@ciandt-flow/cli 1.4.0-beta.164 → 1.4.1-beta.168

package/dist/index.js

@@ -1,116 +1,188 @@
 #!/usr/bin/env node
-import*as Ie from'os';import Ie__default,{homedir,tmpdir}from'os';import*as j from'path';import j__default,{join,relative,resolve,normalize,sep,dirname,isAbsolute,basename}from'path';import*as W from'fs';import W__default,{readFileSync,existsSync,realpathSync}from'fs';import xr from'keytar';import {Box,Text,render,useWindowSize,useApp,useInput}from'ink';import $c,{useRef,useCallback,useMemo,useEffect,useState}from'react';import {create}from'zustand';import Gl,{HTTPError}from'ky';import*as xt from'crypto';import {randomUUID}from'crypto';import {execFile,exec,spawn}from'child_process';import {promisify}from'util';import*as po from'readline';import {createInterface}from'readline';import Ln from'conf';import {StatusCodes}from'http-status-codes';import {jsxs,jsx,Fragment}from'react/jsx-runtime';import C from'chalk';import xc from'ink-big-text';import Vc from'ink-spinner';import*as Pe from'fs/promises';import {stat,rm,readdir,readFile,mkdtemp,mkdir,writeFile,cp}from'fs/promises';import eu from'extract-zip';import tu from'proper-lockfile';import uo from'semver';import {execa}from'execa';import Oo from'yocto-spinner';import {Command,Option}from'commander';import {simpleGit}from'simple-git';import {parse}from'yaml';var Sl=Object.defineProperty;var xe=(e,t)=>()=>(e&&(t=e(e=0)),t);var hl=(e,t)=>{for(var r in t)Sl(e,r,{get:t[r],enumerable:true});};var jo,N,hn,Mt,ur,wt,Bo,wn,Ot,Fe,rt,M=xe(()=>{jo="FLOW",N="flow-skills",hn="flow-cli",Mt="internal",ur="external",wt={skill:{label:"Skill",color:"cyan"},mcp:{label:"MCP",color:"yellow"},plugin:{label:"Plugin",color:"magenta"}},Bo={internal:{label:"Flow",color:"blue"},external:{label:"External",color:"white"}},wn=new Set(["internal","external"]),Ot={user:{label:"Global",pathHint:"~/.claude/",actionLabel:"Global (~/.claude)",description:"available in all projects on this machine"},project:{label:"Project",pathHint:".claude/ (shared)",actionLabel:"Project (.claude/)",description:"shared with the team via version control"},local:{label:"Local",pathHint:".claude/ (local only)",actionLabel:"Local (.claude/)",description:"only on your machine, not committed"}},Fe=5,rt=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;});function xn(e){return e.replace(Il,"Bearer ***").replace(bl,"***").replace(vl,"***")}var Il,bl,vl,In=xe(()=>{Il=/Bearer\s+[A-Za-z0-9\-._~+/]+=*/g,bl=/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,vl=/[A-Za-z0-9+/]{40,}={0,2}/g;});var Nt,Vo=xe(()=>{Nt=class{context;constructor(t){this.context=t;}write(t){let r=this.context==="tui"?this.formatTui(t):this.formatCli(t);process.stderr.write(r+`
-`);}formatTui(t){return `[flow:${t.module}] ${t.message}`}formatCli(t){let r=String(t.timestamp.getHours()).padStart(2,"0"),n=String(t.timestamp.getMinutes()).padStart(2,"0"),o=String(t.timestamp.getSeconds()).padStart(2,"0");return `[${r}:${n}:${o}] [${t.level.toUpperCase()}] ${t.message}`}};});function zo(e,t){return j.join(Ie.homedir(),Ft,"plugins","cache",N,e,t)}function bn(e){return j.join(Ie.homedir(),Ft,"plugins","marketplaces",N,"plugins","native",e)}function dr(){return j.join(Ie.homedir(),Ft,"plugins","marketplaces",N,".claude-plugin","marketplace.json")}function qo(){return j.join(Ie.homedir(),Ft,"plugins","known_marketplaces.json")}function Wo(){return j.join(Ie.homedir(),Ft,"plugins","marketplaces",N)}function Xo(){return j.join(Ie.homedir(),Go,"cache","install.lock")}function Yo(){return j.join(Ie.homedir(),Go,"logs","flowsetup.log")}function Ut(e){let t=e==="global"?Ie.homedir():process.cwd();return j.join(t,".claude","skills")}function vn(e){let t=e==="global"?Ie.homedir():process.cwd();return j.join(t,".claude","skills-lock.json")}var Ft,Go,Ue=xe(()=>{M();Ft=".claude",Go=".flow";});var Pl,El,mr,Zo=xe(()=>{Ue();Pl=5*1024*1024,El=3,mr=class{filePath;constructor(){this.filePath=Yo(),this.ensureDir(),this.rotateIfNeeded();}write(t){let r=`[${t.timestamp.toISOString()}] [${t.level.toUpperCase()}] [${t.module}] ${t.message}
-`;try{W.appendFileSync(this.filePath,r,"utf-8");}catch{}}ensureDir(){try{let t=j.dirname(this.filePath);W.mkdirSync(t,{recursive:!0});}catch{}}rotateIfNeeded(){try{if(W.statSync(this.filePath).size>Pl){let r=new Date().toISOString().replace(/[:.]/g,"-"),n=this.filePath.replace(".log",`-${r}.log`);W.renameSync(this.filePath,n),this.cleanOldBackups();}}catch{}}cleanOldBackups(){try{let t=j.dirname(this.filePath),r=j.basename(this.filePath,".log"),n=W.readdirSync(t).filter(o=>o.startsWith(r+"-")&&o.endsWith(".log")).sort().reverse();for(let o of n.slice(El))W.unlinkSync(j.join(t,o));}catch{}}};});var fr,Qo=xe(()=>{fr=class{write(t){process.stdout.write(t.message+`
-`);}};});function Tl(){let e=process.env.DEBUG;if(!e)return null;let t=e.split(",").map(n=>n.trim()).filter(Boolean);for(let n of t)if(n==="flow:*")return "all";let r=new Set;for(let n of t)n.startsWith("flow:")&&r.add(n.slice(5));return r.size>0?r:null}function se(e,t){if(e==="tui"){let r=Tl();ot={context:e,transports:[new Nt("tui"),new mr],minLevel:r?"debug":"warn",debugModules:r};}else t?.silent?ot={context:e,transports:[],minLevel:"error",debugModules:null}:t?.verbose?ot={context:e,transports:[new Nt("cli")],minLevel:"debug",debugModules:null}:ot={context:e,transports:[new fr],minLevel:"info",debugModules:null};}function ei(){return ot.transports}function ti(e,t){let{debugModules:r,minLevel:n}=ot;return ot.context==="tui"&&r&&r!=="all"?r.has(t)?It[e]>=It.debug:It[e]>=It.warn:It[e]>=It[n]}var It,ot,Pn=xe(()=>{Vo();Zo();Qo();It={debug:0,info:1,warn:2,error:3},ot={context:"cli",transports:[],minLevel:"warn",debugModules:null};});function gr(e,t,r){if(!ti(e,t))return;let n={level:e,module:t,message:xn(r),timestamp:new Date};for(let o of ei())o.write(n);}function S(e){let t=ri.get(e);if(t)return t;let r={debug:n=>gr("debug",e,n),info:n=>gr("info",e,n),warn:n=>gr("warn",e,n),error:n=>gr("error",e,n)};return ri.set(e,r),r}var ri,ni=xe(()=>{In();Pn();ri=new Map;});var $=xe(()=>{ni();Pn();In();});var li={};hl(li,{WindowsKeyVaultProvider:()=>Ir});var me,Ir,_n=xe(()=>{$();me=S("encryption:windows-keyvault"),Ir=class{static async isAvailable(){try{return await xr.getPassword("__flow_probe__","__flow_probe__"),me.debug("Windows Credential Manager is available (keytar probe succeeded)"),!0}catch(t){let r=t instanceof Error?t.message.split(`
-`)[0]:"unknown error";return me.debug(`Windows Credential Manager not available: ${r}`),false}}async getSecret(t,r){try{me.debug(`Looking up secret: service=${t}, account=${r}`);let n=await xr.getPassword(t,r);return me.debug(`keytar getPassword result: ${n?"found":"empty"}`),n}catch(n){let o=n instanceof Error?n.message.split(`
-`)[0]:"unknown error";return me.error(`Failed to read secret from Windows Credential Manager [service="${t}", account="${r}"]: ${o}`),null}}async setSecret(t,r,n){try{me.debug(`Storing secret: service=${t}, account=${r}`),await xr.setPassword(t,r,n),me.debug("keytar setPassword succeeded");}catch(o){let i=o instanceof Error?o.message.split(`
-`)[0]:"unknown error",s=`Failed to store secret in Windows Credential Manager [service="${t}", account="${r}"]: ${i}`;throw me.error(s),new Error(s)}}async deleteSecret(t,r){try{me.debug(`Deleting secret: service=${t}, account=${r}`);let n=await xr.deletePassword(t,r);return me.debug(`keytar deletePassword result: ${n}`),n}catch(n){let o=n instanceof Error?n.message.split(`
-`)[0]:"unknown error";return me.debug(`Failed to delete secret from Windows Credential Manager [service="${t}", account="${r}"]: ${o}`),false}}getStoragePath(){return "Windows Credential Manager (keytar)"}};});M();var Jo=new Set(["skill","mcp","plugin"]),f=create(e=>({screen:"auth",activeTab:"discover",focus:"list",selectedIndex:0,actionMenuOpen:false,notification:null,loading:false,loadingMessage:"",catalogError:null,pendingExit:false,catalogFilters:{types:new Set(Jo),origins:new Set(wn)},setScreen:t=>e({screen:t}),setActiveTab:t=>e({activeTab:t}),setFocus:t=>e({focus:t}),setSelectedIndex:t=>e({selectedIndex:t}),setActionMenuOpen:t=>e({actionMenuOpen:t}),showNotification:(t,r)=>e({notification:{message:t,type:r}}),clearNotification:()=>e({notification:null}),setLoading:(t,r="")=>e({loading:t,loadingMessage:t?r:""}),setCatalogError:t=>e({catalogError:t}),setPendingExit:t=>e({pendingExit:t}),toggleTypeFilter:t=>e(r=>{let{types:n}=r.catalogFilters;return n.size===1&&n.has(t)?{}:{catalogFilters:{...r.catalogFilters,types:new Set([t])},selectedIndex:0}}),selectAllTypes:()=>e(t=>({catalogFilters:{...t.catalogFilters,types:new Set(Jo)},selectedIndex:0})),toggleOriginFilter:t=>e(r=>{let{origins:n}=r.catalogFilters;return n.size===1&&n.has(t)?{}:{catalogFilters:{...r.catalogFilters,origins:new Set([t])},selectedIndex:0}}),selectAllOrigins:()=>e(t=>({catalogFilters:{...t.catalogFilters,origins:new Set(wn)},selectedIndex:0}))}));var pr="aes-256-gcm",xl=16,Ho=16,Dt=class{key;constructor(t){if(t.length!==32)throw new Error(`Invalid key length: expected 32 bytes, got ${t.length}`);this.key=t;}encrypt(t){let r=xt.randomBytes(xl),n=xt.createCipheriv(pr,this.key,r,{authTagLength:Ho}),o=Buffer.concat([n.update(t,"utf8"),n.final()]),i=n.getAuthTag();return {iv:r.toString("hex"),authTag:i.toString("hex"),ciphertext:o.toString("hex"),algorithm:pr}}decrypt(t){if(t.algorithm!==pr)throw new Error(`Unsupported encryption algorithm: ${t.algorithm}`);let r=xt.createDecipheriv(pr,this.key,Buffer.from(t.iv,"hex"),{authTagLength:Ho});return r.setAuthTag(Buffer.from(t.authTag,"hex")),Buffer.concat([r.update(Buffer.from(t.ciphertext,"hex")),r.final()]).toString("utf8")}};$();var En=S("encryption"),Tn="__encrypted__";function kl(e){return typeof e=="object"&&e!==null&&Tn in e&&e[Tn]===true}function kn(e){return {serialize(t){let r=JSON.stringify(t),n=e.encrypt(r),o={[Tn]:true,envelope:n};return JSON.stringify(o,null,"	")},deserialize(t){let r;try{r=JSON.parse(t);}catch{return En.warn("[encryption] Config file contains unparseable data, treating as empty"),{}}if(kl(r))try{let n=e.decrypt(r.envelope);return JSON.parse(n)}catch(n){return En.error(`[encryption] Decryption failed: ${n instanceof Error?n.message:"unknown error"}. Config will be treated as empty. Re-authentication may be required.`),{}}return En.info("[encryption] Detected plaintext config \u2014 will encrypt on next write"),r}}}$();var Cn=promisify(execFile),Al=promisify(exec),de=S("encryption:macos-keyvault"),bt=class{static async isAvailable(){try{let{stdout:t}=await Al("command -v security");return de.debug(`security binary found at: ${t.trim()}`),!0}catch{return de.debug("security binary not found in PATH"),false}}async getSecret(t,r){try{de.debug(`Looking up secret: service=${t}, account=${r}`);let{stdout:n}=await Cn("security",["find-generic-password","-w","-a",r,"-s",t]),o=n.trim();return de.debug(`security find-generic-password result: ${o?"found":"empty"}`),o||null}catch(n){let o=n;return de.debug(`security find-generic-password failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),null}}async setSecret(t,r,n){try{de.debug(`Storing secret: service=${t}, account=${r}`),await Cn("security",["add-generic-password","-U","-a",r,"-s",t,"-w",n]),de.debug("security add-generic-password succeeded");}catch(o){let i=o;throw de.error(`security add-generic-password failed: code=${i.code}, stderr=${i.stderr?.trim()}, message=${i.message}`),o}}async deleteSecret(t,r){try{return de.debug(`Deleting secret: service=${t}, account=${r}`),await Cn("security",["delete-generic-password","-a",r,"-s",t]),de.debug("security delete-generic-password succeeded"),!0}catch(n){let o=n;return de.debug(`security delete-generic-password failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),false}}getStoragePath(){return "macOS Keychain (security)"}};$();var $n=promisify(execFile),An=promisify(exec),Ml=[{name:"apt",command:"sudo apt install -y libsecret-tools"},{name:"dnf",command:"sudo dnf install -y libsecret"},{name:"pacman",command:"sudo pacman -S --noconfirm libsecret"},{name:"apk",command:"sudo apk add libsecret-tools"},{name:"zypper",command:"sudo zypper install -y libsecret-tools"}],_=S("encryption:linux-keyvault");async function Ol(e,t){let r=["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"],n=0,o=setInterval(()=>{process.stderr.write(`\r${r[n++%r.length]}  ${e}`);},80);try{return await t()}finally{clearInterval(o),process.stderr.write("\r\x1B[2K");}}function Dl(e){let t=po.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(e,n=>{t.close(),r(n.trim().toLowerCase());});})}var Ke=class e{static async isAvailable(){try{let{stdout:t}=await An("command -v secret-tool");_.debug(`secret-tool found at: ${t.trim()}`);}catch{return _.debug("secret-tool binary not found in PATH"),false}try{return await $n("secret-tool",["lookup","service","__flow_connectivity_check__"]),_.debug("Secret Service D-Bus connectivity check passed"),!0}catch(t){let n=t.stderr?.trim()??"";return n.includes("org.freedesktop.secrets")?(_.debug(`Secret Service D-Bus not available: ${n}`),false):(_.debug("secret-tool is available and D-Bus service is reachable"),true)}}static async detectPackageManager(){for(let t of Ml)try{return await An(`command -v ${t.name}`),t}catch{}return null}static async ensureInstalled(){if(await e.isAvailable())return  true;_.info("Secure credential storage requires 'secret-tool' (libsecret). This tool allows us to store your encryption key in the OS keyring, so your credentials are protected even if someone copies the config file.");let t=await e.detectPackageManager();if(!t)return _.warn("Could not detect a supported package manager. Please install libsecret manually."),false;let r=await Dl("  ? Install secret-tool? This requires sudo. (y/N) ");if(r!=="y"&&r!=="yes")return  false;try{return _.info(`Running: ${t.command}`),await Ol("Installing secret-tool...",()=>An(t.command)),e.isAvailable()}catch{return _.warn("Installation failed. Falling back to derived key."),false}}async getSecret(t,r){try{_.debug(`Looking up secret: service=${t}, account=${r}`);let{stdout:n}=await $n("secret-tool",["lookup","service",t,"account",r]),o=n.trim();return _.debug(`secret-tool lookup result: ${o?"found":"empty"}`),o||null}catch(n){let o=n;return _.debug(`secret-tool lookup failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),null}}async setSecret(t,r,n){_.debug(`Storing secret: service=${t}, account=${r}`),_.debug(`Environment: DBUS_SESSION_BUS_ADDRESS=${process.env.DBUS_SESSION_BUS_ADDRESS??"NOT SET"}`),_.debug(`Environment: DISPLAY=${process.env.DISPLAY??"NOT SET"}, WAYLAND_DISPLAY=${process.env.WAYLAND_DISPLAY??"NOT SET"}`),_.debug(`Environment: WSL_DISTRO_NAME=${process.env.WSL_DISTRO_NAME??"NOT SET"}`),await new Promise((o,i)=>{let s=spawn("secret-tool",["store","--label",t,"service",t,"account",r]),c="";s.stderr.on("data",a=>{c+=a.toString();}),s.stdin.end(n,"utf8"),s.on("close",a=>{a===0?(_.debug("secret-tool store succeeded"),o()):(_.error(`secret-tool store failed: code=${a}, stderr=${c.trim()}`),i(new Error(`secret-tool exited with code ${a}${c?`: ${c.trim()}`:""}`)));}),s.on("error",a=>{_.error(`secret-tool store spawn error: ${a.message}`),i(a);});});}async deleteSecret(t,r){try{return _.debug(`Deleting secret: service=${t}, account=${r}`),await $n("secret-tool",["clear","service",t,"account",r]),_.debug("secret-tool clear succeeded"),!0}catch(n){let o=n;return _.debug(`secret-tool clear failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),false}}getStoragePath(){return "Linux Secret Service (secret-tool)"}};var Nl=32,Fl="flow-plugins-cli-fallback",Rn="flow-plugins-cli-fallback",Ul={linux:"install secret-tool (e.g. sudo apt install libsecret-tools)",darwin:"ensure the Keychain is accessible (security binary must be available)",win32:"ensure Credential Manager is available (cmdkey must be in PATH)"};function Kl(){let e=`${Ie.hostname()}${Ie.userInfo().username}`;return xt.scryptSync(e,Fl,Nl)}function jl(){let e=Kl(),t=new Dt(e),r=kn(t);return new Ln({projectName:Rn,serialize:r.serialize,deserialize:r.deserialize})}var Sr=null;function yr(){return Sr||(Sr=jl()),Sr}var Z=class{warned=false;async getSecret(t,r){return yr().get(`${t}:${r}`)??null}async setSecret(t,r,n){if(!this.warned){let o=Ul[process.platform]??"ensure the OS keyring is available";process.stderr.write(`\u26A0  Secure keyring unavailable. Credentials are stored in an encrypted file
+import {Box,Text,render,useWindowSize,useApp,useInput}from'ink';import kc,{useRef,useCallback,useMemo,useEffect,useState}from'react';import {create}from'zustand';import Hl,{HTTPError}from'ky';import*as yt from'crypto';import {randomUUID}from'crypto';import*as z from'fs';import z__default,{readFileSync,existsSync,realpathSync}from'fs';import*as U from'path';import U__default,{join,relative,resolve,normalize,sep,dirname,isAbsolute,basename}from'path';import*as he from'os';import he__default,{homedir,tmpdir}from'os';import {execFile,exec,spawn}from'child_process';import {promisify}from'util';import*as co from'readline';import {createInterface}from'readline';import An from'conf';import {StatusCodes}from'http-status-codes';import {jsxs,jsx,Fragment}from'react/jsx-runtime';import C from'chalk';import hc from'ink-big-text';import Jc from'ink-spinner';import*as Ie from'fs/promises';import {stat,rm,readdir,readFile,mkdtemp,mkdir,writeFile,cp}from'fs/promises';import Zc from'extract-zip';import Qc from'proper-lockfile';import lo from'semver';import {execa}from'execa';import Mo from'yocto-spinner';import {Command,Option}from'commander';import {simpleGit}from'simple-git';import {parse}from'yaml';var Uo="FLOW",O="flow-skills",yn="flow-cli",Lt="internal",lr="external",gt={skill:{label:"Skill",color:"cyan"},mcp:{label:"MCP",color:"yellow"},plugin:{label:"Plugin",color:"magenta"}},Bo={internal:{label:"Flow",color:"blue"},external:{label:"External",color:"white"}},Sn=new Set(["internal","external"]),Rt={user:{label:"Global",pathHint:"~/.claude/",actionLabel:"Global (~/.claude)",description:"available in all projects on this machine"},project:{label:"Project",pathHint:".claude/ (shared)",actionLabel:"Project (.claude/)",description:"shared with the team via version control"},local:{label:"Local",pathHint:".claude/ (local only)",actionLabel:"Local (.claude/)",description:"only on your machine, not committed"}},Oe=5,Ze=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;var Ko=new Set(["skill","mcp","plugin"]),f=create(e=>({screen:"auth",activeTab:"discover",focus:"list",selectedIndex:0,actionMenuOpen:false,notification:null,loading:false,loadingMessage:"",catalogError:null,pendingExit:false,catalogFilters:{types:new Set(Ko),origins:new Set(Sn)},setScreen:t=>e({screen:t}),setActiveTab:t=>e({activeTab:t}),setFocus:t=>e({focus:t}),setSelectedIndex:t=>e({selectedIndex:t}),setActionMenuOpen:t=>e({actionMenuOpen:t}),showNotification:(t,r)=>e({notification:{message:t,type:r}}),clearNotification:()=>e({notification:null}),setLoading:(t,r="")=>e({loading:t,loadingMessage:t?r:""}),setCatalogError:t=>e({catalogError:t}),setPendingExit:t=>e({pendingExit:t}),toggleTypeFilter:t=>e(r=>{let{types:n}=r.catalogFilters;return n.size===1&&n.has(t)?{}:{catalogFilters:{...r.catalogFilters,types:new Set([t])},selectedIndex:0}}),selectAllTypes:()=>e(t=>({catalogFilters:{...t.catalogFilters,types:new Set(Ko)},selectedIndex:0})),toggleOriginFilter:t=>e(r=>{let{origins:n}=r.catalogFilters;return n.size===1&&n.has(t)?{}:{catalogFilters:{...r.catalogFilters,origins:new Set([t])},selectedIndex:0}}),selectAllOrigins:()=>e(t=>({catalogFilters:{...t.catalogFilters,origins:new Set(Sn)},selectedIndex:0}))}));var cr="aes-256-gcm",pl=16,jo=16,Mt=class{key;constructor(t){if(t.length!==32)throw new Error(`Invalid key length: expected 32 bytes, got ${t.length}`);this.key=t;}encrypt(t){let r=yt.randomBytes(pl),n=yt.createCipheriv(cr,this.key,r,{authTagLength:jo}),o=Buffer.concat([n.update(t,"utf8"),n.final()]),i=n.getAuthTag();return {iv:r.toString("hex"),authTag:i.toString("hex"),ciphertext:o.toString("hex"),algorithm:cr}}decrypt(t){if(t.algorithm!==cr)throw new Error(`Unsupported encryption algorithm: ${t.algorithm}`);let r=yt.createDecipheriv(cr,this.key,Buffer.from(t.iv,"hex"),{authTagLength:jo});return r.setAuthTag(Buffer.from(t.authTag,"hex")),Buffer.concat([r.update(Buffer.from(t.ciphertext,"hex")),r.final()]).toString("utf8")}};var dl=/Bearer\s+[A-Za-z0-9\-._~+/]+=*/g,ml=/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,fl=/[A-Za-z0-9+/]{40,}={0,2}/g;function hn(e){return e.replace(dl,"Bearer ***").replace(ml,"***").replace(fl,"***")}var _t=class{context;constructor(t){this.context=t;}write(t){let r=this.context==="tui"?this.formatTui(t):this.formatCli(t);process.stderr.write(r+`
+`);}formatTui(t){return `[flow:${t.module}] ${t.message}`}formatCli(t){let r=String(t.timestamp.getHours()).padStart(2,"0"),n=String(t.timestamp.getMinutes()).padStart(2,"0"),o=String(t.timestamp.getSeconds()).padStart(2,"0");return `[${r}:${n}:${o}] [${t.level.toUpperCase()}] ${t.message}`}};var Ot=".claude",Jo=".flow";function Ho(e,t){return U.join(he.homedir(),Ot,"plugins","cache",O,e,t)}function wn(e){return U.join(he.homedir(),Ot,"plugins","marketplaces",O,"plugins","native",e)}function ur(){return U.join(he.homedir(),Ot,"plugins","marketplaces",O,".claude-plugin","marketplace.json")}function Go(){return U.join(he.homedir(),Ot,"plugins","known_marketplaces.json")}function Vo(){return U.join(he.homedir(),Ot,"plugins","marketplaces",O)}function zo(){return U.join(he.homedir(),Jo,"cache","install.lock")}function Wo(){return U.join(he.homedir(),Jo,"logs","flowsetup.log")}function Dt(e){let t=e==="global"?he.homedir():process.cwd();return U.join(t,".claude","skills")}function xn(e){let t=e==="global"?he.homedir():process.cwd();return U.join(t,".claude","skills-lock.json")}var gl=5*1024*1024,yl=3,pr=class{filePath;constructor(){this.filePath=Wo(),this.ensureDir(),this.rotateIfNeeded();}write(t){let r=`[${t.timestamp.toISOString()}] [${t.level.toUpperCase()}] [${t.module}] ${t.message}
+`;try{z.appendFileSync(this.filePath,r,"utf-8");}catch{}}ensureDir(){try{let t=U.dirname(this.filePath);z.mkdirSync(t,{recursive:!0});}catch{}}rotateIfNeeded(){try{if(z.statSync(this.filePath).size>gl){let r=new Date().toISOString().replace(/[:.]/g,"-"),n=this.filePath.replace(".log",`-${r}.log`);z.renameSync(this.filePath,n),this.cleanOldBackups();}}catch{}}cleanOldBackups(){try{let t=U.dirname(this.filePath),r=U.basename(this.filePath,".log"),n=z.readdirSync(t).filter(o=>o.startsWith(r+"-")&&o.endsWith(".log")).sort().reverse();for(let o of n.slice(yl))z.unlinkSync(U.join(t,o));}catch{}}};var dr=class{write(t){process.stdout.write(t.message+`
+`);}};var St={debug:0,info:1,warn:2,error:3},et={context:"cli",transports:[],minLevel:"warn",debugModules:null};function Sl(){let e=process.env.DEBUG;if(!e)return null;let t=e.split(",").map(n=>n.trim()).filter(Boolean);for(let n of t)if(n==="flow:*")return "all";let r=new Set;for(let n of t)n.startsWith("flow:")&&r.add(n.slice(5));return r.size>0?r:null}function oe(e,t){if(e==="tui"){let r=Sl();et={context:e,transports:[new _t("tui"),new pr],minLevel:r?"debug":"warn",debugModules:r};}else t?.silent?et={context:e,transports:[],minLevel:"error",debugModules:null}:t?.verbose?et={context:e,transports:[new _t("cli")],minLevel:"debug",debugModules:null}:et={context:e,transports:[new dr],minLevel:"info",debugModules:null};}function qo(){return et.transports}function Xo(e,t){let{debugModules:r,minLevel:n}=et;return et.context==="tui"&&r&&r!=="all"?r.has(t)?St[e]>=St.debug:St[e]>=St.warn:St[e]>=St[n]}var Yo=new Map;function mr(e,t,r){if(!Xo(e,t))return;let n={level:e,module:t,message:hn(r),timestamp:new Date};for(let o of qo())o.write(n);}function S(e){let t=Yo.get(e);if(t)return t;let r={debug:n=>mr("debug",e,n),info:n=>mr("info",e,n),warn:n=>mr("warn",e,n),error:n=>mr("error",e,n)};return Yo.set(e,r),r}var In=S("encryption"),bn="__encrypted__";function hl(e){return typeof e=="object"&&e!==null&&bn in e&&e[bn]===true}function vn(e){return {serialize(t){let r=JSON.stringify(t),n=e.encrypt(r),o={[bn]:true,envelope:n};return JSON.stringify(o,null,"	")},deserialize(t){let r;try{r=JSON.parse(t);}catch{return In.warn("[encryption] Config file contains unparseable data, treating as empty"),{}}if(hl(r))try{let n=e.decrypt(r.envelope);return JSON.parse(n)}catch(n){return In.error(`[encryption] Decryption failed: ${n instanceof Error?n.message:"unknown error"}. Config will be treated as empty. Re-authentication may be required.`),{}}return In.info("[encryption] Detected plaintext config \u2014 will encrypt on next write"),r}}}var Pn=promisify(execFile),Il=promisify(exec),ue=S("encryption:macos-keyvault"),ht=class{static async isAvailable(){try{let{stdout:t}=await Il("command -v security");return ue.debug(`security binary found at: ${t.trim()}`),!0}catch{return ue.debug("security binary not found in PATH"),false}}async getSecret(t,r){try{ue.debug(`Looking up secret: service=${t}, account=${r}`);let{stdout:n}=await Pn("security",["find-generic-password","-w","-a",r,"-s",t]),o=n.trim();return ue.debug(`security find-generic-password result: ${o?"found":"empty"}`),o||null}catch(n){let o=n;return ue.debug(`security find-generic-password failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),null}}async setSecret(t,r,n){try{ue.debug(`Storing secret: service=${t}, account=${r}`),await Pn("security",["add-generic-password","-U","-a",r,"-s",t,"-w",n]),ue.debug("security add-generic-password succeeded");}catch(o){let i=o;throw ue.error(`security add-generic-password failed: code=${i.code}, stderr=${i.stderr?.trim()}, message=${i.message}`),o}}async deleteSecret(t,r){try{return ue.debug(`Deleting secret: service=${t}, account=${r}`),await Pn("security",["delete-generic-password","-a",r,"-s",t]),ue.debug("security delete-generic-password succeeded"),!0}catch(n){let o=n;return ue.debug(`security delete-generic-password failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),false}}getStoragePath(){return "macOS Keychain (security)"}};var En=promisify(execFile),Tn=promisify(exec),El=[{name:"apt",command:"sudo apt install -y libsecret-tools"},{name:"dnf",command:"sudo dnf install -y libsecret"},{name:"pacman",command:"sudo pacman -S --noconfirm libsecret"},{name:"apk",command:"sudo apk add libsecret-tools"},{name:"zypper",command:"sudo zypper install -y libsecret-tools"}],R=S("encryption:linux-keyvault");async function Tl(e,t){let r=["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"],n=0,o=setInterval(()=>{process.stderr.write(`\r${r[n++%r.length]}  ${e}`);},80);try{return await t()}finally{clearInterval(o),process.stderr.write("\r\x1B[2K");}}function kl(e){let t=co.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(e,n=>{t.close(),r(n.trim().toLowerCase());});})}var De=class e{static async isAvailable(){try{let{stdout:t}=await Tn("command -v secret-tool");R.debug(`secret-tool found at: ${t.trim()}`);}catch{return R.debug("secret-tool binary not found in PATH"),false}try{return await En("secret-tool",["lookup","service","__flow_connectivity_check__"]),R.debug("Secret Service D-Bus connectivity check passed"),!0}catch(t){let n=t.stderr?.trim()??"";return n.includes("org.freedesktop.secrets")?(R.debug(`Secret Service D-Bus not available: ${n}`),false):(R.debug("secret-tool is available and D-Bus service is reachable"),true)}}static async detectPackageManager(){for(let t of El)try{return await Tn(`command -v ${t.name}`),t}catch{}return null}static async ensureInstalled(){if(await e.isAvailable())return  true;R.info("Secure credential storage requires 'secret-tool' (libsecret). This tool allows us to store your encryption key in the OS keyring, so your credentials are protected even if someone copies the config file.");let t=await e.detectPackageManager();if(!t)return R.warn("Could not detect a supported package manager. Please install libsecret manually."),false;let r=await kl("  ? Install secret-tool? This requires sudo. (y/N) ");if(r!=="y"&&r!=="yes")return  false;try{return R.info(`Running: ${t.command}`),await Tl("Installing secret-tool...",()=>Tn(t.command)),e.isAvailable()}catch{return R.warn("Installation failed. Falling back to derived key."),false}}async getSecret(t,r){try{R.debug(`Looking up secret: service=${t}, account=${r}`);let{stdout:n}=await En("secret-tool",["lookup","service",t,"account",r]),o=n.trim();return R.debug(`secret-tool lookup result: ${o?"found":"empty"}`),o||null}catch(n){let o=n;return R.debug(`secret-tool lookup failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),null}}async setSecret(t,r,n){R.debug(`Storing secret: service=${t}, account=${r}`),R.debug(`Environment: DBUS_SESSION_BUS_ADDRESS=${process.env.DBUS_SESSION_BUS_ADDRESS??"NOT SET"}`),R.debug(`Environment: DISPLAY=${process.env.DISPLAY??"NOT SET"}, WAYLAND_DISPLAY=${process.env.WAYLAND_DISPLAY??"NOT SET"}`),R.debug(`Environment: WSL_DISTRO_NAME=${process.env.WSL_DISTRO_NAME??"NOT SET"}`),await new Promise((o,i)=>{let s=spawn("secret-tool",["store","--label",t,"service",t,"account",r]),c="";s.stderr.on("data",a=>{c+=a.toString();}),s.stdin.end(n,"utf8"),s.on("close",a=>{a===0?(R.debug("secret-tool store succeeded"),o()):(R.error(`secret-tool store failed: code=${a}, stderr=${c.trim()}`),i(new Error(`secret-tool exited with code ${a}${c?`: ${c.trim()}`:""}`)));}),s.on("error",a=>{R.error(`secret-tool store spawn error: ${a.message}`),i(a);});});}async deleteSecret(t,r){try{return R.debug(`Deleting secret: service=${t}, account=${r}`),await En("secret-tool",["clear","service",t,"account",r]),R.debug("secret-tool clear succeeded"),!0}catch(n){let o=n;return R.debug(`secret-tool clear failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),false}}getStoragePath(){return "Linux Secret Service (secret-tool)"}};var Al=promisify(execFile),pe=S("encryption:windows-keyvault"),kn=1,Ll=2;function Cn(e,t){return `${e}:${t}`}var $n=`
+using System;
+using System.Runtime.InteropServices;
+using System.Text;
+
+public class FlowCredManager {
+  [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
+  private struct CREDENTIAL {
+    public int Flags;
+    public int Type;
+    public string TargetName;
+    public string Comment;
+    public long LastWritten;
+    public int CredentialBlobSize;
+    public IntPtr CredentialBlob;
+    public int Persist;
+    public int AttributeCount;
+    public IntPtr Attributes;
+    public string TargetAlias;
+    public string UserName;
+  }
+
+  [DllImport("advapi32.dll", SetLastError = true, CharSet = CharSet.Unicode)]
+  private static extern bool CredRead(string target, int type, int flags, out IntPtr credential);
+
+  [DllImport("advapi32.dll", SetLastError = true, CharSet = CharSet.Unicode)]
+  private static extern bool CredWrite(ref CREDENTIAL credential, int flags);
+
+  [DllImport("advapi32.dll", SetLastError = true, CharSet = CharSet.Unicode)]
+  private static extern bool CredDelete(string target, int type, int flags);
+
+  [DllImport("advapi32.dll")]
+  private static extern void CredFree(IntPtr buffer);
+
+  public static string Read(string target) {
+    IntPtr credPtr;
+    if (!CredRead(target, ${kn}, 0, out credPtr)) return "";
+    try {
+      var cred = (CREDENTIAL)Marshal.PtrToStructure(credPtr, typeof(CREDENTIAL));
+      if (cred.CredentialBlobSize <= 0) return "";
+      return Marshal.PtrToStringUni(cred.CredentialBlob, cred.CredentialBlobSize / 2);
+    } finally { CredFree(credPtr); }
+  }
+
+  public static bool Write(string target, string secret, string userName) {
+    byte[] bytes = Encoding.Unicode.GetBytes(secret);
+    var cred = new CREDENTIAL();
+    cred.Type = ${kn};
+    cred.TargetName = target;
+    cred.CredentialBlobSize = bytes.Length;
+    cred.CredentialBlob = Marshal.AllocHGlobal(bytes.Length);
+    cred.Persist = ${Ll};
+    cred.UserName = userName;
+    try {
+      Marshal.Copy(bytes, 0, cred.CredentialBlob, bytes.Length);
+      return CredWrite(ref cred, 0);
+    } finally { Marshal.FreeHGlobal(cred.CredentialBlob); }
+  }
+
+  public static bool Delete(string target) {
+    return CredDelete(target, ${kn}, 0);
+  }
+}
+`;function Nt(e){return e.replace(/'/g,"''")}function fr(e){return ["-NoProfile","-NonInteractive","-Command",e]}function Rl(e){return `Add-Type -TypeDefinition @'
+${$n}
+'@
+[FlowCredManager]::Read('${Nt(e)}')`}function Ml(e,t,r){return `Add-Type -TypeDefinition @'
+${$n}
+'@
+[FlowCredManager]::Write('${Nt(e)}', '${Nt(t)}', '${Nt(r)}')`}function _l(e){return `Add-Type -TypeDefinition @'
+${$n}
+'@
+[FlowCredManager]::Delete('${Nt(e)}')`}async function gr(e){return Al("powershell.exe",e)}var wt=class{static async isAvailable(){try{let{stdout:t}=await gr(fr('Write-Output "ok"')),r=t.trim()==="ok";return pe.debug(`PowerShell availability check: ${r?"available":"unexpected output"}`),r}catch(t){let r=t instanceof Error?t.message.split(`
+`)[0]:"unknown error";return pe.debug(`PowerShell not available: ${r}`),false}}async getSecret(t,r){try{let n=Cn(t,r);pe.debug(`Looking up secret: target=${n}`);let o=Rl(n),{stdout:i}=await gr(fr(o)),s=i.trim();return pe.debug(`CredRead result: ${s?"found":"empty"}`),s||null}catch(n){let o=n instanceof Error?n.message.split(`
+`)[0]:"unknown error";return pe.error(`Failed to read secret from Windows Credential Manager [service="${t}", account="${r}"]: ${o}`),null}}async setSecret(t,r,n){try{let o=Cn(t,r);pe.debug(`Storing secret: target=${o}`);let i=Ml(o,n,r),{stdout:s}=await gr(fr(i));if(s.trim()!=="True")throw new Error("CredWrite returned False");pe.debug("CredWrite succeeded");}catch(o){let i=o instanceof Error?o.message.split(`
+`)[0]:"unknown error",s=`Failed to store secret in Windows Credential Manager [service="${t}", account="${r}"]: ${i}`;throw pe.error(s),new Error(s)}}async deleteSecret(t,r){try{let n=Cn(t,r);pe.debug(`Deleting secret: target=${n}`);let o=_l(n),{stdout:i}=await gr(fr(o)),s=i.trim()==="True";return pe.debug(`CredDelete result: ${s}`),s}catch(n){let o=n instanceof Error?n.message.split(`
+`)[0]:"unknown error";return pe.debug(`Failed to delete secret from Windows Credential Manager [service="${t}", account="${r}"]: ${o}`),false}}getStoragePath(){return "Windows Credential Manager (PowerShell)"}};var Ol=32,Dl="flow-plugins-cli-fallback",Ln="flow-plugins-cli-fallback",Nl={linux:"install secret-tool (e.g. sudo apt install libsecret-tools)",darwin:"ensure the Keychain is accessible (security binary must be available)",win32:"ensure Credential Manager is available (cmdkey must be in PATH)"};function Fl(){let e=`${he.hostname()}${he.userInfo().username}`;return yt.scryptSync(e,Dl,Ol)}function Ul(){let e=Fl(),t=new Mt(e),r=vn(t);return new An({projectName:Ln,serialize:r.serialize,deserialize:r.deserialize})}var Sr=null;function yr(){return Sr||(Sr=Ul()),Sr}var X=class{warned=false;async getSecret(t,r){return yr().get(`${t}:${r}`)??null}async setSecret(t,r,n){if(!this.warned){let o=Nl[process.platform]??"ensure the OS keyring is available";process.stderr.write(`\u26A0  Secure keyring unavailable. Credentials are stored in an encrypted file
    using a machine-derived key. For stronger security, ${o}.
-`),this.warned=true;}yr().set(`${t}:${r}`,n);}async deleteSecret(t,r){let n=yr(),o=`${t}:${r}`;return n.has(o)?(n.delete(o),true):false}getStoragePath(){return yr().path}static hasExistingData(){try{let t=new Ln({projectName:Rn});return W.existsSync(t.path)}catch{return  false}}static clearFallbackFile(){try{let t=new Ln({projectName:Rn});W.rmSync(t.path,{force:!0});}catch{}Sr=null;}};async function Mn(){if(Z.hasExistingData())return new Z;switch(process.platform){case "darwin":return await bt.isAvailable()?new bt:new Z;case "linux":return await Ke.isAvailable()?new Ke:await Ke.ensureInstalled()?new Ke:new Z;case "win32":{let{WindowsKeyVaultProvider:e}=await Promise.resolve().then(()=>(_n(),li));return await e.isAvailable()?new e:new Z}default:throw new Error(`Unsupported platform: ${process.platform}`)}}_n();$();var Bl=S("config:credentials"),Re="flow-plugins-cli",On="credentials",Dn="token-cache",Nn="user-info",br=null;async function je(){return br||(br=Mn()),br}function vr(){br=null;}async function F(){let t=await(await je()).getSecret(Re,On);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function it(e){let{clientId:t,clientSecret:r,tenant:n}=e,o=[!t?.trim()&&"clientId",!r?.trim()&&"clientSecret",!n?.trim()&&"tenant"].filter(Boolean);if(o.length>0)throw Bl.error(`missing or empty fields: ${o.join(", ")}`),new Error("Cannot save credentials: clientId, clientSecret, and tenant are required");await(await je()).setSecret(Re,On,JSON.stringify(e));}async function ci(){let e=await je();await e.deleteSecret(Re,On),await e.deleteSecret(Re,Dn),await e.deleteSecret(Re,Nn);}async function ui(){return (await je()).getStoragePath()}async function pi(e){await(await je()).setSecret(Re,Dn,JSON.stringify(e));}async function Pr(){let t=await(await je()).getSecret(Re,Dn);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function Er(e){await(await je()).setSecret(Re,Nn,JSON.stringify(e));}async function di(){let t=await(await je()).getSecret(Re,Nn);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function vt(){let e=await Pr();return e?new Date(e.expiresAt)>new Date:false}function Tr(e){let t=e.split(".");if(t.length!==3)throw new Error(`Invalid JWT: expected 3 segments, got ${t.length}`);let r=t[1].replace(/-/g,"+").replace(/_/g,"/"),n=Buffer.from(r,"base64").toString("utf8");try{return JSON.parse(n)}catch{throw new Error("Invalid JWT: payload segment is not valid JSON")}}var mi=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^100\.(6[4-9]|[7-9]\d|1[0-2][0-7])\./,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^0\.0\.0\.0$/,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i];function Jl(e){if(!e.startsWith("[")||!e.endsWith("]"))return null;let r=e.slice(1,-1).match(/^::(?:ffff:)?([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i);if(!r)return null;let n=parseInt(r[1],16),o=parseInt(r[2],16);return `${n>>8&255}.${n&255}.${o>>8&255}.${o&255}`}function Hl(e){if(mi.some(r=>r.test(e)))return  true;let t=Jl(e);return !!(t&&mi.some(r=>r.test(t)))}function Vl(e,t){let r=process.env[e]??t;if(!r)throw new Error(`Missing required environment variable: ${e}`);return r}function Pt(e,t){let r=Vl(e,t),n;try{n=new URL(r);}catch{throw new Error(`${e} must be a valid URL. Got: "${r}"`)}let o=process.env.NODE_ENV==="development";if(!o&&n.protocol!=="https:")throw new Error(`${e} must be an HTTPS URL. Got protocol: "${n.protocol}"`);if(n.username||n.password)throw new Error(`${e} must not contain embedded credentials (user:pass@host is not allowed)`);if(!o&&Hl(n.hostname))throw new Error(`${e} must not point to a private/loopback address. Got: "${n.hostname}"`);return r}$();M();var Fn=S("api:auth");function ql(e){if(!rt.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var fi={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};async function Wl(e){if(e instanceof HTTPError){let t=e.response.status;Fn.error(`HTTP error during authentication [status=${t}]`);let r="";try{let n=await e.response.text(),o=JSON.parse(n);typeof o.error=="string"&&(r=o.error);}catch{}return r&&fi[r]?new Error(fi[r]):t===StatusCodes.UNAUTHORIZED||t===StatusCodes.FORBIDDEN||t===StatusCodes.INTERNAL_SERVER_ERROR?new Error("Invalid credentials"):t>=StatusCodes.BAD_REQUEST&&t<StatusCodes.INTERNAL_SERVER_ERROR?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}return e instanceof Error?(Fn.debug(`Non-HTTP error during authentication: ${e.message}`),e):(Fn.debug("Unknown error during authentication"),new Error("Authentication failed"))}async function st(e){let t=Pt("AUTH_ENGINE_URL","https://flow.ciandt.com/auth-engine-api/v2/api-key/token");ql(e.tenant);let r;try{r=await Gl.post(t,{headers:{FlowTenant:e.tenant},json:{clientSecret:e.clientSecret}}).json();}catch(i){throw await Wl(i)}let n=r.expires_at??new Date(Date.now()+(r.expires_in??3600)*1e3).toISOString();await it(e),await pi({accessToken:r.access_token,expiresAt:n});let o=Tr(r.access_token);await Er({sub:o.sub,name:o.name,email:o.email});}$();var gi=S("lib:tokenProvider");async function Be(){if(await vt()){let n=await Pr();if(n)return n.accessToken}gi.debug("Token expired or missing, re-authenticating...");let t=await F();if(!t)throw new Error("Not authenticated. Run: flow auth login");Z.clearFallbackFile(),vr(),await st(t);let r=await Pr();if(!r)throw new Error("Authentication succeeded but token was not persisted");return gi.debug("Token refreshed successfully"),r.accessToken}M();$();var kr=S("api:metrics");function yi(){return Pt("METRICS_COLLECTOR_URL","https://flow.ciandt.com/metrics-collector-api/")+"log-event"}function Si(e,t,r){return Gl.post(e,{json:t,headers:r})}async function Yl(e){let t=await di();if(t)return t;let r=Tr(e),n={sub:r.sub,name:r.name,email:r.email};return await Er(n),n}async function b(e,t){let r=await Be(),n=await Yl(r),o=await F();if(!rt.test(o.tenant))throw new Error(`Invalid tenant value: "${o.tenant}"`);let i={action:e,booster:hn,metadata:{...t},success:true,tenant:o.tenant,timestamp:new Date().toISOString(),user:{id:n.sub,name:n.name,email:n.email}};try{await Si(yi(),i,{Authorization:`Bearer ${r}`,FlowTenant:o.tenant}),kr.debug(`Metrics event sent: ${e}`);}catch(s){throw kr.warn(`Failed to send metrics event "${e}": ${String(s)}`),s}}async function hi(e,t,r){try{let n=r&&rt.test(r)?r:"unknown",o={action:e,booster:hn,metadata:t,success:!0,tenant:n,timestamp:new Date().toISOString(),user:{id:"anonymous",name:"unknown",email:"unknown"}};await Si(yi(),o,{FlowTenant:n}),kr.debug(`Anonymous metrics event sent: ${e}`);}catch(n){kr.warn(`Failed to send anonymous metrics event "${e}": ${String(n)}`);}}var x={CLI_SESSION_STARTED:"CLI_SESSION_STARTED",CLI_AUTH_FAILED:"CLI_AUTH_FAILED",CLI_STEP_COMPLETED:"CLI_STEP_COMPLETED",CLI_KIT_DISPLAYED:"CLI_KIT_DISPLAYED",CLI_KIT_ACCEPTED:"CLI_KIT_ACCEPTED",CLI_KIT_REJECTED:"CLI_KIT_REJECTED",CLI_ONBOARDING_COMPLETED:"CLI_ONBOARDING_COMPLETED",CLI_ONBOARDING_ABANDONED:"CLI_ONBOARDING_ABANDONED",CLI_TOOL_INSTALLED:"CLI_TOOL_INSTALLED",CLI_TOOL_UNINSTALLED:"CLI_TOOL_UNINSTALLED",CLI_TOOL_UPDATED:"CLI_TOOL_UPDATED",CLI_TOOL_ENABLED:"CLI_TOOL_ENABLED",CLI_TOOL_INSTALL_FAILED:"CLI_TOOL_INSTALL_FAILED",CLI_TOOL_DISABLED:"CLI_TOOL_DISABLED",CLI_CATALOG_VIEWED:"CLI_CATALOG_VIEWED",CLI_TUI_SESSION_ENDED:"CLI_TUI_SESSION_ENDED"};var Zl={sessionStart:0,stepStart:0,currentStep:"auth",interfaceType:"cli",tuiSessionStart:0},fe={...Zl};function wi(e){let t=Date.now();fe={sessionStart:t,stepStart:t,currentStep:"auth",interfaceType:e,tuiSessionStart:0};}function at(e){fe.currentStep=e,fe.stepStart=Date.now();}function L(){return {...fe}}function Je(){return fe.sessionStart===0?0:Date.now()-fe.sessionStart}function lt(){return fe.stepStart===0?0:Date.now()-fe.stepStart}function xi(){fe.tuiSessionStart=Date.now();}function Ii(){return fe.tuiSessionStart===0?0:Date.now()-fe.tuiSessionStart}$();var Ql=3e3,ec=S("abandonment");async function Cr(e){let{currentStep:t,sessionStart:r}=L();if(r===0)return;let n={last_step:t,trigger:e,duration_ms:Je()};try{await Promise.race([b(x.CLI_ONBOARDING_ABANDONED,n),new Promise((o,i)=>setTimeout(()=>i(new Error("abandonment timeout")),Ql))]);}catch(o){ec.warn(`Abandonment event failed: ${String(o)}`);}}function bi(e,t){return Promise.race([e,new Promise(r=>setTimeout(r,t))])}$();var tc=3e3,rc=S("session-end");async function jt(e){let{activeTab:t,screen:r}=f.getState(),n=Ii(),i=[b(x.CLI_TUI_SESSION_ENDED,{duration_ms:n,active_tab:t,interface:"tui"})];r!=="main"&&i.push(Cr(e));try{await bi(Promise.all(i).then(()=>{}),tc);}catch(s){rc.warn(`Session end event failed: ${String(s)}`);}}var sc=2e3;function Pi(){let{exit:e}=useApp(),t=useRef(false),r=useRef(null),n=f(s=>s.pendingExit),o=f(s=>s.setPendingExit),i=useCallback(()=>{if(t.current){r.current&&clearTimeout(r.current),jt("double-ctrl-c").finally(()=>e());return}t.current=true,o(true),r.current=setTimeout(()=>{t.current=false,o(false);},sc);},[e,o]);return useInput((s,c)=>{c.ctrl&&s==="c"&&i();}),{pendingExit:n}}var uc=16;function Ei({label:e,value:t,onChange:r,masked:n=false,isActive:o,error:i}){let s=useRef(t);useEffect(()=>{s.current=t;},[t]),useInput((a,l)=>{if(l.backspace){let u=s.current.slice(0,-1);s.current=u,r(u);}else if(a&&!l.ctrl&&!l.meta&&!l.escape&&!l.return&&!l.tab&&!l.upArrow&&!l.downArrow&&!l.leftArrow&&!l.rightArrow){let u=s.current+a;s.current=u,r(u);}},{isActive:o});let c=n?"\u2022".repeat(t.length):t;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{children:[jsx(Text,{color:o?"cyan":"gray",children:o?"\u25B8 ":"  "}),jsx(Text,{color:o?"white":"gray",bold:o,children:e.padEnd(uc)}),jsx(Text,{color:o?"cyan":"gray",children:c}),o&&jsx(Text,{color:"cyan",children:"\u2588"})]}),i&&jsx(Box,{paddingLeft:3,children:jsxs(Text,{color:"red",children:["\u26A0 ",i]})})]})}var ge=create(e=>({credentials:null,isAuthenticated:false,justAuthenticated:false,setCredentials:t=>e({credentials:t,isAuthenticated:true}),clearCredentials:()=>e({credentials:null,isAuthenticated:false,justAuthenticated:false}),setJustAuthenticated:t=>e({justAuthenticated:t})}));M();var fc=JSON.parse(readFileSync(join(import.meta.dirname,"..","package.json"),"utf8")),He=fc.version;function p(e){return e==null?"":e.replace(/\x1b\[[0-9;:<=>?]*[ -/]*[@-~]/g,"").replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g,"").replace(/\x1b./g,"").replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g,"")}function q(e){process.stdout.write(C.green(`  \u2713 ${p(e)}
+`),this.warned=true;}yr().set(`${t}:${r}`,n);}async deleteSecret(t,r){let n=yr(),o=`${t}:${r}`;return n.has(o)?(n.delete(o),true):false}getStoragePath(){return yr().path}static hasExistingData(){try{let t=new An({projectName:Ln});return z.existsSync(t.path)}catch{return  false}}static clearFallbackFile(){try{let t=new An({projectName:Ln});z.rmSync(t.path,{force:!0});}catch{}Sr=null;}};async function Rn(){if(X.hasExistingData())return new X;switch(process.platform){case "darwin":return await ht.isAvailable()?new ht:new X;case "linux":return await De.isAvailable()?new De:await De.ensureInstalled()?new De:new X;case "win32":return await wt.isAvailable()?new wt:new X;default:throw new Error(`Unsupported platform: ${process.platform}`)}}var Bl=S("config:credentials"),$e="flow-plugins-cli",Mn="credentials",_n="token-cache",On="user-info",xr=null;async function Ne(){return xr||(xr=Rn()),xr}function Ir(){xr=null;}async function D(){let t=await(await Ne()).getSecret($e,Mn);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function tt(e){let{clientId:t,clientSecret:r,tenant:n}=e,o=[!t?.trim()&&"clientId",!r?.trim()&&"clientSecret",!n?.trim()&&"tenant"].filter(Boolean);if(o.length>0)throw Bl.error(`missing or empty fields: ${o.join(", ")}`),new Error("Cannot save credentials: clientId, clientSecret, and tenant are required");await(await Ne()).setSecret($e,Mn,JSON.stringify(e));}async function ri(){let e=await Ne();await e.deleteSecret($e,Mn),await e.deleteSecret($e,_n),await e.deleteSecret($e,On);}async function ni(){return (await Ne()).getStoragePath()}async function oi(e){await(await Ne()).setSecret($e,_n,JSON.stringify(e));}async function br(){let t=await(await Ne()).getSecret($e,_n);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function vr(e){await(await Ne()).setSecret($e,On,JSON.stringify(e));}async function ii(){let t=await(await Ne()).getSecret($e,On);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function xt(){let e=await br();return e?new Date(e.expiresAt)>new Date:false}function Pr(e){let t=e.split(".");if(t.length!==3)throw new Error(`Invalid JWT: expected 3 segments, got ${t.length}`);let r=t[1].replace(/-/g,"+").replace(/_/g,"/"),n=Buffer.from(r,"base64").toString("utf8");try{return JSON.parse(n)}catch{throw new Error("Invalid JWT: payload segment is not valid JSON")}}var si=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^100\.(6[4-9]|[7-9]\d|1[0-2][0-7])\./,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^0\.0\.0\.0$/,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i];function Kl(e){if(!e.startsWith("[")||!e.endsWith("]"))return null;let r=e.slice(1,-1).match(/^::(?:ffff:)?([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i);if(!r)return null;let n=parseInt(r[1],16),o=parseInt(r[2],16);return `${n>>8&255}.${n&255}.${o>>8&255}.${o&255}`}function jl(e){if(si.some(r=>r.test(e)))return  true;let t=Kl(e);return !!(t&&si.some(r=>r.test(t)))}function Jl(e,t){let r=process.env[e]??t;if(!r)throw new Error(`Missing required environment variable: ${e}`);return r}function It(e,t){let r=Jl(e,t),n;try{n=new URL(r);}catch{throw new Error(`${e} must be a valid URL. Got: "${r}"`)}let o=process.env.NODE_ENV==="development";if(!o&&n.protocol!=="https:")throw new Error(`${e} must be an HTTPS URL. Got protocol: "${n.protocol}"`);if(n.username||n.password)throw new Error(`${e} must not contain embedded credentials (user:pass@host is not allowed)`);if(!o&&jl(n.hostname))throw new Error(`${e} must not point to a private/loopback address. Got: "${n.hostname}"`);return r}var Dn=S("api:auth");function Vl(e){if(!Ze.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var ai={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};async function zl(e){if(e instanceof HTTPError){let t=e.response.status;Dn.error(`HTTP error during authentication [status=${t}]`);let r="";try{let n=await e.response.text(),o=JSON.parse(n);typeof o.error=="string"&&(r=o.error);}catch{}return r&&ai[r]?new Error(ai[r]):t===StatusCodes.UNAUTHORIZED||t===StatusCodes.FORBIDDEN||t===StatusCodes.INTERNAL_SERVER_ERROR?new Error("Invalid credentials"):t>=StatusCodes.BAD_REQUEST&&t<StatusCodes.INTERNAL_SERVER_ERROR?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}return e instanceof Error?(Dn.debug(`Non-HTTP error during authentication: ${e.message}`),e):(Dn.debug("Unknown error during authentication"),new Error("Authentication failed"))}async function rt(e){let t=It("AUTH_ENGINE_URL","https://flow.ciandt.com/auth-engine-api/v2/api-key/token");Vl(e.tenant);let r;try{r=await Hl.post(t,{headers:{FlowTenant:e.tenant},json:{clientSecret:e.clientSecret}}).json();}catch(i){throw await zl(i)}let n=r.expires_at??new Date(Date.now()+(r.expires_in??3600)*1e3).toISOString();await tt(e),await oi({accessToken:r.access_token,expiresAt:n});let o=Pr(r.access_token);await vr({sub:o.sub,name:o.name,email:o.email});}var li=S("lib:tokenProvider");async function Fe(){if(await xt()){let n=await br();if(n)return n.accessToken}li.debug("Token expired or missing, re-authenticating...");let t=await D();if(!t)throw new Error("Not authenticated. Run: flow auth login");X.clearFallbackFile(),Ir(),await rt(t);let r=await br();if(!r)throw new Error("Authentication succeeded but token was not persisted");return li.debug("Token refreshed successfully"),r.accessToken}var Er=S("api:metrics");function ci(){return It("METRICS_COLLECTOR_URL","https://flow.ciandt.com/metrics-collector-api/")+"log-event"}function ui(e,t,r){return Hl.post(e,{json:t,headers:r})}async function ql(e){let t=await ii();if(t)return t;let r=Pr(e),n={sub:r.sub,name:r.name,email:r.email};return await vr(n),n}async function b(e,t){let r=await Fe(),n=await ql(r),o=await D();if(!Ze.test(o.tenant))throw new Error(`Invalid tenant value: "${o.tenant}"`);let i={action:e,booster:yn,metadata:{...t},success:true,tenant:o.tenant,timestamp:new Date().toISOString(),user:{id:n.sub,name:n.name,email:n.email}};try{await ui(ci(),i,{Authorization:`Bearer ${r}`,FlowTenant:o.tenant}),Er.debug(`Metrics event sent: ${e}`);}catch(s){throw Er.warn(`Failed to send metrics event "${e}": ${String(s)}`),s}}async function pi(e,t,r){try{let n=r&&Ze.test(r)?r:"unknown",o={action:e,booster:yn,metadata:t,success:!0,tenant:n,timestamp:new Date().toISOString(),user:{id:"anonymous",name:"unknown",email:"unknown"}};await ui(ci(),o,{FlowTenant:n}),Er.debug(`Anonymous metrics event sent: ${e}`);}catch(n){Er.warn(`Failed to send anonymous metrics event "${e}": ${String(n)}`);}}var x={CLI_SESSION_STARTED:"CLI_SESSION_STARTED",CLI_AUTH_FAILED:"CLI_AUTH_FAILED",CLI_STEP_COMPLETED:"CLI_STEP_COMPLETED",CLI_KIT_DISPLAYED:"CLI_KIT_DISPLAYED",CLI_KIT_ACCEPTED:"CLI_KIT_ACCEPTED",CLI_KIT_REJECTED:"CLI_KIT_REJECTED",CLI_ONBOARDING_COMPLETED:"CLI_ONBOARDING_COMPLETED",CLI_ONBOARDING_ABANDONED:"CLI_ONBOARDING_ABANDONED",CLI_TOOL_INSTALLED:"CLI_TOOL_INSTALLED",CLI_TOOL_UNINSTALLED:"CLI_TOOL_UNINSTALLED",CLI_TOOL_UPDATED:"CLI_TOOL_UPDATED",CLI_TOOL_ENABLED:"CLI_TOOL_ENABLED",CLI_TOOL_INSTALL_FAILED:"CLI_TOOL_INSTALL_FAILED",CLI_TOOL_DISABLED:"CLI_TOOL_DISABLED",CLI_CATALOG_VIEWED:"CLI_CATALOG_VIEWED",CLI_TUI_SESSION_ENDED:"CLI_TUI_SESSION_ENDED"};var Xl={sessionStart:0,stepStart:0,currentStep:"auth",interfaceType:"cli",tuiSessionStart:0},de={...Xl};function di(e){let t=Date.now();de={sessionStart:t,stepStart:t,currentStep:"auth",interfaceType:e,tuiSessionStart:0};}function nt(e){de.currentStep=e,de.stepStart=Date.now();}function A(){return {...de}}function Ue(){return de.sessionStart===0?0:Date.now()-de.sessionStart}function ot(){return de.stepStart===0?0:Date.now()-de.stepStart}function mi(){de.tuiSessionStart=Date.now();}function fi(){return de.tuiSessionStart===0?0:Date.now()-de.tuiSessionStart}var Yl=3e3,Zl=S("abandonment");async function Tr(e){let{currentStep:t,sessionStart:r}=A();if(r===0)return;let n={last_step:t,trigger:e,duration_ms:Ue()};try{await Promise.race([b(x.CLI_ONBOARDING_ABANDONED,n),new Promise((o,i)=>setTimeout(()=>i(new Error("abandonment timeout")),Yl))]);}catch(o){Zl.warn(`Abandonment event failed: ${String(o)}`);}}function gi(e,t){return Promise.race([e,new Promise(r=>setTimeout(r,t))])}var Ql=3e3,ec=S("session-end");async function Ut(e){let{activeTab:t,screen:r}=f.getState(),n=fi(),i=[b(x.CLI_TUI_SESSION_ENDED,{duration_ms:n,active_tab:t,interface:"tui"})];r!=="main"&&i.push(Tr(e));try{await gi(Promise.all(i).then(()=>{}),Ql);}catch(s){ec.warn(`Session end event failed: ${String(s)}`);}}var oc=2e3;function Si(){let{exit:e}=useApp(),t=useRef(false),r=useRef(null),n=f(s=>s.pendingExit),o=f(s=>s.setPendingExit),i=useCallback(()=>{if(t.current){r.current&&clearTimeout(r.current),Ut("double-ctrl-c").finally(()=>e());return}t.current=true,o(true),r.current=setTimeout(()=>{t.current=false,o(false);},oc);},[e,o]);return useInput((s,c)=>{c.ctrl&&s==="c"&&i();}),{pendingExit:n}}var lc=16;function hi({label:e,value:t,onChange:r,masked:n=false,isActive:o,error:i}){let s=useRef(t);useEffect(()=>{s.current=t;},[t]),useInput((a,l)=>{if(l.backspace){let u=s.current.slice(0,-1);s.current=u,r(u);}else if(a&&!l.ctrl&&!l.meta&&!l.escape&&!l.return&&!l.tab&&!l.upArrow&&!l.downArrow&&!l.leftArrow&&!l.rightArrow){let u=s.current+a;s.current=u,r(u);}},{isActive:o});let c=n?"\u2022".repeat(t.length):t;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{children:[jsx(Text,{color:o?"cyan":"gray",children:o?"\u25B8 ":"  "}),jsx(Text,{color:o?"white":"gray",bold:o,children:e.padEnd(lc)}),jsx(Text,{color:o?"cyan":"gray",children:c}),o&&jsx(Text,{color:"cyan",children:"\u2588"})]}),i&&jsx(Box,{paddingLeft:3,children:jsxs(Text,{color:"red",children:["\u26A0 ",i]})})]})}var me=create(e=>({credentials:null,isAuthenticated:false,justAuthenticated:false,setCredentials:t=>e({credentials:t,isAuthenticated:true}),clearCredentials:()=>e({credentials:null,isAuthenticated:false,justAuthenticated:false}),setJustAuthenticated:t=>e({justAuthenticated:t})}));var dc=JSON.parse(readFileSync(join(import.meta.dirname,"..","package.json"),"utf8")),Be=dc.version;function p(e){return e==null?"":e.replace(/\x1b\[[0-9;:<=>?]*[ -/]*[@-~]/g,"").replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g,"").replace(/\x1b./g,"").replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g,"")}function V(e){process.stdout.write(C.green(`  \u2713 ${p(e)}
 `));}function k(e){process.stderr.write(C.red(`  \u2717 ${p(e)}
 `));}function I(e){process.stdout.write(C.cyan(`  \u2139 ${p(e)}
-`));}function $r(e,t){let r=t.map(c=>c.map(p)),n=[e,...r],o=e.map((c,a)=>Math.max(...n.map(l=>(l[a]??"").length))),i=o.map(c=>"\u2500".repeat(c)).join("  "),s=c=>c.map((a,l)=>a.padEnd(o[l])).join("  ");process.stdout.write(`
+`));}function kr(e,t){let r=t.map(c=>c.map(p)),n=[e,...r],o=e.map((c,a)=>Math.max(...n.map(l=>(l[a]??"").length))),i=o.map(c=>"\u2500".repeat(c)).join("  "),s=c=>c.map((a,l)=>a.padEnd(o[l])).join("  ");process.stdout.write(`
 `),process.stdout.write(`  ${C.bold(s(e))}
 `),process.stdout.write(`  ${C.dim(i)}
 `);for(let c of r)process.stdout.write(`  ${s(c)}
 `);process.stdout.write(`
-`);}function Et(e){process.stdout.write(JSON.stringify(e,null,2)+`
-`);}function Q(e){process.stdout.write(JSON.stringify(e)+`
-`);}function ae(e){process.stderr.write(JSON.stringify(e)+`
-`);}function U(e){return e instanceof Error?e.message:String(e)}function Ar(e){let t=new Date(e);return isNaN(t.getTime())?"\u2014":new Intl.DateTimeFormat("en-US",{dateStyle:"short"}).format(t)}function Sc(e){if(!(e instanceof Error))return "unknown";let t=e.message.toLowerCase();return t.includes("401")||t.includes("unauthorized")?"invalid_credentials":t.includes("403")||t.includes("forbidden")?"forbidden":t.includes("timeout")||t.includes("timed out")?"timeout":t.includes("network")||t.includes("econnrefused")||t.includes("fetch")?"network_error":"unknown"}var ve=["clientId","clientSecret","tenant"],hc={clientId:"Client ID",clientSecret:"Client Secret",tenant:"Tenant"};function Ti(){let[e,t]=useState({clientId:"",clientSecret:"",tenant:""}),[r,n]=useState("clientId"),[o,i]=useState({}),[s,c]=useState(null),[a,l]=useState(false),u=useRef(0),{setCredentials:g,setJustAuthenticated:v}=ge(),{setFocus:d}=f();useInput((h,T)=>{if(!a){if(T.shift&&T.tab){let y=ve.indexOf(r);y>0&&n(ve[y-1]);}else if(T.tab){let y=ve.indexOf(r);y<ve.length-1&&n(ve[y+1]);}else if(T.return)if(r==="tenant")E();else {let y=ve.indexOf(r);n(ve[y+1]);}}},{isActive:true});let E=async()=>{let h={};for(let T of ve)e[T].trim()||(h[T]="This field is required");if(Object.keys(h).length>0){i(h);let T=ve.find(y=>h[y]);T&&n(T);return}l(true),c(null),u.current+=1;try{await st({clientId:e.clientId.trim(),clientSecret:e.clientSecret.trim(),tenant:e.tenant.trim()});let{clientSecret:T,...y}=e;g(y),v(!0),f.getState().setScreen("bundleSetup"),d("bundleList"),b(x.CLI_SESSION_STARTED,{cli_version:He,os:process.platform,node_version:process.version,duration_ms:Je(),interface:"tui"}).catch(()=>{});}catch(T){let y=T instanceof Error?T.message:"Authentication failed";c(y),hi(x.CLI_AUTH_FAILED,{error_code:Sc(T),attempt:u.current},e.tenant.trim()).catch(()=>{});}finally{l(false),t(T=>({...T,clientSecret:""}));}},m=h=>T=>{t(y=>({...y,[h]:T})),o[h]&&i(y=>({...y,[h]:void 0}));};return jsxs(Box,{flexDirection:"column",padding:2,children:[jsx(Box,{marginBottom:1,children:jsxs(Text,{bold:true,color:"cyan",children:[jo," \u2014 Initial Setup"]})}),jsxs(Box,{marginBottom:1,flexDirection:"column",children:[jsx(Text,{dimColor:true,children:"The data collected during setup is used solely to improve"}),jsx(Text,{dimColor:true,children:"Flow's internal tools and will not be shared externally."})]}),jsx(Box,{flexDirection:"column",children:ve.map(h=>jsx(Box,{marginBottom:1,children:jsx(Ei,{label:hc[h],value:e[h],onChange:m(h),masked:h==="clientSecret",isActive:r===h&&!a,error:o[h]})},h))}),a&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"cyan",children:"Authenticating..."})}),s&&jsx(Box,{marginTop:1,children:jsxs(Text,{color:"red",children:["\u26A0 ",p(s)]})}),jsx(Box,{marginTop:1,children:jsx(Text,{dimColor:true,children:"Tab next field \xB7 Enter confirm"})})]})}function Rr(){return jsxs(Box,{flexDirection:"column",alignItems:"center",children:[jsx(xc,{text:"FLOW",font:"block",colors:["white","white"]}),jsx(Box,{marginTop:-1,marginBottom:1,children:jsxs(Text,{dimColor:true,children:["Marketplace \xB7 v",He]})})]})}var jn={discover:"Discover",installed:"Installed"},Ic=Object.keys(jn);function Ri(){let e=f(t=>t.activeTab);return jsx(Box,{paddingX:1,paddingBottom:1,children:Ic.map(t=>jsx(Box,{marginRight:1,children:t===e?jsx(Text,{bold:true,inverse:true,children:` ${jn[t]} `}):jsx(Text,{dimColor:true,children:` ${jn[t]} `})},t))})}var ee=create(e=>({query:"",cursorPosition:0,setQuery:t=>e({query:t}),setCursorPosition:t=>e({cursorPosition:t}),resetQuery:()=>e({query:"",cursorPosition:0})}));function Mi(){let e=f(s=>s.focus),t=ee(s=>s.query),r=ee(s=>s.cursorPosition),n=e==="search",o=t.slice(0,r),i=t.slice(r);return jsxs(Box,{borderStyle:"single",borderTop:false,borderBottom:true,borderLeft:false,borderRight:false,paddingX:1,marginX:1,marginBottom:1,children:[jsx(Text,{color:n?"cyan":"gray",children:"\u{1F50D} "}),n?jsxs(Fragment,{children:[jsx(Text,{color:"white",children:o}),jsx(Text,{inverse:true,children:i[0]??" "}),jsx(Text,{color:"white",children:i.slice(1)})]}):jsx(Text,{dimColor:true,children:t||"Search..."})]})}M();var Ec=["skill","mcp","plugin"].map((e,t)=>({key:String(t+2),type:e,...wt[e]})),Tc=["internal","external"].map((e,t)=>({key:String(t+6),origin:e,...Bo[e]}));function Oi(){let e=f(n=>n.catalogFilters),t=e.types.has("skill")&&e.types.has("mcp")&&e.types.has("plugin"),r=e.origins.has("internal")&&e.origins.has("external");return jsxs(Box,{paddingX:1,paddingBottom:1,gap:1,children:[jsx(Text,{bold:true,children:"Type:"}),jsxs(Box,{gap:0,children:[jsx(Text,{dimColor:true,children:"[1] "}),jsxs(Text,{color:t?"green":void 0,dimColor:!t,children:[t?"\u25C9":"\u25CB"," All"]})]}),Ec.map(n=>{let o=!t&&e.types.has(n.type);return jsxs(Box,{gap:0,children:[jsxs(Text,{dimColor:true,children:["[",n.key,"] "]}),jsxs(Text,{color:o?n.color:void 0,dimColor:!o,children:[o?"\u25C9":"\u25CB"," ",n.label]})]},n.key)}),jsx(Box,{marginLeft:2,children:jsx(Text,{bold:true,children:"|"})}),jsx(Box,{marginLeft:2,children:jsx(Text,{bold:true,children:"Origin:"})}),jsxs(Box,{gap:0,children:[jsx(Text,{dimColor:true,children:"[5] "}),jsxs(Text,{color:r?"green":void 0,dimColor:!r,children:[r?"\u25C9":"\u25CB"," All"]})]}),Tc.map(n=>{let o=!r&&e.origins.has(n.origin);return jsxs(Box,{gap:0,children:[jsxs(Text,{dimColor:true,children:["[",n.key,"] "]}),jsxs(Text,{color:o?n.color:void 0,dimColor:!o,children:[o?"\u25C9":"\u25CB"," ",n.label]})]},n.key)})]})}M();function Di({type:e}){let{label:t,color:r}=wt[e];return jsx(Text,{color:r,children:t})}M();function Ui({origin:e}){return e===Mt?jsx(Text,{color:"blue",children:"[Flow]"}):jsx(Text,{color:"white",children:"[External]"})}var Mr=$c.memo(function({item:t,isSelected:r}){let n=t.status==="disabled"?"yellow":"green";return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:r?"cyan":"gray",children:r?"\u203A ":"\u25CB "}),jsx(Text,{bold:r,color:r?"cyan":"white",children:t.name}),t.type&&jsxs(Text,{children:[" ",jsx(Di,{type:t.type})]}),t.origin&&jsxs(Text,{children:[" ",jsx(Ui,{origin:t.origin})]}),jsxs(Text,{dimColor:true,children:[t.authorName?` \xB7 ${t.authorName}`:"",t.version?` \xB7 v${t.version}`:" \xB7 n/a"]}),t.status&&jsxs(Text,{color:n,children:[" [",t.status,"]"]}),t.updateAvailable&&jsx(Text,{color:"yellow",children:" [\u2191 update available]"}),t.installedAt&&jsxs(Text,{dimColor:true,children:[" \xB7 ",Ar(t.installedAt)]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:t.description})})]})});function kt({message:e}){return jsx(Box,{paddingX:2,paddingY:1,children:jsx(Text,{dimColor:true,children:e??"No items found."})})}M();function Bi({items:e,emptyMessage:t}){let r=f(a=>a.selectedIndex);if(e.length===0)return jsx(kt,{message:t});let n=Math.max(0,r-Math.floor(Fe/2)),o=Math.min(e.length,n+Fe);o===e.length&&(n=Math.max(0,o-Fe));let i=e.slice(n,o),s=n,c=e.length-o;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:s>0?`\u2191 ${s} more above`:" "})}),i.map((a,l)=>jsx(Mr,{item:a,isSelected:n+l===r},a.name)),jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:c>0?`\u2193 ${c} more below`:" "})})]})}function Vi({label:e,pathHint:t}){return jsxs(Box,{paddingBottom:1,children:[jsx(Text,{bold:true,color:"blueBright",children:e}),jsxs(Text,{dimColor:true,children:[" ",t]})]})}M();function zi({groups:e,emptyMessage:t}){let r=f(d=>d.selectedIndex),n=[],o=0;for(let d of e){n.push({kind:"header",label:d.label,pathHint:d.pathHint,key:`h-${d.scope}`});for(let E of d.items)n.push({kind:"item",item:E,itemIndex:o,key:`i-${d.scope}-${E.name}`}),o++;}if(o===0)return jsx(kt,{message:t});let s=n.findIndex(d=>d.kind==="item"&&d.itemIndex===r),c=s>=0?s:0,a=Math.max(0,c-Math.floor(Fe/2)),l=Math.min(n.length,a+Fe);l===n.length&&(a=Math.max(0,l-Fe));let u=n.slice(a,l),g=a,v=n.length-l;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:g>0?`\u2191 ${g} more above`:" "})}),u.map(d=>d.kind==="header"?jsx(Vi,{label:d.label,pathHint:d.pathHint},d.key):jsx(Mr,{item:d.item,isSelected:d.itemIndex===r},d.key)),jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:v>0?`\u2193 ${v} more below`:" "})})]})}var Dc={discover:"Discover",installed:"Installed"};function Wi({items:e,tabId:t,emptyMessage:r,groups:n}){return jsxs(Box,{flexDirection:"column",children:[jsx(Mi,{}),jsx(Oi,{}),jsxs(Box,{paddingX:1,marginTop:1,children:[jsx(Text,{bold:true,children:Dc[t]}),jsxs(Text,{dimColor:true,children:[" (",e.length,")"]})]}),n&&n.length>0?jsx(zi,{groups:n,emptyMessage:r}):jsx(Bi,{items:e,emptyMessage:r})]})}function Xi({filteredItems:e,emptyMessage:t,groups:r}){let n=f(o=>o.activeTab);return jsx(Box,{flexDirection:"column",flexGrow:1,children:n==="discover"?jsx(Wi,{items:e,tabId:"discover",emptyMessage:t},"discover"):jsx(Wi,{items:e,tabId:"installed",emptyMessage:t,groups:r},"installed")})}var Uc={tabs:"\u2190\u2192: switch tab | \u2193: navigate | Enter: select | Ctrl+C Ctrl+C: quit",list:"\u2191\u2193: navigate | Enter: select | Type: 1=All 2=Skill 3=MCP 4=Plugin | Origin: 5=All 6=Flow 7=External | \u2190\u2192/Tab: tabs | Ctrl+C\xD72: quit",search:"Type to filter | \u2193/Esc: exit search | Enter: confirm",actionMenu:"\u2191\u2193: navigate options | Enter: confirm | Esc: close menu",auth:"Tab: next field | Enter: confirm | Ctrl+C Ctrl+C: quit",bundleList:"\u2191\u2193: navigate | Enter: select Starter Kit | Esc: skip",bundleDetail:"\u2191\u2193: navigate | Enter: confirm & install | Esc: back",installProgress:"\u2191\u2193: navigate | Enter: select"};function Or(){let e=f(t=>t.focus);return jsx(Box,{borderStyle:"single",borderTop:true,borderBottom:false,borderLeft:false,borderRight:false,children:jsx(Text,{dimColor:true,children:Uc[e]})})}function Zi({message:e,type:t}){return e?jsx(Box,{paddingX:1,children:jsxs(Text,{color:t==="success"?"green":t==="info"?"cyan":"red",children:[t==="success"?"\u2713":t==="info"?"(i)":"\u2717"," ",p(e)]})}):null}function Dr({message:e}){return jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(Vc,{type:"dots"})}),jsxs(Text,{children:[" ",e]})]})}function Nr({message:e,onRetry:t,onBack:r}){return useInput((n,o)=>{n==="r"&&o.ctrl&&t?t():o.escape&&r&&r();}),jsxs(Box,{flexDirection:"column",paddingX:2,paddingY:1,children:[jsxs(Text,{color:"red",children:["\u2717 ",e]}),t&&jsx(Text,{dimColor:true,children:"Press Ctrl+R to retry"}),r&&jsx(Text,{dimColor:true,children:"Press Escape to go back"})]})}function ft({itemName:e,actions:t,descriptions:r,onAction:n,onClose:o}){let i=f(a=>a.focus),[s,c]=useState(0);return useInput((a,l)=>{l.upArrow?c(u=>u>0?u-1:u):l.downArrow?c(u=>u<t.length-1?u+1:u):l.return?n(t[s]):l.escape&&o();},{isActive:i==="actionMenu"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsx(Box,{flexDirection:"column",marginTop:1,children:t.map((a,l)=>jsxs(Box,{children:[jsxs(Text,{bold:l===s,color:l===s?"cyan":void 0,children:[l===s?"\u203A ":"  ",a]}),r?.[a]&&jsxs(Text,{dimColor:true,children:[" \u2014 ",r[a]]})]},l))})]})}M();var Xn=Object.entries(Ot),is=[...Xn.map(([,e])=>e.actionLabel),"Cancel"],ss=Object.fromEntries(Xn.map(([,e])=>[e.actionLabel,e.description]));function as(e){let t=Xn.find(([,r])=>r.actionLabel===e);return t?t[0]:null}function cs({itemName:e,onInstall:t,onClose:r}){let[n,o]=useState(false),i=useCallback(l=>{let u=as(l);u?t(u):o(false);},[t]),s=useCallback(()=>{o(false);},[]),c=useCallback(l=>{l==="Install"?o(true):r();},[r]);return n?jsx(ft,{itemName:`${e} \u2014 Choose scope`,actions:is,descriptions:ss,onAction:i,onClose:s}):jsx(ft,{itemName:e,actions:["Install","Cancel"],onAction:c,onClose:r})}function Ur({activeFocus:e,onConfirm:t}){let[r,n]=useState("idle"),o=f(i=>i.focus);return useInput((i,s)=>{s.escape||i==="n"?n("idle"):i==="y"&&t();},{isActive:r==="confirming"&&o===e}),{isConfirming:r==="confirming",requestConfirm:()=>n("confirming"),cancelConfirm:()=>n("idle")}}function ds({itemName:e,itemScope:t,itemStatus:r,updateAvailable:n,catalogVersion:o,onUninstall:i,onToggleStatus:s,onUpdate:c,onClose:a}){let{isConfirming:l,requestConfirm:u}=Ur({activeFocus:"actionMenu",onConfirm:()=>i(t)});if(l)return jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Uninstall "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]});let g=r==="enabled"?"Disable":"Enable",v=o&&p(o),d=v?`Update to v${v}`:"Update";return jsx(ft,{itemName:e,actions:n?["Uninstall",g,d,"Cancel"]:["Uninstall",g,"Cancel"],onAction:h=>{h==="Uninstall"?u():h===g?s(t):h.startsWith("Update")?c?.():a();},onClose:a})}function gs({itemName:e,itemScope:t,onUninstall:r,onClose:n}){let{isConfirming:o,requestConfirm:i}=Ur({activeFocus:"actionMenu",onConfirm:()=>r(t)});return o?jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Remove MCP "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]}):jsx(ft,{itemName:e,actions:["Uninstall","Cancel"],onAction:a=>{a==="Uninstall"?i():n();},onClose:n})}Ue();async function ys(e,t){let r=j.resolve(t);await Pe.mkdir(r,{recursive:true});let n=j.join(j.dirname(r),`${randomUUID()}.zip`);try{await Pe.writeFile(n,e),await eu(n,{dir:r,onEntry(o){if((o.externalFileAttributes>>16&61440)===40960)throw new Error(`Zip Slip (symlink): entry "${o.fileName}" is a symbolic link and was rejected`);let s=j.resolve(r,o.fileName);if(!s.startsWith(r+j.sep)&&s!==r)throw new Error(`Zip Slip detected: entry "${o.fileName}" would escape target directory`)}});try{let o=realpathSync(r);if(!o.startsWith(j.resolve(j.dirname(r))))throw new Error(`Zip Slip (post-extract): resolved path "${o}" is outside expected parent`)}catch(o){if(o.code!=="ENOENT")throw o}}finally{try{await Pe.unlink(n);}catch{}}}async function Zn(e){await Pe.rm(e,{recursive:true,force:true});}async function ze(){let e=Xo();await Pe.mkdir(j.dirname(e),{recursive:true});try{await Pe.writeFile(e,"",{flag:"wx"});}catch(r){if(r.code!=="EEXIST")throw r}return await tu.lock(e,{stale:1e4,retries:{retries:2,minTimeout:500,maxTimeout:500}})}Ue();M();var nu={user:"global",project:"project",local:"local"};function Br(e){return e?nu[e]:"global"}var Ee=class extends Error{constructor(r,n){super(`${r} v${n} is already installed. Use --force to reinstall.`);this.pluginName=r;this.version=n;this.name="AlreadyInstalledError";}pluginName;version},qe=class extends Error{constructor(r,n){super(`${r} is already up to date (v${n})`);this.pluginName=r;this.version=n;this.name="AlreadyUpToDateError";}pluginName;version};M();function Xt(){return Gl.create({prefix:Pt("PROMPT_MANAGER_URL","https://flow.ciandt.com/prompt-manager-api/"),hooks:{beforeRequest:[async({request:e})=>{let t=await Be();e.headers.set("Authorization",`Bearer ${t}`);let r=await F();r?.tenant&&rt.test(r.tenant)&&e.headers.set("FlowTenant",r.tenant);}]}})}var iu=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function Ss(e){if(!e||!iu.test(e))throw new Error(`Invalid plugin name: "${e}". Must be 1-64 chars, lowercase alphanumeric and hyphens only.`)}async function Te(){try{let{plugins:e}=await Xt().get("v1/plugins/catalog").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching plugin catalog"):new Error(`Failed to fetch plugin catalog: ${e.message}`):e}}async function $t(e){Ss(e);try{return await Xt().get(`v1/plugins/${e}/manifest`).json()}catch(t){throw t instanceof Error?t.message.includes("404")?new Error(`Plugin '${e}' not found in catalog`):t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to fetch plugin manifest: ${t.message}`):t}}async function hs(e){Ss(e);try{let t=await Xt().get(`v1/plugins/${e}/archive`);return Buffer.from(await t.arrayBuffer())}catch(t){throw t instanceof Error?t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to download plugin: ${t.message}`):t}}async function Jr(){try{let{profiles:e}=await Xt().get("v1/plugins/profiles").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching starter kits"):new Error(`Failed to fetch starter kits: ${e.message}`):e}}Ue();M();$();var su=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/,au=/^[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9]+(\.[a-zA-Z0-9]+)*)?$/;function Hr(e){if(!su.test(e))throw new Error(`Invalid plugin name from manifest: "${e}". Plugin names must be lowercase alphanumeric and hyphens (1-64 chars).`)}function lu(e){if(!au.test(e))throw new Error(`Invalid plugin version from manifest: "${e}". Versions must follow semver format (e.g. 1.0.0 or 1.0.0-beta.1).`)}var We=S("installer");function cu(e,t){let r=`${e}@${N}`,o=Me().plugins[r];if(o&&!t)throw new Ee(e,o[0].version??"unknown");return {pluginKey:r,alreadyInstalled:o}}async function uu(e,t,r){r&&await Zn(t);try{We.debug(`[${t}] Extracting archive...`),await ys(e,t);}catch(n){throw await Zn(t),n}}function pu(e,t,r,n,o){let i=Me(),s={scope:n,installPath:t,version:r,installedAt:new Date().toISOString(),origin:o},c=i.plugins[e]??[];i.plugins[e]=[...c.filter(a=>a.scope!==n),s],gt(i),Qn(e,true,n);}async function du(e,t,r,n,o){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"plugin",source:o,scope:n,version:t,duration_ms:r,interface:L().interfaceType});}catch(i){We.warn(`Failed to send install metrics: ${String(i)}`);}}async function mu(e,t,r){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"plugin",source:r,error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:L().interfaceType});}catch(n){We.warn(`Failed to send install-failed metrics: ${String(n)}`);}}async function ke(e,t={}){let r=Date.now(),n=null;try{We.debug(`[${e}] Acquiring lock...`),n=await ze();let{pluginKey:o,alreadyInstalled:i}=cu(e,t.force);We.debug(`[${e}] Fetching manifest...`);let s=await $t(e);Hr(s.name),lu(s.version),We.debug(`[${e}] Downloading archive...`);let c=await hs(e),a=t.scope??"user",l=zo(s.name,s.version);await uu(c,l,!!i&&!!t.force),pu(o,l,s.version,a,"internal"),ws(s,l);let u=Date.now()-r;We.debug(`[${e}] Installed successfully in ${u}ms`);let g={name:s.name,version:s.version,path:l,duration_ms:u};return t.skipMetrics||await du(s.name,s.version,u,Br(a),"internal"),g}catch(o){throw await mu(e,o,"internal"),We.error(`[${e}] Installation failed: ${o instanceof Error?o.message:String(o)}`),o}finally{n&&await n();}}function fu(){return {$schema:"https://anthropic.com/claude-code/marketplace.schema.json",name:N,description:"Flow Skills marketplace",owner:{name:"Flow Team",email:"flow@ciandt.com"},plugins:[]}}function bs(){let e=dr();if(!W__default.existsSync(e))return null;try{return JSON.parse(W__default.readFileSync(e,"utf-8"))}catch{return null}}function gu(){let e=bs();if(e)return e;let t=fu(),r=dr();return W__default.mkdirSync(j__default.dirname(r),{recursive:true}),eo(t),t}function eo(e){let t=dr(),r=`${t}.${randomUUID()}.tmp`;W__default.writeFileSync(r,JSON.stringify(e,null,2),"utf-8"),W__default.renameSync(r,t);}function yu(){let e=qo(),t={};try{W__default.existsSync(e)&&(t=JSON.parse(W__default.readFileSync(e,"utf-8")));}catch{t={};}if(t[N])return;t[N]={source:{source:"github",repo:"CI-T-HyperX/flow-skills"},installLocation:Wo(),lastUpdated:new Date().toISOString()};let r=`${e}.${randomUUID()}.tmp`;W__default.writeFileSync(r,JSON.stringify(t,null,2),"utf-8"),W__default.renameSync(r,e);}function ws(e,t){Hr(e.name),yu();let r=bn(e.name);W__default.mkdirSync(j__default.dirname(r),{recursive:true});try{W__default.lstatSync(r),W__default.rmSync(r,{recursive:!0,force:!0});}catch{}W__default.symlinkSync(t,r);let n=gu();n.plugins.some(i=>i.name===e.name)||(n.plugins.push({name:e.name,description:e.description,version:e.version,author:e.author,source:`./plugins/native/${e.name}`,category:e.category}),eo(n));}function to(e){Hr(e);let t=bn(e);try{W__default.rmSync(t,{recursive:!0,force:!0});}catch{}let r=bs();if(!r)return;let n=r.plugins.length;r.plugins=r.plugins.filter(o=>o.name!==e),r.plugins.length!==n&&eo(r);}$();var hu=S("mcpConfigReader"),wu=500,xu=512;function Iu(){return j__default.join(Ie__default.homedir(),".claude.json")}function bu(){return j__default.join(process.cwd(),".mcp.json")}function Ps(e){if(!W__default.existsSync(e))return null;try{return JSON.parse(W__default.readFileSync(e,"utf-8"))}catch{return hu.debug(`[mcpConfigReader] Failed to parse ${e}`),null}}function Yt(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function ro(e){if(!Yt(e))return {};let t=e.mcpServers;return Yt(t)?t:{}}function no(e,t){return Object.keys(e).slice(0,wu).map(n=>({name:p(n.slice(0,xu)),marketplace:"",version:void 0,installedAt:"",installPath:"",scope:t,description:void 0,author:void 0,status:"enabled",type:"mcp"}))}function Ts(){let e=[],t=Iu(),r=Ps(t);if(Yt(r)){let c=r,a=ro(c);e.push(...no(a,"user"));let l=process.cwd();if(Yt(c.projects)){let u=c.projects[l];if(Yt(u)){let g=ro(u);e.push(...no(g,"local"));}}}let n=bu(),o=Ps(n),i=ro(o);e.push(...no(i,"project"));let s=new Map;for(let c of e){let a=`${c.name}@${c.scope}`;s.has(a)||s.set(a,c);}return [...s.values()]}$();var ce=S("storage");async function Pu(e,t){try{await b(x.CLI_TOOL_UNINSTALLED,{tool_id:e,tool_type:"plugin",source:t,interface:L().interfaceType});}catch(r){ce.warn(`Failed to send uninstall metrics: ${String(r)}`);}}function Eu(e,t,r){let n=t==="enabled"?x.CLI_TOOL_ENABLED:x.CLI_TOOL_DISABLED;b(n,{tool_id:e,source:r,interface:L().interfaceType}).catch(o=>ce.warn(`Failed to send ${t} metrics: ${String(o)}`));}function Cs(){return j__default.join(Ie__default.homedir(),".claude","plugins","installed_plugins.json")}function Tu(){return j__default.join(Ie__default.homedir(),".claude","plugins")}function ks(e){let t=j__default.resolve(e),r=j__default.resolve(Tu()),n=j__default.resolve(j__default.join(process.cwd(),".claude","plugins")),o=t.startsWith(r+j__default.sep)||t===r,i=t.startsWith(n+j__default.sep)||t===n;if(!o&&!i)throw new Error(`Security error: installPath '${e}' is outside the plugins directory`)}function $s(e="user"){return e==="local"?j__default.join(process.cwd(),".claude","settings.local.json"):e==="project"?j__default.join(process.cwd(),".claude","settings.json"):j__default.join(Ie__default.homedir(),".claude","settings.json")}function Me(){let e=Cs();if(!W__default.existsSync(e))return {version:2,plugins:{}};try{return JSON.parse(W__default.readFileSync(e,"utf-8"))}catch{return {version:2,plugins:{}}}}function ku(e){let t=e?.code;return t==="EACCES"||t==="EPERM"}function As(e,t){try{W__default.mkdirSync(j__default.dirname(e),{recursive:!0});let r=`${e}.${randomUUID()}.tmp`;W__default.writeFileSync(r,JSON.stringify(t,null,2),"utf-8"),W__default.renameSync(r,e);}catch(r){throw ku(r)?new Error(`Permission denied: cannot write to '${e}'. Check your file system permissions.`):r}}function gt(e){As(Cs(),e);}function Zt(e){let t=e.lastIndexOf("@");return t===-1?{name:e,marketplace:""}:{name:e.slice(0,t),marketplace:e.slice(t+1)}}function Cu(e,t){let r=j__default.join(e,".claude-plugin"),n=j__default.join(r,"plugin.json");if(W__default.existsSync(n))try{return JSON.parse(W__default.readFileSync(n,"utf-8"))}catch{return null}let o=j__default.join(r,"marketplace.json");if(W__default.existsSync(o))try{let i=JSON.parse(W__default.readFileSync(o,"utf-8"));return {description:i.plugins?.find(c=>c.name===t)?.description,author:i.owner}}catch{return null}return null}function ao(e="user"){let t=$s(e);if(!W__default.existsSync(t))return {};try{return JSON.parse(W__default.readFileSync(t,"utf-8"))}catch{return {}}}function Ls(e,t="user"){As($s(t),e);}function $u(e,t){let{name:r,marketplace:n}=Zt(e),o;if(n?(o=`${r}@${n}`,t[o]||(o=void 0)):o=Object.keys(t).filter(s=>Zt(s).name===r)[0],!o)throw ce.error(`[${r}] Plugin is not installed`),new Error(`Plugin '${r}' is not installed`);return {key:o,name:r}}function Au(e,t){let{name:r,marketplace:n}=Zt(e),o;return n?(o=`${r}@${n}`,t[o]||(o=void 0)):o=Object.keys(t).filter(s=>Zt(s).name===r)[0],o?{key:o,name:r}:null}function oo(e="user"){return ao(e).enabledPlugins??{}}function io(e,t="user"){let r=ao(t),n=r.enabledPlugins;if(!n||!(e in n))return;let{[e]:o,...i}=n;r.enabledPlugins=i,Ls(r,t);}function Qn(e,t,r="user"){let n=ao(r),o=n.enabledPlugins??{};n.enabledPlugins={...o,[e]:t},Ls(n,r);}function Lu(e){let t=new Map;for(let r of e){let n=t.get(r.scope);(!n||r.installedAt>n.installedAt)&&t.set(r.scope,r);}return [...t.values()]}function Ce(){let e=Me(),t=oo(),r=oo("project"),n=oo("local"),o={project:r,local:n},i=Object.entries(e.plugins).flatMap(([l,u])=>{let{name:g,marketplace:v}=Zt(l),d=u.map(m=>m.scope==="managed"?{...m,scope:"user"}:m);return Lu(d).map(m=>{let h=Cu(m.installPath,g),y=(o[m.scope]??t)[l];return {name:g,marketplace:v,version:m.version&&m.version!=="unknown"?m.version:void 0,installedAt:m.installedAt,installPath:m.installPath,scope:m.scope,description:h?.description,author:h?.author,status:y===false?"disabled":"enabled"}})}),s=Ts(),c=new Set(i.map(l=>`${l.name}@${l.scope}`)),a=s.filter(l=>!c.has(`${l.name}@${l.scope}`));return [...i,...a]}async function Vr(e,t){ce.debug(`[${e}] Acquiring lock to uninstall`);let r=await ze();try{let n=Me(),o=Au(e,n.plugins);if(!o)throw new Error(`Plugin '${e}' is not in installed_plugins.json. If this is an MCP server from config, use the MCP remove command instead.`);let{key:i,name:s}=o,c=n.plugins[i];if(t){let a=c.find(g=>g.scope===t);if(!a)throw new Error(`Plugin '${s}' is not installed in ${t} scope`);ce.debug(`[${s}] Resolved key: ${i}, scope: ${t}`),ks(a.installPath);let l=j__default.dirname(a.installPath);ce.debug(`[${s}] Removing directory: ${l}`),W__default.rmSync(l,{recursive:!0,force:!0});let u=c.filter(g=>g.scope!==t);if(u.length===0){let{[i]:g,...v}=n.plugins;gt({...n,plugins:v}),io(i,t),to(s);}else n.plugins[i]=u,gt(n),io(i,t);}else {ce.debug(`[${s}] Resolved key: ${i}`);for(let u of c){ks(u.installPath);let g=j__default.dirname(u.installPath);ce.debug(`[${s}] Removing directory: ${g}`),W__default.rmSync(g,{recursive:!0,force:!0}),io(i,u.scope);}to(s);let{[i]:a,...l}=n.plugins;gt({...n,plugins:l});}await Pu(s,c[0].origin??"internal"),ce.debug(`[${s}] Uninstalled successfully`);}finally{await r();}}async function Qt(e,t,r){ce.debug(`[${e}] Acquiring lock to set status \u2192 ${t}`);let n=await ze();try{let o=Me(),{key:i,name:s}=$u(e,o.plugins),c=o.plugins[i],a=r??c[0].scope,l=c[0].origin??"internal";ce.debug(`[${s}] Resolved key: ${i}, scope: ${a}`),Qn(i,t==="enabled",a),Eu(s,t,l),ce.debug(`[${s}] Status updated to ${t}`);}finally{await n();}}var J=create(e=>({installedItems:[],setInstalledItems:t=>e({installedItems:t}),loadFromDisk:()=>e({installedItems:Ce()})}));var K=["discover","installed"];function Rs(e,t,r){if(t.rightArrow||t.tab){let n=K.indexOf(r.activeTab);return [{type:"setTab",tab:K[(n+1)%K.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}if(t.leftArrow){let n=K.indexOf(r.activeTab);return [{type:"setTab",tab:K[(n-1+K.length)%K.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}return t.downArrow?[{type:"setFocus",focus:"list"}]:[]}function _s(e,t,r,n){if(t.upArrow)return r.selectedIndex===0?[{type:"setSelectedIndex",index:-1},{type:"setFocus",focus:"search"}]:[{type:"setSelectedIndex",index:r.selectedIndex-1}];if(t.downArrow&&r.selectedIndex<n-1)return [{type:"setSelectedIndex",index:r.selectedIndex+1}];if(t.leftArrow){let o=K.indexOf(r.activeTab);return [{type:"setTab",tab:K[(o-1+K.length)%K.length]},{type:"setSelectedIndex",index:0}]}if(t.rightArrow){let o=K.indexOf(r.activeTab);return [{type:"setTab",tab:K[(o+1)%K.length]},{type:"setSelectedIndex",index:0}]}if(t.tab){let o=K.indexOf(r.activeTab);return [{type:"setTab",tab:K[(o+1)%K.length]},{type:"setSelectedIndex",index:0}]}return t.return?[{type:"setActionMenuOpen",open:true},{type:"setFocus",focus:"actionMenu"}]:e==="/"?[{type:"setFocus",focus:"search"}]:e==="1"?[{type:"selectAllTypes"}]:e==="2"?[{type:"toggleTypeFilter",catalogType:"skill"}]:e==="3"?[{type:"toggleTypeFilter",catalogType:"mcp"}]:e==="4"?[{type:"toggleTypeFilter",catalogType:"plugin"}]:e==="5"?[{type:"selectAllOrigins"}]:e==="6"?[{type:"toggleOriginFilter",origin:"internal"}]:e==="7"?[{type:"toggleOriginFilter",origin:"external"}]:e&&e!==" "&&!t.ctrl&&!t.meta&&!t.escape?[{type:"setSelectedIndex",index:-1},{type:"setFocus",focus:"search"},{type:"searchAppend",char:e}]:[]}function Ms(e,t){return t.escape?[{type:"setActionMenuOpen",open:false},{type:"setFocus",focus:"list"}]:[]}function Os(e,t,r){return t.escape?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:"reset"}:t.downArrow?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:null}:t.leftArrow?{actions:[],queryUpdate:{cursorMove:-1}}:t.rightArrow?{actions:[],queryUpdate:{cursorMove:1}}:t.return?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:null}:t.backspace?r.length===0?{actions:[{type:"setFocus",focus:"list"},{type:"setSelectedIndex",index:0}],queryUpdate:null}:{actions:[],queryUpdate:{backspace:true}}:e&&!t.ctrl&&!t.meta?{actions:[],queryUpdate:{append:e}}:{actions:[],queryUpdate:null}}function zr(e){let{setActiveTab:t,setFocus:r,setSelectedIndex:n,setActionMenuOpen:o}=f.getState();for(let i of e)if(i.type==="setTab")t(i.tab);else if(i.type==="setFocus")r(i.focus);else if(i.type==="setSelectedIndex")n(i.index);else if(i.type==="setActionMenuOpen")o(i.open);else if(i.type==="searchAppend"){let{setQuery:s,query:c,setCursorPosition:a,cursorPosition:l}=ee.getState();s(c.slice(0,l)+i.char+c.slice(l)),a(l+i.char.length);}else i.type==="toggleTypeFilter"?f.getState().toggleTypeFilter(i.catalogType):i.type==="selectAllTypes"?f.getState().selectAllTypes():i.type==="toggleOriginFilter"?f.getState().toggleOriginFilter(i.origin):i.type==="selectAllOrigins"&&f.getState().selectAllOrigins();}function Ds({listLength:e}){let t=f(m=>m.focus),r=f(m=>m.selectedIndex),n=f(m=>m.actionMenuOpen),o=f(m=>m.setFocus),i=f(m=>m.setActionMenuOpen),s=ee(m=>m.query),c=ee(m=>m.setQuery),a=ee(m=>m.resetQuery),l=useRef(e);useEffect(()=>{l.current=e;},[e]),useEffect(()=>{if(t==="search"){let{query:m,setCursorPosition:h}=ee.getState();h(m.length);}},[t]);let[u,g]=useState("");useEffect(()=>{let m=setTimeout(()=>g(s),300);return ()=>clearTimeout(m)},[s]),useInput((m,h)=>{let{activeTab:T,selectedIndex:y,actionMenuOpen:R}=f.getState();zr(Rs(m,h,{activeTab:T}));},{isActive:t==="tabs"}),useInput((m,h)=>{let{activeTab:T,selectedIndex:y,actionMenuOpen:R}=f.getState();zr(_s(m,h,{activeTab:T,selectedIndex:y},l.current));},{isActive:t==="list"}),useInput((m,h)=>{zr(Ms(m,h));},{isActive:t==="actionMenu"}),useInput((m,h)=>{let T=Os(m,h,ee.getState().query),y=T.queryUpdate;if(zr(T.actions),y==="reset")a(),g("");else if(y!==null){let{query:R,cursorPosition:A,setCursorPosition:G}=ee.getState();if("backspace"in y)A>0&&(c(R.slice(0,A-1)+R.slice(A)),G(A-1));else if("append"in y)c(R.slice(0,A)+y.append+R.slice(A)),G(A+y.append.length);else if("cursorMove"in y){let Y=A+y.cursorMove;Y>=0&&Y<=R.length&&G(Y);}}},{isActive:t==="search"});let v=useCallback(()=>{i(false),o("list");},[i,o]),d=useCallback(m=>{let{setSelectedIndex:h,selectedIndex:T}=f.getState();m===0?h(0):T>=m&&h(m-1);},[]),E=useCallback(m=>{if(!u)return l.current=m.length,m;let h=u.toLowerCase(),T=m.filter(y=>y.name.toLowerCase().includes(h)||y.description?.toLowerCase().includes(h));return l.current=T.length,T},[u]);return {actionMenuOpen:n,closeMenu:v,selectedIndex:r,clampIndex:d,filteredItems:E}}function Fs(){let e=f(c=>c.notification),t=f(c=>c.showNotification),r=f(c=>c.clearNotification),n=ge(c=>c.justAuthenticated),o=ge(c=>c.credentials),i=ge(c=>c.setJustAuthenticated);return useEffect(()=>{n&&o&&(t(`Authenticated. Tenant: ${o.tenant}`,"success"),i(false));},[n,o]),useEffect(()=>{if(!e)return;let c=setTimeout(r,3e3);return ()=>clearTimeout(c)},[e]),{notify:(c,a)=>{t(c,a);}}}function Oe(e,t,r=false){return r?true:!uo.valid(e)||!uo.valid(t)?false:uo.gt(t,e)}M();$();var De=S("updater");async function Ou(e,t,r,n,o){try{await b(x.CLI_TOOL_UPDATED,{tool_id:e,tool_type:"plugin",source:o,from_version:t,to_version:r,duration_ms:n,interface:L().interfaceType});}catch(i){De.warn(`Failed to send update metrics: ${String(i)}`);}}function Du(e){let t=Me(),r=`${e}@${N}`,n=t.plugins[r];return !n||n.length===0?null:{pluginKey:r,entry:n[0]}}async function qr(e,t={}){let r=Date.now(),n=null;try{De.debug(`[${e}] Acquiring lock...`),n=await ze();let o=Du(e);if(!o)throw De.error(`[${e}] Plugin is not installed`),new Error(`Plugin "${e}" is not installed`);let{entry:i}=o,s=i.version,c=i.installPath;De.debug(`[${e}] Fetching manifest...`);let l=(await $t(e)).version;if(!s||!Oe(s,l,t.force))throw De.debug(`[${e}] Already up to date (v${s??"n/a"})`),new qe(e,s??"unknown");De.info(`[${e}] Updating v${s} \u2192 v${l}...`),await n(),n=null;try{let u=await ke(e,{force:!0,skipMetrics:!0}),g=Date.now()-r;return await Ou(u.name,s,u.version,g,i.origin??"internal"),De.debug(`[${e}] Updated successfully in ${g}ms`),{name:u.name,previousVersion:s,newVersion:u.version,path:u.path,duration_ms:g}}catch(u){De.warn(`[${e}] Install failed, rolling back to v${s}...`),n=await ze();let g=Me(),v=`${e}@${N}`;throw g.plugins[v]&&(g.plugins[v][0].version=s,g.plugins[v][0].installPath=c,gt(g),De.info(`[${e}] Rollback completed, restored to v${s}`)),u}}finally{n&&await n();}}$();$();var Nu=S("commands:helpers");async function re(){let e=await F();if(!e)return k("Not authenticated. Run: flow auth login"),false;try{await Be();}catch(t){return Nu.debug(`Token validation failed: ${String(t)}`),k("Session expired. Run: flow auth login"),false}return !e.starterKit||e.starterKit.trim()===""?(k("Starter kit not set. Run: flow auth login"),false):true}async function Xe(e){let t=po.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(p(e),n=>{t.close(),r(["y","yes"].includes(n.toLowerCase().trim()));});})}async function Us(e){let t=po.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(p(e),n=>{t.close(),r(n.trim());});})}var Fu=/^[^@]+@[^@]+$/;function er(e){return Fu.test(e)}function At(e){let t=e.indexOf("@");return t>0?e.slice(0,t):e}var Uu=/^[a-zA-Z0-9][a-zA-Z0-9._/-]*$/;function Ks(e){if(!Uu.test(e))throw new Error(`Invalid plugin name: "${e}". Plugin names must start with an alphanumeric character and contain only letters, digits, dots, hyphens, underscores, and slashes.`)}var Ku=/^[\w./:@?&=+#%-]+$/;function Wr(e){let t=e.trim();if(!t)throw new Error("No marketplace source provided.");if(!Ku.test(t))throw new Error(`Invalid marketplace source: "${t}". Must be owner/repo or a URL (no spaces or special characters).`);return t}var tr=S("claudeProxy"),go="claude ",js="flow ",mo=class extends Error{constructor(t){super(`Invalid install command: "${t}". Command must start with "claude " for security.`),this.name="InvalidInstallCommandError";}},fo=class extends Error{constructor(t){super(`Disallowed subcommand: "${t}". Only "plugin install", "plugin marketplace add", "mcp add", and "mcp remove" are permitted.`),this.name="DisallowedSubcommandError";}},ju=/^plugins?\s+(install|i)\s+|^plugins?\s+marketplace\s+add\s+|^mcp\s+(add|remove)\s+/;function Bu(e){Js(e);let t=e.slice(go.length);if(!ju.test(t))throw new fo(e)}var Xr=class extends Error{constructor(){super('Claude Code CLI not found. Ensure "claude" is installed and available on your PATH.'),this.name="ClaudeCliNotFoundError";}};function Js(e){if(!e||!/^claude /.test(e))throw new mo(e)}async function ue(e){Js(e);let t=e.slice(go.length).split(/\s+/).filter(Boolean),r=Ju(t);tr.debug(`[${r}] Executing proxy command: claude ${t.join(" ")}`);let n=Date.now();try{let o=await execa("claude",t,{reject:!1}),i=Date.now()-n;return tr.debug(`[${r}] Proxy command finished with exit code ${o.exitCode} in ${i}ms`),{name:r,command:e,exitCode:o.exitCode??1,stdout:o.stdout,stderr:o.stderr,duration_ms:i}}catch(o){throw Hs(o)?new Xr:o}}function Ju(e){return e.length>=3?e[2]:e.join(" ")}function Hs(e){return e instanceof Error&&"code"in e&&e.code==="ENOENT"}function Hu(e){return e.startsWith(js)?go+e.slice(js.length):e}var Vu=/^claude\s+(?:plugins?\s+(?:install|i)\s+|mcp\s+(?:add|remove)\s+)/;function Gu(e,t){return !t||e.includes("--scope")||!Vu.test(e)?e:`${e} --scope ${t}`}async function Vs(e,t){let r=e.split("&&").map(o=>Hu(o.trim())).filter(Boolean).map(o=>Gu(o,t));if(r.length===0)throw new Error("Empty install command");for(let o of r)Bu(o);tr.debug(`[installCommand] Executing ${r.length} command(s)`);let n=await ue(r[0]);if(n.exitCode!==0)return n;for(let o=1;o<r.length;o++)if(n=await ue(r[o]),n.exitCode!==0)return n;return n}async function Gs(e,t,r){let n=At(e),o=t?.trim();if(!o&&(o=(await Us(`Plugin "${n}" could not be installed.
-If a marketplace is needed, enter the source (owner/repo or URL), or press Enter to skip: `))?.trim(),!o))throw new Error("No marketplace source provided. Cannot retry install.");o=Wr(o),r?.(),tr.debug(`[${n}] Adding marketplace via: claude plugin marketplace add ${o}`);try{let i=await execa("claude",["plugin","marketplace","add",o],{reject:!1});if(i.exitCode!==0)throw new Error(`Failed to add marketplace: ${i.stderr||"unknown error"}`);tr.debug(`[${n}] Marketplace added successfully`);}catch(i){throw Hs(i)?new Xr:i}}M();$();var Ye=S("installDispatcher");async function zs(e,t,r){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"plugin",source:"external",scope:Br(r),version:"unknown",duration_ms:t,interface:L().interfaceType});}catch(n){Ye.warn(`Failed to send external install metrics: ${String(n)}`);}}async function qs(e,t){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"plugin",source:"external",error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:L().interfaceType});}catch(r){Ye.warn(`Failed to send external install-failed metrics: ${String(r)}`);}}function yo(e,t){let r=At(e);Ks(r);let n=["claude","plugin","install",r];return t&&n.push("--scope",t),n.join(" ")}async function So(e,t,r,n){let o=yo(e,n),i=At(e);r?.onStatus?.(`Installing ${i}...`),Ye.debug(`[${e}] Attempting install: ${o}`);let s=await ue(o);return s.exitCode===0?s:(Ye.debug(`[${e}] Install failed (exit ${s.exitCode}), attempting marketplace add`),r?.onError?.(s.stderr||`Install failed with exit code ${s.exitCode}`),t?r?.onStatus?.(`Adding marketplace for ${i}...`):r?.onPause?.(),await Gs(e,t,()=>{t||r?.onResume?.(`Adding marketplace for ${i}...`);}),r?.onResume?.(`Retrying install for ${i}...`),Ye.debug(`[${e}] Retrying install after marketplace add`),ue(o))}async function Ws(e,t){if(e.origin===ur&&e.installCommand){Ye.debug(`[${e.name}] Routing to external installer via installCommand`);let r=await Vs(e.installCommand,t?.scope);return r.exitCode===0?await zs(e.name,r.duration_ms,t?.scope):await qs(e.name,new Error(r.stderr||"Install failed")),r}if(er(e.name)){Ye.debug(`[${e.name}] Routing to external installer via name pattern`);let r=await So(e.name,t?.marketplaceSource,void 0,t?.scope);return r.exitCode===0?await zs(e.name,r.duration_ms,t?.scope):await qs(e.name,new Error(r.stderr||"Install failed")),r}return Ye.debug(`[${e.name}] Routing to internal installer`),ke(e.name,t)}function Xs(e){return "exitCode"in e}function Ys(){let e=J(s=>s.installedItems),t=J(s=>s.setInstalledItems),r=useCallback(async(s,c)=>{let a=await Ws(s,c);if(Xs(a)&&a.exitCode!==0)throw new Error(a.stderr||"External installation failed");J.getState().loadFromDisk();},[]),n=useCallback(async(s,c)=>{await Vr(s,c),t(e.filter(a=>a.name!==s));},[e,t]),o=useCallback(async(s,c)=>{let l=e.find(u=>u.name===s)?.status==="enabled"?"disabled":"enabled";await Qt(s,l,c),t(e.map(u=>u.name===s?{...u,status:l}:u));},[e,t]),i=useCallback(async s=>{await qr(s),J.getState().loadFromDisk();},[]);return {install:r,uninstall:n,toggle:o,update:i}}$();var Zr=S("mcp");function rr(e,t){e.silent?ae({status:"error",mcp:t.name,...t.exitCode!==void 0&&{exitCode:t.exitCode},message:t.message}):k(`Failed to ${t.action} MCP "${t.name}": ${t.message}`);}function Qs(e,t){e.silent?Q({status:"success",mcp:t.name,command:t.command,duration_ms:t.durationMs}):(q(`MCP "${t.name}" ${t.actionPastTense} successfully`),e.verbose&&t.stdout&&I(t.stdout));}function zu(e,t,r,n){let o=["claude","mcp","add","--transport",r,e];return t.length>0&&o.push(...t),n&&o.push("--scope",n),o.join(" ")}function ho(e,t){let r=["claude","mcp","remove",e];return t&&r.push("--scope",t),r.join(" ")}async function ea(e,t,r){if(!await re())return 1;if(t.length===0){let i=r.transport==="http"?"a URL":"a command";return rr(r,{name:e,action:"add",message:`${r.transport} transport requires ${i}`}),1}Zr.debug(`[${e}] Starting MCP add with args: ${t.join(" ")}`);let n=zu(e,t,r.transport,r.scope);if(!r.force){let i=p(e),s=p(n);if(!await Xe(`Install external MCP "${i}"?
+`);}function bt(e){process.stdout.write(JSON.stringify(e,null,2)+`
+`);}function Y(e){process.stdout.write(JSON.stringify(e)+`
+`);}function ie(e){process.stderr.write(JSON.stringify(e)+`
+`);}function N(e){return e instanceof Error?e.message:String(e)}function Cr(e){let t=new Date(e);return isNaN(t.getTime())?"\u2014":new Intl.DateTimeFormat("en-US",{dateStyle:"short"}).format(t)}function gc(e){if(!(e instanceof Error))return "unknown";let t=e.message.toLowerCase();return t.includes("401")||t.includes("unauthorized")?"invalid_credentials":t.includes("403")||t.includes("forbidden")?"forbidden":t.includes("timeout")||t.includes("timed out")?"timeout":t.includes("network")||t.includes("econnrefused")||t.includes("fetch")?"network_error":"unknown"}var xe=["clientId","clientSecret","tenant"],yc={clientId:"Client ID",clientSecret:"Client Secret",tenant:"Tenant"};function wi(){let[e,t]=useState({clientId:"",clientSecret:"",tenant:""}),[r,n]=useState("clientId"),[o,i]=useState({}),[s,c]=useState(null),[a,l]=useState(false),u=useRef(0),{setCredentials:g,setJustAuthenticated:v}=me(),{setFocus:d}=f();useInput((h,T)=>{if(!a){if(T.shift&&T.tab){let y=xe.indexOf(r);y>0&&n(xe[y-1]);}else if(T.tab){let y=xe.indexOf(r);y<xe.length-1&&n(xe[y+1]);}else if(T.return)if(r==="tenant")E();else {let y=xe.indexOf(r);n(xe[y+1]);}}},{isActive:true});let E=async()=>{let h={};for(let T of xe)e[T].trim()||(h[T]="This field is required");if(Object.keys(h).length>0){i(h);let T=xe.find(y=>h[y]);T&&n(T);return}l(true),c(null),u.current+=1;try{await rt({clientId:e.clientId.trim(),clientSecret:e.clientSecret.trim(),tenant:e.tenant.trim()});let{clientSecret:T,...y}=e;g(y),v(!0),f.getState().setScreen("bundleSetup"),d("bundleList"),b(x.CLI_SESSION_STARTED,{cli_version:Be,os:process.platform,node_version:process.version,duration_ms:Ue(),interface:"tui"}).catch(()=>{});}catch(T){let y=T instanceof Error?T.message:"Authentication failed";c(y),pi(x.CLI_AUTH_FAILED,{error_code:gc(T),attempt:u.current},e.tenant.trim()).catch(()=>{});}finally{l(false),t(T=>({...T,clientSecret:""}));}},m=h=>T=>{t(y=>({...y,[h]:T})),o[h]&&i(y=>({...y,[h]:void 0}));};return jsxs(Box,{flexDirection:"column",padding:2,children:[jsx(Box,{marginBottom:1,children:jsxs(Text,{bold:true,color:"cyan",children:[Uo," \u2014 Initial Setup"]})}),jsxs(Box,{marginBottom:1,flexDirection:"column",children:[jsx(Text,{dimColor:true,children:"The data collected during setup is used solely to improve"}),jsx(Text,{dimColor:true,children:"Flow's internal tools and will not be shared externally."})]}),jsx(Box,{flexDirection:"column",children:xe.map(h=>jsx(Box,{marginBottom:1,children:jsx(hi,{label:yc[h],value:e[h],onChange:m(h),masked:h==="clientSecret",isActive:r===h&&!a,error:o[h]})},h))}),a&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"cyan",children:"Authenticating..."})}),s&&jsx(Box,{marginTop:1,children:jsxs(Text,{color:"red",children:["\u26A0 ",p(s)]})}),jsx(Box,{marginTop:1,children:jsx(Text,{dimColor:true,children:"Tab next field \xB7 Enter confirm"})})]})}function Ar(){return jsxs(Box,{flexDirection:"column",alignItems:"center",children:[jsx(hc,{text:"FLOW",font:"block",colors:["white","white"]}),jsx(Box,{marginTop:-1,marginBottom:1,children:jsxs(Text,{dimColor:true,children:["Marketplace \xB7 v",Be]})})]})}var Un={discover:"Discover",installed:"Installed"},wc=Object.keys(Un);function Ei(){let e=f(t=>t.activeTab);return jsx(Box,{paddingX:1,paddingBottom:1,children:wc.map(t=>jsx(Box,{marginRight:1,children:t===e?jsx(Text,{bold:true,inverse:true,children:` ${Un[t]} `}):jsx(Text,{dimColor:true,children:` ${Un[t]} `})},t))})}var Z=create(e=>({query:"",cursorPosition:0,setQuery:t=>e({query:t}),setCursorPosition:t=>e({cursorPosition:t}),resetQuery:()=>e({query:"",cursorPosition:0})}));function ki(){let e=f(s=>s.focus),t=Z(s=>s.query),r=Z(s=>s.cursorPosition),n=e==="search",o=t.slice(0,r),i=t.slice(r);return jsxs(Box,{borderStyle:"single",borderTop:false,borderBottom:true,borderLeft:false,borderRight:false,paddingX:1,marginX:1,marginBottom:1,children:[jsx(Text,{color:n?"cyan":"gray",children:"\u{1F50D} "}),n?jsxs(Fragment,{children:[jsx(Text,{color:"white",children:o}),jsx(Text,{inverse:true,children:i[0]??" "}),jsx(Text,{color:"white",children:i.slice(1)})]}):jsx(Text,{dimColor:true,children:t||"Search..."})]})}var vc=["skill","mcp","plugin"].map((e,t)=>({key:String(t+2),type:e,...gt[e]})),Pc=["internal","external"].map((e,t)=>({key:String(t+6),origin:e,...Bo[e]}));function Ci(){let e=f(n=>n.catalogFilters),t=e.types.has("skill")&&e.types.has("mcp")&&e.types.has("plugin"),r=e.origins.has("internal")&&e.origins.has("external");return jsxs(Box,{paddingX:1,paddingBottom:1,gap:1,children:[jsx(Text,{bold:true,children:"Type:"}),jsxs(Box,{gap:0,children:[jsx(Text,{dimColor:true,children:"[1] "}),jsxs(Text,{color:t?"green":void 0,dimColor:!t,children:[t?"\u25C9":"\u25CB"," All"]})]}),vc.map(n=>{let o=!t&&e.types.has(n.type);return jsxs(Box,{gap:0,children:[jsxs(Text,{dimColor:true,children:["[",n.key,"] "]}),jsxs(Text,{color:o?n.color:void 0,dimColor:!o,children:[o?"\u25C9":"\u25CB"," ",n.label]})]},n.key)}),jsx(Box,{marginLeft:2,children:jsx(Text,{bold:true,children:"|"})}),jsx(Box,{marginLeft:2,children:jsx(Text,{bold:true,children:"Origin:"})}),jsxs(Box,{gap:0,children:[jsx(Text,{dimColor:true,children:"[5] "}),jsxs(Text,{color:r?"green":void 0,dimColor:!r,children:[r?"\u25C9":"\u25CB"," All"]})]}),Pc.map(n=>{let o=!r&&e.origins.has(n.origin);return jsxs(Box,{gap:0,children:[jsxs(Text,{dimColor:true,children:["[",n.key,"] "]}),jsxs(Text,{color:o?n.color:void 0,dimColor:!o,children:[o?"\u25C9":"\u25CB"," ",n.label]})]},n.key)})]})}function $i({type:e}){let{label:t,color:r}=gt[e];return jsx(Text,{color:r,children:t})}function Ri({origin:e}){return e===Lt?jsx(Text,{color:"blue",children:"[Flow]"}):jsx(Text,{color:"white",children:"[External]"})}var Rr=kc.memo(function({item:t,isSelected:r}){let n=t.status==="disabled"?"yellow":"green";return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:r?"cyan":"gray",children:r?"\u203A ":"\u25CB "}),jsx(Text,{bold:r,color:r?"cyan":"white",children:t.name}),t.type&&jsxs(Text,{children:[" ",jsx($i,{type:t.type})]}),t.origin&&jsxs(Text,{children:[" ",jsx(Ri,{origin:t.origin})]}),jsxs(Text,{dimColor:true,children:[t.authorName?` \xB7 ${t.authorName}`:"",t.version?` \xB7 v${t.version}`:" \xB7 n/a"]}),t.status&&jsxs(Text,{color:n,children:[" [",t.status,"]"]}),t.updateAvailable&&jsx(Text,{color:"yellow",children:" [\u2191 update available]"}),t.installedAt&&jsxs(Text,{dimColor:true,children:[" \xB7 ",Cr(t.installedAt)]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:t.description})})]})});function Pt({message:e}){return jsx(Box,{paddingX:2,paddingY:1,children:jsx(Text,{dimColor:true,children:e??"No items found."})})}function Oi({items:e,emptyMessage:t}){let r=f(a=>a.selectedIndex);if(e.length===0)return jsx(Pt,{message:t});let n=Math.max(0,r-Math.floor(Oe/2)),o=Math.min(e.length,n+Oe);o===e.length&&(n=Math.max(0,o-Oe));let i=e.slice(n,o),s=n,c=e.length-o;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:s>0?`\u2191 ${s} more above`:" "})}),i.map((a,l)=>jsx(Rr,{item:a,isSelected:n+l===r},a.name)),jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:c>0?`\u2193 ${c} more below`:" "})})]})}function Fi({label:e,pathHint:t}){return jsxs(Box,{paddingBottom:1,children:[jsx(Text,{bold:true,color:"blueBright",children:e}),jsxs(Text,{dimColor:true,children:[" ",t]})]})}function Bi({groups:e,emptyMessage:t}){let r=f(d=>d.selectedIndex),n=[],o=0;for(let d of e){n.push({kind:"header",label:d.label,pathHint:d.pathHint,key:`h-${d.scope}`});for(let E of d.items)n.push({kind:"item",item:E,itemIndex:o,key:`i-${d.scope}-${E.name}`}),o++;}if(o===0)return jsx(Pt,{message:t});let s=n.findIndex(d=>d.kind==="item"&&d.itemIndex===r),c=s>=0?s:0,a=Math.max(0,c-Math.floor(Oe/2)),l=Math.min(n.length,a+Oe);l===n.length&&(a=Math.max(0,l-Oe));let u=n.slice(a,l),g=a,v=n.length-l;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:g>0?`\u2191 ${g} more above`:" "})}),u.map(d=>d.kind==="header"?jsx(Fi,{label:d.label,pathHint:d.pathHint},d.key):jsx(Rr,{item:d.item,isSelected:d.itemIndex===r},d.key)),jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:v>0?`\u2193 ${v} more below`:" "})})]})}var _c={discover:"Discover",installed:"Installed"};function ji({items:e,tabId:t,emptyMessage:r,groups:n}){return jsxs(Box,{flexDirection:"column",children:[jsx(ki,{}),jsx(Ci,{}),jsxs(Box,{paddingX:1,marginTop:1,children:[jsx(Text,{bold:true,children:_c[t]}),jsxs(Text,{dimColor:true,children:[" (",e.length,")"]})]}),n&&n.length>0?jsx(Bi,{groups:n,emptyMessage:r}):jsx(Oi,{items:e,emptyMessage:r})]})}function Ji({filteredItems:e,emptyMessage:t,groups:r}){let n=f(o=>o.activeTab);return jsx(Box,{flexDirection:"column",flexGrow:1,children:n==="discover"?jsx(ji,{items:e,tabId:"discover",emptyMessage:t},"discover"):jsx(ji,{items:e,tabId:"installed",emptyMessage:t,groups:r},"installed")})}var Nc={tabs:"\u2190\u2192: switch tab | \u2193: navigate | Enter: select | Ctrl+C Ctrl+C: quit",list:"\u2191\u2193: navigate | Enter: select | Type: 1=All 2=Skill 3=MCP 4=Plugin | Origin: 5=All 6=Flow 7=External | \u2190\u2192/Tab: tabs | Ctrl+C\xD72: quit",search:"Type to filter | \u2193/Esc: exit search | Enter: confirm",actionMenu:"\u2191\u2193: navigate options | Enter: confirm | Esc: close menu",auth:"Tab: next field | Enter: confirm | Ctrl+C Ctrl+C: quit",bundleList:"\u2191\u2193: navigate | Enter: select Starter Kit | Esc: skip",bundleDetail:"\u2191\u2193: navigate | Enter: confirm & install | Esc: back",installProgress:"\u2191\u2193: navigate | Enter: select"};function Mr(){let e=f(t=>t.focus);return jsx(Box,{borderStyle:"single",borderTop:true,borderBottom:false,borderLeft:false,borderRight:false,children:jsx(Text,{dimColor:true,children:Nc[e]})})}function Gi({message:e,type:t}){return e?jsx(Box,{paddingX:1,children:jsxs(Text,{color:t==="success"?"green":t==="info"?"cyan":"red",children:[t==="success"?"\u2713":t==="info"?"(i)":"\u2717"," ",p(e)]})}):null}function _r({message:e}){return jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(Jc,{type:"dots"})}),jsxs(Text,{children:[" ",e]})]})}function Or({message:e,onRetry:t,onBack:r}){return useInput((n,o)=>{n==="r"&&o.ctrl&&t?t():o.escape&&r&&r();}),jsxs(Box,{flexDirection:"column",paddingX:2,paddingY:1,children:[jsxs(Text,{color:"red",children:["\u2717 ",e]}),t&&jsx(Text,{dimColor:true,children:"Press Ctrl+R to retry"}),r&&jsx(Text,{dimColor:true,children:"Press Escape to go back"})]})}function ut({itemName:e,actions:t,descriptions:r,onAction:n,onClose:o}){let i=f(a=>a.focus),[s,c]=useState(0);return useInput((a,l)=>{l.upArrow?c(u=>u>0?u-1:u):l.downArrow?c(u=>u<t.length-1?u+1:u):l.return?n(t[s]):l.escape&&o();},{isActive:i==="actionMenu"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsx(Box,{flexDirection:"column",marginTop:1,children:t.map((a,l)=>jsxs(Box,{children:[jsxs(Text,{bold:l===s,color:l===s?"cyan":void 0,children:[l===s?"\u203A ":"  ",a]}),r?.[a]&&jsxs(Text,{dimColor:true,children:[" \u2014 ",r[a]]})]},l))})]})}var Wn=Object.entries(Rt),Zi=[...Wn.map(([,e])=>e.actionLabel),"Cancel"],Qi=Object.fromEntries(Wn.map(([,e])=>[e.actionLabel,e.description]));function es(e){let t=Wn.find(([,r])=>r.actionLabel===e);return t?t[0]:null}function rs({itemName:e,onInstall:t,onClose:r}){let[n,o]=useState(false),i=useCallback(l=>{let u=es(l);u?t(u):o(false);},[t]),s=useCallback(()=>{o(false);},[]),c=useCallback(l=>{l==="Install"?o(true):r();},[r]);return n?jsx(ut,{itemName:`${e} \u2014 Choose scope`,actions:Zi,descriptions:Qi,onAction:i,onClose:s}):jsx(ut,{itemName:e,actions:["Install","Cancel"],onAction:c,onClose:r})}function Nr({activeFocus:e,onConfirm:t}){let[r,n]=useState("idle"),o=f(i=>i.focus);return useInput((i,s)=>{s.escape||i==="n"?n("idle"):i==="y"&&t();},{isActive:r==="confirming"&&o===e}),{isConfirming:r==="confirming",requestConfirm:()=>n("confirming"),cancelConfirm:()=>n("idle")}}function is({itemName:e,itemScope:t,itemStatus:r,updateAvailable:n,catalogVersion:o,onUninstall:i,onToggleStatus:s,onUpdate:c,onClose:a}){let{isConfirming:l,requestConfirm:u}=Nr({activeFocus:"actionMenu",onConfirm:()=>i(t)});if(l)return jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Uninstall "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]});let g=r==="enabled"?"Disable":"Enable",v=o&&p(o),d=v?`Update to v${v}`:"Update";return jsx(ut,{itemName:e,actions:n?["Uninstall",g,d,"Cancel"]:["Uninstall",g,"Cancel"],onAction:h=>{h==="Uninstall"?u():h===g?s(t):h.startsWith("Update")?c?.():a();},onClose:a})}function ls({itemName:e,itemScope:t,onUninstall:r,onClose:n}){let{isConfirming:o,requestConfirm:i}=Nr({activeFocus:"actionMenu",onConfirm:()=>r(t)});return o?jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Remove MCP "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]}):jsx(ut,{itemName:e,actions:["Uninstall","Cancel"],onAction:a=>{a==="Uninstall"?i():n();},onClose:n})}async function cs(e,t){let r=U.resolve(t);await Ie.mkdir(r,{recursive:true});let n=U.join(U.dirname(r),`${randomUUID()}.zip`);try{await Ie.writeFile(n,e),await Zc(n,{dir:r,onEntry(o){if((o.externalFileAttributes>>16&61440)===40960)throw new Error(`Zip Slip (symlink): entry "${o.fileName}" is a symbolic link and was rejected`);let s=U.resolve(r,o.fileName);if(!s.startsWith(r+U.sep)&&s!==r)throw new Error(`Zip Slip detected: entry "${o.fileName}" would escape target directory`)}});try{let o=realpathSync(r);if(!o.startsWith(U.resolve(U.dirname(r))))throw new Error(`Zip Slip (post-extract): resolved path "${o}" is outside expected parent`)}catch(o){if(o.code!=="ENOENT")throw o}}finally{try{await Ie.unlink(n);}catch{}}}async function Xn(e){await Ie.rm(e,{recursive:true,force:true});}async function Je(){let e=zo();await Ie.mkdir(U.dirname(e),{recursive:true});try{await Ie.writeFile(e,"",{flag:"wx"});}catch(r){if(r.code!=="EEXIST")throw r}return await Qc.lock(e,{stale:1e4,retries:{retries:2,minTimeout:500,maxTimeout:500}})}var tu={user:"global",project:"project",local:"local"};function Br(e){return e?tu[e]:"global"}var be=class extends Error{constructor(r,n){super(`${r} v${n} is already installed. Use --force to reinstall.`);this.pluginName=r;this.version=n;this.name="AlreadyInstalledError";}pluginName;version},He=class extends Error{constructor(r,n){super(`${r} is already up to date (v${n})`);this.pluginName=r;this.version=n;this.name="AlreadyUpToDateError";}pluginName;version};function Wt(){return Hl.create({prefix:It("PROMPT_MANAGER_URL","https://flow.ciandt.com/prompt-manager-api/"),hooks:{beforeRequest:[async({request:e})=>{let t=await Fe();e.headers.set("Authorization",`Bearer ${t}`);let r=await D();r?.tenant&&Ze.test(r.tenant)&&e.headers.set("FlowTenant",r.tenant);}]}})}var nu=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function us(e){if(!e||!nu.test(e))throw new Error(`Invalid plugin name: "${e}". Must be 1-64 chars, lowercase alphanumeric and hyphens only.`)}async function ve(){try{let{plugins:e}=await Wt().get("v1/plugins/catalog").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching plugin catalog"):new Error(`Failed to fetch plugin catalog: ${e.message}`):e}}async function Tt(e){us(e);try{return await Wt().get(`v1/plugins/${e}/manifest`).json()}catch(t){throw t instanceof Error?t.message.includes("404")?new Error(`Plugin '${e}' not found in catalog`):t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to fetch plugin manifest: ${t.message}`):t}}async function ps(e){us(e);try{let t=await Wt().get(`v1/plugins/${e}/archive`);return Buffer.from(await t.arrayBuffer())}catch(t){throw t instanceof Error?t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to download plugin: ${t.message}`):t}}async function Kr(){try{let{profiles:e}=await Wt().get("v1/plugins/profiles").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching starter kits"):new Error(`Failed to fetch starter kits: ${e.message}`):e}}var ou=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/,iu=/^[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9]+(\.[a-zA-Z0-9]+)*)?$/;function jr(e){if(!ou.test(e))throw new Error(`Invalid plugin name from manifest: "${e}". Plugin names must be lowercase alphanumeric and hyphens (1-64 chars).`)}function su(e){if(!iu.test(e))throw new Error(`Invalid plugin version from manifest: "${e}". Versions must follow semver format (e.g. 1.0.0 or 1.0.0-beta.1).`)}var Ge=S("installer");function au(e,t){let r=`${e}@${O}`,o=Le().plugins[r];if(o&&!t)throw new be(e,o[0].version??"unknown");return {pluginKey:r,alreadyInstalled:o}}async function lu(e,t,r){r&&await Xn(t);try{Ge.debug(`[${t}] Extracting archive...`),await cs(e,t);}catch(n){throw await Xn(t),n}}function cu(e,t,r,n,o){let i=Le(),s={scope:n,installPath:t,version:r,installedAt:new Date().toISOString(),origin:o},c=i.plugins[e]??[];i.plugins[e]=[...c.filter(a=>a.scope!==n),s],pt(i),Yn(e,true,n);}async function uu(e,t,r,n,o){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"plugin",source:o,scope:n,version:t,duration_ms:r,interface:A().interfaceType});}catch(i){Ge.warn(`Failed to send install metrics: ${String(i)}`);}}async function pu(e,t,r){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"plugin",source:r,error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:A().interfaceType});}catch(n){Ge.warn(`Failed to send install-failed metrics: ${String(n)}`);}}async function Pe(e,t={}){let r=Date.now(),n=null;try{Ge.debug(`[${e}] Acquiring lock...`),n=await Je();let{pluginKey:o,alreadyInstalled:i}=au(e,t.force);Ge.debug(`[${e}] Fetching manifest...`);let s=await Tt(e);jr(s.name),su(s.version),Ge.debug(`[${e}] Downloading archive...`);let c=await ps(e),a=t.scope??"user",l=Ho(s.name,s.version);await lu(c,l,!!i&&!!t.force),cu(o,l,s.version,a,"internal"),ds(s,l);let u=Date.now()-r;Ge.debug(`[${e}] Installed successfully in ${u}ms`);let g={name:s.name,version:s.version,path:l,duration_ms:u};return t.skipMetrics||await uu(s.name,s.version,u,Br(a),"internal"),g}catch(o){throw await pu(e,o,"internal"),Ge.error(`[${e}] Installation failed: ${o instanceof Error?o.message:String(o)}`),o}finally{n&&await n();}}function du(){return {$schema:"https://anthropic.com/claude-code/marketplace.schema.json",name:O,description:"Flow Skills marketplace",owner:{name:"Flow Team",email:"flow@ciandt.com"},plugins:[]}}function gs(){let e=ur();if(!z__default.existsSync(e))return null;try{return JSON.parse(z__default.readFileSync(e,"utf-8"))}catch{return null}}function mu(){let e=gs();if(e)return e;let t=du(),r=ur();return z__default.mkdirSync(U__default.dirname(r),{recursive:true}),Zn(t),t}function Zn(e){let t=ur(),r=`${t}.${randomUUID()}.tmp`;z__default.writeFileSync(r,JSON.stringify(e,null,2),"utf-8"),z__default.renameSync(r,t);}function fu(){let e=Go(),t={};try{z__default.existsSync(e)&&(t=JSON.parse(z__default.readFileSync(e,"utf-8")));}catch{t={};}if(t[O])return;t[O]={source:{source:"github",repo:"CI-T-HyperX/flow-skills"},installLocation:Vo(),lastUpdated:new Date().toISOString()};let r=`${e}.${randomUUID()}.tmp`;z__default.writeFileSync(r,JSON.stringify(t,null,2),"utf-8"),z__default.renameSync(r,e);}function ds(e,t){jr(e.name),fu();let r=wn(e.name);z__default.mkdirSync(U__default.dirname(r),{recursive:true});try{z__default.lstatSync(r),z__default.rmSync(r,{recursive:!0,force:!0});}catch{}z__default.symlinkSync(t,r);let n=mu();n.plugins.some(i=>i.name===e.name)||(n.plugins.push({name:e.name,description:e.description,version:e.version,author:e.author,source:`./plugins/native/${e.name}`,category:e.category}),Zn(n));}function Qn(e){jr(e);let t=wn(e);try{z__default.rmSync(t,{recursive:!0,force:!0});}catch{}let r=gs();if(!r)return;let n=r.plugins.length;r.plugins=r.plugins.filter(o=>o.name!==e),r.plugins.length!==n&&Zn(r);}var yu=S("mcpConfigReader"),Su=500,hu=512;function wu(){return U__default.join(he__default.homedir(),".claude.json")}function xu(){return U__default.join(process.cwd(),".mcp.json")}function Ss(e){if(!z__default.existsSync(e))return null;try{return JSON.parse(z__default.readFileSync(e,"utf-8"))}catch{return yu.debug(`[mcpConfigReader] Failed to parse ${e}`),null}}function qt(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function eo(e){if(!qt(e))return {};let t=e.mcpServers;return qt(t)?t:{}}function to(e,t){return Object.keys(e).slice(0,Su).map(n=>({name:p(n.slice(0,hu)),marketplace:"",version:void 0,installedAt:"",installPath:"",scope:t,description:void 0,author:void 0,status:"enabled",type:"mcp"}))}function ws(){let e=[],t=wu(),r=Ss(t);if(qt(r)){let c=r,a=eo(c);e.push(...to(a,"user"));let l=process.cwd();if(qt(c.projects)){let u=c.projects[l];if(qt(u)){let g=eo(u);e.push(...to(g,"local"));}}}let n=xu(),o=Ss(n),i=eo(o);e.push(...to(i,"project"));let s=new Map;for(let c of e){let a=`${c.name}@${c.scope}`;s.has(a)||s.set(a,c);}return [...s.values()]}var ae=S("storage");async function bu(e,t){try{await b(x.CLI_TOOL_UNINSTALLED,{tool_id:e,tool_type:"plugin",source:t,interface:A().interfaceType});}catch(r){ae.warn(`Failed to send uninstall metrics: ${String(r)}`);}}function vu(e,t,r){let n=t==="enabled"?x.CLI_TOOL_ENABLED:x.CLI_TOOL_DISABLED;b(n,{tool_id:e,source:r,interface:A().interfaceType}).catch(o=>ae.warn(`Failed to send ${t} metrics: ${String(o)}`));}function Is(){return U__default.join(he__default.homedir(),".claude","plugins","installed_plugins.json")}function Pu(){return U__default.join(he__default.homedir(),".claude","plugins")}function xs(e){let t=U__default.resolve(e),r=U__default.resolve(Pu()),n=U__default.resolve(U__default.join(process.cwd(),".claude","plugins")),o=t.startsWith(r+U__default.sep)||t===r,i=t.startsWith(n+U__default.sep)||t===n;if(!o&&!i)throw new Error(`Security error: installPath '${e}' is outside the plugins directory`)}function bs(e="user"){return e==="local"?U__default.join(process.cwd(),".claude","settings.local.json"):e==="project"?U__default.join(process.cwd(),".claude","settings.json"):U__default.join(he__default.homedir(),".claude","settings.json")}function Le(){let e=Is();if(!z__default.existsSync(e))return {version:2,plugins:{}};try{return JSON.parse(z__default.readFileSync(e,"utf-8"))}catch{return {version:2,plugins:{}}}}function Eu(e){let t=e?.code;return t==="EACCES"||t==="EPERM"}function vs(e,t){try{z__default.mkdirSync(U__default.dirname(e),{recursive:!0});let r=`${e}.${randomUUID()}.tmp`;z__default.writeFileSync(r,JSON.stringify(t,null,2),"utf-8"),z__default.renameSync(r,e);}catch(r){throw Eu(r)?new Error(`Permission denied: cannot write to '${e}'. Check your file system permissions.`):r}}function pt(e){vs(Is(),e);}function Xt(e){let t=e.lastIndexOf("@");return t===-1?{name:e,marketplace:""}:{name:e.slice(0,t),marketplace:e.slice(t+1)}}function Tu(e,t){let r=U__default.join(e,".claude-plugin"),n=U__default.join(r,"plugin.json");if(z__default.existsSync(n))try{return JSON.parse(z__default.readFileSync(n,"utf-8"))}catch{return null}let o=U__default.join(r,"marketplace.json");if(z__default.existsSync(o))try{let i=JSON.parse(z__default.readFileSync(o,"utf-8"));return {description:i.plugins?.find(c=>c.name===t)?.description,author:i.owner}}catch{return null}return null}function io(e="user"){let t=bs(e);if(!z__default.existsSync(t))return {};try{return JSON.parse(z__default.readFileSync(t,"utf-8"))}catch{return {}}}function Ps(e,t="user"){vs(bs(t),e);}function ku(e,t){let{name:r,marketplace:n}=Xt(e),o;if(n?(o=`${r}@${n}`,t[o]||(o=void 0)):o=Object.keys(t).filter(s=>Xt(s).name===r)[0],!o)throw ae.error(`[${r}] Plugin is not installed`),new Error(`Plugin '${r}' is not installed`);return {key:o,name:r}}function Cu(e,t){let{name:r,marketplace:n}=Xt(e),o;return n?(o=`${r}@${n}`,t[o]||(o=void 0)):o=Object.keys(t).filter(s=>Xt(s).name===r)[0],o?{key:o,name:r}:null}function ro(e="user"){return io(e).enabledPlugins??{}}function no(e,t="user"){let r=io(t),n=r.enabledPlugins;if(!n||!(e in n))return;let{[e]:o,...i}=n;r.enabledPlugins=i,Ps(r,t);}function Yn(e,t,r="user"){let n=io(r),o=n.enabledPlugins??{};n.enabledPlugins={...o,[e]:t},Ps(n,r);}function $u(e){let t=new Map;for(let r of e){let n=t.get(r.scope);(!n||r.installedAt>n.installedAt)&&t.set(r.scope,r);}return [...t.values()]}function Ee(){let e=Le(),t=ro(),r=ro("project"),n=ro("local"),o={project:r,local:n},i=Object.entries(e.plugins).flatMap(([l,u])=>{let{name:g,marketplace:v}=Xt(l),d=u.map(m=>m.scope==="managed"?{...m,scope:"user"}:m);return $u(d).map(m=>{let h=Tu(m.installPath,g),y=(o[m.scope]??t)[l];return {name:g,marketplace:v,version:m.version&&m.version!=="unknown"?m.version:void 0,installedAt:m.installedAt,installPath:m.installPath,scope:m.scope,description:h?.description,author:h?.author,status:y===false?"disabled":"enabled"}})}),s=ws(),c=new Set(i.map(l=>`${l.name}@${l.scope}`)),a=s.filter(l=>!c.has(`${l.name}@${l.scope}`));return [...i,...a]}async function Jr(e,t){ae.debug(`[${e}] Acquiring lock to uninstall`);let r=await Je();try{let n=Le(),o=Cu(e,n.plugins);if(!o)throw new Error(`Plugin '${e}' is not in installed_plugins.json. If this is an MCP server from config, use the MCP remove command instead.`);let{key:i,name:s}=o,c=n.plugins[i];if(t){let a=c.find(g=>g.scope===t);if(!a)throw new Error(`Plugin '${s}' is not installed in ${t} scope`);ae.debug(`[${s}] Resolved key: ${i}, scope: ${t}`),xs(a.installPath);let l=U__default.dirname(a.installPath);ae.debug(`[${s}] Removing directory: ${l}`),z__default.rmSync(l,{recursive:!0,force:!0});let u=c.filter(g=>g.scope!==t);if(u.length===0){let{[i]:g,...v}=n.plugins;pt({...n,plugins:v}),no(i,t),Qn(s);}else n.plugins[i]=u,pt(n),no(i,t);}else {ae.debug(`[${s}] Resolved key: ${i}`);for(let u of c){xs(u.installPath);let g=U__default.dirname(u.installPath);ae.debug(`[${s}] Removing directory: ${g}`),z__default.rmSync(g,{recursive:!0,force:!0}),no(i,u.scope);}Qn(s);let{[i]:a,...l}=n.plugins;pt({...n,plugins:l});}await bu(s,c[0].origin??"internal"),ae.debug(`[${s}] Uninstalled successfully`);}finally{await r();}}async function Yt(e,t,r){ae.debug(`[${e}] Acquiring lock to set status \u2192 ${t}`);let n=await Je();try{let o=Le(),{key:i,name:s}=ku(e,o.plugins),c=o.plugins[i],a=r??c[0].scope,l=c[0].origin??"internal";ae.debug(`[${s}] Resolved key: ${i}, scope: ${a}`),Yn(i,t==="enabled",a),vu(s,t,l),ae.debug(`[${s}] Status updated to ${t}`);}finally{await n();}}var K=create(e=>({installedItems:[],setInstalledItems:t=>e({installedItems:t}),loadFromDisk:()=>e({installedItems:Ee()})}));var F=["discover","installed"];function Es(e,t,r){if(t.rightArrow||t.tab){let n=F.indexOf(r.activeTab);return [{type:"setTab",tab:F[(n+1)%F.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}if(t.leftArrow){let n=F.indexOf(r.activeTab);return [{type:"setTab",tab:F[(n-1+F.length)%F.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}return t.downArrow?[{type:"setFocus",focus:"list"}]:[]}function Ts(e,t,r,n){if(t.upArrow)return r.selectedIndex===0?[{type:"setSelectedIndex",index:-1},{type:"setFocus",focus:"search"}]:[{type:"setSelectedIndex",index:r.selectedIndex-1}];if(t.downArrow&&r.selectedIndex<n-1)return [{type:"setSelectedIndex",index:r.selectedIndex+1}];if(t.leftArrow){let o=F.indexOf(r.activeTab);return [{type:"setTab",tab:F[(o-1+F.length)%F.length]},{type:"setSelectedIndex",index:0}]}if(t.rightArrow){let o=F.indexOf(r.activeTab);return [{type:"setTab",tab:F[(o+1)%F.length]},{type:"setSelectedIndex",index:0}]}if(t.tab){let o=F.indexOf(r.activeTab);return [{type:"setTab",tab:F[(o+1)%F.length]},{type:"setSelectedIndex",index:0}]}return t.return?[{type:"setActionMenuOpen",open:true},{type:"setFocus",focus:"actionMenu"}]:e==="/"?[{type:"setFocus",focus:"search"}]:e==="1"?[{type:"selectAllTypes"}]:e==="2"?[{type:"toggleTypeFilter",catalogType:"skill"}]:e==="3"?[{type:"toggleTypeFilter",catalogType:"mcp"}]:e==="4"?[{type:"toggleTypeFilter",catalogType:"plugin"}]:e==="5"?[{type:"selectAllOrigins"}]:e==="6"?[{type:"toggleOriginFilter",origin:"internal"}]:e==="7"?[{type:"toggleOriginFilter",origin:"external"}]:e&&e!==" "&&!t.ctrl&&!t.meta&&!t.escape?[{type:"setSelectedIndex",index:-1},{type:"setFocus",focus:"search"},{type:"searchAppend",char:e}]:[]}function ks(e,t){return t.escape?[{type:"setActionMenuOpen",open:false},{type:"setFocus",focus:"list"}]:[]}function Cs(e,t,r){return t.escape?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:"reset"}:t.downArrow?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:null}:t.leftArrow?{actions:[],queryUpdate:{cursorMove:-1}}:t.rightArrow?{actions:[],queryUpdate:{cursorMove:1}}:t.return?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:null}:t.backspace?r.length===0?{actions:[{type:"setFocus",focus:"list"},{type:"setSelectedIndex",index:0}],queryUpdate:null}:{actions:[],queryUpdate:{backspace:true}}:e&&!t.ctrl&&!t.meta?{actions:[],queryUpdate:{append:e}}:{actions:[],queryUpdate:null}}function Gr(e){let{setActiveTab:t,setFocus:r,setSelectedIndex:n,setActionMenuOpen:o}=f.getState();for(let i of e)if(i.type==="setTab")t(i.tab);else if(i.type==="setFocus")r(i.focus);else if(i.type==="setSelectedIndex")n(i.index);else if(i.type==="setActionMenuOpen")o(i.open);else if(i.type==="searchAppend"){let{setQuery:s,query:c,setCursorPosition:a,cursorPosition:l}=Z.getState();s(c.slice(0,l)+i.char+c.slice(l)),a(l+i.char.length);}else i.type==="toggleTypeFilter"?f.getState().toggleTypeFilter(i.catalogType):i.type==="selectAllTypes"?f.getState().selectAllTypes():i.type==="toggleOriginFilter"?f.getState().toggleOriginFilter(i.origin):i.type==="selectAllOrigins"&&f.getState().selectAllOrigins();}function $s({listLength:e}){let t=f(m=>m.focus),r=f(m=>m.selectedIndex),n=f(m=>m.actionMenuOpen),o=f(m=>m.setFocus),i=f(m=>m.setActionMenuOpen),s=Z(m=>m.query),c=Z(m=>m.setQuery),a=Z(m=>m.resetQuery),l=useRef(e);useEffect(()=>{l.current=e;},[e]),useEffect(()=>{if(t==="search"){let{query:m,setCursorPosition:h}=Z.getState();h(m.length);}},[t]);let[u,g]=useState("");useEffect(()=>{let m=setTimeout(()=>g(s),300);return ()=>clearTimeout(m)},[s]),useInput((m,h)=>{let{activeTab:T,selectedIndex:y,actionMenuOpen:L}=f.getState();Gr(Es(m,h,{activeTab:T}));},{isActive:t==="tabs"}),useInput((m,h)=>{let{activeTab:T,selectedIndex:y,actionMenuOpen:L}=f.getState();Gr(Ts(m,h,{activeTab:T,selectedIndex:y},l.current));},{isActive:t==="list"}),useInput((m,h)=>{Gr(ks(m,h));},{isActive:t==="actionMenu"}),useInput((m,h)=>{let T=Cs(m,h,Z.getState().query),y=T.queryUpdate;if(Gr(T.actions),y==="reset")a(),g("");else if(y!==null){let{query:L,cursorPosition:$,setCursorPosition:H}=Z.getState();if("backspace"in y)$>0&&(c(L.slice(0,$-1)+L.slice($)),H($-1));else if("append"in y)c(L.slice(0,$)+y.append+L.slice($)),H($+y.append.length);else if("cursorMove"in y){let q=$+y.cursorMove;q>=0&&q<=L.length&&H(q);}}},{isActive:t==="search"});let v=useCallback(()=>{i(false),o("list");},[i,o]),d=useCallback(m=>{let{setSelectedIndex:h,selectedIndex:T}=f.getState();m===0?h(0):T>=m&&h(m-1);},[]),E=useCallback(m=>{if(!u)return l.current=m.length,m;let h=u.toLowerCase(),T=m.filter(y=>y.name.toLowerCase().includes(h)||y.description?.toLowerCase().includes(h));return l.current=T.length,T},[u]);return {actionMenuOpen:n,closeMenu:v,selectedIndex:r,clampIndex:d,filteredItems:E}}function Ls(){let e=f(c=>c.notification),t=f(c=>c.showNotification),r=f(c=>c.clearNotification),n=me(c=>c.justAuthenticated),o=me(c=>c.credentials),i=me(c=>c.setJustAuthenticated);return useEffect(()=>{n&&o&&(t(`Authenticated. Tenant: ${o.tenant}`,"success"),i(false));},[n,o]),useEffect(()=>{if(!e)return;let c=setTimeout(r,3e3);return ()=>clearTimeout(c)},[e]),{notify:(c,a)=>{t(c,a);}}}function Re(e,t,r=false){return r?true:!lo.valid(e)||!lo.valid(t)?false:lo.gt(t,e)}var Me=S("updater");async function Mu(e,t,r,n,o){try{await b(x.CLI_TOOL_UPDATED,{tool_id:e,tool_type:"plugin",source:o,from_version:t,to_version:r,duration_ms:n,interface:A().interfaceType});}catch(i){Me.warn(`Failed to send update metrics: ${String(i)}`);}}function _u(e){let t=Le(),r=`${e}@${O}`,n=t.plugins[r];return !n||n.length===0?null:{pluginKey:r,entry:n[0]}}async function Vr(e,t={}){let r=Date.now(),n=null;try{Me.debug(`[${e}] Acquiring lock...`),n=await Je();let o=_u(e);if(!o)throw Me.error(`[${e}] Plugin is not installed`),new Error(`Plugin "${e}" is not installed`);let{entry:i}=o,s=i.version,c=i.installPath;Me.debug(`[${e}] Fetching manifest...`);let l=(await Tt(e)).version;if(!s||!Re(s,l,t.force))throw Me.debug(`[${e}] Already up to date (v${s??"n/a"})`),new He(e,s??"unknown");Me.info(`[${e}] Updating v${s} \u2192 v${l}...`),await n(),n=null;try{let u=await Pe(e,{force:!0,skipMetrics:!0}),g=Date.now()-r;return await Mu(u.name,s,u.version,g,i.origin??"internal"),Me.debug(`[${e}] Updated successfully in ${g}ms`),{name:u.name,previousVersion:s,newVersion:u.version,path:u.path,duration_ms:g}}catch(u){Me.warn(`[${e}] Install failed, rolling back to v${s}...`),n=await Je();let g=Le(),v=`${e}@${O}`;throw g.plugins[v]&&(g.plugins[v][0].version=s,g.plugins[v][0].installPath=c,pt(g),Me.info(`[${e}] Rollback completed, restored to v${s}`)),u}}finally{n&&await n();}}var Ou=S("commands:helpers");async function ee(){let e=await D();if(!e)return k("Not authenticated. Run: flow auth login"),false;try{await Fe();}catch(t){return Ou.debug(`Token validation failed: ${String(t)}`),k("Session expired. Run: flow auth login"),false}return !e.starterKit||e.starterKit.trim()===""?(k("Starter kit not set. Run: flow auth login"),false):true}async function Ve(e){let t=co.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(p(e),n=>{t.close(),r(["y","yes"].includes(n.toLowerCase().trim()));});})}async function Rs(e){let t=co.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(p(e),n=>{t.close(),r(n.trim());});})}var Du=/^[^@]+@[^@]+$/;function Zt(e){return Du.test(e)}function kt(e){let t=e.indexOf("@");return t>0?e.slice(0,t):e}var Nu=/^[a-zA-Z0-9][a-zA-Z0-9._/-]*$/;function Ms(e){if(!Nu.test(e))throw new Error(`Invalid plugin name: "${e}". Plugin names must start with an alphanumeric character and contain only letters, digits, dots, hyphens, underscores, and slashes.`)}var Fu=/^[\w./:@?&=+#%-]+$/;function zr(e){let t=e.trim();if(!t)throw new Error("No marketplace source provided.");if(!Fu.test(t))throw new Error(`Invalid marketplace source: "${t}". Must be owner/repo or a URL (no spaces or special characters).`);return t}var Qt=S("claudeProxy"),mo="claude ",_s="flow ",uo=class extends Error{constructor(t){super(`Invalid install command: "${t}". Command must start with "claude " for security.`),this.name="InvalidInstallCommandError";}},po=class extends Error{constructor(t){super(`Disallowed subcommand: "${t}". Only "plugin install", "plugin marketplace add", "mcp add", and "mcp remove" are permitted.`),this.name="DisallowedSubcommandError";}},Uu=/^plugins?\s+(install|i)\s+|^plugins?\s+marketplace\s+add\s+|^mcp\s+(add|remove)\s+/;function Bu(e){Ds(e);let t=e.slice(mo.length);if(!Uu.test(t))throw new po(e)}var Wr=class extends Error{constructor(){super('Claude Code CLI not found. Ensure "claude" is installed and available on your PATH.'),this.name="ClaudeCliNotFoundError";}};function Ds(e){if(!e||!/^claude /.test(e))throw new uo(e)}async function le(e){Ds(e);let t=e.slice(mo.length).split(/\s+/).filter(Boolean),r=Ku(t);Qt.debug(`[${r}] Executing proxy command: claude ${t.join(" ")}`);let n=Date.now();try{let o=await execa("claude",t,{reject:!1}),i=Date.now()-n;return Qt.debug(`[${r}] Proxy command finished with exit code ${o.exitCode} in ${i}ms`),{name:r,command:e,exitCode:o.exitCode??1,stdout:o.stdout,stderr:o.stderr,duration_ms:i}}catch(o){throw Ns(o)?new Wr:o}}function Ku(e){return e.length>=3?e[2]:e.join(" ")}function Ns(e){return e instanceof Error&&"code"in e&&e.code==="ENOENT"}function ju(e){return e.startsWith(_s)?mo+e.slice(_s.length):e}var Ju=/^claude\s+(?:plugins?\s+(?:install|i)\s+|mcp\s+(?:add|remove)\s+)/;function Hu(e,t){return !t||e.includes("--scope")||!Ju.test(e)?e:`${e} --scope ${t}`}async function Fs(e,t){let r=e.split("&&").map(o=>ju(o.trim())).filter(Boolean).map(o=>Hu(o,t));if(r.length===0)throw new Error("Empty install command");for(let o of r)Bu(o);Qt.debug(`[installCommand] Executing ${r.length} command(s)`);let n=await le(r[0]);if(n.exitCode!==0)return n;for(let o=1;o<r.length;o++)if(n=await le(r[o]),n.exitCode!==0)return n;return n}async function Us(e,t,r){let n=kt(e),o=t?.trim();if(!o&&(o=(await Rs(`Plugin "${n}" could not be installed.
+If a marketplace is needed, enter the source (owner/repo or URL), or press Enter to skip: `))?.trim(),!o))throw new Error("No marketplace source provided. Cannot retry install.");o=zr(o),r?.(),Qt.debug(`[${n}] Adding marketplace via: claude plugin marketplace add ${o}`);try{let i=await execa("claude",["plugin","marketplace","add",o],{reject:!1});if(i.exitCode!==0)throw new Error(`Failed to add marketplace: ${i.stderr||"unknown error"}`);Qt.debug(`[${n}] Marketplace added successfully`);}catch(i){throw Ns(i)?new Wr:i}}var ze=S("installDispatcher");async function Bs(e,t,r){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"plugin",source:"external",scope:Br(r),version:"unknown",duration_ms:t,interface:A().interfaceType});}catch(n){ze.warn(`Failed to send external install metrics: ${String(n)}`);}}async function Ks(e,t){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"plugin",source:"external",error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:A().interfaceType});}catch(r){ze.warn(`Failed to send external install-failed metrics: ${String(r)}`);}}function fo(e,t){let r=kt(e);Ms(r);let n=["claude","plugin","install",r];return t&&n.push("--scope",t),n.join(" ")}async function go(e,t,r,n){let o=fo(e,n),i=kt(e);r?.onStatus?.(`Installing ${i}...`),ze.debug(`[${e}] Attempting install: ${o}`);let s=await le(o);return s.exitCode===0?s:(ze.debug(`[${e}] Install failed (exit ${s.exitCode}), attempting marketplace add`),r?.onError?.(s.stderr||`Install failed with exit code ${s.exitCode}`),t?r?.onStatus?.(`Adding marketplace for ${i}...`):r?.onPause?.(),await Us(e,t,()=>{t||r?.onResume?.(`Adding marketplace for ${i}...`);}),r?.onResume?.(`Retrying install for ${i}...`),ze.debug(`[${e}] Retrying install after marketplace add`),le(o))}async function js(e,t){if(e.origin===lr&&e.installCommand){ze.debug(`[${e.name}] Routing to external installer via installCommand`);let r=await Fs(e.installCommand,t?.scope);return r.exitCode===0?await Bs(e.name,r.duration_ms,t?.scope):await Ks(e.name,new Error(r.stderr||"Install failed")),r}if(Zt(e.name)){ze.debug(`[${e.name}] Routing to external installer via name pattern`);let r=await go(e.name,t?.marketplaceSource,void 0,t?.scope);return r.exitCode===0?await Bs(e.name,r.duration_ms,t?.scope):await Ks(e.name,new Error(r.stderr||"Install failed")),r}return ze.debug(`[${e.name}] Routing to internal installer`),Pe(e.name,t)}function Js(e){return "exitCode"in e}function Hs(){let e=K(s=>s.installedItems),t=K(s=>s.setInstalledItems),r=useCallback(async(s,c)=>{let a=await js(s,c);if(Js(a)&&a.exitCode!==0)throw new Error(a.stderr||"External installation failed");K.getState().loadFromDisk();},[]),n=useCallback(async(s,c)=>{await Jr(s,c),t(e.filter(a=>a.name!==s));},[e,t]),o=useCallback(async(s,c)=>{let l=e.find(u=>u.name===s)?.status==="enabled"?"disabled":"enabled";await Yt(s,l,c),t(e.map(u=>u.name===s?{...u,status:l}:u));},[e,t]),i=useCallback(async s=>{await Vr(s),K.getState().loadFromDisk();},[]);return {install:r,uninstall:n,toggle:o,update:i}}var Xr=S("mcp");function er(e,t){e.silent?ie({status:"error",mcp:t.name,...t.exitCode!==void 0&&{exitCode:t.exitCode},message:t.message}):k(`Failed to ${t.action} MCP "${t.name}": ${t.message}`);}function Vs(e,t){e.silent?Y({status:"success",mcp:t.name,command:t.command,duration_ms:t.durationMs}):(V(`MCP "${t.name}" ${t.actionPastTense} successfully`),e.verbose&&t.stdout&&I(t.stdout));}function Gu(e,t,r,n){let o=["claude","mcp","add","--transport",r,e];return t.length>0&&o.push(...t),n&&o.push("--scope",n),o.join(" ")}function yo(e,t){let r=["claude","mcp","remove",e];return t&&r.push("--scope",t),r.join(" ")}async function zs(e,t,r){if(!await ee())return 1;if(t.length===0){let i=r.transport==="http"?"a URL":"a command";return er(r,{name:e,action:"add",message:`${r.transport} transport requires ${i}`}),1}Xr.debug(`[${e}] Starting MCP add with args: ${t.join(" ")}`);let n=Gu(e,t,r.transport,r.scope);if(!r.force){let i=p(e),s=p(n);if(!await Ve(`Install external MCP "${i}"?
 This will run: ${s}
-[y/N] `))return Zr.debug(`[${e}] Installation cancelled by user`),I("Operation cancelled."),0}let o=r.silent?void 0:Oo({text:`Adding MCP "${p(e)}"...`}).start();try{let i=await ue(n);return o?.stop(),i.exitCode!==0?(rr(r,{name:e,action:"add",message:i.stderr||"Command failed",exitCode:i.exitCode}),!r.silent&&r.verbose&&i.stdout&&I(`stdout: ${i.stdout}`),1):(Qs(r,{name:e,actionPastTense:"added",command:n,durationMs:i.duration_ms,stdout:i.stdout}),0)}catch(i){return o?.stop(),rr(r,{name:e,action:"add",message:U(i)}),1}}async function ta(e,t){if(!await re())return 1;Zr.debug(`[${e}] Starting MCP remove`);let r=ho(e,t.scope);if(!t.force){let o=p(e),i=p(r);if(!await Xe(`Remove MCP "${o}"?
+[y/N] `))return Xr.debug(`[${e}] Installation cancelled by user`),I("Operation cancelled."),0}let o=r.silent?void 0:Mo({text:`Adding MCP "${p(e)}"...`}).start();try{let i=await le(n);return o?.stop(),i.exitCode!==0?(er(r,{name:e,action:"add",message:i.stderr||"Command failed",exitCode:i.exitCode}),!r.silent&&r.verbose&&i.stdout&&I(`stdout: ${i.stdout}`),1):(Vs(r,{name:e,actionPastTense:"added",command:n,durationMs:i.duration_ms,stdout:i.stdout}),0)}catch(i){return o?.stop(),er(r,{name:e,action:"add",message:N(i)}),1}}async function Ws(e,t){if(!await ee())return 1;Xr.debug(`[${e}] Starting MCP remove`);let r=yo(e,t.scope);if(!t.force){let o=p(e),i=p(r);if(!await Ve(`Remove MCP "${o}"?
 This will run: ${i}
-[y/N] `))return Zr.debug(`[${e}] Removal cancelled by user`),I("Operation cancelled."),0}let n=t.silent?void 0:Oo({text:`Removing MCP "${p(e)}"...`}).start();try{let o=await ue(r);return n?.stop(),o.exitCode!==0?(rr(t,{name:e,action:"remove",message:o.stderr||"Command failed",exitCode:o.exitCode}),!t.silent&&t.verbose&&o.stdout&&I(`stdout: ${o.stdout}`),1):(Qs(t,{name:e,actionPastTense:"removed",command:r,durationMs:o.duration_ms,stdout:o.stdout}),0)}catch(o){return n?.stop(),rr(t,{name:e,action:"remove",message:U(o)}),1}}$();function ra({selectedItem:e,selectedCatalogItem:t,items:r,closeMenu:n,clampIndex:o,notify:i}){let s=S("pluginHandlers"),c=f(y=>y.setLoading),{install:a,uninstall:l,toggle:u,update:g}=Ys(),v=async(y,R,A)=>{c(true,y),n();try{await R(),o(r.length),i(A,"success");}catch(G){let Y=G instanceof Error?G.message:"Something went wrong";s.error(`[withLoading] ${y} failed: ${Y}`),i(Y,"error");}finally{c(false);}};return {handleInstall:y=>{e&&t&&v(`Installing ${e.name}...`,()=>a(t,{scope:y}),"\u2713 Installed successfully");},handleUninstall:y=>{e&&v(`Uninstalling ${e.name}...`,()=>l(e.name,y),"\u2713 Uninstalled");},handleToggleStatus:y=>{if(!e)return;let R=e.status==="enabled";v(R?`Disabling ${e.name}...`:`Enabling ${e.name}...`,()=>u(e.name,y),R?"\u2713 Disabled":"\u2713 Enabled");},handleUpdate:()=>{if(!e)return;let y=t?` to v${t.version}`:"";(async()=>{c(true,`Updating ${e.name}${y}...`),n();try{await g(e.name),o(r.length),i(`\u2713 Updated ${e.name}${y}`,"success");}catch(A){if(A instanceof qe)i(A.message,"info");else {let G=A instanceof Error?A.message:"Something went wrong";s.error(`[handleUpdate] ${e.name} failed: ${G}`),i(G,"error");}}finally{c(false);}})();},handleMcpConfigUninstall:y=>{e&&v(`Removing MCP ${e.name}...`,async()=>{let R=ho(e.name,y),A=await ue(R);if(A.exitCode!==0)throw new Error(A.stderr||"MCP removal failed");J.getState().loadFromDisk();},"\u2713 MCP removed");}}}M();var nr=["local","project","user"],qu=new Set(["--transport","--scope","-s"]);function na(e){let t=e.split(/\s+/).filter(Boolean),r=t.indexOf("add");if(r===-1)return null;let n=r+1;for(;n<t.length;){let o=t[n];if(qu.has(o))n+=2;else if(o.startsWith("-"))n+=1;else return o.replace(/^["']|["']$/g,"")}return null}function or(e,t){return t?`${e}::${t}`:e}function wo(e){return e===N?Mt:ur}function oa(e){return {name:p(e.name),version:e.version?p(e.version):e.version,description:e.description?p(e.description):e.description,authorName:e.author.name?p(e.author.name):e.author.name,updateAvailable:e.updateAvailable,type:e.type??"plugin",origin:e.origin??Mt}}function ia(e,t){let r=wo(e.marketplace);return {name:p(e.name),version:e.version?p(e.version):e.version,description:e.description?p(e.description):e.description,authorName:e.author?.name?p(e.author.name):e.author?.name,status:e.status,scope:e.scope,updateAvailable:e.updateAvailable,installedAt:e.installedAt,type:t?.type??e.type??"plugin",origin:t?.origin??r}}function sa(e){let t=new Map;for(let r of e){if(!r.scope)continue;let n=t.get(r.scope)??[];n.push(r),t.set(r.scope,n);}return nr.filter(r=>t.has(r)).map(r=>({scope:r,label:Ot[r].label,pathHint:Ot[r].pathHint,items:t.get(r)??[]}))}function aa(e){let t=r=>{if(!r)return 1/0;let n=nr.indexOf(r);return n===-1?1/0:n};return [...e].sort((r,n)=>t(r.scope)-t(n.scope))}function la({catalog:e,installedItems:t,activeTab:r,catalogFilters:n,searchQuery:o}){let i=useMemo(()=>new Set(t.map(d=>or(d.name,d.author?.name))),[t]),s=useMemo(()=>new Set(t.filter(d=>d.type==="mcp").map(d=>d.name.toLowerCase())),[t]),c=useMemo(()=>{let d=new Map(e.map(E=>[or(E.name,E.author.name),E]));return t.map(E=>{let m=d.get(or(E.name,E.author?.name)),h=m?.version,T=!!h&&!!E.version&&Oe(E.version,h);return {...E,updateAvailable:T,catalogItem:m}})},[t,e]),a=useMemo(()=>r==="discover"?e.filter(d=>{if(i.has(or(d.name,d.author.name)))return  false;if(d.type==="mcp"){let E=d.installCommand?na(d.installCommand)?.toLowerCase():null;if(s.has(d.name.toLowerCase())||E&&s.has(E))return  false}return  true}).map(d=>oa(d)):c.map(d=>ia(d,d.catalogItem)),[r,e,i,s,c]),l=useMemo(()=>a.filter(d=>{let E=d.type??"plugin";if(!n.types.has(E))return  false;let m=d.origin??"internal";return n.origins.has(m)}),[a,n]),u=useMemo(()=>{let{types:d}=n;if(d.size===1){if(d.has("skill"))return "skills";if(d.has("mcp"))return "MCPs";if(d.has("plugin"))return "plugins"}return "items"},[n]),g=useMemo(()=>r==="installed"?o?`No ${u} found for '${o}' \u2014 explore the Discover tab!`:`No ${u} installed \u2014 explore the Discover tab!`:o?`No ${u} found for '${o}'`:`No ${u} available in the catalog`,[r,o,u]),v=useMemo(()=>d=>d?e.find(E=>E.name===d.name&&E.author.name===d.authorName)??null:null,[e]);return {items:l,emptyMessage:g,getSelectedCatalogItem:v}}function ca(){let[e,t]=useState([]),[r,n]=useState(true),[o,i]=useState(null),s=useRef(false),c=useCallback(async()=>{n(true),i(null);try{let a=await Te();t(a),s.current||(s.current=!0,b(x.CLI_CATALOG_VIEWED,{interface:"tui",filter_type:"all",result_count:a.length}).catch(()=>{}));}catch(a){i(a instanceof Error?a:new Error(String(a))),t([]);}finally{n(false);}},[]);return useEffect(()=>{c();},[c]),{catalog:e,isLoading:r,error:o,refetch:c}}function ua(){return {items:J(t=>t.installedItems)}}$();var Qu=S("catalog");function pa(){let e=f(O=>O.activeTab),t=f(O=>O.notification),r=f(O=>O.loading),n=f(O=>O.loadingMessage),o=f(O=>O.catalogError),i=f(O=>O.setCatalogError),s=f(O=>O.catalogFilters),c=ee(O=>O.query),{catalog:a,isLoading:l,error:u,refetch:g}=ca(),{items:v}=ua(),d=J(O=>O.loadFromDisk),{items:E,emptyMessage:m,getSelectedCatalogItem:h}=la({catalog:a,installedItems:v,activeTab:e,catalogFilters:s,searchQuery:c}),{actionMenuOpen:T,closeMenu:y,selectedIndex:R,clampIndex:A,filteredItems:G}=Ds({listLength:E.length}),Y=G(E),Le=useMemo(()=>e!=="installed"?Y:aa(Y),[e,Y]),gn=useMemo(()=>e==="installed"?sa(Le):[],[e,Le]),z=Le[R]??null,w=useMemo(()=>h(z),[h,z]),{notify:oe}=Fs(),{handleInstall:V,handleUninstall:B,handleToggleStatus:yn,handleUpdate:Sn,handleMcpConfigUninstall:Ko}=ra({selectedItem:z,selectedCatalogItem:w,items:E,closeMenu:y,clampIndex:A,notify:oe});return useEffect(()=>{d();},[]),useEffect(()=>{A(Le.length);},[Le.length,A]),useEffect(()=>{u&&(Qu.error(`[catalog] ${u instanceof Error?u.message:String(u)}`),i("Failed to load catalog"));},[u]),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Rr,{}),jsx(Ri,{}),jsx(Xi,{filteredItems:Le,groups:gn,emptyMessage:m}),(r||l)&&jsx(Dr,{message:r?n:"Loading catalog..."}),o&&!l&&e==="discover"&&jsx(Nr,{message:o,onRetry:()=>{i(null),g();},onBack:()=>i(null)}),t&&jsx(Zi,{message:t.message,type:t.type}),T&&z&&(e==="discover"?jsx(cs,{itemName:z.name,onInstall:V,onClose:y}):z.type==="mcp"?jsx(gs,{itemName:z.name,itemScope:z.scope??"user",onUninstall:Ko,onClose:y}):jsx(ds,{itemName:z.name,itemScope:z.scope??"user",itemStatus:z.status??"enabled",updateAvailable:z.updateAvailable??false,catalogVersion:w?.version,onUninstall:B,onToggleStatus:O=>yn(O),onUpdate:Sn,onClose:y})),jsx(Or,{})]})}var P=create((e,t)=>({starterKits:[],selectedStarterKitIndex:0,selectedStarterKit:null,plugins:[],pluginCursorIndex:0,step:"bundleList",isLoadingStarterKits:false,starterKitsError:null,successCount:0,failedCount:0,summaryActionIndex:0,setStarterKits:r=>e({starterKits:r}),setSelectedStarterKitIndex:r=>e({selectedStarterKitIndex:r}),selectStarterKit:r=>{let n=new Set(J.getState().installedItems.map(o=>o.name));e({selectedStarterKit:r,plugins:r.plugins.map(o=>({name:o,selected:true,status:n.has(o)?"success":"pending",installed:n.has(o)})),pluginCursorIndex:0,step:"bundleDetail"});},setPluginCursorIndex:r=>e({pluginCursorIndex:r}),setStep:r=>e({step:r}),setPluginStatus:(r,n,o)=>{let i=t().plugins.map(s=>s.name===r?{...s,status:n,error:o}:s);e({plugins:i});},setIsLoadingStarterKits:r=>e({isLoadingStarterKits:r}),setStarterKitsError:r=>e({starterKitsError:r}),setSummaryActionIndex:r=>e({summaryActionIndex:r}),computeSummary:()=>{let n=t().plugins.filter(o=>o.selected);e({successCount:n.filter(o=>o.status==="success").length,failedCount:n.filter(o=>o.status==="failed").length});},resetForRetry:()=>{let r=t().plugins.map(n=>n.status==="failed"?{...n,status:"pending",error:void 0}:n);e({plugins:r,step:"installing"});},goBackToList:()=>e({selectedStarterKit:null,plugins:[],pluginCursorIndex:0,step:"bundleList"})}));var np=3;function ma(){let e=P(a=>a.setStarterKits),t=P(a=>a.setIsLoadingStarterKits),r=P(a=>a.setStarterKitsError),n=P(a=>a.setPluginStatus),o=P(a=>a.setStep),i=P(a=>a.computeSummary),s=useCallback(async()=>{t(true),r(null);try{let a=await Jr();e(a);}catch(a){r(a instanceof Error?a.message:String(a));}finally{t(false);}},[t,r,e]);useEffect(()=>{J.getState().loadFromDisk(),s();},[s]);let c=useCallback(async()=>{let a=P.getState().plugins.filter(u=>u.selected&&u.status==="pending");for(let u of a){n(u.name,"installing");let g="",v=false;for(let d=1;d<=np;d++)try{await ke(u.name),n(u.name,"success"),v=!0;break}catch(E){if(E instanceof Ee){n(u.name,"success"),v=true;break}g=E instanceof Error?E.message:"Unknown error";}v||(n(u.name,"failed",g),b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:u.name,tool_type:"plugin",source:"internal",error_code:"install_failed",error_message:g,interface:L().interfaceType}).catch(()=>{}));}let l=lt();at("summary_review"),b(x.CLI_STEP_COMPLETED,{step:"tool_installation",duration_ms:l}).catch(()=>{}),J.getState().loadFromDisk(),i(),o("summary");},[n,i,o]);return {loadStarterKits:s,installSelected:c}}var ir={cursorDelta:0,confirm:false,back:false};function fa(e,t){return t.upArrow?{...ir,cursorDelta:-1}:t.downArrow?{...ir,cursorDelta:1}:t.escape?{...ir,back:true}:t.return?{...ir,confirm:true}:ir}var op={cursorDelta:0,select:false};function ga(e,t){return t.upArrow?{cursorDelta:-1,select:false}:t.downArrow?{cursorDelta:1,select:false}:t.return?{cursorDelta:0,select:true}:op}var ya=$c.memo(function({starterKit:t,isSelected:r}){return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:r?"cyan":"gray",children:r?"\u203A ":"\u25CB "}),jsx(Text,{bold:r,color:r?"cyan":"white",children:p(t.name)}),jsxs(Text,{dimColor:true,children:[" \xB7 ",t.plugins.length," ",t.plugins.length===1?"plugin":"plugins"]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:p(t.description)})})]})});var To=5;function Sa({onRetry:e}){let t=P(u=>u.starterKits),r=P(u=>u.selectedStarterKitIndex),n=P(u=>u.isLoadingStarterKits),o=P(u=>u.starterKitsError);if(n)return jsx(Dr,{message:"Loading Starter Kits..."});if(o)return jsx(Nr,{message:o,onRetry:e,onBack:e});if(t.length===0)return jsx(kt,{message:"No Starter Kits available."});let i=Math.max(0,r-Math.floor(To/2)),s=Math.min(t.length,i+To);s===t.length&&(i=Math.max(0,s-To));let c=t.slice(i,s),a=i,l=t.length-s;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Select a Starter Kit to get started"})}),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",a," more above"]})}),c.map((u,g)=>jsx(ya,{starterKit:u,isSelected:i+g===r},u.slug)),l>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",l," more below"]})})]})}var wa=$c.memo(function({plugin:t,isCursor:r}){return jsxs(Box,{children:[jsx(Text,{color:r?"cyan":"gray",children:r?"\u203A ":"  "}),jsx(Text,{color:"cyan",children:"\u2022"}),jsxs(Text,{bold:r,color:r?"cyan":"white",children:[" ",p(t.name)]}),t.installed&&jsx(Text,{color:"green",children:" (installed)"})]})});var $o=8;function xa(){let e=P(u=>u.selectedStarterKit),t=P(u=>u.plugins),r=P(u=>u.pluginCursorIndex),n=useRef(false);if(useEffect(()=>{e&&!n.current&&(n.current=true,b(x.CLI_KIT_DISPLAYED,{bundle_slug:e.slug,tool_count:t.length}).catch(()=>{}));},[e,t.length]),!e)return jsx(Text,{dimColor:true,children:"No Starter Kit selected."});let o=t.filter(u=>u.installed).length,i=Math.max(0,r-Math.floor($o/2)),s=Math.min(t.length,i+$o);s===t.length&&(i=Math.max(0,s-$o));let c=t.slice(i,s),a=i,l=t.length-s;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:[jsx(Text,{bold:true,color:"cyan",children:p(e.name)}),jsx(Text,{dimColor:true,children:p(e.description)})]}),jsx(Box,{paddingX:1,paddingBottom:1,children:jsxs(Text,{children:[t.length," plugins to install",o>0&&` \xB7 ${o} already installed`]})}),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",a," more above"]})}),c.map((u,g)=>jsx(wa,{plugin:u,isCursor:i+g===r},u.name)),l>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",l," more below"]})})]})}var mp=["Retry failed","Continue anyway"];function Ia({name:e,status:t,error:r}){let n=p(e);return t==="installing"?jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(Vc,{type:"dots"})}),jsxs(Text,{color:"cyan",children:[" ",n]})]}):t==="success"?jsx(Box,{children:jsxs(Text,{color:"green",children:["\u2713 ",n]})}):t==="failed"?jsxs(Box,{children:[jsxs(Text,{color:"red",children:["\u2717 ",n]}),r&&jsxs(Text,{dimColor:true,children:[" \u2014 ",p(r)]})]}):jsx(Box,{children:jsxs(Text,{dimColor:true,children:["\u25CB ",n]})})}function ba({onComplete:e,onRetry:t}){let r=P(l=>l.plugins),n=P(l=>l.step),o=P(l=>l.successCount),i=P(l=>l.failedCount),s=P(l=>l.summaryActionIndex),c=r.filter(l=>l.selected),a=useRef(false);return useEffect(()=>{if(n==="summary"&&i===0&&!a.current){a.current=true;let l=setTimeout(e,1500);return ()=>clearTimeout(l)}},[n,i,e]),n==="installing"?jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Installing plugins..."})}),jsx(Box,{flexDirection:"column",paddingX:1,children:c.map(l=>jsx(Ia,{name:l.name,status:l.status,error:l.error},l.name))})]}):jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Installation Complete"})}),jsxs(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:[o>0&&jsxs(Text,{color:"green",children:["\u2713 ",o," ",o===1?"plugin":"plugins"," installed successfully"]}),i>0&&jsxs(Text,{color:"red",children:["\u2717 ",i," ",i===1?"plugin":"plugins"," failed"]})]}),i>0&&jsx(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:c.filter(l=>l.status==="failed").map(l=>jsx(Ia,{name:l.name,status:l.status,error:l.error},l.name))}),i>0&&jsx(Box,{flexDirection:"column",paddingX:1,children:mp.map((l,u)=>jsx(Box,{children:jsxs(Text,{bold:u===s,color:u===s?"cyan":void 0,children:[u===s?"\u203A ":"  ",l]})},l))}),i===0&&jsx(Box,{paddingX:1,children:jsx(Text,{dimColor:true,children:"Proceeding to main screen..."})})]})}function va(){let e=P(w=>w.step),t=P(w=>w.starterKits),r=P(w=>w.selectedStarterKitIndex),n=P(w=>w.setSelectedStarterKitIndex),o=P(w=>w.selectStarterKit),i=P(w=>w.plugins),s=P(w=>w.pluginCursorIndex),c=P(w=>w.setPluginCursorIndex),a=P(w=>w.setStep),l=P(w=>w.summaryActionIndex),u=P(w=>w.setSummaryActionIndex),g=P(w=>w.failedCount),v=P(w=>w.resetForRetry),d=P(w=>w.goBackToList),E=f(w=>w.setScreen),m=f(w=>w.setFocus),h=f(w=>w.focus),T=ge(w=>w.setJustAuthenticated),y=ge(w=>w.justAuthenticated),{loadStarterKits:R,installSelected:A}=ma(),G=useRef(false);useEffect(()=>{e==="bundleList"?(m("bundleList"),G.current||(G.current=true,at("bundle_selection"))):m(e==="bundleDetail"?"bundleDetail":"installProgress");},[e,m]);let Y=useCallback(async()=>{let w=P.getState().selectedStarterKit;if(w){let V=await F();V&&await it({...V,starterKit:w.slug});}b(x.CLI_STEP_COMPLETED,{step:"summary_review",duration_ms:lt()}).catch(()=>{});let{successCount:oe}=P.getState();b(x.CLI_ONBOARDING_COMPLETED,{duration_ms:Je(),tools_installed_count:oe}).catch(()=>{}),T(false),m("list"),E("main");},[T,m,E]),Le=useCallback(()=>{v(),A();},[v,A]),gn=useCallback(()=>{R();},[R]),z=useCallback(()=>{m("list"),E("main");},[m,E]);return useInput((w,oe)=>{if(oe.escape)Cr("esc"),z();else if(oe.upArrow&&r>0)n(r-1);else if(oe.downArrow&&r<t.length-1)n(r+1);else if(oe.return&&t.length>0){let V=lt();o(t[r]),at("kit_display"),b(x.CLI_STEP_COMPLETED,{step:"bundle_selection",duration_ms:V}).catch(()=>{});}},{isActive:h==="bundleList"}),useInput((w,oe)=>{let V=fa(w,oe);if(V.cursorDelta!==0){let B=s+V.cursorDelta;B>=0&&B<i.length&&c(B);}if(V.confirm){let B=P.getState().selectedStarterKit;B&&(async()=>(await F())?.starterKit!==B.slug&&b(x.CLI_KIT_ACCEPTED,{bundle_slug:B.slug}).catch(()=>{}))();let yn=lt();at("kit_confirmation"),b(x.CLI_STEP_COMPLETED,{step:"kit_display",duration_ms:yn}).catch(()=>{});let Sn=lt();at("tool_installation"),b(x.CLI_STEP_COMPLETED,{step:"kit_confirmation",duration_ms:Sn}).catch(()=>{}),a("installing"),A();}if(V.back){let B=P.getState().selectedStarterKit;B&&b(x.CLI_KIT_REJECTED,{bundle_slug:B.slug}).catch(()=>{}),d();}},{isActive:h==="bundleDetail"}),useInput((w,oe)=>{if(g===0)return;let V=ga(w,oe);if(V.cursorDelta!==0){let B=l+V.cursorDelta;B>=0&&B<=1&&u(B);}V.select&&(l===0?Le():Y());},{isActive:h==="installProgress"&&e==="summary"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Rr,{}),jsxs(Box,{flexDirection:"column",paddingX:1,marginBottom:1,children:[jsx(Text,{dimColor:true,children:"The data collected during setup is used solely to improve"}),jsx(Text,{dimColor:true,children:"Flow's internal tools and will not be shared externally."}),!y&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"yellow",children:"Welcome back! We noticed your Starter Kit is not set up yet. Choose a Starter Kit below to get your recommended tools."})})]}),jsxs(Box,{flexDirection:"column",flexGrow:1,children:[e==="bundleList"&&jsx(Sa,{onRetry:gn}),e==="bundleDetail"&&jsx(xa,{}),(e==="installing"||e==="summary")&&jsx(ba,{onComplete:Y,onRetry:Le})]}),jsx(Or,{})]})}$();var Sp=S("app"),hp={auth:Ti,bundleSetup:va,main:pa};function Ta(){f.getState().setScreen("auth"),f.getState().setFocus("auth");}async function Ca(){let e=await F();if(!e){Ta();return}try{await Be();}catch(o){Sp.debug(`Token validation failed: ${String(o)}`),Ta();return}b(x.CLI_SESSION_STARTED,{cli_version:He,os:process.platform,node_version:process.version,duration_ms:Je(),interface:"tui"}).catch(()=>{});let{clientSecret:t,...r}=e;ge.getState().setCredentials(r),!e.starterKit||e.starterKit.trim()===""?(f.getState().setScreen("bundleSetup"),f.getState().setFocus("bundleList")):(f.getState().setScreen("main"),f.getState().setFocus("list"));}function $a(){let{columns:e,rows:t}=useWindowSize(),r=f(i=>i.screen),n=hp[r],{pendingExit:o}=Pi();return n?jsxs(Box,{flexDirection:"column",width:e,height:t,children:[jsx(n,{}),o&&jsx(Box,{paddingX:1,children:jsx(Text,{color:"yellow",children:"Press Ctrl+C again to quit"})})]}):jsxs(Text,{color:"red",children:["Unknown screen: ",r]})}$();var Ae=S("auth");function La(){Z.clearFallbackFile(),vr();}var wp=3,Aa=3,Ra=`  \u2139 The data collected during setup is used solely to improve
+[y/N] `))return Xr.debug(`[${e}] Removal cancelled by user`),I("Operation cancelled."),0}let n=t.silent?void 0:Mo({text:`Removing MCP "${p(e)}"...`}).start();try{let o=await le(r);return n?.stop(),o.exitCode!==0?(er(t,{name:e,action:"remove",message:o.stderr||"Command failed",exitCode:o.exitCode}),!t.silent&&t.verbose&&o.stdout&&I(`stdout: ${o.stdout}`),1):(Vs(t,{name:e,actionPastTense:"removed",command:r,durationMs:o.duration_ms,stdout:o.stdout}),0)}catch(o){return n?.stop(),er(t,{name:e,action:"remove",message:N(o)}),1}}function qs({selectedItem:e,selectedCatalogItem:t,items:r,closeMenu:n,clampIndex:o,notify:i}){let s=S("pluginHandlers"),c=f(y=>y.setLoading),{install:a,uninstall:l,toggle:u,update:g}=Hs(),v=async(y,L,$)=>{c(true,y),n();try{await L(),o(r.length),i($,"success");}catch(H){let q=H instanceof Error?H.message:"Something went wrong";s.error(`[withLoading] ${y} failed: ${q}`),i(q,"error");}finally{c(false);}};return {handleInstall:y=>{e&&t&&v(`Installing ${e.name}...`,()=>a(t,{scope:y}),"\u2713 Installed successfully");},handleUninstall:y=>{e&&v(`Uninstalling ${e.name}...`,()=>l(e.name,y),"\u2713 Uninstalled");},handleToggleStatus:y=>{if(!e)return;let L=e.status==="enabled";v(L?`Disabling ${e.name}...`:`Enabling ${e.name}...`,()=>u(e.name,y),L?"\u2713 Disabled":"\u2713 Enabled");},handleUpdate:()=>{if(!e)return;let y=t?` to v${t.version}`:"";(async()=>{c(true,`Updating ${e.name}${y}...`),n();try{await g(e.name),o(r.length),i(`\u2713 Updated ${e.name}${y}`,"success");}catch($){if($ instanceof He)i($.message,"info");else {let H=$ instanceof Error?$.message:"Something went wrong";s.error(`[handleUpdate] ${e.name} failed: ${H}`),i(H,"error");}}finally{c(false);}})();},handleMcpConfigUninstall:y=>{e&&v(`Removing MCP ${e.name}...`,async()=>{let L=yo(e.name,y),$=await le(L);if($.exitCode!==0)throw new Error($.stderr||"MCP removal failed");K.getState().loadFromDisk();},"\u2713 MCP removed");}}}var tr=["local","project","user"],Vu=new Set(["--transport","--scope","-s"]);function Xs(e){let t=e.split(/\s+/).filter(Boolean),r=t.indexOf("add");if(r===-1)return null;let n=r+1;for(;n<t.length;){let o=t[n];if(Vu.has(o))n+=2;else if(o.startsWith("-"))n+=1;else return o.replace(/^["']|["']$/g,"")}return null}function rr(e,t){return t?`${e}::${t}`:e}function So(e){return e===O?Lt:lr}function Ys(e){return {name:p(e.name),version:e.version?p(e.version):e.version,description:e.description?p(e.description):e.description,authorName:e.author.name?p(e.author.name):e.author.name,updateAvailable:e.updateAvailable,type:e.type??"plugin",origin:e.origin??Lt}}function Zs(e,t){let r=So(e.marketplace);return {name:p(e.name),version:e.version?p(e.version):e.version,description:e.description?p(e.description):e.description,authorName:e.author?.name?p(e.author.name):e.author?.name,status:e.status,scope:e.scope,updateAvailable:e.updateAvailable,installedAt:e.installedAt,type:t?.type??e.type??"plugin",origin:t?.origin??r}}function Qs(e){let t=new Map;for(let r of e){if(!r.scope)continue;let n=t.get(r.scope)??[];n.push(r),t.set(r.scope,n);}return tr.filter(r=>t.has(r)).map(r=>({scope:r,label:Rt[r].label,pathHint:Rt[r].pathHint,items:t.get(r)??[]}))}function ea(e){let t=r=>{if(!r)return 1/0;let n=tr.indexOf(r);return n===-1?1/0:n};return [...e].sort((r,n)=>t(r.scope)-t(n.scope))}function ta({catalog:e,installedItems:t,activeTab:r,catalogFilters:n,searchQuery:o}){let i=useMemo(()=>new Set(t.map(d=>rr(d.name,d.author?.name))),[t]),s=useMemo(()=>new Set(t.filter(d=>d.type==="mcp").map(d=>d.name.toLowerCase())),[t]),c=useMemo(()=>{let d=new Map(e.map(E=>[rr(E.name,E.author.name),E]));return t.map(E=>{let m=d.get(rr(E.name,E.author?.name)),h=m?.version,T=!!h&&!!E.version&&Re(E.version,h);return {...E,updateAvailable:T,catalogItem:m}})},[t,e]),a=useMemo(()=>r==="discover"?e.filter(d=>{if(i.has(rr(d.name,d.author.name)))return  false;if(d.type==="mcp"){let E=d.installCommand?Xs(d.installCommand)?.toLowerCase():null;if(s.has(d.name.toLowerCase())||E&&s.has(E))return  false}return  true}).map(d=>Ys(d)):c.map(d=>Zs(d,d.catalogItem)),[r,e,i,s,c]),l=useMemo(()=>a.filter(d=>{let E=d.type??"plugin";if(!n.types.has(E))return  false;let m=d.origin??"internal";return n.origins.has(m)}),[a,n]),u=useMemo(()=>{let{types:d}=n;if(d.size===1){if(d.has("skill"))return "skills";if(d.has("mcp"))return "MCPs";if(d.has("plugin"))return "plugins"}return "items"},[n]),g=useMemo(()=>r==="installed"?o?`No ${u} found for '${o}' \u2014 explore the Discover tab!`:`No ${u} installed \u2014 explore the Discover tab!`:o?`No ${u} found for '${o}'`:`No ${u} available in the catalog`,[r,o,u]),v=useMemo(()=>d=>d?e.find(E=>E.name===d.name&&E.author.name===d.authorName)??null:null,[e]);return {items:l,emptyMessage:g,getSelectedCatalogItem:v}}function ra(){let[e,t]=useState([]),[r,n]=useState(true),[o,i]=useState(null),s=useRef(false),c=useCallback(async()=>{n(true),i(null);try{let a=await ve();t(a),s.current||(s.current=!0,b(x.CLI_CATALOG_VIEWED,{interface:"tui",filter_type:"all",result_count:a.length}).catch(()=>{}));}catch(a){i(a instanceof Error?a:new Error(String(a))),t([]);}finally{n(false);}},[]);return useEffect(()=>{c();},[c]),{catalog:e,isLoading:r,error:o,refetch:c}}function na(){return {items:K(t=>t.installedItems)}}var Yu=S("catalog");function oa(){let e=f(M=>M.activeTab),t=f(M=>M.notification),r=f(M=>M.loading),n=f(M=>M.loadingMessage),o=f(M=>M.catalogError),i=f(M=>M.setCatalogError),s=f(M=>M.catalogFilters),c=Z(M=>M.query),{catalog:a,isLoading:l,error:u,refetch:g}=ra(),{items:v}=na(),d=K(M=>M.loadFromDisk),{items:E,emptyMessage:m,getSelectedCatalogItem:h}=ta({catalog:a,installedItems:v,activeTab:e,catalogFilters:s,searchQuery:c}),{actionMenuOpen:T,closeMenu:y,selectedIndex:L,clampIndex:$,filteredItems:H}=$s({listLength:E.length}),q=H(E),Ce=useMemo(()=>e!=="installed"?q:ea(q),[e,q]),mn=useMemo(()=>e==="installed"?Qs(Ce):[],[e,Ce]),G=Ce[L]??null,w=useMemo(()=>h(G),[h,G]),{notify:re}=Ls(),{handleInstall:J,handleUninstall:B,handleToggleStatus:fn,handleUpdate:gn,handleMcpConfigUninstall:Fo}=qs({selectedItem:G,selectedCatalogItem:w,items:E,closeMenu:y,clampIndex:$,notify:re});return useEffect(()=>{d();},[]),useEffect(()=>{$(Ce.length);},[Ce.length,$]),useEffect(()=>{u&&(Yu.error(`[catalog] ${u instanceof Error?u.message:String(u)}`),i("Failed to load catalog"));},[u]),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Ar,{}),jsx(Ei,{}),jsx(Ji,{filteredItems:Ce,groups:mn,emptyMessage:m}),(r||l)&&jsx(_r,{message:r?n:"Loading catalog..."}),o&&!l&&e==="discover"&&jsx(Or,{message:o,onRetry:()=>{i(null),g();},onBack:()=>i(null)}),t&&jsx(Gi,{message:t.message,type:t.type}),T&&G&&(e==="discover"?jsx(rs,{itemName:G.name,onInstall:J,onClose:y}):G.type==="mcp"?jsx(ls,{itemName:G.name,itemScope:G.scope??"user",onUninstall:Fo,onClose:y}):jsx(is,{itemName:G.name,itemScope:G.scope??"user",itemStatus:G.status??"enabled",updateAvailable:G.updateAvailable??false,catalogVersion:w?.version,onUninstall:B,onToggleStatus:M=>fn(M),onUpdate:gn,onClose:y})),jsx(Mr,{})]})}var P=create((e,t)=>({starterKits:[],selectedStarterKitIndex:0,selectedStarterKit:null,plugins:[],pluginCursorIndex:0,step:"bundleList",isLoadingStarterKits:false,starterKitsError:null,successCount:0,failedCount:0,summaryActionIndex:0,setStarterKits:r=>e({starterKits:r}),setSelectedStarterKitIndex:r=>e({selectedStarterKitIndex:r}),selectStarterKit:r=>{let n=new Set(K.getState().installedItems.map(o=>o.name));e({selectedStarterKit:r,plugins:r.plugins.map(o=>({name:o,selected:true,status:n.has(o)?"success":"pending",installed:n.has(o)})),pluginCursorIndex:0,step:"bundleDetail"});},setPluginCursorIndex:r=>e({pluginCursorIndex:r}),setStep:r=>e({step:r}),setPluginStatus:(r,n,o)=>{let i=t().plugins.map(s=>s.name===r?{...s,status:n,error:o}:s);e({plugins:i});},setIsLoadingStarterKits:r=>e({isLoadingStarterKits:r}),setStarterKitsError:r=>e({starterKitsError:r}),setSummaryActionIndex:r=>e({summaryActionIndex:r}),computeSummary:()=>{let n=t().plugins.filter(o=>o.selected);e({successCount:n.filter(o=>o.status==="success").length,failedCount:n.filter(o=>o.status==="failed").length});},resetForRetry:()=>{let r=t().plugins.map(n=>n.status==="failed"?{...n,status:"pending",error:void 0}:n);e({plugins:r,step:"installing"});},goBackToList:()=>e({selectedStarterKit:null,plugins:[],pluginCursorIndex:0,step:"bundleList"})}));var tp=3;function sa(){let e=P(a=>a.setStarterKits),t=P(a=>a.setIsLoadingStarterKits),r=P(a=>a.setStarterKitsError),n=P(a=>a.setPluginStatus),o=P(a=>a.setStep),i=P(a=>a.computeSummary),s=useCallback(async()=>{t(true),r(null);try{let a=await Kr();e(a);}catch(a){r(a instanceof Error?a.message:String(a));}finally{t(false);}},[t,r,e]);useEffect(()=>{K.getState().loadFromDisk(),s();},[s]);let c=useCallback(async()=>{let a=P.getState().plugins.filter(u=>u.selected&&u.status==="pending");for(let u of a){n(u.name,"installing");let g="",v=false;for(let d=1;d<=tp;d++)try{await Pe(u.name),n(u.name,"success"),v=!0;break}catch(E){if(E instanceof be){n(u.name,"success"),v=true;break}g=E instanceof Error?E.message:"Unknown error";}v||(n(u.name,"failed",g),b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:u.name,tool_type:"plugin",source:"internal",error_code:"install_failed",error_message:g,interface:A().interfaceType}).catch(()=>{}));}let l=ot();nt("summary_review"),b(x.CLI_STEP_COMPLETED,{step:"tool_installation",duration_ms:l}).catch(()=>{}),K.getState().loadFromDisk(),i(),o("summary");},[n,i,o]);return {loadStarterKits:s,installSelected:c}}var nr={cursorDelta:0,confirm:false,back:false};function aa(e,t){return t.upArrow?{...nr,cursorDelta:-1}:t.downArrow?{...nr,cursorDelta:1}:t.escape?{...nr,back:true}:t.return?{...nr,confirm:true}:nr}var rp={cursorDelta:0,select:false};function la(e,t){return t.upArrow?{cursorDelta:-1,select:false}:t.downArrow?{cursorDelta:1,select:false}:t.return?{cursorDelta:0,select:true}:rp}var ca=kc.memo(function({starterKit:t,isSelected:r}){return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:r?"cyan":"gray",children:r?"\u203A ":"\u25CB "}),jsx(Text,{bold:r,color:r?"cyan":"white",children:p(t.name)}),jsxs(Text,{dimColor:true,children:[" \xB7 ",t.plugins.length," ",t.plugins.length===1?"plugin":"plugins"]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:p(t.description)})})]})});var Po=5;function ua({onRetry:e}){let t=P(u=>u.starterKits),r=P(u=>u.selectedStarterKitIndex),n=P(u=>u.isLoadingStarterKits),o=P(u=>u.starterKitsError);if(n)return jsx(_r,{message:"Loading Starter Kits..."});if(o)return jsx(Or,{message:o,onRetry:e,onBack:e});if(t.length===0)return jsx(Pt,{message:"No Starter Kits available."});let i=Math.max(0,r-Math.floor(Po/2)),s=Math.min(t.length,i+Po);s===t.length&&(i=Math.max(0,s-Po));let c=t.slice(i,s),a=i,l=t.length-s;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Select a Starter Kit to get started"})}),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",a," more above"]})}),c.map((u,g)=>jsx(ca,{starterKit:u,isSelected:i+g===r},u.slug)),l>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",l," more below"]})})]})}var da=kc.memo(function({plugin:t,isCursor:r}){return jsxs(Box,{children:[jsx(Text,{color:r?"cyan":"gray",children:r?"\u203A ":"  "}),jsx(Text,{color:"cyan",children:"\u2022"}),jsxs(Text,{bold:r,color:r?"cyan":"white",children:[" ",p(t.name)]}),t.installed&&jsx(Text,{color:"green",children:" (installed)"})]})});var ko=8;function ma(){let e=P(u=>u.selectedStarterKit),t=P(u=>u.plugins),r=P(u=>u.pluginCursorIndex),n=useRef(false);if(useEffect(()=>{e&&!n.current&&(n.current=true,b(x.CLI_KIT_DISPLAYED,{bundle_slug:e.slug,tool_count:t.length}).catch(()=>{}));},[e,t.length]),!e)return jsx(Text,{dimColor:true,children:"No Starter Kit selected."});let o=t.filter(u=>u.installed).length,i=Math.max(0,r-Math.floor(ko/2)),s=Math.min(t.length,i+ko);s===t.length&&(i=Math.max(0,s-ko));let c=t.slice(i,s),a=i,l=t.length-s;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:[jsx(Text,{bold:true,color:"cyan",children:p(e.name)}),jsx(Text,{dimColor:true,children:p(e.description)})]}),jsx(Box,{paddingX:1,paddingBottom:1,children:jsxs(Text,{children:[t.length," plugins to install",o>0&&` \xB7 ${o} already installed`]})}),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",a," more above"]})}),c.map((u,g)=>jsx(da,{plugin:u,isCursor:i+g===r},u.name)),l>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",l," more below"]})})]})}var pp=["Retry failed","Continue anyway"];function fa({name:e,status:t,error:r}){let n=p(e);return t==="installing"?jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(Jc,{type:"dots"})}),jsxs(Text,{color:"cyan",children:[" ",n]})]}):t==="success"?jsx(Box,{children:jsxs(Text,{color:"green",children:["\u2713 ",n]})}):t==="failed"?jsxs(Box,{children:[jsxs(Text,{color:"red",children:["\u2717 ",n]}),r&&jsxs(Text,{dimColor:true,children:[" \u2014 ",p(r)]})]}):jsx(Box,{children:jsxs(Text,{dimColor:true,children:["\u25CB ",n]})})}function ga({onComplete:e,onRetry:t}){let r=P(l=>l.plugins),n=P(l=>l.step),o=P(l=>l.successCount),i=P(l=>l.failedCount),s=P(l=>l.summaryActionIndex),c=r.filter(l=>l.selected),a=useRef(false);return useEffect(()=>{if(n==="summary"&&i===0&&!a.current){a.current=true;let l=setTimeout(e,1500);return ()=>clearTimeout(l)}},[n,i,e]),n==="installing"?jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Installing plugins..."})}),jsx(Box,{flexDirection:"column",paddingX:1,children:c.map(l=>jsx(fa,{name:l.name,status:l.status,error:l.error},l.name))})]}):jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Installation Complete"})}),jsxs(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:[o>0&&jsxs(Text,{color:"green",children:["\u2713 ",o," ",o===1?"plugin":"plugins"," installed successfully"]}),i>0&&jsxs(Text,{color:"red",children:["\u2717 ",i," ",i===1?"plugin":"plugins"," failed"]})]}),i>0&&jsx(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:c.filter(l=>l.status==="failed").map(l=>jsx(fa,{name:l.name,status:l.status,error:l.error},l.name))}),i>0&&jsx(Box,{flexDirection:"column",paddingX:1,children:pp.map((l,u)=>jsx(Box,{children:jsxs(Text,{bold:u===s,color:u===s?"cyan":void 0,children:[u===s?"\u203A ":"  ",l]})},l))}),i===0&&jsx(Box,{paddingX:1,children:jsx(Text,{dimColor:true,children:"Proceeding to main screen..."})})]})}function ya(){let e=P(w=>w.step),t=P(w=>w.starterKits),r=P(w=>w.selectedStarterKitIndex),n=P(w=>w.setSelectedStarterKitIndex),o=P(w=>w.selectStarterKit),i=P(w=>w.plugins),s=P(w=>w.pluginCursorIndex),c=P(w=>w.setPluginCursorIndex),a=P(w=>w.setStep),l=P(w=>w.summaryActionIndex),u=P(w=>w.setSummaryActionIndex),g=P(w=>w.failedCount),v=P(w=>w.resetForRetry),d=P(w=>w.goBackToList),E=f(w=>w.setScreen),m=f(w=>w.setFocus),h=f(w=>w.focus),T=me(w=>w.setJustAuthenticated),y=me(w=>w.justAuthenticated),{loadStarterKits:L,installSelected:$}=sa(),H=useRef(false);useEffect(()=>{e==="bundleList"?(m("bundleList"),H.current||(H.current=true,nt("bundle_selection"))):m(e==="bundleDetail"?"bundleDetail":"installProgress");},[e,m]);let q=useCallback(async()=>{let w=P.getState().selectedStarterKit;if(w){let J=await D();J&&await tt({...J,starterKit:w.slug});}b(x.CLI_STEP_COMPLETED,{step:"summary_review",duration_ms:ot()}).catch(()=>{});let{successCount:re}=P.getState();b(x.CLI_ONBOARDING_COMPLETED,{duration_ms:Ue(),tools_installed_count:re}).catch(()=>{}),T(false),m("list"),E("main");},[T,m,E]),Ce=useCallback(()=>{v(),$();},[v,$]),mn=useCallback(()=>{L();},[L]),G=useCallback(()=>{m("list"),E("main");},[m,E]);return useInput((w,re)=>{if(re.escape)Tr("esc"),G();else if(re.upArrow&&r>0)n(r-1);else if(re.downArrow&&r<t.length-1)n(r+1);else if(re.return&&t.length>0){let J=ot();o(t[r]),nt("kit_display"),b(x.CLI_STEP_COMPLETED,{step:"bundle_selection",duration_ms:J}).catch(()=>{});}},{isActive:h==="bundleList"}),useInput((w,re)=>{let J=aa(w,re);if(J.cursorDelta!==0){let B=s+J.cursorDelta;B>=0&&B<i.length&&c(B);}if(J.confirm){let B=P.getState().selectedStarterKit;B&&(async()=>(await D())?.starterKit!==B.slug&&b(x.CLI_KIT_ACCEPTED,{bundle_slug:B.slug}).catch(()=>{}))();let fn=ot();nt("kit_confirmation"),b(x.CLI_STEP_COMPLETED,{step:"kit_display",duration_ms:fn}).catch(()=>{});let gn=ot();nt("tool_installation"),b(x.CLI_STEP_COMPLETED,{step:"kit_confirmation",duration_ms:gn}).catch(()=>{}),a("installing"),$();}if(J.back){let B=P.getState().selectedStarterKit;B&&b(x.CLI_KIT_REJECTED,{bundle_slug:B.slug}).catch(()=>{}),d();}},{isActive:h==="bundleDetail"}),useInput((w,re)=>{if(g===0)return;let J=la(w,re);if(J.cursorDelta!==0){let B=l+J.cursorDelta;B>=0&&B<=1&&u(B);}J.select&&(l===0?Ce():q());},{isActive:h==="installProgress"&&e==="summary"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Ar,{}),jsxs(Box,{flexDirection:"column",paddingX:1,marginBottom:1,children:[jsx(Text,{dimColor:true,children:"The data collected during setup is used solely to improve"}),jsx(Text,{dimColor:true,children:"Flow's internal tools and will not be shared externally."}),!y&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"yellow",children:"Welcome back! We noticed your Starter Kit is not set up yet. Choose a Starter Kit below to get your recommended tools."})})]}),jsxs(Box,{flexDirection:"column",flexGrow:1,children:[e==="bundleList"&&jsx(ua,{onRetry:mn}),e==="bundleDetail"&&jsx(ma,{}),(e==="installing"||e==="summary")&&jsx(ga,{onComplete:q,onRetry:Ce})]}),jsx(Mr,{})]})}var gp=S("app"),yp={auth:wi,bundleSetup:ya,main:oa};function wa(){f.getState().setScreen("auth"),f.getState().setFocus("auth");}async function Ia(){let e=await D();if(!e){wa();return}try{await Fe();}catch(o){gp.debug(`Token validation failed: ${String(o)}`),wa();return}b(x.CLI_SESSION_STARTED,{cli_version:Be,os:process.platform,node_version:process.version,duration_ms:Ue(),interface:"tui"}).catch(()=>{});let{clientSecret:t,...r}=e;me.getState().setCredentials(r),!e.starterKit||e.starterKit.trim()===""?(f.getState().setScreen("bundleSetup"),f.getState().setFocus("bundleList")):(f.getState().setScreen("main"),f.getState().setFocus("list"));}function ba(){let{columns:e,rows:t}=useWindowSize(),r=f(i=>i.screen),n=yp[r],{pendingExit:o}=Si();return n?jsxs(Box,{flexDirection:"column",width:e,height:t,children:[jsx(n,{}),o&&jsx(Box,{paddingX:1,children:jsx(Text,{color:"yellow",children:"Press Ctrl+C again to quit"})})]}):jsxs(Text,{color:"red",children:["Unknown screen: ",r]})}var ke=S("auth");function Pa(){X.clearFallbackFile(),Ir();}var Sp=3,va=3,Ea=`  \u2139 The data collected during setup is used solely to improve
     Flow's internal tools and will not be shared externally.
-`;function lr(e,t={}){return new Promise((r,n)=>{let{masked:o=false,defaultValue:i=""}=t;process.stdout.write(e+i);let s=i,c=u=>{if(u===""){a(),n(new Error("SIGINT"));return}if(u==="\r"||u===`
+`;function sr(e,t={}){return new Promise((r,n)=>{let{masked:o=false,defaultValue:i=""}=t;process.stdout.write(e+i);let s=i,c=u=>{if(u===""){a(),n(new Error("SIGINT"));return}if(u==="\r"||u===`
 `){a(),process.stdout.write(`
-`),r(s);return}if(u==="\x7F"){s.length>0&&(s=s.slice(0,-1),process.stdout.write("\b \b"));return}u.startsWith("\x1B")||(s+=u,process.stdout.write(o?"*".repeat(u.length):u));};function a(){process.stdin.setRawMode(false),process.stdin.removeListener("data",c),process.removeListener("uncaughtException",l),process.removeListener("unhandledRejection",l),process.removeListener("SIGINT",l),process.removeListener("SIGTERM",l);}function l(){try{process.stdin.setRawMode(!1);}catch{}}process.on("uncaughtException",l),process.on("unhandledRejection",l),process.on("SIGINT",l),process.on("SIGTERM",l),process.stdin.setRawMode(true),process.stdin.resume(),process.stdin.setEncoding("utf8"),process.stdin.on("data",c);})}async function _a(){for(let e=1;e<=Aa;e++)try{return await Jr()}catch{if(e===Aa)throw new Error("Failed to fetch starter kits after 3 attempts")}return []}async function Ma(){let e=await _a();if(e.length===0)throw new Error("No starter kits available. Please contact your administrator.");for(process.stdout.write(`
+`),r(s);return}if(u==="\x7F"){s.length>0&&(s=s.slice(0,-1),process.stdout.write("\b \b"));return}u.startsWith("\x1B")||(s+=u,process.stdout.write(o?"*".repeat(u.length):u));};function a(){process.stdin.setRawMode(false),process.stdin.removeListener("data",c),process.removeListener("uncaughtException",l),process.removeListener("unhandledRejection",l),process.removeListener("SIGINT",l),process.removeListener("SIGTERM",l);}function l(){try{process.stdin.setRawMode(!1);}catch{}}process.on("uncaughtException",l),process.on("unhandledRejection",l),process.on("SIGINT",l),process.on("SIGTERM",l),process.stdin.setRawMode(true),process.stdin.resume(),process.stdin.setEncoding("utf8"),process.stdin.on("data",c);})}async function Ta(){for(let e=1;e<=va;e++)try{return await Kr()}catch{if(e===va)throw new Error("Failed to fetch starter kits after 3 attempts")}return []}async function ka(){let e=await Ta();if(e.length===0)throw new Error("No starter kits available. Please contact your administrator.");for(process.stdout.write(`
 `+C.cyan("  ? ")+`Starter Kit:
 `),e.forEach((t,r)=>{process.stdout.write(`    ${C.cyan(`${r+1})`)} ${p(t.name)}
 `);}),process.stdout.write(`
-`);;){let t=(await lr(C.cyan("  ? ")+`Select starter kit (1-${e.length}): `)).trim(),r=parseInt(t,10)-1;if(!isNaN(r)&&r>=0&&r<e.length)return e[r];process.stderr.write(C.yellow(`  \u26A0 Invalid selection. Please try again.
-`));}}async function Oa(e){if(e.plugins.length===0)return process.stdout.write(C.dim(`
+`);;){let t=(await sr(C.cyan("  ? ")+`Select starter kit (1-${e.length}): `)).trim(),r=parseInt(t,10)-1;if(!isNaN(r)&&r>=0&&r<e.length)return e[r];process.stderr.write(C.yellow(`  \u26A0 Invalid selection. Please try again.
+`));}}async function Ca(e){if(e.plugins.length===0)return process.stdout.write(C.dim(`
   Starter kit '${p(e.name)}' has no plugins to install.
 `)),true;process.stdout.write(`
   Installing ${e.plugins.length} plugins from '${p(e.name)}'...
-`);let t=0,r=0,n=e.plugins.length;for(let o of e.plugins){let i=t+r+1;process.stdout.write(C.dim(`  [${i}/${n}] Installing ${p(o)}...`));let s=false;for(let c=1;c<=wp;c++)try{await ke(o),t++,s=!0;break}catch(a){if(a instanceof Ee){t++,s=true;break}}s?process.stdout.write(C.green(` done
+`);let t=0,r=0,n=e.plugins.length;for(let o of e.plugins){let i=t+r+1;process.stdout.write(C.dim(`  [${i}/${n}] Installing ${p(o)}...`));let s=false;for(let c=1;c<=Sp;c++)try{await Pe(o),t++,s=!0;break}catch(a){if(a instanceof be){t++,s=true;break}}s?process.stdout.write(C.green(` done
 `)):(r++,process.stdout.write(C.red(` failed
 `)));}return r===0?process.stdout.write(C.green(`  \u2713 Starter kit '${p(e.name)}' selected. ${t}/${n} plugins installed successfully.
 `)):process.stdout.write(C.yellow(`  \u26A0 Starter kit '${p(e.name)}' selected. ${t}/${n} plugins installed. ${r} failed.
-`)),r===0}async function xp(e){La(),process.stdout.write(`
-`+Ra+`
-`),Ae.debug(`[${e.tenant}] Authenticating tenant`);try{await st(e);}catch(t){let r=p(t instanceof Error?t.message:"unknown error");return Ae.error(`[${e.tenant}] Authentication failed: ${r}`),process.stderr.write(C.red(`  \u2717 Authentication failed: ${r}
-`)),1}try{let t;if(e.starterKit){let r=await _a(),n=r.find(o=>o.slug===e.starterKit);if(!n){process.stderr.write(C.red(`  \u2717 Starter kit '${p(e.starterKit)}' not found.
+`)),r===0}async function hp(e){Pa(),process.stdout.write(`
+`+Ea+`
+`),ke.debug(`[${e.tenant}] Authenticating tenant`);try{await rt(e);}catch(t){let r=p(t instanceof Error?t.message:"unknown error");return ke.error(`[${e.tenant}] Authentication failed: ${r}`),process.stderr.write(C.red(`  \u2717 Authentication failed: ${r}
+`)),1}try{let t;if(e.starterKit){let r=await Ta(),n=r.find(o=>o.slug===e.starterKit);if(!n){process.stderr.write(C.red(`  \u2717 Starter kit '${p(e.starterKit)}' not found.
 `)),process.stderr.write(`  Available starter kits:
 `);for(let o of r)process.stderr.write(`    - ${p(o.slug)} (${p(o.name)})
-`);return 1}t=n;}else t=await Ma();return await it({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant,starterKit:t.slug}),await Oa(t),Ae.info(`[${e.tenant}] Authentication successful`),process.stdout.write(C.green(`  \u2713 Setup complete. Tenant: ${e.tenant}
+`);return 1}t=n;}else t=await ka();return await tt({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant,starterKit:t.slug}),await Ca(t),ke.info(`[${e.tenant}] Authentication successful`),process.stdout.write(C.green(`  \u2713 Setup complete. Tenant: ${e.tenant}
 
-`)),0}catch(t){if(t instanceof Error&&t.message==="SIGINT")throw t;let r=p(t instanceof Error?t.message:"unknown error");return Ae.error(`[${e.tenant}] Starter kit setup failed: ${r}`),process.stderr.write(C.red(`  \u2717 Starter kit setup failed: ${r}
-`)),1}}async function Ip(){La(),Ae.debug("[auth] Starting interactive authentication");try{process.stdout.write(`
-`),process.stdout.write(Ra+`
-`);let e=(await lr(C.cyan("  ? ")+"Client ID: ")).trim(),t=(await lr(C.cyan("  ? ")+"Client Secret: ",{masked:!0})).trim(),r=(await lr(C.cyan("  ? ")+"Tenant: ")).trim();if(!e||!t||!r)return Ae.error("[auth] Validation failed: all fields are required"),process.stderr.write(C.red(`  \u2717 All fields are required
-`)),1;Ae.debug(`[${r}] Authenticating tenant`);try{await st({clientId:e,clientSecret:t,tenant:r});}catch(o){let i=p(o instanceof Error?o.message:"unknown error");return Ae.error(`[${r}] Authentication failed: ${i}`),process.stderr.write(C.red(`  \u2717 Authentication failed: ${i}
-`)),1}let n=await Ma();return await it({clientId:e,clientSecret:t,tenant:r,starterKit:n.slug}),await Oa(n),Ae.info(`[${r}] Authentication successful`),process.stdout.write(C.green(`  \u2713 Setup complete. Tenant: ${r}
+`)),0}catch(t){if(t instanceof Error&&t.message==="SIGINT")throw t;let r=p(t instanceof Error?t.message:"unknown error");return ke.error(`[${e.tenant}] Starter kit setup failed: ${r}`),process.stderr.write(C.red(`  \u2717 Starter kit setup failed: ${r}
+`)),1}}async function wp(){Pa(),ke.debug("[auth] Starting interactive authentication");try{process.stdout.write(`
+`),process.stdout.write(Ea+`
+`);let e=(await sr(C.cyan("  ? ")+"Client ID: ")).trim(),t=(await sr(C.cyan("  ? ")+"Client Secret: ",{masked:!0})).trim(),r=(await sr(C.cyan("  ? ")+"Tenant: ")).trim();if(!e||!t||!r)return ke.error("[auth] Validation failed: all fields are required"),process.stderr.write(C.red(`  \u2717 All fields are required
+`)),1;ke.debug(`[${r}] Authenticating tenant`);try{await rt({clientId:e,clientSecret:t,tenant:r});}catch(o){let i=p(o instanceof Error?o.message:"unknown error");return ke.error(`[${r}] Authentication failed: ${i}`),process.stderr.write(C.red(`  \u2717 Authentication failed: ${i}
+`)),1}let n=await ka();return await tt({clientId:e,clientSecret:t,tenant:r,starterKit:n.slug}),await Ca(n),ke.info(`[${r}] Authentication successful`),process.stdout.write(C.green(`  \u2713 Setup complete. Tenant: ${r}
 
-`)),0}catch(e){if(e instanceof Error&&e.message==="SIGINT")throw e;let t=p(e instanceof Error?e.message:"unknown error");return Ae.error(`[auth] Unexpected error: ${t}`),process.stderr.write(C.red(`  \u2717 Unexpected error: ${t}
-`)),1}}async function Mo(e={}){if(e.clientId&&e.clientSecret&&e.tenant)return xp({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant,starterKit:e.starterKit});try{return await Ip()}catch(t){if(t instanceof Error&&t.message==="SIGINT")return process.stdout.write(`
-`),130;throw t}}async function bp(){try{return process.stdout.write(`
-`),(await lr(C.cyan("  ? ")+"Are you sure? This will remove your local credentials. (y/N): ")).toLowerCase()!=="y"?(process.stdout.write(C.yellow(`  \u26A0 Logout cancelled
+`)),0}catch(e){if(e instanceof Error&&e.message==="SIGINT")throw e;let t=p(e instanceof Error?e.message:"unknown error");return ke.error(`[auth] Unexpected error: ${t}`),process.stderr.write(C.red(`  \u2717 Unexpected error: ${t}
+`)),1}}async function Ro(e={}){if(e.clientId&&e.clientSecret&&e.tenant)return hp({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant,starterKit:e.starterKit});try{return await wp()}catch(t){if(t instanceof Error&&t.message==="SIGINT")return process.stdout.write(`
+`),130;throw t}}async function xp(){try{return process.stdout.write(`
+`),(await sr(C.cyan("  ? ")+"Are you sure? This will remove your local credentials. (y/N): ")).toLowerCase()!=="y"?(process.stdout.write(C.yellow(`  \u26A0 Logout cancelled
 `)),0):null}catch(e){if(e instanceof Error&&e.message==="SIGINT")return process.stdout.write(`
-`),130;throw e}}async function Da(e){if(!await F())return process.stdout.write(C.yellow(`  \u26A0 You are not authenticated
-`)),0;if(!e){let t=await bp();if(t!==null)return t}try{return await ci(),process.stdout.write(C.green(`  \u2713 Credentials removed successfully
+`),130;throw e}}async function $a(e){if(!await D())return process.stdout.write(C.yellow(`  \u26A0 You are not authenticated
+`)),0;if(!e){let t=await xp();if(t!==null)return t}try{return await ri(),process.stdout.write(C.green(`  \u2713 Credentials removed successfully
 `)),0}catch{return process.stderr.write(C.red(`  \u2717 Error removing credentials
-`)),1}}async function Na(){let e=await F();return e?await vt()?(process.stdout.write(`
+`)),1}}async function Aa(){let e=await D();return e?await xt()?(process.stdout.write(`
 `+C.bold(`  Authenticated
 `)),process.stdout.write(C.dim("     Tenant:  ")+p(e.tenant)+`
 `),process.stdout.write(C.dim("     Client ID:  ")+p(e.clientId)+`
 `),process.stdout.write(C.dim("     Starter Kit:  ")+p(e.starterKit??"not set")+`
-`),process.stdout.write(C.dim("     Config:  ")+p(await ui())+`
+`),process.stdout.write(C.dim("     Config:  ")+p(await ni())+`
 `),process.stdout.write(`
-`),0):(process.stdout.write(C.yellow("  \u26A0 Session expired. Run `flow auth login` to re-authenticate.\n")),0):(process.stdout.write(C.yellow("  \u26A0 Not authenticated. Run `flow auth login` to set up.\n")),0)}M();async function vp(e){let t=Ce(),r;try{r=await Te();}catch{r=[];}let n=new Set(t.map(o=>o.name));return b(x.CLI_CATALOG_VIEWED,{interface:L().interfaceType,filter_type:"available",result_count:r.length}).catch(()=>{}),e.json?(Et(r.map(o=>({...o,installed:n.has(o.name)}))),0):($r(["","Name","Version","Category","Status"],r.map(o=>[n.has(o.name)?"*":" ",o.name??"",o.version??"n/a",o.category??"",n.has(o.name)?"installed":"available"])),0)}async function Pp(e){let t=Ce(),r=await Te(),n=new Map(r.map(i=>[i.name,i])),o=t.map(i=>{let s=n.get(i.name);return s&&i.version&&s.version&&Oe(i.version,s.version)?{...i,availableVersion:s.version}:null}).filter(i=>i!==null);return b(x.CLI_CATALOG_VIEWED,{interface:L().interfaceType,filter_type:"outdated",result_count:o.length}).catch(()=>{}),o.length===0?(I("All plugins are up to date."),0):e.json?(Et(o),0):($r(["Name","Installed","Available"],o.map(i=>[i.name??"",i.version??"n/a",i.availableVersion??"n/a"])),process.stdout.write(`
+`),0):(process.stdout.write(C.yellow("  \u26A0 Session expired. Run `flow auth login` to re-authenticate.\n")),0):(process.stdout.write(C.yellow("  \u26A0 Not authenticated. Run `flow auth login` to set up.\n")),0)}async function Ip(e){let t=Ee(),r;try{r=await ve();}catch{r=[];}let n=new Set(t.map(o=>o.name));return b(x.CLI_CATALOG_VIEWED,{interface:A().interfaceType,filter_type:"available",result_count:r.length}).catch(()=>{}),e.json?(bt(r.map(o=>({...o,installed:n.has(o.name)}))),0):(kr(["","Name","Version","Category","Status"],r.map(o=>[n.has(o.name)?"*":" ",o.name??"",o.version??"n/a",o.category??"",n.has(o.name)?"installed":"available"])),0)}async function bp(e){let t=Ee(),r=await ve(),n=new Map(r.map(i=>[i.name,i])),o=t.map(i=>{let s=n.get(i.name);return s&&i.version&&s.version&&Re(i.version,s.version)?{...i,availableVersion:s.version}:null}).filter(i=>i!==null);return b(x.CLI_CATALOG_VIEWED,{interface:A().interfaceType,filter_type:"outdated",result_count:o.length}).catch(()=>{}),o.length===0?(I("All plugins are up to date."),0):e.json?(bt(o),0):(kr(["Name","Installed","Available"],o.map(i=>[i.name??"",i.version??"n/a",i.availableVersion??"n/a"])),process.stdout.write(`
   ${o.length} plugin(s) outdated.
-`),0)}async function Ep(e){let t=Ce();if(b(x.CLI_CATALOG_VIEWED,{interface:L().interfaceType,filter_type:"all",result_count:t.length}).catch(()=>{}),t.length===0)return I("No plugins installed. Use `flow plugin install <name>` to install one."),0;if(e.json)return Et(t),0;let r=[];try{r=await Te();}catch{r=[];}let n=new Map(r.map(i=>[i.name,i])),o=[...t].sort((i,s)=>{let c=nr.indexOf(i.scope??"user"),a=nr.indexOf(s.scope??"user");return (c===-1?1/0:c)-(a===-1?1/0:a)});return $r(["Name","Version","Type","Origin","Scope","Status","Installed at"],o.map(i=>{let s=n.get(i.name),c=s?.type??"plugin",a=s?.origin??wo(i.marketplace);return [i.name??"",i.version??"n/a",wt[c]?.label??"Plugin",a,i.scope??"user",i.status??"enabled",Ar(i.installedAt??"")]})),process.stdout.write(`
+`),0)}async function vp(e){let t=Ee();if(b(x.CLI_CATALOG_VIEWED,{interface:A().interfaceType,filter_type:"all",result_count:t.length}).catch(()=>{}),t.length===0)return I("No plugins installed. Use `flow plugin install <name>` to install one."),0;if(e.json)return bt(t),0;let r=[];try{r=await ve();}catch{r=[];}let n=new Map(r.map(i=>[i.name,i])),o=[...t].sort((i,s)=>{let c=tr.indexOf(i.scope??"user"),a=tr.indexOf(s.scope??"user");return (c===-1?1/0:c)-(a===-1?1/0:a)});return kr(["Name","Version","Type","Origin","Scope","Status","Installed at"],o.map(i=>{let s=n.get(i.name),c=s?.type??"plugin",a=s?.origin??So(i.marketplace);return [i.name??"",i.version??"n/a",gt[c]?.label??"Plugin",a,i.scope??"user",i.status??"enabled",Cr(i.installedAt??"")]})),process.stdout.write(`
   ${t.length} plugin(s) installed.
-`),0}async function Fa(e){if(!await re())return 1;try{return e.available?await vp(e):e.outdated?await Pp(e):await Ep(e)}catch(t){return k(t instanceof Error?t.message:"Failed to list plugins."),1}}M();$();var D=S("manage");function sn(e,t){return t?Ce().find(r=>r.name===e&&r.scope===t):Ce().find(r=>r.name===e)}function Tp(e,t){let r=t;return {callbacks:{onStatus:o=>{r&&(r.text=`${e}${o}`);},onError:o=>{r?.stop(),r=void 0,I(`${e}${o}`);},onPause:()=>{r?.stop(),r=void 0;},onResume:o=>{r?.stop(),r=Oo({text:`${e}${o}`}).start();}},stopSpinner:()=>{r?.stop(),r=void 0;}}}async function kp(e,t,r,n){let o=n;if(!r.force){o?.stop();let s=p(e),c=p(yo(e,r.scope));if(!await Xe(`${t}Install external plugin "${s}"?
+`),0}async function La(e){if(!await ee())return 1;try{return e.available?await Ip(e):e.outdated?await bp(e):await vp(e)}catch(t){return k(t instanceof Error?t.message:"Failed to list plugins."),1}}var _=S("manage");function nn(e,t){return t?Ee().find(r=>r.name===e&&r.scope===t):Ee().find(r=>r.name===e)}function Pp(e,t){let r=t;return {callbacks:{onStatus:o=>{r&&(r.text=`${e}${o}`);},onError:o=>{r?.stop(),r=void 0,I(`${e}${o}`);},onPause:()=>{r?.stop(),r=void 0;},onResume:o=>{r?.stop(),r=Mo({text:`${e}${o}`}).start();}},stopSpinner:()=>{r?.stop(),r=void 0;}}}async function Ep(e,t,r,n){let o=n;if(!r.force){o?.stop();let s=p(e),c=p(fo(e,r.scope));if(!await Ve(`${t}Install external plugin "${s}"?
 This will run: ${c}
-[y/N] `))return D.debug(`[${e}] Installation cancelled by user`),r.silent||I(`${t}Skipped ${e} (cancelled).`),{name:e,success:true};r.silent||(o=Oo({text:`${t}Installing ${e}...`}).start());}let i=o?Tp(t,o):void 0;try{let s=await So(e,r.marketplaceSource,i?.callbacks,r.scope);if(i?.stopSpinner(),s.exitCode!==0){let c=s.stderr||"Command failed";return r.silent?ae({status:"error",plugin:e,message:c}):k(`${t}Failed to install "${e}": ${c}`),{name:e,success:!1,error:c}}return r.silent?Q({status:"success",plugin:e,command:s.command,duration_ms:s.duration_ms}):q(`${t}${e} installed successfully (via proxy)`),{name:e,success:!0,duration_ms:s.duration_ms}}catch(s){i?.stopSpinner();let c=U(s);return r.silent?ae({status:"error",plugin:e,message:c}):k(`${t}Failed to install "${e}": ${c}`),{name:e,success:false,error:c}}}async function Cp(e,t,r){let n=r.silent?void 0:Oo({text:`${t}Installing ${e}...`}).start();if(er(e))return kp(e,t,r,n);try{let o=await ke(e,r);return n?.stop(),r.silent?Q({status:"success",plugin:e,version:o.version,duration_ms:o.duration_ms}):q(`${t}${e} v${o.version} installed successfully`),{name:e,success:!0,version:o.version,duration_ms:o.duration_ms}}catch(o){if(n?.stop(),o instanceof Ee)return r.silent?Q({status:"already_installed",plugin:e,message:o.message}):I(`${t}${o.message}`),{name:e,success:true};let i=U(o);return r.silent?ae({status:"error",plugin:e,message:i}):k(`${t}Failed to install "${e}": ${i}`),{name:e,success:false,error:i}}}function $p(e){let t=e.filter(n=>n.success).length,r=e.filter(n=>!n.success).length;I(`
-Installation summary: ${t} succeeded, ${r} failed`);}async function Ua(e,t={}){if(!await re())return 1;let r=[];for(let n=0;n<e.length;n++){let o=e.length>1?`[${n+1}/${e.length}] `:"",i=await Cp(e[n],o,t);r.push(i);}return e.length>1&&(t.silent?Q({status:"summary",succeeded:r.filter(n=>n.success).length,failed:r.filter(n=>!n.success).length,results:r.map(n=>({plugin:n.name,success:n.success,...n.error?{error:n.error}:{}}))}):$p(r)),r.some(n=>!n.success)?1:0}async function Ka(e,t){if(!await re())return 1;if(D.debug(`[${e}] Looking up installed plugin`),!t.force){let r=sn(e,t.scope);if(!r)return D.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;let n=p(r.name),o=r.version?p(r.version):void 0,i=t.scope?` (${t.scope})`:"";if(!await Xe(`Remove ${n} ${o?`v${o}`:"(n/a)"}${i}? [y/N] `))return D.debug(`[${e}] Uninstall cancelled by user`),I("Operation cancelled."),0}try{return D.debug(`[${e}] Uninstalling plugin${t.scope?` (scope: ${t.scope})`:""}`),await Vr(e,t.scope),D.info(`[${e}] Uninstalled successfully`),q("Plugin removed successfully"),0}catch(r){return D.error(`[${e}] Failed to uninstall: ${U(r)}`),k(U(r)),1}}async function ja(e,t={}){if(!await re())return 1;D.debug(`[${e}] Looking up installed plugin`);let r=sn(e,t.scope);if(!r)return D.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;if(r.status==="enabled")return D.debug(`[${e}] Already enabled, skipping`),I(`${r.name} is already enabled`),0;try{return D.debug(`[${e}] Enabling plugin (current status: ${r.status})`),await Qt(e,"enabled",t.scope),D.info(`[${e}] Enabled successfully`),q(`${r.name} enabled successfully`),0}catch(n){return D.error(`[${e}] Failed to enable: ${U(n)}`),k(U(n)),1}}async function Ba(e,t={}){if(!await re())return 1;D.debug(`[${e}] Looking up installed plugin`);let r=sn(e,t.scope);if(!r)return D.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;if(r.status==="disabled")return D.debug(`[${e}] Already disabled, skipping`),I(`${r.name} is already disabled`),0;try{return D.debug(`[${e}] Disabling plugin (current status: ${r.status})`),await Qt(e,"disabled",t.scope),D.info(`[${e}] Disabled successfully`),q(`${r.name} disabled successfully`),0}catch(n){return D.error(`[${e}] Failed to disable: ${U(n)}`),k(U(n)),1}}async function Ja(e,t,r){r.silent||I(`${t}Updating ${e}...`);try{let n=await qr(e,r);return r.silent?Q({status:"updated",plugin:n.name,previousVersion:n.previousVersion,newVersion:n.newVersion,duration_ms:n.duration_ms}):q(`${t}${n.name} v${n.previousVersion} \u2192 v${n.newVersion}`),{name:e,success:!0}}catch(n){if(n instanceof qe)return r.silent?Q({status:"up_to_date",plugin:e,message:n.message}):I(`${t}${n.message}`),{name:e,success:true,skipped:true};let o=U(n);return r.silent?ae({status:"error",plugin:e,message:o}):k(`${t}Failed to update ${e}: ${o}`),{name:e,success:false,error:o}}}function Ap(e){let t=e.filter(o=>o.success&&!o.skipped).length,r=e.filter(o=>o.skipped).length,n=e.filter(o=>!o.success).length;I(`
-Update summary: ${t} updated, ${r} already up to date, ${n} failed`);}async function Lp(e,t,r){try{let n=await $t(e);Oe(t,n.version,r.force)?I(`Would update ${e}: v${t} \u2192 v${n.version}`):I(`${e} is already up to date (v${t})`);}catch(n){return k(U(n)),1}return 0}function Rp(e){return new Map(e.filter(t=>!!t.version).map(t=>[t.name,t.version]))}function _p(e,t,r){let n=t.get(e.name);return n?e.version&&Oe(e.version,n,r)?(I(`Would update ${e.name}: v${e.version} \u2192 v${n}`),true):(I(`${e.name} is already up to date (${e.version?`v${e.version}`:"n/a"})`),false):(I(`Skipping ${e.name}: not found in catalog`),false)}async function Mp(e,t){try{let r=await Te(),n=Rp(r),o=0;for(let i of e)_p(i,n,t.force)&&o++;o===0&&I("All plugins are up to date");}catch(r){return k(U(r)),1}return 0}async function Op(e,t){let r=[];for(let n=0;n<e.length;n++){let o=`[${n+1}/${e.length}] `,i=await Ja(e[n].name,o,t);r.push(i);}return t.silent?Q({status:"summary",updated:r.filter(n=>n.success&&!n.skipped).length,upToDate:r.filter(n=>n.skipped).length,failed:r.filter(n=>!n.success).length,results:r.map(n=>({plugin:n.name,success:n.success,...n.skipped?{skipped:true}:{},...n.error?{error:n.error}:{}}))}):Ap(r),r.some(n=>!n.success)?1:0}async function Ha(e,t={}){if(!await re())return 1;if(e){let o=sn(e,t.scope);return o?t.dryRun?Lp(e,o.version??"",t):(await Ja(e,"",t)).success?0:1:(t.silent?ae({status:"error",plugin:e,message:`Plugin "${e}" is not installed`}):k(`Plugin "${e}" is not installed`),1)}let n=Ce().filter(o=>o.marketplace===N);return n.length===0?(t.silent?Q({status:"empty",message:"No plugins installed"}):I("No plugins installed"),0):t.dryRun?Mp(n,t):Op(n,t)}$();var Va=S("marketplace");function Np(e){return `claude plugin marketplace add ${e}`}async function Ga(e,t){if(!await re())return 1;let r;try{r=Wr(e);}catch(i){let s=U(i);return t.silent?ae({status:"error",source:e,message:s}):k(s),1}Va.debug(`[marketplace] Adding marketplace source: ${r}`);let n=Np(r);if(!t.force){let i=p(r),s=p(n);if(!await Xe(`Add marketplace "${i}"?
+[y/N] `))return _.debug(`[${e}] Installation cancelled by user`),r.silent||I(`${t}Skipped ${e} (cancelled).`),{name:e,success:true};r.silent||(o=Mo({text:`${t}Installing ${e}...`}).start());}let i=o?Pp(t,o):void 0;try{let s=await go(e,r.marketplaceSource,i?.callbacks,r.scope);if(i?.stopSpinner(),s.exitCode!==0){let c=s.stderr||"Command failed";return r.silent?ie({status:"error",plugin:e,message:c}):k(`${t}Failed to install "${e}": ${c}`),{name:e,success:!1,error:c}}return r.silent?Y({status:"success",plugin:e,command:s.command,duration_ms:s.duration_ms}):V(`${t}${e} installed successfully (via proxy)`),{name:e,success:!0,duration_ms:s.duration_ms}}catch(s){i?.stopSpinner();let c=N(s);return r.silent?ie({status:"error",plugin:e,message:c}):k(`${t}Failed to install "${e}": ${c}`),{name:e,success:false,error:c}}}async function Tp(e,t,r){let n=r.silent?void 0:Mo({text:`${t}Installing ${e}...`}).start();if(Zt(e))return Ep(e,t,r,n);try{let o=await Pe(e,r);return n?.stop(),r.silent?Y({status:"success",plugin:e,version:o.version,duration_ms:o.duration_ms}):V(`${t}${e} v${o.version} installed successfully`),{name:e,success:!0,version:o.version,duration_ms:o.duration_ms}}catch(o){if(n?.stop(),o instanceof be)return r.silent?Y({status:"already_installed",plugin:e,message:o.message}):I(`${t}${o.message}`),{name:e,success:true};let i=N(o);return r.silent?ie({status:"error",plugin:e,message:i}):k(`${t}Failed to install "${e}": ${i}`),{name:e,success:false,error:i}}}function kp(e){let t=e.filter(n=>n.success).length,r=e.filter(n=>!n.success).length;I(`
+Installation summary: ${t} succeeded, ${r} failed`);}async function Ra(e,t={}){if(!await ee())return 1;let r=[];for(let n=0;n<e.length;n++){let o=e.length>1?`[${n+1}/${e.length}] `:"",i=await Tp(e[n],o,t);r.push(i);}return e.length>1&&(t.silent?Y({status:"summary",succeeded:r.filter(n=>n.success).length,failed:r.filter(n=>!n.success).length,results:r.map(n=>({plugin:n.name,success:n.success,...n.error?{error:n.error}:{}}))}):kp(r)),r.some(n=>!n.success)?1:0}async function Ma(e,t){if(!await ee())return 1;if(_.debug(`[${e}] Looking up installed plugin`),!t.force){let r=nn(e,t.scope);if(!r)return _.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;let n=p(r.name),o=r.version?p(r.version):void 0,i=t.scope?` (${t.scope})`:"";if(!await Ve(`Remove ${n} ${o?`v${o}`:"(n/a)"}${i}? [y/N] `))return _.debug(`[${e}] Uninstall cancelled by user`),I("Operation cancelled."),0}try{return _.debug(`[${e}] Uninstalling plugin${t.scope?` (scope: ${t.scope})`:""}`),await Jr(e,t.scope),_.info(`[${e}] Uninstalled successfully`),V("Plugin removed successfully"),0}catch(r){return _.error(`[${e}] Failed to uninstall: ${N(r)}`),k(N(r)),1}}async function _a(e,t={}){if(!await ee())return 1;_.debug(`[${e}] Looking up installed plugin`);let r=nn(e,t.scope);if(!r)return _.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;if(r.status==="enabled")return _.debug(`[${e}] Already enabled, skipping`),I(`${r.name} is already enabled`),0;try{return _.debug(`[${e}] Enabling plugin (current status: ${r.status})`),await Yt(e,"enabled",t.scope),_.info(`[${e}] Enabled successfully`),V(`${r.name} enabled successfully`),0}catch(n){return _.error(`[${e}] Failed to enable: ${N(n)}`),k(N(n)),1}}async function Oa(e,t={}){if(!await ee())return 1;_.debug(`[${e}] Looking up installed plugin`);let r=nn(e,t.scope);if(!r)return _.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;if(r.status==="disabled")return _.debug(`[${e}] Already disabled, skipping`),I(`${r.name} is already disabled`),0;try{return _.debug(`[${e}] Disabling plugin (current status: ${r.status})`),await Yt(e,"disabled",t.scope),_.info(`[${e}] Disabled successfully`),V(`${r.name} disabled successfully`),0}catch(n){return _.error(`[${e}] Failed to disable: ${N(n)}`),k(N(n)),1}}async function Da(e,t,r){r.silent||I(`${t}Updating ${e}...`);try{let n=await Vr(e,r);return r.silent?Y({status:"updated",plugin:n.name,previousVersion:n.previousVersion,newVersion:n.newVersion,duration_ms:n.duration_ms}):V(`${t}${n.name} v${n.previousVersion} \u2192 v${n.newVersion}`),{name:e,success:!0}}catch(n){if(n instanceof He)return r.silent?Y({status:"up_to_date",plugin:e,message:n.message}):I(`${t}${n.message}`),{name:e,success:true,skipped:true};let o=N(n);return r.silent?ie({status:"error",plugin:e,message:o}):k(`${t}Failed to update ${e}: ${o}`),{name:e,success:false,error:o}}}function Cp(e){let t=e.filter(o=>o.success&&!o.skipped).length,r=e.filter(o=>o.skipped).length,n=e.filter(o=>!o.success).length;I(`
+Update summary: ${t} updated, ${r} already up to date, ${n} failed`);}async function $p(e,t,r){try{let n=await Tt(e);Re(t,n.version,r.force)?I(`Would update ${e}: v${t} \u2192 v${n.version}`):I(`${e} is already up to date (v${t})`);}catch(n){return k(N(n)),1}return 0}function Ap(e){return new Map(e.filter(t=>!!t.version).map(t=>[t.name,t.version]))}function Lp(e,t,r){let n=t.get(e.name);return n?e.version&&Re(e.version,n,r)?(I(`Would update ${e.name}: v${e.version} \u2192 v${n}`),true):(I(`${e.name} is already up to date (${e.version?`v${e.version}`:"n/a"})`),false):(I(`Skipping ${e.name}: not found in catalog`),false)}async function Rp(e,t){try{let r=await ve(),n=Ap(r),o=0;for(let i of e)Lp(i,n,t.force)&&o++;o===0&&I("All plugins are up to date");}catch(r){return k(N(r)),1}return 0}async function Mp(e,t){let r=[];for(let n=0;n<e.length;n++){let o=`[${n+1}/${e.length}] `,i=await Da(e[n].name,o,t);r.push(i);}return t.silent?Y({status:"summary",updated:r.filter(n=>n.success&&!n.skipped).length,upToDate:r.filter(n=>n.skipped).length,failed:r.filter(n=>!n.success).length,results:r.map(n=>({plugin:n.name,success:n.success,...n.skipped?{skipped:true}:{},...n.error?{error:n.error}:{}}))}):Cp(r),r.some(n=>!n.success)?1:0}async function Na(e,t={}){if(!await ee())return 1;if(e){let o=nn(e,t.scope);return o?t.dryRun?$p(e,o.version??"",t):(await Da(e,"",t)).success?0:1:(t.silent?ie({status:"error",plugin:e,message:`Plugin "${e}" is not installed`}):k(`Plugin "${e}" is not installed`),1)}let n=Ee().filter(o=>o.marketplace===O);return n.length===0?(t.silent?Y({status:"empty",message:"No plugins installed"}):I("No plugins installed"),0):t.dryRun?Rp(n,t):Mp(n,t)}var Fa=S("marketplace");function Op(e){return `claude plugin marketplace add ${e}`}async function Ua(e,t){if(!await ee())return 1;let r;try{r=zr(e);}catch(i){let s=N(i);return t.silent?ie({status:"error",source:e,message:s}):k(s),1}Fa.debug(`[marketplace] Adding marketplace source: ${r}`);let n=Op(r);if(!t.force){let i=p(r),s=p(n);if(!await Ve(`Add marketplace "${i}"?
 This will run: ${s}
-[y/N] `))return Va.debug("[marketplace] Operation cancelled by user"),I("Operation cancelled."),0}let o=t.silent?void 0:Oo({text:`Adding marketplace "${p(r)}"...`}).start();try{let i=await ue(n);return o?.stop(),i.exitCode!==0?(t.silent?ae({status:"error",source:r,exitCode:i.exitCode,message:i.stderr||"Command failed"}):(k(`Failed to add marketplace "${r}": ${i.stderr||"Command failed"}`),t.verbose&&i.stdout&&I(`stdout: ${i.stdout}`)),1):(t.silent?Q({status:"success",source:r,command:n,duration_ms:i.duration_ms}):(q(`Marketplace "${r}" added successfully`),t.verbose&&i.stdout&&I(i.stdout)),0)}catch(i){o?.stop();let s=U(i);return t.silent?ae({status:"error",source:r,message:s}):k(`Failed to add marketplace "${r}": ${s}`),1}}async function jp(){return await F()?{passed:true,message:"Credentials configured"}:{passed:false,message:"Credentials not configured \u2014 Run `flow auth login`"}}async function Bp(){let e=Date.now();try{await Te();let t=Date.now()-e;return {passed:!0,message:`Prompt Manager accessible (${t}ms)`,latency:t}}catch(t){return t instanceof Error&&t.name==="TimeoutError"?{passed:false,message:"Timeout after 5s \u2014 check your connection"}:{passed:false,message:`Connection error: ${t instanceof Error?t.message:"Unknown"}`}}}async function Jp(){return await vt()?{passed:true,message:"Token is valid"}:{passed:false,message:"Token expired \u2014 run `flow auth login` to re-authenticate"}}function Hp(){let e=join(homedir(),".claude","settings.json");return existsSync(e)?{passed:true,message:"Claude Code detected"}:{passed:false,message:"Claude Code not detected"}}async function za(){process.stdout.write(`
+[y/N] `))return Fa.debug("[marketplace] Operation cancelled by user"),I("Operation cancelled."),0}let o=t.silent?void 0:Mo({text:`Adding marketplace "${p(r)}"...`}).start();try{let i=await le(n);return o?.stop(),i.exitCode!==0?(t.silent?ie({status:"error",source:r,exitCode:i.exitCode,message:i.stderr||"Command failed"}):(k(`Failed to add marketplace "${r}": ${i.stderr||"Command failed"}`),t.verbose&&i.stdout&&I(`stdout: ${i.stdout}`)),1):(t.silent?Y({status:"success",source:r,command:n,duration_ms:i.duration_ms}):(V(`Marketplace "${r}" added successfully`),t.verbose&&i.stdout&&I(i.stdout)),0)}catch(i){o?.stop();let s=N(i);return t.silent?ie({status:"error",source:r,message:s}):k(`Failed to add marketplace "${r}": ${s}`),1}}async function Up(){return await D()?{passed:true,message:"Credentials configured"}:{passed:false,message:"Credentials not configured \u2014 Run `flow auth login`"}}async function Bp(){let e=Date.now();try{await ve();let t=Date.now()-e;return {passed:!0,message:`Prompt Manager accessible (${t}ms)`,latency:t}}catch(t){return t instanceof Error&&t.name==="TimeoutError"?{passed:false,message:"Timeout after 5s \u2014 check your connection"}:{passed:false,message:`Connection error: ${t instanceof Error?t.message:"Unknown"}`}}}async function Kp(){return await xt()?{passed:true,message:"Token is valid"}:{passed:false,message:"Token expired \u2014 run `flow auth login` to re-authenticate"}}function jp(){let e=join(homedir(),".claude","settings.json");return existsSync(e)?{passed:true,message:"Claude Code detected"}:{passed:false,message:"Claude Code not detected"}}async function Ba(){process.stdout.write(`
 `+C.bold(`  FlowSetup CLI Diagnostics
 
-`));let e=[{name:"Credentials",fn:jp},{name:"Prompt Manager",fn:Bp},{name:"Valid Token",fn:Jp},{name:"Claude Code",fn:Hp}],t=true;for(let r of e){let n=await r.fn(),o="",i=C.green;n.passed?o=C.green("[OK]  "):(o=C.red("[FAIL]"),i=C.red,t=false);let s=`  ${o} ${i(r.name.padEnd(18))} ${p(n.message)}`;process.stdout.write(s+`
+`));let e=[{name:"Credentials",fn:Up},{name:"Prompt Manager",fn:Bp},{name:"Valid Token",fn:Kp},{name:"Claude Code",fn:jp}],t=true;for(let r of e){let n=await r.fn(),o="",i=C.green;n.passed?o=C.green("[OK]  "):(o=C.red("[FAIL]"),i=C.red,t=false);let s=`  ${o} ${i(r.name.padEnd(18))} ${p(n.message)}`;process.stdout.write(s+`
 `);}return process.stdout.write(`
 `),t?(process.stdout.write(C.green(`  \u2713 All checks passed!
 
 `)),0):(process.stdout.write(C.red(`  \u2717 Some checks failed \u2014 verify your configuration
 
-`)),1)}var zp=["github.com","www.github.com"],qp=/^([a-zA-Z0-9_.-]+)\/([a-zA-Z0-9_.@-]+)(\/.*)?$/,Wp=/^([^@]+)@(.+)$/;function Xp(e){return !!(isAbsolute(e)||e==="."||e===".."||e.startsWith("./")||e.startsWith("../")||e.startsWith(".\\")||e.startsWith("..\\")||/^[a-zA-Z]:[/\\]/.test(e))}function Do(e){let t=e.replace(/\\/g,"/");t=t.replace(/^\/+/,"").replace(/\/+$/,"");let r=t.split("/").filter(Boolean);for(let n of r)if(n==="..")throw new Error(`Invalid subpath: "${e}" contains path traversal ("..").`);return r.join("/")}function Yp(e){let t=e.pathname.split("/").filter(Boolean);if(t.length<2)throw new Error(`Invalid GitHub URL: expected at least owner/repo in "${e.href}"`);let r=t[0],n=t[1];n.endsWith(".git")&&(n=n.slice(0,-4));let o={type:"github",url:`https://github.com/${r}/${n}.git`};if(t.length>=3&&(t[2]==="tree"||t[2]==="blob")){if(t.length>=4&&(o.ref=t[3]),t.length>=5){let i=t.slice(4).join("/");o.subpath=Do(i);}}else if(t.length>2){let i=t.slice(2).join("/");o.subpath=Do(i);}return e.hash&&e.hash.length>1&&(o.ref=decodeURIComponent(e.hash.slice(1))),o}function an(e){let t=e.trim();if(!t)throw new Error("Skill source cannot be empty.");if(Xp(t)){let r=resolve(t);return {type:"local",url:r,localPath:r}}try{let r=new URL(t);if((r.protocol==="https:"||r.protocol==="http:")&&zp.includes(r.hostname))return Yp(r);if(r.protocol==="https:"||r.protocol==="http:"){let n={type:"git",url:t};return r.hash&&r.hash.length>1&&(n.ref=decodeURIComponent(r.hash.slice(1)),n.url=t.replace(r.hash,"")),n}if(r.protocol==="git:"){let n={type:"git",url:t};return r.hash&&r.hash.length>1&&(n.ref=decodeURIComponent(r.hash.slice(1)),n.url=t.replace(r.hash,"")),n}}catch{}if(t.startsWith("git@")||t.includes(":")&&t.includes(".git")){let r=t,n,o=t.indexOf("#");o!==-1&&(n=t.slice(o+1),r=t.slice(0,o));let i={type:"git",url:r};return n&&(i.ref=n),i}{let r=t,n,o=r.indexOf("#");o!==-1&&(n=r.slice(o+1),r=r.slice(0,o));let i=r.match(qp);if(i){let s=i[1],c=i[2],a=i[3],l,u=c.match(Wp);u&&(c=u[1],l=u[2]),c.endsWith(".git")&&(c=c.slice(0,-4));let g={type:"github",url:`https://github.com/${s}/${c}.git`};if(n&&(g.ref=n),l&&(g.skillFilter=l),a){let v=a.replace(/^\//,"");v&&(g.subpath=Do(v));}return g}}return {type:"git",url:t}}function ln(e){if(e.type!=="github")return null;try{let r=new URL(e.url).pathname.split("/").filter(Boolean);if(r.length<2)return null;let n=r[1];return n.endsWith(".git")&&(n=n.slice(0,-4)),`${r[0]}/${n}`}catch{return null}}var rd=6e4,et=class extends Error{url;isTimeout;isAuthError;constructor(t,r,n=false,o=false){super(t),this.name="GitCloneError",this.url=r,this.isTimeout=n,this.isAuthError=o;}};async function cn(e,t){let r=await mkdtemp(join(tmpdir(),"flow-skills-")),n=simpleGit({timeout:{block:rd}}).env("GIT_TERMINAL_PROMPT","0").env("GIT_LFS_SKIP_SMUDGE","1"),o=t?["--depth","1","--branch",t]:["--depth","1"];try{return await n.clone(e,r,o),r}catch(i){await rm(r,{recursive:true,force:true}).catch(()=>{});let s=i instanceof Error?i.message:String(i),c=s.includes("block timeout")||s.includes("timed out"),a=s.includes("Authentication failed")||s.includes("could not read Username")||s.includes("Permission denied")||s.includes("Repository not found");throw c?new et("Clone timed out after 60s. Check your SSH keys or credentials.",e,true,false):a?new et(`Authentication failed for ${e}. Ensure you have access and credentials are configured.`,e,false,true):new et(`Failed to clone ${e}: ${s}`,e,false,false)}}async function un(e){let t=normalize(resolve(e)),r=normalize(resolve(tmpdir()));if(!t.startsWith(r+sep))throw new Error("Attempted to clean up directory outside of temp directory");await rm(e,{recursive:true,force:true});}function Za(e){let t=e.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/);return t?{data:parse(t[1])??{},content:t[2]??""}:{data:{},content:e}}var Fo=new Set(["node_modules",".git","dist","build","__pycache__"]);function Rt(e){return e.toLowerCase().replace(/[^a-z0-9._]+/g,"-").replace(/^[.-]+|[.-]+$/g,"").substring(0,255)||"unnamed-skill"}function tl(e,t){let r=normalize(resolve(e)),n=normalize(resolve(t));return n.startsWith(r+sep)||n===r}function ad(e,t){let r=normalize(resolve(e)),n=normalize(resolve(join(e,t)));return n.startsWith(r+sep)||n===r}async function No(e){try{let t=join(e,"SKILL.md");return (await stat(t)).isFile()}catch{return  false}}async function cr(e){try{let t=await readFile(e,"utf-8"),{data:r}=Za(t);return typeof r.name!="string"||typeof r.description!="string"?null:{name:r.name,description:r.description,path:dirname(e),rawContent:t,metadata:r.metadata}}catch{return null}}async function rl(e,t=0,r=5){if(t>r)return [];try{let[n,o]=await Promise.all([No(e),readdir(e,{withFileTypes:!0}).catch(()=>[])]),i=n?[e]:[],s=await Promise.all(o.filter(c=>c.isDirectory()&&!Fo.has(c.name)).map(c=>rl(join(e,c.name),t+1,r)));return [...i,...s.flat()]}catch{return []}}async function mn(e,t){let r=[],n=new Set;if(t&&!ad(e,t))throw new Error(`Invalid subpath: "${t}" resolves outside the repository directory.`);let o=t?join(e,t):e;if(await No(o)){let s=await cr(join(o,"SKILL.md"));if(s)return r.push(s),n.add(s.name),r}let i=[o,join(o,"skills"),join(o,".claude/skills"),join(o,".agents/skills")];for(let s of i)try{let c=await readdir(s,{withFileTypes:!0});for(let a of c){if(!a.isDirectory())continue;let l=join(s,a.name);if(await No(l)){let u=await cr(join(l,"SKILL.md"));u&&!n.has(u.name)&&(r.push(u),n.add(u.name));}}}catch{}if(r.length===0){let s=await rl(o);for(let c of s){let a=await cr(join(c,"SKILL.md"));a&&!n.has(a.name)&&(r.push(a),n.add(a.name));}}return r}function nl(e,t){let r=t.map(n=>n.toLowerCase());return e.filter(n=>{let o=n.name.toLowerCase();return r.some(i=>i===o)})}Ue();var il=1;function ol(){return {version:il,skills:{}}}async function fn(e){let t=vn(e);try{let r=await readFile(t,"utf-8"),n=JSON.parse(r);return !n.version||n.version<il?ol():n}catch{return ol()}}function dd(e){let t={};for(let r of Object.keys(e).sort())t[r]=e[r];return t}async function sl(e,t){let r=vn(t);await mkdir(dirname(r),{recursive:true});let n={version:e.version,skills:dd(e.skills)};await writeFile(r,JSON.stringify(n,null,2)+`
-`,"utf-8");}async function al(e,t,r){let n=await fn(r),o=new Date().toISOString(),i=n.skills[e];n.skills[e]={...t,installedAt:i?.installedAt??o,updatedAt:o},await sl(n,r);}async function ll(e,t){let r=await fn(t);e in r.skills&&(delete r.skills[e],await sl(r,t));}Ue();$();var cl=S("skillInstaller");async function wd(e,t,r,n){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"skill",source:"external",scope:t,version:r,duration_ms:n,interface:L().interfaceType});}catch(o){cl.warn(`Failed to send skill install metrics: ${String(o)}`);}}async function xd(e,t){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"skill",source:"external",error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:L().interfaceType});}catch(r){cl.warn(`Failed to send skill install-failed metrics: ${String(r)}`);}}async function Id(e,t){await cp(e,t,{recursive:true,dereference:true,filter:r=>!Fo.has(basename(r))});}async function bd(e,t,r){let n=Rt(e.name),o=Ut(t),i=join(o,n);if(!tl(o,i))return {skill:e.name,success:false,path:i,error:`Unsafe install path: "${i}" escapes skills directory`};try{await rm(i,{recursive:!0,force:!0}),await mkdir(i,{recursive:!0}),await Id(e.path,i);let c=ln(r)??r.url;return await al(n,{source:c,sourceType:r.type,sourceUrl:r.url,ref:r.ref,skillPath:r.subpath},t),{skill:e.name,success:!0,path:i}}catch(s){return {skill:e.name,success:false,path:i,error:s instanceof Error?s.message:String(s)}}}async function ul(e,t){let r=an(e),n;try{let o;if(r.type==="local"){if(!r.localPath||!existsSync(r.localPath))return {source:e,results:[],discovered:0,installed:0,failed:0};o=r.localPath;}else n=await cn(r.url,r.ref),o=n;let i=await mn(o,r.subpath),s=[...t.skillFilter??[]];r.skillFilter&&s.push(r.skillFilter);let c=s.length>0?nl(i,s):i,a=[],l=r.ref??"latest";for(let u of c){let g=Date.now(),v=await bd(u,t.scope,r);a.push(v);let d=Date.now()-g;v.success?await wd(u.name,t.scope,l,d):await xd(u.name,new Error(v.error??"Unknown error"));}return {source:e,results:a,discovered:i.length,installed:a.filter(u=>u.success).length,failed:a.filter(u=>!u.success).length}}finally{n&&await un(n).catch(()=>{});}}Ue();$();var kd=S("skills");async function Cd(e){try{await b(x.CLI_TOOL_UNINSTALLED,{tool_id:e,tool_type:"skill",source:"external",interface:L().interfaceType});}catch(t){kd.warn(`Failed to send skill uninstall metrics: ${String(t)}`);}}async function $d(e){let t=createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(`${e} (y/N) `,n=>{t.close(),r(n.trim().toLowerCase()==="y");});})}async function Ad(e){let t=an(e),r;try{let n;if(t.type==="local"){if(!t.localPath)return k("Invalid local path."),1;n=t.localPath;}else I(`Fetching skills from ${p(e)}...`),r=await cn(t.url,t.ref),n=r;let o=await mn(n,t.subpath);if(o.length===0)return I("No skills found in this source."),0;let s=ln(t)??p(e);I(`Found ${o.length} skill(s) in ${s}:
+`)),1)}var Gp=["github.com","www.github.com"],Vp=/^([a-zA-Z0-9_.-]+)\/([a-zA-Z0-9_.@-]+)(\/.*)?$/,zp=/^([^@]+)@(.+)$/;function Wp(e){return !!(isAbsolute(e)||e==="."||e===".."||e.startsWith("./")||e.startsWith("../")||e.startsWith(".\\")||e.startsWith("..\\")||/^[a-zA-Z]:[/\\]/.test(e))}function _o(e){let t=e.replace(/\\/g,"/");t=t.replace(/^\/+/,"").replace(/\/+$/,"");let r=t.split("/").filter(Boolean);for(let n of r)if(n==="..")throw new Error(`Invalid subpath: "${e}" contains path traversal ("..").`);return r.join("/")}function qp(e){let t=e.pathname.split("/").filter(Boolean);if(t.length<2)throw new Error(`Invalid GitHub URL: expected at least owner/repo in "${e.href}"`);let r=t[0],n=t[1];n.endsWith(".git")&&(n=n.slice(0,-4));let o={type:"github",url:`https://github.com/${r}/${n}.git`};if(t.length>=3&&(t[2]==="tree"||t[2]==="blob")){if(t.length>=4&&(o.ref=t[3]),t.length>=5){let i=t.slice(4).join("/");o.subpath=_o(i);}}else if(t.length>2){let i=t.slice(2).join("/");o.subpath=_o(i);}return e.hash&&e.hash.length>1&&(o.ref=decodeURIComponent(e.hash.slice(1))),o}function on(e){let t=e.trim();if(!t)throw new Error("Skill source cannot be empty.");if(Wp(t)){let r=resolve(t);return {type:"local",url:r,localPath:r}}try{let r=new URL(t);if((r.protocol==="https:"||r.protocol==="http:")&&Gp.includes(r.hostname))return qp(r);if(r.protocol==="https:"||r.protocol==="http:"){let n={type:"git",url:t};return r.hash&&r.hash.length>1&&(n.ref=decodeURIComponent(r.hash.slice(1)),n.url=t.replace(r.hash,"")),n}if(r.protocol==="git:"){let n={type:"git",url:t};return r.hash&&r.hash.length>1&&(n.ref=decodeURIComponent(r.hash.slice(1)),n.url=t.replace(r.hash,"")),n}}catch{}if(t.startsWith("git@")||t.includes(":")&&t.includes(".git")){let r=t,n,o=t.indexOf("#");o!==-1&&(n=t.slice(o+1),r=t.slice(0,o));let i={type:"git",url:r};return n&&(i.ref=n),i}{let r=t,n,o=r.indexOf("#");o!==-1&&(n=r.slice(o+1),r=r.slice(0,o));let i=r.match(Vp);if(i){let s=i[1],c=i[2],a=i[3],l,u=c.match(zp);u&&(c=u[1],l=u[2]),c.endsWith(".git")&&(c=c.slice(0,-4));let g={type:"github",url:`https://github.com/${s}/${c}.git`};if(n&&(g.ref=n),l&&(g.skillFilter=l),a){let v=a.replace(/^\//,"");v&&(g.subpath=_o(v));}return g}}return {type:"git",url:t}}function sn(e){if(e.type!=="github")return null;try{let r=new URL(e.url).pathname.split("/").filter(Boolean);if(r.length<2)return null;let n=r[1];return n.endsWith(".git")&&(n=n.slice(0,-4)),`${r[0]}/${n}`}catch{return null}}var ed=6e4,Xe=class extends Error{url;isTimeout;isAuthError;constructor(t,r,n=false,o=false){super(t),this.name="GitCloneError",this.url=r,this.isTimeout=n,this.isAuthError=o;}};async function an(e,t){let r=await mkdtemp(join(tmpdir(),"flow-skills-")),n=simpleGit({timeout:{block:ed}}).env("GIT_TERMINAL_PROMPT","0").env("GIT_LFS_SKIP_SMUDGE","1"),o=t?["--depth","1","--branch",t]:["--depth","1"];try{return await n.clone(e,r,o),r}catch(i){await rm(r,{recursive:true,force:true}).catch(()=>{});let s=i instanceof Error?i.message:String(i),c=s.includes("block timeout")||s.includes("timed out"),a=s.includes("Authentication failed")||s.includes("could not read Username")||s.includes("Permission denied")||s.includes("Repository not found");throw c?new Xe("Clone timed out after 60s. Check your SSH keys or credentials.",e,true,false):a?new Xe(`Authentication failed for ${e}. Ensure you have access and credentials are configured.`,e,false,true):new Xe(`Failed to clone ${e}: ${s}`,e,false,false)}}async function ln(e){let t=normalize(resolve(e)),r=normalize(resolve(tmpdir()));if(!t.startsWith(r+sep))throw new Error("Attempted to clean up directory outside of temp directory");await rm(e,{recursive:true,force:true});}function Ga(e){let t=e.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/);return t?{data:parse(t[1])??{},content:t[2]??""}:{data:{},content:e}}var Do=new Set(["node_modules",".git","dist","build","__pycache__"]);function $t(e){return e.toLowerCase().replace(/[^a-z0-9._]+/g,"-").replace(/^[.-]+|[.-]+$/g,"").substring(0,255)||"unnamed-skill"}function Wa(e,t){let r=normalize(resolve(e)),n=normalize(resolve(t));return n.startsWith(r+sep)||n===r}function id(e,t){let r=normalize(resolve(e)),n=normalize(resolve(join(e,t)));return n.startsWith(r+sep)||n===r}async function Oo(e){try{let t=join(e,"SKILL.md");return (await stat(t)).isFile()}catch{return  false}}async function ar(e){try{let t=await readFile(e,"utf-8"),{data:r}=Ga(t);return typeof r.name!="string"||typeof r.description!="string"?null:{name:r.name,description:r.description,path:dirname(e),rawContent:t,metadata:r.metadata}}catch{return null}}async function qa(e,t=0,r=5){if(t>r)return [];try{let[n,o]=await Promise.all([Oo(e),readdir(e,{withFileTypes:!0}).catch(()=>[])]),i=n?[e]:[],s=await Promise.all(o.filter(c=>c.isDirectory()&&!Do.has(c.name)).map(c=>qa(join(e,c.name),t+1,r)));return [...i,...s.flat()]}catch{return []}}async function pn(e,t){let r=[],n=new Set;if(t&&!id(e,t))throw new Error(`Invalid subpath: "${t}" resolves outside the repository directory.`);let o=t?join(e,t):e;if(await Oo(o)){let s=await ar(join(o,"SKILL.md"));if(s)return r.push(s),n.add(s.name),r}let i=[o,join(o,"skills"),join(o,".claude/skills"),join(o,".agents/skills")];for(let s of i)try{let c=await readdir(s,{withFileTypes:!0});for(let a of c){if(!a.isDirectory())continue;let l=join(s,a.name);if(await Oo(l)){let u=await ar(join(l,"SKILL.md"));u&&!n.has(u.name)&&(r.push(u),n.add(u.name));}}}catch{}if(r.length===0){let s=await qa(o);for(let c of s){let a=await ar(join(c,"SKILL.md"));a&&!n.has(a.name)&&(r.push(a),n.add(a.name));}}return r}function Xa(e,t){let r=t.map(n=>n.toLowerCase());return e.filter(n=>{let o=n.name.toLowerCase();return r.some(i=>i===o)})}var Za=1;function Ya(){return {version:Za,skills:{}}}async function dn(e){let t=xn(e);try{let r=await readFile(t,"utf-8"),n=JSON.parse(r);return !n.version||n.version<Za?Ya():n}catch{return Ya()}}function ud(e){let t={};for(let r of Object.keys(e).sort())t[r]=e[r];return t}async function Qa(e,t){let r=xn(t);await mkdir(dirname(r),{recursive:true});let n={version:e.version,skills:ud(e.skills)};await writeFile(r,JSON.stringify(n,null,2)+`
+`,"utf-8");}async function el(e,t,r){let n=await dn(r),o=new Date().toISOString(),i=n.skills[e];n.skills[e]={...t,installedAt:i?.installedAt??o,updatedAt:o},await Qa(n,r);}async function tl(e,t){let r=await dn(t);e in r.skills&&(delete r.skills[e],await Qa(r,t));}var rl=S("skillInstaller");async function Sd(e,t,r,n){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"skill",source:"external",scope:t,version:r,duration_ms:n,interface:A().interfaceType});}catch(o){rl.warn(`Failed to send skill install metrics: ${String(o)}`);}}async function hd(e,t){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"skill",source:"external",error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:A().interfaceType});}catch(r){rl.warn(`Failed to send skill install-failed metrics: ${String(r)}`);}}async function wd(e,t){await cp(e,t,{recursive:true,dereference:true,filter:r=>!Do.has(basename(r))});}async function xd(e,t,r){let n=$t(e.name),o=Dt(t),i=join(o,n);if(!Wa(o,i))return {skill:e.name,success:false,path:i,error:`Unsafe install path: "${i}" escapes skills directory`};try{await rm(i,{recursive:!0,force:!0}),await mkdir(i,{recursive:!0}),await wd(e.path,i);let c=sn(r)??r.url;return await el(n,{source:c,sourceType:r.type,sourceUrl:r.url,ref:r.ref,skillPath:r.subpath},t),{skill:e.name,success:!0,path:i}}catch(s){return {skill:e.name,success:false,path:i,error:s instanceof Error?s.message:String(s)}}}async function nl(e,t){let r=on(e),n;try{let o;if(r.type==="local"){if(!r.localPath||!existsSync(r.localPath))return {source:e,results:[],discovered:0,installed:0,failed:0};o=r.localPath;}else n=await an(r.url,r.ref),o=n;let i=await pn(o,r.subpath),s=[...t.skillFilter??[]];r.skillFilter&&s.push(r.skillFilter);let c=s.length>0?Xa(i,s):i,a=[],l=r.ref??"latest";for(let u of c){let g=Date.now(),v=await xd(u,t.scope,r);a.push(v);let d=Date.now()-g;v.success?await Sd(u.name,t.scope,l,d):await hd(u.name,new Error(v.error??"Unknown error"));}return {source:e,results:a,discovered:i.length,installed:a.filter(u=>u.success).length,failed:a.filter(u=>!u.success).length}}finally{n&&await ln(n).catch(()=>{});}}var Ed=S("skills");async function Td(e){try{await b(x.CLI_TOOL_UNINSTALLED,{tool_id:e,tool_type:"skill",source:"external",interface:A().interfaceType});}catch(t){Ed.warn(`Failed to send skill uninstall metrics: ${String(t)}`);}}async function kd(e){let t=createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(`${e} (y/N) `,n=>{t.close(),r(n.trim().toLowerCase()==="y");});})}async function Cd(e){let t=on(e),r;try{let n;if(t.type==="local"){if(!t.localPath)return k("Invalid local path."),1;n=t.localPath;}else I(`Fetching skills from ${p(e)}...`),r=await an(t.url,t.ref),n=r;let o=await pn(n,t.subpath);if(o.length===0)return I("No skills found in this source."),0;let s=sn(t)??p(e);I(`Found ${o.length} skill(s) in ${s}:
 `);for(let c of o){let a=p(c.name),l=p(c.description);process.stdout.write(`  ${C.bold(a)}  ${C.dim(l)}
 `);}return process.stdout.write(`
-`),0}catch(n){return n instanceof et?k(n.message):k(n instanceof Error?n.message:String(n)),1}finally{r&&await un(r).catch(()=>{});}}function Ld(e){for(let r of e.results){let n=p(r.skill);if(r.success){let o=relative(process.cwd(),r.path);q(`${n} installed ${C.dim(`\u2192 ${o}/`)}`);}else k(`${n}: ${p(r.error??"unknown error")}`);}process.stdout.write(`
-`);let t=e.source;e.installed>0&&I(`Installed ${e.installed} of ${e.discovered} skill(s) from ${p(t)}`),e.failed>0&&k(`${e.failed} skill(s) failed to install`),e.results.length===0&&e.discovered===0?I("No skills found in this source."):e.results.length===0&&e.discovered>0&&I(`Found ${e.discovered} skill(s) but none matched the filter. Use --list to see available skills.`);}async function dl(e,t){if(t.list)return Ad(e);let r=t.global?"global":"project";try{let n=await ul(e,{scope:r,skillFilter:t.skill,yes:t.yes});return Ld(n),n.failed>0?1:0}catch(n){return n instanceof et?k(n.message):k(n instanceof Error?n.message:String(n)),1}}async function ml(e){let t=Ut(e),r=[];try{let n=await readdir(t,{withFileTypes:!0});for(let o of n){if(!o.isDirectory())continue;let i=join(t,o.name),s=join(i,"SKILL.md");try{if(!(await stat(s)).isFile())continue}catch{continue}let c=await cr(s);c?r.push({name:c.name,description:c.description,path:i}):r.push({name:o.name,description:"(no metadata)",path:i});}}catch{}return r}async function fl(e){let t=e.global?"global":"project",r=await ml(t),n=await fn(t);if(e.json){let i=r.map(s=>({name:s.name,description:s.description,path:s.path,source:n.skills[Rt(s.name)]?.source}));return Et(i),0}if(r.length===0)return I(`No skills installed (${t==="global"?"global":"project"} scope).`),0;I(`${t==="global"?"Global":"Project"} skills (${r.length}):
-`);for(let i of r){let s=n.skills[Rt(i.name)]?.source,c=p(i.name),a=p(i.description),l=a.length>80?a.slice(0,77)+"...":a,u=s?C.dim(` (${s})`):"";process.stdout.write(`  ${C.bold(c)}${u}
+`),0}catch(n){return n instanceof Xe?k(n.message):k(n instanceof Error?n.message:String(n)),1}finally{r&&await ln(r).catch(()=>{});}}function $d(e){for(let r of e.results){let n=p(r.skill);if(r.success){let o=relative(process.cwd(),r.path);V(`${n} installed ${C.dim(`\u2192 ${o}/`)}`);}else k(`${n}: ${p(r.error??"unknown error")}`);}process.stdout.write(`
+`);let t=e.source;e.installed>0&&I(`Installed ${e.installed} of ${e.discovered} skill(s) from ${p(t)}`),e.failed>0&&k(`${e.failed} skill(s) failed to install`),e.results.length===0&&e.discovered===0?I("No skills found in this source."):e.results.length===0&&e.discovered>0&&I(`Found ${e.discovered} skill(s) but none matched the filter. Use --list to see available skills.`);}async function il(e,t){if(t.list)return Cd(e);let r=t.global?"global":"project";try{let n=await nl(e,{scope:r,skillFilter:t.skill,yes:t.yes});return $d(n),n.failed>0?1:0}catch(n){return n instanceof Xe?k(n.message):k(n instanceof Error?n.message:String(n)),1}}async function sl(e){let t=Dt(e),r=[];try{let n=await readdir(t,{withFileTypes:!0});for(let o of n){if(!o.isDirectory())continue;let i=join(t,o.name),s=join(i,"SKILL.md");try{if(!(await stat(s)).isFile())continue}catch{continue}let c=await ar(s);c?r.push({name:c.name,description:c.description,path:i}):r.push({name:o.name,description:"(no metadata)",path:i});}}catch{}return r}async function al(e){let t=e.global?"global":"project",r=await sl(t),n=await dn(t);if(e.json){let i=r.map(s=>({name:s.name,description:s.description,path:s.path,source:n.skills[$t(s.name)]?.source}));return bt(i),0}if(r.length===0)return I(`No skills installed (${t==="global"?"global":"project"} scope).`),0;I(`${t==="global"?"Global":"Project"} skills (${r.length}):
+`);for(let i of r){let s=n.skills[$t(i.name)]?.source,c=p(i.name),a=p(i.description),l=a.length>80?a.slice(0,77)+"...":a,u=s?C.dim(` (${s})`):"";process.stdout.write(`  ${C.bold(c)}${u}
 `),process.stdout.write(`  ${C.dim(l)}
 
-`);}return 0}async function gl(e,t){let r=t.global?"global":"project";if(!e){let s=await ml(r);if(s.length===0)return I("No skills installed."),0;I("Installed skills:");for(let c of s)process.stdout.write(`  - ${p(c.name)}
+`);}return 0}async function ll(e,t){let r=t.global?"global":"project";if(!e){let s=await sl(r);if(s.length===0)return I("No skills installed."),0;I("Installed skills:");for(let c of s)process.stdout.write(`  - ${p(c.name)}
 `);return process.stdout.write(`
-`),I("Specify a skill name to remove: flow skills remove <name>"),1}let n=Rt(e),o=Ut(r),i=join(o,n);try{await stat(i);}catch{return k(`Skill "${p(e)}" is not installed.`),1}if(!t.force&&!await $d(`Remove skill "${p(n)}"?`))return I("Cancelled."),0;try{return await rm(i,{recursive:!0,force:!0}),await ll(n,r),await Cd(n),q(`Skill "${p(n)}" removed.`),0}catch(s){return k(`Failed to remove skill: ${s instanceof Error?s.message:String(s)}`),1}}$();function yl(e){let t=new Command;t.name("flow").description("FlowSetup CLI \u2014 Manage Flow plugins in your Claude Code").version(`@flow/cli v${He}`,"-V, --version","Display the CLI version").addHelpText("after",`
+`),I("Specify a skill name to remove: flow skills remove <name>"),1}let n=$t(e),o=Dt(r),i=join(o,n);try{await stat(i);}catch{return k(`Skill "${p(e)}" is not installed.`),1}if(!t.force&&!await kd(`Remove skill "${p(n)}"?`))return I("Cancelled."),0;try{return await rm(i,{recursive:!0,force:!0}),await tl(n,r),await Td(n),V(`Skill "${p(n)}" removed.`),0}catch(s){return k(`Failed to remove skill: ${s instanceof Error?s.message:String(s)}`),1}}function cl(e){let t=new Command;t.name("flow").description("FlowSetup CLI \u2014 Manage Flow plugins in your Claude Code").version(`@flow/cli v${Be}`,"-V, --version","Display the CLI version").addHelpText("after",`
 Without arguments, opens the interactive interface (TUI).
 Use 'flow <command> --help' for details on each command.`).action(async()=>{await e();});let r=new Command("setup").description("Configure the CLI by detecting Claude Code credentials");r.command("init").description("Initialize the Flow CLI configuration").addHelpText("after",`
 Examples:
-  $ flow setup init`).action(async()=>{let a=await Mo();process.exit(a);}),t.addCommand(r);let n=new Command("plugin").description("Manage plugins from the Findr catalog installed in your Claude Code");n.command("list").description("List available or installed plugins").option("--available","show full catalog with installation status",false).option("--outdated","show only plugins with updates available",false).option("--json","output as JSON",false).addHelpText("after",`
+  $ flow setup init`).action(async()=>{let a=await Ro();process.exit(a);}),t.addCommand(r);let n=new Command("plugin").description("Manage plugins from the Findr catalog installed in your Claude Code");n.command("list").description("List available or installed plugins").option("--available","show full catalog with installation status",false).option("--outdated","show only plugins with updates available",false).option("--json","output as JSON",false).addHelpText("after",`
 Examples:
   $ flow plugin list
   $ flow plugin list --available
   $ flow plugin list --outdated
-  $ flow plugin list --json`).action(async a=>{let l=await Fa(a);process.exit(l);}),n.command("install").description("Install one or more plugins from the Findr catalog into Claude Code").argument("<name...>","Name(s) of the plugin(s) to install (space-separated)").option("--force","Reinstall even if the version is already installed").option("--verbose","Display each step of the installation process").option("--silent","Output in JSON only").option("--marketplace-source <source>","GitHub source (owner/repo) for marketplace auto-add when installing external plugins").addOption(new Option("--scope <scope>","Scope to install into: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
+  $ flow plugin list --json`).action(async a=>{let l=await La(a);process.exit(l);}),n.command("install").description("Install one or more plugins from the Findr catalog into Claude Code").argument("<name...>","Name(s) of the plugin(s) to install (space-separated)").option("--force","Reinstall even if the version is already installed").option("--verbose","Display each step of the installation process").option("--silent","Output in JSON only").option("--marketplace-source <source>","GitHub source (owner/repo) for marketplace auto-add when installing external plugins").addOption(new Option("--scope <scope>","Scope to install into: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
 Examples:
   $ flow plugin install flow-adr-writer
   $ flow plugin install flow-adr-writer --scope project
@@ -118,11 +190,11 @@ Examples:
   $ flow plugin install flow-adr-writer --force
   $ flow plugin install flow-adr-writer --silent
   $ flow plugin install superpowers@claude-plugins-official
-  $ flow plugin install agent-sdk-dev@claude-code-plugins --marketplace-source anthropics/claude-code`).action(async(a,l)=>{let u=a.filter(v=>v.trim());if(u.length===0){k("No valid plugin names provided"),process.exit(1);return}se("cli",{verbose:l.verbose,silent:l.silent});let g=await Ua(u,l);process.exit(g);}),n.command("uninstall").description("Remove an installed plugin from Claude Code").argument("<name>","Name of the plugin to remove").option("--force","Skip interactive confirmation").addOption(new Option("--scope <scope>","Scope to uninstall from: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
+  $ flow plugin install agent-sdk-dev@claude-code-plugins --marketplace-source anthropics/claude-code`).action(async(a,l)=>{let u=a.filter(v=>v.trim());if(u.length===0){k("No valid plugin names provided"),process.exit(1);return}oe("cli",{verbose:l.verbose,silent:l.silent});let g=await Ra(u,l);process.exit(g);}),n.command("uninstall").description("Remove an installed plugin from Claude Code").argument("<name>","Name of the plugin to remove").option("--force","Skip interactive confirmation").addOption(new Option("--scope <scope>","Scope to uninstall from: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
 Examples:
   $ flow plugin uninstall flow-adr-writer
   $ flow plugin uninstall flow-adr-writer --scope project
-  $ flow plugin uninstall startup-pack-ai --force`).action(async(a,l)=>{let u=await Ka(a,l);process.exit(u);}),n.command("update").description("Update plugins to the latest version").argument("[name]","Name of the plugin to update (omit to update all)").option("--force","Force update even if already on latest version").option("--dry-run","Show what would be updated without making changes").option("--verbose","Display each step of the update process").option("--silent","Output in JSON only").addOption(new Option("--scope <scope>","Scope to update in: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
+  $ flow plugin uninstall startup-pack-ai --force`).action(async(a,l)=>{let u=await Ma(a,l);process.exit(u);}),n.command("update").description("Update plugins to the latest version").argument("[name]","Name of the plugin to update (omit to update all)").option("--force","Force update even if already on latest version").option("--dry-run","Show what would be updated without making changes").option("--verbose","Display each step of the update process").option("--silent","Output in JSON only").addOption(new Option("--scope <scope>","Scope to update in: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
 Examples:
   $ flow plugin update flow-adr-writer
   $ flow plugin update flow-adr-writer --scope project
@@ -131,49 +203,49 @@ Examples:
   $ flow plugin update flow-adr-writer --verbose
   $ flow plugin update flow-adr-writer --silent
   $ flow plugin update
-  $ flow plugin update --dry-run`).action(async(a,l)=>{se("cli",{verbose:l.verbose,silent:l.silent});let u=await Ha(a??null,l);process.exit(u);}),n.command("enable").description("Enable an installed plugin").argument("<name>","Name of the plugin to enable").addOption(new Option("--scope <scope>","Scope to enable in: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
+  $ flow plugin update --dry-run`).action(async(a,l)=>{oe("cli",{verbose:l.verbose,silent:l.silent});let u=await Na(a??null,l);process.exit(u);}),n.command("enable").description("Enable an installed plugin").argument("<name>","Name of the plugin to enable").addOption(new Option("--scope <scope>","Scope to enable in: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
 Examples:
   $ flow plugin enable flow-adr-writer
-  $ flow plugin enable flow-adr-writer --scope project`).action(async(a,l)=>{se("cli");let u=await ja(a,l);process.exit(u);}),n.command("disable").description("Disable an installed plugin").argument("<name>","Name of the plugin to disable").addOption(new Option("--scope <scope>","Scope to disable in: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
+  $ flow plugin enable flow-adr-writer --scope project`).action(async(a,l)=>{oe("cli");let u=await _a(a,l);process.exit(u);}),n.command("disable").description("Disable an installed plugin").argument("<name>","Name of the plugin to disable").addOption(new Option("--scope <scope>","Scope to disable in: user, project, or local").choices(["user","project","local"])).addHelpText("after",`
 Examples:
   $ flow plugin disable flow-adr-writer
-  $ flow plugin disable flow-adr-writer --scope project`).action(async(a,l)=>{se("cli");let u=await Ba(a,l);process.exit(u);});let o=new Command("marketplace").description("Manage plugin marketplaces");o.command("add").description("Register a plugin marketplace in Claude Code").argument("<source>","Marketplace source (owner/repo or URL)").option("--force","Skip confirmation prompt").option("--verbose","Display command output").option("--silent","Output as JSON only").addHelpText("after",`
+  $ flow plugin disable flow-adr-writer --scope project`).action(async(a,l)=>{oe("cli");let u=await Oa(a,l);process.exit(u);});let o=new Command("marketplace").description("Manage plugin marketplaces");o.command("add").description("Register a plugin marketplace in Claude Code").argument("<source>","Marketplace source (owner/repo or URL)").option("--force","Skip confirmation prompt").option("--verbose","Display command output").option("--silent","Output as JSON only").addHelpText("after",`
 Examples:
   $ flow plugin marketplace add anthropics/claude-code
   $ flow plugin marketplace add https://github.com/owner/repo
   $ flow plugin marketplace add anthropics/claude-code --force
-  $ flow plugin marketplace add anthropics/claude-code --silent`).action(async(a,l)=>{se("cli",{verbose:l.verbose,silent:l.silent});let u=await Ga(a,l);process.exit(u);}),n.addCommand(o),t.addCommand(n);let i=new Command("mcp").description("Manage MCP servers from the Findr catalog");i.command("add").description("Install an MCP server into Claude Code").argument("<name>","Name of the MCP server to install").argument("[args...]","Arguments to pass to the MCP server (URL for http, command for stdio)").addOption(new Option("--transport <type>","Transport type: http or stdio").choices(["http","stdio"]).makeOptionMandatory()).addOption(new Option("--scope <scope>","Scope to install into: user, project, or local").choices(["user","project","local"])).option("--force","Skip confirmation prompt").option("--verbose","Display command output").option("--silent","Output as JSON only").addHelpText("after",`
+  $ flow plugin marketplace add anthropics/claude-code --silent`).action(async(a,l)=>{oe("cli",{verbose:l.verbose,silent:l.silent});let u=await Ua(a,l);process.exit(u);}),n.addCommand(o),t.addCommand(n);let i=new Command("mcp").description("Manage MCP servers from the Findr catalog");i.command("add").description("Install an MCP server into Claude Code").argument("<name>","Name of the MCP server to install").argument("[args...]","Arguments to pass to the MCP server (URL for http, command for stdio)").addOption(new Option("--transport <type>","Transport type: http or stdio").choices(["http","stdio"]).makeOptionMandatory()).addOption(new Option("--scope <scope>","Scope to install into: user, project, or local").choices(["user","project","local"])).option("--force","Skip confirmation prompt").option("--verbose","Display command output").option("--silent","Output as JSON only").addHelpText("after",`
 Examples:
   $ flow mcp add notion --transport http https://mcp.notion.com/mcp
   $ flow mcp add mcp-chrome --transport stdio uvx mcp-chrome
   $ flow mcp add playwright-mcp --transport stdio uvx playwright-mcp --force
-  $ flow mcp add notion --transport http https://mcp.notion.com/mcp --scope project`).action(async(a,l,u)=>{se("cli",{verbose:u.verbose,silent:u.silent});let g=await ea(a,l,u);process.exit(g);}),i.command("remove").description("Remove an MCP server from Claude Code").argument("<name>","Name of the MCP server to remove").addOption(new Option("--scope <scope>","Scope to remove from: user, project, or local").choices(["user","project","local"])).option("--force","Skip confirmation prompt").option("--verbose","Display command output").option("--silent","Output as JSON only").addHelpText("after",`
+  $ flow mcp add notion --transport http https://mcp.notion.com/mcp --scope project`).action(async(a,l,u)=>{oe("cli",{verbose:u.verbose,silent:u.silent});let g=await zs(a,l,u);process.exit(g);}),i.command("remove").description("Remove an MCP server from Claude Code").argument("<name>","Name of the MCP server to remove").addOption(new Option("--scope <scope>","Scope to remove from: user, project, or local").choices(["user","project","local"])).option("--force","Skip confirmation prompt").option("--verbose","Display command output").option("--silent","Output as JSON only").addHelpText("after",`
 Examples:
   $ flow mcp remove notion
   $ flow mcp remove notion --scope project
-  $ flow mcp remove playwright-mcp --force`).action(async(a,l)=>{se("cli",{verbose:l.verbose,silent:l.silent});let u=await ta(a,l);process.exit(u);}),t.addCommand(i);let s=new Command("auth").description("Manage authentication credentials");s.command("login").description("Authenticate and save credentials locally").option("--client-id <id>","Client ID for non-interactive authentication").option("--client-secret <secret>","Client Secret for non-interactive authentication").option("--tenant <tenant>","Tenant for non-interactive authentication").option("--starter-kit <slug>","Starter kit slug for non-interactive setup").option("--verbose","Display each step of the authentication process").addHelpText("after",`
+  $ flow mcp remove playwright-mcp --force`).action(async(a,l)=>{oe("cli",{verbose:l.verbose,silent:l.silent});let u=await Ws(a,l);process.exit(u);}),t.addCommand(i);let s=new Command("auth").description("Manage authentication credentials");s.command("login").description("Authenticate and save credentials locally").option("--client-id <id>","Client ID for non-interactive authentication").option("--client-secret <secret>","Client Secret for non-interactive authentication").option("--tenant <tenant>","Tenant for non-interactive authentication").option("--starter-kit <slug>","Starter kit slug for non-interactive setup").option("--verbose","Display each step of the authentication process").addHelpText("after",`
 Examples:
   $ flow auth login
   $ flow auth login --client-id ID --client-secret SECRET --tenant TENANT
   $ flow auth login --client-id ID --client-secret SECRET --tenant TENANT --starter-kit dev
-  $ flow auth login --verbose`).action(async a=>{se("cli",{verbose:a.verbose});let l=await Mo(a);process.exit(l);}),s.command("logout").description("Remove locally saved credentials").option("--force","Skip interactive confirmation").addHelpText("after",`
+  $ flow auth login --verbose`).action(async a=>{oe("cli",{verbose:a.verbose});let l=await Ro(a);process.exit(l);}),s.command("logout").description("Remove locally saved credentials").option("--force","Skip interactive confirmation").addHelpText("after",`
 Examples:
   $ flow auth logout
-  $ flow auth logout --force`).action(async a=>{let l=await Da(a.force);process.exit(l);}),s.command("status").description("Display the current authentication status").addHelpText("after",`
+  $ flow auth logout --force`).action(async a=>{let l=await $a(a.force);process.exit(l);}),s.command("status").description("Display the current authentication status").addHelpText("after",`
 Examples:
-  $ flow auth status`).action(async()=>{let a=await Na();process.exit(a);}),t.addCommand(s);let c=new Command("skills").description("Manage skills for Claude Code from GitHub repositories or local paths");return c.command("add").description("Install skills from a GitHub repo or local path into Claude Code").argument("<source>","GitHub repo (owner/repo), URL, or local path").option("-g, --global","Install globally (~/.claude/skills/)").option("-s, --skill <names...>","Install only specific skills by name").option("-y, --yes","Skip confirmation prompts").option("--list","List available skills without installing").addHelpText("after",`
+  $ flow auth status`).action(async()=>{let a=await Aa();process.exit(a);}),t.addCommand(s);let c=new Command("skills").description("Manage skills for Claude Code from GitHub repositories or local paths");return c.command("add").description("Install skills from a GitHub repo or local path into Claude Code").argument("<source>","GitHub repo (owner/repo), URL, or local path").option("-g, --global","Install globally (~/.claude/skills/)").option("-s, --skill <names...>","Install only specific skills by name").option("-y, --yes","Skip confirmation prompts").option("--list","List available skills without installing").addHelpText("after",`
 Examples:
   $ flow skills add vercel-labs/agent-skills
   $ flow skills add owner/repo -g
   $ flow skills add owner/repo --skill pr-review commit
   $ flow skills add ./local/skills -y
-  $ flow skills add owner/repo --list`).action(async(a,l)=>{let u=await dl(a,l);process.exit(u);}),c.command("list").description("List installed skills").option("-g, --global","List global skills (default: project)").option("--json","Output as JSON").addHelpText("after",`
+  $ flow skills add owner/repo --list`).action(async(a,l)=>{let u=await il(a,l);process.exit(u);}),c.command("list").description("List installed skills").option("-g, --global","List global skills (default: project)").option("--json","Output as JSON").addHelpText("after",`
 Examples:
   $ flow skills list
   $ flow skills list -g
-  $ flow skills list --json`).action(async a=>{let l=await fl(a);process.exit(l);}),c.command("remove").description("Remove an installed skill").argument("[name]","Name of the skill to remove").option("-g, --global","Remove from global scope").option("--force","Skip confirmation").addHelpText("after",`
+  $ flow skills list --json`).action(async a=>{let l=await al(a);process.exit(l);}),c.command("remove").description("Remove an installed skill").argument("[name]","Name of the skill to remove").option("-g, --global","Remove from global scope").option("--force","Skip confirmation").addHelpText("after",`
 Examples:
   $ flow skills remove pr-review
-  $ flow skills remove pr-review -g --force`).action(async(a,l)=>{let u=await gl(a,l);process.exit(u);}),t.addCommand(c),t.command("health").description("Check the CLI configuration and connectivity").addHelpText("after",`
+  $ flow skills remove pr-review -g --force`).action(async(a,l)=>{let u=await ll(a,l);process.exit(u);}),t.addCommand(c),t.command("health").description("Check the CLI configuration and connectivity").addHelpText("after",`
 Examples:
-  $ flow health`).action(async()=>{let a=await za();process.exit(a);}),t}$();var _d=yl(async()=>{se("tui"),wi("tui"),xi(),process.on("SIGINT",()=>{jt("sigint").finally(()=>process.exit(130));}),process.on("SIGTERM",()=>{jt("sigterm").finally(()=>process.exit(143));}),await Ca(),render(jsx($a,{}),{alternateScreen:true,exitOnCtrlC:false});});_d.parse();
+  $ flow health`).action(async()=>{let a=await Ba();process.exit(a);}),t}var Ld=cl(async()=>{oe("tui"),di("tui"),mi(),process.on("SIGINT",()=>{Ut("sigint").finally(()=>process.exit(130));}),process.on("SIGTERM",()=>{Ut("sigterm").finally(()=>process.exit(143));}),await Ia(),render(jsx(ba,{}),{alternateScreen:true,exitOnCtrlC:false});});Ld.parse();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ciandt-flow/cli",
-  "version": "1.4.0-beta.164",
+  "version": "1.4.1-beta.168",
   "description": "TUI for browsing and installing Claude Code plugins from the Flow ecosystem",
   "type": "module",
   "main": "dist/index.js",
@@ -63,7 +63,6 @@
     "ink-big-text": "2.0.0",
     "ink-gradient": "4.0.0",
     "ink-spinner": "5.0.0",
-    "keytar": "7.9.0",
     "ky": "2.0.2",
     "proper-lockfile": "4.1.2",
     "react": "19.2.5",