@ciandt-flow/cli 1.0.5 → 1.0.6-beta.108

package/README.md

@@ -43,6 +43,7 @@ flow auth login [options]
 | `--client-id <id>` | Client ID |
 | `--client-secret <secret>` | Client Secret |
 | `--tenant <tenant>` | Tenant |
+| `--bundle <slug>` | Bundle slug to install after authentication |
 
 When called **without options**, enters interactive mode — prompts for each field in the terminal.
 When called **with all three options**, runs non-interactively and saves credentials directly.
@@ -53,6 +54,9 @@ flow auth login
 
 # non-interactive mode
 flow auth login --client-id <id> --client-secret <secret> --tenant <tenant>
+
+# with bundle selection
+flow auth login --client-id <id> --client-secret <secret> --tenant <tenant> --bundle dev
 ```
 
 #### `auth logout`

package/dist/index.js

@@ -1,75 +1,102 @@
 #!/usr/bin/env node
-import {Box,Text,render,useInput}from'ink';import ao,{useMemo,useEffect,useState,useCallback,useRef}from'react';import {jsxs,jsx,Fragment}from'react/jsx-runtime';import {create}from'zustand';import Jr,{HTTPError}from'ky';import {StatusCodes}from'http-status-codes';import Lr from'conf';import*as E from'fs';import E__default,{readFileSync,existsSync,chmodSync,realpathSync}from'fs';import*as q from'path';import q__default,{join}from'path';import*as Q from'os';import Q__default,{homedir}from'os';import eo from'ink-big-text';import to from'ink-gradient';import x from'chalk';import bo from'ink-spinner';import*as N from'fs/promises';import ko from'extract-zip';import Ro from'proper-lockfile';import {randomUUID}from'crypto';import Ct from'semver';import {Command}from'commander';var kr=16;function Bt({label:e,value:t,onChange:n,masked:r=false,isActive:o,error:i}){let s=useRef(t);useEffect(()=>{s.current=t;},[t]),useInput((u,c)=>{if(c.backspace||c.delete){let m=s.current.slice(0,-1);s.current=m,n(m);}else if(u&&!c.ctrl&&!c.meta&&!c.escape&&!c.return&&!c.tab&&!c.upArrow&&!c.downArrow&&!c.leftArrow&&!c.rightArrow){let m=s.current+u;s.current=m,n(m);}},{isActive:o});let a=r?"\u2022".repeat(t.length):t;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{children:[jsx(Text,{color:o?"cyan":"gray",children:o?"\u25B8 ":"  "}),jsx(Text,{color:o?"white":"gray",bold:o,children:e.padEnd(kr)}),jsx(Text,{color:o?"cyan":"gray",children:a}),o&&jsx(Text,{color:"cyan",children:"\u2588"})]}),i&&jsx(Box,{paddingLeft:3,children:jsxs(Text,{color:"red",children:["\u26A0 ",i]})})]})}var j=create(e=>({credentials:null,isAuthenticated:false,justAuthenticated:false,setCredentials:t=>e({credentials:t,isAuthenticated:true}),clearCredentials:()=>e({credentials:null,isAuthenticated:false,justAuthenticated:false}),setJustAuthenticated:t=>e({justAuthenticated:t})}));var p=create(e=>({activeTab:"discover",focus:"list",selectedIndex:0,actionMenuOpen:false,notification:null,loading:false,loadingMessage:"",catalogError:null,setActiveTab:t=>e({activeTab:t}),setFocus:t=>e({focus:t}),setSelectedIndex:t=>e({selectedIndex:t}),setActionMenuOpen:t=>e({actionMenuOpen:t}),showNotification:(t,n)=>e({notification:{message:t,type:n}}),clearNotification:()=>e({notification:null}),setLoading:(t,n="")=>e({loading:t,loadingMessage:t?n:""}),setCatalogError:t=>e({catalogError:t})}));var Oe="FLOW",b="flow-skills";var Z=new Lr({projectName:Oe});function jt(){try{chmodSync(Z.path,384);}catch{}}function C(){let e=Z.get("credentials");if(!e)return null;try{return JSON.parse(e)}catch{return null}}function _t(e){Z.set("credentials",JSON.stringify(e)),jt();}function Kt(){Z.delete("credentials"),Z.delete("tokenCache");}function Jt(){return Z.path}function qt(e){Z.set("tokenCache",{accessToken:e.accessToken,expiresAt:e.expiresAt}),jt();}function lt(){let e=Z.get("tokenCache");return e?{accessToken:e.accessToken,expiresAt:e.expiresAt}:null}function D(){let e=lt();return e?new Date(e.expiresAt)>new Date:false}var Ur=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^0\.0\.0\.0$/,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i];function Dr(e){return Ur.some(t=>t.test(e))}function Or(e,t){let n=process.env[e]??t;if(!n)throw new Error(`Missing required environment variable: ${e}`);return n}function Fe(e,t){let n=Or(e,t),r;try{r=new URL(n);}catch{throw new Error(`${e} must be a valid URL. Got: "${n}"`)}if(r.protocol!=="https:")throw new Error(`${e} must be an HTTPS URL. Got protocol: "${r.protocol}"`);if(r.username||r.password)throw new Error(`${e} must not contain embedded credentials (user:pass@host is not allowed)`);if(Dr(r.hostname))throw new Error(`${e} must not point to a private/loopback address. Got: "${r.hostname}"`);return n}var Fr=/Bearer\s+[A-Za-z0-9\-._~+/]+=*/g,Nr=/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,Br=/[A-Za-z0-9+/]{40,}={0,2}/g;function ct(e){return e.replace(Fr,"Bearer ***").replace(Nr,"***").replace(Br,"***")}var Pe=class{context;constructor(t){this.context=t;}write(t){let n=this.context==="tui"?this.formatTui(t):this.formatCli(t);process.stderr.write(n+`
-`);}formatTui(t){return `[flow:${t.module}] ${t.message}`}formatCli(t){let n=String(t.timestamp.getHours()).padStart(2,"0"),r=String(t.timestamp.getMinutes()).padStart(2,"0"),o=String(t.timestamp.getSeconds()).padStart(2,"0");return `[${n}:${r}:${o}] [${t.level.toUpperCase()}] ${t.message}`}};var Ie=".claude",Ht=".flow";function Vt(e,t){return q.join(Q.homedir(),Ie,"plugins","cache",b,e,t)}function ut(e){return q.join(Q.homedir(),Ie,"plugins","marketplaces",b,"plugins","native",e)}function Ne(){return q.join(Q.homedir(),Ie,"plugins","marketplaces",b,".claude-plugin","marketplace.json")}function zt(){return q.join(Q.homedir(),Ie,"plugins","known_marketplaces.json")}function Gt(){return q.join(Q.homedir(),Ie,"plugins","marketplaces",b)}function Xt(){return q.join(Q.homedir(),Ht,"cache","install.lock")}function Wt(){return q.join(Q.homedir(),Ht,"logs","flowsetup.log")}var jr=5*1024*1024,_r=3,Be=class{filePath;constructor(){this.filePath=Wt(),this.ensureDir(),this.rotateIfNeeded();}write(t){let n=`[${t.timestamp.toISOString()}] [${t.level.toUpperCase()}] [${t.module}] ${t.message}
-`;try{E.appendFileSync(this.filePath,n,"utf-8");}catch{}}ensureDir(){try{let t=q.dirname(this.filePath);E.mkdirSync(t,{recursive:!0});}catch{}}rotateIfNeeded(){try{if(E.statSync(this.filePath).size>jr){let n=new Date().toISOString().replace(/[:.]/g,"-"),r=this.filePath.replace(".log",`-${n}.log`);E.renameSync(this.filePath,r),this.cleanOldBackups();}}catch{}}cleanOldBackups(){try{let t=q.dirname(this.filePath),n=q.basename(this.filePath,".log"),r=E.readdirSync(t).filter(o=>o.startsWith(n+"-")&&o.endsWith(".log")).sort().reverse();for(let o of r.slice(_r))E.unlinkSync(q.join(t,o));}catch{}}};var je=class{write(t){process.stdout.write(t.message+`
-`);}};var fe={debug:0,info:1,warn:2,error:3},le={context:"cli",transports:[],minLevel:"warn",debugModules:null};function Kr(){let e=process.env.DEBUG;if(!e)return null;let t=e.split(",").map(r=>r.trim()).filter(Boolean);for(let r of t)if(r==="flow:*")return "all";let n=new Set;for(let r of t)r.startsWith("flow:")&&n.add(r.slice(5));return n.size>0?n:null}function _(e,t){if(e==="tui"){let n=Kr();le={context:e,transports:[new Pe("tui"),new Be],minLevel:n?"debug":"warn",debugModules:n};}else t?.silent?le={context:e,transports:[],minLevel:"error",debugModules:null}:t?.verbose?le={context:e,transports:[new Pe("cli")],minLevel:"debug",debugModules:null}:le={context:e,transports:[new je],minLevel:"info",debugModules:null};}function Zt(){return le.transports}function Qt(e,t){let{debugModules:n,minLevel:r}=le;return le.context==="tui"&&n&&n!=="all"?n.has(t)?fe[e]>=fe.debug:fe[e]>=fe.warn:fe[e]>=fe[r]}var Yt=new Map;function _e(e,t,n){if(!Qt(e,t))return;let r={level:e,module:t,message:ct(n),timestamp:new Date};for(let o of Zt())o.write(r);}function S(e){let t=Yt.get(e);if(t)return t;let n={debug:r=>_e("debug",e,r),info:r=>_e("info",e,r),warn:r=>_e("warn",e,r),error:r=>_e("error",e,r)};return Yt.set(e,n),n}var dt=S("api:auth"),Hr=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function Vr(e){if(!Hr.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var en={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};async function zr(e){if(e instanceof HTTPError){let t=e.response.status;dt.error(`HTTP error during authentication [status=${t}]`);let n="";try{let r=await e.response.text(),o=JSON.parse(r);typeof o.error=="string"&&(n=o.error);}catch{}return n&&en[n]?new Error(en[n]):t===StatusCodes.UNAUTHORIZED||t===StatusCodes.FORBIDDEN||t===StatusCodes.INTERNAL_SERVER_ERROR?new Error("Invalid credentials"):t>=StatusCodes.BAD_REQUEST&&t<StatusCodes.INTERNAL_SERVER_ERROR?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}return e instanceof Error?(dt.debug(`Non-HTTP error during authentication: ${e.message}`),e):(dt.debug("Unknown error during authentication"),new Error("Authentication failed"))}async function Ee(e){let t=Fe("AUTH_ENGINE_URL","https://flow.ciandt.com/auth-engine-api/v2/api-key/token");Vr(e.tenant);let n;try{n=await Jr.post(t,{headers:{FlowTenant:e.tenant},json:{clientSecret:e.clientSecret}}).json();}catch(o){throw await zr(o)}let r=n.expires_at??new Date(Date.now()+(n.expires_in??3600)*1e3).toISOString();_t(e),qt({accessToken:n.access_token,expiresAt:r});}async function tn(){if(D()){let e=lt();if(!e)throw new Error("Flow CLI not configured. Run: flow-cli auth login");return e.accessToken}throw new Error("Flow CLI not configured or token expired. Run: flow-cli auth login")}var O=["clientId","clientSecret","tenant"],Xr={clientId:"Client ID",clientSecret:"Client Secret",tenant:"Tenant"};function nn(){let[e,t]=useState({clientId:"",clientSecret:"",tenant:""}),[n,r]=useState("clientId"),[o,i]=useState({}),[s,a]=useState(null),[u,c]=useState(false),{setCredentials:m,setJustAuthenticated:h}=j(),{setFocus:T}=p();useInput((l,d)=>{if(!u){if(d.shift&&d.tab){let f=O.indexOf(n);f>0&&r(O[f-1]);}else if(d.tab){let f=O.indexOf(n);f<O.length-1&&r(O[f+1]);}else if(d.return)if(n==="tenant")ie();else {let f=O.indexOf(n);r(O[f+1]);}}},{isActive:true});let ie=async()=>{let l={};for(let d of O)e[d].trim()||(l[d]="This field is required");if(Object.keys(l).length>0){i(l);let d=O.find(f=>l[f]);d&&r(d);return}c(true),a(null);try{await Ee({clientId:e.clientId.trim(),clientSecret:e.clientSecret.trim(),tenant:e.tenant.trim()});let{clientSecret:d,...f}=e;m(f),h(!0),T("list");}catch(d){a(d instanceof Error?d.message:"Authentication failed");}finally{c(false),t(d=>({...d,clientSecret:""}));}},se=l=>d=>{t(f=>({...f,[l]:d})),o[l]&&i(f=>({...f,[l]:void 0}));};return jsxs(Box,{flexDirection:"column",padding:2,children:[jsx(Box,{marginBottom:1,children:jsxs(Text,{bold:true,color:"cyan",children:[Oe," \u2014 Initial Setup"]})}),jsx(Box,{flexDirection:"column",children:O.map(l=>jsx(Box,{marginBottom:1,children:jsx(Bt,{label:Xr[l],value:e[l],onChange:se(l),masked:l==="clientSecret",isActive:n===l&&!u,error:o[l]})},l))}),u&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"cyan",children:"Authenticating..."})}),s&&jsx(Box,{marginTop:1,children:jsxs(Text,{color:"red",children:["\u26A0 ",s]})}),jsx(Box,{marginTop:1,children:jsx(Text,{dimColor:true,children:"Tab next field \xB7 Enter confirm"})})]})}var Qr=JSON.parse(readFileSync(join(import.meta.dirname,"..","package.json"),"utf8")),Je=Qr.version;function sn(){return jsxs(Box,{flexDirection:"column",alignItems:"center",children:[jsx(to,{name:"morning",children:jsx(eo,{text:"FLOW",font:"block"})}),jsx(Box,{marginTop:-1,marginBottom:1,children:jsxs(Text,{dimColor:true,children:["Marketplace \xB7 v",Je]})})]})}var gt={discover:"Discover",installed:"Installed"},no=Object.keys(gt);function ln(){let e=p(t=>t.activeTab);return jsxs(Box,{paddingX:1,paddingBottom:1,children:[no.map(t=>jsx(Box,{marginRight:2,children:t===e?jsx(Text,{bold:true,underline:true,color:"cyan",children:gt[t]}):jsx(Text,{dimColor:true,children:gt[t]})},t)),jsx(Text,{dimColor:true,children:"(Tab to cycle)"})]})}var F=create(e=>({query:"",setQuery:t=>e({query:t}),resetQuery:()=>e({query:""})}));function un(){let e=p(r=>r.focus),t=F(r=>r.query),n=e==="search";return jsxs(Box,{borderStyle:"single",borderTop:false,borderBottom:true,borderLeft:false,borderRight:false,paddingX:1,marginX:1,marginBottom:1,children:[jsx(Text,{color:n?"cyan":"gray",children:"\u03C1 "}),n?jsxs(Fragment,{children:[jsx(Text,{color:"white",children:t}),jsx(Text,{color:"cyan",children:"\u2588"})]}):jsx(Text,{dimColor:true,children:t||"Search..."})]})}function I(e){return e.replace(/\x1b\[[0-9;:<=>?]*[ -/]*[@-~]/g,"").replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g,"").replace(/\x1b./g,"").replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g,"")}function me(e){process.stdout.write(x.green(`  \u2713 ${I(e)}
-`));}function P(e){process.stderr.write(x.red(`  \u2717 ${I(e)}
-`));}function w(e){process.stdout.write(x.cyan(`  \u2139 ${I(e)}
-`));}function ze(e,t){let n=t.map(a=>a.map(I)),r=[e,...n],o=e.map((a,u)=>Math.max(...r.map(c=>(c[u]??"").length))),i=o.map(a=>"\u2500".repeat(a)).join("  "),s=a=>a.map((u,c)=>u.padEnd(o[c])).join("  ");process.stdout.write(`
-`),process.stdout.write(`  ${x.bold(s(e))}
-`),process.stdout.write(`  ${x.dim(i)}
-`);for(let a of n)process.stdout.write(`  ${s(a)}
+import {Box,Text,render,useWindowSize,useApp,useInput}from'ink';import ti,{useRef,useCallback,useMemo,useEffect,useState}from'react';import {create}from'zustand';import {jsxs,jsx,Fragment}from'react/jsx-runtime';import _s,{HTTPError}from'ky';import {StatusCodes}from'http-status-codes';import*as ke from'crypto';import {randomUUID}from'crypto';import*as L from'fs';import L__default,{readFileSync,existsSync,realpathSync}from'fs';import*as le from'path';import le__default,{join}from'path';import*as fe from'os';import fe__default,{homedir}from'os';import {execFile,exec,spawn}from'child_process';import {promisify}from'util';import*as mr from'readline';import bt from'keytar';import un from'conf';import Ws from'ink-big-text';import w from'chalk';import fi from'ink-spinner';import*as ee from'fs/promises';import Pi from'extract-zip';import Ii from'proper-lockfile';import Ln from'semver';import {Command}from'commander';var p=create(e=>({screen:"auth",activeTab:"discover",focus:"list",selectedIndex:0,actionMenuOpen:false,notification:null,loading:false,loadingMessage:"",catalogError:null,pendingExit:false,setScreen:t=>e({screen:t}),setActiveTab:t=>e({activeTab:t}),setFocus:t=>e({focus:t}),setSelectedIndex:t=>e({selectedIndex:t}),setActionMenuOpen:t=>e({actionMenuOpen:t}),showNotification:(t,n)=>e({notification:{message:t,type:n}}),clearNotification:()=>e({notification:null}),setLoading:(t,n="")=>e({loading:t,loadingMessage:t?n:""}),setCatalogError:t=>e({catalogError:t}),setPendingExit:t=>e({pendingExit:t})}));var ls=2e3;function Zn(){let{exit:e}=useApp(),t=useRef(false),n=useRef(null),r=p(i=>i.pendingExit),o=p(i=>i.setPendingExit),s=useCallback(()=>{if(t.current){n.current&&clearTimeout(n.current),e();return}t.current=true,o(true),n.current=setTimeout(()=>{t.current=false,o(false);},ls);},[e,o]);return useInput((i,l)=>{l.ctrl&&i==="c"&&s();}),{pendingExit:r}}var ps=16;function Yn({label:e,value:t,onChange:n,masked:r=false,isActive:o,error:s}){let i=useRef(t);useEffect(()=>{i.current=t;},[t]),useInput((c,a)=>{if(a.backspace){let d=i.current.slice(0,-1);i.current=d,n(d);}else if(c&&!a.ctrl&&!a.meta&&!a.escape&&!a.return&&!a.tab&&!a.upArrow&&!a.downArrow&&!a.leftArrow&&!a.rightArrow){let d=i.current+c;i.current=d,n(d);}},{isActive:o});let l=r?"\u2022".repeat(t.length):t;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{children:[jsx(Text,{color:o?"cyan":"gray",children:o?"\u25B8 ":"  "}),jsx(Text,{color:o?"white":"gray",bold:o,children:e.padEnd(ps)}),jsx(Text,{color:o?"cyan":"gray",children:l}),o&&jsx(Text,{color:"cyan",children:"\u2588"})]}),s&&jsx(Box,{paddingLeft:3,children:jsxs(Text,{color:"red",children:["\u26A0 ",s]})})]})}var X=create(e=>({credentials:null,isAuthenticated:false,justAuthenticated:false,setCredentials:t=>e({credentials:t,isAuthenticated:true}),clearCredentials:()=>e({credentials:null,isAuthenticated:false,justAuthenticated:false}),setJustAuthenticated:t=>e({justAuthenticated:t})}));var er="FLOW",T="flow-skills",mt=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;var ft="aes-256-gcm",fs=16,tr=16,He=class{key;constructor(t){if(t.length!==32)throw new Error(`Invalid key length: expected 32 bytes, got ${t.length}`);this.key=t;}encrypt(t){let n=ke.randomBytes(fs),r=ke.createCipheriv(ft,this.key,n,{authTagLength:tr}),o=Buffer.concat([r.update(t,"utf8"),r.final()]),s=r.getAuthTag();return {iv:n.toString("hex"),authTag:s.toString("hex"),ciphertext:o.toString("hex"),algorithm:ft}}decrypt(t){if(t.algorithm!==ft)throw new Error(`Unsupported encryption algorithm: ${t.algorithm}`);let n=ke.createDecipheriv(ft,this.key,Buffer.from(t.iv,"hex"),{authTagLength:tr});return n.setAuthTag(Buffer.from(t.authTag,"hex")),Buffer.concat([n.update(Buffer.from(t.ciphertext,"hex")),n.final()]).toString("utf8")}};var gs=/Bearer\s+[A-Za-z0-9\-._~+/]+=*/g,ys=/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,hs=/[A-Za-z0-9+/]{40,}={0,2}/g;function nn(e){return e.replace(gs,"Bearer ***").replace(ys,"***").replace(hs,"***")}var ze=class{context;constructor(t){this.context=t;}write(t){let n=this.context==="tui"?this.formatTui(t):this.formatCli(t);process.stderr.write(n+`
+`);}formatTui(t){return `[flow:${t.module}] ${t.message}`}formatCli(t){let n=String(t.timestamp.getHours()).padStart(2,"0"),r=String(t.timestamp.getMinutes()).padStart(2,"0"),o=String(t.timestamp.getSeconds()).padStart(2,"0");return `[${n}:${r}:${o}] [${t.level.toUpperCase()}] ${t.message}`}};var Xe=".claude",nr=".flow";function rr(e,t){return le.join(fe.homedir(),Xe,"plugins","cache",T,e,t)}function rn(e){return le.join(fe.homedir(),Xe,"plugins","marketplaces",T,"plugins","native",e)}function gt(){return le.join(fe.homedir(),Xe,"plugins","marketplaces",T,".claude-plugin","marketplace.json")}function or(){return le.join(fe.homedir(),Xe,"plugins","known_marketplaces.json")}function sr(){return le.join(fe.homedir(),Xe,"plugins","marketplaces",T)}function ir(){return le.join(fe.homedir(),nr,"cache","install.lock")}function ar(){return le.join(fe.homedir(),nr,"logs","flowsetup.log")}var ws=5*1024*1024,xs=3,yt=class{filePath;constructor(){this.filePath=ar(),this.ensureDir(),this.rotateIfNeeded();}write(t){let n=`[${t.timestamp.toISOString()}] [${t.level.toUpperCase()}] [${t.module}] ${t.message}
+`;try{L.appendFileSync(this.filePath,n,"utf-8");}catch{}}ensureDir(){try{let t=le.dirname(this.filePath);L.mkdirSync(t,{recursive:!0});}catch{}}rotateIfNeeded(){try{if(L.statSync(this.filePath).size>ws){let n=new Date().toISOString().replace(/[:.]/g,"-"),r=this.filePath.replace(".log",`-${n}.log`);L.renameSync(this.filePath,r),this.cleanOldBackups();}}catch{}}cleanOldBackups(){try{let t=le.dirname(this.filePath),n=le.basename(this.filePath,".log"),r=L.readdirSync(t).filter(o=>o.startsWith(n+"-")&&o.endsWith(".log")).sort().reverse();for(let o of r.slice(xs))L.unlinkSync(le.join(t,o));}catch{}}};var ht=class{write(t){process.stdout.write(t.message+`
+`);}};var Be={debug:0,info:1,warn:2,error:3},Te={context:"cli",transports:[],minLevel:"warn",debugModules:null};function bs(){let e=process.env.DEBUG;if(!e)return null;let t=e.split(",").map(r=>r.trim()).filter(Boolean);for(let r of t)if(r==="flow:*")return "all";let n=new Set;for(let r of t)r.startsWith("flow:")&&n.add(r.slice(5));return n.size>0?n:null}function ie(e,t){if(e==="tui"){let n=bs();Te={context:e,transports:[new ze("tui"),new yt],minLevel:n?"debug":"warn",debugModules:n};}else t?.silent?Te={context:e,transports:[],minLevel:"error",debugModules:null}:t?.verbose?Te={context:e,transports:[new ze("cli")],minLevel:"debug",debugModules:null}:Te={context:e,transports:[new ht],minLevel:"info",debugModules:null};}function lr(){return Te.transports}function cr(e,t){let{debugModules:n,minLevel:r}=Te;return Te.context==="tui"&&n&&n!=="all"?n.has(t)?Be[e]>=Be.debug:Be[e]>=Be.warn:Be[e]>=Be[r]}var ur=new Map;function wt(e,t,n){if(!cr(e,t))return;let r={level:e,module:t,message:nn(n),timestamp:new Date};for(let o of lr())o.write(r);}function S(e){let t=ur.get(e);if(t)return t;let n={debug:r=>wt("debug",e,r),info:r=>wt("info",e,r),warn:r=>wt("warn",e,r),error:r=>wt("error",e,r)};return ur.set(e,n),n}var on=S("encryption"),sn="__encrypted__";function vs(e){return typeof e=="object"&&e!==null&&sn in e&&e[sn]===true}function an(e){return {serialize(t){let n=JSON.stringify(t),r=e.encrypt(n),o={[sn]:true,envelope:r};return JSON.stringify(o,null,"	")},deserialize(t){let n;try{n=JSON.parse(t);}catch{return on.warn("Config file contains unparseable data, treating as empty"),{}}if(vs(n))try{let r=e.decrypt(n.envelope);return JSON.parse(r)}catch(r){return on.error(`Decryption failed: ${r instanceof Error?r.message:"unknown error"}. Config will be treated as empty. Re-authentication may be required.`),{}}return on.info("Detected plaintext config \u2014 will encrypt on next write"),n}}}var ln=promisify(execFile),Is=promisify(exec),Le=class{static async isAvailable(){try{return await Is("command -v security"),!0}catch{return  false}}async getSecret(t,n){try{let{stdout:r}=await ln("security",["find-generic-password","-w","-a",n,"-s",t]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await ln("security",["add-generic-password","-U","-a",n,"-s",t,"-w",r]);}async deleteSecret(t,n){try{return await ln("security",["delete-generic-password","-a",n,"-s",t]),!0}catch{return  false}}getStoragePath(){return "macOS Keychain (security)"}};var pr=promisify(execFile),cn=promisify(exec),$s=[{name:"apt",command:"sudo apt install -y libsecret-tools"},{name:"dnf",command:"sudo dnf install -y libsecret"},{name:"pacman",command:"sudo pacman -S --noconfirm libsecret"},{name:"apk",command:"sudo apk add libsecret-tools"},{name:"zypper",command:"sudo zypper install -y libsecret-tools"}],xt=S("encryption:linux-keyvault");async function Cs(e,t){let n=["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"],r=0,o=setInterval(()=>{process.stderr.write(`\r${n[r++%n.length]}  ${e}`);},80);try{return await t()}finally{clearInterval(o),process.stderr.write("\r\x1B[2K");}}function Rs(e){let t=mr.createInterface({input:process.stdin,output:process.stdout});return new Promise(n=>{t.question(e,r=>{t.close(),n(r.trim().toLowerCase());});})}var ye=class e{static async isAvailable(){try{return await cn("command -v secret-tool"),!0}catch{return  false}}static async detectPackageManager(){for(let t of $s)try{return await cn(`command -v ${t.name}`),t}catch{}return null}static async ensureInstalled(){if(await e.isAvailable())return  true;xt.info("Secure credential storage requires 'secret-tool' (libsecret). This tool allows us to store your encryption key in the OS keyring, so your credentials are protected even if someone copies the config file.");let t=await e.detectPackageManager();if(!t)return xt.warn("Could not detect a supported package manager. Please install libsecret manually."),false;let n=await Rs("  ? Install secret-tool? This requires sudo. (y/N) ");if(n!=="y"&&n!=="yes")return  false;try{return xt.info(`Running: ${t.command}`),await Cs("Installing secret-tool...",()=>cn(t.command)),e.isAvailable()}catch{return xt.warn("Installation failed. Falling back to derived key."),false}}async getSecret(t,n){try{let{stdout:r}=await pr("secret-tool",["lookup","service",t,"account",n]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await new Promise((o,s)=>{let i=spawn("secret-tool",["store","--label",t,"service",t,"account",n]);i.stdin.end(r,"utf8"),i.on("close",l=>{l===0?o():s(new Error(`secret-tool exited with code ${l}`));}),i.on("error",s);});}async deleteSecret(t,n){try{return await pr("secret-tool",["clear","service",t,"account",n]),!0}catch{return  false}}getStoragePath(){return "Linux Secret Service (secret-tool)"}};var gr=S("encryption:windows-keyvault"),Me=class{static async isAvailable(){try{return await bt.getPassword("__flow_probe__","__flow_probe__"),!0}catch{return  false}}async getSecret(t,n){try{return await bt.getPassword(t,n)}catch(r){let o=r instanceof Error?r.message.split(`
+`)[0]:"unknown error";return gr.error(`Failed to read secret from Windows Credential Manager [service="${t}", account="${n}"]: ${o}`),null}}async setSecret(t,n,r){try{await bt.setPassword(t,n,r);}catch(o){let s=o instanceof Error?o.message.split(`
+`)[0]:"unknown error",i=`Failed to store secret in Windows Credential Manager [service="${t}", account="${n}"]: ${s}`;throw gr.error(i),new Error(i)}}async deleteSecret(t,n){try{return await bt.deletePassword(t,n)}catch{return  false}}getStoragePath(){return "Windows Credential Manager (keytar)"}};var ks=32,Bs="flow-plugins-cli-fallback",dn="flow-plugins-cli-fallback",Ls={linux:"install secret-tool (e.g. sudo apt install libsecret-tools)",darwin:"ensure the Keychain is accessible (security binary must be available)",win32:"ensure Credential Manager is available (cmdkey must be in PATH)"};function Ms(){let e=`${fe.hostname()}${fe.userInfo().username}`;return ke.scryptSync(e,Bs,ks)}function Ds(){let e=Ms(),t=new He(e),n=an(t);return new un({projectName:dn,serialize:n.serialize,deserialize:n.deserialize})}var St=null;function vt(){return St||(St=Ds()),St}var G=class{warned=false;async getSecret(t,n){return vt().get(`${t}:${n}`)??null}async setSecret(t,n,r){if(!this.warned){let o=Ls[process.platform]??"ensure the OS keyring is available";process.stderr.write(`\u26A0  Secure keyring unavailable. Credentials are stored in an encrypted file
+   using a machine-derived key. For stronger security, ${o}.
+`),this.warned=true;}vt().set(`${t}:${n}`,r);}async deleteSecret(t,n){let r=vt(),o=`${t}:${n}`;return r.has(o)?(r.delete(o),true):false}getStoragePath(){return vt().path}static hasExistingData(){try{let t=new un({projectName:dn});return L.existsSync(t.path)}catch{return  false}}static clearFallbackFile(){try{let t=new un({projectName:dn});L.rmSync(t.path,{force:!0});}catch{}St=null;}};async function pn(){if(G.hasExistingData())return new G;switch(process.platform){case "darwin":return await Le.isAvailable()?new Le:new G;case "linux":return await ye.isAvailable()?new ye:await ye.ensureInstalled()?new ye:new G;case "win32":return await Me.isAvailable()?new Me:new G;default:throw new Error(`Unsupported platform: ${process.platform}`)}}var Us=S("config:credentials"),De="flow-plugins-cli",mn="credentials",fn="token-cache",Et=null;async function Ue(){return Et||(Et=pn()),Et}function hr(){Et=null;}async function F(){let t=await(await Ue()).getSecret(De,mn);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function Ae(e){let{clientId:t,clientSecret:n,tenant:r}=e,o=[!t?.trim()&&"clientId",!n?.trim()&&"clientSecret",!r?.trim()&&"tenant"].filter(Boolean);if(o.length>0)throw Us.error(`missing or empty fields: ${o.join(", ")}`),new Error("Cannot save credentials: clientId, clientSecret, and tenant are required");await(await Ue()).setSecret(De,mn,JSON.stringify(e));}async function wr(){let e=await Ue();await e.deleteSecret(De,mn),await e.deleteSecret(De,fn);}async function xr(){return (await Ue()).getStoragePath()}async function br(e){await(await Ue()).setSecret(De,fn,JSON.stringify(e));}async function gn(){let t=await(await Ue()).getSecret(De,fn);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function Z(){let e=await gn();return e?new Date(e.expiresAt)>new Date:false}var vr=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^0\.0\.0\.0$/,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i];function Ns(e){if(!e.startsWith("[")||!e.endsWith("]"))return null;let n=e.slice(1,-1).match(/^::(?:ffff:)?([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i);if(!n)return null;let r=parseInt(n[1],16),o=parseInt(n[2],16);return `${r>>8&255}.${r&255}.${o>>8&255}.${o&255}`}function Fs(e){if(vr.some(n=>n.test(e)))return  true;let t=Ns(e);return !!(t&&vr.some(n=>n.test(t)))}function Os(e,t){let n=process.env[e]??t;if(!n)throw new Error(`Missing required environment variable: ${e}`);return n}function Tt(e,t){let n=Os(e,t),r;try{r=new URL(n);}catch{throw new Error(`${e} must be a valid URL. Got: "${n}"`)}let o=process.env.NODE_ENV==="development";if(!o&&r.protocol!=="https:")throw new Error(`${e} must be an HTTPS URL. Got protocol: "${r.protocol}"`);if(r.username||r.password)throw new Error(`${e} must not contain embedded credentials (user:pass@host is not allowed)`);if(!o&&Fs(r.hostname))throw new Error(`${e} must not point to a private/loopback address. Got: "${r.hostname}"`);return n}var yn=S("api:auth");function Ks(e){if(!mt.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var Sr={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};async function Vs(e){if(e instanceof HTTPError){let t=e.response.status;yn.error(`HTTP error during authentication [status=${t}]`);let n="";try{let r=await e.response.text(),o=JSON.parse(r);typeof o.error=="string"&&(n=o.error);}catch{}return n&&Sr[n]?new Error(Sr[n]):t===StatusCodes.UNAUTHORIZED||t===StatusCodes.FORBIDDEN||t===StatusCodes.INTERNAL_SERVER_ERROR?new Error("Invalid credentials"):t>=StatusCodes.BAD_REQUEST&&t<StatusCodes.INTERNAL_SERVER_ERROR?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}return e instanceof Error?(yn.debug(`Non-HTTP error during authentication: ${e.message}`),e):(yn.debug("Unknown error during authentication"),new Error("Authentication failed"))}async function We(e){let t=Tt("AUTH_ENGINE_URL","https://flow.ciandt.com/auth-engine-api/v2/api-key/token");Ks(e.tenant);let n;try{n=await _s.post(t,{headers:{FlowTenant:e.tenant},json:{clientSecret:e.clientSecret}}).json();}catch(o){throw await Vs(o)}let r=n.expires_at??new Date(Date.now()+(n.expires_in??3600)*1e3).toISOString();await Ae(e),await br({accessToken:n.access_token,expiresAt:r});}async function Pr(){if(await Z()){let t=await gn();if(!t)throw new Error("Flow CLI not configured. Run: flow auth login");return t.accessToken}throw new Error("Flow CLI not configured or token expired. Run: flow auth login")}var Y=["clientId","clientSecret","tenant"],qs={clientId:"Client ID",clientSecret:"Client Secret",tenant:"Tenant"};function Ir(){let[e,t]=useState({clientId:"",clientSecret:"",tenant:""}),[n,r]=useState("clientId"),[o,s]=useState({}),[i,l]=useState(null),[c,a]=useState(false),{setCredentials:d,setJustAuthenticated:h}=X(),{setFocus:E}=p();useInput((u,m)=>{if(!c){if(m.shift&&m.tab){let y=Y.indexOf(n);y>0&&r(Y[y-1]);}else if(m.tab){let y=Y.indexOf(n);y<Y.length-1&&r(Y[y+1]);}else if(m.return)if(n==="tenant")U();else {let y=Y.indexOf(n);r(Y[y+1]);}}},{isActive:true});let U=async()=>{let u={};for(let m of Y)e[m].trim()||(u[m]="This field is required");if(Object.keys(u).length>0){s(u);let m=Y.find(y=>u[y]);m&&r(m);return}a(true),l(null);try{await We({clientId:e.clientId.trim(),clientSecret:e.clientSecret.trim(),tenant:e.tenant.trim()});let{clientSecret:m,...y}=e;d(y),h(!0),p.getState().setScreen("bundleSetup"),E("bundleList");}catch(m){l(m instanceof Error?m.message:"Authentication failed");}finally{a(false),t(m=>({...m,clientSecret:""}));}},j=u=>m=>{t(y=>({...y,[u]:m})),o[u]&&s(y=>({...y,[u]:void 0}));};return jsxs(Box,{flexDirection:"column",padding:2,children:[jsx(Box,{marginBottom:1,children:jsxs(Text,{bold:true,color:"cyan",children:[er," \u2014 Initial Setup"]})}),jsxs(Box,{marginBottom:1,flexDirection:"column",children:[jsx(Text,{dimColor:true,children:"The data collected during setup is used solely to improve"}),jsx(Text,{dimColor:true,children:"Flow's internal tools and will not be shared externally."})]}),jsx(Box,{flexDirection:"column",children:Y.map(u=>jsx(Box,{marginBottom:1,children:jsx(Yn,{label:qs[u],value:e[u],onChange:j(u),masked:u==="clientSecret",isActive:n===u&&!c,error:o[u]})},u))}),c&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"cyan",children:"Authenticating..."})}),i&&jsx(Box,{marginTop:1,children:jsxs(Text,{color:"red",children:["\u26A0 ",i]})}),jsx(Box,{marginTop:1,children:jsx(Text,{dimColor:true,children:"Tab next field \xB7 Enter confirm"})})]})}var Xs=JSON.parse(readFileSync(join(import.meta.dirname,"..","package.json"),"utf8")),$t=Xs.version;function Ct(){return jsxs(Box,{flexDirection:"column",alignItems:"center",children:[jsx(Ws,{text:"FLOW",font:"block",colors:["white","white"]}),jsx(Box,{marginTop:-1,marginBottom:1,children:jsxs(Text,{dimColor:true,children:["Marketplace \xB7 v",$t]})})]})}var hn={discover:"Discover",installed:"Installed"},Qs=Object.keys(hn);function Rr(){let e=p(t=>t.activeTab);return jsx(Box,{paddingX:1,paddingBottom:1,children:Qs.map(t=>jsx(Box,{marginRight:1,children:t===e?jsx(Text,{bold:true,inverse:true,children:` ${hn[t]} `}):jsx(Text,{dimColor:true,children:` ${hn[t]} `})},t))})}var O=create(e=>({query:"",cursorPosition:0,setQuery:t=>e({query:t}),setCursorPosition:t=>e({cursorPosition:t}),resetQuery:()=>e({query:"",cursorPosition:0})}));function Br(){let e=p(i=>i.focus),t=O(i=>i.query),n=O(i=>i.cursorPosition),r=e==="search",o=t.slice(0,n),s=t.slice(n);return jsxs(Box,{borderStyle:"single",borderTop:false,borderBottom:true,borderLeft:false,borderRight:false,paddingX:1,marginX:1,marginBottom:1,children:[jsx(Text,{color:r?"cyan":"gray",children:"\u03C1 "}),r?jsxs(Fragment,{children:[jsx(Text,{color:"white",children:o}),jsx(Text,{inverse:true,children:s[0]??" "}),jsx(Text,{color:"white",children:s.slice(1)})]}):jsx(Text,{dimColor:true,children:t||"Search..."})]})}function b(e){return e==null?"":e.replace(/\x1b\[[0-9;:<=>?]*[ -/]*[@-~]/g,"").replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g,"").replace(/\x1b./g,"").replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g,"")}function Fe(e){process.stdout.write(w.green(`  \u2713 ${b(e)}
+`));}function A(e){process.stderr.write(w.red(`  \u2717 ${b(e)}
+`));}function P(e){process.stdout.write(w.cyan(`  \u2139 ${b(e)}
+`));}function kt(e,t){let n=t.map(l=>l.map(b)),r=[e,...n],o=e.map((l,c)=>Math.max(...r.map(a=>(a[c]??"").length))),s=o.map(l=>"\u2500".repeat(l)).join("  "),i=l=>l.map((c,a)=>c.padEnd(o[a])).join("  ");process.stdout.write(`
+`),process.stdout.write(`  ${w.bold(i(e))}
+`),process.stdout.write(`  ${w.dim(s)}
+`);for(let l of n)process.stdout.write(`  ${i(l)}
 `);process.stdout.write(`
-`);}function Ge(e){process.stdout.write(JSON.stringify(e,null,2)+`
-`);}function Xe(e){let t=new Date(e);return isNaN(t.getTime())?"\u2014":new Intl.DateTimeFormat("en-US",{dateStyle:"short"}).format(t)}var dn=ao.memo(function({item:t,isSelected:n}){let r=t.status==="disabled"?"yellow":"green";return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:n?"cyan":"gray",children:n?"\u203A ":"\u25CB "}),jsx(Text,{bold:n,color:n?"cyan":"white",children:t.name}),jsxs(Text,{dimColor:true,children:[t.authorName?` \xB7 ${t.authorName}`:""," \xB7 v",t.version]}),t.status&&jsxs(Text,{color:r,children:[" [",t.status,"]"]}),t.updateAvailable&&jsx(Text,{color:"yellow",children:" [\u2191 update available]"}),t.installedBadge&&jsx(Text,{color:"cyan",children:" [installed]"}),t.installedAt&&jsxs(Text,{dimColor:true,children:[" \xB7 ",Xe(t.installedAt)]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:t.description})})]})});function fn({message:e}){return jsx(Box,{paddingX:2,paddingY:1,children:jsx(Text,{dimColor:true,children:e??"No items found."})})}var wt=5;function gn({items:e,emptyMessage:t}){let n=p(u=>u.selectedIndex);if(e.length===0)return jsx(fn,{message:t});let r=Math.max(0,n-Math.floor(wt/2)),o=Math.min(e.length,r+wt);o===e.length&&(r=Math.max(0,o-wt));let i=e.slice(r,o),s=r,a=e.length-o;return jsxs(Box,{flexDirection:"column",children:[s>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",s," more above"]})}),i.map((u,c)=>jsx(dn,{item:u,isSelected:r+c===n},u.name)),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",a," more below"]})})]})}var uo={discover:"Discover plugins",installed:"Installed plugins"};function yn({items:e,tabId:t,emptyMessage:n}){return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{paddingX:1,paddingBottom:1,children:[jsx(Text,{bold:true,children:uo[t]}),jsxs(Text,{dimColor:true,children:[" (",e.length,")"]})]}),jsx(un,{}),jsx(gn,{items:e,emptyMessage:n})]})}function wn({filteredItems:e,emptyMessage:t}){let n=p(r=>r.activeTab);return jsx(Box,{flexDirection:"column",flexGrow:1,children:n==="discover"?jsx(yn,{items:e,tabId:"discover",emptyMessage:t},"discover"):jsx(yn,{items:e,tabId:"installed",emptyMessage:t},"installed")})}var mo={tabs:"Tab: switch tab | \u2191\u2193: navigate | Enter: select | /: search | q: quit",list:"Tab: switch tab | \u2191\u2193: navigate | Enter: select | /: search | q: quit",search:"Type to filter | Esc: cancel search | Enter: confirm",actionMenu:"\u2191\u2193: navigate options | Enter: confirm | Esc: close menu",auth:"Tab: next field | Enter: confirm | Ctrl+C: quit"};function bn(){let e=p(t=>t.focus);return jsx(Box,{borderStyle:"single",borderTop:true,borderBottom:false,borderLeft:false,borderRight:false,children:jsx(Text,{dimColor:true,children:mo[e]})})}function vn({message:e,type:t}){return e?jsx(Box,{paddingX:1,children:jsxs(Text,{color:t==="success"?"green":t==="info"?"cyan":"red",children:[t==="success"?"\u2713":t==="info"?"(i)":"\u2717"," ",e]})}):null}function En({message:e}){return jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(bo,{type:"dots"})}),jsxs(Text,{children:[" ",e]})]})}function $n({message:e,onRetry:t,onBack:n}){return useInput((r,o)=>{r==="r"&&t?t():o.escape&&n&&n();}),jsxs(Box,{flexDirection:"column",paddingX:2,paddingY:1,children:[jsxs(Text,{color:"red",children:["\u2717 ",e]}),t&&jsx(Text,{dimColor:true,children:"Press r to retry"}),n&&jsx(Text,{dimColor:true,children:"Press Escape to go back"})]})}function Ze({itemName:e,actions:t,onAction:n,onClose:r}){let o=p(a=>a.focus),[i,s]=useState(0);return useInput((a,u)=>{u.upArrow?s(c=>c>0?c-1:c):u.downArrow?s(c=>c<t.length-1?c+1:c):u.return?n(t[i]):u.escape&&r();},{isActive:o==="actionMenu"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Text,{bold:true,children:e}),jsx(Box,{flexDirection:"column",marginTop:1,children:t.map((a,u)=>jsx(Box,{children:jsxs(Text,{bold:u===i,color:u===i?"cyan":void 0,children:[u===i?"\u203A ":"  ",a]})},u))})]})}function Cn({itemName:e,onInstall:t,onClose:n}){return jsx(Ze,{itemName:e,actions:["Install","Cancel"],onAction:i=>{i==="Install"?t():n();},onClose:n})}function Un({itemName:e,itemStatus:t,updateAvailable:n,catalogVersion:r,onUninstall:o,onToggleStatus:i,onUpdate:s,onClose:a}){let[u,c]=useState(false),m=p(l=>l.focus);if(useInput((l,d)=>{d.escape||l==="n"?c(false):l==="y"&&o();},{isActive:u&&m==="actionMenu"}),u)return jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Uninstall "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]});let h=t==="enabled"?"Disable":"Enable",T=r?`Update to v${r}`:"Update";return jsx(Ze,{itemName:e,actions:n?["Uninstall",h,T,"Cancel"]:["Uninstall",h,"Cancel"],onAction:l=>{l==="Uninstall"?c(true):l===h?i():l.startsWith("Update")?s?.():a();},onClose:a})}async function Dn(e,t){let n=q.resolve(t);await N.mkdir(n,{recursive:true});let r=q.join(q.dirname(n),`${randomUUID()}.zip`);try{await N.writeFile(r,e),await ko(r,{dir:n,onEntry(o){if((o.externalFileAttributes>>16&61440)===40960)throw new Error(`Zip Slip (symlink): entry "${o.fileName}" is a symbolic link and was rejected`);let s=q.resolve(n,o.fileName);if(!s.startsWith(n+q.sep)&&s!==n)throw new Error(`Zip Slip detected: entry "${o.fileName}" would escape target directory`)}});try{let o=realpathSync(n);if(!o.startsWith(q.resolve(q.dirname(n))))throw new Error(`Zip Slip (post-extract): resolved path "${o}" is outside expected parent`)}catch(o){if(o.code!=="ENOENT")throw o}}finally{try{await N.unlink(r);}catch{}}}async function Et(e){await N.rm(e,{recursive:true,force:true});}async function te(){let e=Xt();await N.mkdir(q.dirname(e),{recursive:true});try{await N.writeFile(e,"",{flag:"wx"});}catch(n){if(n.code!=="EEXIST")throw n}return await Ro.lock(e,{stale:1e4,retries:{retries:2,minTimeout:500,maxTimeout:500}})}function Lo(){return {$schema:"https://anthropic.com/claude-code/marketplace.schema.json",name:b,description:"Flow Skills marketplace",owner:{name:"Flow Team",email:"flow@ciandt.com"},plugins:[]}}function Fn(){let e=Ne();if(!E__default.existsSync(e))return null;try{return JSON.parse(E__default.readFileSync(e,"utf-8"))}catch{return null}}function Mo(){let e=Fn();if(e)return e;let t=Lo(),n=Ne();return E__default.mkdirSync(q__default.dirname(n),{recursive:true}),Tt(t),t}function Tt(e){let t=Ne(),n=`${t}.tmp`;E__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),E__default.renameSync(n,t);}function Uo(){let e=zt(),t={};try{E__default.existsSync(e)&&(t=JSON.parse(E__default.readFileSync(e,"utf-8")));}catch{t={};}if(t[b])return;t[b]={source:{source:"github",repo:"CI-T-HyperX/flow-skills"},installLocation:Gt(),lastUpdated:new Date().toISOString()};let n=`${e}.tmp`;E__default.writeFileSync(n,JSON.stringify(t,null,2),"utf-8"),E__default.renameSync(n,e);}function Nn(e,t){Uo();let n=ut(e.name);E__default.mkdirSync(q__default.dirname(n),{recursive:true});try{E__default.lstatSync(n),E__default.rmSync(n,{recursive:!0,force:!0});}catch{}E__default.symlinkSync(t,n);let r=Mo();r.plugins.some(i=>i.name===e.name)||(r.plugins.push({name:e.name,description:e.description,version:e.version,author:e.author,source:`./plugins/native/${e.name}`,category:e.category}),Tt(r));}function Bn(e){let t=ut(e);try{E__default.rmSync(t,{recursive:!0,force:!0});}catch{}let n=Fn();if(!n)return;let r=n.plugins.length;n.plugins=n.plugins.filter(o=>o.name!==e),n.plugins.length!==r&&Tt(n);}var J=S("storage");function jn(){return q__default.join(Q__default.homedir(),".claude","plugins","installed_plugins.json")}function Do(){return q__default.join(Q__default.homedir(),".claude","plugins")}function Oo(e){let t=q__default.resolve(e),n=q__default.resolve(Do());if(!t.startsWith(n+q__default.sep)&&t!==n)throw new Error(`Security error: installPath '${e}' is outside the plugins directory`)}function _n(){return q__default.join(Q__default.homedir(),".claude","settings.json")}function H(){let e=jn();if(!E__default.existsSync(e))return {version:2,plugins:{}};try{return JSON.parse(E__default.readFileSync(e,"utf-8"))}catch{return {version:2,plugins:{}}}}function Ce(e){let t=jn();E__default.mkdirSync(q__default.dirname(t),{recursive:true});let n=`${t}.tmp`;E__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),E__default.renameSync(n,t);}function Re(e){let t=e.lastIndexOf("@");return t===-1?{name:e,marketplace:""}:{name:e.slice(0,t),marketplace:e.slice(t+1)}}function Fo(e){let t=q__default.join(e,".claude-plugin","plugin.json");if(!E__default.existsSync(t))return null;try{return JSON.parse(E__default.readFileSync(t,"utf-8"))}catch{return null}}function $t(){let e=_n();if(!E__default.existsSync(e))return {};try{return JSON.parse(E__default.readFileSync(e,"utf-8"))}catch{return {}}}function Kn(e){let t=_n(),n=`${t}.tmp`;E__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),E__default.renameSync(n,t);}function No(){return $t().enabledPlugins??{}}function Bo(e){let t=$t(),n=t.enabledPlugins;if(!n||!(e in n))return;let{[e]:r,...o}=n;t.enabledPlugins=o,Kn(t);}function kt(e,t){let n=$t(),r=n.enabledPlugins??{};n.enabledPlugins={...r,[e]:t},Kn(n);}function R(){let e=H(),t=No();return Object.entries(e.plugins).map(([n,r])=>{let o=r[0],{name:i,marketplace:s}=Re(n),a=Fo(o.installPath),u=t[n];return {name:i,marketplace:s,version:o.version,installedAt:o.installedAt,installPath:o.installPath,scope:o.scope,description:a?.description,author:a?.author,status:u===false?"disabled":"enabled"}})}async function Ye(e){J.debug(`[${e}] Acquiring lock to uninstall`);let t=await te();try{let{name:n,marketplace:r}=Re(e),o=H(),i;if(r?(i=`${n}@${r}`,o.plugins[i]||(i=void 0)):i=Object.keys(o.plugins).filter(h=>Re(h).name===n)[0],!i)throw J.error(`[${n}] Plugin is not installed`),new Error(`Plugin '${n}' is not installed`);J.debug(`[${n}] Resolved key: ${i}`);let s=o.plugins[i][0].installPath;Oo(s);let a=q__default.dirname(s);J.debug(`[${n}] Removing directory: ${a}`),E__default.rmSync(a,{recursive:!0,force:!0}),Bn(n);let{[i]:u,...c}=o.plugins;Ce({...o,plugins:c}),Bo(i),J.debug(`[${n}] Uninstalled successfully`);}finally{await t();}}async function Le(e,t){J.debug(`[${e}] Acquiring lock to set status \u2192 ${t}`);let n=await te();try{let{name:r}=Re(e),o=H(),i=Object.keys(o.plugins).filter(s=>Re(s).name===r);if(i.length===0)throw J.error(`[${r}] Plugin is not installed`),new Error(`Plugin '${r}' is not installed`);J.debug(`[${r}] Resolved key: ${i[0]}`),kt(i[0],t==="enabled"),J.debug(`[${r}] Status updated to ${t}`);}finally{await n();}}var V=create(e=>({installedItems:[],setInstalledItems:t=>e({installedItems:t}),loadFromDisk:()=>e({installedItems:R()})}));var L=["discover","installed"];function Jn(e,t,n){if(t.rightArrow||t.tab){let r=L.indexOf(n.activeTab);return [{type:"setTab",tab:L[(r+1)%L.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}if(t.leftArrow){let r=L.indexOf(n.activeTab);return [{type:"setTab",tab:L[(r-1+L.length)%L.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}return t.downArrow?[{type:"setFocus",focus:"list"}]:[]}function qn(e,t,n,r){if(t.upArrow&&n.selectedIndex>0)return [{type:"setSelectedIndex",index:n.selectedIndex-1}];if(t.downArrow&&n.selectedIndex<r-1)return [{type:"setSelectedIndex",index:n.selectedIndex+1}];if(t.tab){let o=L.indexOf(n.activeTab);return [{type:"setTab",tab:L[(o+1)%L.length]},{type:"setSelectedIndex",index:0}]}return t.return?[{type:"setActionMenuOpen",open:true},{type:"setFocus",focus:"actionMenu"}]:e==="/"?[{type:"setFocus",focus:"search"}]:[]}function Hn(e,t){return t.escape?[{type:"setActionMenuOpen",open:false},{type:"setFocus",focus:"list"}]:[]}function Vn(e,t){return t.escape?{actions:[{type:"setFocus",focus:"list"}],queryUpdate:"reset"}:t.return?{actions:[{type:"setFocus",focus:"list"}],queryUpdate:null}:t.backspace||t.delete?{actions:[],queryUpdate:{backspace:true}}:e&&!t.ctrl&&!t.meta?{actions:[],queryUpdate:{append:e}}:{actions:[],queryUpdate:null}}function et(e){let{setActiveTab:t,setFocus:n,setSelectedIndex:r,setActionMenuOpen:o}=p.getState();for(let i of e)i.type==="setTab"?t(i.tab):i.type==="setFocus"?n(i.focus):i.type==="setSelectedIndex"?r(i.index):i.type==="setActionMenuOpen"&&o(i.open);}function Gn({listLength:e}){let t=p(l=>l.focus),n=p(l=>l.selectedIndex),r=p(l=>l.actionMenuOpen),o=p(l=>l.setFocus),i=p(l=>l.setActionMenuOpen),s=F(l=>l.query),a=F(l=>l.setQuery),u=F(l=>l.resetQuery),c=useRef(e);useEffect(()=>{c.current=e;},[e]);let[m,h]=useState("");useEffect(()=>{let l=setTimeout(()=>h(s),300);return ()=>clearTimeout(l)},[s]),useInput((l,d)=>{l==="q"&&process.exit(0);},{isActive:t!=="search"&&t!=="auth"}),useInput((l,d)=>{let{activeTab:f,selectedIndex:y,actionMenuOpen:M}=p.getState();et(Jn(l,d,{activeTab:f}));},{isActive:t==="tabs"}),useInput((l,d)=>{let{activeTab:f,selectedIndex:y,actionMenuOpen:M}=p.getState();et(qn(l,d,{activeTab:f,selectedIndex:y},c.current));},{isActive:t==="list"}),useInput((l,d)=>{et(Hn(l,d));},{isActive:t==="actionMenu"}),useInput((l,d)=>{let f=Vn(l,d),y=f.queryUpdate;et(f.actions),y==="reset"?(u(),h("")):y!==null&&("backspace"in y?a(F.getState().query.slice(0,-1)):a(F.getState().query+y.append));},{isActive:t==="search"});let T=useCallback(()=>{i(false),o("list");},[i,o]),ie=useCallback(l=>{let{setSelectedIndex:d,selectedIndex:f}=p.getState();l===0?d(0):f>=l&&d(l-1);},[]),se=useCallback(l=>{if(!m)return c.current=l.length,l;let d=m.toLowerCase(),f=l.filter(y=>y.name.toLowerCase().includes(d)||y.description?.toLowerCase().includes(d));return c.current=f.length,f},[m]);return {actionMenuOpen:r,closeMenu:T,selectedIndex:n,clampIndex:ie,filteredItems:se}}function Wn(){let e=p(a=>a.notification),t=p(a=>a.showNotification),n=p(a=>a.clearNotification),r=j(a=>a.justAuthenticated),o=j(a=>a.credentials),i=j(a=>a.setJustAuthenticated);return useEffect(()=>{r&&o&&(t(`Authenticated. Tenant: ${o.tenant}`,"success"),i(false));},[r,o]),useEffect(()=>{if(!e)return;let a=setTimeout(n,3e3);return ()=>clearTimeout(a)},[e]),{notify:(a,u)=>{t(a,u);}}}var ye=class extends Error{constructor(n,r){super(`${n} v${r} is already installed. Use --force to reinstall.`);this.pluginName=n;this.version=r;this.name="AlreadyInstalledError";}},ne=class extends Error{constructor(n,r){super(`${n} is already up to date (v${r})`);this.pluginName=n;this.version=r;this.name="AlreadyUpToDateError";}};var qo=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function tt(){return Jr.create({prefixUrl:Fe("PROMPT_MANAGER_URL","https://flow.ciandt.com/prompt-manager-api/"),hooks:{beforeRequest:[async e=>{let t=await tn();e.headers.set("Authorization",`Bearer ${t}`);let n=C();n?.tenant&&qo.test(n.tenant)&&e.headers.set("FlowTenant",n.tenant);}]}})}var Ho=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function Zn(e){if(!e||!Ho.test(e))throw new Error(`Invalid plugin name: "${e}". Must be 1-64 chars, lowercase alphanumeric and hyphens only.`)}async function z(){try{let{plugins:e}=await tt().get("v1/plugins/catalog").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow-cli auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching plugin catalog"):new Error(`Failed to fetch plugin catalog: ${e.message}`):e}}async function we(e){Zn(e);try{return await tt().get(`v1/plugins/${e}/manifest`).json()}catch(t){throw t instanceof Error?t.message.includes("404")?new Error(`Plugin '${e}' not found in catalog`):t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to fetch plugin manifest: ${t.message}`):t}}async function Qn(e){Zn(e);try{let t=await tt().get(`v1/plugins/${e}/archive`);return Buffer.from(await t.arrayBuffer())}catch(t){throw t instanceof Error?t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to download plugin: ${t.message}`):t}}var Vo=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function zo(e){if(!Vo.test(e))throw new Error(`Invalid plugin name from manifest: "${e}". Plugin names must be lowercase alphanumeric and hyphens (1-64 chars).`)}var Ue=S("installer");function Go(e,t){let n=`${e}@${b}`,o=H().plugins[n];if(o&&!t)throw new ye(e,o[0].version);return {pluginKey:n,alreadyInstalled:o}}async function Xo(e,t,n){n&&await Et(t);try{Ue.debug(`Extracting to ${t}...`),await Dn(e,t);}catch(r){throw await Et(t),r}}function Wo(e,t,n){let r=H(),o={scope:"user",installPath:t,version:n,installedAt:new Date().toISOString()};r.plugins[e]=[o],Ce(r),kt(e,true);}async function xe(e,t={}){let n=Date.now(),r=null;try{Ue.debug(`[${e}] Acquiring lock...`),r=await te();let{pluginKey:o,alreadyInstalled:i}=Go(e,t.force);Ue.debug(`[${e}] Fetching manifest...`);let s=await we(e);zo(s.name),Ue.debug(`[${e}] Downloading archive...`);let a=await Qn(e),u=Vt(s.name,s.version);await Xo(a,u,!!i&&!!t.force),Wo(o,u,s.version),Nn(s,u);let c=Date.now()-n;return Ue.debug(`[${e}] Installed successfully in ${c}ms`),{name:s.name,version:s.version,path:u,duration_ms:c}}finally{r&&await r();}}function G(e,t,n=false){return n?true:!Ct.valid(e)||!Ct.valid(t)?false:Ct.gt(t,e)}var re=S("updater");function Zo(e){let t=H(),n=`${e}@${b}`,r=t.plugins[n];return !r||r.length===0?null:{pluginKey:n,entry:r[0]}}async function nt(e,t={}){let n=Date.now(),r=null;try{re.debug(`[${e}] Acquiring lock...`),r=await te();let o=Zo(e);if(!o)throw re.error(`[${e}] Plugin is not installed`),new Error(`Plugin "${e}" is not installed`);let{entry:i}=o,s=i.version,a=i.installPath;re.debug(`[${e}] Fetching manifest...`);let c=(await we(e)).version;if(!G(s,c,t.force))throw re.debug(`[${e}] Already up to date (v${s})`),new ne(e,s);re.info(`[${e}] Updating v${s} \u2192 v${c}...`),await r(),r=null;try{let m=await xe(e,{force:!0}),h=Date.now()-n;return re.debug(`[${e}] Updated successfully in ${h}ms`),{name:m.name,previousVersion:s,newVersion:m.version,path:m.path,duration_ms:h}}catch(m){re.warn(`[${e}] Install failed, rolling back to v${s}...`),r=await te();let h=H(),T=`${e}@${b}`;throw h.plugins[T]&&(h.plugins[T][0].version=s,h.plugins[T][0].installPath=a,Ce(h),re.info(`[${e}] Rollback completed, restored to v${s}`)),m}}finally{r&&await r();}}function Yn(){let e=V(s=>s.installedItems),t=V(s=>s.setInstalledItems),n=useCallback(async s=>{await xe(s.name),V.getState().loadFromDisk();},[]),r=useCallback(async s=>{await Ye(s),t(e.filter(a=>a.name!==s));},[e,t]),o=useCallback(async s=>{let u=e.find(c=>c.name===s)?.status==="enabled"?"disabled":"enabled";await Le(s,u),t(e.map(c=>c.name===s?{...c,status:u}:c));},[e,t]),i=useCallback(async s=>{await nt(s),V.getState().loadFromDisk();},[]);return {install:n,uninstall:r,toggle:o,update:i}}function er({selectedItem:e,selectedCatalogItem:t,items:n,closeMenu:r,clampIndex:o,notify:i}){let s=p(d=>d.setLoading),{install:a,uninstall:u,toggle:c,update:m}=Yn(),h=async(d,f,y)=>{s(true,d),r();try{await f(),o(n.length),i(y,"success");}catch(M){i(M instanceof Error?M.message:"Something went wrong","error");}finally{s(false);}};return {handleInstall:()=>{e&&t&&h(`Installing ${e.name}...`,()=>a(t),"\u2713 Installed successfully");},handleUninstall:()=>{e&&h(`Uninstalling ${e.name}...`,()=>u(e.name),"\u2713 Uninstalled");},handleToggleStatus:()=>{if(!e)return;let d=e.status==="enabled";h(d?`Disabling ${e.name}...`:`Enabling ${e.name}...`,()=>c(e.name),d?"\u2713 Disabled":"\u2713 Enabled");},handleUpdate:()=>{if(!e)return;let d=t?` to v${t.version}`:"";(async()=>{s(true,`Updating ${e.name}${d}...`),r();try{await m(e.name),o(n.length),i(`\u2713 Updated ${e.name}${d}`,"success");}catch(y){y instanceof ne?i(y.message,"info"):i(y instanceof Error?y.message:"Something went wrong","error");}finally{s(false);}})();}}}function tr(){let[e,t]=useState([]),[n,r]=useState(true),[o,i]=useState(null),s=useCallback(async()=>{r(true),i(null);try{let a=await z();t(a);}catch(a){i(a instanceof Error?a:new Error(String(a))),t([]);}finally{r(false);}},[]);return useEffect(()=>{s();},[s]),{catalog:e,isLoading:n,error:o,refetch:s}}function nr(){return {items:V(t=>t.installedItems)}}var ti=S("catalog");function ni(e){return {name:e.name,version:e.version,description:e.description,authorName:e.author.name,updateAvailable:e.updateAvailable}}function ri(e){return {name:e.name,version:e.version,description:e.description,authorName:e.author?.name,status:e.status,updateAvailable:e.updateAvailable,installedAt:e.installedAt}}function rr(){let e=p(g=>g.activeTab),t=p(g=>g.notification),n=p(g=>g.loading),r=p(g=>g.loadingMessage),o=p(g=>g.catalogError),i=p(g=>g.setCatalogError),s=F(g=>g.query),{catalog:a,isLoading:u,error:c,refetch:m}=tr(),{items:h}=nr(),T=V(g=>g.loadFromDisk),ie=useMemo(()=>new Set(h.map(g=>`${g.name}|${g.author?.name??""}|${g.marketplace}`)),[h]),se=useMemo(()=>{let g=new Map(a.map(pe=>[pe.name,pe.version]));return h.map(pe=>{let Nt=g.get(pe.name),Er=!!Nt&&G(pe.version,Nt);return {...pe,updateAvailable:Er}})},[h,a]),l=e==="discover"?a.filter(g=>!ie.has(`${g.name}|${g.author.name}|${b}`)).map(g=>ni(g)):se.map(g=>ri(g)),{actionMenuOpen:d,closeMenu:f,selectedIndex:y,clampIndex:M,filteredItems:wr}=Gn({listLength:l.length}),De=wr(l),U=De[y]??null,Ft=useMemo(()=>U?a.find(g=>g.name===U.name)??null:null,[a,U]),xr=e==="installed"?"No plugins installed \u2014 explore the Discover tab!":s?`No plugins found for '${s}'`:"No plugins available in the catalog",{notify:br}=Wn(),{handleInstall:vr,handleUninstall:Pr,handleToggleStatus:Ir,handleUpdate:Sr}=er({selectedItem:U,selectedCatalogItem:Ft,items:l,closeMenu:f,clampIndex:M,notify:br});return useEffect(()=>{T();},[]),useEffect(()=>{M(De.length);},[De.length,M]),useEffect(()=>{c&&(ti.error(`[usePluginCatalog] ${c instanceof Error?c.message:String(c)}`),i("Failed to load catalog"));},[c]),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(sn,{}),jsx(ln,{}),jsx(wn,{filteredItems:De,emptyMessage:xr}),(n||u)&&jsx(En,{message:n?r:"Loading catalog..."}),o&&!u&&e==="discover"&&jsx($n,{message:o,onRetry:()=>{i(null),m();},onBack:()=>i(null)}),t&&jsx(vn,{message:t.message,type:t.type}),d&&U&&e==="discover"&&jsx(Cn,{itemName:U.name,onInstall:vr,onClose:f}),d&&U&&e==="installed"&&jsx(Un,{itemName:U.name,itemStatus:U.status??"enabled",updateAvailable:U.updateAvailable??false,catalogVersion:Ft?.version,onUninstall:Pr,onToggleStatus:Ir,onUpdate:Sr,onClose:f}),jsx(bn,{})]})}var or=C();if(or&&D()){let{clientSecret:e,...t}=or;j.getState().setCredentials(t),p.getState().setFocus("list");}else p.getState().setFocus("auth");function sr(){return j(t=>t.isAuthenticated)?jsx(rr,{}):jsx(nn,{})}var W=S("auth");function ot(e,t={}){return new Promise((n,r)=>{let{masked:o=false,defaultValue:i=""}=t;process.stdout.write(e+i);let s=i,a=m=>{if(m===""){u(),r(new Error("SIGINT"));return}if(m==="\r"||m===`
-`){u(),process.stdout.write(`
-`),n(s);return}if(m==="\x7F"){s.length>0&&(s=s.slice(0,-1),process.stdout.write("\b \b"));return}m.startsWith("\x1B")||(s+=m,process.stdout.write(o?"*".repeat(m.length):m));};function u(){process.stdin.setRawMode(false),process.stdin.removeListener("data",a),process.removeListener("uncaughtException",c),process.removeListener("unhandledRejection",c);}function c(){try{process.stdin.setRawMode(!1);}catch{}}process.on("uncaughtException",c),process.on("unhandledRejection",c),process.stdin.setRawMode(true),process.stdin.resume(),process.stdin.setEncoding("utf8"),process.stdin.on("data",a);})}async function ii(e){W.debug(`Authenticating tenant: ${e.tenant}`);try{return await Ee(e),W.info(`Authentication successful for tenant: ${e.tenant}`),process.stdout.write(x.green(`  \u2713 Setup complete. Tenant: ${e.tenant}
+`);}function Bt(e){process.stdout.write(JSON.stringify(e,null,2)+`
+`);}function Lt(e){let t=new Date(e);return isNaN(t.getTime())?"\u2014":new Intl.DateTimeFormat("en-US",{dateStyle:"short"}).format(t)}var Lr=ti.memo(function({item:t,isSelected:n}){let r=t.status==="disabled"?"yellow":"green";return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:n?"cyan":"gray",children:n?"\u203A ":"\u25CB "}),jsx(Text,{bold:n,color:n?"cyan":"white",children:t.name}),jsxs(Text,{dimColor:true,children:[t.authorName?` \xB7 ${t.authorName}`:"",t.version?` \xB7 v${t.version}`:" \xB7 n/a"]}),t.status&&jsxs(Text,{color:r,children:[" [",t.status,"]"]}),t.updateAvailable&&jsx(Text,{color:"yellow",children:" [\u2191 update available]"}),t.installedBadge&&jsx(Text,{color:"cyan",children:" [installed]"}),t.installedAt&&jsxs(Text,{dimColor:true,children:[" \xB7 ",Lt(t.installedAt)]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:t.description})})]})});function Mt({message:e}){return jsx(Box,{paddingX:2,paddingY:1,children:jsx(Text,{dimColor:true,children:e??"No items found."})})}var bn=5;function Ur({items:e,emptyMessage:t}){let n=p(c=>c.selectedIndex);if(e.length===0)return jsx(Mt,{message:t});let r=Math.max(0,n-Math.floor(bn/2)),o=Math.min(e.length,r+bn);o===e.length&&(r=Math.max(0,o-bn));let s=e.slice(r,o),i=r,l=e.length-o;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:i>0?`\u2191 ${i} more above`:" "})}),s.map((c,a)=>jsx(Lr,{item:c,isSelected:r+a===n},c.name)),jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:l>0?`\u2193 ${l} more below`:" "})})]})}var si={discover:"Discover plugins",installed:"Installed plugins"};function Fr({items:e,tabId:t,emptyMessage:n}){return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{paddingX:1,paddingBottom:1,children:[jsx(Text,{bold:true,children:si[t]}),jsxs(Text,{dimColor:true,children:[" (",e.length,")"]})]}),jsx(Br,{}),jsx(Ur,{items:e,emptyMessage:n})]})}function Or({filteredItems:e,emptyMessage:t}){let n=p(r=>r.activeTab);return jsx(Box,{flexDirection:"column",flexGrow:1,children:n==="discover"?jsx(Fr,{items:e,tabId:"discover",emptyMessage:t},"discover"):jsx(Fr,{items:e,tabId:"installed",emptyMessage:t},"installed")})}var li={tabs:"\u2190\u2192: switch tab | \u2193: navigate | Enter: select | Ctrl+C Ctrl+C: quit",list:"\u2190\u2192/Tab: switch tab | \u2191\u2193: navigate | Enter: select | Type to search | Ctrl+C Ctrl+C: quit",search:"Type to filter | \u2193/Esc: exit search | Enter: confirm",actionMenu:"\u2191\u2193: navigate options | Enter: confirm | Esc: close menu",auth:"Tab: next field | Enter: confirm | Ctrl+C Ctrl+C: quit",bundleList:"\u2191\u2193: navigate | Enter: select bundle | Esc: skip",bundleDetail:"\u2191\u2193: navigate | Enter: confirm & install | Esc: back",installProgress:"\u2191\u2193: navigate | Enter: select"};function Dt(){let e=p(t=>t.focus);return jsx(Box,{borderStyle:"single",borderTop:true,borderBottom:false,borderLeft:false,borderRight:false,children:jsx(Text,{dimColor:true,children:li[e]})})}function jr({message:e,type:t}){return e?jsx(Box,{paddingX:1,children:jsxs(Text,{color:t==="success"?"green":t==="info"?"cyan":"red",children:[t==="success"?"\u2713":t==="info"?"(i)":"\u2717"," ",e]})}):null}function Ut({message:e}){return jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(fi,{type:"dots"})}),jsxs(Text,{children:[" ",e]})]})}function Nt({message:e,onRetry:t,onBack:n}){return useInput((r,o)=>{r==="r"&&o.ctrl&&t?t():o.escape&&n&&n();}),jsxs(Box,{flexDirection:"column",paddingX:2,paddingY:1,children:[jsxs(Text,{color:"red",children:["\u2717 ",e]}),t&&jsx(Text,{dimColor:true,children:"Press Ctrl+R to retry"}),n&&jsx(Text,{dimColor:true,children:"Press Escape to go back"})]})}function Ft({itemName:e,actions:t,onAction:n,onClose:r}){let o=p(l=>l.focus),[s,i]=useState(0);return useInput((l,c)=>{c.upArrow?i(a=>a>0?a-1:a):c.downArrow?i(a=>a<t.length-1?a+1:a):c.return?n(t[s]):c.escape&&r();},{isActive:o==="actionMenu"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsx(Box,{flexDirection:"column",marginTop:1,children:t.map((l,c)=>jsx(Box,{children:jsxs(Text,{bold:c===s,color:c===s?"cyan":void 0,children:[c===s?"\u203A ":"  ",l]})},c))})]})}function Gr({itemName:e,onInstall:t,onClose:n}){return jsx(Ft,{itemName:e,actions:["Install","Cancel"],onAction:s=>{s==="Install"?t():n();},onClose:n})}function Zr({itemName:e,itemStatus:t,updateAvailable:n,catalogVersion:r,onUninstall:o,onToggleStatus:s,onUpdate:i,onClose:l}){let[c,a]=useState(false),d=p(u=>u.focus);if(useInput((u,m)=>{m.escape||u==="n"?a(false):u==="y"&&o();},{isActive:c&&d==="actionMenu"}),c)return jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Uninstall "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]});let h=t==="enabled"?"Disable":"Enable",E=r?`Update to v${r}`:"Update";return jsx(Ft,{itemName:e,actions:n?["Uninstall",h,E,"Cancel"]:["Uninstall",h,"Cancel"],onAction:u=>{u==="Uninstall"?a(true):u===h?s():u.startsWith("Update")?i?.():l();},onClose:l})}async function Yr(e,t){let n=le.resolve(t);await ee.mkdir(n,{recursive:true});let r=le.join(le.dirname(n),`${randomUUID()}.zip`);try{await ee.writeFile(r,e),await Pi(r,{dir:n,onEntry(o){if((o.externalFileAttributes>>16&61440)===40960)throw new Error(`Zip Slip (symlink): entry "${o.fileName}" is a symbolic link and was rejected`);let i=le.resolve(n,o.fileName);if(!i.startsWith(n+le.sep)&&i!==n)throw new Error(`Zip Slip detected: entry "${o.fileName}" would escape target directory`)}});try{let o=realpathSync(n);if(!o.startsWith(le.resolve(le.dirname(n))))throw new Error(`Zip Slip (post-extract): resolved path "${o}" is outside expected parent`)}catch(o){if(o.code!=="ENOENT")throw o}}finally{try{await ee.unlink(r);}catch{}}}async function Tn(e){await ee.rm(e,{recursive:true,force:true});}async function xe(){let e=ir();await ee.mkdir(le.dirname(e),{recursive:true});try{await ee.writeFile(e,"",{flag:"wx"});}catch(n){if(n.code!=="EEXIST")throw n}return await Ii.lock(e,{stale:1e4,retries:{retries:2,minTimeout:500,maxTimeout:500}})}function Ti(){return {$schema:"https://anthropic.com/claude-code/marketplace.schema.json",name:T,description:"Flow Skills marketplace",owner:{name:"Flow Team",email:"flow@ciandt.com"},plugins:[]}}function to(){let e=gt();if(!L__default.existsSync(e))return null;try{return JSON.parse(L__default.readFileSync(e,"utf-8"))}catch{return null}}function Ai(){let e=to();if(e)return e;let t=Ti(),n=gt();return L__default.mkdirSync(le__default.dirname(n),{recursive:true}),An(t),t}function An(e){let t=gt(),n=`${t}.tmp`;L__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),L__default.renameSync(n,t);}function $i(){let e=or(),t={};try{L__default.existsSync(e)&&(t=JSON.parse(L__default.readFileSync(e,"utf-8")));}catch{t={};}if(t[T])return;t[T]={source:{source:"github",repo:"CI-T-HyperX/flow-skills"},installLocation:sr(),lastUpdated:new Date().toISOString()};let n=`${e}.tmp`;L__default.writeFileSync(n,JSON.stringify(t,null,2),"utf-8"),L__default.renameSync(n,e);}function no(e,t){$i();let n=rn(e.name);L__default.mkdirSync(le__default.dirname(n),{recursive:true});try{L__default.lstatSync(n),L__default.rmSync(n,{recursive:!0,force:!0});}catch{}L__default.symlinkSync(t,n);let r=Ai();r.plugins.some(s=>s.name===e.name)||(r.plugins.push({name:e.name,description:e.description,version:e.version,author:e.author,source:`./plugins/native/${e.name}`,category:e.category}),An(r));}function ro(e){let t=rn(e);try{L__default.rmSync(t,{recursive:!0,force:!0});}catch{}let n=to();if(!n)return;let r=n.plugins.length;n.plugins=n.plugins.filter(o=>o.name!==e),n.plugins.length!==r&&An(n);}var ae=S("storage");function oo(){return le__default.join(fe__default.homedir(),".claude","plugins","installed_plugins.json")}function Ci(){return le__default.join(fe__default.homedir(),".claude","plugins")}function Ri(e){let t=le__default.resolve(e),n=le__default.resolve(Ci());if(!t.startsWith(n+le__default.sep)&&t!==n)throw new Error(`Security error: installPath '${e}' is outside the plugins directory`)}function so(){return le__default.join(fe__default.homedir(),".claude","settings.json")}function ce(){let e=oo();if(!L__default.existsSync(e))return {version:2,plugins:{}};try{return JSON.parse(L__default.readFileSync(e,"utf-8"))}catch{return {version:2,plugins:{}}}}function ot(e){let t=oo();L__default.mkdirSync(le__default.dirname(t),{recursive:true});let n=`${t}.tmp`;L__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),L__default.renameSync(n,t);}function rt(e){let t=e.lastIndexOf("@");return t===-1?{name:e,marketplace:""}:{name:e.slice(0,t),marketplace:e.slice(t+1)}}function ki(e){let t=le__default.join(e,".claude-plugin","plugin.json");if(!L__default.existsSync(t))return null;try{return JSON.parse(L__default.readFileSync(t,"utf-8"))}catch{return null}}function Cn(){let e=so();if(!L__default.existsSync(e))return {};try{return JSON.parse(L__default.readFileSync(e,"utf-8"))}catch{return {}}}function io(e){let t=so(),n=`${t}.tmp`;L__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),L__default.renameSync(n,t);}function Bi(){return Cn().enabledPlugins??{}}function Li(e){let t=Cn(),n=t.enabledPlugins;if(!n||!(e in n))return;let{[e]:r,...o}=n;t.enabledPlugins=o,io(t);}function Rn(e,t){let n=Cn(),r=n.enabledPlugins??{};n.enabledPlugins={...r,[e]:t},io(n);}function q(){let e=ce(),t=Bi();return Object.entries(e.plugins).map(([n,r])=>{let o=r[0],{name:s,marketplace:i}=rt(n),l=ki(o.installPath),c=t[n];return {name:s,marketplace:i,version:o.version&&o.version!=="unknown"?o.version:void 0,installedAt:o.installedAt,installPath:o.installPath,scope:o.scope,description:l?.description,author:l?.author,status:c===false?"disabled":"enabled"}})}async function _t(e){ae.debug(`[${e}] Acquiring lock to uninstall`);let t=await xe();try{let{name:n,marketplace:r}=rt(e),o=ce(),s;if(r?(s=`${n}@${r}`,o.plugins[s]||(s=void 0)):s=Object.keys(o.plugins).filter(h=>rt(h).name===n)[0],!s)throw ae.error(`[${n}] Plugin is not installed`),new Error(`Plugin '${n}' is not installed`);ae.debug(`[${n}] Resolved key: ${s}`);let i=o.plugins[s][0].installPath;Ri(i);let l=le__default.dirname(i);ae.debug(`[${n}] Removing directory: ${l}`),L__default.rmSync(l,{recursive:!0,force:!0}),ro(n);let{[s]:c,...a}=o.plugins;ot({...o,plugins:a}),Li(s),ae.debug(`[${n}] Uninstalled successfully`);}finally{await t();}}async function st(e,t){ae.debug(`[${e}] Acquiring lock to set status \u2192 ${t}`);let n=await xe();try{let{name:r}=rt(e),o=ce(),s=Object.keys(o.plugins).filter(i=>rt(i).name===r);if(s.length===0)throw ae.error(`[${r}] Plugin is not installed`),new Error(`Plugin '${r}' is not installed`);ae.debug(`[${r}] Resolved key: ${s[0]}`),Rn(s[0],t==="enabled"),ae.debug(`[${r}] Status updated to ${t}`);}finally{await n();}}var M=create(e=>({installedItems:[],setInstalledItems:t=>e({installedItems:t}),loadFromDisk:()=>e({installedItems:q()})}));var $=["discover","installed"];function ao(e,t,n){if(t.rightArrow||t.tab){let r=$.indexOf(n.activeTab);return [{type:"setTab",tab:$[(r+1)%$.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}if(t.leftArrow){let r=$.indexOf(n.activeTab);return [{type:"setTab",tab:$[(r-1+$.length)%$.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}return t.downArrow?[{type:"setFocus",focus:"list"}]:[]}function lo(e,t,n,r){if(t.upArrow)return n.selectedIndex===0?[{type:"setSelectedIndex",index:-1},{type:"setFocus",focus:"search"}]:[{type:"setSelectedIndex",index:n.selectedIndex-1}];if(t.downArrow&&n.selectedIndex<r-1)return [{type:"setSelectedIndex",index:n.selectedIndex+1}];if(t.leftArrow){let o=$.indexOf(n.activeTab);return [{type:"setTab",tab:$[(o-1+$.length)%$.length]},{type:"setSelectedIndex",index:0}]}if(t.rightArrow){let o=$.indexOf(n.activeTab);return [{type:"setTab",tab:$[(o+1)%$.length]},{type:"setSelectedIndex",index:0}]}if(t.tab){let o=$.indexOf(n.activeTab);return [{type:"setTab",tab:$[(o+1)%$.length]},{type:"setSelectedIndex",index:0}]}return t.return?[{type:"setActionMenuOpen",open:true},{type:"setFocus",focus:"actionMenu"}]:e==="/"?[{type:"setFocus",focus:"search"}]:e&&e!==" "&&!t.ctrl&&!t.meta&&!t.escape?[{type:"setSelectedIndex",index:-1},{type:"setFocus",focus:"search"},{type:"searchAppend",char:e}]:[]}function co(e,t){return t.escape?[{type:"setActionMenuOpen",open:false},{type:"setFocus",focus:"list"}]:[]}function uo(e,t,n){return t.escape?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:"reset"}:t.downArrow?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:null}:t.leftArrow?{actions:[],queryUpdate:{cursorMove:-1}}:t.rightArrow?{actions:[],queryUpdate:{cursorMove:1}}:t.return?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:null}:t.backspace?n.length===0?{actions:[{type:"setFocus",focus:"list"},{type:"setSelectedIndex",index:0}],queryUpdate:null}:{actions:[],queryUpdate:{backspace:true}}:e&&!t.ctrl&&!t.meta?{actions:[],queryUpdate:{append:e}}:{actions:[],queryUpdate:null}}function Kt(e){let{setActiveTab:t,setFocus:n,setSelectedIndex:r,setActionMenuOpen:o}=p.getState();for(let s of e)if(s.type==="setTab")t(s.tab);else if(s.type==="setFocus")n(s.focus);else if(s.type==="setSelectedIndex")r(s.index);else if(s.type==="setActionMenuOpen")o(s.open);else if(s.type==="searchAppend"){let{setQuery:i,query:l,setCursorPosition:c,cursorPosition:a}=O.getState();i(l.slice(0,a)+s.char+l.slice(a)),c(a+s.char.length);}}function po({listLength:e}){let t=p(u=>u.focus),n=p(u=>u.selectedIndex),r=p(u=>u.actionMenuOpen),o=p(u=>u.setFocus),s=p(u=>u.setActionMenuOpen),i=O(u=>u.query),l=O(u=>u.setQuery),c=O(u=>u.resetQuery),a=useRef(e);useEffect(()=>{a.current=e;},[e]),useEffect(()=>{if(t==="search"){let{query:u,setCursorPosition:m}=O.getState();m(u.length);}},[t]);let[d,h]=useState("");useEffect(()=>{let u=setTimeout(()=>h(i),300);return ()=>clearTimeout(u)},[i]),useInput((u,m)=>{let{activeTab:y,selectedIndex:v,actionMenuOpen:I}=p.getState();Kt(ao(u,m,{activeTab:y}));},{isActive:t==="tabs"}),useInput((u,m)=>{let{activeTab:y,selectedIndex:v,actionMenuOpen:I}=p.getState();Kt(lo(u,m,{activeTab:y,selectedIndex:v},a.current));},{isActive:t==="list"}),useInput((u,m)=>{Kt(co(u,m));},{isActive:t==="actionMenu"}),useInput((u,m)=>{let y=uo(u,m,O.getState().query),v=y.queryUpdate;if(Kt(y.actions),v==="reset")c(),h("");else if(v!==null){let{query:I,cursorPosition:B,setCursorPosition:z}=O.getState();if("backspace"in v)B>0&&(l(I.slice(0,B-1)+I.slice(B)),z(B-1));else if("append"in v)l(I.slice(0,B)+v.append+I.slice(B)),z(B+v.append.length);else if("cursorMove"in v){let R=B+v.cursorMove;R>=0&&R<=I.length&&z(R);}}},{isActive:t==="search"});let E=useCallback(()=>{s(false),o("list");},[s,o]),U=useCallback(u=>{let{setSelectedIndex:m,selectedIndex:y}=p.getState();u===0?m(0):y>=u&&m(u-1);},[]),j=useCallback(u=>{if(!d)return a.current=u.length,u;let m=d.toLowerCase(),y=u.filter(v=>v.name.toLowerCase().includes(m)||v.description?.toLowerCase().includes(m));return a.current=y.length,y},[d]);return {actionMenuOpen:r,closeMenu:E,selectedIndex:n,clampIndex:U,filteredItems:j}}function fo(){let e=p(l=>l.notification),t=p(l=>l.showNotification),n=p(l=>l.clearNotification),r=X(l=>l.justAuthenticated),o=X(l=>l.credentials),s=X(l=>l.setJustAuthenticated);return useEffect(()=>{r&&o&&(t(`Authenticated. Tenant: ${o.tenant}`,"success"),s(false));},[r,o]),useEffect(()=>{if(!e)return;let l=setTimeout(n,3e3);return ()=>clearTimeout(l)},[e]),{notify:(l,c)=>{t(l,c);}}}var te=class extends Error{constructor(n,r){super(`${n} v${r} is already installed. Use --force to reinstall.`);this.pluginName=n;this.version=r;this.name="AlreadyInstalledError";}},be=class extends Error{constructor(n,r){super(`${n} is already up to date (v${r})`);this.pluginName=n;this.version=r;this.name="AlreadyUpToDateError";}};function it(){return _s.create({prefix:Tt("PROMPT_MANAGER_URL","https://flow.ciandt.com/prompt-manager-api/"),hooks:{beforeRequest:[async({request:e})=>{let t=await Pr();e.headers.set("Authorization",`Bearer ${t}`);let n=await F();n?.tenant&&mt.test(n.tenant)&&e.headers.set("FlowTenant",n.tenant);}]}})}var Fi=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function go(e){if(!e||!Fi.test(e))throw new Error(`Invalid plugin name: "${e}". Must be 1-64 chars, lowercase alphanumeric and hyphens only.`)}async function ue(){try{let{plugins:e}=await it().get("v1/plugins/catalog").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching plugin catalog"):new Error(`Failed to fetch plugin catalog: ${e.message}`):e}}async function Ke(e){go(e);try{return await it().get(`v1/plugins/${e}/manifest`).json()}catch(t){throw t instanceof Error?t.message.includes("404")?new Error(`Plugin '${e}' not found in catalog`):t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to fetch plugin manifest: ${t.message}`):t}}async function yo(e){go(e);try{let t=await it().get(`v1/plugins/${e}/archive`);return Buffer.from(await t.arrayBuffer())}catch(t){throw t instanceof Error?t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to download plugin: ${t.message}`):t}}async function Vt(){try{let{profiles:e}=await it().get("v1/plugins/profiles").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching bundles"):new Error(`Failed to fetch bundles: ${e.message}`):e}}var Oi=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function _i(e){if(!Oi.test(e))throw new Error(`Invalid plugin name from manifest: "${e}". Plugin names must be lowercase alphanumeric and hyphens (1-64 chars).`)}var at=S("installer");function ji(e,t){let n=`${e}@${T}`,o=ce().plugins[n];if(o&&!t)throw new te(e,o[0].version??"unknown");return {pluginKey:n,alreadyInstalled:o}}async function Ki(e,t,n){n&&await Tn(t);try{at.debug(`Extracting to ${t}...`),await Yr(e,t);}catch(r){throw await Tn(t),r}}function Vi(e,t,n){let r=ce(),o={scope:"user",installPath:t,version:n,installedAt:new Date().toISOString()};r.plugins[e]=[o],ot(r),Rn(e,true);}async function ne(e,t={}){let n=Date.now(),r=null;try{at.debug(`[${e}] Acquiring lock...`),r=await xe();let{pluginKey:o,alreadyInstalled:s}=ji(e,t.force);at.debug(`[${e}] Fetching manifest...`);let i=await Ke(e);_i(i.name),at.debug(`[${e}] Downloading archive...`);let l=await yo(e),c=rr(i.name,i.version);await Ki(l,c,!!s&&!!t.force),Vi(o,c,i.version),no(i,c);let a=Date.now()-n;return at.debug(`[${e}] Installed successfully in ${a}ms`),{name:i.name,version:i.version,path:c,duration_ms:a}}finally{r&&await r();}}function de(e,t,n=false){return n?true:!Ln.valid(e)||!Ln.valid(t)?false:Ln.gt(t,e)}var ve=S("updater");function Ji(e){let t=ce(),n=`${e}@${T}`,r=t.plugins[n];return !r||r.length===0?null:{pluginKey:n,entry:r[0]}}async function Jt(e,t={}){let n=Date.now(),r=null;try{ve.debug(`[${e}] Acquiring lock...`),r=await xe();let o=Ji(e);if(!o)throw ve.error(`[${e}] Plugin is not installed`),new Error(`Plugin "${e}" is not installed`);let{entry:s}=o,i=s.version,l=s.installPath;ve.debug(`[${e}] Fetching manifest...`);let a=(await Ke(e)).version;if(!i||!de(i,a,t.force))throw ve.debug(`[${e}] Already up to date (v${i??"n/a"})`),new be(e,i??"unknown");ve.info(`[${e}] Updating v${i} \u2192 v${a}...`),await r(),r=null;try{let d=await ne(e,{force:!0}),h=Date.now()-n;return ve.debug(`[${e}] Updated successfully in ${h}ms`),{name:d.name,previousVersion:i,newVersion:d.version,path:d.path,duration_ms:h}}catch(d){ve.warn(`[${e}] Install failed, rolling back to v${i}...`),r=await xe();let h=ce(),E=`${e}@${T}`;throw h.plugins[E]&&(h.plugins[E][0].version=i,h.plugins[E][0].installPath=l,ot(h),ve.info(`[${e}] Rollback completed, restored to v${i}`)),d}}finally{r&&await r();}}function ho(){let e=M(i=>i.installedItems),t=M(i=>i.setInstalledItems),n=useCallback(async i=>{await ne(i.name),M.getState().loadFromDisk();},[]),r=useCallback(async i=>{await _t(i),t(e.filter(l=>l.name!==i));},[e,t]),o=useCallback(async i=>{let c=e.find(a=>a.name===i)?.status==="enabled"?"disabled":"enabled";await st(i,c),t(e.map(a=>a.name===i?{...a,status:c}:a));},[e,t]),s=useCallback(async i=>{await Jt(i),M.getState().loadFromDisk();},[]);return {install:n,uninstall:r,toggle:o,update:s}}function wo({selectedItem:e,selectedCatalogItem:t,items:n,closeMenu:r,clampIndex:o,notify:s}){let i=p(m=>m.setLoading),{install:l,uninstall:c,toggle:a,update:d}=ho(),h=async(m,y,v)=>{i(true,m),r();try{await y(),o(n.length),s(v,"success");}catch(I){s(I instanceof Error?I.message:"Something went wrong","error");}finally{i(false);}};return {handleInstall:()=>{e&&t&&h(`Installing ${e.name}...`,()=>l(t),"\u2713 Installed successfully");},handleUninstall:()=>{e&&h(`Uninstalling ${e.name}...`,()=>c(e.name),"\u2713 Uninstalled");},handleToggleStatus:()=>{if(!e)return;let m=e.status==="enabled";h(m?`Disabling ${e.name}...`:`Enabling ${e.name}...`,()=>a(e.name),m?"\u2713 Disabled":"\u2713 Enabled");},handleUpdate:()=>{if(!e)return;let m=t?` to v${t.version}`:"";(async()=>{i(true,`Updating ${e.name}${m}...`),r();try{await d(e.name),o(n.length),s(`\u2713 Updated ${e.name}${m}`,"success");}catch(v){v instanceof be?s(v.message,"info"):s(v instanceof Error?v.message:"Something went wrong","error");}finally{i(false);}})();}}}function xo(){let[e,t]=useState([]),[n,r]=useState(true),[o,s]=useState(null),i=useCallback(async()=>{r(true),s(null);try{let l=await ue();t(l);}catch(l){s(l instanceof Error?l:new Error(String(l))),t([]);}finally{r(false);}},[]);return useEffect(()=>{i();},[i]),{catalog:e,isLoading:n,error:o,refetch:i}}function bo(){return {items:M(t=>t.installedItems)}}var Xi=S("catalog");function Gi(e){return {name:e.name,version:e.version,description:e.description,authorName:e.author.name,updateAvailable:e.updateAvailable}}function Wi(e){return {name:e.name,version:e.version,description:e.description,authorName:e.author?.name,status:e.status,updateAvailable:e.updateAvailable,installedAt:e.installedAt}}function vo(){let e=p(x=>x.activeTab),t=p(x=>x.notification),n=p(x=>x.loading),r=p(x=>x.loadingMessage),o=p(x=>x.catalogError),s=p(x=>x.setCatalogError),i=O(x=>x.query),{catalog:l,isLoading:c,error:a,refetch:d}=xo(),{items:h}=bo(),E=M(x=>x.loadFromDisk),U=useMemo(()=>new Set(h.map(x=>`${x.name}|${x.author?.name??""}|${x.marketplace}`)),[h]),j=useMemo(()=>{let x=new Map(l.map(Ie=>[Ie.name,Ie.version]));return h.map(Ie=>{let Wn=x.get(Ie.name),rs=!!Wn&&!!Ie.version&&de(Ie.version,Wn);return {...Ie,updateAvailable:rs}})},[h,l]),u=e==="discover"?l.filter(x=>!U.has(`${x.name}|${x.author.name}|${T}`)).map(x=>Gi(x)):j.map(x=>Wi(x)),{actionMenuOpen:m,closeMenu:y,selectedIndex:v,clampIndex:I,filteredItems:B}=po({listLength:u.length}),z=B(u),R=z[v]??null,pt=useMemo(()=>R?l.find(x=>x.name===R.name)??null:null,[l,R]),Yt=e==="installed"?"No plugins installed \u2014 explore the Discover tab!":i?`No plugins found for '${i}'`:"No plugins available in the catalog",{notify:f}=fo(),{handleInstall:N,handleUninstall:Q,handleToggleStatus:se,handleUpdate:ns}=wo({selectedItem:R,selectedCatalogItem:pt,items:u,closeMenu:y,clampIndex:I,notify:f});return useEffect(()=>{E();},[]),useEffect(()=>{I(z.length);},[z.length,I]),useEffect(()=>{a&&(Xi.error(`[usePluginCatalog] ${a instanceof Error?a.message:String(a)}`),s("Failed to load catalog"));},[a]),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Ct,{}),jsx(Rr,{}),jsx(Or,{filteredItems:z,emptyMessage:Yt}),(n||c)&&jsx(Ut,{message:n?r:"Loading catalog..."}),o&&!c&&e==="discover"&&jsx(Nt,{message:o,onRetry:()=>{s(null),d();},onBack:()=>s(null)}),t&&jsx(jr,{message:t.message,type:t.type}),m&&R&&e==="discover"&&jsx(Gr,{itemName:R.name,onInstall:N,onClose:y}),m&&R&&e==="installed"&&jsx(Zr,{itemName:R.name,itemStatus:R.status??"enabled",updateAvailable:R.updateAvailable??false,catalogVersion:pt?.version,onUninstall:Q,onToggleStatus:se,onUpdate:ns,onClose:y}),jsx(Dt,{})]})}var g=create((e,t)=>({bundles:[],selectedBundleIndex:0,selectedBundle:null,plugins:[],pluginCursorIndex:0,step:"bundleList",isLoadingBundles:false,bundlesError:null,successCount:0,failedCount:0,summaryActionIndex:0,setBundles:n=>e({bundles:n}),setSelectedBundleIndex:n=>e({selectedBundleIndex:n}),selectBundle:n=>{let r=new Set(M.getState().installedItems.map(o=>o.name));e({selectedBundle:n,plugins:n.plugins.map(o=>({name:o,selected:true,status:r.has(o)?"success":"pending",installed:r.has(o)})),pluginCursorIndex:0,step:"bundleDetail"});},setPluginCursorIndex:n=>e({pluginCursorIndex:n}),setStep:n=>e({step:n}),setPluginStatus:(n,r,o)=>{let s=t().plugins.map(i=>i.name===n?{...i,status:r,error:o}:i);e({plugins:s});},setIsLoadingBundles:n=>e({isLoadingBundles:n}),setBundlesError:n=>e({bundlesError:n}),setSummaryActionIndex:n=>e({summaryActionIndex:n}),computeSummary:()=>{let r=t().plugins.filter(o=>o.selected);e({successCount:r.filter(o=>o.status==="success").length,failedCount:r.filter(o=>o.status==="failed").length});},resetForRetry:()=>{let n=t().plugins.map(r=>r.status==="failed"?{...r,status:"pending",error:void 0}:r);e({plugins:n,step:"installing"});},goBackToList:()=>e({selectedBundle:null,plugins:[],pluginCursorIndex:0,step:"bundleList"})}));var ea=3;function Po(){let e=g(c=>c.setBundles),t=g(c=>c.setIsLoadingBundles),n=g(c=>c.setBundlesError),r=g(c=>c.setPluginStatus),o=g(c=>c.setStep),s=g(c=>c.computeSummary),i=useCallback(async()=>{t(true),n(null);try{let c=await Vt();e(c);}catch(c){n(c instanceof Error?c.message:String(c));}finally{t(false);}},[t,n,e]);useEffect(()=>{M.getState().loadFromDisk(),i();},[i]);let l=useCallback(async()=>{let c=g.getState().plugins.filter(a=>a.selected&&a.status==="pending");for(let a of c){r(a.name,"installing");let d="",h=false;for(let E=1;E<=ea;E++)try{await ne(a.name),r(a.name,"success"),h=!0;break}catch(U){if(U instanceof te){r(a.name,"success"),h=true;break}d=U instanceof Error?U.message:"Unknown error";}h||r(a.name,"failed",d);}M.getState().loadFromDisk(),s(),o("summary");},[r,s,o]);return {loadBundles:i,installSelected:l}}var lt={cursorDelta:0,confirm:false,back:false};function Io(e,t){return t.upArrow?{...lt,cursorDelta:-1}:t.downArrow?{...lt,cursorDelta:1}:t.escape?{...lt,back:true}:t.return?{...lt,confirm:true}:lt}var ta={cursorDelta:0,select:false};function Eo(e,t){return t.upArrow?{cursorDelta:-1,select:false}:t.downArrow?{cursorDelta:1,select:false}:t.return?{cursorDelta:0,select:true}:ta}var To=ti.memo(function({bundle:t,isSelected:n}){return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:n?"cyan":"gray",children:n?"\u203A ":"\u25CB "}),jsx(Text,{bold:n,color:n?"cyan":"white",children:t.name}),jsxs(Text,{dimColor:true,children:[" \xB7 ",t.plugins.length," ",t.plugins.length===1?"plugin":"plugins"]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:t.description})})]})});var _n=5;function Ao({onRetry:e}){let t=g(d=>d.bundles),n=g(d=>d.selectedBundleIndex),r=g(d=>d.isLoadingBundles),o=g(d=>d.bundlesError);if(r)return jsx(Ut,{message:"Loading bundles..."});if(o)return jsx(Nt,{message:o,onRetry:e,onBack:e});if(t.length===0)return jsx(Mt,{message:"No bundles available."});let s=Math.max(0,n-Math.floor(_n/2)),i=Math.min(t.length,s+_n);i===t.length&&(s=Math.max(0,i-_n));let l=t.slice(s,i),c=s,a=t.length-i;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Select a bundle to get started"})}),c>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",c," more above"]})}),l.map((d,h)=>jsx(To,{bundle:d,isSelected:s+h===n},d.slug)),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",a," more below"]})})]})}var Co=ti.memo(function({plugin:t,isCursor:n}){return jsxs(Box,{children:[jsx(Text,{color:n?"cyan":"gray",children:n?"\u203A ":"  "}),jsx(Text,{color:"cyan",children:"\u2022"}),jsxs(Text,{bold:n,color:n?"cyan":"white",children:[" ",t.name]}),t.installed&&jsx(Text,{color:"green",children:" (installed)"})]})});var Vn=8;function Ro(){let e=g(a=>a.selectedBundle),t=g(a=>a.plugins),n=g(a=>a.pluginCursorIndex);if(!e)return jsx(Text,{dimColor:true,children:"No bundle selected."});let r=t.filter(a=>a.installed).length,o=Math.max(0,n-Math.floor(Vn/2)),s=Math.min(t.length,o+Vn);s===t.length&&(o=Math.max(0,s-Vn));let i=t.slice(o,s),l=o,c=t.length-s;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:[jsx(Text,{bold:true,color:"cyan",children:e.name}),jsx(Text,{dimColor:true,children:e.description})]}),jsx(Box,{paddingX:1,paddingBottom:1,children:jsxs(Text,{children:[t.length," plugins to install",r>0&&` \xB7 ${r} already installed`]})}),l>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",l," more above"]})}),i.map((a,d)=>jsx(Co,{plugin:a,isCursor:o+d===n},a.name)),c>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",c," more below"]})})]})}var la=["Retry failed","Continue anyway"];function ko({name:e,status:t,error:n}){return t==="installing"?jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(fi,{type:"dots"})}),jsxs(Text,{color:"cyan",children:[" ",e]})]}):t==="success"?jsx(Box,{children:jsxs(Text,{color:"green",children:["\u2713 ",e]})}):t==="failed"?jsxs(Box,{children:[jsxs(Text,{color:"red",children:["\u2717 ",e]}),n&&jsxs(Text,{dimColor:true,children:[" \u2014 ",n]})]}):jsx(Box,{children:jsxs(Text,{dimColor:true,children:["\u25CB ",e]})})}function Bo({onComplete:e,onRetry:t}){let n=g(a=>a.plugins),r=g(a=>a.step),o=g(a=>a.successCount),s=g(a=>a.failedCount),i=g(a=>a.summaryActionIndex),l=n.filter(a=>a.selected),c=useRef(false);return useEffect(()=>{if(r==="summary"&&s===0&&!c.current){c.current=true;let a=setTimeout(e,1500);return ()=>clearTimeout(a)}},[r,s,e]),r==="installing"?jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Installing plugins..."})}),jsx(Box,{flexDirection:"column",paddingX:1,children:l.map(a=>jsx(ko,{name:a.name,status:a.status,error:a.error},a.name))})]}):jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Installation Complete"})}),jsxs(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:[o>0&&jsxs(Text,{color:"green",children:["\u2713 ",o," ",o===1?"plugin":"plugins"," installed successfully"]}),s>0&&jsxs(Text,{color:"red",children:["\u2717 ",s," ",s===1?"plugin":"plugins"," failed"]})]}),s>0&&jsx(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:l.filter(a=>a.status==="failed").map(a=>jsx(ko,{name:a.name,status:a.status,error:a.error},a.name))}),s>0&&jsx(Box,{flexDirection:"column",paddingX:1,children:la.map((a,d)=>jsx(Box,{children:jsxs(Text,{bold:d===i,color:d===i?"cyan":void 0,children:[d===i?"\u203A ":"  ",a]})},a))}),s===0&&jsx(Box,{paddingX:1,children:jsx(Text,{dimColor:true,children:"Proceeding to main screen..."})})]})}function Lo(){let e=g(f=>f.step),t=g(f=>f.bundles),n=g(f=>f.selectedBundleIndex),r=g(f=>f.setSelectedBundleIndex),o=g(f=>f.selectBundle),s=g(f=>f.plugins),i=g(f=>f.pluginCursorIndex),l=g(f=>f.setPluginCursorIndex),c=g(f=>f.setStep),a=g(f=>f.summaryActionIndex),d=g(f=>f.setSummaryActionIndex),h=g(f=>f.failedCount),E=g(f=>f.resetForRetry),U=g(f=>f.goBackToList),j=p(f=>f.setScreen),u=p(f=>f.setFocus),m=p(f=>f.focus),y=X(f=>f.setJustAuthenticated),v=X(f=>f.justAuthenticated),{loadBundles:I,installSelected:B}=Po();useEffect(()=>{u(e==="bundleList"?"bundleList":e==="bundleDetail"?"bundleDetail":"installProgress");},[e,u]);let z=useCallback(async()=>{let f=g.getState().selectedBundle;if(f){let N=await F();N&&await Ae({...N,bundle:f.slug});}y(false),u("list"),j("main");},[y,u,j]),R=useCallback(()=>{E(),B();},[E,B]),pt=useCallback(()=>{I();},[I]),Yt=useCallback(()=>{u("list"),j("main");},[u,j]);return useInput((f,N)=>{N.escape?Yt():N.upArrow&&n>0?r(n-1):N.downArrow&&n<t.length-1?r(n+1):N.return&&t.length>0&&o(t[n]);},{isActive:m==="bundleList"}),useInput((f,N)=>{let Q=Io(f,N);if(Q.cursorDelta!==0){let se=i+Q.cursorDelta;se>=0&&se<s.length&&l(se);}Q.confirm&&(c("installing"),B()),Q.back&&U();},{isActive:m==="bundleDetail"}),useInput((f,N)=>{if(h===0)return;let Q=Eo(f,N);if(Q.cursorDelta!==0){let se=a+Q.cursorDelta;se>=0&&se<=1&&d(se);}Q.select&&(a===0?R():z());},{isActive:m==="installProgress"&&e==="summary"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Ct,{}),jsxs(Box,{flexDirection:"column",paddingX:1,marginBottom:1,children:[jsx(Text,{dimColor:true,children:"The data collected during setup is used solely to improve"}),jsx(Text,{dimColor:true,children:"Flow's internal tools and will not be shared externally."}),!v&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"yellow",children:"Welcome back! We noticed your bundle is not set up yet. Choose a bundle below to get your recommended starter kit."})})]}),jsxs(Box,{flexDirection:"column",flexGrow:1,children:[e==="bundleList"&&jsx(Ao,{onRetry:pt}),e==="bundleDetail"&&jsx(Ro,{}),(e==="installing"||e==="summary")&&jsx(Bo,{onComplete:z,onRetry:R})]}),jsx(Dt,{})]})}var da={auth:Ir,bundleSetup:Lo,main:vo};async function No(){let e=await F(),t=await Z();if(!e||!t){p.getState().setScreen("auth"),p.getState().setFocus("auth");return}let{clientSecret:n,...r}=e;X.getState().setCredentials(r),!e.bundle||e.bundle.trim()===""?(p.getState().setScreen("bundleSetup"),p.getState().setFocus("bundleList")):(p.getState().setScreen("main"),p.getState().setFocus("list"));}function Fo(){let{columns:e,rows:t}=useWindowSize(),n=p(s=>s.screen),r=da[n],{pendingExit:o}=Zn();return r?jsxs(Box,{flexDirection:"column",width:e,height:t,children:[jsx(r,{}),o&&jsx(Box,{paddingX:1,children:jsx(Text,{color:"yellow",children:"Press Ctrl+C again to quit"})})]}):jsxs(Text,{color:"red",children:["Unknown screen: ",n]})}var re=S("auth");function _o(){G.clearFallbackFile(),hr();}var pa=3,Oo=3,jo=`  \u2139 The data collected during setup is used solely to improve
+    Flow's internal tools and will not be shared externally.
+`;function dt(e,t={}){return new Promise((n,r)=>{let{masked:o=false,defaultValue:s=""}=t;process.stdout.write(e+s);let i=s,l=d=>{if(d===""){c(),r(new Error("SIGINT"));return}if(d==="\r"||d===`
+`){c(),process.stdout.write(`
+`),n(i);return}if(d==="\x7F"){i.length>0&&(i=i.slice(0,-1),process.stdout.write("\b \b"));return}d.startsWith("\x1B")||(i+=d,process.stdout.write(o?"*".repeat(d.length):d));};function c(){process.stdin.setRawMode(false),process.stdin.removeListener("data",l),process.removeListener("uncaughtException",a),process.removeListener("unhandledRejection",a);}function a(){try{process.stdin.setRawMode(!1);}catch{}}process.on("uncaughtException",a),process.on("unhandledRejection",a),process.stdin.setRawMode(true),process.stdin.resume(),process.stdin.setEncoding("utf8"),process.stdin.on("data",l);})}async function Ko(){for(let e=1;e<=Oo;e++)try{return await Vt()}catch{if(e===Oo)throw new Error("Failed to fetch bundles after 3 attempts")}return []}async function Vo(){let e=await Ko();if(e.length===0)throw new Error("No bundles available. Please contact your administrator.");for(process.stdout.write(`
+`+w.cyan("  ? ")+`Bundle:
+`),e.forEach((t,n)=>{process.stdout.write(`    ${w.cyan(`${n+1})`)} ${b(t.name)}
+`);}),process.stdout.write(`
+`);;){let t=(await dt(w.cyan("  ? ")+`Select bundle (1-${e.length}): `)).trim(),n=parseInt(t,10)-1;if(!isNaN(n)&&n>=0&&n<e.length)return e[n];process.stderr.write(w.yellow(`  \u26A0 Invalid selection. Please try again.
+`));}}async function Jo(e){if(e.plugins.length===0)return process.stdout.write(w.dim(`
+  Bundle '${b(e.name)}' has no plugins to install.
+`)),true;process.stdout.write(`
+  Installing ${e.plugins.length} plugins from '${b(e.name)}'...
+`);let t=0,n=0,r=e.plugins.length;for(let o of e.plugins){let s=t+n+1;process.stdout.write(w.dim(`  [${s}/${r}] Installing ${b(o)}...`));let i=false;for(let l=1;l<=pa;l++)try{await ne(o),t++,i=!0;break}catch(c){if(c instanceof te){t++,i=true;break}}i?process.stdout.write(w.green(` done
+`)):(n++,process.stdout.write(w.red(` failed
+`)));}return n===0?process.stdout.write(w.green(`  \u2713 Bundle '${b(e.name)}' selected. ${t}/${r} plugins installed successfully.
+`)):process.stdout.write(w.yellow(`  \u26A0 Bundle '${b(e.name)}' selected. ${t}/${r} plugins installed. ${n} failed.
+`)),n===0}async function ma(e){_o(),process.stdout.write(`
+`+jo+`
+`),re.debug(`Authenticating tenant: ${e.tenant}`);try{await We(e);}catch(t){let n=b(t instanceof Error?t.message:"unknown error");return re.error(`Authentication failed: ${n}`),process.stderr.write(w.red(`  \u2717 Authentication failed: ${n}
+`)),1}try{let t;if(e.bundle){let n=await Ko(),r=n.find(o=>o.slug===e.bundle);if(!r){process.stderr.write(w.red(`  \u2717 Bundle '${b(e.bundle)}' not found.
+`)),process.stderr.write(`  Available bundles:
+`);for(let o of n)process.stderr.write(`    - ${b(o.slug)} (${b(o.name)})
+`);return 1}t=r;}else t=await Vo();return await Ae({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant,bundle:t.slug}),await Jo(t),re.info(`Authentication successful for tenant: ${e.tenant}`),process.stdout.write(w.green(`  \u2713 Setup complete. Tenant: ${e.tenant}
 
-`)),0}catch(t){let n=I(t instanceof Error?t.message:"unknown error");return W.error(`Authentication failed: ${n}`),process.stderr.write(x.red(`  \u2717 Authentication failed: ${n}
-`)),1}}async function si(){W.debug("Starting interactive authentication");try{process.stdout.write(`
-`);let e=(await ot(x.cyan("  ? ")+"Client ID: ")).trim(),t=(await ot(x.cyan("  ? ")+"Client Secret: ",{masked:!0})).trim(),n=(await ot(x.cyan("  ? ")+"Tenant: ")).trim();if(!e||!t||!n)return W.error("Validation failed: all fields are required"),process.stderr.write(x.red(`  \u2717 All fields are required
-`)),1;W.debug(`Authenticating tenant: ${n}`);try{await Ee({clientId:e,clientSecret:t,tenant:n});}catch(r){let o=I(r instanceof Error?r.message:"unknown error");return W.error(`Authentication failed: ${o}`),process.stderr.write(x.red(`  \u2717 Authentication failed: ${o}
-`)),1}return W.info(`Authentication successful for tenant: ${n}`),process.stdout.write(x.green(`  \u2713 Setup complete. Tenant: ${n}
+`)),0}catch(t){if(t instanceof Error&&t.message==="SIGINT")throw t;let n=b(t instanceof Error?t.message:"unknown error");return re.error(`Bundle setup failed: ${n}`),process.stderr.write(w.red(`  \u2717 Bundle setup failed: ${n}
+`)),1}}async function fa(){_o(),re.debug("Starting interactive authentication");try{process.stdout.write(`
+`),process.stdout.write(jo+`
+`);let e=(await dt(w.cyan("  ? ")+"Client ID: ")).trim(),t=(await dt(w.cyan("  ? ")+"Client Secret: ",{masked:!0})).trim(),n=(await dt(w.cyan("  ? ")+"Tenant: ")).trim();if(!e||!t||!n)return re.error("Validation failed: all fields are required"),process.stderr.write(w.red(`  \u2717 All fields are required
+`)),1;re.debug(`Authenticating tenant: ${n}`);try{await We({clientId:e,clientSecret:t,tenant:n});}catch(o){let s=b(o instanceof Error?o.message:"unknown error");return re.error(`Authentication failed: ${s}`),process.stderr.write(w.red(`  \u2717 Authentication failed: ${s}
+`)),1}let r=await Vo();return await Ae({clientId:e,clientSecret:t,tenant:n,bundle:r.slug}),await Jo(r),re.info(`Authentication successful for tenant: ${n}`),process.stdout.write(w.green(`  \u2713 Setup complete. Tenant: ${n}
 
-`)),0}catch(e){if(e instanceof Error&&e.message==="SIGINT")throw e;let t=I(e instanceof Error?e.message:"unknown error");return W.error(`Unexpected error: ${t}`),process.stderr.write(x.red(`  \u2717 Unexpected error: ${t}
-`)),1}}async function Dt(e={}){if(e.clientId&&e.clientSecret&&e.tenant)return ii({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant});try{return await si()}catch(t){if(t instanceof Error&&t.message==="SIGINT")return process.stdout.write(`
-`),130;throw t}}async function ai(){try{return process.stdout.write(`
-`),(await ot(x.cyan("  ? ")+"Are you sure? This will remove your local credentials. (y/N): ")).toLowerCase()!=="y"?(process.stdout.write(x.yellow(`  \u26A0 Logout cancelled
+`)),0}catch(e){if(e instanceof Error&&e.message==="SIGINT")throw e;let t=b(e instanceof Error?e.message:"unknown error");return re.error(`Unexpected error: ${t}`),process.stderr.write(w.red(`  \u2717 Unexpected error: ${t}
+`)),1}}async function Xn(e={}){if(e.clientId&&e.clientSecret&&e.tenant)return ma({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant,bundle:e.bundle});try{return await fa()}catch(t){if(t instanceof Error&&t.message==="SIGINT")return process.stdout.write(`
+`),130;throw t}}async function ga(){try{return process.stdout.write(`
+`),(await dt(w.cyan("  ? ")+"Are you sure? This will remove your local credentials. (y/N): ")).toLowerCase()!=="y"?(process.stdout.write(w.yellow(`  \u26A0 Logout cancelled
 `)),0):null}catch(e){if(e instanceof Error&&e.message==="SIGINT")return process.stdout.write(`
-`),130;throw e}}async function ar(e){if(!C())return process.stdout.write(x.yellow(`  \u26A0 You are not authenticated
-`)),0;if(!e){let t=await ai();if(t!==null)return t}try{return Kt(),process.stdout.write(x.green(`  \u2713 Credentials removed successfully
-`)),0}catch{return process.stderr.write(x.red(`  \u2717 Error removing credentials
-`)),1}}async function lr(){let e=C();return e?D()?(process.stdout.write(`
-`+x.bold(`  Authenticated
-`)),process.stdout.write(x.dim("     Tenant:  ")+I(e.tenant)+`
-`),process.stdout.write(x.dim("     Client ID:  ")+I(e.clientId)+`
-`),process.stdout.write(x.dim("     Config:  ")+I(Jt())+`
+`),130;throw e}}async function qo(e){if(!await F())return process.stdout.write(w.yellow(`  \u26A0 You are not authenticated
+`)),0;if(!e){let t=await ga();if(t!==null)return t}try{return await wr(),process.stdout.write(w.green(`  \u2713 Credentials removed successfully
+`)),0}catch{return process.stderr.write(w.red(`  \u2717 Error removing credentials
+`)),1}}async function Ho(){let e=await F();return e?await Z()?(process.stdout.write(`
+`+w.bold(`  Authenticated
+`)),process.stdout.write(w.dim("     Tenant:  ")+b(e.tenant)+`
+`),process.stdout.write(w.dim("     Client ID:  ")+b(e.clientId)+`
+`),process.stdout.write(w.dim("     Bundle:  ")+b(e.bundle??"not set")+`
+`),process.stdout.write(w.dim("     Config:  ")+b(await xr())+`
 `),process.stdout.write(`
-`),0):(process.stdout.write(x.yellow("  \u26A0 Session expired. Run `flow-cli auth login` to re-authenticate.\n")),0):(process.stdout.write(x.yellow("  \u26A0 Not authenticated. Run `flow-cli auth login` to set up.\n")),0)}function oe(){return C()?D()?true:(P("Session expired. Run: flow-cli auth login"),false):(P("Not authenticated. Run: flow-cli auth login"),false)}async function li(e){let t=R(),n;try{n=await z();}catch{n=[];}let r=new Set(t.map(o=>o.name));return e.json?(Ge(n.map(o=>({...o,installed:r.has(o.name)}))),0):(ze(["","Name","Version","Category","Status"],n.map(o=>[r.has(o.name)?"*":" ",o.name,o.version,o.category,r.has(o.name)?"installed":"available"])),0)}async function ci(e){let t=R(),n=await z(),r=new Map(n.map(i=>[i.name,i])),o=t.map(i=>{let s=r.get(i.name);return s&&G(i.version,s.version)?{...i,availableVersion:s.version}:null}).filter(i=>i!==null);return o.length===0?(w("All plugins are up to date."),0):e.json?(Ge(o),0):(ze(["Name","Installed","Available"],o.map(i=>[i.name,i.version,i.availableVersion])),process.stdout.write(`
+`),0):(process.stdout.write(w.yellow("  \u26A0 Session expired. Run `flow auth login` to re-authenticate.\n")),0):(process.stdout.write(w.yellow("  \u26A0 Not authenticated. Run `flow auth login` to set up.\n")),0)}async function Pe(){let e=await F();return e?await Z()?!e.bundle||e.bundle.trim()===""?(A("Bundle not set. Run: flow auth login"),false):true:(A("Session expired. Run: flow auth login"),false):(A("Not authenticated. Run: flow auth login"),false)}async function ya(e){let t=q(),n;try{n=await ue();}catch{n=[];}let r=new Set(t.map(o=>o.name));return e.json?(Bt(n.map(o=>({...o,installed:r.has(o.name)}))),0):(kt(["","Name","Version","Category","Status"],n.map(o=>[r.has(o.name)?"*":" ",o.name??"",o.version??"n/a",o.category??"",r.has(o.name)?"installed":"available"])),0)}async function ha(e){let t=q(),n=await ue(),r=new Map(n.map(s=>[s.name,s])),o=t.map(s=>{let i=r.get(s.name);return i&&s.version&&i.version&&de(s.version,i.version)?{...s,availableVersion:i.version}:null}).filter(s=>s!==null);return o.length===0?(P("All plugins are up to date."),0):e.json?(Bt(o),0):(kt(["Name","Installed","Available"],o.map(s=>[s.name??"",s.version??"n/a",s.availableVersion??"n/a"])),process.stdout.write(`
   ${o.length} plugin(s) outdated.
-`),0)}function ui(e){let t=R();return t.length===0?(w("No plugins installed. Use `flow plugin install <name>` to install one."),0):e.json?(Ge(t),0):(ze(["Name","Version","Installed at"],t.map(n=>[n.name,n.version,Xe(n.installedAt)])),process.stdout.write(`
+`),0)}function wa(e){let t=q();return t.length===0?(P("No plugins installed. Use `flow plugin install <name>` to install one."),0):e.json?(Bt(t),0):(kt(["Name","Version","Installed at"],t.map(n=>[n.name??"",n.version??"n/a",Lt(n.installedAt??"")])),process.stdout.write(`
   ${t.length} plugin(s) installed.
-`),0)}async function cr(e){if(!oe())return 1;try{return e.available?await li(e):e.outdated?await ci(e):ui(e)}catch(t){return P(t instanceof Error?t.message:"Failed to list plugins."),1}}var v=S("manage");function ue(e){process.stdout.write(JSON.stringify(e)+`
-`);}function Ot(e){process.stderr.write(JSON.stringify(e)+`
-`);}function B(e){return e instanceof Error?e.message:String(e)}async function di(e,t,n){n.silent||w(`${t}Installing ${e}...`);try{let r=await xe(e,n);return n.silent?ue({status:"success",plugin:r.name,version:r.version,duration_ms:r.duration_ms}):me(`${t}${r.name} v${r.version} installed successfully`),{name:e,success:!0,version:r.version,duration_ms:r.duration_ms}}catch(r){if(r instanceof ye)return n.silent?ue({status:"already_installed",plugin:e,message:r.message}):w(`${t}${r.message}`),{name:e,success:true};let o=B(r);return n.silent?Ot({status:"error",plugin:e,message:o}):P(`${t}Failed to install ${e}: ${o}`),{name:e,success:false,error:o}}}function pi(e){let t=e.filter(r=>r.success).length,n=e.filter(r=>!r.success).length;w(`
-Installation summary: ${t} succeeded, ${n} failed`);}async function ur(e,t={}){if(!oe())return 1;let n=[];for(let r=0;r<e.length;r++){let o=e.length>1?`[${r+1}/${e.length}] `:"",i=await di(e[r],o,t);n.push(i);}return e.length>1&&(t.silent?ue({status:"summary",succeeded:n.filter(r=>r.success).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.error?{error:r.error}:{}}))}):pi(n)),n.some(r=>!r.success)?1:0}async function dr(e,t){if(!oe())return 1;if(v.debug(`[${e}] Looking up installed plugin`),!t.force){let n=R().find(s=>s.name===e);if(!n)return v.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;let r=I(n.name),o=I(n.version);if(!await fi(`Remove ${r} v${o}? [y/N] `))return v.debug(`[${e}] Uninstall cancelled by user`),w("Operation cancelled."),0}try{return v.debug(`[${e}] Uninstalling plugin`),await Ye(e),v.info(`[${e}] Uninstalled successfully`),me("Plugin removed successfully"),0}catch(n){return v.error(`[${e}] Failed to uninstall: ${B(n)}`),P(B(n)),1}}async function fi(e){let n=(await import('readline')).default.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{n.question(e,o=>{n.close(),r(o.toLowerCase()==="y");});})}async function pr(e){if(!oe())return 1;v.debug(`[${e}] Looking up installed plugin`);let t=R().find(n=>n.name===e);if(!t)return v.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;if(t.status==="enabled")return v.debug(`[${e}] Already enabled, skipping`),w(`${t.name} is already enabled`),0;try{return v.debug(`[${e}] Enabling plugin (current status: ${t.status})`),await Le(e,"enabled"),v.info(`[${e}] Enabled successfully`),me(`${t.name} enabled successfully`),0}catch(n){return v.error(`[${e}] Failed to enable: ${B(n)}`),P(B(n)),1}}async function fr(e){if(!oe())return 1;v.debug(`[${e}] Looking up installed plugin`);let t=R().find(n=>n.name===e);if(!t)return v.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;if(t.status==="disabled")return v.debug(`[${e}] Already disabled, skipping`),w(`${t.name} is already disabled`),0;try{return v.debug(`[${e}] Disabling plugin (current status: ${t.status})`),await Le(e,"disabled"),v.info(`[${e}] Disabled successfully`),me(`${t.name} disabled successfully`),0}catch(n){return v.error(`[${e}] Failed to disable: ${B(n)}`),P(B(n)),1}}async function mr(e,t,n){n.silent||w(`${t}Updating ${e}...`);try{let r=await nt(e,n);return n.silent?ue({status:"updated",plugin:r.name,previousVersion:r.previousVersion,newVersion:r.newVersion,duration_ms:r.duration_ms}):me(`${t}${r.name} v${r.previousVersion} \u2192 v${r.newVersion}`),{name:e,success:!0}}catch(r){if(r instanceof ne)return n.silent?ue({status:"up_to_date",plugin:e,message:r.message}):w(`${t}${r.message}`),{name:e,success:true,skipped:true};let o=B(r);return n.silent?Ot({status:"error",plugin:e,message:o}):P(`${t}Failed to update ${e}: ${o}`),{name:e,success:false,error:o}}}function mi(e){let t=e.filter(o=>o.success&&!o.skipped).length,n=e.filter(o=>o.skipped).length,r=e.filter(o=>!o.success).length;w(`
-Update summary: ${t} updated, ${n} already up to date, ${r} failed`);}async function gi(e,t,n){try{let r=await we(e);G(t,r.version,n.force)?w(`Would update ${e}: v${t} \u2192 v${r.version}`):w(`${e} is already up to date (v${t})`);}catch(r){return P(B(r)),1}return 0}function hi(e){return new Map(e.map(t=>[t.name,t.version]))}function yi(e,t,n){let r=t.get(e.name);return r?G(e.version,r,n)?(w(`Would update ${e.name}: v${e.version} \u2192 v${r}`),true):(w(`${e.name} is already up to date (v${e.version})`),false):(w(`Skipping ${e.name}: not found in catalog`),false)}async function wi(e,t){try{let n=await z(),r=hi(n),o=0;for(let i of e)yi(i,r,t.force)&&o++;o===0&&w("All plugins are up to date");}catch(n){return P(B(n)),1}return 0}async function xi(e,t){let n=[];for(let r=0;r<e.length;r++){let o=`[${r+1}/${e.length}] `,i=await mr(e[r].name,o,t);n.push(i);}return t.silent?ue({status:"summary",updated:n.filter(r=>r.success&&!r.skipped).length,upToDate:n.filter(r=>r.skipped).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.skipped?{skipped:true}:{},...r.error?{error:r.error}:{}}))}):mi(n),n.some(r=>!r.success)?1:0}async function gr(e,t={}){if(!oe())return 1;if(e){let o=R().find(s=>s.name===e);return o?t.dryRun?gi(e,o.version,t):(await mr(e,"",t)).success?0:1:(t.silent?Ot({status:"error",plugin:e,message:`Plugin "${e}" is not installed`}):P(`Plugin "${e}" is not installed`),1)}let r=R().filter(o=>o.marketplace===b);return r.length===0?(t.silent?ue({status:"empty",message:"No plugins installed"}):w("No plugins installed"),0):t.dryRun?wi(r,t):xi(r,t)}function Ii(){return C()?{passed:true,message:"Credentials configured"}:{passed:false,message:"Credentials not configured \u2014 Run `flow-cli auth login`"}}async function Si(){let e=Date.now();try{await z();let t=Date.now()-e;return {passed:!0,message:`Prompt Manager accessible (${t}ms)`,latency:t}}catch(t){return t instanceof Error&&t.name==="TimeoutError"?{passed:false,message:"Timeout after 5s \u2014 check your connection"}:{passed:false,message:`Connection error: ${t instanceof Error?t.message:"Unknown"}`}}}function Ei(){return D()?{passed:true,message:"Token is valid"}:{passed:false,message:"Token expired \u2014 run `flow-cli auth login` to re-authenticate"}}function Ti(){let e=join(homedir(),".claude","settings.json");return existsSync(e)?{passed:true,message:"Claude Code detected"}:{passed:false,message:"Claude Code not detected"}}async function hr(){process.stdout.write(`
-`+x.bold(`  FlowSetup CLI Diagnostics
+`),0)}async function zo(e){if(!await Pe())return 1;try{return e.available?await ya(e):e.outdated?await ha(e):wa(e)}catch(t){return A(t instanceof Error?t.message:"Failed to list plugins."),1}}var C=S("manage");function Ce(e){process.stdout.write(JSON.stringify(e)+`
+`);}function Gn(e){process.stderr.write(JSON.stringify(e)+`
+`);}function oe(e){return e instanceof Error?e.message:String(e)}async function xa(e,t,n){n.silent||P(`${t}Installing ${e}...`);try{let r=await ne(e,n);return n.silent?Ce({status:"success",plugin:r.name,version:r.version,duration_ms:r.duration_ms}):Fe(`${t}${r.name} v${r.version} installed successfully`),{name:e,success:!0,version:r.version,duration_ms:r.duration_ms}}catch(r){if(r instanceof te)return n.silent?Ce({status:"already_installed",plugin:e,message:r.message}):P(`${t}${r.message}`),{name:e,success:true};let o=oe(r);return n.silent?Gn({status:"error",plugin:e,message:o}):A(`${t}Failed to install ${e}: ${o}`),{name:e,success:false,error:o}}}function ba(e){let t=e.filter(r=>r.success).length,n=e.filter(r=>!r.success).length;P(`
+Installation summary: ${t} succeeded, ${n} failed`);}async function Xo(e,t={}){if(!await Pe())return 1;let n=[];for(let r=0;r<e.length;r++){let o=e.length>1?`[${r+1}/${e.length}] `:"",s=await xa(e[r],o,t);n.push(s);}return e.length>1&&(t.silent?Ce({status:"summary",succeeded:n.filter(r=>r.success).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.error?{error:r.error}:{}}))}):ba(n)),n.some(r=>!r.success)?1:0}async function Go(e,t){if(!await Pe())return 1;if(C.debug(`[${e}] Looking up installed plugin`),!t.force){let n=q().find(i=>i.name===e);if(!n)return C.error(`[${e}] Plugin is not installed`),A(`Plugin "${e}" is not installed`),1;let r=b(n.name),o=n.version?b(n.version):void 0;if(!await va(`Remove ${r} ${o?`v${o}`:"(n/a)"}? [y/N] `))return C.debug(`[${e}] Uninstall cancelled by user`),P("Operation cancelled."),0}try{return C.debug(`[${e}] Uninstalling plugin`),await _t(e),C.info(`[${e}] Uninstalled successfully`),Fe("Plugin removed successfully"),0}catch(n){return C.error(`[${e}] Failed to uninstall: ${oe(n)}`),A(oe(n)),1}}async function va(e){let n=(await import('readline')).default.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{n.question(e,o=>{n.close(),r(o.toLowerCase()==="y");});})}async function Wo(e){if(!await Pe())return 1;C.debug(`[${e}] Looking up installed plugin`);let t=q().find(n=>n.name===e);if(!t)return C.error(`[${e}] Plugin is not installed`),A(`Plugin "${e}" is not installed`),1;if(t.status==="enabled")return C.debug(`[${e}] Already enabled, skipping`),P(`${t.name} is already enabled`),0;try{return C.debug(`[${e}] Enabling plugin (current status: ${t.status})`),await st(e,"enabled"),C.info(`[${e}] Enabled successfully`),Fe(`${t.name} enabled successfully`),0}catch(n){return C.error(`[${e}] Failed to enable: ${oe(n)}`),A(oe(n)),1}}async function Qo(e){if(!await Pe())return 1;C.debug(`[${e}] Looking up installed plugin`);let t=q().find(n=>n.name===e);if(!t)return C.error(`[${e}] Plugin is not installed`),A(`Plugin "${e}" is not installed`),1;if(t.status==="disabled")return C.debug(`[${e}] Already disabled, skipping`),P(`${t.name} is already disabled`),0;try{return C.debug(`[${e}] Disabling plugin (current status: ${t.status})`),await st(e,"disabled"),C.info(`[${e}] Disabled successfully`),Fe(`${t.name} disabled successfully`),0}catch(n){return C.error(`[${e}] Failed to disable: ${oe(n)}`),A(oe(n)),1}}async function Zo(e,t,n){n.silent||P(`${t}Updating ${e}...`);try{let r=await Jt(e,n);return n.silent?Ce({status:"updated",plugin:r.name,previousVersion:r.previousVersion,newVersion:r.newVersion,duration_ms:r.duration_ms}):Fe(`${t}${r.name} v${r.previousVersion} \u2192 v${r.newVersion}`),{name:e,success:!0}}catch(r){if(r instanceof be)return n.silent?Ce({status:"up_to_date",plugin:e,message:r.message}):P(`${t}${r.message}`),{name:e,success:true,skipped:true};let o=oe(r);return n.silent?Gn({status:"error",plugin:e,message:o}):A(`${t}Failed to update ${e}: ${o}`),{name:e,success:false,error:o}}}function Sa(e){let t=e.filter(o=>o.success&&!o.skipped).length,n=e.filter(o=>o.skipped).length,r=e.filter(o=>!o.success).length;P(`
+Update summary: ${t} updated, ${n} already up to date, ${r} failed`);}async function Pa(e,t,n){try{let r=await Ke(e);de(t,r.version,n.force)?P(`Would update ${e}: v${t} \u2192 v${r.version}`):P(`${e} is already up to date (v${t})`);}catch(r){return A(oe(r)),1}return 0}function Ia(e){return new Map(e.filter(t=>!!t.version).map(t=>[t.name,t.version]))}function Ea(e,t,n){let r=t.get(e.name);return r?e.version&&de(e.version,r,n)?(P(`Would update ${e.name}: v${e.version} \u2192 v${r}`),true):(P(`${e.name} is already up to date (${e.version?`v${e.version}`:"n/a"})`),false):(P(`Skipping ${e.name}: not found in catalog`),false)}async function Ta(e,t){try{let n=await ue(),r=Ia(n),o=0;for(let s of e)Ea(s,r,t.force)&&o++;o===0&&P("All plugins are up to date");}catch(n){return A(oe(n)),1}return 0}async function Aa(e,t){let n=[];for(let r=0;r<e.length;r++){let o=`[${r+1}/${e.length}] `,s=await Zo(e[r].name,o,t);n.push(s);}return t.silent?Ce({status:"summary",updated:n.filter(r=>r.success&&!r.skipped).length,upToDate:n.filter(r=>r.skipped).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.skipped?{skipped:true}:{},...r.error?{error:r.error}:{}}))}):Sa(n),n.some(r=>!r.success)?1:0}async function Yo(e,t={}){if(!await Pe())return 1;if(e){let o=q().find(i=>i.name===e);return o?t.dryRun?Pa(e,o.version??"",t):(await Zo(e,"",t)).success?0:1:(t.silent?Gn({status:"error",plugin:e,message:`Plugin "${e}" is not installed`}):A(`Plugin "${e}" is not installed`),1)}let r=q().filter(o=>o.marketplace===T);return r.length===0?(t.silent?Ce({status:"empty",message:"No plugins installed"}):P("No plugins installed"),0):t.dryRun?Ta(r,t):Aa(r,t)}async function ka(){return await F()?{passed:true,message:"Credentials configured"}:{passed:false,message:"Credentials not configured \u2014 Run `flow auth login`"}}async function Ba(){let e=Date.now();try{await ue();let t=Date.now()-e;return {passed:!0,message:`Prompt Manager accessible (${t}ms)`,latency:t}}catch(t){return t instanceof Error&&t.name==="TimeoutError"?{passed:false,message:"Timeout after 5s \u2014 check your connection"}:{passed:false,message:`Connection error: ${t instanceof Error?t.message:"Unknown"}`}}}async function La(){return await Z()?{passed:true,message:"Token is valid"}:{passed:false,message:"Token expired \u2014 run `flow auth login` to re-authenticate"}}function Ma(){let e=join(homedir(),".claude","settings.json");return existsSync(e)?{passed:true,message:"Claude Code detected"}:{passed:false,message:"Claude Code not detected"}}async function es(){process.stdout.write(`
+`+w.bold(`  FlowSetup CLI Diagnostics
 
-`));let e=[{name:"Credentials",fn:Ii},{name:"Prompt Manager",fn:Si},{name:"Valid Token",fn:Ei},{name:"Claude Code",fn:Ti}],t=true;for(let n of e){let r=await n.fn(),o="",i=x.green;r.passed?o=x.green("[OK]  "):(o=x.red("[FAIL]"),i=x.red,t=false);let s=`  ${o} ${i(n.name.padEnd(18))} ${I(r.message)}`;process.stdout.write(s+`
+`));let e=[{name:"Credentials",fn:ka},{name:"Prompt Manager",fn:Ba},{name:"Valid Token",fn:La},{name:"Claude Code",fn:Ma}],t=true;for(let n of e){let r=await n.fn(),o="",s=w.green;r.passed?o=w.green("[OK]  "):(o=w.red("[FAIL]"),s=w.red,t=false);let i=`  ${o} ${s(n.name.padEnd(18))} ${b(r.message)}`;process.stdout.write(i+`
 `);}return process.stdout.write(`
-`),t?(process.stdout.write(x.green(`  \u2713 All checks passed!
+`),t?(process.stdout.write(w.green(`  \u2713 All checks passed!
 
-`)),0):(process.stdout.write(x.red(`  \u2717 Some checks failed \u2014 verify your configuration
+`)),0):(process.stdout.write(w.red(`  \u2717 Some checks failed \u2014 verify your configuration
 
-`)),1)}function yr(e){let t=new Command;t.name("flow").description("FlowSetup CLI \u2014 Manage Flow plugins in your Claude Code").version(`@flow/cli v${Je}`,"-V, --version","Display the CLI version").addHelpText("after",`
+`)),1)}function ts(e){let t=new Command;t.name("flow").description("FlowSetup CLI \u2014 Manage Flow plugins in your Claude Code").version(`@flow/cli v${$t}`,"-V, --version","Display the CLI version").addHelpText("after",`
 Without arguments, opens the interactive interface (TUI).
-Use 'flow <command> --help' for details on each command.`).action(()=>{e();});let n=new Command("setup").description("Configure the CLI by detecting Claude Code credentials");n.command("init").description("Initialize the Flow CLI configuration").addHelpText("after",`
+Use 'flow <command> --help' for details on each command.`).action(async()=>{await e();});let n=new Command("setup").description("Configure the CLI by detecting Claude Code credentials");n.command("init").description("Initialize the Flow CLI configuration").addHelpText("after",`
 Examples:
-  $ flow setup init`).action(async()=>{let i=await Dt();process.exit(i);}),t.addCommand(n);let r=new Command("plugin").description("Manage plugins from the Findr catalog installed in your Claude Code");r.command("list").description("List available or installed plugins").option("--available","show full catalog with installation status",false).option("--outdated","show only plugins with updates available",false).option("--json","output as JSON",false).addHelpText("after",`
+  $ flow setup init`).action(async()=>{let s=await Xn();process.exit(s);}),t.addCommand(n);let r=new Command("plugin").description("Manage plugins from the Findr catalog installed in your Claude Code");r.command("list").description("List available or installed plugins").option("--available","show full catalog with installation status",false).option("--outdated","show only plugins with updates available",false).option("--json","output as JSON",false).addHelpText("after",`
 Examples:
   $ flow plugin list
   $ flow plugin list --available
   $ flow plugin list --outdated
-  $ flow plugin list --json`).action(async i=>{let s=await cr(i);process.exit(s);}),r.command("install").description("Install one or more plugins from the Findr catalog into Claude Code").argument("<name...>","Name(s) of the plugin(s) to install (space-separated)").option("--force","Reinstall even if the version is already installed").option("--verbose","Display each step of the installation process").option("--silent","Output in JSON only").addHelpText("after",`
+  $ flow plugin list --json`).action(async s=>{let i=await zo(s);process.exit(i);}),r.command("install").description("Install one or more plugins from the Findr catalog into Claude Code").argument("<name...>","Name(s) of the plugin(s) to install (space-separated)").option("--force","Reinstall even if the version is already installed").option("--verbose","Display each step of the installation process").option("--silent","Output in JSON only").addHelpText("after",`
 Examples:
   $ flow plugin install flow-adr-writer
   $ flow plugin install flow-adr-writer flow-prd-writer startup-pack-ai
   $ flow plugin install flow-adr-writer --force
-  $ flow plugin install flow-adr-writer --silent`).action(async(i,s)=>{_("cli",{verbose:s.verbose,silent:s.silent});let a=await ur(i,s);process.exit(a);}),r.command("uninstall").description("Remove an installed plugin from Claude Code").argument("<name>","Name of the plugin to remove").option("--force","Skip interactive confirmation").addHelpText("after",`
+  $ flow plugin install flow-adr-writer --silent`).action(async(s,i)=>{ie("cli",{verbose:i.verbose,silent:i.silent});let l=await Xo(s,i);process.exit(l);}),r.command("uninstall").description("Remove an installed plugin from Claude Code").argument("<name>","Name of the plugin to remove").option("--force","Skip interactive confirmation").addHelpText("after",`
 Examples:
   $ flow plugin uninstall flow-adr-writer
-  $ flow plugin uninstall startup-pack-ai --force`).action(async(i,s)=>{let a=await dr(i,s);process.exit(a);}),r.command("update").description("Update plugins to the latest version").argument("[name]","Name of the plugin to update (omit to update all)").option("--force","Force update even if already on latest version").option("--dry-run","Show what would be updated without making changes").option("--verbose","Display each step of the update process").option("--silent","Output in JSON only").addHelpText("after",`
+  $ flow plugin uninstall startup-pack-ai --force`).action(async(s,i)=>{let l=await Go(s,i);process.exit(l);}),r.command("update").description("Update plugins to the latest version").argument("[name]","Name of the plugin to update (omit to update all)").option("--force","Force update even if already on latest version").option("--dry-run","Show what would be updated without making changes").option("--verbose","Display each step of the update process").option("--silent","Output in JSON only").addHelpText("after",`
 Examples:
   $ flow plugin update flow-adr-writer
   $ flow plugin update flow-adr-writer --force
@@ -77,19 +104,20 @@ Examples:
   $ flow plugin update flow-adr-writer --verbose
   $ flow plugin update flow-adr-writer --silent
   $ flow plugin update
-  $ flow plugin update --dry-run`).action(async(i,s)=>{_("cli",{verbose:s.verbose,silent:s.silent});let a=await gr(i??null,s);process.exit(a);}),r.command("enable").description("Enable an installed plugin").argument("<name>","Name of the plugin to enable").addHelpText("after",`
+  $ flow plugin update --dry-run`).action(async(s,i)=>{ie("cli",{verbose:i.verbose,silent:i.silent});let l=await Yo(s??null,i);process.exit(l);}),r.command("enable").description("Enable an installed plugin").argument("<name>","Name of the plugin to enable").addHelpText("after",`
 Examples:
-  $ flow plugin enable flow-adr-writer`).action(async i=>{_("cli");let s=await pr(i);process.exit(s);}),r.command("disable").description("Disable an installed plugin").argument("<name>","Name of the plugin to disable").addHelpText("after",`
+  $ flow plugin enable flow-adr-writer`).action(async s=>{ie("cli");let i=await Wo(s);process.exit(i);}),r.command("disable").description("Disable an installed plugin").argument("<name>","Name of the plugin to disable").addHelpText("after",`
 Examples:
-  $ flow plugin disable flow-adr-writer`).action(async i=>{_("cli");let s=await fr(i);process.exit(s);}),t.addCommand(r);let o=new Command("auth").description("Manage authentication credentials");return o.command("login").description("Authenticate and save credentials locally").option("--client-id <id>","Client ID for non-interactive authentication").option("--client-secret <secret>","Client Secret for non-interactive authentication").option("--tenant <tenant>","Tenant for non-interactive authentication").option("--verbose","Display each step of the authentication process").addHelpText("after",`
+  $ flow plugin disable flow-adr-writer`).action(async s=>{ie("cli");let i=await Qo(s);process.exit(i);}),t.addCommand(r);let o=new Command("auth").description("Manage authentication credentials");return o.command("login").description("Authenticate and save credentials locally").option("--client-id <id>","Client ID for non-interactive authentication").option("--client-secret <secret>","Client Secret for non-interactive authentication").option("--tenant <tenant>","Tenant for non-interactive authentication").option("--bundle <slug>","Bundle slug for non-interactive setup").option("--verbose","Display each step of the authentication process").addHelpText("after",`
 Examples:
   $ flow auth login
   $ flow auth login --client-id ID --client-secret SECRET --tenant TENANT
-  $ flow auth login --verbose`).action(async i=>{_("cli",{verbose:i.verbose});let s=await Dt(i);process.exit(s);}),o.command("logout").description("Remove locally saved credentials").option("--force","Skip interactive confirmation").addHelpText("after",`
+  $ flow auth login --client-id ID --client-secret SECRET --tenant TENANT --bundle dev
+  $ flow auth login --verbose`).action(async s=>{ie("cli",{verbose:s.verbose});let i=await Xn(s);process.exit(i);}),o.command("logout").description("Remove locally saved credentials").option("--force","Skip interactive confirmation").addHelpText("after",`
 Examples:
   $ flow auth logout
-  $ flow auth logout --force`).action(async i=>{let s=await ar(i.force);process.exit(s);}),o.command("status").description("Display the current authentication status").addHelpText("after",`
+  $ flow auth logout --force`).action(async s=>{let i=await qo(s.force);process.exit(i);}),o.command("status").description("Display the current authentication status").addHelpText("after",`
 Examples:
-  $ flow auth status`).action(async()=>{let i=await lr();process.exit(i);}),t.addCommand(o),t.command("health").description("Check the CLI configuration and connectivity").addHelpText("after",`
+  $ flow auth status`).action(async()=>{let s=await Ho();process.exit(s);}),t.addCommand(o),t.command("health").description("Check the CLI configuration and connectivity").addHelpText("after",`
 Examples:
-  $ flow health`).action(async()=>{let i=await hr();process.exit(i);}),t}var $i=yr(()=>{_("tui"),render(jsx(sr,{}));});$i.parse();
+  $ flow health`).action(async()=>{let s=await es();process.exit(s);}),t}var Ua=ts(async()=>{ie("tui"),await No(),render(jsx(Fo,{}),{alternateScreen:true,exitOnCtrlC:false});});Ua.parse();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ciandt-flow/cli",
-  "version": "1.0.5",
+  "version": "1.0.6-beta.108",
   "description": "TUI for browsing and installing Claude Code plugins from the Flow ecosystem",
   "type": "module",
   "main": "dist/index.js",
@@ -24,7 +24,7 @@
     "build:npm": "npm run typecheck && tsup",
     "obfuscate": "javascript-obfuscator dist/index.js --output dist/index.js --options-preset medium-obfuscation --string-array true --string-array-encoding base64",
     "typecheck": "tsc --noEmit",
-    "dev": "tsx --env-file=.env src/cli.tsx",
+    "dev": "NODE_ENV=development tsx --env-file=.env src/cli.tsx",
     "dev:watch": "tsup --watch & sleep 2 && node --watch dist/index.js",
     "start": "node dist/index.js",
     "test": "vitest run --coverage",
@@ -48,7 +48,10 @@
     "claude",
     "tui"
   ],
-  "author": "queryCLient",
+  "author": {
+    "name": "CI&T Flow Team",
+    "email": "flow@ciandt.com"
+  },
   "dependencies": {
     "@tanstack/react-query": "^5.90.21",
     "boxen": "^8.0.1",
@@ -59,11 +62,12 @@
     "dotenv": "^17.3.1",
     "extract-zip": "2.0.1",
     "http-status-codes": "^2.3.0",
-    "ink": "6.8.0",
+    "ink": "^7.0.0",
     "ink-big-text": "2.0.0",
     "ink-gradient": "4.0.0",
     "ink-spinner": "5.0.0",
-    "ky": "1.14.3",
+    "keytar": "^7.9.0",
+    "ky": "2.0.1",
     "proper-lockfile": "4.1.2",
     "react": "19.2.5",
     "react-dom": "^19.0.0",
@@ -79,9 +83,9 @@
     "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.0",
     "@types/semver": "^7.7.1",
-    "@vitejs/plugin-react": "^4.0.0",
-    "@vitest/coverage-v8": "^2.0.0",
-    "eslint": "^9.39.2",
+    "@vitejs/plugin-react": "^6.0.1",
+    "@vitest/coverage-v8": "^4.1.4",
+    "eslint": "^10.2.1",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-prettier": "^5.5.5",
     "husky": "^9.1.7",
@@ -92,15 +96,15 @@
     "tsx": "^4.7.0",
     "typescript": "^5.3.3",
     "typescript-eslint": "^8.54.0",
-    "vitest": "^2.0.0"
+    "vitest": "^4.1.4"
   },
   "engines": {
     "node": ">=22.0.0"
   },
   "overrides": {
-    "ajv": "^6.12.6",
     "flatted": ">=3.4.2",
     "esbuild": ">=0.25.0",
-    "picomatch": ">=4.0.4"
+    "picomatch": ">=4.0.4",
+    "vite": "^8.0.0"
   }
-}
+}