plugins in your Claude Code").version(`@flow/cli v${ot}`,"-V, --version","Display the CLI version").addHelpText("after",`
60
60
  Without arguments, opens the interactive interface (TUI).
61
61
  Use 'flow <command> --help' for details on each command.`).action(()=>{e();});let n=new Command("setup").description("Configure the CLI by detecting Claude Code credentials");n.command("init").description("Initialize the Flow CLI configuration").addHelpText("after",`
62
62
  Examples:
63
- $ flow setup init`).action(async()=>{let i=await on();process.exit(i);}),t.addCommand(n);let r=new Command("plugin").description("Manage plugins from the Findr catalog installed in your Claude Code");r.command("list").description("List available or installed plugins").option("--available","show full catalog with installation status",false).option("--outdated","show only plugins with updates available",false).option("--json","output as JSON",false).addHelpText("after",`
63
+ $ flow setup init`).action(async()=>{let i=await ln();process.exit(i);}),t.addCommand(n);let r=new Command("plugin").description("Manage plugins from the Findr catalog installed in your Claude Code");r.command("list").description("List available or installed plugins").option("--available","show full catalog with installation status",false).option("--outdated","show only plugins with updates available",false).option("--json","output as JSON",false).addHelpText("after",`
64
64
  Examples:
65
65
  $ flow plugin list
66
66
  $ flow plugin list --available
67
67
  $ flow plugin list --outdated
68
- $ flow plugin list --json`).action(async i=>{let s=await _r(i);process.exit(s);}),r.command("install").description("Install one or more plugins from the Findr catalog into Claude Code").argument("<name...>","Name(s) of the plugin(s) to install (space-separated)").option("--force","Reinstall even if the version is already installed").option("--verbose","Display each step of the installation process").option("--silent","Output in JSON only").addHelpText("after",`
68
+ $ flow plugin list --json`).action(async i=>{let s=await Kr(i);process.exit(s);}),r.command("install").description("Install one or more plugins from the Findr catalog into Claude Code").argument("<name...>","Name(s) of the plugin(s) to install (space-separated)").option("--force","Reinstall even if the version is already installed").option("--verbose","Display each step of the installation process").option("--silent","Output in JSON only").addHelpText("after",`
69
69
  Examples:
70
70
  $ flow plugin install flow-adr-writer
71
71
  $ flow plugin install flow-adr-writer flow-prd-writer startup-pack-ai
72
72
  $ flow plugin install flow-adr-writer --force
73
- $ flow plugin install flow-adr-writer --silent`).action(async(i,s)=>{j("cli",{verbose:s.verbose,silent:s.silent});let a=await jr(i,s);process.exit(a);}),r.command("uninstall").description("Remove an installed plugin from Claude Code").argument("<name>","Name of the plugin to remove").option("--force","Skip interactive confirmation").addHelpText("after",`
73
+ $ flow plugin install flow-adr-writer --silent`).action(async(i,s)=>{K("cli",{verbose:s.verbose,silent:s.silent});let a=await Vr(i,s);process.exit(a);}),r.command("uninstall").description("Remove an installed plugin from Claude Code").argument("<name>","Name of the plugin to remove").option("--force","Skip interactive confirmation").addHelpText("after",`
74
74
  Examples:
75
75
  $ flow plugin uninstall flow-adr-writer
76
- $ flow plugin uninstall startup-pack-ai --force`).action(async(i,s)=>{let a=await Kr(i,s);process.exit(a);}),r.command("update").description("Update plugins to the latest version").argument("[name]","Name of the plugin to update (omit to update all)").option("--force","Force update even if already on latest version").option("--dry-run","Show what would be updated without making changes").option("--verbose","Display each step of the update process").option("--silent","Output in JSON only").addHelpText("after",`
76
+ $ flow plugin uninstall startup-pack-ai --force`).action(async(i,s)=>{let a=await Jr(i,s);process.exit(a);}),r.command("update").description("Update plugins to the latest version").argument("[name]","Name of the plugin to update (omit to update all)").option("--force","Force update even if already on latest version").option("--dry-run","Show what would be updated without making changes").option("--verbose","Display each step of the update process").option("--silent","Output in JSON only").addHelpText("after",`
77
77
  Examples:
78
78
  $ flow plugin update flow-adr-writer
79
79
  $ flow plugin update flow-adr-writer --force
@@ -81,19 +81,19 @@ Examples:
81
81
  $ flow plugin update flow-adr-writer --verbose
82
82
  $ flow plugin update flow-adr-writer --silent
83
83
  $ flow plugin update
84
- $ flow plugin update --dry-run`).action(async(i,s)=>{j("cli",{verbose:s.verbose,silent:s.silent});let a=await Hr(i??null,s);process.exit(a);}),r.command("enable").description("Enable an installed plugin").argument("<name>","Name of the plugin to enable").addHelpText("after",`
84
+ $ flow plugin update --dry-run`).action(async(i,s)=>{K("cli",{verbose:s.verbose,silent:s.silent});let a=await Gr(i??null,s);process.exit(a);}),r.command("enable").description("Enable an installed plugin").argument("<name>","Name of the plugin to enable").addHelpText("after",`
85
85
  Examples:
86
- $ flow plugin enable flow-adr-writer`).action(async i=>{j("cli");let s=await Vr(i);process.exit(s);}),r.command("disable").description("Disable an installed plugin").argument("<name>","Name of the plugin to disable").addHelpText("after",`
86
+ $ flow plugin enable flow-adr-writer`).action(async i=>{K("cli");let s=await qr(i);process.exit(s);}),r.command("disable").description("Disable an installed plugin").argument("<name>","Name of the plugin to disable").addHelpText("after",`
87
87
  Examples:
88
- $ flow plugin disable flow-adr-writer`).action(async i=>{j("cli");let s=await Jr(i);process.exit(s);}),t.addCommand(r);let o=new Command("auth").description("Manage authentication credentials");return o.command("login").description("Authenticate and save credentials locally").option("--client-id <id>","Client ID for non-interactive authentication").option("--client-secret <secret>","Client Secret for non-interactive authentication").option("--tenant <tenant>","Tenant for non-interactive authentication").option("--verbose","Display each step of the authentication process").addHelpText("after",`
88
+ $ flow plugin disable flow-adr-writer`).action(async i=>{K("cli");let s=await Hr(i);process.exit(s);}),t.addCommand(r);let o=new Command("auth").description("Manage authentication credentials");return o.command("login").description("Authenticate and save credentials locally").option("--client-id <id>","Client ID for non-interactive authentication").option("--client-secret <secret>","Client Secret for non-interactive authentication").option("--tenant <tenant>","Tenant for non-interactive authentication").option("--verbose","Display each step of the authentication process").addHelpText("after",`
89
89
  Examples:
90
90
  $ flow auth login
91
91
  $ flow auth login --client-id ID --client-secret SECRET --tenant TENANT
92
- $ flow auth login --verbose`).action(async i=>{j("cli",{verbose:i.verbose});let s=await on(i);process.exit(s);}),o.command("logout").description("Remove locally saved credentials").option("--force","Skip interactive confirmation").addHelpText("after",`
92
+ $ flow auth login --verbose`).action(async i=>{K("cli",{verbose:i.verbose});let s=await ln(i);process.exit(s);}),o.command("logout").description("Remove locally saved credentials").option("--force","Skip interactive confirmation").addHelpText("after",`
93
93
  Examples:
94
94
  $ flow auth logout
95
- $ flow auth logout --force`).action(async i=>{let s=await Fr(i.force);process.exit(s);}),o.command("status").description("Display the current authentication status").addHelpText("after",`
95
+ $ flow auth logout --force`).action(async i=>{let s=await _r(i.force);process.exit(s);}),o.command("status").description("Display the current authentication status").addHelpText("after",`
96
96
  Examples:
97
- $ flow auth status`).action(async()=>{let i=await Br();process.exit(i);}),t.addCommand(o),t.command("health").description("Check the CLI configuration and connectivity").addHelpText("after",`
97
+ $ flow auth status`).action(async()=>{let i=await jr();process.exit(i);}),t.addCommand(o),t.command("health").description("Check the CLI configuration and connectivity").addHelpText("after",`
98
98
  Examples:
99
- $ flow health`).action(async()=>{let i=await zr();process.exit(i);}),t}var bs=Gr(()=>{j("tui"),render(jsx(Nr,{}));});bs.parse();
99
+ $ flow health`).action(async()=>{let i=await Wr();process.exit(i);}),t}var Es=Xr(()=>{K("tui"),render(jsx(Fr,{}));});Es.parse();
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@ciandt-flow/cli",
3
- "version": "1.0.5-beta.49",
3
+ "version": "1.0.5-beta.57",
4
4
  "description": "TUI for browsing and installing Claude Code plugins from the Flow ecosystem",
5
5
  "type": "module",
6
6
  "main": "dist/index.js",