npm - @ciandt-flow/cli - Versions diffs - 1.0.5 → 1.0.6-beta.141 - Mend

@ciandt-flow/cli 1.0.5 → 1.0.6-beta.141

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/README.md CHANGED Viewed

@@ -43,6 +43,7 @@ flow auth login [options]
 | `--client-id <id>` | Client ID |
 | `--client-secret <secret>` | Client Secret |
 | `--tenant <tenant>` | Tenant |
+| `--bundle <slug>` | Bundle slug to install after authentication |
 When called **without options**, enters interactive mode — prompts for each field in the terminal.
 When called **with all three options**, runs non-interactively and saves credentials directly.
@@ -53,6 +54,9 @@ flow auth login
 # non-interactive mode
 flow auth login --client-id <id> --client-secret <secret> --tenant <tenant>
+# with bundle selection
+flow auth login --client-id <id> --client-secret <secret> --tenant <tenant> --bundle dev
 ```
 #### `auth logout`
@@ -111,28 +115,89 @@ flow plugin install <name...> [options]
 | `--force` | Reinstall even if already installed |
 | `--verbose` | Display each installation step |
 | `--silent` | Output as JSON only |
+| `--marketplace-source <source>` | GitHub source (owner/repo) for marketplace auto-add when installing external plugins |
+| `--scope <scope>` | Scope to install into: `user`, `project`, or `local` |
 ```bash
 flow plugin install flow-adr-writer
+flow plugin install flow-adr-writer --scope project
 flow plugin install flow-adr-writer flow-prd-writer
 flow plugin install flow-adr-writer --force
+flow plugin install superpowers@claude-plugins-official
+flow plugin install agent-sdk-dev@claude-code-plugins --marketplace-source anthropics/claude-code
 ```
-#### `plugin uninstall <id>`
+#### `plugin uninstall <name>`
+Uninstall a plugin.
+```bash
+flow plugin uninstall <name> [options]
+```
+| Option | Description |
+|---|---|
+| `--force` | Skip interactive confirmation |
+| `--scope <scope>` | Scope to uninstall from: `user`, `project`, or `local` |
+```bash
+flow plugin uninstall flow-adr-writer
+flow plugin uninstall flow-adr-writer --scope project
+flow plugin uninstall startup-pack-ai --force
+```
+#### `plugin enable <name>`
+Enable an installed plugin.
-Uninstall a plugin by ID.
+```bash
+flow plugin enable <name> [options]
+```
+| Option | Description |
+|---|---|
+| `--scope <scope>` | Scope to enable in: `user`, `project`, or `local` |
 ```bash
-flow plugin uninstall <id>
+flow plugin enable flow-adr-writer
+flow plugin enable flow-adr-writer --scope project
 ```
-#### `plugin enable <id>` / `plugin disable <id>`
+#### `plugin disable <name>`
-Enable or disable an installed plugin.
+Disable an installed plugin.
 ```bash
-flow plugin enable <id>
-flow plugin disable <id>
+flow plugin disable <name> [options]
+```
+| Option | Description |
+|---|---|
+| `--scope <scope>` | Scope to disable in: `user`, `project`, or `local` |
+```bash
+flow plugin disable flow-adr-writer
+flow plugin disable flow-adr-writer --scope project
+```
+#### `plugin marketplace add <source>`
+Register a plugin marketplace in Claude Code.
+```bash
+flow plugin marketplace add <source> [options]
+```
+| Option | Description |
+|---|---|
+| `--force` | Skip confirmation prompt |
+| `--verbose` | Display command output |
+| `--silent` | Output as JSON only |
+```bash
+flow plugin marketplace add anthropics/claude-code
+flow plugin marketplace add https://github.com/owner/repo
+flow plugin marketplace add anthropics/claude-code --force
 ```
 #### `plugin update [name]`
@@ -149,15 +214,134 @@ flow plugin update [name] [options]
 | `--dry-run` | Preview what would be updated without making changes |
 | `--verbose` | Display each update step |
 | `--silent` | Output as JSON only |
+| `--scope <scope>` | Scope to update in: `user`, `project`, or `local` |
 ```bash
 flow plugin update flow-adr-writer
+flow plugin update flow-adr-writer --scope project
 flow plugin update                  # update all
 flow plugin update --dry-run        # preview only
 ```
 ---
+### `mcp`
+MCP server management commands.
+#### `mcp add <name> [args...]`
+Install an MCP server into Claude Code.
+```bash
+flow mcp add <name> [args...] --transport <http|stdio> [options]
+```
+| Option | Description |
+|---|---|
+| `--transport <type>` | Transport type: `http` or `stdio` (required) |
+| `--scope <scope>` | Scope to install into: `user`, `project`, or `local` |
+| `--force` | Skip confirmation prompt |
+| `--verbose` | Display command output |
+| `--silent` | Output as JSON only |
+```bash
+flow mcp add notion --transport http https://mcp.notion.com/mcp
+flow mcp add mcp-chrome --transport stdio uvx mcp-chrome
+flow mcp add playwright-mcp --transport stdio uvx playwright-mcp --force
+flow mcp add notion --transport http https://mcp.notion.com/mcp --scope project
+```
+#### `mcp remove <name>`
+Remove an MCP server from Claude Code.
+```bash
+flow mcp remove <name> [options]
+```
+| Option | Description |
+|---|---|
+| `--scope <scope>` | Scope to remove from: `user`, `project`, or `local` |
+| `--force` | Skip confirmation prompt |
+| `--verbose` | Display command output |
+| `--silent` | Output as JSON only |
+```bash
+flow mcp remove notion
+flow mcp remove notion --scope project
+flow mcp remove playwright-mcp --force
+```
+---
+### `skills`
+Manage skills for Claude Code from GitHub repositories or local paths.
+#### `skills add <source>`
+Install skills from a GitHub repo or local path into Claude Code.
+```bash
+flow skills add <source> [options]
+```
+| Option | Description |
+|---|---|
+| `-g, --global` | Install globally (`~/.claude/skills/`) |
+| `-s, --skill <names...>` | Install only specific skills by name |
+| `-y, --yes` | Skip confirmation prompts |
+| `--list` | List available skills without installing |
+```bash
+flow skills add vercel-labs/agent-skills
+flow skills add owner/repo -g
+flow skills add owner/repo -s my-skill
+flow skills add owner/repo --list
+flow skills add ./local/path
+```
+#### `skills list`
+List installed skills.
+```bash
+flow skills list [options]
+```
+| Option | Description |
+|---|---|
+| `-g, --global` | List globally installed skills |
+| `--json` | Output as JSON |
+```bash
+flow skills list
+flow skills list --global
+flow skills list --json
+```
+#### `skills remove [name]`
+Remove an installed skill.
+```bash
+flow skills remove [name] [options]
+```
+| Option | Description |
+|---|---|
+| `-g, --global` | Remove from global scope |
+| `-f, --force` | Skip confirmation prompt |
+```bash
+flow skills remove my-skill
+flow skills remove my-skill --force
+flow skills remove --global my-skill
+```
+---
 ### `health`
 Run diagnostic checks.

package/dist/index.js CHANGED Viewed

@@ -1,95 +1,177 @@
 #!/usr/bin/env node
-import {Box,Text,render,useInput}from'ink';import ao,{useMemo,useEffect,useState,useCallback,useRef}from'react';import {jsxs,jsx,Fragment}from'react/jsx-runtime';import {create}from'zustand';import Jr,{HTTPError}from'ky';import {StatusCodes}from'http-status-codes';import Lr from'conf';import*as E from'fs';import E__default,{readFileSync,existsSync,chmodSync,realpathSync}from'fs';import*as q from'path';import q__default,{join}from'path';import*as Q from'os';import Q__default,{homedir}from'os';import eo from'ink-big-text';import to from'ink-gradient';import x from'chalk';import bo from'ink-spinner';import*as N from'fs/promises';import ko from'extract-zip';import Ro from'proper-lockfile';import {randomUUID}from'crypto';import Ct from'semver';import {Command}from'commander';var kr=16;function Bt({label:e,value:t,onChange:n,masked:r=false,isActive:o,error:i}){let s=useRef(t);useEffect(()=>{s.current=t;},[t]),useInput((u,c)=>{if(c.backspace||c.delete){let m=s.current.slice(0,-1);s.current=m,n(m);}else if(u&&!c.ctrl&&!c.meta&&!c.escape&&!c.return&&!c.tab&&!c.upArrow&&!c.downArrow&&!c.leftArrow&&!c.rightArrow){let m=s.current+u;s.current=m,n(m);}},{isActive:o});let a=r?"\u2022".repeat(t.length):t;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{children:[jsx(Text,{color:o?"cyan":"gray",children:o?"\u25B8 ":"  "}),jsx(Text,{color:o?"white":"gray",bold:o,children:e.padEnd(kr)}),jsx(Text,{color:o?"cyan":"gray",children:a}),o&&jsx(Text,{color:"cyan",children:"\u2588"})]}),i&&jsx(Box,{paddingLeft:3,children:jsxs(Text,{color:"red",children:["\u26A0 ",i]})})]})}var j=create(e=>({credentials:null,isAuthenticated:false,justAuthenticated:false,setCredentials:t=>e({credentials:t,isAuthenticated:true}),clearCredentials:()=>e({credentials:null,isAuthenticated:false,justAuthenticated:false}),setJustAuthenticated:t=>e({justAuthenticated:t})}));var p=create(e=>({activeTab:"discover",focus:"list",selectedIndex:0,actionMenuOpen:false,notification:null,loading:false,loadingMessage:"",catalogError:null,setActiveTab:t=>e({activeTab:t}),setFocus:t=>e({focus:t}),setSelectedIndex:t=>e({selectedIndex:t}),setActionMenuOpen:t=>e({actionMenuOpen:t}),showNotification:(t,n)=>e({notification:{message:t,type:n}}),clearNotification:()=>e({notification:null}),setLoading:(t,n="")=>e({loading:t,loadingMessage:t?n:""}),setCatalogError:t=>e({catalogError:t})}));var Oe="FLOW",b="flow-skills";var Z=new Lr({projectName:Oe});function jt(){try{chmodSync(Z.path,384);}catch{}}function C(){let e=Z.get("credentials");if(!e)return null;try{return JSON.parse(e)}catch{return null}}function _t(e){Z.set("credentials",JSON.stringify(e)),jt();}function Kt(){Z.delete("credentials"),Z.delete("tokenCache");}function Jt(){return Z.path}function qt(e){Z.set("tokenCache",{accessToken:e.accessToken,expiresAt:e.expiresAt}),jt();}function lt(){let e=Z.get("tokenCache");return e?{accessToken:e.accessToken,expiresAt:e.expiresAt}:null}function D(){let e=lt();return e?new Date(e.expiresAt)>new Date:false}var Ur=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^0\.0\.0\.0$/,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i];function Dr(e){return Ur.some(t=>t.test(e))}function Or(e,t){let n=process.env[e]??t;if(!n)throw new Error(`Missing required environment variable: ${e}`);return n}function Fe(e,t){let n=Or(e,t),r;try{r=new URL(n);}catch{throw new Error(`${e} must be a valid URL. Got: "${n}"`)}if(r.protocol!=="https:")throw new Error(`${e} must be an HTTPS URL. Got protocol: "${r.protocol}"`);if(r.username||r.password)throw new Error(`${e} must not contain embedded credentials (user:pass@host is not allowed)`);if(Dr(r.hostname))throw new Error(`${e} must not point to a private/loopback address. Got: "${r.hostname}"`);return n}var Fr=/Bearer\s+[A-Za-z0-9\-._~+/]+=*/g,Nr=/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,Br=/[A-Za-z0-9+/]{40,}={0,2}/g;function ct(e){return e.replace(Fr,"Bearer ***").replace(Nr,"***").replace(Br,"***")}var Pe=class{context;constructor(t){this.context=t;}write(t){let n=this.context==="tui"?this.formatTui(t):this.formatCli(t);process.stderr.write(n+`
-`);}formatTui(t){return `[flow:${t.module}] ${t.message}`}formatCli(t){let n=String(t.timestamp.getHours()).padStart(2,"0"),r=String(t.timestamp.getMinutes()).padStart(2,"0"),o=String(t.timestamp.getSeconds()).padStart(2,"0");return `[${n}:${r}:${o}] [${t.level.toUpperCase()}] ${t.message}`}};var Ie=".claude",Ht=".flow";function Vt(e,t){return q.join(Q.homedir(),Ie,"plugins","cache",b,e,t)}function ut(e){return q.join(Q.homedir(),Ie,"plugins","marketplaces",b,"plugins","native",e)}function Ne(){return q.join(Q.homedir(),Ie,"plugins","marketplaces",b,".claude-plugin","marketplace.json")}function zt(){return q.join(Q.homedir(),Ie,"plugins","known_marketplaces.json")}function Gt(){return q.join(Q.homedir(),Ie,"plugins","marketplaces",b)}function Xt(){return q.join(Q.homedir(),Ht,"cache","install.lock")}function Wt(){return q.join(Q.homedir(),Ht,"logs","flowsetup.log")}var jr=5*1024*1024,_r=3,Be=class{filePath;constructor(){this.filePath=Wt(),this.ensureDir(),this.rotateIfNeeded();}write(t){let n=`[${t.timestamp.toISOString()}] [${t.level.toUpperCase()}] [${t.module}] ${t.message}
-`;try{E.appendFileSync(this.filePath,n,"utf-8");}catch{}}ensureDir(){try{let t=q.dirname(this.filePath);E.mkdirSync(t,{recursive:!0});}catch{}}rotateIfNeeded(){try{if(E.statSync(this.filePath).size>jr){let n=new Date().toISOString().replace(/[:.]/g,"-"),r=this.filePath.replace(".log",`-${n}.log`);E.renameSync(this.filePath,r),this.cleanOldBackups();}}catch{}}cleanOldBackups(){try{let t=q.dirname(this.filePath),n=q.basename(this.filePath,".log"),r=E.readdirSync(t).filter(o=>o.startsWith(n+"-")&&o.endsWith(".log")).sort().reverse();for(let o of r.slice(_r))E.unlinkSync(q.join(t,o));}catch{}}};var je=class{write(t){process.stdout.write(t.message+`
-`);}};var fe={debug:0,info:1,warn:2,error:3},le={context:"cli",transports:[],minLevel:"warn",debugModules:null};function Kr(){let e=process.env.DEBUG;if(!e)return null;let t=e.split(",").map(r=>r.trim()).filter(Boolean);for(let r of t)if(r==="flow:*")return "all";let n=new Set;for(let r of t)r.startsWith("flow:")&&n.add(r.slice(5));return n.size>0?n:null}function _(e,t){if(e==="tui"){let n=Kr();le={context:e,transports:[new Pe("tui"),new Be],minLevel:n?"debug":"warn",debugModules:n};}else t?.silent?le={context:e,transports:[],minLevel:"error",debugModules:null}:t?.verbose?le={context:e,transports:[new Pe("cli")],minLevel:"debug",debugModules:null}:le={context:e,transports:[new je],minLevel:"info",debugModules:null};}function Zt(){return le.transports}function Qt(e,t){let{debugModules:n,minLevel:r}=le;return le.context==="tui"&&n&&n!=="all"?n.has(t)?fe[e]>=fe.debug:fe[e]>=fe.warn:fe[e]>=fe[r]}var Yt=new Map;function _e(e,t,n){if(!Qt(e,t))return;let r={level:e,module:t,message:ct(n),timestamp:new Date};for(let o of Zt())o.write(r);}function S(e){let t=Yt.get(e);if(t)return t;let n={debug:r=>_e("debug",e,r),info:r=>_e("info",e,r),warn:r=>_e("warn",e,r),error:r=>_e("error",e,r)};return Yt.set(e,n),n}var dt=S("api:auth"),Hr=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function Vr(e){if(!Hr.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var en={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};async function zr(e){if(e instanceof HTTPError){let t=e.response.status;dt.error(`HTTP error during authentication [status=${t}]`);let n="";try{let r=await e.response.text(),o=JSON.parse(r);typeof o.error=="string"&&(n=o.error);}catch{}return n&&en[n]?new Error(en[n]):t===StatusCodes.UNAUTHORIZED||t===StatusCodes.FORBIDDEN||t===StatusCodes.INTERNAL_SERVER_ERROR?new Error("Invalid credentials"):t>=StatusCodes.BAD_REQUEST&&t<StatusCodes.INTERNAL_SERVER_ERROR?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}return e instanceof Error?(dt.debug(`Non-HTTP error during authentication: ${e.message}`),e):(dt.debug("Unknown error during authentication"),new Error("Authentication failed"))}async function Ee(e){let t=Fe("AUTH_ENGINE_URL","https://flow.ciandt.com/auth-engine-api/v2/api-key/token");Vr(e.tenant);let n;try{n=await Jr.post(t,{headers:{FlowTenant:e.tenant},json:{clientSecret:e.clientSecret}}).json();}catch(o){throw await zr(o)}let r=n.expires_at??new Date(Date.now()+(n.expires_in??3600)*1e3).toISOString();_t(e),qt({accessToken:n.access_token,expiresAt:r});}async function tn(){if(D()){let e=lt();if(!e)throw new Error("Flow CLI not configured. Run: flow-cli auth login");return e.accessToken}throw new Error("Flow CLI not configured or token expired. Run: flow-cli auth login")}var O=["clientId","clientSecret","tenant"],Xr={clientId:"Client ID",clientSecret:"Client Secret",tenant:"Tenant"};function nn(){let[e,t]=useState({clientId:"",clientSecret:"",tenant:""}),[n,r]=useState("clientId"),[o,i]=useState({}),[s,a]=useState(null),[u,c]=useState(false),{setCredentials:m,setJustAuthenticated:h}=j(),{setFocus:T}=p();useInput((l,d)=>{if(!u){if(d.shift&&d.tab){let f=O.indexOf(n);f>0&&r(O[f-1]);}else if(d.tab){let f=O.indexOf(n);f<O.length-1&&r(O[f+1]);}else if(d.return)if(n==="tenant")ie();else {let f=O.indexOf(n);r(O[f+1]);}}},{isActive:true});let ie=async()=>{let l={};for(let d of O)e[d].trim()||(l[d]="This field is required");if(Object.keys(l).length>0){i(l);let d=O.find(f=>l[f]);d&&r(d);return}c(true),a(null);try{await Ee({clientId:e.clientId.trim(),clientSecret:e.clientSecret.trim(),tenant:e.tenant.trim()});let{clientSecret:d,...f}=e;m(f),h(!0),T("list");}catch(d){a(d instanceof Error?d.message:"Authentication failed");}finally{c(false),t(d=>({...d,clientSecret:""}));}},se=l=>d=>{t(f=>({...f,[l]:d})),o[l]&&i(f=>({...f,[l]:void 0}));};return jsxs(Box,{flexDirection:"column",padding:2,children:[jsx(Box,{marginBottom:1,children:jsxs(Text,{bold:true,color:"cyan",children:[Oe," \u2014 Initial Setup"]})}),jsx(Box,{flexDirection:"column",children:O.map(l=>jsx(Box,{marginBottom:1,children:jsx(Bt,{label:Xr[l],value:e[l],onChange:se(l),masked:l==="clientSecret",isActive:n===l&&!u,error:o[l]})},l))}),u&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"cyan",children:"Authenticating..."})}),s&&jsx(Box,{marginTop:1,children:jsxs(Text,{color:"red",children:["\u26A0 ",s]})}),jsx(Box,{marginTop:1,children:jsx(Text,{dimColor:true,children:"Tab next field \xB7 Enter confirm"})})]})}var Qr=JSON.parse(readFileSync(join(import.meta.dirname,"..","package.json"),"utf8")),Je=Qr.version;function sn(){return jsxs(Box,{flexDirection:"column",alignItems:"center",children:[jsx(to,{name:"morning",children:jsx(eo,{text:"FLOW",font:"block"})}),jsx(Box,{marginTop:-1,marginBottom:1,children:jsxs(Text,{dimColor:true,children:["Marketplace \xB7 v",Je]})})]})}var gt={discover:"Discover",installed:"Installed"},no=Object.keys(gt);function ln(){let e=p(t=>t.activeTab);return jsxs(Box,{paddingX:1,paddingBottom:1,children:[no.map(t=>jsx(Box,{marginRight:2,children:t===e?jsx(Text,{bold:true,underline:true,color:"cyan",children:gt[t]}):jsx(Text,{dimColor:true,children:gt[t]})},t)),jsx(Text,{dimColor:true,children:"(Tab to cycle)"})]})}var F=create(e=>({query:"",setQuery:t=>e({query:t}),resetQuery:()=>e({query:""})}));function un(){let e=p(r=>r.focus),t=F(r=>r.query),n=e==="search";return jsxs(Box,{borderStyle:"single",borderTop:false,borderBottom:true,borderLeft:false,borderRight:false,paddingX:1,marginX:1,marginBottom:1,children:[jsx(Text,{color:n?"cyan":"gray",children:"\u03C1 "}),n?jsxs(Fragment,{children:[jsx(Text,{color:"white",children:t}),jsx(Text,{color:"cyan",children:"\u2588"})]}):jsx(Text,{dimColor:true,children:t||"Search..."})]})}function I(e){return e.replace(/\x1b\[[0-9;:<=>?]*[ -/]*[@-~]/g,"").replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g,"").replace(/\x1b./g,"").replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g,"")}function me(e){process.stdout.write(x.green(`  \u2713 ${I(e)}
-`));}function P(e){process.stderr.write(x.red(`  \u2717 ${I(e)}
-`));}function w(e){process.stdout.write(x.cyan(`  \u2139 ${I(e)}
-`));}function ze(e,t){let n=t.map(a=>a.map(I)),r=[e,...n],o=e.map((a,u)=>Math.max(...r.map(c=>(c[u]??"").length))),i=o.map(a=>"\u2500".repeat(a)).join("  "),s=a=>a.map((u,c)=>u.padEnd(o[c])).join("  ");process.stdout.write(`
-`),process.stdout.write(`  ${x.bold(s(e))}
-`),process.stdout.write(`  ${x.dim(i)}
-`);for(let a of n)process.stdout.write(`  ${s(a)}
+import {Box,Text,render,useWindowSize,useApp,useInput}from'ink';import mc,{useRef,useCallback,useMemo,useEffect,useState}from'react';import {create}from'zustand';import $l,{HTTPError}from'ky';import*as mt from'crypto';import {randomUUID}from'crypto';import*as G from'fs';import G__default,{readFileSync,existsSync,realpathSync}from'fs';import*as K from'path';import K__default,{join,relative,resolve,normalize,sep,dirname,isAbsolute,basename}from'path';import*as ge from'os';import ge__default,{homedir,tmpdir}from'os';import {execFile,exec,spawn}from'child_process';import {promisify}from'util';import*as Qr from'readline';import {createInterface}from'readline';import dn from'keytar';import Ir from'conf';import {StatusCodes}from'http-status-codes';import {jsxs,jsx,Fragment}from'react/jsx-runtime';import C from'chalk';import oc from'ink-big-text';import Ac from'ink-spinner';import*as Se from'fs/promises';import {stat,rm,readdir,readFile,mkdtemp,mkdir,writeFile,cp as cp$1}from'fs/promises';import Nc from'extract-zip';import Fc from'proper-lockfile';import Zr from'semver';import {execa}from'execa';import vo from'yocto-spinner';import {Command,Option}from'commander';import {simpleGit}from'simple-git';import {parse}from'yaml';var Ao="FLOW",_="flow-skills",pr="flow-cli",Ct="internal",on="external",dt={skill:{label:"Skill",color:"cyan"},mcp:{label:"MCP",color:"yellow"},plugin:{label:"Plugin",color:"magenta"}},$o={internal:{label:"Flow",color:"blue"},external:{label:"External",color:"white"}},dr=new Set(["internal","external"]),At={user:{label:"Global",pathHint:"~/.claude/",actionLabel:"Global (~/.claude)"},project:{label:"Project",pathHint:".claude/ (shared)",actionLabel:"Project (.claude/)"},local:{label:"Local",pathHint:".claude/ (local only)",actionLabel:"Local (.claude/)"}},Re=5,We=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;var Lo=new Set(["skill","mcp","plugin"]),f=create(e=>({screen:"auth",activeTab:"discover",focus:"list",selectedIndex:0,actionMenuOpen:false,notification:null,loading:false,loadingMessage:"",catalogError:null,pendingExit:false,catalogFilters:{types:new Set(Lo),origins:new Set(dr)},setScreen:t=>e({screen:t}),setActiveTab:t=>e({activeTab:t}),setFocus:t=>e({focus:t}),setSelectedIndex:t=>e({selectedIndex:t}),setActionMenuOpen:t=>e({actionMenuOpen:t}),showNotification:(t,n)=>e({notification:{message:t,type:n}}),clearNotification:()=>e({notification:null}),setLoading:(t,n="")=>e({loading:t,loadingMessage:t?n:""}),setCatalogError:t=>e({catalogError:t}),setPendingExit:t=>e({pendingExit:t}),toggleTypeFilter:t=>e(n=>{let{types:r}=n.catalogFilters;return r.size===1&&r.has(t)?{}:{catalogFilters:{...n.catalogFilters,types:new Set([t])},selectedIndex:0}}),selectAllTypes:()=>e(t=>({catalogFilters:{...t.catalogFilters,types:new Set(Lo)},selectedIndex:0})),toggleOriginFilter:t=>e(n=>{let{origins:r}=n.catalogFilters;return r.size===1&&r.has(t)?{}:{catalogFilters:{...n.catalogFilters,origins:new Set([t])},selectedIndex:0}}),selectAllOrigins:()=>e(t=>({catalogFilters:{...t.catalogFilters,origins:new Set(dr)},selectedIndex:0}))}));var sn="aes-256-gcm",ol=16,Ro=16,$t=class{key;constructor(t){if(t.length!==32)throw new Error(`Invalid key length: expected 32 bytes, got ${t.length}`);this.key=t;}encrypt(t){let n=mt.randomBytes(ol),r=mt.createCipheriv(sn,this.key,n,{authTagLength:Ro}),o=Buffer.concat([r.update(t,"utf8"),r.final()]),i=r.getAuthTag();return {iv:n.toString("hex"),authTag:i.toString("hex"),ciphertext:o.toString("hex"),algorithm:sn}}decrypt(t){if(t.algorithm!==sn)throw new Error(`Unsupported encryption algorithm: ${t.algorithm}`);let n=mt.createDecipheriv(sn,this.key,Buffer.from(t.iv,"hex"),{authTagLength:Ro});return n.setAuthTag(Buffer.from(t.authTag,"hex")),Buffer.concat([n.update(Buffer.from(t.ciphertext,"hex")),n.final()]).toString("utf8")}};var il=/Bearer\s+[A-Za-z0-9\-._~+/]+=*/g,sl=/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,al=/[A-Za-z0-9+/]{40,}={0,2}/g;function mr(e){return e.replace(il,"Bearer ***").replace(sl,"***").replace(al,"***")}var Lt=class{context;constructor(t){this.context=t;}write(t){let n=this.context==="tui"?this.formatTui(t):this.formatCli(t);process.stderr.write(n+`
+`);}formatTui(t){return `[flow:${t.module}] ${t.message}`}formatCli(t){let n=String(t.timestamp.getHours()).padStart(2,"0"),r=String(t.timestamp.getMinutes()).padStart(2,"0"),o=String(t.timestamp.getSeconds()).padStart(2,"0");return `[${n}:${r}:${o}] [${t.level.toUpperCase()}] ${t.message}`}};var Rt=".claude",Mo=".flow";function _o(e,t){return K.join(ge.homedir(),Rt,"plugins","cache",_,e,t)}function fr(e){return K.join(ge.homedir(),Rt,"plugins","marketplaces",_,"plugins","native",e)}function an(){return K.join(ge.homedir(),Rt,"plugins","marketplaces",_,".claude-plugin","marketplace.json")}function Oo(){return K.join(ge.homedir(),Rt,"plugins","known_marketplaces.json")}function Do(){return K.join(ge.homedir(),Rt,"plugins","marketplaces",_)}function Bo(){return K.join(ge.homedir(),Mo,"cache","install.lock")}function No(){return K.join(ge.homedir(),Mo,"logs","flowsetup.log")}function Mt(e){let t=e==="global"?ge.homedir():process.cwd();return K.join(t,".claude","skills")}function gr(e){let t=e==="global"?ge.homedir():process.cwd();return K.join(t,".claude","skills-lock.json")}var ll=5*1024*1024,cl=3,ln=class{filePath;constructor(){this.filePath=No(),this.ensureDir(),this.rotateIfNeeded();}write(t){let n=`[${t.timestamp.toISOString()}] [${t.level.toUpperCase()}] [${t.module}] ${t.message}
+`;try{G.appendFileSync(this.filePath,n,"utf-8");}catch{}}ensureDir(){try{let t=K.dirname(this.filePath);G.mkdirSync(t,{recursive:!0});}catch{}}rotateIfNeeded(){try{if(G.statSync(this.filePath).size>ll){let n=new Date().toISOString().replace(/[:.]/g,"-"),r=this.filePath.replace(".log",`-${n}.log`);G.renameSync(this.filePath,r),this.cleanOldBackups();}}catch{}}cleanOldBackups(){try{let t=K.dirname(this.filePath),n=K.basename(this.filePath,".log"),r=G.readdirSync(t).filter(o=>o.startsWith(n+"-")&&o.endsWith(".log")).sort().reverse();for(let o of r.slice(cl))G.unlinkSync(K.join(t,o));}catch{}}};var cn=class{write(t){process.stdout.write(t.message+`
+`);}};var ft={debug:0,info:1,warn:2,error:3},Ye={context:"cli",transports:[],minLevel:"warn",debugModules:null};function ul(){let e=process.env.DEBUG;if(!e)return null;let t=e.split(",").map(r=>r.trim()).filter(Boolean);for(let r of t)if(r==="flow:*")return "all";let n=new Set;for(let r of t)r.startsWith("flow:")&&n.add(r.slice(5));return n.size>0?n:null}function ne(e,t){if(e==="tui"){let n=ul();Ye={context:e,transports:[new Lt("tui"),new ln],minLevel:n?"debug":"warn",debugModules:n};}else t?.silent?Ye={context:e,transports:[],minLevel:"error",debugModules:null}:t?.verbose?Ye={context:e,transports:[new Lt("cli")],minLevel:"debug",debugModules:null}:Ye={context:e,transports:[new cn],minLevel:"info",debugModules:null};}function Fo(){return Ye.transports}function Uo(e,t){let{debugModules:n,minLevel:r}=Ye;return Ye.context==="tui"&&n&&n!=="all"?n.has(t)?ft[e]>=ft.debug:ft[e]>=ft.warn:ft[e]>=ft[r]}var jo=new Map;function un(e,t,n){if(!Uo(e,t))return;let r={level:e,module:t,message:mr(n),timestamp:new Date};for(let o of Fo())o.write(r);}function S(e){let t=jo.get(e);if(t)return t;let n={debug:r=>un("debug",e,r),info:r=>un("info",e,r),warn:r=>un("warn",e,r),error:r=>un("error",e,r)};return jo.set(e,n),n}var yr=S("encryption"),hr="__encrypted__";function pl(e){return typeof e=="object"&&e!==null&&hr in e&&e[hr]===true}function Sr(e){return {serialize(t){let n=JSON.stringify(t),r=e.encrypt(n),o={[hr]:true,envelope:r};return JSON.stringify(o,null,"	")},deserialize(t){let n;try{n=JSON.parse(t);}catch{return yr.warn("[encryption] Config file contains unparseable data, treating as empty"),{}}if(pl(n))try{let r=e.decrypt(n.envelope);return JSON.parse(r)}catch(r){return yr.error(`[encryption] Decryption failed: ${r instanceof Error?r.message:"unknown error"}. Config will be treated as empty. Re-authentication may be required.`),{}}return yr.info("[encryption] Detected plaintext config \u2014 will encrypt on next write"),n}}}var wr=promisify(execFile),fl=promisify(exec),gt=class{static async isAvailable(){try{return await fl("command -v security"),!0}catch{return  false}}async getSecret(t,n){try{let{stdout:r}=await wr("security",["find-generic-password","-w","-a",n,"-s",t]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await wr("security",["add-generic-password","-U","-a",n,"-s",t,"-w",r]);}async deleteSecret(t,n){try{return await wr("security",["delete-generic-password","-a",n,"-s",t]),!0}catch{return  false}}getStoragePath(){return "macOS Keychain (security)"}};var Jo=promisify(execFile),xr=promisify(exec),Sl=[{name:"apt",command:"sudo apt install -y libsecret-tools"},{name:"dnf",command:"sudo dnf install -y libsecret"},{name:"pacman",command:"sudo pacman -S --noconfirm libsecret"},{name:"apk",command:"sudo apk add libsecret-tools"},{name:"zypper",command:"sudo zypper install -y libsecret-tools"}],pn=S("encryption:linux-keyvault");async function wl(e,t){let n=["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"],r=0,o=setInterval(()=>{process.stderr.write(`\r${n[r++%n.length]}  ${e}`);},80);try{return await t()}finally{clearInterval(o),process.stderr.write("\r\x1B[2K");}}function xl(e){let t=Qr.createInterface({input:process.stdin,output:process.stdout});return new Promise(n=>{t.question(e,r=>{t.close(),n(r.trim().toLowerCase());});})}var Me=class e{static async isAvailable(){try{return await xr("command -v secret-tool"),!0}catch{return  false}}static async detectPackageManager(){for(let t of Sl)try{return await xr(`command -v ${t.name}`),t}catch{}return null}static async ensureInstalled(){if(await e.isAvailable())return  true;pn.info("Secure credential storage requires 'secret-tool' (libsecret). This tool allows us to store your encryption key in the OS keyring, so your credentials are protected even if someone copies the config file.");let t=await e.detectPackageManager();if(!t)return pn.warn("Could not detect a supported package manager. Please install libsecret manually."),false;let n=await xl("  ? Install secret-tool? This requires sudo. (y/N) ");if(n!=="y"&&n!=="yes")return  false;try{return pn.info(`Running: ${t.command}`),await wl("Installing secret-tool...",()=>xr(t.command)),e.isAvailable()}catch{return pn.warn("Installation failed. Falling back to derived key."),false}}async getSecret(t,n){try{let{stdout:r}=await Jo("secret-tool",["lookup","service",t,"account",n]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await new Promise((o,i)=>{let s=spawn("secret-tool",["store","--label",t,"service",t,"account",n]);s.stdin.end(r,"utf8"),s.on("close",c=>{c===0?o():i(new Error(`secret-tool exited with code ${c}`));}),s.on("error",i);});}async deleteSecret(t,n){try{return await Jo("secret-tool",["clear","service",t,"account",n]),!0}catch{return  false}}getStoragePath(){return "Linux Secret Service (secret-tool)"}};var Go=S("encryption:windows-keyvault"),yt=class{static async isAvailable(){try{return await dn.getPassword("__flow_probe__","__flow_probe__"),!0}catch{return  false}}async getSecret(t,n){try{return await dn.getPassword(t,n)}catch(r){let o=r instanceof Error?r.message.split(`
+`)[0]:"unknown error";return Go.error(`Failed to read secret from Windows Credential Manager [service="${t}", account="${n}"]: ${o}`),null}}async setSecret(t,n,r){try{await dn.setPassword(t,n,r);}catch(o){let i=o instanceof Error?o.message.split(`
+`)[0]:"unknown error",s=`Failed to store secret in Windows Credential Manager [service="${t}", account="${n}"]: ${i}`;throw Go.error(s),new Error(s)}}async deleteSecret(t,n){try{return await dn.deletePassword(t,n)}catch{return  false}}getStoragePath(){return "Windows Credential Manager (keytar)"}};var Il=32,bl="flow-plugins-cli-fallback",br="flow-plugins-cli-fallback",vl={linux:"install secret-tool (e.g. sudo apt install libsecret-tools)",darwin:"ensure the Keychain is accessible (security binary must be available)",win32:"ensure Credential Manager is available (cmdkey must be in PATH)"};function Pl(){let e=`${ge.hostname()}${ge.userInfo().username}`;return mt.scryptSync(e,bl,Il)}function El(){let e=Pl(),t=new $t(e),n=Sr(t);return new Ir({projectName:br,serialize:n.serialize,deserialize:n.deserialize})}var fn=null;function mn(){return fn||(fn=El()),fn}var W=class{warned=false;async getSecret(t,n){return mn().get(`${t}:${n}`)??null}async setSecret(t,n,r){if(!this.warned){let o=vl[process.platform]??"ensure the OS keyring is available";process.stderr.write(`\u26A0  Secure keyring unavailable. Credentials are stored in an encrypted file
+   using a machine-derived key. For stronger security, ${o}.
+`),this.warned=true;}mn().set(`${t}:${n}`,r);}async deleteSecret(t,n){let r=mn(),o=`${t}:${n}`;return r.has(o)?(r.delete(o),true):false}getStoragePath(){return mn().path}static hasExistingData(){try{let t=new Ir({projectName:br});return G.existsSync(t.path)}catch{return  false}}static clearFallbackFile(){try{let t=new Ir({projectName:br});G.rmSync(t.path,{force:!0});}catch{}fn=null;}};async function vr(){if(W.hasExistingData())return new W;switch(process.platform){case "darwin":return await gt.isAvailable()?new gt:new W;case "linux":return await Me.isAvailable()?new Me:await Me.ensureInstalled()?new Me:new W;case "win32":return await yt.isAvailable()?new yt:new W;default:throw new Error(`Unsupported platform: ${process.platform}`)}}var Tl=S("config:credentials"),Te="flow-plugins-cli",Pr="credentials",Er="token-cache",Tr="user-info",hn=null;async function _e(){return hn||(hn=vr()),hn}function Sn(){hn=null;}async function O(){let t=await(await _e()).getSecret(Te,Pr);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function Ze(e){let{clientId:t,clientSecret:n,tenant:r}=e,o=[!t?.trim()&&"clientId",!n?.trim()&&"clientSecret",!r?.trim()&&"tenant"].filter(Boolean);if(o.length>0)throw Tl.error(`missing or empty fields: ${o.join(", ")}`),new Error("Cannot save credentials: clientId, clientSecret, and tenant are required");await(await _e()).setSecret(Te,Pr,JSON.stringify(e));}async function qo(){let e=await _e();await e.deleteSecret(Te,Pr),await e.deleteSecret(Te,Er),await e.deleteSecret(Te,Tr);}async function Wo(){return (await _e()).getStoragePath()}async function Xo(e){await(await _e()).setSecret(Te,Er,JSON.stringify(e));}async function wn(){let t=await(await _e()).getSecret(Te,Er);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function xn(e){await(await _e()).setSecret(Te,Tr,JSON.stringify(e));}async function Yo(){let t=await(await _e()).getSecret(Te,Tr);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function ht(){let e=await wn();return e?new Date(e.expiresAt)>new Date:false}function In(e){let t=e.split(".");if(t.length!==3)throw new Error(`Invalid JWT: expected 3 segments, got ${t.length}`);let n=t[1].replace(/-/g,"+").replace(/_/g,"/"),r=Buffer.from(n,"base64").toString("utf8");try{return JSON.parse(r)}catch{throw new Error("Invalid JWT: payload segment is not valid JSON")}}var Zo=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^100\.(6[4-9]|[7-9]\d|1[0-2][0-7])\./,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^0\.0\.0\.0$/,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i];function kl(e){if(!e.startsWith("[")||!e.endsWith("]"))return null;let n=e.slice(1,-1).match(/^::(?:ffff:)?([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i);if(!n)return null;let r=parseInt(n[1],16),o=parseInt(n[2],16);return `${r>>8&255}.${r&255}.${o>>8&255}.${o&255}`}function Cl(e){if(Zo.some(n=>n.test(e)))return  true;let t=kl(e);return !!(t&&Zo.some(n=>n.test(t)))}function Al(e,t){let n=process.env[e]??t;if(!n)throw new Error(`Missing required environment variable: ${e}`);return n}function St(e,t){let n=Al(e,t),r;try{r=new URL(n);}catch{throw new Error(`${e} must be a valid URL. Got: "${n}"`)}let o=process.env.NODE_ENV==="development";if(!o&&r.protocol!=="https:")throw new Error(`${e} must be an HTTPS URL. Got protocol: "${r.protocol}"`);if(r.username||r.password)throw new Error(`${e} must not contain embedded credentials (user:pass@host is not allowed)`);if(!o&&Cl(r.hostname))throw new Error(`${e} must not point to a private/loopback address. Got: "${r.hostname}"`);return n}var kr=S("api:auth");function Rl(e){if(!We.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var Qo={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};async function Ml(e){if(e instanceof HTTPError){let t=e.response.status;kr.error(`HTTP error during authentication [status=${t}]`);let n="";try{let r=await e.response.text(),o=JSON.parse(r);typeof o.error=="string"&&(n=o.error);}catch{}return n&&Qo[n]?new Error(Qo[n]):t===StatusCodes.UNAUTHORIZED||t===StatusCodes.FORBIDDEN||t===StatusCodes.INTERNAL_SERVER_ERROR?new Error("Invalid credentials"):t>=StatusCodes.BAD_REQUEST&&t<StatusCodes.INTERNAL_SERVER_ERROR?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}return e instanceof Error?(kr.debug(`Non-HTTP error during authentication: ${e.message}`),e):(kr.debug("Unknown error during authentication"),new Error("Authentication failed"))}async function Qe(e){let t=St("AUTH_ENGINE_URL","https://flow.ciandt.com/auth-engine-api/v2/api-key/token");Rl(e.tenant);let n;try{n=await $l.post(t,{headers:{FlowTenant:e.tenant},json:{clientSecret:e.clientSecret}}).json();}catch(i){throw await Ml(i)}let r=n.expires_at??new Date(Date.now()+(n.expires_in??3600)*1e3).toISOString();await Ze(e),await Xo({accessToken:n.access_token,expiresAt:r});let o=In(n.access_token);await xn({sub:o.sub,name:o.name,email:o.email});}var ei=S("lib:tokenProvider");async function Oe(){if(await ht()){let r=await wn();if(r)return r.accessToken}ei.debug("Token expired or missing, re-authenticating...");let t=await O();if(!t)throw new Error("Not authenticated. Run: flow auth login");W.clearFallbackFile(),Sn(),await Qe(t);let n=await wn();if(!n)throw new Error("Authentication succeeded but token was not persisted");return ei.debug("Token refreshed successfully"),n.accessToken}var bn=S("api:metrics");function ti(){return St("METRICS_COLLECTOR_URL","https://flow.ciandt.com/metrics-collector-api/")+"log-event"}function ni(e,t,n){return $l.post(e,{json:t,headers:n})}async function Ol(e){let t=await Yo();if(t)return t;let n=In(e),r={sub:n.sub,name:n.name,email:n.email};return await xn(r),r}async function b(e,t){let n=await Oe(),r=await Ol(n),o=await O();if(!We.test(o.tenant))throw new Error(`Invalid tenant value: "${o.tenant}"`);let i={action:e,booster:pr,metadata:{...t},success:true,tenant:o.tenant,timestamp:new Date().toISOString(),user:{id:r.sub,name:r.name,email:r.email}};try{await ni(ti(),i,{Authorization:`Bearer ${n}`,FlowTenant:o.tenant}),bn.debug(`Metrics event sent: ${e}`);}catch(s){throw bn.warn(`Failed to send metrics event "${e}": ${String(s)}`),s}}async function ri(e,t,n){try{let r=n&&We.test(n)?n:"unknown",o={action:e,booster:pr,metadata:t,success:!0,tenant:r,timestamp:new Date().toISOString(),user:{id:"anonymous",name:"unknown",email:"unknown"}};await ni(ti(),o,{FlowTenant:r}),bn.debug(`Anonymous metrics event sent: ${e}`);}catch(r){bn.warn(`Failed to send anonymous metrics event "${e}": ${String(r)}`);}}var x={CLI_SESSION_STARTED:"CLI_SESSION_STARTED",CLI_AUTH_FAILED:"CLI_AUTH_FAILED",CLI_STEP_COMPLETED:"CLI_STEP_COMPLETED",CLI_KIT_DISPLAYED:"CLI_KIT_DISPLAYED",CLI_KIT_ACCEPTED:"CLI_KIT_ACCEPTED",CLI_KIT_REJECTED:"CLI_KIT_REJECTED",CLI_ONBOARDING_COMPLETED:"CLI_ONBOARDING_COMPLETED",CLI_ONBOARDING_ABANDONED:"CLI_ONBOARDING_ABANDONED",CLI_TOOL_INSTALLED:"CLI_TOOL_INSTALLED",CLI_TOOL_UNINSTALLED:"CLI_TOOL_UNINSTALLED",CLI_TOOL_UPDATED:"CLI_TOOL_UPDATED",CLI_TOOL_ENABLED:"CLI_TOOL_ENABLED",CLI_TOOL_INSTALL_FAILED:"CLI_TOOL_INSTALL_FAILED",CLI_TOOL_DISABLED:"CLI_TOOL_DISABLED",CLI_CATALOG_VIEWED:"CLI_CATALOG_VIEWED",CLI_TUI_SESSION_ENDED:"CLI_TUI_SESSION_ENDED"};var Dl={sessionStart:0,stepStart:0,currentStep:"auth",interfaceType:"cli",tuiSessionStart:0},le={...Dl};function oi(e){let t=Date.now();le={sessionStart:t,stepStart:t,currentStep:"auth",interfaceType:e,tuiSessionStart:0};}function et(e){le.currentStep=e,le.stepStart=Date.now();}function $(){return {...le}}function De(){return le.sessionStart===0?0:Date.now()-le.sessionStart}function tt(){return le.stepStart===0?0:Date.now()-le.stepStart}function ii(){le.tuiSessionStart=Date.now();}function si(){return le.tuiSessionStart===0?0:Date.now()-le.tuiSessionStart}var Bl=3e3,Nl=S("abandonment");async function vn(e){let{currentStep:t,sessionStart:n}=$();if(n===0)return;let r={last_step:t,trigger:e,duration_ms:De()};try{await Promise.race([b(x.CLI_ONBOARDING_ABANDONED,r),new Promise((o,i)=>setTimeout(()=>i(new Error("abandonment timeout")),Bl))]);}catch(o){Nl.warn(`Abandonment event failed: ${String(o)}`);}}function ai(e,t){return Promise.race([e,new Promise(n=>setTimeout(n,t))])}var Fl=3e3,Ul=S("session-end");async function Ot(e){let{activeTab:t,screen:n}=f.getState(),r=si(),i=[b(x.CLI_TUI_SESSION_ENDED,{duration_ms:r,active_tab:t,interface:"tui"})];n!=="main"&&i.push(vn(e));try{await ai(Promise.all(i).then(()=>{}),Fl);}catch(s){Ul.warn(`Session end event failed: ${String(s)}`);}}var Hl=2e3;function ci(){let{exit:e}=useApp(),t=useRef(false),n=useRef(null),r=f(s=>s.pendingExit),o=f(s=>s.setPendingExit),i=useCallback(()=>{if(t.current){n.current&&clearTimeout(n.current),Ot("double-ctrl-c").finally(()=>e());return}t.current=true,o(true),n.current=setTimeout(()=>{t.current=false,o(false);},Hl);},[e,o]);return useInput((s,c)=>{c.ctrl&&s==="c"&&i();}),{pendingExit:r}}var ql=16;function ui({label:e,value:t,onChange:n,masked:r=false,isActive:o,error:i}){let s=useRef(t);useEffect(()=>{s.current=t;},[t]),useInput((a,l)=>{if(l.backspace){let u=s.current.slice(0,-1);s.current=u,n(u);}else if(a&&!l.ctrl&&!l.meta&&!l.escape&&!l.return&&!l.tab&&!l.upArrow&&!l.downArrow&&!l.leftArrow&&!l.rightArrow){let u=s.current+a;s.current=u,n(u);}},{isActive:o});let c=r?"\u2022".repeat(t.length):t;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{children:[jsx(Text,{color:o?"cyan":"gray",children:o?"\u25B8 ":"  "}),jsx(Text,{color:o?"white":"gray",bold:o,children:e.padEnd(ql)}),jsx(Text,{color:o?"cyan":"gray",children:c}),o&&jsx(Text,{color:"cyan",children:"\u2588"})]}),i&&jsx(Box,{paddingLeft:3,children:jsxs(Text,{color:"red",children:["\u26A0 ",i]})})]})}var ce=create(e=>({credentials:null,isAuthenticated:false,justAuthenticated:false,setCredentials:t=>e({credentials:t,isAuthenticated:true}),clearCredentials:()=>e({credentials:null,isAuthenticated:false,justAuthenticated:false}),setJustAuthenticated:t=>e({justAuthenticated:t})}));var Zl=JSON.parse(readFileSync(join(import.meta.dirname,"..","package.json"),"utf8")),Be=Zl.version;function p(e){return e==null?"":e.replace(/\x1b\[[0-9;:<=>?]*[ -/]*[@-~]/g,"").replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g,"").replace(/\x1b./g,"").replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g,"")}function V(e){process.stdout.write(C.green(`  \u2713 ${p(e)}
+`));}function k(e){process.stderr.write(C.red(`  \u2717 ${p(e)}
+`));}function I(e){process.stdout.write(C.cyan(`  \u2139 ${p(e)}
+`));}function Pn(e,t){let n=t.map(c=>c.map(p)),r=[e,...n],o=e.map((c,a)=>Math.max(...r.map(l=>(l[a]??"").length))),i=o.map(c=>"\u2500".repeat(c)).join("  "),s=c=>c.map((a,l)=>a.padEnd(o[l])).join("  ");process.stdout.write(`
+`),process.stdout.write(`  ${C.bold(s(e))}
+`),process.stdout.write(`  ${C.dim(i)}
+`);for(let c of n)process.stdout.write(`  ${s(c)}
 `);process.stdout.write(`
-`);}function Ge(e){process.stdout.write(JSON.stringify(e,null,2)+`
-`);}function Xe(e){let t=new Date(e);return isNaN(t.getTime())?"\u2014":new Intl.DateTimeFormat("en-US",{dateStyle:"short"}).format(t)}var dn=ao.memo(function({item:t,isSelected:n}){let r=t.status==="disabled"?"yellow":"green";return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:n?"cyan":"gray",children:n?"\u203A ":"\u25CB "}),jsx(Text,{bold:n,color:n?"cyan":"white",children:t.name}),jsxs(Text,{dimColor:true,children:[t.authorName?` \xB7 ${t.authorName}`:""," \xB7 v",t.version]}),t.status&&jsxs(Text,{color:r,children:[" [",t.status,"]"]}),t.updateAvailable&&jsx(Text,{color:"yellow",children:" [\u2191 update available]"}),t.installedBadge&&jsx(Text,{color:"cyan",children:" [installed]"}),t.installedAt&&jsxs(Text,{dimColor:true,children:[" \xB7 ",Xe(t.installedAt)]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:t.description})})]})});function fn({message:e}){return jsx(Box,{paddingX:2,paddingY:1,children:jsx(Text,{dimColor:true,children:e??"No items found."})})}var wt=5;function gn({items:e,emptyMessage:t}){let n=p(u=>u.selectedIndex);if(e.length===0)return jsx(fn,{message:t});let r=Math.max(0,n-Math.floor(wt/2)),o=Math.min(e.length,r+wt);o===e.length&&(r=Math.max(0,o-wt));let i=e.slice(r,o),s=r,a=e.length-o;return jsxs(Box,{flexDirection:"column",children:[s>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",s," more above"]})}),i.map((u,c)=>jsx(dn,{item:u,isSelected:r+c===n},u.name)),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",a," more below"]})})]})}var uo={discover:"Discover plugins",installed:"Installed plugins"};function yn({items:e,tabId:t,emptyMessage:n}){return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{paddingX:1,paddingBottom:1,children:[jsx(Text,{bold:true,children:uo[t]}),jsxs(Text,{dimColor:true,children:[" (",e.length,")"]})]}),jsx(un,{}),jsx(gn,{items:e,emptyMessage:n})]})}function wn({filteredItems:e,emptyMessage:t}){let n=p(r=>r.activeTab);return jsx(Box,{flexDirection:"column",flexGrow:1,children:n==="discover"?jsx(yn,{items:e,tabId:"discover",emptyMessage:t},"discover"):jsx(yn,{items:e,tabId:"installed",emptyMessage:t},"installed")})}var mo={tabs:"Tab: switch tab | \u2191\u2193: navigate | Enter: select | /: search | q: quit",list:"Tab: switch tab | \u2191\u2193: navigate | Enter: select | /: search | q: quit",search:"Type to filter | Esc: cancel search | Enter: confirm",actionMenu:"\u2191\u2193: navigate options | Enter: confirm | Esc: close menu",auth:"Tab: next field | Enter: confirm | Ctrl+C: quit"};function bn(){let e=p(t=>t.focus);return jsx(Box,{borderStyle:"single",borderTop:true,borderBottom:false,borderLeft:false,borderRight:false,children:jsx(Text,{dimColor:true,children:mo[e]})})}function vn({message:e,type:t}){return e?jsx(Box,{paddingX:1,children:jsxs(Text,{color:t==="success"?"green":t==="info"?"cyan":"red",children:[t==="success"?"\u2713":t==="info"?"(i)":"\u2717"," ",e]})}):null}function En({message:e}){return jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(bo,{type:"dots"})}),jsxs(Text,{children:[" ",e]})]})}function $n({message:e,onRetry:t,onBack:n}){return useInput((r,o)=>{r==="r"&&t?t():o.escape&&n&&n();}),jsxs(Box,{flexDirection:"column",paddingX:2,paddingY:1,children:[jsxs(Text,{color:"red",children:["\u2717 ",e]}),t&&jsx(Text,{dimColor:true,children:"Press r to retry"}),n&&jsx(Text,{dimColor:true,children:"Press Escape to go back"})]})}function Ze({itemName:e,actions:t,onAction:n,onClose:r}){let o=p(a=>a.focus),[i,s]=useState(0);return useInput((a,u)=>{u.upArrow?s(c=>c>0?c-1:c):u.downArrow?s(c=>c<t.length-1?c+1:c):u.return?n(t[i]):u.escape&&r();},{isActive:o==="actionMenu"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Text,{bold:true,children:e}),jsx(Box,{flexDirection:"column",marginTop:1,children:t.map((a,u)=>jsx(Box,{children:jsxs(Text,{bold:u===i,color:u===i?"cyan":void 0,children:[u===i?"\u203A ":"  ",a]})},u))})]})}function Cn({itemName:e,onInstall:t,onClose:n}){return jsx(Ze,{itemName:e,actions:["Install","Cancel"],onAction:i=>{i==="Install"?t():n();},onClose:n})}function Un({itemName:e,itemStatus:t,updateAvailable:n,catalogVersion:r,onUninstall:o,onToggleStatus:i,onUpdate:s,onClose:a}){let[u,c]=useState(false),m=p(l=>l.focus);if(useInput((l,d)=>{d.escape||l==="n"?c(false):l==="y"&&o();},{isActive:u&&m==="actionMenu"}),u)return jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Uninstall "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]});let h=t==="enabled"?"Disable":"Enable",T=r?`Update to v${r}`:"Update";return jsx(Ze,{itemName:e,actions:n?["Uninstall",h,T,"Cancel"]:["Uninstall",h,"Cancel"],onAction:l=>{l==="Uninstall"?c(true):l===h?i():l.startsWith("Update")?s?.():a();},onClose:a})}async function Dn(e,t){let n=q.resolve(t);await N.mkdir(n,{recursive:true});let r=q.join(q.dirname(n),`${randomUUID()}.zip`);try{await N.writeFile(r,e),await ko(r,{dir:n,onEntry(o){if((o.externalFileAttributes>>16&61440)===40960)throw new Error(`Zip Slip (symlink): entry "${o.fileName}" is a symbolic link and was rejected`);let s=q.resolve(n,o.fileName);if(!s.startsWith(n+q.sep)&&s!==n)throw new Error(`Zip Slip detected: entry "${o.fileName}" would escape target directory`)}});try{let o=realpathSync(n);if(!o.startsWith(q.resolve(q.dirname(n))))throw new Error(`Zip Slip (post-extract): resolved path "${o}" is outside expected parent`)}catch(o){if(o.code!=="ENOENT")throw o}}finally{try{await N.unlink(r);}catch{}}}async function Et(e){await N.rm(e,{recursive:true,force:true});}async function te(){let e=Xt();await N.mkdir(q.dirname(e),{recursive:true});try{await N.writeFile(e,"",{flag:"wx"});}catch(n){if(n.code!=="EEXIST")throw n}return await Ro.lock(e,{stale:1e4,retries:{retries:2,minTimeout:500,maxTimeout:500}})}function Lo(){return {$schema:"https://anthropic.com/claude-code/marketplace.schema.json",name:b,description:"Flow Skills marketplace",owner:{name:"Flow Team",email:"flow@ciandt.com"},plugins:[]}}function Fn(){let e=Ne();if(!E__default.existsSync(e))return null;try{return JSON.parse(E__default.readFileSync(e,"utf-8"))}catch{return null}}function Mo(){let e=Fn();if(e)return e;let t=Lo(),n=Ne();return E__default.mkdirSync(q__default.dirname(n),{recursive:true}),Tt(t),t}function Tt(e){let t=Ne(),n=`${t}.tmp`;E__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),E__default.renameSync(n,t);}function Uo(){let e=zt(),t={};try{E__default.existsSync(e)&&(t=JSON.parse(E__default.readFileSync(e,"utf-8")));}catch{t={};}if(t[b])return;t[b]={source:{source:"github",repo:"CI-T-HyperX/flow-skills"},installLocation:Gt(),lastUpdated:new Date().toISOString()};let n=`${e}.tmp`;E__default.writeFileSync(n,JSON.stringify(t,null,2),"utf-8"),E__default.renameSync(n,e);}function Nn(e,t){Uo();let n=ut(e.name);E__default.mkdirSync(q__default.dirname(n),{recursive:true});try{E__default.lstatSync(n),E__default.rmSync(n,{recursive:!0,force:!0});}catch{}E__default.symlinkSync(t,n);let r=Mo();r.plugins.some(i=>i.name===e.name)||(r.plugins.push({name:e.name,description:e.description,version:e.version,author:e.author,source:`./plugins/native/${e.name}`,category:e.category}),Tt(r));}function Bn(e){let t=ut(e);try{E__default.rmSync(t,{recursive:!0,force:!0});}catch{}let n=Fn();if(!n)return;let r=n.plugins.length;n.plugins=n.plugins.filter(o=>o.name!==e),n.plugins.length!==r&&Tt(n);}var J=S("storage");function jn(){return q__default.join(Q__default.homedir(),".claude","plugins","installed_plugins.json")}function Do(){return q__default.join(Q__default.homedir(),".claude","plugins")}function Oo(e){let t=q__default.resolve(e),n=q__default.resolve(Do());if(!t.startsWith(n+q__default.sep)&&t!==n)throw new Error(`Security error: installPath '${e}' is outside the plugins directory`)}function _n(){return q__default.join(Q__default.homedir(),".claude","settings.json")}function H(){let e=jn();if(!E__default.existsSync(e))return {version:2,plugins:{}};try{return JSON.parse(E__default.readFileSync(e,"utf-8"))}catch{return {version:2,plugins:{}}}}function Ce(e){let t=jn();E__default.mkdirSync(q__default.dirname(t),{recursive:true});let n=`${t}.tmp`;E__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),E__default.renameSync(n,t);}function Re(e){let t=e.lastIndexOf("@");return t===-1?{name:e,marketplace:""}:{name:e.slice(0,t),marketplace:e.slice(t+1)}}function Fo(e){let t=q__default.join(e,".claude-plugin","plugin.json");if(!E__default.existsSync(t))return null;try{return JSON.parse(E__default.readFileSync(t,"utf-8"))}catch{return null}}function $t(){let e=_n();if(!E__default.existsSync(e))return {};try{return JSON.parse(E__default.readFileSync(e,"utf-8"))}catch{return {}}}function Kn(e){let t=_n(),n=`${t}.tmp`;E__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),E__default.renameSync(n,t);}function No(){return $t().enabledPlugins??{}}function Bo(e){let t=$t(),n=t.enabledPlugins;if(!n||!(e in n))return;let{[e]:r,...o}=n;t.enabledPlugins=o,Kn(t);}function kt(e,t){let n=$t(),r=n.enabledPlugins??{};n.enabledPlugins={...r,[e]:t},Kn(n);}function R(){let e=H(),t=No();return Object.entries(e.plugins).map(([n,r])=>{let o=r[0],{name:i,marketplace:s}=Re(n),a=Fo(o.installPath),u=t[n];return {name:i,marketplace:s,version:o.version,installedAt:o.installedAt,installPath:o.installPath,scope:o.scope,description:a?.description,author:a?.author,status:u===false?"disabled":"enabled"}})}async function Ye(e){J.debug(`[${e}] Acquiring lock to uninstall`);let t=await te();try{let{name:n,marketplace:r}=Re(e),o=H(),i;if(r?(i=`${n}@${r}`,o.plugins[i]||(i=void 0)):i=Object.keys(o.plugins).filter(h=>Re(h).name===n)[0],!i)throw J.error(`[${n}] Plugin is not installed`),new Error(`Plugin '${n}' is not installed`);J.debug(`[${n}] Resolved key: ${i}`);let s=o.plugins[i][0].installPath;Oo(s);let a=q__default.dirname(s);J.debug(`[${n}] Removing directory: ${a}`),E__default.rmSync(a,{recursive:!0,force:!0}),Bn(n);let{[i]:u,...c}=o.plugins;Ce({...o,plugins:c}),Bo(i),J.debug(`[${n}] Uninstalled successfully`);}finally{await t();}}async function Le(e,t){J.debug(`[${e}] Acquiring lock to set status \u2192 ${t}`);let n=await te();try{let{name:r}=Re(e),o=H(),i=Object.keys(o.plugins).filter(s=>Re(s).name===r);if(i.length===0)throw J.error(`[${r}] Plugin is not installed`),new Error(`Plugin '${r}' is not installed`);J.debug(`[${r}] Resolved key: ${i[0]}`),kt(i[0],t==="enabled"),J.debug(`[${r}] Status updated to ${t}`);}finally{await n();}}var V=create(e=>({installedItems:[],setInstalledItems:t=>e({installedItems:t}),loadFromDisk:()=>e({installedItems:R()})}));var L=["discover","installed"];function Jn(e,t,n){if(t.rightArrow||t.tab){let r=L.indexOf(n.activeTab);return [{type:"setTab",tab:L[(r+1)%L.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}if(t.leftArrow){let r=L.indexOf(n.activeTab);return [{type:"setTab",tab:L[(r-1+L.length)%L.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}return t.downArrow?[{type:"setFocus",focus:"list"}]:[]}function qn(e,t,n,r){if(t.upArrow&&n.selectedIndex>0)return [{type:"setSelectedIndex",index:n.selectedIndex-1}];if(t.downArrow&&n.selectedIndex<r-1)return [{type:"setSelectedIndex",index:n.selectedIndex+1}];if(t.tab){let o=L.indexOf(n.activeTab);return [{type:"setTab",tab:L[(o+1)%L.length]},{type:"setSelectedIndex",index:0}]}return t.return?[{type:"setActionMenuOpen",open:true},{type:"setFocus",focus:"actionMenu"}]:e==="/"?[{type:"setFocus",focus:"search"}]:[]}function Hn(e,t){return t.escape?[{type:"setActionMenuOpen",open:false},{type:"setFocus",focus:"list"}]:[]}function Vn(e,t){return t.escape?{actions:[{type:"setFocus",focus:"list"}],queryUpdate:"reset"}:t.return?{actions:[{type:"setFocus",focus:"list"}],queryUpdate:null}:t.backspace||t.delete?{actions:[],queryUpdate:{backspace:true}}:e&&!t.ctrl&&!t.meta?{actions:[],queryUpdate:{append:e}}:{actions:[],queryUpdate:null}}function et(e){let{setActiveTab:t,setFocus:n,setSelectedIndex:r,setActionMenuOpen:o}=p.getState();for(let i of e)i.type==="setTab"?t(i.tab):i.type==="setFocus"?n(i.focus):i.type==="setSelectedIndex"?r(i.index):i.type==="setActionMenuOpen"&&o(i.open);}function Gn({listLength:e}){let t=p(l=>l.focus),n=p(l=>l.selectedIndex),r=p(l=>l.actionMenuOpen),o=p(l=>l.setFocus),i=p(l=>l.setActionMenuOpen),s=F(l=>l.query),a=F(l=>l.setQuery),u=F(l=>l.resetQuery),c=useRef(e);useEffect(()=>{c.current=e;},[e]);let[m,h]=useState("");useEffect(()=>{let l=setTimeout(()=>h(s),300);return ()=>clearTimeout(l)},[s]),useInput((l,d)=>{l==="q"&&process.exit(0);},{isActive:t!=="search"&&t!=="auth"}),useInput((l,d)=>{let{activeTab:f,selectedIndex:y,actionMenuOpen:M}=p.getState();et(Jn(l,d,{activeTab:f}));},{isActive:t==="tabs"}),useInput((l,d)=>{let{activeTab:f,selectedIndex:y,actionMenuOpen:M}=p.getState();et(qn(l,d,{activeTab:f,selectedIndex:y},c.current));},{isActive:t==="list"}),useInput((l,d)=>{et(Hn(l,d));},{isActive:t==="actionMenu"}),useInput((l,d)=>{let f=Vn(l,d),y=f.queryUpdate;et(f.actions),y==="reset"?(u(),h("")):y!==null&&("backspace"in y?a(F.getState().query.slice(0,-1)):a(F.getState().query+y.append));},{isActive:t==="search"});let T=useCallback(()=>{i(false),o("list");},[i,o]),ie=useCallback(l=>{let{setSelectedIndex:d,selectedIndex:f}=p.getState();l===0?d(0):f>=l&&d(l-1);},[]),se=useCallback(l=>{if(!m)return c.current=l.length,l;let d=m.toLowerCase(),f=l.filter(y=>y.name.toLowerCase().includes(d)||y.description?.toLowerCase().includes(d));return c.current=f.length,f},[m]);return {actionMenuOpen:r,closeMenu:T,selectedIndex:n,clampIndex:ie,filteredItems:se}}function Wn(){let e=p(a=>a.notification),t=p(a=>a.showNotification),n=p(a=>a.clearNotification),r=j(a=>a.justAuthenticated),o=j(a=>a.credentials),i=j(a=>a.setJustAuthenticated);return useEffect(()=>{r&&o&&(t(`Authenticated. Tenant: ${o.tenant}`,"success"),i(false));},[r,o]),useEffect(()=>{if(!e)return;let a=setTimeout(n,3e3);return ()=>clearTimeout(a)},[e]),{notify:(a,u)=>{t(a,u);}}}var ye=class extends Error{constructor(n,r){super(`${n} v${r} is already installed. Use --force to reinstall.`);this.pluginName=n;this.version=r;this.name="AlreadyInstalledError";}},ne=class extends Error{constructor(n,r){super(`${n} is already up to date (v${r})`);this.pluginName=n;this.version=r;this.name="AlreadyUpToDateError";}};var qo=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function tt(){return Jr.create({prefixUrl:Fe("PROMPT_MANAGER_URL","https://flow.ciandt.com/prompt-manager-api/"),hooks:{beforeRequest:[async e=>{let t=await tn();e.headers.set("Authorization",`Bearer ${t}`);let n=C();n?.tenant&&qo.test(n.tenant)&&e.headers.set("FlowTenant",n.tenant);}]}})}var Ho=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function Zn(e){if(!e||!Ho.test(e))throw new Error(`Invalid plugin name: "${e}". Must be 1-64 chars, lowercase alphanumeric and hyphens only.`)}async function z(){try{let{plugins:e}=await tt().get("v1/plugins/catalog").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow-cli auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching plugin catalog"):new Error(`Failed to fetch plugin catalog: ${e.message}`):e}}async function we(e){Zn(e);try{return await tt().get(`v1/plugins/${e}/manifest`).json()}catch(t){throw t instanceof Error?t.message.includes("404")?new Error(`Plugin '${e}' not found in catalog`):t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to fetch plugin manifest: ${t.message}`):t}}async function Qn(e){Zn(e);try{let t=await tt().get(`v1/plugins/${e}/archive`);return Buffer.from(await t.arrayBuffer())}catch(t){throw t instanceof Error?t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to download plugin: ${t.message}`):t}}var Vo=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function zo(e){if(!Vo.test(e))throw new Error(`Invalid plugin name from manifest: "${e}". Plugin names must be lowercase alphanumeric and hyphens (1-64 chars).`)}var Ue=S("installer");function Go(e,t){let n=`${e}@${b}`,o=H().plugins[n];if(o&&!t)throw new ye(e,o[0].version);return {pluginKey:n,alreadyInstalled:o}}async function Xo(e,t,n){n&&await Et(t);try{Ue.debug(`Extracting to ${t}...`),await Dn(e,t);}catch(r){throw await Et(t),r}}function Wo(e,t,n){let r=H(),o={scope:"user",installPath:t,version:n,installedAt:new Date().toISOString()};r.plugins[e]=[o],Ce(r),kt(e,true);}async function xe(e,t={}){let n=Date.now(),r=null;try{Ue.debug(`[${e}] Acquiring lock...`),r=await te();let{pluginKey:o,alreadyInstalled:i}=Go(e,t.force);Ue.debug(`[${e}] Fetching manifest...`);let s=await we(e);zo(s.name),Ue.debug(`[${e}] Downloading archive...`);let a=await Qn(e),u=Vt(s.name,s.version);await Xo(a,u,!!i&&!!t.force),Wo(o,u,s.version),Nn(s,u);let c=Date.now()-n;return Ue.debug(`[${e}] Installed successfully in ${c}ms`),{name:s.name,version:s.version,path:u,duration_ms:c}}finally{r&&await r();}}function G(e,t,n=false){return n?true:!Ct.valid(e)||!Ct.valid(t)?false:Ct.gt(t,e)}var re=S("updater");function Zo(e){let t=H(),n=`${e}@${b}`,r=t.plugins[n];return !r||r.length===0?null:{pluginKey:n,entry:r[0]}}async function nt(e,t={}){let n=Date.now(),r=null;try{re.debug(`[${e}] Acquiring lock...`),r=await te();let o=Zo(e);if(!o)throw re.error(`[${e}] Plugin is not installed`),new Error(`Plugin "${e}" is not installed`);let{entry:i}=o,s=i.version,a=i.installPath;re.debug(`[${e}] Fetching manifest...`);let c=(await we(e)).version;if(!G(s,c,t.force))throw re.debug(`[${e}] Already up to date (v${s})`),new ne(e,s);re.info(`[${e}] Updating v${s} \u2192 v${c}...`),await r(),r=null;try{let m=await xe(e,{force:!0}),h=Date.now()-n;return re.debug(`[${e}] Updated successfully in ${h}ms`),{name:m.name,previousVersion:s,newVersion:m.version,path:m.path,duration_ms:h}}catch(m){re.warn(`[${e}] Install failed, rolling back to v${s}...`),r=await te();let h=H(),T=`${e}@${b}`;throw h.plugins[T]&&(h.plugins[T][0].version=s,h.plugins[T][0].installPath=a,Ce(h),re.info(`[${e}] Rollback completed, restored to v${s}`)),m}}finally{r&&await r();}}function Yn(){let e=V(s=>s.installedItems),t=V(s=>s.setInstalledItems),n=useCallback(async s=>{await xe(s.name),V.getState().loadFromDisk();},[]),r=useCallback(async s=>{await Ye(s),t(e.filter(a=>a.name!==s));},[e,t]),o=useCallback(async s=>{let u=e.find(c=>c.name===s)?.status==="enabled"?"disabled":"enabled";await Le(s,u),t(e.map(c=>c.name===s?{...c,status:u}:c));},[e,t]),i=useCallback(async s=>{await nt(s),V.getState().loadFromDisk();},[]);return {install:n,uninstall:r,toggle:o,update:i}}function er({selectedItem:e,selectedCatalogItem:t,items:n,closeMenu:r,clampIndex:o,notify:i}){let s=p(d=>d.setLoading),{install:a,uninstall:u,toggle:c,update:m}=Yn(),h=async(d,f,y)=>{s(true,d),r();try{await f(),o(n.length),i(y,"success");}catch(M){i(M instanceof Error?M.message:"Something went wrong","error");}finally{s(false);}};return {handleInstall:()=>{e&&t&&h(`Installing ${e.name}...`,()=>a(t),"\u2713 Installed successfully");},handleUninstall:()=>{e&&h(`Uninstalling ${e.name}...`,()=>u(e.name),"\u2713 Uninstalled");},handleToggleStatus:()=>{if(!e)return;let d=e.status==="enabled";h(d?`Disabling ${e.name}...`:`Enabling ${e.name}...`,()=>c(e.name),d?"\u2713 Disabled":"\u2713 Enabled");},handleUpdate:()=>{if(!e)return;let d=t?` to v${t.version}`:"";(async()=>{s(true,`Updating ${e.name}${d}...`),r();try{await m(e.name),o(n.length),i(`\u2713 Updated ${e.name}${d}`,"success");}catch(y){y instanceof ne?i(y.message,"info"):i(y instanceof Error?y.message:"Something went wrong","error");}finally{s(false);}})();}}}function tr(){let[e,t]=useState([]),[n,r]=useState(true),[o,i]=useState(null),s=useCallback(async()=>{r(true),i(null);try{let a=await z();t(a);}catch(a){i(a instanceof Error?a:new Error(String(a))),t([]);}finally{r(false);}},[]);return useEffect(()=>{s();},[s]),{catalog:e,isLoading:n,error:o,refetch:s}}function nr(){return {items:V(t=>t.installedItems)}}var ti=S("catalog");function ni(e){return {name:e.name,version:e.version,description:e.description,authorName:e.author.name,updateAvailable:e.updateAvailable}}function ri(e){return {name:e.name,version:e.version,description:e.description,authorName:e.author?.name,status:e.status,updateAvailable:e.updateAvailable,installedAt:e.installedAt}}function rr(){let e=p(g=>g.activeTab),t=p(g=>g.notification),n=p(g=>g.loading),r=p(g=>g.loadingMessage),o=p(g=>g.catalogError),i=p(g=>g.setCatalogError),s=F(g=>g.query),{catalog:a,isLoading:u,error:c,refetch:m}=tr(),{items:h}=nr(),T=V(g=>g.loadFromDisk),ie=useMemo(()=>new Set(h.map(g=>`${g.name}|${g.author?.name??""}|${g.marketplace}`)),[h]),se=useMemo(()=>{let g=new Map(a.map(pe=>[pe.name,pe.version]));return h.map(pe=>{let Nt=g.get(pe.name),Er=!!Nt&&G(pe.version,Nt);return {...pe,updateAvailable:Er}})},[h,a]),l=e==="discover"?a.filter(g=>!ie.has(`${g.name}|${g.author.name}|${b}`)).map(g=>ni(g)):se.map(g=>ri(g)),{actionMenuOpen:d,closeMenu:f,selectedIndex:y,clampIndex:M,filteredItems:wr}=Gn({listLength:l.length}),De=wr(l),U=De[y]??null,Ft=useMemo(()=>U?a.find(g=>g.name===U.name)??null:null,[a,U]),xr=e==="installed"?"No plugins installed \u2014 explore the Discover tab!":s?`No plugins found for '${s}'`:"No plugins available in the catalog",{notify:br}=Wn(),{handleInstall:vr,handleUninstall:Pr,handleToggleStatus:Ir,handleUpdate:Sr}=er({selectedItem:U,selectedCatalogItem:Ft,items:l,closeMenu:f,clampIndex:M,notify:br});return useEffect(()=>{T();},[]),useEffect(()=>{M(De.length);},[De.length,M]),useEffect(()=>{c&&(ti.error(`[usePluginCatalog] ${c instanceof Error?c.message:String(c)}`),i("Failed to load catalog"));},[c]),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(sn,{}),jsx(ln,{}),jsx(wn,{filteredItems:De,emptyMessage:xr}),(n||u)&&jsx(En,{message:n?r:"Loading catalog..."}),o&&!u&&e==="discover"&&jsx($n,{message:o,onRetry:()=>{i(null),m();},onBack:()=>i(null)}),t&&jsx(vn,{message:t.message,type:t.type}),d&&U&&e==="discover"&&jsx(Cn,{itemName:U.name,onInstall:vr,onClose:f}),d&&U&&e==="installed"&&jsx(Un,{itemName:U.name,itemStatus:U.status??"enabled",updateAvailable:U.updateAvailable??false,catalogVersion:Ft?.version,onUninstall:Pr,onToggleStatus:Ir,onUpdate:Sr,onClose:f}),jsx(bn,{})]})}var or=C();if(or&&D()){let{clientSecret:e,...t}=or;j.getState().setCredentials(t),p.getState().setFocus("list");}else p.getState().setFocus("auth");function sr(){return j(t=>t.isAuthenticated)?jsx(rr,{}):jsx(nn,{})}var W=S("auth");function ot(e,t={}){return new Promise((n,r)=>{let{masked:o=false,defaultValue:i=""}=t;process.stdout.write(e+i);let s=i,a=m=>{if(m===""){u(),r(new Error("SIGINT"));return}if(m==="\r"||m===`
-`){u(),process.stdout.write(`
-`),n(s);return}if(m==="\x7F"){s.length>0&&(s=s.slice(0,-1),process.stdout.write("\b \b"));return}m.startsWith("\x1B")||(s+=m,process.stdout.write(o?"*".repeat(m.length):m));};function u(){process.stdin.setRawMode(false),process.stdin.removeListener("data",a),process.removeListener("uncaughtException",c),process.removeListener("unhandledRejection",c);}function c(){try{process.stdin.setRawMode(!1);}catch{}}process.on("uncaughtException",c),process.on("unhandledRejection",c),process.stdin.setRawMode(true),process.stdin.resume(),process.stdin.setEncoding("utf8"),process.stdin.on("data",a);})}async function ii(e){W.debug(`Authenticating tenant: ${e.tenant}`);try{return await Ee(e),W.info(`Authentication successful for tenant: ${e.tenant}`),process.stdout.write(x.green(`  \u2713 Setup complete. Tenant: ${e.tenant}
+`);}function wt(e){process.stdout.write(JSON.stringify(e,null,2)+`
+`);}function X(e){process.stdout.write(JSON.stringify(e)+`
+`);}function re(e){process.stderr.write(JSON.stringify(e)+`
+`);}function D(e){return e instanceof Error?e.message:String(e)}function En(e){let t=new Date(e);return isNaN(t.getTime())?"\u2014":new Intl.DateTimeFormat("en-US",{dateStyle:"short"}).format(t)}function tc(e){if(!(e instanceof Error))return "unknown";let t=e.message.toLowerCase();return t.includes("401")||t.includes("unauthorized")?"invalid_credentials":t.includes("403")||t.includes("forbidden")?"forbidden":t.includes("timeout")||t.includes("timed out")?"timeout":t.includes("network")||t.includes("econnrefused")||t.includes("fetch")?"network_error":"unknown"}var he=["clientId","clientSecret","tenant"],nc={clientId:"Client ID",clientSecret:"Client Secret",tenant:"Tenant"};function pi(){let[e,t]=useState({clientId:"",clientSecret:"",tenant:""}),[n,r]=useState("clientId"),[o,i]=useState({}),[s,c]=useState(null),[a,l]=useState(false),u=useRef(0),{setCredentials:g,setJustAuthenticated:v}=ce(),{setFocus:d}=f();useInput((h,T)=>{if(!a){if(T.shift&&T.tab){let y=he.indexOf(n);y>0&&r(he[y-1]);}else if(T.tab){let y=he.indexOf(n);y<he.length-1&&r(he[y+1]);}else if(T.return)if(n==="tenant")E();else {let y=he.indexOf(n);r(he[y+1]);}}},{isActive:true});let E=async()=>{let h={};for(let T of he)e[T].trim()||(h[T]="This field is required");if(Object.keys(h).length>0){i(h);let T=he.find(y=>h[y]);T&&r(T);return}l(true),c(null),u.current+=1;try{await Qe({clientId:e.clientId.trim(),clientSecret:e.clientSecret.trim(),tenant:e.tenant.trim()});let{clientSecret:T,...y}=e;g(y),v(!0),f.getState().setScreen("bundleSetup"),d("bundleList"),b(x.CLI_SESSION_STARTED,{cli_version:Be,os:process.platform,node_version:process.version,duration_ms:De(),interface:"tui"}).catch(()=>{});}catch(T){let y=T instanceof Error?T.message:"Authentication failed";c(y),ri(x.CLI_AUTH_FAILED,{error_code:tc(T),attempt:u.current},e.tenant.trim()).catch(()=>{});}finally{l(false),t(T=>({...T,clientSecret:""}));}},m=h=>T=>{t(y=>({...y,[h]:T})),o[h]&&i(y=>({...y,[h]:void 0}));};return jsxs(Box,{flexDirection:"column",padding:2,children:[jsx(Box,{marginBottom:1,children:jsxs(Text,{bold:true,color:"cyan",children:[Ao," \u2014 Initial Setup"]})}),jsxs(Box,{marginBottom:1,flexDirection:"column",children:[jsx(Text,{dimColor:true,children:"The data collected during setup is used solely to improve"}),jsx(Text,{dimColor:true,children:"Flow's internal tools and will not be shared externally."})]}),jsx(Box,{flexDirection:"column",children:he.map(h=>jsx(Box,{marginBottom:1,children:jsx(ui,{label:nc[h],value:e[h],onChange:m(h),masked:h==="clientSecret",isActive:n===h&&!a,error:o[h]})},h))}),a&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"cyan",children:"Authenticating..."})}),s&&jsx(Box,{marginTop:1,children:jsxs(Text,{color:"red",children:["\u26A0 ",p(s)]})}),jsx(Box,{marginTop:1,children:jsx(Text,{dimColor:true,children:"Tab next field \xB7 Enter confirm"})})]})}function kn(){return jsxs(Box,{flexDirection:"column",alignItems:"center",children:[jsx(oc,{text:"FLOW",font:"block",colors:["white","white"]}),jsx(Box,{marginTop:-1,marginBottom:1,children:jsxs(Text,{dimColor:true,children:["Marketplace \xB7 v",Be]})})]})}var $r={discover:"Discover",installed:"Installed"},ic=Object.keys($r);function hi(){let e=f(t=>t.activeTab);return jsx(Box,{paddingX:1,paddingBottom:1,children:ic.map(t=>jsx(Box,{marginRight:1,children:t===e?jsx(Text,{bold:true,inverse:true,children:` ${$r[t]} `}):jsx(Text,{dimColor:true,children:` ${$r[t]} `})},t))})}var Y=create(e=>({query:"",cursorPosition:0,setQuery:t=>e({query:t}),setCursorPosition:t=>e({cursorPosition:t}),resetQuery:()=>e({query:"",cursorPosition:0})}));function wi(){let e=f(s=>s.focus),t=Y(s=>s.query),n=Y(s=>s.cursorPosition),r=e==="search",o=t.slice(0,n),i=t.slice(n);return jsxs(Box,{borderStyle:"single",borderTop:false,borderBottom:true,borderLeft:false,borderRight:false,paddingX:1,marginX:1,marginBottom:1,children:[jsx(Text,{color:r?"cyan":"gray",children:"\u{1F50D} "}),r?jsxs(Fragment,{children:[jsx(Text,{color:"white",children:o}),jsx(Text,{inverse:true,children:i[0]??" "}),jsx(Text,{color:"white",children:i.slice(1)})]}):jsx(Text,{dimColor:true,children:t||"Search..."})]})}var cc=["skill","mcp","plugin"].map((e,t)=>({key:String(t+2),type:e,...dt[e]})),uc=["internal","external"].map((e,t)=>({key:String(t+6),origin:e,...$o[e]}));function xi(){let e=f(r=>r.catalogFilters),t=e.types.has("skill")&&e.types.has("mcp")&&e.types.has("plugin"),n=e.origins.has("internal")&&e.origins.has("external");return jsxs(Box,{paddingX:1,paddingBottom:1,gap:1,children:[jsx(Text,{bold:true,children:"Type:"}),jsxs(Box,{gap:0,children:[jsx(Text,{dimColor:true,children:"[1] "}),jsxs(Text,{color:t?"green":void 0,dimColor:!t,children:[t?"\u25C9":"\u25CB"," All"]})]}),cc.map(r=>{let o=!t&&e.types.has(r.type);return jsxs(Box,{gap:0,children:[jsxs(Text,{dimColor:true,children:["[",r.key,"] "]}),jsxs(Text,{color:o?r.color:void 0,dimColor:!o,children:[o?"\u25C9":"\u25CB"," ",r.label]})]},r.key)}),jsx(Box,{marginLeft:2,children:jsx(Text,{bold:true,children:"|"})}),jsx(Box,{marginLeft:2,children:jsx(Text,{bold:true,children:"Origin:"})}),jsxs(Box,{gap:0,children:[jsx(Text,{dimColor:true,children:"[5] "}),jsxs(Text,{color:n?"green":void 0,dimColor:!n,children:[n?"\u25C9":"\u25CB"," All"]})]}),uc.map(r=>{let o=!n&&e.origins.has(r.origin);return jsxs(Box,{gap:0,children:[jsxs(Text,{dimColor:true,children:["[",r.key,"] "]}),jsxs(Text,{color:o?r.color:void 0,dimColor:!o,children:[o?"\u25C9":"\u25CB"," ",r.label]})]},r.key)})]})}function Ii({type:e}){let{label:t,color:n}=dt[e];return jsx(Text,{color:n,children:t})}function Pi({origin:e}){return e===Ct?jsx(Text,{color:"blue",children:"[Flow]"}):jsx(Text,{color:"white",children:"[External]"})}var An=mc.memo(function({item:t,isSelected:n}){let r=t.status==="disabled"?"yellow":"green";return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:n?"cyan":"gray",children:n?"\u203A ":"\u25CB "}),jsx(Text,{bold:n,color:n?"cyan":"white",children:t.name}),t.type&&jsxs(Text,{children:[" ",jsx(Ii,{type:t.type})]}),t.origin&&jsxs(Text,{children:[" ",jsx(Pi,{origin:t.origin})]}),jsxs(Text,{dimColor:true,children:[t.authorName?` \xB7 ${t.authorName}`:"",t.version?` \xB7 v${t.version}`:" \xB7 n/a"]}),t.status&&jsxs(Text,{color:r,children:[" [",t.status,"]"]}),t.updateAvailable&&jsx(Text,{color:"yellow",children:" [\u2191 update available]"}),t.installedAt&&jsxs(Text,{dimColor:true,children:[" \xB7 ",En(t.installedAt)]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:t.description})})]})});function It({message:e}){return jsx(Box,{paddingX:2,paddingY:1,children:jsx(Text,{dimColor:true,children:e??"No items found."})})}function ki({items:e,emptyMessage:t}){let n=f(a=>a.selectedIndex);if(e.length===0)return jsx(It,{message:t});let r=Math.max(0,n-Math.floor(Re/2)),o=Math.min(e.length,r+Re);o===e.length&&(r=Math.max(0,o-Re));let i=e.slice(r,o),s=r,c=e.length-o;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:s>0?`\u2191 ${s} more above`:" "})}),i.map((a,l)=>jsx(An,{item:a,isSelected:r+l===n},a.name)),jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:c>0?`\u2193 ${c} more below`:" "})})]})}function $i({label:e,pathHint:t}){return jsxs(Box,{paddingBottom:1,children:[jsx(Text,{bold:true,color:"blueBright",children:e}),jsxs(Text,{dimColor:true,children:[" ",t]})]})}function Ri({groups:e,emptyMessage:t}){let n=f(d=>d.selectedIndex),r=[],o=0;for(let d of e){r.push({kind:"header",label:d.label,pathHint:d.pathHint,key:`h-${d.scope}`});for(let E of d.items)r.push({kind:"item",item:E,itemIndex:o,key:`i-${d.scope}-${E.name}`}),o++;}if(o===0)return jsx(It,{message:t});let s=r.findIndex(d=>d.kind==="item"&&d.itemIndex===n),c=s>=0?s:0,a=Math.max(0,c-Math.floor(Re/2)),l=Math.min(r.length,a+Re);l===r.length&&(a=Math.max(0,l-Re));let u=r.slice(a,l),g=a,v=r.length-l;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:g>0?`\u2191 ${g} more above`:" "})}),u.map(d=>d.kind==="header"?jsx($i,{label:d.label,pathHint:d.pathHint},d.key):jsx(An,{item:d.item,isSelected:d.itemIndex===n},d.key)),jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:v>0?`\u2193 ${v} more below`:" "})})]})}var xc={discover:"Discover",installed:"Installed"};function _i({items:e,tabId:t,emptyMessage:n,groups:r}){return jsxs(Box,{flexDirection:"column",children:[jsx(wi,{}),jsx(xi,{}),jsxs(Box,{paddingX:1,marginTop:1,children:[jsx(Text,{bold:true,children:xc[t]}),jsxs(Text,{dimColor:true,children:[" (",e.length,")"]})]}),r&&r.length>0?jsx(Ri,{groups:r,emptyMessage:n}):jsx(ki,{items:e,emptyMessage:n})]})}function Oi({filteredItems:e,emptyMessage:t,groups:n}){let r=f(o=>o.activeTab);return jsx(Box,{flexDirection:"column",flexGrow:1,children:r==="discover"?jsx(_i,{items:e,tabId:"discover",emptyMessage:t},"discover"):jsx(_i,{items:e,tabId:"installed",emptyMessage:t,groups:n},"installed")})}var vc={tabs:"\u2190\u2192: switch tab | \u2193: navigate | Enter: select | Ctrl+C Ctrl+C: quit",list:"\u2191\u2193: navigate | Enter: select | Type: 1=All 2=Skill 3=MCP 4=Plugin | Origin: 5=All 6=Flow 7=External | \u2190\u2192/Tab: tabs | Ctrl+C\xD72: quit",search:"Type to filter | \u2193/Esc: exit search | Enter: confirm",actionMenu:"\u2191\u2193: navigate options | Enter: confirm | Esc: close menu",auth:"Tab: next field | Enter: confirm | Ctrl+C Ctrl+C: quit",bundleList:"\u2191\u2193: navigate | Enter: select bundle | Esc: skip",bundleDetail:"\u2191\u2193: navigate | Enter: confirm & install | Esc: back",installProgress:"\u2191\u2193: navigate | Enter: select"};function $n(){let e=f(t=>t.focus);return jsx(Box,{borderStyle:"single",borderTop:true,borderBottom:false,borderLeft:false,borderRight:false,children:jsx(Text,{dimColor:true,children:vc[e]})})}function Bi({message:e,type:t}){return e?jsx(Box,{paddingX:1,children:jsxs(Text,{color:t==="success"?"green":t==="info"?"cyan":"red",children:[t==="success"?"\u2713":t==="info"?"(i)":"\u2717"," ",p(e)]})}):null}function Ln({message:e}){return jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(Ac,{type:"dots"})}),jsxs(Text,{children:[" ",e]})]})}function Rn({message:e,onRetry:t,onBack:n}){return useInput((r,o)=>{r==="r"&&o.ctrl&&t?t():o.escape&&n&&n();}),jsxs(Box,{flexDirection:"column",paddingX:2,paddingY:1,children:[jsxs(Text,{color:"red",children:["\u2717 ",e]}),t&&jsx(Text,{dimColor:true,children:"Press Ctrl+R to retry"}),n&&jsx(Text,{dimColor:true,children:"Press Escape to go back"})]})}function at({itemName:e,actions:t,onAction:n,onClose:r}){let o=f(c=>c.focus),[i,s]=useState(0);return useInput((c,a)=>{a.upArrow?s(l=>l>0?l-1:l):a.downArrow?s(l=>l<t.length-1?l+1:l):a.return?n(t[i]):a.escape&&r();},{isActive:o==="actionMenu"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsx(Box,{flexDirection:"column",marginTop:1,children:t.map((c,a)=>jsx(Box,{children:jsxs(Text,{bold:a===i,color:a===i?"cyan":void 0,children:[a===i?"\u203A ":"  ",c]})},a))})]})}var Vi=Object.entries(At),Gi=[...Vi.map(([,e])=>e.actionLabel),"Cancel"];function zi(e){let t=Vi.find(([,n])=>n.actionLabel===e);return t?t[0]:null}function Wi({itemName:e,onInstall:t,onClose:n}){let[r,o]=useState(false),i=useCallback(l=>{let u=zi(l);u?t(u):o(false);},[t]),s=useCallback(()=>{o(false);},[]),c=useCallback(l=>{l==="Install"?o(true):n();},[n]);return r?jsx(at,{itemName:`${e} \u2014 Choose scope`,actions:Gi,onAction:i,onClose:s}):jsx(at,{itemName:e,actions:["Install","Cancel"],onAction:c,onClose:n})}function Mn({activeFocus:e,onConfirm:t}){let[n,r]=useState("idle"),o=f(i=>i.focus);return useInput((i,s)=>{s.escape||i==="n"?r("idle"):i==="y"&&t();},{isActive:n==="confirming"&&o===e}),{isConfirming:n==="confirming",requestConfirm:()=>r("confirming"),cancelConfirm:()=>r("idle")}}function Zi({itemName:e,itemScope:t,itemStatus:n,updateAvailable:r,catalogVersion:o,onUninstall:i,onToggleStatus:s,onUpdate:c,onClose:a}){let{isConfirming:l,requestConfirm:u}=Mn({activeFocus:"actionMenu",onConfirm:()=>i(t)});if(l)return jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Uninstall "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]});let g=n==="enabled"?"Disable":"Enable",v=o&&p(o),d=v?`Update to v${v}`:"Update";return jsx(at,{itemName:e,actions:r?["Uninstall",g,d,"Cancel"]:["Uninstall",g,"Cancel"],onAction:h=>{h==="Uninstall"?u():h===g?s(t):h.startsWith("Update")?c?.():a();},onClose:a})}function ts({itemName:e,itemScope:t,onUninstall:n,onClose:r}){let{isConfirming:o,requestConfirm:i}=Mn({activeFocus:"actionMenu",onConfirm:()=>n(t)});return o?jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Remove MCP "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]}):jsx(at,{itemName:e,actions:["Uninstall","Cancel"],onAction:a=>{a==="Uninstall"?i():r();},onClose:r})}async function ns(e,t){let n=K.resolve(t);await Se.mkdir(n,{recursive:true});let r=K.join(K.dirname(n),`${randomUUID()}.zip`);try{await Se.writeFile(r,e),await Nc(r,{dir:n,onEntry(o){if((o.externalFileAttributes>>16&61440)===40960)throw new Error(`Zip Slip (symlink): entry "${o.fileName}" is a symbolic link and was rejected`);let s=K.resolve(n,o.fileName);if(!s.startsWith(n+K.sep)&&s!==n)throw new Error(`Zip Slip detected: entry "${o.fileName}" would escape target directory`)}});try{let o=realpathSync(n);if(!o.startsWith(K.resolve(K.dirname(n))))throw new Error(`Zip Slip (post-extract): resolved path "${o}" is outside expected parent`)}catch(o){if(o.code!=="ENOENT")throw o}}finally{try{await Se.unlink(r);}catch{}}}async function Ur(e){await Se.rm(e,{recursive:true,force:true});}async function Ue(){let e=Bo();await Se.mkdir(K.dirname(e),{recursive:true});try{await Se.writeFile(e,"",{flag:"wx"});}catch(n){if(n.code!=="EEXIST")throw n}return await Fc.lock(e,{stale:1e4,retries:{retries:2,minTimeout:500,maxTimeout:500}})}var jc={user:"global",project:"project",local:"local"};function Dn(e){return e?jc[e]:"global"}var we=class extends Error{constructor(n,r){super(`${n} v${r} is already installed. Use --force to reinstall.`);this.pluginName=n;this.version=r;this.name="AlreadyInstalledError";}pluginName;version},je=class extends Error{constructor(n,r){super(`${n} is already up to date (v${r})`);this.pluginName=n;this.version=r;this.name="AlreadyUpToDateError";}pluginName;version};function Ht(){return $l.create({prefix:St("PROMPT_MANAGER_URL","https://flow.ciandt.com/prompt-manager-api/"),hooks:{beforeRequest:[async({request:e})=>{let t=await Oe();e.headers.set("Authorization",`Bearer ${t}`);let n=await O();n?.tenant&&We.test(n.tenant)&&e.headers.set("FlowTenant",n.tenant);}]}})}var Jc=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function rs(e){if(!e||!Jc.test(e))throw new Error(`Invalid plugin name: "${e}". Must be 1-64 chars, lowercase alphanumeric and hyphens only.`)}async function xe(){try{let{plugins:e}=await Ht().get("v1/plugins/catalog").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching plugin catalog"):new Error(`Failed to fetch plugin catalog: ${e.message}`):e}}async function vt(e){rs(e);try{return await Ht().get(`v1/plugins/${e}/manifest`).json()}catch(t){throw t instanceof Error?t.message.includes("404")?new Error(`Plugin '${e}' not found in catalog`):t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to fetch plugin manifest: ${t.message}`):t}}async function os(e){rs(e);try{let t=await Ht().get(`v1/plugins/${e}/archive`);return Buffer.from(await t.arrayBuffer())}catch(t){throw t instanceof Error?t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to download plugin: ${t.message}`):t}}async function Bn(){try{let{profiles:e}=await Ht().get("v1/plugins/profiles").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching bundles"):new Error(`Failed to fetch bundles: ${e.message}`):e}}var Hc=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/,Vc=/^[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9]+(\.[a-zA-Z0-9]+)*)?$/;function Nn(e){if(!Hc.test(e))throw new Error(`Invalid plugin name from manifest: "${e}". Plugin names must be lowercase alphanumeric and hyphens (1-64 chars).`)}function Gc(e){if(!Vc.test(e))throw new Error(`Invalid plugin version from manifest: "${e}". Versions must follow semver format (e.g. 1.0.0 or 1.0.0-beta.1).`)}var Ke=S("installer");function zc(e,t){let n=`${e}@${_}`,o=Ce().plugins[n];if(o&&!t)throw new we(e,o[0].version??"unknown");return {pluginKey:n,alreadyInstalled:o}}async function qc(e,t,n){n&&await Ur(t);try{Ke.debug(`[${t}] Extracting archive...`),await ns(e,t);}catch(r){throw await Ur(t),r}}function Wc(e,t,n,r,o){let i=Ce(),s={scope:r,installPath:t,version:n,installedAt:new Date().toISOString(),origin:o},c=i.plugins[e]??[];i.plugins[e]=[...c.filter(a=>a.scope!==r),s],lt(i),jr(e,true,r);}async function Xc(e,t,n,r,o){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"plugin",source:o,scope:r,version:t,duration_ms:n,interface:$().interfaceType});}catch(i){Ke.warn(`Failed to send install metrics: ${String(i)}`);}}async function Yc(e,t,n){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"plugin",source:n,error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:$().interfaceType});}catch(r){Ke.warn(`Failed to send install-failed metrics: ${String(r)}`);}}async function Ie(e,t={}){let n=Date.now(),r=null;try{Ke.debug(`[${e}] Acquiring lock...`),r=await Ue();let{pluginKey:o,alreadyInstalled:i}=zc(e,t.force);Ke.debug(`[${e}] Fetching manifest...`);let s=await vt(e);Nn(s.name),Gc(s.version),Ke.debug(`[${e}] Downloading archive...`);let c=await os(e),a=t.scope??"user",l=_o(s.name,s.version);await qc(c,l,!!i&&!!t.force),Wc(o,l,s.version,a,"internal"),is(s,l);let u=Date.now()-n;Ke.debug(`[${e}] Installed successfully in ${u}ms`);let g={name:s.name,version:s.version,path:l,duration_ms:u};return t.skipMetrics||await Xc(s.name,s.version,u,Dn(a),"internal"),g}catch(o){throw await Yc(e,o,"internal"),Ke.error(`[${e}] Installation failed: ${o instanceof Error?o.message:String(o)}`),o}finally{r&&await r();}}function Zc(){return {$schema:"https://anthropic.com/claude-code/marketplace.schema.json",name:_,description:"Flow Skills marketplace",owner:{name:"Flow Team",email:"flow@ciandt.com"},plugins:[]}}function ls(){let e=an();if(!G__default.existsSync(e))return null;try{return JSON.parse(G__default.readFileSync(e,"utf-8"))}catch{return null}}function Qc(){let e=ls();if(e)return e;let t=Zc(),n=an();return G__default.mkdirSync(K__default.dirname(n),{recursive:true}),Kr(t),t}function Kr(e){let t=an(),n=`${t}.${randomUUID()}.tmp`;G__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),G__default.renameSync(n,t);}function eu(){let e=Oo(),t={};try{G__default.existsSync(e)&&(t=JSON.parse(G__default.readFileSync(e,"utf-8")));}catch{t={};}if(t[_])return;t[_]={source:{source:"github",repo:"CI-T-HyperX/flow-skills"},installLocation:Do(),lastUpdated:new Date().toISOString()};let n=`${e}.${randomUUID()}.tmp`;G__default.writeFileSync(n,JSON.stringify(t,null,2),"utf-8"),G__default.renameSync(n,e);}function is(e,t){Nn(e.name),eu();let n=fr(e.name);G__default.mkdirSync(K__default.dirname(n),{recursive:true});try{G__default.lstatSync(n),G__default.rmSync(n,{recursive:!0,force:!0});}catch{}G__default.symlinkSync(t,n);let r=Qc();r.plugins.some(i=>i.name===e.name)||(r.plugins.push({name:e.name,description:e.description,version:e.version,author:e.author,source:`./plugins/native/${e.name}`,category:e.category}),Kr(r));}function Jr(e){Nn(e);let t=fr(e);try{G__default.rmSync(t,{recursive:!0,force:!0});}catch{}let n=ls();if(!n)return;let r=n.plugins.length;n.plugins=n.plugins.filter(o=>o.name!==e),n.plugins.length!==r&&Kr(n);}var nu=S("mcpConfigReader"),ru=500,ou=512;function iu(){return K__default.join(ge__default.homedir(),".claude.json")}function su(){return K__default.join(process.cwd(),".mcp.json")}function us(e){if(!G__default.existsSync(e))return null;try{return JSON.parse(G__default.readFileSync(e,"utf-8"))}catch{return nu.debug(`[mcpConfigReader] Failed to parse ${e}`),null}}function Vt(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function Hr(e){if(!Vt(e))return {};let t=e.mcpServers;return Vt(t)?t:{}}function Vr(e,t){return Object.keys(e).slice(0,ru).map(r=>({name:p(r.slice(0,ou)),marketplace:"",version:void 0,installedAt:"",installPath:"",scope:t,description:void 0,author:void 0,status:"enabled",type:"mcp"}))}function ds(){let e=[],t=iu(),n=us(t);if(Vt(n)){let c=n,a=Hr(c);e.push(...Vr(a,"user"));let l=process.cwd();if(Vt(c.projects)){let u=c.projects[l];if(Vt(u)){let g=Hr(u);e.push(...Vr(g,"local"));}}}let r=su(),o=us(r),i=Hr(o);e.push(...Vr(i,"project"));let s=new Map;for(let c of e){let a=`${c.name}@${c.scope}`;s.has(a)||s.set(a,c);}return [...s.values()]}var ie=S("storage");async function lu(e,t){try{await b(x.CLI_TOOL_UNINSTALLED,{tool_id:e,tool_type:"plugin",source:t,interface:$().interfaceType});}catch(n){ie.warn(`Failed to send uninstall metrics: ${String(n)}`);}}function cu(e,t,n){let r=t==="enabled"?x.CLI_TOOL_ENABLED:x.CLI_TOOL_DISABLED;b(r,{tool_id:e,source:n,interface:$().interfaceType}).catch(o=>ie.warn(`Failed to send ${t} metrics: ${String(o)}`));}function fs(){return K__default.join(ge__default.homedir(),".claude","plugins","installed_plugins.json")}function uu(){return K__default.join(ge__default.homedir(),".claude","plugins")}function ms(e){let t=K__default.resolve(e),n=K__default.resolve(uu()),r=K__default.resolve(K__default.join(process.cwd(),".claude","plugins")),o=t.startsWith(n+K__default.sep)||t===n,i=t.startsWith(r+K__default.sep)||t===r;if(!o&&!i)throw new Error(`Security error: installPath '${e}' is outside the plugins directory`)}function gs(e="user"){return e==="local"?K__default.join(process.cwd(),".claude","settings.local.json"):e==="project"?K__default.join(process.cwd(),".claude","settings.json"):K__default.join(ge__default.homedir(),".claude","settings.json")}function Ce(){let e=fs();if(!G__default.existsSync(e))return {version:2,plugins:{}};try{return JSON.parse(G__default.readFileSync(e,"utf-8"))}catch{return {version:2,plugins:{}}}}function pu(e){let t=e?.code;return t==="EACCES"||t==="EPERM"}function ys(e,t){try{G__default.mkdirSync(K__default.dirname(e),{recursive:!0});let n=`${e}.${randomUUID()}.tmp`;G__default.writeFileSync(n,JSON.stringify(t,null,2),"utf-8"),G__default.renameSync(n,e);}catch(n){throw pu(n)?new Error(`Permission denied: cannot write to '${e}'. Check your file system permissions.`):n}}function lt(e){ys(fs(),e);}function Gt(e){let t=e.lastIndexOf("@");return t===-1?{name:e,marketplace:""}:{name:e.slice(0,t),marketplace:e.slice(t+1)}}function du(e){let t=K__default.join(e,".claude-plugin","plugin.json");if(!G__default.existsSync(t))return null;try{return JSON.parse(G__default.readFileSync(t,"utf-8"))}catch{return null}}function Wr(e="user"){let t=gs(e);if(!G__default.existsSync(t))return {};try{return JSON.parse(G__default.readFileSync(t,"utf-8"))}catch{return {}}}function hs(e,t="user"){ys(gs(t),e);}function mu(e,t){let{name:n,marketplace:r}=Gt(e),o;if(r?(o=`${n}@${r}`,t[o]||(o=void 0)):o=Object.keys(t).filter(s=>Gt(s).name===n)[0],!o)throw ie.error(`[${n}] Plugin is not installed`),new Error(`Plugin '${n}' is not installed`);return {key:o,name:n}}function fu(e,t){let{name:n,marketplace:r}=Gt(e),o;return r?(o=`${n}@${r}`,t[o]||(o=void 0)):o=Object.keys(t).filter(s=>Gt(s).name===n)[0],o?{key:o,name:n}:null}function Gr(e="user"){return Wr(e).enabledPlugins??{}}function zr(e,t="user"){let n=Wr(t),r=n.enabledPlugins;if(!r||!(e in r))return;let{[e]:o,...i}=r;n.enabledPlugins=i,hs(n,t);}function jr(e,t,n="user"){let r=Wr(n),o=r.enabledPlugins??{};r.enabledPlugins={...o,[e]:t},hs(r,n);}function gu(e){let t=new Map;for(let n of e){let r=t.get(n.scope);(!r||n.installedAt>r.installedAt)&&t.set(n.scope,n);}return [...t.values()]}function be(){let e=Ce(),t=Gr(),n=Gr("project"),r=Gr("local"),o={project:n,local:r},i=Object.entries(e.plugins).flatMap(([l,u])=>{let{name:g,marketplace:v}=Gt(l),d=u.map(m=>m.scope==="managed"?{...m,scope:"user"}:m);return gu(d).map(m=>{let h=du(m.installPath),y=(o[m.scope]??t)[l];return {name:g,marketplace:v,version:m.version&&m.version!=="unknown"?m.version:void 0,installedAt:m.installedAt,installPath:m.installPath,scope:m.scope,description:h?.description,author:h?.author,status:y===false?"disabled":"enabled"}})}),s=ds(),c=new Set(i.map(l=>`${l.name}@${l.scope}`)),a=s.filter(l=>!c.has(`${l.name}@${l.scope}`));return [...i,...a]}async function Fn(e,t){ie.debug(`[${e}] Acquiring lock to uninstall`);let n=await Ue();try{let r=Ce(),o=fu(e,r.plugins);if(!o)throw new Error(`Plugin '${e}' is not in installed_plugins.json. If this is an MCP server from config, use the MCP remove command instead.`);let{key:i,name:s}=o,c=r.plugins[i];if(t){let a=c.find(g=>g.scope===t);if(!a)throw new Error(`Plugin '${s}' is not installed in ${t} scope`);ie.debug(`[${s}] Resolved key: ${i}, scope: ${t}`),ms(a.installPath);let l=K__default.dirname(a.installPath);ie.debug(`[${s}] Removing directory: ${l}`),G__default.rmSync(l,{recursive:!0,force:!0});let u=c.filter(g=>g.scope!==t);if(u.length===0){let{[i]:g,...v}=r.plugins;lt({...r,plugins:v}),zr(i,t),Jr(s);}else r.plugins[i]=u,lt(r),zr(i,t);}else {ie.debug(`[${s}] Resolved key: ${i}`);for(let u of c){ms(u.installPath);let g=K__default.dirname(u.installPath);ie.debug(`[${s}] Removing directory: ${g}`),G__default.rmSync(g,{recursive:!0,force:!0}),zr(i,u.scope);}Jr(s);let{[i]:a,...l}=r.plugins;lt({...r,plugins:l});}await lu(s,c[0].origin??"internal"),ie.debug(`[${s}] Uninstalled successfully`);}finally{await n();}}async function zt(e,t,n){ie.debug(`[${e}] Acquiring lock to set status \u2192 ${t}`);let r=await Ue();try{let o=Ce(),{key:i,name:s}=mu(e,o.plugins),c=o.plugins[i],a=n??c[0].scope,l=c[0].origin??"internal";ie.debug(`[${s}] Resolved key: ${i}, scope: ${a}`),jr(i,t==="enabled",a),cu(s,t,l),ie.debug(`[${s}] Status updated to ${t}`);}finally{await r();}}var F=create(e=>({installedItems:[],setInstalledItems:t=>e({installedItems:t}),loadFromDisk:()=>e({installedItems:be()})}));var B=["discover","installed"];function Ss(e,t,n){if(t.rightArrow||t.tab){let r=B.indexOf(n.activeTab);return [{type:"setTab",tab:B[(r+1)%B.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}if(t.leftArrow){let r=B.indexOf(n.activeTab);return [{type:"setTab",tab:B[(r-1+B.length)%B.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}return t.downArrow?[{type:"setFocus",focus:"list"}]:[]}function ws(e,t,n,r){if(t.upArrow)return n.selectedIndex===0?[{type:"setSelectedIndex",index:-1},{type:"setFocus",focus:"search"}]:[{type:"setSelectedIndex",index:n.selectedIndex-1}];if(t.downArrow&&n.selectedIndex<r-1)return [{type:"setSelectedIndex",index:n.selectedIndex+1}];if(t.leftArrow){let o=B.indexOf(n.activeTab);return [{type:"setTab",tab:B[(o-1+B.length)%B.length]},{type:"setSelectedIndex",index:0}]}if(t.rightArrow){let o=B.indexOf(n.activeTab);return [{type:"setTab",tab:B[(o+1)%B.length]},{type:"setSelectedIndex",index:0}]}if(t.tab){let o=B.indexOf(n.activeTab);return [{type:"setTab",tab:B[(o+1)%B.length]},{type:"setSelectedIndex",index:0}]}return t.return?[{type:"setActionMenuOpen",open:true},{type:"setFocus",focus:"actionMenu"}]:e==="/"?[{type:"setFocus",focus:"search"}]:e==="1"?[{type:"selectAllTypes"}]:e==="2"?[{type:"toggleTypeFilter",catalogType:"skill"}]:e==="3"?[{type:"toggleTypeFilter",catalogType:"mcp"}]:e==="4"?[{type:"toggleTypeFilter",catalogType:"plugin"}]:e==="5"?[{type:"selectAllOrigins"}]:e==="6"?[{type:"toggleOriginFilter",origin:"internal"}]:e==="7"?[{type:"toggleOriginFilter",origin:"external"}]:e&&e!==" "&&!t.ctrl&&!t.meta&&!t.escape?[{type:"setSelectedIndex",index:-1},{type:"setFocus",focus:"search"},{type:"searchAppend",char:e}]:[]}function xs(e,t){return t.escape?[{type:"setActionMenuOpen",open:false},{type:"setFocus",focus:"list"}]:[]}function Is(e,t,n){return t.escape?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:"reset"}:t.downArrow?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:null}:t.leftArrow?{actions:[],queryUpdate:{cursorMove:-1}}:t.rightArrow?{actions:[],queryUpdate:{cursorMove:1}}:t.return?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:null}:t.backspace?n.length===0?{actions:[{type:"setFocus",focus:"list"},{type:"setSelectedIndex",index:0}],queryUpdate:null}:{actions:[],queryUpdate:{backspace:true}}:e&&!t.ctrl&&!t.meta?{actions:[],queryUpdate:{append:e}}:{actions:[],queryUpdate:null}}function jn(e){let{setActiveTab:t,setFocus:n,setSelectedIndex:r,setActionMenuOpen:o}=f.getState();for(let i of e)if(i.type==="setTab")t(i.tab);else if(i.type==="setFocus")n(i.focus);else if(i.type==="setSelectedIndex")r(i.index);else if(i.type==="setActionMenuOpen")o(i.open);else if(i.type==="searchAppend"){let{setQuery:s,query:c,setCursorPosition:a,cursorPosition:l}=Y.getState();s(c.slice(0,l)+i.char+c.slice(l)),a(l+i.char.length);}else i.type==="toggleTypeFilter"?f.getState().toggleTypeFilter(i.catalogType):i.type==="selectAllTypes"?f.getState().selectAllTypes():i.type==="toggleOriginFilter"?f.getState().toggleOriginFilter(i.origin):i.type==="selectAllOrigins"&&f.getState().selectAllOrigins();}function bs({listLength:e}){let t=f(m=>m.focus),n=f(m=>m.selectedIndex),r=f(m=>m.actionMenuOpen),o=f(m=>m.setFocus),i=f(m=>m.setActionMenuOpen),s=Y(m=>m.query),c=Y(m=>m.setQuery),a=Y(m=>m.resetQuery),l=useRef(e);useEffect(()=>{l.current=e;},[e]),useEffect(()=>{if(t==="search"){let{query:m,setCursorPosition:h}=Y.getState();h(m.length);}},[t]);let[u,g]=useState("");useEffect(()=>{let m=setTimeout(()=>g(s),300);return ()=>clearTimeout(m)},[s]),useInput((m,h)=>{let{activeTab:T,selectedIndex:y,actionMenuOpen:L}=f.getState();jn(Ss(m,h,{activeTab:T}));},{isActive:t==="tabs"}),useInput((m,h)=>{let{activeTab:T,selectedIndex:y,actionMenuOpen:L}=f.getState();jn(ws(m,h,{activeTab:T,selectedIndex:y},l.current));},{isActive:t==="list"}),useInput((m,h)=>{jn(xs(m,h));},{isActive:t==="actionMenu"}),useInput((m,h)=>{let T=Is(m,h,Y.getState().query),y=T.queryUpdate;if(jn(T.actions),y==="reset")a(),g("");else if(y!==null){let{query:L,cursorPosition:A,setCursorPosition:J}=Y.getState();if("backspace"in y)A>0&&(c(L.slice(0,A-1)+L.slice(A)),J(A-1));else if("append"in y)c(L.slice(0,A)+y.append+L.slice(A)),J(A+y.append.length);else if("cursorMove"in y){let q=A+y.cursorMove;q>=0&&q<=L.length&&J(q);}}},{isActive:t==="search"});let v=useCallback(()=>{i(false),o("list");},[i,o]),d=useCallback(m=>{let{setSelectedIndex:h,selectedIndex:T}=f.getState();m===0?h(0):T>=m&&h(m-1);},[]),E=useCallback(m=>{if(!u)return l.current=m.length,m;let h=u.toLowerCase(),T=m.filter(y=>y.name.toLowerCase().includes(h)||y.description?.toLowerCase().includes(h));return l.current=T.length,T},[u]);return {actionMenuOpen:r,closeMenu:v,selectedIndex:n,clampIndex:d,filteredItems:E}}function Ps(){let e=f(c=>c.notification),t=f(c=>c.showNotification),n=f(c=>c.clearNotification),r=ce(c=>c.justAuthenticated),o=ce(c=>c.credentials),i=ce(c=>c.setJustAuthenticated);return useEffect(()=>{r&&o&&(t(`Authenticated. Tenant: ${o.tenant}`,"success"),i(false));},[r,o]),useEffect(()=>{if(!e)return;let c=setTimeout(n,3e3);return ()=>clearTimeout(c)},[e]),{notify:(c,a)=>{t(c,a);}}}function Ae(e,t,n=false){return n?true:!Zr.valid(e)||!Zr.valid(t)?false:Zr.gt(t,e)}var $e=S("updater");async function wu(e,t,n,r,o){try{await b(x.CLI_TOOL_UPDATED,{tool_id:e,tool_type:"plugin",source:o,from_version:t,to_version:n,duration_ms:r,interface:$().interfaceType});}catch(i){$e.warn(`Failed to send update metrics: ${String(i)}`);}}function xu(e){let t=Ce(),n=`${e}@${_}`,r=t.plugins[n];return !r||r.length===0?null:{pluginKey:n,entry:r[0]}}async function Kn(e,t={}){let n=Date.now(),r=null;try{$e.debug(`[${e}] Acquiring lock...`),r=await Ue();let o=xu(e);if(!o)throw $e.error(`[${e}] Plugin is not installed`),new Error(`Plugin "${e}" is not installed`);let{entry:i}=o,s=i.version,c=i.installPath;$e.debug(`[${e}] Fetching manifest...`);let l=(await vt(e)).version;if(!s||!Ae(s,l,t.force))throw $e.debug(`[${e}] Already up to date (v${s??"n/a"})`),new je(e,s??"unknown");$e.info(`[${e}] Updating v${s} \u2192 v${l}...`),await r(),r=null;try{let u=await Ie(e,{force:!0,skipMetrics:!0}),g=Date.now()-n;return await wu(u.name,s,u.version,g,i.origin??"internal"),$e.debug(`[${e}] Updated successfully in ${g}ms`),{name:u.name,previousVersion:s,newVersion:u.version,path:u.path,duration_ms:g}}catch(u){$e.warn(`[${e}] Install failed, rolling back to v${s}...`),r=await Ue();let g=Ce(),v=`${e}@${_}`;throw g.plugins[v]&&(g.plugins[v][0].version=s,g.plugins[v][0].installPath=c,lt(g),$e.info(`[${e}] Rollback completed, restored to v${s}`)),u}}finally{r&&await r();}}var Iu=S("commands:helpers");async function Z(){let e=await O();if(!e)return k("Not authenticated. Run: flow auth login"),false;try{await Oe();}catch(t){return Iu.debug(`Token validation failed: ${String(t)}`),k("Session expired. Run: flow auth login"),false}return !e.bundle||e.bundle.trim()===""?(k("Bundle not set. Run: flow auth login"),false):true}async function Je(e){let t=Qr.createInterface({input:process.stdin,output:process.stdout});return new Promise(n=>{t.question(p(e),r=>{t.close(),n(["y","yes"].includes(r.toLowerCase().trim()));});})}async function Es(e){let t=Qr.createInterface({input:process.stdin,output:process.stdout});return new Promise(n=>{t.question(p(e),r=>{t.close(),n(r.trim());});})}var bu=/^[^@]+@[^@]+$/;function qt(e){return bu.test(e)}function Pt(e){let t=e.indexOf("@");return t>0?e.slice(0,t):e}var vu=/^[a-zA-Z0-9][a-zA-Z0-9._/-]*$/;function Ts(e){if(!vu.test(e))throw new Error(`Invalid plugin name: "${e}". Plugin names must start with an alphanumeric character and contain only letters, digits, dots, hyphens, underscores, and slashes.`)}var Pu=/^[\w./:@?&=+#%-]+$/;function Jn(e){let t=e.trim();if(!t)throw new Error("No marketplace source provided.");if(!Pu.test(t))throw new Error(`Invalid marketplace source: "${t}". Must be owner/repo or a URL (no spaces or special characters).`);return t}var Wt=S("claudeProxy"),no="claude ",ks="flow ",eo=class extends Error{constructor(t){super(`Invalid install command: "${t}". Command must start with "claude " for security.`),this.name="InvalidInstallCommandError";}},to=class extends Error{constructor(t){super(`Disallowed subcommand: "${t}". Only "plugin install", "plugin marketplace add", "mcp add", and "mcp remove" are permitted.`),this.name="DisallowedSubcommandError";}},Eu=/^plugins?\s+(install|i)\s+|^plugins?\s+marketplace\s+add\s+|^mcp\s+(add|remove)\s+/;function Tu(e){As(e);let t=e.slice(no.length);if(!Eu.test(t))throw new to(e)}var Hn=class extends Error{constructor(){super('Claude Code CLI not found. Ensure "claude" is installed and available on your PATH.'),this.name="ClaudeCliNotFoundError";}};function As(e){if(!e||!/^claude /.test(e))throw new eo(e)}async function se(e){As(e);let t=e.slice(no.length).split(/\s+/).filter(Boolean),n=ku(t);Wt.debug(`[${n}] Executing proxy command: claude ${t.join(" ")}`);let r=Date.now();try{let o=await execa("claude",t,{reject:!1}),i=Date.now()-r;return Wt.debug(`[${n}] Proxy command finished with exit code ${o.exitCode} in ${i}ms`),{name:n,command:e,exitCode:o.exitCode??1,stdout:o.stdout,stderr:o.stderr,duration_ms:i}}catch(o){throw $s(o)?new Hn:o}}function ku(e){return e.length>=3?e[2]:e.join(" ")}function $s(e){return e instanceof Error&&"code"in e&&e.code==="ENOENT"}function Cu(e){return e.startsWith(ks)?no+e.slice(ks.length):e}var Au=/^claude\s+(?:plugins?\s+(?:install|i)\s+|mcp\s+(?:add|remove)\s+)/;function $u(e,t){return !t||e.includes("--scope")||!Au.test(e)?e:`${e} --scope ${t}`}async function Ls(e,t){let n=e.split("&&").map(o=>Cu(o.trim())).filter(Boolean).map(o=>$u(o,t));if(n.length===0)throw new Error("Empty install command");for(let o of n)Tu(o);Wt.debug(`[installCommand] Executing ${n.length} command(s)`);let r=await se(n[0]);if(r.exitCode!==0)return r;for(let o=1;o<n.length;o++)if(r=await se(n[o]),r.exitCode!==0)return r;return r}async function Rs(e,t,n){let r=Pt(e),o=t?.trim();if(!o&&(o=(await Es(`Plugin "${r}" could not be installed.
+If a marketplace is needed, enter the source (owner/repo or URL), or press Enter to skip: `))?.trim(),!o))throw new Error("No marketplace source provided. Cannot retry install.");o=Jn(o),n?.(),Wt.debug(`[${r}] Adding marketplace via: claude plugin marketplace add ${o}`);try{let i=await execa("claude",["plugin","marketplace","add",o],{reject:!1});if(i.exitCode!==0)throw new Error(`Failed to add marketplace: ${i.stderr||"unknown error"}`);Wt.debug(`[${r}] Marketplace added successfully`);}catch(i){throw $s(i)?new Hn:i}}var He=S("installDispatcher");async function Ms(e,t,n){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"plugin",source:"external",scope:Dn(n),version:"unknown",duration_ms:t,interface:$().interfaceType});}catch(r){He.warn(`Failed to send external install metrics: ${String(r)}`);}}async function _s(e,t){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"plugin",source:"external",error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:$().interfaceType});}catch(n){He.warn(`Failed to send external install-failed metrics: ${String(n)}`);}}function ro(e,t){let n=Pt(e);Ts(n);let r=["claude","plugin","install",n];return t&&r.push("--scope",t),r.join(" ")}async function oo(e,t,n,r){let o=ro(e,r),i=Pt(e);n?.onStatus?.(`Installing ${i}...`),He.debug(`[${e}] Attempting install: ${o}`);let s=await se(o);return s.exitCode===0?s:(He.debug(`[${e}] Install failed (exit ${s.exitCode}), attempting marketplace add`),n?.onError?.(s.stderr||`Install failed with exit code ${s.exitCode}`),t?n?.onStatus?.(`Adding marketplace for ${i}...`):n?.onPause?.(),await Rs(e,t,()=>{t||n?.onResume?.(`Adding marketplace for ${i}...`);}),n?.onResume?.(`Retrying install for ${i}...`),He.debug(`[${e}] Retrying install after marketplace add`),se(o))}async function Os(e,t){if(e.origin===on&&e.installCommand){He.debug(`[${e.name}] Routing to external installer via installCommand`);let n=await Ls(e.installCommand,t?.scope);return n.exitCode===0?await Ms(e.name,n.duration_ms,t?.scope):await _s(e.name,new Error(n.stderr||"Install failed")),n}if(qt(e.name)){He.debug(`[${e.name}] Routing to external installer via name pattern`);let n=await oo(e.name,t?.marketplaceSource,void 0,t?.scope);return n.exitCode===0?await Ms(e.name,n.duration_ms,t?.scope):await _s(e.name,new Error(n.stderr||"Install failed")),n}return He.debug(`[${e.name}] Routing to internal installer`),Ie(e.name,t)}function Ds(e){return "exitCode"in e}function Bs(){let e=F(s=>s.installedItems),t=F(s=>s.setInstalledItems),n=useCallback(async(s,c)=>{let a=await Os(s,c);if(Ds(a)&&a.exitCode!==0)throw new Error(a.stderr||"External installation failed");F.getState().loadFromDisk();},[]),r=useCallback(async(s,c)=>{await Fn(s,c),t(e.filter(a=>a.name!==s));},[e,t]),o=useCallback(async(s,c)=>{let l=e.find(u=>u.name===s)?.status==="enabled"?"disabled":"enabled";await zt(s,l,c),t(e.map(u=>u.name===s?{...u,status:l}:u));},[e,t]),i=useCallback(async s=>{await Kn(s),F.getState().loadFromDisk();},[]);return {install:n,uninstall:r,toggle:o,update:i}}var Gn=S("mcp");function Xt(e,t){e.silent?re({status:"error",mcp:t.name,...t.exitCode!==void 0&&{exitCode:t.exitCode},message:t.message}):k(`Failed to ${t.action} MCP "${t.name}": ${t.message}`);}function Fs(e,t){e.silent?X({status:"success",mcp:t.name,command:t.command,duration_ms:t.durationMs}):(V(`MCP "${t.name}" ${t.actionPastTense} successfully`),e.verbose&&t.stdout&&I(t.stdout));}function Lu(e,t,n,r){let o=["claude","mcp","add","--transport",n,e];return t.length>0&&o.push(...t),r&&o.push("--scope",r),o.join(" ")}function io(e,t){let n=["claude","mcp","remove",e];return t&&n.push("--scope",t),n.join(" ")}async function Us(e,t,n){if(!await Z())return 1;if(t.length===0){let i=n.transport==="http"?"a URL":"a command";return Xt(n,{name:e,action:"add",message:`${n.transport} transport requires ${i}`}),1}Gn.debug(`[${e}] Starting MCP add with args: ${t.join(" ")}`);let r=Lu(e,t,n.transport,n.scope);if(!n.force){let i=p(e),s=p(r);if(!await Je(`Install external MCP "${i}"?
+This will run: ${s}
+[y/N] `))return Gn.debug(`[${e}] Installation cancelled by user`),I("Operation cancelled."),0}let o=n.silent?void 0:vo({text:`Adding MCP "${p(e)}"...`}).start();try{let i=await se(r);return o?.stop(),i.exitCode!==0?(Xt(n,{name:e,action:"add",message:i.stderr||"Command failed",exitCode:i.exitCode}),!n.silent&&n.verbose&&i.stdout&&I(`stdout: ${i.stdout}`),1):(Fs(n,{name:e,actionPastTense:"added",command:r,durationMs:i.duration_ms,stdout:i.stdout}),0)}catch(i){return o?.stop(),Xt(n,{name:e,action:"add",message:D(i)}),1}}async function js(e,t){if(!await Z())return 1;Gn.debug(`[${e}] Starting MCP remove`);let n=io(e,t.scope);if(!t.force){let o=p(e),i=p(n);if(!await Je(`Remove MCP "${o}"?
+This will run: ${i}
+[y/N] `))return Gn.debug(`[${e}] Removal cancelled by user`),I("Operation cancelled."),0}let r=t.silent?void 0:vo({text:`Removing MCP "${p(e)}"...`}).start();try{let o=await se(n);return r?.stop(),o.exitCode!==0?(Xt(t,{name:e,action:"remove",message:o.stderr||"Command failed",exitCode:o.exitCode}),!t.silent&&t.verbose&&o.stdout&&I(`stdout: ${o.stdout}`),1):(Fs(t,{name:e,actionPastTense:"removed",command:n,durationMs:o.duration_ms,stdout:o.stdout}),0)}catch(o){return r?.stop(),Xt(t,{name:e,action:"remove",message:D(o)}),1}}function Ks({selectedItem:e,selectedCatalogItem:t,items:n,closeMenu:r,clampIndex:o,notify:i}){let s=S("pluginHandlers"),c=f(y=>y.setLoading),{install:a,uninstall:l,toggle:u,update:g}=Bs(),v=async(y,L,A)=>{c(true,y),r();try{await L(),o(n.length),i(A,"success");}catch(J){let q=J instanceof Error?J.message:"Something went wrong";s.error(`[withLoading] ${y} failed: ${q}`),i(q,"error");}finally{c(false);}};return {handleInstall:y=>{e&&t&&v(`Installing ${e.name}...`,()=>a(t,{scope:y}),"\u2713 Installed successfully");},handleUninstall:y=>{e&&v(`Uninstalling ${e.name}...`,()=>l(e.name,y),"\u2713 Uninstalled");},handleToggleStatus:y=>{if(!e)return;let L=e.status==="enabled";v(L?`Disabling ${e.name}...`:`Enabling ${e.name}...`,()=>u(e.name,y),L?"\u2713 Disabled":"\u2713 Enabled");},handleUpdate:()=>{if(!e)return;let y=t?` to v${t.version}`:"";(async()=>{c(true,`Updating ${e.name}${y}...`),r();try{await g(e.name),o(n.length),i(`\u2713 Updated ${e.name}${y}`,"success");}catch(A){if(A instanceof je)i(A.message,"info");else {let J=A instanceof Error?A.message:"Something went wrong";s.error(`[handleUpdate] ${e.name} failed: ${J}`),i(J,"error");}}finally{c(false);}})();},handleMcpConfigUninstall:y=>{e&&v(`Removing MCP ${e.name}...`,async()=>{let L=io(e.name,y),A=await se(L);if(A.exitCode!==0)throw new Error(A.stderr||"MCP removal failed");F.getState().loadFromDisk();},"\u2713 MCP removed");}}}var Yt=["local","project","user"],Ru=new Set(["--transport","--scope","-s"]);function Js(e){let t=e.split(/\s+/).filter(Boolean),n=t.indexOf("add");if(n===-1)return null;let r=n+1;for(;r<t.length;){let o=t[r];if(Ru.has(o))r+=2;else if(o.startsWith("-"))r+=1;else return o.replace(/^["']|["']$/g,"")}return null}function Zt(e,t){return t?`${e}::${t}`:e}function so(e){return e===_?Ct:on}function Hs(e){return {name:p(e.name),version:e.version?p(e.version):e.version,description:e.description?p(e.description):e.description,authorName:e.author.name?p(e.author.name):e.author.name,updateAvailable:e.updateAvailable,type:e.type??"plugin",origin:e.origin??Ct}}function Vs(e,t){let n=so(e.marketplace);return {name:p(e.name),version:e.version?p(e.version):e.version,description:e.description?p(e.description):e.description,authorName:e.author?.name?p(e.author.name):e.author?.name,status:e.status,scope:e.scope,updateAvailable:e.updateAvailable,installedAt:e.installedAt,type:t?.type??e.type??"plugin",origin:t?.origin??n}}function Gs(e){let t=new Map;for(let n of e){if(!n.scope)continue;let r=t.get(n.scope)??[];r.push(n),t.set(n.scope,r);}return Yt.filter(n=>t.has(n)).map(n=>({scope:n,label:At[n].label,pathHint:At[n].pathHint,items:t.get(n)??[]}))}function zs(e){let t=n=>{if(!n)return 1/0;let r=Yt.indexOf(n);return r===-1?1/0:r};return [...e].sort((n,r)=>t(n.scope)-t(r.scope))}function qs({catalog:e,installedItems:t,activeTab:n,catalogFilters:r,searchQuery:o}){let i=useMemo(()=>new Set(t.map(d=>Zt(d.name,d.author?.name))),[t]),s=useMemo(()=>new Set(t.filter(d=>d.type==="mcp").map(d=>d.name.toLowerCase())),[t]),c=useMemo(()=>{let d=new Map(e.map(E=>[Zt(E.name,E.author.name),E]));return t.map(E=>{let m=d.get(Zt(E.name,E.author?.name)),h=m?.version,T=!!h&&!!E.version&&Ae(E.version,h);return {...E,updateAvailable:T,catalogItem:m}})},[t,e]),a=useMemo(()=>n==="discover"?e.filter(d=>{if(i.has(Zt(d.name,d.author.name)))return  false;if(d.type==="mcp"){let E=d.installCommand?Js(d.installCommand)?.toLowerCase():null;if(s.has(d.name.toLowerCase())||E&&s.has(E))return  false}return  true}).map(d=>Hs(d)):c.map(d=>Vs(d,d.catalogItem)),[n,e,i,s,c]),l=useMemo(()=>a.filter(d=>{let E=d.type??"plugin";if(!r.types.has(E))return  false;let m=d.origin??"internal";return r.origins.has(m)}),[a,r]),u=useMemo(()=>{let{types:d}=r;if(d.size===1){if(d.has("skill"))return "skills";if(d.has("mcp"))return "MCPs";if(d.has("plugin"))return "plugins"}return "items"},[r]),g=useMemo(()=>n==="installed"?o?`No ${u} found for '${o}' \u2014 explore the Discover tab!`:`No ${u} installed \u2014 explore the Discover tab!`:o?`No ${u} found for '${o}'`:`No ${u} available in the catalog`,[n,o,u]),v=useMemo(()=>d=>d?e.find(E=>E.name===d.name&&E.author.name===d.authorName)??null:null,[e]);return {items:l,emptyMessage:g,getSelectedCatalogItem:v}}function Ws(){let[e,t]=useState([]),[n,r]=useState(true),[o,i]=useState(null),s=useRef(false),c=useCallback(async()=>{r(true),i(null);try{let a=await xe();t(a),s.current||(s.current=!0,b(x.CLI_CATALOG_VIEWED,{interface:"tui",filter_type:"all",result_count:a.length}).catch(()=>{}));}catch(a){i(a instanceof Error?a:new Error(String(a))),t([]);}finally{r(false);}},[]);return useEffect(()=>{c();},[c]),{catalog:e,isLoading:n,error:o,refetch:c}}function Xs(){return {items:F(t=>t.installedItems)}}var Bu=S("catalog");function Ys(){let e=f(R=>R.activeTab),t=f(R=>R.notification),n=f(R=>R.loading),r=f(R=>R.loadingMessage),o=f(R=>R.catalogError),i=f(R=>R.setCatalogError),s=f(R=>R.catalogFilters),c=Y(R=>R.query),{catalog:a,isLoading:l,error:u,refetch:g}=Ws(),{items:v}=Xs(),d=F(R=>R.loadFromDisk),{items:E,emptyMessage:m,getSelectedCatalogItem:h}=qs({catalog:a,installedItems:v,activeTab:e,catalogFilters:s,searchQuery:c}),{actionMenuOpen:T,closeMenu:y,selectedIndex:L,clampIndex:A,filteredItems:J}=bs({listLength:E.length}),q=J(E),Ee=useMemo(()=>e!=="installed"?q:zs(q),[e,q]),lr=useMemo(()=>e==="installed"?Gs(Ee):[],[e,Ee]),H=Ee[L]??null,w=useMemo(()=>h(H),[h,H]),{notify:ee}=Ps(),{handleInstall:j,handleUninstall:N,handleToggleStatus:cr,handleUpdate:ur,handleMcpConfigUninstall:Co}=Ks({selectedItem:H,selectedCatalogItem:w,items:E,closeMenu:y,clampIndex:A,notify:ee});return useEffect(()=>{d();},[]),useEffect(()=>{A(Ee.length);},[Ee.length,A]),useEffect(()=>{u&&(Bu.error(`[catalog] ${u instanceof Error?u.message:String(u)}`),i("Failed to load catalog"));},[u]),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(kn,{}),jsx(hi,{}),jsx(Oi,{filteredItems:Ee,groups:lr,emptyMessage:m}),(n||l)&&jsx(Ln,{message:n?r:"Loading catalog..."}),o&&!l&&e==="discover"&&jsx(Rn,{message:o,onRetry:()=>{i(null),g();},onBack:()=>i(null)}),t&&jsx(Bi,{message:t.message,type:t.type}),T&&H&&(e==="discover"?jsx(Wi,{itemName:H.name,onInstall:j,onClose:y}):H.type==="mcp"?jsx(ts,{itemName:H.name,itemScope:H.scope??"user",onUninstall:Co,onClose:y}):jsx(Zi,{itemName:H.name,itemScope:H.scope??"user",itemStatus:H.status??"enabled",updateAvailable:H.updateAvailable??false,catalogVersion:w?.version,onUninstall:N,onToggleStatus:R=>cr(R),onUpdate:ur,onClose:y})),jsx($n,{})]})}var P=create((e,t)=>({bundles:[],selectedBundleIndex:0,selectedBundle:null,plugins:[],pluginCursorIndex:0,step:"bundleList",isLoadingBundles:false,bundlesError:null,successCount:0,failedCount:0,summaryActionIndex:0,setBundles:n=>e({bundles:n}),setSelectedBundleIndex:n=>e({selectedBundleIndex:n}),selectBundle:n=>{let r=new Set(F.getState().installedItems.map(o=>o.name));e({selectedBundle:n,plugins:n.plugins.map(o=>({name:o,selected:true,status:r.has(o)?"success":"pending",installed:r.has(o)})),pluginCursorIndex:0,step:"bundleDetail"});},setPluginCursorIndex:n=>e({pluginCursorIndex:n}),setStep:n=>e({step:n}),setPluginStatus:(n,r,o)=>{let i=t().plugins.map(s=>s.name===n?{...s,status:r,error:o}:s);e({plugins:i});},setIsLoadingBundles:n=>e({isLoadingBundles:n}),setBundlesError:n=>e({bundlesError:n}),setSummaryActionIndex:n=>e({summaryActionIndex:n}),computeSummary:()=>{let r=t().plugins.filter(o=>o.selected);e({successCount:r.filter(o=>o.status==="success").length,failedCount:r.filter(o=>o.status==="failed").length});},resetForRetry:()=>{let n=t().plugins.map(r=>r.status==="failed"?{...r,status:"pending",error:void 0}:r);e({plugins:n,step:"installing"});},goBackToList:()=>e({selectedBundle:null,plugins:[],pluginCursorIndex:0,step:"bundleList"})}));var ju=3;function Qs(){let e=P(a=>a.setBundles),t=P(a=>a.setIsLoadingBundles),n=P(a=>a.setBundlesError),r=P(a=>a.setPluginStatus),o=P(a=>a.setStep),i=P(a=>a.computeSummary),s=useCallback(async()=>{t(true),n(null);try{let a=await Bn();e(a);}catch(a){n(a instanceof Error?a.message:String(a));}finally{t(false);}},[t,n,e]);useEffect(()=>{F.getState().loadFromDisk(),s();},[s]);let c=useCallback(async()=>{let a=P.getState().plugins.filter(u=>u.selected&&u.status==="pending");for(let u of a){r(u.name,"installing");let g="",v=false;for(let d=1;d<=ju;d++)try{await Ie(u.name),r(u.name,"success"),v=!0;break}catch(E){if(E instanceof we){r(u.name,"success"),v=true;break}g=E instanceof Error?E.message:"Unknown error";}v||(r(u.name,"failed",g),b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:u.name,tool_type:"plugin",source:"internal",error_code:"install_failed",error_message:g,interface:$().interfaceType}).catch(()=>{}));}let l=tt();et("summary_review"),b(x.CLI_STEP_COMPLETED,{step:"tool_installation",duration_ms:l}).catch(()=>{}),F.getState().loadFromDisk(),i(),o("summary");},[r,i,o]);return {loadBundles:s,installSelected:c}}var Qt={cursorDelta:0,confirm:false,back:false};function ea(e,t){return t.upArrow?{...Qt,cursorDelta:-1}:t.downArrow?{...Qt,cursorDelta:1}:t.escape?{...Qt,back:true}:t.return?{...Qt,confirm:true}:Qt}var Ku={cursorDelta:0,select:false};function ta(e,t){return t.upArrow?{cursorDelta:-1,select:false}:t.downArrow?{cursorDelta:1,select:false}:t.return?{cursorDelta:0,select:true}:Ku}var na=mc.memo(function({bundle:t,isSelected:n}){return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:n?"cyan":"gray",children:n?"\u203A ":"\u25CB "}),jsx(Text,{bold:n,color:n?"cyan":"white",children:p(t.name)}),jsxs(Text,{dimColor:true,children:[" \xB7 ",t.plugins.length," ",t.plugins.length===1?"plugin":"plugins"]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:p(t.description)})})]})});var fo=5;function ra({onRetry:e}){let t=P(u=>u.bundles),n=P(u=>u.selectedBundleIndex),r=P(u=>u.isLoadingBundles),o=P(u=>u.bundlesError);if(r)return jsx(Ln,{message:"Loading bundles..."});if(o)return jsx(Rn,{message:o,onRetry:e,onBack:e});if(t.length===0)return jsx(It,{message:"No bundles available."});let i=Math.max(0,n-Math.floor(fo/2)),s=Math.min(t.length,i+fo);s===t.length&&(i=Math.max(0,s-fo));let c=t.slice(i,s),a=i,l=t.length-s;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Select a bundle to get started"})}),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",a," more above"]})}),c.map((u,g)=>jsx(na,{bundle:u,isSelected:i+g===n},u.slug)),l>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",l," more below"]})})]})}var ia=mc.memo(function({plugin:t,isCursor:n}){return jsxs(Box,{children:[jsx(Text,{color:n?"cyan":"gray",children:n?"\u203A ":"  "}),jsx(Text,{color:"cyan",children:"\u2022"}),jsxs(Text,{bold:n,color:n?"cyan":"white",children:[" ",p(t.name)]}),t.installed&&jsx(Text,{color:"green",children:" (installed)"})]})});var ho=8;function sa(){let e=P(u=>u.selectedBundle),t=P(u=>u.plugins),n=P(u=>u.pluginCursorIndex),r=useRef(false);if(useEffect(()=>{e&&!r.current&&(r.current=true,b(x.CLI_KIT_DISPLAYED,{bundle_slug:e.slug,tool_count:t.length}).catch(()=>{}));},[e,t.length]),!e)return jsx(Text,{dimColor:true,children:"No bundle selected."});let o=t.filter(u=>u.installed).length,i=Math.max(0,n-Math.floor(ho/2)),s=Math.min(t.length,i+ho);s===t.length&&(i=Math.max(0,s-ho));let c=t.slice(i,s),a=i,l=t.length-s;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:[jsx(Text,{bold:true,color:"cyan",children:p(e.name)}),jsx(Text,{dimColor:true,children:p(e.description)})]}),jsx(Box,{paddingX:1,paddingBottom:1,children:jsxs(Text,{children:[t.length," plugins to install",o>0&&` \xB7 ${o} already installed`]})}),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",a," more above"]})}),c.map((u,g)=>jsx(ia,{plugin:u,isCursor:i+g===n},u.name)),l>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",l," more below"]})})]})}var Yu=["Retry failed","Continue anyway"];function aa({name:e,status:t,error:n}){let r=p(e);return t==="installing"?jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(Ac,{type:"dots"})}),jsxs(Text,{color:"cyan",children:[" ",r]})]}):t==="success"?jsx(Box,{children:jsxs(Text,{color:"green",children:["\u2713 ",r]})}):t==="failed"?jsxs(Box,{children:[jsxs(Text,{color:"red",children:["\u2717 ",r]}),n&&jsxs(Text,{dimColor:true,children:[" \u2014 ",p(n)]})]}):jsx(Box,{children:jsxs(Text,{dimColor:true,children:["\u25CB ",r]})})}function la({onComplete:e,onRetry:t}){let n=P(l=>l.plugins),r=P(l=>l.step),o=P(l=>l.successCount),i=P(l=>l.failedCount),s=P(l=>l.summaryActionIndex),c=n.filter(l=>l.selected),a=useRef(false);return useEffect(()=>{if(r==="summary"&&i===0&&!a.current){a.current=true;let l=setTimeout(e,1500);return ()=>clearTimeout(l)}},[r,i,e]),r==="installing"?jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Installing plugins..."})}),jsx(Box,{flexDirection:"column",paddingX:1,children:c.map(l=>jsx(aa,{name:l.name,status:l.status,error:l.error},l.name))})]}):jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Installation Complete"})}),jsxs(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:[o>0&&jsxs(Text,{color:"green",children:["\u2713 ",o," ",o===1?"plugin":"plugins"," installed successfully"]}),i>0&&jsxs(Text,{color:"red",children:["\u2717 ",i," ",i===1?"plugin":"plugins"," failed"]})]}),i>0&&jsx(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:c.filter(l=>l.status==="failed").map(l=>jsx(aa,{name:l.name,status:l.status,error:l.error},l.name))}),i>0&&jsx(Box,{flexDirection:"column",paddingX:1,children:Yu.map((l,u)=>jsx(Box,{children:jsxs(Text,{bold:u===s,color:u===s?"cyan":void 0,children:[u===s?"\u203A ":"  ",l]})},l))}),i===0&&jsx(Box,{paddingX:1,children:jsx(Text,{dimColor:true,children:"Proceeding to main screen..."})})]})}function ca(){let e=P(w=>w.step),t=P(w=>w.bundles),n=P(w=>w.selectedBundleIndex),r=P(w=>w.setSelectedBundleIndex),o=P(w=>w.selectBundle),i=P(w=>w.plugins),s=P(w=>w.pluginCursorIndex),c=P(w=>w.setPluginCursorIndex),a=P(w=>w.setStep),l=P(w=>w.summaryActionIndex),u=P(w=>w.setSummaryActionIndex),g=P(w=>w.failedCount),v=P(w=>w.resetForRetry),d=P(w=>w.goBackToList),E=f(w=>w.setScreen),m=f(w=>w.setFocus),h=f(w=>w.focus),T=ce(w=>w.setJustAuthenticated),y=ce(w=>w.justAuthenticated),{loadBundles:L,installSelected:A}=Qs(),J=useRef(false);useEffect(()=>{e==="bundleList"?(m("bundleList"),J.current||(J.current=true,et("bundle_selection"))):m(e==="bundleDetail"?"bundleDetail":"installProgress");},[e,m]);let q=useCallback(async()=>{let w=P.getState().selectedBundle;if(w){let j=await O();j&&await Ze({...j,bundle:w.slug});}b(x.CLI_STEP_COMPLETED,{step:"summary_review",duration_ms:tt()}).catch(()=>{});let{successCount:ee}=P.getState();b(x.CLI_ONBOARDING_COMPLETED,{duration_ms:De(),tools_installed_count:ee}).catch(()=>{}),T(false),m("list"),E("main");},[T,m,E]),Ee=useCallback(()=>{v(),A();},[v,A]),lr=useCallback(()=>{L();},[L]),H=useCallback(()=>{m("list"),E("main");},[m,E]);return useInput((w,ee)=>{if(ee.escape)vn("esc"),H();else if(ee.upArrow&&n>0)r(n-1);else if(ee.downArrow&&n<t.length-1)r(n+1);else if(ee.return&&t.length>0){let j=tt();o(t[n]),et("kit_display"),b(x.CLI_STEP_COMPLETED,{step:"bundle_selection",duration_ms:j}).catch(()=>{});}},{isActive:h==="bundleList"}),useInput((w,ee)=>{let j=ea(w,ee);if(j.cursorDelta!==0){let N=s+j.cursorDelta;N>=0&&N<i.length&&c(N);}if(j.confirm){let N=P.getState().selectedBundle;N&&(async()=>(await O())?.bundle!==N.slug&&b(x.CLI_KIT_ACCEPTED,{bundle_slug:N.slug}).catch(()=>{}))();let cr=tt();et("kit_confirmation"),b(x.CLI_STEP_COMPLETED,{step:"kit_display",duration_ms:cr}).catch(()=>{});let ur=tt();et("tool_installation"),b(x.CLI_STEP_COMPLETED,{step:"kit_confirmation",duration_ms:ur}).catch(()=>{}),a("installing"),A();}if(j.back){let N=P.getState().selectedBundle;N&&b(x.CLI_KIT_REJECTED,{bundle_slug:N.slug}).catch(()=>{}),d();}},{isActive:h==="bundleDetail"}),useInput((w,ee)=>{if(g===0)return;let j=ta(w,ee);if(j.cursorDelta!==0){let N=l+j.cursorDelta;N>=0&&N<=1&&u(N);}j.select&&(l===0?Ee():q());},{isActive:h==="installProgress"&&e==="summary"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(kn,{}),jsxs(Box,{flexDirection:"column",paddingX:1,marginBottom:1,children:[jsx(Text,{dimColor:true,children:"The data collected during setup is used solely to improve"}),jsx(Text,{dimColor:true,children:"Flow's internal tools and will not be shared externally."}),!y&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"yellow",children:"Welcome back! We noticed your bundle is not set up yet. Choose a bundle below to get your recommended starter kit."})})]}),jsxs(Box,{flexDirection:"column",flexGrow:1,children:[e==="bundleList"&&jsx(ra,{onRetry:lr}),e==="bundleDetail"&&jsx(sa,{}),(e==="installing"||e==="summary")&&jsx(la,{onComplete:q,onRetry:Ee})]}),jsx($n,{})]})}var tp=S("app"),np={auth:pi,bundleSetup:ca,main:Ys};function da(){f.getState().setScreen("auth"),f.getState().setFocus("auth");}async function fa(){let e=await O();if(!e){da();return}try{await Oe();}catch(o){tp.debug(`Token validation failed: ${String(o)}`),da();return}b(x.CLI_SESSION_STARTED,{cli_version:Be,os:process.platform,node_version:process.version,duration_ms:De(),interface:"tui"}).catch(()=>{});let{clientSecret:t,...n}=e;ce.getState().setCredentials(n),!e.bundle||e.bundle.trim()===""?(f.getState().setScreen("bundleSetup"),f.getState().setFocus("bundleList")):(f.getState().setScreen("main"),f.getState().setFocus("list"));}function ga(){let{columns:e,rows:t}=useWindowSize(),n=f(i=>i.screen),r=np[n],{pendingExit:o}=ci();return r?jsxs(Box,{flexDirection:"column",width:e,height:t,children:[jsx(r,{}),o&&jsx(Box,{paddingX:1,children:jsx(Text,{color:"yellow",children:"Press Ctrl+C again to quit"})})]}):jsxs(Text,{color:"red",children:["Unknown screen: ",n]})}var Pe=S("auth");function ha(){W.clearFallbackFile(),Sn();}var rp=3,ya=3,Sa=`  \u2139 The data collected during setup is used solely to improve
+    Flow's internal tools and will not be shared externally.
+`;function nn(e,t={}){return new Promise((n,r)=>{let{masked:o=false,defaultValue:i=""}=t;process.stdout.write(e+i);let s=i,c=u=>{if(u===""){a(),r(new Error("SIGINT"));return}if(u==="\r"||u===`
+`){a(),process.stdout.write(`
+`),n(s);return}if(u==="\x7F"){s.length>0&&(s=s.slice(0,-1),process.stdout.write("\b \b"));return}u.startsWith("\x1B")||(s+=u,process.stdout.write(o?"*".repeat(u.length):u));};function a(){process.stdin.setRawMode(false),process.stdin.removeListener("data",c),process.removeListener("uncaughtException",l),process.removeListener("unhandledRejection",l),process.removeListener("SIGINT",l),process.removeListener("SIGTERM",l);}function l(){try{process.stdin.setRawMode(!1);}catch{}}process.on("uncaughtException",l),process.on("unhandledRejection",l),process.on("SIGINT",l),process.on("SIGTERM",l),process.stdin.setRawMode(true),process.stdin.resume(),process.stdin.setEncoding("utf8"),process.stdin.on("data",c);})}async function wa(){for(let e=1;e<=ya;e++)try{return await Bn()}catch{if(e===ya)throw new Error("Failed to fetch bundles after 3 attempts")}return []}async function xa(){let e=await wa();if(e.length===0)throw new Error("No bundles available. Please contact your administrator.");for(process.stdout.write(`
+`+C.cyan("  ? ")+`Bundle:
+`),e.forEach((t,n)=>{process.stdout.write(`    ${C.cyan(`${n+1})`)} ${p(t.name)}
+`);}),process.stdout.write(`
+`);;){let t=(await nn(C.cyan("  ? ")+`Select bundle (1-${e.length}): `)).trim(),n=parseInt(t,10)-1;if(!isNaN(n)&&n>=0&&n<e.length)return e[n];process.stderr.write(C.yellow(`  \u26A0 Invalid selection. Please try again.
+`));}}async function Ia(e){if(e.plugins.length===0)return process.stdout.write(C.dim(`
+  Bundle '${p(e.name)}' has no plugins to install.
+`)),true;process.stdout.write(`
+  Installing ${e.plugins.length} plugins from '${p(e.name)}'...
+`);let t=0,n=0,r=e.plugins.length;for(let o of e.plugins){let i=t+n+1;process.stdout.write(C.dim(`  [${i}/${r}] Installing ${p(o)}...`));let s=false;for(let c=1;c<=rp;c++)try{await Ie(o),t++,s=!0;break}catch(a){if(a instanceof we){t++,s=true;break}}s?process.stdout.write(C.green(` done
+`)):(n++,process.stdout.write(C.red(` failed
+`)));}return n===0?process.stdout.write(C.green(`  \u2713 Bundle '${p(e.name)}' selected. ${t}/${r} plugins installed successfully.
+`)):process.stdout.write(C.yellow(`  \u26A0 Bundle '${p(e.name)}' selected. ${t}/${r} plugins installed. ${n} failed.
+`)),n===0}async function op(e){ha(),process.stdout.write(`
+`+Sa+`
+`),Pe.debug(`[${e.tenant}] Authenticating tenant`);try{await Qe(e);}catch(t){let n=p(t instanceof Error?t.message:"unknown error");return Pe.error(`[${e.tenant}] Authentication failed: ${n}`),process.stderr.write(C.red(`  \u2717 Authentication failed: ${n}
+`)),1}try{let t;if(e.bundle){let n=await wa(),r=n.find(o=>o.slug===e.bundle);if(!r){process.stderr.write(C.red(`  \u2717 Bundle '${p(e.bundle)}' not found.
+`)),process.stderr.write(`  Available bundles:
+`);for(let o of n)process.stderr.write(`    - ${p(o.slug)} (${p(o.name)})
+`);return 1}t=r;}else t=await xa();return await Ze({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant,bundle:t.slug}),await Ia(t),Pe.info(`[${e.tenant}] Authentication successful`),process.stdout.write(C.green(`  \u2713 Setup complete. Tenant: ${e.tenant}
-`)),0}catch(t){let n=I(t instanceof Error?t.message:"unknown error");return W.error(`Authentication failed: ${n}`),process.stderr.write(x.red(`  \u2717 Authentication failed: ${n}
-`)),1}}async function si(){W.debug("Starting interactive authentication");try{process.stdout.write(`
-`);let e=(await ot(x.cyan("  ? ")+"Client ID: ")).trim(),t=(await ot(x.cyan("  ? ")+"Client Secret: ",{masked:!0})).trim(),n=(await ot(x.cyan("  ? ")+"Tenant: ")).trim();if(!e||!t||!n)return W.error("Validation failed: all fields are required"),process.stderr.write(x.red(`  \u2717 All fields are required
-`)),1;W.debug(`Authenticating tenant: ${n}`);try{await Ee({clientId:e,clientSecret:t,tenant:n});}catch(r){let o=I(r instanceof Error?r.message:"unknown error");return W.error(`Authentication failed: ${o}`),process.stderr.write(x.red(`  \u2717 Authentication failed: ${o}
-`)),1}return W.info(`Authentication successful for tenant: ${n}`),process.stdout.write(x.green(`  \u2713 Setup complete. Tenant: ${n}
+`)),0}catch(t){if(t instanceof Error&&t.message==="SIGINT")throw t;let n=p(t instanceof Error?t.message:"unknown error");return Pe.error(`[${e.tenant}] Bundle setup failed: ${n}`),process.stderr.write(C.red(`  \u2717 Bundle setup failed: ${n}
+`)),1}}async function ip(){ha(),Pe.debug("[auth] Starting interactive authentication");try{process.stdout.write(`
+`),process.stdout.write(Sa+`
+`);let e=(await nn(C.cyan("  ? ")+"Client ID: ")).trim(),t=(await nn(C.cyan("  ? ")+"Client Secret: ",{masked:!0})).trim(),n=(await nn(C.cyan("  ? ")+"Tenant: ")).trim();if(!e||!t||!n)return Pe.error("[auth] Validation failed: all fields are required"),process.stderr.write(C.red(`  \u2717 All fields are required
+`)),1;Pe.debug(`[${n}] Authenticating tenant`);try{await Qe({clientId:e,clientSecret:t,tenant:n});}catch(o){let i=p(o instanceof Error?o.message:"unknown error");return Pe.error(`[${n}] Authentication failed: ${i}`),process.stderr.write(C.red(`  \u2717 Authentication failed: ${i}
+`)),1}let r=await xa();return await Ze({clientId:e,clientSecret:t,tenant:n,bundle:r.slug}),await Ia(r),Pe.info(`[${n}] Authentication successful`),process.stdout.write(C.green(`  \u2713 Setup complete. Tenant: ${n}
-`)),0}catch(e){if(e instanceof Error&&e.message==="SIGINT")throw e;let t=I(e instanceof Error?e.message:"unknown error");return W.error(`Unexpected error: ${t}`),process.stderr.write(x.red(`  \u2717 Unexpected error: ${t}
-`)),1}}async function Dt(e={}){if(e.clientId&&e.clientSecret&&e.tenant)return ii({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant});try{return await si()}catch(t){if(t instanceof Error&&t.message==="SIGINT")return process.stdout.write(`
-`),130;throw t}}async function ai(){try{return process.stdout.write(`
-`),(await ot(x.cyan("  ? ")+"Are you sure? This will remove your local credentials. (y/N): ")).toLowerCase()!=="y"?(process.stdout.write(x.yellow(`  \u26A0 Logout cancelled
+`)),0}catch(e){if(e instanceof Error&&e.message==="SIGINT")throw e;let t=p(e instanceof Error?e.message:"unknown error");return Pe.error(`[auth] Unexpected error: ${t}`),process.stderr.write(C.red(`  \u2717 Unexpected error: ${t}
+`)),1}}async function bo(e={}){if(e.clientId&&e.clientSecret&&e.tenant)return op({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant,bundle:e.bundle});try{return await ip()}catch(t){if(t instanceof Error&&t.message==="SIGINT")return process.stdout.write(`
+`),130;throw t}}async function sp(){try{return process.stdout.write(`
+`),(await nn(C.cyan("  ? ")+"Are you sure? This will remove your local credentials. (y/N): ")).toLowerCase()!=="y"?(process.stdout.write(C.yellow(`  \u26A0 Logout cancelled
 `)),0):null}catch(e){if(e instanceof Error&&e.message==="SIGINT")return process.stdout.write(`
-`),130;throw e}}async function ar(e){if(!C())return process.stdout.write(x.yellow(`  \u26A0 You are not authenticated
-`)),0;if(!e){let t=await ai();if(t!==null)return t}try{return Kt(),process.stdout.write(x.green(`  \u2713 Credentials removed successfully
-`)),0}catch{return process.stderr.write(x.red(`  \u2717 Error removing credentials
-`)),1}}async function lr(){let e=C();return e?D()?(process.stdout.write(`
-`+x.bold(`  Authenticated
-`)),process.stdout.write(x.dim("     Tenant:  ")+I(e.tenant)+`
-`),process.stdout.write(x.dim("     Client ID:  ")+I(e.clientId)+`
-`),process.stdout.write(x.dim("     Config:  ")+I(Jt())+`
+`),130;throw e}}async function ba(e){if(!await O())return process.stdout.write(C.yellow(`  \u26A0 You are not authenticated
+`)),0;if(!e){let t=await sp();if(t!==null)return t}try{return await qo(),process.stdout.write(C.green(`  \u2713 Credentials removed successfully
+`)),0}catch{return process.stderr.write(C.red(`  \u2717 Error removing credentials
+`)),1}}async function va(){let e=await O();return e?await ht()?(process.stdout.write(`
+`+C.bold(`  Authenticated
+`)),process.stdout.write(C.dim("     Tenant:  ")+p(e.tenant)+`
+`),process.stdout.write(C.dim("     Client ID:  ")+p(e.clientId)+`
+`),process.stdout.write(C.dim("     Bundle:  ")+p(e.bundle??"not set")+`
+`),process.stdout.write(C.dim("     Config:  ")+p(await Wo())+`
 `),process.stdout.write(`
-`),0):(process.stdout.write(x.yellow("  \u26A0 Session expired. Run `flow-cli auth login` to re-authenticate.\n")),0):(process.stdout.write(x.yellow("  \u26A0 Not authenticated. Run `flow-cli auth login` to set up.\n")),0)}function oe(){return C()?D()?true:(P("Session expired. Run: flow-cli auth login"),false):(P("Not authenticated. Run: flow-cli auth login"),false)}async function li(e){let t=R(),n;try{n=await z();}catch{n=[];}let r=new Set(t.map(o=>o.name));return e.json?(Ge(n.map(o=>({...o,installed:r.has(o.name)}))),0):(ze(["","Name","Version","Category","Status"],n.map(o=>[r.has(o.name)?"*":" ",o.name,o.version,o.category,r.has(o.name)?"installed":"available"])),0)}async function ci(e){let t=R(),n=await z(),r=new Map(n.map(i=>[i.name,i])),o=t.map(i=>{let s=r.get(i.name);return s&&G(i.version,s.version)?{...i,availableVersion:s.version}:null}).filter(i=>i!==null);return o.length===0?(w("All plugins are up to date."),0):e.json?(Ge(o),0):(ze(["Name","Installed","Available"],o.map(i=>[i.name,i.version,i.availableVersion])),process.stdout.write(`
+`),0):(process.stdout.write(C.yellow("  \u26A0 Session expired. Run `flow auth login` to re-authenticate.\n")),0):(process.stdout.write(C.yellow("  \u26A0 Not authenticated. Run `flow auth login` to set up.\n")),0)}async function ap(e){let t=be(),n;try{n=await xe();}catch{n=[];}let r=new Set(t.map(o=>o.name));return b(x.CLI_CATALOG_VIEWED,{interface:$().interfaceType,filter_type:"available",result_count:n.length}).catch(()=>{}),e.json?(wt(n.map(o=>({...o,installed:r.has(o.name)}))),0):(Pn(["","Name","Version","Category","Status"],n.map(o=>[r.has(o.name)?"*":" ",o.name??"",o.version??"n/a",o.category??"",r.has(o.name)?"installed":"available"])),0)}async function lp(e){let t=be(),n=await xe(),r=new Map(n.map(i=>[i.name,i])),o=t.map(i=>{let s=r.get(i.name);return s&&i.version&&s.version&&Ae(i.version,s.version)?{...i,availableVersion:s.version}:null}).filter(i=>i!==null);return b(x.CLI_CATALOG_VIEWED,{interface:$().interfaceType,filter_type:"outdated",result_count:o.length}).catch(()=>{}),o.length===0?(I("All plugins are up to date."),0):e.json?(wt(o),0):(Pn(["Name","Installed","Available"],o.map(i=>[i.name??"",i.version??"n/a",i.availableVersion??"n/a"])),process.stdout.write(`
   ${o.length} plugin(s) outdated.
-`),0)}function ui(e){let t=R();return t.length===0?(w("No plugins installed. Use `flow plugin install <name>` to install one."),0):e.json?(Ge(t),0):(ze(["Name","Version","Installed at"],t.map(n=>[n.name,n.version,Xe(n.installedAt)])),process.stdout.write(`
+`),0)}async function cp(e){let t=be();if(b(x.CLI_CATALOG_VIEWED,{interface:$().interfaceType,filter_type:"all",result_count:t.length}).catch(()=>{}),t.length===0)return I("No plugins installed. Use `flow plugin install <name>` to install one."),0;if(e.json)return wt(t),0;let n=[];try{n=await xe();}catch{n=[];}let r=new Map(n.map(i=>[i.name,i])),o=[...t].sort((i,s)=>{let c=Yt.indexOf(i.scope??"user"),a=Yt.indexOf(s.scope??"user");return (c===-1?1/0:c)-(a===-1?1/0:a)});return Pn(["Name","Version","Type","Origin","Scope","Status","Installed at"],o.map(i=>{let s=r.get(i.name),c=s?.type??"plugin",a=s?.origin??so(i.marketplace);return [i.name??"",i.version??"n/a",dt[c]?.label??"Plugin",a,i.scope??"user",i.status??"enabled",En(i.installedAt??"")]})),process.stdout.write(`
   ${t.length} plugin(s) installed.
-`),0)}async function cr(e){if(!oe())return 1;try{return e.available?await li(e):e.outdated?await ci(e):ui(e)}catch(t){return P(t instanceof Error?t.message:"Failed to list plugins."),1}}var v=S("manage");function ue(e){process.stdout.write(JSON.stringify(e)+`
-`);}function Ot(e){process.stderr.write(JSON.stringify(e)+`
-`);}function B(e){return e instanceof Error?e.message:String(e)}async function di(e,t,n){n.silent||w(`${t}Installing ${e}...`);try{let r=await xe(e,n);return n.silent?ue({status:"success",plugin:r.name,version:r.version,duration_ms:r.duration_ms}):me(`${t}${r.name} v${r.version} installed successfully`),{name:e,success:!0,version:r.version,duration_ms:r.duration_ms}}catch(r){if(r instanceof ye)return n.silent?ue({status:"already_installed",plugin:e,message:r.message}):w(`${t}${r.message}`),{name:e,success:true};let o=B(r);return n.silent?Ot({status:"error",plugin:e,message:o}):P(`${t}Failed to install ${e}: ${o}`),{name:e,success:false,error:o}}}function pi(e){let t=e.filter(r=>r.success).length,n=e.filter(r=>!r.success).length;w(`
-Installation summary: ${t} succeeded, ${n} failed`);}async function ur(e,t={}){if(!oe())return 1;let n=[];for(let r=0;r<e.length;r++){let o=e.length>1?`[${r+1}/${e.length}] `:"",i=await di(e[r],o,t);n.push(i);}return e.length>1&&(t.silent?ue({status:"summary",succeeded:n.filter(r=>r.success).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.error?{error:r.error}:{}}))}):pi(n)),n.some(r=>!r.success)?1:0}async function dr(e,t){if(!oe())return 1;if(v.debug(`[${e}] Looking up installed plugin`),!t.force){let n=R().find(s=>s.name===e);if(!n)return v.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;let r=I(n.name),o=I(n.version);if(!await fi(`Remove ${r} v${o}? [y/N] `))return v.debug(`[${e}] Uninstall cancelled by user`),w("Operation cancelled."),0}try{return v.debug(`[${e}] Uninstalling plugin`),await Ye(e),v.info(`[${e}] Uninstalled successfully`),me("Plugin removed successfully"),0}catch(n){return v.error(`[${e}] Failed to uninstall: ${B(n)}`),P(B(n)),1}}async function fi(e){let n=(await import('readline')).default.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{n.question(e,o=>{n.close(),r(o.toLowerCase()==="y");});})}async function pr(e){if(!oe())return 1;v.debug(`[${e}] Looking up installed plugin`);let t=R().find(n=>n.name===e);if(!t)return v.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;if(t.status==="enabled")return v.debug(`[${e}] Already enabled, skipping`),w(`${t.name} is already enabled`),0;try{return v.debug(`[${e}] Enabling plugin (current status: ${t.status})`),await Le(e,"enabled"),v.info(`[${e}] Enabled successfully`),me(`${t.name} enabled successfully`),0}catch(n){return v.error(`[${e}] Failed to enable: ${B(n)}`),P(B(n)),1}}async function fr(e){if(!oe())return 1;v.debug(`[${e}] Looking up installed plugin`);let t=R().find(n=>n.name===e);if(!t)return v.error(`[${e}] Plugin is not installed`),P(`Plugin "${e}" is not installed`),1;if(t.status==="disabled")return v.debug(`[${e}] Already disabled, skipping`),w(`${t.name} is already disabled`),0;try{return v.debug(`[${e}] Disabling plugin (current status: ${t.status})`),await Le(e,"disabled"),v.info(`[${e}] Disabled successfully`),me(`${t.name} disabled successfully`),0}catch(n){return v.error(`[${e}] Failed to disable: ${B(n)}`),P(B(n)),1}}async function mr(e,t,n){n.silent||w(`${t}Updating ${e}...`);try{let r=await nt(e,n);return n.silent?ue({status:"updated",plugin:r.name,previousVersion:r.previousVersion,newVersion:r.newVersion,duration_ms:r.duration_ms}):me(`${t}${r.name} v${r.previousVersion} \u2192 v${r.newVersion}`),{name:e,success:!0}}catch(r){if(r instanceof ne)return n.silent?ue({status:"up_to_date",plugin:e,message:r.message}):w(`${t}${r.message}`),{name:e,success:true,skipped:true};let o=B(r);return n.silent?Ot({status:"error",plugin:e,message:o}):P(`${t}Failed to update ${e}: ${o}`),{name:e,success:false,error:o}}}function mi(e){let t=e.filter(o=>o.success&&!o.skipped).length,n=e.filter(o=>o.skipped).length,r=e.filter(o=>!o.success).length;w(`
-Update summary: ${t} updated, ${n} already up to date, ${r} failed`);}async function gi(e,t,n){try{let r=await we(e);G(t,r.version,n.force)?w(`Would update ${e}: v${t} \u2192 v${r.version}`):w(`${e} is already up to date (v${t})`);}catch(r){return P(B(r)),1}return 0}function hi(e){return new Map(e.map(t=>[t.name,t.version]))}function yi(e,t,n){let r=t.get(e.name);return r?G(e.version,r,n)?(w(`Would update ${e.name}: v${e.version} \u2192 v${r}`),true):(w(`${e.name} is already up to date (v${e.version})`),false):(w(`Skipping ${e.name}: not found in catalog`),false)}async function wi(e,t){try{let n=await z(),r=hi(n),o=0;for(let i of e)yi(i,r,t.force)&&o++;o===0&&w("All plugins are up to date");}catch(n){return P(B(n)),1}return 0}async function xi(e,t){let n=[];for(let r=0;r<e.length;r++){let o=`[${r+1}/${e.length}] `,i=await mr(e[r].name,o,t);n.push(i);}return t.silent?ue({status:"summary",updated:n.filter(r=>r.success&&!r.skipped).length,upToDate:n.filter(r=>r.skipped).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.skipped?{skipped:true}:{},...r.error?{error:r.error}:{}}))}):mi(n),n.some(r=>!r.success)?1:0}async function gr(e,t={}){if(!oe())return 1;if(e){let o=R().find(s=>s.name===e);return o?t.dryRun?gi(e,o.version,t):(await mr(e,"",t)).success?0:1:(t.silent?Ot({status:"error",plugin:e,message:`Plugin "${e}" is not installed`}):P(`Plugin "${e}" is not installed`),1)}let r=R().filter(o=>o.marketplace===b);return r.length===0?(t.silent?ue({status:"empty",message:"No plugins installed"}):w("No plugins installed"),0):t.dryRun?wi(r,t):xi(r,t)}function Ii(){return C()?{passed:true,message:"Credentials configured"}:{passed:false,message:"Credentials not configured \u2014 Run `flow-cli auth login`"}}async function Si(){let e=Date.now();try{await z();let t=Date.now()-e;return {passed:!0,message:`Prompt Manager accessible (${t}ms)`,latency:t}}catch(t){return t instanceof Error&&t.name==="TimeoutError"?{passed:false,message:"Timeout after 5s \u2014 check your connection"}:{passed:false,message:`Connection error: ${t instanceof Error?t.message:"Unknown"}`}}}function Ei(){return D()?{passed:true,message:"Token is valid"}:{passed:false,message:"Token expired \u2014 run `flow-cli auth login` to re-authenticate"}}function Ti(){let e=join(homedir(),".claude","settings.json");return existsSync(e)?{passed:true,message:"Claude Code detected"}:{passed:false,message:"Claude Code not detected"}}async function hr(){process.stdout.write(`
-`+x.bold(`  FlowSetup CLI Diagnostics
+`),0}async function Pa(e){if(!await Z())return 1;try{return e.available?await ap(e):e.outdated?await lp(e):await cp(e)}catch(t){return k(t instanceof Error?t.message:"Failed to list plugins."),1}}var M=S("manage");function Qn(e,t){return t?be().find(n=>n.name===e&&n.scope===t):be().find(n=>n.name===e)}function up(e,t){let n=t;return {callbacks:{onStatus:o=>{n&&(n.text=`${e}${o}`);},onError:o=>{n?.stop(),n=void 0,I(`${e}${o}`);},onPause:()=>{n?.stop(),n=void 0;},onResume:o=>{n?.stop(),n=vo({text:`${e}${o}`}).start();}},stopSpinner:()=>{n?.stop(),n=void 0;}}}async function pp(e,t,n,r){let o=r;if(!n.force){o?.stop();let s=p(e),c=p(ro(e,n.scope));if(!await Je(`${t}Install external plugin "${s}"?
+This will run: ${c}
+[y/N] `))return M.debug(`[${e}] Installation cancelled by user`),n.silent||I(`${t}Skipped ${e} (cancelled).`),{name:e,success:true};n.silent||(o=vo({text:`${t}Installing ${e}...`}).start());}let i=o?up(t,o):void 0;try{let s=await oo(e,n.marketplaceSource,i?.callbacks,n.scope);if(i?.stopSpinner(),s.exitCode!==0){let c=s.stderr||"Command failed";return n.silent?re({status:"error",plugin:e,message:c}):k(`${t}Failed to install "${e}": ${c}`),{name:e,success:!1,error:c}}return n.silent?X({status:"success",plugin:e,command:s.command,duration_ms:s.duration_ms}):V(`${t}${e} installed successfully (via proxy)`),{name:e,success:!0,duration_ms:s.duration_ms}}catch(s){i?.stopSpinner();let c=D(s);return n.silent?re({status:"error",plugin:e,message:c}):k(`${t}Failed to install "${e}": ${c}`),{name:e,success:false,error:c}}}async function dp(e,t,n){let r=n.silent?void 0:vo({text:`${t}Installing ${e}...`}).start();if(qt(e))return pp(e,t,n,r);try{let o=await Ie(e,n);return r?.stop(),n.silent?X({status:"success",plugin:e,version:o.version,duration_ms:o.duration_ms}):V(`${t}${e} v${o.version} installed successfully`),{name:e,success:!0,version:o.version,duration_ms:o.duration_ms}}catch(o){if(r?.stop(),o instanceof we)return n.silent?X({status:"already_installed",plugin:e,message:o.message}):I(`${t}${o.message}`),{name:e,success:true};let i=D(o);return n.silent?re({status:"error",plugin:e,message:i}):k(`${t}Failed to install "${e}": ${i}`),{name:e,success:false,error:i}}}function mp(e){let t=e.filter(r=>r.success).length,n=e.filter(r=>!r.success).length;I(`
+Installation summary: ${t} succeeded, ${n} failed`);}async function Ea(e,t={}){if(!await Z())return 1;let n=[];for(let r=0;r<e.length;r++){let o=e.length>1?`[${r+1}/${e.length}] `:"",i=await dp(e[r],o,t);n.push(i);}return e.length>1&&(t.silent?X({status:"summary",succeeded:n.filter(r=>r.success).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.error?{error:r.error}:{}}))}):mp(n)),n.some(r=>!r.success)?1:0}async function Ta(e,t){if(!await Z())return 1;if(M.debug(`[${e}] Looking up installed plugin`),!t.force){let n=Qn(e,t.scope);if(!n)return M.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;let r=p(n.name),o=n.version?p(n.version):void 0,i=t.scope?` (${t.scope})`:"";if(!await Je(`Remove ${r} ${o?`v${o}`:"(n/a)"}${i}? [y/N] `))return M.debug(`[${e}] Uninstall cancelled by user`),I("Operation cancelled."),0}try{return M.debug(`[${e}] Uninstalling plugin${t.scope?` (scope: ${t.scope})`:""}`),await Fn(e,t.scope),M.info(`[${e}] Uninstalled successfully`),V("Plugin removed successfully"),0}catch(n){return M.error(`[${e}] Failed to uninstall: ${D(n)}`),k(D(n)),1}}async function ka(e,t={}){if(!await Z())return 1;M.debug(`[${e}] Looking up installed plugin`);let n=Qn(e,t.scope);if(!n)return M.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;if(n.status==="enabled")return M.debug(`[${e}] Already enabled, skipping`),I(`${n.name} is already enabled`),0;try{return M.debug(`[${e}] Enabling plugin (current status: ${n.status})`),await zt(e,"enabled",t.scope),M.info(`[${e}] Enabled successfully`),V(`${n.name} enabled successfully`),0}catch(r){return M.error(`[${e}] Failed to enable: ${D(r)}`),k(D(r)),1}}async function Ca(e,t={}){if(!await Z())return 1;M.debug(`[${e}] Looking up installed plugin`);let n=Qn(e,t.scope);if(!n)return M.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;if(n.status==="disabled")return M.debug(`[${e}] Already disabled, skipping`),I(`${n.name} is already disabled`),0;try{return M.debug(`[${e}] Disabling plugin (current status: ${n.status})`),await zt(e,"disabled",t.scope),M.info(`[${e}] Disabled successfully`),V(`${n.name} disabled successfully`),0}catch(r){return M.error(`[${e}] Failed to disable: ${D(r)}`),k(D(r)),1}}async function Aa(e,t,n){n.silent||I(`${t}Updating ${e}...`);try{let r=await Kn(e,n);return n.silent?X({status:"updated",plugin:r.name,previousVersion:r.previousVersion,newVersion:r.newVersion,duration_ms:r.duration_ms}):V(`${t}${r.name} v${r.previousVersion} \u2192 v${r.newVersion}`),{name:e,success:!0}}catch(r){if(r instanceof je)return n.silent?X({status:"up_to_date",plugin:e,message:r.message}):I(`${t}${r.message}`),{name:e,success:true,skipped:true};let o=D(r);return n.silent?re({status:"error",plugin:e,message:o}):k(`${t}Failed to update ${e}: ${o}`),{name:e,success:false,error:o}}}function fp(e){let t=e.filter(o=>o.success&&!o.skipped).length,n=e.filter(o=>o.skipped).length,r=e.filter(o=>!o.success).length;I(`
+Update summary: ${t} updated, ${n} already up to date, ${r} failed`);}async function gp(e,t,n){try{let r=await vt(e);Ae(t,r.version,n.force)?I(`Would update ${e}: v${t} \u2192 v${r.version}`):I(`${e} is already up to date (v${t})`);}catch(r){return k(D(r)),1}return 0}function yp(e){return new Map(e.filter(t=>!!t.version).map(t=>[t.name,t.version]))}function hp(e,t,n){let r=t.get(e.name);return r?e.version&&Ae(e.version,r,n)?(I(`Would update ${e.name}: v${e.version} \u2192 v${r}`),true):(I(`${e.name} is already up to date (${e.version?`v${e.version}`:"n/a"})`),false):(I(`Skipping ${e.name}: not found in catalog`),false)}async function Sp(e,t){try{let n=await xe(),r=yp(n),o=0;for(let i of e)hp(i,r,t.force)&&o++;o===0&&I("All plugins are up to date");}catch(n){return k(D(n)),1}return 0}async function wp(e,t){let n=[];for(let r=0;r<e.length;r++){let o=`[${r+1}/${e.length}] `,i=await Aa(e[r].name,o,t);n.push(i);}return t.silent?X({status:"summary",updated:n.filter(r=>r.success&&!r.skipped).length,upToDate:n.filter(r=>r.skipped).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.skipped?{skipped:true}:{},...r.error?{error:r.error}:{}}))}):fp(n),n.some(r=>!r.success)?1:0}async function $a(e,t={}){if(!await Z())return 1;if(e){let o=Qn(e,t.scope);return o?t.dryRun?gp(e,o.version??"",t):(await Aa(e,"",t)).success?0:1:(t.silent?re({status:"error",plugin:e,message:`Plugin "${e}" is not installed`}):k(`Plugin "${e}" is not installed`),1)}let r=be().filter(o=>o.marketplace===_);return r.length===0?(t.silent?X({status:"empty",message:"No plugins installed"}):I("No plugins installed"),0):t.dryRun?Sp(r,t):wp(r,t)}var La=S("marketplace");function Ip(e){return `claude plugin marketplace add ${e}`}async function Ra(e,t){if(!await Z())return 1;let n;try{n=Jn(e);}catch(i){let s=D(i);return t.silent?re({status:"error",source:e,message:s}):k(s),1}La.debug(`[marketplace] Adding marketplace source: ${n}`);let r=Ip(n);if(!t.force){let i=p(n),s=p(r);if(!await Je(`Add marketplace "${i}"?
+This will run: ${s}
+[y/N] `))return La.debug("[marketplace] Operation cancelled by user"),I("Operation cancelled."),0}let o=t.silent?void 0:vo({text:`Adding marketplace "${p(n)}"...`}).start();try{let i=await se(r);return o?.stop(),i.exitCode!==0?(t.silent?re({status:"error",source:n,exitCode:i.exitCode,message:i.stderr||"Command failed"}):(k(`Failed to add marketplace "${n}": ${i.stderr||"Command failed"}`),t.verbose&&i.stdout&&I(`stdout: ${i.stdout}`)),1):(t.silent?X({status:"success",source:n,command:r,duration_ms:i.duration_ms}):(V(`Marketplace "${n}" added successfully`),t.verbose&&i.stdout&&I(i.stdout)),0)}catch(i){o?.stop();let s=D(i);return t.silent?re({status:"error",source:n,message:s}):k(`Failed to add marketplace "${n}": ${s}`),1}}async function Ep(){return await O()?{passed:true,message:"Credentials configured"}:{passed:false,message:"Credentials not configured \u2014 Run `flow auth login`"}}async function Tp(){let e=Date.now();try{await xe();let t=Date.now()-e;return {passed:!0,message:`Prompt Manager accessible (${t}ms)`,latency:t}}catch(t){return t instanceof Error&&t.name==="TimeoutError"?{passed:false,message:"Timeout after 5s \u2014 check your connection"}:{passed:false,message:`Connection error: ${t instanceof Error?t.message:"Unknown"}`}}}async function kp(){return await ht()?{passed:true,message:"Token is valid"}:{passed:false,message:"Token expired \u2014 run `flow auth login` to re-authenticate"}}function Cp(){let e=join(homedir(),".claude","settings.json");return existsSync(e)?{passed:true,message:"Claude Code detected"}:{passed:false,message:"Claude Code not detected"}}async function Ma(){process.stdout.write(`
+`+C.bold(`  FlowSetup CLI Diagnostics
-`));let e=[{name:"Credentials",fn:Ii},{name:"Prompt Manager",fn:Si},{name:"Valid Token",fn:Ei},{name:"Claude Code",fn:Ti}],t=true;for(let n of e){let r=await n.fn(),o="",i=x.green;r.passed?o=x.green("[OK]  "):(o=x.red("[FAIL]"),i=x.red,t=false);let s=`  ${o} ${i(n.name.padEnd(18))} ${I(r.message)}`;process.stdout.write(s+`
+`));let e=[{name:"Credentials",fn:Ep},{name:"Prompt Manager",fn:Tp},{name:"Valid Token",fn:kp},{name:"Claude Code",fn:Cp}],t=true;for(let n of e){let r=await n.fn(),o="",i=C.green;r.passed?o=C.green("[OK]  "):(o=C.red("[FAIL]"),i=C.red,t=false);let s=`  ${o} ${i(n.name.padEnd(18))} ${p(r.message)}`;process.stdout.write(s+`
 `);}return process.stdout.write(`
-`),t?(process.stdout.write(x.green(`  \u2713 All checks passed!
+`),t?(process.stdout.write(C.green(`  \u2713 All checks passed!
-`)),0):(process.stdout.write(x.red(`  \u2717 Some checks failed \u2014 verify your configuration
+`)),0):(process.stdout.write(C.red(`  \u2717 Some checks failed \u2014 verify your configuration
-`)),1)}function yr(e){let t=new Command;t.name("flow").description("FlowSetup CLI \u2014 Manage Flow plugins in your Claude Code").version(`@flow/cli v${Je}`,"-V, --version","Display the CLI version").addHelpText("after",`
+`)),1)}var Lp=["github.com","www.github.com"],Rp=/^([a-zA-Z0-9_.-]+)\/([a-zA-Z0-9_.@-]+)(\/.*)?$/,Mp=/^([^@]+)@(.+)$/;function _p(e){return !!(isAbsolute(e)||e==="."||e===".."||e.startsWith("./")||e.startsWith("../")||e.startsWith(".\\")||e.startsWith("..\\")||/^[a-zA-Z]:[/\\]/.test(e))}function Po(e){let t=e.replace(/\\/g,"/");t=t.replace(/^\/+/,"").replace(/\/+$/,"");let n=t.split("/").filter(Boolean);for(let r of n)if(r==="..")throw new Error(`Invalid subpath: "${e}" contains path traversal ("..").`);return n.join("/")}function Op(e){let t=e.pathname.split("/").filter(Boolean);if(t.length<2)throw new Error(`Invalid GitHub URL: expected at least owner/repo in "${e.href}"`);let n=t[0],r=t[1];r.endsWith(".git")&&(r=r.slice(0,-4));let o={type:"github",url:`https://github.com/${n}/${r}.git`};if(t.length>=3&&(t[2]==="tree"||t[2]==="blob")){if(t.length>=4&&(o.ref=t[3]),t.length>=5){let i=t.slice(4).join("/");o.subpath=Po(i);}}else if(t.length>2){let i=t.slice(2).join("/");o.subpath=Po(i);}return e.hash&&e.hash.length>1&&(o.ref=decodeURIComponent(e.hash.slice(1))),o}function er(e){let t=e.trim();if(!t)throw new Error("Skill source cannot be empty.");if(_p(t)){let n=resolve(t);return {type:"local",url:n,localPath:n}}try{let n=new URL(t);if((n.protocol==="https:"||n.protocol==="http:")&&Lp.includes(n.hostname))return Op(n);if(n.protocol==="https:"||n.protocol==="http:"){let r={type:"git",url:t};return n.hash&&n.hash.length>1&&(r.ref=decodeURIComponent(n.hash.slice(1)),r.url=t.replace(n.hash,"")),r}if(n.protocol==="git:"){let r={type:"git",url:t};return n.hash&&n.hash.length>1&&(r.ref=decodeURIComponent(n.hash.slice(1)),r.url=t.replace(n.hash,"")),r}}catch{}if(t.startsWith("git@")||t.includes(":")&&t.includes(".git")){let n=t,r,o=t.indexOf("#");o!==-1&&(r=t.slice(o+1),n=t.slice(0,o));let i={type:"git",url:n};return r&&(i.ref=r),i}{let n=t,r,o=n.indexOf("#");o!==-1&&(r=n.slice(o+1),n=n.slice(0,o));let i=n.match(Rp);if(i){let s=i[1],c=i[2],a=i[3],l,u=c.match(Mp);u&&(c=u[1],l=u[2]),c.endsWith(".git")&&(c=c.slice(0,-4));let g={type:"github",url:`https://github.com/${s}/${c}.git`};if(r&&(g.ref=r),l&&(g.skillFilter=l),a){let v=a.replace(/^\//,"");v&&(g.subpath=Po(v));}return g}}return {type:"git",url:t}}function tr(e){if(e.type!=="github")return null;try{let n=new URL(e.url).pathname.split("/").filter(Boolean);if(n.length<2)return null;let r=n[1];return r.endsWith(".git")&&(r=r.slice(0,-4)),`${n[0]}/${r}`}catch{return null}}var Up=6e4,ze=class extends Error{url;isTimeout;isAuthError;constructor(t,n,r=false,o=false){super(t),this.name="GitCloneError",this.url=n,this.isTimeout=r,this.isAuthError=o;}};async function nr(e,t){let n=await mkdtemp(join(tmpdir(),"flow-skills-")),r=simpleGit({timeout:{block:Up}}).env("GIT_TERMINAL_PROMPT","0").env("GIT_LFS_SKIP_SMUDGE","1"),o=t?["--depth","1","--branch",t]:["--depth","1"];try{return await r.clone(e,n,o),n}catch(i){await rm(n,{recursive:true,force:true}).catch(()=>{});let s=i instanceof Error?i.message:String(i),c=s.includes("block timeout")||s.includes("timed out"),a=s.includes("Authentication failed")||s.includes("could not read Username")||s.includes("Permission denied")||s.includes("Repository not found");throw c?new ze("Clone timed out after 60s. Check your SSH keys or credentials.",e,true,false):a?new ze(`Authentication failed for ${e}. Ensure you have access and credentials are configured.`,e,false,true):new ze(`Failed to clone ${e}: ${s}`,e,false,false)}}async function rr(e){let t=normalize(resolve(e)),n=normalize(resolve(tmpdir()));if(!t.startsWith(n+sep))throw new Error("Attempted to clean up directory outside of temp directory");await rm(e,{recursive:true,force:true});}function Na(e){let t=e.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/);return t?{data:parse(t[1])??{},content:t[2]??""}:{data:{},content:e}}var To=new Set(["node_modules",".git","dist","build","__pycache__"]);function Tt(e){return e.toLowerCase().replace(/[^a-z0-9._]+/g,"-").replace(/^[.-]+|[.-]+$/g,"").substring(0,255)||"unnamed-skill"}function ja(e,t){let n=normalize(resolve(e)),r=normalize(resolve(t));return r.startsWith(n+sep)||r===n}function Vp(e,t){let n=normalize(resolve(e)),r=normalize(resolve(join(e,t)));return r.startsWith(n+sep)||r===n}async function Eo(e){try{let t=join(e,"SKILL.md");return (await stat(t)).isFile()}catch{return  false}}async function rn(e){try{let t=await readFile(e,"utf-8"),{data:n}=Na(t);return typeof n.name!="string"||typeof n.description!="string"?null:{name:n.name,description:n.description,path:dirname(e),rawContent:t,metadata:n.metadata}}catch{return null}}async function Ka(e,t=0,n=5){if(t>n)return [];try{let[r,o]=await Promise.all([Eo(e),readdir(e,{withFileTypes:!0}).catch(()=>[])]),i=r?[e]:[],s=await Promise.all(o.filter(c=>c.isDirectory()&&!To.has(c.name)).map(c=>Ka(join(e,c.name),t+1,n)));return [...i,...s.flat()]}catch{return []}}async function sr(e,t){let n=[],r=new Set;if(t&&!Vp(e,t))throw new Error(`Invalid subpath: "${t}" resolves outside the repository directory.`);let o=t?join(e,t):e;if(await Eo(o)){let s=await rn(join(o,"SKILL.md"));if(s)return n.push(s),r.add(s.name),n}let i=[o,join(o,"skills"),join(o,".claude/skills"),join(o,".agents/skills")];for(let s of i)try{let c=await readdir(s,{withFileTypes:!0});for(let a of c){if(!a.isDirectory())continue;let l=join(s,a.name);if(await Eo(l)){let u=await rn(join(l,"SKILL.md"));u&&!r.has(u.name)&&(n.push(u),r.add(u.name));}}}catch{}if(n.length===0){let s=await Ka(o);for(let c of s){let a=await rn(join(c,"SKILL.md"));a&&!r.has(a.name)&&(n.push(a),r.add(a.name));}}return n}function Ja(e,t){let n=t.map(r=>r.toLowerCase());return e.filter(r=>{let o=r.name.toLowerCase();return n.some(i=>i===o)})}var Va=1;function Ha(){return {version:Va,skills:{}}}async function ar(e){let t=gr(e);try{let n=await readFile(t,"utf-8"),r=JSON.parse(n);return !r.version||r.version<Va?Ha():r}catch{return Ha()}}function Xp(e){let t={};for(let n of Object.keys(e).sort())t[n]=e[n];return t}async function Ga(e,t){let n=gr(t);await mkdir(dirname(n),{recursive:true});let r={version:e.version,skills:Xp(e.skills)};await writeFile(n,JSON.stringify(r,null,2)+`
+`,"utf-8");}async function za(e,t,n){let r=await ar(n),o=new Date().toISOString(),i=r.skills[e];r.skills[e]={...t,installedAt:i?.installedAt??o,updatedAt:o},await Ga(r,n);}async function qa(e,t){let n=await ar(t);e in n.skills&&(delete n.skills[e],await Ga(n,t));}var Wa=S("skillInstaller");async function rd(e,t,n,r){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"skill",source:"external",scope:t,version:n,duration_ms:r,interface:$().interfaceType});}catch(o){Wa.warn(`Failed to send skill install metrics: ${String(o)}`);}}async function od(e,t){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"skill",source:"external",error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:$().interfaceType});}catch(n){Wa.warn(`Failed to send skill install-failed metrics: ${String(n)}`);}}async function id(e,t){await cp$1(e,t,{recursive:true,dereference:true,filter:n=>!To.has(basename(n))});}async function sd(e,t,n){let r=Tt(e.name),o=Mt(t),i=join(o,r);if(!ja(o,i))return {skill:e.name,success:false,path:i,error:`Unsafe install path: "${i}" escapes skills directory`};try{await rm(i,{recursive:!0,force:!0}),await mkdir(i,{recursive:!0}),await id(e.path,i);let c=tr(n)??n.url;return await za(r,{source:c,sourceType:n.type,sourceUrl:n.url,ref:n.ref,skillPath:n.subpath},t),{skill:e.name,success:!0,path:i}}catch(s){return {skill:e.name,success:false,path:i,error:s instanceof Error?s.message:String(s)}}}async function Xa(e,t){let n=er(e),r;try{let o;if(n.type==="local"){if(!n.localPath||!existsSync(n.localPath))return {source:e,results:[],discovered:0,installed:0,failed:0};o=n.localPath;}else r=await nr(n.url,n.ref),o=r;let i=await sr(o,n.subpath),s=[...t.skillFilter??[]];n.skillFilter&&s.push(n.skillFilter);let c=s.length>0?Ja(i,s):i,a=[],l=n.ref??"latest";for(let u of c){let g=Date.now(),v=await sd(u,t.scope,n);a.push(v);let d=Date.now()-g;v.success?await rd(u.name,t.scope,l,d):await od(u.name,new Error(v.error??"Unknown error"));}return {source:e,results:a,discovered:i.length,installed:a.filter(u=>u.success).length,failed:a.filter(u=>!u.success).length}}finally{r&&await rr(r).catch(()=>{});}}var pd=S("skills");async function dd(e){try{await b(x.CLI_TOOL_UNINSTALLED,{tool_id:e,tool_type:"skill",source:"external",interface:$().interfaceType});}catch(t){pd.warn(`Failed to send skill uninstall metrics: ${String(t)}`);}}async function md(e){let t=createInterface({input:process.stdin,output:process.stdout});return new Promise(n=>{t.question(`${e} (y/N) `,r=>{t.close(),n(r.trim().toLowerCase()==="y");});})}async function fd(e){let t=er(e),n;try{let r;if(t.type==="local"){if(!t.localPath)return k("Invalid local path."),1;r=t.localPath;}else I(`Fetching skills from ${p(e)}...`),n=await nr(t.url,t.ref),r=n;let o=await sr(r,t.subpath);if(o.length===0)return I("No skills found in this source."),0;let s=tr(t)??p(e);I(`Found ${o.length} skill(s) in ${s}:
+`);for(let c of o){let a=p(c.name),l=p(c.description);process.stdout.write(`  ${C.bold(a)}  ${C.dim(l)}
+`);}return process.stdout.write(`
+`),0}catch(r){return r instanceof ze?k(r.message):k(r instanceof Error?r.message:String(r)),1}finally{n&&await rr(n).catch(()=>{});}}function gd(e){for(let n of e.results){let r=p(n.skill);if(n.success){let o=relative(process.cwd(),n.path);V(`${r} installed ${C.dim(`\u2192 ${o}/`)}`);}else k(`${r}: ${p(n.error??"unknown error")}`);}process.stdout.write(`
+`);let t=e.source;e.installed>0&&I(`Installed ${e.installed} of ${e.discovered} skill(s) from ${p(t)}`),e.failed>0&&k(`${e.failed} skill(s) failed to install`),e.results.length===0&&e.discovered===0?I("No skills found in this source."):e.results.length===0&&e.discovered>0&&I(`Found ${e.discovered} skill(s) but none matched the filter. Use --list to see available skills.`);}async function Za(e,t){if(t.list)return fd(e);let n=t.global?"global":"project";try{let r=await Xa(e,{scope:n,skillFilter:t.skill,yes:t.yes});return gd(r),r.failed>0?1:0}catch(r){return r instanceof ze?k(r.message):k(r instanceof Error?r.message:String(r)),1}}async function Qa(e){let t=Mt(e),n=[];try{let r=await readdir(t,{withFileTypes:!0});for(let o of r){if(!o.isDirectory())continue;let i=join(t,o.name),s=join(i,"SKILL.md");try{if(!(await stat(s)).isFile())continue}catch{continue}let c=await rn(s);c?n.push({name:c.name,description:c.description,path:i}):n.push({name:o.name,description:"(no metadata)",path:i});}}catch{}return n}async function el(e){let t=e.global?"global":"project",n=await Qa(t),r=await ar(t);if(e.json){let i=n.map(s=>({name:s.name,description:s.description,path:s.path,source:r.skills[Tt(s.name)]?.source}));return wt(i),0}if(n.length===0)return I(`No skills installed (${t==="global"?"global":"project"} scope).`),0;I(`${t==="global"?"Global":"Project"} skills (${n.length}):
+`);for(let i of n){let s=r.skills[Tt(i.name)]?.source,c=p(i.name),a=p(i.description),l=a.length>80?a.slice(0,77)+"...":a,u=s?C.dim(` (${s})`):"";process.stdout.write(`  ${C.bold(c)}${u}
+`),process.stdout.write(`  ${C.dim(l)}
+`);}return 0}async function tl(e,t){let n=t.global?"global":"project";if(!e){let s=await Qa(n);if(s.length===0)return I("No skills installed."),0;I("Installed skills:");for(let c of s)process.stdout.write(`  - ${p(c.name)}
+`);return process.stdout.write(`
+`),I("Specify a skill name to remove: flow skills remove <name>"),1}let r=Tt(e),o=Mt(n),i=join(o,r);try{await stat(i);}catch{return k(`Skill "${p(e)}" is not installed.`),1}if(!t.force&&!await md(`Remove skill "${p(r)}"?`))return I("Cancelled."),0;try{return await rm(i,{recursive:!0,force:!0}),await qa(r,n),await dd(r),V(`Skill "${p(r)}" removed.`),0}catch(s){return k(`Failed to remove skill: ${s instanceof Error?s.message:String(s)}`),1}}function nl(e){let t=new Command;t.name("flow").description("FlowSetup CLI \u2014 Manage Flow plugins in your Claude Code").version(`@flow/cli v${Be}`,"-V, --version","Display the CLI version").addHelpText("after",`
 Without arguments, opens the interactive interface (TUI).
-Use 'flow <command> --help' for details on each command.`).action(()=>{e();});let n=new Command("setup").description("Configure the CLI by detecting Claude Code credentials");n.command("init").description("Initialize the Flow CLI configuration").addHelpText("after",`
+Use 'flow <command> --help' for details on each command.`).action(async()=>{await e();});let n=new Command("setup").description("Configure the CLI by detecting Claude Code credentials");n.command("init").description("Initialize the Flow CLI configuration").addHelpText("after",`
 Examples:
-  $ flow setup init`).action(async()=>{let i=await Dt();process.exit(i);}),t.addCommand(n);let r=new Command("plugin").description("Manage plugins from the Findr catalog installed in your Claude Code");r.command("list").description("List available or installed plugins").option("--available","show full catalog with installation status",false).option("--outdated","show only plugins with updates available",false).option("--json","output as JSON",false).addHelpText("after",`
+  $ flow setup init`).action(async()=>{let a=await bo();process.exit(a);}),t.addCommand(n);let r=new Command("plugin").description("Manage plugins from the Findr catalog installed in your Claude Code");r.command("list").description("List available or installed plugins").option("--available","show full catalog with installation status",false).option("--outdated","show only plugins with updates available",false).option("--json","output as JSON",false).addHelpText("after",`
 Examples:
   $ flow plugin list
   $ flow plugin list --available
   $ flow plugin list --outdated
-  $ flow plugin list --json`).action(async i=>{let s=await cr(i);process.exit(s);}),r.command("install").description("Install one or more plugins from the Findr catalog into Claude Code").argument("<name...>","Name(s) of the plugin(s) to install (space-separated)").option("--force","Reinstall even if the version is already installed").option("--verbose","Display each step of the installation process").option("--silent","Output in JSON only").addHelpText("after",`
+  $ flow plugin list --json`).action(async a=>{let l=await Pa(a);process.exit(l);}),r.command("install").description("Install one or more plugins from the Findr catalog into Claude Code").argument("<name...>","Name(s) of the plugin(s) to install (space-separated)").option("--force","Reinstall even if the version is already installed").option("--verbose","Display each step of the installation process").option("--silent","Output in JSON only").option("--marketplace-source <source>","GitHub source (owner/repo) for marketplace auto-add when installing external plugins").addOption(new Option("--scope <scope>","Scope to install into: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
 Examples:
   $ flow plugin install flow-adr-writer
+  $ flow plugin install flow-adr-writer --scope project
   $ flow plugin install flow-adr-writer flow-prd-writer startup-pack-ai
   $ flow plugin install flow-adr-writer --force
-  $ flow plugin install flow-adr-writer --silent`).action(async(i,s)=>{_("cli",{verbose:s.verbose,silent:s.silent});let a=await ur(i,s);process.exit(a);}),r.command("uninstall").description("Remove an installed plugin from Claude Code").argument("<name>","Name of the plugin to remove").option("--force","Skip interactive confirmation").addHelpText("after",`
+  $ flow plugin install flow-adr-writer --silent
+  $ flow plugin install superpowers@claude-plugins-official
+  $ flow plugin install agent-sdk-dev@claude-code-plugins --marketplace-source anthropics/claude-code`).action(async(a,l)=>{let u=a.filter(v=>v.trim());if(u.length===0){k("No valid plugin names provided"),process.exit(1);return}ne("cli",{verbose:l.verbose,silent:l.silent});let g=await Ea(u,l);process.exit(g);}),r.command("uninstall").description("Remove an installed plugin from Claude Code").argument("<name>","Name of the plugin to remove").option("--force","Skip interactive confirmation").addOption(new Option("--scope <scope>","Scope to uninstall from: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
 Examples:
   $ flow plugin uninstall flow-adr-writer
-  $ flow plugin uninstall startup-pack-ai --force`).action(async(i,s)=>{let a=await dr(i,s);process.exit(a);}),r.command("update").description("Update plugins to the latest version").argument("[name]","Name of the plugin to update (omit to update all)").option("--force","Force update even if already on latest version").option("--dry-run","Show what would be updated without making changes").option("--verbose","Display each step of the update process").option("--silent","Output in JSON only").addHelpText("after",`
+  $ flow plugin uninstall flow-adr-writer --scope project
+  $ flow plugin uninstall startup-pack-ai --force`).action(async(a,l)=>{let u=await Ta(a,l);process.exit(u);}),r.command("update").description("Update plugins to the latest version").argument("[name]","Name of the plugin to update (omit to update all)").option("--force","Force update even if already on latest version").option("--dry-run","Show what would be updated without making changes").option("--verbose","Display each step of the update process").option("--silent","Output in JSON only").addOption(new Option("--scope <scope>","Scope to update in: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
 Examples:
   $ flow plugin update flow-adr-writer
+  $ flow plugin update flow-adr-writer --scope project
   $ flow plugin update flow-adr-writer --force
   $ flow plugin update flow-adr-writer --dry-run
   $ flow plugin update flow-adr-writer --verbose
   $ flow plugin update flow-adr-writer --silent
   $ flow plugin update
-  $ flow plugin update --dry-run`).action(async(i,s)=>{_("cli",{verbose:s.verbose,silent:s.silent});let a=await gr(i??null,s);process.exit(a);}),r.command("enable").description("Enable an installed plugin").argument("<name>","Name of the plugin to enable").addHelpText("after",`
+  $ flow plugin update --dry-run`).action(async(a,l)=>{ne("cli",{verbose:l.verbose,silent:l.silent});let u=await $a(a??null,l);process.exit(u);}),r.command("enable").description("Enable an installed plugin").argument("<name>","Name of the plugin to enable").addOption(new Option("--scope <scope>","Scope to enable in: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
+Examples:
+  $ flow plugin enable flow-adr-writer
+  $ flow plugin enable flow-adr-writer --scope project`).action(async(a,l)=>{ne("cli");let u=await ka(a,l);process.exit(u);}),r.command("disable").description("Disable an installed plugin").argument("<name>","Name of the plugin to disable").addOption(new Option("--scope <scope>","Scope to disable in: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
+Examples:
+  $ flow plugin disable flow-adr-writer
+  $ flow plugin disable flow-adr-writer --scope project`).action(async(a,l)=>{ne("cli");let u=await Ca(a,l);process.exit(u);});let o=new Command("marketplace").description("Manage plugin marketplaces");o.command("add").description("Register a plugin marketplace in Claude Code").argument("<source>","Marketplace source (owner/repo or URL)").option("--force","Skip confirmation prompt").option("--verbose","Display command output").option("--silent","Output as JSON only").addHelpText("after",`
 Examples:
-  $ flow plugin enable flow-adr-writer`).action(async i=>{_("cli");let s=await pr(i);process.exit(s);}),r.command("disable").description("Disable an installed plugin").argument("<name>","Name of the plugin to disable").addHelpText("after",`
+  $ flow plugin marketplace add anthropics/claude-code
+  $ flow plugin marketplace add https://github.com/owner/repo
+  $ flow plugin marketplace add anthropics/claude-code --force
+  $ flow plugin marketplace add anthropics/claude-code --silent`).action(async(a,l)=>{ne("cli",{verbose:l.verbose,silent:l.silent});let u=await Ra(a,l);process.exit(u);}),r.addCommand(o),t.addCommand(r);let i=new Command("mcp").description("Manage MCP servers from the Findr catalog");i.command("add").description("Install an MCP server into Claude Code").argument("<name>","Name of the MCP server to install").argument("[args...]","Arguments to pass to the MCP server (URL for http, command for stdio)").addOption(new Option("--transport <type>","Transport type: http or stdio").choices(["http","stdio"]).makeOptionMandatory()).addOption(new Option("--scope <scope>","Scope to install into: user, project, or local").choices(["user","project","local"])).option("--force","Skip confirmation prompt").option("--verbose","Display command output").option("--silent","Output as JSON only").addHelpText("after",`
 Examples:
-  $ flow plugin disable flow-adr-writer`).action(async i=>{_("cli");let s=await fr(i);process.exit(s);}),t.addCommand(r);let o=new Command("auth").description("Manage authentication credentials");return o.command("login").description("Authenticate and save credentials locally").option("--client-id <id>","Client ID for non-interactive authentication").option("--client-secret <secret>","Client Secret for non-interactive authentication").option("--tenant <tenant>","Tenant for non-interactive authentication").option("--verbose","Display each step of the authentication process").addHelpText("after",`
+  $ flow mcp add notion --transport http https://mcp.notion.com/mcp
+  $ flow mcp add mcp-chrome --transport stdio uvx mcp-chrome
+  $ flow mcp add playwright-mcp --transport stdio uvx playwright-mcp --force
+  $ flow mcp add notion --transport http https://mcp.notion.com/mcp --scope project`).action(async(a,l,u)=>{ne("cli",{verbose:u.verbose,silent:u.silent});let g=await Us(a,l,u);process.exit(g);}),i.command("remove").description("Remove an MCP server from Claude Code").argument("<name>","Name of the MCP server to remove").addOption(new Option("--scope <scope>","Scope to remove from: user, project, or local").choices(["user","project","local"])).option("--force","Skip confirmation prompt").option("--verbose","Display command output").option("--silent","Output as JSON only").addHelpText("after",`
+Examples:
+  $ flow mcp remove notion
+  $ flow mcp remove notion --scope project
+  $ flow mcp remove playwright-mcp --force`).action(async(a,l)=>{ne("cli",{verbose:l.verbose,silent:l.silent});let u=await js(a,l);process.exit(u);}),t.addCommand(i);let s=new Command("auth").description("Manage authentication credentials");s.command("login").description("Authenticate and save credentials locally").option("--client-id <id>","Client ID for non-interactive authentication").option("--client-secret <secret>","Client Secret for non-interactive authentication").option("--tenant <tenant>","Tenant for non-interactive authentication").option("--bundle <slug>","Bundle slug for non-interactive setup").option("--verbose","Display each step of the authentication process").addHelpText("after",`
 Examples:
   $ flow auth login
   $ flow auth login --client-id ID --client-secret SECRET --tenant TENANT
-  $ flow auth login --verbose`).action(async i=>{_("cli",{verbose:i.verbose});let s=await Dt(i);process.exit(s);}),o.command("logout").description("Remove locally saved credentials").option("--force","Skip interactive confirmation").addHelpText("after",`
+  $ flow auth login --client-id ID --client-secret SECRET --tenant TENANT --bundle dev
+  $ flow auth login --verbose`).action(async a=>{ne("cli",{verbose:a.verbose});let l=await bo(a);process.exit(l);}),s.command("logout").description("Remove locally saved credentials").option("--force","Skip interactive confirmation").addHelpText("after",`
 Examples:
   $ flow auth logout
-  $ flow auth logout --force`).action(async i=>{let s=await ar(i.force);process.exit(s);}),o.command("status").description("Display the current authentication status").addHelpText("after",`
+  $ flow auth logout --force`).action(async a=>{let l=await ba(a.force);process.exit(l);}),s.command("status").description("Display the current authentication status").addHelpText("after",`
+Examples:
+  $ flow auth status`).action(async()=>{let a=await va();process.exit(a);}),t.addCommand(s);let c=new Command("skills").description("Manage skills for Claude Code from GitHub repositories or local paths");return c.command("add").description("Install skills from a GitHub repo or local path into Claude Code").argument("<source>","GitHub repo (owner/repo), URL, or local path").option("-g, --global","Install globally (~/.claude/skills/)").option("-s, --skill <names...>","Install only specific skills by name").option("-y, --yes","Skip confirmation prompts").option("--list","List available skills without installing").addHelpText("after",`
+Examples:
+  $ flow skills add vercel-labs/agent-skills
+  $ flow skills add owner/repo -g
+  $ flow skills add owner/repo --skill pr-review commit
+  $ flow skills add ./local/skills -y
+  $ flow skills add owner/repo --list`).action(async(a,l)=>{let u=await Za(a,l);process.exit(u);}),c.command("list").description("List installed skills").option("-g, --global","List global skills (default: project)").option("--json","Output as JSON").addHelpText("after",`
+Examples:
+  $ flow skills list
+  $ flow skills list -g
+  $ flow skills list --json`).action(async a=>{let l=await el(a);process.exit(l);}),c.command("remove").description("Remove an installed skill").argument("[name]","Name of the skill to remove").option("-g, --global","Remove from global scope").option("--force","Skip confirmation").addHelpText("after",`
 Examples:
-  $ flow auth status`).action(async()=>{let i=await lr();process.exit(i);}),t.addCommand(o),t.command("health").description("Check the CLI configuration and connectivity").addHelpText("after",`
+  $ flow skills remove pr-review
+  $ flow skills remove pr-review -g --force`).action(async(a,l)=>{let u=await tl(a,l);process.exit(u);}),t.addCommand(c),t.command("health").description("Check the CLI configuration and connectivity").addHelpText("after",`
 Examples:
-  $ flow health`).action(async()=>{let i=await hr();process.exit(i);}),t}var $i=yr(()=>{_("tui"),render(jsx(sr,{}));});$i.parse();
+  $ flow health`).action(async()=>{let a=await Ma();process.exit(a);}),t}var hd=nl(async()=>{ne("tui"),oi("tui"),ii(),process.on("SIGINT",()=>{Ot("sigint").finally(()=>process.exit(130));}),process.on("SIGTERM",()=>{Ot("sigterm").finally(()=>process.exit(143));}),await fa(),render(jsx(ga,{}),{alternateScreen:true,exitOnCtrlC:false});});hd.parse();

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@ciandt-flow/cli",
-  "version": "1.0.5",
+  "version": "1.0.6-beta.141",
   "description": "TUI for browsing and installing Claude Code plugins from the Flow ecosystem",
   "type": "module",
   "main": "dist/index.js",
@@ -20,11 +20,9 @@
     "url": "https://github.com/CI-T-HyperX/flow-plugins-cli"
   },
   "scripts": {
-    "build": "npm run typecheck && tsup && npm run obfuscate",
-    "build:npm": "npm run typecheck && tsup",
-    "obfuscate": "javascript-obfuscator dist/index.js --output dist/index.js --options-preset medium-obfuscation --string-array true --string-array-encoding base64",
+    "build": "npm run typecheck && tsup",
     "typecheck": "tsc --noEmit",
-    "dev": "tsx --env-file=.env src/cli.tsx",
+    "dev": "NODE_ENV=development tsx --env-file=.env src/cli.tsx",
     "dev:watch": "tsup --watch & sleep 2 && node --watch dist/index.js",
     "start": "node dist/index.js",
     "test": "vitest run --coverage",
@@ -36,8 +34,7 @@
     "prepare": "husky",
     "changeset": "changeset",
     "version-packages": "changeset version",
-    "release": "npm run build && changeset publish",
-    "release:npm": "npm run build:npm && changeset publish",
+    "release:npm": "npm run build && changeset publish",
     "security-scan": "trufflehog filesystem src/ --fail --no-update",
     "prepublishOnly": "npm run security-scan"
   },
@@ -48,26 +45,33 @@
     "claude",
     "tui"
   ],
-  "author": "queryCLient",
+  "author": {
+    "name": "CI&T Flow Team",
+    "email": "flow@ciandt.com"
+  },
   "dependencies": {
-    "@tanstack/react-query": "^5.90.21",
-    "boxen": "^8.0.1",
+    "@tanstack/react-query": "5.100.6",
+    "boxen": "8.0.1",
     "chalk": "5.6.2",
-    "cli-spinners": "^3.4.0",
     "commander": "11.1.0",
     "conf": "15.1.0",
-    "dotenv": "^17.3.1",
+    "dotenv": "17.4.2",
+    "execa": "9.6.1",
     "extract-zip": "2.0.1",
-    "http-status-codes": "^2.3.0",
-    "ink": "6.8.0",
+    "http-status-codes": "2.3.0",
+    "ink": "7.0.1",
     "ink-big-text": "2.0.0",
     "ink-gradient": "4.0.0",
     "ink-spinner": "5.0.0",
-    "ky": "1.14.3",
+    "keytar": "7.9.0",
+    "ky": "2.0.2",
     "proper-lockfile": "4.1.2",
     "react": "19.2.5",
-    "react-dom": "^19.0.0",
-    "semver": "^7.7.4",
+    "react-dom": "19.2.5",
+    "semver": "7.7.4",
+    "simple-git": "3.36.0",
+    "yaml": "2.8.3",
+    "yocto-spinner": "1.1.0",
     "zustand": "5.0.12"
   },
   "devDependencies": {
@@ -79,28 +83,30 @@
     "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.0",
     "@types/semver": "^7.7.1",
-    "@vitejs/plugin-react": "^4.0.0",
-    "@vitest/coverage-v8": "^2.0.0",
-    "eslint": "^9.39.2",
+    "@vitejs/plugin-react": "^6.0.1",
+    "@vitest/coverage-v8": "^4.1.4",
+    "eslint": "^10.2.1",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-prettier": "^5.5.5",
     "husky": "^9.1.7",
     "ink-testing-library": "^4.0.0",
-    "javascript-obfuscator": "^5.4.1",
     "prettier": "^3.8.1",
     "tsup": "^8.0.0",
     "tsx": "^4.7.0",
     "typescript": "^5.3.3",
     "typescript-eslint": "^8.54.0",
-    "vitest": "^2.0.0"
+    "vitest": "^4.1.4"
   },
   "engines": {
     "node": ">=22.0.0"
   },
   "overrides": {
-    "ajv": "^6.12.6",
     "flatted": ">=3.4.2",
     "esbuild": ">=0.25.0",
-    "picomatch": ">=4.0.4"
+    "picomatch": ">=4.0.4",
+    "vite": "^8.0.0"
+  },
+  "optionalDependencies": {
+    "@esbuild/darwin-arm64": "^0.28.0"
   }
-}
+}