npm - @ciandt-flow/cli - Versions diffs - 1.4.1-beta.168 → 1.4.1-beta.172 - Mend

@ciandt-flow/cli 1.4.1-beta.168 → 1.4.1-beta.172

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2) hide show

package/dist/index.js +50 -45
package/package.json +1 -1

package/dist/index.js CHANGED Viewed

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import {Box,Text,render,useWindowSize,useApp,useInput}from'ink';import kc,{useRef,useCallback,useMemo,useEffect,useState}from'react';import {create}from'zustand';import Hl,{HTTPError}from'ky';import*as yt from'crypto';import {randomUUID}from'crypto';import*as z from'fs';import z__default,{readFileSync,existsSync,realpathSync}from'fs';import*as U from'path';import U__default,{join,relative,resolve,normalize,sep,dirname,isAbsolute,basename}from'path';import*as he from'os';import he__default,{homedir,tmpdir}from'os';import {execFile,exec,spawn}from'child_process';import {promisify}from'util';import*as co from'readline';import {createInterface}from'readline';import An from'conf';import {StatusCodes}from'http-status-codes';import {jsxs,jsx,Fragment}from'react/jsx-runtime';import C from'chalk';import hc from'ink-big-text';import Jc from'ink-spinner';import*as Ie from'fs/promises';import {stat,rm,readdir,readFile,mkdtemp,mkdir,writeFile,cp}from'fs/promises';import Zc from'extract-zip';import Qc from'proper-lockfile';import lo from'semver';import {execa}from'execa';import Mo from'yocto-spinner';import {Command,Option}from'commander';import {simpleGit}from'simple-git';import {parse}from'yaml';var Uo="FLOW",O="flow-skills",yn="flow-cli",Lt="internal",lr="external",gt={skill:{label:"Skill",color:"cyan"},mcp:{label:"MCP",color:"yellow"},plugin:{label:"Plugin",color:"magenta"}},Bo={internal:{label:"Flow",color:"blue"},external:{label:"External",color:"white"}},Sn=new Set(["internal","external"]),Rt={user:{label:"Global",pathHint:"~/.claude/",actionLabel:"Global (~/.claude)",description:"available in all projects on this machine"},project:{label:"Project",pathHint:".claude/ (shared)",actionLabel:"Project (.claude/)",description:"shared with the team via version control"},local:{label:"Local",pathHint:".claude/ (local only)",actionLabel:"Local (.claude/)",description:"only on your machine, not committed"}},Oe=5,Ze=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;var Ko=new Set(["skill","mcp","plugin"]),f=create(e=>({screen:"auth",activeTab:"discover",focus:"list",selectedIndex:0,actionMenuOpen:false,notification:null,loading:false,loadingMessage:"",catalogError:null,pendingExit:false,catalogFilters:{types:new Set(Ko),origins:new Set(Sn)},setScreen:t=>e({screen:t}),setActiveTab:t=>e({activeTab:t}),setFocus:t=>e({focus:t}),setSelectedIndex:t=>e({selectedIndex:t}),setActionMenuOpen:t=>e({actionMenuOpen:t}),showNotification:(t,r)=>e({notification:{message:t,type:r}}),clearNotification:()=>e({notification:null}),setLoading:(t,r="")=>e({loading:t,loadingMessage:t?r:""}),setCatalogError:t=>e({catalogError:t}),setPendingExit:t=>e({pendingExit:t}),toggleTypeFilter:t=>e(r=>{let{types:n}=r.catalogFilters;return n.size===1&&n.has(t)?{}:{catalogFilters:{...r.catalogFilters,types:new Set([t])},selectedIndex:0}}),selectAllTypes:()=>e(t=>({catalogFilters:{...t.catalogFilters,types:new Set(Ko)},selectedIndex:0})),toggleOriginFilter:t=>e(r=>{let{origins:n}=r.catalogFilters;return n.size===1&&n.has(t)?{}:{catalogFilters:{...r.catalogFilters,origins:new Set([t])},selectedIndex:0}}),selectAllOrigins:()=>e(t=>({catalogFilters:{...t.catalogFilters,origins:new Set(Sn)},selectedIndex:0}))}));var cr="aes-256-gcm",pl=16,jo=16,Mt=class{key;constructor(t){if(t.length!==32)throw new Error(`Invalid key length: expected 32 bytes, got ${t.length}`);this.key=t;}encrypt(t){let r=yt.randomBytes(pl),n=yt.createCipheriv(cr,this.key,r,{authTagLength:jo}),o=Buffer.concat([n.update(t,"utf8"),n.final()]),i=n.getAuthTag();return {iv:r.toString("hex"),authTag:i.toString("hex"),ciphertext:o.toString("hex"),algorithm:cr}}decrypt(t){if(t.algorithm!==cr)throw new Error(`Unsupported encryption algorithm: ${t.algorithm}`);let r=yt.createDecipheriv(cr,this.key,Buffer.from(t.iv,"hex"),{authTagLength:jo});return r.setAuthTag(Buffer.from(t.authTag,"hex")),Buffer.concat([r.update(Buffer.from(t.ciphertext,"hex")),r.final()]).toString("utf8")}};var dl=/Bearer\s+[A-Za-z0-9\-._~+/]+=*/g,ml=/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,fl=/[A-Za-z0-9+/]{40,}={0,2}/g;function hn(e){return e.replace(dl,"Bearer ***").replace(ml,"***").replace(fl,"***")}var _t=class{context;constructor(t){this.context=t;}write(t){let r=this.context==="tui"?this.formatTui(t):this.formatCli(t);process.stderr.write(r+`
+import {Box,Text,render,useWindowSize,useApp,useInput}from'ink';import $c,{useRef,useCallback,useMemo,useEffect,useState}from'react';import {create}from'zustand';import Vl,{HTTPError}from'ky';import*as yt from'crypto';import {randomUUID}from'crypto';import*as z from'fs';import z__default,{readFileSync,existsSync,realpathSync}from'fs';import*as U from'path';import U__default,{join,relative,resolve,normalize,sep,dirname,isAbsolute,basename}from'path';import*as he from'os';import he__default,{homedir,tmpdir}from'os';import {execFile,exec,spawn}from'child_process';import {promisify}from'util';import*as co from'readline';import {createInterface}from'readline';import An from'conf';import {StatusCodes}from'http-status-codes';import {jsxs,jsx,Fragment}from'react/jsx-runtime';import C from'chalk';import xc from'ink-big-text';import Gc from'ink-spinner';import*as Ie from'fs/promises';import {stat,rm,readdir,readFile,mkdtemp,mkdir,writeFile,cp}from'fs/promises';import eu from'extract-zip';import tu from'proper-lockfile';import lo from'semver';import {execa}from'execa';import Mo from'yocto-spinner';import {Command,Option}from'commander';import {simpleGit}from'simple-git';import {parse}from'yaml';var Uo="FLOW",O="flow-skills",yn="flow-cli",Lt="internal",lr="external",gt={skill:{label:"Skill",color:"cyan"},mcp:{label:"MCP",color:"yellow"},plugin:{label:"Plugin",color:"magenta"}},Bo={internal:{label:"Flow",color:"blue"},external:{label:"External",color:"white"}},Sn=new Set(["internal","external"]),Rt={user:{label:"Global",pathHint:"~/.claude/",actionLabel:"Global (~/.claude)",description:"available in all projects on this machine"},project:{label:"Project",pathHint:".claude/ (shared)",actionLabel:"Project (.claude/)",description:"shared with the team via version control"},local:{label:"Local",pathHint:".claude/ (local only)",actionLabel:"Local (.claude/)",description:"only on your machine, not committed"}},Oe=5,Ze=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;var Ko=new Set(["skill","mcp","plugin"]),f=create(e=>({screen:"auth",activeTab:"discover",focus:"list",selectedIndex:0,actionMenuOpen:false,notification:null,loading:false,loadingMessage:"",catalogError:null,pendingExit:false,catalogFilters:{types:new Set(Ko),origins:new Set(Sn)},setScreen:t=>e({screen:t}),setActiveTab:t=>e({activeTab:t}),setFocus:t=>e({focus:t}),setSelectedIndex:t=>e({selectedIndex:t}),setActionMenuOpen:t=>e({actionMenuOpen:t}),showNotification:(t,r)=>e({notification:{message:t,type:r}}),clearNotification:()=>e({notification:null}),setLoading:(t,r="")=>e({loading:t,loadingMessage:t?r:""}),setCatalogError:t=>e({catalogError:t}),setPendingExit:t=>e({pendingExit:t}),toggleTypeFilter:t=>e(r=>{let{types:n}=r.catalogFilters;return n.size===1&&n.has(t)?{}:{catalogFilters:{...r.catalogFilters,types:new Set([t])},selectedIndex:0}}),selectAllTypes:()=>e(t=>({catalogFilters:{...t.catalogFilters,types:new Set(Ko)},selectedIndex:0})),toggleOriginFilter:t=>e(r=>{let{origins:n}=r.catalogFilters;return n.size===1&&n.has(t)?{}:{catalogFilters:{...r.catalogFilters,origins:new Set([t])},selectedIndex:0}}),selectAllOrigins:()=>e(t=>({catalogFilters:{...t.catalogFilters,origins:new Set(Sn)},selectedIndex:0}))}));var cr="aes-256-gcm",pl=16,jo=16,Mt=class{key;constructor(t){if(t.length!==32)throw new Error(`Invalid key length: expected 32 bytes, got ${t.length}`);this.key=t;}encrypt(t){let r=yt.randomBytes(pl),n=yt.createCipheriv(cr,this.key,r,{authTagLength:jo}),o=Buffer.concat([n.update(t,"utf8"),n.final()]),i=n.getAuthTag();return {iv:r.toString("hex"),authTag:i.toString("hex"),ciphertext:o.toString("hex"),algorithm:cr}}decrypt(t){if(t.algorithm!==cr)throw new Error(`Unsupported encryption algorithm: ${t.algorithm}`);let r=yt.createDecipheriv(cr,this.key,Buffer.from(t.iv,"hex"),{authTagLength:jo});return r.setAuthTag(Buffer.from(t.authTag,"hex")),Buffer.concat([r.update(Buffer.from(t.ciphertext,"hex")),r.final()]).toString("utf8")}};var dl=/Bearer\s+[A-Za-z0-9\-._~+/]+=*/g,ml=/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,fl=/[A-Za-z0-9+/]{40,}={0,2}/g;function hn(e){return e.replace(dl,"Bearer ***").replace(ml,"***").replace(fl,"***")}var _t=class{context;constructor(t){this.context=t;}write(t){let r=this.context==="tui"?this.formatTui(t):this.formatCli(t);process.stderr.write(r+`
 `);}formatTui(t){return `[flow:${t.module}] ${t.message}`}formatCli(t){let r=String(t.timestamp.getHours()).padStart(2,"0"),n=String(t.timestamp.getMinutes()).padStart(2,"0"),o=String(t.timestamp.getSeconds()).padStart(2,"0");return `[${r}:${n}:${o}] [${t.level.toUpperCase()}] ${t.message}`}};var Ot=".claude",Jo=".flow";function Ho(e,t){return U.join(he.homedir(),Ot,"plugins","cache",O,e,t)}function wn(e){return U.join(he.homedir(),Ot,"plugins","marketplaces",O,"plugins","native",e)}function ur(){return U.join(he.homedir(),Ot,"plugins","marketplaces",O,".claude-plugin","marketplace.json")}function Go(){return U.join(he.homedir(),Ot,"plugins","known_marketplaces.json")}function Vo(){return U.join(he.homedir(),Ot,"plugins","marketplaces",O)}function zo(){return U.join(he.homedir(),Jo,"cache","install.lock")}function Wo(){return U.join(he.homedir(),Jo,"logs","flowsetup.log")}function Dt(e){let t=e==="global"?he.homedir():process.cwd();return U.join(t,".claude","skills")}function xn(e){let t=e==="global"?he.homedir():process.cwd();return U.join(t,".claude","skills-lock.json")}var gl=5*1024*1024,yl=3,pr=class{filePath;constructor(){this.filePath=Wo(),this.ensureDir(),this.rotateIfNeeded();}write(t){let r=`[${t.timestamp.toISOString()}] [${t.level.toUpperCase()}] [${t.module}] ${t.message}
 `;try{z.appendFileSync(this.filePath,r,"utf-8");}catch{}}ensureDir(){try{let t=U.dirname(this.filePath);z.mkdirSync(t,{recursive:!0});}catch{}}rotateIfNeeded(){try{if(z.statSync(this.filePath).size>gl){let r=new Date().toISOString().replace(/[:.]/g,"-"),n=this.filePath.replace(".log",`-${r}.log`);z.renameSync(this.filePath,n),this.cleanOldBackups();}}catch{}}cleanOldBackups(){try{let t=U.dirname(this.filePath),r=U.basename(this.filePath,".log"),n=z.readdirSync(t).filter(o=>o.startsWith(r+"-")&&o.endsWith(".log")).sort().reverse();for(let o of n.slice(yl))z.unlinkSync(U.join(t,o));}catch{}}};var dr=class{write(t){process.stdout.write(t.message+`
-`);}};var St={debug:0,info:1,warn:2,error:3},et={context:"cli",transports:[],minLevel:"warn",debugModules:null};function Sl(){let e=process.env.DEBUG;if(!e)return null;let t=e.split(",").map(n=>n.trim()).filter(Boolean);for(let n of t)if(n==="flow:*")return "all";let r=new Set;for(let n of t)n.startsWith("flow:")&&r.add(n.slice(5));return r.size>0?r:null}function oe(e,t){if(e==="tui"){let r=Sl();et={context:e,transports:[new _t("tui"),new pr],minLevel:r?"debug":"warn",debugModules:r};}else t?.silent?et={context:e,transports:[],minLevel:"error",debugModules:null}:t?.verbose?et={context:e,transports:[new _t("cli")],minLevel:"debug",debugModules:null}:et={context:e,transports:[new dr],minLevel:"info",debugModules:null};}function qo(){return et.transports}function Xo(e,t){let{debugModules:r,minLevel:n}=et;return et.context==="tui"&&r&&r!=="all"?r.has(t)?St[e]>=St.debug:St[e]>=St.warn:St[e]>=St[n]}var Yo=new Map;function mr(e,t,r){if(!Xo(e,t))return;let n={level:e,module:t,message:hn(r),timestamp:new Date};for(let o of qo())o.write(n);}function S(e){let t=Yo.get(e);if(t)return t;let r={debug:n=>mr("debug",e,n),info:n=>mr("info",e,n),warn:n=>mr("warn",e,n),error:n=>mr("error",e,n)};return Yo.set(e,r),r}var In=S("encryption"),bn="__encrypted__";function hl(e){return typeof e=="object"&&e!==null&&bn in e&&e[bn]===true}function vn(e){return {serialize(t){let r=JSON.stringify(t),n=e.encrypt(r),o={[bn]:true,envelope:n};return JSON.stringify(o,null,"	")},deserialize(t){let r;try{r=JSON.parse(t);}catch{return In.warn("[encryption] Config file contains unparseable data, treating as empty"),{}}if(hl(r))try{let n=e.decrypt(r.envelope);return JSON.parse(n)}catch(n){return In.error(`[encryption] Decryption failed: ${n instanceof Error?n.message:"unknown error"}. Config will be treated as empty. Re-authentication may be required.`),{}}return In.info("[encryption] Detected plaintext config \u2014 will encrypt on next write"),r}}}var Pn=promisify(execFile),Il=promisify(exec),ue=S("encryption:macos-keyvault"),ht=class{static async isAvailable(){try{let{stdout:t}=await Il("command -v security");return ue.debug(`security binary found at: ${t.trim()}`),!0}catch{return ue.debug("security binary not found in PATH"),false}}async getSecret(t,r){try{ue.debug(`Looking up secret: service=${t}, account=${r}`);let{stdout:n}=await Pn("security",["find-generic-password","-w","-a",r,"-s",t]),o=n.trim();return ue.debug(`security find-generic-password result: ${o?"found":"empty"}`),o||null}catch(n){let o=n;return ue.debug(`security find-generic-password failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),null}}async setSecret(t,r,n){try{ue.debug(`Storing secret: service=${t}, account=${r}`),await Pn("security",["add-generic-password","-U","-a",r,"-s",t,"-w",n]),ue.debug("security add-generic-password succeeded");}catch(o){let i=o;throw ue.error(`security add-generic-password failed: code=${i.code}, stderr=${i.stderr?.trim()}, message=${i.message}`),o}}async deleteSecret(t,r){try{return ue.debug(`Deleting secret: service=${t}, account=${r}`),await Pn("security",["delete-generic-password","-a",r,"-s",t]),ue.debug("security delete-generic-password succeeded"),!0}catch(n){let o=n;return ue.debug(`security delete-generic-password failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),false}}getStoragePath(){return "macOS Keychain (security)"}};var En=promisify(execFile),Tn=promisify(exec),El=[{name:"apt",command:"sudo apt install -y libsecret-tools"},{name:"dnf",command:"sudo dnf install -y libsecret"},{name:"pacman",command:"sudo pacman -S --noconfirm libsecret"},{name:"apk",command:"sudo apk add libsecret-tools"},{name:"zypper",command:"sudo zypper install -y libsecret-tools"}],R=S("encryption:linux-keyvault");async function Tl(e,t){let r=["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"],n=0,o=setInterval(()=>{process.stderr.write(`\r${r[n++%r.length]}  ${e}`);},80);try{return await t()}finally{clearInterval(o),process.stderr.write("\r\x1B[2K");}}function kl(e){let t=co.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(e,n=>{t.close(),r(n.trim().toLowerCase());});})}var De=class e{static async isAvailable(){try{let{stdout:t}=await Tn("command -v secret-tool");R.debug(`secret-tool found at: ${t.trim()}`);}catch{return R.debug("secret-tool binary not found in PATH"),false}try{return await En("secret-tool",["lookup","service","__flow_connectivity_check__"]),R.debug("Secret Service D-Bus connectivity check passed"),!0}catch(t){let n=t.stderr?.trim()??"";return n.includes("org.freedesktop.secrets")?(R.debug(`Secret Service D-Bus not available: ${n}`),false):(R.debug("secret-tool is available and D-Bus service is reachable"),true)}}static async detectPackageManager(){for(let t of El)try{return await Tn(`command -v ${t.name}`),t}catch{}return null}static async ensureInstalled(){if(await e.isAvailable())return  true;R.info("Secure credential storage requires 'secret-tool' (libsecret). This tool allows us to store your encryption key in the OS keyring, so your credentials are protected even if someone copies the config file.");let t=await e.detectPackageManager();if(!t)return R.warn("Could not detect a supported package manager. Please install libsecret manually."),false;let r=await kl("  ? Install secret-tool? This requires sudo. (y/N) ");if(r!=="y"&&r!=="yes")return  false;try{return R.info(`Running: ${t.command}`),await Tl("Installing secret-tool...",()=>Tn(t.command)),e.isAvailable()}catch{return R.warn("Installation failed. Falling back to derived key."),false}}async getSecret(t,r){try{R.debug(`Looking up secret: service=${t}, account=${r}`);let{stdout:n}=await En("secret-tool",["lookup","service",t,"account",r]),o=n.trim();return R.debug(`secret-tool lookup result: ${o?"found":"empty"}`),o||null}catch(n){let o=n;return R.debug(`secret-tool lookup failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),null}}async setSecret(t,r,n){R.debug(`Storing secret: service=${t}, account=${r}`),R.debug(`Environment: DBUS_SESSION_BUS_ADDRESS=${process.env.DBUS_SESSION_BUS_ADDRESS??"NOT SET"}`),R.debug(`Environment: DISPLAY=${process.env.DISPLAY??"NOT SET"}, WAYLAND_DISPLAY=${process.env.WAYLAND_DISPLAY??"NOT SET"}`),R.debug(`Environment: WSL_DISTRO_NAME=${process.env.WSL_DISTRO_NAME??"NOT SET"}`),await new Promise((o,i)=>{let s=spawn("secret-tool",["store","--label",t,"service",t,"account",r]),c="";s.stderr.on("data",a=>{c+=a.toString();}),s.stdin.end(n,"utf8"),s.on("close",a=>{a===0?(R.debug("secret-tool store succeeded"),o()):(R.error(`secret-tool store failed: code=${a}, stderr=${c.trim()}`),i(new Error(`secret-tool exited with code ${a}${c?`: ${c.trim()}`:""}`)));}),s.on("error",a=>{R.error(`secret-tool store spawn error: ${a.message}`),i(a);});});}async deleteSecret(t,r){try{return R.debug(`Deleting secret: service=${t}, account=${r}`),await En("secret-tool",["clear","service",t,"account",r]),R.debug("secret-tool clear succeeded"),!0}catch(n){let o=n;return R.debug(`secret-tool clear failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),false}}getStoragePath(){return "Linux Secret Service (secret-tool)"}};var Al=promisify(execFile),pe=S("encryption:windows-keyvault"),kn=1,Ll=2;function Cn(e,t){return `${e}:${t}`}var $n=`
+`);}};var St={debug:0,info:1,warn:2,error:3},et={context:"cli",transports:[],minLevel:"warn",debugModules:null};function Sl(){let e=process.env.DEBUG;if(!e)return null;let t=e.split(",").map(n=>n.trim()).filter(Boolean);for(let n of t)if(n==="flow:*")return "all";let r=new Set;for(let n of t)n.startsWith("flow:")&&r.add(n.slice(5));return r.size>0?r:null}function oe(e,t){if(e==="tui"){let r=Sl();et={context:e,transports:[new _t("tui"),new pr],minLevel:r?"debug":"warn",debugModules:r};}else t?.silent?et={context:e,transports:[],minLevel:"error",debugModules:null}:t?.verbose?et={context:e,transports:[new _t("cli")],minLevel:"debug",debugModules:null}:et={context:e,transports:[new dr],minLevel:"info",debugModules:null};}function qo(){return et.transports}function Xo(e,t){let{debugModules:r,minLevel:n}=et;return et.context==="tui"&&r&&r!=="all"?r.has(t)?St[e]>=St.debug:St[e]>=St.warn:St[e]>=St[n]}var Yo=new Map;function mr(e,t,r){if(!Xo(e,t))return;let n={level:e,module:t,message:hn(r),timestamp:new Date};for(let o of qo())o.write(n);}function S(e){let t=Yo.get(e);if(t)return t;let r={debug:n=>mr("debug",e,n),info:n=>mr("info",e,n),warn:n=>mr("warn",e,n),error:n=>mr("error",e,n)};return Yo.set(e,r),r}var In=S("encryption"),bn="__encrypted__";function hl(e){return typeof e=="object"&&e!==null&&bn in e&&e[bn]===true}function vn(e){return {serialize(t){let r=JSON.stringify(t),n=e.encrypt(r),o={[bn]:true,envelope:n};return JSON.stringify(o,null,"	")},deserialize(t){let r;try{r=JSON.parse(t);}catch{return In.warn("[encryption] Config file contains unparseable data, treating as empty"),{}}if(hl(r))try{let n=e.decrypt(r.envelope);return JSON.parse(n)}catch(n){return In.error(`[encryption] Decryption failed: ${n instanceof Error?n.message:"unknown error"}. Config will be treated as empty. Re-authentication may be required.`),{}}return In.info("[encryption] Detected plaintext config \u2014 will encrypt on next write"),r}}}var Pn=promisify(execFile),Il=promisify(exec),ue=S("encryption:macos-keyvault"),ht=class{static async isAvailable(){try{let{stdout:t}=await Il("command -v security");return ue.debug(`security binary found at: ${t.trim()}`),!0}catch{return ue.debug("security binary not found in PATH"),false}}async getSecret(t,r){try{ue.debug(`Looking up secret: service=${t}, account=${r}`);let{stdout:n}=await Pn("security",["find-generic-password","-w","-a",r,"-s",t]),o=n.trim();return ue.debug(`security find-generic-password result: ${o?"found":"empty"}`),o||null}catch(n){let o=n;return ue.debug(`security find-generic-password failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),null}}async setSecret(t,r,n){try{ue.debug(`Storing secret: service=${t}, account=${r}`),await Pn("security",["add-generic-password","-U","-a",r,"-s",t,"-w",n]),ue.debug("security add-generic-password succeeded");}catch(o){let i=o;throw ue.error(`security add-generic-password failed: code=${i.code}, stderr=${i.stderr?.trim()}, message=${i.message}`),o}}async deleteSecret(t,r){try{return ue.debug(`Deleting secret: service=${t}, account=${r}`),await Pn("security",["delete-generic-password","-a",r,"-s",t]),ue.debug("security delete-generic-password succeeded"),!0}catch(n){let o=n;return ue.debug(`security delete-generic-password failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),false}}getStoragePath(){return "macOS Keychain (security)"}};var En=promisify(execFile),Tn=promisify(exec),El=[{name:"apt",command:"sudo apt install -y libsecret-tools"},{name:"dnf",command:"sudo dnf install -y libsecret"},{name:"pacman",command:"sudo pacman -S --noconfirm libsecret"},{name:"apk",command:"sudo apk add libsecret-tools"},{name:"zypper",command:"sudo zypper install -y libsecret-tools"}],R=S("encryption:linux-keyvault");async function Tl(e,t){let r=["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"],n=0,o=setInterval(()=>{process.stderr.write(`\r${r[n++%r.length]}  ${e}`);},80);try{return await t()}finally{clearInterval(o),process.stderr.write("\r\x1B[2K");}}function kl(e){let t=co.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(e,n=>{t.close(),r(n.trim().toLowerCase());});})}var De=class e{static async isAvailable(){try{let{stdout:t}=await Tn("command -v secret-tool");R.debug(`secret-tool found at: ${t.trim()}`);}catch{return R.debug("secret-tool binary not found in PATH"),false}try{return await En("secret-tool",["lookup","service","__flow_connectivity_check__"]),R.debug("Secret Service D-Bus connectivity check passed"),!0}catch(t){let n=t.stderr?.trim()??"";return n.includes("org.freedesktop.secrets")?(R.debug(`Secret Service D-Bus not available: ${n}`),false):(R.debug("secret-tool is available and D-Bus service is reachable"),true)}}static async detectPackageManager(){for(let t of El)try{return await Tn(`command -v ${t.name}`),t}catch{}return null}static async ensureInstalled(){if(await e.isAvailable())return  true;R.info("Secure credential storage requires 'secret-tool' (libsecret). This tool allows us to store your encryption key in the OS keyring, so your credentials are protected even if someone copies the config file.");let t=await e.detectPackageManager();if(!t)return R.warn("Could not detect a supported package manager. Please install libsecret manually."),false;let r=await kl("  ? Install secret-tool? This requires sudo. (y/N) ");if(r!=="y"&&r!=="yes")return  false;try{return R.info(`Running: ${t.command}`),await Tl("Installing secret-tool...",()=>Tn(t.command)),e.isAvailable()}catch{return R.warn("Installation failed. Falling back to derived key."),false}}async getSecret(t,r){try{R.debug(`Looking up secret: service=${t}, account=${r}`);let{stdout:n}=await En("secret-tool",["lookup","service",t,"account",r]),o=n.trim();return R.debug(`secret-tool lookup result: ${o?"found":"empty"}`),o||null}catch(n){let o=n;return R.debug(`secret-tool lookup failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),null}}async setSecret(t,r,n){R.debug(`Storing secret: service=${t}, account=${r}`),R.debug(`Environment: DBUS_SESSION_BUS_ADDRESS=${process.env.DBUS_SESSION_BUS_ADDRESS??"NOT SET"}`),R.debug(`Environment: DISPLAY=${process.env.DISPLAY??"NOT SET"}, WAYLAND_DISPLAY=${process.env.WAYLAND_DISPLAY??"NOT SET"}`),R.debug(`Environment: WSL_DISTRO_NAME=${process.env.WSL_DISTRO_NAME??"NOT SET"}`),await new Promise((o,i)=>{let s=spawn("secret-tool",["store","--label",t,"service",t,"account",r]),c="";s.stderr.on("data",a=>{c+=a.toString();}),s.stdin.end(n,"utf8"),s.on("close",a=>{a===0?(R.debug("secret-tool store succeeded"),o()):(R.error(`secret-tool store failed: code=${a}, stderr=${c.trim()}`),i(new Error(`secret-tool exited with code ${a}${c?`: ${c.trim()}`:""}`)));}),s.on("error",a=>{R.error(`secret-tool store spawn error: ${a.message}`),i(a);});});}async deleteSecret(t,r){try{return R.debug(`Deleting secret: service=${t}, account=${r}`),await En("secret-tool",["clear","service",t,"account",r]),R.debug("secret-tool clear succeeded"),!0}catch(n){let o=n;return R.debug(`secret-tool clear failed: code=${o.code}, stderr=${o.stderr?.trim()}, message=${o.message}`),false}}getStoragePath(){return "Linux Secret Service (secret-tool)"}};var Al=promisify(execFile),pe=S("encryption:windows-keyvault"),kn=1,Ll=1,Rl=2,Ml=3;function Cn(e,t){return `${e}:${t}`}var $n=`
 using System;
 using System.Runtime.InteropServices;
 using System.Text;
@@ -46,41 +46,46 @@ public class FlowCredManager {
     } finally { CredFree(credPtr); }
   }
-  public static bool Write(string target, string secret, string userName) {
+  public static string Write(string target, string secret, string userName) {
     byte[] bytes = Encoding.Unicode.GetBytes(secret);
-    var cred = new CREDENTIAL();
-    cred.Type = ${kn};
-    cred.TargetName = target;
-    cred.CredentialBlobSize = bytes.Length;
-    cred.CredentialBlob = Marshal.AllocHGlobal(bytes.Length);
-    cred.Persist = ${Ll};
-    cred.UserName = userName;
-    try {
-      Marshal.Copy(bytes, 0, cred.CredentialBlob, bytes.Length);
-      return CredWrite(ref cred, 0);
-    } finally { Marshal.FreeHGlobal(cred.CredentialBlob); }
+    int[] persistLevels = new int[] { ${Rl}, ${Ml}, ${Ll} };
+    foreach (int persist in persistLevels) {
+      var cred = new CREDENTIAL();
+      cred.Type = ${kn};
+      cred.TargetName = target;
+      cred.CredentialBlobSize = bytes.Length;
+      cred.CredentialBlob = Marshal.AllocHGlobal(bytes.Length);
+      cred.Persist = persist;
+      cred.UserName = userName;
+      try {
+        Marshal.Copy(bytes, 0, cred.CredentialBlob, bytes.Length);
+        if (CredWrite(ref cred, 0)) return "OK:" + persist;
+      } finally { Marshal.FreeHGlobal(cred.CredentialBlob); }
+    }
+    int err = Marshal.GetLastWin32Error();
+    return "ERR:" + err;
   }
   public static bool Delete(string target) {
     return CredDelete(target, ${kn}, 0);
   }
 }
-`;function Nt(e){return e.replace(/'/g,"''")}function fr(e){return ["-NoProfile","-NonInteractive","-Command",e]}function Rl(e){return `Add-Type -TypeDefinition @'
+`;function Nt(e){return e.replace(/'/g,"''")}function fr(e){return ["-NoProfile","-NonInteractive","-Command",e]}function _l(e){return `Add-Type -TypeDefinition @'
 ${$n}
 '@
-[FlowCredManager]::Read('${Nt(e)}')`}function Ml(e,t,r){return `Add-Type -TypeDefinition @'
+[FlowCredManager]::Read('${Nt(e)}')`}function Ol(e,t,r){return `Add-Type -TypeDefinition @'
 ${$n}
 '@
-[FlowCredManager]::Write('${Nt(e)}', '${Nt(t)}', '${Nt(r)}')`}function _l(e){return `Add-Type -TypeDefinition @'
+[FlowCredManager]::Write('${Nt(e)}', '${Nt(t)}', '${Nt(r)}')`}function Dl(e){return `Add-Type -TypeDefinition @'
 ${$n}
 '@
 [FlowCredManager]::Delete('${Nt(e)}')`}async function gr(e){return Al("powershell.exe",e)}var wt=class{static async isAvailable(){try{let{stdout:t}=await gr(fr('Write-Output "ok"')),r=t.trim()==="ok";return pe.debug(`PowerShell availability check: ${r?"available":"unexpected output"}`),r}catch(t){let r=t instanceof Error?t.message.split(`
-`)[0]:"unknown error";return pe.debug(`PowerShell not available: ${r}`),false}}async getSecret(t,r){try{let n=Cn(t,r);pe.debug(`Looking up secret: target=${n}`);let o=Rl(n),{stdout:i}=await gr(fr(o)),s=i.trim();return pe.debug(`CredRead result: ${s?"found":"empty"}`),s||null}catch(n){let o=n instanceof Error?n.message.split(`
-`)[0]:"unknown error";return pe.error(`Failed to read secret from Windows Credential Manager [service="${t}", account="${r}"]: ${o}`),null}}async setSecret(t,r,n){try{let o=Cn(t,r);pe.debug(`Storing secret: target=${o}`);let i=Ml(o,n,r),{stdout:s}=await gr(fr(i));if(s.trim()!=="True")throw new Error("CredWrite returned False");pe.debug("CredWrite succeeded");}catch(o){let i=o instanceof Error?o.message.split(`
-`)[0]:"unknown error",s=`Failed to store secret in Windows Credential Manager [service="${t}", account="${r}"]: ${i}`;throw pe.error(s),new Error(s)}}async deleteSecret(t,r){try{let n=Cn(t,r);pe.debug(`Deleting secret: target=${n}`);let o=_l(n),{stdout:i}=await gr(fr(o)),s=i.trim()==="True";return pe.debug(`CredDelete result: ${s}`),s}catch(n){let o=n instanceof Error?n.message.split(`
-`)[0]:"unknown error";return pe.debug(`Failed to delete secret from Windows Credential Manager [service="${t}", account="${r}"]: ${o}`),false}}getStoragePath(){return "Windows Credential Manager (PowerShell)"}};var Ol=32,Dl="flow-plugins-cli-fallback",Ln="flow-plugins-cli-fallback",Nl={linux:"install secret-tool (e.g. sudo apt install libsecret-tools)",darwin:"ensure the Keychain is accessible (security binary must be available)",win32:"ensure Credential Manager is available (cmdkey must be in PATH)"};function Fl(){let e=`${he.hostname()}${he.userInfo().username}`;return yt.scryptSync(e,Dl,Ol)}function Ul(){let e=Fl(),t=new Mt(e),r=vn(t);return new An({projectName:Ln,serialize:r.serialize,deserialize:r.deserialize})}var Sr=null;function yr(){return Sr||(Sr=Ul()),Sr}var X=class{warned=false;async getSecret(t,r){return yr().get(`${t}:${r}`)??null}async setSecret(t,r,n){if(!this.warned){let o=Nl[process.platform]??"ensure the OS keyring is available";process.stderr.write(`\u26A0  Secure keyring unavailable. Credentials are stored in an encrypted file
+`)[0]:"unknown error";return pe.debug(`PowerShell not available: ${r}`),false}}async getSecret(t,r){try{let n=Cn(t,r);pe.debug(`Looking up secret: target=${n}`);let o=_l(n),{stdout:i}=await gr(fr(o)),s=i.trim();return pe.debug(`CredRead result: ${s?"found":"empty"}`),s||null}catch(n){let o=n instanceof Error?n.message.split(`
+`)[0]:"unknown error";return pe.error(`Failed to read secret from Windows Credential Manager [service="${t}", account="${r}"]: ${o}`),null}}async setSecret(t,r,n){try{let o=Cn(t,r);pe.debug(`Storing secret: target=${o}`);let i=Ol(o,n,r),{stdout:s}=await gr(fr(i)),c=s.trim();if(c.startsWith("OK:")){let l=c.split(":")[1];pe.debug(`CredWrite succeeded (persist=${l})`);return}let a=c.startsWith("ERR:")?c.split(":")[1]:"unknown";throw new Error(`CredWrite failed with Win32 error ${a}`)}catch(o){let i=o instanceof Error?o.message.split(`
+`)[0]:"unknown error",s=`Failed to store secret in Windows Credential Manager [service="${t}", account="${r}"]: ${i}`;throw pe.error(s),new Error(s)}}async deleteSecret(t,r){try{let n=Cn(t,r);pe.debug(`Deleting secret: target=${n}`);let o=Dl(n),{stdout:i}=await gr(fr(o)),s=i.trim()==="True";return pe.debug(`CredDelete result: ${s}`),s}catch(n){let o=n instanceof Error?n.message.split(`
+`)[0]:"unknown error";return pe.debug(`Failed to delete secret from Windows Credential Manager [service="${t}", account="${r}"]: ${o}`),false}}getStoragePath(){return "Windows Credential Manager (PowerShell)"}};var Nl=32,Fl="flow-plugins-cli-fallback",Ln="flow-plugins-cli-fallback",Ul={linux:"install secret-tool (e.g. sudo apt install libsecret-tools)",darwin:"ensure the Keychain is accessible (security binary must be available)",win32:"ensure Credential Manager is available (cmdkey must be in PATH)"};function Bl(){let e=`${he.hostname()}${he.userInfo().username}`;return yt.scryptSync(e,Fl,Nl)}function Kl(){let e=Bl(),t=new Mt(e),r=vn(t);return new An({projectName:Ln,serialize:r.serialize,deserialize:r.deserialize})}var Sr=null;function yr(){return Sr||(Sr=Kl()),Sr}var X=class{warned=false;async getSecret(t,r){return yr().get(`${t}:${r}`)??null}async setSecret(t,r,n){if(!this.warned){let o=Ul[process.platform]??"ensure the OS keyring is available";process.stderr.write(`\u26A0  Secure keyring unavailable. Credentials are stored in an encrypted file
    using a machine-derived key. For stronger security, ${o}.
-`),this.warned=true;}yr().set(`${t}:${r}`,n);}async deleteSecret(t,r){let n=yr(),o=`${t}:${r}`;return n.has(o)?(n.delete(o),true):false}getStoragePath(){return yr().path}static hasExistingData(){try{let t=new An({projectName:Ln});return z.existsSync(t.path)}catch{return  false}}static clearFallbackFile(){try{let t=new An({projectName:Ln});z.rmSync(t.path,{force:!0});}catch{}Sr=null;}};async function Rn(){if(X.hasExistingData())return new X;switch(process.platform){case "darwin":return await ht.isAvailable()?new ht:new X;case "linux":return await De.isAvailable()?new De:await De.ensureInstalled()?new De:new X;case "win32":return await wt.isAvailable()?new wt:new X;default:throw new Error(`Unsupported platform: ${process.platform}`)}}var Bl=S("config:credentials"),$e="flow-plugins-cli",Mn="credentials",_n="token-cache",On="user-info",xr=null;async function Ne(){return xr||(xr=Rn()),xr}function Ir(){xr=null;}async function D(){let t=await(await Ne()).getSecret($e,Mn);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function tt(e){let{clientId:t,clientSecret:r,tenant:n}=e,o=[!t?.trim()&&"clientId",!r?.trim()&&"clientSecret",!n?.trim()&&"tenant"].filter(Boolean);if(o.length>0)throw Bl.error(`missing or empty fields: ${o.join(", ")}`),new Error("Cannot save credentials: clientId, clientSecret, and tenant are required");await(await Ne()).setSecret($e,Mn,JSON.stringify(e));}async function ri(){let e=await Ne();await e.deleteSecret($e,Mn),await e.deleteSecret($e,_n),await e.deleteSecret($e,On);}async function ni(){return (await Ne()).getStoragePath()}async function oi(e){await(await Ne()).setSecret($e,_n,JSON.stringify(e));}async function br(){let t=await(await Ne()).getSecret($e,_n);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function vr(e){await(await Ne()).setSecret($e,On,JSON.stringify(e));}async function ii(){let t=await(await Ne()).getSecret($e,On);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function xt(){let e=await br();return e?new Date(e.expiresAt)>new Date:false}function Pr(e){let t=e.split(".");if(t.length!==3)throw new Error(`Invalid JWT: expected 3 segments, got ${t.length}`);let r=t[1].replace(/-/g,"+").replace(/_/g,"/"),n=Buffer.from(r,"base64").toString("utf8");try{return JSON.parse(n)}catch{throw new Error("Invalid JWT: payload segment is not valid JSON")}}var si=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^100\.(6[4-9]|[7-9]\d|1[0-2][0-7])\./,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^0\.0\.0\.0$/,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i];function Kl(e){if(!e.startsWith("[")||!e.endsWith("]"))return null;let r=e.slice(1,-1).match(/^::(?:ffff:)?([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i);if(!r)return null;let n=parseInt(r[1],16),o=parseInt(r[2],16);return `${n>>8&255}.${n&255}.${o>>8&255}.${o&255}`}function jl(e){if(si.some(r=>r.test(e)))return  true;let t=Kl(e);return !!(t&&si.some(r=>r.test(t)))}function Jl(e,t){let r=process.env[e]??t;if(!r)throw new Error(`Missing required environment variable: ${e}`);return r}function It(e,t){let r=Jl(e,t),n;try{n=new URL(r);}catch{throw new Error(`${e} must be a valid URL. Got: "${r}"`)}let o=process.env.NODE_ENV==="development";if(!o&&n.protocol!=="https:")throw new Error(`${e} must be an HTTPS URL. Got protocol: "${n.protocol}"`);if(n.username||n.password)throw new Error(`${e} must not contain embedded credentials (user:pass@host is not allowed)`);if(!o&&jl(n.hostname))throw new Error(`${e} must not point to a private/loopback address. Got: "${n.hostname}"`);return r}var Dn=S("api:auth");function Vl(e){if(!Ze.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var ai={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};async function zl(e){if(e instanceof HTTPError){let t=e.response.status;Dn.error(`HTTP error during authentication [status=${t}]`);let r="";try{let n=await e.response.text(),o=JSON.parse(n);typeof o.error=="string"&&(r=o.error);}catch{}return r&&ai[r]?new Error(ai[r]):t===StatusCodes.UNAUTHORIZED||t===StatusCodes.FORBIDDEN||t===StatusCodes.INTERNAL_SERVER_ERROR?new Error("Invalid credentials"):t>=StatusCodes.BAD_REQUEST&&t<StatusCodes.INTERNAL_SERVER_ERROR?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}return e instanceof Error?(Dn.debug(`Non-HTTP error during authentication: ${e.message}`),e):(Dn.debug("Unknown error during authentication"),new Error("Authentication failed"))}async function rt(e){let t=It("AUTH_ENGINE_URL","https://flow.ciandt.com/auth-engine-api/v2/api-key/token");Vl(e.tenant);let r;try{r=await Hl.post(t,{headers:{FlowTenant:e.tenant},json:{clientSecret:e.clientSecret}}).json();}catch(i){throw await zl(i)}let n=r.expires_at??new Date(Date.now()+(r.expires_in??3600)*1e3).toISOString();await tt(e),await oi({accessToken:r.access_token,expiresAt:n});let o=Pr(r.access_token);await vr({sub:o.sub,name:o.name,email:o.email});}var li=S("lib:tokenProvider");async function Fe(){if(await xt()){let n=await br();if(n)return n.accessToken}li.debug("Token expired or missing, re-authenticating...");let t=await D();if(!t)throw new Error("Not authenticated. Run: flow auth login");X.clearFallbackFile(),Ir(),await rt(t);let r=await br();if(!r)throw new Error("Authentication succeeded but token was not persisted");return li.debug("Token refreshed successfully"),r.accessToken}var Er=S("api:metrics");function ci(){return It("METRICS_COLLECTOR_URL","https://flow.ciandt.com/metrics-collector-api/")+"log-event"}function ui(e,t,r){return Hl.post(e,{json:t,headers:r})}async function ql(e){let t=await ii();if(t)return t;let r=Pr(e),n={sub:r.sub,name:r.name,email:r.email};return await vr(n),n}async function b(e,t){let r=await Fe(),n=await ql(r),o=await D();if(!Ze.test(o.tenant))throw new Error(`Invalid tenant value: "${o.tenant}"`);let i={action:e,booster:yn,metadata:{...t},success:true,tenant:o.tenant,timestamp:new Date().toISOString(),user:{id:n.sub,name:n.name,email:n.email}};try{await ui(ci(),i,{Authorization:`Bearer ${r}`,FlowTenant:o.tenant}),Er.debug(`Metrics event sent: ${e}`);}catch(s){throw Er.warn(`Failed to send metrics event "${e}": ${String(s)}`),s}}async function pi(e,t,r){try{let n=r&&Ze.test(r)?r:"unknown",o={action:e,booster:yn,metadata:t,success:!0,tenant:n,timestamp:new Date().toISOString(),user:{id:"anonymous",name:"unknown",email:"unknown"}};await ui(ci(),o,{FlowTenant:n}),Er.debug(`Anonymous metrics event sent: ${e}`);}catch(n){Er.warn(`Failed to send anonymous metrics event "${e}": ${String(n)}`);}}var x={CLI_SESSION_STARTED:"CLI_SESSION_STARTED",CLI_AUTH_FAILED:"CLI_AUTH_FAILED",CLI_STEP_COMPLETED:"CLI_STEP_COMPLETED",CLI_KIT_DISPLAYED:"CLI_KIT_DISPLAYED",CLI_KIT_ACCEPTED:"CLI_KIT_ACCEPTED",CLI_KIT_REJECTED:"CLI_KIT_REJECTED",CLI_ONBOARDING_COMPLETED:"CLI_ONBOARDING_COMPLETED",CLI_ONBOARDING_ABANDONED:"CLI_ONBOARDING_ABANDONED",CLI_TOOL_INSTALLED:"CLI_TOOL_INSTALLED",CLI_TOOL_UNINSTALLED:"CLI_TOOL_UNINSTALLED",CLI_TOOL_UPDATED:"CLI_TOOL_UPDATED",CLI_TOOL_ENABLED:"CLI_TOOL_ENABLED",CLI_TOOL_INSTALL_FAILED:"CLI_TOOL_INSTALL_FAILED",CLI_TOOL_DISABLED:"CLI_TOOL_DISABLED",CLI_CATALOG_VIEWED:"CLI_CATALOG_VIEWED",CLI_TUI_SESSION_ENDED:"CLI_TUI_SESSION_ENDED"};var Xl={sessionStart:0,stepStart:0,currentStep:"auth",interfaceType:"cli",tuiSessionStart:0},de={...Xl};function di(e){let t=Date.now();de={sessionStart:t,stepStart:t,currentStep:"auth",interfaceType:e,tuiSessionStart:0};}function nt(e){de.currentStep=e,de.stepStart=Date.now();}function A(){return {...de}}function Ue(){return de.sessionStart===0?0:Date.now()-de.sessionStart}function ot(){return de.stepStart===0?0:Date.now()-de.stepStart}function mi(){de.tuiSessionStart=Date.now();}function fi(){return de.tuiSessionStart===0?0:Date.now()-de.tuiSessionStart}var Yl=3e3,Zl=S("abandonment");async function Tr(e){let{currentStep:t,sessionStart:r}=A();if(r===0)return;let n={last_step:t,trigger:e,duration_ms:Ue()};try{await Promise.race([b(x.CLI_ONBOARDING_ABANDONED,n),new Promise((o,i)=>setTimeout(()=>i(new Error("abandonment timeout")),Yl))]);}catch(o){Zl.warn(`Abandonment event failed: ${String(o)}`);}}function gi(e,t){return Promise.race([e,new Promise(r=>setTimeout(r,t))])}var Ql=3e3,ec=S("session-end");async function Ut(e){let{activeTab:t,screen:r}=f.getState(),n=fi(),i=[b(x.CLI_TUI_SESSION_ENDED,{duration_ms:n,active_tab:t,interface:"tui"})];r!=="main"&&i.push(Tr(e));try{await gi(Promise.all(i).then(()=>{}),Ql);}catch(s){ec.warn(`Session end event failed: ${String(s)}`);}}var oc=2e3;function Si(){let{exit:e}=useApp(),t=useRef(false),r=useRef(null),n=f(s=>s.pendingExit),o=f(s=>s.setPendingExit),i=useCallback(()=>{if(t.current){r.current&&clearTimeout(r.current),Ut("double-ctrl-c").finally(()=>e());return}t.current=true,o(true),r.current=setTimeout(()=>{t.current=false,o(false);},oc);},[e,o]);return useInput((s,c)=>{c.ctrl&&s==="c"&&i();}),{pendingExit:n}}var lc=16;function hi({label:e,value:t,onChange:r,masked:n=false,isActive:o,error:i}){let s=useRef(t);useEffect(()=>{s.current=t;},[t]),useInput((a,l)=>{if(l.backspace){let u=s.current.slice(0,-1);s.current=u,r(u);}else if(a&&!l.ctrl&&!l.meta&&!l.escape&&!l.return&&!l.tab&&!l.upArrow&&!l.downArrow&&!l.leftArrow&&!l.rightArrow){let u=s.current+a;s.current=u,r(u);}},{isActive:o});let c=n?"\u2022".repeat(t.length):t;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{children:[jsx(Text,{color:o?"cyan":"gray",children:o?"\u25B8 ":"  "}),jsx(Text,{color:o?"white":"gray",bold:o,children:e.padEnd(lc)}),jsx(Text,{color:o?"cyan":"gray",children:c}),o&&jsx(Text,{color:"cyan",children:"\u2588"})]}),i&&jsx(Box,{paddingLeft:3,children:jsxs(Text,{color:"red",children:["\u26A0 ",i]})})]})}var me=create(e=>({credentials:null,isAuthenticated:false,justAuthenticated:false,setCredentials:t=>e({credentials:t,isAuthenticated:true}),clearCredentials:()=>e({credentials:null,isAuthenticated:false,justAuthenticated:false}),setJustAuthenticated:t=>e({justAuthenticated:t})}));var dc=JSON.parse(readFileSync(join(import.meta.dirname,"..","package.json"),"utf8")),Be=dc.version;function p(e){return e==null?"":e.replace(/\x1b\[[0-9;:<=>?]*[ -/]*[@-~]/g,"").replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g,"").replace(/\x1b./g,"").replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g,"")}function V(e){process.stdout.write(C.green(`  \u2713 ${p(e)}
+`),this.warned=true;}yr().set(`${t}:${r}`,n);}async deleteSecret(t,r){let n=yr(),o=`${t}:${r}`;return n.has(o)?(n.delete(o),true):false}getStoragePath(){return yr().path}static hasExistingData(){try{let t=new An({projectName:Ln});return z.existsSync(t.path)}catch{return  false}}static clearFallbackFile(){try{let t=new An({projectName:Ln});z.rmSync(t.path,{force:!0});}catch{}Sr=null;}};async function Rn(){if(X.hasExistingData())return new X;switch(process.platform){case "darwin":return await ht.isAvailable()?new ht:new X;case "linux":return await De.isAvailable()?new De:await De.ensureInstalled()?new De:new X;case "win32":return await wt.isAvailable()?new wt:new X;default:throw new Error(`Unsupported platform: ${process.platform}`)}}var jl=S("config:credentials"),$e="flow-plugins-cli",Mn="credentials",_n="token-cache",On="user-info",xr=null;async function Ne(){return xr||(xr=Rn()),xr}function Ir(){xr=null;}async function D(){let t=await(await Ne()).getSecret($e,Mn);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function tt(e){let{clientId:t,clientSecret:r,tenant:n}=e,o=[!t?.trim()&&"clientId",!r?.trim()&&"clientSecret",!n?.trim()&&"tenant"].filter(Boolean);if(o.length>0)throw jl.error(`missing or empty fields: ${o.join(", ")}`),new Error("Cannot save credentials: clientId, clientSecret, and tenant are required");await(await Ne()).setSecret($e,Mn,JSON.stringify(e));}async function ri(){let e=await Ne();await e.deleteSecret($e,Mn),await e.deleteSecret($e,_n),await e.deleteSecret($e,On);}async function ni(){return (await Ne()).getStoragePath()}async function oi(e){await(await Ne()).setSecret($e,_n,JSON.stringify(e));}async function br(){let t=await(await Ne()).getSecret($e,_n);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function vr(e){await(await Ne()).setSecret($e,On,JSON.stringify(e));}async function ii(){let t=await(await Ne()).getSecret($e,On);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function xt(){let e=await br();return e?new Date(e.expiresAt)>new Date:false}function Pr(e){let t=e.split(".");if(t.length!==3)throw new Error(`Invalid JWT: expected 3 segments, got ${t.length}`);let r=t[1].replace(/-/g,"+").replace(/_/g,"/"),n=Buffer.from(r,"base64").toString("utf8");try{return JSON.parse(n)}catch{throw new Error("Invalid JWT: payload segment is not valid JSON")}}var si=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^100\.(6[4-9]|[7-9]\d|1[0-2][0-7])\./,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^0\.0\.0\.0$/,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i];function Jl(e){if(!e.startsWith("[")||!e.endsWith("]"))return null;let r=e.slice(1,-1).match(/^::(?:ffff:)?([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i);if(!r)return null;let n=parseInt(r[1],16),o=parseInt(r[2],16);return `${n>>8&255}.${n&255}.${o>>8&255}.${o&255}`}function Hl(e){if(si.some(r=>r.test(e)))return  true;let t=Jl(e);return !!(t&&si.some(r=>r.test(t)))}function Gl(e,t){let r=process.env[e]??t;if(!r)throw new Error(`Missing required environment variable: ${e}`);return r}function It(e,t){let r=Gl(e,t),n;try{n=new URL(r);}catch{throw new Error(`${e} must be a valid URL. Got: "${r}"`)}let o=process.env.NODE_ENV==="development";if(!o&&n.protocol!=="https:")throw new Error(`${e} must be an HTTPS URL. Got protocol: "${n.protocol}"`);if(n.username||n.password)throw new Error(`${e} must not contain embedded credentials (user:pass@host is not allowed)`);if(!o&&Hl(n.hostname))throw new Error(`${e} must not point to a private/loopback address. Got: "${n.hostname}"`);return r}var Dn=S("api:auth");function Wl(e){if(!Ze.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var ai={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};async function ql(e){if(e instanceof HTTPError){let t=e.response.status;Dn.error(`HTTP error during authentication [status=${t}]`);let r="";try{let n=await e.response.text(),o=JSON.parse(n);typeof o.error=="string"&&(r=o.error);}catch{}return r&&ai[r]?new Error(ai[r]):t===StatusCodes.UNAUTHORIZED||t===StatusCodes.FORBIDDEN||t===StatusCodes.INTERNAL_SERVER_ERROR?new Error("Invalid credentials"):t>=StatusCodes.BAD_REQUEST&&t<StatusCodes.INTERNAL_SERVER_ERROR?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}return e instanceof Error?(Dn.debug(`Non-HTTP error during authentication: ${e.message}`),e):(Dn.debug("Unknown error during authentication"),new Error("Authentication failed"))}async function rt(e){let t=It("AUTH_ENGINE_URL","https://flow.ciandt.com/auth-engine-api/v2/api-key/token");Wl(e.tenant);let r;try{r=await Vl.post(t,{headers:{FlowTenant:e.tenant},json:{clientSecret:e.clientSecret}}).json();}catch(i){throw await ql(i)}let n=r.expires_at??new Date(Date.now()+(r.expires_in??3600)*1e3).toISOString();await tt(e),await oi({accessToken:r.access_token,expiresAt:n});let o=Pr(r.access_token);await vr({sub:o.sub,name:o.name,email:o.email});}var li=S("lib:tokenProvider");async function Fe(){if(await xt()){let n=await br();if(n)return n.accessToken}li.debug("Token expired or missing, re-authenticating...");let t=await D();if(!t)throw new Error("Not authenticated. Run: flow auth login");X.clearFallbackFile(),Ir(),await rt(t);let r=await br();if(!r)throw new Error("Authentication succeeded but token was not persisted");return li.debug("Token refreshed successfully"),r.accessToken}var Er=S("api:metrics");function ci(){return It("METRICS_COLLECTOR_URL","https://flow.ciandt.com/metrics-collector-api/")+"log-event"}function ui(e,t,r){return Vl.post(e,{json:t,headers:r})}async function Yl(e){let t=await ii();if(t)return t;let r=Pr(e),n={sub:r.sub,name:r.name,email:r.email};return await vr(n),n}async function b(e,t){let r=await Fe(),n=await Yl(r),o=await D();if(!Ze.test(o.tenant))throw new Error(`Invalid tenant value: "${o.tenant}"`);let i={action:e,booster:yn,metadata:{...t},success:true,tenant:o.tenant,timestamp:new Date().toISOString(),user:{id:n.sub,name:n.name,email:n.email}};try{await ui(ci(),i,{Authorization:`Bearer ${r}`,FlowTenant:o.tenant}),Er.debug(`Metrics event sent: ${e}`);}catch(s){throw Er.warn(`Failed to send metrics event "${e}": ${String(s)}`),s}}async function pi(e,t,r){try{let n=r&&Ze.test(r)?r:"unknown",o={action:e,booster:yn,metadata:t,success:!0,tenant:n,timestamp:new Date().toISOString(),user:{id:"anonymous",name:"unknown",email:"unknown"}};await ui(ci(),o,{FlowTenant:n}),Er.debug(`Anonymous metrics event sent: ${e}`);}catch(n){Er.warn(`Failed to send anonymous metrics event "${e}": ${String(n)}`);}}var x={CLI_SESSION_STARTED:"CLI_SESSION_STARTED",CLI_AUTH_FAILED:"CLI_AUTH_FAILED",CLI_STEP_COMPLETED:"CLI_STEP_COMPLETED",CLI_KIT_DISPLAYED:"CLI_KIT_DISPLAYED",CLI_KIT_ACCEPTED:"CLI_KIT_ACCEPTED",CLI_KIT_REJECTED:"CLI_KIT_REJECTED",CLI_ONBOARDING_COMPLETED:"CLI_ONBOARDING_COMPLETED",CLI_ONBOARDING_ABANDONED:"CLI_ONBOARDING_ABANDONED",CLI_TOOL_INSTALLED:"CLI_TOOL_INSTALLED",CLI_TOOL_UNINSTALLED:"CLI_TOOL_UNINSTALLED",CLI_TOOL_UPDATED:"CLI_TOOL_UPDATED",CLI_TOOL_ENABLED:"CLI_TOOL_ENABLED",CLI_TOOL_INSTALL_FAILED:"CLI_TOOL_INSTALL_FAILED",CLI_TOOL_DISABLED:"CLI_TOOL_DISABLED",CLI_CATALOG_VIEWED:"CLI_CATALOG_VIEWED",CLI_TUI_SESSION_ENDED:"CLI_TUI_SESSION_ENDED"};var Zl={sessionStart:0,stepStart:0,currentStep:"auth",interfaceType:"cli",tuiSessionStart:0},de={...Zl};function di(e){let t=Date.now();de={sessionStart:t,stepStart:t,currentStep:"auth",interfaceType:e,tuiSessionStart:0};}function nt(e){de.currentStep=e,de.stepStart=Date.now();}function A(){return {...de}}function Ue(){return de.sessionStart===0?0:Date.now()-de.sessionStart}function ot(){return de.stepStart===0?0:Date.now()-de.stepStart}function mi(){de.tuiSessionStart=Date.now();}function fi(){return de.tuiSessionStart===0?0:Date.now()-de.tuiSessionStart}var Ql=3e3,ec=S("abandonment");async function Tr(e){let{currentStep:t,sessionStart:r}=A();if(r===0)return;let n={last_step:t,trigger:e,duration_ms:Ue()};try{await Promise.race([b(x.CLI_ONBOARDING_ABANDONED,n),new Promise((o,i)=>setTimeout(()=>i(new Error("abandonment timeout")),Ql))]);}catch(o){ec.warn(`Abandonment event failed: ${String(o)}`);}}function gi(e,t){return Promise.race([e,new Promise(r=>setTimeout(r,t))])}var tc=3e3,rc=S("session-end");async function Ut(e){let{activeTab:t,screen:r}=f.getState(),n=fi(),i=[b(x.CLI_TUI_SESSION_ENDED,{duration_ms:n,active_tab:t,interface:"tui"})];r!=="main"&&i.push(Tr(e));try{await gi(Promise.all(i).then(()=>{}),tc);}catch(s){rc.warn(`Session end event failed: ${String(s)}`);}}var sc=2e3;function Si(){let{exit:e}=useApp(),t=useRef(false),r=useRef(null),n=f(s=>s.pendingExit),o=f(s=>s.setPendingExit),i=useCallback(()=>{if(t.current){r.current&&clearTimeout(r.current),Ut("double-ctrl-c").finally(()=>e());return}t.current=true,o(true),r.current=setTimeout(()=>{t.current=false,o(false);},sc);},[e,o]);return useInput((s,c)=>{c.ctrl&&s==="c"&&i();}),{pendingExit:n}}var uc=16;function hi({label:e,value:t,onChange:r,masked:n=false,isActive:o,error:i}){let s=useRef(t);useEffect(()=>{s.current=t;},[t]),useInput((a,l)=>{if(l.backspace){let u=s.current.slice(0,-1);s.current=u,r(u);}else if(a&&!l.ctrl&&!l.meta&&!l.escape&&!l.return&&!l.tab&&!l.upArrow&&!l.downArrow&&!l.leftArrow&&!l.rightArrow){let u=s.current+a;s.current=u,r(u);}},{isActive:o});let c=n?"\u2022".repeat(t.length):t;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{children:[jsx(Text,{color:o?"cyan":"gray",children:o?"\u25B8 ":"  "}),jsx(Text,{color:o?"white":"gray",bold:o,children:e.padEnd(uc)}),jsx(Text,{color:o?"cyan":"gray",children:c}),o&&jsx(Text,{color:"cyan",children:"\u2588"})]}),i&&jsx(Box,{paddingLeft:3,children:jsxs(Text,{color:"red",children:["\u26A0 ",i]})})]})}var me=create(e=>({credentials:null,isAuthenticated:false,justAuthenticated:false,setCredentials:t=>e({credentials:t,isAuthenticated:true}),clearCredentials:()=>e({credentials:null,isAuthenticated:false,justAuthenticated:false}),setJustAuthenticated:t=>e({justAuthenticated:t})}));var fc=JSON.parse(readFileSync(join(import.meta.dirname,"..","package.json"),"utf8")),Be=fc.version;function p(e){return e==null?"":e.replace(/\x1b\[[0-9;:<=>?]*[ -/]*[@-~]/g,"").replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g,"").replace(/\x1b./g,"").replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g,"")}function V(e){process.stdout.write(C.green(`  \u2713 ${p(e)}
 `));}function k(e){process.stderr.write(C.red(`  \u2717 ${p(e)}
 `));}function I(e){process.stdout.write(C.cyan(`  \u2139 ${p(e)}
 `));}function kr(e,t){let r=t.map(c=>c.map(p)),n=[e,...r],o=e.map((c,a)=>Math.max(...n.map(l=>(l[a]??"").length))),i=o.map(c=>"\u2500".repeat(c)).join("  "),s=c=>c.map((a,l)=>a.padEnd(o[l])).join("  ");process.stdout.write(`
@@ -91,12 +96,12 @@ ${$n}
 `);}function bt(e){process.stdout.write(JSON.stringify(e,null,2)+`
 `);}function Y(e){process.stdout.write(JSON.stringify(e)+`
 `);}function ie(e){process.stderr.write(JSON.stringify(e)+`
-`);}function N(e){return e instanceof Error?e.message:String(e)}function Cr(e){let t=new Date(e);return isNaN(t.getTime())?"\u2014":new Intl.DateTimeFormat("en-US",{dateStyle:"short"}).format(t)}function gc(e){if(!(e instanceof Error))return "unknown";let t=e.message.toLowerCase();return t.includes("401")||t.includes("unauthorized")?"invalid_credentials":t.includes("403")||t.includes("forbidden")?"forbidden":t.includes("timeout")||t.includes("timed out")?"timeout":t.includes("network")||t.includes("econnrefused")||t.includes("fetch")?"network_error":"unknown"}var xe=["clientId","clientSecret","tenant"],yc={clientId:"Client ID",clientSecret:"Client Secret",tenant:"Tenant"};function wi(){let[e,t]=useState({clientId:"",clientSecret:"",tenant:""}),[r,n]=useState("clientId"),[o,i]=useState({}),[s,c]=useState(null),[a,l]=useState(false),u=useRef(0),{setCredentials:g,setJustAuthenticated:v}=me(),{setFocus:d}=f();useInput((h,T)=>{if(!a){if(T.shift&&T.tab){let y=xe.indexOf(r);y>0&&n(xe[y-1]);}else if(T.tab){let y=xe.indexOf(r);y<xe.length-1&&n(xe[y+1]);}else if(T.return)if(r==="tenant")E();else {let y=xe.indexOf(r);n(xe[y+1]);}}},{isActive:true});let E=async()=>{let h={};for(let T of xe)e[T].trim()||(h[T]="This field is required");if(Object.keys(h).length>0){i(h);let T=xe.find(y=>h[y]);T&&n(T);return}l(true),c(null),u.current+=1;try{await rt({clientId:e.clientId.trim(),clientSecret:e.clientSecret.trim(),tenant:e.tenant.trim()});let{clientSecret:T,...y}=e;g(y),v(!0),f.getState().setScreen("bundleSetup"),d("bundleList"),b(x.CLI_SESSION_STARTED,{cli_version:Be,os:process.platform,node_version:process.version,duration_ms:Ue(),interface:"tui"}).catch(()=>{});}catch(T){let y=T instanceof Error?T.message:"Authentication failed";c(y),pi(x.CLI_AUTH_FAILED,{error_code:gc(T),attempt:u.current},e.tenant.trim()).catch(()=>{});}finally{l(false),t(T=>({...T,clientSecret:""}));}},m=h=>T=>{t(y=>({...y,[h]:T})),o[h]&&i(y=>({...y,[h]:void 0}));};return jsxs(Box,{flexDirection:"column",padding:2,children:[jsx(Box,{marginBottom:1,children:jsxs(Text,{bold:true,color:"cyan",children:[Uo," \u2014 Initial Setup"]})}),jsxs(Box,{marginBottom:1,flexDirection:"column",children:[jsx(Text,{dimColor:true,children:"The data collected during setup is used solely to improve"}),jsx(Text,{dimColor:true,children:"Flow's internal tools and will not be shared externally."})]}),jsx(Box,{flexDirection:"column",children:xe.map(h=>jsx(Box,{marginBottom:1,children:jsx(hi,{label:yc[h],value:e[h],onChange:m(h),masked:h==="clientSecret",isActive:r===h&&!a,error:o[h]})},h))}),a&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"cyan",children:"Authenticating..."})}),s&&jsx(Box,{marginTop:1,children:jsxs(Text,{color:"red",children:["\u26A0 ",p(s)]})}),jsx(Box,{marginTop:1,children:jsx(Text,{dimColor:true,children:"Tab next field \xB7 Enter confirm"})})]})}function Ar(){return jsxs(Box,{flexDirection:"column",alignItems:"center",children:[jsx(hc,{text:"FLOW",font:"block",colors:["white","white"]}),jsx(Box,{marginTop:-1,marginBottom:1,children:jsxs(Text,{dimColor:true,children:["Marketplace \xB7 v",Be]})})]})}var Un={discover:"Discover",installed:"Installed"},wc=Object.keys(Un);function Ei(){let e=f(t=>t.activeTab);return jsx(Box,{paddingX:1,paddingBottom:1,children:wc.map(t=>jsx(Box,{marginRight:1,children:t===e?jsx(Text,{bold:true,inverse:true,children:` ${Un[t]} `}):jsx(Text,{dimColor:true,children:` ${Un[t]} `})},t))})}var Z=create(e=>({query:"",cursorPosition:0,setQuery:t=>e({query:t}),setCursorPosition:t=>e({cursorPosition:t}),resetQuery:()=>e({query:"",cursorPosition:0})}));function ki(){let e=f(s=>s.focus),t=Z(s=>s.query),r=Z(s=>s.cursorPosition),n=e==="search",o=t.slice(0,r),i=t.slice(r);return jsxs(Box,{borderStyle:"single",borderTop:false,borderBottom:true,borderLeft:false,borderRight:false,paddingX:1,marginX:1,marginBottom:1,children:[jsx(Text,{color:n?"cyan":"gray",children:"\u{1F50D} "}),n?jsxs(Fragment,{children:[jsx(Text,{color:"white",children:o}),jsx(Text,{inverse:true,children:i[0]??" "}),jsx(Text,{color:"white",children:i.slice(1)})]}):jsx(Text,{dimColor:true,children:t||"Search..."})]})}var vc=["skill","mcp","plugin"].map((e,t)=>({key:String(t+2),type:e,...gt[e]})),Pc=["internal","external"].map((e,t)=>({key:String(t+6),origin:e,...Bo[e]}));function Ci(){let e=f(n=>n.catalogFilters),t=e.types.has("skill")&&e.types.has("mcp")&&e.types.has("plugin"),r=e.origins.has("internal")&&e.origins.has("external");return jsxs(Box,{paddingX:1,paddingBottom:1,gap:1,children:[jsx(Text,{bold:true,children:"Type:"}),jsxs(Box,{gap:0,children:[jsx(Text,{dimColor:true,children:"[1] "}),jsxs(Text,{color:t?"green":void 0,dimColor:!t,children:[t?"\u25C9":"\u25CB"," All"]})]}),vc.map(n=>{let o=!t&&e.types.has(n.type);return jsxs(Box,{gap:0,children:[jsxs(Text,{dimColor:true,children:["[",n.key,"] "]}),jsxs(Text,{color:o?n.color:void 0,dimColor:!o,children:[o?"\u25C9":"\u25CB"," ",n.label]})]},n.key)}),jsx(Box,{marginLeft:2,children:jsx(Text,{bold:true,children:"|"})}),jsx(Box,{marginLeft:2,children:jsx(Text,{bold:true,children:"Origin:"})}),jsxs(Box,{gap:0,children:[jsx(Text,{dimColor:true,children:"[5] "}),jsxs(Text,{color:r?"green":void 0,dimColor:!r,children:[r?"\u25C9":"\u25CB"," All"]})]}),Pc.map(n=>{let o=!r&&e.origins.has(n.origin);return jsxs(Box,{gap:0,children:[jsxs(Text,{dimColor:true,children:["[",n.key,"] "]}),jsxs(Text,{color:o?n.color:void 0,dimColor:!o,children:[o?"\u25C9":"\u25CB"," ",n.label]})]},n.key)})]})}function $i({type:e}){let{label:t,color:r}=gt[e];return jsx(Text,{color:r,children:t})}function Ri({origin:e}){return e===Lt?jsx(Text,{color:"blue",children:"[Flow]"}):jsx(Text,{color:"white",children:"[External]"})}var Rr=kc.memo(function({item:t,isSelected:r}){let n=t.status==="disabled"?"yellow":"green";return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:r?"cyan":"gray",children:r?"\u203A ":"\u25CB "}),jsx(Text,{bold:r,color:r?"cyan":"white",children:t.name}),t.type&&jsxs(Text,{children:[" ",jsx($i,{type:t.type})]}),t.origin&&jsxs(Text,{children:[" ",jsx(Ri,{origin:t.origin})]}),jsxs(Text,{dimColor:true,children:[t.authorName?` \xB7 ${t.authorName}`:"",t.version?` \xB7 v${t.version}`:" \xB7 n/a"]}),t.status&&jsxs(Text,{color:n,children:[" [",t.status,"]"]}),t.updateAvailable&&jsx(Text,{color:"yellow",children:" [\u2191 update available]"}),t.installedAt&&jsxs(Text,{dimColor:true,children:[" \xB7 ",Cr(t.installedAt)]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:t.description})})]})});function Pt({message:e}){return jsx(Box,{paddingX:2,paddingY:1,children:jsx(Text,{dimColor:true,children:e??"No items found."})})}function Oi({items:e,emptyMessage:t}){let r=f(a=>a.selectedIndex);if(e.length===0)return jsx(Pt,{message:t});let n=Math.max(0,r-Math.floor(Oe/2)),o=Math.min(e.length,n+Oe);o===e.length&&(n=Math.max(0,o-Oe));let i=e.slice(n,o),s=n,c=e.length-o;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:s>0?`\u2191 ${s} more above`:" "})}),i.map((a,l)=>jsx(Rr,{item:a,isSelected:n+l===r},a.name)),jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:c>0?`\u2193 ${c} more below`:" "})})]})}function Fi({label:e,pathHint:t}){return jsxs(Box,{paddingBottom:1,children:[jsx(Text,{bold:true,color:"blueBright",children:e}),jsxs(Text,{dimColor:true,children:[" ",t]})]})}function Bi({groups:e,emptyMessage:t}){let r=f(d=>d.selectedIndex),n=[],o=0;for(let d of e){n.push({kind:"header",label:d.label,pathHint:d.pathHint,key:`h-${d.scope}`});for(let E of d.items)n.push({kind:"item",item:E,itemIndex:o,key:`i-${d.scope}-${E.name}`}),o++;}if(o===0)return jsx(Pt,{message:t});let s=n.findIndex(d=>d.kind==="item"&&d.itemIndex===r),c=s>=0?s:0,a=Math.max(0,c-Math.floor(Oe/2)),l=Math.min(n.length,a+Oe);l===n.length&&(a=Math.max(0,l-Oe));let u=n.slice(a,l),g=a,v=n.length-l;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:g>0?`\u2191 ${g} more above`:" "})}),u.map(d=>d.kind==="header"?jsx(Fi,{label:d.label,pathHint:d.pathHint},d.key):jsx(Rr,{item:d.item,isSelected:d.itemIndex===r},d.key)),jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:v>0?`\u2193 ${v} more below`:" "})})]})}var _c={discover:"Discover",installed:"Installed"};function ji({items:e,tabId:t,emptyMessage:r,groups:n}){return jsxs(Box,{flexDirection:"column",children:[jsx(ki,{}),jsx(Ci,{}),jsxs(Box,{paddingX:1,marginTop:1,children:[jsx(Text,{bold:true,children:_c[t]}),jsxs(Text,{dimColor:true,children:[" (",e.length,")"]})]}),n&&n.length>0?jsx(Bi,{groups:n,emptyMessage:r}):jsx(Oi,{items:e,emptyMessage:r})]})}function Ji({filteredItems:e,emptyMessage:t,groups:r}){let n=f(o=>o.activeTab);return jsx(Box,{flexDirection:"column",flexGrow:1,children:n==="discover"?jsx(ji,{items:e,tabId:"discover",emptyMessage:t},"discover"):jsx(ji,{items:e,tabId:"installed",emptyMessage:t,groups:r},"installed")})}var Nc={tabs:"\u2190\u2192: switch tab | \u2193: navigate | Enter: select | Ctrl+C Ctrl+C: quit",list:"\u2191\u2193: navigate | Enter: select | Type: 1=All 2=Skill 3=MCP 4=Plugin | Origin: 5=All 6=Flow 7=External | \u2190\u2192/Tab: tabs | Ctrl+C\xD72: quit",search:"Type to filter | \u2193/Esc: exit search | Enter: confirm",actionMenu:"\u2191\u2193: navigate options | Enter: confirm | Esc: close menu",auth:"Tab: next field | Enter: confirm | Ctrl+C Ctrl+C: quit",bundleList:"\u2191\u2193: navigate | Enter: select Starter Kit | Esc: skip",bundleDetail:"\u2191\u2193: navigate | Enter: confirm & install | Esc: back",installProgress:"\u2191\u2193: navigate | Enter: select"};function Mr(){let e=f(t=>t.focus);return jsx(Box,{borderStyle:"single",borderTop:true,borderBottom:false,borderLeft:false,borderRight:false,children:jsx(Text,{dimColor:true,children:Nc[e]})})}function Gi({message:e,type:t}){return e?jsx(Box,{paddingX:1,children:jsxs(Text,{color:t==="success"?"green":t==="info"?"cyan":"red",children:[t==="success"?"\u2713":t==="info"?"(i)":"\u2717"," ",p(e)]})}):null}function _r({message:e}){return jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(Jc,{type:"dots"})}),jsxs(Text,{children:[" ",e]})]})}function Or({message:e,onRetry:t,onBack:r}){return useInput((n,o)=>{n==="r"&&o.ctrl&&t?t():o.escape&&r&&r();}),jsxs(Box,{flexDirection:"column",paddingX:2,paddingY:1,children:[jsxs(Text,{color:"red",children:["\u2717 ",e]}),t&&jsx(Text,{dimColor:true,children:"Press Ctrl+R to retry"}),r&&jsx(Text,{dimColor:true,children:"Press Escape to go back"})]})}function ut({itemName:e,actions:t,descriptions:r,onAction:n,onClose:o}){let i=f(a=>a.focus),[s,c]=useState(0);return useInput((a,l)=>{l.upArrow?c(u=>u>0?u-1:u):l.downArrow?c(u=>u<t.length-1?u+1:u):l.return?n(t[s]):l.escape&&o();},{isActive:i==="actionMenu"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsx(Box,{flexDirection:"column",marginTop:1,children:t.map((a,l)=>jsxs(Box,{children:[jsxs(Text,{bold:l===s,color:l===s?"cyan":void 0,children:[l===s?"\u203A ":"  ",a]}),r?.[a]&&jsxs(Text,{dimColor:true,children:[" \u2014 ",r[a]]})]},l))})]})}var Wn=Object.entries(Rt),Zi=[...Wn.map(([,e])=>e.actionLabel),"Cancel"],Qi=Object.fromEntries(Wn.map(([,e])=>[e.actionLabel,e.description]));function es(e){let t=Wn.find(([,r])=>r.actionLabel===e);return t?t[0]:null}function rs({itemName:e,onInstall:t,onClose:r}){let[n,o]=useState(false),i=useCallback(l=>{let u=es(l);u?t(u):o(false);},[t]),s=useCallback(()=>{o(false);},[]),c=useCallback(l=>{l==="Install"?o(true):r();},[r]);return n?jsx(ut,{itemName:`${e} \u2014 Choose scope`,actions:Zi,descriptions:Qi,onAction:i,onClose:s}):jsx(ut,{itemName:e,actions:["Install","Cancel"],onAction:c,onClose:r})}function Nr({activeFocus:e,onConfirm:t}){let[r,n]=useState("idle"),o=f(i=>i.focus);return useInput((i,s)=>{s.escape||i==="n"?n("idle"):i==="y"&&t();},{isActive:r==="confirming"&&o===e}),{isConfirming:r==="confirming",requestConfirm:()=>n("confirming"),cancelConfirm:()=>n("idle")}}function is({itemName:e,itemScope:t,itemStatus:r,updateAvailable:n,catalogVersion:o,onUninstall:i,onToggleStatus:s,onUpdate:c,onClose:a}){let{isConfirming:l,requestConfirm:u}=Nr({activeFocus:"actionMenu",onConfirm:()=>i(t)});if(l)return jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Uninstall "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]});let g=r==="enabled"?"Disable":"Enable",v=o&&p(o),d=v?`Update to v${v}`:"Update";return jsx(ut,{itemName:e,actions:n?["Uninstall",g,d,"Cancel"]:["Uninstall",g,"Cancel"],onAction:h=>{h==="Uninstall"?u():h===g?s(t):h.startsWith("Update")?c?.():a();},onClose:a})}function ls({itemName:e,itemScope:t,onUninstall:r,onClose:n}){let{isConfirming:o,requestConfirm:i}=Nr({activeFocus:"actionMenu",onConfirm:()=>r(t)});return o?jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Remove MCP "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]}):jsx(ut,{itemName:e,actions:["Uninstall","Cancel"],onAction:a=>{a==="Uninstall"?i():n();},onClose:n})}async function cs(e,t){let r=U.resolve(t);await Ie.mkdir(r,{recursive:true});let n=U.join(U.dirname(r),`${randomUUID()}.zip`);try{await Ie.writeFile(n,e),await Zc(n,{dir:r,onEntry(o){if((o.externalFileAttributes>>16&61440)===40960)throw new Error(`Zip Slip (symlink): entry "${o.fileName}" is a symbolic link and was rejected`);let s=U.resolve(r,o.fileName);if(!s.startsWith(r+U.sep)&&s!==r)throw new Error(`Zip Slip detected: entry "${o.fileName}" would escape target directory`)}});try{let o=realpathSync(r);if(!o.startsWith(U.resolve(U.dirname(r))))throw new Error(`Zip Slip (post-extract): resolved path "${o}" is outside expected parent`)}catch(o){if(o.code!=="ENOENT")throw o}}finally{try{await Ie.unlink(n);}catch{}}}async function Xn(e){await Ie.rm(e,{recursive:true,force:true});}async function Je(){let e=zo();await Ie.mkdir(U.dirname(e),{recursive:true});try{await Ie.writeFile(e,"",{flag:"wx"});}catch(r){if(r.code!=="EEXIST")throw r}return await Qc.lock(e,{stale:1e4,retries:{retries:2,minTimeout:500,maxTimeout:500}})}var tu={user:"global",project:"project",local:"local"};function Br(e){return e?tu[e]:"global"}var be=class extends Error{constructor(r,n){super(`${r} v${n} is already installed. Use --force to reinstall.`);this.pluginName=r;this.version=n;this.name="AlreadyInstalledError";}pluginName;version},He=class extends Error{constructor(r,n){super(`${r} is already up to date (v${n})`);this.pluginName=r;this.version=n;this.name="AlreadyUpToDateError";}pluginName;version};function Wt(){return Hl.create({prefix:It("PROMPT_MANAGER_URL","https://flow.ciandt.com/prompt-manager-api/"),hooks:{beforeRequest:[async({request:e})=>{let t=await Fe();e.headers.set("Authorization",`Bearer ${t}`);let r=await D();r?.tenant&&Ze.test(r.tenant)&&e.headers.set("FlowTenant",r.tenant);}]}})}var nu=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function us(e){if(!e||!nu.test(e))throw new Error(`Invalid plugin name: "${e}". Must be 1-64 chars, lowercase alphanumeric and hyphens only.`)}async function ve(){try{let{plugins:e}=await Wt().get("v1/plugins/catalog").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching plugin catalog"):new Error(`Failed to fetch plugin catalog: ${e.message}`):e}}async function Tt(e){us(e);try{return await Wt().get(`v1/plugins/${e}/manifest`).json()}catch(t){throw t instanceof Error?t.message.includes("404")?new Error(`Plugin '${e}' not found in catalog`):t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to fetch plugin manifest: ${t.message}`):t}}async function ps(e){us(e);try{let t=await Wt().get(`v1/plugins/${e}/archive`);return Buffer.from(await t.arrayBuffer())}catch(t){throw t instanceof Error?t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to download plugin: ${t.message}`):t}}async function Kr(){try{let{profiles:e}=await Wt().get("v1/plugins/profiles").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching starter kits"):new Error(`Failed to fetch starter kits: ${e.message}`):e}}var ou=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/,iu=/^[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9]+(\.[a-zA-Z0-9]+)*)?$/;function jr(e){if(!ou.test(e))throw new Error(`Invalid plugin name from manifest: "${e}". Plugin names must be lowercase alphanumeric and hyphens (1-64 chars).`)}function su(e){if(!iu.test(e))throw new Error(`Invalid plugin version from manifest: "${e}". Versions must follow semver format (e.g. 1.0.0 or 1.0.0-beta.1).`)}var Ge=S("installer");function au(e,t){let r=`${e}@${O}`,o=Le().plugins[r];if(o&&!t)throw new be(e,o[0].version??"unknown");return {pluginKey:r,alreadyInstalled:o}}async function lu(e,t,r){r&&await Xn(t);try{Ge.debug(`[${t}] Extracting archive...`),await cs(e,t);}catch(n){throw await Xn(t),n}}function cu(e,t,r,n,o){let i=Le(),s={scope:n,installPath:t,version:r,installedAt:new Date().toISOString(),origin:o},c=i.plugins[e]??[];i.plugins[e]=[...c.filter(a=>a.scope!==n),s],pt(i),Yn(e,true,n);}async function uu(e,t,r,n,o){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"plugin",source:o,scope:n,version:t,duration_ms:r,interface:A().interfaceType});}catch(i){Ge.warn(`Failed to send install metrics: ${String(i)}`);}}async function pu(e,t,r){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"plugin",source:r,error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:A().interfaceType});}catch(n){Ge.warn(`Failed to send install-failed metrics: ${String(n)}`);}}async function Pe(e,t={}){let r=Date.now(),n=null;try{Ge.debug(`[${e}] Acquiring lock...`),n=await Je();let{pluginKey:o,alreadyInstalled:i}=au(e,t.force);Ge.debug(`[${e}] Fetching manifest...`);let s=await Tt(e);jr(s.name),su(s.version),Ge.debug(`[${e}] Downloading archive...`);let c=await ps(e),a=t.scope??"user",l=Ho(s.name,s.version);await lu(c,l,!!i&&!!t.force),cu(o,l,s.version,a,"internal"),ds(s,l);let u=Date.now()-r;Ge.debug(`[${e}] Installed successfully in ${u}ms`);let g={name:s.name,version:s.version,path:l,duration_ms:u};return t.skipMetrics||await uu(s.name,s.version,u,Br(a),"internal"),g}catch(o){throw await pu(e,o,"internal"),Ge.error(`[${e}] Installation failed: ${o instanceof Error?o.message:String(o)}`),o}finally{n&&await n();}}function du(){return {$schema:"https://anthropic.com/claude-code/marketplace.schema.json",name:O,description:"Flow Skills marketplace",owner:{name:"Flow Team",email:"flow@ciandt.com"},plugins:[]}}function gs(){let e=ur();if(!z__default.existsSync(e))return null;try{return JSON.parse(z__default.readFileSync(e,"utf-8"))}catch{return null}}function mu(){let e=gs();if(e)return e;let t=du(),r=ur();return z__default.mkdirSync(U__default.dirname(r),{recursive:true}),Zn(t),t}function Zn(e){let t=ur(),r=`${t}.${randomUUID()}.tmp`;z__default.writeFileSync(r,JSON.stringify(e,null,2),"utf-8"),z__default.renameSync(r,t);}function fu(){let e=Go(),t={};try{z__default.existsSync(e)&&(t=JSON.parse(z__default.readFileSync(e,"utf-8")));}catch{t={};}if(t[O])return;t[O]={source:{source:"github",repo:"CI-T-HyperX/flow-skills"},installLocation:Vo(),lastUpdated:new Date().toISOString()};let r=`${e}.${randomUUID()}.tmp`;z__default.writeFileSync(r,JSON.stringify(t,null,2),"utf-8"),z__default.renameSync(r,e);}function ds(e,t){jr(e.name),fu();let r=wn(e.name);z__default.mkdirSync(U__default.dirname(r),{recursive:true});try{z__default.lstatSync(r),z__default.rmSync(r,{recursive:!0,force:!0});}catch{}z__default.symlinkSync(t,r);let n=mu();n.plugins.some(i=>i.name===e.name)||(n.plugins.push({name:e.name,description:e.description,version:e.version,author:e.author,source:`./plugins/native/${e.name}`,category:e.category}),Zn(n));}function Qn(e){jr(e);let t=wn(e);try{z__default.rmSync(t,{recursive:!0,force:!0});}catch{}let r=gs();if(!r)return;let n=r.plugins.length;r.plugins=r.plugins.filter(o=>o.name!==e),r.plugins.length!==n&&Zn(r);}var yu=S("mcpConfigReader"),Su=500,hu=512;function wu(){return U__default.join(he__default.homedir(),".claude.json")}function xu(){return U__default.join(process.cwd(),".mcp.json")}function Ss(e){if(!z__default.existsSync(e))return null;try{return JSON.parse(z__default.readFileSync(e,"utf-8"))}catch{return yu.debug(`[mcpConfigReader] Failed to parse ${e}`),null}}function qt(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function eo(e){if(!qt(e))return {};let t=e.mcpServers;return qt(t)?t:{}}function to(e,t){return Object.keys(e).slice(0,Su).map(n=>({name:p(n.slice(0,hu)),marketplace:"",version:void 0,installedAt:"",installPath:"",scope:t,description:void 0,author:void 0,status:"enabled",type:"mcp"}))}function ws(){let e=[],t=wu(),r=Ss(t);if(qt(r)){let c=r,a=eo(c);e.push(...to(a,"user"));let l=process.cwd();if(qt(c.projects)){let u=c.projects[l];if(qt(u)){let g=eo(u);e.push(...to(g,"local"));}}}let n=xu(),o=Ss(n),i=eo(o);e.push(...to(i,"project"));let s=new Map;for(let c of e){let a=`${c.name}@${c.scope}`;s.has(a)||s.set(a,c);}return [...s.values()]}var ae=S("storage");async function bu(e,t){try{await b(x.CLI_TOOL_UNINSTALLED,{tool_id:e,tool_type:"plugin",source:t,interface:A().interfaceType});}catch(r){ae.warn(`Failed to send uninstall metrics: ${String(r)}`);}}function vu(e,t,r){let n=t==="enabled"?x.CLI_TOOL_ENABLED:x.CLI_TOOL_DISABLED;b(n,{tool_id:e,source:r,interface:A().interfaceType}).catch(o=>ae.warn(`Failed to send ${t} metrics: ${String(o)}`));}function Is(){return U__default.join(he__default.homedir(),".claude","plugins","installed_plugins.json")}function Pu(){return U__default.join(he__default.homedir(),".claude","plugins")}function xs(e){let t=U__default.resolve(e),r=U__default.resolve(Pu()),n=U__default.resolve(U__default.join(process.cwd(),".claude","plugins")),o=t.startsWith(r+U__default.sep)||t===r,i=t.startsWith(n+U__default.sep)||t===n;if(!o&&!i)throw new Error(`Security error: installPath '${e}' is outside the plugins directory`)}function bs(e="user"){return e==="local"?U__default.join(process.cwd(),".claude","settings.local.json"):e==="project"?U__default.join(process.cwd(),".claude","settings.json"):U__default.join(he__default.homedir(),".claude","settings.json")}function Le(){let e=Is();if(!z__default.existsSync(e))return {version:2,plugins:{}};try{return JSON.parse(z__default.readFileSync(e,"utf-8"))}catch{return {version:2,plugins:{}}}}function Eu(e){let t=e?.code;return t==="EACCES"||t==="EPERM"}function vs(e,t){try{z__default.mkdirSync(U__default.dirname(e),{recursive:!0});let r=`${e}.${randomUUID()}.tmp`;z__default.writeFileSync(r,JSON.stringify(t,null,2),"utf-8"),z__default.renameSync(r,e);}catch(r){throw Eu(r)?new Error(`Permission denied: cannot write to '${e}'. Check your file system permissions.`):r}}function pt(e){vs(Is(),e);}function Xt(e){let t=e.lastIndexOf("@");return t===-1?{name:e,marketplace:""}:{name:e.slice(0,t),marketplace:e.slice(t+1)}}function Tu(e,t){let r=U__default.join(e,".claude-plugin"),n=U__default.join(r,"plugin.json");if(z__default.existsSync(n))try{return JSON.parse(z__default.readFileSync(n,"utf-8"))}catch{return null}let o=U__default.join(r,"marketplace.json");if(z__default.existsSync(o))try{let i=JSON.parse(z__default.readFileSync(o,"utf-8"));return {description:i.plugins?.find(c=>c.name===t)?.description,author:i.owner}}catch{return null}return null}function io(e="user"){let t=bs(e);if(!z__default.existsSync(t))return {};try{return JSON.parse(z__default.readFileSync(t,"utf-8"))}catch{return {}}}function Ps(e,t="user"){vs(bs(t),e);}function ku(e,t){let{name:r,marketplace:n}=Xt(e),o;if(n?(o=`${r}@${n}`,t[o]||(o=void 0)):o=Object.keys(t).filter(s=>Xt(s).name===r)[0],!o)throw ae.error(`[${r}] Plugin is not installed`),new Error(`Plugin '${r}' is not installed`);return {key:o,name:r}}function Cu(e,t){let{name:r,marketplace:n}=Xt(e),o;return n?(o=`${r}@${n}`,t[o]||(o=void 0)):o=Object.keys(t).filter(s=>Xt(s).name===r)[0],o?{key:o,name:r}:null}function ro(e="user"){return io(e).enabledPlugins??{}}function no(e,t="user"){let r=io(t),n=r.enabledPlugins;if(!n||!(e in n))return;let{[e]:o,...i}=n;r.enabledPlugins=i,Ps(r,t);}function Yn(e,t,r="user"){let n=io(r),o=n.enabledPlugins??{};n.enabledPlugins={...o,[e]:t},Ps(n,r);}function $u(e){let t=new Map;for(let r of e){let n=t.get(r.scope);(!n||r.installedAt>n.installedAt)&&t.set(r.scope,r);}return [...t.values()]}function Ee(){let e=Le(),t=ro(),r=ro("project"),n=ro("local"),o={project:r,local:n},i=Object.entries(e.plugins).flatMap(([l,u])=>{let{name:g,marketplace:v}=Xt(l),d=u.map(m=>m.scope==="managed"?{...m,scope:"user"}:m);return $u(d).map(m=>{let h=Tu(m.installPath,g),y=(o[m.scope]??t)[l];return {name:g,marketplace:v,version:m.version&&m.version!=="unknown"?m.version:void 0,installedAt:m.installedAt,installPath:m.installPath,scope:m.scope,description:h?.description,author:h?.author,status:y===false?"disabled":"enabled"}})}),s=ws(),c=new Set(i.map(l=>`${l.name}@${l.scope}`)),a=s.filter(l=>!c.has(`${l.name}@${l.scope}`));return [...i,...a]}async function Jr(e,t){ae.debug(`[${e}] Acquiring lock to uninstall`);let r=await Je();try{let n=Le(),o=Cu(e,n.plugins);if(!o)throw new Error(`Plugin '${e}' is not in installed_plugins.json. If this is an MCP server from config, use the MCP remove command instead.`);let{key:i,name:s}=o,c=n.plugins[i];if(t){let a=c.find(g=>g.scope===t);if(!a)throw new Error(`Plugin '${s}' is not installed in ${t} scope`);ae.debug(`[${s}] Resolved key: ${i}, scope: ${t}`),xs(a.installPath);let l=U__default.dirname(a.installPath);ae.debug(`[${s}] Removing directory: ${l}`),z__default.rmSync(l,{recursive:!0,force:!0});let u=c.filter(g=>g.scope!==t);if(u.length===0){let{[i]:g,...v}=n.plugins;pt({...n,plugins:v}),no(i,t),Qn(s);}else n.plugins[i]=u,pt(n),no(i,t);}else {ae.debug(`[${s}] Resolved key: ${i}`);for(let u of c){xs(u.installPath);let g=U__default.dirname(u.installPath);ae.debug(`[${s}] Removing directory: ${g}`),z__default.rmSync(g,{recursive:!0,force:!0}),no(i,u.scope);}Qn(s);let{[i]:a,...l}=n.plugins;pt({...n,plugins:l});}await bu(s,c[0].origin??"internal"),ae.debug(`[${s}] Uninstalled successfully`);}finally{await r();}}async function Yt(e,t,r){ae.debug(`[${e}] Acquiring lock to set status \u2192 ${t}`);let n=await Je();try{let o=Le(),{key:i,name:s}=ku(e,o.plugins),c=o.plugins[i],a=r??c[0].scope,l=c[0].origin??"internal";ae.debug(`[${s}] Resolved key: ${i}, scope: ${a}`),Yn(i,t==="enabled",a),vu(s,t,l),ae.debug(`[${s}] Status updated to ${t}`);}finally{await n();}}var K=create(e=>({installedItems:[],setInstalledItems:t=>e({installedItems:t}),loadFromDisk:()=>e({installedItems:Ee()})}));var F=["discover","installed"];function Es(e,t,r){if(t.rightArrow||t.tab){let n=F.indexOf(r.activeTab);return [{type:"setTab",tab:F[(n+1)%F.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}if(t.leftArrow){let n=F.indexOf(r.activeTab);return [{type:"setTab",tab:F[(n-1+F.length)%F.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}return t.downArrow?[{type:"setFocus",focus:"list"}]:[]}function Ts(e,t,r,n){if(t.upArrow)return r.selectedIndex===0?[{type:"setSelectedIndex",index:-1},{type:"setFocus",focus:"search"}]:[{type:"setSelectedIndex",index:r.selectedIndex-1}];if(t.downArrow&&r.selectedIndex<n-1)return [{type:"setSelectedIndex",index:r.selectedIndex+1}];if(t.leftArrow){let o=F.indexOf(r.activeTab);return [{type:"setTab",tab:F[(o-1+F.length)%F.length]},{type:"setSelectedIndex",index:0}]}if(t.rightArrow){let o=F.indexOf(r.activeTab);return [{type:"setTab",tab:F[(o+1)%F.length]},{type:"setSelectedIndex",index:0}]}if(t.tab){let o=F.indexOf(r.activeTab);return [{type:"setTab",tab:F[(o+1)%F.length]},{type:"setSelectedIndex",index:0}]}return t.return?[{type:"setActionMenuOpen",open:true},{type:"setFocus",focus:"actionMenu"}]:e==="/"?[{type:"setFocus",focus:"search"}]:e==="1"?[{type:"selectAllTypes"}]:e==="2"?[{type:"toggleTypeFilter",catalogType:"skill"}]:e==="3"?[{type:"toggleTypeFilter",catalogType:"mcp"}]:e==="4"?[{type:"toggleTypeFilter",catalogType:"plugin"}]:e==="5"?[{type:"selectAllOrigins"}]:e==="6"?[{type:"toggleOriginFilter",origin:"internal"}]:e==="7"?[{type:"toggleOriginFilter",origin:"external"}]:e&&e!==" "&&!t.ctrl&&!t.meta&&!t.escape?[{type:"setSelectedIndex",index:-1},{type:"setFocus",focus:"search"},{type:"searchAppend",char:e}]:[]}function ks(e,t){return t.escape?[{type:"setActionMenuOpen",open:false},{type:"setFocus",focus:"list"}]:[]}function Cs(e,t,r){return t.escape?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:"reset"}:t.downArrow?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:null}:t.leftArrow?{actions:[],queryUpdate:{cursorMove:-1}}:t.rightArrow?{actions:[],queryUpdate:{cursorMove:1}}:t.return?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:null}:t.backspace?r.length===0?{actions:[{type:"setFocus",focus:"list"},{type:"setSelectedIndex",index:0}],queryUpdate:null}:{actions:[],queryUpdate:{backspace:true}}:e&&!t.ctrl&&!t.meta?{actions:[],queryUpdate:{append:e}}:{actions:[],queryUpdate:null}}function Gr(e){let{setActiveTab:t,setFocus:r,setSelectedIndex:n,setActionMenuOpen:o}=f.getState();for(let i of e)if(i.type==="setTab")t(i.tab);else if(i.type==="setFocus")r(i.focus);else if(i.type==="setSelectedIndex")n(i.index);else if(i.type==="setActionMenuOpen")o(i.open);else if(i.type==="searchAppend"){let{setQuery:s,query:c,setCursorPosition:a,cursorPosition:l}=Z.getState();s(c.slice(0,l)+i.char+c.slice(l)),a(l+i.char.length);}else i.type==="toggleTypeFilter"?f.getState().toggleTypeFilter(i.catalogType):i.type==="selectAllTypes"?f.getState().selectAllTypes():i.type==="toggleOriginFilter"?f.getState().toggleOriginFilter(i.origin):i.type==="selectAllOrigins"&&f.getState().selectAllOrigins();}function $s({listLength:e}){let t=f(m=>m.focus),r=f(m=>m.selectedIndex),n=f(m=>m.actionMenuOpen),o=f(m=>m.setFocus),i=f(m=>m.setActionMenuOpen),s=Z(m=>m.query),c=Z(m=>m.setQuery),a=Z(m=>m.resetQuery),l=useRef(e);useEffect(()=>{l.current=e;},[e]),useEffect(()=>{if(t==="search"){let{query:m,setCursorPosition:h}=Z.getState();h(m.length);}},[t]);let[u,g]=useState("");useEffect(()=>{let m=setTimeout(()=>g(s),300);return ()=>clearTimeout(m)},[s]),useInput((m,h)=>{let{activeTab:T,selectedIndex:y,actionMenuOpen:L}=f.getState();Gr(Es(m,h,{activeTab:T}));},{isActive:t==="tabs"}),useInput((m,h)=>{let{activeTab:T,selectedIndex:y,actionMenuOpen:L}=f.getState();Gr(Ts(m,h,{activeTab:T,selectedIndex:y},l.current));},{isActive:t==="list"}),useInput((m,h)=>{Gr(ks(m,h));},{isActive:t==="actionMenu"}),useInput((m,h)=>{let T=Cs(m,h,Z.getState().query),y=T.queryUpdate;if(Gr(T.actions),y==="reset")a(),g("");else if(y!==null){let{query:L,cursorPosition:$,setCursorPosition:H}=Z.getState();if("backspace"in y)$>0&&(c(L.slice(0,$-1)+L.slice($)),H($-1));else if("append"in y)c(L.slice(0,$)+y.append+L.slice($)),H($+y.append.length);else if("cursorMove"in y){let q=$+y.cursorMove;q>=0&&q<=L.length&&H(q);}}},{isActive:t==="search"});let v=useCallback(()=>{i(false),o("list");},[i,o]),d=useCallback(m=>{let{setSelectedIndex:h,selectedIndex:T}=f.getState();m===0?h(0):T>=m&&h(m-1);},[]),E=useCallback(m=>{if(!u)return l.current=m.length,m;let h=u.toLowerCase(),T=m.filter(y=>y.name.toLowerCase().includes(h)||y.description?.toLowerCase().includes(h));return l.current=T.length,T},[u]);return {actionMenuOpen:n,closeMenu:v,selectedIndex:r,clampIndex:d,filteredItems:E}}function Ls(){let e=f(c=>c.notification),t=f(c=>c.showNotification),r=f(c=>c.clearNotification),n=me(c=>c.justAuthenticated),o=me(c=>c.credentials),i=me(c=>c.setJustAuthenticated);return useEffect(()=>{n&&o&&(t(`Authenticated. Tenant: ${o.tenant}`,"success"),i(false));},[n,o]),useEffect(()=>{if(!e)return;let c=setTimeout(r,3e3);return ()=>clearTimeout(c)},[e]),{notify:(c,a)=>{t(c,a);}}}function Re(e,t,r=false){return r?true:!lo.valid(e)||!lo.valid(t)?false:lo.gt(t,e)}var Me=S("updater");async function Mu(e,t,r,n,o){try{await b(x.CLI_TOOL_UPDATED,{tool_id:e,tool_type:"plugin",source:o,from_version:t,to_version:r,duration_ms:n,interface:A().interfaceType});}catch(i){Me.warn(`Failed to send update metrics: ${String(i)}`);}}function _u(e){let t=Le(),r=`${e}@${O}`,n=t.plugins[r];return !n||n.length===0?null:{pluginKey:r,entry:n[0]}}async function Vr(e,t={}){let r=Date.now(),n=null;try{Me.debug(`[${e}] Acquiring lock...`),n=await Je();let o=_u(e);if(!o)throw Me.error(`[${e}] Plugin is not installed`),new Error(`Plugin "${e}" is not installed`);let{entry:i}=o,s=i.version,c=i.installPath;Me.debug(`[${e}] Fetching manifest...`);let l=(await Tt(e)).version;if(!s||!Re(s,l,t.force))throw Me.debug(`[${e}] Already up to date (v${s??"n/a"})`),new He(e,s??"unknown");Me.info(`[${e}] Updating v${s} \u2192 v${l}...`),await n(),n=null;try{let u=await Pe(e,{force:!0,skipMetrics:!0}),g=Date.now()-r;return await Mu(u.name,s,u.version,g,i.origin??"internal"),Me.debug(`[${e}] Updated successfully in ${g}ms`),{name:u.name,previousVersion:s,newVersion:u.version,path:u.path,duration_ms:g}}catch(u){Me.warn(`[${e}] Install failed, rolling back to v${s}...`),n=await Je();let g=Le(),v=`${e}@${O}`;throw g.plugins[v]&&(g.plugins[v][0].version=s,g.plugins[v][0].installPath=c,pt(g),Me.info(`[${e}] Rollback completed, restored to v${s}`)),u}}finally{n&&await n();}}var Ou=S("commands:helpers");async function ee(){let e=await D();if(!e)return k("Not authenticated. Run: flow auth login"),false;try{await Fe();}catch(t){return Ou.debug(`Token validation failed: ${String(t)}`),k("Session expired. Run: flow auth login"),false}return !e.starterKit||e.starterKit.trim()===""?(k("Starter kit not set. Run: flow auth login"),false):true}async function Ve(e){let t=co.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(p(e),n=>{t.close(),r(["y","yes"].includes(n.toLowerCase().trim()));});})}async function Rs(e){let t=co.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(p(e),n=>{t.close(),r(n.trim());});})}var Du=/^[^@]+@[^@]+$/;function Zt(e){return Du.test(e)}function kt(e){let t=e.indexOf("@");return t>0?e.slice(0,t):e}var Nu=/^[a-zA-Z0-9][a-zA-Z0-9._/-]*$/;function Ms(e){if(!Nu.test(e))throw new Error(`Invalid plugin name: "${e}". Plugin names must start with an alphanumeric character and contain only letters, digits, dots, hyphens, underscores, and slashes.`)}var Fu=/^[\w./:@?&=+#%-]+$/;function zr(e){let t=e.trim();if(!t)throw new Error("No marketplace source provided.");if(!Fu.test(t))throw new Error(`Invalid marketplace source: "${t}". Must be owner/repo or a URL (no spaces or special characters).`);return t}var Qt=S("claudeProxy"),mo="claude ",_s="flow ",uo=class extends Error{constructor(t){super(`Invalid install command: "${t}". Command must start with "claude " for security.`),this.name="InvalidInstallCommandError";}},po=class extends Error{constructor(t){super(`Disallowed subcommand: "${t}". Only "plugin install", "plugin marketplace add", "mcp add", and "mcp remove" are permitted.`),this.name="DisallowedSubcommandError";}},Uu=/^plugins?\s+(install|i)\s+|^plugins?\s+marketplace\s+add\s+|^mcp\s+(add|remove)\s+/;function Bu(e){Ds(e);let t=e.slice(mo.length);if(!Uu.test(t))throw new po(e)}var Wr=class extends Error{constructor(){super('Claude Code CLI not found. Ensure "claude" is installed and available on your PATH.'),this.name="ClaudeCliNotFoundError";}};function Ds(e){if(!e||!/^claude /.test(e))throw new uo(e)}async function le(e){Ds(e);let t=e.slice(mo.length).split(/\s+/).filter(Boolean),r=Ku(t);Qt.debug(`[${r}] Executing proxy command: claude ${t.join(" ")}`);let n=Date.now();try{let o=await execa("claude",t,{reject:!1}),i=Date.now()-n;return Qt.debug(`[${r}] Proxy command finished with exit code ${o.exitCode} in ${i}ms`),{name:r,command:e,exitCode:o.exitCode??1,stdout:o.stdout,stderr:o.stderr,duration_ms:i}}catch(o){throw Ns(o)?new Wr:o}}function Ku(e){return e.length>=3?e[2]:e.join(" ")}function Ns(e){return e instanceof Error&&"code"in e&&e.code==="ENOENT"}function ju(e){return e.startsWith(_s)?mo+e.slice(_s.length):e}var Ju=/^claude\s+(?:plugins?\s+(?:install|i)\s+|mcp\s+(?:add|remove)\s+)/;function Hu(e,t){return !t||e.includes("--scope")||!Ju.test(e)?e:`${e} --scope ${t}`}async function Fs(e,t){let r=e.split("&&").map(o=>ju(o.trim())).filter(Boolean).map(o=>Hu(o,t));if(r.length===0)throw new Error("Empty install command");for(let o of r)Bu(o);Qt.debug(`[installCommand] Executing ${r.length} command(s)`);let n=await le(r[0]);if(n.exitCode!==0)return n;for(let o=1;o<r.length;o++)if(n=await le(r[o]),n.exitCode!==0)return n;return n}async function Us(e,t,r){let n=kt(e),o=t?.trim();if(!o&&(o=(await Rs(`Plugin "${n}" could not be installed.
-If a marketplace is needed, enter the source (owner/repo or URL), or press Enter to skip: `))?.trim(),!o))throw new Error("No marketplace source provided. Cannot retry install.");o=zr(o),r?.(),Qt.debug(`[${n}] Adding marketplace via: claude plugin marketplace add ${o}`);try{let i=await execa("claude",["plugin","marketplace","add",o],{reject:!1});if(i.exitCode!==0)throw new Error(`Failed to add marketplace: ${i.stderr||"unknown error"}`);Qt.debug(`[${n}] Marketplace added successfully`);}catch(i){throw Ns(i)?new Wr:i}}var ze=S("installDispatcher");async function Bs(e,t,r){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"plugin",source:"external",scope:Br(r),version:"unknown",duration_ms:t,interface:A().interfaceType});}catch(n){ze.warn(`Failed to send external install metrics: ${String(n)}`);}}async function Ks(e,t){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"plugin",source:"external",error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:A().interfaceType});}catch(r){ze.warn(`Failed to send external install-failed metrics: ${String(r)}`);}}function fo(e,t){let r=kt(e);Ms(r);let n=["claude","plugin","install",r];return t&&n.push("--scope",t),n.join(" ")}async function go(e,t,r,n){let o=fo(e,n),i=kt(e);r?.onStatus?.(`Installing ${i}...`),ze.debug(`[${e}] Attempting install: ${o}`);let s=await le(o);return s.exitCode===0?s:(ze.debug(`[${e}] Install failed (exit ${s.exitCode}), attempting marketplace add`),r?.onError?.(s.stderr||`Install failed with exit code ${s.exitCode}`),t?r?.onStatus?.(`Adding marketplace for ${i}...`):r?.onPause?.(),await Us(e,t,()=>{t||r?.onResume?.(`Adding marketplace for ${i}...`);}),r?.onResume?.(`Retrying install for ${i}...`),ze.debug(`[${e}] Retrying install after marketplace add`),le(o))}async function js(e,t){if(e.origin===lr&&e.installCommand){ze.debug(`[${e.name}] Routing to external installer via installCommand`);let r=await Fs(e.installCommand,t?.scope);return r.exitCode===0?await Bs(e.name,r.duration_ms,t?.scope):await Ks(e.name,new Error(r.stderr||"Install failed")),r}if(Zt(e.name)){ze.debug(`[${e.name}] Routing to external installer via name pattern`);let r=await go(e.name,t?.marketplaceSource,void 0,t?.scope);return r.exitCode===0?await Bs(e.name,r.duration_ms,t?.scope):await Ks(e.name,new Error(r.stderr||"Install failed")),r}return ze.debug(`[${e.name}] Routing to internal installer`),Pe(e.name,t)}function Js(e){return "exitCode"in e}function Hs(){let e=K(s=>s.installedItems),t=K(s=>s.setInstalledItems),r=useCallback(async(s,c)=>{let a=await js(s,c);if(Js(a)&&a.exitCode!==0)throw new Error(a.stderr||"External installation failed");K.getState().loadFromDisk();},[]),n=useCallback(async(s,c)=>{await Jr(s,c),t(e.filter(a=>a.name!==s));},[e,t]),o=useCallback(async(s,c)=>{let l=e.find(u=>u.name===s)?.status==="enabled"?"disabled":"enabled";await Yt(s,l,c),t(e.map(u=>u.name===s?{...u,status:l}:u));},[e,t]),i=useCallback(async s=>{await Vr(s),K.getState().loadFromDisk();},[]);return {install:r,uninstall:n,toggle:o,update:i}}var Xr=S("mcp");function er(e,t){e.silent?ie({status:"error",mcp:t.name,...t.exitCode!==void 0&&{exitCode:t.exitCode},message:t.message}):k(`Failed to ${t.action} MCP "${t.name}": ${t.message}`);}function Vs(e,t){e.silent?Y({status:"success",mcp:t.name,command:t.command,duration_ms:t.durationMs}):(V(`MCP "${t.name}" ${t.actionPastTense} successfully`),e.verbose&&t.stdout&&I(t.stdout));}function Gu(e,t,r,n){let o=["claude","mcp","add","--transport",r,e];return t.length>0&&o.push(...t),n&&o.push("--scope",n),o.join(" ")}function yo(e,t){let r=["claude","mcp","remove",e];return t&&r.push("--scope",t),r.join(" ")}async function zs(e,t,r){if(!await ee())return 1;if(t.length===0){let i=r.transport==="http"?"a URL":"a command";return er(r,{name:e,action:"add",message:`${r.transport} transport requires ${i}`}),1}Xr.debug(`[${e}] Starting MCP add with args: ${t.join(" ")}`);let n=Gu(e,t,r.transport,r.scope);if(!r.force){let i=p(e),s=p(n);if(!await Ve(`Install external MCP "${i}"?
+`);}function N(e){return e instanceof Error?e.message:String(e)}function Cr(e){let t=new Date(e);return isNaN(t.getTime())?"\u2014":new Intl.DateTimeFormat("en-US",{dateStyle:"short"}).format(t)}function Sc(e){if(!(e instanceof Error))return "unknown";let t=e.message.toLowerCase();return t.includes("401")||t.includes("unauthorized")?"invalid_credentials":t.includes("403")||t.includes("forbidden")?"forbidden":t.includes("timeout")||t.includes("timed out")?"timeout":t.includes("network")||t.includes("econnrefused")||t.includes("fetch")?"network_error":"unknown"}var xe=["clientId","clientSecret","tenant"],hc={clientId:"Client ID",clientSecret:"Client Secret",tenant:"Tenant"};function wi(){let[e,t]=useState({clientId:"",clientSecret:"",tenant:""}),[r,n]=useState("clientId"),[o,i]=useState({}),[s,c]=useState(null),[a,l]=useState(false),u=useRef(0),{setCredentials:g,setJustAuthenticated:v}=me(),{setFocus:d}=f();useInput((h,T)=>{if(!a){if(T.shift&&T.tab){let y=xe.indexOf(r);y>0&&n(xe[y-1]);}else if(T.tab){let y=xe.indexOf(r);y<xe.length-1&&n(xe[y+1]);}else if(T.return)if(r==="tenant")E();else {let y=xe.indexOf(r);n(xe[y+1]);}}},{isActive:true});let E=async()=>{let h={};for(let T of xe)e[T].trim()||(h[T]="This field is required");if(Object.keys(h).length>0){i(h);let T=xe.find(y=>h[y]);T&&n(T);return}l(true),c(null),u.current+=1;try{await rt({clientId:e.clientId.trim(),clientSecret:e.clientSecret.trim(),tenant:e.tenant.trim()});let{clientSecret:T,...y}=e;g(y),v(!0),f.getState().setScreen("bundleSetup"),d("bundleList"),b(x.CLI_SESSION_STARTED,{cli_version:Be,os:process.platform,node_version:process.version,duration_ms:Ue(),interface:"tui"}).catch(()=>{});}catch(T){let y=T instanceof Error?T.message:"Authentication failed";c(y),pi(x.CLI_AUTH_FAILED,{error_code:Sc(T),attempt:u.current},e.tenant.trim()).catch(()=>{});}finally{l(false),t(T=>({...T,clientSecret:""}));}},m=h=>T=>{t(y=>({...y,[h]:T})),o[h]&&i(y=>({...y,[h]:void 0}));};return jsxs(Box,{flexDirection:"column",padding:2,children:[jsx(Box,{marginBottom:1,children:jsxs(Text,{bold:true,color:"cyan",children:[Uo," \u2014 Initial Setup"]})}),jsxs(Box,{marginBottom:1,flexDirection:"column",children:[jsx(Text,{dimColor:true,children:"The data collected during setup is used solely to improve"}),jsx(Text,{dimColor:true,children:"Flow's internal tools and will not be shared externally."})]}),jsx(Box,{flexDirection:"column",children:xe.map(h=>jsx(Box,{marginBottom:1,children:jsx(hi,{label:hc[h],value:e[h],onChange:m(h),masked:h==="clientSecret",isActive:r===h&&!a,error:o[h]})},h))}),a&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"cyan",children:"Authenticating..."})}),s&&jsx(Box,{marginTop:1,children:jsxs(Text,{color:"red",children:["\u26A0 ",p(s)]})}),jsx(Box,{marginTop:1,children:jsx(Text,{dimColor:true,children:"Tab next field \xB7 Enter confirm"})})]})}function Ar(){return jsxs(Box,{flexDirection:"column",alignItems:"center",children:[jsx(xc,{text:"FLOW",font:"block",colors:["white","white"]}),jsx(Box,{marginTop:-1,marginBottom:1,children:jsxs(Text,{dimColor:true,children:["Marketplace \xB7 v",Be]})})]})}var Un={discover:"Discover",installed:"Installed"},Ic=Object.keys(Un);function Ei(){let e=f(t=>t.activeTab);return jsx(Box,{paddingX:1,paddingBottom:1,children:Ic.map(t=>jsx(Box,{marginRight:1,children:t===e?jsx(Text,{bold:true,inverse:true,children:` ${Un[t]} `}):jsx(Text,{dimColor:true,children:` ${Un[t]} `})},t))})}var Z=create(e=>({query:"",cursorPosition:0,setQuery:t=>e({query:t}),setCursorPosition:t=>e({cursorPosition:t}),resetQuery:()=>e({query:"",cursorPosition:0})}));function ki(){let e=f(s=>s.focus),t=Z(s=>s.query),r=Z(s=>s.cursorPosition),n=e==="search",o=t.slice(0,r),i=t.slice(r);return jsxs(Box,{borderStyle:"single",borderTop:false,borderBottom:true,borderLeft:false,borderRight:false,paddingX:1,marginX:1,marginBottom:1,children:[jsx(Text,{color:n?"cyan":"gray",children:"\u{1F50D} "}),n?jsxs(Fragment,{children:[jsx(Text,{color:"white",children:o}),jsx(Text,{inverse:true,children:i[0]??" "}),jsx(Text,{color:"white",children:i.slice(1)})]}):jsx(Text,{dimColor:true,children:t||"Search..."})]})}var Ec=["skill","mcp","plugin"].map((e,t)=>({key:String(t+2),type:e,...gt[e]})),Tc=["internal","external"].map((e,t)=>({key:String(t+6),origin:e,...Bo[e]}));function Ci(){let e=f(n=>n.catalogFilters),t=e.types.has("skill")&&e.types.has("mcp")&&e.types.has("plugin"),r=e.origins.has("internal")&&e.origins.has("external");return jsxs(Box,{paddingX:1,paddingBottom:1,gap:1,children:[jsx(Text,{bold:true,children:"Type:"}),jsxs(Box,{gap:0,children:[jsx(Text,{dimColor:true,children:"[1] "}),jsxs(Text,{color:t?"green":void 0,dimColor:!t,children:[t?"\u25C9":"\u25CB"," All"]})]}),Ec.map(n=>{let o=!t&&e.types.has(n.type);return jsxs(Box,{gap:0,children:[jsxs(Text,{dimColor:true,children:["[",n.key,"] "]}),jsxs(Text,{color:o?n.color:void 0,dimColor:!o,children:[o?"\u25C9":"\u25CB"," ",n.label]})]},n.key)}),jsx(Box,{marginLeft:2,children:jsx(Text,{bold:true,children:"|"})}),jsx(Box,{marginLeft:2,children:jsx(Text,{bold:true,children:"Origin:"})}),jsxs(Box,{gap:0,children:[jsx(Text,{dimColor:true,children:"[5] "}),jsxs(Text,{color:r?"green":void 0,dimColor:!r,children:[r?"\u25C9":"\u25CB"," All"]})]}),Tc.map(n=>{let o=!r&&e.origins.has(n.origin);return jsxs(Box,{gap:0,children:[jsxs(Text,{dimColor:true,children:["[",n.key,"] "]}),jsxs(Text,{color:o?n.color:void 0,dimColor:!o,children:[o?"\u25C9":"\u25CB"," ",n.label]})]},n.key)})]})}function $i({type:e}){let{label:t,color:r}=gt[e];return jsx(Text,{color:r,children:t})}function Ri({origin:e}){return e===Lt?jsx(Text,{color:"blue",children:"[Flow]"}):jsx(Text,{color:"white",children:"[External]"})}var Rr=$c.memo(function({item:t,isSelected:r}){let n=t.status==="disabled"?"yellow":"green";return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:r?"cyan":"gray",children:r?"\u203A ":"\u25CB "}),jsx(Text,{bold:r,color:r?"cyan":"white",children:t.name}),t.type&&jsxs(Text,{children:[" ",jsx($i,{type:t.type})]}),t.origin&&jsxs(Text,{children:[" ",jsx(Ri,{origin:t.origin})]}),jsxs(Text,{dimColor:true,children:[t.authorName?` \xB7 ${t.authorName}`:"",t.version?` \xB7 v${t.version}`:" \xB7 n/a"]}),t.status&&jsxs(Text,{color:n,children:[" [",t.status,"]"]}),t.updateAvailable&&jsx(Text,{color:"yellow",children:" [\u2191 update available]"}),t.installedAt&&jsxs(Text,{dimColor:true,children:[" \xB7 ",Cr(t.installedAt)]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:t.description})})]})});function Pt({message:e}){return jsx(Box,{paddingX:2,paddingY:1,children:jsx(Text,{dimColor:true,children:e??"No items found."})})}function Oi({items:e,emptyMessage:t}){let r=f(a=>a.selectedIndex);if(e.length===0)return jsx(Pt,{message:t});let n=Math.max(0,r-Math.floor(Oe/2)),o=Math.min(e.length,n+Oe);o===e.length&&(n=Math.max(0,o-Oe));let i=e.slice(n,o),s=n,c=e.length-o;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:s>0?`\u2191 ${s} more above`:" "})}),i.map((a,l)=>jsx(Rr,{item:a,isSelected:n+l===r},a.name)),jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:c>0?`\u2193 ${c} more below`:" "})})]})}function Fi({label:e,pathHint:t}){return jsxs(Box,{paddingBottom:1,children:[jsx(Text,{bold:true,color:"blueBright",children:e}),jsxs(Text,{dimColor:true,children:[" ",t]})]})}function Bi({groups:e,emptyMessage:t}){let r=f(d=>d.selectedIndex),n=[],o=0;for(let d of e){n.push({kind:"header",label:d.label,pathHint:d.pathHint,key:`h-${d.scope}`});for(let E of d.items)n.push({kind:"item",item:E,itemIndex:o,key:`i-${d.scope}-${E.name}`}),o++;}if(o===0)return jsx(Pt,{message:t});let s=n.findIndex(d=>d.kind==="item"&&d.itemIndex===r),c=s>=0?s:0,a=Math.max(0,c-Math.floor(Oe/2)),l=Math.min(n.length,a+Oe);l===n.length&&(a=Math.max(0,l-Oe));let u=n.slice(a,l),g=a,v=n.length-l;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:g>0?`\u2191 ${g} more above`:" "})}),u.map(d=>d.kind==="header"?jsx(Fi,{label:d.label,pathHint:d.pathHint},d.key):jsx(Rr,{item:d.item,isSelected:d.itemIndex===r},d.key)),jsx(Box,{paddingX:2,children:jsx(Text,{dimColor:true,children:v>0?`\u2193 ${v} more below`:" "})})]})}var Dc={discover:"Discover",installed:"Installed"};function ji({items:e,tabId:t,emptyMessage:r,groups:n}){return jsxs(Box,{flexDirection:"column",children:[jsx(ki,{}),jsx(Ci,{}),jsxs(Box,{paddingX:1,marginTop:1,children:[jsx(Text,{bold:true,children:Dc[t]}),jsxs(Text,{dimColor:true,children:[" (",e.length,")"]})]}),n&&n.length>0?jsx(Bi,{groups:n,emptyMessage:r}):jsx(Oi,{items:e,emptyMessage:r})]})}function Ji({filteredItems:e,emptyMessage:t,groups:r}){let n=f(o=>o.activeTab);return jsx(Box,{flexDirection:"column",flexGrow:1,children:n==="discover"?jsx(ji,{items:e,tabId:"discover",emptyMessage:t},"discover"):jsx(ji,{items:e,tabId:"installed",emptyMessage:t,groups:r},"installed")})}var Uc={tabs:"\u2190\u2192: switch tab | \u2193: navigate | Enter: select | Ctrl+C Ctrl+C: quit",list:"\u2191\u2193: navigate | Enter: select | Type: 1=All 2=Skill 3=MCP 4=Plugin | Origin: 5=All 6=Flow 7=External | \u2190\u2192/Tab: tabs | Ctrl+C\xD72: quit",search:"Type to filter | \u2193/Esc: exit search | Enter: confirm",actionMenu:"\u2191\u2193: navigate options | Enter: confirm | Esc: close menu",auth:"Tab: next field | Enter: confirm | Ctrl+C Ctrl+C: quit",bundleList:"\u2191\u2193: navigate | Enter: select Starter Kit | Esc: skip",bundleDetail:"\u2191\u2193: navigate | Enter: confirm & install | Esc: back",installProgress:"\u2191\u2193: navigate | Enter: select"};function Mr(){let e=f(t=>t.focus);return jsx(Box,{borderStyle:"single",borderTop:true,borderBottom:false,borderLeft:false,borderRight:false,children:jsx(Text,{dimColor:true,children:Uc[e]})})}function Gi({message:e,type:t}){return e?jsx(Box,{paddingX:1,children:jsxs(Text,{color:t==="success"?"green":t==="info"?"cyan":"red",children:[t==="success"?"\u2713":t==="info"?"(i)":"\u2717"," ",p(e)]})}):null}function _r({message:e}){return jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(Gc,{type:"dots"})}),jsxs(Text,{children:[" ",e]})]})}function Or({message:e,onRetry:t,onBack:r}){return useInput((n,o)=>{n==="r"&&o.ctrl&&t?t():o.escape&&r&&r();}),jsxs(Box,{flexDirection:"column",paddingX:2,paddingY:1,children:[jsxs(Text,{color:"red",children:["\u2717 ",e]}),t&&jsx(Text,{dimColor:true,children:"Press Ctrl+R to retry"}),r&&jsx(Text,{dimColor:true,children:"Press Escape to go back"})]})}function ut({itemName:e,actions:t,descriptions:r,onAction:n,onClose:o}){let i=f(a=>a.focus),[s,c]=useState(0);return useInput((a,l)=>{l.upArrow?c(u=>u>0?u-1:u):l.downArrow?c(u=>u<t.length-1?u+1:u):l.return?n(t[s]):l.escape&&o();},{isActive:i==="actionMenu"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsx(Box,{flexDirection:"column",marginTop:1,children:t.map((a,l)=>jsxs(Box,{children:[jsxs(Text,{bold:l===s,color:l===s?"cyan":void 0,children:[l===s?"\u203A ":"  ",a]}),r?.[a]&&jsxs(Text,{dimColor:true,children:[" \u2014 ",r[a]]})]},l))})]})}var Wn=Object.entries(Rt),Zi=[...Wn.map(([,e])=>e.actionLabel),"Cancel"],Qi=Object.fromEntries(Wn.map(([,e])=>[e.actionLabel,e.description]));function es(e){let t=Wn.find(([,r])=>r.actionLabel===e);return t?t[0]:null}function rs({itemName:e,onInstall:t,onClose:r}){let[n,o]=useState(false),i=useCallback(l=>{let u=es(l);u?t(u):o(false);},[t]),s=useCallback(()=>{o(false);},[]),c=useCallback(l=>{l==="Install"?o(true):r();},[r]);return n?jsx(ut,{itemName:`${e} \u2014 Choose scope`,actions:Zi,descriptions:Qi,onAction:i,onClose:s}):jsx(ut,{itemName:e,actions:["Install","Cancel"],onAction:c,onClose:r})}function Nr({activeFocus:e,onConfirm:t}){let[r,n]=useState("idle"),o=f(i=>i.focus);return useInput((i,s)=>{s.escape||i==="n"?n("idle"):i==="y"&&t();},{isActive:r==="confirming"&&o===e}),{isConfirming:r==="confirming",requestConfirm:()=>n("confirming"),cancelConfirm:()=>n("idle")}}function is({itemName:e,itemScope:t,itemStatus:r,updateAvailable:n,catalogVersion:o,onUninstall:i,onToggleStatus:s,onUpdate:c,onClose:a}){let{isConfirming:l,requestConfirm:u}=Nr({activeFocus:"actionMenu",onConfirm:()=>i(t)});if(l)return jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Uninstall "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]});let g=r==="enabled"?"Disable":"Enable",v=o&&p(o),d=v?`Update to v${v}`:"Update";return jsx(ut,{itemName:e,actions:n?["Uninstall",g,d,"Cancel"]:["Uninstall",g,"Cancel"],onAction:h=>{h==="Uninstall"?u():h===g?s(t):h.startsWith("Update")?c?.():a();},onClose:a})}function ls({itemName:e,itemScope:t,onUninstall:r,onClose:n}){let{isConfirming:o,requestConfirm:i}=Nr({activeFocus:"actionMenu",onConfirm:()=>r(t)});return o?jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,flexShrink:0,children:[jsx(Text,{bold:true,children:e}),jsxs(Box,{marginTop:1,children:[jsx(Text,{children:"Remove MCP "}),jsx(Text,{bold:true,color:"red",children:e}),jsx(Text,{children:"? (y/N)"})]})]}):jsx(ut,{itemName:e,actions:["Uninstall","Cancel"],onAction:a=>{a==="Uninstall"?i():n();},onClose:n})}async function cs(e,t){let r=U.resolve(t);await Ie.mkdir(r,{recursive:true});let n=U.join(U.dirname(r),`${randomUUID()}.zip`);try{await Ie.writeFile(n,e),await eu(n,{dir:r,onEntry(o){if((o.externalFileAttributes>>16&61440)===40960)throw new Error(`Zip Slip (symlink): entry "${o.fileName}" is a symbolic link and was rejected`);let s=U.resolve(r,o.fileName);if(!s.startsWith(r+U.sep)&&s!==r)throw new Error(`Zip Slip detected: entry "${o.fileName}" would escape target directory`)}});try{let o=realpathSync(r);if(!o.startsWith(U.resolve(U.dirname(r))))throw new Error(`Zip Slip (post-extract): resolved path "${o}" is outside expected parent`)}catch(o){if(o.code!=="ENOENT")throw o}}finally{try{await Ie.unlink(n);}catch{}}}async function Xn(e){await Ie.rm(e,{recursive:true,force:true});}async function Je(){let e=zo();await Ie.mkdir(U.dirname(e),{recursive:true});try{await Ie.writeFile(e,"",{flag:"wx"});}catch(r){if(r.code!=="EEXIST")throw r}return await tu.lock(e,{stale:1e4,retries:{retries:2,minTimeout:500,maxTimeout:500}})}var nu={user:"global",project:"project",local:"local"};function Br(e){return e?nu[e]:"global"}var be=class extends Error{constructor(r,n){super(`${r} v${n} is already installed. Use --force to reinstall.`);this.pluginName=r;this.version=n;this.name="AlreadyInstalledError";}pluginName;version},He=class extends Error{constructor(r,n){super(`${r} is already up to date (v${n})`);this.pluginName=r;this.version=n;this.name="AlreadyUpToDateError";}pluginName;version};function Wt(){return Vl.create({prefix:It("PROMPT_MANAGER_URL","https://flow.ciandt.com/prompt-manager-api/"),hooks:{beforeRequest:[async({request:e})=>{let t=await Fe();e.headers.set("Authorization",`Bearer ${t}`);let r=await D();r?.tenant&&Ze.test(r.tenant)&&e.headers.set("FlowTenant",r.tenant);}]}})}var iu=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function us(e){if(!e||!iu.test(e))throw new Error(`Invalid plugin name: "${e}". Must be 1-64 chars, lowercase alphanumeric and hyphens only.`)}async function ve(){try{let{plugins:e}=await Wt().get("v1/plugins/catalog").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching plugin catalog"):new Error(`Failed to fetch plugin catalog: ${e.message}`):e}}async function Tt(e){us(e);try{return await Wt().get(`v1/plugins/${e}/manifest`).json()}catch(t){throw t instanceof Error?t.message.includes("404")?new Error(`Plugin '${e}' not found in catalog`):t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to fetch plugin manifest: ${t.message}`):t}}async function ps(e){us(e);try{let t=await Wt().get(`v1/plugins/${e}/archive`);return Buffer.from(await t.arrayBuffer())}catch(t){throw t instanceof Error?t.message.includes("timeout")?new Error("Download timed out after 30s"):new Error(`Failed to download plugin: ${t.message}`):t}}async function Kr(){try{let{profiles:e}=await Wt().get("v1/plugins/profiles").json();return e}catch(e){throw e instanceof Error?e.message.includes("401")||e.message.includes("403")?new Error("Authentication failed. Run: flow auth login"):e.message.includes("timeout")?new Error("Request timed out while fetching starter kits"):new Error(`Failed to fetch starter kits: ${e.message}`):e}}var su=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/,au=/^[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9]+(\.[a-zA-Z0-9]+)*)?$/;function jr(e){if(!su.test(e))throw new Error(`Invalid plugin name from manifest: "${e}". Plugin names must be lowercase alphanumeric and hyphens (1-64 chars).`)}function lu(e){if(!au.test(e))throw new Error(`Invalid plugin version from manifest: "${e}". Versions must follow semver format (e.g. 1.0.0 or 1.0.0-beta.1).`)}var Ge=S("installer");function cu(e,t){let r=`${e}@${O}`,o=Le().plugins[r];if(o&&!t)throw new be(e,o[0].version??"unknown");return {pluginKey:r,alreadyInstalled:o}}async function uu(e,t,r){r&&await Xn(t);try{Ge.debug(`[${t}] Extracting archive...`),await cs(e,t);}catch(n){throw await Xn(t),n}}function pu(e,t,r,n,o){let i=Le(),s={scope:n,installPath:t,version:r,installedAt:new Date().toISOString(),origin:o},c=i.plugins[e]??[];i.plugins[e]=[...c.filter(a=>a.scope!==n),s],pt(i),Yn(e,true,n);}async function du(e,t,r,n,o){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"plugin",source:o,scope:n,version:t,duration_ms:r,interface:A().interfaceType});}catch(i){Ge.warn(`Failed to send install metrics: ${String(i)}`);}}async function mu(e,t,r){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"plugin",source:r,error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:A().interfaceType});}catch(n){Ge.warn(`Failed to send install-failed metrics: ${String(n)}`);}}async function Pe(e,t={}){let r=Date.now(),n=null;try{Ge.debug(`[${e}] Acquiring lock...`),n=await Je();let{pluginKey:o,alreadyInstalled:i}=cu(e,t.force);Ge.debug(`[${e}] Fetching manifest...`);let s=await Tt(e);jr(s.name),lu(s.version),Ge.debug(`[${e}] Downloading archive...`);let c=await ps(e),a=t.scope??"user",l=Ho(s.name,s.version);await uu(c,l,!!i&&!!t.force),pu(o,l,s.version,a,"internal"),ds(s,l);let u=Date.now()-r;Ge.debug(`[${e}] Installed successfully in ${u}ms`);let g={name:s.name,version:s.version,path:l,duration_ms:u};return t.skipMetrics||await du(s.name,s.version,u,Br(a),"internal"),g}catch(o){throw await mu(e,o,"internal"),Ge.error(`[${e}] Installation failed: ${o instanceof Error?o.message:String(o)}`),o}finally{n&&await n();}}function fu(){return {$schema:"https://anthropic.com/claude-code/marketplace.schema.json",name:O,description:"Flow Skills marketplace",owner:{name:"Flow Team",email:"flow@ciandt.com"},plugins:[]}}function gs(){let e=ur();if(!z__default.existsSync(e))return null;try{return JSON.parse(z__default.readFileSync(e,"utf-8"))}catch{return null}}function gu(){let e=gs();if(e)return e;let t=fu(),r=ur();return z__default.mkdirSync(U__default.dirname(r),{recursive:true}),Zn(t),t}function Zn(e){let t=ur(),r=`${t}.${randomUUID()}.tmp`;z__default.writeFileSync(r,JSON.stringify(e,null,2),"utf-8"),z__default.renameSync(r,t);}function yu(){let e=Go(),t={};try{z__default.existsSync(e)&&(t=JSON.parse(z__default.readFileSync(e,"utf-8")));}catch{t={};}if(t[O])return;t[O]={source:{source:"github",repo:"CI-T-HyperX/flow-skills"},installLocation:Vo(),lastUpdated:new Date().toISOString()};let r=`${e}.${randomUUID()}.tmp`;z__default.writeFileSync(r,JSON.stringify(t,null,2),"utf-8"),z__default.renameSync(r,e);}function ds(e,t){jr(e.name),yu();let r=wn(e.name);z__default.mkdirSync(U__default.dirname(r),{recursive:true});try{z__default.lstatSync(r),z__default.rmSync(r,{recursive:!0,force:!0});}catch{}z__default.symlinkSync(t,r);let n=gu();n.plugins.some(i=>i.name===e.name)||(n.plugins.push({name:e.name,description:e.description,version:e.version,author:e.author,source:`./plugins/native/${e.name}`,category:e.category}),Zn(n));}function Qn(e){jr(e);let t=wn(e);try{z__default.rmSync(t,{recursive:!0,force:!0});}catch{}let r=gs();if(!r)return;let n=r.plugins.length;r.plugins=r.plugins.filter(o=>o.name!==e),r.plugins.length!==n&&Zn(r);}var hu=S("mcpConfigReader"),wu=500,xu=512;function Iu(){return U__default.join(he__default.homedir(),".claude.json")}function bu(){return U__default.join(process.cwd(),".mcp.json")}function Ss(e){if(!z__default.existsSync(e))return null;try{return JSON.parse(z__default.readFileSync(e,"utf-8"))}catch{return hu.debug(`[mcpConfigReader] Failed to parse ${e}`),null}}function qt(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function eo(e){if(!qt(e))return {};let t=e.mcpServers;return qt(t)?t:{}}function to(e,t){return Object.keys(e).slice(0,wu).map(n=>({name:p(n.slice(0,xu)),marketplace:"",version:void 0,installedAt:"",installPath:"",scope:t,description:void 0,author:void 0,status:"enabled",type:"mcp"}))}function ws(){let e=[],t=Iu(),r=Ss(t);if(qt(r)){let c=r,a=eo(c);e.push(...to(a,"user"));let l=process.cwd();if(qt(c.projects)){let u=c.projects[l];if(qt(u)){let g=eo(u);e.push(...to(g,"local"));}}}let n=bu(),o=Ss(n),i=eo(o);e.push(...to(i,"project"));let s=new Map;for(let c of e){let a=`${c.name}@${c.scope}`;s.has(a)||s.set(a,c);}return [...s.values()]}var ae=S("storage");async function Pu(e,t){try{await b(x.CLI_TOOL_UNINSTALLED,{tool_id:e,tool_type:"plugin",source:t,interface:A().interfaceType});}catch(r){ae.warn(`Failed to send uninstall metrics: ${String(r)}`);}}function Eu(e,t,r){let n=t==="enabled"?x.CLI_TOOL_ENABLED:x.CLI_TOOL_DISABLED;b(n,{tool_id:e,source:r,interface:A().interfaceType}).catch(o=>ae.warn(`Failed to send ${t} metrics: ${String(o)}`));}function Is(){return U__default.join(he__default.homedir(),".claude","plugins","installed_plugins.json")}function Tu(){return U__default.join(he__default.homedir(),".claude","plugins")}function xs(e){let t=U__default.resolve(e),r=U__default.resolve(Tu()),n=U__default.resolve(U__default.join(process.cwd(),".claude","plugins")),o=t.startsWith(r+U__default.sep)||t===r,i=t.startsWith(n+U__default.sep)||t===n;if(!o&&!i)throw new Error(`Security error: installPath '${e}' is outside the plugins directory`)}function bs(e="user"){return e==="local"?U__default.join(process.cwd(),".claude","settings.local.json"):e==="project"?U__default.join(process.cwd(),".claude","settings.json"):U__default.join(he__default.homedir(),".claude","settings.json")}function Le(){let e=Is();if(!z__default.existsSync(e))return {version:2,plugins:{}};try{return JSON.parse(z__default.readFileSync(e,"utf-8"))}catch{return {version:2,plugins:{}}}}function ku(e){let t=e?.code;return t==="EACCES"||t==="EPERM"}function vs(e,t){try{z__default.mkdirSync(U__default.dirname(e),{recursive:!0});let r=`${e}.${randomUUID()}.tmp`;z__default.writeFileSync(r,JSON.stringify(t,null,2),"utf-8"),z__default.renameSync(r,e);}catch(r){throw ku(r)?new Error(`Permission denied: cannot write to '${e}'. Check your file system permissions.`):r}}function pt(e){vs(Is(),e);}function Xt(e){let t=e.lastIndexOf("@");return t===-1?{name:e,marketplace:""}:{name:e.slice(0,t),marketplace:e.slice(t+1)}}function Cu(e,t){let r=U__default.join(e,".claude-plugin"),n=U__default.join(r,"plugin.json");if(z__default.existsSync(n))try{return JSON.parse(z__default.readFileSync(n,"utf-8"))}catch{return null}let o=U__default.join(r,"marketplace.json");if(z__default.existsSync(o))try{let i=JSON.parse(z__default.readFileSync(o,"utf-8"));return {description:i.plugins?.find(c=>c.name===t)?.description,author:i.owner}}catch{return null}return null}function io(e="user"){let t=bs(e);if(!z__default.existsSync(t))return {};try{return JSON.parse(z__default.readFileSync(t,"utf-8"))}catch{return {}}}function Ps(e,t="user"){vs(bs(t),e);}function $u(e,t){let{name:r,marketplace:n}=Xt(e),o;if(n?(o=`${r}@${n}`,t[o]||(o=void 0)):o=Object.keys(t).filter(s=>Xt(s).name===r)[0],!o)throw ae.error(`[${r}] Plugin is not installed`),new Error(`Plugin '${r}' is not installed`);return {key:o,name:r}}function Au(e,t){let{name:r,marketplace:n}=Xt(e),o;return n?(o=`${r}@${n}`,t[o]||(o=void 0)):o=Object.keys(t).filter(s=>Xt(s).name===r)[0],o?{key:o,name:r}:null}function ro(e="user"){return io(e).enabledPlugins??{}}function no(e,t="user"){let r=io(t),n=r.enabledPlugins;if(!n||!(e in n))return;let{[e]:o,...i}=n;r.enabledPlugins=i,Ps(r,t);}function Yn(e,t,r="user"){let n=io(r),o=n.enabledPlugins??{};n.enabledPlugins={...o,[e]:t},Ps(n,r);}function Lu(e){let t=new Map;for(let r of e){let n=t.get(r.scope);(!n||r.installedAt>n.installedAt)&&t.set(r.scope,r);}return [...t.values()]}function Ee(){let e=Le(),t=ro(),r=ro("project"),n=ro("local"),o={project:r,local:n},i=Object.entries(e.plugins).flatMap(([l,u])=>{let{name:g,marketplace:v}=Xt(l),d=u.map(m=>m.scope==="managed"?{...m,scope:"user"}:m);return Lu(d).map(m=>{let h=Cu(m.installPath,g),y=(o[m.scope]??t)[l];return {name:g,marketplace:v,version:m.version&&m.version!=="unknown"?m.version:void 0,installedAt:m.installedAt,installPath:m.installPath,scope:m.scope,description:h?.description,author:h?.author,status:y===false?"disabled":"enabled"}})}),s=ws(),c=new Set(i.map(l=>`${l.name}@${l.scope}`)),a=s.filter(l=>!c.has(`${l.name}@${l.scope}`));return [...i,...a]}async function Jr(e,t){ae.debug(`[${e}] Acquiring lock to uninstall`);let r=await Je();try{let n=Le(),o=Au(e,n.plugins);if(!o)throw new Error(`Plugin '${e}' is not in installed_plugins.json. If this is an MCP server from config, use the MCP remove command instead.`);let{key:i,name:s}=o,c=n.plugins[i];if(t){let a=c.find(g=>g.scope===t);if(!a)throw new Error(`Plugin '${s}' is not installed in ${t} scope`);ae.debug(`[${s}] Resolved key: ${i}, scope: ${t}`),xs(a.installPath);let l=U__default.dirname(a.installPath);ae.debug(`[${s}] Removing directory: ${l}`),z__default.rmSync(l,{recursive:!0,force:!0});let u=c.filter(g=>g.scope!==t);if(u.length===0){let{[i]:g,...v}=n.plugins;pt({...n,plugins:v}),no(i,t),Qn(s);}else n.plugins[i]=u,pt(n),no(i,t);}else {ae.debug(`[${s}] Resolved key: ${i}`);for(let u of c){xs(u.installPath);let g=U__default.dirname(u.installPath);ae.debug(`[${s}] Removing directory: ${g}`),z__default.rmSync(g,{recursive:!0,force:!0}),no(i,u.scope);}Qn(s);let{[i]:a,...l}=n.plugins;pt({...n,plugins:l});}await Pu(s,c[0].origin??"internal"),ae.debug(`[${s}] Uninstalled successfully`);}finally{await r();}}async function Yt(e,t,r){ae.debug(`[${e}] Acquiring lock to set status \u2192 ${t}`);let n=await Je();try{let o=Le(),{key:i,name:s}=$u(e,o.plugins),c=o.plugins[i],a=r??c[0].scope,l=c[0].origin??"internal";ae.debug(`[${s}] Resolved key: ${i}, scope: ${a}`),Yn(i,t==="enabled",a),Eu(s,t,l),ae.debug(`[${s}] Status updated to ${t}`);}finally{await n();}}var K=create(e=>({installedItems:[],setInstalledItems:t=>e({installedItems:t}),loadFromDisk:()=>e({installedItems:Ee()})}));var F=["discover","installed"];function Es(e,t,r){if(t.rightArrow||t.tab){let n=F.indexOf(r.activeTab);return [{type:"setTab",tab:F[(n+1)%F.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}if(t.leftArrow){let n=F.indexOf(r.activeTab);return [{type:"setTab",tab:F[(n-1+F.length)%F.length]},{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}]}return t.downArrow?[{type:"setFocus",focus:"list"}]:[]}function Ts(e,t,r,n){if(t.upArrow)return r.selectedIndex===0?[{type:"setSelectedIndex",index:-1},{type:"setFocus",focus:"search"}]:[{type:"setSelectedIndex",index:r.selectedIndex-1}];if(t.downArrow&&r.selectedIndex<n-1)return [{type:"setSelectedIndex",index:r.selectedIndex+1}];if(t.leftArrow){let o=F.indexOf(r.activeTab);return [{type:"setTab",tab:F[(o-1+F.length)%F.length]},{type:"setSelectedIndex",index:0}]}if(t.rightArrow){let o=F.indexOf(r.activeTab);return [{type:"setTab",tab:F[(o+1)%F.length]},{type:"setSelectedIndex",index:0}]}if(t.tab){let o=F.indexOf(r.activeTab);return [{type:"setTab",tab:F[(o+1)%F.length]},{type:"setSelectedIndex",index:0}]}return t.return?[{type:"setActionMenuOpen",open:true},{type:"setFocus",focus:"actionMenu"}]:e==="/"?[{type:"setFocus",focus:"search"}]:e==="1"?[{type:"selectAllTypes"}]:e==="2"?[{type:"toggleTypeFilter",catalogType:"skill"}]:e==="3"?[{type:"toggleTypeFilter",catalogType:"mcp"}]:e==="4"?[{type:"toggleTypeFilter",catalogType:"plugin"}]:e==="5"?[{type:"selectAllOrigins"}]:e==="6"?[{type:"toggleOriginFilter",origin:"internal"}]:e==="7"?[{type:"toggleOriginFilter",origin:"external"}]:e&&e!==" "&&!t.ctrl&&!t.meta&&!t.escape?[{type:"setSelectedIndex",index:-1},{type:"setFocus",focus:"search"},{type:"searchAppend",char:e}]:[]}function ks(e,t){return t.escape?[{type:"setActionMenuOpen",open:false},{type:"setFocus",focus:"list"}]:[]}function Cs(e,t,r){return t.escape?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:"reset"}:t.downArrow?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:null}:t.leftArrow?{actions:[],queryUpdate:{cursorMove:-1}}:t.rightArrow?{actions:[],queryUpdate:{cursorMove:1}}:t.return?{actions:[{type:"setSelectedIndex",index:0},{type:"setFocus",focus:"list"}],queryUpdate:null}:t.backspace?r.length===0?{actions:[{type:"setFocus",focus:"list"},{type:"setSelectedIndex",index:0}],queryUpdate:null}:{actions:[],queryUpdate:{backspace:true}}:e&&!t.ctrl&&!t.meta?{actions:[],queryUpdate:{append:e}}:{actions:[],queryUpdate:null}}function Gr(e){let{setActiveTab:t,setFocus:r,setSelectedIndex:n,setActionMenuOpen:o}=f.getState();for(let i of e)if(i.type==="setTab")t(i.tab);else if(i.type==="setFocus")r(i.focus);else if(i.type==="setSelectedIndex")n(i.index);else if(i.type==="setActionMenuOpen")o(i.open);else if(i.type==="searchAppend"){let{setQuery:s,query:c,setCursorPosition:a,cursorPosition:l}=Z.getState();s(c.slice(0,l)+i.char+c.slice(l)),a(l+i.char.length);}else i.type==="toggleTypeFilter"?f.getState().toggleTypeFilter(i.catalogType):i.type==="selectAllTypes"?f.getState().selectAllTypes():i.type==="toggleOriginFilter"?f.getState().toggleOriginFilter(i.origin):i.type==="selectAllOrigins"&&f.getState().selectAllOrigins();}function $s({listLength:e}){let t=f(m=>m.focus),r=f(m=>m.selectedIndex),n=f(m=>m.actionMenuOpen),o=f(m=>m.setFocus),i=f(m=>m.setActionMenuOpen),s=Z(m=>m.query),c=Z(m=>m.setQuery),a=Z(m=>m.resetQuery),l=useRef(e);useEffect(()=>{l.current=e;},[e]),useEffect(()=>{if(t==="search"){let{query:m,setCursorPosition:h}=Z.getState();h(m.length);}},[t]);let[u,g]=useState("");useEffect(()=>{let m=setTimeout(()=>g(s),300);return ()=>clearTimeout(m)},[s]),useInput((m,h)=>{let{activeTab:T,selectedIndex:y,actionMenuOpen:L}=f.getState();Gr(Es(m,h,{activeTab:T}));},{isActive:t==="tabs"}),useInput((m,h)=>{let{activeTab:T,selectedIndex:y,actionMenuOpen:L}=f.getState();Gr(Ts(m,h,{activeTab:T,selectedIndex:y},l.current));},{isActive:t==="list"}),useInput((m,h)=>{Gr(ks(m,h));},{isActive:t==="actionMenu"}),useInput((m,h)=>{let T=Cs(m,h,Z.getState().query),y=T.queryUpdate;if(Gr(T.actions),y==="reset")a(),g("");else if(y!==null){let{query:L,cursorPosition:$,setCursorPosition:H}=Z.getState();if("backspace"in y)$>0&&(c(L.slice(0,$-1)+L.slice($)),H($-1));else if("append"in y)c(L.slice(0,$)+y.append+L.slice($)),H($+y.append.length);else if("cursorMove"in y){let q=$+y.cursorMove;q>=0&&q<=L.length&&H(q);}}},{isActive:t==="search"});let v=useCallback(()=>{i(false),o("list");},[i,o]),d=useCallback(m=>{let{setSelectedIndex:h,selectedIndex:T}=f.getState();m===0?h(0):T>=m&&h(m-1);},[]),E=useCallback(m=>{if(!u)return l.current=m.length,m;let h=u.toLowerCase(),T=m.filter(y=>y.name.toLowerCase().includes(h)||y.description?.toLowerCase().includes(h));return l.current=T.length,T},[u]);return {actionMenuOpen:n,closeMenu:v,selectedIndex:r,clampIndex:d,filteredItems:E}}function Ls(){let e=f(c=>c.notification),t=f(c=>c.showNotification),r=f(c=>c.clearNotification),n=me(c=>c.justAuthenticated),o=me(c=>c.credentials),i=me(c=>c.setJustAuthenticated);return useEffect(()=>{n&&o&&(t(`Authenticated. Tenant: ${o.tenant}`,"success"),i(false));},[n,o]),useEffect(()=>{if(!e)return;let c=setTimeout(r,3e3);return ()=>clearTimeout(c)},[e]),{notify:(c,a)=>{t(c,a);}}}function Re(e,t,r=false){return r?true:!lo.valid(e)||!lo.valid(t)?false:lo.gt(t,e)}var Me=S("updater");async function Ou(e,t,r,n,o){try{await b(x.CLI_TOOL_UPDATED,{tool_id:e,tool_type:"plugin",source:o,from_version:t,to_version:r,duration_ms:n,interface:A().interfaceType});}catch(i){Me.warn(`Failed to send update metrics: ${String(i)}`);}}function Du(e){let t=Le(),r=`${e}@${O}`,n=t.plugins[r];return !n||n.length===0?null:{pluginKey:r,entry:n[0]}}async function Vr(e,t={}){let r=Date.now(),n=null;try{Me.debug(`[${e}] Acquiring lock...`),n=await Je();let o=Du(e);if(!o)throw Me.error(`[${e}] Plugin is not installed`),new Error(`Plugin "${e}" is not installed`);let{entry:i}=o,s=i.version,c=i.installPath;Me.debug(`[${e}] Fetching manifest...`);let l=(await Tt(e)).version;if(!s||!Re(s,l,t.force))throw Me.debug(`[${e}] Already up to date (v${s??"n/a"})`),new He(e,s??"unknown");Me.info(`[${e}] Updating v${s} \u2192 v${l}...`),await n(),n=null;try{let u=await Pe(e,{force:!0,skipMetrics:!0}),g=Date.now()-r;return await Ou(u.name,s,u.version,g,i.origin??"internal"),Me.debug(`[${e}] Updated successfully in ${g}ms`),{name:u.name,previousVersion:s,newVersion:u.version,path:u.path,duration_ms:g}}catch(u){Me.warn(`[${e}] Install failed, rolling back to v${s}...`),n=await Je();let g=Le(),v=`${e}@${O}`;throw g.plugins[v]&&(g.plugins[v][0].version=s,g.plugins[v][0].installPath=c,pt(g),Me.info(`[${e}] Rollback completed, restored to v${s}`)),u}}finally{n&&await n();}}var Nu=S("commands:helpers");async function ee(){let e=await D();if(!e)return k("Not authenticated. Run: flow auth login"),false;try{await Fe();}catch(t){return Nu.debug(`Token validation failed: ${String(t)}`),k("Session expired. Run: flow auth login"),false}return !e.starterKit||e.starterKit.trim()===""?(k("Starter kit not set. Run: flow auth login"),false):true}async function Ve(e){let t=co.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(p(e),n=>{t.close(),r(["y","yes"].includes(n.toLowerCase().trim()));});})}async function Rs(e){let t=co.createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(p(e),n=>{t.close(),r(n.trim());});})}var Fu=/^[^@]+@[^@]+$/;function Zt(e){return Fu.test(e)}function kt(e){let t=e.indexOf("@");return t>0?e.slice(0,t):e}var Uu=/^[a-zA-Z0-9][a-zA-Z0-9._/-]*$/;function Ms(e){if(!Uu.test(e))throw new Error(`Invalid plugin name: "${e}". Plugin names must start with an alphanumeric character and contain only letters, digits, dots, hyphens, underscores, and slashes.`)}var Bu=/^[\w./:@?&=+#%-]+$/;function zr(e){let t=e.trim();if(!t)throw new Error("No marketplace source provided.");if(!Bu.test(t))throw new Error(`Invalid marketplace source: "${t}". Must be owner/repo or a URL (no spaces or special characters).`);return t}var Qt=S("claudeProxy"),mo="claude ",_s="flow ",uo=class extends Error{constructor(t){super(`Invalid install command: "${t}". Command must start with "claude " for security.`),this.name="InvalidInstallCommandError";}},po=class extends Error{constructor(t){super(`Disallowed subcommand: "${t}". Only "plugin install", "plugin marketplace add", "mcp add", and "mcp remove" are permitted.`),this.name="DisallowedSubcommandError";}},Ku=/^plugins?\s+(install|i)\s+|^plugins?\s+marketplace\s+add\s+|^mcp\s+(add|remove)\s+/;function ju(e){Ds(e);let t=e.slice(mo.length);if(!Ku.test(t))throw new po(e)}var Wr=class extends Error{constructor(){super('Claude Code CLI not found. Ensure "claude" is installed and available on your PATH.'),this.name="ClaudeCliNotFoundError";}};function Ds(e){if(!e||!/^claude /.test(e))throw new uo(e)}async function le(e){Ds(e);let t=e.slice(mo.length).split(/\s+/).filter(Boolean),r=Ju(t);Qt.debug(`[${r}] Executing proxy command: claude ${t.join(" ")}`);let n=Date.now();try{let o=await execa("claude",t,{reject:!1}),i=Date.now()-n;return Qt.debug(`[${r}] Proxy command finished with exit code ${o.exitCode} in ${i}ms`),{name:r,command:e,exitCode:o.exitCode??1,stdout:o.stdout,stderr:o.stderr,duration_ms:i}}catch(o){throw Ns(o)?new Wr:o}}function Ju(e){return e.length>=3?e[2]:e.join(" ")}function Ns(e){return e instanceof Error&&"code"in e&&e.code==="ENOENT"}function Hu(e){return e.startsWith(_s)?mo+e.slice(_s.length):e}var Gu=/^claude\s+(?:plugins?\s+(?:install|i)\s+|mcp\s+(?:add|remove)\s+)/;function Vu(e,t){return !t||e.includes("--scope")||!Gu.test(e)?e:`${e} --scope ${t}`}async function Fs(e,t){let r=e.split("&&").map(o=>Hu(o.trim())).filter(Boolean).map(o=>Vu(o,t));if(r.length===0)throw new Error("Empty install command");for(let o of r)ju(o);Qt.debug(`[installCommand] Executing ${r.length} command(s)`);let n=await le(r[0]);if(n.exitCode!==0)return n;for(let o=1;o<r.length;o++)if(n=await le(r[o]),n.exitCode!==0)return n;return n}async function Us(e,t,r){let n=kt(e),o=t?.trim();if(!o&&(o=(await Rs(`Plugin "${n}" could not be installed.
+If a marketplace is needed, enter the source (owner/repo or URL), or press Enter to skip: `))?.trim(),!o))throw new Error("No marketplace source provided. Cannot retry install.");o=zr(o),r?.(),Qt.debug(`[${n}] Adding marketplace via: claude plugin marketplace add ${o}`);try{let i=await execa("claude",["plugin","marketplace","add",o],{reject:!1});if(i.exitCode!==0)throw new Error(`Failed to add marketplace: ${i.stderr||"unknown error"}`);Qt.debug(`[${n}] Marketplace added successfully`);}catch(i){throw Ns(i)?new Wr:i}}var ze=S("installDispatcher");async function Bs(e,t,r){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"plugin",source:"external",scope:Br(r),version:"unknown",duration_ms:t,interface:A().interfaceType});}catch(n){ze.warn(`Failed to send external install metrics: ${String(n)}`);}}async function Ks(e,t){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"plugin",source:"external",error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:A().interfaceType});}catch(r){ze.warn(`Failed to send external install-failed metrics: ${String(r)}`);}}function fo(e,t){let r=kt(e);Ms(r);let n=["claude","plugin","install",r];return t&&n.push("--scope",t),n.join(" ")}async function go(e,t,r,n){let o=fo(e,n),i=kt(e);r?.onStatus?.(`Installing ${i}...`),ze.debug(`[${e}] Attempting install: ${o}`);let s=await le(o);return s.exitCode===0?s:(ze.debug(`[${e}] Install failed (exit ${s.exitCode}), attempting marketplace add`),r?.onError?.(s.stderr||`Install failed with exit code ${s.exitCode}`),t?r?.onStatus?.(`Adding marketplace for ${i}...`):r?.onPause?.(),await Us(e,t,()=>{t||r?.onResume?.(`Adding marketplace for ${i}...`);}),r?.onResume?.(`Retrying install for ${i}...`),ze.debug(`[${e}] Retrying install after marketplace add`),le(o))}async function js(e,t){if(e.origin===lr&&e.installCommand){ze.debug(`[${e.name}] Routing to external installer via installCommand`);let r=await Fs(e.installCommand,t?.scope);return r.exitCode===0?await Bs(e.name,r.duration_ms,t?.scope):await Ks(e.name,new Error(r.stderr||"Install failed")),r}if(Zt(e.name)){ze.debug(`[${e.name}] Routing to external installer via name pattern`);let r=await go(e.name,t?.marketplaceSource,void 0,t?.scope);return r.exitCode===0?await Bs(e.name,r.duration_ms,t?.scope):await Ks(e.name,new Error(r.stderr||"Install failed")),r}return ze.debug(`[${e.name}] Routing to internal installer`),Pe(e.name,t)}function Js(e){return "exitCode"in e}function Hs(){let e=K(s=>s.installedItems),t=K(s=>s.setInstalledItems),r=useCallback(async(s,c)=>{let a=await js(s,c);if(Js(a)&&a.exitCode!==0)throw new Error(a.stderr||"External installation failed");K.getState().loadFromDisk();},[]),n=useCallback(async(s,c)=>{await Jr(s,c),t(e.filter(a=>a.name!==s));},[e,t]),o=useCallback(async(s,c)=>{let l=e.find(u=>u.name===s)?.status==="enabled"?"disabled":"enabled";await Yt(s,l,c),t(e.map(u=>u.name===s?{...u,status:l}:u));},[e,t]),i=useCallback(async s=>{await Vr(s),K.getState().loadFromDisk();},[]);return {install:r,uninstall:n,toggle:o,update:i}}var Xr=S("mcp");function er(e,t){e.silent?ie({status:"error",mcp:t.name,...t.exitCode!==void 0&&{exitCode:t.exitCode},message:t.message}):k(`Failed to ${t.action} MCP "${t.name}": ${t.message}`);}function Vs(e,t){e.silent?Y({status:"success",mcp:t.name,command:t.command,duration_ms:t.durationMs}):(V(`MCP "${t.name}" ${t.actionPastTense} successfully`),e.verbose&&t.stdout&&I(t.stdout));}function zu(e,t,r,n){let o=["claude","mcp","add","--transport",r,e];return t.length>0&&o.push(...t),n&&o.push("--scope",n),o.join(" ")}function yo(e,t){let r=["claude","mcp","remove",e];return t&&r.push("--scope",t),r.join(" ")}async function zs(e,t,r){if(!await ee())return 1;if(t.length===0){let i=r.transport==="http"?"a URL":"a command";return er(r,{name:e,action:"add",message:`${r.transport} transport requires ${i}`}),1}Xr.debug(`[${e}] Starting MCP add with args: ${t.join(" ")}`);let n=zu(e,t,r.transport,r.scope);if(!r.force){let i=p(e),s=p(n);if(!await Ve(`Install external MCP "${i}"?
 This will run: ${s}
 [y/N] `))return Xr.debug(`[${e}] Installation cancelled by user`),I("Operation cancelled."),0}let o=r.silent?void 0:Mo({text:`Adding MCP "${p(e)}"...`}).start();try{let i=await le(n);return o?.stop(),i.exitCode!==0?(er(r,{name:e,action:"add",message:i.stderr||"Command failed",exitCode:i.exitCode}),!r.silent&&r.verbose&&i.stdout&&I(`stdout: ${i.stdout}`),1):(Vs(r,{name:e,actionPastTense:"added",command:n,durationMs:i.duration_ms,stdout:i.stdout}),0)}catch(i){return o?.stop(),er(r,{name:e,action:"add",message:N(i)}),1}}async function Ws(e,t){if(!await ee())return 1;Xr.debug(`[${e}] Starting MCP remove`);let r=yo(e,t.scope);if(!t.force){let o=p(e),i=p(r);if(!await Ve(`Remove MCP "${o}"?
 This will run: ${i}
-[y/N] `))return Xr.debug(`[${e}] Removal cancelled by user`),I("Operation cancelled."),0}let n=t.silent?void 0:Mo({text:`Removing MCP "${p(e)}"...`}).start();try{let o=await le(r);return n?.stop(),o.exitCode!==0?(er(t,{name:e,action:"remove",message:o.stderr||"Command failed",exitCode:o.exitCode}),!t.silent&&t.verbose&&o.stdout&&I(`stdout: ${o.stdout}`),1):(Vs(t,{name:e,actionPastTense:"removed",command:r,durationMs:o.duration_ms,stdout:o.stdout}),0)}catch(o){return n?.stop(),er(t,{name:e,action:"remove",message:N(o)}),1}}function qs({selectedItem:e,selectedCatalogItem:t,items:r,closeMenu:n,clampIndex:o,notify:i}){let s=S("pluginHandlers"),c=f(y=>y.setLoading),{install:a,uninstall:l,toggle:u,update:g}=Hs(),v=async(y,L,$)=>{c(true,y),n();try{await L(),o(r.length),i($,"success");}catch(H){let q=H instanceof Error?H.message:"Something went wrong";s.error(`[withLoading] ${y} failed: ${q}`),i(q,"error");}finally{c(false);}};return {handleInstall:y=>{e&&t&&v(`Installing ${e.name}...`,()=>a(t,{scope:y}),"\u2713 Installed successfully");},handleUninstall:y=>{e&&v(`Uninstalling ${e.name}...`,()=>l(e.name,y),"\u2713 Uninstalled");},handleToggleStatus:y=>{if(!e)return;let L=e.status==="enabled";v(L?`Disabling ${e.name}...`:`Enabling ${e.name}...`,()=>u(e.name,y),L?"\u2713 Disabled":"\u2713 Enabled");},handleUpdate:()=>{if(!e)return;let y=t?` to v${t.version}`:"";(async()=>{c(true,`Updating ${e.name}${y}...`),n();try{await g(e.name),o(r.length),i(`\u2713 Updated ${e.name}${y}`,"success");}catch($){if($ instanceof He)i($.message,"info");else {let H=$ instanceof Error?$.message:"Something went wrong";s.error(`[handleUpdate] ${e.name} failed: ${H}`),i(H,"error");}}finally{c(false);}})();},handleMcpConfigUninstall:y=>{e&&v(`Removing MCP ${e.name}...`,async()=>{let L=yo(e.name,y),$=await le(L);if($.exitCode!==0)throw new Error($.stderr||"MCP removal failed");K.getState().loadFromDisk();},"\u2713 MCP removed");}}}var tr=["local","project","user"],Vu=new Set(["--transport","--scope","-s"]);function Xs(e){let t=e.split(/\s+/).filter(Boolean),r=t.indexOf("add");if(r===-1)return null;let n=r+1;for(;n<t.length;){let o=t[n];if(Vu.has(o))n+=2;else if(o.startsWith("-"))n+=1;else return o.replace(/^["']|["']$/g,"")}return null}function rr(e,t){return t?`${e}::${t}`:e}function So(e){return e===O?Lt:lr}function Ys(e){return {name:p(e.name),version:e.version?p(e.version):e.version,description:e.description?p(e.description):e.description,authorName:e.author.name?p(e.author.name):e.author.name,updateAvailable:e.updateAvailable,type:e.type??"plugin",origin:e.origin??Lt}}function Zs(e,t){let r=So(e.marketplace);return {name:p(e.name),version:e.version?p(e.version):e.version,description:e.description?p(e.description):e.description,authorName:e.author?.name?p(e.author.name):e.author?.name,status:e.status,scope:e.scope,updateAvailable:e.updateAvailable,installedAt:e.installedAt,type:t?.type??e.type??"plugin",origin:t?.origin??r}}function Qs(e){let t=new Map;for(let r of e){if(!r.scope)continue;let n=t.get(r.scope)??[];n.push(r),t.set(r.scope,n);}return tr.filter(r=>t.has(r)).map(r=>({scope:r,label:Rt[r].label,pathHint:Rt[r].pathHint,items:t.get(r)??[]}))}function ea(e){let t=r=>{if(!r)return 1/0;let n=tr.indexOf(r);return n===-1?1/0:n};return [...e].sort((r,n)=>t(r.scope)-t(n.scope))}function ta({catalog:e,installedItems:t,activeTab:r,catalogFilters:n,searchQuery:o}){let i=useMemo(()=>new Set(t.map(d=>rr(d.name,d.author?.name))),[t]),s=useMemo(()=>new Set(t.filter(d=>d.type==="mcp").map(d=>d.name.toLowerCase())),[t]),c=useMemo(()=>{let d=new Map(e.map(E=>[rr(E.name,E.author.name),E]));return t.map(E=>{let m=d.get(rr(E.name,E.author?.name)),h=m?.version,T=!!h&&!!E.version&&Re(E.version,h);return {...E,updateAvailable:T,catalogItem:m}})},[t,e]),a=useMemo(()=>r==="discover"?e.filter(d=>{if(i.has(rr(d.name,d.author.name)))return  false;if(d.type==="mcp"){let E=d.installCommand?Xs(d.installCommand)?.toLowerCase():null;if(s.has(d.name.toLowerCase())||E&&s.has(E))return  false}return  true}).map(d=>Ys(d)):c.map(d=>Zs(d,d.catalogItem)),[r,e,i,s,c]),l=useMemo(()=>a.filter(d=>{let E=d.type??"plugin";if(!n.types.has(E))return  false;let m=d.origin??"internal";return n.origins.has(m)}),[a,n]),u=useMemo(()=>{let{types:d}=n;if(d.size===1){if(d.has("skill"))return "skills";if(d.has("mcp"))return "MCPs";if(d.has("plugin"))return "plugins"}return "items"},[n]),g=useMemo(()=>r==="installed"?o?`No ${u} found for '${o}' \u2014 explore the Discover tab!`:`No ${u} installed \u2014 explore the Discover tab!`:o?`No ${u} found for '${o}'`:`No ${u} available in the catalog`,[r,o,u]),v=useMemo(()=>d=>d?e.find(E=>E.name===d.name&&E.author.name===d.authorName)??null:null,[e]);return {items:l,emptyMessage:g,getSelectedCatalogItem:v}}function ra(){let[e,t]=useState([]),[r,n]=useState(true),[o,i]=useState(null),s=useRef(false),c=useCallback(async()=>{n(true),i(null);try{let a=await ve();t(a),s.current||(s.current=!0,b(x.CLI_CATALOG_VIEWED,{interface:"tui",filter_type:"all",result_count:a.length}).catch(()=>{}));}catch(a){i(a instanceof Error?a:new Error(String(a))),t([]);}finally{n(false);}},[]);return useEffect(()=>{c();},[c]),{catalog:e,isLoading:r,error:o,refetch:c}}function na(){return {items:K(t=>t.installedItems)}}var Yu=S("catalog");function oa(){let e=f(M=>M.activeTab),t=f(M=>M.notification),r=f(M=>M.loading),n=f(M=>M.loadingMessage),o=f(M=>M.catalogError),i=f(M=>M.setCatalogError),s=f(M=>M.catalogFilters),c=Z(M=>M.query),{catalog:a,isLoading:l,error:u,refetch:g}=ra(),{items:v}=na(),d=K(M=>M.loadFromDisk),{items:E,emptyMessage:m,getSelectedCatalogItem:h}=ta({catalog:a,installedItems:v,activeTab:e,catalogFilters:s,searchQuery:c}),{actionMenuOpen:T,closeMenu:y,selectedIndex:L,clampIndex:$,filteredItems:H}=$s({listLength:E.length}),q=H(E),Ce=useMemo(()=>e!=="installed"?q:ea(q),[e,q]),mn=useMemo(()=>e==="installed"?Qs(Ce):[],[e,Ce]),G=Ce[L]??null,w=useMemo(()=>h(G),[h,G]),{notify:re}=Ls(),{handleInstall:J,handleUninstall:B,handleToggleStatus:fn,handleUpdate:gn,handleMcpConfigUninstall:Fo}=qs({selectedItem:G,selectedCatalogItem:w,items:E,closeMenu:y,clampIndex:$,notify:re});return useEffect(()=>{d();},[]),useEffect(()=>{$(Ce.length);},[Ce.length,$]),useEffect(()=>{u&&(Yu.error(`[catalog] ${u instanceof Error?u.message:String(u)}`),i("Failed to load catalog"));},[u]),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Ar,{}),jsx(Ei,{}),jsx(Ji,{filteredItems:Ce,groups:mn,emptyMessage:m}),(r||l)&&jsx(_r,{message:r?n:"Loading catalog..."}),o&&!l&&e==="discover"&&jsx(Or,{message:o,onRetry:()=>{i(null),g();},onBack:()=>i(null)}),t&&jsx(Gi,{message:t.message,type:t.type}),T&&G&&(e==="discover"?jsx(rs,{itemName:G.name,onInstall:J,onClose:y}):G.type==="mcp"?jsx(ls,{itemName:G.name,itemScope:G.scope??"user",onUninstall:Fo,onClose:y}):jsx(is,{itemName:G.name,itemScope:G.scope??"user",itemStatus:G.status??"enabled",updateAvailable:G.updateAvailable??false,catalogVersion:w?.version,onUninstall:B,onToggleStatus:M=>fn(M),onUpdate:gn,onClose:y})),jsx(Mr,{})]})}var P=create((e,t)=>({starterKits:[],selectedStarterKitIndex:0,selectedStarterKit:null,plugins:[],pluginCursorIndex:0,step:"bundleList",isLoadingStarterKits:false,starterKitsError:null,successCount:0,failedCount:0,summaryActionIndex:0,setStarterKits:r=>e({starterKits:r}),setSelectedStarterKitIndex:r=>e({selectedStarterKitIndex:r}),selectStarterKit:r=>{let n=new Set(K.getState().installedItems.map(o=>o.name));e({selectedStarterKit:r,plugins:r.plugins.map(o=>({name:o,selected:true,status:n.has(o)?"success":"pending",installed:n.has(o)})),pluginCursorIndex:0,step:"bundleDetail"});},setPluginCursorIndex:r=>e({pluginCursorIndex:r}),setStep:r=>e({step:r}),setPluginStatus:(r,n,o)=>{let i=t().plugins.map(s=>s.name===r?{...s,status:n,error:o}:s);e({plugins:i});},setIsLoadingStarterKits:r=>e({isLoadingStarterKits:r}),setStarterKitsError:r=>e({starterKitsError:r}),setSummaryActionIndex:r=>e({summaryActionIndex:r}),computeSummary:()=>{let n=t().plugins.filter(o=>o.selected);e({successCount:n.filter(o=>o.status==="success").length,failedCount:n.filter(o=>o.status==="failed").length});},resetForRetry:()=>{let r=t().plugins.map(n=>n.status==="failed"?{...n,status:"pending",error:void 0}:n);e({plugins:r,step:"installing"});},goBackToList:()=>e({selectedStarterKit:null,plugins:[],pluginCursorIndex:0,step:"bundleList"})}));var tp=3;function sa(){let e=P(a=>a.setStarterKits),t=P(a=>a.setIsLoadingStarterKits),r=P(a=>a.setStarterKitsError),n=P(a=>a.setPluginStatus),o=P(a=>a.setStep),i=P(a=>a.computeSummary),s=useCallback(async()=>{t(true),r(null);try{let a=await Kr();e(a);}catch(a){r(a instanceof Error?a.message:String(a));}finally{t(false);}},[t,r,e]);useEffect(()=>{K.getState().loadFromDisk(),s();},[s]);let c=useCallback(async()=>{let a=P.getState().plugins.filter(u=>u.selected&&u.status==="pending");for(let u of a){n(u.name,"installing");let g="",v=false;for(let d=1;d<=tp;d++)try{await Pe(u.name),n(u.name,"success"),v=!0;break}catch(E){if(E instanceof be){n(u.name,"success"),v=true;break}g=E instanceof Error?E.message:"Unknown error";}v||(n(u.name,"failed",g),b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:u.name,tool_type:"plugin",source:"internal",error_code:"install_failed",error_message:g,interface:A().interfaceType}).catch(()=>{}));}let l=ot();nt("summary_review"),b(x.CLI_STEP_COMPLETED,{step:"tool_installation",duration_ms:l}).catch(()=>{}),K.getState().loadFromDisk(),i(),o("summary");},[n,i,o]);return {loadStarterKits:s,installSelected:c}}var nr={cursorDelta:0,confirm:false,back:false};function aa(e,t){return t.upArrow?{...nr,cursorDelta:-1}:t.downArrow?{...nr,cursorDelta:1}:t.escape?{...nr,back:true}:t.return?{...nr,confirm:true}:nr}var rp={cursorDelta:0,select:false};function la(e,t){return t.upArrow?{cursorDelta:-1,select:false}:t.downArrow?{cursorDelta:1,select:false}:t.return?{cursorDelta:0,select:true}:rp}var ca=kc.memo(function({starterKit:t,isSelected:r}){return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:r?"cyan":"gray",children:r?"\u203A ":"\u25CB "}),jsx(Text,{bold:r,color:r?"cyan":"white",children:p(t.name)}),jsxs(Text,{dimColor:true,children:[" \xB7 ",t.plugins.length," ",t.plugins.length===1?"plugin":"plugins"]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:p(t.description)})})]})});var Po=5;function ua({onRetry:e}){let t=P(u=>u.starterKits),r=P(u=>u.selectedStarterKitIndex),n=P(u=>u.isLoadingStarterKits),o=P(u=>u.starterKitsError);if(n)return jsx(_r,{message:"Loading Starter Kits..."});if(o)return jsx(Or,{message:o,onRetry:e,onBack:e});if(t.length===0)return jsx(Pt,{message:"No Starter Kits available."});let i=Math.max(0,r-Math.floor(Po/2)),s=Math.min(t.length,i+Po);s===t.length&&(i=Math.max(0,s-Po));let c=t.slice(i,s),a=i,l=t.length-s;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Select a Starter Kit to get started"})}),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",a," more above"]})}),c.map((u,g)=>jsx(ca,{starterKit:u,isSelected:i+g===r},u.slug)),l>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",l," more below"]})})]})}var da=kc.memo(function({plugin:t,isCursor:r}){return jsxs(Box,{children:[jsx(Text,{color:r?"cyan":"gray",children:r?"\u203A ":"  "}),jsx(Text,{color:"cyan",children:"\u2022"}),jsxs(Text,{bold:r,color:r?"cyan":"white",children:[" ",p(t.name)]}),t.installed&&jsx(Text,{color:"green",children:" (installed)"})]})});var ko=8;function ma(){let e=P(u=>u.selectedStarterKit),t=P(u=>u.plugins),r=P(u=>u.pluginCursorIndex),n=useRef(false);if(useEffect(()=>{e&&!n.current&&(n.current=true,b(x.CLI_KIT_DISPLAYED,{bundle_slug:e.slug,tool_count:t.length}).catch(()=>{}));},[e,t.length]),!e)return jsx(Text,{dimColor:true,children:"No Starter Kit selected."});let o=t.filter(u=>u.installed).length,i=Math.max(0,r-Math.floor(ko/2)),s=Math.min(t.length,i+ko);s===t.length&&(i=Math.max(0,s-ko));let c=t.slice(i,s),a=i,l=t.length-s;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:[jsx(Text,{bold:true,color:"cyan",children:p(e.name)}),jsx(Text,{dimColor:true,children:p(e.description)})]}),jsx(Box,{paddingX:1,paddingBottom:1,children:jsxs(Text,{children:[t.length," plugins to install",o>0&&` \xB7 ${o} already installed`]})}),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",a," more above"]})}),c.map((u,g)=>jsx(da,{plugin:u,isCursor:i+g===r},u.name)),l>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",l," more below"]})})]})}var pp=["Retry failed","Continue anyway"];function fa({name:e,status:t,error:r}){let n=p(e);return t==="installing"?jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(Jc,{type:"dots"})}),jsxs(Text,{color:"cyan",children:[" ",n]})]}):t==="success"?jsx(Box,{children:jsxs(Text,{color:"green",children:["\u2713 ",n]})}):t==="failed"?jsxs(Box,{children:[jsxs(Text,{color:"red",children:["\u2717 ",n]}),r&&jsxs(Text,{dimColor:true,children:[" \u2014 ",p(r)]})]}):jsx(Box,{children:jsxs(Text,{dimColor:true,children:["\u25CB ",n]})})}function ga({onComplete:e,onRetry:t}){let r=P(l=>l.plugins),n=P(l=>l.step),o=P(l=>l.successCount),i=P(l=>l.failedCount),s=P(l=>l.summaryActionIndex),c=r.filter(l=>l.selected),a=useRef(false);return useEffect(()=>{if(n==="summary"&&i===0&&!a.current){a.current=true;let l=setTimeout(e,1500);return ()=>clearTimeout(l)}},[n,i,e]),n==="installing"?jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Installing plugins..."})}),jsx(Box,{flexDirection:"column",paddingX:1,children:c.map(l=>jsx(fa,{name:l.name,status:l.status,error:l.error},l.name))})]}):jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Installation Complete"})}),jsxs(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:[o>0&&jsxs(Text,{color:"green",children:["\u2713 ",o," ",o===1?"plugin":"plugins"," installed successfully"]}),i>0&&jsxs(Text,{color:"red",children:["\u2717 ",i," ",i===1?"plugin":"plugins"," failed"]})]}),i>0&&jsx(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:c.filter(l=>l.status==="failed").map(l=>jsx(fa,{name:l.name,status:l.status,error:l.error},l.name))}),i>0&&jsx(Box,{flexDirection:"column",paddingX:1,children:pp.map((l,u)=>jsx(Box,{children:jsxs(Text,{bold:u===s,color:u===s?"cyan":void 0,children:[u===s?"\u203A ":"  ",l]})},l))}),i===0&&jsx(Box,{paddingX:1,children:jsx(Text,{dimColor:true,children:"Proceeding to main screen..."})})]})}function ya(){let e=P(w=>w.step),t=P(w=>w.starterKits),r=P(w=>w.selectedStarterKitIndex),n=P(w=>w.setSelectedStarterKitIndex),o=P(w=>w.selectStarterKit),i=P(w=>w.plugins),s=P(w=>w.pluginCursorIndex),c=P(w=>w.setPluginCursorIndex),a=P(w=>w.setStep),l=P(w=>w.summaryActionIndex),u=P(w=>w.setSummaryActionIndex),g=P(w=>w.failedCount),v=P(w=>w.resetForRetry),d=P(w=>w.goBackToList),E=f(w=>w.setScreen),m=f(w=>w.setFocus),h=f(w=>w.focus),T=me(w=>w.setJustAuthenticated),y=me(w=>w.justAuthenticated),{loadStarterKits:L,installSelected:$}=sa(),H=useRef(false);useEffect(()=>{e==="bundleList"?(m("bundleList"),H.current||(H.current=true,nt("bundle_selection"))):m(e==="bundleDetail"?"bundleDetail":"installProgress");},[e,m]);let q=useCallback(async()=>{let w=P.getState().selectedStarterKit;if(w){let J=await D();J&&await tt({...J,starterKit:w.slug});}b(x.CLI_STEP_COMPLETED,{step:"summary_review",duration_ms:ot()}).catch(()=>{});let{successCount:re}=P.getState();b(x.CLI_ONBOARDING_COMPLETED,{duration_ms:Ue(),tools_installed_count:re}).catch(()=>{}),T(false),m("list"),E("main");},[T,m,E]),Ce=useCallback(()=>{v(),$();},[v,$]),mn=useCallback(()=>{L();},[L]),G=useCallback(()=>{m("list"),E("main");},[m,E]);return useInput((w,re)=>{if(re.escape)Tr("esc"),G();else if(re.upArrow&&r>0)n(r-1);else if(re.downArrow&&r<t.length-1)n(r+1);else if(re.return&&t.length>0){let J=ot();o(t[r]),nt("kit_display"),b(x.CLI_STEP_COMPLETED,{step:"bundle_selection",duration_ms:J}).catch(()=>{});}},{isActive:h==="bundleList"}),useInput((w,re)=>{let J=aa(w,re);if(J.cursorDelta!==0){let B=s+J.cursorDelta;B>=0&&B<i.length&&c(B);}if(J.confirm){let B=P.getState().selectedStarterKit;B&&(async()=>(await D())?.starterKit!==B.slug&&b(x.CLI_KIT_ACCEPTED,{bundle_slug:B.slug}).catch(()=>{}))();let fn=ot();nt("kit_confirmation"),b(x.CLI_STEP_COMPLETED,{step:"kit_display",duration_ms:fn}).catch(()=>{});let gn=ot();nt("tool_installation"),b(x.CLI_STEP_COMPLETED,{step:"kit_confirmation",duration_ms:gn}).catch(()=>{}),a("installing"),$();}if(J.back){let B=P.getState().selectedStarterKit;B&&b(x.CLI_KIT_REJECTED,{bundle_slug:B.slug}).catch(()=>{}),d();}},{isActive:h==="bundleDetail"}),useInput((w,re)=>{if(g===0)return;let J=la(w,re);if(J.cursorDelta!==0){let B=l+J.cursorDelta;B>=0&&B<=1&&u(B);}J.select&&(l===0?Ce():q());},{isActive:h==="installProgress"&&e==="summary"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Ar,{}),jsxs(Box,{flexDirection:"column",paddingX:1,marginBottom:1,children:[jsx(Text,{dimColor:true,children:"The data collected during setup is used solely to improve"}),jsx(Text,{dimColor:true,children:"Flow's internal tools and will not be shared externally."}),!y&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"yellow",children:"Welcome back! We noticed your Starter Kit is not set up yet. Choose a Starter Kit below to get your recommended tools."})})]}),jsxs(Box,{flexDirection:"column",flexGrow:1,children:[e==="bundleList"&&jsx(ua,{onRetry:mn}),e==="bundleDetail"&&jsx(ma,{}),(e==="installing"||e==="summary")&&jsx(ga,{onComplete:q,onRetry:Ce})]}),jsx(Mr,{})]})}var gp=S("app"),yp={auth:wi,bundleSetup:ya,main:oa};function wa(){f.getState().setScreen("auth"),f.getState().setFocus("auth");}async function Ia(){let e=await D();if(!e){wa();return}try{await Fe();}catch(o){gp.debug(`Token validation failed: ${String(o)}`),wa();return}b(x.CLI_SESSION_STARTED,{cli_version:Be,os:process.platform,node_version:process.version,duration_ms:Ue(),interface:"tui"}).catch(()=>{});let{clientSecret:t,...r}=e;me.getState().setCredentials(r),!e.starterKit||e.starterKit.trim()===""?(f.getState().setScreen("bundleSetup"),f.getState().setFocus("bundleList")):(f.getState().setScreen("main"),f.getState().setFocus("list"));}function ba(){let{columns:e,rows:t}=useWindowSize(),r=f(i=>i.screen),n=yp[r],{pendingExit:o}=Si();return n?jsxs(Box,{flexDirection:"column",width:e,height:t,children:[jsx(n,{}),o&&jsx(Box,{paddingX:1,children:jsx(Text,{color:"yellow",children:"Press Ctrl+C again to quit"})})]}):jsxs(Text,{color:"red",children:["Unknown screen: ",r]})}var ke=S("auth");function Pa(){X.clearFallbackFile(),Ir();}var Sp=3,va=3,Ea=`  \u2139 The data collected during setup is used solely to improve
+[y/N] `))return Xr.debug(`[${e}] Removal cancelled by user`),I("Operation cancelled."),0}let n=t.silent?void 0:Mo({text:`Removing MCP "${p(e)}"...`}).start();try{let o=await le(r);return n?.stop(),o.exitCode!==0?(er(t,{name:e,action:"remove",message:o.stderr||"Command failed",exitCode:o.exitCode}),!t.silent&&t.verbose&&o.stdout&&I(`stdout: ${o.stdout}`),1):(Vs(t,{name:e,actionPastTense:"removed",command:r,durationMs:o.duration_ms,stdout:o.stdout}),0)}catch(o){return n?.stop(),er(t,{name:e,action:"remove",message:N(o)}),1}}function qs({selectedItem:e,selectedCatalogItem:t,items:r,closeMenu:n,clampIndex:o,notify:i}){let s=S("pluginHandlers"),c=f(y=>y.setLoading),{install:a,uninstall:l,toggle:u,update:g}=Hs(),v=async(y,L,$)=>{c(true,y),n();try{await L(),o(r.length),i($,"success");}catch(H){let q=H instanceof Error?H.message:"Something went wrong";s.error(`[withLoading] ${y} failed: ${q}`),i(q,"error");}finally{c(false);}};return {handleInstall:y=>{e&&t&&v(`Installing ${e.name}...`,()=>a(t,{scope:y}),"\u2713 Installed successfully");},handleUninstall:y=>{e&&v(`Uninstalling ${e.name}...`,()=>l(e.name,y),"\u2713 Uninstalled");},handleToggleStatus:y=>{if(!e)return;let L=e.status==="enabled";v(L?`Disabling ${e.name}...`:`Enabling ${e.name}...`,()=>u(e.name,y),L?"\u2713 Disabled":"\u2713 Enabled");},handleUpdate:()=>{if(!e)return;let y=t?` to v${t.version}`:"";(async()=>{c(true,`Updating ${e.name}${y}...`),n();try{await g(e.name),o(r.length),i(`\u2713 Updated ${e.name}${y}`,"success");}catch($){if($ instanceof He)i($.message,"info");else {let H=$ instanceof Error?$.message:"Something went wrong";s.error(`[handleUpdate] ${e.name} failed: ${H}`),i(H,"error");}}finally{c(false);}})();},handleMcpConfigUninstall:y=>{e&&v(`Removing MCP ${e.name}...`,async()=>{let L=yo(e.name,y),$=await le(L);if($.exitCode!==0)throw new Error($.stderr||"MCP removal failed");K.getState().loadFromDisk();},"\u2713 MCP removed");}}}var tr=["local","project","user"],Wu=new Set(["--transport","--scope","-s"]);function Xs(e){let t=e.split(/\s+/).filter(Boolean),r=t.indexOf("add");if(r===-1)return null;let n=r+1;for(;n<t.length;){let o=t[n];if(Wu.has(o))n+=2;else if(o.startsWith("-"))n+=1;else return o.replace(/^["']|["']$/g,"")}return null}function rr(e,t){return t?`${e}::${t}`:e}function So(e){return e===O?Lt:lr}function Ys(e){return {name:p(e.name),version:e.version?p(e.version):e.version,description:e.description?p(e.description):e.description,authorName:e.author.name?p(e.author.name):e.author.name,updateAvailable:e.updateAvailable,type:e.type??"plugin",origin:e.origin??Lt}}function Zs(e,t){let r=So(e.marketplace);return {name:p(e.name),version:e.version?p(e.version):e.version,description:e.description?p(e.description):e.description,authorName:e.author?.name?p(e.author.name):e.author?.name,status:e.status,scope:e.scope,updateAvailable:e.updateAvailable,installedAt:e.installedAt,type:t?.type??e.type??"plugin",origin:t?.origin??r}}function Qs(e){let t=new Map;for(let r of e){if(!r.scope)continue;let n=t.get(r.scope)??[];n.push(r),t.set(r.scope,n);}return tr.filter(r=>t.has(r)).map(r=>({scope:r,label:Rt[r].label,pathHint:Rt[r].pathHint,items:t.get(r)??[]}))}function ea(e){let t=r=>{if(!r)return 1/0;let n=tr.indexOf(r);return n===-1?1/0:n};return [...e].sort((r,n)=>t(r.scope)-t(n.scope))}function ta({catalog:e,installedItems:t,activeTab:r,catalogFilters:n,searchQuery:o}){let i=useMemo(()=>new Set(t.map(d=>rr(d.name,d.author?.name))),[t]),s=useMemo(()=>new Set(t.filter(d=>d.type==="mcp").map(d=>d.name.toLowerCase())),[t]),c=useMemo(()=>{let d=new Map(e.map(E=>[rr(E.name,E.author.name),E]));return t.map(E=>{let m=d.get(rr(E.name,E.author?.name)),h=m?.version,T=!!h&&!!E.version&&Re(E.version,h);return {...E,updateAvailable:T,catalogItem:m}})},[t,e]),a=useMemo(()=>r==="discover"?e.filter(d=>{if(i.has(rr(d.name,d.author.name)))return  false;if(d.type==="mcp"){let E=d.installCommand?Xs(d.installCommand)?.toLowerCase():null;if(s.has(d.name.toLowerCase())||E&&s.has(E))return  false}return  true}).map(d=>Ys(d)):c.map(d=>Zs(d,d.catalogItem)),[r,e,i,s,c]),l=useMemo(()=>a.filter(d=>{let E=d.type??"plugin";if(!n.types.has(E))return  false;let m=d.origin??"internal";return n.origins.has(m)}),[a,n]),u=useMemo(()=>{let{types:d}=n;if(d.size===1){if(d.has("skill"))return "skills";if(d.has("mcp"))return "MCPs";if(d.has("plugin"))return "plugins"}return "items"},[n]),g=useMemo(()=>r==="installed"?o?`No ${u} found for '${o}' \u2014 explore the Discover tab!`:`No ${u} installed \u2014 explore the Discover tab!`:o?`No ${u} found for '${o}'`:`No ${u} available in the catalog`,[r,o,u]),v=useMemo(()=>d=>d?e.find(E=>E.name===d.name&&E.author.name===d.authorName)??null:null,[e]);return {items:l,emptyMessage:g,getSelectedCatalogItem:v}}function ra(){let[e,t]=useState([]),[r,n]=useState(true),[o,i]=useState(null),s=useRef(false),c=useCallback(async()=>{n(true),i(null);try{let a=await ve();t(a),s.current||(s.current=!0,b(x.CLI_CATALOG_VIEWED,{interface:"tui",filter_type:"all",result_count:a.length}).catch(()=>{}));}catch(a){i(a instanceof Error?a:new Error(String(a))),t([]);}finally{n(false);}},[]);return useEffect(()=>{c();},[c]),{catalog:e,isLoading:r,error:o,refetch:c}}function na(){return {items:K(t=>t.installedItems)}}var Qu=S("catalog");function oa(){let e=f(M=>M.activeTab),t=f(M=>M.notification),r=f(M=>M.loading),n=f(M=>M.loadingMessage),o=f(M=>M.catalogError),i=f(M=>M.setCatalogError),s=f(M=>M.catalogFilters),c=Z(M=>M.query),{catalog:a,isLoading:l,error:u,refetch:g}=ra(),{items:v}=na(),d=K(M=>M.loadFromDisk),{items:E,emptyMessage:m,getSelectedCatalogItem:h}=ta({catalog:a,installedItems:v,activeTab:e,catalogFilters:s,searchQuery:c}),{actionMenuOpen:T,closeMenu:y,selectedIndex:L,clampIndex:$,filteredItems:H}=$s({listLength:E.length}),q=H(E),Ce=useMemo(()=>e!=="installed"?q:ea(q),[e,q]),mn=useMemo(()=>e==="installed"?Qs(Ce):[],[e,Ce]),G=Ce[L]??null,w=useMemo(()=>h(G),[h,G]),{notify:re}=Ls(),{handleInstall:J,handleUninstall:B,handleToggleStatus:fn,handleUpdate:gn,handleMcpConfigUninstall:Fo}=qs({selectedItem:G,selectedCatalogItem:w,items:E,closeMenu:y,clampIndex:$,notify:re});return useEffect(()=>{d();},[]),useEffect(()=>{$(Ce.length);},[Ce.length,$]),useEffect(()=>{u&&(Qu.error(`[catalog] ${u instanceof Error?u.message:String(u)}`),i("Failed to load catalog"));},[u]),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Ar,{}),jsx(Ei,{}),jsx(Ji,{filteredItems:Ce,groups:mn,emptyMessage:m}),(r||l)&&jsx(_r,{message:r?n:"Loading catalog..."}),o&&!l&&e==="discover"&&jsx(Or,{message:o,onRetry:()=>{i(null),g();},onBack:()=>i(null)}),t&&jsx(Gi,{message:t.message,type:t.type}),T&&G&&(e==="discover"?jsx(rs,{itemName:G.name,onInstall:J,onClose:y}):G.type==="mcp"?jsx(ls,{itemName:G.name,itemScope:G.scope??"user",onUninstall:Fo,onClose:y}):jsx(is,{itemName:G.name,itemScope:G.scope??"user",itemStatus:G.status??"enabled",updateAvailable:G.updateAvailable??false,catalogVersion:w?.version,onUninstall:B,onToggleStatus:M=>fn(M),onUpdate:gn,onClose:y})),jsx(Mr,{})]})}var P=create((e,t)=>({starterKits:[],selectedStarterKitIndex:0,selectedStarterKit:null,plugins:[],pluginCursorIndex:0,step:"bundleList",isLoadingStarterKits:false,starterKitsError:null,successCount:0,failedCount:0,summaryActionIndex:0,setStarterKits:r=>e({starterKits:r}),setSelectedStarterKitIndex:r=>e({selectedStarterKitIndex:r}),selectStarterKit:r=>{let n=new Set(K.getState().installedItems.map(o=>o.name));e({selectedStarterKit:r,plugins:r.plugins.map(o=>({name:o,selected:true,status:n.has(o)?"success":"pending",installed:n.has(o)})),pluginCursorIndex:0,step:"bundleDetail"});},setPluginCursorIndex:r=>e({pluginCursorIndex:r}),setStep:r=>e({step:r}),setPluginStatus:(r,n,o)=>{let i=t().plugins.map(s=>s.name===r?{...s,status:n,error:o}:s);e({plugins:i});},setIsLoadingStarterKits:r=>e({isLoadingStarterKits:r}),setStarterKitsError:r=>e({starterKitsError:r}),setSummaryActionIndex:r=>e({summaryActionIndex:r}),computeSummary:()=>{let n=t().plugins.filter(o=>o.selected);e({successCount:n.filter(o=>o.status==="success").length,failedCount:n.filter(o=>o.status==="failed").length});},resetForRetry:()=>{let r=t().plugins.map(n=>n.status==="failed"?{...n,status:"pending",error:void 0}:n);e({plugins:r,step:"installing"});},goBackToList:()=>e({selectedStarterKit:null,plugins:[],pluginCursorIndex:0,step:"bundleList"})}));var np=3;function sa(){let e=P(a=>a.setStarterKits),t=P(a=>a.setIsLoadingStarterKits),r=P(a=>a.setStarterKitsError),n=P(a=>a.setPluginStatus),o=P(a=>a.setStep),i=P(a=>a.computeSummary),s=useCallback(async()=>{t(true),r(null);try{let a=await Kr();e(a);}catch(a){r(a instanceof Error?a.message:String(a));}finally{t(false);}},[t,r,e]);useEffect(()=>{K.getState().loadFromDisk(),s();},[s]);let c=useCallback(async()=>{let a=P.getState().plugins.filter(u=>u.selected&&u.status==="pending");for(let u of a){n(u.name,"installing");let g="",v=false;for(let d=1;d<=np;d++)try{await Pe(u.name),n(u.name,"success"),v=!0;break}catch(E){if(E instanceof be){n(u.name,"success"),v=true;break}g=E instanceof Error?E.message:"Unknown error";}v||(n(u.name,"failed",g),b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:u.name,tool_type:"plugin",source:"internal",error_code:"install_failed",error_message:g,interface:A().interfaceType}).catch(()=>{}));}let l=ot();nt("summary_review"),b(x.CLI_STEP_COMPLETED,{step:"tool_installation",duration_ms:l}).catch(()=>{}),K.getState().loadFromDisk(),i(),o("summary");},[n,i,o]);return {loadStarterKits:s,installSelected:c}}var nr={cursorDelta:0,confirm:false,back:false};function aa(e,t){return t.upArrow?{...nr,cursorDelta:-1}:t.downArrow?{...nr,cursorDelta:1}:t.escape?{...nr,back:true}:t.return?{...nr,confirm:true}:nr}var op={cursorDelta:0,select:false};function la(e,t){return t.upArrow?{cursorDelta:-1,select:false}:t.downArrow?{cursorDelta:1,select:false}:t.return?{cursorDelta:0,select:true}:op}var ca=$c.memo(function({starterKit:t,isSelected:r}){return jsxs(Box,{flexDirection:"column",paddingBottom:1,children:[jsxs(Box,{children:[jsx(Text,{color:r?"cyan":"gray",children:r?"\u203A ":"\u25CB "}),jsx(Text,{bold:r,color:r?"cyan":"white",children:p(t.name)}),jsxs(Text,{dimColor:true,children:[" \xB7 ",t.plugins.length," ",t.plugins.length===1?"plugin":"plugins"]})]}),jsx(Box,{paddingLeft:2,children:jsx(Text,{dimColor:true,children:p(t.description)})})]})});var Po=5;function ua({onRetry:e}){let t=P(u=>u.starterKits),r=P(u=>u.selectedStarterKitIndex),n=P(u=>u.isLoadingStarterKits),o=P(u=>u.starterKitsError);if(n)return jsx(_r,{message:"Loading Starter Kits..."});if(o)return jsx(Or,{message:o,onRetry:e,onBack:e});if(t.length===0)return jsx(Pt,{message:"No Starter Kits available."});let i=Math.max(0,r-Math.floor(Po/2)),s=Math.min(t.length,i+Po);s===t.length&&(i=Math.max(0,s-Po));let c=t.slice(i,s),a=i,l=t.length-s;return jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Select a Starter Kit to get started"})}),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",a," more above"]})}),c.map((u,g)=>jsx(ca,{starterKit:u,isSelected:i+g===r},u.slug)),l>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",l," more below"]})})]})}var da=$c.memo(function({plugin:t,isCursor:r}){return jsxs(Box,{children:[jsx(Text,{color:r?"cyan":"gray",children:r?"\u203A ":"  "}),jsx(Text,{color:"cyan",children:"\u2022"}),jsxs(Text,{bold:r,color:r?"cyan":"white",children:[" ",p(t.name)]}),t.installed&&jsx(Text,{color:"green",children:" (installed)"})]})});var ko=8;function ma(){let e=P(u=>u.selectedStarterKit),t=P(u=>u.plugins),r=P(u=>u.pluginCursorIndex),n=useRef(false);if(useEffect(()=>{e&&!n.current&&(n.current=true,b(x.CLI_KIT_DISPLAYED,{bundle_slug:e.slug,tool_count:t.length}).catch(()=>{}));},[e,t.length]),!e)return jsx(Text,{dimColor:true,children:"No Starter Kit selected."});let o=t.filter(u=>u.installed).length,i=Math.max(0,r-Math.floor(ko/2)),s=Math.min(t.length,i+ko);s===t.length&&(i=Math.max(0,s-ko));let c=t.slice(i,s),a=i,l=t.length-s;return jsxs(Box,{flexDirection:"column",children:[jsxs(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:[jsx(Text,{bold:true,color:"cyan",children:p(e.name)}),jsx(Text,{dimColor:true,children:p(e.description)})]}),jsx(Box,{paddingX:1,paddingBottom:1,children:jsxs(Text,{children:[t.length," plugins to install",o>0&&` \xB7 ${o} already installed`]})}),a>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2191 ",a," more above"]})}),c.map((u,g)=>jsx(da,{plugin:u,isCursor:i+g===r},u.name)),l>0&&jsx(Box,{paddingX:2,children:jsxs(Text,{dimColor:true,children:["\u2193 ",l," more below"]})})]})}var mp=["Retry failed","Continue anyway"];function fa({name:e,status:t,error:r}){let n=p(e);return t==="installing"?jsxs(Box,{children:[jsx(Text,{color:"cyan",children:jsx(Gc,{type:"dots"})}),jsxs(Text,{color:"cyan",children:[" ",n]})]}):t==="success"?jsx(Box,{children:jsxs(Text,{color:"green",children:["\u2713 ",n]})}):t==="failed"?jsxs(Box,{children:[jsxs(Text,{color:"red",children:["\u2717 ",n]}),r&&jsxs(Text,{dimColor:true,children:[" \u2014 ",p(r)]})]}):jsx(Box,{children:jsxs(Text,{dimColor:true,children:["\u25CB ",n]})})}function ga({onComplete:e,onRetry:t}){let r=P(l=>l.plugins),n=P(l=>l.step),o=P(l=>l.successCount),i=P(l=>l.failedCount),s=P(l=>l.summaryActionIndex),c=r.filter(l=>l.selected),a=useRef(false);return useEffect(()=>{if(n==="summary"&&i===0&&!a.current){a.current=true;let l=setTimeout(e,1500);return ()=>clearTimeout(l)}},[n,i,e]),n==="installing"?jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Installing plugins..."})}),jsx(Box,{flexDirection:"column",paddingX:1,children:c.map(l=>jsx(fa,{name:l.name,status:l.status,error:l.error},l.name))})]}):jsxs(Box,{flexDirection:"column",children:[jsx(Box,{paddingX:1,paddingBottom:1,children:jsx(Text,{bold:true,children:"Installation Complete"})}),jsxs(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:[o>0&&jsxs(Text,{color:"green",children:["\u2713 ",o," ",o===1?"plugin":"plugins"," installed successfully"]}),i>0&&jsxs(Text,{color:"red",children:["\u2717 ",i," ",i===1?"plugin":"plugins"," failed"]})]}),i>0&&jsx(Box,{flexDirection:"column",paddingX:1,paddingBottom:1,children:c.filter(l=>l.status==="failed").map(l=>jsx(fa,{name:l.name,status:l.status,error:l.error},l.name))}),i>0&&jsx(Box,{flexDirection:"column",paddingX:1,children:mp.map((l,u)=>jsx(Box,{children:jsxs(Text,{bold:u===s,color:u===s?"cyan":void 0,children:[u===s?"\u203A ":"  ",l]})},l))}),i===0&&jsx(Box,{paddingX:1,children:jsx(Text,{dimColor:true,children:"Proceeding to main screen..."})})]})}function ya(){let e=P(w=>w.step),t=P(w=>w.starterKits),r=P(w=>w.selectedStarterKitIndex),n=P(w=>w.setSelectedStarterKitIndex),o=P(w=>w.selectStarterKit),i=P(w=>w.plugins),s=P(w=>w.pluginCursorIndex),c=P(w=>w.setPluginCursorIndex),a=P(w=>w.setStep),l=P(w=>w.summaryActionIndex),u=P(w=>w.setSummaryActionIndex),g=P(w=>w.failedCount),v=P(w=>w.resetForRetry),d=P(w=>w.goBackToList),E=f(w=>w.setScreen),m=f(w=>w.setFocus),h=f(w=>w.focus),T=me(w=>w.setJustAuthenticated),y=me(w=>w.justAuthenticated),{loadStarterKits:L,installSelected:$}=sa(),H=useRef(false);useEffect(()=>{e==="bundleList"?(m("bundleList"),H.current||(H.current=true,nt("bundle_selection"))):m(e==="bundleDetail"?"bundleDetail":"installProgress");},[e,m]);let q=useCallback(async()=>{let w=P.getState().selectedStarterKit;if(w){let J=await D();J&&await tt({...J,starterKit:w.slug});}b(x.CLI_STEP_COMPLETED,{step:"summary_review",duration_ms:ot()}).catch(()=>{});let{successCount:re}=P.getState();b(x.CLI_ONBOARDING_COMPLETED,{duration_ms:Ue(),tools_installed_count:re}).catch(()=>{}),T(false),m("list"),E("main");},[T,m,E]),Ce=useCallback(()=>{v(),$();},[v,$]),mn=useCallback(()=>{L();},[L]),G=useCallback(()=>{m("list"),E("main");},[m,E]);return useInput((w,re)=>{if(re.escape)Tr("esc"),G();else if(re.upArrow&&r>0)n(r-1);else if(re.downArrow&&r<t.length-1)n(r+1);else if(re.return&&t.length>0){let J=ot();o(t[r]),nt("kit_display"),b(x.CLI_STEP_COMPLETED,{step:"bundle_selection",duration_ms:J}).catch(()=>{});}},{isActive:h==="bundleList"}),useInput((w,re)=>{let J=aa(w,re);if(J.cursorDelta!==0){let B=s+J.cursorDelta;B>=0&&B<i.length&&c(B);}if(J.confirm){let B=P.getState().selectedStarterKit;B&&(async()=>(await D())?.starterKit!==B.slug&&b(x.CLI_KIT_ACCEPTED,{bundle_slug:B.slug}).catch(()=>{}))();let fn=ot();nt("kit_confirmation"),b(x.CLI_STEP_COMPLETED,{step:"kit_display",duration_ms:fn}).catch(()=>{});let gn=ot();nt("tool_installation"),b(x.CLI_STEP_COMPLETED,{step:"kit_confirmation",duration_ms:gn}).catch(()=>{}),a("installing"),$();}if(J.back){let B=P.getState().selectedStarterKit;B&&b(x.CLI_KIT_REJECTED,{bundle_slug:B.slug}).catch(()=>{}),d();}},{isActive:h==="bundleDetail"}),useInput((w,re)=>{if(g===0)return;let J=la(w,re);if(J.cursorDelta!==0){let B=l+J.cursorDelta;B>=0&&B<=1&&u(B);}J.select&&(l===0?Ce():q());},{isActive:h==="installProgress"&&e==="summary"}),jsxs(Box,{flexDirection:"column",borderStyle:"round",paddingX:1,children:[jsx(Ar,{}),jsxs(Box,{flexDirection:"column",paddingX:1,marginBottom:1,children:[jsx(Text,{dimColor:true,children:"The data collected during setup is used solely to improve"}),jsx(Text,{dimColor:true,children:"Flow's internal tools and will not be shared externally."}),!y&&jsx(Box,{marginTop:1,children:jsx(Text,{color:"yellow",children:"Welcome back! We noticed your Starter Kit is not set up yet. Choose a Starter Kit below to get your recommended tools."})})]}),jsxs(Box,{flexDirection:"column",flexGrow:1,children:[e==="bundleList"&&jsx(ua,{onRetry:mn}),e==="bundleDetail"&&jsx(ma,{}),(e==="installing"||e==="summary")&&jsx(ga,{onComplete:q,onRetry:Ce})]}),jsx(Mr,{})]})}var Sp=S("app"),hp={auth:wi,bundleSetup:ya,main:oa};function wa(){f.getState().setScreen("auth"),f.getState().setFocus("auth");}async function Ia(){let e=await D();if(!e){wa();return}try{await Fe();}catch(o){Sp.debug(`Token validation failed: ${String(o)}`),wa();return}b(x.CLI_SESSION_STARTED,{cli_version:Be,os:process.platform,node_version:process.version,duration_ms:Ue(),interface:"tui"}).catch(()=>{});let{clientSecret:t,...r}=e;me.getState().setCredentials(r),!e.starterKit||e.starterKit.trim()===""?(f.getState().setScreen("bundleSetup"),f.getState().setFocus("bundleList")):(f.getState().setScreen("main"),f.getState().setFocus("list"));}function ba(){let{columns:e,rows:t}=useWindowSize(),r=f(i=>i.screen),n=hp[r],{pendingExit:o}=Si();return n?jsxs(Box,{flexDirection:"column",width:e,height:t,children:[jsx(n,{}),o&&jsx(Box,{paddingX:1,children:jsx(Text,{color:"yellow",children:"Press Ctrl+C again to quit"})})]}):jsxs(Text,{color:"red",children:["Unknown screen: ",r]})}var ke=S("auth");function Pa(){X.clearFallbackFile(),Ir();}var wp=3,va=3,Ea=`  \u2139 The data collected during setup is used solely to improve
     Flow's internal tools and will not be shared externally.
 `;function sr(e,t={}){return new Promise((r,n)=>{let{masked:o=false,defaultValue:i=""}=t;process.stdout.write(e+i);let s=i,c=u=>{if(u===""){a(),n(new Error("SIGINT"));return}if(u==="\r"||u===`
 `){a(),process.stdout.write(`
@@ -109,11 +114,11 @@ This will run: ${i}
   Starter kit '${p(e.name)}' has no plugins to install.
 `)),true;process.stdout.write(`
   Installing ${e.plugins.length} plugins from '${p(e.name)}'...
-`);let t=0,r=0,n=e.plugins.length;for(let o of e.plugins){let i=t+r+1;process.stdout.write(C.dim(`  [${i}/${n}] Installing ${p(o)}...`));let s=false;for(let c=1;c<=Sp;c++)try{await Pe(o),t++,s=!0;break}catch(a){if(a instanceof be){t++,s=true;break}}s?process.stdout.write(C.green(` done
+`);let t=0,r=0,n=e.plugins.length;for(let o of e.plugins){let i=t+r+1;process.stdout.write(C.dim(`  [${i}/${n}] Installing ${p(o)}...`));let s=false;for(let c=1;c<=wp;c++)try{await Pe(o),t++,s=!0;break}catch(a){if(a instanceof be){t++,s=true;break}}s?process.stdout.write(C.green(` done
 `)):(r++,process.stdout.write(C.red(` failed
 `)));}return r===0?process.stdout.write(C.green(`  \u2713 Starter kit '${p(e.name)}' selected. ${t}/${n} plugins installed successfully.
 `)):process.stdout.write(C.yellow(`  \u26A0 Starter kit '${p(e.name)}' selected. ${t}/${n} plugins installed. ${r} failed.
-`)),r===0}async function hp(e){Pa(),process.stdout.write(`
+`)),r===0}async function xp(e){Pa(),process.stdout.write(`
 `+Ea+`
 `),ke.debug(`[${e.tenant}] Authenticating tenant`);try{await rt(e);}catch(t){let r=p(t instanceof Error?t.message:"unknown error");return ke.error(`[${e.tenant}] Authentication failed: ${r}`),process.stderr.write(C.red(`  \u2717 Authentication failed: ${r}
 `)),1}try{let t;if(e.starterKit){let r=await Ta(),n=r.find(o=>o.slug===e.starterKit);if(!n){process.stderr.write(C.red(`  \u2717 Starter kit '${p(e.starterKit)}' not found.
@@ -122,19 +127,19 @@ This will run: ${i}
 `);return 1}t=n;}else t=await ka();return await tt({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant,starterKit:t.slug}),await Ca(t),ke.info(`[${e.tenant}] Authentication successful`),process.stdout.write(C.green(`  \u2713 Setup complete. Tenant: ${e.tenant}
 `)),0}catch(t){if(t instanceof Error&&t.message==="SIGINT")throw t;let r=p(t instanceof Error?t.message:"unknown error");return ke.error(`[${e.tenant}] Starter kit setup failed: ${r}`),process.stderr.write(C.red(`  \u2717 Starter kit setup failed: ${r}
-`)),1}}async function wp(){Pa(),ke.debug("[auth] Starting interactive authentication");try{process.stdout.write(`
+`)),1}}async function Ip(){Pa(),ke.debug("[auth] Starting interactive authentication");try{process.stdout.write(`
 `),process.stdout.write(Ea+`
 `);let e=(await sr(C.cyan("  ? ")+"Client ID: ")).trim(),t=(await sr(C.cyan("  ? ")+"Client Secret: ",{masked:!0})).trim(),r=(await sr(C.cyan("  ? ")+"Tenant: ")).trim();if(!e||!t||!r)return ke.error("[auth] Validation failed: all fields are required"),process.stderr.write(C.red(`  \u2717 All fields are required
 `)),1;ke.debug(`[${r}] Authenticating tenant`);try{await rt({clientId:e,clientSecret:t,tenant:r});}catch(o){let i=p(o instanceof Error?o.message:"unknown error");return ke.error(`[${r}] Authentication failed: ${i}`),process.stderr.write(C.red(`  \u2717 Authentication failed: ${i}
 `)),1}let n=await ka();return await tt({clientId:e,clientSecret:t,tenant:r,starterKit:n.slug}),await Ca(n),ke.info(`[${r}] Authentication successful`),process.stdout.write(C.green(`  \u2713 Setup complete. Tenant: ${r}
 `)),0}catch(e){if(e instanceof Error&&e.message==="SIGINT")throw e;let t=p(e instanceof Error?e.message:"unknown error");return ke.error(`[auth] Unexpected error: ${t}`),process.stderr.write(C.red(`  \u2717 Unexpected error: ${t}
-`)),1}}async function Ro(e={}){if(e.clientId&&e.clientSecret&&e.tenant)return hp({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant,starterKit:e.starterKit});try{return await wp()}catch(t){if(t instanceof Error&&t.message==="SIGINT")return process.stdout.write(`
-`),130;throw t}}async function xp(){try{return process.stdout.write(`
+`)),1}}async function Ro(e={}){if(e.clientId&&e.clientSecret&&e.tenant)return xp({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant,starterKit:e.starterKit});try{return await Ip()}catch(t){if(t instanceof Error&&t.message==="SIGINT")return process.stdout.write(`
+`),130;throw t}}async function bp(){try{return process.stdout.write(`
 `),(await sr(C.cyan("  ? ")+"Are you sure? This will remove your local credentials. (y/N): ")).toLowerCase()!=="y"?(process.stdout.write(C.yellow(`  \u26A0 Logout cancelled
 `)),0):null}catch(e){if(e instanceof Error&&e.message==="SIGINT")return process.stdout.write(`
 `),130;throw e}}async function $a(e){if(!await D())return process.stdout.write(C.yellow(`  \u26A0 You are not authenticated
-`)),0;if(!e){let t=await xp();if(t!==null)return t}try{return await ri(),process.stdout.write(C.green(`  \u2713 Credentials removed successfully
+`)),0;if(!e){let t=await bp();if(t!==null)return t}try{return await ri(),process.stdout.write(C.green(`  \u2713 Credentials removed successfully
 `)),0}catch{return process.stderr.write(C.red(`  \u2717 Error removing credentials
 `)),1}}async function Aa(){let e=await D();return e?await xt()?(process.stdout.write(`
 `+C.bold(`  Authenticated
@@ -143,37 +148,37 @@ This will run: ${i}
 `),process.stdout.write(C.dim("     Starter Kit:  ")+p(e.starterKit??"not set")+`
 `),process.stdout.write(C.dim("     Config:  ")+p(await ni())+`
 `),process.stdout.write(`
-`),0):(process.stdout.write(C.yellow("  \u26A0 Session expired. Run `flow auth login` to re-authenticate.\n")),0):(process.stdout.write(C.yellow("  \u26A0 Not authenticated. Run `flow auth login` to set up.\n")),0)}async function Ip(e){let t=Ee(),r;try{r=await ve();}catch{r=[];}let n=new Set(t.map(o=>o.name));return b(x.CLI_CATALOG_VIEWED,{interface:A().interfaceType,filter_type:"available",result_count:r.length}).catch(()=>{}),e.json?(bt(r.map(o=>({...o,installed:n.has(o.name)}))),0):(kr(["","Name","Version","Category","Status"],r.map(o=>[n.has(o.name)?"*":" ",o.name??"",o.version??"n/a",o.category??"",n.has(o.name)?"installed":"available"])),0)}async function bp(e){let t=Ee(),r=await ve(),n=new Map(r.map(i=>[i.name,i])),o=t.map(i=>{let s=n.get(i.name);return s&&i.version&&s.version&&Re(i.version,s.version)?{...i,availableVersion:s.version}:null}).filter(i=>i!==null);return b(x.CLI_CATALOG_VIEWED,{interface:A().interfaceType,filter_type:"outdated",result_count:o.length}).catch(()=>{}),o.length===0?(I("All plugins are up to date."),0):e.json?(bt(o),0):(kr(["Name","Installed","Available"],o.map(i=>[i.name??"",i.version??"n/a",i.availableVersion??"n/a"])),process.stdout.write(`
+`),0):(process.stdout.write(C.yellow("  \u26A0 Session expired. Run `flow auth login` to re-authenticate.\n")),0):(process.stdout.write(C.yellow("  \u26A0 Not authenticated. Run `flow auth login` to set up.\n")),0)}async function vp(e){let t=Ee(),r;try{r=await ve();}catch{r=[];}let n=new Set(t.map(o=>o.name));return b(x.CLI_CATALOG_VIEWED,{interface:A().interfaceType,filter_type:"available",result_count:r.length}).catch(()=>{}),e.json?(bt(r.map(o=>({...o,installed:n.has(o.name)}))),0):(kr(["","Name","Version","Category","Status"],r.map(o=>[n.has(o.name)?"*":" ",o.name??"",o.version??"n/a",o.category??"",n.has(o.name)?"installed":"available"])),0)}async function Pp(e){let t=Ee(),r=await ve(),n=new Map(r.map(i=>[i.name,i])),o=t.map(i=>{let s=n.get(i.name);return s&&i.version&&s.version&&Re(i.version,s.version)?{...i,availableVersion:s.version}:null}).filter(i=>i!==null);return b(x.CLI_CATALOG_VIEWED,{interface:A().interfaceType,filter_type:"outdated",result_count:o.length}).catch(()=>{}),o.length===0?(I("All plugins are up to date."),0):e.json?(bt(o),0):(kr(["Name","Installed","Available"],o.map(i=>[i.name??"",i.version??"n/a",i.availableVersion??"n/a"])),process.stdout.write(`
   ${o.length} plugin(s) outdated.
-`),0)}async function vp(e){let t=Ee();if(b(x.CLI_CATALOG_VIEWED,{interface:A().interfaceType,filter_type:"all",result_count:t.length}).catch(()=>{}),t.length===0)return I("No plugins installed. Use `flow plugin install <name>` to install one."),0;if(e.json)return bt(t),0;let r=[];try{r=await ve();}catch{r=[];}let n=new Map(r.map(i=>[i.name,i])),o=[...t].sort((i,s)=>{let c=tr.indexOf(i.scope??"user"),a=tr.indexOf(s.scope??"user");return (c===-1?1/0:c)-(a===-1?1/0:a)});return kr(["Name","Version","Type","Origin","Scope","Status","Installed at"],o.map(i=>{let s=n.get(i.name),c=s?.type??"plugin",a=s?.origin??So(i.marketplace);return [i.name??"",i.version??"n/a",gt[c]?.label??"Plugin",a,i.scope??"user",i.status??"enabled",Cr(i.installedAt??"")]})),process.stdout.write(`
+`),0)}async function Ep(e){let t=Ee();if(b(x.CLI_CATALOG_VIEWED,{interface:A().interfaceType,filter_type:"all",result_count:t.length}).catch(()=>{}),t.length===0)return I("No plugins installed. Use `flow plugin install <name>` to install one."),0;if(e.json)return bt(t),0;let r=[];try{r=await ve();}catch{r=[];}let n=new Map(r.map(i=>[i.name,i])),o=[...t].sort((i,s)=>{let c=tr.indexOf(i.scope??"user"),a=tr.indexOf(s.scope??"user");return (c===-1?1/0:c)-(a===-1?1/0:a)});return kr(["Name","Version","Type","Origin","Scope","Status","Installed at"],o.map(i=>{let s=n.get(i.name),c=s?.type??"plugin",a=s?.origin??So(i.marketplace);return [i.name??"",i.version??"n/a",gt[c]?.label??"Plugin",a,i.scope??"user",i.status??"enabled",Cr(i.installedAt??"")]})),process.stdout.write(`
   ${t.length} plugin(s) installed.
-`),0}async function La(e){if(!await ee())return 1;try{return e.available?await Ip(e):e.outdated?await bp(e):await vp(e)}catch(t){return k(t instanceof Error?t.message:"Failed to list plugins."),1}}var _=S("manage");function nn(e,t){return t?Ee().find(r=>r.name===e&&r.scope===t):Ee().find(r=>r.name===e)}function Pp(e,t){let r=t;return {callbacks:{onStatus:o=>{r&&(r.text=`${e}${o}`);},onError:o=>{r?.stop(),r=void 0,I(`${e}${o}`);},onPause:()=>{r?.stop(),r=void 0;},onResume:o=>{r?.stop(),r=Mo({text:`${e}${o}`}).start();}},stopSpinner:()=>{r?.stop(),r=void 0;}}}async function Ep(e,t,r,n){let o=n;if(!r.force){o?.stop();let s=p(e),c=p(fo(e,r.scope));if(!await Ve(`${t}Install external plugin "${s}"?
+`),0}async function La(e){if(!await ee())return 1;try{return e.available?await vp(e):e.outdated?await Pp(e):await Ep(e)}catch(t){return k(t instanceof Error?t.message:"Failed to list plugins."),1}}var _=S("manage");function nn(e,t){return t?Ee().find(r=>r.name===e&&r.scope===t):Ee().find(r=>r.name===e)}function Tp(e,t){let r=t;return {callbacks:{onStatus:o=>{r&&(r.text=`${e}${o}`);},onError:o=>{r?.stop(),r=void 0,I(`${e}${o}`);},onPause:()=>{r?.stop(),r=void 0;},onResume:o=>{r?.stop(),r=Mo({text:`${e}${o}`}).start();}},stopSpinner:()=>{r?.stop(),r=void 0;}}}async function kp(e,t,r,n){let o=n;if(!r.force){o?.stop();let s=p(e),c=p(fo(e,r.scope));if(!await Ve(`${t}Install external plugin "${s}"?
 This will run: ${c}
-[y/N] `))return _.debug(`[${e}] Installation cancelled by user`),r.silent||I(`${t}Skipped ${e} (cancelled).`),{name:e,success:true};r.silent||(o=Mo({text:`${t}Installing ${e}...`}).start());}let i=o?Pp(t,o):void 0;try{let s=await go(e,r.marketplaceSource,i?.callbacks,r.scope);if(i?.stopSpinner(),s.exitCode!==0){let c=s.stderr||"Command failed";return r.silent?ie({status:"error",plugin:e,message:c}):k(`${t}Failed to install "${e}": ${c}`),{name:e,success:!1,error:c}}return r.silent?Y({status:"success",plugin:e,command:s.command,duration_ms:s.duration_ms}):V(`${t}${e} installed successfully (via proxy)`),{name:e,success:!0,duration_ms:s.duration_ms}}catch(s){i?.stopSpinner();let c=N(s);return r.silent?ie({status:"error",plugin:e,message:c}):k(`${t}Failed to install "${e}": ${c}`),{name:e,success:false,error:c}}}async function Tp(e,t,r){let n=r.silent?void 0:Mo({text:`${t}Installing ${e}...`}).start();if(Zt(e))return Ep(e,t,r,n);try{let o=await Pe(e,r);return n?.stop(),r.silent?Y({status:"success",plugin:e,version:o.version,duration_ms:o.duration_ms}):V(`${t}${e} v${o.version} installed successfully`),{name:e,success:!0,version:o.version,duration_ms:o.duration_ms}}catch(o){if(n?.stop(),o instanceof be)return r.silent?Y({status:"already_installed",plugin:e,message:o.message}):I(`${t}${o.message}`),{name:e,success:true};let i=N(o);return r.silent?ie({status:"error",plugin:e,message:i}):k(`${t}Failed to install "${e}": ${i}`),{name:e,success:false,error:i}}}function kp(e){let t=e.filter(n=>n.success).length,r=e.filter(n=>!n.success).length;I(`
-Installation summary: ${t} succeeded, ${r} failed`);}async function Ra(e,t={}){if(!await ee())return 1;let r=[];for(let n=0;n<e.length;n++){let o=e.length>1?`[${n+1}/${e.length}] `:"",i=await Tp(e[n],o,t);r.push(i);}return e.length>1&&(t.silent?Y({status:"summary",succeeded:r.filter(n=>n.success).length,failed:r.filter(n=>!n.success).length,results:r.map(n=>({plugin:n.name,success:n.success,...n.error?{error:n.error}:{}}))}):kp(r)),r.some(n=>!n.success)?1:0}async function Ma(e,t){if(!await ee())return 1;if(_.debug(`[${e}] Looking up installed plugin`),!t.force){let r=nn(e,t.scope);if(!r)return _.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;let n=p(r.name),o=r.version?p(r.version):void 0,i=t.scope?` (${t.scope})`:"";if(!await Ve(`Remove ${n} ${o?`v${o}`:"(n/a)"}${i}? [y/N] `))return _.debug(`[${e}] Uninstall cancelled by user`),I("Operation cancelled."),0}try{return _.debug(`[${e}] Uninstalling plugin${t.scope?` (scope: ${t.scope})`:""}`),await Jr(e,t.scope),_.info(`[${e}] Uninstalled successfully`),V("Plugin removed successfully"),0}catch(r){return _.error(`[${e}] Failed to uninstall: ${N(r)}`),k(N(r)),1}}async function _a(e,t={}){if(!await ee())return 1;_.debug(`[${e}] Looking up installed plugin`);let r=nn(e,t.scope);if(!r)return _.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;if(r.status==="enabled")return _.debug(`[${e}] Already enabled, skipping`),I(`${r.name} is already enabled`),0;try{return _.debug(`[${e}] Enabling plugin (current status: ${r.status})`),await Yt(e,"enabled",t.scope),_.info(`[${e}] Enabled successfully`),V(`${r.name} enabled successfully`),0}catch(n){return _.error(`[${e}] Failed to enable: ${N(n)}`),k(N(n)),1}}async function Oa(e,t={}){if(!await ee())return 1;_.debug(`[${e}] Looking up installed plugin`);let r=nn(e,t.scope);if(!r)return _.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;if(r.status==="disabled")return _.debug(`[${e}] Already disabled, skipping`),I(`${r.name} is already disabled`),0;try{return _.debug(`[${e}] Disabling plugin (current status: ${r.status})`),await Yt(e,"disabled",t.scope),_.info(`[${e}] Disabled successfully`),V(`${r.name} disabled successfully`),0}catch(n){return _.error(`[${e}] Failed to disable: ${N(n)}`),k(N(n)),1}}async function Da(e,t,r){r.silent||I(`${t}Updating ${e}...`);try{let n=await Vr(e,r);return r.silent?Y({status:"updated",plugin:n.name,previousVersion:n.previousVersion,newVersion:n.newVersion,duration_ms:n.duration_ms}):V(`${t}${n.name} v${n.previousVersion} \u2192 v${n.newVersion}`),{name:e,success:!0}}catch(n){if(n instanceof He)return r.silent?Y({status:"up_to_date",plugin:e,message:n.message}):I(`${t}${n.message}`),{name:e,success:true,skipped:true};let o=N(n);return r.silent?ie({status:"error",plugin:e,message:o}):k(`${t}Failed to update ${e}: ${o}`),{name:e,success:false,error:o}}}function Cp(e){let t=e.filter(o=>o.success&&!o.skipped).length,r=e.filter(o=>o.skipped).length,n=e.filter(o=>!o.success).length;I(`
-Update summary: ${t} updated, ${r} already up to date, ${n} failed`);}async function $p(e,t,r){try{let n=await Tt(e);Re(t,n.version,r.force)?I(`Would update ${e}: v${t} \u2192 v${n.version}`):I(`${e} is already up to date (v${t})`);}catch(n){return k(N(n)),1}return 0}function Ap(e){return new Map(e.filter(t=>!!t.version).map(t=>[t.name,t.version]))}function Lp(e,t,r){let n=t.get(e.name);return n?e.version&&Re(e.version,n,r)?(I(`Would update ${e.name}: v${e.version} \u2192 v${n}`),true):(I(`${e.name} is already up to date (${e.version?`v${e.version}`:"n/a"})`),false):(I(`Skipping ${e.name}: not found in catalog`),false)}async function Rp(e,t){try{let r=await ve(),n=Ap(r),o=0;for(let i of e)Lp(i,n,t.force)&&o++;o===0&&I("All plugins are up to date");}catch(r){return k(N(r)),1}return 0}async function Mp(e,t){let r=[];for(let n=0;n<e.length;n++){let o=`[${n+1}/${e.length}] `,i=await Da(e[n].name,o,t);r.push(i);}return t.silent?Y({status:"summary",updated:r.filter(n=>n.success&&!n.skipped).length,upToDate:r.filter(n=>n.skipped).length,failed:r.filter(n=>!n.success).length,results:r.map(n=>({plugin:n.name,success:n.success,...n.skipped?{skipped:true}:{},...n.error?{error:n.error}:{}}))}):Cp(r),r.some(n=>!n.success)?1:0}async function Na(e,t={}){if(!await ee())return 1;if(e){let o=nn(e,t.scope);return o?t.dryRun?$p(e,o.version??"",t):(await Da(e,"",t)).success?0:1:(t.silent?ie({status:"error",plugin:e,message:`Plugin "${e}" is not installed`}):k(`Plugin "${e}" is not installed`),1)}let n=Ee().filter(o=>o.marketplace===O);return n.length===0?(t.silent?Y({status:"empty",message:"No plugins installed"}):I("No plugins installed"),0):t.dryRun?Rp(n,t):Mp(n,t)}var Fa=S("marketplace");function Op(e){return `claude plugin marketplace add ${e}`}async function Ua(e,t){if(!await ee())return 1;let r;try{r=zr(e);}catch(i){let s=N(i);return t.silent?ie({status:"error",source:e,message:s}):k(s),1}Fa.debug(`[marketplace] Adding marketplace source: ${r}`);let n=Op(r);if(!t.force){let i=p(r),s=p(n);if(!await Ve(`Add marketplace "${i}"?
+[y/N] `))return _.debug(`[${e}] Installation cancelled by user`),r.silent||I(`${t}Skipped ${e} (cancelled).`),{name:e,success:true};r.silent||(o=Mo({text:`${t}Installing ${e}...`}).start());}let i=o?Tp(t,o):void 0;try{let s=await go(e,r.marketplaceSource,i?.callbacks,r.scope);if(i?.stopSpinner(),s.exitCode!==0){let c=s.stderr||"Command failed";return r.silent?ie({status:"error",plugin:e,message:c}):k(`${t}Failed to install "${e}": ${c}`),{name:e,success:!1,error:c}}return r.silent?Y({status:"success",plugin:e,command:s.command,duration_ms:s.duration_ms}):V(`${t}${e} installed successfully (via proxy)`),{name:e,success:!0,duration_ms:s.duration_ms}}catch(s){i?.stopSpinner();let c=N(s);return r.silent?ie({status:"error",plugin:e,message:c}):k(`${t}Failed to install "${e}": ${c}`),{name:e,success:false,error:c}}}async function Cp(e,t,r){let n=r.silent?void 0:Mo({text:`${t}Installing ${e}...`}).start();if(Zt(e))return kp(e,t,r,n);try{let o=await Pe(e,r);return n?.stop(),r.silent?Y({status:"success",plugin:e,version:o.version,duration_ms:o.duration_ms}):V(`${t}${e} v${o.version} installed successfully`),{name:e,success:!0,version:o.version,duration_ms:o.duration_ms}}catch(o){if(n?.stop(),o instanceof be)return r.silent?Y({status:"already_installed",plugin:e,message:o.message}):I(`${t}${o.message}`),{name:e,success:true};let i=N(o);return r.silent?ie({status:"error",plugin:e,message:i}):k(`${t}Failed to install "${e}": ${i}`),{name:e,success:false,error:i}}}function $p(e){let t=e.filter(n=>n.success).length,r=e.filter(n=>!n.success).length;I(`
+Installation summary: ${t} succeeded, ${r} failed`);}async function Ra(e,t={}){if(!await ee())return 1;let r=[];for(let n=0;n<e.length;n++){let o=e.length>1?`[${n+1}/${e.length}] `:"",i=await Cp(e[n],o,t);r.push(i);}return e.length>1&&(t.silent?Y({status:"summary",succeeded:r.filter(n=>n.success).length,failed:r.filter(n=>!n.success).length,results:r.map(n=>({plugin:n.name,success:n.success,...n.error?{error:n.error}:{}}))}):$p(r)),r.some(n=>!n.success)?1:0}async function Ma(e,t){if(!await ee())return 1;if(_.debug(`[${e}] Looking up installed plugin`),!t.force){let r=nn(e,t.scope);if(!r)return _.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;let n=p(r.name),o=r.version?p(r.version):void 0,i=t.scope?` (${t.scope})`:"";if(!await Ve(`Remove ${n} ${o?`v${o}`:"(n/a)"}${i}? [y/N] `))return _.debug(`[${e}] Uninstall cancelled by user`),I("Operation cancelled."),0}try{return _.debug(`[${e}] Uninstalling plugin${t.scope?` (scope: ${t.scope})`:""}`),await Jr(e,t.scope),_.info(`[${e}] Uninstalled successfully`),V("Plugin removed successfully"),0}catch(r){return _.error(`[${e}] Failed to uninstall: ${N(r)}`),k(N(r)),1}}async function _a(e,t={}){if(!await ee())return 1;_.debug(`[${e}] Looking up installed plugin`);let r=nn(e,t.scope);if(!r)return _.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;if(r.status==="enabled")return _.debug(`[${e}] Already enabled, skipping`),I(`${r.name} is already enabled`),0;try{return _.debug(`[${e}] Enabling plugin (current status: ${r.status})`),await Yt(e,"enabled",t.scope),_.info(`[${e}] Enabled successfully`),V(`${r.name} enabled successfully`),0}catch(n){return _.error(`[${e}] Failed to enable: ${N(n)}`),k(N(n)),1}}async function Oa(e,t={}){if(!await ee())return 1;_.debug(`[${e}] Looking up installed plugin`);let r=nn(e,t.scope);if(!r)return _.error(`[${e}] Plugin is not installed`),k(`Plugin "${e}" is not installed`),1;if(r.status==="disabled")return _.debug(`[${e}] Already disabled, skipping`),I(`${r.name} is already disabled`),0;try{return _.debug(`[${e}] Disabling plugin (current status: ${r.status})`),await Yt(e,"disabled",t.scope),_.info(`[${e}] Disabled successfully`),V(`${r.name} disabled successfully`),0}catch(n){return _.error(`[${e}] Failed to disable: ${N(n)}`),k(N(n)),1}}async function Da(e,t,r){r.silent||I(`${t}Updating ${e}...`);try{let n=await Vr(e,r);return r.silent?Y({status:"updated",plugin:n.name,previousVersion:n.previousVersion,newVersion:n.newVersion,duration_ms:n.duration_ms}):V(`${t}${n.name} v${n.previousVersion} \u2192 v${n.newVersion}`),{name:e,success:!0}}catch(n){if(n instanceof He)return r.silent?Y({status:"up_to_date",plugin:e,message:n.message}):I(`${t}${n.message}`),{name:e,success:true,skipped:true};let o=N(n);return r.silent?ie({status:"error",plugin:e,message:o}):k(`${t}Failed to update ${e}: ${o}`),{name:e,success:false,error:o}}}function Ap(e){let t=e.filter(o=>o.success&&!o.skipped).length,r=e.filter(o=>o.skipped).length,n=e.filter(o=>!o.success).length;I(`
+Update summary: ${t} updated, ${r} already up to date, ${n} failed`);}async function Lp(e,t,r){try{let n=await Tt(e);Re(t,n.version,r.force)?I(`Would update ${e}: v${t} \u2192 v${n.version}`):I(`${e} is already up to date (v${t})`);}catch(n){return k(N(n)),1}return 0}function Rp(e){return new Map(e.filter(t=>!!t.version).map(t=>[t.name,t.version]))}function Mp(e,t,r){let n=t.get(e.name);return n?e.version&&Re(e.version,n,r)?(I(`Would update ${e.name}: v${e.version} \u2192 v${n}`),true):(I(`${e.name} is already up to date (${e.version?`v${e.version}`:"n/a"})`),false):(I(`Skipping ${e.name}: not found in catalog`),false)}async function _p(e,t){try{let r=await ve(),n=Rp(r),o=0;for(let i of e)Mp(i,n,t.force)&&o++;o===0&&I("All plugins are up to date");}catch(r){return k(N(r)),1}return 0}async function Op(e,t){let r=[];for(let n=0;n<e.length;n++){let o=`[${n+1}/${e.length}] `,i=await Da(e[n].name,o,t);r.push(i);}return t.silent?Y({status:"summary",updated:r.filter(n=>n.success&&!n.skipped).length,upToDate:r.filter(n=>n.skipped).length,failed:r.filter(n=>!n.success).length,results:r.map(n=>({plugin:n.name,success:n.success,...n.skipped?{skipped:true}:{},...n.error?{error:n.error}:{}}))}):Ap(r),r.some(n=>!n.success)?1:0}async function Na(e,t={}){if(!await ee())return 1;if(e){let o=nn(e,t.scope);return o?t.dryRun?Lp(e,o.version??"",t):(await Da(e,"",t)).success?0:1:(t.silent?ie({status:"error",plugin:e,message:`Plugin "${e}" is not installed`}):k(`Plugin "${e}" is not installed`),1)}let n=Ee().filter(o=>o.marketplace===O);return n.length===0?(t.silent?Y({status:"empty",message:"No plugins installed"}):I("No plugins installed"),0):t.dryRun?_p(n,t):Op(n,t)}var Fa=S("marketplace");function Np(e){return `claude plugin marketplace add ${e}`}async function Ua(e,t){if(!await ee())return 1;let r;try{r=zr(e);}catch(i){let s=N(i);return t.silent?ie({status:"error",source:e,message:s}):k(s),1}Fa.debug(`[marketplace] Adding marketplace source: ${r}`);let n=Np(r);if(!t.force){let i=p(r),s=p(n);if(!await Ve(`Add marketplace "${i}"?
 This will run: ${s}
-[y/N] `))return Fa.debug("[marketplace] Operation cancelled by user"),I("Operation cancelled."),0}let o=t.silent?void 0:Mo({text:`Adding marketplace "${p(r)}"...`}).start();try{let i=await le(n);return o?.stop(),i.exitCode!==0?(t.silent?ie({status:"error",source:r,exitCode:i.exitCode,message:i.stderr||"Command failed"}):(k(`Failed to add marketplace "${r}": ${i.stderr||"Command failed"}`),t.verbose&&i.stdout&&I(`stdout: ${i.stdout}`)),1):(t.silent?Y({status:"success",source:r,command:n,duration_ms:i.duration_ms}):(V(`Marketplace "${r}" added successfully`),t.verbose&&i.stdout&&I(i.stdout)),0)}catch(i){o?.stop();let s=N(i);return t.silent?ie({status:"error",source:r,message:s}):k(`Failed to add marketplace "${r}": ${s}`),1}}async function Up(){return await D()?{passed:true,message:"Credentials configured"}:{passed:false,message:"Credentials not configured \u2014 Run `flow auth login`"}}async function Bp(){let e=Date.now();try{await ve();let t=Date.now()-e;return {passed:!0,message:`Prompt Manager accessible (${t}ms)`,latency:t}}catch(t){return t instanceof Error&&t.name==="TimeoutError"?{passed:false,message:"Timeout after 5s \u2014 check your connection"}:{passed:false,message:`Connection error: ${t instanceof Error?t.message:"Unknown"}`}}}async function Kp(){return await xt()?{passed:true,message:"Token is valid"}:{passed:false,message:"Token expired \u2014 run `flow auth login` to re-authenticate"}}function jp(){let e=join(homedir(),".claude","settings.json");return existsSync(e)?{passed:true,message:"Claude Code detected"}:{passed:false,message:"Claude Code not detected"}}async function Ba(){process.stdout.write(`
+[y/N] `))return Fa.debug("[marketplace] Operation cancelled by user"),I("Operation cancelled."),0}let o=t.silent?void 0:Mo({text:`Adding marketplace "${p(r)}"...`}).start();try{let i=await le(n);return o?.stop(),i.exitCode!==0?(t.silent?ie({status:"error",source:r,exitCode:i.exitCode,message:i.stderr||"Command failed"}):(k(`Failed to add marketplace "${r}": ${i.stderr||"Command failed"}`),t.verbose&&i.stdout&&I(`stdout: ${i.stdout}`)),1):(t.silent?Y({status:"success",source:r,command:n,duration_ms:i.duration_ms}):(V(`Marketplace "${r}" added successfully`),t.verbose&&i.stdout&&I(i.stdout)),0)}catch(i){o?.stop();let s=N(i);return t.silent?ie({status:"error",source:r,message:s}):k(`Failed to add marketplace "${r}": ${s}`),1}}async function Kp(){return await D()?{passed:true,message:"Credentials configured"}:{passed:false,message:"Credentials not configured \u2014 Run `flow auth login`"}}async function jp(){let e=Date.now();try{await ve();let t=Date.now()-e;return {passed:!0,message:`Prompt Manager accessible (${t}ms)`,latency:t}}catch(t){return t instanceof Error&&t.name==="TimeoutError"?{passed:false,message:"Timeout after 5s \u2014 check your connection"}:{passed:false,message:`Connection error: ${t instanceof Error?t.message:"Unknown"}`}}}async function Jp(){return await xt()?{passed:true,message:"Token is valid"}:{passed:false,message:"Token expired \u2014 run `flow auth login` to re-authenticate"}}function Hp(){let e=join(homedir(),".claude","settings.json");return existsSync(e)?{passed:true,message:"Claude Code detected"}:{passed:false,message:"Claude Code not detected"}}async function Ba(){process.stdout.write(`
 `+C.bold(`  FlowSetup CLI Diagnostics
-`));let e=[{name:"Credentials",fn:Up},{name:"Prompt Manager",fn:Bp},{name:"Valid Token",fn:Kp},{name:"Claude Code",fn:jp}],t=true;for(let r of e){let n=await r.fn(),o="",i=C.green;n.passed?o=C.green("[OK]  "):(o=C.red("[FAIL]"),i=C.red,t=false);let s=`  ${o} ${i(r.name.padEnd(18))} ${p(n.message)}`;process.stdout.write(s+`
+`));let e=[{name:"Credentials",fn:Kp},{name:"Prompt Manager",fn:jp},{name:"Valid Token",fn:Jp},{name:"Claude Code",fn:Hp}],t=true;for(let r of e){let n=await r.fn(),o="",i=C.green;n.passed?o=C.green("[OK]  "):(o=C.red("[FAIL]"),i=C.red,t=false);let s=`  ${o} ${i(r.name.padEnd(18))} ${p(n.message)}`;process.stdout.write(s+`
 `);}return process.stdout.write(`
 `),t?(process.stdout.write(C.green(`  \u2713 All checks passed!
 `)),0):(process.stdout.write(C.red(`  \u2717 Some checks failed \u2014 verify your configuration
-`)),1)}var Gp=["github.com","www.github.com"],Vp=/^([a-zA-Z0-9_.-]+)\/([a-zA-Z0-9_.@-]+)(\/.*)?$/,zp=/^([^@]+)@(.+)$/;function Wp(e){return !!(isAbsolute(e)||e==="."||e===".."||e.startsWith("./")||e.startsWith("../")||e.startsWith(".\\")||e.startsWith("..\\")||/^[a-zA-Z]:[/\\]/.test(e))}function _o(e){let t=e.replace(/\\/g,"/");t=t.replace(/^\/+/,"").replace(/\/+$/,"");let r=t.split("/").filter(Boolean);for(let n of r)if(n==="..")throw new Error(`Invalid subpath: "${e}" contains path traversal ("..").`);return r.join("/")}function qp(e){let t=e.pathname.split("/").filter(Boolean);if(t.length<2)throw new Error(`Invalid GitHub URL: expected at least owner/repo in "${e.href}"`);let r=t[0],n=t[1];n.endsWith(".git")&&(n=n.slice(0,-4));let o={type:"github",url:`https://github.com/${r}/${n}.git`};if(t.length>=3&&(t[2]==="tree"||t[2]==="blob")){if(t.length>=4&&(o.ref=t[3]),t.length>=5){let i=t.slice(4).join("/");o.subpath=_o(i);}}else if(t.length>2){let i=t.slice(2).join("/");o.subpath=_o(i);}return e.hash&&e.hash.length>1&&(o.ref=decodeURIComponent(e.hash.slice(1))),o}function on(e){let t=e.trim();if(!t)throw new Error("Skill source cannot be empty.");if(Wp(t)){let r=resolve(t);return {type:"local",url:r,localPath:r}}try{let r=new URL(t);if((r.protocol==="https:"||r.protocol==="http:")&&Gp.includes(r.hostname))return qp(r);if(r.protocol==="https:"||r.protocol==="http:"){let n={type:"git",url:t};return r.hash&&r.hash.length>1&&(n.ref=decodeURIComponent(r.hash.slice(1)),n.url=t.replace(r.hash,"")),n}if(r.protocol==="git:"){let n={type:"git",url:t};return r.hash&&r.hash.length>1&&(n.ref=decodeURIComponent(r.hash.slice(1)),n.url=t.replace(r.hash,"")),n}}catch{}if(t.startsWith("git@")||t.includes(":")&&t.includes(".git")){let r=t,n,o=t.indexOf("#");o!==-1&&(n=t.slice(o+1),r=t.slice(0,o));let i={type:"git",url:r};return n&&(i.ref=n),i}{let r=t,n,o=r.indexOf("#");o!==-1&&(n=r.slice(o+1),r=r.slice(0,o));let i=r.match(Vp);if(i){let s=i[1],c=i[2],a=i[3],l,u=c.match(zp);u&&(c=u[1],l=u[2]),c.endsWith(".git")&&(c=c.slice(0,-4));let g={type:"github",url:`https://github.com/${s}/${c}.git`};if(n&&(g.ref=n),l&&(g.skillFilter=l),a){let v=a.replace(/^\//,"");v&&(g.subpath=_o(v));}return g}}return {type:"git",url:t}}function sn(e){if(e.type!=="github")return null;try{let r=new URL(e.url).pathname.split("/").filter(Boolean);if(r.length<2)return null;let n=r[1];return n.endsWith(".git")&&(n=n.slice(0,-4)),`${r[0]}/${n}`}catch{return null}}var ed=6e4,Xe=class extends Error{url;isTimeout;isAuthError;constructor(t,r,n=false,o=false){super(t),this.name="GitCloneError",this.url=r,this.isTimeout=n,this.isAuthError=o;}};async function an(e,t){let r=await mkdtemp(join(tmpdir(),"flow-skills-")),n=simpleGit({timeout:{block:ed}}).env("GIT_TERMINAL_PROMPT","0").env("GIT_LFS_SKIP_SMUDGE","1"),o=t?["--depth","1","--branch",t]:["--depth","1"];try{return await n.clone(e,r,o),r}catch(i){await rm(r,{recursive:true,force:true}).catch(()=>{});let s=i instanceof Error?i.message:String(i),c=s.includes("block timeout")||s.includes("timed out"),a=s.includes("Authentication failed")||s.includes("could not read Username")||s.includes("Permission denied")||s.includes("Repository not found");throw c?new Xe("Clone timed out after 60s. Check your SSH keys or credentials.",e,true,false):a?new Xe(`Authentication failed for ${e}. Ensure you have access and credentials are configured.`,e,false,true):new Xe(`Failed to clone ${e}: ${s}`,e,false,false)}}async function ln(e){let t=normalize(resolve(e)),r=normalize(resolve(tmpdir()));if(!t.startsWith(r+sep))throw new Error("Attempted to clean up directory outside of temp directory");await rm(e,{recursive:true,force:true});}function Ga(e){let t=e.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/);return t?{data:parse(t[1])??{},content:t[2]??""}:{data:{},content:e}}var Do=new Set(["node_modules",".git","dist","build","__pycache__"]);function $t(e){return e.toLowerCase().replace(/[^a-z0-9._]+/g,"-").replace(/^[.-]+|[.-]+$/g,"").substring(0,255)||"unnamed-skill"}function Wa(e,t){let r=normalize(resolve(e)),n=normalize(resolve(t));return n.startsWith(r+sep)||n===r}function id(e,t){let r=normalize(resolve(e)),n=normalize(resolve(join(e,t)));return n.startsWith(r+sep)||n===r}async function Oo(e){try{let t=join(e,"SKILL.md");return (await stat(t)).isFile()}catch{return  false}}async function ar(e){try{let t=await readFile(e,"utf-8"),{data:r}=Ga(t);return typeof r.name!="string"||typeof r.description!="string"?null:{name:r.name,description:r.description,path:dirname(e),rawContent:t,metadata:r.metadata}}catch{return null}}async function qa(e,t=0,r=5){if(t>r)return [];try{let[n,o]=await Promise.all([Oo(e),readdir(e,{withFileTypes:!0}).catch(()=>[])]),i=n?[e]:[],s=await Promise.all(o.filter(c=>c.isDirectory()&&!Do.has(c.name)).map(c=>qa(join(e,c.name),t+1,r)));return [...i,...s.flat()]}catch{return []}}async function pn(e,t){let r=[],n=new Set;if(t&&!id(e,t))throw new Error(`Invalid subpath: "${t}" resolves outside the repository directory.`);let o=t?join(e,t):e;if(await Oo(o)){let s=await ar(join(o,"SKILL.md"));if(s)return r.push(s),n.add(s.name),r}let i=[o,join(o,"skills"),join(o,".claude/skills"),join(o,".agents/skills")];for(let s of i)try{let c=await readdir(s,{withFileTypes:!0});for(let a of c){if(!a.isDirectory())continue;let l=join(s,a.name);if(await Oo(l)){let u=await ar(join(l,"SKILL.md"));u&&!n.has(u.name)&&(r.push(u),n.add(u.name));}}}catch{}if(r.length===0){let s=await qa(o);for(let c of s){let a=await ar(join(c,"SKILL.md"));a&&!n.has(a.name)&&(r.push(a),n.add(a.name));}}return r}function Xa(e,t){let r=t.map(n=>n.toLowerCase());return e.filter(n=>{let o=n.name.toLowerCase();return r.some(i=>i===o)})}var Za=1;function Ya(){return {version:Za,skills:{}}}async function dn(e){let t=xn(e);try{let r=await readFile(t,"utf-8"),n=JSON.parse(r);return !n.version||n.version<Za?Ya():n}catch{return Ya()}}function ud(e){let t={};for(let r of Object.keys(e).sort())t[r]=e[r];return t}async function Qa(e,t){let r=xn(t);await mkdir(dirname(r),{recursive:true});let n={version:e.version,skills:ud(e.skills)};await writeFile(r,JSON.stringify(n,null,2)+`
-`,"utf-8");}async function el(e,t,r){let n=await dn(r),o=new Date().toISOString(),i=n.skills[e];n.skills[e]={...t,installedAt:i?.installedAt??o,updatedAt:o},await Qa(n,r);}async function tl(e,t){let r=await dn(t);e in r.skills&&(delete r.skills[e],await Qa(r,t));}var rl=S("skillInstaller");async function Sd(e,t,r,n){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"skill",source:"external",scope:t,version:r,duration_ms:n,interface:A().interfaceType});}catch(o){rl.warn(`Failed to send skill install metrics: ${String(o)}`);}}async function hd(e,t){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"skill",source:"external",error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:A().interfaceType});}catch(r){rl.warn(`Failed to send skill install-failed metrics: ${String(r)}`);}}async function wd(e,t){await cp(e,t,{recursive:true,dereference:true,filter:r=>!Do.has(basename(r))});}async function xd(e,t,r){let n=$t(e.name),o=Dt(t),i=join(o,n);if(!Wa(o,i))return {skill:e.name,success:false,path:i,error:`Unsafe install path: "${i}" escapes skills directory`};try{await rm(i,{recursive:!0,force:!0}),await mkdir(i,{recursive:!0}),await wd(e.path,i);let c=sn(r)??r.url;return await el(n,{source:c,sourceType:r.type,sourceUrl:r.url,ref:r.ref,skillPath:r.subpath},t),{skill:e.name,success:!0,path:i}}catch(s){return {skill:e.name,success:false,path:i,error:s instanceof Error?s.message:String(s)}}}async function nl(e,t){let r=on(e),n;try{let o;if(r.type==="local"){if(!r.localPath||!existsSync(r.localPath))return {source:e,results:[],discovered:0,installed:0,failed:0};o=r.localPath;}else n=await an(r.url,r.ref),o=n;let i=await pn(o,r.subpath),s=[...t.skillFilter??[]];r.skillFilter&&s.push(r.skillFilter);let c=s.length>0?Xa(i,s):i,a=[],l=r.ref??"latest";for(let u of c){let g=Date.now(),v=await xd(u,t.scope,r);a.push(v);let d=Date.now()-g;v.success?await Sd(u.name,t.scope,l,d):await hd(u.name,new Error(v.error??"Unknown error"));}return {source:e,results:a,discovered:i.length,installed:a.filter(u=>u.success).length,failed:a.filter(u=>!u.success).length}}finally{n&&await ln(n).catch(()=>{});}}var Ed=S("skills");async function Td(e){try{await b(x.CLI_TOOL_UNINSTALLED,{tool_id:e,tool_type:"skill",source:"external",interface:A().interfaceType});}catch(t){Ed.warn(`Failed to send skill uninstall metrics: ${String(t)}`);}}async function kd(e){let t=createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(`${e} (y/N) `,n=>{t.close(),r(n.trim().toLowerCase()==="y");});})}async function Cd(e){let t=on(e),r;try{let n;if(t.type==="local"){if(!t.localPath)return k("Invalid local path."),1;n=t.localPath;}else I(`Fetching skills from ${p(e)}...`),r=await an(t.url,t.ref),n=r;let o=await pn(n,t.subpath);if(o.length===0)return I("No skills found in this source."),0;let s=sn(t)??p(e);I(`Found ${o.length} skill(s) in ${s}:
+`)),1)}var zp=["github.com","www.github.com"],Wp=/^([a-zA-Z0-9_.-]+)\/([a-zA-Z0-9_.@-]+)(\/.*)?$/,qp=/^([^@]+)@(.+)$/;function Xp(e){return !!(isAbsolute(e)||e==="."||e===".."||e.startsWith("./")||e.startsWith("../")||e.startsWith(".\\")||e.startsWith("..\\")||/^[a-zA-Z]:[/\\]/.test(e))}function _o(e){let t=e.replace(/\\/g,"/");t=t.replace(/^\/+/,"").replace(/\/+$/,"");let r=t.split("/").filter(Boolean);for(let n of r)if(n==="..")throw new Error(`Invalid subpath: "${e}" contains path traversal ("..").`);return r.join("/")}function Yp(e){let t=e.pathname.split("/").filter(Boolean);if(t.length<2)throw new Error(`Invalid GitHub URL: expected at least owner/repo in "${e.href}"`);let r=t[0],n=t[1];n.endsWith(".git")&&(n=n.slice(0,-4));let o={type:"github",url:`https://github.com/${r}/${n}.git`};if(t.length>=3&&(t[2]==="tree"||t[2]==="blob")){if(t.length>=4&&(o.ref=t[3]),t.length>=5){let i=t.slice(4).join("/");o.subpath=_o(i);}}else if(t.length>2){let i=t.slice(2).join("/");o.subpath=_o(i);}return e.hash&&e.hash.length>1&&(o.ref=decodeURIComponent(e.hash.slice(1))),o}function on(e){let t=e.trim();if(!t)throw new Error("Skill source cannot be empty.");if(Xp(t)){let r=resolve(t);return {type:"local",url:r,localPath:r}}try{let r=new URL(t);if((r.protocol==="https:"||r.protocol==="http:")&&zp.includes(r.hostname))return Yp(r);if(r.protocol==="https:"||r.protocol==="http:"){let n={type:"git",url:t};return r.hash&&r.hash.length>1&&(n.ref=decodeURIComponent(r.hash.slice(1)),n.url=t.replace(r.hash,"")),n}if(r.protocol==="git:"){let n={type:"git",url:t};return r.hash&&r.hash.length>1&&(n.ref=decodeURIComponent(r.hash.slice(1)),n.url=t.replace(r.hash,"")),n}}catch{}if(t.startsWith("git@")||t.includes(":")&&t.includes(".git")){let r=t,n,o=t.indexOf("#");o!==-1&&(n=t.slice(o+1),r=t.slice(0,o));let i={type:"git",url:r};return n&&(i.ref=n),i}{let r=t,n,o=r.indexOf("#");o!==-1&&(n=r.slice(o+1),r=r.slice(0,o));let i=r.match(Wp);if(i){let s=i[1],c=i[2],a=i[3],l,u=c.match(qp);u&&(c=u[1],l=u[2]),c.endsWith(".git")&&(c=c.slice(0,-4));let g={type:"github",url:`https://github.com/${s}/${c}.git`};if(n&&(g.ref=n),l&&(g.skillFilter=l),a){let v=a.replace(/^\//,"");v&&(g.subpath=_o(v));}return g}}return {type:"git",url:t}}function sn(e){if(e.type!=="github")return null;try{let r=new URL(e.url).pathname.split("/").filter(Boolean);if(r.length<2)return null;let n=r[1];return n.endsWith(".git")&&(n=n.slice(0,-4)),`${r[0]}/${n}`}catch{return null}}var rd=6e4,Xe=class extends Error{url;isTimeout;isAuthError;constructor(t,r,n=false,o=false){super(t),this.name="GitCloneError",this.url=r,this.isTimeout=n,this.isAuthError=o;}};async function an(e,t){let r=await mkdtemp(join(tmpdir(),"flow-skills-")),n=simpleGit({timeout:{block:rd}}).env("GIT_TERMINAL_PROMPT","0").env("GIT_LFS_SKIP_SMUDGE","1"),o=t?["--depth","1","--branch",t]:["--depth","1"];try{return await n.clone(e,r,o),r}catch(i){await rm(r,{recursive:true,force:true}).catch(()=>{});let s=i instanceof Error?i.message:String(i),c=s.includes("block timeout")||s.includes("timed out"),a=s.includes("Authentication failed")||s.includes("could not read Username")||s.includes("Permission denied")||s.includes("Repository not found");throw c?new Xe("Clone timed out after 60s. Check your SSH keys or credentials.",e,true,false):a?new Xe(`Authentication failed for ${e}. Ensure you have access and credentials are configured.`,e,false,true):new Xe(`Failed to clone ${e}: ${s}`,e,false,false)}}async function ln(e){let t=normalize(resolve(e)),r=normalize(resolve(tmpdir()));if(!t.startsWith(r+sep))throw new Error("Attempted to clean up directory outside of temp directory");await rm(e,{recursive:true,force:true});}function Ga(e){let t=e.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/);return t?{data:parse(t[1])??{},content:t[2]??""}:{data:{},content:e}}var Do=new Set(["node_modules",".git","dist","build","__pycache__"]);function $t(e){return e.toLowerCase().replace(/[^a-z0-9._]+/g,"-").replace(/^[.-]+|[.-]+$/g,"").substring(0,255)||"unnamed-skill"}function Wa(e,t){let r=normalize(resolve(e)),n=normalize(resolve(t));return n.startsWith(r+sep)||n===r}function ad(e,t){let r=normalize(resolve(e)),n=normalize(resolve(join(e,t)));return n.startsWith(r+sep)||n===r}async function Oo(e){try{let t=join(e,"SKILL.md");return (await stat(t)).isFile()}catch{return  false}}async function ar(e){try{let t=await readFile(e,"utf-8"),{data:r}=Ga(t);return typeof r.name!="string"||typeof r.description!="string"?null:{name:r.name,description:r.description,path:dirname(e),rawContent:t,metadata:r.metadata}}catch{return null}}async function qa(e,t=0,r=5){if(t>r)return [];try{let[n,o]=await Promise.all([Oo(e),readdir(e,{withFileTypes:!0}).catch(()=>[])]),i=n?[e]:[],s=await Promise.all(o.filter(c=>c.isDirectory()&&!Do.has(c.name)).map(c=>qa(join(e,c.name),t+1,r)));return [...i,...s.flat()]}catch{return []}}async function pn(e,t){let r=[],n=new Set;if(t&&!ad(e,t))throw new Error(`Invalid subpath: "${t}" resolves outside the repository directory.`);let o=t?join(e,t):e;if(await Oo(o)){let s=await ar(join(o,"SKILL.md"));if(s)return r.push(s),n.add(s.name),r}let i=[o,join(o,"skills"),join(o,".claude/skills"),join(o,".agents/skills")];for(let s of i)try{let c=await readdir(s,{withFileTypes:!0});for(let a of c){if(!a.isDirectory())continue;let l=join(s,a.name);if(await Oo(l)){let u=await ar(join(l,"SKILL.md"));u&&!n.has(u.name)&&(r.push(u),n.add(u.name));}}}catch{}if(r.length===0){let s=await qa(o);for(let c of s){let a=await ar(join(c,"SKILL.md"));a&&!n.has(a.name)&&(r.push(a),n.add(a.name));}}return r}function Xa(e,t){let r=t.map(n=>n.toLowerCase());return e.filter(n=>{let o=n.name.toLowerCase();return r.some(i=>i===o)})}var Za=1;function Ya(){return {version:Za,skills:{}}}async function dn(e){let t=xn(e);try{let r=await readFile(t,"utf-8"),n=JSON.parse(r);return !n.version||n.version<Za?Ya():n}catch{return Ya()}}function dd(e){let t={};for(let r of Object.keys(e).sort())t[r]=e[r];return t}async function Qa(e,t){let r=xn(t);await mkdir(dirname(r),{recursive:true});let n={version:e.version,skills:dd(e.skills)};await writeFile(r,JSON.stringify(n,null,2)+`
+`,"utf-8");}async function el(e,t,r){let n=await dn(r),o=new Date().toISOString(),i=n.skills[e];n.skills[e]={...t,installedAt:i?.installedAt??o,updatedAt:o},await Qa(n,r);}async function tl(e,t){let r=await dn(t);e in r.skills&&(delete r.skills[e],await Qa(r,t));}var rl=S("skillInstaller");async function wd(e,t,r,n){try{await b(x.CLI_TOOL_INSTALLED,{tool_id:e,tool_type:"skill",source:"external",scope:t,version:r,duration_ms:n,interface:A().interfaceType});}catch(o){rl.warn(`Failed to send skill install metrics: ${String(o)}`);}}async function xd(e,t){try{await b(x.CLI_TOOL_INSTALL_FAILED,{tool_id:e,tool_type:"skill",source:"external",error_code:t instanceof Error?t.name:"UNKNOWN",error_message:(t instanceof Error?t.message:String(t)).slice(0,500),interface:A().interfaceType});}catch(r){rl.warn(`Failed to send skill install-failed metrics: ${String(r)}`);}}async function Id(e,t){await cp(e,t,{recursive:true,dereference:true,filter:r=>!Do.has(basename(r))});}async function bd(e,t,r){let n=$t(e.name),o=Dt(t),i=join(o,n);if(!Wa(o,i))return {skill:e.name,success:false,path:i,error:`Unsafe install path: "${i}" escapes skills directory`};try{await rm(i,{recursive:!0,force:!0}),await mkdir(i,{recursive:!0}),await Id(e.path,i);let c=sn(r)??r.url;return await el(n,{source:c,sourceType:r.type,sourceUrl:r.url,ref:r.ref,skillPath:r.subpath},t),{skill:e.name,success:!0,path:i}}catch(s){return {skill:e.name,success:false,path:i,error:s instanceof Error?s.message:String(s)}}}async function nl(e,t){let r=on(e),n;try{let o;if(r.type==="local"){if(!r.localPath||!existsSync(r.localPath))return {source:e,results:[],discovered:0,installed:0,failed:0};o=r.localPath;}else n=await an(r.url,r.ref),o=n;let i=await pn(o,r.subpath),s=[...t.skillFilter??[]];r.skillFilter&&s.push(r.skillFilter);let c=s.length>0?Xa(i,s):i,a=[],l=r.ref??"latest";for(let u of c){let g=Date.now(),v=await bd(u,t.scope,r);a.push(v);let d=Date.now()-g;v.success?await wd(u.name,t.scope,l,d):await xd(u.name,new Error(v.error??"Unknown error"));}return {source:e,results:a,discovered:i.length,installed:a.filter(u=>u.success).length,failed:a.filter(u=>!u.success).length}}finally{n&&await ln(n).catch(()=>{});}}var kd=S("skills");async function Cd(e){try{await b(x.CLI_TOOL_UNINSTALLED,{tool_id:e,tool_type:"skill",source:"external",interface:A().interfaceType});}catch(t){kd.warn(`Failed to send skill uninstall metrics: ${String(t)}`);}}async function $d(e){let t=createInterface({input:process.stdin,output:process.stdout});return new Promise(r=>{t.question(`${e} (y/N) `,n=>{t.close(),r(n.trim().toLowerCase()==="y");});})}async function Ad(e){let t=on(e),r;try{let n;if(t.type==="local"){if(!t.localPath)return k("Invalid local path."),1;n=t.localPath;}else I(`Fetching skills from ${p(e)}...`),r=await an(t.url,t.ref),n=r;let o=await pn(n,t.subpath);if(o.length===0)return I("No skills found in this source."),0;let s=sn(t)??p(e);I(`Found ${o.length} skill(s) in ${s}:
 `);for(let c of o){let a=p(c.name),l=p(c.description);process.stdout.write(`  ${C.bold(a)}  ${C.dim(l)}
 `);}return process.stdout.write(`
-`),0}catch(n){return n instanceof Xe?k(n.message):k(n instanceof Error?n.message:String(n)),1}finally{r&&await ln(r).catch(()=>{});}}function $d(e){for(let r of e.results){let n=p(r.skill);if(r.success){let o=relative(process.cwd(),r.path);V(`${n} installed ${C.dim(`\u2192 ${o}/`)}`);}else k(`${n}: ${p(r.error??"unknown error")}`);}process.stdout.write(`
-`);let t=e.source;e.installed>0&&I(`Installed ${e.installed} of ${e.discovered} skill(s) from ${p(t)}`),e.failed>0&&k(`${e.failed} skill(s) failed to install`),e.results.length===0&&e.discovered===0?I("No skills found in this source."):e.results.length===0&&e.discovered>0&&I(`Found ${e.discovered} skill(s) but none matched the filter. Use --list to see available skills.`);}async function il(e,t){if(t.list)return Cd(e);let r=t.global?"global":"project";try{let n=await nl(e,{scope:r,skillFilter:t.skill,yes:t.yes});return $d(n),n.failed>0?1:0}catch(n){return n instanceof Xe?k(n.message):k(n instanceof Error?n.message:String(n)),1}}async function sl(e){let t=Dt(e),r=[];try{let n=await readdir(t,{withFileTypes:!0});for(let o of n){if(!o.isDirectory())continue;let i=join(t,o.name),s=join(i,"SKILL.md");try{if(!(await stat(s)).isFile())continue}catch{continue}let c=await ar(s);c?r.push({name:c.name,description:c.description,path:i}):r.push({name:o.name,description:"(no metadata)",path:i});}}catch{}return r}async function al(e){let t=e.global?"global":"project",r=await sl(t),n=await dn(t);if(e.json){let i=r.map(s=>({name:s.name,description:s.description,path:s.path,source:n.skills[$t(s.name)]?.source}));return bt(i),0}if(r.length===0)return I(`No skills installed (${t==="global"?"global":"project"} scope).`),0;I(`${t==="global"?"Global":"Project"} skills (${r.length}):
+`),0}catch(n){return n instanceof Xe?k(n.message):k(n instanceof Error?n.message:String(n)),1}finally{r&&await ln(r).catch(()=>{});}}function Ld(e){for(let r of e.results){let n=p(r.skill);if(r.success){let o=relative(process.cwd(),r.path);V(`${n} installed ${C.dim(`\u2192 ${o}/`)}`);}else k(`${n}: ${p(r.error??"unknown error")}`);}process.stdout.write(`
+`);let t=e.source;e.installed>0&&I(`Installed ${e.installed} of ${e.discovered} skill(s) from ${p(t)}`),e.failed>0&&k(`${e.failed} skill(s) failed to install`),e.results.length===0&&e.discovered===0?I("No skills found in this source."):e.results.length===0&&e.discovered>0&&I(`Found ${e.discovered} skill(s) but none matched the filter. Use --list to see available skills.`);}async function il(e,t){if(t.list)return Ad(e);let r=t.global?"global":"project";try{let n=await nl(e,{scope:r,skillFilter:t.skill,yes:t.yes});return Ld(n),n.failed>0?1:0}catch(n){return n instanceof Xe?k(n.message):k(n instanceof Error?n.message:String(n)),1}}async function sl(e){let t=Dt(e),r=[];try{let n=await readdir(t,{withFileTypes:!0});for(let o of n){if(!o.isDirectory())continue;let i=join(t,o.name),s=join(i,"SKILL.md");try{if(!(await stat(s)).isFile())continue}catch{continue}let c=await ar(s);c?r.push({name:c.name,description:c.description,path:i}):r.push({name:o.name,description:"(no metadata)",path:i});}}catch{}return r}async function al(e){let t=e.global?"global":"project",r=await sl(t),n=await dn(t);if(e.json){let i=r.map(s=>({name:s.name,description:s.description,path:s.path,source:n.skills[$t(s.name)]?.source}));return bt(i),0}if(r.length===0)return I(`No skills installed (${t==="global"?"global":"project"} scope).`),0;I(`${t==="global"?"Global":"Project"} skills (${r.length}):
 `);for(let i of r){let s=n.skills[$t(i.name)]?.source,c=p(i.name),a=p(i.description),l=a.length>80?a.slice(0,77)+"...":a,u=s?C.dim(` (${s})`):"";process.stdout.write(`  ${C.bold(c)}${u}
 `),process.stdout.write(`  ${C.dim(l)}
 `);}return 0}async function ll(e,t){let r=t.global?"global":"project";if(!e){let s=await sl(r);if(s.length===0)return I("No skills installed."),0;I("Installed skills:");for(let c of s)process.stdout.write(`  - ${p(c.name)}
 `);return process.stdout.write(`
-`),I("Specify a skill name to remove: flow skills remove <name>"),1}let n=$t(e),o=Dt(r),i=join(o,n);try{await stat(i);}catch{return k(`Skill "${p(e)}" is not installed.`),1}if(!t.force&&!await kd(`Remove skill "${p(n)}"?`))return I("Cancelled."),0;try{return await rm(i,{recursive:!0,force:!0}),await tl(n,r),await Td(n),V(`Skill "${p(n)}" removed.`),0}catch(s){return k(`Failed to remove skill: ${s instanceof Error?s.message:String(s)}`),1}}function cl(e){let t=new Command;t.name("flow").description("FlowSetup CLI \u2014 Manage Flow plugins in your Claude Code").version(`@flow/cli v${Be}`,"-V, --version","Display the CLI version").addHelpText("after",`
+`),I("Specify a skill name to remove: flow skills remove <name>"),1}let n=$t(e),o=Dt(r),i=join(o,n);try{await stat(i);}catch{return k(`Skill "${p(e)}" is not installed.`),1}if(!t.force&&!await $d(`Remove skill "${p(n)}"?`))return I("Cancelled."),0;try{return await rm(i,{recursive:!0,force:!0}),await tl(n,r),await Cd(n),V(`Skill "${p(n)}" removed.`),0}catch(s){return k(`Failed to remove skill: ${s instanceof Error?s.message:String(s)}`),1}}function cl(e){let t=new Command;t.name("flow").description("FlowSetup CLI \u2014 Manage Flow plugins in your Claude Code").version(`@flow/cli v${Be}`,"-V, --version","Display the CLI version").addHelpText("after",`
 Without arguments, opens the interactive interface (TUI).
 Use 'flow <command> --help' for details on each command.`).action(async()=>{await e();});let r=new Command("setup").description("Configure the CLI by detecting Claude Code credentials");r.command("init").description("Initialize the Flow CLI configuration").addHelpText("after",`
 Examples:
@@ -248,4 +253,4 @@ Examples:
   $ flow skills remove pr-review
   $ flow skills remove pr-review -g --force`).action(async(a,l)=>{let u=await ll(a,l);process.exit(u);}),t.addCommand(c),t.command("health").description("Check the CLI configuration and connectivity").addHelpText("after",`
 Examples:
-  $ flow health`).action(async()=>{let a=await Ba();process.exit(a);}),t}var Ld=cl(async()=>{oe("tui"),di("tui"),mi(),process.on("SIGINT",()=>{Ut("sigint").finally(()=>process.exit(130));}),process.on("SIGTERM",()=>{Ut("sigterm").finally(()=>process.exit(143));}),await Ia(),render(jsx(ba,{}),{alternateScreen:true,exitOnCtrlC:false});});Ld.parse();
+  $ flow health`).action(async()=>{let a=await Ba();process.exit(a);}),t}var Md=cl(async()=>{oe("tui"),di("tui"),mi(),process.on("SIGINT",()=>{Ut("sigint").finally(()=>process.exit(130));}),process.on("SIGTERM",()=>{Ut("sigterm").finally(()=>process.exit(143));}),await Ia(),render(jsx(ba,{}),{alternateScreen:true,exitOnCtrlC:false});});Md.parse();

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@ciandt-flow/cli",
-  "version": "1.4.1-beta.168",
+  "version": "1.4.1-beta.172",
   "description": "TUI for browsing and installing Claude Code plugins from the Flow ecosystem",
   "type": "module",
   "main": "dist/index.js",