@ciandt-flow/cli 1.0.5-beta.57 → 1.0.6-beta.108

package/README.md

@@ -43,6 +43,7 @@ flow auth login [options]
 | `--client-id <id>` | Client ID |
 | `--client-secret <secret>` | Client Secret |
 | `--tenant <tenant>` | Tenant |
+| `--bundle <slug>` | Bundle slug to install after authentication |
 
 When called **without options**, enters interactive mode — prompts for each field in the terminal.
 When called **with all three options**, runs non-interactively and saves credentials directly.
@@ -53,6 +54,9 @@ flow auth login
 
 # non-interactive mode
 flow auth login --client-id <id> --client-secret <secret> --tenant <tenant>
+
+# with bundle selection
+flow auth login --client-id <id> --client-secret <secret> --tenant <tenant> --bundle dev
 ```
 
 #### `auth logout`

package/dist/index.js

@@ -1,79 +1,102 @@
 #!/usr/bin/env node
-import {Box,Text,render,useInput}from'ink';import ti,{useState,useEffect,useMemo,useCallback,useRef}from'react';import {jsxs,jsx,Fragment}from'react/jsx-runtime';import {create}from'zustand';import Fo,{HTTPError}from'ky';import {StatusCodes}from'http-status-codes';import*as me from'crypto';import {randomUUID}from'crypto';import*as I from'fs';import I__default,{readFileSync,existsSync,realpathSync}from'fs';import*as q from'path';import q__default,{join}from'path';import*as Q from'os';import Q__default,{homedir}from'os';import {execFile,exec,spawn}from'child_process';import {promisify}from'util';import*as Tn from'readline';import Xe from'keytar';import Rt from'conf';import Go from'ink-big-text';import Wo from'ink-gradient';import x from'chalk';import fi from'ink-spinner';import*as B from'fs/promises';import Si from'extract-zip';import Pi from'proper-lockfile';import nn from'semver';import {Command}from'commander';var lo=16;function dn({label:e,value:t,onChange:n,masked:r=false,isActive:o,error:i}){let s=useRef(t);useEffect(()=>{s.current=t;},[t]),useInput((u,c)=>{if(c.backspace||c.delete){let m=s.current.slice(0,-1);s.current=m,n(m);}else if(u&&!c.ctrl&&!c.meta&&!c.escape&&!c.return&&!c.tab&&!c.upArrow&&!c.downArrow&&!c.leftArrow&&!c.rightArrow){let m=s.current+u;s.current=m,n(m);}},{isActive:o});let a=r?"\u2022".repeat(t.length):t;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{children:[jsx(Text,{color:o?"cyan":"gray",children:o?"\u25B8 ":"  "}),jsx(Text,{color:o?"white":"gray",bold:o,children:e.padEnd(lo)}),jsx(Text,{color:o?"cyan":"gray",children:a}),o&&jsx(Text,{color:"cyan",children:"\u2588"})]}),i&&jsx(Box,{paddingLeft:3,children:jsxs(Text,{color:"red",children:["\u26A0 ",i]})})]})}var j=create(e=>({credentials:null,isAuthenticated:false,justAuthenticated:false,setCredentials:t=>e({credentials:t,isAuthenticated:true}),clearCredentials:()=>e({credentials:null,isAuthenticated:false,justAuthenticated:false}),setJustAuthenticated:t=>e({justAuthenticated:t})}));var d=create(e=>({activeTab:"discover",focus:"list",selectedIndex:0,actionMenuOpen:false,notification:null,loading:false,loadingMessage:"",catalogError:null,setActiveTab:t=>e({activeTab:t}),setFocus:t=>e({focus:t}),setSelectedIndex:t=>e({selectedIndex:t}),setActionMenuOpen:t=>e({actionMenuOpen:t}),showNotification:(t,n)=>e({notification:{message:t,type:n}}),clearNotification:()=>e({notification:null}),setLoading:(t,n="")=>e({loading:t,loadingMessage:t?n:""}),setCatalogError:t=>e({catalogError:t})}));var fn="FLOW",b="flow-skills",Ve=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;var Je="aes-256-gcm",po=16,mn=16,$e=class{key;constructor(t){if(t.length!==32)throw new Error(`Invalid key length: expected 32 bytes, got ${t.length}`);this.key=t;}encrypt(t){let n=me.randomBytes(po),r=me.createCipheriv(Je,this.key,n,{authTagLength:mn}),o=Buffer.concat([r.update(t,"utf8"),r.final()]),i=r.getAuthTag();return {iv:n.toString("hex"),authTag:i.toString("hex"),ciphertext:o.toString("hex"),algorithm:Je}}decrypt(t){if(t.algorithm!==Je)throw new Error(`Unsupported encryption algorithm: ${t.algorithm}`);let n=me.createDecipheriv(Je,this.key,Buffer.from(t.iv,"hex"),{authTagLength:mn});return n.setAuthTag(Buffer.from(t.authTag,"hex")),Buffer.concat([n.update(Buffer.from(t.ciphertext,"hex")),n.final()]).toString("utf8")}};var fo=/Bearer\s+[A-Za-z0-9\-._~+/]+=*/g,mo=/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,go=/[A-Za-z0-9+/]{40,}={0,2}/g;function Pt(e){return e.replace(fo,"Bearer ***").replace(mo,"***").replace(go,"***")}var ke=class{context;constructor(t){this.context=t;}write(t){let n=this.context==="tui"?this.formatTui(t):this.formatCli(t);process.stderr.write(n+`
-`);}formatTui(t){return `[flow:${t.module}] ${t.message}`}formatCli(t){let n=String(t.timestamp.getHours()).padStart(2,"0"),r=String(t.timestamp.getMinutes()).padStart(2,"0"),o=String(t.timestamp.getSeconds()).padStart(2,"0");return `[${n}:${r}:${o}] [${t.level.toUpperCase()}] ${t.message}`}};var Re=".claude",gn=".flow";function hn(e,t){return q.join(Q.homedir(),Re,"plugins","cache",b,e,t)}function Et(e){return q.join(Q.homedir(),Re,"plugins","marketplaces",b,"plugins","native",e)}function qe(){return q.join(Q.homedir(),Re,"plugins","marketplaces",b,".claude-plugin","marketplace.json")}function yn(){return q.join(Q.homedir(),Re,"plugins","known_marketplaces.json")}function wn(){return q.join(Q.homedir(),Re,"plugins","marketplaces",b)}function vn(){return q.join(Q.homedir(),gn,"cache","install.lock")}function xn(){return q.join(Q.homedir(),gn,"logs","flowsetup.log")}var ho=5*1024*1024,yo=3,He=class{filePath;constructor(){this.filePath=xn(),this.ensureDir(),this.rotateIfNeeded();}write(t){let n=`[${t.timestamp.toISOString()}] [${t.level.toUpperCase()}] [${t.module}] ${t.message}
-`;try{I.appendFileSync(this.filePath,n,"utf-8");}catch{}}ensureDir(){try{let t=q.dirname(this.filePath);I.mkdirSync(t,{recursive:!0});}catch{}}rotateIfNeeded(){try{if(I.statSync(this.filePath).size>ho){let n=new Date().toISOString().replace(/[:.]/g,"-"),r=this.filePath.replace(".log",`-${n}.log`);I.renameSync(this.filePath,r),this.cleanOldBackups();}}catch{}}cleanOldBackups(){try{let t=q.dirname(this.filePath),n=q.basename(this.filePath,".log"),r=I.readdirSync(t).filter(o=>o.startsWith(n+"-")&&o.endsWith(".log")).sort().reverse();for(let o of r.slice(yo))I.unlinkSync(q.join(t,o));}catch{}}};var ze=class{write(t){process.stdout.write(t.message+`
-`);}};var ge={debug:0,info:1,warn:2,error:3},ce={context:"cli",transports:[],minLevel:"warn",debugModules:null};function wo(){let e=process.env.DEBUG;if(!e)return null;let t=e.split(",").map(r=>r.trim()).filter(Boolean);for(let r of t)if(r==="flow:*")return "all";let n=new Set;for(let r of t)r.startsWith("flow:")&&n.add(r.slice(5));return n.size>0?n:null}function K(e,t){if(e==="tui"){let n=wo();ce={context:e,transports:[new ke("tui"),new He],minLevel:n?"debug":"warn",debugModules:n};}else t?.silent?ce={context:e,transports:[],minLevel:"error",debugModules:null}:t?.verbose?ce={context:e,transports:[new ke("cli")],minLevel:"debug",debugModules:null}:ce={context:e,transports:[new ze],minLevel:"info",debugModules:null};}function bn(){return ce.transports}function Sn(e,t){let{debugModules:n,minLevel:r}=ce;return ce.context==="tui"&&n&&n!=="all"?n.has(t)?ge[e]>=ge.debug:ge[e]>=ge.warn:ge[e]>=ge[r]}var Pn=new Map;function Ge(e,t,n){if(!Sn(e,t))return;let r={level:e,module:t,message:Pt(n),timestamp:new Date};for(let o of bn())o.write(r);}function y(e){let t=Pn.get(e);if(t)return t;let n={debug:r=>Ge("debug",e,r),info:r=>Ge("info",e,r),warn:r=>Ge("warn",e,r),error:r=>Ge("error",e,r)};return Pn.set(e,n),n}var It=y("encryption"),Tt="__encrypted__";function vo(e){return typeof e=="object"&&e!==null&&Tt in e&&e[Tt]===true}function At(e){return {serialize(t){let n=JSON.stringify(t),r=e.encrypt(n),o={[Tt]:true,envelope:r};return JSON.stringify(o,null,"	")},deserialize(t){let n;try{n=JSON.parse(t);}catch{return It.warn("Config file contains unparseable data, treating as empty"),{}}if(vo(n))try{let r=e.decrypt(n.envelope);return JSON.parse(r)}catch(r){return It.error(`Decryption failed: ${r instanceof Error?r.message:"unknown error"}. Config will be treated as empty. Re-authentication may be required.`),{}}return It.info("Detected plaintext config \u2014 will encrypt on next write"),n}}}var $t=promisify(execFile),So=promisify(exec),he=class{static async isAvailable(){try{return await So("command -v security"),!0}catch{return  false}}async getSecret(t,n){try{let{stdout:r}=await $t("security",["find-generic-password","-w","-a",n,"-s",t]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await $t("security",["add-generic-password","-U","-a",n,"-s",t,"-w",r]);}async deleteSecret(t,n){try{return await $t("security",["delete-generic-password","-a",n,"-s",t]),!0}catch{return  false}}getStoragePath(){return "macOS Keychain (security)"}};var In=promisify(execFile),kt=promisify(exec),To=[{name:"apt",command:"sudo apt install -y libsecret-tools"},{name:"dnf",command:"sudo dnf install -y libsecret"},{name:"pacman",command:"sudo pacman -S --noconfirm libsecret"},{name:"apk",command:"sudo apk add libsecret-tools"},{name:"zypper",command:"sudo zypper install -y libsecret-tools"}],We=y("encryption:linux-keyvault");async function Ao(e,t){let n=["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"],r=0,o=setInterval(()=>{process.stderr.write(`\r${n[r++%n.length]}  ${e}`);},80);try{return await t()}finally{clearInterval(o),process.stderr.write("\r\x1B[2K");}}function $o(e){let t=Tn.createInterface({input:process.stdin,output:process.stdout});return new Promise(n=>{t.question(e,r=>{t.close(),n(r.trim().toLowerCase());});})}var ee=class e{static async isAvailable(){try{return await kt("command -v secret-tool"),!0}catch{return  false}}static async detectPackageManager(){for(let t of To)try{return await kt(`command -v ${t.name}`),t}catch{}return null}static async ensureInstalled(){if(await e.isAvailable())return  true;We.info("Secure credential storage requires 'secret-tool' (libsecret). This tool allows us to store your encryption key in the OS keyring, so your credentials are protected even if someone copies the config file.");let t=await e.detectPackageManager();if(!t)return We.warn("Could not detect a supported package manager. Please install libsecret manually."),false;let n=await $o("  ? Install secret-tool? This requires sudo. (y/N) ");if(n!=="y"&&n!=="yes")return  false;try{return We.info(`Running: ${t.command}`),await Ao("Installing secret-tool...",()=>kt(t.command)),e.isAvailable()}catch{return We.warn("Installation failed. Falling back to derived key."),false}}async getSecret(t,n){try{let{stdout:r}=await In("secret-tool",["lookup","service",t,"account",n]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await new Promise((o,i)=>{let s=spawn("secret-tool",["store","--label",t,"service",t,"account",n]);s.stdin.end(r,"utf8"),s.on("close",a=>{a===0?o():i(new Error(`secret-tool exited with code ${a}`));}),s.on("error",i);});}async deleteSecret(t,n){try{return await In("secret-tool",["clear","service",t,"account",n]),!0}catch{return  false}}getStoragePath(){return "Linux Secret Service (secret-tool)"}};var $n=y("encryption:windows-keyvault"),ye=class{static async isAvailable(){try{return await Xe.getPassword("__flow_probe__","__flow_probe__"),!0}catch{return  false}}async getSecret(t,n){try{return await Xe.getPassword(t,n)}catch(r){let o=r instanceof Error?r.message.split(`
-`)[0]:"unknown error";return $n.error(`Failed to read secret from Windows Credential Manager [service="${t}", account="${n}"]: ${o}`),null}}async setSecret(t,n,r){try{await Xe.setPassword(t,n,r);}catch(o){let i=o instanceof Error?o.message.split(`
-`)[0]:"unknown error",s=`Failed to store secret in Windows Credential Manager [service="${t}", account="${n}"]: ${i}`;throw $n.error(s),new Error(s)}}async deleteSecret(t,n){try{return await Xe.deletePassword(t,n)}catch{return  false}}getStoragePath(){return "Windows Credential Manager (keytar)"}};var ko=32,Ro="flow-plugins-cli-fallback",Ct="flow-plugins-cli-fallback",Co={linux:"install secret-tool (e.g. sudo apt install libsecret-tools)",darwin:"ensure the Keychain is accessible (security binary must be available)",win32:"ensure Credential Manager is available (cmdkey must be in PATH)"};function Lo(){let e=`${Q.hostname()}${Q.userInfo().username}`;return me.scryptSync(e,Ro,ko)}function Mo(){let e=Lo(),t=new $e(e),n=At(t);return new Rt({projectName:Ct,serialize:n.serialize,deserialize:n.deserialize})}var Qe=null;function Ze(){return Qe||(Qe=Mo()),Qe}var C=class{warned=false;async getSecret(t,n){return Ze().get(`${t}:${n}`)??null}async setSecret(t,n,r){if(!this.warned){let o=Co[process.platform]??"ensure the OS keyring is available";process.stderr.write(`\u26A0  Secure keyring unavailable. Credentials are stored in an encrypted file
+import {Box,Text,render,useWindowSize,useApp,useInput}from'ink';import ti,{useRef,useCallback,useMemo,useEffect,useState}from'react';import {create}from'zustand';import {jsxs,jsx,Fragment}from'react/jsx-runtime';import _s,{HTTPError}from'ky';import {StatusCodes}from'http-status-codes';import*as ke from'crypto';import {randomUUID}from'crypto';import*as L from'fs';import L__default,{readFileSync,existsSync,realpathSync}from'fs';import*as le from'path';import le__default,{join}from'path';import*as fe from'os';import fe__default,{homedir}from'os';import {execFile,exec,spawn}from'child_process';import {promisify}from'util';import*as mr from'readline';import bt from'keytar';import un from'conf';import Ws from'ink-big-text';import w from'chalk';import fi from'ink-spinner';import*as ee from'fs/promises';import Pi from'extract-zip';import Ii from'proper-lockfile';import Ln from'semver';import {Command}from'commander';var p=create(e=>({screen:"auth",activeTab:"discover",focus:"list",selectedIndex:0,actionMenuOpen:false,notification:null,loading:false,loadingMessage:"",catalogError:null,pendingExit:false,setScreen:t=>e({screen:t}),setActiveTab:t=>e({activeTab:t}),setFocus:t=>e({focus:t}),setSelectedIndex:t=>e({selectedIndex:t}),setActionMenuOpen:t=>e({actionMenuOpen:t}),showNotification:(t,n)=>e({notification:{message:t,type:n}}),clearNotification:()=>e({notification:null}),setLoading:(t,n="")=>e({loading:t,loadingMessage:t?n:""}),setCatalogError:t=>e({catalogError:t}),setPendingExit:t=>e({pendingExit:t})}));var ls=2e3;function Zn(){let{exit:e}=useApp(),t=useRef(false),n=useRef(null),r=p(i=>i.pendingExit),o=p(i=>i.setPendingExit),s=useCallback(()=>{if(t.current){n.current&&clearTimeout(n.current),e();return}t.current=true,o(true),n.current=setTimeout(()=>{t.current=false,o(false);},ls);},[e,o]);return useInput((i,l)=>{l.ctrl&&i==="c"&&s();}),{pendingExit:r}}var ps=16;function Yn({label:e,value:t,onChange:n,masked:r=false,isActive:o,error:s}){let i=useRef(t);useEffect(()=>{i.current=t;},[t]),useInput((c,a)=>{if(a.backspace){let d=i.current.slice(0,-1);i.current=d,n(d);}else if(c&&!a.ctrl&&!a.meta&&!a.escape&&!a.return&&!a.tab&&!a.upArrow&&!a.downArrow&&!a.leftArrow&&!a.rightArrow){let d=i.current+c;i.current=d,n(d);}},{isActive:o});let l=r?"\u2022".repeat(t.length):t;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{children:[jsx(Text,{color:o?"cyan":"gray",children:o?"\u25B8 ":"  "}),jsx(Text,{color:o?"white":"gray",bold:o,children:e.padEnd(ps)}),jsx(Text,{color:o?"cyan":"gray",children:l}),o&&jsx(Text,{color:"cyan",children:"\u2588"})]}),s&&jsx(Box,{paddingLeft:3,children:jsxs(Text,{color:"red",children:["\u26A0 ",s]})})]})}var X=create(e=>({credentials:null,isAuthenticated:false,justAuthenticated:false,setCredentials:t=>e({credentials:t,isAuthenticated:true}),clearCredentials:()=>e({credentials:null,isAuthenticated:false,justAuthenticated:false}),setJustAuthenticated:t=>e({justAuthenticated:t})}));var er="FLOW",T="flow-skills",mt=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;var ft="aes-256-gcm",fs=16,tr=16,He=class{key;constructor(t){if(t.length!==32)throw new Error(`Invalid key length: expected 32 bytes, got ${t.length}`);this.key=t;}encrypt(t){let n=ke.randomBytes(fs),r=ke.createCipheriv(ft,this.key,n,{authTagLength:tr}),o=Buffer.concat([r.update(t,"utf8"),r.final()]),s=r.getAuthTag();return {iv:n.toString("hex"),authTag:s.toString("hex"),ciphertext:o.toString("hex"),algorithm:ft}}decrypt(t){if(t.algorithm!==ft)throw new Error(`Unsupported encryption algorithm: ${t.algorithm}`);let n=ke.createDecipheriv(ft,this.key,Buffer.from(t.iv,"hex"),{authTagLength:tr});return n.setAuthTag(Buffer.from(t.authTag,"hex")),Buffer.concat([n.update(Buffer.from(t.ciphertext,"hex")),n.final()]).toString("utf8")}};var gs=/Bearer\s+[A-Za-z0-9\-._~+/]+=*/g,ys=/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,hs=/[A-Za-z0-9+/]{40,}={0,2}/g;function nn(e){return e.replace(gs,"Bearer ***").replace(ys,"***").replace(hs,"***")}var ze=class{context;constructor(t){this.context=t;}write(t){let n=this.context==="tui"?this.formatTui(t):this.formatCli(t);process.stderr.write(n+`
+`);}formatTui(t){return `[flow:${t.module}] ${t.message}`}formatCli(t){let n=String(t.timestamp.getHours()).padStart(2,"0"),r=String(t.timestamp.getMinutes()).padStart(2,"0"),o=String(t.timestamp.getSeconds()).padStart(2,"0");return `[${n}:${r}:${o}] [${t.level.toUpperCase()}] ${t.message}`}};var Xe=".claude",nr=".flow";function rr(e,t){return le.join(fe.homedir(),Xe,"plugins","cache",T,e,t)}function rn(e){return le.join(fe.homedir(),Xe,"plugins","marketplaces",T,"plugins","native",e)}function gt(){return le.join(fe.homedir(),Xe,"plugins","marketplaces",T,".claude-plugin","marketplace.json")}function or(){return le.join(fe.homedir(),Xe,"plugins","known_marketplaces.json")}function sr(){return le.join(fe.homedir(),Xe,"plugins","marketplaces",T)}function ir(){return le.join(fe.homedir(),nr,"cache","install.lock")}function ar(){return le.join(fe.homedir(),nr,"logs","flowsetup.log")}var ws=5*1024*1024,xs=3,yt=class{filePath;constructor(){this.filePath=ar(),this.ensureDir(),this.rotateIfNeeded();}write(t){let n=`[${t.timestamp.toISOString()}] [${t.level.toUpperCase()}] [${t.module}] ${t.message}
+`;try{L.appendFileSync(this.filePath,n,"utf-8");}catch{}}ensureDir(){try{let t=le.dirname(this.filePath);L.mkdirSync(t,{recursive:!0});}catch{}}rotateIfNeeded(){try{if(L.statSync(this.filePath).size>ws){let n=new Date().toISOString().replace(/[:.]/g,"-"),r=this.filePath.replace(".log",`-${n}.log`);L.renameSync(this.filePath,r),this.cleanOldBackups();}}catch{}}cleanOldBackups(){try{let t=le.dirname(this.filePath),n=le.basename(this.filePath,".log"),r=L.readdirSync(t).filter(o=>o.startsWith(n+"-")&&o.endsWith(".log")).sort().reverse();for(let o of r.slice(xs))L.unlinkSync(le.join(t,o));}catch{}}};var ht=class{write(t){process.stdout.write(t.message+`
+`);}};var Be={debug:0,info:1,warn:2,error:3},Te={context:"cli",transports:[],minLevel:"warn",debugModules:null};function bs(){let e=process.env.DEBUG;if(!e)return null;let t=e.split(",").map(r=>r.trim()).filter(Boolean);for(let r of t)if(r==="flow:*")return "all";let n=new Set;for(let r of t)r.startsWith("flow:")&&n.add(r.slice(5));return n.size>0?n:null}function ie(e,t){if(e==="tui"){let n=bs();Te={context:e,transports:[new ze("tui"),new yt],minLevel:n?"debug":"warn",debugModules:n};}else t?.silent?Te={context:e,transports:[],minLevel:"error",debugModules:null}:t?.verbose?Te={context:e,transports:[new ze("cli")],minLevel:"debug",debugModules:null}:Te={context:e,transports:[new ht],minLevel:"info",debugModules:null};}function lr(){return Te.transports}function cr(e,t){let{debugModules:n,minLevel:r}=Te;return Te.context==="tui"&&n&&n!=="all"?n.has(t)?Be[e]>=Be.debug:Be[e]>=Be.warn:Be[e]>=Be[r]}var ur=new Map;function wt(e,t,n){if(!cr(e,t))return;let r={level:e,module:t,message:nn(n),timestamp:new Date};for(let o of lr())o.write(r);}function S(e){let t=ur.get(e);if(t)return t;let n={debug:r=>wt("debug",e,r),info:r=>wt("info",e,r),warn:r=>wt("warn",e,r),error:r=>wt("error",e,r)};return ur.set(e,n),n}var on=S("encryption"),sn="__encrypted__";function vs(e){return typeof e=="object"&&e!==null&&sn in e&&e[sn]===true}function an(e){return {serialize(t){let n=JSON.stringify(t),r=e.encrypt(n),o={[sn]:true,envelope:r};return JSON.stringify(o,null,"	")},deserialize(t){let n;try{n=JSON.parse(t);}catch{return on.warn("Config file contains unparseable data, treating as empty"),{}}if(vs(n))try{let r=e.decrypt(n.envelope);return JSON.parse(r)}catch(r){return on.error(`Decryption failed: ${r instanceof Error?r.message:"unknown error"}. Config will be treated as empty. Re-authentication may be required.`),{}}return on.info("Detected plaintext config \u2014 will encrypt on next write"),n}}}var ln=promisify(execFile),Is=promisify(exec),Le=class{static async isAvailable(){try{return await Is("command -v security"),!0}catch{return  false}}async getSecret(t,n){try{let{stdout:r}=await ln("security",["find-generic-password","-w","-a",n,"-s",t]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await ln("security",["add-generic-password","-U","-a",n,"-s",t,"-w",r]);}async deleteSecret(t,n){try{return await ln("security",["delete-generic-password","-a",n,"-s",t]),!0}catch{return  false}}getStoragePath(){return "macOS Keychain (security)"}};var pr=promisify(execFile),cn=promisify(exec),$s=[{name:"apt",command:"sudo apt install -y libsecret-tools"},{name:"dnf",command:"sudo dnf install -y libsecret"},{name:"pacman",command:"sudo pacman -S --noconfirm libsecret"},{name:"apk",command:"sudo apk add libsecret-tools"},{name:"zypper",command:"sudo zypper install -y libsecret-tools"}],xt=S("encryption:linux-keyvault");async function Cs(e,t){let n=["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"],r=0,o=setInterval(()=>{process.stderr.write(`\r${n[r++%n.length]}  ${e}`);},80);try{return await t()}finally{clearInterval(o),process.stderr.write("\r\x1B[2K");}}function Rs(e){let t=mr.createInterface({input:process.stdin,output:process.stdout});return new Promise(n=>{t.question(e,r=>{t.close(),n(r.trim().toLowerCase());});})}var ye=class e{static async isAvailable(){try{return await cn("command -v secret-tool"),!0}catch{return  false}}static async detectPackageManager(){for(let t of $s)try{return await cn(`command -v ${t.name}`),t}catch{}return null}static async ensureInstalled(){if(await e.isAvailable())return  true;xt.info("Secure credential storage requires 'secret-tool' (libsecret). This tool allows us to store your encryption key in the OS keyring, so your credentials are protected even if someone copies the config file.");let t=await e.detectPackageManager();if(!t)return xt.warn("Could not detect a supported package manager. Please install libsecret manually."),false;let n=await Rs("  ? Install secret-tool? This requires sudo. (y/N) ");if(n!=="y"&&n!=="yes")return  false;try{return xt.info(`Running: ${t.command}`),await Cs("Installing secret-tool...",()=>cn(t.command)),e.isAvailable()}catch{return xt.warn("Installation failed. Falling back to derived key."),false}}async getSecret(t,n){try{let{stdout:r}=await pr("secret-tool",["lookup","service",t,"account",n]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await new Promise((o,s)=>{let i=spawn("secret-tool",["store","--label",t,"service",t,"account",n]);i.stdin.end(r,"utf8"),i.on("close",l=>{l===0?o():s(new Error(`secret-tool exited with code ${l}`));}),i.on("error",s);});}async deleteSecret(t,n){try{return await pr("secret-tool",["clear","service",t,"account",n]),!0}catch{return  false}}getStoragePath(){return "Linux Secret Service (secret-tool)"}};var gr=S("encryption:windows-keyvault"),Me=class{static async isAvailable(){try{return await bt.getPassword("__flow_probe__","__flow_probe__"),!0}catch{return  false}}async getSecret(t,n){try{return await bt.getPassword(t,n)}catch(r){let o=r instanceof Error?r.message.split(`
+`)[0]:"unknown error";return gr.error(`Failed to read secret from Windows Credential Manager [service="${t}", account="${n}"]: ${o}`),null}}async setSecret(t,n,r){try{await bt.setPassword(t,n,r);}catch(o){let s=o instanceof Error?o.message.split(`
+`)[0]:"unknown error",i=`Failed to store secret in Windows Credential Manager [service="${t}", account="${n}"]: ${s}`;throw gr.error(i),new Error(i)}}async deleteSecret(t,n){try{return await bt.deletePassword(t,n)}catch{return  false}}getStoragePath(){return "Windows Credential Manager (keytar)"}};var ks=32,Bs="flow-plugins-cli-fallback",dn="flow-plugins-cli-fallback",Ls={linux:"install secret-tool (e.g. sudo apt install libsecret-tools)",darwin:"ensure the Keychain is accessible (security binary must be available)",win32:"ensure Credential Manager is available (cmdkey must be in PATH)"};function Ms(){let e=`${fe.hostname()}${fe.userInfo().username}`;return ke.scryptSync(e,Bs,ks)}function Ds(){let e=Ms(),t=new He(e),n=an(t);return new un({projectName:dn,serialize:n.serialize,deserialize:n.deserialize})}var St=null;function vt(){return St||(St=Ds()),St}var G=class{warned=false;async getSecret(t,n){return vt().get(`${t}:${n}`)??null}async setSecret(t,n,r){if(!this.warned){let o=Ls[process.platform]??"ensure the OS keyring is available";process.stderr.write(`\u26A0  Secure keyring unavailable. Credentials are stored in an encrypted file
    using a machine-derived key. For stronger security, ${o}.
-`),this.warned=true;}Ze().set(`${t}:${n}`,r);}async deleteSecret(t,n){let r=Ze(),o=`${t}:${n}`;return r.has(o)?(r.delete(o),true):false}getStoragePath(){return Ze().path}static hasExistingData(){try{let t=new Rt({projectName:Ct});return I.existsSync(t.path)}catch{return  false}}static clearFallbackFile(){try{let t=new Rt({projectName:Ct});I.rmSync(t.path,{force:!0});}catch{}Qe=null;}};async function Lt(){if(C.hasExistingData())return new C;switch(process.platform){case "darwin":return await he.isAvailable()?new he:new C;case "linux":return await ee.isAvailable()?new ee:await ee.ensureInstalled()?new ee:new C;case "win32":return await ye.isAvailable()?new ye:new C;default:throw new Error(`Unsupported platform: ${process.platform}`)}}var Uo=y("config:credentials"),we="flow-plugins-cli",Mt="credentials",Ut="token-cache",tt=null;async function ve(){return tt||(tt=Lt()),tt}function Rn(){tt=null;}async function L(){let t=await(await ve()).getSecret(we,Mt);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function Cn(e){let{clientId:t,clientSecret:n,tenant:r}=e,o=[!t?.trim()&&"clientId",!n?.trim()&&"clientSecret",!r?.trim()&&"tenant"].filter(Boolean);if(o.length>0)throw Uo.error(`missing or empty fields: ${o.join(", ")}`),new Error("Cannot save credentials: clientId, clientSecret, and tenant are required");await(await ve()).setSecret(we,Mt,JSON.stringify(e));}async function Ln(){let e=await ve();await e.deleteSecret(we,Mt),await e.deleteSecret(we,Ut);}async function Mn(){return (await ve()).getStoragePath()}async function Un(e){await(await ve()).setSecret(we,Ut,JSON.stringify(e));}async function Dt(){let t=await(await ve()).getSecret(we,Ut);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function O(){let e=await Dt();return e?new Date(e.expiresAt)>new Date:false}var Do=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^0\.0\.0\.0$/,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i];function Oo(e){return Do.some(t=>t.test(e))}function No(e,t){let n=process.env[e]??t;if(!n)throw new Error(`Missing required environment variable: ${e}`);return n}function nt(e,t){let n=No(e,t),r;try{r=new URL(n);}catch{throw new Error(`${e} must be a valid URL. Got: "${n}"`)}if(r.protocol!=="https:")throw new Error(`${e} must be an HTTPS URL. Got protocol: "${r.protocol}"`);if(r.username||r.password)throw new Error(`${e} must not contain embedded credentials (user:pass@host is not allowed)`);if(Oo(r.hostname))throw new Error(`${e} must not point to a private/loopback address. Got: "${r.hostname}"`);return n}var Ot=y("api:auth");function _o(e){if(!Ve.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var Dn={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};async function jo(e){if(e instanceof HTTPError){let t=e.response.status;Ot.error(`HTTP error during authentication [status=${t}]`);let n="";try{let r=await e.response.text(),o=JSON.parse(r);typeof o.error=="string"&&(n=o.error);}catch{}return n&&Dn[n]?new Error(Dn[n]):t===StatusCodes.UNAUTHORIZED||t===StatusCodes.FORBIDDEN||t===StatusCodes.INTERNAL_SERVER_ERROR?new Error("Invalid credentials"):t>=StatusCodes.BAD_REQUEST&&t<StatusCodes.INTERNAL_SERVER_ERROR?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}return e instanceof Error?(Ot.debug(`Non-HTTP error during authentication: ${e.message}`),e):(Ot.debug("Unknown error during authentication"),new Error("Authentication failed"))}async function Le(e){let t=nt("AUTH_ENGINE_URL","https://flow.ciandt.com/auth-engine-api/v2/api-key/token");_o(e.tenant);let n;try{n=await Fo.post(t,{headers:{FlowTenant:e.tenant},json:{clientSecret:e.clientSecret}}).json();}catch(o){throw await jo(o)}let r=n.expires_at??new Date(Date.now()+(n.expires_in??3600)*1e3).toISOString();await Cn(e),await Un({accessToken:n.access_token,expiresAt:r});}async function On(){if(await O()){let t=await Dt();if(!t)throw new Error("Flow CLI not configured. Run: flow-cli auth login");return t.accessToken}throw new Error("Flow CLI not configured or token expired. Run: flow-cli auth login")}var N=["clientId","clientSecret","tenant"],Vo={clientId:"Client ID",clientSecret:"Client Secret",tenant:"Tenant"};function Nn(){let[e,t]=useState({clientId:"",clientSecret:"",tenant:""}),[n,r]=useState("clientId"),[o,i]=useState({}),[s,a]=useState(null),[u,c]=useState(false),{setCredentials:m,setJustAuthenticated:h}=j(),{setFocus:T}=d();useInput((l,p)=>{if(!u){if(p.shift&&p.tab){let f=N.indexOf(n);f>0&&r(N[f-1]);}else if(p.tab){let f=N.indexOf(n);f<N.length-1&&r(N[f+1]);}else if(p.return)if(n==="tenant")se();else {let f=N.indexOf(n);r(N[f+1]);}}},{isActive:true});let se=async()=>{let l={};for(let p of N)e[p].trim()||(l[p]="This field is required");if(Object.keys(l).length>0){i(l);let p=N.find(f=>l[f]);p&&r(p);return}c(true),a(null);try{await Le({clientId:e.clientId.trim(),clientSecret:e.clientSecret.trim(),tenant:e.tenant.trim()});let{clientSecret:p,...f}=e;m(f),h(!0),T("list");}catch(p){a(p instanceof Error?p.message:"Authentication failed");}finally{c(false),t(p=>({...p,clientSecret:""}));}},ae=l=>p=>{t(f=>({...f,[l]:p})),o[l]&&i(f=>({...f,[l]:void 0}));};return jsxs(Box,{flexDirection:"column",padding:2,children:[jsx(Box,{marginBottom:1,children:jsxs(Text,{bold:true,color:"cyan",children:[fn," \u2014 Initial Setup"]})}),jsx(Box,{flexDirection:"column",children:N.map(l=>jsx(Box,{marginBottom:1,children:jsx(dn,{label:Vo[l],value:e[l],onChange:ae(l),masked:l==="clientSecret",isActive:n===l&&!u,error:o[l]})},l))}),u&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"cyan",children:"Authenticating..."})}),s&&jsx(Box,{marginTop:1,children:jsxs(Text,{color:"red",children:["\u26A0 ",s]})}),jsx(Box,{marginTop:1,children:jsx(Text,{dimColor:true,children:"Tab next field \xB7 Enter confirm"})})]})}var Ho=JSON.parse(readFileSync(join(import.meta.dirname,"..","package.json"),"utf8")),ot=Ho.version;function _n(){return jsxs(Box,{flexDirection:"column",alignItems:"center",children:[jsx(Wo,{name:"morning",children:jsx(Go,{text:"FLOW",font:"block"})}),jsx(Box,{marginTop:-1,marginBottom:1,children:jsxs(Text,{dimColor:true,children:["Marketplace \xB7 v",ot]})})]})}var _t={discover:"Discover",installed:"Installed"},Xo=Object.keys(_t);function Kn(){let e=d(t=>t.activeTab);return jsxs(Box,{paddingX:1,paddingBottom:1,children:[Xo.map(t=>jsx(Box,{marginRight:2,children:t===e?jsx(Text,{bold:true,underline:true,color:"cyan",children:_t[t]}):jsx(Text,{dimColor:true,children:_t[t]})},t)),jsx(Text,{dimColor:true,children:"(Tab to cycle)"})]})}var F=create(e=>({query:"",setQuery:t=>e({query:t}),resetQuery:()=>e({query:""})}));function Jn(){let e=d(r=>r.focus),t=F(r=>r.query),n=e==="search";return jsxs(Box,{borderStyle:"single",borderTop:false,borderBottom:true,borderLeft:false,borderRight:false,paddingX:1,marginX:1,marginBottom:1,children:[jsx(Text,{color:n?"cyan":"gray",children:"\u03C1 "}),n?jsxs(Fragment,{children:[jsx(Text,{color:"white",children:t}),jsx(Text,{color:"cyan",children:"\u2588"})]}):jsx(Text,{dimColor:true,children:t||"Search..."})]})}function E(e){return e==null?"":e.replace(/\x1b\[[0-9;:<=>?]*[ -/]*[@-~]/g,"").replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g,"").replace(/\x1b./g,"").replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g,"")}function xe(e){process.stdout.write(x.green(`  \u2713 ${E(e)}
-`));}function P(e){process.stderr.write(x.red(`  \u2717 ${E(e)}
-`));}function v(e){process.stdout.write(x.cyan(`  \u2139 ${E(e)}
-`));}function lt(e,t){let n=t.map(a=>a.map(E)),r=[e,...n],o=e.map((a,u)=>Math.max(...r.map(c=>(c[u]??"").length))),i=o.map(a=>"\u2500".repeat(a)).join("  "),s=a=>a.map((u,c)=>u.padEnd(o[c])).join("  ");process.stdout.write(`
-`),process.stdout.write(`  ${x.bold(s(e))}
-`),process.stdout.write(`  ${x.dim(i)}
-`);for(let a of n)process.stdout.write(`  ${s(a)}
+`),this.warned=true;}vt().set(`${t}:${n}`,r);}async deleteSecret(t,n){let r=vt(),o=`${t}:${n}`;return r.has(o)?(r.delete(o),true):false}getStoragePath(){return vt().path}static hasExistingData(){try{let t=new un({projectName:dn});return L.existsSync(t.path)}catch{return  false}}static clearFallbackFile(){try{let t=new un({projectName:dn});L.rmSync(t.path,{force:!0});}catch{}St=null;}};async function pn(){if(G.hasExistingData())return new G;switch(process.platform){case "darwin":return await Le.isAvailable()?new Le:new G;case "linux":return await ye.isAvailable()?new ye:await ye.ensureInstalled()?new ye:new G;case "win32":return await Me.isAvailable()?new Me:new G;default:throw new Error(`Unsupported platform: ${process.platform}`)}}var Us=S("config:credentials"),De="flow-plugins-cli",mn="credentials",fn="token-cache",Et=null;async function Ue(){return Et||(Et=pn()),Et}function hr(){Et=null;}async function F(){let t=await(await Ue()).getSecret(De,mn);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function Ae(e){let{clientId:t,clientSecret:n,tenant:r}=e,o=[!t?.trim()&&"clientId",!n?.trim()&&"clientSecret",!r?.trim()&&"tenant"].filter(Boolean);if(o.length>0)throw Us.error(`missing or empty fields: ${o.join(", ")}`),new Error("Cannot save credentials: clientId, clientSecret, and tenant are required");await(await Ue()).setSecret(De,mn,JSON.stringify(e));}async function wr(){let e=await Ue();await e.deleteSecret(De,mn),await e.deleteSecret(De,fn);}async function xr(){return (await Ue()).getStoragePath()}async function br(e){await(await Ue()).setSecret(De,fn,JSON.stringify(e));}async function gn(){let t=await(await Ue()).getSecret(De,fn);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function Z(){let e=await gn();return e?new Date(e.expiresAt)>new Date:false}var vr=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^0\.0\.0\.0$/,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i];function Ns(e){if(!e.startsWith("[")||!e.endsWith("]"))return null;let n=e.slice(1,-1).match(/^::(?:ffff:)?([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i);if(!n)return null;let r=parseInt(n[1],16),o=parseInt(n[2],16);return `${r>>8&255}.${r&255}.${o>>8&255}.${o&255}`}function Fs(e){if(vr.some(n=>n.test(e)))return  true;let t=Ns(e);return !!(t&&vr.some(n=>n.test(t)))}function Os(e,t){let n=process.env[e]??t;if(!n)throw new Error(`Missing required environment variable: ${e}`);return n}function Tt(e,t){let n=Os(e,t),r;try{r=new URL(n);}catch{throw new Error(`${e} must be a valid URL. Got: "${n}"`)}let o=process.env.NODE_ENV==="development";if(!o&&r.protocol!=="https:")throw new Error(`${e} must be an HTTPS URL. Got protocol: "${r.protocol}"`);if(r.username||r.password)throw new Error(`${e} must not contain embedded credentials (user:pass@host is not allowed)`);if(!o&&Fs(r.hostname))throw new Error(`${e} must not point to a private/loopback address. Got: "${r.hostname}"`);return n}var yn=S("api:auth");function Ks(e){if(!mt.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var Sr={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};async function Vs(e){if(e instanceof HTTPError){let t=e.response.status;yn.error(`HTTP error during authentication [status=${t}]`);let n="";try{let r=await e.response.text(),o=JSON.parse(r);typeof o.error=="string"&&(n=o.error);}catch{}return n&&Sr[n]?new Error(Sr[n]):t===StatusCodes.UNAUTHORIZED||t===StatusCodes.FORBIDDEN||t===StatusCodes.INTERNAL_SERVER_ERROR?new Error("Invalid credentials"):t>=StatusCodes.BAD_REQUEST&&t<StatusCodes.INTERNAL_SERVER_ERROR?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}return e instanceof Error?(yn.debug(`Non-HTTP error during authentication: ${e.message}`),e):(yn.debug("Unknown error during authentication"),new Error("Authentication failed"))}async function We(e){let t=Tt("AUTH_ENGINE_URL","https://flow.ciandt.com/auth-engine-api/v2/api-key/token");Ks(e.tenant);let n;try{n=await _s.post(t,{headers:{FlowTenant:e.tenant},json:{clientSecret:e.clientSecret}}).json();}catch(o){throw await Vs(o)}let r=n.expires_at??new Date(Date.now()+(n.expires_in??3600)*1e3).toISOString();await Ae(e),await br({accessToken:n.access_token,expiresAt:r});}async function Pr(){if(await Z()){let t=await gn();if(!t)throw new Error("Flow CLI not configured. Run: flow auth login");return t.accessToken}throw new Error("Flow CLI not configured or token expired. Run: flow auth login")}var Y=["clientId","clientSecret","tenant"],qs={clientId:"Client ID",clientSecret:"Client Secret",tenant:"Tenant"};function Ir(){let[e,t]=useState({clientId:"",clientSecret:"",tenant:""}),[n,r]=useState("clientId"),[o,s]=useState({}),[i,l]=useState(null),[c,a]=useState(false),{setCredentials:d,setJustAuthenticated:h}=X(),{setFocus:E}=p();useInput((u,m)=>{if(!c){if(m.shift&&m.tab){let y=Y.indexOf(n);y>0&&r(Y[y-1]);}else if(m.tab){let y=Y.indexOf(n);y<Y.length-1&&r(Y[y+1]);}else if(m.return)if(n==="tenant")U();else {let y=Y.indexOf(n);r(Y[y+1]);}}},{isActive:true});let U=async()=>{let u={};for(let m of Y)e[m].trim()||(u[m]="This field is required");if(Object.keys(u).length>0){s(u);let m=Y.find(y=>u[y]);m&&r(m);return}a(true),l(null);try{await We({clientId:e.clientId.trim(),clientSecret:e.clientSecret.trim(),tenant:e.tenant.trim()});let{clientSecret:m,...y}=e;d(y),h(!0),p.getState().setScreen("bundleSetup"),E("bundleList");}catch(m){l(m instanceof Error?m.message:"Authentication failed");}finally{a(false),t(m=>({...m,clientSecret:""}));}},j=u=>m=>{t(y=>({...y,[u]:m})),o[u]&&s(y=>({...y,[u]:void 0}));};return jsxs(Box,{flexDirection:"column",padding:2,children:[jsx(Box,{marginBottom:1,children:jsxs(Text,{bold:true,color:"cyan",children:[er," \u2014 Initial Setup"]})}),jsxs(Box,{marginBottom:1,flexDirection:"column",children:[jsx(Text,{dimColor:true,children:"The data collected during setup is used solely to improve"}),jsx(Text,{dimColor:true,children:"Flow's internal tools and will not be shared externally."})]}),jsx(Box,{flexDirection:"column",children:Y.map(u=>jsx(Box,{marginBottom:1,children:jsx(Yn,{label:qs[u],value:e[u],onChange:j(u),masked:u==="clientSecret",isActive:n===u&&!c,error:o[u]})},u))}),c&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"cyan",children:"Authenticating..."})}),i&&jsx(Box,{marginTop:1,children:jsxs(Text,{color:"red",children:["\u26A0 ",i]})}),jsx(Box,{marginTop:1,children:jsx(Text,{dimColor:true,children:"Tab next field \xB7 Enter confirm"})})]})}var Xs=JSON.parse(readFileSync(join(import.meta.dirname,"..","package.json"),"utf8")),$t=Xs.version;function Ct(){return jsxs(Box,{flexDirection:"column",alignItems:"center",children:[jsx(Ws,{text:"FLOW",font:"block",colors:["white","white"]}),jsx(Box,{marginTop:-1,marginBottom:1,children:jsxs(Text,{dimColor:true,children:["Marketplace \xB7 v",$t]})})]})}var hn={discover:"Discover",installed:"Installed"},Qs=Object.keys(hn);function Rr(){let e=p(t=>t.activeTab);return jsx(Box,{paddingX:1,paddingBottom:1,children:Qs.map(t=>jsx(Box,{marginRight:1,children:t===e?jsx(Text,{bold:true,inverse:true,children:` ${hn[t]} `}):jsx(Text,{dimColor:true,children:` ${hn[t]} `})},t))})}var O=create(e=>({query:"",cursorPosition:0,setQuery:t=>e({query:t}),setCursorPosition:t=>e({cursorPosition:t}),resetQuery:()=>e({query:"",cursorPosition:0})}));function Br(){let e=p(i=>i.focus),t=O(i=>i.query),n=O(i=>i.cursorPosition),r=e==="search",o=t.slice(0,n),s=t.slice(n);return jsxs(Box,{borderStyle:"single",borderTop:false,borderBottom:true,borderLeft:false,borderRight:false,paddingX:1,marginX:1,marginBottom:1,children:[jsx(Text,{color:r?"cyan":"gray",children:"\u03C1 "}),r?jsxs(Fragment,{children:[jsx(Text,{color:"white",children:o}),jsx(Text,{inverse:true,children:s[0]??" "}),jsx(Text,{color:"white",children:s.slice(1)})]}):jsx(Text,{dimColor:true,children:t||"Search..."})]})}function b(e){return e==null?"":e.replace(/\x1b\[[0-9;:<=>?]*[ -/]*[@-~]/g,"").replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g,"").replace(/\x1b./g,"").replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g,"")}function Fe(e){process.stdout.write(w.green(`  \u2713 ${b(e)}
+`));}function A(e){process.stderr.write(w.red(`  \u2717 ${b(e)}
+`));}function P(e){process.stdout.write(w.cyan(`  \u2139 ${b(e)}
+`));}function kt(e,t){let n=t.map(l=>l.map(b)),r=[e,...n],o=e.map((l,c)=>Math.max(...r.map(a=>(a[c]??"").length))),s=o.map(l=>"\u2500".repeat(l)).join("  "),i=l=>l.map((c,a)=>c.padEnd(o[a])).join("  ");process.stdout.write(`
+`),process.stdout.write(`  ${w.bold(i(e))}
+`),process.stdout.write(`  ${w.dim(s)}
+`);for(let l of n)process.stdout.write(`  ${i(l)}
 `);process.stdout.write(`
-`);}function ct(e){process.stdout.write(JSON.stringify(e,null,2)+`
-`);}function ut(e){let t=new Date(e);return isNaN(t.getTime())?"\u2014":new Intl.DateTimeFormat("en-US",{dateStyle:"short"}).format(t)}var qn=ti.memo(function({item:t,isSelected:n}){let r=t.status==="disabled"?"yellow":"green";return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:n?"cyan":"gray",children:n?"\u203A ":"\u25CB "}),jsx(Text,{bold:n,color:n?"cyan":"white",children:t.name}),jsxs(Text,{dimColor:true,children:[t.authorName?` \xB7 ${t.authorName}`:""," \xB7 v",t.version]}),t.status&&jsxs(Text,{color:r,children:[" [",t.status,"]"]}),t.updateAvailable&&jsx(Text,{color:"yellow",children:" [\u2191 update available]"}),t.installedBadge&&jsx(Text,{color:"cyan",children:" [installed]"}),t.installedAt&&jsxs(Text,{dimColor:true,children:[" \xB7 ",ut(t.installedAt)]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:t.description})})]})});function zn({message:e}){return jsx(Box,{paddingX:2,paddingY:1,children:jsx(Text,{dimColor:true,children:e??"No items found."})})}var Vt=5;function Wn({items:e,emptyMessage:t}){let n=d(u=>u.selectedIndex);if(e.length===0)return jsx(zn,{message:t});let r=Math.max(0,n-Math.floor(Vt/2)),o=Math.min(e.length,r+Vt);o===e.length&&(r=Math.max(0,o-Vt));let i=e.slice(r,o),s=r,a=e.length-o;return jsxs(Box,{flexDirection:"column",children:[s>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",s," more above"]})}),i.map((u,c)=>jsx(qn,{item:u,isSelected:r+c===n},u.name)),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",a," more below"]})})]})}var oi={discover:"Discover plugins",installed:"Installed plugins"};function Zn({items:e,tabId:t,emptyMessage:n}){return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{paddingX:1,paddingBottom:1,children:[jsx(Text,{bold:true,children:oi[t]}),jsxs(Text,{dimColor:true,children:[" (",e.length,")"]})]}),jsx(Jn,{}),jsx(Wn,{items:e,emptyMessage:n})]})}function Qn({filteredItems:e,emptyMessage:t}){let n=d(r=>r.activeTab);return jsx(Box,{flexDirection:"column",flexGrow:1,children:n==="discover"?jsx(Zn,{items:e,tabId:"discover",emptyMessage:t},"discover"):jsx(Zn,{items:e,tabId:"installed",emptyMessage:t},"installed")})}var ai={tabs:"Tab: switch tab | \u2191\u2193: navigate | Enter: select | /: search | q: quit",list:"Tab: switch tab | \u2191\u2193: navigate | Enter: select | /: search | q: quit",search:"Type to filter | Esc: cancel search | Enter: confirm",actionMenu:"\u2191\u2193: navigate options | Enter: confirm | Esc: close menu",auth:"Tab: next field | Enter: confirm | Ctrl+C: quit"};function er(){let e=d(t=>t.focus);return jsx(Box,{borderStyle:"single",borderTop:true,borderBottom:false,borderLeft:false,borderRight:false,children:jsx(Text,{dimColor:true,children:ai[e]})})}function tr({message:e,type:t}){return e?jsx(Box,{paddingX:1,children:jsxs(Text,{color:t==="success"?"green":t==="info"?"cyan":"red",children:[t==="success"?"\u2713":t==="info"?"(i)":"\u2717"," ",e]})}):null}function ir({message:e}){return jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(fi,{type:"dots"})}),jsxs(Text,{children:[" ",e]})]})}function lr({message:e,onRetry:t,onBack:n}){return useInput((r,o)=>{r==="r"&&t?t():o.escape&&n&&n();}),jsxs(Box,{flexDirection:"column",paddingX:2,paddingY:1,children:[jsxs(Text,{color:"red",children:["\u2717 ",e]}),t&&jsx(Text,{dimColor:true,children:"Press r to retry"}),n&&jsx(Text,{dimColor:true,children:"Press Escape to go back"})]})}function dt({itemName:e,actions:t,onAction:n,onClose:r}){let o=d(a=>a.focus),[i,s]=useState(0);return useInput((a,u)=>{u.upArrow?s(c=>c>0?c-1:c):u.downArrow?s(c=>c<t.length-1?c+1:c):u.return?n(t[i]):u.escape&&r();},{isActive:o==="actionMenu"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Text,{bold:true,children:e}),jsx(Box,{flexDirection:"column",marginTop:1,children:t.map((a,u)=>jsx(Box,{children:jsxs(Text,{bold:u===i,color:u===i?"cyan":void 0,children:[u===i?"\u203A ":"  ",a]})},u))})]})}function pr({itemName:e,onInstall:t,onClose:n}){return jsx(dt,{itemName:e,actions:["Install","Cancel"],onAction:i=>{i==="Install"?t():n();},onClose:n})}function mr({itemName:e,itemStatus:t,updateAvailable:n,catalogVersion:r,onUninstall:o,onToggleStatus:i,onUpdate:s,onClose:a}){let[u,c]=useState(false),m=d(l=>l.focus);if(useInput((l,p)=>{p.escape||l==="n"?c(false):l==="y"&&o();},{isActive:u&&m==="actionMenu"}),u)return jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Uninstall "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]});let h=t==="enabled"?"Disable":"Enable",T=r?`Update to v${r}`:"Update";return jsx(dt,{itemName:e,actions:n?["Uninstall",h,T,"Cancel"]:["Uninstall",h,"Cancel"],onAction:l=>{l==="Uninstall"?c(true):l===h?i():l.startsWith("Update")?s?.():a();},onClose:a})}async function gr(e,t){let n=q.resolve(t);await B.mkdir(n,{recursive:true});let r=q.join(q.dirname(n),`${randomUUID()}.zip`);try{await B.writeFile(r,e),await Si(r,{dir:n,onEntry(o){if((o.externalFileAttributes>>16&61440)===40960)throw new Error(`Zip Slip (symlink): entry "${o.fileName}" is a symbolic link and was rejected`);let s=q.resolve(n,o.fileName);if(!s.startsWith(n+q.sep)&&s!==n)throw new Error(`Zip Slip detected: entry "${o.fileName}" would escape target directory`)}});try{let o=realpathSync(n);if(!o.startsWith(q.resolve(q.dirname(n))))throw new Error(`Zip Slip (post-extract): resolved path "${o}" is outside expected parent`)}catch(o){if(o.code!=="ENOENT")throw o}}finally{try{await B.unlink(r);}catch{}}}async function Xt(e){await B.rm(e,{recursive:true,force:true});}async function ne(){let e=vn();await B.mkdir(q.dirname(e),{recursive:true});try{await B.writeFile(e,"",{flag:"wx"});}catch(n){if(n.code!=="EEXIST")throw n}return await Pi.lock(e,{stale:1e4,retries:{retries:2,minTimeout:500,maxTimeout:500}})}function Ii(){return {$schema:"https://anthropic.com/claude-code/marketplace.schema.json",name:b,description:"Flow Skills marketplace",owner:{name:"Flow Team",email:"flow@ciandt.com"},plugins:[]}}function yr(){let e=qe();if(!I__default.existsSync(e))return null;try{return JSON.parse(I__default.readFileSync(e,"utf-8"))}catch{return null}}function Ti(){let e=yr();if(e)return e;let t=Ii(),n=qe();return I__default.mkdirSync(q__default.dirname(n),{recursive:true}),Zt(t),t}function Zt(e){let t=qe(),n=`${t}.tmp`;I__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),I__default.renameSync(n,t);}function Ai(){let e=yn(),t={};try{I__default.existsSync(e)&&(t=JSON.parse(I__default.readFileSync(e,"utf-8")));}catch{t={};}if(t[b])return;t[b]={source:{source:"github",repo:"CI-T-HyperX/flow-skills"},installLocation:wn(),lastUpdated:new Date().toISOString()};let n=`${e}.tmp`;I__default.writeFileSync(n,JSON.stringify(t,null,2),"utf-8"),I__default.renameSync(n,e);}function wr(e,t){Ai();let n=Et(e.name);I__default.mkdirSync(q__default.dirname(n),{recursive:true});try{I__default.lstatSync(n),I__default.rmSync(n,{recursive:!0,force:!0});}catch{}I__default.symlinkSync(t,n);let r=Ti();r.plugins.some(i=>i.name===e.name)||(r.plugins.push({name:e.name,description:e.description,version:e.version,author:e.author,source:`./plugins/native/${e.name}`,category:e.category}),Zt(r));}function vr(e){let t=Et(e);try{I__default.rmSync(t,{recursive:!0,force:!0});}catch{}let n=yr();if(!n)return;let r=n.plugins.length;n.plugins=n.plugins.filter(o=>o.name!==e),n.plugins.length!==r&&Zt(n);}var J=y("storage");function xr(){return q__default.join(Q__default.homedir(),".claude","plugins","installed_plugins.json")}function $i(){return q__default.join(Q__default.homedir(),".claude","plugins")}function ki(e){let t=q__default.resolve(e),n=q__default.resolve($i());if(!t.startsWith(n+q__default.sep)&&t!==n)throw new Error(`Security error: installPath '${e}' is outside the plugins directory`)}function br(){return q__default.join(Q__default.homedir(),".claude","settings.json")}function H(){let e=xr();if(!I__default.existsSync(e))return {version:2,plugins:{}};try{return JSON.parse(I__default.readFileSync(e,"utf-8"))}catch{return {version:2,plugins:{}}}}function Fe(e){let t=xr();I__default.mkdirSync(q__default.dirname(t),{recursive:true});let n=`${t}.tmp`;I__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),I__default.renameSync(n,t);}function Ne(e){let t=e.lastIndexOf("@");return t===-1?{name:e,marketplace:""}:{name:e.slice(0,t),marketplace:e.slice(t+1)}}function Ri(e){let t=q__default.join(e,".claude-plugin","plugin.json");if(!I__default.existsSync(t))return null;try{return JSON.parse(I__default.readFileSync(t,"utf-8"))}catch{return null}}function Yt(){let e=br();if(!I__default.existsSync(e))return {};try{return JSON.parse(I__default.readFileSync(e,"utf-8"))}catch{return {}}}function Sr(e){let t=br(),n=`${t}.tmp`;I__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),I__default.renameSync(n,t);}function Ci(){return Yt().enabledPlugins??{}}function Li(e){let t=Yt(),n=t.enabledPlugins;if(!n||!(e in n))return;let{[e]:r,...o}=n;t.enabledPlugins=o,Sr(t);}function en(e,t){let n=Yt(),r=n.enabledPlugins??{};n.enabledPlugins={...r,[e]:t},Sr(n);}function R(){let e=H(),t=Ci();return Object.entries(e.plugins).map(([n,r])=>{let o=r[0],{name:i,marketplace:s}=Ne(n),a=Ri(o.installPath),u=t[n];return {name:i,marketplace:s,version:o.version,installedAt:o.installedAt,installPath:o.installPath,scope:o.scope,description:a?.description,author:a?.author,status:u===false?"disabled":"enabled"}})}async function mt(e){J.debug(`[${e}] Acquiring lock to uninstall`);let t=await ne();try{let{name:n,marketplace:r}=Ne(e),o=H(),i;if(r?(i=`${n}@${r}`,o.plugins[i]||(i=void 0)):i=Object.keys(o.plugins).filter(h=>Ne(h).name===n)[0],!i)throw J.error(`[${n}] Plugin is not installed`),new Error(`Plugin '${n}' is not installed`);J.debug(`[${n}] Resolved key: ${i}`);let s=o.plugins[i][0].installPath;ki(s);let a=q__default.dirname(s);J.debug(`[${n}] Removing directory: ${a}`),I__default.rmSync(a,{recursive:!0,force:!0}),vr(n);let{[i]:u,...c}=o.plugins;Fe({...o,plugins:c}),Li(i),J.debug(`[${n}] Uninstalled successfully`);}finally{await t();}}async function Be(e,t){J.debug(`[${e}] Acquiring lock to set status \u2192 ${t}`);let n=await ne();try{let{name:r}=Ne(e),o=H(),i=Object.keys(o.plugins).filter(s=>Ne(s).name===r);if(i.length===0)throw J.error(`[${r}] Plugin is not installed`),new Error(`Plugin '${r}' is not installed`);J.debug(`[${r}] Resolved key: ${i[0]}`),en(i[0],t==="enabled"),J.debug(`[${r}] Status updated to ${t}`);}finally{await n();}}var z=create(e=>({installedItems:[],setInstalledItems:t=>e({installedItems:t}),loadFromDisk:()=>e({installedItems:R()})}));var M=["discover","installed"];function Pr(e,t,n){if(t.rightArrow||t.tab){let r=M.indexOf(n.activeTab);return [{type:"setTab",tab:M[(r+1)%M.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}if(t.leftArrow){let r=M.indexOf(n.activeTab);return [{type:"setTab",tab:M[(r-1+M.length)%M.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}return t.downArrow?[{type:"setFocus",focus:"list"}]:[]}function Er(e,t,n,r){if(t.upArrow&&n.selectedIndex>0)return [{type:"setSelectedIndex",index:n.selectedIndex-1}];if(t.downArrow&&n.selectedIndex<r-1)return [{type:"setSelectedIndex",index:n.selectedIndex+1}];if(t.tab){let o=M.indexOf(n.activeTab);return [{type:"setTab",tab:M[(o+1)%M.length]},{type:"setSelectedIndex",index:0}]}return t.return?[{type:"setActionMenuOpen",open:true},{type:"setFocus",focus:"actionMenu"}]:e==="/"?[{type:"setFocus",focus:"search"}]:[]}function Ir(e,t){return t.escape?[{type:"setActionMenuOpen",open:false},{type:"setFocus",focus:"list"}]:[]}function Tr(e,t){return t.escape?{actions:[{type:"setFocus",focus:"list"}],queryUpdate:"reset"}:t.return?{actions:[{type:"setFocus",focus:"list"}],queryUpdate:null}:t.backspace||t.delete?{actions:[],queryUpdate:{backspace:true}}:e&&!t.ctrl&&!t.meta?{actions:[],queryUpdate:{append:e}}:{actions:[],queryUpdate:null}}function gt(e){let{setActiveTab:t,setFocus:n,setSelectedIndex:r,setActionMenuOpen:o}=d.getState();for(let i of e)i.type==="setTab"?t(i.tab):i.type==="setFocus"?n(i.focus):i.type==="setSelectedIndex"?r(i.index):i.type==="setActionMenuOpen"&&o(i.open);}function $r({listLength:e}){let t=d(l=>l.focus),n=d(l=>l.selectedIndex),r=d(l=>l.actionMenuOpen),o=d(l=>l.setFocus),i=d(l=>l.setActionMenuOpen),s=F(l=>l.query),a=F(l=>l.setQuery),u=F(l=>l.resetQuery),c=useRef(e);useEffect(()=>{c.current=e;},[e]);let[m,h]=useState("");useEffect(()=>{let l=setTimeout(()=>h(s),300);return ()=>clearTimeout(l)},[s]),useInput((l,p)=>{l==="q"&&process.exit(0);},{isActive:t!=="search"&&t!=="auth"}),useInput((l,p)=>{let{activeTab:f,selectedIndex:w,actionMenuOpen:U}=d.getState();gt(Pr(l,p,{activeTab:f}));},{isActive:t==="tabs"}),useInput((l,p)=>{let{activeTab:f,selectedIndex:w,actionMenuOpen:U}=d.getState();gt(Er(l,p,{activeTab:f,selectedIndex:w},c.current));},{isActive:t==="list"}),useInput((l,p)=>{gt(Ir(l,p));},{isActive:t==="actionMenu"}),useInput((l,p)=>{let f=Tr(l,p),w=f.queryUpdate;gt(f.actions),w==="reset"?(u(),h("")):w!==null&&("backspace"in w?a(F.getState().query.slice(0,-1)):a(F.getState().query+w.append));},{isActive:t==="search"});let T=useCallback(()=>{i(false),o("list");},[i,o]),se=useCallback(l=>{let{setSelectedIndex:p,selectedIndex:f}=d.getState();l===0?p(0):f>=l&&p(l-1);},[]),ae=useCallback(l=>{if(!m)return c.current=l.length,l;let p=m.toLowerCase(),f=l.filter(w=>w.name.toLowerCase().includes(p)||w.description?.toLowerCase().includes(p));return c.current=f.length,f},[m]);return {actionMenuOpen:r,closeMenu:T,selectedIndex:n,clampIndex:se,filteredItems:ae}}function Rr(){let e=d(a=>a.notification),t=d(a=>a.showNotification),n=d(a=>a.clearNotification),r=j(a=>a.justAuthenticated),o=j(a=>a.credentials),i=j(a=>a.setJustAuthenticated);return useEffect(()=>{r&&o&&(t(`Authenticated. Tenant: ${o.tenant}`,"success"),i(false));},[r,o]),useEffect(()=>{if(!e)return;let a=setTimeout(n,3e3);return ()=>clearTimeout(a)},[e]),{notify:(a,u)=>{t(a,u);}}}var Pe=class extends Error{constructor(n,r){super(`${n} v${r} is already installed. Use --force to reinstall.`);this.pluginName=n;this.version=r;this.name="AlreadyInstalledError";}pluginName;version},re=class extends Error{constructor(n,r){super(`${n} is already up to date (v${r})`);this.pluginName=n;this.version=r;this.name="AlreadyUpToDateError";}pluginName;version};function ht(){return Fo.create({prefixUrl:nt("PROMPT_MANAGER_URL","https://flow.ciandt.com/prompt-manager-api/"),hooks:{beforeRequest:[async e=>{let t=await On();e.headers.set("Authorization",`Bearer ${t}`);let n=await L();n?.tenant&&Ve.test(n.tenant)&&e.headers.set("FlowTenant",n.tenant);}]}})}var Ni=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function Cr(e){if(!e||!Ni.test(e))throw new Error(`Invalid plugin name: "${e}". Must be 1-64 chars, lowercase alphanumeric and hyphens only.`)}async function G(){try{let{plugins:e}=await ht().get("v1/plugins/catalog").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow-cli auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching plugin catalog"):new Error(`Failed to fetch plugin catalog: ${e.message}`):e}}async function Ee(e){Cr(e);try{return await ht().get(`v1/plugins/${e}/manifest`).json()}catch(t){throw t instanceof Error?t.message.includes("404")?new Error(`Plugin '${e}' not found in catalog`):t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to fetch plugin manifest: ${t.message}`):t}}async function Lr(e){Cr(e);try{let t=await ht().get(`v1/plugins/${e}/archive`);return Buffer.from(await t.arrayBuffer())}catch(t){throw t instanceof Error?t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to download plugin: ${t.message}`):t}}var Fi=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function Bi(e){if(!Fi.test(e))throw new Error(`Invalid plugin name from manifest: "${e}". Plugin names must be lowercase alphanumeric and hyphens (1-64 chars).`)}var je=y("installer");function _i(e,t){let n=`${e}@${b}`,o=H().plugins[n];if(o&&!t)throw new Pe(e,o[0].version);return {pluginKey:n,alreadyInstalled:o}}async function ji(e,t,n){n&&await Xt(t);try{je.debug(`Extracting to ${t}...`),await gr(e,t);}catch(r){throw await Xt(t),r}}function Ki(e,t,n){let r=H(),o={scope:"user",installPath:t,version:n,installedAt:new Date().toISOString()};r.plugins[e]=[o],Fe(r),en(e,true);}async function Ie(e,t={}){let n=Date.now(),r=null;try{je.debug(`[${e}] Acquiring lock...`),r=await ne();let{pluginKey:o,alreadyInstalled:i}=_i(e,t.force);je.debug(`[${e}] Fetching manifest...`);let s=await Ee(e);Bi(s.name),je.debug(`[${e}] Downloading archive...`);let a=await Lr(e),u=hn(s.name,s.version);await ji(a,u,!!i&&!!t.force),Ki(o,u,s.version),wr(s,u);let c=Date.now()-n;return je.debug(`[${e}] Installed successfully in ${c}ms`),{name:s.name,version:s.version,path:u,duration_ms:c}}finally{r&&await r();}}function W(e,t,n=false){return n?true:!nn.valid(e)||!nn.valid(t)?false:nn.gt(t,e)}var oe=y("updater");function Vi(e){let t=H(),n=`${e}@${b}`,r=t.plugins[n];return !r||r.length===0?null:{pluginKey:n,entry:r[0]}}async function yt(e,t={}){let n=Date.now(),r=null;try{oe.debug(`[${e}] Acquiring lock...`),r=await ne();let o=Vi(e);if(!o)throw oe.error(`[${e}] Plugin is not installed`),new Error(`Plugin "${e}" is not installed`);let{entry:i}=o,s=i.version,a=i.installPath;oe.debug(`[${e}] Fetching manifest...`);let c=(await Ee(e)).version;if(!W(s,c,t.force))throw oe.debug(`[${e}] Already up to date (v${s})`),new re(e,s);oe.info(`[${e}] Updating v${s} \u2192 v${c}...`),await r(),r=null;try{let m=await Ie(e,{force:!0}),h=Date.now()-n;return oe.debug(`[${e}] Updated successfully in ${h}ms`),{name:m.name,previousVersion:s,newVersion:m.version,path:m.path,duration_ms:h}}catch(m){oe.warn(`[${e}] Install failed, rolling back to v${s}...`),r=await ne();let h=H(),T=`${e}@${b}`;throw h.plugins[T]&&(h.plugins[T][0].version=s,h.plugins[T][0].installPath=a,Fe(h),oe.info(`[${e}] Rollback completed, restored to v${s}`)),m}}finally{r&&await r();}}function Mr(){let e=z(s=>s.installedItems),t=z(s=>s.setInstalledItems),n=useCallback(async s=>{await Ie(s.name),z.getState().loadFromDisk();},[]),r=useCallback(async s=>{await mt(s),t(e.filter(a=>a.name!==s));},[e,t]),o=useCallback(async s=>{let u=e.find(c=>c.name===s)?.status==="enabled"?"disabled":"enabled";await Be(s,u),t(e.map(c=>c.name===s?{...c,status:u}:c));},[e,t]),i=useCallback(async s=>{await yt(s),z.getState().loadFromDisk();},[]);return {install:n,uninstall:r,toggle:o,update:i}}function Ur({selectedItem:e,selectedCatalogItem:t,items:n,closeMenu:r,clampIndex:o,notify:i}){let s=d(p=>p.setLoading),{install:a,uninstall:u,toggle:c,update:m}=Mr(),h=async(p,f,w)=>{s(true,p),r();try{await f(),o(n.length),i(w,"success");}catch(U){i(U instanceof Error?U.message:"Something went wrong","error");}finally{s(false);}};return {handleInstall:()=>{e&&t&&h(`Installing ${e.name}...`,()=>a(t),"\u2713 Installed successfully");},handleUninstall:()=>{e&&h(`Uninstalling ${e.name}...`,()=>u(e.name),"\u2713 Uninstalled");},handleToggleStatus:()=>{if(!e)return;let p=e.status==="enabled";h(p?`Disabling ${e.name}...`:`Enabling ${e.name}...`,()=>c(e.name),p?"\u2713 Disabled":"\u2713 Enabled");},handleUpdate:()=>{if(!e)return;let p=t?` to v${t.version}`:"";(async()=>{s(true,`Updating ${e.name}${p}...`),r();try{await m(e.name),o(n.length),i(`\u2713 Updated ${e.name}${p}`,"success");}catch(w){w instanceof re?i(w.message,"info"):i(w instanceof Error?w.message:"Something went wrong","error");}finally{s(false);}})();}}}function Dr(){let[e,t]=useState([]),[n,r]=useState(true),[o,i]=useState(null),s=useCallback(async()=>{r(true),i(null);try{let a=await G();t(a);}catch(a){i(a instanceof Error?a:new Error(String(a))),t([]);}finally{r(false);}},[]);return useEffect(()=>{s();},[s]),{catalog:e,isLoading:n,error:o,refetch:s}}function Or(){return {items:z(t=>t.installedItems)}}var zi=y("catalog");function Gi(e){return {name:e.name,version:e.version,description:e.description,authorName:e.author.name,updateAvailable:e.updateAvailable}}function Wi(e){return {name:e.name,version:e.version,description:e.description,authorName:e.author?.name,status:e.status,updateAvailable:e.updateAvailable,installedAt:e.installedAt}}function Nr(){let e=d(g=>g.activeTab),t=d(g=>g.notification),n=d(g=>g.loading),r=d(g=>g.loadingMessage),o=d(g=>g.catalogError),i=d(g=>g.setCatalogError),s=F(g=>g.query),{catalog:a,isLoading:u,error:c,refetch:m}=Dr(),{items:h}=Or(),T=z(g=>g.loadFromDisk),se=useMemo(()=>new Set(h.map(g=>`${g.name}|${g.author?.name??""}|${g.marketplace}`)),[h]),ae=useMemo(()=>{let g=new Map(a.map(fe=>[fe.name,fe.version]));return h.map(fe=>{let pn=g.get(fe.name),oo=!!pn&&W(fe.version,pn);return {...fe,updateAvailable:oo}})},[h,a]),l=e==="discover"?a.filter(g=>!se.has(`${g.name}|${g.author.name}|${b}`)).map(g=>Gi(g)):ae.map(g=>Wi(g)),{actionMenuOpen:p,closeMenu:f,selectedIndex:w,clampIndex:U,filteredItems:Zr}=$r({listLength:l.length}),Ke=Zr(l),D=Ke[w]??null,un=useMemo(()=>D?a.find(g=>g.name===D.name)??null:null,[a,D]),Qr=e==="installed"?"No plugins installed \u2014 explore the Discover tab!":s?`No plugins found for '${s}'`:"No plugins available in the catalog",{notify:Yr}=Rr(),{handleInstall:eo,handleUninstall:to,handleToggleStatus:no,handleUpdate:ro}=Ur({selectedItem:D,selectedCatalogItem:un,items:l,closeMenu:f,clampIndex:U,notify:Yr});return useEffect(()=>{T();},[]),useEffect(()=>{U(Ke.length);},[Ke.length,U]),useEffect(()=>{c&&(zi.error(`[usePluginCatalog] ${c instanceof Error?c.message:String(c)}`),i("Failed to load catalog"));},[c]),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(_n,{}),jsx(Kn,{}),jsx(Qn,{filteredItems:Ke,emptyMessage:Qr}),(n||u)&&jsx(ir,{message:n?r:"Loading catalog..."}),o&&!u&&e==="discover"&&jsx(lr,{message:o,onRetry:()=>{i(null),m();},onBack:()=>i(null)}),t&&jsx(tr,{message:t.message,type:t.type}),p&&D&&e==="discover"&&jsx(pr,{itemName:D.name,onInstall:eo,onClose:f}),p&&D&&e==="installed"&&jsx(mr,{itemName:D.name,itemStatus:D.status??"enabled",updateAvailable:D.updateAvailable??false,catalogVersion:un?.version,onUninstall:to,onToggleStatus:no,onUpdate:ro,onClose:f}),jsx(er,{})]})}async function Yi(){let e=await L(),t=await O();if(e&&t){let{clientSecret:n,...r}=e;j.getState().setCredentials(r),d.getState().setFocus("list");}else d.getState().setFocus("auth");}function Fr(){let e=j(r=>r.isAuthenticated),[t,n]=useState(false);return useEffect(()=>{Yi().then(()=>n(true));},[]),t?e?jsx(Nr,{}):jsx(Nn,{}):jsx(Fragment,{})}var Z=y("auth");function Br(){C.clearFallbackFile(),Rn();}function vt(e,t={}){return new Promise((n,r)=>{let{masked:o=false,defaultValue:i=""}=t;process.stdout.write(e+i);let s=i,a=m=>{if(m===""){u(),r(new Error("SIGINT"));return}if(m==="\r"||m===`
-`){u(),process.stdout.write(`
-`),n(s);return}if(m==="\x7F"){s.length>0&&(s=s.slice(0,-1),process.stdout.write("\b \b"));return}m.startsWith("\x1B")||(s+=m,process.stdout.write(o?"*".repeat(m.length):m));};function u(){process.stdin.setRawMode(false),process.stdin.removeListener("data",a),process.removeListener("uncaughtException",c),process.removeListener("unhandledRejection",c);}function c(){try{process.stdin.setRawMode(!1);}catch{}}process.on("uncaughtException",c),process.on("unhandledRejection",c),process.stdin.setRawMode(true),process.stdin.resume(),process.stdin.setEncoding("utf8"),process.stdin.on("data",a);})}async function ts(e){Br(),Z.debug(`Authenticating tenant: ${e.tenant}`);try{return await Le(e),Z.info(`Authentication successful for tenant: ${e.tenant}`),process.stdout.write(x.green(`  \u2713 Setup complete. Tenant: ${e.tenant}
+`);}function Bt(e){process.stdout.write(JSON.stringify(e,null,2)+`
+`);}function Lt(e){let t=new Date(e);return isNaN(t.getTime())?"\u2014":new Intl.DateTimeFormat("en-US",{dateStyle:"short"}).format(t)}var Lr=ti.memo(function({item:t,isSelected:n}){let r=t.status==="disabled"?"yellow":"green";return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:n?"cyan":"gray",children:n?"\u203A ":"\u25CB "}),jsx(Text,{bold:n,color:n?"cyan":"white",children:t.name}),jsxs(Text,{dimColor:true,children:[t.authorName?` \xB7 ${t.authorName}`:"",t.version?` \xB7 v${t.version}`:" \xB7 n/a"]}),t.status&&jsxs(Text,{color:r,children:[" [",t.status,"]"]}),t.updateAvailable&&jsx(Text,{color:"yellow",children:" [\u2191 update available]"}),t.installedBadge&&jsx(Text,{color:"cyan",children:" [installed]"}),t.installedAt&&jsxs(Text,{dimColor:true,children:[" \xB7 ",Lt(t.installedAt)]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:t.description})})]})});function Mt({message:e}){return jsx(Box,{paddingX:2,paddingY:1,children:jsx(Text,{dimColor:true,children:e??"No items found."})})}var bn=5;function Ur({items:e,emptyMessage:t}){let n=p(c=>c.selectedIndex);if(e.length===0)return jsx(Mt,{message:t});let r=Math.max(0,n-Math.floor(bn/2)),o=Math.min(e.length,r+bn);o===e.length&&(r=Math.max(0,o-bn));let s=e.slice(r,o),i=r,l=e.length-o;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:i>0?`\u2191 ${i} more above`:" "})}),s.map((c,a)=>jsx(Lr,{item:c,isSelected:r+a===n},c.name)),jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:l>0?`\u2193 ${l} more below`:" "})})]})}var si={discover:"Discover plugins",installed:"Installed plugins"};function Fr({items:e,tabId:t,emptyMessage:n}){return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{paddingX:1,paddingBottom:1,children:[jsx(Text,{bold:true,children:si[t]}),jsxs(Text,{dimColor:true,children:[" (",e.length,")"]})]}),jsx(Br,{}),jsx(Ur,{items:e,emptyMessage:n})]})}function Or({filteredItems:e,emptyMessage:t}){let n=p(r=>r.activeTab);return jsx(Box,{flexDirection:"column",flexGrow:1,children:n==="discover"?jsx(Fr,{items:e,tabId:"discover",emptyMessage:t},"discover"):jsx(Fr,{items:e,tabId:"installed",emptyMessage:t},"installed")})}var li={tabs:"\u2190\u2192: switch tab | \u2193: navigate | Enter: select | Ctrl+C Ctrl+C: quit",list:"\u2190\u2192/Tab: switch tab | \u2191\u2193: navigate | Enter: select | Type to search | Ctrl+C Ctrl+C: quit",search:"Type to filter | \u2193/Esc: exit search | Enter: confirm",actionMenu:"\u2191\u2193: navigate options | Enter: confirm | Esc: close menu",auth:"Tab: next field | Enter: confirm | Ctrl+C Ctrl+C: quit",bundleList:"\u2191\u2193: navigate | Enter: select bundle | Esc: skip",bundleDetail:"\u2191\u2193: navigate | Enter: confirm & install | Esc: back",installProgress:"\u2191\u2193: navigate | Enter: select"};function Dt(){let e=p(t=>t.focus);return jsx(Box,{borderStyle:"single",borderTop:true,borderBottom:false,borderLeft:false,borderRight:false,children:jsx(Text,{dimColor:true,children:li[e]})})}function jr({message:e,type:t}){return e?jsx(Box,{paddingX:1,children:jsxs(Text,{color:t==="success"?"green":t==="info"?"cyan":"red",children:[t==="success"?"\u2713":t==="info"?"(i)":"\u2717"," ",e]})}):null}function Ut({message:e}){return jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(fi,{type:"dots"})}),jsxs(Text,{children:[" ",e]})]})}function Nt({message:e,onRetry:t,onBack:n}){return useInput((r,o)=>{r==="r"&&o.ctrl&&t?t():o.escape&&n&&n();}),jsxs(Box,{flexDirection:"column",paddingX:2,paddingY:1,children:[jsxs(Text,{color:"red",children:["\u2717 ",e]}),t&&jsx(Text,{dimColor:true,children:"Press Ctrl+R to retry"}),n&&jsx(Text,{dimColor:true,children:"Press Escape to go back"})]})}function Ft({itemName:e,actions:t,onAction:n,onClose:r}){let o=p(l=>l.focus),[s,i]=useState(0);return useInput((l,c)=>{c.upArrow?i(a=>a>0?a-1:a):c.downArrow?i(a=>a<t.length-1?a+1:a):c.return?n(t[s]):c.escape&&r();},{isActive:o==="actionMenu"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsx(Box,{flexDirection:"column",marginTop:1,children:t.map((l,c)=>jsx(Box,{children:jsxs(Text,{bold:c===s,color:c===s?"cyan":void 0,children:[c===s?"\u203A ":"  ",l]})},c))})]})}function Gr({itemName:e,onInstall:t,onClose:n}){return jsx(Ft,{itemName:e,actions:["Install","Cancel"],onAction:s=>{s==="Install"?t():n();},onClose:n})}function Zr({itemName:e,itemStatus:t,updateAvailable:n,catalogVersion:r,onUninstall:o,onToggleStatus:s,onUpdate:i,onClose:l}){let[c,a]=useState(false),d=p(u=>u.focus);if(useInput((u,m)=>{m.escape||u==="n"?a(false):u==="y"&&o();},{isActive:c&&d==="actionMenu"}),c)return jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Uninstall "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]});let h=t==="enabled"?"Disable":"Enable",E=r?`Update to v${r}`:"Update";return jsx(Ft,{itemName:e,actions:n?["Uninstall",h,E,"Cancel"]:["Uninstall",h,"Cancel"],onAction:u=>{u==="Uninstall"?a(true):u===h?s():u.startsWith("Update")?i?.():l();},onClose:l})}async function Yr(e,t){let n=le.resolve(t);await ee.mkdir(n,{recursive:true});let r=le.join(le.dirname(n),`${randomUUID()}.zip`);try{await ee.writeFile(r,e),await Pi(r,{dir:n,onEntry(o){if((o.externalFileAttributes>>16&61440)===40960)throw new Error(`Zip Slip (symlink): entry "${o.fileName}" is a symbolic link and was rejected`);let i=le.resolve(n,o.fileName);if(!i.startsWith(n+le.sep)&&i!==n)throw new Error(`Zip Slip detected: entry "${o.fileName}" would escape target directory`)}});try{let o=realpathSync(n);if(!o.startsWith(le.resolve(le.dirname(n))))throw new Error(`Zip Slip (post-extract): resolved path "${o}" is outside expected parent`)}catch(o){if(o.code!=="ENOENT")throw o}}finally{try{await ee.unlink(r);}catch{}}}async function Tn(e){await ee.rm(e,{recursive:true,force:true});}async function xe(){let e=ir();await ee.mkdir(le.dirname(e),{recursive:true});try{await ee.writeFile(e,"",{flag:"wx"});}catch(n){if(n.code!=="EEXIST")throw n}return await Ii.lock(e,{stale:1e4,retries:{retries:2,minTimeout:500,maxTimeout:500}})}function Ti(){return {$schema:"https://anthropic.com/claude-code/marketplace.schema.json",name:T,description:"Flow Skills marketplace",owner:{name:"Flow Team",email:"flow@ciandt.com"},plugins:[]}}function to(){let e=gt();if(!L__default.existsSync(e))return null;try{return JSON.parse(L__default.readFileSync(e,"utf-8"))}catch{return null}}function Ai(){let e=to();if(e)return e;let t=Ti(),n=gt();return L__default.mkdirSync(le__default.dirname(n),{recursive:true}),An(t),t}function An(e){let t=gt(),n=`${t}.tmp`;L__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),L__default.renameSync(n,t);}function $i(){let e=or(),t={};try{L__default.existsSync(e)&&(t=JSON.parse(L__default.readFileSync(e,"utf-8")));}catch{t={};}if(t[T])return;t[T]={source:{source:"github",repo:"CI-T-HyperX/flow-skills"},installLocation:sr(),lastUpdated:new Date().toISOString()};let n=`${e}.tmp`;L__default.writeFileSync(n,JSON.stringify(t,null,2),"utf-8"),L__default.renameSync(n,e);}function no(e,t){$i();let n=rn(e.name);L__default.mkdirSync(le__default.dirname(n),{recursive:true});try{L__default.lstatSync(n),L__default.rmSync(n,{recursive:!0,force:!0});}catch{}L__default.symlinkSync(t,n);let r=Ai();r.plugins.some(s=>s.name===e.name)||(r.plugins.push({name:e.name,description:e.description,version:e.version,author:e.author,source:`./plugins/native/${e.name}`,category:e.category}),An(r));}function ro(e){let t=rn(e);try{L__default.rmSync(t,{recursive:!0,force:!0});}catch{}let n=to();if(!n)return;let r=n.plugins.length;n.plugins=n.plugins.filter(o=>o.name!==e),n.plugins.length!==r&&An(n);}var ae=S("storage");function oo(){return le__default.join(fe__default.homedir(),".claude","plugins","installed_plugins.json")}function Ci(){return le__default.join(fe__default.homedir(),".claude","plugins")}function Ri(e){let t=le__default.resolve(e),n=le__default.resolve(Ci());if(!t.startsWith(n+le__default.sep)&&t!==n)throw new Error(`Security error: installPath '${e}' is outside the plugins directory`)}function so(){return le__default.join(fe__default.homedir(),".claude","settings.json")}function ce(){let e=oo();if(!L__default.existsSync(e))return {version:2,plugins:{}};try{return JSON.parse(L__default.readFileSync(e,"utf-8"))}catch{return {version:2,plugins:{}}}}function ot(e){let t=oo();L__default.mkdirSync(le__default.dirname(t),{recursive:true});let n=`${t}.tmp`;L__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),L__default.renameSync(n,t);}function rt(e){let t=e.lastIndexOf("@");return t===-1?{name:e,marketplace:""}:{name:e.slice(0,t),marketplace:e.slice(t+1)}}function ki(e){let t=le__default.join(e,".claude-plugin","plugin.json");if(!L__default.existsSync(t))return null;try{return JSON.parse(L__default.readFileSync(t,"utf-8"))}catch{return null}}function Cn(){let e=so();if(!L__default.existsSync(e))return {};try{return JSON.parse(L__default.readFileSync(e,"utf-8"))}catch{return {}}}function io(e){let t=so(),n=`${t}.tmp`;L__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),L__default.renameSync(n,t);}function Bi(){return Cn().enabledPlugins??{}}function Li(e){let t=Cn(),n=t.enabledPlugins;if(!n||!(e in n))return;let{[e]:r,...o}=n;t.enabledPlugins=o,io(t);}function Rn(e,t){let n=Cn(),r=n.enabledPlugins??{};n.enabledPlugins={...r,[e]:t},io(n);}function q(){let e=ce(),t=Bi();return Object.entries(e.plugins).map(([n,r])=>{let o=r[0],{name:s,marketplace:i}=rt(n),l=ki(o.installPath),c=t[n];return {name:s,marketplace:i,version:o.version&&o.version!=="unknown"?o.version:void 0,installedAt:o.installedAt,installPath:o.installPath,scope:o.scope,description:l?.description,author:l?.author,status:c===false?"disabled":"enabled"}})}async function _t(e){ae.debug(`[${e}] Acquiring lock to uninstall`);let t=await xe();try{let{name:n,marketplace:r}=rt(e),o=ce(),s;if(r?(s=`${n}@${r}`,o.plugins[s]||(s=void 0)):s=Object.keys(o.plugins).filter(h=>rt(h).name===n)[0],!s)throw ae.error(`[${n}] Plugin is not installed`),new Error(`Plugin '${n}' is not installed`);ae.debug(`[${n}] Resolved key: ${s}`);let i=o.plugins[s][0].installPath;Ri(i);let l=le__default.dirname(i);ae.debug(`[${n}] Removing directory: ${l}`),L__default.rmSync(l,{recursive:!0,force:!0}),ro(n);let{[s]:c,...a}=o.plugins;ot({...o,plugins:a}),Li(s),ae.debug(`[${n}] Uninstalled successfully`);}finally{await t();}}async function st(e,t){ae.debug(`[${e}] Acquiring lock to set status \u2192 ${t}`);let n=await xe();try{let{name:r}=rt(e),o=ce(),s=Object.keys(o.plugins).filter(i=>rt(i).name===r);if(s.length===0)throw ae.error(`[${r}] Plugin is not installed`),new Error(`Plugin '${r}' is not installed`);ae.debug(`[${r}] Resolved key: ${s[0]}`),Rn(s[0],t==="enabled"),ae.debug(`[${r}] Status updated to ${t}`);}finally{await n();}}var M=create(e=>({installedItems:[],setInstalledItems:t=>e({installedItems:t}),loadFromDisk:()=>e({installedItems:q()})}));var $=["discover","installed"];function ao(e,t,n){if(t.rightArrow||t.tab){let r=$.indexOf(n.activeTab);return [{type:"setTab",tab:$[(r+1)%$.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}if(t.leftArrow){let r=$.indexOf(n.activeTab);return [{type:"setTab",tab:$[(r-1+$.length)%$.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}return t.downArrow?[{type:"setFocus",focus:"list"}]:[]}function lo(e,t,n,r){if(t.upArrow)return n.selectedIndex===0?[{type:"setSelectedIndex",index:-1},{type:"setFocus",focus:"search"}]:[{type:"setSelectedIndex",index:n.selectedIndex-1}];if(t.downArrow&&n.selectedIndex<r-1)return [{type:"setSelectedIndex",index:n.selectedIndex+1}];if(t.leftArrow){let o=$.indexOf(n.activeTab);return [{type:"setTab",tab:$[(o-1+$.length)%$.length]},{type:"setSelectedIndex",index:0}]}if(t.rightArrow){let o=$.indexOf(n.activeTab);return [{type:"setTab",tab:$[(o+1)%$.length]},{type:"setSelectedIndex",index:0}]}if(t.tab){let o=$.indexOf(n.activeTab);return [{type:"setTab",tab:$[(o+1)%$.length]},{type:"setSelectedIndex",index:0}]}return t.return?[{type:"setActionMenuOpen",open:true},{type:"setFocus",focus:"actionMenu"}]:e==="/"?[{type:"setFocus",focus:"search"}]:e&&e!==" "&&!t.ctrl&&!t.meta&&!t.escape?[{type:"setSelectedIndex",index:-1},{type:"setFocus",focus:"search"},{type:"searchAppend",char:e}]:[]}function co(e,t){return t.escape?[{type:"setActionMenuOpen",open:false},{type:"setFocus",focus:"list"}]:[]}function uo(e,t,n){return t.escape?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:"reset"}:t.downArrow?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:null}:t.leftArrow?{actions:[],queryUpdate:{cursorMove:-1}}:t.rightArrow?{actions:[],queryUpdate:{cursorMove:1}}:t.return?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:null}:t.backspace?n.length===0?{actions:[{type:"setFocus",focus:"list"},{type:"setSelectedIndex",index:0}],queryUpdate:null}:{actions:[],queryUpdate:{backspace:true}}:e&&!t.ctrl&&!t.meta?{actions:[],queryUpdate:{append:e}}:{actions:[],queryUpdate:null}}function Kt(e){let{setActiveTab:t,setFocus:n,setSelectedIndex:r,setActionMenuOpen:o}=p.getState();for(let s of e)if(s.type==="setTab")t(s.tab);else if(s.type==="setFocus")n(s.focus);else if(s.type==="setSelectedIndex")r(s.index);else if(s.type==="setActionMenuOpen")o(s.open);else if(s.type==="searchAppend"){let{setQuery:i,query:l,setCursorPosition:c,cursorPosition:a}=O.getState();i(l.slice(0,a)+s.char+l.slice(a)),c(a+s.char.length);}}function po({listLength:e}){let t=p(u=>u.focus),n=p(u=>u.selectedIndex),r=p(u=>u.actionMenuOpen),o=p(u=>u.setFocus),s=p(u=>u.setActionMenuOpen),i=O(u=>u.query),l=O(u=>u.setQuery),c=O(u=>u.resetQuery),a=useRef(e);useEffect(()=>{a.current=e;},[e]),useEffect(()=>{if(t==="search"){let{query:u,setCursorPosition:m}=O.getState();m(u.length);}},[t]);let[d,h]=useState("");useEffect(()=>{let u=setTimeout(()=>h(i),300);return ()=>clearTimeout(u)},[i]),useInput((u,m)=>{let{activeTab:y,selectedIndex:v,actionMenuOpen:I}=p.getState();Kt(ao(u,m,{activeTab:y}));},{isActive:t==="tabs"}),useInput((u,m)=>{let{activeTab:y,selectedIndex:v,actionMenuOpen:I}=p.getState();Kt(lo(u,m,{activeTab:y,selectedIndex:v},a.current));},{isActive:t==="list"}),useInput((u,m)=>{Kt(co(u,m));},{isActive:t==="actionMenu"}),useInput((u,m)=>{let y=uo(u,m,O.getState().query),v=y.queryUpdate;if(Kt(y.actions),v==="reset")c(),h("");else if(v!==null){let{query:I,cursorPosition:B,setCursorPosition:z}=O.getState();if("backspace"in v)B>0&&(l(I.slice(0,B-1)+I.slice(B)),z(B-1));else if("append"in v)l(I.slice(0,B)+v.append+I.slice(B)),z(B+v.append.length);else if("cursorMove"in v){let R=B+v.cursorMove;R>=0&&R<=I.length&&z(R);}}},{isActive:t==="search"});let E=useCallback(()=>{s(false),o("list");},[s,o]),U=useCallback(u=>{let{setSelectedIndex:m,selectedIndex:y}=p.getState();u===0?m(0):y>=u&&m(u-1);},[]),j=useCallback(u=>{if(!d)return a.current=u.length,u;let m=d.toLowerCase(),y=u.filter(v=>v.name.toLowerCase().includes(m)||v.description?.toLowerCase().includes(m));return a.current=y.length,y},[d]);return {actionMenuOpen:r,closeMenu:E,selectedIndex:n,clampIndex:U,filteredItems:j}}function fo(){let e=p(l=>l.notification),t=p(l=>l.showNotification),n=p(l=>l.clearNotification),r=X(l=>l.justAuthenticated),o=X(l=>l.credentials),s=X(l=>l.setJustAuthenticated);return useEffect(()=>{r&&o&&(t(`Authenticated. Tenant: ${o.tenant}`,"success"),s(false));},[r,o]),useEffect(()=>{if(!e)return;let l=setTimeout(n,3e3);return ()=>clearTimeout(l)},[e]),{notify:(l,c)=>{t(l,c);}}}var te=class extends Error{constructor(n,r){super(`${n} v${r} is already installed. Use --force to reinstall.`);this.pluginName=n;this.version=r;this.name="AlreadyInstalledError";}},be=class extends Error{constructor(n,r){super(`${n} is already up to date (v${r})`);this.pluginName=n;this.version=r;this.name="AlreadyUpToDateError";}};function it(){return _s.create({prefix:Tt("PROMPT_MANAGER_URL","https://flow.ciandt.com/prompt-manager-api/"),hooks:{beforeRequest:[async({request:e})=>{let t=await Pr();e.headers.set("Authorization",`Bearer ${t}`);let n=await F();n?.tenant&&mt.test(n.tenant)&&e.headers.set("FlowTenant",n.tenant);}]}})}var Fi=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function go(e){if(!e||!Fi.test(e))throw new Error(`Invalid plugin name: "${e}". Must be 1-64 chars, lowercase alphanumeric and hyphens only.`)}async function ue(){try{let{plugins:e}=await it().get("v1/plugins/catalog").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching plugin catalog"):new Error(`Failed to fetch plugin catalog: ${e.message}`):e}}async function Ke(e){go(e);try{return await it().get(`v1/plugins/${e}/manifest`).json()}catch(t){throw t instanceof Error?t.message.includes("404")?new Error(`Plugin '${e}' not found in catalog`):t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to fetch plugin manifest: ${t.message}`):t}}async function yo(e){go(e);try{let t=await it().get(`v1/plugins/${e}/archive`);return Buffer.from(await t.arrayBuffer())}catch(t){throw t instanceof Error?t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to download plugin: ${t.message}`):t}}async function Vt(){try{let{profiles:e}=await it().get("v1/plugins/profiles").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching bundles"):new Error(`Failed to fetch bundles: ${e.message}`):e}}var Oi=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function _i(e){if(!Oi.test(e))throw new Error(`Invalid plugin name from manifest: "${e}". Plugin names must be lowercase alphanumeric and hyphens (1-64 chars).`)}var at=S("installer");function ji(e,t){let n=`${e}@${T}`,o=ce().plugins[n];if(o&&!t)throw new te(e,o[0].version??"unknown");return {pluginKey:n,alreadyInstalled:o}}async function Ki(e,t,n){n&&await Tn(t);try{at.debug(`Extracting to ${t}...`),await Yr(e,t);}catch(r){throw await Tn(t),r}}function Vi(e,t,n){let r=ce(),o={scope:"user",installPath:t,version:n,installedAt:new Date().toISOString()};r.plugins[e]=[o],ot(r),Rn(e,true);}async function ne(e,t={}){let n=Date.now(),r=null;try{at.debug(`[${e}] Acquiring lock...`),r=await xe();let{pluginKey:o,alreadyInstalled:s}=ji(e,t.force);at.debug(`[${e}] Fetching manifest...`);let i=await Ke(e);_i(i.name),at.debug(`[${e}] Downloading archive...`);let l=await yo(e),c=rr(i.name,i.version);await Ki(l,c,!!s&&!!t.force),Vi(o,c,i.version),no(i,c);let a=Date.now()-n;return at.debug(`[${e}] Installed successfully in ${a}ms`),{name:i.name,version:i.version,path:c,duration_ms:a}}finally{r&&await r();}}function de(e,t,n=false){return n?true:!Ln.valid(e)||!Ln.valid(t)?false:Ln.gt(t,e)}var ve=S("updater");function Ji(e){let t=ce(),n=`${e}@${T}`,r=t.plugins[n];return !r||r.length===0?null:{pluginKey:n,entry:r[0]}}async function Jt(e,t={}){let n=Date.now(),r=null;try{ve.debug(`[${e}] Acquiring lock...`),r=await xe();let o=Ji(e);if(!o)throw ve.error(`[${e}] Plugin is not installed`),new Error(`Plugin "${e}" is not installed`);let{entry:s}=o,i=s.version,l=s.installPath;ve.debug(`[${e}] Fetching manifest...`);let a=(await Ke(e)).version;if(!i||!de(i,a,t.force))throw ve.debug(`[${e}] Already up to date (v${i??"n/a"})`),new be(e,i??"unknown");ve.info(`[${e}] Updating v${i} \u2192 v${a}...`),await r(),r=null;try{let d=await ne(e,{force:!0}),h=Date.now()-n;return ve.debug(`[${e}] Updated successfully in ${h}ms`),{name:d.name,previousVersion:i,newVersion:d.version,path:d.path,duration_ms:h}}catch(d){ve.warn(`[${e}] Install failed, rolling back to v${i}...`),r=await xe();let h=ce(),E=`${e}@${T}`;throw h.plugins[E]&&(h.plugins[E][0].version=i,h.plugins[E][0].installPath=l,ot(h),ve.info(`[${e}] Rollback completed, restored to v${i}`)),d}}finally{r&&await r();}}function ho(){let e=M(i=>i.installedItems),t=M(i=>i.setInstalledItems),n=useCallback(async i=>{await ne(i.name),M.getState().loadFromDisk();},[]),r=useCallback(async i=>{await _t(i),t(e.filter(l=>l.name!==i));},[e,t]),o=useCallback(async i=>{let c=e.find(a=>a.name===i)?.status==="enabled"?"disabled":"enabled";await st(i,c),t(e.map(a=>a.name===i?{...a,status:c}:a));},[e,t]),s=useCallback(async i=>{await Jt(i),M.getState().loadFromDisk();},[]);return {install:n,uninstall:r,toggle:o,update:s}}function wo({selectedItem:e,selectedCatalogItem:t,items:n,closeMenu:r,clampIndex:o,notify:s}){let i=p(m=>m.setLoading),{install:l,uninstall:c,toggle:a,update:d}=ho(),h=async(m,y,v)=>{i(true,m),r();try{await y(),o(n.length),s(v,"success");}catch(I){s(I instanceof Error?I.message:"Something went wrong","error");}finally{i(false);}};return {handleInstall:()=>{e&&t&&h(`Installing ${e.name}...`,()=>l(t),"\u2713 Installed successfully");},handleUninstall:()=>{e&&h(`Uninstalling ${e.name}...`,()=>c(e.name),"\u2713 Uninstalled");},handleToggleStatus:()=>{if(!e)return;let m=e.status==="enabled";h(m?`Disabling ${e.name}...`:`Enabling ${e.name}...`,()=>a(e.name),m?"\u2713 Disabled":"\u2713 Enabled");},handleUpdate:()=>{if(!e)return;let m=t?` to v${t.version}`:"";(async()=>{i(true,`Updating ${e.name}${m}...`),r();try{await d(e.name),o(n.length),s(`\u2713 Updated ${e.name}${m}`,"success");}catch(v){v instanceof be?s(v.message,"info"):s(v instanceof Error?v.message:"Something went wrong","error");}finally{i(false);}})();}}}function xo(){let[e,t]=useState([]),[n,r]=useState(true),[o,s]=useState(null),i=useCallback(async()=>{r(true),s(null);try{let l=await ue();t(l);}catch(l){s(l instanceof Error?l:new Error(String(l))),t([]);}finally{r(false);}},[]);return useEffect(()=>{i();},[i]),{catalog:e,isLoading:n,error:o,refetch:i}}function bo(){return {items:M(t=>t.installedItems)}}var Xi=S("catalog");function Gi(e){return {name:e.name,version:e.version,description:e.description,authorName:e.author.name,updateAvailable:e.updateAvailable}}function Wi(e){return {name:e.name,version:e.version,description:e.description,authorName:e.author?.name,status:e.status,updateAvailable:e.updateAvailable,installedAt:e.installedAt}}function vo(){let e=p(x=>x.activeTab),t=p(x=>x.notification),n=p(x=>x.loading),r=p(x=>x.loadingMessage),o=p(x=>x.catalogError),s=p(x=>x.setCatalogError),i=O(x=>x.query),{catalog:l,isLoading:c,error:a,refetch:d}=xo(),{items:h}=bo(),E=M(x=>x.loadFromDisk),U=useMemo(()=>new Set(h.map(x=>`${x.name}|${x.author?.name??""}|${x.marketplace}`)),[h]),j=useMemo(()=>{let x=new Map(l.map(Ie=>[Ie.name,Ie.version]));return h.map(Ie=>{let Wn=x.get(Ie.name),rs=!!Wn&&!!Ie.version&&de(Ie.version,Wn);return {...Ie,updateAvailable:rs}})},[h,l]),u=e==="discover"?l.filter(x=>!U.has(`${x.name}|${x.author.name}|${T}`)).map(x=>Gi(x)):j.map(x=>Wi(x)),{actionMenuOpen:m,closeMenu:y,selectedIndex:v,clampIndex:I,filteredItems:B}=po({listLength:u.length}),z=B(u),R=z[v]??null,pt=useMemo(()=>R?l.find(x=>x.name===R.name)??null:null,[l,R]),Yt=e==="installed"?"No plugins installed \u2014 explore the Discover tab!":i?`No plugins found for '${i}'`:"No plugins available in the catalog",{notify:f}=fo(),{handleInstall:N,handleUninstall:Q,handleToggleStatus:se,handleUpdate:ns}=wo({selectedItem:R,selectedCatalogItem:pt,items:u,closeMenu:y,clampIndex:I,notify:f});return useEffect(()=>{E();},[]),useEffect(()=>{I(z.length);},[z.length,I]),useEffect(()=>{a&&(Xi.error(`[usePluginCatalog] ${a instanceof Error?a.message:String(a)}`),s("Failed to load catalog"));},[a]),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Ct,{}),jsx(Rr,{}),jsx(Or,{filteredItems:z,emptyMessage:Yt}),(n||c)&&jsx(Ut,{message:n?r:"Loading catalog..."}),o&&!c&&e==="discover"&&jsx(Nt,{message:o,onRetry:()=>{s(null),d();},onBack:()=>s(null)}),t&&jsx(jr,{message:t.message,type:t.type}),m&&R&&e==="discover"&&jsx(Gr,{itemName:R.name,onInstall:N,onClose:y}),m&&R&&e==="installed"&&jsx(Zr,{itemName:R.name,itemStatus:R.status??"enabled",updateAvailable:R.updateAvailable??false,catalogVersion:pt?.version,onUninstall:Q,onToggleStatus:se,onUpdate:ns,onClose:y}),jsx(Dt,{})]})}var g=create((e,t)=>({bundles:[],selectedBundleIndex:0,selectedBundle:null,plugins:[],pluginCursorIndex:0,step:"bundleList",isLoadingBundles:false,bundlesError:null,successCount:0,failedCount:0,summaryActionIndex:0,setBundles:n=>e({bundles:n}),setSelectedBundleIndex:n=>e({selectedBundleIndex:n}),selectBundle:n=>{let r=new Set(M.getState().installedItems.map(o=>o.name));e({selectedBundle:n,plugins:n.plugins.map(o=>({name:o,selected:true,status:r.has(o)?"success":"pending",installed:r.has(o)})),pluginCursorIndex:0,step:"bundleDetail"});},setPluginCursorIndex:n=>e({pluginCursorIndex:n}),setStep:n=>e({step:n}),setPluginStatus:(n,r,o)=>{let s=t().plugins.map(i=>i.name===n?{...i,status:r,error:o}:i);e({plugins:s});},setIsLoadingBundles:n=>e({isLoadingBundles:n}),setBundlesError:n=>e({bundlesError:n}),setSummaryActionIndex:n=>e({summaryActionIndex:n}),computeSummary:()=>{let r=t().plugins.filter(o=>o.selected);e({successCount:r.filter(o=>o.status==="success").length,failedCount:r.filter(o=>o.status==="failed").length});},resetForRetry:()=>{let n=t().plugins.map(r=>r.status==="failed"?{...r,status:"pending",error:void 0}:r);e({plugins:n,step:"installing"});},goBackToList:()=>e({selectedBundle:null,plugins:[],pluginCursorIndex:0,step:"bundleList"})}));var ea=3;function Po(){let e=g(c=>c.setBundles),t=g(c=>c.setIsLoadingBundles),n=g(c=>c.setBundlesError),r=g(c=>c.setPluginStatus),o=g(c=>c.setStep),s=g(c=>c.computeSummary),i=useCallback(async()=>{t(true),n(null);try{let c=await Vt();e(c);}catch(c){n(c instanceof Error?c.message:String(c));}finally{t(false);}},[t,n,e]);useEffect(()=>{M.getState().loadFromDisk(),i();},[i]);let l=useCallback(async()=>{let c=g.getState().plugins.filter(a=>a.selected&&a.status==="pending");for(let a of c){r(a.name,"installing");let d="",h=false;for(let E=1;E<=ea;E++)try{await ne(a.name),r(a.name,"success"),h=!0;break}catch(U){if(U instanceof te){r(a.name,"success"),h=true;break}d=U instanceof Error?U.message:"Unknown error";}h||r(a.name,"failed",d);}M.getState().loadFromDisk(),s(),o("summary");},[r,s,o]);return {loadBundles:i,installSelected:l}}var lt={cursorDelta:0,confirm:false,back:false};function Io(e,t){return t.upArrow?{...lt,cursorDelta:-1}:t.downArrow?{...lt,cursorDelta:1}:t.escape?{...lt,back:true}:t.return?{...lt,confirm:true}:lt}var ta={cursorDelta:0,select:false};function Eo(e,t){return t.upArrow?{cursorDelta:-1,select:false}:t.downArrow?{cursorDelta:1,select:false}:t.return?{cursorDelta:0,select:true}:ta}var To=ti.memo(function({bundle:t,isSelected:n}){return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:n?"cyan":"gray",children:n?"\u203A ":"\u25CB "}),jsx(Text,{bold:n,color:n?"cyan":"white",children:t.name}),jsxs(Text,{dimColor:true,children:[" \xB7 ",t.plugins.length," ",t.plugins.length===1?"plugin":"plugins"]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:t.description})})]})});var _n=5;function Ao({onRetry:e}){let t=g(d=>d.bundles),n=g(d=>d.selectedBundleIndex),r=g(d=>d.isLoadingBundles),o=g(d=>d.bundlesError);if(r)return jsx(Ut,{message:"Loading bundles..."});if(o)return jsx(Nt,{message:o,onRetry:e,onBack:e});if(t.length===0)return jsx(Mt,{message:"No bundles available."});let s=Math.max(0,n-Math.floor(_n/2)),i=Math.min(t.length,s+_n);i===t.length&&(s=Math.max(0,i-_n));let l=t.slice(s,i),c=s,a=t.length-i;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Select a bundle to get started"})}),c>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",c," more above"]})}),l.map((d,h)=>jsx(To,{bundle:d,isSelected:s+h===n},d.slug)),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",a," more below"]})})]})}var Co=ti.memo(function({plugin:t,isCursor:n}){return jsxs(Box,{children:[jsx(Text,{color:n?"cyan":"gray",children:n?"\u203A ":"  "}),jsx(Text,{color:"cyan",children:"\u2022"}),jsxs(Text,{bold:n,color:n?"cyan":"white",children:[" ",t.name]}),t.installed&&jsx(Text,{color:"green",children:" (installed)"})]})});var Vn=8;function Ro(){let e=g(a=>a.selectedBundle),t=g(a=>a.plugins),n=g(a=>a.pluginCursorIndex);if(!e)return jsx(Text,{dimColor:true,children:"No bundle selected."});let r=t.filter(a=>a.installed).length,o=Math.max(0,n-Math.floor(Vn/2)),s=Math.min(t.length,o+Vn);s===t.length&&(o=Math.max(0,s-Vn));let i=t.slice(o,s),l=o,c=t.length-s;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:[jsx(Text,{bold:true,color:"cyan",children:e.name}),jsx(Text,{dimColor:true,children:e.description})]}),jsx(Box,{paddingX:1,paddingBottom:1,children:jsxs(Text,{children:[t.length," plugins to install",r>0&&` \xB7 ${r} already installed`]})}),l>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",l," more above"]})}),i.map((a,d)=>jsx(Co,{plugin:a,isCursor:o+d===n},a.name)),c>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",c," more below"]})})]})}var la=["Retry failed","Continue anyway"];function ko({name:e,status:t,error:n}){return t==="installing"?jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(fi,{type:"dots"})}),jsxs(Text,{color:"cyan",children:[" ",e]})]}):t==="success"?jsx(Box,{children:jsxs(Text,{color:"green",children:["\u2713 ",e]})}):t==="failed"?jsxs(Box,{children:[jsxs(Text,{color:"red",children:["\u2717 ",e]}),n&&jsxs(Text,{dimColor:true,children:[" \u2014 ",n]})]}):jsx(Box,{children:jsxs(Text,{dimColor:true,children:["\u25CB ",e]})})}function Bo({onComplete:e,onRetry:t}){let n=g(a=>a.plugins),r=g(a=>a.step),o=g(a=>a.successCount),s=g(a=>a.failedCount),i=g(a=>a.summaryActionIndex),l=n.filter(a=>a.selected),c=useRef(false);return useEffect(()=>{if(r==="summary"&&s===0&&!c.current){c.current=true;let a=setTimeout(e,1500);return ()=>clearTimeout(a)}},[r,s,e]),r==="installing"?jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Installing plugins..."})}),jsx(Box,{flexDirection:"column",paddingX:1,children:l.map(a=>jsx(ko,{name:a.name,status:a.status,error:a.error},a.name))})]}):jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Installation Complete"})}),jsxs(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:[o>0&&jsxs(Text,{color:"green",children:["\u2713 ",o," ",o===1?"plugin":"plugins"," installed successfully"]}),s>0&&jsxs(Text,{color:"red",children:["\u2717 ",s," ",s===1?"plugin":"plugins"," failed"]})]}),s>0&&jsx(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:l.filter(a=>a.status==="failed").map(a=>jsx(ko,{name:a.name,status:a.status,error:a.error},a.name))}),s>0&&jsx(Box,{flexDirection:"column",paddingX:1,children:la.map((a,d)=>jsx(Box,{children:jsxs(Text,{bold:d===i,color:d===i?"cyan":void 0,children:[d===i?"\u203A ":"  ",a]})},a))}),s===0&&jsx(Box,{paddingX:1,children:jsx(Text,{dimColor:true,children:"Proceeding to main screen..."})})]})}function Lo(){let e=g(f=>f.step),t=g(f=>f.bundles),n=g(f=>f.selectedBundleIndex),r=g(f=>f.setSelectedBundleIndex),o=g(f=>f.selectBundle),s=g(f=>f.plugins),i=g(f=>f.pluginCursorIndex),l=g(f=>f.setPluginCursorIndex),c=g(f=>f.setStep),a=g(f=>f.summaryActionIndex),d=g(f=>f.setSummaryActionIndex),h=g(f=>f.failedCount),E=g(f=>f.resetForRetry),U=g(f=>f.goBackToList),j=p(f=>f.setScreen),u=p(f=>f.setFocus),m=p(f=>f.focus),y=X(f=>f.setJustAuthenticated),v=X(f=>f.justAuthenticated),{loadBundles:I,installSelected:B}=Po();useEffect(()=>{u(e==="bundleList"?"bundleList":e==="bundleDetail"?"bundleDetail":"installProgress");},[e,u]);let z=useCallback(async()=>{let f=g.getState().selectedBundle;if(f){let N=await F();N&&await Ae({...N,bundle:f.slug});}y(false),u("list"),j("main");},[y,u,j]),R=useCallback(()=>{E(),B();},[E,B]),pt=useCallback(()=>{I();},[I]),Yt=useCallback(()=>{u("list"),j("main");},[u,j]);return useInput((f,N)=>{N.escape?Yt():N.upArrow&&n>0?r(n-1):N.downArrow&&n<t.length-1?r(n+1):N.return&&t.length>0&&o(t[n]);},{isActive:m==="bundleList"}),useInput((f,N)=>{let Q=Io(f,N);if(Q.cursorDelta!==0){let se=i+Q.cursorDelta;se>=0&&se<s.length&&l(se);}Q.confirm&&(c("installing"),B()),Q.back&&U();},{isActive:m==="bundleDetail"}),useInput((f,N)=>{if(h===0)return;let Q=Eo(f,N);if(Q.cursorDelta!==0){let se=a+Q.cursorDelta;se>=0&&se<=1&&d(se);}Q.select&&(a===0?R():z());},{isActive:m==="installProgress"&&e==="summary"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Ct,{}),jsxs(Box,{flexDirection:"column",paddingX:1,marginBottom:1,children:[jsx(Text,{dimColor:true,children:"The data collected during setup is used solely to improve"}),jsx(Text,{dimColor:true,children:"Flow's internal tools and will not be shared externally."}),!v&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"yellow",children:"Welcome back! We noticed your bundle is not set up yet. Choose a bundle below to get your recommended starter kit."})})]}),jsxs(Box,{flexDirection:"column",flexGrow:1,children:[e==="bundleList"&&jsx(Ao,{onRetry:pt}),e==="bundleDetail"&&jsx(Ro,{}),(e==="installing"||e==="summary")&&jsx(Bo,{onComplete:z,onRetry:R})]}),jsx(Dt,{})]})}var da={auth:Ir,bundleSetup:Lo,main:vo};async function No(){let e=await F(),t=await Z();if(!e||!t){p.getState().setScreen("auth"),p.getState().setFocus("auth");return}let{clientSecret:n,...r}=e;X.getState().setCredentials(r),!e.bundle||e.bundle.trim()===""?(p.getState().setScreen("bundleSetup"),p.getState().setFocus("bundleList")):(p.getState().setScreen("main"),p.getState().setFocus("list"));}function Fo(){let{columns:e,rows:t}=useWindowSize(),n=p(s=>s.screen),r=da[n],{pendingExit:o}=Zn();return r?jsxs(Box,{flexDirection:"column",width:e,height:t,children:[jsx(r,{}),o&&jsx(Box,{paddingX:1,children:jsx(Text,{color:"yellow",children:"Press Ctrl+C again to quit"})})]}):jsxs(Text,{color:"red",children:["Unknown screen: ",n]})}var re=S("auth");function _o(){G.clearFallbackFile(),hr();}var pa=3,Oo=3,jo=`  \u2139 The data collected during setup is used solely to improve
+    Flow's internal tools and will not be shared externally.
+`;function dt(e,t={}){return new Promise((n,r)=>{let{masked:o=false,defaultValue:s=""}=t;process.stdout.write(e+s);let i=s,l=d=>{if(d===""){c(),r(new Error("SIGINT"));return}if(d==="\r"||d===`
+`){c(),process.stdout.write(`
+`),n(i);return}if(d==="\x7F"){i.length>0&&(i=i.slice(0,-1),process.stdout.write("\b \b"));return}d.startsWith("\x1B")||(i+=d,process.stdout.write(o?"*".repeat(d.length):d));};function c(){process.stdin.setRawMode(false),process.stdin.removeListener("data",l),process.removeListener("uncaughtException",a),process.removeListener("unhandledRejection",a);}function a(){try{process.stdin.setRawMode(!1);}catch{}}process.on("uncaughtException",a),process.on("unhandledRejection",a),process.stdin.setRawMode(true),process.stdin.resume(),process.stdin.setEncoding("utf8"),process.stdin.on("data",l);})}async function Ko(){for(let e=1;e<=Oo;e++)try{return await Vt()}catch{if(e===Oo)throw new Error("Failed to fetch bundles after 3 attempts")}return []}async function Vo(){let e=await Ko();if(e.length===0)throw new Error("No bundles available. Please contact your administrator.");for(process.stdout.write(`
+`+w.cyan("  ? ")+`Bundle:
+`),e.forEach((t,n)=>{process.stdout.write(`    ${w.cyan(`${n+1})`)} ${b(t.name)}
+`);}),process.stdout.write(`
+`);;){let t=(await dt(w.cyan("  ? ")+`Select bundle (1-${e.length}): `)).trim(),n=parseInt(t,10)-1;if(!isNaN(n)&&n>=0&&n<e.length)return e[n];process.stderr.write(w.yellow(`  \u26A0 Invalid selection. Please try again.
+`));}}async function Jo(e){if(e.plugins.length===0)return process.stdout.write(w.dim(`
+  Bundle '${b(e.name)}' has no plugins to install.
+`)),true;process.stdout.write(`
+  Installing ${e.plugins.length} plugins from '${b(e.name)}'...
+`);let t=0,n=0,r=e.plugins.length;for(let o of e.plugins){let s=t+n+1;process.stdout.write(w.dim(`  [${s}/${r}] Installing ${b(o)}...`));let i=false;for(let l=1;l<=pa;l++)try{await ne(o),t++,i=!0;break}catch(c){if(c instanceof te){t++,i=true;break}}i?process.stdout.write(w.green(` done
+`)):(n++,process.stdout.write(w.red(` failed
+`)));}return n===0?process.stdout.write(w.green(`  \u2713 Bundle '${b(e.name)}' selected. ${t}/${r} plugins installed successfully.
+`)):process.stdout.write(w.yellow(`  \u26A0 Bundle '${b(e.name)}' selected. ${t}/${r} plugins installed. ${n} failed.
+`)),n===0}async function ma(e){_o(),process.stdout.write(`
+`+jo+`
+`),re.debug(`Authenticating tenant: ${e.tenant}`);try{await We(e);}catch(t){let n=b(t instanceof Error?t.message:"unknown error");return re.error(`Authentication failed: ${n}`),process.stderr.write(w.red(`  \u2717 Authentication failed: ${n}
+`)),1}try{let t;if(e.bundle){let n=await Ko(),r=n.find(o=>o.slug===e.bundle);if(!r){process.stderr.write(w.red(`  \u2717 Bundle '${b(e.bundle)}' not found.
+`)),process.stderr.write(`  Available bundles:
+`);for(let o of n)process.stderr.write(`    - ${b(o.slug)} (${b(o.name)})
+`);return 1}t=r;}else t=await Vo();return await Ae({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant,bundle:t.slug}),await Jo(t),re.info(`Authentication successful for tenant: ${e.tenant}`),process.stdout.write(w.green(`  \u2713 Setup complete. Tenant: ${e.tenant}
 
-`)),0}catch(t){let n=E(t instanceof Error?t.message:"unknown error");return Z.error(`Authentication failed: ${n}`),process.stderr.write(x.red(`  \u2717 Authentication failed: ${n}
-`)),1}}async function ns(){Br(),Z.debug("Starting interactive authentication");try{process.stdout.write(`
-`);let e=(await vt(x.cyan("  ? ")+"Client ID: ")).trim(),t=(await vt(x.cyan("  ? ")+"Client Secret: ",{masked:!0})).trim(),n=(await vt(x.cyan("  ? ")+"Tenant: ")).trim();if(!e||!t||!n)return Z.error("Validation failed: all fields are required"),process.stderr.write(x.red(`  \u2717 All fields are required
-`)),1;Z.debug(`Authenticating tenant: ${n}`);try{await Le({clientId:e,clientSecret:t,tenant:n});}catch(r){let o=E(r instanceof Error?r.message:"unknown error");return Z.error(`Authentication failed: ${o}`),process.stderr.write(x.red(`  \u2717 Authentication failed: ${o}
-`)),1}return Z.info(`Authentication successful for tenant: ${n}`),process.stdout.write(x.green(`  \u2713 Setup complete. Tenant: ${n}
+`)),0}catch(t){if(t instanceof Error&&t.message==="SIGINT")throw t;let n=b(t instanceof Error?t.message:"unknown error");return re.error(`Bundle setup failed: ${n}`),process.stderr.write(w.red(`  \u2717 Bundle setup failed: ${n}
+`)),1}}async function fa(){_o(),re.debug("Starting interactive authentication");try{process.stdout.write(`
+`),process.stdout.write(jo+`
+`);let e=(await dt(w.cyan("  ? ")+"Client ID: ")).trim(),t=(await dt(w.cyan("  ? ")+"Client Secret: ",{masked:!0})).trim(),n=(await dt(w.cyan("  ? ")+"Tenant: ")).trim();if(!e||!t||!n)return re.error("Validation failed: all fields are required"),process.stderr.write(w.red(`  \u2717 All fields are required
+`)),1;re.debug(`Authenticating tenant: ${n}`);try{await We({clientId:e,clientSecret:t,tenant:n});}catch(o){let s=b(o instanceof Error?o.message:"unknown error");return re.error(`Authentication failed: ${s}`),process.stderr.write(w.red(`  \u2717 Authentication failed: ${s}
+`)),1}let r=await Vo();return await Ae({clientId:e,clientSecret:t,tenant:n,bundle:r.slug}),await Jo(r),re.info(`Authentication successful for tenant: ${n}`),process.stdout.write(w.green(`  \u2713 Setup complete. Tenant: ${n}
 
-`)),0}catch(e){if(e instanceof Error&&e.message==="SIGINT")throw e;let t=E(e instanceof Error?e.message:"unknown error");return Z.error(`Unexpected error: ${t}`),process.stderr.write(x.red(`  \u2717 Unexpected error: ${t}
-`)),1}}async function ln(e={}){if(e.clientId&&e.clientSecret&&e.tenant)return ts({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant});try{return await ns()}catch(t){if(t instanceof Error&&t.message==="SIGINT")return process.stdout.write(`
-`),130;throw t}}async function rs(){try{return process.stdout.write(`
-`),(await vt(x.cyan("  ? ")+"Are you sure? This will remove your local credentials. (y/N): ")).toLowerCase()!=="y"?(process.stdout.write(x.yellow(`  \u26A0 Logout cancelled
+`)),0}catch(e){if(e instanceof Error&&e.message==="SIGINT")throw e;let t=b(e instanceof Error?e.message:"unknown error");return re.error(`Unexpected error: ${t}`),process.stderr.write(w.red(`  \u2717 Unexpected error: ${t}
+`)),1}}async function Xn(e={}){if(e.clientId&&e.clientSecret&&e.tenant)return ma({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant,bundle:e.bundle});try{return await fa()}catch(t){if(t instanceof Error&&t.message==="SIGINT")return process.stdout.write(`
+`),130;throw t}}async function ga(){try{return process.stdout.write(`
+`),(await dt(w.cyan("  ? ")+"Are you sure? This will remove your local credentials. (y/N): ")).toLowerCase()!=="y"?(process.stdout.write(w.yellow(`  \u26A0 Logout cancelled
 `)),0):null}catch(e){if(e instanceof Error&&e.message==="SIGINT")return process.stdout.write(`
-`),130;throw e}}async function _r(e){if(!await L())return process.stdout.write(x.yellow(`  \u26A0 You are not authenticated
-`)),0;if(!e){let t=await rs();if(t!==null)return t}try{return await Ln(),process.stdout.write(x.green(`  \u2713 Credentials removed successfully
-`)),0}catch{return process.stderr.write(x.red(`  \u2717 Error removing credentials
-`)),1}}async function jr(){let e=await L();return e?await O()?(process.stdout.write(`
-`+x.bold(`  Authenticated
-`)),process.stdout.write(x.dim("     Tenant:  ")+E(e.tenant)+`
-`),process.stdout.write(x.dim("     Client ID:  ")+E(e.clientId)+`
-`),process.stdout.write(x.dim("     Config:  ")+E(await Mn())+`
+`),130;throw e}}async function qo(e){if(!await F())return process.stdout.write(w.yellow(`  \u26A0 You are not authenticated
+`)),0;if(!e){let t=await ga();if(t!==null)return t}try{return await wr(),process.stdout.write(w.green(`  \u2713 Credentials removed successfully
+`)),0}catch{return process.stderr.write(w.red(`  \u2717 Error removing credentials
+`)),1}}async function Ho(){let e=await F();return e?await Z()?(process.stdout.write(`
+`+w.bold(`  Authenticated
+`)),process.stdout.write(w.dim("     Tenant:  ")+b(e.tenant)+`
+`),process.stdout.write(w.dim("     Client ID:  ")+b(e.clientId)+`
+`),process.stdout.write(w.dim("     Bundle:  ")+b(e.bundle??"not set")+`
+`),process.stdout.write(w.dim("     Config:  ")+b(await xr())+`
 `),process.stdout.write(`
-`),0):(process.stdout.write(x.yellow("  \u26A0 Session expired. Run `flow-cli auth login` to re-authenticate.\n")),0):(process.stdout.write(x.yellow("  \u26A0 Not authenticated. Run `flow-cli auth login` to set up.\n")),0)}async function ie(){return await L()?await O()?true:(P("Session expired. Run: flow-cli auth login"),false):(P("Not authenticated. Run: flow-cli auth login"),false)}async function os(e){let t=R(),n;try{n=await G();}catch{n=[];}let r=new Set(t.map(o=>o.name));return e.json?(ct(n.map(o=>({...o,installed:r.has(o.name)}))),0):(lt(["","Name","Version","Category","Status"],n.map(o=>[r.has(o.name)?"*":" ",o.name??"",o.version??"",o.category??"",r.has(o.name)?"installed":"available"])),0)}async function is(e){let t=R(),n=await G(),r=new Map(n.map(i=>[i.name,i])),o=t.map(i=>{let s=r.get(i.name);return s&&W(i.version,s.version)?{...i,availableVersion:s.version}:null}).filter(i=>i!==null);return o.length===0?(v("All plugins are up to date."),0):e.json?(ct(o),0):(lt(["Name","Installed","Available"],o.map(i=>[i.name??"",i.version??"",i.availableVersion??""])),process.stdout.write(`
+`),0):(process.stdout.write(w.yellow("  \u26A0 Session expired. Run `flow auth login` to re-authenticate.\n")),0):(process.stdout.write(w.yellow("  \u26A0 Not authenticated. Run `flow auth login` to set up.\n")),0)}async function Pe(){let e=await F();return e?await Z()?!e.bundle||e.bundle.trim()===""?(A("Bundle not set. Run: flow auth login"),false):true:(A("Session expired. Run: flow auth login"),false):(A("Not authenticated. Run: flow auth login"),false)}async function ya(e){let t=q(),n;try{n=await ue();}catch{n=[];}let r=new Set(t.map(o=>o.name));return e.json?(Bt(n.map(o=>({...o,installed:r.has(o.name)}))),0):(kt(["","Name","Version","Category","Status"],n.map(o=>[r.has(o.name)?"*":" ",o.name??"",o.version??"n/a",o.category??"",r.has(o.name)?"installed":"available"])),0)}async function ha(e){let t=q(),n=await ue(),r=new Map(n.map(s=>[s.name,s])),o=t.map(s=>{let i=r.get(s.name);return i&&s.version&&i.version&&de(s.version,i.version)?{...s,availableVersion:i.version}:null}).filter(s=>s!==null);return o.length===0?(P("All plugins are up to date."),0):e.json?(Bt(o),0):(kt(["Name","Installed","Available"],o.map(s=>[s.name??"",s.version??"n/a",s.availableVersion??"n/a"])),process.stdout.write(`
   ${o.length} plugin(s) outdated.
-`),0)}function ss(e){let t=R();return t.length===0?(v("No plugins installed. Use `flow plugin install <name>` to install one."),0):e.json?(ct(t),0):(lt(["Name","Version","Installed at"],t.map(n=>[n.name??"",n.version??"",ut(n.installedAt??"")])),process.stdout.write(`
+`),0)}function wa(e){let t=q();return t.length===0?(P("No plugins installed. Use `flow plugin install <name>` to install one."),0):e.json?(Bt(t),0):(kt(["Name","Version","Installed at"],t.map(n=>[n.name??"",n.version??"n/a",Lt(n.installedAt??"")])),process.stdout.write(`
   ${t.length} plugin(s) installed.
-`),0)}async function Kr(e){if(!await ie())return 1;try{return e.available?await os(e):e.outdated?await is(e):ss(e)}catch(t){return P(t instanceof Error?t.message:"Failed to list plugins."),1}}var S=y("manage");function pe(e){process.stdout.write(JSON.stringify(e)+`
-`);}function cn(e){process.stderr.write(JSON.stringify(e)+`
-`);}function _(e){return e instanceof Error?e.message:String(e)}async function as(e,t,n){n.silent||v(`${t}Installing ${e}...`);try{let r=await Ie(e,n);return n.silent?pe({status:"success",plugin:r.name,version:r.version,duration_ms:r.duration_ms}):xe(`${t}${r.name} v${r.version} installed successfully`),{name:e,success:!0,version:r.version,duration_ms:r.duration_ms}}catch(r){if(r instanceof Pe)return n.silent?pe({status:"already_installed",plugin:e,message:r.message}):v(`${t}${r.message}`),{name:e,success:true};let o=_(r);return n.silent?cn({status:"error",plugin:e,message:o}):P(`${t}Failed to install ${e}: ${o}`),{name:e,success:false,error:o}}}function ls(e){let t=e.filter(r=>r.success).length,n=e.filter(r=>!r.success).length;v(`
-Installation summary: ${t} succeeded, ${n} failed`);}async function Vr(e,t={}){if(!await ie())return 1;let n=[];for(let r=0;r<e.length;r++){let o=e.length>1?`[${r+1}/${e.length}] `:"",i=await as(e[r],o,t);n.push(i);}return e.length>1&&(t.silent?pe({status:"summary",succeeded:n.filter(r=>r.success).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.error?{error:r.error}:{}}))}):ls(n)),n.some(r=>!r.success)?1:0}async function Jr(e,t){if(!await ie())return 1;if(S.debug(`[${e}] Looking up installed plugin`),!t.force){let n=R().find(s=>s.name===e);if(!n)return S.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;let r=E(n.name),o=E(n.version);if(!await cs(`Remove ${r} v${o}? [y/N] `))return S.debug(`[${e}] Uninstall cancelled by user`),v("Operation cancelled."),0}try{return S.debug(`[${e}] Uninstalling plugin`),await mt(e),S.info(`[${e}] Uninstalled successfully`),xe("Plugin removed successfully"),0}catch(n){return S.error(`[${e}] Failed to uninstall: ${_(n)}`),P(_(n)),1}}async function cs(e){let n=(await import('readline')).default.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{n.question(e,o=>{n.close(),r(o.toLowerCase()==="y");});})}async function qr(e){if(!await ie())return 1;S.debug(`[${e}] Looking up installed plugin`);let t=R().find(n=>n.name===e);if(!t)return S.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;if(t.status==="enabled")return S.debug(`[${e}] Already enabled, skipping`),v(`${t.name} is already enabled`),0;try{return S.debug(`[${e}] Enabling plugin (current status: ${t.status})`),await Be(e,"enabled"),S.info(`[${e}] Enabled successfully`),xe(`${t.name} enabled successfully`),0}catch(n){return S.error(`[${e}] Failed to enable: ${_(n)}`),P(_(n)),1}}async function Hr(e){if(!await ie())return 1;S.debug(`[${e}] Looking up installed plugin`);let t=R().find(n=>n.name===e);if(!t)return S.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;if(t.status==="disabled")return S.debug(`[${e}] Already disabled, skipping`),v(`${t.name} is already disabled`),0;try{return S.debug(`[${e}] Disabling plugin (current status: ${t.status})`),await Be(e,"disabled"),S.info(`[${e}] Disabled successfully`),xe(`${t.name} disabled successfully`),0}catch(n){return S.error(`[${e}] Failed to disable: ${_(n)}`),P(_(n)),1}}async function zr(e,t,n){n.silent||v(`${t}Updating ${e}...`);try{let r=await yt(e,n);return n.silent?pe({status:"updated",plugin:r.name,previousVersion:r.previousVersion,newVersion:r.newVersion,duration_ms:r.duration_ms}):xe(`${t}${r.name} v${r.previousVersion} \u2192 v${r.newVersion}`),{name:e,success:!0}}catch(r){if(r instanceof re)return n.silent?pe({status:"up_to_date",plugin:e,message:r.message}):v(`${t}${r.message}`),{name:e,success:true,skipped:true};let o=_(r);return n.silent?cn({status:"error",plugin:e,message:o}):P(`${t}Failed to update ${e}: ${o}`),{name:e,success:false,error:o}}}function us(e){let t=e.filter(o=>o.success&&!o.skipped).length,n=e.filter(o=>o.skipped).length,r=e.filter(o=>!o.success).length;v(`
-Update summary: ${t} updated, ${n} already up to date, ${r} failed`);}async function ps(e,t,n){try{let r=await Ee(e);W(t,r.version,n.force)?v(`Would update ${e}: v${t} \u2192 v${r.version}`):v(`${e} is already up to date (v${t})`);}catch(r){return P(_(r)),1}return 0}function ds(e){return new Map(e.map(t=>[t.name,t.version]))}function fs(e,t,n){let r=t.get(e.name);return r?W(e.version,r,n)?(v(`Would update ${e.name}: v${e.version} \u2192 v${r}`),true):(v(`${e.name} is already up to date (v${e.version})`),false):(v(`Skipping ${e.name}: not found in catalog`),false)}async function ms(e,t){try{let n=await G(),r=ds(n),o=0;for(let i of e)fs(i,r,t.force)&&o++;o===0&&v("All plugins are up to date");}catch(n){return P(_(n)),1}return 0}async function gs(e,t){let n=[];for(let r=0;r<e.length;r++){let o=`[${r+1}/${e.length}] `,i=await zr(e[r].name,o,t);n.push(i);}return t.silent?pe({status:"summary",updated:n.filter(r=>r.success&&!r.skipped).length,upToDate:n.filter(r=>r.skipped).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.skipped?{skipped:true}:{},...r.error?{error:r.error}:{}}))}):us(n),n.some(r=>!r.success)?1:0}async function Gr(e,t={}){if(!await ie())return 1;if(e){let o=R().find(s=>s.name===e);return o?t.dryRun?ps(e,o.version,t):(await zr(e,"",t)).success?0:1:(t.silent?cn({status:"error",plugin:e,message:`Plugin "${e}" is not installed`}):P(`Plugin "${e}" is not installed`),1)}let r=R().filter(o=>o.marketplace===b);return r.length===0?(t.silent?pe({status:"empty",message:"No plugins installed"}):v("No plugins installed"),0):t.dryRun?ms(r,t):gs(r,t)}async function vs(){return await L()?{passed:true,message:"Credentials configured"}:{passed:false,message:"Credentials not configured \u2014 Run `flow-cli auth login`"}}async function xs(){let e=Date.now();try{await G();let t=Date.now()-e;return {passed:!0,message:`Prompt Manager accessible (${t}ms)`,latency:t}}catch(t){return t instanceof Error&&t.name==="TimeoutError"?{passed:false,message:"Timeout after 5s \u2014 check your connection"}:{passed:false,message:`Connection error: ${t instanceof Error?t.message:"Unknown"}`}}}async function bs(){return await O()?{passed:true,message:"Token is valid"}:{passed:false,message:"Token expired \u2014 run `flow-cli auth login` to re-authenticate"}}function Ss(){let e=join(homedir(),".claude","settings.json");return existsSync(e)?{passed:true,message:"Claude Code detected"}:{passed:false,message:"Claude Code not detected"}}async function Wr(){process.stdout.write(`
-`+x.bold(`  FlowSetup CLI Diagnostics
+`),0)}async function zo(e){if(!await Pe())return 1;try{return e.available?await ya(e):e.outdated?await ha(e):wa(e)}catch(t){return A(t instanceof Error?t.message:"Failed to list plugins."),1}}var C=S("manage");function Ce(e){process.stdout.write(JSON.stringify(e)+`
+`);}function Gn(e){process.stderr.write(JSON.stringify(e)+`
+`);}function oe(e){return e instanceof Error?e.message:String(e)}async function xa(e,t,n){n.silent||P(`${t}Installing ${e}...`);try{let r=await ne(e,n);return n.silent?Ce({status:"success",plugin:r.name,version:r.version,duration_ms:r.duration_ms}):Fe(`${t}${r.name} v${r.version} installed successfully`),{name:e,success:!0,version:r.version,duration_ms:r.duration_ms}}catch(r){if(r instanceof te)return n.silent?Ce({status:"already_installed",plugin:e,message:r.message}):P(`${t}${r.message}`),{name:e,success:true};let o=oe(r);return n.silent?Gn({status:"error",plugin:e,message:o}):A(`${t}Failed to install ${e}: ${o}`),{name:e,success:false,error:o}}}function ba(e){let t=e.filter(r=>r.success).length,n=e.filter(r=>!r.success).length;P(`
+Installation summary: ${t} succeeded, ${n} failed`);}async function Xo(e,t={}){if(!await Pe())return 1;let n=[];for(let r=0;r<e.length;r++){let o=e.length>1?`[${r+1}/${e.length}] `:"",s=await xa(e[r],o,t);n.push(s);}return e.length>1&&(t.silent?Ce({status:"summary",succeeded:n.filter(r=>r.success).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.error?{error:r.error}:{}}))}):ba(n)),n.some(r=>!r.success)?1:0}async function Go(e,t){if(!await Pe())return 1;if(C.debug(`[${e}] Looking up installed plugin`),!t.force){let n=q().find(i=>i.name===e);if(!n)return C.error(`[${e}] Plugin is not installed`),A(`Plugin "${e}" is not installed`),1;let r=b(n.name),o=n.version?b(n.version):void 0;if(!await va(`Remove ${r} ${o?`v${o}`:"(n/a)"}? [y/N] `))return C.debug(`[${e}] Uninstall cancelled by user`),P("Operation cancelled."),0}try{return C.debug(`[${e}] Uninstalling plugin`),await _t(e),C.info(`[${e}] Uninstalled successfully`),Fe("Plugin removed successfully"),0}catch(n){return C.error(`[${e}] Failed to uninstall: ${oe(n)}`),A(oe(n)),1}}async function va(e){let n=(await import('readline')).default.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{n.question(e,o=>{n.close(),r(o.toLowerCase()==="y");});})}async function Wo(e){if(!await Pe())return 1;C.debug(`[${e}] Looking up installed plugin`);let t=q().find(n=>n.name===e);if(!t)return C.error(`[${e}] Plugin is not installed`),A(`Plugin "${e}" is not installed`),1;if(t.status==="enabled")return C.debug(`[${e}] Already enabled, skipping`),P(`${t.name} is already enabled`),0;try{return C.debug(`[${e}] Enabling plugin (current status: ${t.status})`),await st(e,"enabled"),C.info(`[${e}] Enabled successfully`),Fe(`${t.name} enabled successfully`),0}catch(n){return C.error(`[${e}] Failed to enable: ${oe(n)}`),A(oe(n)),1}}async function Qo(e){if(!await Pe())return 1;C.debug(`[${e}] Looking up installed plugin`);let t=q().find(n=>n.name===e);if(!t)return C.error(`[${e}] Plugin is not installed`),A(`Plugin "${e}" is not installed`),1;if(t.status==="disabled")return C.debug(`[${e}] Already disabled, skipping`),P(`${t.name} is already disabled`),0;try{return C.debug(`[${e}] Disabling plugin (current status: ${t.status})`),await st(e,"disabled"),C.info(`[${e}] Disabled successfully`),Fe(`${t.name} disabled successfully`),0}catch(n){return C.error(`[${e}] Failed to disable: ${oe(n)}`),A(oe(n)),1}}async function Zo(e,t,n){n.silent||P(`${t}Updating ${e}...`);try{let r=await Jt(e,n);return n.silent?Ce({status:"updated",plugin:r.name,previousVersion:r.previousVersion,newVersion:r.newVersion,duration_ms:r.duration_ms}):Fe(`${t}${r.name} v${r.previousVersion} \u2192 v${r.newVersion}`),{name:e,success:!0}}catch(r){if(r instanceof be)return n.silent?Ce({status:"up_to_date",plugin:e,message:r.message}):P(`${t}${r.message}`),{name:e,success:true,skipped:true};let o=oe(r);return n.silent?Gn({status:"error",plugin:e,message:o}):A(`${t}Failed to update ${e}: ${o}`),{name:e,success:false,error:o}}}function Sa(e){let t=e.filter(o=>o.success&&!o.skipped).length,n=e.filter(o=>o.skipped).length,r=e.filter(o=>!o.success).length;P(`
+Update summary: ${t} updated, ${n} already up to date, ${r} failed`);}async function Pa(e,t,n){try{let r=await Ke(e);de(t,r.version,n.force)?P(`Would update ${e}: v${t} \u2192 v${r.version}`):P(`${e} is already up to date (v${t})`);}catch(r){return A(oe(r)),1}return 0}function Ia(e){return new Map(e.filter(t=>!!t.version).map(t=>[t.name,t.version]))}function Ea(e,t,n){let r=t.get(e.name);return r?e.version&&de(e.version,r,n)?(P(`Would update ${e.name}: v${e.version} \u2192 v${r}`),true):(P(`${e.name} is already up to date (${e.version?`v${e.version}`:"n/a"})`),false):(P(`Skipping ${e.name}: not found in catalog`),false)}async function Ta(e,t){try{let n=await ue(),r=Ia(n),o=0;for(let s of e)Ea(s,r,t.force)&&o++;o===0&&P("All plugins are up to date");}catch(n){return A(oe(n)),1}return 0}async function Aa(e,t){let n=[];for(let r=0;r<e.length;r++){let o=`[${r+1}/${e.length}] `,s=await Zo(e[r].name,o,t);n.push(s);}return t.silent?Ce({status:"summary",updated:n.filter(r=>r.success&&!r.skipped).length,upToDate:n.filter(r=>r.skipped).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.skipped?{skipped:true}:{},...r.error?{error:r.error}:{}}))}):Sa(n),n.some(r=>!r.success)?1:0}async function Yo(e,t={}){if(!await Pe())return 1;if(e){let o=q().find(i=>i.name===e);return o?t.dryRun?Pa(e,o.version??"",t):(await Zo(e,"",t)).success?0:1:(t.silent?Gn({status:"error",plugin:e,message:`Plugin "${e}" is not installed`}):A(`Plugin "${e}" is not installed`),1)}let r=q().filter(o=>o.marketplace===T);return r.length===0?(t.silent?Ce({status:"empty",message:"No plugins installed"}):P("No plugins installed"),0):t.dryRun?Ta(r,t):Aa(r,t)}async function ka(){return await F()?{passed:true,message:"Credentials configured"}:{passed:false,message:"Credentials not configured \u2014 Run `flow auth login`"}}async function Ba(){let e=Date.now();try{await ue();let t=Date.now()-e;return {passed:!0,message:`Prompt Manager accessible (${t}ms)`,latency:t}}catch(t){return t instanceof Error&&t.name==="TimeoutError"?{passed:false,message:"Timeout after 5s \u2014 check your connection"}:{passed:false,message:`Connection error: ${t instanceof Error?t.message:"Unknown"}`}}}async function La(){return await Z()?{passed:true,message:"Token is valid"}:{passed:false,message:"Token expired \u2014 run `flow auth login` to re-authenticate"}}function Ma(){let e=join(homedir(),".claude","settings.json");return existsSync(e)?{passed:true,message:"Claude Code detected"}:{passed:false,message:"Claude Code not detected"}}async function es(){process.stdout.write(`
+`+w.bold(`  FlowSetup CLI Diagnostics
 
-`));let e=[{name:"Credentials",fn:vs},{name:"Prompt Manager",fn:xs},{name:"Valid Token",fn:bs},{name:"Claude Code",fn:Ss}],t=true;for(let n of e){let r=await n.fn(),o="",i=x.green;r.passed?o=x.green("[OK]  "):(o=x.red("[FAIL]"),i=x.red,t=false);let s=`  ${o} ${i(n.name.padEnd(18))} ${E(r.message)}`;process.stdout.write(s+`
+`));let e=[{name:"Credentials",fn:ka},{name:"Prompt Manager",fn:Ba},{name:"Valid Token",fn:La},{name:"Claude Code",fn:Ma}],t=true;for(let n of e){let r=await n.fn(),o="",s=w.green;r.passed?o=w.green("[OK]  "):(o=w.red("[FAIL]"),s=w.red,t=false);let i=`  ${o} ${s(n.name.padEnd(18))} ${b(r.message)}`;process.stdout.write(i+`
 `);}return process.stdout.write(`
-`),t?(process.stdout.write(x.green(`  \u2713 All checks passed!
+`),t?(process.stdout.write(w.green(`  \u2713 All checks passed!
 
-`)),0):(process.stdout.write(x.red(`  \u2717 Some checks failed \u2014 verify your configuration
+`)),0):(process.stdout.write(w.red(`  \u2717 Some checks failed \u2014 verify your configuration
 
-`)),1)}function Xr(e){let t=new Command;t.name("flow").description("FlowSetup CLI \u2014 Manage Flow plugins in your Claude Code").version(`@flow/cli v${ot}`,"-V, --version","Display the CLI version").addHelpText("after",`
+`)),1)}function ts(e){let t=new Command;t.name("flow").description("FlowSetup CLI \u2014 Manage Flow plugins in your Claude Code").version(`@flow/cli v${$t}`,"-V, --version","Display the CLI version").addHelpText("after",`
 Without arguments, opens the interactive interface (TUI).
-Use 'flow <command> --help' for details on each command.`).action(()=>{e();});let n=new Command("setup").description("Configure the CLI by detecting Claude Code credentials");n.command("init").description("Initialize the Flow CLI configuration").addHelpText("after",`
+Use 'flow <command> --help' for details on each command.`).action(async()=>{await e();});let n=new Command("setup").description("Configure the CLI by detecting Claude Code credentials");n.command("init").description("Initialize the Flow CLI configuration").addHelpText("after",`
 Examples:
-  $ flow setup init`).action(async()=>{let i=await ln();process.exit(i);}),t.addCommand(n);let r=new Command("plugin").description("Manage plugins from the Findr catalog installed in your Claude Code");r.command("list").description("List available or installed plugins").option("--available","show full catalog with installation status",false).option("--outdated","show only plugins with updates available",false).option("--json","output as JSON",false).addHelpText("after",`
+  $ flow setup init`).action(async()=>{let s=await Xn();process.exit(s);}),t.addCommand(n);let r=new Command("plugin").description("Manage plugins from the Findr catalog installed in your Claude Code");r.command("list").description("List available or installed plugins").option("--available","show full catalog with installation status",false).option("--outdated","show only plugins with updates available",false).option("--json","output as JSON",false).addHelpText("after",`
 Examples:
   $ flow plugin list
   $ flow plugin list --available
   $ flow plugin list --outdated
-  $ flow plugin list --json`).action(async i=>{let s=await Kr(i);process.exit(s);}),r.command("install").description("Install one or more plugins from the Findr catalog into Claude Code").argument("<name...>","Name(s) of the plugin(s) to install (space-separated)").option("--force","Reinstall even if the version is already installed").option("--verbose","Display each step of the installation process").option("--silent","Output in JSON only").addHelpText("after",`
+  $ flow plugin list --json`).action(async s=>{let i=await zo(s);process.exit(i);}),r.command("install").description("Install one or more plugins from the Findr catalog into Claude Code").argument("<name...>","Name(s) of the plugin(s) to install (space-separated)").option("--force","Reinstall even if the version is already installed").option("--verbose","Display each step of the installation process").option("--silent","Output in JSON only").addHelpText("after",`
 Examples:
   $ flow plugin install flow-adr-writer
   $ flow plugin install flow-adr-writer flow-prd-writer startup-pack-ai
   $ flow plugin install flow-adr-writer --force
-  $ flow plugin install flow-adr-writer --silent`).action(async(i,s)=>{K("cli",{verbose:s.verbose,silent:s.silent});let a=await Vr(i,s);process.exit(a);}),r.command("uninstall").description("Remove an installed plugin from Claude Code").argument("<name>","Name of the plugin to remove").option("--force","Skip interactive confirmation").addHelpText("after",`
+  $ flow plugin install flow-adr-writer --silent`).action(async(s,i)=>{ie("cli",{verbose:i.verbose,silent:i.silent});let l=await Xo(s,i);process.exit(l);}),r.command("uninstall").description("Remove an installed plugin from Claude Code").argument("<name>","Name of the plugin to remove").option("--force","Skip interactive confirmation").addHelpText("after",`
 Examples:
   $ flow plugin uninstall flow-adr-writer
-  $ flow plugin uninstall startup-pack-ai --force`).action(async(i,s)=>{let a=await Jr(i,s);process.exit(a);}),r.command("update").description("Update plugins to the latest version").argument("[name]","Name of the plugin to update (omit to update all)").option("--force","Force update even if already on latest version").option("--dry-run","Show what would be updated without making changes").option("--verbose","Display each step of the update process").option("--silent","Output in JSON only").addHelpText("after",`
+  $ flow plugin uninstall startup-pack-ai --force`).action(async(s,i)=>{let l=await Go(s,i);process.exit(l);}),r.command("update").description("Update plugins to the latest version").argument("[name]","Name of the plugin to update (omit to update all)").option("--force","Force update even if already on latest version").option("--dry-run","Show what would be updated without making changes").option("--verbose","Display each step of the update process").option("--silent","Output in JSON only").addHelpText("after",`
 Examples:
   $ flow plugin update flow-adr-writer
   $ flow plugin update flow-adr-writer --force
@@ -81,19 +104,20 @@ Examples:
   $ flow plugin update flow-adr-writer --verbose
   $ flow plugin update flow-adr-writer --silent
   $ flow plugin update
-  $ flow plugin update --dry-run`).action(async(i,s)=>{K("cli",{verbose:s.verbose,silent:s.silent});let a=await Gr(i??null,s);process.exit(a);}),r.command("enable").description("Enable an installed plugin").argument("<name>","Name of the plugin to enable").addHelpText("after",`
+  $ flow plugin update --dry-run`).action(async(s,i)=>{ie("cli",{verbose:i.verbose,silent:i.silent});let l=await Yo(s??null,i);process.exit(l);}),r.command("enable").description("Enable an installed plugin").argument("<name>","Name of the plugin to enable").addHelpText("after",`
 Examples:
-  $ flow plugin enable flow-adr-writer`).action(async i=>{K("cli");let s=await qr(i);process.exit(s);}),r.command("disable").description("Disable an installed plugin").argument("<name>","Name of the plugin to disable").addHelpText("after",`
+  $ flow plugin enable flow-adr-writer`).action(async s=>{ie("cli");let i=await Wo(s);process.exit(i);}),r.command("disable").description("Disable an installed plugin").argument("<name>","Name of the plugin to disable").addHelpText("after",`
 Examples:
-  $ flow plugin disable flow-adr-writer`).action(async i=>{K("cli");let s=await Hr(i);process.exit(s);}),t.addCommand(r);let o=new Command("auth").description("Manage authentication credentials");return o.command("login").description("Authenticate and save credentials locally").option("--client-id <id>","Client ID for non-interactive authentication").option("--client-secret <secret>","Client Secret for non-interactive authentication").option("--tenant <tenant>","Tenant for non-interactive authentication").option("--verbose","Display each step of the authentication process").addHelpText("after",`
+  $ flow plugin disable flow-adr-writer`).action(async s=>{ie("cli");let i=await Qo(s);process.exit(i);}),t.addCommand(r);let o=new Command("auth").description("Manage authentication credentials");return o.command("login").description("Authenticate and save credentials locally").option("--client-id <id>","Client ID for non-interactive authentication").option("--client-secret <secret>","Client Secret for non-interactive authentication").option("--tenant <tenant>","Tenant for non-interactive authentication").option("--bundle <slug>","Bundle slug for non-interactive setup").option("--verbose","Display each step of the authentication process").addHelpText("after",`
 Examples:
   $ flow auth login
   $ flow auth login --client-id ID --client-secret SECRET --tenant TENANT
-  $ flow auth login --verbose`).action(async i=>{K("cli",{verbose:i.verbose});let s=await ln(i);process.exit(s);}),o.command("logout").description("Remove locally saved credentials").option("--force","Skip interactive confirmation").addHelpText("after",`
+  $ flow auth login --client-id ID --client-secret SECRET --tenant TENANT --bundle dev
+  $ flow auth login --verbose`).action(async s=>{ie("cli",{verbose:s.verbose});let i=await Xn(s);process.exit(i);}),o.command("logout").description("Remove locally saved credentials").option("--force","Skip interactive confirmation").addHelpText("after",`
 Examples:
   $ flow auth logout
-  $ flow auth logout --force`).action(async i=>{let s=await _r(i.force);process.exit(s);}),o.command("status").description("Display the current authentication status").addHelpText("after",`
+  $ flow auth logout --force`).action(async s=>{let i=await qo(s.force);process.exit(i);}),o.command("status").description("Display the current authentication status").addHelpText("after",`
 Examples:
-  $ flow auth status`).action(async()=>{let i=await jr();process.exit(i);}),t.addCommand(o),t.command("health").description("Check the CLI configuration and connectivity").addHelpText("after",`
+  $ flow auth status`).action(async()=>{let s=await Ho();process.exit(s);}),t.addCommand(o),t.command("health").description("Check the CLI configuration and connectivity").addHelpText("after",`
 Examples:
-  $ flow health`).action(async()=>{let i=await Wr();process.exit(i);}),t}var Es=Xr(()=>{K("tui"),render(jsx(Fr,{}));});Es.parse();
+  $ flow health`).action(async()=>{let s=await es();process.exit(s);}),t}var Ua=ts(async()=>{ie("tui"),await No(),render(jsx(Fo,{}),{alternateScreen:true,exitOnCtrlC:false});});Ua.parse();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ciandt-flow/cli",
-  "version": "1.0.5-beta.57",
+  "version": "1.0.6-beta.108",
   "description": "TUI for browsing and installing Claude Code plugins from the Flow ecosystem",
   "type": "module",
   "main": "dist/index.js",
@@ -24,7 +24,7 @@
     "build:npm": "npm run typecheck && tsup",
     "obfuscate": "javascript-obfuscator dist/index.js --output dist/index.js --options-preset medium-obfuscation --string-array true --string-array-encoding base64",
     "typecheck": "tsc --noEmit",
-    "dev": "tsx --env-file=.env src/cli.tsx",
+    "dev": "NODE_ENV=development tsx --env-file=.env src/cli.tsx",
     "dev:watch": "tsup --watch & sleep 2 && node --watch dist/index.js",
     "start": "node dist/index.js",
     "test": "vitest run --coverage",
@@ -62,12 +62,12 @@
     "dotenv": "^17.3.1",
     "extract-zip": "2.0.1",
     "http-status-codes": "^2.3.0",
-    "ink": "6.8.0",
+    "ink": "^7.0.0",
     "ink-big-text": "2.0.0",
     "ink-gradient": "4.0.0",
     "ink-spinner": "5.0.0",
     "keytar": "^7.9.0",
-    "ky": "1.14.3",
+    "ky": "2.0.1",
     "proper-lockfile": "4.1.2",
     "react": "19.2.5",
     "react-dom": "^19.0.0",
@@ -83,9 +83,9 @@
     "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.0",
     "@types/semver": "^7.7.1",
-    "@vitejs/plugin-react": "^4.0.0",
-    "@vitest/coverage-v8": "^3.2.4",
-    "eslint": "^9.39.2",
+    "@vitejs/plugin-react": "^6.0.1",
+    "@vitest/coverage-v8": "^4.1.4",
+    "eslint": "^10.2.1",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-prettier": "^5.5.5",
     "husky": "^9.1.7",
@@ -96,7 +96,7 @@
     "tsx": "^4.7.0",
     "typescript": "^5.3.3",
     "typescript-eslint": "^8.54.0",
-    "vitest": "^3.2.4"
+    "vitest": "^4.1.4"
   },
   "engines": {
     "node": ">=22.0.0"
@@ -105,6 +105,6 @@
     "flatted": ">=3.4.2",
     "esbuild": ">=0.25.0",
     "picomatch": ">=4.0.4",
-    "vite": "^6.4.2"
+    "vite": "^8.0.0"
   }
 }