@ciandt-flow/cli 1.3.0 → 1.4.0-beta.164

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +3 -3
  2. package/dist/index.js +82 -80
  3. package/package.json +4 -4
package/README.md CHANGED
@@ -43,7 +43,7 @@ flow auth login [options]
43
43
  | `--client-id <id>` | Client ID |
44
44
  | `--client-secret <secret>` | Client Secret |
45
45
  | `--tenant <tenant>` | Tenant |
46
- | `--bundle <slug>` | Bundle slug to install after authentication |
46
+ | `--starter-kit <slug>` | Starter kit slug to install after authentication |
47
47
 
48
48
  When called **without options**, enters interactive mode — prompts for each field in the terminal.
49
49
  When called **with all three options**, runs non-interactively and saves credentials directly.
@@ -55,8 +55,8 @@ flow auth login
55
55
  # non-interactive mode
56
56
  flow auth login --client-id <id> --client-secret <secret> --tenant <tenant>
57
57
 
58
- # with bundle selection
59
- flow auth login --client-id <id> --client-secret <secret> --tenant <tenant> --bundle dev
58
+ # with starter kit selection
59
+ flow auth login --client-id <id> --client-secret <secret> --tenant <tenant> --starter-kit dev
60
60
  ```
61
61
 
62
62
  #### `auth logout`
package/dist/index.js CHANGED
@@ -1,114 +1,116 @@
1
1
  #!/usr/bin/env node
2
- import {Box,Text,render,useWindowSize,useApp,useInput}from'ink';import fc,{useRef,useCallback,useMemo,useEffect,useState}from'react';import {create}from'zustand';import Ll,{HTTPError}from'ky';import*as mt from'crypto';import {randomUUID}from'crypto';import*as G from'fs';import G__default,{readFileSync,existsSync,realpathSync}from'fs';import*as N from'path';import N__default,{join,relative,resolve,normalize,sep,dirname,isAbsolute,basename}from'path';import*as ge from'os';import ge__default,{homedir,tmpdir}from'os';import {execFile,exec,spawn}from'child_process';import {promisify}from'util';import*as to from'readline';import {createInterface}from'readline';import dn from'keytar';import br from'conf';import {StatusCodes}from'http-status-codes';import {jsxs,jsx,Fragment}from'react/jsx-runtime';import C from'chalk';import ic from'ink-big-text';import $c from'ink-spinner';import*as Se from'fs/promises';import {stat,rm,readdir,readFile,mkdtemp,mkdir,writeFile,cp as cp$1}from'fs/promises';import Fc from'extract-zip';import Uc from'proper-lockfile';import eo from'semver';import {execa}from'execa';import Eo from'yocto-spinner';import {Command,Option}from'commander';import {simpleGit}from'simple-git';import {parse}from'yaml';var Lo="FLOW",_="flow-skills",dr="flow-cli",Ct="internal",on="external",dt={skill:{label:"Skill",color:"cyan"},mcp:{label:"MCP",color:"yellow"},plugin:{label:"Plugin",color:"magenta"}},Ro={internal:{label:"Flow",color:"blue"},external:{label:"External",color:"white"}},mr=new Set(["internal","external"]),At={user:{label:"Global",pathHint:"~/.claude/",actionLabel:"Global (~/.claude)",description:"available in all projects on this machine"},project:{label:"Project",pathHint:".claude/ (shared)",actionLabel:"Project (.claude/)",description:"shared with the team via version control"},local:{label:"Local",pathHint:".claude/ (local only)",actionLabel:"Local (.claude/)",description:"only on your machine, not committed"}},Re=5,We=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;var Mo=new Set(["skill","mcp","plugin"]),f=create(e=>({screen:"auth",activeTab:"discover",focus:"list",selectedIndex:0,actionMenuOpen:false,notification:null,loading:false,loadingMessage:"",catalogError:null,pendingExit:false,catalogFilters:{types:new Set(Mo),origins:new Set(mr)},setScreen:t=>e({screen:t}),setActiveTab:t=>e({activeTab:t}),setFocus:t=>e({focus:t}),setSelectedIndex:t=>e({selectedIndex:t}),setActionMenuOpen:t=>e({actionMenuOpen:t}),showNotification:(t,n)=>e({notification:{message:t,type:n}}),clearNotification:()=>e({notification:null}),setLoading:(t,n="")=>e({loading:t,loadingMessage:t?n:""}),setCatalogError:t=>e({catalogError:t}),setPendingExit:t=>e({pendingExit:t}),toggleTypeFilter:t=>e(n=>{let{types:r}=n.catalogFilters;return r.size===1&&r.has(t)?{}:{catalogFilters:{...n.catalogFilters,types:new Set([t])},selectedIndex:0}}),selectAllTypes:()=>e(t=>({catalogFilters:{...t.catalogFilters,types:new Set(Mo)},selectedIndex:0})),toggleOriginFilter:t=>e(n=>{let{origins:r}=n.catalogFilters;return r.size===1&&r.has(t)?{}:{catalogFilters:{...n.catalogFilters,origins:new Set([t])},selectedIndex:0}}),selectAllOrigins:()=>e(t=>({catalogFilters:{...t.catalogFilters,origins:new Set(mr)},selectedIndex:0}))}));var sn="aes-256-gcm",il=16,_o=16,$t=class{key;constructor(t){if(t.length!==32)throw new Error(`Invalid key length: expected 32 bytes, got ${t.length}`);this.key=t;}encrypt(t){let n=mt.randomBytes(il),r=mt.createCipheriv(sn,this.key,n,{authTagLength:_o}),o=Buffer.concat([r.update(t,"utf8"),r.final()]),i=r.getAuthTag();return {iv:n.toString("hex"),authTag:i.toString("hex"),ciphertext:o.toString("hex"),algorithm:sn}}decrypt(t){if(t.algorithm!==sn)throw new Error(`Unsupported encryption algorithm: ${t.algorithm}`);let n=mt.createDecipheriv(sn,this.key,Buffer.from(t.iv,"hex"),{authTagLength:_o});return n.setAuthTag(Buffer.from(t.authTag,"hex")),Buffer.concat([n.update(Buffer.from(t.ciphertext,"hex")),n.final()]).toString("utf8")}};var sl=/Bearer\s+[A-Za-z0-9\-._~+/]+=*/g,al=/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,ll=/[A-Za-z0-9+/]{40,}={0,2}/g;function fr(e){return e.replace(sl,"Bearer ***").replace(al,"***").replace(ll,"***")}var Lt=class{context;constructor(t){this.context=t;}write(t){let n=this.context==="tui"?this.formatTui(t):this.formatCli(t);process.stderr.write(n+`
3
- `);}formatTui(t){return `[flow:${t.module}] ${t.message}`}formatCli(t){let n=String(t.timestamp.getHours()).padStart(2,"0"),r=String(t.timestamp.getMinutes()).padStart(2,"0"),o=String(t.timestamp.getSeconds()).padStart(2,"0");return `[${n}:${r}:${o}] [${t.level.toUpperCase()}] ${t.message}`}};var Rt=".claude",Oo=".flow";function Do(e,t){return N.join(ge.homedir(),Rt,"plugins","cache",_,e,t)}function gr(e){return N.join(ge.homedir(),Rt,"plugins","marketplaces",_,"plugins","native",e)}function an(){return N.join(ge.homedir(),Rt,"plugins","marketplaces",_,".claude-plugin","marketplace.json")}function Bo(){return N.join(ge.homedir(),Rt,"plugins","known_marketplaces.json")}function No(){return N.join(ge.homedir(),Rt,"plugins","marketplaces",_)}function Fo(){return N.join(ge.homedir(),Oo,"cache","install.lock")}function Uo(){return N.join(ge.homedir(),Oo,"logs","flowsetup.log")}function Mt(e){let t=e==="global"?ge.homedir():process.cwd();return N.join(t,".claude","skills")}function yr(e){let t=e==="global"?ge.homedir():process.cwd();return N.join(t,".claude","skills-lock.json")}var cl=5*1024*1024,ul=3,ln=class{filePath;constructor(){this.filePath=Uo(),this.ensureDir(),this.rotateIfNeeded();}write(t){let n=`[${t.timestamp.toISOString()}] [${t.level.toUpperCase()}] [${t.module}] ${t.message}
4
- `;try{G.appendFileSync(this.filePath,n,"utf-8");}catch{}}ensureDir(){try{let t=N.dirname(this.filePath);G.mkdirSync(t,{recursive:!0});}catch{}}rotateIfNeeded(){try{if(G.statSync(this.filePath).size>cl){let n=new Date().toISOString().replace(/[:.]/g,"-"),r=this.filePath.replace(".log",`-${n}.log`);G.renameSync(this.filePath,r),this.cleanOldBackups();}}catch{}}cleanOldBackups(){try{let t=N.dirname(this.filePath),n=N.basename(this.filePath,".log"),r=G.readdirSync(t).filter(o=>o.startsWith(n+"-")&&o.endsWith(".log")).sort().reverse();for(let o of r.slice(ul))G.unlinkSync(N.join(t,o));}catch{}}};var cn=class{write(t){process.stdout.write(t.message+`
5
- `);}};var ft={debug:0,info:1,warn:2,error:3},Ye={context:"cli",transports:[],minLevel:"warn",debugModules:null};function pl(){let e=process.env.DEBUG;if(!e)return null;let t=e.split(",").map(r=>r.trim()).filter(Boolean);for(let r of t)if(r==="flow:*")return "all";let n=new Set;for(let r of t)r.startsWith("flow:")&&n.add(r.slice(5));return n.size>0?n:null}function re(e,t){if(e==="tui"){let n=pl();Ye={context:e,transports:[new Lt("tui"),new ln],minLevel:n?"debug":"warn",debugModules:n};}else t?.silent?Ye={context:e,transports:[],minLevel:"error",debugModules:null}:t?.verbose?Ye={context:e,transports:[new Lt("cli")],minLevel:"debug",debugModules:null}:Ye={context:e,transports:[new cn],minLevel:"info",debugModules:null};}function jo(){return Ye.transports}function Ko(e,t){let{debugModules:n,minLevel:r}=Ye;return Ye.context==="tui"&&n&&n!=="all"?n.has(t)?ft[e]>=ft.debug:ft[e]>=ft.warn:ft[e]>=ft[r]}var Jo=new Map;function un(e,t,n){if(!Ko(e,t))return;let r={level:e,module:t,message:fr(n),timestamp:new Date};for(let o of jo())o.write(r);}function S(e){let t=Jo.get(e);if(t)return t;let n={debug:r=>un("debug",e,r),info:r=>un("info",e,r),warn:r=>un("warn",e,r),error:r=>un("error",e,r)};return Jo.set(e,n),n}var hr=S("encryption"),Sr="__encrypted__";function dl(e){return typeof e=="object"&&e!==null&&Sr in e&&e[Sr]===true}function wr(e){return {serialize(t){let n=JSON.stringify(t),r=e.encrypt(n),o={[Sr]:true,envelope:r};return JSON.stringify(o,null," ")},deserialize(t){let n;try{n=JSON.parse(t);}catch{return hr.warn("[encryption] Config file contains unparseable data, treating as empty"),{}}if(dl(n))try{let r=e.decrypt(n.envelope);return JSON.parse(r)}catch(r){return hr.error(`[encryption] Decryption failed: ${r instanceof Error?r.message:"unknown error"}. Config will be treated as empty. Re-authentication may be required.`),{}}return hr.info("[encryption] Detected plaintext config \u2014 will encrypt on next write"),n}}}var xr=promisify(execFile),gl=promisify(exec),gt=class{static async isAvailable(){try{return await gl("command -v security"),!0}catch{return false}}async getSecret(t,n){try{let{stdout:r}=await xr("security",["find-generic-password","-w","-a",n,"-s",t]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await xr("security",["add-generic-password","-U","-a",n,"-s",t,"-w",r]);}async deleteSecret(t,n){try{return await xr("security",["delete-generic-password","-a",n,"-s",t]),!0}catch{return false}}getStoragePath(){return "macOS Keychain (security)"}};var Vo=promisify(execFile),Ir=promisify(exec),wl=[{name:"apt",command:"sudo apt install -y libsecret-tools"},{name:"dnf",command:"sudo dnf install -y libsecret"},{name:"pacman",command:"sudo pacman -S --noconfirm libsecret"},{name:"apk",command:"sudo apk add libsecret-tools"},{name:"zypper",command:"sudo zypper install -y libsecret-tools"}],pn=S("encryption:linux-keyvault");async function xl(e,t){let n=["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"],r=0,o=setInterval(()=>{process.stderr.write(`\r${n[r++%n.length]} ${e}`);},80);try{return await t()}finally{clearInterval(o),process.stderr.write("\r\x1B[2K");}}function Il(e){let t=to.createInterface({input:process.stdin,output:process.stdout});return new Promise(n=>{t.question(e,r=>{t.close(),n(r.trim().toLowerCase());});})}var Me=class e{static async isAvailable(){try{return await Ir("command -v secret-tool"),!0}catch{return false}}static async detectPackageManager(){for(let t of wl)try{return await Ir(`command -v ${t.name}`),t}catch{}return null}static async ensureInstalled(){if(await e.isAvailable())return true;pn.info("Secure credential storage requires 'secret-tool' (libsecret). This tool allows us to store your encryption key in the OS keyring, so your credentials are protected even if someone copies the config file.");let t=await e.detectPackageManager();if(!t)return pn.warn("Could not detect a supported package manager. Please install libsecret manually."),false;let n=await Il(" ? Install secret-tool? This requires sudo. (y/N) ");if(n!=="y"&&n!=="yes")return false;try{return pn.info(`Running: ${t.command}`),await xl("Installing secret-tool...",()=>Ir(t.command)),e.isAvailable()}catch{return pn.warn("Installation failed. Falling back to derived key."),false}}async getSecret(t,n){try{let{stdout:r}=await Vo("secret-tool",["lookup","service",t,"account",n]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await new Promise((o,i)=>{let s=spawn("secret-tool",["store","--label",t,"service",t,"account",n]);s.stdin.end(r,"utf8"),s.on("close",c=>{c===0?o():i(new Error(`secret-tool exited with code ${c}`));}),s.on("error",i);});}async deleteSecret(t,n){try{return await Vo("secret-tool",["clear","service",t,"account",n]),!0}catch{return false}}getStoragePath(){return "Linux Secret Service (secret-tool)"}};var qo=S("encryption:windows-keyvault"),yt=class{static async isAvailable(){try{return await dn.getPassword("__flow_probe__","__flow_probe__"),!0}catch{return false}}async getSecret(t,n){try{return await dn.getPassword(t,n)}catch(r){let o=r instanceof Error?r.message.split(`
6
- `)[0]:"unknown error";return qo.error(`Failed to read secret from Windows Credential Manager [service="${t}", account="${n}"]: ${o}`),null}}async setSecret(t,n,r){try{await dn.setPassword(t,n,r);}catch(o){let i=o instanceof Error?o.message.split(`
7
- `)[0]:"unknown error",s=`Failed to store secret in Windows Credential Manager [service="${t}", account="${n}"]: ${i}`;throw qo.error(s),new Error(s)}}async deleteSecret(t,n){try{return await dn.deletePassword(t,n)}catch{return false}}getStoragePath(){return "Windows Credential Manager (keytar)"}};var bl=32,vl="flow-plugins-cli-fallback",vr="flow-plugins-cli-fallback",Pl={linux:"install secret-tool (e.g. sudo apt install libsecret-tools)",darwin:"ensure the Keychain is accessible (security binary must be available)",win32:"ensure Credential Manager is available (cmdkey must be in PATH)"};function El(){let e=`${ge.hostname()}${ge.userInfo().username}`;return mt.scryptSync(e,vl,bl)}function Tl(){let e=El(),t=new $t(e),n=wr(t);return new br({projectName:vr,serialize:n.serialize,deserialize:n.deserialize})}var fn=null;function mn(){return fn||(fn=Tl()),fn}var W=class{warned=false;async getSecret(t,n){return mn().get(`${t}:${n}`)??null}async setSecret(t,n,r){if(!this.warned){let o=Pl[process.platform]??"ensure the OS keyring is available";process.stderr.write(`\u26A0 Secure keyring unavailable. Credentials are stored in an encrypted file
2
+ import*as Ie from'os';import Ie__default,{homedir,tmpdir}from'os';import*as j from'path';import j__default,{join,relative,resolve,normalize,sep,dirname,isAbsolute,basename}from'path';import*as W from'fs';import W__default,{readFileSync,existsSync,realpathSync}from'fs';import xr from'keytar';import {Box,Text,render,useWindowSize,useApp,useInput}from'ink';import $c,{useRef,useCallback,useMemo,useEffect,useState}from'react';import {create}from'zustand';import Gl,{HTTPError}from'ky';import*as xt from'crypto';import {randomUUID}from'crypto';import {execFile,exec,spawn}from'child_process';import {promisify}from'util';import*as po from'readline';import {createInterface}from'readline';import Ln from'conf';import {StatusCodes}from'http-status-codes';import {jsxs,jsx,Fragment}from'react/jsx-runtime';import C from'chalk';import xc from'ink-big-text';import Vc from'ink-spinner';import*as Pe from'fs/promises';import {stat,rm,readdir,readFile,mkdtemp,mkdir,writeFile,cp}from'fs/promises';import eu from'extract-zip';import tu from'proper-lockfile';import uo from'semver';import {execa}from'execa';import Oo from'yocto-spinner';import {Command,Option}from'commander';import {simpleGit}from'simple-git';import {parse}from'yaml';var Sl=Object.defineProperty;var xe=(e,t)=>()=>(e&&(t=e(e=0)),t);var hl=(e,t)=>{for(var r in t)Sl(e,r,{get:t[r],enumerable:true});};var jo,N,hn,Mt,ur,wt,Bo,wn,Ot,Fe,rt,M=xe(()=>{jo="FLOW",N="flow-skills",hn="flow-cli",Mt="internal",ur="external",wt={skill:{label:"Skill",color:"cyan"},mcp:{label:"MCP",color:"yellow"},plugin:{label:"Plugin",color:"magenta"}},Bo={internal:{label:"Flow",color:"blue"},external:{label:"External",color:"white"}},wn=new Set(["internal","external"]),Ot={user:{label:"Global",pathHint:"~/.claude/",actionLabel:"Global (~/.claude)",description:"available in all projects on this machine"},project:{label:"Project",pathHint:".claude/ (shared)",actionLabel:"Project (.claude/)",description:"shared with the team via version control"},local:{label:"Local",pathHint:".claude/ (local only)",actionLabel:"Local (.claude/)",description:"only on your machine, not committed"}},Fe=5,rt=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;});function xn(e){return e.replace(Il,"Bearer ***").replace(bl,"***").replace(vl,"***")}var Il,bl,vl,In=xe(()=>{Il=/Bearer\s+[A-Za-z0-9\-._~+/]+=*/g,bl=/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,vl=/[A-Za-z0-9+/]{40,}={0,2}/g;});var Nt,Vo=xe(()=>{Nt=class{context;constructor(t){this.context=t;}write(t){let r=this.context==="tui"?this.formatTui(t):this.formatCli(t);process.stderr.write(r+`
3
+ `);}formatTui(t){return `[flow:${t.module}] ${t.message}`}formatCli(t){let r=String(t.timestamp.getHours()).padStart(2,"0"),n=String(t.timestamp.getMinutes()).padStart(2,"0"),o=String(t.timestamp.getSeconds()).padStart(2,"0");return `[${r}:${n}:${o}] [${t.level.toUpperCase()}] ${t.message}`}};});function zo(e,t){return j.join(Ie.homedir(),Ft,"plugins","cache",N,e,t)}function bn(e){return j.join(Ie.homedir(),Ft,"plugins","marketplaces",N,"plugins","native",e)}function dr(){return j.join(Ie.homedir(),Ft,"plugins","marketplaces",N,".claude-plugin","marketplace.json")}function qo(){return j.join(Ie.homedir(),Ft,"plugins","known_marketplaces.json")}function Wo(){return j.join(Ie.homedir(),Ft,"plugins","marketplaces",N)}function Xo(){return j.join(Ie.homedir(),Go,"cache","install.lock")}function Yo(){return j.join(Ie.homedir(),Go,"logs","flowsetup.log")}function Ut(e){let t=e==="global"?Ie.homedir():process.cwd();return j.join(t,".claude","skills")}function vn(e){let t=e==="global"?Ie.homedir():process.cwd();return j.join(t,".claude","skills-lock.json")}var Ft,Go,Ue=xe(()=>{M();Ft=".claude",Go=".flow";});var Pl,El,mr,Zo=xe(()=>{Ue();Pl=5*1024*1024,El=3,mr=class{filePath;constructor(){this.filePath=Yo(),this.ensureDir(),this.rotateIfNeeded();}write(t){let r=`[${t.timestamp.toISOString()}] [${t.level.toUpperCase()}] [${t.module}] ${t.message}
4
+ `;try{W.appendFileSync(this.filePath,r,"utf-8");}catch{}}ensureDir(){try{let t=j.dirname(this.filePath);W.mkdirSync(t,{recursive:!0});}catch{}}rotateIfNeeded(){try{if(W.statSync(this.filePath).size>Pl){let r=new Date().toISOString().replace(/[:.]/g,"-"),n=this.filePath.replace(".log",`-${r}.log`);W.renameSync(this.filePath,n),this.cleanOldBackups();}}catch{}}cleanOldBackups(){try{let t=j.dirname(this.filePath),r=j.basename(this.filePath,".log"),n=W.readdirSync(t).filter(o=>o.startsWith(r+"-")&&o.endsWith(".log")).sort().reverse();for(let o of n.slice(El))W.unlinkSync(j.join(t,o));}catch{}}};});var fr,Qo=xe(()=>{fr=class{write(t){process.stdout.write(t.message+`
5
+ `);}};});function Tl(){let e=process.env.DEBUG;if(!e)return null;let t=e.split(",").map(n=>n.trim()).filter(Boolean);for(let n of t)if(n==="flow:*")return "all";let r=new Set;for(let n of t)n.startsWith("flow:")&&r.add(n.slice(5));return r.size>0?r:null}function se(e,t){if(e==="tui"){let r=Tl();ot={context:e,transports:[new Nt("tui"),new mr],minLevel:r?"debug":"warn",debugModules:r};}else t?.silent?ot={context:e,transports:[],minLevel:"error",debugModules:null}:t?.verbose?ot={context:e,transports:[new Nt("cli")],minLevel:"debug",debugModules:null}:ot={context:e,transports:[new fr],minLevel:"info",debugModules:null};}function ei(){return ot.transports}function ti(e,t){let{debugModules:r,minLevel:n}=ot;return ot.context==="tui"&&r&&r!=="all"?r.has(t)?It[e]>=It.debug:It[e]>=It.warn:It[e]>=It[n]}var It,ot,Pn=xe(()=>{Vo();Zo();Qo();It={debug:0,info:1,warn:2,error:3},ot={context:"cli",transports:[],minLevel:"warn",debugModules:null};});function gr(e,t,r){if(!ti(e,t))return;let n={level:e,module:t,message:xn(r),timestamp:new Date};for(let o of ei())o.write(n);}function S(e){let t=ri.get(e);if(t)return t;let r={debug:n=>gr("debug",e,n),info:n=>gr("info",e,n),warn:n=>gr("warn",e,n),error:n=>gr("error",e,n)};return ri.set(e,r),r}var ri,ni=xe(()=>{In();Pn();ri=new Map;});var $=xe(()=>{ni();Pn();In();});var li={};hl(li,{WindowsKeyVaultProvider:()=>Ir});var me,Ir,_n=xe(()=>{$();me=S("encryption:windows-keyvault"),Ir=class{static async isAvailable(){try{return await xr.getPassword("__flow_probe__","__flow_probe__"),me.debug("Windows Credential Manager is available (keytar probe succeeded)"),!0}catch(t){let r=t instanceof Error?t.message.split(`
6
+ `)[0]:"unknown error";return me.debug(`Windows Credential Manager not available: ${r}`),false}}async getSecret(t,r){try{me.debug(`Looking up secret: service=${t}, account=${r}`);let n=await xr.getPassword(t,r);return me.debug(`keytar getPassword result: ${n?"found":"empty"}`),n}catch(n){let o=n instanceof Error?n.message.split(`
7
+ `)[0]:"unknown error";return me.error(`Failed to read secret from Windows Credential Manager [service="${t}", account="${r}"]: ${o}`),null}}async setSecret(t,r,n){try{me.debug(`Storing secret: service=${t}, account=${r}`),await xr.setPassword(t,r,n),me.debug("keytar setPassword succeeded");}catch(o){let i=o instanceof Error?o.message.split(`
8
+ `)[0]:"unknown error",s=`Failed to store secret in Windows Credential Manager [service="${t}", account="${r}"]: ${i}`;throw me.error(s),new Error(s)}}async deleteSecret(t,r){try{me.debug(`Deleting secret: service=${t}, account=${r}`);let n=await xr.deletePassword(t,r);return me.debug(`keytar deletePassword result: ${n}`),n}catch(n){let o=n instanceof Error?n.message.split(`
9
+ `)[0]:"unknown error";return me.debug(`Failed to delete secret from Windows Credential Manager [service="${t}", account="${r}"]: ${o}`),false}}getStoragePath(){return "Windows Credential Manager (keytar)"}};});M();var Jo=new Set(["skill","mcp","plugin"]),f=create(e=>({screen:"auth",activeTab:"discover",focus:"list",selectedIndex:0,actionMenuOpen:false,notification:null,loading:false,loadingMessage:"",catalogError:null,pendingExit:false,catalogFilters:{types:new Set(Jo),origins:new Set(wn)},setScreen:t=>e({screen:t}),setActiveTab:t=>e({activeTab:t}),setFocus:t=>e({focus:t}),setSelectedIndex:t=>e({selectedIndex:t}),setActionMenuOpen:t=>e({actionMenuOpen:t}),showNotification:(t,r)=>e({notification:{message:t,type:r}}),clearNotification:()=>e({notification:null}),setLoading:(t,r="")=>e({loading:t,loadingMessage:t?r:""}),setCatalogError:t=>e({catalogError:t}),setPendingExit:t=>e({pendingExit:t}),toggleTypeFilter:t=>e(r=>{let{types:n}=r.catalogFilters;return n.size===1&&n.has(t)?{}:{catalogFilters:{...r.catalogFilters,types:new Set([t])},selectedIndex:0}}),selectAllTypes:()=>e(t=>({catalogFilters:{...t.catalogFilters,types:new Set(Jo)},selectedIndex:0})),toggleOriginFilter:t=>e(r=>{let{origins:n}=r.catalogFilters;return n.size===1&&n.has(t)?{}:{catalogFilters:{...r.catalogFilters,origins:new Set([t])},selectedIndex:0}}),selectAllOrigins:()=>e(t=>({catalogFilters:{...t.catalogFilters,origins:new Set(wn)},selectedIndex:0}))}));var pr="aes-256-gcm",xl=16,Ho=16,Dt=class{key;constructor(t){if(t.length!==32)throw new Error(`Invalid key length: expected 32 bytes, got ${t.length}`);this.key=t;}encrypt(t){let r=xt.randomBytes(xl),n=xt.createCipheriv(pr,this.key,r,{authTagLength:Ho}),o=Buffer.concat([n.update(t,"utf8"),n.final()]),i=n.getAuthTag();return {iv:r.toString("hex"),authTag:i.toString("hex"),ciphertext:o.toString("hex"),algorithm:pr}}decrypt(t){if(t.algorithm!==pr)throw new Error(`Unsupported encryption algorithm: ${t.algorithm}`);let r=xt.createDecipheriv(pr,this.key,Buffer.from(t.iv,"hex"),{authTagLength:Ho});return r.setAuthTag(Buffer.from(t.authTag,"hex")),Buffer.concat([r.update(Buffer.from(t.ciphertext,"hex")),r.final()]).toString("utf8")}};$();var En=S("encryption"),Tn="__encrypted__";function kl(e){return typeof e=="object"&&e!==null&&Tn in e&&e[Tn]===true}function kn(e){return {serialize(t){let r=JSON.stringify(t),n=e.encrypt(r),o={[Tn]:true,envelope:n};return JSON.stringify(o,null," ")},deserialize(t){let r;try{r=JSON.parse(t);}catch{return En.warn("[encryption] Config file contains unparseable data, treating as empty"),{}}if(kl(r))try{let n=e.decrypt(r.envelope);return JSON.parse(n)}catch(n){return En.error(`[encryption] Decryption failed: ${n instanceof Error?n.message:"unknown error"}. Config will be treated as empty. Re-authentication may be required.`),{}}return En.info("[encryption] Detected plaintext config \u2014 will encrypt on next write"),r}}}$();var Cn=promisify(execFile),Al=promisify(exec),de=S("encryption:macos-keyvault"),bt=class{static async isAvailable(){try{let{stdout:t}=await Al("command -v security");return de.debug(`security binary found at: ${t.trim()}`),!0}catch{return de.debug("security binary not found in PATH"),false}}async getSecret(t,r){try{de.debug(`Looking up secret: service=${t}, account=${r}`);let{stdout:n}=await Cn("security",["find-generic-password","-w","-a",r,"-s",t]),o=n.trim();return de.debug(`security find-generic-password result: ${o?"found":"empty"}`),o||null}catch(n){let o=n;return de.debug(`security find-generic-password failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),null}}async setSecret(t,r,n){try{de.debug(`Storing secret: service=${t}, account=${r}`),await Cn("security",["add-generic-password","-U","-a",r,"-s",t,"-w",n]),de.debug("security add-generic-password succeeded");}catch(o){let i=o;throw de.error(`security add-generic-password failed: code=${i.code}, stderr=${i.stderr?.trim()}, message=${i.message}`),o}}async deleteSecret(t,r){try{return de.debug(`Deleting secret: service=${t}, account=${r}`),await Cn("security",["delete-generic-password","-a",r,"-s",t]),de.debug("security delete-generic-password succeeded"),!0}catch(n){let o=n;return de.debug(`security delete-generic-password failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),false}}getStoragePath(){return "macOS Keychain (security)"}};$();var $n=promisify(execFile),An=promisify(exec),Ml=[{name:"apt",command:"sudo apt install -y libsecret-tools"},{name:"dnf",command:"sudo dnf install -y libsecret"},{name:"pacman",command:"sudo pacman -S --noconfirm libsecret"},{name:"apk",command:"sudo apk add libsecret-tools"},{name:"zypper",command:"sudo zypper install -y libsecret-tools"}],_=S("encryption:linux-keyvault");async function Ol(e,t){let r=["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"],n=0,o=setInterval(()=>{process.stderr.write(`\r${r[n++%r.length]} ${e}`);},80);try{return await t()}finally{clearInterval(o),process.stderr.write("\r\x1B[2K");}}function Dl(e){let t=po.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(e,n=>{t.close(),r(n.trim().toLowerCase());});})}var Ke=class e{static async isAvailable(){try{let{stdout:t}=await An("command -v secret-tool");_.debug(`secret-tool found at: ${t.trim()}`);}catch{return _.debug("secret-tool binary not found in PATH"),false}try{return await $n("secret-tool",["lookup","service","__flow_connectivity_check__"]),_.debug("Secret Service D-Bus connectivity check passed"),!0}catch(t){let n=t.stderr?.trim()??"";return n.includes("org.freedesktop.secrets")?(_.debug(`Secret Service D-Bus not available: ${n}`),false):(_.debug("secret-tool is available and D-Bus service is reachable"),true)}}static async detectPackageManager(){for(let t of Ml)try{return await An(`command -v ${t.name}`),t}catch{}return null}static async ensureInstalled(){if(await e.isAvailable())return true;_.info("Secure credential storage requires 'secret-tool' (libsecret). This tool allows us to store your encryption key in the OS keyring, so your credentials are protected even if someone copies the config file.");let t=await e.detectPackageManager();if(!t)return _.warn("Could not detect a supported package manager. Please install libsecret manually."),false;let r=await Dl(" ? Install secret-tool? This requires sudo. (y/N) ");if(r!=="y"&&r!=="yes")return false;try{return _.info(`Running: ${t.command}`),await Ol("Installing secret-tool...",()=>An(t.command)),e.isAvailable()}catch{return _.warn("Installation failed. Falling back to derived key."),false}}async getSecret(t,r){try{_.debug(`Looking up secret: service=${t}, account=${r}`);let{stdout:n}=await $n("secret-tool",["lookup","service",t,"account",r]),o=n.trim();return _.debug(`secret-tool lookup result: ${o?"found":"empty"}`),o||null}catch(n){let o=n;return _.debug(`secret-tool lookup failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),null}}async setSecret(t,r,n){_.debug(`Storing secret: service=${t}, account=${r}`),_.debug(`Environment: DBUS_SESSION_BUS_ADDRESS=${process.env.DBUS_SESSION_BUS_ADDRESS??"NOT SET"}`),_.debug(`Environment: DISPLAY=${process.env.DISPLAY??"NOT SET"}, WAYLAND_DISPLAY=${process.env.WAYLAND_DISPLAY??"NOT SET"}`),_.debug(`Environment: WSL_DISTRO_NAME=${process.env.WSL_DISTRO_NAME??"NOT SET"}`),await new Promise((o,i)=>{let s=spawn("secret-tool",["store","--label",t,"service",t,"account",r]),c="";s.stderr.on("data",a=>{c+=a.toString();}),s.stdin.end(n,"utf8"),s.on("close",a=>{a===0?(_.debug("secret-tool store succeeded"),o()):(_.error(`secret-tool store failed: code=${a}, stderr=${c.trim()}`),i(new Error(`secret-tool exited with code ${a}${c?`: ${c.trim()}`:""}`)));}),s.on("error",a=>{_.error(`secret-tool store spawn error: ${a.message}`),i(a);});});}async deleteSecret(t,r){try{return _.debug(`Deleting secret: service=${t}, account=${r}`),await $n("secret-tool",["clear","service",t,"account",r]),_.debug("secret-tool clear succeeded"),!0}catch(n){let o=n;return _.debug(`secret-tool clear failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),false}}getStoragePath(){return "Linux Secret Service (secret-tool)"}};var Nl=32,Fl="flow-plugins-cli-fallback",Rn="flow-plugins-cli-fallback",Ul={linux:"install secret-tool (e.g. sudo apt install libsecret-tools)",darwin:"ensure the Keychain is accessible (security binary must be available)",win32:"ensure Credential Manager is available (cmdkey must be in PATH)"};function Kl(){let e=`${Ie.hostname()}${Ie.userInfo().username}`;return xt.scryptSync(e,Fl,Nl)}function jl(){let e=Kl(),t=new Dt(e),r=kn(t);return new Ln({projectName:Rn,serialize:r.serialize,deserialize:r.deserialize})}var Sr=null;function yr(){return Sr||(Sr=jl()),Sr}var Z=class{warned=false;async getSecret(t,r){return yr().get(`${t}:${r}`)??null}async setSecret(t,r,n){if(!this.warned){let o=Ul[process.platform]??"ensure the OS keyring is available";process.stderr.write(`\u26A0 Secure keyring unavailable. Credentials are stored in an encrypted file
8
10
  using a machine-derived key. For stronger security, ${o}.
9
- `),this.warned=true;}mn().set(`${t}:${n}`,r);}async deleteSecret(t,n){let r=mn(),o=`${t}:${n}`;return r.has(o)?(r.delete(o),true):false}getStoragePath(){return mn().path}static hasExistingData(){try{let t=new br({projectName:vr});return G.existsSync(t.path)}catch{return false}}static clearFallbackFile(){try{let t=new br({projectName:vr});G.rmSync(t.path,{force:!0});}catch{}fn=null;}};async function Pr(){if(W.hasExistingData())return new W;switch(process.platform){case "darwin":return await gt.isAvailable()?new gt:new W;case "linux":return await Me.isAvailable()?new Me:await Me.ensureInstalled()?new Me:new W;case "win32":return await yt.isAvailable()?new yt:new W;default:throw new Error(`Unsupported platform: ${process.platform}`)}}var kl=S("config:credentials"),Te="flow-plugins-cli",Er="credentials",Tr="token-cache",kr="user-info",hn=null;async function _e(){return hn||(hn=Pr()),hn}function Sn(){hn=null;}async function O(){let t=await(await _e()).getSecret(Te,Er);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function Ze(e){let{clientId:t,clientSecret:n,tenant:r}=e,o=[!t?.trim()&&"clientId",!n?.trim()&&"clientSecret",!r?.trim()&&"tenant"].filter(Boolean);if(o.length>0)throw kl.error(`missing or empty fields: ${o.join(", ")}`),new Error("Cannot save credentials: clientId, clientSecret, and tenant are required");await(await _e()).setSecret(Te,Er,JSON.stringify(e));}async function Xo(){let e=await _e();await e.deleteSecret(Te,Er),await e.deleteSecret(Te,Tr),await e.deleteSecret(Te,kr);}async function Yo(){return (await _e()).getStoragePath()}async function Zo(e){await(await _e()).setSecret(Te,Tr,JSON.stringify(e));}async function wn(){let t=await(await _e()).getSecret(Te,Tr);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function xn(e){await(await _e()).setSecret(Te,kr,JSON.stringify(e));}async function Qo(){let t=await(await _e()).getSecret(Te,kr);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function ht(){let e=await wn();return e?new Date(e.expiresAt)>new Date:false}function In(e){let t=e.split(".");if(t.length!==3)throw new Error(`Invalid JWT: expected 3 segments, got ${t.length}`);let n=t[1].replace(/-/g,"+").replace(/_/g,"/"),r=Buffer.from(n,"base64").toString("utf8");try{return JSON.parse(r)}catch{throw new Error("Invalid JWT: payload segment is not valid JSON")}}var ei=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^100\.(6[4-9]|[7-9]\d|1[0-2][0-7])\./,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^0\.0\.0\.0$/,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i];function Cl(e){if(!e.startsWith("[")||!e.endsWith("]"))return null;let n=e.slice(1,-1).match(/^::(?:ffff:)?([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i);if(!n)return null;let r=parseInt(n[1],16),o=parseInt(n[2],16);return `${r>>8&255}.${r&255}.${o>>8&255}.${o&255}`}function Al(e){if(ei.some(n=>n.test(e)))return true;let t=Cl(e);return !!(t&&ei.some(n=>n.test(t)))}function $l(e,t){let n=process.env[e]??t;if(!n)throw new Error(`Missing required environment variable: ${e}`);return n}function St(e,t){let n=$l(e,t),r;try{r=new URL(n);}catch{throw new Error(`${e} must be a valid URL. Got: "${n}"`)}let o=process.env.NODE_ENV==="development";if(!o&&r.protocol!=="https:")throw new Error(`${e} must be an HTTPS URL. Got protocol: "${r.protocol}"`);if(r.username||r.password)throw new Error(`${e} must not contain embedded credentials (user:pass@host is not allowed)`);if(!o&&Al(r.hostname))throw new Error(`${e} must not point to a private/loopback address. Got: "${r.hostname}"`);return n}var Cr=S("api:auth");function Ml(e){if(!We.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var ti={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};async function _l(e){if(e instanceof HTTPError){let t=e.response.status;Cr.error(`HTTP error during authentication [status=${t}]`);let n="";try{let r=await e.response.text(),o=JSON.parse(r);typeof o.error=="string"&&(n=o.error);}catch{}return n&&ti[n]?new Error(ti[n]):t===StatusCodes.UNAUTHORIZED||t===StatusCodes.FORBIDDEN||t===StatusCodes.INTERNAL_SERVER_ERROR?new Error("Invalid credentials"):t>=StatusCodes.BAD_REQUEST&&t<StatusCodes.INTERNAL_SERVER_ERROR?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}return e instanceof Error?(Cr.debug(`Non-HTTP error during authentication: ${e.message}`),e):(Cr.debug("Unknown error during authentication"),new Error("Authentication failed"))}async function Qe(e){let t=St("AUTH_ENGINE_URL","https://flow.ciandt.com/auth-engine-api/v2/api-key/token");Ml(e.tenant);let n;try{n=await Ll.post(t,{headers:{FlowTenant:e.tenant},json:{clientSecret:e.clientSecret}}).json();}catch(i){throw await _l(i)}let r=n.expires_at??new Date(Date.now()+(n.expires_in??3600)*1e3).toISOString();await Ze(e),await Zo({accessToken:n.access_token,expiresAt:r});let o=In(n.access_token);await xn({sub:o.sub,name:o.name,email:o.email});}var ni=S("lib:tokenProvider");async function Oe(){if(await ht()){let r=await wn();if(r)return r.accessToken}ni.debug("Token expired or missing, re-authenticating...");let t=await O();if(!t)throw new Error("Not authenticated. Run: flow auth login");W.clearFallbackFile(),Sn(),await Qe(t);let n=await wn();if(!n)throw new Error("Authentication succeeded but token was not persisted");return ni.debug("Token refreshed successfully"),n.accessToken}var bn=S("api:metrics");function ri(){return St("METRICS_COLLECTOR_URL","https://flow.ciandt.com/metrics-collector-api/")+"log-event"}function oi(e,t,n){return Ll.post(e,{json:t,headers:n})}async function Dl(e){let t=await Qo();if(t)return t;let n=In(e),r={sub:n.sub,name:n.name,email:n.email};return await xn(r),r}async function b(e,t){let n=await Oe(),r=await Dl(n),o=await O();if(!We.test(o.tenant))throw new Error(`Invalid tenant value: "${o.tenant}"`);let i={action:e,booster:dr,metadata:{...t},success:true,tenant:o.tenant,timestamp:new Date().toISOString(),user:{id:r.sub,name:r.name,email:r.email}};try{await oi(ri(),i,{Authorization:`Bearer ${n}`,FlowTenant:o.tenant}),bn.debug(`Metrics event sent: ${e}`);}catch(s){throw bn.warn(`Failed to send metrics event "${e}": ${String(s)}`),s}}async function ii(e,t,n){try{let r=n&&We.test(n)?n:"unknown",o={action:e,booster:dr,metadata:t,success:!0,tenant:r,timestamp:new Date().toISOString(),user:{id:"anonymous",name:"unknown",email:"unknown"}};await oi(ri(),o,{FlowTenant:r}),bn.debug(`Anonymous metrics event sent: ${e}`);}catch(r){bn.warn(`Failed to send anonymous metrics event "${e}": ${String(r)}`);}}var x={CLI_SESSION_STARTED:"CLI_SESSION_STARTED",CLI_AUTH_FAILED:"CLI_AUTH_FAILED",CLI_STEP_COMPLETED:"CLI_STEP_COMPLETED",CLI_KIT_DISPLAYED:"CLI_KIT_DISPLAYED",CLI_KIT_ACCEPTED:"CLI_KIT_ACCEPTED",CLI_KIT_REJECTED:"CLI_KIT_REJECTED",CLI_ONBOARDING_COMPLETED:"CLI_ONBOARDING_COMPLETED",CLI_ONBOARDING_ABANDONED:"CLI_ONBOARDING_ABANDONED",CLI_TOOL_INSTALLED:"CLI_TOOL_INSTALLED",CLI_TOOL_UNINSTALLED:"CLI_TOOL_UNINSTALLED",CLI_TOOL_UPDATED:"CLI_TOOL_UPDATED",CLI_TOOL_ENABLED:"CLI_TOOL_ENABLED",CLI_TOOL_INSTALL_FAILED:"CLI_TOOL_INSTALL_FAILED",CLI_TOOL_DISABLED:"CLI_TOOL_DISABLED",CLI_CATALOG_VIEWED:"CLI_CATALOG_VIEWED",CLI_TUI_SESSION_ENDED:"CLI_TUI_SESSION_ENDED"};var Bl={sessionStart:0,stepStart:0,currentStep:"auth",interfaceType:"cli",tuiSessionStart:0},ce={...Bl};function si(e){let t=Date.now();ce={sessionStart:t,stepStart:t,currentStep:"auth",interfaceType:e,tuiSessionStart:0};}function et(e){ce.currentStep=e,ce.stepStart=Date.now();}function $(){return {...ce}}function De(){return ce.sessionStart===0?0:Date.now()-ce.sessionStart}function tt(){return ce.stepStart===0?0:Date.now()-ce.stepStart}function ai(){ce.tuiSessionStart=Date.now();}function li(){return ce.tuiSessionStart===0?0:Date.now()-ce.tuiSessionStart}var Nl=3e3,Fl=S("abandonment");async function vn(e){let{currentStep:t,sessionStart:n}=$();if(n===0)return;let r={last_step:t,trigger:e,duration_ms:De()};try{await Promise.race([b(x.CLI_ONBOARDING_ABANDONED,r),new Promise((o,i)=>setTimeout(()=>i(new Error("abandonment timeout")),Nl))]);}catch(o){Fl.warn(`Abandonment event failed: ${String(o)}`);}}function ci(e,t){return Promise.race([e,new Promise(n=>setTimeout(n,t))])}var Ul=3e3,jl=S("session-end");async function Ot(e){let{activeTab:t,screen:n}=f.getState(),r=li(),i=[b(x.CLI_TUI_SESSION_ENDED,{duration_ms:r,active_tab:t,interface:"tui"})];n!=="main"&&i.push(vn(e));try{await ci(Promise.all(i).then(()=>{}),Ul);}catch(s){jl.warn(`Session end event failed: ${String(s)}`);}}var Vl=2e3;function pi(){let{exit:e}=useApp(),t=useRef(false),n=useRef(null),r=f(s=>s.pendingExit),o=f(s=>s.setPendingExit),i=useCallback(()=>{if(t.current){n.current&&clearTimeout(n.current),Ot("double-ctrl-c").finally(()=>e());return}t.current=true,o(true),n.current=setTimeout(()=>{t.current=false,o(false);},Vl);},[e,o]);return useInput((s,c)=>{c.ctrl&&s==="c"&&i();}),{pendingExit:r}}var Wl=16;function di({label:e,value:t,onChange:n,masked:r=false,isActive:o,error:i}){let s=useRef(t);useEffect(()=>{s.current=t;},[t]),useInput((a,l)=>{if(l.backspace){let u=s.current.slice(0,-1);s.current=u,n(u);}else if(a&&!l.ctrl&&!l.meta&&!l.escape&&!l.return&&!l.tab&&!l.upArrow&&!l.downArrow&&!l.leftArrow&&!l.rightArrow){let u=s.current+a;s.current=u,n(u);}},{isActive:o});let c=r?"\u2022".repeat(t.length):t;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{children:[jsx(Text,{color:o?"cyan":"gray",children:o?"\u25B8 ":" "}),jsx(Text,{color:o?"white":"gray",bold:o,children:e.padEnd(Wl)}),jsx(Text,{color:o?"cyan":"gray",children:c}),o&&jsx(Text,{color:"cyan",children:"\u2588"})]}),i&&jsx(Box,{paddingLeft:3,children:jsxs(Text,{color:"red",children:["\u26A0 ",i]})})]})}var ue=create(e=>({credentials:null,isAuthenticated:false,justAuthenticated:false,setCredentials:t=>e({credentials:t,isAuthenticated:true}),clearCredentials:()=>e({credentials:null,isAuthenticated:false,justAuthenticated:false}),setJustAuthenticated:t=>e({justAuthenticated:t})}));var Ql=JSON.parse(readFileSync(join(import.meta.dirname,"..","package.json"),"utf8")),Be=Ql.version;function p(e){return e==null?"":e.replace(/\x1b\[[0-9;:<=>?]*[ -/]*[@-~]/g,"").replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g,"").replace(/\x1b./g,"").replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g,"")}function V(e){process.stdout.write(C.green(` \u2713 ${p(e)}
11
+ `),this.warned=true;}yr().set(`${t}:${r}`,n);}async deleteSecret(t,r){let n=yr(),o=`${t}:${r}`;return n.has(o)?(n.delete(o),true):false}getStoragePath(){return yr().path}static hasExistingData(){try{let t=new Ln({projectName:Rn});return W.existsSync(t.path)}catch{return false}}static clearFallbackFile(){try{let t=new Ln({projectName:Rn});W.rmSync(t.path,{force:!0});}catch{}Sr=null;}};async function Mn(){if(Z.hasExistingData())return new Z;switch(process.platform){case "darwin":return await bt.isAvailable()?new bt:new Z;case "linux":return await Ke.isAvailable()?new Ke:await Ke.ensureInstalled()?new Ke:new Z;case "win32":{let{WindowsKeyVaultProvider:e}=await Promise.resolve().then(()=>(_n(),li));return await e.isAvailable()?new e:new Z}default:throw new Error(`Unsupported platform: ${process.platform}`)}}_n();$();var Bl=S("config:credentials"),Re="flow-plugins-cli",On="credentials",Dn="token-cache",Nn="user-info",br=null;async function je(){return br||(br=Mn()),br}function vr(){br=null;}async function F(){let t=await(await je()).getSecret(Re,On);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function it(e){let{clientId:t,clientSecret:r,tenant:n}=e,o=[!t?.trim()&&"clientId",!r?.trim()&&"clientSecret",!n?.trim()&&"tenant"].filter(Boolean);if(o.length>0)throw Bl.error(`missing or empty fields: ${o.join(", ")}`),new Error("Cannot save credentials: clientId, clientSecret, and tenant are required");await(await je()).setSecret(Re,On,JSON.stringify(e));}async function ci(){let e=await je();await e.deleteSecret(Re,On),await e.deleteSecret(Re,Dn),await e.deleteSecret(Re,Nn);}async function ui(){return (await je()).getStoragePath()}async function pi(e){await(await je()).setSecret(Re,Dn,JSON.stringify(e));}async function Pr(){let t=await(await je()).getSecret(Re,Dn);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function Er(e){await(await je()).setSecret(Re,Nn,JSON.stringify(e));}async function di(){let t=await(await je()).getSecret(Re,Nn);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function vt(){let e=await Pr();return e?new Date(e.expiresAt)>new Date:false}function Tr(e){let t=e.split(".");if(t.length!==3)throw new Error(`Invalid JWT: expected 3 segments, got ${t.length}`);let r=t[1].replace(/-/g,"+").replace(/_/g,"/"),n=Buffer.from(r,"base64").toString("utf8");try{return JSON.parse(n)}catch{throw new Error("Invalid JWT: payload segment is not valid JSON")}}var mi=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^100\.(6[4-9]|[7-9]\d|1[0-2][0-7])\./,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^0\.0\.0\.0$/,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i];function Jl(e){if(!e.startsWith("[")||!e.endsWith("]"))return null;let r=e.slice(1,-1).match(/^::(?:ffff:)?([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i);if(!r)return null;let n=parseInt(r[1],16),o=parseInt(r[2],16);return `${n>>8&255}.${n&255}.${o>>8&255}.${o&255}`}function Hl(e){if(mi.some(r=>r.test(e)))return true;let t=Jl(e);return !!(t&&mi.some(r=>r.test(t)))}function Vl(e,t){let r=process.env[e]??t;if(!r)throw new Error(`Missing required environment variable: ${e}`);return r}function Pt(e,t){let r=Vl(e,t),n;try{n=new URL(r);}catch{throw new Error(`${e} must be a valid URL. Got: "${r}"`)}let o=process.env.NODE_ENV==="development";if(!o&&n.protocol!=="https:")throw new Error(`${e} must be an HTTPS URL. Got protocol: "${n.protocol}"`);if(n.username||n.password)throw new Error(`${e} must not contain embedded credentials (user:pass@host is not allowed)`);if(!o&&Hl(n.hostname))throw new Error(`${e} must not point to a private/loopback address. Got: "${n.hostname}"`);return r}$();M();var Fn=S("api:auth");function ql(e){if(!rt.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var fi={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};async function Wl(e){if(e instanceof HTTPError){let t=e.response.status;Fn.error(`HTTP error during authentication [status=${t}]`);let r="";try{let n=await e.response.text(),o=JSON.parse(n);typeof o.error=="string"&&(r=o.error);}catch{}return r&&fi[r]?new Error(fi[r]):t===StatusCodes.UNAUTHORIZED||t===StatusCodes.FORBIDDEN||t===StatusCodes.INTERNAL_SERVER_ERROR?new Error("Invalid credentials"):t>=StatusCodes.BAD_REQUEST&&t<StatusCodes.INTERNAL_SERVER_ERROR?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}return e instanceof Error?(Fn.debug(`Non-HTTP error during authentication: ${e.message}`),e):(Fn.debug("Unknown error during authentication"),new Error("Authentication failed"))}async function st(e){let t=Pt("AUTH_ENGINE_URL","https://flow.ciandt.com/auth-engine-api/v2/api-key/token");ql(e.tenant);let r;try{r=await Gl.post(t,{headers:{FlowTenant:e.tenant},json:{clientSecret:e.clientSecret}}).json();}catch(i){throw await Wl(i)}let n=r.expires_at??new Date(Date.now()+(r.expires_in??3600)*1e3).toISOString();await it(e),await pi({accessToken:r.access_token,expiresAt:n});let o=Tr(r.access_token);await Er({sub:o.sub,name:o.name,email:o.email});}$();var gi=S("lib:tokenProvider");async function Be(){if(await vt()){let n=await Pr();if(n)return n.accessToken}gi.debug("Token expired or missing, re-authenticating...");let t=await F();if(!t)throw new Error("Not authenticated. Run: flow auth login");Z.clearFallbackFile(),vr(),await st(t);let r=await Pr();if(!r)throw new Error("Authentication succeeded but token was not persisted");return gi.debug("Token refreshed successfully"),r.accessToken}M();$();var kr=S("api:metrics");function yi(){return Pt("METRICS_COLLECTOR_URL","https://flow.ciandt.com/metrics-collector-api/")+"log-event"}function Si(e,t,r){return Gl.post(e,{json:t,headers:r})}async function Yl(e){let t=await di();if(t)return t;let r=Tr(e),n={sub:r.sub,name:r.name,email:r.email};return await Er(n),n}async function b(e,t){let r=await Be(),n=await Yl(r),o=await F();if(!rt.test(o.tenant))throw new Error(`Invalid tenant value: "${o.tenant}"`);let i={action:e,booster:hn,metadata:{...t},success:true,tenant:o.tenant,timestamp:new Date().toISOString(),user:{id:n.sub,name:n.name,email:n.email}};try{await Si(yi(),i,{Authorization:`Bearer ${r}`,FlowTenant:o.tenant}),kr.debug(`Metrics event sent: ${e}`);}catch(s){throw kr.warn(`Failed to send metrics event "${e}": ${String(s)}`),s}}async function hi(e,t,r){try{let n=r&&rt.test(r)?r:"unknown",o={action:e,booster:hn,metadata:t,success:!0,tenant:n,timestamp:new Date().toISOString(),user:{id:"anonymous",name:"unknown",email:"unknown"}};await Si(yi(),o,{FlowTenant:n}),kr.debug(`Anonymous metrics event sent: ${e}`);}catch(n){kr.warn(`Failed to send anonymous metrics event "${e}": ${String(n)}`);}}var x={CLI_SESSION_STARTED:"CLI_SESSION_STARTED",CLI_AUTH_FAILED:"CLI_AUTH_FAILED",CLI_STEP_COMPLETED:"CLI_STEP_COMPLETED",CLI_KIT_DISPLAYED:"CLI_KIT_DISPLAYED",CLI_KIT_ACCEPTED:"CLI_KIT_ACCEPTED",CLI_KIT_REJECTED:"CLI_KIT_REJECTED",CLI_ONBOARDING_COMPLETED:"CLI_ONBOARDING_COMPLETED",CLI_ONBOARDING_ABANDONED:"CLI_ONBOARDING_ABANDONED",CLI_TOOL_INSTALLED:"CLI_TOOL_INSTALLED",CLI_TOOL_UNINSTALLED:"CLI_TOOL_UNINSTALLED",CLI_TOOL_UPDATED:"CLI_TOOL_UPDATED",CLI_TOOL_ENABLED:"CLI_TOOL_ENABLED",CLI_TOOL_INSTALL_FAILED:"CLI_TOOL_INSTALL_FAILED",CLI_TOOL_DISABLED:"CLI_TOOL_DISABLED",CLI_CATALOG_VIEWED:"CLI_CATALOG_VIEWED",CLI_TUI_SESSION_ENDED:"CLI_TUI_SESSION_ENDED"};var Zl={sessionStart:0,stepStart:0,currentStep:"auth",interfaceType:"cli",tuiSessionStart:0},fe={...Zl};function wi(e){let t=Date.now();fe={sessionStart:t,stepStart:t,currentStep:"auth",interfaceType:e,tuiSessionStart:0};}function at(e){fe.currentStep=e,fe.stepStart=Date.now();}function L(){return {...fe}}function Je(){return fe.sessionStart===0?0:Date.now()-fe.sessionStart}function lt(){return fe.stepStart===0?0:Date.now()-fe.stepStart}function xi(){fe.tuiSessionStart=Date.now();}function Ii(){return fe.tuiSessionStart===0?0:Date.now()-fe.tuiSessionStart}$();var Ql=3e3,ec=S("abandonment");async function Cr(e){let{currentStep:t,sessionStart:r}=L();if(r===0)return;let n={last_step:t,trigger:e,duration_ms:Je()};try{await Promise.race([b(x.CLI_ONBOARDING_ABANDONED,n),new Promise((o,i)=>setTimeout(()=>i(new Error("abandonment timeout")),Ql))]);}catch(o){ec.warn(`Abandonment event failed: ${String(o)}`);}}function bi(e,t){return Promise.race([e,new Promise(r=>setTimeout(r,t))])}$();var tc=3e3,rc=S("session-end");async function jt(e){let{activeTab:t,screen:r}=f.getState(),n=Ii(),i=[b(x.CLI_TUI_SESSION_ENDED,{duration_ms:n,active_tab:t,interface:"tui"})];r!=="main"&&i.push(Cr(e));try{await bi(Promise.all(i).then(()=>{}),tc);}catch(s){rc.warn(`Session end event failed: ${String(s)}`);}}var sc=2e3;function Pi(){let{exit:e}=useApp(),t=useRef(false),r=useRef(null),n=f(s=>s.pendingExit),o=f(s=>s.setPendingExit),i=useCallback(()=>{if(t.current){r.current&&clearTimeout(r.current),jt("double-ctrl-c").finally(()=>e());return}t.current=true,o(true),r.current=setTimeout(()=>{t.current=false,o(false);},sc);},[e,o]);return useInput((s,c)=>{c.ctrl&&s==="c"&&i();}),{pendingExit:n}}var uc=16;function Ei({label:e,value:t,onChange:r,masked:n=false,isActive:o,error:i}){let s=useRef(t);useEffect(()=>{s.current=t;},[t]),useInput((a,l)=>{if(l.backspace){let u=s.current.slice(0,-1);s.current=u,r(u);}else if(a&&!l.ctrl&&!l.meta&&!l.escape&&!l.return&&!l.tab&&!l.upArrow&&!l.downArrow&&!l.leftArrow&&!l.rightArrow){let u=s.current+a;s.current=u,r(u);}},{isActive:o});let c=n?"\u2022".repeat(t.length):t;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{children:[jsx(Text,{color:o?"cyan":"gray",children:o?"\u25B8 ":" "}),jsx(Text,{color:o?"white":"gray",bold:o,children:e.padEnd(uc)}),jsx(Text,{color:o?"cyan":"gray",children:c}),o&&jsx(Text,{color:"cyan",children:"\u2588"})]}),i&&jsx(Box,{paddingLeft:3,children:jsxs(Text,{color:"red",children:["\u26A0 ",i]})})]})}var ge=create(e=>({credentials:null,isAuthenticated:false,justAuthenticated:false,setCredentials:t=>e({credentials:t,isAuthenticated:true}),clearCredentials:()=>e({credentials:null,isAuthenticated:false,justAuthenticated:false}),setJustAuthenticated:t=>e({justAuthenticated:t})}));M();var fc=JSON.parse(readFileSync(join(import.meta.dirname,"..","package.json"),"utf8")),He=fc.version;function p(e){return e==null?"":e.replace(/\x1b\[[0-9;:<=>?]*[ -/]*[@-~]/g,"").replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g,"").replace(/\x1b./g,"").replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g,"")}function q(e){process.stdout.write(C.green(` \u2713 ${p(e)}
10
12
  `));}function k(e){process.stderr.write(C.red(` \u2717 ${p(e)}
11
13
  `));}function I(e){process.stdout.write(C.cyan(` \u2139 ${p(e)}
12
- `));}function Pn(e,t){let n=t.map(c=>c.map(p)),r=[e,...n],o=e.map((c,a)=>Math.max(...r.map(l=>(l[a]??"").length))),i=o.map(c=>"\u2500".repeat(c)).join(" "),s=c=>c.map((a,l)=>a.padEnd(o[l])).join(" ");process.stdout.write(`
14
+ `));}function $r(e,t){let r=t.map(c=>c.map(p)),n=[e,...r],o=e.map((c,a)=>Math.max(...n.map(l=>(l[a]??"").length))),i=o.map(c=>"\u2500".repeat(c)).join(" "),s=c=>c.map((a,l)=>a.padEnd(o[l])).join(" ");process.stdout.write(`
13
15
  `),process.stdout.write(` ${C.bold(s(e))}
14
16
  `),process.stdout.write(` ${C.dim(i)}
15
- `);for(let c of n)process.stdout.write(` ${s(c)}
17
+ `);for(let c of r)process.stdout.write(` ${s(c)}
16
18
  `);process.stdout.write(`
17
- `);}function wt(e){process.stdout.write(JSON.stringify(e,null,2)+`
18
- `);}function X(e){process.stdout.write(JSON.stringify(e)+`
19
- `);}function oe(e){process.stderr.write(JSON.stringify(e)+`
20
- `);}function D(e){return e instanceof Error?e.message:String(e)}function En(e){let t=new Date(e);return isNaN(t.getTime())?"\u2014":new Intl.DateTimeFormat("en-US",{dateStyle:"short"}).format(t)}function nc(e){if(!(e instanceof Error))return "unknown";let t=e.message.toLowerCase();return t.includes("401")||t.includes("unauthorized")?"invalid_credentials":t.includes("403")||t.includes("forbidden")?"forbidden":t.includes("timeout")||t.includes("timed out")?"timeout":t.includes("network")||t.includes("econnrefused")||t.includes("fetch")?"network_error":"unknown"}var he=["clientId","clientSecret","tenant"],rc={clientId:"Client ID",clientSecret:"Client Secret",tenant:"Tenant"};function mi(){let[e,t]=useState({clientId:"",clientSecret:"",tenant:""}),[n,r]=useState("clientId"),[o,i]=useState({}),[s,c]=useState(null),[a,l]=useState(false),u=useRef(0),{setCredentials:g,setJustAuthenticated:v}=ue(),{setFocus:d}=f();useInput((h,T)=>{if(!a){if(T.shift&&T.tab){let y=he.indexOf(n);y>0&&r(he[y-1]);}else if(T.tab){let y=he.indexOf(n);y<he.length-1&&r(he[y+1]);}else if(T.return)if(n==="tenant")E();else {let y=he.indexOf(n);r(he[y+1]);}}},{isActive:true});let E=async()=>{let h={};for(let T of he)e[T].trim()||(h[T]="This field is required");if(Object.keys(h).length>0){i(h);let T=he.find(y=>h[y]);T&&r(T);return}l(true),c(null),u.current+=1;try{await Qe({clientId:e.clientId.trim(),clientSecret:e.clientSecret.trim(),tenant:e.tenant.trim()});let{clientSecret:T,...y}=e;g(y),v(!0),f.getState().setScreen("bundleSetup"),d("bundleList"),b(x.CLI_SESSION_STARTED,{cli_version:Be,os:process.platform,node_version:process.version,duration_ms:De(),interface:"tui"}).catch(()=>{});}catch(T){let y=T instanceof Error?T.message:"Authentication failed";c(y),ii(x.CLI_AUTH_FAILED,{error_code:nc(T),attempt:u.current},e.tenant.trim()).catch(()=>{});}finally{l(false),t(T=>({...T,clientSecret:""}));}},m=h=>T=>{t(y=>({...y,[h]:T})),o[h]&&i(y=>({...y,[h]:void 0}));};return jsxs(Box,{flexDirection:"column",padding:2,children:[jsx(Box,{marginBottom:1,children:jsxs(Text,{bold:true,color:"cyan",children:[Lo," \u2014 Initial Setup"]})}),jsxs(Box,{marginBottom:1,flexDirection:"column",children:[jsx(Text,{dimColor:true,children:"The data collected during setup is used solely to improve"}),jsx(Text,{dimColor:true,children:"Flow's internal tools and will not be shared externally."})]}),jsx(Box,{flexDirection:"column",children:he.map(h=>jsx(Box,{marginBottom:1,children:jsx(di,{label:rc[h],value:e[h],onChange:m(h),masked:h==="clientSecret",isActive:n===h&&!a,error:o[h]})},h))}),a&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"cyan",children:"Authenticating..."})}),s&&jsx(Box,{marginTop:1,children:jsxs(Text,{color:"red",children:["\u26A0 ",p(s)]})}),jsx(Box,{marginTop:1,children:jsx(Text,{dimColor:true,children:"Tab next field \xB7 Enter confirm"})})]})}function kn(){return jsxs(Box,{flexDirection:"column",alignItems:"center",children:[jsx(ic,{text:"FLOW",font:"block",colors:["white","white"]}),jsx(Box,{marginTop:-1,marginBottom:1,children:jsxs(Text,{dimColor:true,children:["Marketplace \xB7 v",Be]})})]})}var Lr={discover:"Discover",installed:"Installed"},sc=Object.keys(Lr);function wi(){let e=f(t=>t.activeTab);return jsx(Box,{paddingX:1,paddingBottom:1,children:sc.map(t=>jsx(Box,{marginRight:1,children:t===e?jsx(Text,{bold:true,inverse:true,children:` ${Lr[t]} `}):jsx(Text,{dimColor:true,children:` ${Lr[t]} `})},t))})}var Y=create(e=>({query:"",cursorPosition:0,setQuery:t=>e({query:t}),setCursorPosition:t=>e({cursorPosition:t}),resetQuery:()=>e({query:"",cursorPosition:0})}));function Ii(){let e=f(s=>s.focus),t=Y(s=>s.query),n=Y(s=>s.cursorPosition),r=e==="search",o=t.slice(0,n),i=t.slice(n);return jsxs(Box,{borderStyle:"single",borderTop:false,borderBottom:true,borderLeft:false,borderRight:false,paddingX:1,marginX:1,marginBottom:1,children:[jsx(Text,{color:r?"cyan":"gray",children:"\u{1F50D} "}),r?jsxs(Fragment,{children:[jsx(Text,{color:"white",children:o}),jsx(Text,{inverse:true,children:i[0]??" "}),jsx(Text,{color:"white",children:i.slice(1)})]}):jsx(Text,{dimColor:true,children:t||"Search..."})]})}var uc=["skill","mcp","plugin"].map((e,t)=>({key:String(t+2),type:e,...dt[e]})),pc=["internal","external"].map((e,t)=>({key:String(t+6),origin:e,...Ro[e]}));function bi(){let e=f(r=>r.catalogFilters),t=e.types.has("skill")&&e.types.has("mcp")&&e.types.has("plugin"),n=e.origins.has("internal")&&e.origins.has("external");return jsxs(Box,{paddingX:1,paddingBottom:1,gap:1,children:[jsx(Text,{bold:true,children:"Type:"}),jsxs(Box,{gap:0,children:[jsx(Text,{dimColor:true,children:"[1] "}),jsxs(Text,{color:t?"green":void 0,dimColor:!t,children:[t?"\u25C9":"\u25CB"," All"]})]}),uc.map(r=>{let o=!t&&e.types.has(r.type);return jsxs(Box,{gap:0,children:[jsxs(Text,{dimColor:true,children:["[",r.key,"] "]}),jsxs(Text,{color:o?r.color:void 0,dimColor:!o,children:[o?"\u25C9":"\u25CB"," ",r.label]})]},r.key)}),jsx(Box,{marginLeft:2,children:jsx(Text,{bold:true,children:"|"})}),jsx(Box,{marginLeft:2,children:jsx(Text,{bold:true,children:"Origin:"})}),jsxs(Box,{gap:0,children:[jsx(Text,{dimColor:true,children:"[5] "}),jsxs(Text,{color:n?"green":void 0,dimColor:!n,children:[n?"\u25C9":"\u25CB"," All"]})]}),pc.map(r=>{let o=!n&&e.origins.has(r.origin);return jsxs(Box,{gap:0,children:[jsxs(Text,{dimColor:true,children:["[",r.key,"] "]}),jsxs(Text,{color:o?r.color:void 0,dimColor:!o,children:[o?"\u25C9":"\u25CB"," ",r.label]})]},r.key)})]})}function vi({type:e}){let{label:t,color:n}=dt[e];return jsx(Text,{color:n,children:t})}function Ti({origin:e}){return e===Ct?jsx(Text,{color:"blue",children:"[Flow]"}):jsx(Text,{color:"white",children:"[External]"})}var An=fc.memo(function({item:t,isSelected:n}){let r=t.status==="disabled"?"yellow":"green";return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:n?"cyan":"gray",children:n?"\u203A ":"\u25CB "}),jsx(Text,{bold:n,color:n?"cyan":"white",children:t.name}),t.type&&jsxs(Text,{children:[" ",jsx(vi,{type:t.type})]}),t.origin&&jsxs(Text,{children:[" ",jsx(Ti,{origin:t.origin})]}),jsxs(Text,{dimColor:true,children:[t.authorName?` \xB7 ${t.authorName}`:"",t.version?` \xB7 v${t.version}`:" \xB7 n/a"]}),t.status&&jsxs(Text,{color:r,children:[" [",t.status,"]"]}),t.updateAvailable&&jsx(Text,{color:"yellow",children:" [\u2191 update available]"}),t.installedAt&&jsxs(Text,{dimColor:true,children:[" \xB7 ",En(t.installedAt)]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:t.description})})]})});function It({message:e}){return jsx(Box,{paddingX:2,paddingY:1,children:jsx(Text,{dimColor:true,children:e??"No items found."})})}function Ai({items:e,emptyMessage:t}){let n=f(a=>a.selectedIndex);if(e.length===0)return jsx(It,{message:t});let r=Math.max(0,n-Math.floor(Re/2)),o=Math.min(e.length,r+Re);o===e.length&&(r=Math.max(0,o-Re));let i=e.slice(r,o),s=r,c=e.length-o;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:s>0?`\u2191 ${s} more above`:" "})}),i.map((a,l)=>jsx(An,{item:a,isSelected:r+l===n},a.name)),jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:c>0?`\u2193 ${c} more below`:" "})})]})}function Ri({label:e,pathHint:t}){return jsxs(Box,{paddingBottom:1,children:[jsx(Text,{bold:true,color:"blueBright",children:e}),jsxs(Text,{dimColor:true,children:[" ",t]})]})}function _i({groups:e,emptyMessage:t}){let n=f(d=>d.selectedIndex),r=[],o=0;for(let d of e){r.push({kind:"header",label:d.label,pathHint:d.pathHint,key:`h-${d.scope}`});for(let E of d.items)r.push({kind:"item",item:E,itemIndex:o,key:`i-${d.scope}-${E.name}`}),o++;}if(o===0)return jsx(It,{message:t});let s=r.findIndex(d=>d.kind==="item"&&d.itemIndex===n),c=s>=0?s:0,a=Math.max(0,c-Math.floor(Re/2)),l=Math.min(r.length,a+Re);l===r.length&&(a=Math.max(0,l-Re));let u=r.slice(a,l),g=a,v=r.length-l;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:g>0?`\u2191 ${g} more above`:" "})}),u.map(d=>d.kind==="header"?jsx(Ri,{label:d.label,pathHint:d.pathHint},d.key):jsx(An,{item:d.item,isSelected:d.itemIndex===n},d.key)),jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:v>0?`\u2193 ${v} more below`:" "})})]})}var Ic={discover:"Discover",installed:"Installed"};function Di({items:e,tabId:t,emptyMessage:n,groups:r}){return jsxs(Box,{flexDirection:"column",children:[jsx(Ii,{}),jsx(bi,{}),jsxs(Box,{paddingX:1,marginTop:1,children:[jsx(Text,{bold:true,children:Ic[t]}),jsxs(Text,{dimColor:true,children:[" (",e.length,")"]})]}),r&&r.length>0?jsx(_i,{groups:r,emptyMessage:n}):jsx(Ai,{items:e,emptyMessage:n})]})}function Bi({filteredItems:e,emptyMessage:t,groups:n}){let r=f(o=>o.activeTab);return jsx(Box,{flexDirection:"column",flexGrow:1,children:r==="discover"?jsx(Di,{items:e,tabId:"discover",emptyMessage:t},"discover"):jsx(Di,{items:e,tabId:"installed",emptyMessage:t,groups:n},"installed")})}var Pc={tabs:"\u2190\u2192: switch tab | \u2193: navigate | Enter: select | Ctrl+C Ctrl+C: quit",list:"\u2191\u2193: navigate | Enter: select | Type: 1=All 2=Skill 3=MCP 4=Plugin | Origin: 5=All 6=Flow 7=External | \u2190\u2192/Tab: tabs | Ctrl+C\xD72: quit",search:"Type to filter | \u2193/Esc: exit search | Enter: confirm",actionMenu:"\u2191\u2193: navigate options | Enter: confirm | Esc: close menu",auth:"Tab: next field | Enter: confirm | Ctrl+C Ctrl+C: quit",bundleList:"\u2191\u2193: navigate | Enter: select Starter Kit | Esc: skip",bundleDetail:"\u2191\u2193: navigate | Enter: confirm & install | Esc: back",installProgress:"\u2191\u2193: navigate | Enter: select"};function $n(){let e=f(t=>t.focus);return jsx(Box,{borderStyle:"single",borderTop:true,borderBottom:false,borderLeft:false,borderRight:false,children:jsx(Text,{dimColor:true,children:Pc[e]})})}function Fi({message:e,type:t}){return e?jsx(Box,{paddingX:1,children:jsxs(Text,{color:t==="success"?"green":t==="info"?"cyan":"red",children:[t==="success"?"\u2713":t==="info"?"(i)":"\u2717"," ",p(e)]})}):null}function Ln({message:e}){return jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx($c,{type:"dots"})}),jsxs(Text,{children:[" ",e]})]})}function Rn({message:e,onRetry:t,onBack:n}){return useInput((r,o)=>{r==="r"&&o.ctrl&&t?t():o.escape&&n&&n();}),jsxs(Box,{flexDirection:"column",paddingX:2,paddingY:1,children:[jsxs(Text,{color:"red",children:["\u2717 ",e]}),t&&jsx(Text,{dimColor:true,children:"Press Ctrl+R to retry"}),n&&jsx(Text,{dimColor:true,children:"Press Escape to go back"})]})}function at({itemName:e,actions:t,descriptions:n,onAction:r,onClose:o}){let i=f(a=>a.focus),[s,c]=useState(0);return useInput((a,l)=>{l.upArrow?c(u=>u>0?u-1:u):l.downArrow?c(u=>u<t.length-1?u+1:u):l.return?r(t[s]):l.escape&&o();},{isActive:i==="actionMenu"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsx(Box,{flexDirection:"column",marginTop:1,children:t.map((a,l)=>jsxs(Box,{children:[jsxs(Text,{bold:l===s,color:l===s?"cyan":void 0,children:[l===s?"\u203A ":" ",a]}),n?.[a]&&jsxs(Text,{dimColor:true,children:[" \u2014 ",n[a]]})]},l))})]})}var Ur=Object.entries(At),Gi=[...Ur.map(([,e])=>e.actionLabel),"Cancel"],zi=Object.fromEntries(Ur.map(([,e])=>[e.actionLabel,e.description]));function qi(e){let t=Ur.find(([,n])=>n.actionLabel===e);return t?t[0]:null}function Xi({itemName:e,onInstall:t,onClose:n}){let[r,o]=useState(false),i=useCallback(l=>{let u=qi(l);u?t(u):o(false);},[t]),s=useCallback(()=>{o(false);},[]),c=useCallback(l=>{l==="Install"?o(true):n();},[n]);return r?jsx(at,{itemName:`${e} \u2014 Choose scope`,actions:Gi,descriptions:zi,onAction:i,onClose:s}):jsx(at,{itemName:e,actions:["Install","Cancel"],onAction:c,onClose:n})}function _n({activeFocus:e,onConfirm:t}){let[n,r]=useState("idle"),o=f(i=>i.focus);return useInput((i,s)=>{s.escape||i==="n"?r("idle"):i==="y"&&t();},{isActive:n==="confirming"&&o===e}),{isConfirming:n==="confirming",requestConfirm:()=>r("confirming"),cancelConfirm:()=>r("idle")}}function Qi({itemName:e,itemScope:t,itemStatus:n,updateAvailable:r,catalogVersion:o,onUninstall:i,onToggleStatus:s,onUpdate:c,onClose:a}){let{isConfirming:l,requestConfirm:u}=_n({activeFocus:"actionMenu",onConfirm:()=>i(t)});if(l)return jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Uninstall "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]});let g=n==="enabled"?"Disable":"Enable",v=o&&p(o),d=v?`Update to v${v}`:"Update";return jsx(at,{itemName:e,actions:r?["Uninstall",g,d,"Cancel"]:["Uninstall",g,"Cancel"],onAction:h=>{h==="Uninstall"?u():h===g?s(t):h.startsWith("Update")?c?.():a();},onClose:a})}function ns({itemName:e,itemScope:t,onUninstall:n,onClose:r}){let{isConfirming:o,requestConfirm:i}=_n({activeFocus:"actionMenu",onConfirm:()=>n(t)});return o?jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Remove MCP "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]}):jsx(at,{itemName:e,actions:["Uninstall","Cancel"],onAction:a=>{a==="Uninstall"?i():r();},onClose:r})}async function rs(e,t){let n=N.resolve(t);await Se.mkdir(n,{recursive:true});let r=N.join(N.dirname(n),`${randomUUID()}.zip`);try{await Se.writeFile(r,e),await Fc(r,{dir:n,onEntry(o){if((o.externalFileAttributes>>16&61440)===40960)throw new Error(`Zip Slip (symlink): entry "${o.fileName}" is a symbolic link and was rejected`);let s=N.resolve(n,o.fileName);if(!s.startsWith(n+N.sep)&&s!==n)throw new Error(`Zip Slip detected: entry "${o.fileName}" would escape target directory`)}});try{let o=realpathSync(n);if(!o.startsWith(N.resolve(N.dirname(n))))throw new Error(`Zip Slip (post-extract): resolved path "${o}" is outside expected parent`)}catch(o){if(o.code!=="ENOENT")throw o}}finally{try{await Se.unlink(r);}catch{}}}async function Kr(e){await Se.rm(e,{recursive:true,force:true});}async function Ue(){let e=Fo();await Se.mkdir(N.dirname(e),{recursive:true});try{await Se.writeFile(e,"",{flag:"wx"});}catch(n){if(n.code!=="EEXIST")throw n}return await Uc.lock(e,{stale:1e4,retries:{retries:2,minTimeout:500,maxTimeout:500}})}var Kc={user:"global",project:"project",local:"local"};function Bn(e){return e?Kc[e]:"global"}var we=class extends Error{constructor(n,r){super(`${n} v${r} is already installed. Use --force to reinstall.`);this.pluginName=n;this.version=r;this.name="AlreadyInstalledError";}pluginName;version},je=class extends Error{constructor(n,r){super(`${n} is already up to date (v${r})`);this.pluginName=n;this.version=r;this.name="AlreadyUpToDateError";}pluginName;version};function Ht(){return Ll.create({prefix:St("PROMPT_MANAGER_URL","https://flow.ciandt.com/prompt-manager-api/"),hooks:{beforeRequest:[async({request:e})=>{let t=await Oe();e.headers.set("Authorization",`Bearer ${t}`);let n=await O();n?.tenant&&We.test(n.tenant)&&e.headers.set("FlowTenant",n.tenant);}]}})}var Hc=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function os(e){if(!e||!Hc.test(e))throw new Error(`Invalid plugin name: "${e}". Must be 1-64 chars, lowercase alphanumeric and hyphens only.`)}async function xe(){try{let{plugins:e}=await Ht().get("v1/plugins/catalog").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching plugin catalog"):new Error(`Failed to fetch plugin catalog: ${e.message}`):e}}async function vt(e){os(e);try{return await Ht().get(`v1/plugins/${e}/manifest`).json()}catch(t){throw t instanceof Error?t.message.includes("404")?new Error(`Plugin '${e}' not found in catalog`):t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to fetch plugin manifest: ${t.message}`):t}}async function is(e){os(e);try{let t=await Ht().get(`v1/plugins/${e}/archive`);return Buffer.from(await t.arrayBuffer())}catch(t){throw t instanceof Error?t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to download plugin: ${t.message}`):t}}async function Nn(){try{let{profiles:e}=await Ht().get("v1/plugins/profiles").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching starter kits"):new Error(`Failed to fetch starter kits: ${e.message}`):e}}var Vc=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/,Gc=/^[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9]+(\.[a-zA-Z0-9]+)*)?$/;function Fn(e){if(!Vc.test(e))throw new Error(`Invalid plugin name from manifest: "${e}". Plugin names must be lowercase alphanumeric and hyphens (1-64 chars).`)}function zc(e){if(!Gc.test(e))throw new Error(`Invalid plugin version from manifest: "${e}". Versions must follow semver format (e.g. 1.0.0 or 1.0.0-beta.1).`)}var Ke=S("installer");function qc(e,t){let n=`${e}@${_}`,o=Ce().plugins[n];if(o&&!t)throw new we(e,o[0].version??"unknown");return {pluginKey:n,alreadyInstalled:o}}async function Wc(e,t,n){n&&await Kr(t);try{Ke.debug(`[${t}] Extracting archive...`),await rs(e,t);}catch(r){throw await Kr(t),r}}function Xc(e,t,n,r,o){let i=Ce(),s={scope:r,installPath:t,version:n,installedAt:new Date().toISOString(),origin:o},c=i.plugins[e]??[];i.plugins[e]=[...c.filter(a=>a.scope!==r),s],lt(i),Jr(e,true,r);}async function Yc(e,t,n,r,o){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"plugin",source:o,scope:r,version:t,duration_ms:n,interface:$().interfaceType});}catch(i){Ke.warn(`Failed to send install metrics: ${String(i)}`);}}async function Zc(e,t,n){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"plugin",source:n,error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:$().interfaceType});}catch(r){Ke.warn(`Failed to send install-failed metrics: ${String(r)}`);}}async function Ie(e,t={}){let n=Date.now(),r=null;try{Ke.debug(`[${e}] Acquiring lock...`),r=await Ue();let{pluginKey:o,alreadyInstalled:i}=qc(e,t.force);Ke.debug(`[${e}] Fetching manifest...`);let s=await vt(e);Fn(s.name),zc(s.version),Ke.debug(`[${e}] Downloading archive...`);let c=await is(e),a=t.scope??"user",l=Do(s.name,s.version);await Wc(c,l,!!i&&!!t.force),Xc(o,l,s.version,a,"internal"),ss(s,l);let u=Date.now()-n;Ke.debug(`[${e}] Installed successfully in ${u}ms`);let g={name:s.name,version:s.version,path:l,duration_ms:u};return t.skipMetrics||await Yc(s.name,s.version,u,Bn(a),"internal"),g}catch(o){throw await Zc(e,o,"internal"),Ke.error(`[${e}] Installation failed: ${o instanceof Error?o.message:String(o)}`),o}finally{r&&await r();}}function Qc(){return {$schema:"https://anthropic.com/claude-code/marketplace.schema.json",name:_,description:"Flow Skills marketplace",owner:{name:"Flow Team",email:"flow@ciandt.com"},plugins:[]}}function cs(){let e=an();if(!G__default.existsSync(e))return null;try{return JSON.parse(G__default.readFileSync(e,"utf-8"))}catch{return null}}function eu(){let e=cs();if(e)return e;let t=Qc(),n=an();return G__default.mkdirSync(N__default.dirname(n),{recursive:true}),Hr(t),t}function Hr(e){let t=an(),n=`${t}.${randomUUID()}.tmp`;G__default.writeFileSync(n,JSON.stringify(e,null,2),"utf-8"),G__default.renameSync(n,t);}function tu(){let e=Bo(),t={};try{G__default.existsSync(e)&&(t=JSON.parse(G__default.readFileSync(e,"utf-8")));}catch{t={};}if(t[_])return;t[_]={source:{source:"github",repo:"CI-T-HyperX/flow-skills"},installLocation:No(),lastUpdated:new Date().toISOString()};let n=`${e}.${randomUUID()}.tmp`;G__default.writeFileSync(n,JSON.stringify(t,null,2),"utf-8"),G__default.renameSync(n,e);}function ss(e,t){Fn(e.name),tu();let n=gr(e.name);G__default.mkdirSync(N__default.dirname(n),{recursive:true});try{G__default.lstatSync(n),G__default.rmSync(n,{recursive:!0,force:!0});}catch{}G__default.symlinkSync(t,n);let r=eu();r.plugins.some(i=>i.name===e.name)||(r.plugins.push({name:e.name,description:e.description,version:e.version,author:e.author,source:`./plugins/native/${e.name}`,category:e.category}),Hr(r));}function Vr(e){Fn(e);let t=gr(e);try{G__default.rmSync(t,{recursive:!0,force:!0});}catch{}let n=cs();if(!n)return;let r=n.plugins.length;n.plugins=n.plugins.filter(o=>o.name!==e),n.plugins.length!==r&&Hr(n);}var ru=S("mcpConfigReader"),ou=500,iu=512;function su(){return N__default.join(ge__default.homedir(),".claude.json")}function au(){return N__default.join(process.cwd(),".mcp.json")}function ps(e){if(!G__default.existsSync(e))return null;try{return JSON.parse(G__default.readFileSync(e,"utf-8"))}catch{return ru.debug(`[mcpConfigReader] Failed to parse ${e}`),null}}function Vt(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function Gr(e){if(!Vt(e))return {};let t=e.mcpServers;return Vt(t)?t:{}}function zr(e,t){return Object.keys(e).slice(0,ou).map(r=>({name:p(r.slice(0,iu)),marketplace:"",version:void 0,installedAt:"",installPath:"",scope:t,description:void 0,author:void 0,status:"enabled",type:"mcp"}))}function ms(){let e=[],t=su(),n=ps(t);if(Vt(n)){let c=n,a=Gr(c);e.push(...zr(a,"user"));let l=process.cwd();if(Vt(c.projects)){let u=c.projects[l];if(Vt(u)){let g=Gr(u);e.push(...zr(g,"local"));}}}let r=au(),o=ps(r),i=Gr(o);e.push(...zr(i,"project"));let s=new Map;for(let c of e){let a=`${c.name}@${c.scope}`;s.has(a)||s.set(a,c);}return [...s.values()]}var se=S("storage");async function cu(e,t){try{await b(x.CLI_TOOL_UNINSTALLED,{tool_id:e,tool_type:"plugin",source:t,interface:$().interfaceType});}catch(n){se.warn(`Failed to send uninstall metrics: ${String(n)}`);}}function uu(e,t,n){let r=t==="enabled"?x.CLI_TOOL_ENABLED:x.CLI_TOOL_DISABLED;b(r,{tool_id:e,source:n,interface:$().interfaceType}).catch(o=>se.warn(`Failed to send ${t} metrics: ${String(o)}`));}function gs(){return N__default.join(ge__default.homedir(),".claude","plugins","installed_plugins.json")}function pu(){return N__default.join(ge__default.homedir(),".claude","plugins")}function fs(e){let t=N__default.resolve(e),n=N__default.resolve(pu()),r=N__default.resolve(N__default.join(process.cwd(),".claude","plugins")),o=t.startsWith(n+N__default.sep)||t===n,i=t.startsWith(r+N__default.sep)||t===r;if(!o&&!i)throw new Error(`Security error: installPath '${e}' is outside the plugins directory`)}function ys(e="user"){return e==="local"?N__default.join(process.cwd(),".claude","settings.local.json"):e==="project"?N__default.join(process.cwd(),".claude","settings.json"):N__default.join(ge__default.homedir(),".claude","settings.json")}function Ce(){let e=gs();if(!G__default.existsSync(e))return {version:2,plugins:{}};try{return JSON.parse(G__default.readFileSync(e,"utf-8"))}catch{return {version:2,plugins:{}}}}function du(e){let t=e?.code;return t==="EACCES"||t==="EPERM"}function hs(e,t){try{G__default.mkdirSync(N__default.dirname(e),{recursive:!0});let n=`${e}.${randomUUID()}.tmp`;G__default.writeFileSync(n,JSON.stringify(t,null,2),"utf-8"),G__default.renameSync(n,e);}catch(n){throw du(n)?new Error(`Permission denied: cannot write to '${e}'. Check your file system permissions.`):n}}function lt(e){hs(gs(),e);}function Gt(e){let t=e.lastIndexOf("@");return t===-1?{name:e,marketplace:""}:{name:e.slice(0,t),marketplace:e.slice(t+1)}}function mu(e,t){let n=N__default.join(e,".claude-plugin"),r=N__default.join(n,"plugin.json");if(G__default.existsSync(r))try{return JSON.parse(G__default.readFileSync(r,"utf-8"))}catch{return null}let o=N__default.join(n,"marketplace.json");if(G__default.existsSync(o))try{let i=JSON.parse(G__default.readFileSync(o,"utf-8"));return {description:i.plugins?.find(c=>c.name===t)?.description,author:i.owner}}catch{return null}return null}function Yr(e="user"){let t=ys(e);if(!G__default.existsSync(t))return {};try{return JSON.parse(G__default.readFileSync(t,"utf-8"))}catch{return {}}}function Ss(e,t="user"){hs(ys(t),e);}function fu(e,t){let{name:n,marketplace:r}=Gt(e),o;if(r?(o=`${n}@${r}`,t[o]||(o=void 0)):o=Object.keys(t).filter(s=>Gt(s).name===n)[0],!o)throw se.error(`[${n}] Plugin is not installed`),new Error(`Plugin '${n}' is not installed`);return {key:o,name:n}}function gu(e,t){let{name:n,marketplace:r}=Gt(e),o;return r?(o=`${n}@${r}`,t[o]||(o=void 0)):o=Object.keys(t).filter(s=>Gt(s).name===n)[0],o?{key:o,name:n}:null}function qr(e="user"){return Yr(e).enabledPlugins??{}}function Wr(e,t="user"){let n=Yr(t),r=n.enabledPlugins;if(!r||!(e in r))return;let{[e]:o,...i}=r;n.enabledPlugins=i,Ss(n,t);}function Jr(e,t,n="user"){let r=Yr(n),o=r.enabledPlugins??{};r.enabledPlugins={...o,[e]:t},Ss(r,n);}function yu(e){let t=new Map;for(let n of e){let r=t.get(n.scope);(!r||n.installedAt>r.installedAt)&&t.set(n.scope,n);}return [...t.values()]}function be(){let e=Ce(),t=qr(),n=qr("project"),r=qr("local"),o={project:n,local:r},i=Object.entries(e.plugins).flatMap(([l,u])=>{let{name:g,marketplace:v}=Gt(l),d=u.map(m=>m.scope==="managed"?{...m,scope:"user"}:m);return yu(d).map(m=>{let h=mu(m.installPath,g),y=(o[m.scope]??t)[l];return {name:g,marketplace:v,version:m.version&&m.version!=="unknown"?m.version:void 0,installedAt:m.installedAt,installPath:m.installPath,scope:m.scope,description:h?.description,author:h?.author,status:y===false?"disabled":"enabled"}})}),s=ms(),c=new Set(i.map(l=>`${l.name}@${l.scope}`)),a=s.filter(l=>!c.has(`${l.name}@${l.scope}`));return [...i,...a]}async function Un(e,t){se.debug(`[${e}] Acquiring lock to uninstall`);let n=await Ue();try{let r=Ce(),o=gu(e,r.plugins);if(!o)throw new Error(`Plugin '${e}' is not in installed_plugins.json. If this is an MCP server from config, use the MCP remove command instead.`);let{key:i,name:s}=o,c=r.plugins[i];if(t){let a=c.find(g=>g.scope===t);if(!a)throw new Error(`Plugin '${s}' is not installed in ${t} scope`);se.debug(`[${s}] Resolved key: ${i}, scope: ${t}`),fs(a.installPath);let l=N__default.dirname(a.installPath);se.debug(`[${s}] Removing directory: ${l}`),G__default.rmSync(l,{recursive:!0,force:!0});let u=c.filter(g=>g.scope!==t);if(u.length===0){let{[i]:g,...v}=r.plugins;lt({...r,plugins:v}),Wr(i,t),Vr(s);}else r.plugins[i]=u,lt(r),Wr(i,t);}else {se.debug(`[${s}] Resolved key: ${i}`);for(let u of c){fs(u.installPath);let g=N__default.dirname(u.installPath);se.debug(`[${s}] Removing directory: ${g}`),G__default.rmSync(g,{recursive:!0,force:!0}),Wr(i,u.scope);}Vr(s);let{[i]:a,...l}=r.plugins;lt({...r,plugins:l});}await cu(s,c[0].origin??"internal"),se.debug(`[${s}] Uninstalled successfully`);}finally{await n();}}async function zt(e,t,n){se.debug(`[${e}] Acquiring lock to set status \u2192 ${t}`);let r=await Ue();try{let o=Ce(),{key:i,name:s}=fu(e,o.plugins),c=o.plugins[i],a=n??c[0].scope,l=c[0].origin??"internal";se.debug(`[${s}] Resolved key: ${i}, scope: ${a}`),Jr(i,t==="enabled",a),uu(s,t,l),se.debug(`[${s}] Status updated to ${t}`);}finally{await r();}}var U=create(e=>({installedItems:[],setInstalledItems:t=>e({installedItems:t}),loadFromDisk:()=>e({installedItems:be()})}));var B=["discover","installed"];function ws(e,t,n){if(t.rightArrow||t.tab){let r=B.indexOf(n.activeTab);return [{type:"setTab",tab:B[(r+1)%B.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}if(t.leftArrow){let r=B.indexOf(n.activeTab);return [{type:"setTab",tab:B[(r-1+B.length)%B.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}return t.downArrow?[{type:"setFocus",focus:"list"}]:[]}function xs(e,t,n,r){if(t.upArrow)return n.selectedIndex===0?[{type:"setSelectedIndex",index:-1},{type:"setFocus",focus:"search"}]:[{type:"setSelectedIndex",index:n.selectedIndex-1}];if(t.downArrow&&n.selectedIndex<r-1)return [{type:"setSelectedIndex",index:n.selectedIndex+1}];if(t.leftArrow){let o=B.indexOf(n.activeTab);return [{type:"setTab",tab:B[(o-1+B.length)%B.length]},{type:"setSelectedIndex",index:0}]}if(t.rightArrow){let o=B.indexOf(n.activeTab);return [{type:"setTab",tab:B[(o+1)%B.length]},{type:"setSelectedIndex",index:0}]}if(t.tab){let o=B.indexOf(n.activeTab);return [{type:"setTab",tab:B[(o+1)%B.length]},{type:"setSelectedIndex",index:0}]}return t.return?[{type:"setActionMenuOpen",open:true},{type:"setFocus",focus:"actionMenu"}]:e==="/"?[{type:"setFocus",focus:"search"}]:e==="1"?[{type:"selectAllTypes"}]:e==="2"?[{type:"toggleTypeFilter",catalogType:"skill"}]:e==="3"?[{type:"toggleTypeFilter",catalogType:"mcp"}]:e==="4"?[{type:"toggleTypeFilter",catalogType:"plugin"}]:e==="5"?[{type:"selectAllOrigins"}]:e==="6"?[{type:"toggleOriginFilter",origin:"internal"}]:e==="7"?[{type:"toggleOriginFilter",origin:"external"}]:e&&e!==" "&&!t.ctrl&&!t.meta&&!t.escape?[{type:"setSelectedIndex",index:-1},{type:"setFocus",focus:"search"},{type:"searchAppend",char:e}]:[]}function Is(e,t){return t.escape?[{type:"setActionMenuOpen",open:false},{type:"setFocus",focus:"list"}]:[]}function bs(e,t,n){return t.escape?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:"reset"}:t.downArrow?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:null}:t.leftArrow?{actions:[],queryUpdate:{cursorMove:-1}}:t.rightArrow?{actions:[],queryUpdate:{cursorMove:1}}:t.return?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:null}:t.backspace?n.length===0?{actions:[{type:"setFocus",focus:"list"},{type:"setSelectedIndex",index:0}],queryUpdate:null}:{actions:[],queryUpdate:{backspace:true}}:e&&!t.ctrl&&!t.meta?{actions:[],queryUpdate:{append:e}}:{actions:[],queryUpdate:null}}function Kn(e){let{setActiveTab:t,setFocus:n,setSelectedIndex:r,setActionMenuOpen:o}=f.getState();for(let i of e)if(i.type==="setTab")t(i.tab);else if(i.type==="setFocus")n(i.focus);else if(i.type==="setSelectedIndex")r(i.index);else if(i.type==="setActionMenuOpen")o(i.open);else if(i.type==="searchAppend"){let{setQuery:s,query:c,setCursorPosition:a,cursorPosition:l}=Y.getState();s(c.slice(0,l)+i.char+c.slice(l)),a(l+i.char.length);}else i.type==="toggleTypeFilter"?f.getState().toggleTypeFilter(i.catalogType):i.type==="selectAllTypes"?f.getState().selectAllTypes():i.type==="toggleOriginFilter"?f.getState().toggleOriginFilter(i.origin):i.type==="selectAllOrigins"&&f.getState().selectAllOrigins();}function vs({listLength:e}){let t=f(m=>m.focus),n=f(m=>m.selectedIndex),r=f(m=>m.actionMenuOpen),o=f(m=>m.setFocus),i=f(m=>m.setActionMenuOpen),s=Y(m=>m.query),c=Y(m=>m.setQuery),a=Y(m=>m.resetQuery),l=useRef(e);useEffect(()=>{l.current=e;},[e]),useEffect(()=>{if(t==="search"){let{query:m,setCursorPosition:h}=Y.getState();h(m.length);}},[t]);let[u,g]=useState("");useEffect(()=>{let m=setTimeout(()=>g(s),300);return ()=>clearTimeout(m)},[s]),useInput((m,h)=>{let{activeTab:T,selectedIndex:y,actionMenuOpen:L}=f.getState();Kn(ws(m,h,{activeTab:T}));},{isActive:t==="tabs"}),useInput((m,h)=>{let{activeTab:T,selectedIndex:y,actionMenuOpen:L}=f.getState();Kn(xs(m,h,{activeTab:T,selectedIndex:y},l.current));},{isActive:t==="list"}),useInput((m,h)=>{Kn(Is(m,h));},{isActive:t==="actionMenu"}),useInput((m,h)=>{let T=bs(m,h,Y.getState().query),y=T.queryUpdate;if(Kn(T.actions),y==="reset")a(),g("");else if(y!==null){let{query:L,cursorPosition:A,setCursorPosition:J}=Y.getState();if("backspace"in y)A>0&&(c(L.slice(0,A-1)+L.slice(A)),J(A-1));else if("append"in y)c(L.slice(0,A)+y.append+L.slice(A)),J(A+y.append.length);else if("cursorMove"in y){let q=A+y.cursorMove;q>=0&&q<=L.length&&J(q);}}},{isActive:t==="search"});let v=useCallback(()=>{i(false),o("list");},[i,o]),d=useCallback(m=>{let{setSelectedIndex:h,selectedIndex:T}=f.getState();m===0?h(0):T>=m&&h(m-1);},[]),E=useCallback(m=>{if(!u)return l.current=m.length,m;let h=u.toLowerCase(),T=m.filter(y=>y.name.toLowerCase().includes(h)||y.description?.toLowerCase().includes(h));return l.current=T.length,T},[u]);return {actionMenuOpen:r,closeMenu:v,selectedIndex:n,clampIndex:d,filteredItems:E}}function Es(){let e=f(c=>c.notification),t=f(c=>c.showNotification),n=f(c=>c.clearNotification),r=ue(c=>c.justAuthenticated),o=ue(c=>c.credentials),i=ue(c=>c.setJustAuthenticated);return useEffect(()=>{r&&o&&(t(`Authenticated. Tenant: ${o.tenant}`,"success"),i(false));},[r,o]),useEffect(()=>{if(!e)return;let c=setTimeout(n,3e3);return ()=>clearTimeout(c)},[e]),{notify:(c,a)=>{t(c,a);}}}function Ae(e,t,n=false){return n?true:!eo.valid(e)||!eo.valid(t)?false:eo.gt(t,e)}var $e=S("updater");async function xu(e,t,n,r,o){try{await b(x.CLI_TOOL_UPDATED,{tool_id:e,tool_type:"plugin",source:o,from_version:t,to_version:n,duration_ms:r,interface:$().interfaceType});}catch(i){$e.warn(`Failed to send update metrics: ${String(i)}`);}}function Iu(e){let t=Ce(),n=`${e}@${_}`,r=t.plugins[n];return !r||r.length===0?null:{pluginKey:n,entry:r[0]}}async function Jn(e,t={}){let n=Date.now(),r=null;try{$e.debug(`[${e}] Acquiring lock...`),r=await Ue();let o=Iu(e);if(!o)throw $e.error(`[${e}] Plugin is not installed`),new Error(`Plugin "${e}" is not installed`);let{entry:i}=o,s=i.version,c=i.installPath;$e.debug(`[${e}] Fetching manifest...`);let l=(await vt(e)).version;if(!s||!Ae(s,l,t.force))throw $e.debug(`[${e}] Already up to date (v${s??"n/a"})`),new je(e,s??"unknown");$e.info(`[${e}] Updating v${s} \u2192 v${l}...`),await r(),r=null;try{let u=await Ie(e,{force:!0,skipMetrics:!0}),g=Date.now()-n;return await xu(u.name,s,u.version,g,i.origin??"internal"),$e.debug(`[${e}] Updated successfully in ${g}ms`),{name:u.name,previousVersion:s,newVersion:u.version,path:u.path,duration_ms:g}}catch(u){$e.warn(`[${e}] Install failed, rolling back to v${s}...`),r=await Ue();let g=Ce(),v=`${e}@${_}`;throw g.plugins[v]&&(g.plugins[v][0].version=s,g.plugins[v][0].installPath=c,lt(g),$e.info(`[${e}] Rollback completed, restored to v${s}`)),u}}finally{r&&await r();}}var bu=S("commands:helpers");async function Q(){let e=await O();if(!e)return k("Not authenticated. Run: flow auth login"),false;try{await Oe();}catch(t){return bu.debug(`Token validation failed: ${String(t)}`),k("Session expired. Run: flow auth login"),false}return !e.bundle||e.bundle.trim()===""?(k("Starter kit not set. Run: flow auth login"),false):true}async function Je(e){let t=to.createInterface({input:process.stdin,output:process.stdout});return new Promise(n=>{t.question(p(e),r=>{t.close(),n(["y","yes"].includes(r.toLowerCase().trim()));});})}async function Ts(e){let t=to.createInterface({input:process.stdin,output:process.stdout});return new Promise(n=>{t.question(p(e),r=>{t.close(),n(r.trim());});})}var vu=/^[^@]+@[^@]+$/;function qt(e){return vu.test(e)}function Pt(e){let t=e.indexOf("@");return t>0?e.slice(0,t):e}var Pu=/^[a-zA-Z0-9][a-zA-Z0-9._/-]*$/;function ks(e){if(!Pu.test(e))throw new Error(`Invalid plugin name: "${e}". Plugin names must start with an alphanumeric character and contain only letters, digits, dots, hyphens, underscores, and slashes.`)}var Eu=/^[\w./:@?&=+#%-]+$/;function Hn(e){let t=e.trim();if(!t)throw new Error("No marketplace source provided.");if(!Eu.test(t))throw new Error(`Invalid marketplace source: "${t}". Must be owner/repo or a URL (no spaces or special characters).`);return t}var Wt=S("claudeProxy"),oo="claude ",Cs="flow ",no=class extends Error{constructor(t){super(`Invalid install command: "${t}". Command must start with "claude " for security.`),this.name="InvalidInstallCommandError";}},ro=class extends Error{constructor(t){super(`Disallowed subcommand: "${t}". Only "plugin install", "plugin marketplace add", "mcp add", and "mcp remove" are permitted.`),this.name="DisallowedSubcommandError";}},Tu=/^plugins?\s+(install|i)\s+|^plugins?\s+marketplace\s+add\s+|^mcp\s+(add|remove)\s+/;function ku(e){$s(e);let t=e.slice(oo.length);if(!Tu.test(t))throw new ro(e)}var Vn=class extends Error{constructor(){super('Claude Code CLI not found. Ensure "claude" is installed and available on your PATH.'),this.name="ClaudeCliNotFoundError";}};function $s(e){if(!e||!/^claude /.test(e))throw new no(e)}async function ae(e){$s(e);let t=e.slice(oo.length).split(/\s+/).filter(Boolean),n=Cu(t);Wt.debug(`[${n}] Executing proxy command: claude ${t.join(" ")}`);let r=Date.now();try{let o=await execa("claude",t,{reject:!1}),i=Date.now()-r;return Wt.debug(`[${n}] Proxy command finished with exit code ${o.exitCode} in ${i}ms`),{name:n,command:e,exitCode:o.exitCode??1,stdout:o.stdout,stderr:o.stderr,duration_ms:i}}catch(o){throw Ls(o)?new Vn:o}}function Cu(e){return e.length>=3?e[2]:e.join(" ")}function Ls(e){return e instanceof Error&&"code"in e&&e.code==="ENOENT"}function Au(e){return e.startsWith(Cs)?oo+e.slice(Cs.length):e}var $u=/^claude\s+(?:plugins?\s+(?:install|i)\s+|mcp\s+(?:add|remove)\s+)/;function Lu(e,t){return !t||e.includes("--scope")||!$u.test(e)?e:`${e} --scope ${t}`}async function Rs(e,t){let n=e.split("&&").map(o=>Au(o.trim())).filter(Boolean).map(o=>Lu(o,t));if(n.length===0)throw new Error("Empty install command");for(let o of n)ku(o);Wt.debug(`[installCommand] Executing ${n.length} command(s)`);let r=await ae(n[0]);if(r.exitCode!==0)return r;for(let o=1;o<n.length;o++)if(r=await ae(n[o]),r.exitCode!==0)return r;return r}async function Ms(e,t,n){let r=Pt(e),o=t?.trim();if(!o&&(o=(await Ts(`Plugin "${r}" could not be installed.
21
- If a marketplace is needed, enter the source (owner/repo or URL), or press Enter to skip: `))?.trim(),!o))throw new Error("No marketplace source provided. Cannot retry install.");o=Hn(o),n?.(),Wt.debug(`[${r}] Adding marketplace via: claude plugin marketplace add ${o}`);try{let i=await execa("claude",["plugin","marketplace","add",o],{reject:!1});if(i.exitCode!==0)throw new Error(`Failed to add marketplace: ${i.stderr||"unknown error"}`);Wt.debug(`[${r}] Marketplace added successfully`);}catch(i){throw Ls(i)?new Vn:i}}var He=S("installDispatcher");async function _s(e,t,n){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"plugin",source:"external",scope:Bn(n),version:"unknown",duration_ms:t,interface:$().interfaceType});}catch(r){He.warn(`Failed to send external install metrics: ${String(r)}`);}}async function Os(e,t){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"plugin",source:"external",error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:$().interfaceType});}catch(n){He.warn(`Failed to send external install-failed metrics: ${String(n)}`);}}function io(e,t){let n=Pt(e);ks(n);let r=["claude","plugin","install",n];return t&&r.push("--scope",t),r.join(" ")}async function so(e,t,n,r){let o=io(e,r),i=Pt(e);n?.onStatus?.(`Installing ${i}...`),He.debug(`[${e}] Attempting install: ${o}`);let s=await ae(o);return s.exitCode===0?s:(He.debug(`[${e}] Install failed (exit ${s.exitCode}), attempting marketplace add`),n?.onError?.(s.stderr||`Install failed with exit code ${s.exitCode}`),t?n?.onStatus?.(`Adding marketplace for ${i}...`):n?.onPause?.(),await Ms(e,t,()=>{t||n?.onResume?.(`Adding marketplace for ${i}...`);}),n?.onResume?.(`Retrying install for ${i}...`),He.debug(`[${e}] Retrying install after marketplace add`),ae(o))}async function Ds(e,t){if(e.origin===on&&e.installCommand){He.debug(`[${e.name}] Routing to external installer via installCommand`);let n=await Rs(e.installCommand,t?.scope);return n.exitCode===0?await _s(e.name,n.duration_ms,t?.scope):await Os(e.name,new Error(n.stderr||"Install failed")),n}if(qt(e.name)){He.debug(`[${e.name}] Routing to external installer via name pattern`);let n=await so(e.name,t?.marketplaceSource,void 0,t?.scope);return n.exitCode===0?await _s(e.name,n.duration_ms,t?.scope):await Os(e.name,new Error(n.stderr||"Install failed")),n}return He.debug(`[${e.name}] Routing to internal installer`),Ie(e.name,t)}function Bs(e){return "exitCode"in e}function Ns(){let e=U(s=>s.installedItems),t=U(s=>s.setInstalledItems),n=useCallback(async(s,c)=>{let a=await Ds(s,c);if(Bs(a)&&a.exitCode!==0)throw new Error(a.stderr||"External installation failed");U.getState().loadFromDisk();},[]),r=useCallback(async(s,c)=>{await Un(s,c),t(e.filter(a=>a.name!==s));},[e,t]),o=useCallback(async(s,c)=>{let l=e.find(u=>u.name===s)?.status==="enabled"?"disabled":"enabled";await zt(s,l,c),t(e.map(u=>u.name===s?{...u,status:l}:u));},[e,t]),i=useCallback(async s=>{await Jn(s),U.getState().loadFromDisk();},[]);return {install:n,uninstall:r,toggle:o,update:i}}var zn=S("mcp");function Xt(e,t){e.silent?oe({status:"error",mcp:t.name,...t.exitCode!==void 0&&{exitCode:t.exitCode},message:t.message}):k(`Failed to ${t.action} MCP "${t.name}": ${t.message}`);}function Us(e,t){e.silent?X({status:"success",mcp:t.name,command:t.command,duration_ms:t.durationMs}):(V(`MCP "${t.name}" ${t.actionPastTense} successfully`),e.verbose&&t.stdout&&I(t.stdout));}function Ru(e,t,n,r){let o=["claude","mcp","add","--transport",n,e];return t.length>0&&o.push(...t),r&&o.push("--scope",r),o.join(" ")}function ao(e,t){let n=["claude","mcp","remove",e];return t&&n.push("--scope",t),n.join(" ")}async function js(e,t,n){if(!await Q())return 1;if(t.length===0){let i=n.transport==="http"?"a URL":"a command";return Xt(n,{name:e,action:"add",message:`${n.transport} transport requires ${i}`}),1}zn.debug(`[${e}] Starting MCP add with args: ${t.join(" ")}`);let r=Ru(e,t,n.transport,n.scope);if(!n.force){let i=p(e),s=p(r);if(!await Je(`Install external MCP "${i}"?
19
+ `);}function Et(e){process.stdout.write(JSON.stringify(e,null,2)+`
20
+ `);}function Q(e){process.stdout.write(JSON.stringify(e)+`
21
+ `);}function ae(e){process.stderr.write(JSON.stringify(e)+`
22
+ `);}function U(e){return e instanceof Error?e.message:String(e)}function Ar(e){let t=new Date(e);return isNaN(t.getTime())?"\u2014":new Intl.DateTimeFormat("en-US",{dateStyle:"short"}).format(t)}function Sc(e){if(!(e instanceof Error))return "unknown";let t=e.message.toLowerCase();return t.includes("401")||t.includes("unauthorized")?"invalid_credentials":t.includes("403")||t.includes("forbidden")?"forbidden":t.includes("timeout")||t.includes("timed out")?"timeout":t.includes("network")||t.includes("econnrefused")||t.includes("fetch")?"network_error":"unknown"}var ve=["clientId","clientSecret","tenant"],hc={clientId:"Client ID",clientSecret:"Client Secret",tenant:"Tenant"};function Ti(){let[e,t]=useState({clientId:"",clientSecret:"",tenant:""}),[r,n]=useState("clientId"),[o,i]=useState({}),[s,c]=useState(null),[a,l]=useState(false),u=useRef(0),{setCredentials:g,setJustAuthenticated:v}=ge(),{setFocus:d}=f();useInput((h,T)=>{if(!a){if(T.shift&&T.tab){let y=ve.indexOf(r);y>0&&n(ve[y-1]);}else if(T.tab){let y=ve.indexOf(r);y<ve.length-1&&n(ve[y+1]);}else if(T.return)if(r==="tenant")E();else {let y=ve.indexOf(r);n(ve[y+1]);}}},{isActive:true});let E=async()=>{let h={};for(let T of ve)e[T].trim()||(h[T]="This field is required");if(Object.keys(h).length>0){i(h);let T=ve.find(y=>h[y]);T&&n(T);return}l(true),c(null),u.current+=1;try{await st({clientId:e.clientId.trim(),clientSecret:e.clientSecret.trim(),tenant:e.tenant.trim()});let{clientSecret:T,...y}=e;g(y),v(!0),f.getState().setScreen("bundleSetup"),d("bundleList"),b(x.CLI_SESSION_STARTED,{cli_version:He,os:process.platform,node_version:process.version,duration_ms:Je(),interface:"tui"}).catch(()=>{});}catch(T){let y=T instanceof Error?T.message:"Authentication failed";c(y),hi(x.CLI_AUTH_FAILED,{error_code:Sc(T),attempt:u.current},e.tenant.trim()).catch(()=>{});}finally{l(false),t(T=>({...T,clientSecret:""}));}},m=h=>T=>{t(y=>({...y,[h]:T})),o[h]&&i(y=>({...y,[h]:void 0}));};return jsxs(Box,{flexDirection:"column",padding:2,children:[jsx(Box,{marginBottom:1,children:jsxs(Text,{bold:true,color:"cyan",children:[jo," \u2014 Initial Setup"]})}),jsxs(Box,{marginBottom:1,flexDirection:"column",children:[jsx(Text,{dimColor:true,children:"The data collected during setup is used solely to improve"}),jsx(Text,{dimColor:true,children:"Flow's internal tools and will not be shared externally."})]}),jsx(Box,{flexDirection:"column",children:ve.map(h=>jsx(Box,{marginBottom:1,children:jsx(Ei,{label:hc[h],value:e[h],onChange:m(h),masked:h==="clientSecret",isActive:r===h&&!a,error:o[h]})},h))}),a&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"cyan",children:"Authenticating..."})}),s&&jsx(Box,{marginTop:1,children:jsxs(Text,{color:"red",children:["\u26A0 ",p(s)]})}),jsx(Box,{marginTop:1,children:jsx(Text,{dimColor:true,children:"Tab next field \xB7 Enter confirm"})})]})}function Rr(){return jsxs(Box,{flexDirection:"column",alignItems:"center",children:[jsx(xc,{text:"FLOW",font:"block",colors:["white","white"]}),jsx(Box,{marginTop:-1,marginBottom:1,children:jsxs(Text,{dimColor:true,children:["Marketplace \xB7 v",He]})})]})}var jn={discover:"Discover",installed:"Installed"},Ic=Object.keys(jn);function Ri(){let e=f(t=>t.activeTab);return jsx(Box,{paddingX:1,paddingBottom:1,children:Ic.map(t=>jsx(Box,{marginRight:1,children:t===e?jsx(Text,{bold:true,inverse:true,children:` ${jn[t]} `}):jsx(Text,{dimColor:true,children:` ${jn[t]} `})},t))})}var ee=create(e=>({query:"",cursorPosition:0,setQuery:t=>e({query:t}),setCursorPosition:t=>e({cursorPosition:t}),resetQuery:()=>e({query:"",cursorPosition:0})}));function Mi(){let e=f(s=>s.focus),t=ee(s=>s.query),r=ee(s=>s.cursorPosition),n=e==="search",o=t.slice(0,r),i=t.slice(r);return jsxs(Box,{borderStyle:"single",borderTop:false,borderBottom:true,borderLeft:false,borderRight:false,paddingX:1,marginX:1,marginBottom:1,children:[jsx(Text,{color:n?"cyan":"gray",children:"\u{1F50D} "}),n?jsxs(Fragment,{children:[jsx(Text,{color:"white",children:o}),jsx(Text,{inverse:true,children:i[0]??" "}),jsx(Text,{color:"white",children:i.slice(1)})]}):jsx(Text,{dimColor:true,children:t||"Search..."})]})}M();var Ec=["skill","mcp","plugin"].map((e,t)=>({key:String(t+2),type:e,...wt[e]})),Tc=["internal","external"].map((e,t)=>({key:String(t+6),origin:e,...Bo[e]}));function Oi(){let e=f(n=>n.catalogFilters),t=e.types.has("skill")&&e.types.has("mcp")&&e.types.has("plugin"),r=e.origins.has("internal")&&e.origins.has("external");return jsxs(Box,{paddingX:1,paddingBottom:1,gap:1,children:[jsx(Text,{bold:true,children:"Type:"}),jsxs(Box,{gap:0,children:[jsx(Text,{dimColor:true,children:"[1] "}),jsxs(Text,{color:t?"green":void 0,dimColor:!t,children:[t?"\u25C9":"\u25CB"," All"]})]}),Ec.map(n=>{let o=!t&&e.types.has(n.type);return jsxs(Box,{gap:0,children:[jsxs(Text,{dimColor:true,children:["[",n.key,"] "]}),jsxs(Text,{color:o?n.color:void 0,dimColor:!o,children:[o?"\u25C9":"\u25CB"," ",n.label]})]},n.key)}),jsx(Box,{marginLeft:2,children:jsx(Text,{bold:true,children:"|"})}),jsx(Box,{marginLeft:2,children:jsx(Text,{bold:true,children:"Origin:"})}),jsxs(Box,{gap:0,children:[jsx(Text,{dimColor:true,children:"[5] "}),jsxs(Text,{color:r?"green":void 0,dimColor:!r,children:[r?"\u25C9":"\u25CB"," All"]})]}),Tc.map(n=>{let o=!r&&e.origins.has(n.origin);return jsxs(Box,{gap:0,children:[jsxs(Text,{dimColor:true,children:["[",n.key,"] "]}),jsxs(Text,{color:o?n.color:void 0,dimColor:!o,children:[o?"\u25C9":"\u25CB"," ",n.label]})]},n.key)})]})}M();function Di({type:e}){let{label:t,color:r}=wt[e];return jsx(Text,{color:r,children:t})}M();function Ui({origin:e}){return e===Mt?jsx(Text,{color:"blue",children:"[Flow]"}):jsx(Text,{color:"white",children:"[External]"})}var Mr=$c.memo(function({item:t,isSelected:r}){let n=t.status==="disabled"?"yellow":"green";return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:r?"cyan":"gray",children:r?"\u203A ":"\u25CB "}),jsx(Text,{bold:r,color:r?"cyan":"white",children:t.name}),t.type&&jsxs(Text,{children:[" ",jsx(Di,{type:t.type})]}),t.origin&&jsxs(Text,{children:[" ",jsx(Ui,{origin:t.origin})]}),jsxs(Text,{dimColor:true,children:[t.authorName?` \xB7 ${t.authorName}`:"",t.version?` \xB7 v${t.version}`:" \xB7 n/a"]}),t.status&&jsxs(Text,{color:n,children:[" [",t.status,"]"]}),t.updateAvailable&&jsx(Text,{color:"yellow",children:" [\u2191 update available]"}),t.installedAt&&jsxs(Text,{dimColor:true,children:[" \xB7 ",Ar(t.installedAt)]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:t.description})})]})});function kt({message:e}){return jsx(Box,{paddingX:2,paddingY:1,children:jsx(Text,{dimColor:true,children:e??"No items found."})})}M();function Bi({items:e,emptyMessage:t}){let r=f(a=>a.selectedIndex);if(e.length===0)return jsx(kt,{message:t});let n=Math.max(0,r-Math.floor(Fe/2)),o=Math.min(e.length,n+Fe);o===e.length&&(n=Math.max(0,o-Fe));let i=e.slice(n,o),s=n,c=e.length-o;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:s>0?`\u2191 ${s} more above`:" "})}),i.map((a,l)=>jsx(Mr,{item:a,isSelected:n+l===r},a.name)),jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:c>0?`\u2193 ${c} more below`:" "})})]})}function Vi({label:e,pathHint:t}){return jsxs(Box,{paddingBottom:1,children:[jsx(Text,{bold:true,color:"blueBright",children:e}),jsxs(Text,{dimColor:true,children:[" ",t]})]})}M();function zi({groups:e,emptyMessage:t}){let r=f(d=>d.selectedIndex),n=[],o=0;for(let d of e){n.push({kind:"header",label:d.label,pathHint:d.pathHint,key:`h-${d.scope}`});for(let E of d.items)n.push({kind:"item",item:E,itemIndex:o,key:`i-${d.scope}-${E.name}`}),o++;}if(o===0)return jsx(kt,{message:t});let s=n.findIndex(d=>d.kind==="item"&&d.itemIndex===r),c=s>=0?s:0,a=Math.max(0,c-Math.floor(Fe/2)),l=Math.min(n.length,a+Fe);l===n.length&&(a=Math.max(0,l-Fe));let u=n.slice(a,l),g=a,v=n.length-l;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:g>0?`\u2191 ${g} more above`:" "})}),u.map(d=>d.kind==="header"?jsx(Vi,{label:d.label,pathHint:d.pathHint},d.key):jsx(Mr,{item:d.item,isSelected:d.itemIndex===r},d.key)),jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:v>0?`\u2193 ${v} more below`:" "})})]})}var Dc={discover:"Discover",installed:"Installed"};function Wi({items:e,tabId:t,emptyMessage:r,groups:n}){return jsxs(Box,{flexDirection:"column",children:[jsx(Mi,{}),jsx(Oi,{}),jsxs(Box,{paddingX:1,marginTop:1,children:[jsx(Text,{bold:true,children:Dc[t]}),jsxs(Text,{dimColor:true,children:[" (",e.length,")"]})]}),n&&n.length>0?jsx(zi,{groups:n,emptyMessage:r}):jsx(Bi,{items:e,emptyMessage:r})]})}function Xi({filteredItems:e,emptyMessage:t,groups:r}){let n=f(o=>o.activeTab);return jsx(Box,{flexDirection:"column",flexGrow:1,children:n==="discover"?jsx(Wi,{items:e,tabId:"discover",emptyMessage:t},"discover"):jsx(Wi,{items:e,tabId:"installed",emptyMessage:t,groups:r},"installed")})}var Uc={tabs:"\u2190\u2192: switch tab | \u2193: navigate | Enter: select | Ctrl+C Ctrl+C: quit",list:"\u2191\u2193: navigate | Enter: select | Type: 1=All 2=Skill 3=MCP 4=Plugin | Origin: 5=All 6=Flow 7=External | \u2190\u2192/Tab: tabs | Ctrl+C\xD72: quit",search:"Type to filter | \u2193/Esc: exit search | Enter: confirm",actionMenu:"\u2191\u2193: navigate options | Enter: confirm | Esc: close menu",auth:"Tab: next field | Enter: confirm | Ctrl+C Ctrl+C: quit",bundleList:"\u2191\u2193: navigate | Enter: select Starter Kit | Esc: skip",bundleDetail:"\u2191\u2193: navigate | Enter: confirm & install | Esc: back",installProgress:"\u2191\u2193: navigate | Enter: select"};function Or(){let e=f(t=>t.focus);return jsx(Box,{borderStyle:"single",borderTop:true,borderBottom:false,borderLeft:false,borderRight:false,children:jsx(Text,{dimColor:true,children:Uc[e]})})}function Zi({message:e,type:t}){return e?jsx(Box,{paddingX:1,children:jsxs(Text,{color:t==="success"?"green":t==="info"?"cyan":"red",children:[t==="success"?"\u2713":t==="info"?"(i)":"\u2717"," ",p(e)]})}):null}function Dr({message:e}){return jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(Vc,{type:"dots"})}),jsxs(Text,{children:[" ",e]})]})}function Nr({message:e,onRetry:t,onBack:r}){return useInput((n,o)=>{n==="r"&&o.ctrl&&t?t():o.escape&&r&&r();}),jsxs(Box,{flexDirection:"column",paddingX:2,paddingY:1,children:[jsxs(Text,{color:"red",children:["\u2717 ",e]}),t&&jsx(Text,{dimColor:true,children:"Press Ctrl+R to retry"}),r&&jsx(Text,{dimColor:true,children:"Press Escape to go back"})]})}function ft({itemName:e,actions:t,descriptions:r,onAction:n,onClose:o}){let i=f(a=>a.focus),[s,c]=useState(0);return useInput((a,l)=>{l.upArrow?c(u=>u>0?u-1:u):l.downArrow?c(u=>u<t.length-1?u+1:u):l.return?n(t[s]):l.escape&&o();},{isActive:i==="actionMenu"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsx(Box,{flexDirection:"column",marginTop:1,children:t.map((a,l)=>jsxs(Box,{children:[jsxs(Text,{bold:l===s,color:l===s?"cyan":void 0,children:[l===s?"\u203A ":" ",a]}),r?.[a]&&jsxs(Text,{dimColor:true,children:[" \u2014 ",r[a]]})]},l))})]})}M();var Xn=Object.entries(Ot),is=[...Xn.map(([,e])=>e.actionLabel),"Cancel"],ss=Object.fromEntries(Xn.map(([,e])=>[e.actionLabel,e.description]));function as(e){let t=Xn.find(([,r])=>r.actionLabel===e);return t?t[0]:null}function cs({itemName:e,onInstall:t,onClose:r}){let[n,o]=useState(false),i=useCallback(l=>{let u=as(l);u?t(u):o(false);},[t]),s=useCallback(()=>{o(false);},[]),c=useCallback(l=>{l==="Install"?o(true):r();},[r]);return n?jsx(ft,{itemName:`${e} \u2014 Choose scope`,actions:is,descriptions:ss,onAction:i,onClose:s}):jsx(ft,{itemName:e,actions:["Install","Cancel"],onAction:c,onClose:r})}function Ur({activeFocus:e,onConfirm:t}){let[r,n]=useState("idle"),o=f(i=>i.focus);return useInput((i,s)=>{s.escape||i==="n"?n("idle"):i==="y"&&t();},{isActive:r==="confirming"&&o===e}),{isConfirming:r==="confirming",requestConfirm:()=>n("confirming"),cancelConfirm:()=>n("idle")}}function ds({itemName:e,itemScope:t,itemStatus:r,updateAvailable:n,catalogVersion:o,onUninstall:i,onToggleStatus:s,onUpdate:c,onClose:a}){let{isConfirming:l,requestConfirm:u}=Ur({activeFocus:"actionMenu",onConfirm:()=>i(t)});if(l)return jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Uninstall "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]});let g=r==="enabled"?"Disable":"Enable",v=o&&p(o),d=v?`Update to v${v}`:"Update";return jsx(ft,{itemName:e,actions:n?["Uninstall",g,d,"Cancel"]:["Uninstall",g,"Cancel"],onAction:h=>{h==="Uninstall"?u():h===g?s(t):h.startsWith("Update")?c?.():a();},onClose:a})}function gs({itemName:e,itemScope:t,onUninstall:r,onClose:n}){let{isConfirming:o,requestConfirm:i}=Ur({activeFocus:"actionMenu",onConfirm:()=>r(t)});return o?jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Remove MCP "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]}):jsx(ft,{itemName:e,actions:["Uninstall","Cancel"],onAction:a=>{a==="Uninstall"?i():n();},onClose:n})}Ue();async function ys(e,t){let r=j.resolve(t);await Pe.mkdir(r,{recursive:true});let n=j.join(j.dirname(r),`${randomUUID()}.zip`);try{await Pe.writeFile(n,e),await eu(n,{dir:r,onEntry(o){if((o.externalFileAttributes>>16&61440)===40960)throw new Error(`Zip Slip (symlink): entry "${o.fileName}" is a symbolic link and was rejected`);let s=j.resolve(r,o.fileName);if(!s.startsWith(r+j.sep)&&s!==r)throw new Error(`Zip Slip detected: entry "${o.fileName}" would escape target directory`)}});try{let o=realpathSync(r);if(!o.startsWith(j.resolve(j.dirname(r))))throw new Error(`Zip Slip (post-extract): resolved path "${o}" is outside expected parent`)}catch(o){if(o.code!=="ENOENT")throw o}}finally{try{await Pe.unlink(n);}catch{}}}async function Zn(e){await Pe.rm(e,{recursive:true,force:true});}async function ze(){let e=Xo();await Pe.mkdir(j.dirname(e),{recursive:true});try{await Pe.writeFile(e,"",{flag:"wx"});}catch(r){if(r.code!=="EEXIST")throw r}return await tu.lock(e,{stale:1e4,retries:{retries:2,minTimeout:500,maxTimeout:500}})}Ue();M();var nu={user:"global",project:"project",local:"local"};function Br(e){return e?nu[e]:"global"}var Ee=class extends Error{constructor(r,n){super(`${r} v${n} is already installed. Use --force to reinstall.`);this.pluginName=r;this.version=n;this.name="AlreadyInstalledError";}pluginName;version},qe=class extends Error{constructor(r,n){super(`${r} is already up to date (v${n})`);this.pluginName=r;this.version=n;this.name="AlreadyUpToDateError";}pluginName;version};M();function Xt(){return Gl.create({prefix:Pt("PROMPT_MANAGER_URL","https://flow.ciandt.com/prompt-manager-api/"),hooks:{beforeRequest:[async({request:e})=>{let t=await Be();e.headers.set("Authorization",`Bearer ${t}`);let r=await F();r?.tenant&&rt.test(r.tenant)&&e.headers.set("FlowTenant",r.tenant);}]}})}var iu=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function Ss(e){if(!e||!iu.test(e))throw new Error(`Invalid plugin name: "${e}". Must be 1-64 chars, lowercase alphanumeric and hyphens only.`)}async function Te(){try{let{plugins:e}=await Xt().get("v1/plugins/catalog").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching plugin catalog"):new Error(`Failed to fetch plugin catalog: ${e.message}`):e}}async function $t(e){Ss(e);try{return await Xt().get(`v1/plugins/${e}/manifest`).json()}catch(t){throw t instanceof Error?t.message.includes("404")?new Error(`Plugin '${e}' not found in catalog`):t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to fetch plugin manifest: ${t.message}`):t}}async function hs(e){Ss(e);try{let t=await Xt().get(`v1/plugins/${e}/archive`);return Buffer.from(await t.arrayBuffer())}catch(t){throw t instanceof Error?t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to download plugin: ${t.message}`):t}}async function Jr(){try{let{profiles:e}=await Xt().get("v1/plugins/profiles").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching starter kits"):new Error(`Failed to fetch starter kits: ${e.message}`):e}}Ue();M();$();var su=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/,au=/^[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9]+(\.[a-zA-Z0-9]+)*)?$/;function Hr(e){if(!su.test(e))throw new Error(`Invalid plugin name from manifest: "${e}". Plugin names must be lowercase alphanumeric and hyphens (1-64 chars).`)}function lu(e){if(!au.test(e))throw new Error(`Invalid plugin version from manifest: "${e}". Versions must follow semver format (e.g. 1.0.0 or 1.0.0-beta.1).`)}var We=S("installer");function cu(e,t){let r=`${e}@${N}`,o=Me().plugins[r];if(o&&!t)throw new Ee(e,o[0].version??"unknown");return {pluginKey:r,alreadyInstalled:o}}async function uu(e,t,r){r&&await Zn(t);try{We.debug(`[${t}] Extracting archive...`),await ys(e,t);}catch(n){throw await Zn(t),n}}function pu(e,t,r,n,o){let i=Me(),s={scope:n,installPath:t,version:r,installedAt:new Date().toISOString(),origin:o},c=i.plugins[e]??[];i.plugins[e]=[...c.filter(a=>a.scope!==n),s],gt(i),Qn(e,true,n);}async function du(e,t,r,n,o){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"plugin",source:o,scope:n,version:t,duration_ms:r,interface:L().interfaceType});}catch(i){We.warn(`Failed to send install metrics: ${String(i)}`);}}async function mu(e,t,r){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"plugin",source:r,error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:L().interfaceType});}catch(n){We.warn(`Failed to send install-failed metrics: ${String(n)}`);}}async function ke(e,t={}){let r=Date.now(),n=null;try{We.debug(`[${e}] Acquiring lock...`),n=await ze();let{pluginKey:o,alreadyInstalled:i}=cu(e,t.force);We.debug(`[${e}] Fetching manifest...`);let s=await $t(e);Hr(s.name),lu(s.version),We.debug(`[${e}] Downloading archive...`);let c=await hs(e),a=t.scope??"user",l=zo(s.name,s.version);await uu(c,l,!!i&&!!t.force),pu(o,l,s.version,a,"internal"),ws(s,l);let u=Date.now()-r;We.debug(`[${e}] Installed successfully in ${u}ms`);let g={name:s.name,version:s.version,path:l,duration_ms:u};return t.skipMetrics||await du(s.name,s.version,u,Br(a),"internal"),g}catch(o){throw await mu(e,o,"internal"),We.error(`[${e}] Installation failed: ${o instanceof Error?o.message:String(o)}`),o}finally{n&&await n();}}function fu(){return {$schema:"https://anthropic.com/claude-code/marketplace.schema.json",name:N,description:"Flow Skills marketplace",owner:{name:"Flow Team",email:"flow@ciandt.com"},plugins:[]}}function bs(){let e=dr();if(!W__default.existsSync(e))return null;try{return JSON.parse(W__default.readFileSync(e,"utf-8"))}catch{return null}}function gu(){let e=bs();if(e)return e;let t=fu(),r=dr();return W__default.mkdirSync(j__default.dirname(r),{recursive:true}),eo(t),t}function eo(e){let t=dr(),r=`${t}.${randomUUID()}.tmp`;W__default.writeFileSync(r,JSON.stringify(e,null,2),"utf-8"),W__default.renameSync(r,t);}function yu(){let e=qo(),t={};try{W__default.existsSync(e)&&(t=JSON.parse(W__default.readFileSync(e,"utf-8")));}catch{t={};}if(t[N])return;t[N]={source:{source:"github",repo:"CI-T-HyperX/flow-skills"},installLocation:Wo(),lastUpdated:new Date().toISOString()};let r=`${e}.${randomUUID()}.tmp`;W__default.writeFileSync(r,JSON.stringify(t,null,2),"utf-8"),W__default.renameSync(r,e);}function ws(e,t){Hr(e.name),yu();let r=bn(e.name);W__default.mkdirSync(j__default.dirname(r),{recursive:true});try{W__default.lstatSync(r),W__default.rmSync(r,{recursive:!0,force:!0});}catch{}W__default.symlinkSync(t,r);let n=gu();n.plugins.some(i=>i.name===e.name)||(n.plugins.push({name:e.name,description:e.description,version:e.version,author:e.author,source:`./plugins/native/${e.name}`,category:e.category}),eo(n));}function to(e){Hr(e);let t=bn(e);try{W__default.rmSync(t,{recursive:!0,force:!0});}catch{}let r=bs();if(!r)return;let n=r.plugins.length;r.plugins=r.plugins.filter(o=>o.name!==e),r.plugins.length!==n&&eo(r);}$();var hu=S("mcpConfigReader"),wu=500,xu=512;function Iu(){return j__default.join(Ie__default.homedir(),".claude.json")}function bu(){return j__default.join(process.cwd(),".mcp.json")}function Ps(e){if(!W__default.existsSync(e))return null;try{return JSON.parse(W__default.readFileSync(e,"utf-8"))}catch{return hu.debug(`[mcpConfigReader] Failed to parse ${e}`),null}}function Yt(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function ro(e){if(!Yt(e))return {};let t=e.mcpServers;return Yt(t)?t:{}}function no(e,t){return Object.keys(e).slice(0,wu).map(n=>({name:p(n.slice(0,xu)),marketplace:"",version:void 0,installedAt:"",installPath:"",scope:t,description:void 0,author:void 0,status:"enabled",type:"mcp"}))}function Ts(){let e=[],t=Iu(),r=Ps(t);if(Yt(r)){let c=r,a=ro(c);e.push(...no(a,"user"));let l=process.cwd();if(Yt(c.projects)){let u=c.projects[l];if(Yt(u)){let g=ro(u);e.push(...no(g,"local"));}}}let n=bu(),o=Ps(n),i=ro(o);e.push(...no(i,"project"));let s=new Map;for(let c of e){let a=`${c.name}@${c.scope}`;s.has(a)||s.set(a,c);}return [...s.values()]}$();var ce=S("storage");async function Pu(e,t){try{await b(x.CLI_TOOL_UNINSTALLED,{tool_id:e,tool_type:"plugin",source:t,interface:L().interfaceType});}catch(r){ce.warn(`Failed to send uninstall metrics: ${String(r)}`);}}function Eu(e,t,r){let n=t==="enabled"?x.CLI_TOOL_ENABLED:x.CLI_TOOL_DISABLED;b(n,{tool_id:e,source:r,interface:L().interfaceType}).catch(o=>ce.warn(`Failed to send ${t} metrics: ${String(o)}`));}function Cs(){return j__default.join(Ie__default.homedir(),".claude","plugins","installed_plugins.json")}function Tu(){return j__default.join(Ie__default.homedir(),".claude","plugins")}function ks(e){let t=j__default.resolve(e),r=j__default.resolve(Tu()),n=j__default.resolve(j__default.join(process.cwd(),".claude","plugins")),o=t.startsWith(r+j__default.sep)||t===r,i=t.startsWith(n+j__default.sep)||t===n;if(!o&&!i)throw new Error(`Security error: installPath '${e}' is outside the plugins directory`)}function $s(e="user"){return e==="local"?j__default.join(process.cwd(),".claude","settings.local.json"):e==="project"?j__default.join(process.cwd(),".claude","settings.json"):j__default.join(Ie__default.homedir(),".claude","settings.json")}function Me(){let e=Cs();if(!W__default.existsSync(e))return {version:2,plugins:{}};try{return JSON.parse(W__default.readFileSync(e,"utf-8"))}catch{return {version:2,plugins:{}}}}function ku(e){let t=e?.code;return t==="EACCES"||t==="EPERM"}function As(e,t){try{W__default.mkdirSync(j__default.dirname(e),{recursive:!0});let r=`${e}.${randomUUID()}.tmp`;W__default.writeFileSync(r,JSON.stringify(t,null,2),"utf-8"),W__default.renameSync(r,e);}catch(r){throw ku(r)?new Error(`Permission denied: cannot write to '${e}'. Check your file system permissions.`):r}}function gt(e){As(Cs(),e);}function Zt(e){let t=e.lastIndexOf("@");return t===-1?{name:e,marketplace:""}:{name:e.slice(0,t),marketplace:e.slice(t+1)}}function Cu(e,t){let r=j__default.join(e,".claude-plugin"),n=j__default.join(r,"plugin.json");if(W__default.existsSync(n))try{return JSON.parse(W__default.readFileSync(n,"utf-8"))}catch{return null}let o=j__default.join(r,"marketplace.json");if(W__default.existsSync(o))try{let i=JSON.parse(W__default.readFileSync(o,"utf-8"));return {description:i.plugins?.find(c=>c.name===t)?.description,author:i.owner}}catch{return null}return null}function ao(e="user"){let t=$s(e);if(!W__default.existsSync(t))return {};try{return JSON.parse(W__default.readFileSync(t,"utf-8"))}catch{return {}}}function Ls(e,t="user"){As($s(t),e);}function $u(e,t){let{name:r,marketplace:n}=Zt(e),o;if(n?(o=`${r}@${n}`,t[o]||(o=void 0)):o=Object.keys(t).filter(s=>Zt(s).name===r)[0],!o)throw ce.error(`[${r}] Plugin is not installed`),new Error(`Plugin '${r}' is not installed`);return {key:o,name:r}}function Au(e,t){let{name:r,marketplace:n}=Zt(e),o;return n?(o=`${r}@${n}`,t[o]||(o=void 0)):o=Object.keys(t).filter(s=>Zt(s).name===r)[0],o?{key:o,name:r}:null}function oo(e="user"){return ao(e).enabledPlugins??{}}function io(e,t="user"){let r=ao(t),n=r.enabledPlugins;if(!n||!(e in n))return;let{[e]:o,...i}=n;r.enabledPlugins=i,Ls(r,t);}function Qn(e,t,r="user"){let n=ao(r),o=n.enabledPlugins??{};n.enabledPlugins={...o,[e]:t},Ls(n,r);}function Lu(e){let t=new Map;for(let r of e){let n=t.get(r.scope);(!n||r.installedAt>n.installedAt)&&t.set(r.scope,r);}return [...t.values()]}function Ce(){let e=Me(),t=oo(),r=oo("project"),n=oo("local"),o={project:r,local:n},i=Object.entries(e.plugins).flatMap(([l,u])=>{let{name:g,marketplace:v}=Zt(l),d=u.map(m=>m.scope==="managed"?{...m,scope:"user"}:m);return Lu(d).map(m=>{let h=Cu(m.installPath,g),y=(o[m.scope]??t)[l];return {name:g,marketplace:v,version:m.version&&m.version!=="unknown"?m.version:void 0,installedAt:m.installedAt,installPath:m.installPath,scope:m.scope,description:h?.description,author:h?.author,status:y===false?"disabled":"enabled"}})}),s=Ts(),c=new Set(i.map(l=>`${l.name}@${l.scope}`)),a=s.filter(l=>!c.has(`${l.name}@${l.scope}`));return [...i,...a]}async function Vr(e,t){ce.debug(`[${e}] Acquiring lock to uninstall`);let r=await ze();try{let n=Me(),o=Au(e,n.plugins);if(!o)throw new Error(`Plugin '${e}' is not in installed_plugins.json. If this is an MCP server from config, use the MCP remove command instead.`);let{key:i,name:s}=o,c=n.plugins[i];if(t){let a=c.find(g=>g.scope===t);if(!a)throw new Error(`Plugin '${s}' is not installed in ${t} scope`);ce.debug(`[${s}] Resolved key: ${i}, scope: ${t}`),ks(a.installPath);let l=j__default.dirname(a.installPath);ce.debug(`[${s}] Removing directory: ${l}`),W__default.rmSync(l,{recursive:!0,force:!0});let u=c.filter(g=>g.scope!==t);if(u.length===0){let{[i]:g,...v}=n.plugins;gt({...n,plugins:v}),io(i,t),to(s);}else n.plugins[i]=u,gt(n),io(i,t);}else {ce.debug(`[${s}] Resolved key: ${i}`);for(let u of c){ks(u.installPath);let g=j__default.dirname(u.installPath);ce.debug(`[${s}] Removing directory: ${g}`),W__default.rmSync(g,{recursive:!0,force:!0}),io(i,u.scope);}to(s);let{[i]:a,...l}=n.plugins;gt({...n,plugins:l});}await Pu(s,c[0].origin??"internal"),ce.debug(`[${s}] Uninstalled successfully`);}finally{await r();}}async function Qt(e,t,r){ce.debug(`[${e}] Acquiring lock to set status \u2192 ${t}`);let n=await ze();try{let o=Me(),{key:i,name:s}=$u(e,o.plugins),c=o.plugins[i],a=r??c[0].scope,l=c[0].origin??"internal";ce.debug(`[${s}] Resolved key: ${i}, scope: ${a}`),Qn(i,t==="enabled",a),Eu(s,t,l),ce.debug(`[${s}] Status updated to ${t}`);}finally{await n();}}var J=create(e=>({installedItems:[],setInstalledItems:t=>e({installedItems:t}),loadFromDisk:()=>e({installedItems:Ce()})}));var K=["discover","installed"];function Rs(e,t,r){if(t.rightArrow||t.tab){let n=K.indexOf(r.activeTab);return [{type:"setTab",tab:K[(n+1)%K.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}if(t.leftArrow){let n=K.indexOf(r.activeTab);return [{type:"setTab",tab:K[(n-1+K.length)%K.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}return t.downArrow?[{type:"setFocus",focus:"list"}]:[]}function _s(e,t,r,n){if(t.upArrow)return r.selectedIndex===0?[{type:"setSelectedIndex",index:-1},{type:"setFocus",focus:"search"}]:[{type:"setSelectedIndex",index:r.selectedIndex-1}];if(t.downArrow&&r.selectedIndex<n-1)return [{type:"setSelectedIndex",index:r.selectedIndex+1}];if(t.leftArrow){let o=K.indexOf(r.activeTab);return [{type:"setTab",tab:K[(o-1+K.length)%K.length]},{type:"setSelectedIndex",index:0}]}if(t.rightArrow){let o=K.indexOf(r.activeTab);return [{type:"setTab",tab:K[(o+1)%K.length]},{type:"setSelectedIndex",index:0}]}if(t.tab){let o=K.indexOf(r.activeTab);return [{type:"setTab",tab:K[(o+1)%K.length]},{type:"setSelectedIndex",index:0}]}return t.return?[{type:"setActionMenuOpen",open:true},{type:"setFocus",focus:"actionMenu"}]:e==="/"?[{type:"setFocus",focus:"search"}]:e==="1"?[{type:"selectAllTypes"}]:e==="2"?[{type:"toggleTypeFilter",catalogType:"skill"}]:e==="3"?[{type:"toggleTypeFilter",catalogType:"mcp"}]:e==="4"?[{type:"toggleTypeFilter",catalogType:"plugin"}]:e==="5"?[{type:"selectAllOrigins"}]:e==="6"?[{type:"toggleOriginFilter",origin:"internal"}]:e==="7"?[{type:"toggleOriginFilter",origin:"external"}]:e&&e!==" "&&!t.ctrl&&!t.meta&&!t.escape?[{type:"setSelectedIndex",index:-1},{type:"setFocus",focus:"search"},{type:"searchAppend",char:e}]:[]}function Ms(e,t){return t.escape?[{type:"setActionMenuOpen",open:false},{type:"setFocus",focus:"list"}]:[]}function Os(e,t,r){return t.escape?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:"reset"}:t.downArrow?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:null}:t.leftArrow?{actions:[],queryUpdate:{cursorMove:-1}}:t.rightArrow?{actions:[],queryUpdate:{cursorMove:1}}:t.return?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:null}:t.backspace?r.length===0?{actions:[{type:"setFocus",focus:"list"},{type:"setSelectedIndex",index:0}],queryUpdate:null}:{actions:[],queryUpdate:{backspace:true}}:e&&!t.ctrl&&!t.meta?{actions:[],queryUpdate:{append:e}}:{actions:[],queryUpdate:null}}function zr(e){let{setActiveTab:t,setFocus:r,setSelectedIndex:n,setActionMenuOpen:o}=f.getState();for(let i of e)if(i.type==="setTab")t(i.tab);else if(i.type==="setFocus")r(i.focus);else if(i.type==="setSelectedIndex")n(i.index);else if(i.type==="setActionMenuOpen")o(i.open);else if(i.type==="searchAppend"){let{setQuery:s,query:c,setCursorPosition:a,cursorPosition:l}=ee.getState();s(c.slice(0,l)+i.char+c.slice(l)),a(l+i.char.length);}else i.type==="toggleTypeFilter"?f.getState().toggleTypeFilter(i.catalogType):i.type==="selectAllTypes"?f.getState().selectAllTypes():i.type==="toggleOriginFilter"?f.getState().toggleOriginFilter(i.origin):i.type==="selectAllOrigins"&&f.getState().selectAllOrigins();}function Ds({listLength:e}){let t=f(m=>m.focus),r=f(m=>m.selectedIndex),n=f(m=>m.actionMenuOpen),o=f(m=>m.setFocus),i=f(m=>m.setActionMenuOpen),s=ee(m=>m.query),c=ee(m=>m.setQuery),a=ee(m=>m.resetQuery),l=useRef(e);useEffect(()=>{l.current=e;},[e]),useEffect(()=>{if(t==="search"){let{query:m,setCursorPosition:h}=ee.getState();h(m.length);}},[t]);let[u,g]=useState("");useEffect(()=>{let m=setTimeout(()=>g(s),300);return ()=>clearTimeout(m)},[s]),useInput((m,h)=>{let{activeTab:T,selectedIndex:y,actionMenuOpen:R}=f.getState();zr(Rs(m,h,{activeTab:T}));},{isActive:t==="tabs"}),useInput((m,h)=>{let{activeTab:T,selectedIndex:y,actionMenuOpen:R}=f.getState();zr(_s(m,h,{activeTab:T,selectedIndex:y},l.current));},{isActive:t==="list"}),useInput((m,h)=>{zr(Ms(m,h));},{isActive:t==="actionMenu"}),useInput((m,h)=>{let T=Os(m,h,ee.getState().query),y=T.queryUpdate;if(zr(T.actions),y==="reset")a(),g("");else if(y!==null){let{query:R,cursorPosition:A,setCursorPosition:G}=ee.getState();if("backspace"in y)A>0&&(c(R.slice(0,A-1)+R.slice(A)),G(A-1));else if("append"in y)c(R.slice(0,A)+y.append+R.slice(A)),G(A+y.append.length);else if("cursorMove"in y){let Y=A+y.cursorMove;Y>=0&&Y<=R.length&&G(Y);}}},{isActive:t==="search"});let v=useCallback(()=>{i(false),o("list");},[i,o]),d=useCallback(m=>{let{setSelectedIndex:h,selectedIndex:T}=f.getState();m===0?h(0):T>=m&&h(m-1);},[]),E=useCallback(m=>{if(!u)return l.current=m.length,m;let h=u.toLowerCase(),T=m.filter(y=>y.name.toLowerCase().includes(h)||y.description?.toLowerCase().includes(h));return l.current=T.length,T},[u]);return {actionMenuOpen:n,closeMenu:v,selectedIndex:r,clampIndex:d,filteredItems:E}}function Fs(){let e=f(c=>c.notification),t=f(c=>c.showNotification),r=f(c=>c.clearNotification),n=ge(c=>c.justAuthenticated),o=ge(c=>c.credentials),i=ge(c=>c.setJustAuthenticated);return useEffect(()=>{n&&o&&(t(`Authenticated. Tenant: ${o.tenant}`,"success"),i(false));},[n,o]),useEffect(()=>{if(!e)return;let c=setTimeout(r,3e3);return ()=>clearTimeout(c)},[e]),{notify:(c,a)=>{t(c,a);}}}function Oe(e,t,r=false){return r?true:!uo.valid(e)||!uo.valid(t)?false:uo.gt(t,e)}M();$();var De=S("updater");async function Ou(e,t,r,n,o){try{await b(x.CLI_TOOL_UPDATED,{tool_id:e,tool_type:"plugin",source:o,from_version:t,to_version:r,duration_ms:n,interface:L().interfaceType});}catch(i){De.warn(`Failed to send update metrics: ${String(i)}`);}}function Du(e){let t=Me(),r=`${e}@${N}`,n=t.plugins[r];return !n||n.length===0?null:{pluginKey:r,entry:n[0]}}async function qr(e,t={}){let r=Date.now(),n=null;try{De.debug(`[${e}] Acquiring lock...`),n=await ze();let o=Du(e);if(!o)throw De.error(`[${e}] Plugin is not installed`),new Error(`Plugin "${e}" is not installed`);let{entry:i}=o,s=i.version,c=i.installPath;De.debug(`[${e}] Fetching manifest...`);let l=(await $t(e)).version;if(!s||!Oe(s,l,t.force))throw De.debug(`[${e}] Already up to date (v${s??"n/a"})`),new qe(e,s??"unknown");De.info(`[${e}] Updating v${s} \u2192 v${l}...`),await n(),n=null;try{let u=await ke(e,{force:!0,skipMetrics:!0}),g=Date.now()-r;return await Ou(u.name,s,u.version,g,i.origin??"internal"),De.debug(`[${e}] Updated successfully in ${g}ms`),{name:u.name,previousVersion:s,newVersion:u.version,path:u.path,duration_ms:g}}catch(u){De.warn(`[${e}] Install failed, rolling back to v${s}...`),n=await ze();let g=Me(),v=`${e}@${N}`;throw g.plugins[v]&&(g.plugins[v][0].version=s,g.plugins[v][0].installPath=c,gt(g),De.info(`[${e}] Rollback completed, restored to v${s}`)),u}}finally{n&&await n();}}$();$();var Nu=S("commands:helpers");async function re(){let e=await F();if(!e)return k("Not authenticated. Run: flow auth login"),false;try{await Be();}catch(t){return Nu.debug(`Token validation failed: ${String(t)}`),k("Session expired. Run: flow auth login"),false}return !e.starterKit||e.starterKit.trim()===""?(k("Starter kit not set. Run: flow auth login"),false):true}async function Xe(e){let t=po.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(p(e),n=>{t.close(),r(["y","yes"].includes(n.toLowerCase().trim()));});})}async function Us(e){let t=po.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(p(e),n=>{t.close(),r(n.trim());});})}var Fu=/^[^@]+@[^@]+$/;function er(e){return Fu.test(e)}function At(e){let t=e.indexOf("@");return t>0?e.slice(0,t):e}var Uu=/^[a-zA-Z0-9][a-zA-Z0-9._/-]*$/;function Ks(e){if(!Uu.test(e))throw new Error(`Invalid plugin name: "${e}". Plugin names must start with an alphanumeric character and contain only letters, digits, dots, hyphens, underscores, and slashes.`)}var Ku=/^[\w./:@?&=+#%-]+$/;function Wr(e){let t=e.trim();if(!t)throw new Error("No marketplace source provided.");if(!Ku.test(t))throw new Error(`Invalid marketplace source: "${t}". Must be owner/repo or a URL (no spaces or special characters).`);return t}var tr=S("claudeProxy"),go="claude ",js="flow ",mo=class extends Error{constructor(t){super(`Invalid install command: "${t}". Command must start with "claude " for security.`),this.name="InvalidInstallCommandError";}},fo=class extends Error{constructor(t){super(`Disallowed subcommand: "${t}". Only "plugin install", "plugin marketplace add", "mcp add", and "mcp remove" are permitted.`),this.name="DisallowedSubcommandError";}},ju=/^plugins?\s+(install|i)\s+|^plugins?\s+marketplace\s+add\s+|^mcp\s+(add|remove)\s+/;function Bu(e){Js(e);let t=e.slice(go.length);if(!ju.test(t))throw new fo(e)}var Xr=class extends Error{constructor(){super('Claude Code CLI not found. Ensure "claude" is installed and available on your PATH.'),this.name="ClaudeCliNotFoundError";}};function Js(e){if(!e||!/^claude /.test(e))throw new mo(e)}async function ue(e){Js(e);let t=e.slice(go.length).split(/\s+/).filter(Boolean),r=Ju(t);tr.debug(`[${r}] Executing proxy command: claude ${t.join(" ")}`);let n=Date.now();try{let o=await execa("claude",t,{reject:!1}),i=Date.now()-n;return tr.debug(`[${r}] Proxy command finished with exit code ${o.exitCode} in ${i}ms`),{name:r,command:e,exitCode:o.exitCode??1,stdout:o.stdout,stderr:o.stderr,duration_ms:i}}catch(o){throw Hs(o)?new Xr:o}}function Ju(e){return e.length>=3?e[2]:e.join(" ")}function Hs(e){return e instanceof Error&&"code"in e&&e.code==="ENOENT"}function Hu(e){return e.startsWith(js)?go+e.slice(js.length):e}var Vu=/^claude\s+(?:plugins?\s+(?:install|i)\s+|mcp\s+(?:add|remove)\s+)/;function Gu(e,t){return !t||e.includes("--scope")||!Vu.test(e)?e:`${e} --scope ${t}`}async function Vs(e,t){let r=e.split("&&").map(o=>Hu(o.trim())).filter(Boolean).map(o=>Gu(o,t));if(r.length===0)throw new Error("Empty install command");for(let o of r)Bu(o);tr.debug(`[installCommand] Executing ${r.length} command(s)`);let n=await ue(r[0]);if(n.exitCode!==0)return n;for(let o=1;o<r.length;o++)if(n=await ue(r[o]),n.exitCode!==0)return n;return n}async function Gs(e,t,r){let n=At(e),o=t?.trim();if(!o&&(o=(await Us(`Plugin "${n}" could not be installed.
23
+ If a marketplace is needed, enter the source (owner/repo or URL), or press Enter to skip: `))?.trim(),!o))throw new Error("No marketplace source provided. Cannot retry install.");o=Wr(o),r?.(),tr.debug(`[${n}] Adding marketplace via: claude plugin marketplace add ${o}`);try{let i=await execa("claude",["plugin","marketplace","add",o],{reject:!1});if(i.exitCode!==0)throw new Error(`Failed to add marketplace: ${i.stderr||"unknown error"}`);tr.debug(`[${n}] Marketplace added successfully`);}catch(i){throw Hs(i)?new Xr:i}}M();$();var Ye=S("installDispatcher");async function zs(e,t,r){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"plugin",source:"external",scope:Br(r),version:"unknown",duration_ms:t,interface:L().interfaceType});}catch(n){Ye.warn(`Failed to send external install metrics: ${String(n)}`);}}async function qs(e,t){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"plugin",source:"external",error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:L().interfaceType});}catch(r){Ye.warn(`Failed to send external install-failed metrics: ${String(r)}`);}}function yo(e,t){let r=At(e);Ks(r);let n=["claude","plugin","install",r];return t&&n.push("--scope",t),n.join(" ")}async function So(e,t,r,n){let o=yo(e,n),i=At(e);r?.onStatus?.(`Installing ${i}...`),Ye.debug(`[${e}] Attempting install: ${o}`);let s=await ue(o);return s.exitCode===0?s:(Ye.debug(`[${e}] Install failed (exit ${s.exitCode}), attempting marketplace add`),r?.onError?.(s.stderr||`Install failed with exit code ${s.exitCode}`),t?r?.onStatus?.(`Adding marketplace for ${i}...`):r?.onPause?.(),await Gs(e,t,()=>{t||r?.onResume?.(`Adding marketplace for ${i}...`);}),r?.onResume?.(`Retrying install for ${i}...`),Ye.debug(`[${e}] Retrying install after marketplace add`),ue(o))}async function Ws(e,t){if(e.origin===ur&&e.installCommand){Ye.debug(`[${e.name}] Routing to external installer via installCommand`);let r=await Vs(e.installCommand,t?.scope);return r.exitCode===0?await zs(e.name,r.duration_ms,t?.scope):await qs(e.name,new Error(r.stderr||"Install failed")),r}if(er(e.name)){Ye.debug(`[${e.name}] Routing to external installer via name pattern`);let r=await So(e.name,t?.marketplaceSource,void 0,t?.scope);return r.exitCode===0?await zs(e.name,r.duration_ms,t?.scope):await qs(e.name,new Error(r.stderr||"Install failed")),r}return Ye.debug(`[${e.name}] Routing to internal installer`),ke(e.name,t)}function Xs(e){return "exitCode"in e}function Ys(){let e=J(s=>s.installedItems),t=J(s=>s.setInstalledItems),r=useCallback(async(s,c)=>{let a=await Ws(s,c);if(Xs(a)&&a.exitCode!==0)throw new Error(a.stderr||"External installation failed");J.getState().loadFromDisk();},[]),n=useCallback(async(s,c)=>{await Vr(s,c),t(e.filter(a=>a.name!==s));},[e,t]),o=useCallback(async(s,c)=>{let l=e.find(u=>u.name===s)?.status==="enabled"?"disabled":"enabled";await Qt(s,l,c),t(e.map(u=>u.name===s?{...u,status:l}:u));},[e,t]),i=useCallback(async s=>{await qr(s),J.getState().loadFromDisk();},[]);return {install:r,uninstall:n,toggle:o,update:i}}$();var Zr=S("mcp");function rr(e,t){e.silent?ae({status:"error",mcp:t.name,...t.exitCode!==void 0&&{exitCode:t.exitCode},message:t.message}):k(`Failed to ${t.action} MCP "${t.name}": ${t.message}`);}function Qs(e,t){e.silent?Q({status:"success",mcp:t.name,command:t.command,duration_ms:t.durationMs}):(q(`MCP "${t.name}" ${t.actionPastTense} successfully`),e.verbose&&t.stdout&&I(t.stdout));}function zu(e,t,r,n){let o=["claude","mcp","add","--transport",r,e];return t.length>0&&o.push(...t),n&&o.push("--scope",n),o.join(" ")}function ho(e,t){let r=["claude","mcp","remove",e];return t&&r.push("--scope",t),r.join(" ")}async function ea(e,t,r){if(!await re())return 1;if(t.length===0){let i=r.transport==="http"?"a URL":"a command";return rr(r,{name:e,action:"add",message:`${r.transport} transport requires ${i}`}),1}Zr.debug(`[${e}] Starting MCP add with args: ${t.join(" ")}`);let n=zu(e,t,r.transport,r.scope);if(!r.force){let i=p(e),s=p(n);if(!await Xe(`Install external MCP "${i}"?
22
24
  This will run: ${s}
23
- [y/N] `))return zn.debug(`[${e}] Installation cancelled by user`),I("Operation cancelled."),0}let o=n.silent?void 0:Eo({text:`Adding MCP "${p(e)}"...`}).start();try{let i=await ae(r);return o?.stop(),i.exitCode!==0?(Xt(n,{name:e,action:"add",message:i.stderr||"Command failed",exitCode:i.exitCode}),!n.silent&&n.verbose&&i.stdout&&I(`stdout: ${i.stdout}`),1):(Us(n,{name:e,actionPastTense:"added",command:r,durationMs:i.duration_ms,stdout:i.stdout}),0)}catch(i){return o?.stop(),Xt(n,{name:e,action:"add",message:D(i)}),1}}async function Ks(e,t){if(!await Q())return 1;zn.debug(`[${e}] Starting MCP remove`);let n=ao(e,t.scope);if(!t.force){let o=p(e),i=p(n);if(!await Je(`Remove MCP "${o}"?
25
+ [y/N] `))return Zr.debug(`[${e}] Installation cancelled by user`),I("Operation cancelled."),0}let o=r.silent?void 0:Oo({text:`Adding MCP "${p(e)}"...`}).start();try{let i=await ue(n);return o?.stop(),i.exitCode!==0?(rr(r,{name:e,action:"add",message:i.stderr||"Command failed",exitCode:i.exitCode}),!r.silent&&r.verbose&&i.stdout&&I(`stdout: ${i.stdout}`),1):(Qs(r,{name:e,actionPastTense:"added",command:n,durationMs:i.duration_ms,stdout:i.stdout}),0)}catch(i){return o?.stop(),rr(r,{name:e,action:"add",message:U(i)}),1}}async function ta(e,t){if(!await re())return 1;Zr.debug(`[${e}] Starting MCP remove`);let r=ho(e,t.scope);if(!t.force){let o=p(e),i=p(r);if(!await Xe(`Remove MCP "${o}"?
24
26
  This will run: ${i}
25
- [y/N] `))return zn.debug(`[${e}] Removal cancelled by user`),I("Operation cancelled."),0}let r=t.silent?void 0:Eo({text:`Removing MCP "${p(e)}"...`}).start();try{let o=await ae(n);return r?.stop(),o.exitCode!==0?(Xt(t,{name:e,action:"remove",message:o.stderr||"Command failed",exitCode:o.exitCode}),!t.silent&&t.verbose&&o.stdout&&I(`stdout: ${o.stdout}`),1):(Us(t,{name:e,actionPastTense:"removed",command:n,durationMs:o.duration_ms,stdout:o.stdout}),0)}catch(o){return r?.stop(),Xt(t,{name:e,action:"remove",message:D(o)}),1}}function Js({selectedItem:e,selectedCatalogItem:t,items:n,closeMenu:r,clampIndex:o,notify:i}){let s=S("pluginHandlers"),c=f(y=>y.setLoading),{install:a,uninstall:l,toggle:u,update:g}=Ns(),v=async(y,L,A)=>{c(true,y),r();try{await L(),o(n.length),i(A,"success");}catch(J){let q=J instanceof Error?J.message:"Something went wrong";s.error(`[withLoading] ${y} failed: ${q}`),i(q,"error");}finally{c(false);}};return {handleInstall:y=>{e&&t&&v(`Installing ${e.name}...`,()=>a(t,{scope:y}),"\u2713 Installed successfully");},handleUninstall:y=>{e&&v(`Uninstalling ${e.name}...`,()=>l(e.name,y),"\u2713 Uninstalled");},handleToggleStatus:y=>{if(!e)return;let L=e.status==="enabled";v(L?`Disabling ${e.name}...`:`Enabling ${e.name}...`,()=>u(e.name,y),L?"\u2713 Disabled":"\u2713 Enabled");},handleUpdate:()=>{if(!e)return;let y=t?` to v${t.version}`:"";(async()=>{c(true,`Updating ${e.name}${y}...`),r();try{await g(e.name),o(n.length),i(`\u2713 Updated ${e.name}${y}`,"success");}catch(A){if(A instanceof je)i(A.message,"info");else {let J=A instanceof Error?A.message:"Something went wrong";s.error(`[handleUpdate] ${e.name} failed: ${J}`),i(J,"error");}}finally{c(false);}})();},handleMcpConfigUninstall:y=>{e&&v(`Removing MCP ${e.name}...`,async()=>{let L=ao(e.name,y),A=await ae(L);if(A.exitCode!==0)throw new Error(A.stderr||"MCP removal failed");U.getState().loadFromDisk();},"\u2713 MCP removed");}}}var Yt=["local","project","user"],Mu=new Set(["--transport","--scope","-s"]);function Hs(e){let t=e.split(/\s+/).filter(Boolean),n=t.indexOf("add");if(n===-1)return null;let r=n+1;for(;r<t.length;){let o=t[r];if(Mu.has(o))r+=2;else if(o.startsWith("-"))r+=1;else return o.replace(/^["']|["']$/g,"")}return null}function Zt(e,t){return t?`${e}::${t}`:e}function lo(e){return e===_?Ct:on}function Vs(e){return {name:p(e.name),version:e.version?p(e.version):e.version,description:e.description?p(e.description):e.description,authorName:e.author.name?p(e.author.name):e.author.name,updateAvailable:e.updateAvailable,type:e.type??"plugin",origin:e.origin??Ct}}function Gs(e,t){let n=lo(e.marketplace);return {name:p(e.name),version:e.version?p(e.version):e.version,description:e.description?p(e.description):e.description,authorName:e.author?.name?p(e.author.name):e.author?.name,status:e.status,scope:e.scope,updateAvailable:e.updateAvailable,installedAt:e.installedAt,type:t?.type??e.type??"plugin",origin:t?.origin??n}}function zs(e){let t=new Map;for(let n of e){if(!n.scope)continue;let r=t.get(n.scope)??[];r.push(n),t.set(n.scope,r);}return Yt.filter(n=>t.has(n)).map(n=>({scope:n,label:At[n].label,pathHint:At[n].pathHint,items:t.get(n)??[]}))}function qs(e){let t=n=>{if(!n)return 1/0;let r=Yt.indexOf(n);return r===-1?1/0:r};return [...e].sort((n,r)=>t(n.scope)-t(r.scope))}function Ws({catalog:e,installedItems:t,activeTab:n,catalogFilters:r,searchQuery:o}){let i=useMemo(()=>new Set(t.map(d=>Zt(d.name,d.author?.name))),[t]),s=useMemo(()=>new Set(t.filter(d=>d.type==="mcp").map(d=>d.name.toLowerCase())),[t]),c=useMemo(()=>{let d=new Map(e.map(E=>[Zt(E.name,E.author.name),E]));return t.map(E=>{let m=d.get(Zt(E.name,E.author?.name)),h=m?.version,T=!!h&&!!E.version&&Ae(E.version,h);return {...E,updateAvailable:T,catalogItem:m}})},[t,e]),a=useMemo(()=>n==="discover"?e.filter(d=>{if(i.has(Zt(d.name,d.author.name)))return false;if(d.type==="mcp"){let E=d.installCommand?Hs(d.installCommand)?.toLowerCase():null;if(s.has(d.name.toLowerCase())||E&&s.has(E))return false}return true}).map(d=>Vs(d)):c.map(d=>Gs(d,d.catalogItem)),[n,e,i,s,c]),l=useMemo(()=>a.filter(d=>{let E=d.type??"plugin";if(!r.types.has(E))return false;let m=d.origin??"internal";return r.origins.has(m)}),[a,r]),u=useMemo(()=>{let{types:d}=r;if(d.size===1){if(d.has("skill"))return "skills";if(d.has("mcp"))return "MCPs";if(d.has("plugin"))return "plugins"}return "items"},[r]),g=useMemo(()=>n==="installed"?o?`No ${u} found for '${o}' \u2014 explore the Discover tab!`:`No ${u} installed \u2014 explore the Discover tab!`:o?`No ${u} found for '${o}'`:`No ${u} available in the catalog`,[n,o,u]),v=useMemo(()=>d=>d?e.find(E=>E.name===d.name&&E.author.name===d.authorName)??null:null,[e]);return {items:l,emptyMessage:g,getSelectedCatalogItem:v}}function Xs(){let[e,t]=useState([]),[n,r]=useState(true),[o,i]=useState(null),s=useRef(false),c=useCallback(async()=>{r(true),i(null);try{let a=await xe();t(a),s.current||(s.current=!0,b(x.CLI_CATALOG_VIEWED,{interface:"tui",filter_type:"all",result_count:a.length}).catch(()=>{}));}catch(a){i(a instanceof Error?a:new Error(String(a))),t([]);}finally{r(false);}},[]);return useEffect(()=>{c();},[c]),{catalog:e,isLoading:n,error:o,refetch:c}}function Ys(){return {items:U(t=>t.installedItems)}}var Nu=S("catalog");function Zs(){let e=f(R=>R.activeTab),t=f(R=>R.notification),n=f(R=>R.loading),r=f(R=>R.loadingMessage),o=f(R=>R.catalogError),i=f(R=>R.setCatalogError),s=f(R=>R.catalogFilters),c=Y(R=>R.query),{catalog:a,isLoading:l,error:u,refetch:g}=Xs(),{items:v}=Ys(),d=U(R=>R.loadFromDisk),{items:E,emptyMessage:m,getSelectedCatalogItem:h}=Ws({catalog:a,installedItems:v,activeTab:e,catalogFilters:s,searchQuery:c}),{actionMenuOpen:T,closeMenu:y,selectedIndex:L,clampIndex:A,filteredItems:J}=vs({listLength:E.length}),q=J(E),Ee=useMemo(()=>e!=="installed"?q:qs(q),[e,q]),cr=useMemo(()=>e==="installed"?zs(Ee):[],[e,Ee]),H=Ee[L]??null,w=useMemo(()=>h(H),[h,H]),{notify:te}=Es(),{handleInstall:K,handleUninstall:F,handleToggleStatus:ur,handleUpdate:pr,handleMcpConfigUninstall:$o}=Js({selectedItem:H,selectedCatalogItem:w,items:E,closeMenu:y,clampIndex:A,notify:te});return useEffect(()=>{d();},[]),useEffect(()=>{A(Ee.length);},[Ee.length,A]),useEffect(()=>{u&&(Nu.error(`[catalog] ${u instanceof Error?u.message:String(u)}`),i("Failed to load catalog"));},[u]),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(kn,{}),jsx(wi,{}),jsx(Bi,{filteredItems:Ee,groups:cr,emptyMessage:m}),(n||l)&&jsx(Ln,{message:n?r:"Loading catalog..."}),o&&!l&&e==="discover"&&jsx(Rn,{message:o,onRetry:()=>{i(null),g();},onBack:()=>i(null)}),t&&jsx(Fi,{message:t.message,type:t.type}),T&&H&&(e==="discover"?jsx(Xi,{itemName:H.name,onInstall:K,onClose:y}):H.type==="mcp"?jsx(ns,{itemName:H.name,itemScope:H.scope??"user",onUninstall:$o,onClose:y}):jsx(Qi,{itemName:H.name,itemScope:H.scope??"user",itemStatus:H.status??"enabled",updateAvailable:H.updateAvailable??false,catalogVersion:w?.version,onUninstall:F,onToggleStatus:R=>ur(R),onUpdate:pr,onClose:y})),jsx($n,{})]})}var P=create((e,t)=>({bundles:[],selectedBundleIndex:0,selectedBundle:null,plugins:[],pluginCursorIndex:0,step:"bundleList",isLoadingBundles:false,bundlesError:null,successCount:0,failedCount:0,summaryActionIndex:0,setBundles:n=>e({bundles:n}),setSelectedBundleIndex:n=>e({selectedBundleIndex:n}),selectBundle:n=>{let r=new Set(U.getState().installedItems.map(o=>o.name));e({selectedBundle:n,plugins:n.plugins.map(o=>({name:o,selected:true,status:r.has(o)?"success":"pending",installed:r.has(o)})),pluginCursorIndex:0,step:"bundleDetail"});},setPluginCursorIndex:n=>e({pluginCursorIndex:n}),setStep:n=>e({step:n}),setPluginStatus:(n,r,o)=>{let i=t().plugins.map(s=>s.name===n?{...s,status:r,error:o}:s);e({plugins:i});},setIsLoadingBundles:n=>e({isLoadingBundles:n}),setBundlesError:n=>e({bundlesError:n}),setSummaryActionIndex:n=>e({summaryActionIndex:n}),computeSummary:()=>{let r=t().plugins.filter(o=>o.selected);e({successCount:r.filter(o=>o.status==="success").length,failedCount:r.filter(o=>o.status==="failed").length});},resetForRetry:()=>{let n=t().plugins.map(r=>r.status==="failed"?{...r,status:"pending",error:void 0}:r);e({plugins:n,step:"installing"});},goBackToList:()=>e({selectedBundle:null,plugins:[],pluginCursorIndex:0,step:"bundleList"})}));var Ku=3;function ea(){let e=P(a=>a.setBundles),t=P(a=>a.setIsLoadingBundles),n=P(a=>a.setBundlesError),r=P(a=>a.setPluginStatus),o=P(a=>a.setStep),i=P(a=>a.computeSummary),s=useCallback(async()=>{t(true),n(null);try{let a=await Nn();e(a);}catch(a){n(a instanceof Error?a.message:String(a));}finally{t(false);}},[t,n,e]);useEffect(()=>{U.getState().loadFromDisk(),s();},[s]);let c=useCallback(async()=>{let a=P.getState().plugins.filter(u=>u.selected&&u.status==="pending");for(let u of a){r(u.name,"installing");let g="",v=false;for(let d=1;d<=Ku;d++)try{await Ie(u.name),r(u.name,"success"),v=!0;break}catch(E){if(E instanceof we){r(u.name,"success"),v=true;break}g=E instanceof Error?E.message:"Unknown error";}v||(r(u.name,"failed",g),b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:u.name,tool_type:"plugin",source:"internal",error_code:"install_failed",error_message:g,interface:$().interfaceType}).catch(()=>{}));}let l=tt();et("summary_review"),b(x.CLI_STEP_COMPLETED,{step:"tool_installation",duration_ms:l}).catch(()=>{}),U.getState().loadFromDisk(),i(),o("summary");},[r,i,o]);return {loadBundles:s,installSelected:c}}var Qt={cursorDelta:0,confirm:false,back:false};function ta(e,t){return t.upArrow?{...Qt,cursorDelta:-1}:t.downArrow?{...Qt,cursorDelta:1}:t.escape?{...Qt,back:true}:t.return?{...Qt,confirm:true}:Qt}var Ju={cursorDelta:0,select:false};function na(e,t){return t.upArrow?{cursorDelta:-1,select:false}:t.downArrow?{cursorDelta:1,select:false}:t.return?{cursorDelta:0,select:true}:Ju}var ra=fc.memo(function({bundle:t,isSelected:n}){return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:n?"cyan":"gray",children:n?"\u203A ":"\u25CB "}),jsx(Text,{bold:n,color:n?"cyan":"white",children:p(t.name)}),jsxs(Text,{dimColor:true,children:[" \xB7 ",t.plugins.length," ",t.plugins.length===1?"plugin":"plugins"]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:p(t.description)})})]})});var yo=5;function oa({onRetry:e}){let t=P(u=>u.bundles),n=P(u=>u.selectedBundleIndex),r=P(u=>u.isLoadingBundles),o=P(u=>u.bundlesError);if(r)return jsx(Ln,{message:"Loading Starter Kits..."});if(o)return jsx(Rn,{message:o,onRetry:e,onBack:e});if(t.length===0)return jsx(It,{message:"No Starter Kits available."});let i=Math.max(0,n-Math.floor(yo/2)),s=Math.min(t.length,i+yo);s===t.length&&(i=Math.max(0,s-yo));let c=t.slice(i,s),a=i,l=t.length-s;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Select a Starter Kit to get started"})}),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",a," more above"]})}),c.map((u,g)=>jsx(ra,{bundle:u,isSelected:i+g===n},u.slug)),l>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",l," more below"]})})]})}var sa=fc.memo(function({plugin:t,isCursor:n}){return jsxs(Box,{children:[jsx(Text,{color:n?"cyan":"gray",children:n?"\u203A ":" "}),jsx(Text,{color:"cyan",children:"\u2022"}),jsxs(Text,{bold:n,color:n?"cyan":"white",children:[" ",p(t.name)]}),t.installed&&jsx(Text,{color:"green",children:" (installed)"})]})});var wo=8;function aa(){let e=P(u=>u.selectedBundle),t=P(u=>u.plugins),n=P(u=>u.pluginCursorIndex),r=useRef(false);if(useEffect(()=>{e&&!r.current&&(r.current=true,b(x.CLI_KIT_DISPLAYED,{bundle_slug:e.slug,tool_count:t.length}).catch(()=>{}));},[e,t.length]),!e)return jsx(Text,{dimColor:true,children:"No Starter Kit selected."});let o=t.filter(u=>u.installed).length,i=Math.max(0,n-Math.floor(wo/2)),s=Math.min(t.length,i+wo);s===t.length&&(i=Math.max(0,s-wo));let c=t.slice(i,s),a=i,l=t.length-s;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:[jsx(Text,{bold:true,color:"cyan",children:p(e.name)}),jsx(Text,{dimColor:true,children:p(e.description)})]}),jsx(Box,{paddingX:1,paddingBottom:1,children:jsxs(Text,{children:[t.length," plugins to install",o>0&&` \xB7 ${o} already installed`]})}),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",a," more above"]})}),c.map((u,g)=>jsx(sa,{plugin:u,isCursor:i+g===n},u.name)),l>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",l," more below"]})})]})}var Zu=["Retry failed","Continue anyway"];function la({name:e,status:t,error:n}){let r=p(e);return t==="installing"?jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx($c,{type:"dots"})}),jsxs(Text,{color:"cyan",children:[" ",r]})]}):t==="success"?jsx(Box,{children:jsxs(Text,{color:"green",children:["\u2713 ",r]})}):t==="failed"?jsxs(Box,{children:[jsxs(Text,{color:"red",children:["\u2717 ",r]}),n&&jsxs(Text,{dimColor:true,children:[" \u2014 ",p(n)]})]}):jsx(Box,{children:jsxs(Text,{dimColor:true,children:["\u25CB ",r]})})}function ca({onComplete:e,onRetry:t}){let n=P(l=>l.plugins),r=P(l=>l.step),o=P(l=>l.successCount),i=P(l=>l.failedCount),s=P(l=>l.summaryActionIndex),c=n.filter(l=>l.selected),a=useRef(false);return useEffect(()=>{if(r==="summary"&&i===0&&!a.current){a.current=true;let l=setTimeout(e,1500);return ()=>clearTimeout(l)}},[r,i,e]),r==="installing"?jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Installing plugins..."})}),jsx(Box,{flexDirection:"column",paddingX:1,children:c.map(l=>jsx(la,{name:l.name,status:l.status,error:l.error},l.name))})]}):jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Installation Complete"})}),jsxs(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:[o>0&&jsxs(Text,{color:"green",children:["\u2713 ",o," ",o===1?"plugin":"plugins"," installed successfully"]}),i>0&&jsxs(Text,{color:"red",children:["\u2717 ",i," ",i===1?"plugin":"plugins"," failed"]})]}),i>0&&jsx(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:c.filter(l=>l.status==="failed").map(l=>jsx(la,{name:l.name,status:l.status,error:l.error},l.name))}),i>0&&jsx(Box,{flexDirection:"column",paddingX:1,children:Zu.map((l,u)=>jsx(Box,{children:jsxs(Text,{bold:u===s,color:u===s?"cyan":void 0,children:[u===s?"\u203A ":" ",l]})},l))}),i===0&&jsx(Box,{paddingX:1,children:jsx(Text,{dimColor:true,children:"Proceeding to main screen..."})})]})}function ua(){let e=P(w=>w.step),t=P(w=>w.bundles),n=P(w=>w.selectedBundleIndex),r=P(w=>w.setSelectedBundleIndex),o=P(w=>w.selectBundle),i=P(w=>w.plugins),s=P(w=>w.pluginCursorIndex),c=P(w=>w.setPluginCursorIndex),a=P(w=>w.setStep),l=P(w=>w.summaryActionIndex),u=P(w=>w.setSummaryActionIndex),g=P(w=>w.failedCount),v=P(w=>w.resetForRetry),d=P(w=>w.goBackToList),E=f(w=>w.setScreen),m=f(w=>w.setFocus),h=f(w=>w.focus),T=ue(w=>w.setJustAuthenticated),y=ue(w=>w.justAuthenticated),{loadBundles:L,installSelected:A}=ea(),J=useRef(false);useEffect(()=>{e==="bundleList"?(m("bundleList"),J.current||(J.current=true,et("bundle_selection"))):m(e==="bundleDetail"?"bundleDetail":"installProgress");},[e,m]);let q=useCallback(async()=>{let w=P.getState().selectedBundle;if(w){let K=await O();K&&await Ze({...K,bundle:w.slug});}b(x.CLI_STEP_COMPLETED,{step:"summary_review",duration_ms:tt()}).catch(()=>{});let{successCount:te}=P.getState();b(x.CLI_ONBOARDING_COMPLETED,{duration_ms:De(),tools_installed_count:te}).catch(()=>{}),T(false),m("list"),E("main");},[T,m,E]),Ee=useCallback(()=>{v(),A();},[v,A]),cr=useCallback(()=>{L();},[L]),H=useCallback(()=>{m("list"),E("main");},[m,E]);return useInput((w,te)=>{if(te.escape)vn("esc"),H();else if(te.upArrow&&n>0)r(n-1);else if(te.downArrow&&n<t.length-1)r(n+1);else if(te.return&&t.length>0){let K=tt();o(t[n]),et("kit_display"),b(x.CLI_STEP_COMPLETED,{step:"bundle_selection",duration_ms:K}).catch(()=>{});}},{isActive:h==="bundleList"}),useInput((w,te)=>{let K=ta(w,te);if(K.cursorDelta!==0){let F=s+K.cursorDelta;F>=0&&F<i.length&&c(F);}if(K.confirm){let F=P.getState().selectedBundle;F&&(async()=>(await O())?.bundle!==F.slug&&b(x.CLI_KIT_ACCEPTED,{bundle_slug:F.slug}).catch(()=>{}))();let ur=tt();et("kit_confirmation"),b(x.CLI_STEP_COMPLETED,{step:"kit_display",duration_ms:ur}).catch(()=>{});let pr=tt();et("tool_installation"),b(x.CLI_STEP_COMPLETED,{step:"kit_confirmation",duration_ms:pr}).catch(()=>{}),a("installing"),A();}if(K.back){let F=P.getState().selectedBundle;F&&b(x.CLI_KIT_REJECTED,{bundle_slug:F.slug}).catch(()=>{}),d();}},{isActive:h==="bundleDetail"}),useInput((w,te)=>{if(g===0)return;let K=na(w,te);if(K.cursorDelta!==0){let F=l+K.cursorDelta;F>=0&&F<=1&&u(F);}K.select&&(l===0?Ee():q());},{isActive:h==="installProgress"&&e==="summary"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(kn,{}),jsxs(Box,{flexDirection:"column",paddingX:1,marginBottom:1,children:[jsx(Text,{dimColor:true,children:"The data collected during setup is used solely to improve"}),jsx(Text,{dimColor:true,children:"Flow's internal tools and will not be shared externally."}),!y&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"yellow",children:"Welcome back! We noticed your Starter Kit is not set up yet. Choose a Starter Kit below to get your recommended tools."})})]}),jsxs(Box,{flexDirection:"column",flexGrow:1,children:[e==="bundleList"&&jsx(oa,{onRetry:cr}),e==="bundleDetail"&&jsx(aa,{}),(e==="installing"||e==="summary")&&jsx(ca,{onComplete:q,onRetry:Ee})]}),jsx($n,{})]})}var np=S("app"),rp={auth:mi,bundleSetup:ua,main:Zs};function ma(){f.getState().setScreen("auth"),f.getState().setFocus("auth");}async function ga(){let e=await O();if(!e){ma();return}try{await Oe();}catch(o){np.debug(`Token validation failed: ${String(o)}`),ma();return}b(x.CLI_SESSION_STARTED,{cli_version:Be,os:process.platform,node_version:process.version,duration_ms:De(),interface:"tui"}).catch(()=>{});let{clientSecret:t,...n}=e;ue.getState().setCredentials(n),!e.bundle||e.bundle.trim()===""?(f.getState().setScreen("bundleSetup"),f.getState().setFocus("bundleList")):(f.getState().setScreen("main"),f.getState().setFocus("list"));}function ya(){let{columns:e,rows:t}=useWindowSize(),n=f(i=>i.screen),r=rp[n],{pendingExit:o}=pi();return r?jsxs(Box,{flexDirection:"column",width:e,height:t,children:[jsx(r,{}),o&&jsx(Box,{paddingX:1,children:jsx(Text,{color:"yellow",children:"Press Ctrl+C again to quit"})})]}):jsxs(Text,{color:"red",children:["Unknown screen: ",n]})}var Pe=S("auth");function Sa(){W.clearFallbackFile(),Sn();}var op=3,ha=3,wa=` \u2139 The data collected during setup is used solely to improve
27
+ [y/N] `))return Zr.debug(`[${e}] Removal cancelled by user`),I("Operation cancelled."),0}let n=t.silent?void 0:Oo({text:`Removing MCP "${p(e)}"...`}).start();try{let o=await ue(r);return n?.stop(),o.exitCode!==0?(rr(t,{name:e,action:"remove",message:o.stderr||"Command failed",exitCode:o.exitCode}),!t.silent&&t.verbose&&o.stdout&&I(`stdout: ${o.stdout}`),1):(Qs(t,{name:e,actionPastTense:"removed",command:r,durationMs:o.duration_ms,stdout:o.stdout}),0)}catch(o){return n?.stop(),rr(t,{name:e,action:"remove",message:U(o)}),1}}$();function ra({selectedItem:e,selectedCatalogItem:t,items:r,closeMenu:n,clampIndex:o,notify:i}){let s=S("pluginHandlers"),c=f(y=>y.setLoading),{install:a,uninstall:l,toggle:u,update:g}=Ys(),v=async(y,R,A)=>{c(true,y),n();try{await R(),o(r.length),i(A,"success");}catch(G){let Y=G instanceof Error?G.message:"Something went wrong";s.error(`[withLoading] ${y} failed: ${Y}`),i(Y,"error");}finally{c(false);}};return {handleInstall:y=>{e&&t&&v(`Installing ${e.name}...`,()=>a(t,{scope:y}),"\u2713 Installed successfully");},handleUninstall:y=>{e&&v(`Uninstalling ${e.name}...`,()=>l(e.name,y),"\u2713 Uninstalled");},handleToggleStatus:y=>{if(!e)return;let R=e.status==="enabled";v(R?`Disabling ${e.name}...`:`Enabling ${e.name}...`,()=>u(e.name,y),R?"\u2713 Disabled":"\u2713 Enabled");},handleUpdate:()=>{if(!e)return;let y=t?` to v${t.version}`:"";(async()=>{c(true,`Updating ${e.name}${y}...`),n();try{await g(e.name),o(r.length),i(`\u2713 Updated ${e.name}${y}`,"success");}catch(A){if(A instanceof qe)i(A.message,"info");else {let G=A instanceof Error?A.message:"Something went wrong";s.error(`[handleUpdate] ${e.name} failed: ${G}`),i(G,"error");}}finally{c(false);}})();},handleMcpConfigUninstall:y=>{e&&v(`Removing MCP ${e.name}...`,async()=>{let R=ho(e.name,y),A=await ue(R);if(A.exitCode!==0)throw new Error(A.stderr||"MCP removal failed");J.getState().loadFromDisk();},"\u2713 MCP removed");}}}M();var nr=["local","project","user"],qu=new Set(["--transport","--scope","-s"]);function na(e){let t=e.split(/\s+/).filter(Boolean),r=t.indexOf("add");if(r===-1)return null;let n=r+1;for(;n<t.length;){let o=t[n];if(qu.has(o))n+=2;else if(o.startsWith("-"))n+=1;else return o.replace(/^["']|["']$/g,"")}return null}function or(e,t){return t?`${e}::${t}`:e}function wo(e){return e===N?Mt:ur}function oa(e){return {name:p(e.name),version:e.version?p(e.version):e.version,description:e.description?p(e.description):e.description,authorName:e.author.name?p(e.author.name):e.author.name,updateAvailable:e.updateAvailable,type:e.type??"plugin",origin:e.origin??Mt}}function ia(e,t){let r=wo(e.marketplace);return {name:p(e.name),version:e.version?p(e.version):e.version,description:e.description?p(e.description):e.description,authorName:e.author?.name?p(e.author.name):e.author?.name,status:e.status,scope:e.scope,updateAvailable:e.updateAvailable,installedAt:e.installedAt,type:t?.type??e.type??"plugin",origin:t?.origin??r}}function sa(e){let t=new Map;for(let r of e){if(!r.scope)continue;let n=t.get(r.scope)??[];n.push(r),t.set(r.scope,n);}return nr.filter(r=>t.has(r)).map(r=>({scope:r,label:Ot[r].label,pathHint:Ot[r].pathHint,items:t.get(r)??[]}))}function aa(e){let t=r=>{if(!r)return 1/0;let n=nr.indexOf(r);return n===-1?1/0:n};return [...e].sort((r,n)=>t(r.scope)-t(n.scope))}function la({catalog:e,installedItems:t,activeTab:r,catalogFilters:n,searchQuery:o}){let i=useMemo(()=>new Set(t.map(d=>or(d.name,d.author?.name))),[t]),s=useMemo(()=>new Set(t.filter(d=>d.type==="mcp").map(d=>d.name.toLowerCase())),[t]),c=useMemo(()=>{let d=new Map(e.map(E=>[or(E.name,E.author.name),E]));return t.map(E=>{let m=d.get(or(E.name,E.author?.name)),h=m?.version,T=!!h&&!!E.version&&Oe(E.version,h);return {...E,updateAvailable:T,catalogItem:m}})},[t,e]),a=useMemo(()=>r==="discover"?e.filter(d=>{if(i.has(or(d.name,d.author.name)))return false;if(d.type==="mcp"){let E=d.installCommand?na(d.installCommand)?.toLowerCase():null;if(s.has(d.name.toLowerCase())||E&&s.has(E))return false}return true}).map(d=>oa(d)):c.map(d=>ia(d,d.catalogItem)),[r,e,i,s,c]),l=useMemo(()=>a.filter(d=>{let E=d.type??"plugin";if(!n.types.has(E))return false;let m=d.origin??"internal";return n.origins.has(m)}),[a,n]),u=useMemo(()=>{let{types:d}=n;if(d.size===1){if(d.has("skill"))return "skills";if(d.has("mcp"))return "MCPs";if(d.has("plugin"))return "plugins"}return "items"},[n]),g=useMemo(()=>r==="installed"?o?`No ${u} found for '${o}' \u2014 explore the Discover tab!`:`No ${u} installed \u2014 explore the Discover tab!`:o?`No ${u} found for '${o}'`:`No ${u} available in the catalog`,[r,o,u]),v=useMemo(()=>d=>d?e.find(E=>E.name===d.name&&E.author.name===d.authorName)??null:null,[e]);return {items:l,emptyMessage:g,getSelectedCatalogItem:v}}function ca(){let[e,t]=useState([]),[r,n]=useState(true),[o,i]=useState(null),s=useRef(false),c=useCallback(async()=>{n(true),i(null);try{let a=await Te();t(a),s.current||(s.current=!0,b(x.CLI_CATALOG_VIEWED,{interface:"tui",filter_type:"all",result_count:a.length}).catch(()=>{}));}catch(a){i(a instanceof Error?a:new Error(String(a))),t([]);}finally{n(false);}},[]);return useEffect(()=>{c();},[c]),{catalog:e,isLoading:r,error:o,refetch:c}}function ua(){return {items:J(t=>t.installedItems)}}$();var Qu=S("catalog");function pa(){let e=f(O=>O.activeTab),t=f(O=>O.notification),r=f(O=>O.loading),n=f(O=>O.loadingMessage),o=f(O=>O.catalogError),i=f(O=>O.setCatalogError),s=f(O=>O.catalogFilters),c=ee(O=>O.query),{catalog:a,isLoading:l,error:u,refetch:g}=ca(),{items:v}=ua(),d=J(O=>O.loadFromDisk),{items:E,emptyMessage:m,getSelectedCatalogItem:h}=la({catalog:a,installedItems:v,activeTab:e,catalogFilters:s,searchQuery:c}),{actionMenuOpen:T,closeMenu:y,selectedIndex:R,clampIndex:A,filteredItems:G}=Ds({listLength:E.length}),Y=G(E),Le=useMemo(()=>e!=="installed"?Y:aa(Y),[e,Y]),gn=useMemo(()=>e==="installed"?sa(Le):[],[e,Le]),z=Le[R]??null,w=useMemo(()=>h(z),[h,z]),{notify:oe}=Fs(),{handleInstall:V,handleUninstall:B,handleToggleStatus:yn,handleUpdate:Sn,handleMcpConfigUninstall:Ko}=ra({selectedItem:z,selectedCatalogItem:w,items:E,closeMenu:y,clampIndex:A,notify:oe});return useEffect(()=>{d();},[]),useEffect(()=>{A(Le.length);},[Le.length,A]),useEffect(()=>{u&&(Qu.error(`[catalog] ${u instanceof Error?u.message:String(u)}`),i("Failed to load catalog"));},[u]),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Rr,{}),jsx(Ri,{}),jsx(Xi,{filteredItems:Le,groups:gn,emptyMessage:m}),(r||l)&&jsx(Dr,{message:r?n:"Loading catalog..."}),o&&!l&&e==="discover"&&jsx(Nr,{message:o,onRetry:()=>{i(null),g();},onBack:()=>i(null)}),t&&jsx(Zi,{message:t.message,type:t.type}),T&&z&&(e==="discover"?jsx(cs,{itemName:z.name,onInstall:V,onClose:y}):z.type==="mcp"?jsx(gs,{itemName:z.name,itemScope:z.scope??"user",onUninstall:Ko,onClose:y}):jsx(ds,{itemName:z.name,itemScope:z.scope??"user",itemStatus:z.status??"enabled",updateAvailable:z.updateAvailable??false,catalogVersion:w?.version,onUninstall:B,onToggleStatus:O=>yn(O),onUpdate:Sn,onClose:y})),jsx(Or,{})]})}var P=create((e,t)=>({starterKits:[],selectedStarterKitIndex:0,selectedStarterKit:null,plugins:[],pluginCursorIndex:0,step:"bundleList",isLoadingStarterKits:false,starterKitsError:null,successCount:0,failedCount:0,summaryActionIndex:0,setStarterKits:r=>e({starterKits:r}),setSelectedStarterKitIndex:r=>e({selectedStarterKitIndex:r}),selectStarterKit:r=>{let n=new Set(J.getState().installedItems.map(o=>o.name));e({selectedStarterKit:r,plugins:r.plugins.map(o=>({name:o,selected:true,status:n.has(o)?"success":"pending",installed:n.has(o)})),pluginCursorIndex:0,step:"bundleDetail"});},setPluginCursorIndex:r=>e({pluginCursorIndex:r}),setStep:r=>e({step:r}),setPluginStatus:(r,n,o)=>{let i=t().plugins.map(s=>s.name===r?{...s,status:n,error:o}:s);e({plugins:i});},setIsLoadingStarterKits:r=>e({isLoadingStarterKits:r}),setStarterKitsError:r=>e({starterKitsError:r}),setSummaryActionIndex:r=>e({summaryActionIndex:r}),computeSummary:()=>{let n=t().plugins.filter(o=>o.selected);e({successCount:n.filter(o=>o.status==="success").length,failedCount:n.filter(o=>o.status==="failed").length});},resetForRetry:()=>{let r=t().plugins.map(n=>n.status==="failed"?{...n,status:"pending",error:void 0}:n);e({plugins:r,step:"installing"});},goBackToList:()=>e({selectedStarterKit:null,plugins:[],pluginCursorIndex:0,step:"bundleList"})}));var np=3;function ma(){let e=P(a=>a.setStarterKits),t=P(a=>a.setIsLoadingStarterKits),r=P(a=>a.setStarterKitsError),n=P(a=>a.setPluginStatus),o=P(a=>a.setStep),i=P(a=>a.computeSummary),s=useCallback(async()=>{t(true),r(null);try{let a=await Jr();e(a);}catch(a){r(a instanceof Error?a.message:String(a));}finally{t(false);}},[t,r,e]);useEffect(()=>{J.getState().loadFromDisk(),s();},[s]);let c=useCallback(async()=>{let a=P.getState().plugins.filter(u=>u.selected&&u.status==="pending");for(let u of a){n(u.name,"installing");let g="",v=false;for(let d=1;d<=np;d++)try{await ke(u.name),n(u.name,"success"),v=!0;break}catch(E){if(E instanceof Ee){n(u.name,"success"),v=true;break}g=E instanceof Error?E.message:"Unknown error";}v||(n(u.name,"failed",g),b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:u.name,tool_type:"plugin",source:"internal",error_code:"install_failed",error_message:g,interface:L().interfaceType}).catch(()=>{}));}let l=lt();at("summary_review"),b(x.CLI_STEP_COMPLETED,{step:"tool_installation",duration_ms:l}).catch(()=>{}),J.getState().loadFromDisk(),i(),o("summary");},[n,i,o]);return {loadStarterKits:s,installSelected:c}}var ir={cursorDelta:0,confirm:false,back:false};function fa(e,t){return t.upArrow?{...ir,cursorDelta:-1}:t.downArrow?{...ir,cursorDelta:1}:t.escape?{...ir,back:true}:t.return?{...ir,confirm:true}:ir}var op={cursorDelta:0,select:false};function ga(e,t){return t.upArrow?{cursorDelta:-1,select:false}:t.downArrow?{cursorDelta:1,select:false}:t.return?{cursorDelta:0,select:true}:op}var ya=$c.memo(function({starterKit:t,isSelected:r}){return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:r?"cyan":"gray",children:r?"\u203A ":"\u25CB "}),jsx(Text,{bold:r,color:r?"cyan":"white",children:p(t.name)}),jsxs(Text,{dimColor:true,children:[" \xB7 ",t.plugins.length," ",t.plugins.length===1?"plugin":"plugins"]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:p(t.description)})})]})});var To=5;function Sa({onRetry:e}){let t=P(u=>u.starterKits),r=P(u=>u.selectedStarterKitIndex),n=P(u=>u.isLoadingStarterKits),o=P(u=>u.starterKitsError);if(n)return jsx(Dr,{message:"Loading Starter Kits..."});if(o)return jsx(Nr,{message:o,onRetry:e,onBack:e});if(t.length===0)return jsx(kt,{message:"No Starter Kits available."});let i=Math.max(0,r-Math.floor(To/2)),s=Math.min(t.length,i+To);s===t.length&&(i=Math.max(0,s-To));let c=t.slice(i,s),a=i,l=t.length-s;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Select a Starter Kit to get started"})}),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",a," more above"]})}),c.map((u,g)=>jsx(ya,{starterKit:u,isSelected:i+g===r},u.slug)),l>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",l," more below"]})})]})}var wa=$c.memo(function({plugin:t,isCursor:r}){return jsxs(Box,{children:[jsx(Text,{color:r?"cyan":"gray",children:r?"\u203A ":" "}),jsx(Text,{color:"cyan",children:"\u2022"}),jsxs(Text,{bold:r,color:r?"cyan":"white",children:[" ",p(t.name)]}),t.installed&&jsx(Text,{color:"green",children:" (installed)"})]})});var $o=8;function xa(){let e=P(u=>u.selectedStarterKit),t=P(u=>u.plugins),r=P(u=>u.pluginCursorIndex),n=useRef(false);if(useEffect(()=>{e&&!n.current&&(n.current=true,b(x.CLI_KIT_DISPLAYED,{bundle_slug:e.slug,tool_count:t.length}).catch(()=>{}));},[e,t.length]),!e)return jsx(Text,{dimColor:true,children:"No Starter Kit selected."});let o=t.filter(u=>u.installed).length,i=Math.max(0,r-Math.floor($o/2)),s=Math.min(t.length,i+$o);s===t.length&&(i=Math.max(0,s-$o));let c=t.slice(i,s),a=i,l=t.length-s;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:[jsx(Text,{bold:true,color:"cyan",children:p(e.name)}),jsx(Text,{dimColor:true,children:p(e.description)})]}),jsx(Box,{paddingX:1,paddingBottom:1,children:jsxs(Text,{children:[t.length," plugins to install",o>0&&` \xB7 ${o} already installed`]})}),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",a," more above"]})}),c.map((u,g)=>jsx(wa,{plugin:u,isCursor:i+g===r},u.name)),l>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",l," more below"]})})]})}var mp=["Retry failed","Continue anyway"];function Ia({name:e,status:t,error:r}){let n=p(e);return t==="installing"?jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(Vc,{type:"dots"})}),jsxs(Text,{color:"cyan",children:[" ",n]})]}):t==="success"?jsx(Box,{children:jsxs(Text,{color:"green",children:["\u2713 ",n]})}):t==="failed"?jsxs(Box,{children:[jsxs(Text,{color:"red",children:["\u2717 ",n]}),r&&jsxs(Text,{dimColor:true,children:[" \u2014 ",p(r)]})]}):jsx(Box,{children:jsxs(Text,{dimColor:true,children:["\u25CB ",n]})})}function ba({onComplete:e,onRetry:t}){let r=P(l=>l.plugins),n=P(l=>l.step),o=P(l=>l.successCount),i=P(l=>l.failedCount),s=P(l=>l.summaryActionIndex),c=r.filter(l=>l.selected),a=useRef(false);return useEffect(()=>{if(n==="summary"&&i===0&&!a.current){a.current=true;let l=setTimeout(e,1500);return ()=>clearTimeout(l)}},[n,i,e]),n==="installing"?jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Installing plugins..."})}),jsx(Box,{flexDirection:"column",paddingX:1,children:c.map(l=>jsx(Ia,{name:l.name,status:l.status,error:l.error},l.name))})]}):jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Installation Complete"})}),jsxs(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:[o>0&&jsxs(Text,{color:"green",children:["\u2713 ",o," ",o===1?"plugin":"plugins"," installed successfully"]}),i>0&&jsxs(Text,{color:"red",children:["\u2717 ",i," ",i===1?"plugin":"plugins"," failed"]})]}),i>0&&jsx(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:c.filter(l=>l.status==="failed").map(l=>jsx(Ia,{name:l.name,status:l.status,error:l.error},l.name))}),i>0&&jsx(Box,{flexDirection:"column",paddingX:1,children:mp.map((l,u)=>jsx(Box,{children:jsxs(Text,{bold:u===s,color:u===s?"cyan":void 0,children:[u===s?"\u203A ":" ",l]})},l))}),i===0&&jsx(Box,{paddingX:1,children:jsx(Text,{dimColor:true,children:"Proceeding to main screen..."})})]})}function va(){let e=P(w=>w.step),t=P(w=>w.starterKits),r=P(w=>w.selectedStarterKitIndex),n=P(w=>w.setSelectedStarterKitIndex),o=P(w=>w.selectStarterKit),i=P(w=>w.plugins),s=P(w=>w.pluginCursorIndex),c=P(w=>w.setPluginCursorIndex),a=P(w=>w.setStep),l=P(w=>w.summaryActionIndex),u=P(w=>w.setSummaryActionIndex),g=P(w=>w.failedCount),v=P(w=>w.resetForRetry),d=P(w=>w.goBackToList),E=f(w=>w.setScreen),m=f(w=>w.setFocus),h=f(w=>w.focus),T=ge(w=>w.setJustAuthenticated),y=ge(w=>w.justAuthenticated),{loadStarterKits:R,installSelected:A}=ma(),G=useRef(false);useEffect(()=>{e==="bundleList"?(m("bundleList"),G.current||(G.current=true,at("bundle_selection"))):m(e==="bundleDetail"?"bundleDetail":"installProgress");},[e,m]);let Y=useCallback(async()=>{let w=P.getState().selectedStarterKit;if(w){let V=await F();V&&await it({...V,starterKit:w.slug});}b(x.CLI_STEP_COMPLETED,{step:"summary_review",duration_ms:lt()}).catch(()=>{});let{successCount:oe}=P.getState();b(x.CLI_ONBOARDING_COMPLETED,{duration_ms:Je(),tools_installed_count:oe}).catch(()=>{}),T(false),m("list"),E("main");},[T,m,E]),Le=useCallback(()=>{v(),A();},[v,A]),gn=useCallback(()=>{R();},[R]),z=useCallback(()=>{m("list"),E("main");},[m,E]);return useInput((w,oe)=>{if(oe.escape)Cr("esc"),z();else if(oe.upArrow&&r>0)n(r-1);else if(oe.downArrow&&r<t.length-1)n(r+1);else if(oe.return&&t.length>0){let V=lt();o(t[r]),at("kit_display"),b(x.CLI_STEP_COMPLETED,{step:"bundle_selection",duration_ms:V}).catch(()=>{});}},{isActive:h==="bundleList"}),useInput((w,oe)=>{let V=fa(w,oe);if(V.cursorDelta!==0){let B=s+V.cursorDelta;B>=0&&B<i.length&&c(B);}if(V.confirm){let B=P.getState().selectedStarterKit;B&&(async()=>(await F())?.starterKit!==B.slug&&b(x.CLI_KIT_ACCEPTED,{bundle_slug:B.slug}).catch(()=>{}))();let yn=lt();at("kit_confirmation"),b(x.CLI_STEP_COMPLETED,{step:"kit_display",duration_ms:yn}).catch(()=>{});let Sn=lt();at("tool_installation"),b(x.CLI_STEP_COMPLETED,{step:"kit_confirmation",duration_ms:Sn}).catch(()=>{}),a("installing"),A();}if(V.back){let B=P.getState().selectedStarterKit;B&&b(x.CLI_KIT_REJECTED,{bundle_slug:B.slug}).catch(()=>{}),d();}},{isActive:h==="bundleDetail"}),useInput((w,oe)=>{if(g===0)return;let V=ga(w,oe);if(V.cursorDelta!==0){let B=l+V.cursorDelta;B>=0&&B<=1&&u(B);}V.select&&(l===0?Le():Y());},{isActive:h==="installProgress"&&e==="summary"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Rr,{}),jsxs(Box,{flexDirection:"column",paddingX:1,marginBottom:1,children:[jsx(Text,{dimColor:true,children:"The data collected during setup is used solely to improve"}),jsx(Text,{dimColor:true,children:"Flow's internal tools and will not be shared externally."}),!y&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"yellow",children:"Welcome back! We noticed your Starter Kit is not set up yet. Choose a Starter Kit below to get your recommended tools."})})]}),jsxs(Box,{flexDirection:"column",flexGrow:1,children:[e==="bundleList"&&jsx(Sa,{onRetry:gn}),e==="bundleDetail"&&jsx(xa,{}),(e==="installing"||e==="summary")&&jsx(ba,{onComplete:Y,onRetry:Le})]}),jsx(Or,{})]})}$();var Sp=S("app"),hp={auth:Ti,bundleSetup:va,main:pa};function Ta(){f.getState().setScreen("auth"),f.getState().setFocus("auth");}async function Ca(){let e=await F();if(!e){Ta();return}try{await Be();}catch(o){Sp.debug(`Token validation failed: ${String(o)}`),Ta();return}b(x.CLI_SESSION_STARTED,{cli_version:He,os:process.platform,node_version:process.version,duration_ms:Je(),interface:"tui"}).catch(()=>{});let{clientSecret:t,...r}=e;ge.getState().setCredentials(r),!e.starterKit||e.starterKit.trim()===""?(f.getState().setScreen("bundleSetup"),f.getState().setFocus("bundleList")):(f.getState().setScreen("main"),f.getState().setFocus("list"));}function $a(){let{columns:e,rows:t}=useWindowSize(),r=f(i=>i.screen),n=hp[r],{pendingExit:o}=Pi();return n?jsxs(Box,{flexDirection:"column",width:e,height:t,children:[jsx(n,{}),o&&jsx(Box,{paddingX:1,children:jsx(Text,{color:"yellow",children:"Press Ctrl+C again to quit"})})]}):jsxs(Text,{color:"red",children:["Unknown screen: ",r]})}$();var Ae=S("auth");function La(){Z.clearFallbackFile(),vr();}var wp=3,Aa=3,Ra=` \u2139 The data collected during setup is used solely to improve
26
28
  Flow's internal tools and will not be shared externally.
27
- `;function nn(e,t={}){return new Promise((n,r)=>{let{masked:o=false,defaultValue:i=""}=t;process.stdout.write(e+i);let s=i,c=u=>{if(u===""){a(),r(new Error("SIGINT"));return}if(u==="\r"||u===`
29
+ `;function lr(e,t={}){return new Promise((r,n)=>{let{masked:o=false,defaultValue:i=""}=t;process.stdout.write(e+i);let s=i,c=u=>{if(u===""){a(),n(new Error("SIGINT"));return}if(u==="\r"||u===`
28
30
  `){a(),process.stdout.write(`
29
- `),n(s);return}if(u==="\x7F"){s.length>0&&(s=s.slice(0,-1),process.stdout.write("\b \b"));return}u.startsWith("\x1B")||(s+=u,process.stdout.write(o?"*".repeat(u.length):u));};function a(){process.stdin.setRawMode(false),process.stdin.removeListener("data",c),process.removeListener("uncaughtException",l),process.removeListener("unhandledRejection",l),process.removeListener("SIGINT",l),process.removeListener("SIGTERM",l);}function l(){try{process.stdin.setRawMode(!1);}catch{}}process.on("uncaughtException",l),process.on("unhandledRejection",l),process.on("SIGINT",l),process.on("SIGTERM",l),process.stdin.setRawMode(true),process.stdin.resume(),process.stdin.setEncoding("utf8"),process.stdin.on("data",c);})}async function xa(){for(let e=1;e<=ha;e++)try{return await Nn()}catch{if(e===ha)throw new Error("Failed to fetch starter kits after 3 attempts")}return []}async function Ia(){let e=await xa();if(e.length===0)throw new Error("No starter kits available. Please contact your administrator.");for(process.stdout.write(`
31
+ `),r(s);return}if(u==="\x7F"){s.length>0&&(s=s.slice(0,-1),process.stdout.write("\b \b"));return}u.startsWith("\x1B")||(s+=u,process.stdout.write(o?"*".repeat(u.length):u));};function a(){process.stdin.setRawMode(false),process.stdin.removeListener("data",c),process.removeListener("uncaughtException",l),process.removeListener("unhandledRejection",l),process.removeListener("SIGINT",l),process.removeListener("SIGTERM",l);}function l(){try{process.stdin.setRawMode(!1);}catch{}}process.on("uncaughtException",l),process.on("unhandledRejection",l),process.on("SIGINT",l),process.on("SIGTERM",l),process.stdin.setRawMode(true),process.stdin.resume(),process.stdin.setEncoding("utf8"),process.stdin.on("data",c);})}async function _a(){for(let e=1;e<=Aa;e++)try{return await Jr()}catch{if(e===Aa)throw new Error("Failed to fetch starter kits after 3 attempts")}return []}async function Ma(){let e=await _a();if(e.length===0)throw new Error("No starter kits available. Please contact your administrator.");for(process.stdout.write(`
30
32
  `+C.cyan(" ? ")+`Starter Kit:
31
- `),e.forEach((t,n)=>{process.stdout.write(` ${C.cyan(`${n+1})`)} ${p(t.name)}
33
+ `),e.forEach((t,r)=>{process.stdout.write(` ${C.cyan(`${r+1})`)} ${p(t.name)}
32
34
  `);}),process.stdout.write(`
33
- `);;){let t=(await nn(C.cyan(" ? ")+`Select starter kit (1-${e.length}): `)).trim(),n=parseInt(t,10)-1;if(!isNaN(n)&&n>=0&&n<e.length)return e[n];process.stderr.write(C.yellow(` \u26A0 Invalid selection. Please try again.
34
- `));}}async function ba(e){if(e.plugins.length===0)return process.stdout.write(C.dim(`
35
+ `);;){let t=(await lr(C.cyan(" ? ")+`Select starter kit (1-${e.length}): `)).trim(),r=parseInt(t,10)-1;if(!isNaN(r)&&r>=0&&r<e.length)return e[r];process.stderr.write(C.yellow(` \u26A0 Invalid selection. Please try again.
36
+ `));}}async function Oa(e){if(e.plugins.length===0)return process.stdout.write(C.dim(`
35
37
  Starter kit '${p(e.name)}' has no plugins to install.
36
38
  `)),true;process.stdout.write(`
37
39
  Installing ${e.plugins.length} plugins from '${p(e.name)}'...
38
- `);let t=0,n=0,r=e.plugins.length;for(let o of e.plugins){let i=t+n+1;process.stdout.write(C.dim(` [${i}/${r}] Installing ${p(o)}...`));let s=false;for(let c=1;c<=op;c++)try{await Ie(o),t++,s=!0;break}catch(a){if(a instanceof we){t++,s=true;break}}s?process.stdout.write(C.green(` done
39
- `)):(n++,process.stdout.write(C.red(` failed
40
- `)));}return n===0?process.stdout.write(C.green(` \u2713 Starter kit '${p(e.name)}' selected. ${t}/${r} plugins installed successfully.
41
- `)):process.stdout.write(C.yellow(` \u26A0 Starter kit '${p(e.name)}' selected. ${t}/${r} plugins installed. ${n} failed.
42
- `)),n===0}async function ip(e){Sa(),process.stdout.write(`
43
- `+wa+`
44
- `),Pe.debug(`[${e.tenant}] Authenticating tenant`);try{await Qe(e);}catch(t){let n=p(t instanceof Error?t.message:"unknown error");return Pe.error(`[${e.tenant}] Authentication failed: ${n}`),process.stderr.write(C.red(` \u2717 Authentication failed: ${n}
45
- `)),1}try{let t;if(e.bundle){let n=await xa(),r=n.find(o=>o.slug===e.bundle);if(!r){process.stderr.write(C.red(` \u2717 Starter kit '${p(e.bundle)}' not found.
40
+ `);let t=0,r=0,n=e.plugins.length;for(let o of e.plugins){let i=t+r+1;process.stdout.write(C.dim(` [${i}/${n}] Installing ${p(o)}...`));let s=false;for(let c=1;c<=wp;c++)try{await ke(o),t++,s=!0;break}catch(a){if(a instanceof Ee){t++,s=true;break}}s?process.stdout.write(C.green(` done
41
+ `)):(r++,process.stdout.write(C.red(` failed
42
+ `)));}return r===0?process.stdout.write(C.green(` \u2713 Starter kit '${p(e.name)}' selected. ${t}/${n} plugins installed successfully.
43
+ `)):process.stdout.write(C.yellow(` \u26A0 Starter kit '${p(e.name)}' selected. ${t}/${n} plugins installed. ${r} failed.
44
+ `)),r===0}async function xp(e){La(),process.stdout.write(`
45
+ `+Ra+`
46
+ `),Ae.debug(`[${e.tenant}] Authenticating tenant`);try{await st(e);}catch(t){let r=p(t instanceof Error?t.message:"unknown error");return Ae.error(`[${e.tenant}] Authentication failed: ${r}`),process.stderr.write(C.red(` \u2717 Authentication failed: ${r}
47
+ `)),1}try{let t;if(e.starterKit){let r=await _a(),n=r.find(o=>o.slug===e.starterKit);if(!n){process.stderr.write(C.red(` \u2717 Starter kit '${p(e.starterKit)}' not found.
46
48
  `)),process.stderr.write(` Available starter kits:
47
- `);for(let o of n)process.stderr.write(` - ${p(o.slug)} (${p(o.name)})
48
- `);return 1}t=r;}else t=await Ia();return await Ze({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant,bundle:t.slug}),await ba(t),Pe.info(`[${e.tenant}] Authentication successful`),process.stdout.write(C.green(` \u2713 Setup complete. Tenant: ${e.tenant}
49
+ `);for(let o of r)process.stderr.write(` - ${p(o.slug)} (${p(o.name)})
50
+ `);return 1}t=n;}else t=await Ma();return await it({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant,starterKit:t.slug}),await Oa(t),Ae.info(`[${e.tenant}] Authentication successful`),process.stdout.write(C.green(` \u2713 Setup complete. Tenant: ${e.tenant}
49
51
 
50
- `)),0}catch(t){if(t instanceof Error&&t.message==="SIGINT")throw t;let n=p(t instanceof Error?t.message:"unknown error");return Pe.error(`[${e.tenant}] Starter kit setup failed: ${n}`),process.stderr.write(C.red(` \u2717 Starter kit setup failed: ${n}
51
- `)),1}}async function sp(){Sa(),Pe.debug("[auth] Starting interactive authentication");try{process.stdout.write(`
52
- `),process.stdout.write(wa+`
53
- `);let e=(await nn(C.cyan(" ? ")+"Client ID: ")).trim(),t=(await nn(C.cyan(" ? ")+"Client Secret: ",{masked:!0})).trim(),n=(await nn(C.cyan(" ? ")+"Tenant: ")).trim();if(!e||!t||!n)return Pe.error("[auth] Validation failed: all fields are required"),process.stderr.write(C.red(` \u2717 All fields are required
54
- `)),1;Pe.debug(`[${n}] Authenticating tenant`);try{await Qe({clientId:e,clientSecret:t,tenant:n});}catch(o){let i=p(o instanceof Error?o.message:"unknown error");return Pe.error(`[${n}] Authentication failed: ${i}`),process.stderr.write(C.red(` \u2717 Authentication failed: ${i}
55
- `)),1}let r=await Ia();return await Ze({clientId:e,clientSecret:t,tenant:n,bundle:r.slug}),await ba(r),Pe.info(`[${n}] Authentication successful`),process.stdout.write(C.green(` \u2713 Setup complete. Tenant: ${n}
52
+ `)),0}catch(t){if(t instanceof Error&&t.message==="SIGINT")throw t;let r=p(t instanceof Error?t.message:"unknown error");return Ae.error(`[${e.tenant}] Starter kit setup failed: ${r}`),process.stderr.write(C.red(` \u2717 Starter kit setup failed: ${r}
53
+ `)),1}}async function Ip(){La(),Ae.debug("[auth] Starting interactive authentication");try{process.stdout.write(`
54
+ `),process.stdout.write(Ra+`
55
+ `);let e=(await lr(C.cyan(" ? ")+"Client ID: ")).trim(),t=(await lr(C.cyan(" ? ")+"Client Secret: ",{masked:!0})).trim(),r=(await lr(C.cyan(" ? ")+"Tenant: ")).trim();if(!e||!t||!r)return Ae.error("[auth] Validation failed: all fields are required"),process.stderr.write(C.red(` \u2717 All fields are required
56
+ `)),1;Ae.debug(`[${r}] Authenticating tenant`);try{await st({clientId:e,clientSecret:t,tenant:r});}catch(o){let i=p(o instanceof Error?o.message:"unknown error");return Ae.error(`[${r}] Authentication failed: ${i}`),process.stderr.write(C.red(` \u2717 Authentication failed: ${i}
57
+ `)),1}let n=await Ma();return await it({clientId:e,clientSecret:t,tenant:r,starterKit:n.slug}),await Oa(n),Ae.info(`[${r}] Authentication successful`),process.stdout.write(C.green(` \u2713 Setup complete. Tenant: ${r}
56
58
 
57
- `)),0}catch(e){if(e instanceof Error&&e.message==="SIGINT")throw e;let t=p(e instanceof Error?e.message:"unknown error");return Pe.error(`[auth] Unexpected error: ${t}`),process.stderr.write(C.red(` \u2717 Unexpected error: ${t}
58
- `)),1}}async function Po(e={}){if(e.clientId&&e.clientSecret&&e.tenant)return ip({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant,bundle:e.bundle});try{return await sp()}catch(t){if(t instanceof Error&&t.message==="SIGINT")return process.stdout.write(`
59
- `),130;throw t}}async function ap(){try{return process.stdout.write(`
60
- `),(await nn(C.cyan(" ? ")+"Are you sure? This will remove your local credentials. (y/N): ")).toLowerCase()!=="y"?(process.stdout.write(C.yellow(` \u26A0 Logout cancelled
59
+ `)),0}catch(e){if(e instanceof Error&&e.message==="SIGINT")throw e;let t=p(e instanceof Error?e.message:"unknown error");return Ae.error(`[auth] Unexpected error: ${t}`),process.stderr.write(C.red(` \u2717 Unexpected error: ${t}
60
+ `)),1}}async function Mo(e={}){if(e.clientId&&e.clientSecret&&e.tenant)return xp({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant,starterKit:e.starterKit});try{return await Ip()}catch(t){if(t instanceof Error&&t.message==="SIGINT")return process.stdout.write(`
61
+ `),130;throw t}}async function bp(){try{return process.stdout.write(`
62
+ `),(await lr(C.cyan(" ? ")+"Are you sure? This will remove your local credentials. (y/N): ")).toLowerCase()!=="y"?(process.stdout.write(C.yellow(` \u26A0 Logout cancelled
61
63
  `)),0):null}catch(e){if(e instanceof Error&&e.message==="SIGINT")return process.stdout.write(`
62
- `),130;throw e}}async function va(e){if(!await O())return process.stdout.write(C.yellow(` \u26A0 You are not authenticated
63
- `)),0;if(!e){let t=await ap();if(t!==null)return t}try{return await Xo(),process.stdout.write(C.green(` \u2713 Credentials removed successfully
64
+ `),130;throw e}}async function Da(e){if(!await F())return process.stdout.write(C.yellow(` \u26A0 You are not authenticated
65
+ `)),0;if(!e){let t=await bp();if(t!==null)return t}try{return await ci(),process.stdout.write(C.green(` \u2713 Credentials removed successfully
64
66
  `)),0}catch{return process.stderr.write(C.red(` \u2717 Error removing credentials
65
- `)),1}}async function Pa(){let e=await O();return e?await ht()?(process.stdout.write(`
67
+ `)),1}}async function Na(){let e=await F();return e?await vt()?(process.stdout.write(`
66
68
  `+C.bold(` Authenticated
67
69
  `)),process.stdout.write(C.dim(" Tenant: ")+p(e.tenant)+`
68
70
  `),process.stdout.write(C.dim(" Client ID: ")+p(e.clientId)+`
69
- `),process.stdout.write(C.dim(" Starter Kit: ")+p(e.bundle??"not set")+`
70
- `),process.stdout.write(C.dim(" Config: ")+p(await Yo())+`
71
+ `),process.stdout.write(C.dim(" Starter Kit: ")+p(e.starterKit??"not set")+`
72
+ `),process.stdout.write(C.dim(" Config: ")+p(await ui())+`
71
73
  `),process.stdout.write(`
72
- `),0):(process.stdout.write(C.yellow(" \u26A0 Session expired. Run `flow auth login` to re-authenticate.\n")),0):(process.stdout.write(C.yellow(" \u26A0 Not authenticated. Run `flow auth login` to set up.\n")),0)}async function lp(e){let t=be(),n;try{n=await xe();}catch{n=[];}let r=new Set(t.map(o=>o.name));return b(x.CLI_CATALOG_VIEWED,{interface:$().interfaceType,filter_type:"available",result_count:n.length}).catch(()=>{}),e.json?(wt(n.map(o=>({...o,installed:r.has(o.name)}))),0):(Pn(["","Name","Version","Category","Status"],n.map(o=>[r.has(o.name)?"*":" ",o.name??"",o.version??"n/a",o.category??"",r.has(o.name)?"installed":"available"])),0)}async function cp(e){let t=be(),n=await xe(),r=new Map(n.map(i=>[i.name,i])),o=t.map(i=>{let s=r.get(i.name);return s&&i.version&&s.version&&Ae(i.version,s.version)?{...i,availableVersion:s.version}:null}).filter(i=>i!==null);return b(x.CLI_CATALOG_VIEWED,{interface:$().interfaceType,filter_type:"outdated",result_count:o.length}).catch(()=>{}),o.length===0?(I("All plugins are up to date."),0):e.json?(wt(o),0):(Pn(["Name","Installed","Available"],o.map(i=>[i.name??"",i.version??"n/a",i.availableVersion??"n/a"])),process.stdout.write(`
74
+ `),0):(process.stdout.write(C.yellow(" \u26A0 Session expired. Run `flow auth login` to re-authenticate.\n")),0):(process.stdout.write(C.yellow(" \u26A0 Not authenticated. Run `flow auth login` to set up.\n")),0)}M();async function vp(e){let t=Ce(),r;try{r=await Te();}catch{r=[];}let n=new Set(t.map(o=>o.name));return b(x.CLI_CATALOG_VIEWED,{interface:L().interfaceType,filter_type:"available",result_count:r.length}).catch(()=>{}),e.json?(Et(r.map(o=>({...o,installed:n.has(o.name)}))),0):($r(["","Name","Version","Category","Status"],r.map(o=>[n.has(o.name)?"*":" ",o.name??"",o.version??"n/a",o.category??"",n.has(o.name)?"installed":"available"])),0)}async function Pp(e){let t=Ce(),r=await Te(),n=new Map(r.map(i=>[i.name,i])),o=t.map(i=>{let s=n.get(i.name);return s&&i.version&&s.version&&Oe(i.version,s.version)?{...i,availableVersion:s.version}:null}).filter(i=>i!==null);return b(x.CLI_CATALOG_VIEWED,{interface:L().interfaceType,filter_type:"outdated",result_count:o.length}).catch(()=>{}),o.length===0?(I("All plugins are up to date."),0):e.json?(Et(o),0):($r(["Name","Installed","Available"],o.map(i=>[i.name??"",i.version??"n/a",i.availableVersion??"n/a"])),process.stdout.write(`
73
75
  ${o.length} plugin(s) outdated.
74
- `),0)}async function up(e){let t=be();if(b(x.CLI_CATALOG_VIEWED,{interface:$().interfaceType,filter_type:"all",result_count:t.length}).catch(()=>{}),t.length===0)return I("No plugins installed. Use `flow plugin install <name>` to install one."),0;if(e.json)return wt(t),0;let n=[];try{n=await xe();}catch{n=[];}let r=new Map(n.map(i=>[i.name,i])),o=[...t].sort((i,s)=>{let c=Yt.indexOf(i.scope??"user"),a=Yt.indexOf(s.scope??"user");return (c===-1?1/0:c)-(a===-1?1/0:a)});return Pn(["Name","Version","Type","Origin","Scope","Status","Installed at"],o.map(i=>{let s=r.get(i.name),c=s?.type??"plugin",a=s?.origin??lo(i.marketplace);return [i.name??"",i.version??"n/a",dt[c]?.label??"Plugin",a,i.scope??"user",i.status??"enabled",En(i.installedAt??"")]})),process.stdout.write(`
76
+ `),0)}async function Ep(e){let t=Ce();if(b(x.CLI_CATALOG_VIEWED,{interface:L().interfaceType,filter_type:"all",result_count:t.length}).catch(()=>{}),t.length===0)return I("No plugins installed. Use `flow plugin install <name>` to install one."),0;if(e.json)return Et(t),0;let r=[];try{r=await Te();}catch{r=[];}let n=new Map(r.map(i=>[i.name,i])),o=[...t].sort((i,s)=>{let c=nr.indexOf(i.scope??"user"),a=nr.indexOf(s.scope??"user");return (c===-1?1/0:c)-(a===-1?1/0:a)});return $r(["Name","Version","Type","Origin","Scope","Status","Installed at"],o.map(i=>{let s=n.get(i.name),c=s?.type??"plugin",a=s?.origin??wo(i.marketplace);return [i.name??"",i.version??"n/a",wt[c]?.label??"Plugin",a,i.scope??"user",i.status??"enabled",Ar(i.installedAt??"")]})),process.stdout.write(`
75
77
  ${t.length} plugin(s) installed.
76
- `),0}async function Ea(e){if(!await Q())return 1;try{return e.available?await lp(e):e.outdated?await cp(e):await up(e)}catch(t){return k(t instanceof Error?t.message:"Failed to list plugins."),1}}var M=S("manage");function er(e,t){return t?be().find(n=>n.name===e&&n.scope===t):be().find(n=>n.name===e)}function pp(e,t){let n=t;return {callbacks:{onStatus:o=>{n&&(n.text=`${e}${o}`);},onError:o=>{n?.stop(),n=void 0,I(`${e}${o}`);},onPause:()=>{n?.stop(),n=void 0;},onResume:o=>{n?.stop(),n=Eo({text:`${e}${o}`}).start();}},stopSpinner:()=>{n?.stop(),n=void 0;}}}async function dp(e,t,n,r){let o=r;if(!n.force){o?.stop();let s=p(e),c=p(io(e,n.scope));if(!await Je(`${t}Install external plugin "${s}"?
78
+ `),0}async function Fa(e){if(!await re())return 1;try{return e.available?await vp(e):e.outdated?await Pp(e):await Ep(e)}catch(t){return k(t instanceof Error?t.message:"Failed to list plugins."),1}}M();$();var D=S("manage");function sn(e,t){return t?Ce().find(r=>r.name===e&&r.scope===t):Ce().find(r=>r.name===e)}function Tp(e,t){let r=t;return {callbacks:{onStatus:o=>{r&&(r.text=`${e}${o}`);},onError:o=>{r?.stop(),r=void 0,I(`${e}${o}`);},onPause:()=>{r?.stop(),r=void 0;},onResume:o=>{r?.stop(),r=Oo({text:`${e}${o}`}).start();}},stopSpinner:()=>{r?.stop(),r=void 0;}}}async function kp(e,t,r,n){let o=n;if(!r.force){o?.stop();let s=p(e),c=p(yo(e,r.scope));if(!await Xe(`${t}Install external plugin "${s}"?
77
79
  This will run: ${c}
78
- [y/N] `))return M.debug(`[${e}] Installation cancelled by user`),n.silent||I(`${t}Skipped ${e} (cancelled).`),{name:e,success:true};n.silent||(o=Eo({text:`${t}Installing ${e}...`}).start());}let i=o?pp(t,o):void 0;try{let s=await so(e,n.marketplaceSource,i?.callbacks,n.scope);if(i?.stopSpinner(),s.exitCode!==0){let c=s.stderr||"Command failed";return n.silent?oe({status:"error",plugin:e,message:c}):k(`${t}Failed to install "${e}": ${c}`),{name:e,success:!1,error:c}}return n.silent?X({status:"success",plugin:e,command:s.command,duration_ms:s.duration_ms}):V(`${t}${e} installed successfully (via proxy)`),{name:e,success:!0,duration_ms:s.duration_ms}}catch(s){i?.stopSpinner();let c=D(s);return n.silent?oe({status:"error",plugin:e,message:c}):k(`${t}Failed to install "${e}": ${c}`),{name:e,success:false,error:c}}}async function mp(e,t,n){let r=n.silent?void 0:Eo({text:`${t}Installing ${e}...`}).start();if(qt(e))return dp(e,t,n,r);try{let o=await Ie(e,n);return r?.stop(),n.silent?X({status:"success",plugin:e,version:o.version,duration_ms:o.duration_ms}):V(`${t}${e} v${o.version} installed successfully`),{name:e,success:!0,version:o.version,duration_ms:o.duration_ms}}catch(o){if(r?.stop(),o instanceof we)return n.silent?X({status:"already_installed",plugin:e,message:o.message}):I(`${t}${o.message}`),{name:e,success:true};let i=D(o);return n.silent?oe({status:"error",plugin:e,message:i}):k(`${t}Failed to install "${e}": ${i}`),{name:e,success:false,error:i}}}function fp(e){let t=e.filter(r=>r.success).length,n=e.filter(r=>!r.success).length;I(`
79
- Installation summary: ${t} succeeded, ${n} failed`);}async function Ta(e,t={}){if(!await Q())return 1;let n=[];for(let r=0;r<e.length;r++){let o=e.length>1?`[${r+1}/${e.length}] `:"",i=await mp(e[r],o,t);n.push(i);}return e.length>1&&(t.silent?X({status:"summary",succeeded:n.filter(r=>r.success).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.error?{error:r.error}:{}}))}):fp(n)),n.some(r=>!r.success)?1:0}async function ka(e,t){if(!await Q())return 1;if(M.debug(`[${e}] Looking up installed plugin`),!t.force){let n=er(e,t.scope);if(!n)return M.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;let r=p(n.name),o=n.version?p(n.version):void 0,i=t.scope?` (${t.scope})`:"";if(!await Je(`Remove ${r} ${o?`v${o}`:"(n/a)"}${i}? [y/N] `))return M.debug(`[${e}] Uninstall cancelled by user`),I("Operation cancelled."),0}try{return M.debug(`[${e}] Uninstalling plugin${t.scope?` (scope: ${t.scope})`:""}`),await Un(e,t.scope),M.info(`[${e}] Uninstalled successfully`),V("Plugin removed successfully"),0}catch(n){return M.error(`[${e}] Failed to uninstall: ${D(n)}`),k(D(n)),1}}async function Ca(e,t={}){if(!await Q())return 1;M.debug(`[${e}] Looking up installed plugin`);let n=er(e,t.scope);if(!n)return M.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;if(n.status==="enabled")return M.debug(`[${e}] Already enabled, skipping`),I(`${n.name} is already enabled`),0;try{return M.debug(`[${e}] Enabling plugin (current status: ${n.status})`),await zt(e,"enabled",t.scope),M.info(`[${e}] Enabled successfully`),V(`${n.name} enabled successfully`),0}catch(r){return M.error(`[${e}] Failed to enable: ${D(r)}`),k(D(r)),1}}async function Aa(e,t={}){if(!await Q())return 1;M.debug(`[${e}] Looking up installed plugin`);let n=er(e,t.scope);if(!n)return M.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;if(n.status==="disabled")return M.debug(`[${e}] Already disabled, skipping`),I(`${n.name} is already disabled`),0;try{return M.debug(`[${e}] Disabling plugin (current status: ${n.status})`),await zt(e,"disabled",t.scope),M.info(`[${e}] Disabled successfully`),V(`${n.name} disabled successfully`),0}catch(r){return M.error(`[${e}] Failed to disable: ${D(r)}`),k(D(r)),1}}async function $a(e,t,n){n.silent||I(`${t}Updating ${e}...`);try{let r=await Jn(e,n);return n.silent?X({status:"updated",plugin:r.name,previousVersion:r.previousVersion,newVersion:r.newVersion,duration_ms:r.duration_ms}):V(`${t}${r.name} v${r.previousVersion} \u2192 v${r.newVersion}`),{name:e,success:!0}}catch(r){if(r instanceof je)return n.silent?X({status:"up_to_date",plugin:e,message:r.message}):I(`${t}${r.message}`),{name:e,success:true,skipped:true};let o=D(r);return n.silent?oe({status:"error",plugin:e,message:o}):k(`${t}Failed to update ${e}: ${o}`),{name:e,success:false,error:o}}}function gp(e){let t=e.filter(o=>o.success&&!o.skipped).length,n=e.filter(o=>o.skipped).length,r=e.filter(o=>!o.success).length;I(`
80
- Update summary: ${t} updated, ${n} already up to date, ${r} failed`);}async function yp(e,t,n){try{let r=await vt(e);Ae(t,r.version,n.force)?I(`Would update ${e}: v${t} \u2192 v${r.version}`):I(`${e} is already up to date (v${t})`);}catch(r){return k(D(r)),1}return 0}function hp(e){return new Map(e.filter(t=>!!t.version).map(t=>[t.name,t.version]))}function Sp(e,t,n){let r=t.get(e.name);return r?e.version&&Ae(e.version,r,n)?(I(`Would update ${e.name}: v${e.version} \u2192 v${r}`),true):(I(`${e.name} is already up to date (${e.version?`v${e.version}`:"n/a"})`),false):(I(`Skipping ${e.name}: not found in catalog`),false)}async function wp(e,t){try{let n=await xe(),r=hp(n),o=0;for(let i of e)Sp(i,r,t.force)&&o++;o===0&&I("All plugins are up to date");}catch(n){return k(D(n)),1}return 0}async function xp(e,t){let n=[];for(let r=0;r<e.length;r++){let o=`[${r+1}/${e.length}] `,i=await $a(e[r].name,o,t);n.push(i);}return t.silent?X({status:"summary",updated:n.filter(r=>r.success&&!r.skipped).length,upToDate:n.filter(r=>r.skipped).length,failed:n.filter(r=>!r.success).length,results:n.map(r=>({plugin:r.name,success:r.success,...r.skipped?{skipped:true}:{},...r.error?{error:r.error}:{}}))}):gp(n),n.some(r=>!r.success)?1:0}async function La(e,t={}){if(!await Q())return 1;if(e){let o=er(e,t.scope);return o?t.dryRun?yp(e,o.version??"",t):(await $a(e,"",t)).success?0:1:(t.silent?oe({status:"error",plugin:e,message:`Plugin "${e}" is not installed`}):k(`Plugin "${e}" is not installed`),1)}let r=be().filter(o=>o.marketplace===_);return r.length===0?(t.silent?X({status:"empty",message:"No plugins installed"}):I("No plugins installed"),0):t.dryRun?wp(r,t):xp(r,t)}var Ra=S("marketplace");function bp(e){return `claude plugin marketplace add ${e}`}async function Ma(e,t){if(!await Q())return 1;let n;try{n=Hn(e);}catch(i){let s=D(i);return t.silent?oe({status:"error",source:e,message:s}):k(s),1}Ra.debug(`[marketplace] Adding marketplace source: ${n}`);let r=bp(n);if(!t.force){let i=p(n),s=p(r);if(!await Je(`Add marketplace "${i}"?
80
+ [y/N] `))return D.debug(`[${e}] Installation cancelled by user`),r.silent||I(`${t}Skipped ${e} (cancelled).`),{name:e,success:true};r.silent||(o=Oo({text:`${t}Installing ${e}...`}).start());}let i=o?Tp(t,o):void 0;try{let s=await So(e,r.marketplaceSource,i?.callbacks,r.scope);if(i?.stopSpinner(),s.exitCode!==0){let c=s.stderr||"Command failed";return r.silent?ae({status:"error",plugin:e,message:c}):k(`${t}Failed to install "${e}": ${c}`),{name:e,success:!1,error:c}}return r.silent?Q({status:"success",plugin:e,command:s.command,duration_ms:s.duration_ms}):q(`${t}${e} installed successfully (via proxy)`),{name:e,success:!0,duration_ms:s.duration_ms}}catch(s){i?.stopSpinner();let c=U(s);return r.silent?ae({status:"error",plugin:e,message:c}):k(`${t}Failed to install "${e}": ${c}`),{name:e,success:false,error:c}}}async function Cp(e,t,r){let n=r.silent?void 0:Oo({text:`${t}Installing ${e}...`}).start();if(er(e))return kp(e,t,r,n);try{let o=await ke(e,r);return n?.stop(),r.silent?Q({status:"success",plugin:e,version:o.version,duration_ms:o.duration_ms}):q(`${t}${e} v${o.version} installed successfully`),{name:e,success:!0,version:o.version,duration_ms:o.duration_ms}}catch(o){if(n?.stop(),o instanceof Ee)return r.silent?Q({status:"already_installed",plugin:e,message:o.message}):I(`${t}${o.message}`),{name:e,success:true};let i=U(o);return r.silent?ae({status:"error",plugin:e,message:i}):k(`${t}Failed to install "${e}": ${i}`),{name:e,success:false,error:i}}}function $p(e){let t=e.filter(n=>n.success).length,r=e.filter(n=>!n.success).length;I(`
81
+ Installation summary: ${t} succeeded, ${r} failed`);}async function Ua(e,t={}){if(!await re())return 1;let r=[];for(let n=0;n<e.length;n++){let o=e.length>1?`[${n+1}/${e.length}] `:"",i=await Cp(e[n],o,t);r.push(i);}return e.length>1&&(t.silent?Q({status:"summary",succeeded:r.filter(n=>n.success).length,failed:r.filter(n=>!n.success).length,results:r.map(n=>({plugin:n.name,success:n.success,...n.error?{error:n.error}:{}}))}):$p(r)),r.some(n=>!n.success)?1:0}async function Ka(e,t){if(!await re())return 1;if(D.debug(`[${e}] Looking up installed plugin`),!t.force){let r=sn(e,t.scope);if(!r)return D.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;let n=p(r.name),o=r.version?p(r.version):void 0,i=t.scope?` (${t.scope})`:"";if(!await Xe(`Remove ${n} ${o?`v${o}`:"(n/a)"}${i}? [y/N] `))return D.debug(`[${e}] Uninstall cancelled by user`),I("Operation cancelled."),0}try{return D.debug(`[${e}] Uninstalling plugin${t.scope?` (scope: ${t.scope})`:""}`),await Vr(e,t.scope),D.info(`[${e}] Uninstalled successfully`),q("Plugin removed successfully"),0}catch(r){return D.error(`[${e}] Failed to uninstall: ${U(r)}`),k(U(r)),1}}async function ja(e,t={}){if(!await re())return 1;D.debug(`[${e}] Looking up installed plugin`);let r=sn(e,t.scope);if(!r)return D.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;if(r.status==="enabled")return D.debug(`[${e}] Already enabled, skipping`),I(`${r.name} is already enabled`),0;try{return D.debug(`[${e}] Enabling plugin (current status: ${r.status})`),await Qt(e,"enabled",t.scope),D.info(`[${e}] Enabled successfully`),q(`${r.name} enabled successfully`),0}catch(n){return D.error(`[${e}] Failed to enable: ${U(n)}`),k(U(n)),1}}async function Ba(e,t={}){if(!await re())return 1;D.debug(`[${e}] Looking up installed plugin`);let r=sn(e,t.scope);if(!r)return D.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;if(r.status==="disabled")return D.debug(`[${e}] Already disabled, skipping`),I(`${r.name} is already disabled`),0;try{return D.debug(`[${e}] Disabling plugin (current status: ${r.status})`),await Qt(e,"disabled",t.scope),D.info(`[${e}] Disabled successfully`),q(`${r.name} disabled successfully`),0}catch(n){return D.error(`[${e}] Failed to disable: ${U(n)}`),k(U(n)),1}}async function Ja(e,t,r){r.silent||I(`${t}Updating ${e}...`);try{let n=await qr(e,r);return r.silent?Q({status:"updated",plugin:n.name,previousVersion:n.previousVersion,newVersion:n.newVersion,duration_ms:n.duration_ms}):q(`${t}${n.name} v${n.previousVersion} \u2192 v${n.newVersion}`),{name:e,success:!0}}catch(n){if(n instanceof qe)return r.silent?Q({status:"up_to_date",plugin:e,message:n.message}):I(`${t}${n.message}`),{name:e,success:true,skipped:true};let o=U(n);return r.silent?ae({status:"error",plugin:e,message:o}):k(`${t}Failed to update ${e}: ${o}`),{name:e,success:false,error:o}}}function Ap(e){let t=e.filter(o=>o.success&&!o.skipped).length,r=e.filter(o=>o.skipped).length,n=e.filter(o=>!o.success).length;I(`
82
+ Update summary: ${t} updated, ${r} already up to date, ${n} failed`);}async function Lp(e,t,r){try{let n=await $t(e);Oe(t,n.version,r.force)?I(`Would update ${e}: v${t} \u2192 v${n.version}`):I(`${e} is already up to date (v${t})`);}catch(n){return k(U(n)),1}return 0}function Rp(e){return new Map(e.filter(t=>!!t.version).map(t=>[t.name,t.version]))}function _p(e,t,r){let n=t.get(e.name);return n?e.version&&Oe(e.version,n,r)?(I(`Would update ${e.name}: v${e.version} \u2192 v${n}`),true):(I(`${e.name} is already up to date (${e.version?`v${e.version}`:"n/a"})`),false):(I(`Skipping ${e.name}: not found in catalog`),false)}async function Mp(e,t){try{let r=await Te(),n=Rp(r),o=0;for(let i of e)_p(i,n,t.force)&&o++;o===0&&I("All plugins are up to date");}catch(r){return k(U(r)),1}return 0}async function Op(e,t){let r=[];for(let n=0;n<e.length;n++){let o=`[${n+1}/${e.length}] `,i=await Ja(e[n].name,o,t);r.push(i);}return t.silent?Q({status:"summary",updated:r.filter(n=>n.success&&!n.skipped).length,upToDate:r.filter(n=>n.skipped).length,failed:r.filter(n=>!n.success).length,results:r.map(n=>({plugin:n.name,success:n.success,...n.skipped?{skipped:true}:{},...n.error?{error:n.error}:{}}))}):Ap(r),r.some(n=>!n.success)?1:0}async function Ha(e,t={}){if(!await re())return 1;if(e){let o=sn(e,t.scope);return o?t.dryRun?Lp(e,o.version??"",t):(await Ja(e,"",t)).success?0:1:(t.silent?ae({status:"error",plugin:e,message:`Plugin "${e}" is not installed`}):k(`Plugin "${e}" is not installed`),1)}let n=Ce().filter(o=>o.marketplace===N);return n.length===0?(t.silent?Q({status:"empty",message:"No plugins installed"}):I("No plugins installed"),0):t.dryRun?Mp(n,t):Op(n,t)}$();var Va=S("marketplace");function Np(e){return `claude plugin marketplace add ${e}`}async function Ga(e,t){if(!await re())return 1;let r;try{r=Wr(e);}catch(i){let s=U(i);return t.silent?ae({status:"error",source:e,message:s}):k(s),1}Va.debug(`[marketplace] Adding marketplace source: ${r}`);let n=Np(r);if(!t.force){let i=p(r),s=p(n);if(!await Xe(`Add marketplace "${i}"?
81
83
  This will run: ${s}
82
- [y/N] `))return Ra.debug("[marketplace] Operation cancelled by user"),I("Operation cancelled."),0}let o=t.silent?void 0:Eo({text:`Adding marketplace "${p(n)}"...`}).start();try{let i=await ae(r);return o?.stop(),i.exitCode!==0?(t.silent?oe({status:"error",source:n,exitCode:i.exitCode,message:i.stderr||"Command failed"}):(k(`Failed to add marketplace "${n}": ${i.stderr||"Command failed"}`),t.verbose&&i.stdout&&I(`stdout: ${i.stdout}`)),1):(t.silent?X({status:"success",source:n,command:r,duration_ms:i.duration_ms}):(V(`Marketplace "${n}" added successfully`),t.verbose&&i.stdout&&I(i.stdout)),0)}catch(i){o?.stop();let s=D(i);return t.silent?oe({status:"error",source:n,message:s}):k(`Failed to add marketplace "${n}": ${s}`),1}}async function Tp(){return await O()?{passed:true,message:"Credentials configured"}:{passed:false,message:"Credentials not configured \u2014 Run `flow auth login`"}}async function kp(){let e=Date.now();try{await xe();let t=Date.now()-e;return {passed:!0,message:`Prompt Manager accessible (${t}ms)`,latency:t}}catch(t){return t instanceof Error&&t.name==="TimeoutError"?{passed:false,message:"Timeout after 5s \u2014 check your connection"}:{passed:false,message:`Connection error: ${t instanceof Error?t.message:"Unknown"}`}}}async function Cp(){return await ht()?{passed:true,message:"Token is valid"}:{passed:false,message:"Token expired \u2014 run `flow auth login` to re-authenticate"}}function Ap(){let e=join(homedir(),".claude","settings.json");return existsSync(e)?{passed:true,message:"Claude Code detected"}:{passed:false,message:"Claude Code not detected"}}async function _a(){process.stdout.write(`
84
+ [y/N] `))return Va.debug("[marketplace] Operation cancelled by user"),I("Operation cancelled."),0}let o=t.silent?void 0:Oo({text:`Adding marketplace "${p(r)}"...`}).start();try{let i=await ue(n);return o?.stop(),i.exitCode!==0?(t.silent?ae({status:"error",source:r,exitCode:i.exitCode,message:i.stderr||"Command failed"}):(k(`Failed to add marketplace "${r}": ${i.stderr||"Command failed"}`),t.verbose&&i.stdout&&I(`stdout: ${i.stdout}`)),1):(t.silent?Q({status:"success",source:r,command:n,duration_ms:i.duration_ms}):(q(`Marketplace "${r}" added successfully`),t.verbose&&i.stdout&&I(i.stdout)),0)}catch(i){o?.stop();let s=U(i);return t.silent?ae({status:"error",source:r,message:s}):k(`Failed to add marketplace "${r}": ${s}`),1}}async function jp(){return await F()?{passed:true,message:"Credentials configured"}:{passed:false,message:"Credentials not configured \u2014 Run `flow auth login`"}}async function Bp(){let e=Date.now();try{await Te();let t=Date.now()-e;return {passed:!0,message:`Prompt Manager accessible (${t}ms)`,latency:t}}catch(t){return t instanceof Error&&t.name==="TimeoutError"?{passed:false,message:"Timeout after 5s \u2014 check your connection"}:{passed:false,message:`Connection error: ${t instanceof Error?t.message:"Unknown"}`}}}async function Jp(){return await vt()?{passed:true,message:"Token is valid"}:{passed:false,message:"Token expired \u2014 run `flow auth login` to re-authenticate"}}function Hp(){let e=join(homedir(),".claude","settings.json");return existsSync(e)?{passed:true,message:"Claude Code detected"}:{passed:false,message:"Claude Code not detected"}}async function za(){process.stdout.write(`
83
85
  `+C.bold(` FlowSetup CLI Diagnostics
84
86
 
85
- `));let e=[{name:"Credentials",fn:Tp},{name:"Prompt Manager",fn:kp},{name:"Valid Token",fn:Cp},{name:"Claude Code",fn:Ap}],t=true;for(let n of e){let r=await n.fn(),o="",i=C.green;r.passed?o=C.green("[OK] "):(o=C.red("[FAIL]"),i=C.red,t=false);let s=` ${o} ${i(n.name.padEnd(18))} ${p(r.message)}`;process.stdout.write(s+`
87
+ `));let e=[{name:"Credentials",fn:jp},{name:"Prompt Manager",fn:Bp},{name:"Valid Token",fn:Jp},{name:"Claude Code",fn:Hp}],t=true;for(let r of e){let n=await r.fn(),o="",i=C.green;n.passed?o=C.green("[OK] "):(o=C.red("[FAIL]"),i=C.red,t=false);let s=` ${o} ${i(r.name.padEnd(18))} ${p(n.message)}`;process.stdout.write(s+`
86
88
  `);}return process.stdout.write(`
87
89
  `),t?(process.stdout.write(C.green(` \u2713 All checks passed!
88
90
 
89
91
  `)),0):(process.stdout.write(C.red(` \u2717 Some checks failed \u2014 verify your configuration
90
92
 
91
- `)),1)}var Rp=["github.com","www.github.com"],Mp=/^([a-zA-Z0-9_.-]+)\/([a-zA-Z0-9_.@-]+)(\/.*)?$/,_p=/^([^@]+)@(.+)$/;function Op(e){return !!(isAbsolute(e)||e==="."||e===".."||e.startsWith("./")||e.startsWith("../")||e.startsWith(".\\")||e.startsWith("..\\")||/^[a-zA-Z]:[/\\]/.test(e))}function To(e){let t=e.replace(/\\/g,"/");t=t.replace(/^\/+/,"").replace(/\/+$/,"");let n=t.split("/").filter(Boolean);for(let r of n)if(r==="..")throw new Error(`Invalid subpath: "${e}" contains path traversal ("..").`);return n.join("/")}function Dp(e){let t=e.pathname.split("/").filter(Boolean);if(t.length<2)throw new Error(`Invalid GitHub URL: expected at least owner/repo in "${e.href}"`);let n=t[0],r=t[1];r.endsWith(".git")&&(r=r.slice(0,-4));let o={type:"github",url:`https://github.com/${n}/${r}.git`};if(t.length>=3&&(t[2]==="tree"||t[2]==="blob")){if(t.length>=4&&(o.ref=t[3]),t.length>=5){let i=t.slice(4).join("/");o.subpath=To(i);}}else if(t.length>2){let i=t.slice(2).join("/");o.subpath=To(i);}return e.hash&&e.hash.length>1&&(o.ref=decodeURIComponent(e.hash.slice(1))),o}function tr(e){let t=e.trim();if(!t)throw new Error("Skill source cannot be empty.");if(Op(t)){let n=resolve(t);return {type:"local",url:n,localPath:n}}try{let n=new URL(t);if((n.protocol==="https:"||n.protocol==="http:")&&Rp.includes(n.hostname))return Dp(n);if(n.protocol==="https:"||n.protocol==="http:"){let r={type:"git",url:t};return n.hash&&n.hash.length>1&&(r.ref=decodeURIComponent(n.hash.slice(1)),r.url=t.replace(n.hash,"")),r}if(n.protocol==="git:"){let r={type:"git",url:t};return n.hash&&n.hash.length>1&&(r.ref=decodeURIComponent(n.hash.slice(1)),r.url=t.replace(n.hash,"")),r}}catch{}if(t.startsWith("git@")||t.includes(":")&&t.includes(".git")){let n=t,r,o=t.indexOf("#");o!==-1&&(r=t.slice(o+1),n=t.slice(0,o));let i={type:"git",url:n};return r&&(i.ref=r),i}{let n=t,r,o=n.indexOf("#");o!==-1&&(r=n.slice(o+1),n=n.slice(0,o));let i=n.match(Mp);if(i){let s=i[1],c=i[2],a=i[3],l,u=c.match(_p);u&&(c=u[1],l=u[2]),c.endsWith(".git")&&(c=c.slice(0,-4));let g={type:"github",url:`https://github.com/${s}/${c}.git`};if(r&&(g.ref=r),l&&(g.skillFilter=l),a){let v=a.replace(/^\//,"");v&&(g.subpath=To(v));}return g}}return {type:"git",url:t}}function nr(e){if(e.type!=="github")return null;try{let n=new URL(e.url).pathname.split("/").filter(Boolean);if(n.length<2)return null;let r=n[1];return r.endsWith(".git")&&(r=r.slice(0,-4)),`${n[0]}/${r}`}catch{return null}}var jp=6e4,ze=class extends Error{url;isTimeout;isAuthError;constructor(t,n,r=false,o=false){super(t),this.name="GitCloneError",this.url=n,this.isTimeout=r,this.isAuthError=o;}};async function rr(e,t){let n=await mkdtemp(join(tmpdir(),"flow-skills-")),r=simpleGit({timeout:{block:jp}}).env("GIT_TERMINAL_PROMPT","0").env("GIT_LFS_SKIP_SMUDGE","1"),o=t?["--depth","1","--branch",t]:["--depth","1"];try{return await r.clone(e,n,o),n}catch(i){await rm(n,{recursive:true,force:true}).catch(()=>{});let s=i instanceof Error?i.message:String(i),c=s.includes("block timeout")||s.includes("timed out"),a=s.includes("Authentication failed")||s.includes("could not read Username")||s.includes("Permission denied")||s.includes("Repository not found");throw c?new ze("Clone timed out after 60s. Check your SSH keys or credentials.",e,true,false):a?new ze(`Authentication failed for ${e}. Ensure you have access and credentials are configured.`,e,false,true):new ze(`Failed to clone ${e}: ${s}`,e,false,false)}}async function or(e){let t=normalize(resolve(e)),n=normalize(resolve(tmpdir()));if(!t.startsWith(n+sep))throw new Error("Attempted to clean up directory outside of temp directory");await rm(e,{recursive:true,force:true});}function Fa(e){let t=e.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/);return t?{data:parse(t[1])??{},content:t[2]??""}:{data:{},content:e}}var Co=new Set(["node_modules",".git","dist","build","__pycache__"]);function Tt(e){return e.toLowerCase().replace(/[^a-z0-9._]+/g,"-").replace(/^[.-]+|[.-]+$/g,"").substring(0,255)||"unnamed-skill"}function Ka(e,t){let n=normalize(resolve(e)),r=normalize(resolve(t));return r.startsWith(n+sep)||r===n}function Gp(e,t){let n=normalize(resolve(e)),r=normalize(resolve(join(e,t)));return r.startsWith(n+sep)||r===n}async function ko(e){try{let t=join(e,"SKILL.md");return (await stat(t)).isFile()}catch{return false}}async function rn(e){try{let t=await readFile(e,"utf-8"),{data:n}=Fa(t);return typeof n.name!="string"||typeof n.description!="string"?null:{name:n.name,description:n.description,path:dirname(e),rawContent:t,metadata:n.metadata}}catch{return null}}async function Ja(e,t=0,n=5){if(t>n)return [];try{let[r,o]=await Promise.all([ko(e),readdir(e,{withFileTypes:!0}).catch(()=>[])]),i=r?[e]:[],s=await Promise.all(o.filter(c=>c.isDirectory()&&!Co.has(c.name)).map(c=>Ja(join(e,c.name),t+1,n)));return [...i,...s.flat()]}catch{return []}}async function ar(e,t){let n=[],r=new Set;if(t&&!Gp(e,t))throw new Error(`Invalid subpath: "${t}" resolves outside the repository directory.`);let o=t?join(e,t):e;if(await ko(o)){let s=await rn(join(o,"SKILL.md"));if(s)return n.push(s),r.add(s.name),n}let i=[o,join(o,"skills"),join(o,".claude/skills"),join(o,".agents/skills")];for(let s of i)try{let c=await readdir(s,{withFileTypes:!0});for(let a of c){if(!a.isDirectory())continue;let l=join(s,a.name);if(await ko(l)){let u=await rn(join(l,"SKILL.md"));u&&!r.has(u.name)&&(n.push(u),r.add(u.name));}}}catch{}if(n.length===0){let s=await Ja(o);for(let c of s){let a=await rn(join(c,"SKILL.md"));a&&!r.has(a.name)&&(n.push(a),r.add(a.name));}}return n}function Ha(e,t){let n=t.map(r=>r.toLowerCase());return e.filter(r=>{let o=r.name.toLowerCase();return n.some(i=>i===o)})}var Ga=1;function Va(){return {version:Ga,skills:{}}}async function lr(e){let t=yr(e);try{let n=await readFile(t,"utf-8"),r=JSON.parse(n);return !r.version||r.version<Ga?Va():r}catch{return Va()}}function Yp(e){let t={};for(let n of Object.keys(e).sort())t[n]=e[n];return t}async function za(e,t){let n=yr(t);await mkdir(dirname(n),{recursive:true});let r={version:e.version,skills:Yp(e.skills)};await writeFile(n,JSON.stringify(r,null,2)+`
92
- `,"utf-8");}async function qa(e,t,n){let r=await lr(n),o=new Date().toISOString(),i=r.skills[e];r.skills[e]={...t,installedAt:i?.installedAt??o,updatedAt:o},await za(r,n);}async function Wa(e,t){let n=await lr(t);e in n.skills&&(delete n.skills[e],await za(n,t));}var Xa=S("skillInstaller");async function od(e,t,n,r){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"skill",source:"external",scope:t,version:n,duration_ms:r,interface:$().interfaceType});}catch(o){Xa.warn(`Failed to send skill install metrics: ${String(o)}`);}}async function id(e,t){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"skill",source:"external",error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:$().interfaceType});}catch(n){Xa.warn(`Failed to send skill install-failed metrics: ${String(n)}`);}}async function sd(e,t){await cp$1(e,t,{recursive:true,dereference:true,filter:n=>!Co.has(basename(n))});}async function ad(e,t,n){let r=Tt(e.name),o=Mt(t),i=join(o,r);if(!Ka(o,i))return {skill:e.name,success:false,path:i,error:`Unsafe install path: "${i}" escapes skills directory`};try{await rm(i,{recursive:!0,force:!0}),await mkdir(i,{recursive:!0}),await sd(e.path,i);let c=nr(n)??n.url;return await qa(r,{source:c,sourceType:n.type,sourceUrl:n.url,ref:n.ref,skillPath:n.subpath},t),{skill:e.name,success:!0,path:i}}catch(s){return {skill:e.name,success:false,path:i,error:s instanceof Error?s.message:String(s)}}}async function Ya(e,t){let n=tr(e),r;try{let o;if(n.type==="local"){if(!n.localPath||!existsSync(n.localPath))return {source:e,results:[],discovered:0,installed:0,failed:0};o=n.localPath;}else r=await rr(n.url,n.ref),o=r;let i=await ar(o,n.subpath),s=[...t.skillFilter??[]];n.skillFilter&&s.push(n.skillFilter);let c=s.length>0?Ha(i,s):i,a=[],l=n.ref??"latest";for(let u of c){let g=Date.now(),v=await ad(u,t.scope,n);a.push(v);let d=Date.now()-g;v.success?await od(u.name,t.scope,l,d):await id(u.name,new Error(v.error??"Unknown error"));}return {source:e,results:a,discovered:i.length,installed:a.filter(u=>u.success).length,failed:a.filter(u=>!u.success).length}}finally{r&&await or(r).catch(()=>{});}}var dd=S("skills");async function md(e){try{await b(x.CLI_TOOL_UNINSTALLED,{tool_id:e,tool_type:"skill",source:"external",interface:$().interfaceType});}catch(t){dd.warn(`Failed to send skill uninstall metrics: ${String(t)}`);}}async function fd(e){let t=createInterface({input:process.stdin,output:process.stdout});return new Promise(n=>{t.question(`${e} (y/N) `,r=>{t.close(),n(r.trim().toLowerCase()==="y");});})}async function gd(e){let t=tr(e),n;try{let r;if(t.type==="local"){if(!t.localPath)return k("Invalid local path."),1;r=t.localPath;}else I(`Fetching skills from ${p(e)}...`),n=await rr(t.url,t.ref),r=n;let o=await ar(r,t.subpath);if(o.length===0)return I("No skills found in this source."),0;let s=nr(t)??p(e);I(`Found ${o.length} skill(s) in ${s}:
93
+ `)),1)}var zp=["github.com","www.github.com"],qp=/^([a-zA-Z0-9_.-]+)\/([a-zA-Z0-9_.@-]+)(\/.*)?$/,Wp=/^([^@]+)@(.+)$/;function Xp(e){return !!(isAbsolute(e)||e==="."||e===".."||e.startsWith("./")||e.startsWith("../")||e.startsWith(".\\")||e.startsWith("..\\")||/^[a-zA-Z]:[/\\]/.test(e))}function Do(e){let t=e.replace(/\\/g,"/");t=t.replace(/^\/+/,"").replace(/\/+$/,"");let r=t.split("/").filter(Boolean);for(let n of r)if(n==="..")throw new Error(`Invalid subpath: "${e}" contains path traversal ("..").`);return r.join("/")}function Yp(e){let t=e.pathname.split("/").filter(Boolean);if(t.length<2)throw new Error(`Invalid GitHub URL: expected at least owner/repo in "${e.href}"`);let r=t[0],n=t[1];n.endsWith(".git")&&(n=n.slice(0,-4));let o={type:"github",url:`https://github.com/${r}/${n}.git`};if(t.length>=3&&(t[2]==="tree"||t[2]==="blob")){if(t.length>=4&&(o.ref=t[3]),t.length>=5){let i=t.slice(4).join("/");o.subpath=Do(i);}}else if(t.length>2){let i=t.slice(2).join("/");o.subpath=Do(i);}return e.hash&&e.hash.length>1&&(o.ref=decodeURIComponent(e.hash.slice(1))),o}function an(e){let t=e.trim();if(!t)throw new Error("Skill source cannot be empty.");if(Xp(t)){let r=resolve(t);return {type:"local",url:r,localPath:r}}try{let r=new URL(t);if((r.protocol==="https:"||r.protocol==="http:")&&zp.includes(r.hostname))return Yp(r);if(r.protocol==="https:"||r.protocol==="http:"){let n={type:"git",url:t};return r.hash&&r.hash.length>1&&(n.ref=decodeURIComponent(r.hash.slice(1)),n.url=t.replace(r.hash,"")),n}if(r.protocol==="git:"){let n={type:"git",url:t};return r.hash&&r.hash.length>1&&(n.ref=decodeURIComponent(r.hash.slice(1)),n.url=t.replace(r.hash,"")),n}}catch{}if(t.startsWith("git@")||t.includes(":")&&t.includes(".git")){let r=t,n,o=t.indexOf("#");o!==-1&&(n=t.slice(o+1),r=t.slice(0,o));let i={type:"git",url:r};return n&&(i.ref=n),i}{let r=t,n,o=r.indexOf("#");o!==-1&&(n=r.slice(o+1),r=r.slice(0,o));let i=r.match(qp);if(i){let s=i[1],c=i[2],a=i[3],l,u=c.match(Wp);u&&(c=u[1],l=u[2]),c.endsWith(".git")&&(c=c.slice(0,-4));let g={type:"github",url:`https://github.com/${s}/${c}.git`};if(n&&(g.ref=n),l&&(g.skillFilter=l),a){let v=a.replace(/^\//,"");v&&(g.subpath=Do(v));}return g}}return {type:"git",url:t}}function ln(e){if(e.type!=="github")return null;try{let r=new URL(e.url).pathname.split("/").filter(Boolean);if(r.length<2)return null;let n=r[1];return n.endsWith(".git")&&(n=n.slice(0,-4)),`${r[0]}/${n}`}catch{return null}}var rd=6e4,et=class extends Error{url;isTimeout;isAuthError;constructor(t,r,n=false,o=false){super(t),this.name="GitCloneError",this.url=r,this.isTimeout=n,this.isAuthError=o;}};async function cn(e,t){let r=await mkdtemp(join(tmpdir(),"flow-skills-")),n=simpleGit({timeout:{block:rd}}).env("GIT_TERMINAL_PROMPT","0").env("GIT_LFS_SKIP_SMUDGE","1"),o=t?["--depth","1","--branch",t]:["--depth","1"];try{return await n.clone(e,r,o),r}catch(i){await rm(r,{recursive:true,force:true}).catch(()=>{});let s=i instanceof Error?i.message:String(i),c=s.includes("block timeout")||s.includes("timed out"),a=s.includes("Authentication failed")||s.includes("could not read Username")||s.includes("Permission denied")||s.includes("Repository not found");throw c?new et("Clone timed out after 60s. Check your SSH keys or credentials.",e,true,false):a?new et(`Authentication failed for ${e}. Ensure you have access and credentials are configured.`,e,false,true):new et(`Failed to clone ${e}: ${s}`,e,false,false)}}async function un(e){let t=normalize(resolve(e)),r=normalize(resolve(tmpdir()));if(!t.startsWith(r+sep))throw new Error("Attempted to clean up directory outside of temp directory");await rm(e,{recursive:true,force:true});}function Za(e){let t=e.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/);return t?{data:parse(t[1])??{},content:t[2]??""}:{data:{},content:e}}var Fo=new Set(["node_modules",".git","dist","build","__pycache__"]);function Rt(e){return e.toLowerCase().replace(/[^a-z0-9._]+/g,"-").replace(/^[.-]+|[.-]+$/g,"").substring(0,255)||"unnamed-skill"}function tl(e,t){let r=normalize(resolve(e)),n=normalize(resolve(t));return n.startsWith(r+sep)||n===r}function ad(e,t){let r=normalize(resolve(e)),n=normalize(resolve(join(e,t)));return n.startsWith(r+sep)||n===r}async function No(e){try{let t=join(e,"SKILL.md");return (await stat(t)).isFile()}catch{return false}}async function cr(e){try{let t=await readFile(e,"utf-8"),{data:r}=Za(t);return typeof r.name!="string"||typeof r.description!="string"?null:{name:r.name,description:r.description,path:dirname(e),rawContent:t,metadata:r.metadata}}catch{return null}}async function rl(e,t=0,r=5){if(t>r)return [];try{let[n,o]=await Promise.all([No(e),readdir(e,{withFileTypes:!0}).catch(()=>[])]),i=n?[e]:[],s=await Promise.all(o.filter(c=>c.isDirectory()&&!Fo.has(c.name)).map(c=>rl(join(e,c.name),t+1,r)));return [...i,...s.flat()]}catch{return []}}async function mn(e,t){let r=[],n=new Set;if(t&&!ad(e,t))throw new Error(`Invalid subpath: "${t}" resolves outside the repository directory.`);let o=t?join(e,t):e;if(await No(o)){let s=await cr(join(o,"SKILL.md"));if(s)return r.push(s),n.add(s.name),r}let i=[o,join(o,"skills"),join(o,".claude/skills"),join(o,".agents/skills")];for(let s of i)try{let c=await readdir(s,{withFileTypes:!0});for(let a of c){if(!a.isDirectory())continue;let l=join(s,a.name);if(await No(l)){let u=await cr(join(l,"SKILL.md"));u&&!n.has(u.name)&&(r.push(u),n.add(u.name));}}}catch{}if(r.length===0){let s=await rl(o);for(let c of s){let a=await cr(join(c,"SKILL.md"));a&&!n.has(a.name)&&(r.push(a),n.add(a.name));}}return r}function nl(e,t){let r=t.map(n=>n.toLowerCase());return e.filter(n=>{let o=n.name.toLowerCase();return r.some(i=>i===o)})}Ue();var il=1;function ol(){return {version:il,skills:{}}}async function fn(e){let t=vn(e);try{let r=await readFile(t,"utf-8"),n=JSON.parse(r);return !n.version||n.version<il?ol():n}catch{return ol()}}function dd(e){let t={};for(let r of Object.keys(e).sort())t[r]=e[r];return t}async function sl(e,t){let r=vn(t);await mkdir(dirname(r),{recursive:true});let n={version:e.version,skills:dd(e.skills)};await writeFile(r,JSON.stringify(n,null,2)+`
94
+ `,"utf-8");}async function al(e,t,r){let n=await fn(r),o=new Date().toISOString(),i=n.skills[e];n.skills[e]={...t,installedAt:i?.installedAt??o,updatedAt:o},await sl(n,r);}async function ll(e,t){let r=await fn(t);e in r.skills&&(delete r.skills[e],await sl(r,t));}Ue();$();var cl=S("skillInstaller");async function wd(e,t,r,n){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"skill",source:"external",scope:t,version:r,duration_ms:n,interface:L().interfaceType});}catch(o){cl.warn(`Failed to send skill install metrics: ${String(o)}`);}}async function xd(e,t){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"skill",source:"external",error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:L().interfaceType});}catch(r){cl.warn(`Failed to send skill install-failed metrics: ${String(r)}`);}}async function Id(e,t){await cp(e,t,{recursive:true,dereference:true,filter:r=>!Fo.has(basename(r))});}async function bd(e,t,r){let n=Rt(e.name),o=Ut(t),i=join(o,n);if(!tl(o,i))return {skill:e.name,success:false,path:i,error:`Unsafe install path: "${i}" escapes skills directory`};try{await rm(i,{recursive:!0,force:!0}),await mkdir(i,{recursive:!0}),await Id(e.path,i);let c=ln(r)??r.url;return await al(n,{source:c,sourceType:r.type,sourceUrl:r.url,ref:r.ref,skillPath:r.subpath},t),{skill:e.name,success:!0,path:i}}catch(s){return {skill:e.name,success:false,path:i,error:s instanceof Error?s.message:String(s)}}}async function ul(e,t){let r=an(e),n;try{let o;if(r.type==="local"){if(!r.localPath||!existsSync(r.localPath))return {source:e,results:[],discovered:0,installed:0,failed:0};o=r.localPath;}else n=await cn(r.url,r.ref),o=n;let i=await mn(o,r.subpath),s=[...t.skillFilter??[]];r.skillFilter&&s.push(r.skillFilter);let c=s.length>0?nl(i,s):i,a=[],l=r.ref??"latest";for(let u of c){let g=Date.now(),v=await bd(u,t.scope,r);a.push(v);let d=Date.now()-g;v.success?await wd(u.name,t.scope,l,d):await xd(u.name,new Error(v.error??"Unknown error"));}return {source:e,results:a,discovered:i.length,installed:a.filter(u=>u.success).length,failed:a.filter(u=>!u.success).length}}finally{n&&await un(n).catch(()=>{});}}Ue();$();var kd=S("skills");async function Cd(e){try{await b(x.CLI_TOOL_UNINSTALLED,{tool_id:e,tool_type:"skill",source:"external",interface:L().interfaceType});}catch(t){kd.warn(`Failed to send skill uninstall metrics: ${String(t)}`);}}async function $d(e){let t=createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(`${e} (y/N) `,n=>{t.close(),r(n.trim().toLowerCase()==="y");});})}async function Ad(e){let t=an(e),r;try{let n;if(t.type==="local"){if(!t.localPath)return k("Invalid local path."),1;n=t.localPath;}else I(`Fetching skills from ${p(e)}...`),r=await cn(t.url,t.ref),n=r;let o=await mn(n,t.subpath);if(o.length===0)return I("No skills found in this source."),0;let s=ln(t)??p(e);I(`Found ${o.length} skill(s) in ${s}:
93
95
  `);for(let c of o){let a=p(c.name),l=p(c.description);process.stdout.write(` ${C.bold(a)} ${C.dim(l)}
94
96
  `);}return process.stdout.write(`
95
- `),0}catch(r){return r instanceof ze?k(r.message):k(r instanceof Error?r.message:String(r)),1}finally{n&&await or(n).catch(()=>{});}}function yd(e){for(let n of e.results){let r=p(n.skill);if(n.success){let o=relative(process.cwd(),n.path);V(`${r} installed ${C.dim(`\u2192 ${o}/`)}`);}else k(`${r}: ${p(n.error??"unknown error")}`);}process.stdout.write(`
96
- `);let t=e.source;e.installed>0&&I(`Installed ${e.installed} of ${e.discovered} skill(s) from ${p(t)}`),e.failed>0&&k(`${e.failed} skill(s) failed to install`),e.results.length===0&&e.discovered===0?I("No skills found in this source."):e.results.length===0&&e.discovered>0&&I(`Found ${e.discovered} skill(s) but none matched the filter. Use --list to see available skills.`);}async function Qa(e,t){if(t.list)return gd(e);let n=t.global?"global":"project";try{let r=await Ya(e,{scope:n,skillFilter:t.skill,yes:t.yes});return yd(r),r.failed>0?1:0}catch(r){return r instanceof ze?k(r.message):k(r instanceof Error?r.message:String(r)),1}}async function el(e){let t=Mt(e),n=[];try{let r=await readdir(t,{withFileTypes:!0});for(let o of r){if(!o.isDirectory())continue;let i=join(t,o.name),s=join(i,"SKILL.md");try{if(!(await stat(s)).isFile())continue}catch{continue}let c=await rn(s);c?n.push({name:c.name,description:c.description,path:i}):n.push({name:o.name,description:"(no metadata)",path:i});}}catch{}return n}async function tl(e){let t=e.global?"global":"project",n=await el(t),r=await lr(t);if(e.json){let i=n.map(s=>({name:s.name,description:s.description,path:s.path,source:r.skills[Tt(s.name)]?.source}));return wt(i),0}if(n.length===0)return I(`No skills installed (${t==="global"?"global":"project"} scope).`),0;I(`${t==="global"?"Global":"Project"} skills (${n.length}):
97
- `);for(let i of n){let s=r.skills[Tt(i.name)]?.source,c=p(i.name),a=p(i.description),l=a.length>80?a.slice(0,77)+"...":a,u=s?C.dim(` (${s})`):"";process.stdout.write(` ${C.bold(c)}${u}
97
+ `),0}catch(n){return n instanceof et?k(n.message):k(n instanceof Error?n.message:String(n)),1}finally{r&&await un(r).catch(()=>{});}}function Ld(e){for(let r of e.results){let n=p(r.skill);if(r.success){let o=relative(process.cwd(),r.path);q(`${n} installed ${C.dim(`\u2192 ${o}/`)}`);}else k(`${n}: ${p(r.error??"unknown error")}`);}process.stdout.write(`
98
+ `);let t=e.source;e.installed>0&&I(`Installed ${e.installed} of ${e.discovered} skill(s) from ${p(t)}`),e.failed>0&&k(`${e.failed} skill(s) failed to install`),e.results.length===0&&e.discovered===0?I("No skills found in this source."):e.results.length===0&&e.discovered>0&&I(`Found ${e.discovered} skill(s) but none matched the filter. Use --list to see available skills.`);}async function dl(e,t){if(t.list)return Ad(e);let r=t.global?"global":"project";try{let n=await ul(e,{scope:r,skillFilter:t.skill,yes:t.yes});return Ld(n),n.failed>0?1:0}catch(n){return n instanceof et?k(n.message):k(n instanceof Error?n.message:String(n)),1}}async function ml(e){let t=Ut(e),r=[];try{let n=await readdir(t,{withFileTypes:!0});for(let o of n){if(!o.isDirectory())continue;let i=join(t,o.name),s=join(i,"SKILL.md");try{if(!(await stat(s)).isFile())continue}catch{continue}let c=await cr(s);c?r.push({name:c.name,description:c.description,path:i}):r.push({name:o.name,description:"(no metadata)",path:i});}}catch{}return r}async function fl(e){let t=e.global?"global":"project",r=await ml(t),n=await fn(t);if(e.json){let i=r.map(s=>({name:s.name,description:s.description,path:s.path,source:n.skills[Rt(s.name)]?.source}));return Et(i),0}if(r.length===0)return I(`No skills installed (${t==="global"?"global":"project"} scope).`),0;I(`${t==="global"?"Global":"Project"} skills (${r.length}):
99
+ `);for(let i of r){let s=n.skills[Rt(i.name)]?.source,c=p(i.name),a=p(i.description),l=a.length>80?a.slice(0,77)+"...":a,u=s?C.dim(` (${s})`):"";process.stdout.write(` ${C.bold(c)}${u}
98
100
  `),process.stdout.write(` ${C.dim(l)}
99
101
 
100
- `);}return 0}async function nl(e,t){let n=t.global?"global":"project";if(!e){let s=await el(n);if(s.length===0)return I("No skills installed."),0;I("Installed skills:");for(let c of s)process.stdout.write(` - ${p(c.name)}
102
+ `);}return 0}async function gl(e,t){let r=t.global?"global":"project";if(!e){let s=await ml(r);if(s.length===0)return I("No skills installed."),0;I("Installed skills:");for(let c of s)process.stdout.write(` - ${p(c.name)}
101
103
  `);return process.stdout.write(`
102
- `),I("Specify a skill name to remove: flow skills remove <name>"),1}let r=Tt(e),o=Mt(n),i=join(o,r);try{await stat(i);}catch{return k(`Skill "${p(e)}" is not installed.`),1}if(!t.force&&!await fd(`Remove skill "${p(r)}"?`))return I("Cancelled."),0;try{return await rm(i,{recursive:!0,force:!0}),await Wa(r,n),await md(r),V(`Skill "${p(r)}" removed.`),0}catch(s){return k(`Failed to remove skill: ${s instanceof Error?s.message:String(s)}`),1}}function rl(e){let t=new Command;t.name("flow").description("FlowSetup CLI \u2014 Manage Flow plugins in your Claude Code").version(`@flow/cli v${Be}`,"-V, --version","Display the CLI version").addHelpText("after",`
104
+ `),I("Specify a skill name to remove: flow skills remove <name>"),1}let n=Rt(e),o=Ut(r),i=join(o,n);try{await stat(i);}catch{return k(`Skill "${p(e)}" is not installed.`),1}if(!t.force&&!await $d(`Remove skill "${p(n)}"?`))return I("Cancelled."),0;try{return await rm(i,{recursive:!0,force:!0}),await ll(n,r),await Cd(n),q(`Skill "${p(n)}" removed.`),0}catch(s){return k(`Failed to remove skill: ${s instanceof Error?s.message:String(s)}`),1}}$();function yl(e){let t=new Command;t.name("flow").description("FlowSetup CLI \u2014 Manage Flow plugins in your Claude Code").version(`@flow/cli v${He}`,"-V, --version","Display the CLI version").addHelpText("after",`
103
105
  Without arguments, opens the interactive interface (TUI).
104
- Use 'flow <command> --help' for details on each command.`).action(async()=>{await e();});let n=new Command("setup").description("Configure the CLI by detecting Claude Code credentials");n.command("init").description("Initialize the Flow CLI configuration").addHelpText("after",`
106
+ Use 'flow <command> --help' for details on each command.`).action(async()=>{await e();});let r=new Command("setup").description("Configure the CLI by detecting Claude Code credentials");r.command("init").description("Initialize the Flow CLI configuration").addHelpText("after",`
105
107
  Examples:
106
- $ flow setup init`).action(async()=>{let a=await Po();process.exit(a);}),t.addCommand(n);let r=new Command("plugin").description("Manage plugins from the Findr catalog installed in your Claude Code");r.command("list").description("List available or installed plugins").option("--available","show full catalog with installation status",false).option("--outdated","show only plugins with updates available",false).option("--json","output as JSON",false).addHelpText("after",`
108
+ $ flow setup init`).action(async()=>{let a=await Mo();process.exit(a);}),t.addCommand(r);let n=new Command("plugin").description("Manage plugins from the Findr catalog installed in your Claude Code");n.command("list").description("List available or installed plugins").option("--available","show full catalog with installation status",false).option("--outdated","show only plugins with updates available",false).option("--json","output as JSON",false).addHelpText("after",`
107
109
  Examples:
108
110
  $ flow plugin list
109
111
  $ flow plugin list --available
110
112
  $ flow plugin list --outdated
111
- $ flow plugin list --json`).action(async a=>{let l=await Ea(a);process.exit(l);}),r.command("install").description("Install one or more plugins from the Findr catalog into Claude Code").argument("<name...>","Name(s) of the plugin(s) to install (space-separated)").option("--force","Reinstall even if the version is already installed").option("--verbose","Display each step of the installation process").option("--silent","Output in JSON only").option("--marketplace-source <source>","GitHub source (owner/repo) for marketplace auto-add when installing external plugins").addOption(new Option("--scope <scope>","Scope to install into: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
113
+ $ flow plugin list --json`).action(async a=>{let l=await Fa(a);process.exit(l);}),n.command("install").description("Install one or more plugins from the Findr catalog into Claude Code").argument("<name...>","Name(s) of the plugin(s) to install (space-separated)").option("--force","Reinstall even if the version is already installed").option("--verbose","Display each step of the installation process").option("--silent","Output in JSON only").option("--marketplace-source <source>","GitHub source (owner/repo) for marketplace auto-add when installing external plugins").addOption(new Option("--scope <scope>","Scope to install into: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
112
114
  Examples:
113
115
  $ flow plugin install flow-adr-writer
114
116
  $ flow plugin install flow-adr-writer --scope project
@@ -116,11 +118,11 @@ Examples:
116
118
  $ flow plugin install flow-adr-writer --force
117
119
  $ flow plugin install flow-adr-writer --silent
118
120
  $ flow plugin install superpowers@claude-plugins-official
119
- $ flow plugin install agent-sdk-dev@claude-code-plugins --marketplace-source anthropics/claude-code`).action(async(a,l)=>{let u=a.filter(v=>v.trim());if(u.length===0){k("No valid plugin names provided"),process.exit(1);return}re("cli",{verbose:l.verbose,silent:l.silent});let g=await Ta(u,l);process.exit(g);}),r.command("uninstall").description("Remove an installed plugin from Claude Code").argument("<name>","Name of the plugin to remove").option("--force","Skip interactive confirmation").addOption(new Option("--scope <scope>","Scope to uninstall from: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
121
+ $ flow plugin install agent-sdk-dev@claude-code-plugins --marketplace-source anthropics/claude-code`).action(async(a,l)=>{let u=a.filter(v=>v.trim());if(u.length===0){k("No valid plugin names provided"),process.exit(1);return}se("cli",{verbose:l.verbose,silent:l.silent});let g=await Ua(u,l);process.exit(g);}),n.command("uninstall").description("Remove an installed plugin from Claude Code").argument("<name>","Name of the plugin to remove").option("--force","Skip interactive confirmation").addOption(new Option("--scope <scope>","Scope to uninstall from: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
120
122
  Examples:
121
123
  $ flow plugin uninstall flow-adr-writer
122
124
  $ flow plugin uninstall flow-adr-writer --scope project
123
- $ flow plugin uninstall startup-pack-ai --force`).action(async(a,l)=>{let u=await ka(a,l);process.exit(u);}),r.command("update").description("Update plugins to the latest version").argument("[name]","Name of the plugin to update (omit to update all)").option("--force","Force update even if already on latest version").option("--dry-run","Show what would be updated without making changes").option("--verbose","Display each step of the update process").option("--silent","Output in JSON only").addOption(new Option("--scope <scope>","Scope to update in: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
125
+ $ flow plugin uninstall startup-pack-ai --force`).action(async(a,l)=>{let u=await Ka(a,l);process.exit(u);}),n.command("update").description("Update plugins to the latest version").argument("[name]","Name of the plugin to update (omit to update all)").option("--force","Force update even if already on latest version").option("--dry-run","Show what would be updated without making changes").option("--verbose","Display each step of the update process").option("--silent","Output in JSON only").addOption(new Option("--scope <scope>","Scope to update in: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
124
126
  Examples:
125
127
  $ flow plugin update flow-adr-writer
126
128
  $ flow plugin update flow-adr-writer --scope project
@@ -129,49 +131,49 @@ Examples:
129
131
  $ flow plugin update flow-adr-writer --verbose
130
132
  $ flow plugin update flow-adr-writer --silent
131
133
  $ flow plugin update
132
- $ flow plugin update --dry-run`).action(async(a,l)=>{re("cli",{verbose:l.verbose,silent:l.silent});let u=await La(a??null,l);process.exit(u);}),r.command("enable").description("Enable an installed plugin").argument("<name>","Name of the plugin to enable").addOption(new Option("--scope <scope>","Scope to enable in: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
134
+ $ flow plugin update --dry-run`).action(async(a,l)=>{se("cli",{verbose:l.verbose,silent:l.silent});let u=await Ha(a??null,l);process.exit(u);}),n.command("enable").description("Enable an installed plugin").argument("<name>","Name of the plugin to enable").addOption(new Option("--scope <scope>","Scope to enable in: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
133
135
  Examples:
134
136
  $ flow plugin enable flow-adr-writer
135
- $ flow plugin enable flow-adr-writer --scope project`).action(async(a,l)=>{re("cli");let u=await Ca(a,l);process.exit(u);}),r.command("disable").description("Disable an installed plugin").argument("<name>","Name of the plugin to disable").addOption(new Option("--scope <scope>","Scope to disable in: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
137
+ $ flow plugin enable flow-adr-writer --scope project`).action(async(a,l)=>{se("cli");let u=await ja(a,l);process.exit(u);}),n.command("disable").description("Disable an installed plugin").argument("<name>","Name of the plugin to disable").addOption(new Option("--scope <scope>","Scope to disable in: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
136
138
  Examples:
137
139
  $ flow plugin disable flow-adr-writer
138
- $ flow plugin disable flow-adr-writer --scope project`).action(async(a,l)=>{re("cli");let u=await Aa(a,l);process.exit(u);});let o=new Command("marketplace").description("Manage plugin marketplaces");o.command("add").description("Register a plugin marketplace in Claude Code").argument("<source>","Marketplace source (owner/repo or URL)").option("--force","Skip confirmation prompt").option("--verbose","Display command output").option("--silent","Output as JSON only").addHelpText("after",`
140
+ $ flow plugin disable flow-adr-writer --scope project`).action(async(a,l)=>{se("cli");let u=await Ba(a,l);process.exit(u);});let o=new Command("marketplace").description("Manage plugin marketplaces");o.command("add").description("Register a plugin marketplace in Claude Code").argument("<source>","Marketplace source (owner/repo or URL)").option("--force","Skip confirmation prompt").option("--verbose","Display command output").option("--silent","Output as JSON only").addHelpText("after",`
139
141
  Examples:
140
142
  $ flow plugin marketplace add anthropics/claude-code
141
143
  $ flow plugin marketplace add https://github.com/owner/repo
142
144
  $ flow plugin marketplace add anthropics/claude-code --force
143
- $ flow plugin marketplace add anthropics/claude-code --silent`).action(async(a,l)=>{re("cli",{verbose:l.verbose,silent:l.silent});let u=await Ma(a,l);process.exit(u);}),r.addCommand(o),t.addCommand(r);let i=new Command("mcp").description("Manage MCP servers from the Findr catalog");i.command("add").description("Install an MCP server into Claude Code").argument("<name>","Name of the MCP server to install").argument("[args...]","Arguments to pass to the MCP server (URL for http, command for stdio)").addOption(new Option("--transport <type>","Transport type: http or stdio").choices(["http","stdio"]).makeOptionMandatory()).addOption(new Option("--scope <scope>","Scope to install into: user, project, or local").choices(["user","project","local"])).option("--force","Skip confirmation prompt").option("--verbose","Display command output").option("--silent","Output as JSON only").addHelpText("after",`
145
+ $ flow plugin marketplace add anthropics/claude-code --silent`).action(async(a,l)=>{se("cli",{verbose:l.verbose,silent:l.silent});let u=await Ga(a,l);process.exit(u);}),n.addCommand(o),t.addCommand(n);let i=new Command("mcp").description("Manage MCP servers from the Findr catalog");i.command("add").description("Install an MCP server into Claude Code").argument("<name>","Name of the MCP server to install").argument("[args...]","Arguments to pass to the MCP server (URL for http, command for stdio)").addOption(new Option("--transport <type>","Transport type: http or stdio").choices(["http","stdio"]).makeOptionMandatory()).addOption(new Option("--scope <scope>","Scope to install into: user, project, or local").choices(["user","project","local"])).option("--force","Skip confirmation prompt").option("--verbose","Display command output").option("--silent","Output as JSON only").addHelpText("after",`
144
146
  Examples:
145
147
  $ flow mcp add notion --transport http https://mcp.notion.com/mcp
146
148
  $ flow mcp add mcp-chrome --transport stdio uvx mcp-chrome
147
149
  $ flow mcp add playwright-mcp --transport stdio uvx playwright-mcp --force
148
- $ flow mcp add notion --transport http https://mcp.notion.com/mcp --scope project`).action(async(a,l,u)=>{re("cli",{verbose:u.verbose,silent:u.silent});let g=await js(a,l,u);process.exit(g);}),i.command("remove").description("Remove an MCP server from Claude Code").argument("<name>","Name of the MCP server to remove").addOption(new Option("--scope <scope>","Scope to remove from: user, project, or local").choices(["user","project","local"])).option("--force","Skip confirmation prompt").option("--verbose","Display command output").option("--silent","Output as JSON only").addHelpText("after",`
150
+ $ flow mcp add notion --transport http https://mcp.notion.com/mcp --scope project`).action(async(a,l,u)=>{se("cli",{verbose:u.verbose,silent:u.silent});let g=await ea(a,l,u);process.exit(g);}),i.command("remove").description("Remove an MCP server from Claude Code").argument("<name>","Name of the MCP server to remove").addOption(new Option("--scope <scope>","Scope to remove from: user, project, or local").choices(["user","project","local"])).option("--force","Skip confirmation prompt").option("--verbose","Display command output").option("--silent","Output as JSON only").addHelpText("after",`
149
151
  Examples:
150
152
  $ flow mcp remove notion
151
153
  $ flow mcp remove notion --scope project
152
- $ flow mcp remove playwright-mcp --force`).action(async(a,l)=>{re("cli",{verbose:l.verbose,silent:l.silent});let u=await Ks(a,l);process.exit(u);}),t.addCommand(i);let s=new Command("auth").description("Manage authentication credentials");s.command("login").description("Authenticate and save credentials locally").option("--client-id <id>","Client ID for non-interactive authentication").option("--client-secret <secret>","Client Secret for non-interactive authentication").option("--tenant <tenant>","Tenant for non-interactive authentication").option("--bundle <slug>","Starter kit slug for non-interactive setup").option("--verbose","Display each step of the authentication process").addHelpText("after",`
154
+ $ flow mcp remove playwright-mcp --force`).action(async(a,l)=>{se("cli",{verbose:l.verbose,silent:l.silent});let u=await ta(a,l);process.exit(u);}),t.addCommand(i);let s=new Command("auth").description("Manage authentication credentials");s.command("login").description("Authenticate and save credentials locally").option("--client-id <id>","Client ID for non-interactive authentication").option("--client-secret <secret>","Client Secret for non-interactive authentication").option("--tenant <tenant>","Tenant for non-interactive authentication").option("--starter-kit <slug>","Starter kit slug for non-interactive setup").option("--verbose","Display each step of the authentication process").addHelpText("after",`
153
155
  Examples:
154
156
  $ flow auth login
155
157
  $ flow auth login --client-id ID --client-secret SECRET --tenant TENANT
156
- $ flow auth login --client-id ID --client-secret SECRET --tenant TENANT --bundle dev
157
- $ flow auth login --verbose`).action(async a=>{re("cli",{verbose:a.verbose});let l=await Po(a);process.exit(l);}),s.command("logout").description("Remove locally saved credentials").option("--force","Skip interactive confirmation").addHelpText("after",`
158
+ $ flow auth login --client-id ID --client-secret SECRET --tenant TENANT --starter-kit dev
159
+ $ flow auth login --verbose`).action(async a=>{se("cli",{verbose:a.verbose});let l=await Mo(a);process.exit(l);}),s.command("logout").description("Remove locally saved credentials").option("--force","Skip interactive confirmation").addHelpText("after",`
158
160
  Examples:
159
161
  $ flow auth logout
160
- $ flow auth logout --force`).action(async a=>{let l=await va(a.force);process.exit(l);}),s.command("status").description("Display the current authentication status").addHelpText("after",`
162
+ $ flow auth logout --force`).action(async a=>{let l=await Da(a.force);process.exit(l);}),s.command("status").description("Display the current authentication status").addHelpText("after",`
161
163
  Examples:
162
- $ flow auth status`).action(async()=>{let a=await Pa();process.exit(a);}),t.addCommand(s);let c=new Command("skills").description("Manage skills for Claude Code from GitHub repositories or local paths");return c.command("add").description("Install skills from a GitHub repo or local path into Claude Code").argument("<source>","GitHub repo (owner/repo), URL, or local path").option("-g, --global","Install globally (~/.claude/skills/)").option("-s, --skill <names...>","Install only specific skills by name").option("-y, --yes","Skip confirmation prompts").option("--list","List available skills without installing").addHelpText("after",`
164
+ $ flow auth status`).action(async()=>{let a=await Na();process.exit(a);}),t.addCommand(s);let c=new Command("skills").description("Manage skills for Claude Code from GitHub repositories or local paths");return c.command("add").description("Install skills from a GitHub repo or local path into Claude Code").argument("<source>","GitHub repo (owner/repo), URL, or local path").option("-g, --global","Install globally (~/.claude/skills/)").option("-s, --skill <names...>","Install only specific skills by name").option("-y, --yes","Skip confirmation prompts").option("--list","List available skills without installing").addHelpText("after",`
163
165
  Examples:
164
166
  $ flow skills add vercel-labs/agent-skills
165
167
  $ flow skills add owner/repo -g
166
168
  $ flow skills add owner/repo --skill pr-review commit
167
169
  $ flow skills add ./local/skills -y
168
- $ flow skills add owner/repo --list`).action(async(a,l)=>{let u=await Qa(a,l);process.exit(u);}),c.command("list").description("List installed skills").option("-g, --global","List global skills (default: project)").option("--json","Output as JSON").addHelpText("after",`
170
+ $ flow skills add owner/repo --list`).action(async(a,l)=>{let u=await dl(a,l);process.exit(u);}),c.command("list").description("List installed skills").option("-g, --global","List global skills (default: project)").option("--json","Output as JSON").addHelpText("after",`
169
171
  Examples:
170
172
  $ flow skills list
171
173
  $ flow skills list -g
172
- $ flow skills list --json`).action(async a=>{let l=await tl(a);process.exit(l);}),c.command("remove").description("Remove an installed skill").argument("[name]","Name of the skill to remove").option("-g, --global","Remove from global scope").option("--force","Skip confirmation").addHelpText("after",`
174
+ $ flow skills list --json`).action(async a=>{let l=await fl(a);process.exit(l);}),c.command("remove").description("Remove an installed skill").argument("[name]","Name of the skill to remove").option("-g, --global","Remove from global scope").option("--force","Skip confirmation").addHelpText("after",`
173
175
  Examples:
174
176
  $ flow skills remove pr-review
175
- $ flow skills remove pr-review -g --force`).action(async(a,l)=>{let u=await nl(a,l);process.exit(u);}),t.addCommand(c),t.command("health").description("Check the CLI configuration and connectivity").addHelpText("after",`
177
+ $ flow skills remove pr-review -g --force`).action(async(a,l)=>{let u=await gl(a,l);process.exit(u);}),t.addCommand(c),t.command("health").description("Check the CLI configuration and connectivity").addHelpText("after",`
176
178
  Examples:
177
- $ flow health`).action(async()=>{let a=await _a();process.exit(a);}),t}var Sd=rl(async()=>{re("tui"),si("tui"),ai(),process.on("SIGINT",()=>{Ot("sigint").finally(()=>process.exit(130));}),process.on("SIGTERM",()=>{Ot("sigterm").finally(()=>process.exit(143));}),await ga(),render(jsx(ya,{}),{alternateScreen:true,exitOnCtrlC:false});});Sd.parse();
179
+ $ flow health`).action(async()=>{let a=await za();process.exit(a);}),t}$();var _d=yl(async()=>{se("tui"),wi("tui"),xi(),process.on("SIGINT",()=>{jt("sigint").finally(()=>process.exit(130));}),process.on("SIGTERM",()=>{jt("sigterm").finally(()=>process.exit(143));}),await Ca(),render(jsx($a,{}),{alternateScreen:true,exitOnCtrlC:false});});_d.parse();
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@ciandt-flow/cli",
3
- "version": "1.3.0",
3
+ "version": "1.4.0-beta.164",
4
4
  "description": "TUI for browsing and installing Claude Code plugins from the Flow ecosystem",
5
5
  "type": "module",
6
6
  "main": "dist/index.js",
@@ -50,7 +50,7 @@
50
50
  "email": "flow@ciandt.com"
51
51
  },
52
52
  "dependencies": {
53
- "@tanstack/react-query": "5.100.6",
53
+ "@tanstack/react-query": "5.100.9",
54
54
  "boxen": "8.0.1",
55
55
  "chalk": "5.6.2",
56
56
  "commander": "11.1.0",
@@ -70,8 +70,8 @@
70
70
  "react-dom": "19.2.5",
71
71
  "semver": "7.7.4",
72
72
  "simple-git": "3.36.0",
73
- "yaml": "2.8.3",
74
- "yocto-spinner": "1.1.0",
73
+ "yaml": "2.8.4",
74
+ "yocto-spinner": "1.2.0",
75
75
  "zustand": "5.0.12"
76
76
  },
77
77
  "devDependencies": {