@floomhq/floom 1.0.63 → 2.0.0

package/dist/secrets.js

@@ -1,119 +0,0 @@
-const SECRET_PATTERNS = [
-    { label: "OpenAI API key", regex: /\bsk-proj-[A-Za-z0-9_-]{20,}\b/g },
-    { label: "OpenAI API key", regex: /\bsk-[A-Za-z0-9]{32,}\b/g },
-    { label: "Anthropic API key", regex: /\bsk-ant-[A-Za-z0-9_-]{20,}\b/g },
-    { label: "Google API key", regex: /\bAIza[0-9A-Za-z_-]{25,}\b/g },
-    { label: "GitHub token", regex: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{30,}\b/g },
-    { label: "GitHub token", regex: /\bgithub_pat_[A-Za-z0-9_]{40,}\b/g },
-    { label: "Supabase access token", regex: /\bsbp_[A-Za-z0-9]{30,}\b/g },
-    { label: "Stripe secret key", regex: /\bsk_(?:live|test)_[A-Za-z0-9]{20,}\b/g },
-    { label: "Slack token", regex: /\bxox[baprs]-[A-Za-z0-9-]{20,}\b/g },
-    { label: "AWS access key", regex: /\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/g },
-    { label: "Private key", regex: /-----BEGIN (?:RSA |EC |OPENSSH |)PRIVATE KEY-----/g },
-];
-const GENERIC_ASSIGNMENT_RE = /\b(?:api[_-]?key|secret|access[_-]?token|auth[_-]?token|bearer[_-]?token)\b\s*[:=]\s*["']?([A-Za-z0-9_./+=-]{24,})["']?/gi;
-const PROVIDER_LIKE_ASSIGNMENT_RE = /\b(?:api[_-]?key|secret|access[_-]?token|auth[_-]?token|bearer[_-]?token)\b\s*[:=]\s*["']?((?:sk|pk|rk)-[A-Za-z0-9_-]{8,}|sbp_[A-Za-z0-9]{12,}|xox[baprs]-[A-Za-z0-9-]{12,})["']?/gi;
-const PLACEHOLDER_RE = /(?:^|[_./+=-])(?:your|example|sample|placeholder|replace|changeme|todo|xxx|test|demo|dummy|fake|mock|staging|dev|local|redacted)(?:$|[_./+=-])/i;
-const PROMPT_INJECTION_PATTERNS = [
-    { label: "Prompt injection instruction", regex: /\bignore (?:all )?(?:previous|prior|above|earlier) instructions\b/gi },
-    { label: "Prompt injection instruction", regex: /\bdisregard (?:all )?(?:previous|prior|above|earlier) instructions\b/gi },
-    { label: "Prompt injection instruction", regex: /\bforget (?:all )?(?:previous|prior|above|earlier) instructions\b/gi },
-    { label: "Prompt injection instruction", regex: /\boverride (?:the )?(?:system|developer|safety) instructions\b/gi },
-    { label: "System prompt extraction", regex: /\b(?:reveal|print|show|dump|expose|leak) (?:the )?(?:system prompt|developer message|hidden instructions)\b/gi },
-];
-const DATA_EXFILTRATION_PATTERNS = [
-    { label: "Data exfiltration instruction", regex: /\b(?:send|post|upload|exfiltrate|copy) (?:[^.\n]{0,80})\b(?:api keys?|tokens?|secrets?|environment variables|\.env|credentials)\b(?:[^.\n]{0,120})\b(?:to|into) https?:\/\//gi },
-    { label: "Credential harvesting instruction", regex: /\b(?:collect|harvest|steal|extract) (?:[^.\n]{0,80})\b(?:api keys?|tokens?|secrets?|environment variables|\.env|credentials)\b/gi },
-];
-function redact(value) {
-    if (value.length <= 12)
-        return "[redacted]";
-    return `${value.slice(0, 4)}...${value.slice(-4)}`;
-}
-function lineNumberAt(input, index) {
-    let line = 1;
-    for (let i = 0; i < index; i++) {
-        if (input.charCodeAt(i) === 10)
-            line++;
-    }
-    return line;
-}
-function pushFinding(findings, seen, label, line, value) {
-    const key = `${label}:${line}:${value}`;
-    if (seen.has(key))
-        return;
-    seen.add(key);
-    findings.push({ label, line, preview: redact(value) });
-}
-function isDocumentedEnvReference(value) {
-    return /\b(?:process\.env|import\.meta\.env|os\.environ)\b/.test(value);
-}
-export function detectSecrets(input) {
-    const findings = [];
-    const seen = new Set();
-    for (const pattern of SECRET_PATTERNS) {
-        pattern.regex.lastIndex = 0;
-        for (const match of input.matchAll(pattern.regex)) {
-            const value = match[0] ?? "";
-            pushFinding(findings, seen, pattern.label, lineNumberAt(input, match.index ?? 0), value);
-        }
-    }
-    GENERIC_ASSIGNMENT_RE.lastIndex = 0;
-    for (const match of input.matchAll(GENERIC_ASSIGNMENT_RE)) {
-        const value = match[1] ?? "";
-        if (!value || PLACEHOLDER_RE.test(value))
-            continue;
-        if (isDocumentedEnvReference(value))
-            continue;
-        pushFinding(findings, seen, "Possible secret assignment", lineNumberAt(input, match.index ?? 0), value);
-    }
-    PROVIDER_LIKE_ASSIGNMENT_RE.lastIndex = 0;
-    for (const match of input.matchAll(PROVIDER_LIKE_ASSIGNMENT_RE)) {
-        const value = match[1] ?? "";
-        if (!value)
-            continue;
-        if (isDocumentedEnvReference(value))
-            continue;
-        pushFinding(findings, seen, "Provider-like secret assignment", lineNumberAt(input, match.index ?? 0), value);
-    }
-    return findings.sort((a, b) => a.line - b.line || a.label.localeCompare(b.label));
-}
-function detectPatternFindings(input, patterns, category) {
-    const findings = [];
-    const seen = new Set();
-    for (const pattern of patterns) {
-        pattern.regex.lastIndex = 0;
-        for (const match of input.matchAll(pattern.regex)) {
-            const value = (match[0] ?? "").replace(/\s+/g, " ").trim();
-            const key = `${pattern.label}:${match.index ?? 0}:${value}`;
-            if (seen.has(key))
-                continue;
-            seen.add(key);
-            findings.push({
-                label: pattern.label,
-                line: lineNumberAt(input, match.index ?? 0),
-                preview: redact(value),
-                severity: "high",
-                category,
-            });
-        }
-    }
-    return findings;
-}
-export function detectSkillSecurityFindings(input) {
-    const secretFindings = detectSecrets(input).map((finding) => ({
-        ...finding,
-        severity: "high",
-        category: "secret",
-    }));
-    return [
-        ...secretFindings,
-        ...detectPatternFindings(input, PROMPT_INJECTION_PATTERNS, "prompt_injection"),
-        ...detectPatternFindings(input, DATA_EXFILTRATION_PATTERNS, "data_exfiltration"),
-    ].sort((a, b) => a.line - b.line || a.label.localeCompare(b.label));
-}
-export function formatSecurityFindings(findings, limit = 5) {
-    const shown = findings.slice(0, limit).map((finding) => (`line ${finding.line}: ${finding.label} (${finding.preview})`));
-    const more = findings.length > shown.length ? `\n...and ${findings.length - shown.length} more.` : "";
-    return `${shown.join("\n")}${more}`;
-}

package/dist/setup.js

@@ -1,301 +0,0 @@
-import { access, lstat, mkdir, readFile, writeFile } from "node:fs/promises";
-import { dirname, join, resolve } from "node:path";
-import { homedir } from "node:os";
-import { createInterface } from "node:readline/promises";
-import { stdin as input, stdout as output } from "node:process";
-import { FloomError } from "./errors.js";
-import { c, symbols } from "./ui.js";
-import { targetLabel } from "./targets.js";
-import { readConfig, resolveApiUrl } from "./config.js";
-import { getJson } from "./lib/api.js";
-const START_MARKER = "<!-- FLOOM SETUP START -->";
-const END_MARKER = "<!-- FLOOM SETUP END -->";
-const CLOUD_START_MARKER = "<!-- FLOOM CLOUD INSTRUCTIONS START -->";
-const CLOUD_END_MARKER = "<!-- FLOOM CLOUD INSTRUCTIONS END -->";
-const CLI_COMMAND = "npx -y @floomhq/floom";
-const INSTRUCTION_FILES = {
-    claude: { filename: "CLAUDE.md" },
-    codex: { filename: "AGENTS.md" },
-};
-function cloudInstructionBody(target, profile) {
-    if (!profile)
-        return "";
-    const base = profile.body_md.trim();
-    const override = profile.target_overrides?.[target]?.trim();
-    const body = [base, override].filter(Boolean).join("\n\n");
-    if (!body)
-        return "";
-    return [
-        CLOUD_START_MARKER,
-        `<!-- Floom profile version ${profile.version}; updated ${profile.updated_at} -->`,
-        "",
-        body,
-        CLOUD_END_MARKER,
-    ].join("\n");
-}
-function floomAgentInstructions(target, profile) {
-    const addCommand = `${CLI_COMMAND} add <slug-or-url> --target ${target}`;
-    const cloudBody = cloudInstructionBody(target, profile);
-    return `${START_MARKER}
-## Floom
-
-- Before recreating agent behavior from scratch, check Floom for reusable skills.
-- Search or inspect skills with \`${CLI_COMMAND} search <query>\`, \`${CLI_COMMAND} info <slug-or-url>\`, and \`${CLI_COMMAND} list\`.
-- Add shared skills with \`${addCommand}\`; public and unlisted links do not require a Floom account.
-- Use the installed \`floom-find-skills\` router skill, Floom search, or MCP lookup before loading local files. Do not enumerate every cached skill into model context.
-- \`${CLI_COMMAND} sync --target ${target}\`, \`${CLI_COMMAND} watch --push --target ${target}\`, and \`@floomhq/floom-mcp-sync\` keep saved, published, and subscribed library skills current in the Floom cache; review conflicts before relying on synced output.
-${cloudBody ? `\n${cloudBody}` : ""}
-${END_MARKER}`;
-}
-async function fileExists(path) {
-    try {
-        await access(path);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-async function readIfExists(path) {
-    if (!(await fileExists(path)))
-        return null;
-    const stat = await lstat(path);
-    if (stat.isSymbolicLink()) {
-        throw new FloomError("Refusing to update an instruction file that is a symbolic link.", `Inspect ${path}, then pass a regular file path.`);
-    }
-    if (!stat.isFile()) {
-        throw new FloomError("Instruction target is not a file.", path);
-    }
-    return readFile(path, "utf8");
-}
-function parseTargetFromFile(file) {
-    const upper = file.toUpperCase();
-    if (upper.endsWith("CLAUDE.MD"))
-        return "claude";
-    if (upper.endsWith("AGENTS.MD"))
-        return "codex";
-    if (upper.endsWith(".MDC") || upper.includes(`${join(".cursor", "rules").toUpperCase()}`))
-        return "cursor";
-    if (upper.includes(`${join(".config", "opencode").toUpperCase()}`))
-        return "opencode";
-    if (upper.includes(`${join(".kimi", "agents").toUpperCase()}`))
-        return "kimi";
-    return undefined;
-}
-async function findUp(filename) {
-    let dir = process.cwd();
-    const home = resolve(homedir());
-    while (true) {
-        const candidate = join(dir, filename);
-        if (await fileExists(candidate))
-            return candidate;
-        const parent = dirname(dir);
-        if (dir === parent || dir === home)
-            return null;
-        dir = parent;
-    }
-}
-async function detectTarget(opts) {
-    const agent = opts.target ?? (opts.file ? parseTargetFromFile(opts.file) : undefined);
-    if (opts.file) {
-        if (!agent) {
-            throw new FloomError("Cannot infer agent target from that file name.", "Pass `--target claude`, `--target codex`, `--target cursor`, `--target opencode`, or `--target kimi`.");
-        }
-        return {
-            agent,
-            label: targetLabel(agent),
-            path: resolve(process.cwd(), opts.file),
-        };
-    }
-    if (agent) {
-        if (opts.global && agent === "claude") {
-            return {
-                agent,
-                label: targetLabel(agent),
-                path: join(homedir(), ".claude", "CLAUDE.md"),
-            };
-        }
-        if (opts.global && agent === "codex") {
-            return {
-                agent,
-                label: targetLabel(agent),
-                path: join(process.env.CODEX_HOME ?? join(homedir(), ".codex"), "AGENTS.md"),
-            };
-        }
-        if (agent === "cursor") {
-            return {
-                agent,
-                label: targetLabel(agent),
-                path: join(homedir(), ".cursor", "rules", "floom.mdc"),
-            };
-        }
-        if (agent === "opencode") {
-            return {
-                agent,
-                label: targetLabel(agent),
-                path: join(homedir(), ".config", "opencode", "floom.md"),
-            };
-        }
-        if (agent === "kimi") {
-            return {
-                agent,
-                label: targetLabel(agent),
-                path: join(homedir(), ".kimi", "agents", "floom-system.md"),
-            };
-        }
-        const existing = await findUp(INSTRUCTION_FILES[agent].filename);
-        return {
-            agent,
-            label: targetLabel(agent),
-            path: existing ?? resolve(process.cwd(), INSTRUCTION_FILES[agent].filename),
-        };
-    }
-    const claude = await findUp(INSTRUCTION_FILES.claude.filename);
-    const codex = await findUp(INSTRUCTION_FILES.codex.filename);
-    if (claude && codex) {
-        throw new FloomError("Found both Claude Code and Codex instruction files.", "Pass an explicit `--target`.");
-    }
-    if (claude)
-        return { agent: "claude", label: targetLabel("claude"), path: claude };
-    if (codex)
-        return { agent: "codex", label: targetLabel("codex"), path: codex };
-    throw new FloomError("No agent instruction file found.", `Run \`${CLI_COMMAND} setup --target claude --yes\`, \`${CLI_COMMAND} setup --target codex --yes\`, \`${CLI_COMMAND} setup --target cursor --yes\`, \`${CLI_COMMAND} setup --target opencode --yes\`, or \`${CLI_COMMAND} setup --target kimi --yes\`.`);
-}
-function renderPreview(target, existing, profile) {
-    const action = existing === null ? "create" : "append";
-    return [
-        "",
-        `${symbols.bullet}  Floom setup preview for ${c.bold(target.label)}`,
-        `   ${c.dim("Target:")} ${target.path}`,
-        `   ${c.dim("Action:")} ${action}`,
-        "",
-        floomAgentInstructions(target.agent, profile),
-        "",
-        `${c.dim("MCP setup guidance:")} run ${c.cyan(`${CLI_COMMAND} mcp`)} to print local agent commands.`,
-        "",
-    ].join("\n");
-}
-function renderInstructions(target, existing, profile) {
-    const body = floomAgentInstructions(target, profile);
-    if (target === "cursor" && existing === null) {
-        return [
-            "---",
-            "description: Use Floom skills and sync",
-            "alwaysApply: true",
-            "---",
-            "",
-            body,
-            "",
-        ].join("\n");
-    }
-    return body;
-}
-function replaceExistingBlock(existing, instructions) {
-    const start = existing.indexOf(START_MARKER);
-    const end = existing.indexOf(END_MARKER, start);
-    if (start < 0 || end < 0)
-        return null;
-    const afterEnd = end + END_MARKER.length;
-    const prefix = existing.slice(0, start).replace(/\s*$/, "");
-    const suffix = existing.slice(afterEnd).replace(/^\s*/, "").replace(/\s*$/, "");
-    return [...(prefix ? [prefix] : []), instructions, ...(suffix ? [suffix] : [])].join("\n\n").replace(/\s*$/, "\n");
-}
-async function loadCloudProfile() {
-    const cfg = await readConfig();
-    if (!cfg)
-        return null;
-    try {
-        const apiUrl = resolveApiUrl(cfg);
-        const payload = await getJson(`${apiUrl}/api/v1/me/instructions`, "load cloud instruction profile", cfg.accessToken);
-        return payload.profile;
-    }
-    catch {
-        return null;
-    }
-}
-async function ensureOpencodeInstructionReference(instructionPath) {
-    const configPath = join(homedir(), ".config", "opencode", "opencode.json");
-    const reference = `{file:${instructionPath.replace(homedir(), "~")}}`;
-    let parsed = {};
-    const existing = await readIfExists(configPath);
-    if (existing) {
-        try {
-            parsed = JSON.parse(existing);
-        }
-        catch {
-            throw new FloomError("OpenCode config is not valid JSON.", configPath);
-        }
-    }
-    const current = Array.isArray(parsed.instructions) ? parsed.instructions : [];
-    if (current.includes(reference))
-        return;
-    parsed.instructions = [...current.filter((item) => typeof item === "string"), reference];
-    await mkdir(dirname(configPath), { recursive: true });
-    await writeFile(configPath, `${JSON.stringify(parsed, null, 2)}\n`, "utf8");
-}
-async function confirmWrite(target, existing) {
-    if (!process.stdin.isTTY) {
-        throw new FloomError("Refusing to update agent instructions without confirmation in non-interactive mode.", "Pass `--yes` to write, or `--dry-run` to preview.");
-    }
-    const action = existing === null ? "Create" : "Append to";
-    const rl = createInterface({ input, output });
-    try {
-        const answer = (await rl.question(`   ${action} ${target.path} for ${target.label}? ${c.dim("(y/N)")} `)).trim().toLowerCase();
-        return answer === "y" || answer === "yes";
-    }
-    finally {
-        rl.close();
-    }
-}
-export async function setupAgent(opts) {
-    const target = await detectTarget(opts);
-    const existing = await readIfExists(target.path);
-    const profile = opts.global ? await loadCloudProfile() : null;
-    const instructions = renderInstructions(target.agent, existing, profile);
-    if (existing?.includes(START_MARKER) && existing.includes(END_MARKER)) {
-        const replaced = replaceExistingBlock(existing, instructions);
-        if (replaced === null || replaced === existing) {
-            process.stdout.write(`\n${symbols.ok}  Floom instructions already present in ${c.bold(target.path)}\n\n`);
-            return;
-        }
-        if (opts.dryRun) {
-            process.stdout.write(renderPreview(target, existing, profile));
-            return;
-        }
-        await writeFile(target.path, replaced, "utf8");
-        process.stdout.write(`\n${symbols.ok}  Updated Floom instructions in ${c.bold(target.path)}\n\n`);
-        return;
-    }
-    if (opts.dryRun) {
-        process.stdout.write(renderPreview(target, existing, profile));
-        return;
-    }
-    if (!opts.yes) {
-        process.stdout.write(renderPreview(target, existing, profile));
-        const ok = await confirmWrite(target, existing);
-        if (!ok) {
-            process.stdout.write(`\n${c.dim("Cancelled. Nothing was written.")}\n\n`);
-            return;
-        }
-    }
-    await mkdir(dirname(target.path), { recursive: true });
-    const next = existing === null
-        ? `${instructions}\n`
-        : `${existing.replace(/\s*$/, "")}\n\n${instructions}\n`;
-    if (existing === null) {
-        await writeFile(target.path, next, { encoding: "utf8", flag: "wx" }).catch((err) => {
-            if (err instanceof Error && "code" in err && err.code === "EEXIST") {
-                throw new FloomError("Instruction file appeared while setup was running.", `Re-run \`${CLI_COMMAND} setup\` so Floom can inspect the current file before writing.`);
-            }
-            throw err;
-        });
-    }
-    else {
-        await writeFile(target.path, next, "utf8");
-    }
-    if (target.agent === "opencode") {
-        await ensureOpencodeInstructionReference(target.path);
-    }
-    process.stdout.write(`\n${symbols.ok}  Added Floom instructions to ${c.bold(target.path)}\n`);
-    process.stdout.write(`   ${c.dim("MCP setup guidance:")} ${c.cyan(`${CLI_COMMAND} mcp`)}\n\n`);
-}

package/dist/share.js

@@ -1,70 +0,0 @@
-import ora from "ora";
-import { readConfig, resolveApiUrl } from "./config.js";
-import { friendlyHttp, friendlyNetwork, FloomError } from "./errors.js";
-import { c, symbols } from "./ui.js";
-function slugFromInput(input) {
-    const trimmed = input.trim();
-    try {
-        const url = new URL(trimmed);
-        const last = url.pathname.split("/").filter(Boolean).at(-1) ?? "";
-        return last.replace(/\.(md|json)$/i, "");
-    }
-    catch {
-        return trimmed.replace(/\.(md|json)$/i, "");
-    }
-}
-async function readJson(res) {
-    return (await res.json());
-}
-export async function share(opts) {
-    const cfg = await readConfig();
-    if (!cfg) {
-        throw new FloomError("Not signed in.", "Run `npx -y @floomhq/floom login` first.");
-    }
-    const slug = slugFromInput(opts.slug);
-    if (!slug) {
-        throw new FloomError("Missing skill slug.", "Try: `npx -y @floomhq/floom share <slug> --list`");
-    }
-    const apiUrl = resolveApiUrl(cfg);
-    const endpoint = `${apiUrl}/api/skills/${encodeURIComponent(slug)}/share`;
-    const spinner = ora({ text: c.dim("Updating sharing..."), color: "yellow" }).start();
-    let res;
-    try {
-        if (opts.kind === "list") {
-            spinner.text = c.dim("Loading sharing...");
-            res = await fetch(endpoint, {
-                headers: { authorization: `Bearer ${cfg.accessToken}` },
-            });
-        }
-        else {
-            res = await fetch(endpoint, {
-                method: "PATCH",
-                headers: {
-                    authorization: `Bearer ${cfg.accessToken}`,
-                    "content-type": "application/json",
-                },
-                body: JSON.stringify({ add: opts.add, remove: opts.remove }),
-            });
-        }
-    }
-    catch (err) {
-        spinner.stop();
-        throw friendlyNetwork(err);
-    }
-    if (!res.ok) {
-        spinner.stop();
-        throw friendlyHttp(res.status, "update sharing");
-    }
-    const data = await readJson(res);
-    spinner.stop();
-    const emails = data.shared_with_emails;
-    process.stdout.write(`\n${symbols.ok}  Sharing for ${c.bold(data.slug)}\n\n`);
-    if (emails.length === 0) {
-        process.stdout.write(`   ${c.dim("No emails added.")}\n\n`);
-        return;
-    }
-    for (const email of emails) {
-        process.stdout.write(`   ${email}\n`);
-    }
-    process.stdout.write("\n");
-}

package/dist/status.js

@@ -1,181 +0,0 @@
-import { constants } from "node:fs";
-import { open, readdir } from "node:fs/promises";
-import { join } from "node:path";
-import { CONFIG_DIR, readConfig, resolveApiUrl } from "./config.js";
-import { floomFetch } from "./lib/api.js";
-import { AGENT_TARGETS, targetSkillsDir } from "./targets.js";
-import { c, symbols } from "./ui.js";
-const STATUS_CLOUD_TIMEOUT_MS = 8_000;
-async function readJsonFile(path) {
-    try {
-        const handle = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
-        try {
-            return JSON.parse(await handle.readFile("utf8"));
-        }
-        finally {
-            await handle.close();
-        }
-    }
-    catch (err) {
-        const code = err.code;
-        if (code === "ENOENT" || code === "ELOOP" || err instanceof SyntaxError)
-            return null;
-        throw err;
-    }
-}
-async function countDirectSkillPackages(root) {
-    let count = 0;
-    let entries;
-    try {
-        entries = await readdir(root, { withFileTypes: true });
-    }
-    catch (err) {
-        if (err.code === "ENOENT")
-            return 0;
-        throw err;
-    }
-    if (entries.some((entry) => entry.isFile() && entry.name === "SKILL.md"))
-        count += 1;
-    for (const entry of entries) {
-        if (!entry.isDirectory() || entry.name.startsWith("."))
-            continue;
-        try {
-            const child = await readdir(join(root, entry.name), { withFileTypes: true });
-            if (child.some((item) => item.isFile() && item.name === "SKILL.md"))
-                count += 1;
-        }
-        catch (err) {
-            if (err.code !== "ENOENT")
-                throw err;
-        }
-    }
-    return count;
-}
-function manifestCounts(manifest) {
-    const files = manifest?.files && typeof manifest.files === "object" ? Object.values(manifest.files) : [];
-    return {
-        files: files.length,
-        skills: new Set(files.map((entry) => entry.slug).filter((slug) => typeof slug === "string" && slug.length > 0)).size,
-    };
-}
-async function countCloudVisible() {
-    const cfg = await readConfig();
-    if (!cfg)
-        return { signedIn: false, total: null };
-    const apiUrl = resolveApiUrl(cfg);
-    try {
-        const url = new URL(`${apiUrl}/api/v1/me/skills`);
-        url.searchParams.set("limit", "100");
-        const res = await floomFetch(url.toString(), "load your skills", {
-            token: cfg.accessToken,
-            timeoutMs: STATUS_CLOUD_TIMEOUT_MS,
-            rateLimitRetries: 0,
-        });
-        const payload = (await res.json());
-        const sampleCount = Array.isArray(payload.skills) ? payload.skills.length : 0;
-        const hasMore = Boolean(payload.next_cursor);
-        return {
-            signedIn: true,
-            total: hasMore ? null : sampleCount,
-            sampleCount,
-            hasMore,
-        };
-    }
-    catch (err) {
-        return {
-            signedIn: true,
-            total: null,
-            error: err instanceof Error ? err.message : String(err),
-        };
-    }
-}
-async function buildStatus() {
-    const cloud = await countCloudVisible();
-    const daemonRaw = await readJsonFile(join(CONFIG_DIR, "daemon-status.json"));
-    const daemonRunning = daemonIsLive(daemonRaw);
-    const targets = {};
-    for (const target of AGENT_TARGETS) {
-        const cacheRoot = join(CONFIG_DIR, "skill-cache", target);
-        const nativeRoot = targetSkillsDir(target);
-        const cacheManifest = manifestCounts(await readJsonFile(join(cacheRoot, ".floom-cli-sync-manifest.json")));
-        const nativeManifest = manifestCounts(await readJsonFile(join(CONFIG_DIR, "native-sync-manifests", `${target}.json`)));
-        targets[target] = {
-            cache_packages: cacheManifest.skills || await countDirectSkillPackages(cacheRoot),
-            cache_manifest_files: cacheManifest.files,
-            cache_manifest_skills: cacheManifest.skills,
-            native_root: nativeRoot,
-            native_packages: nativeManifest.skills || await countDirectSkillPackages(nativeRoot),
-            native_manifest_files: nativeManifest.files,
-            native_manifest_skills: nativeManifest.skills,
-            ...(daemonRaw?.last_run?.[target] ? { daemon: daemonRaw.last_run[target] } : {}),
-        };
-    }
-    return {
-        cloud: {
-            signed_in: cloud.signedIn,
-            visible_total: cloud.total,
-            ...(cloud.sampleCount !== undefined ? { visible_sample_count: cloud.sampleCount } : {}),
-            ...(cloud.hasMore !== undefined ? { visible_has_more: cloud.hasMore } : {}),
-            ...(cloud.error ? { error: cloud.error } : {}),
-        },
-        daemon: {
-            running: daemonRunning,
-            ...(daemonRaw?.version ? { version: daemonRaw.version } : {}),
-            ...(daemonRaw?.hostname ? { hostname: daemonRaw.hostname } : {}),
-            ...(daemonRaw?.targets ? { targets: daemonRaw.targets } : {}),
-            ...(daemonRaw?.last_completed_at ? { last_completed_at: daemonRaw.last_completed_at } : {}),
-            ...(daemonRaw?.next_run_at ? { next_run_at: daemonRaw.next_run_at } : {}),
-        },
-        targets,
-        notes: [
-            "Floom cache is the synced local package store used by MCP/search/router flows.",
-            "Native harness roots stay small where the harness would otherwise preload thousands of skills.",
-            "Instruction files tell agents to use Floom search/MCP instead of enumerating every cached package.",
-        ],
-    };
-}
-function daemonIsLive(status) {
-    if (!status?.running)
-        return false;
-    if (!status.pid || status.pid < 1)
-        return false;
-    try {
-        process.kill(status.pid, 0);
-    }
-    catch {
-        return false;
-    }
-    if (!status.next_run_at || !status.interval_seconds)
-        return true;
-    const nextRun = Date.parse(status.next_run_at);
-    if (!Number.isFinite(nextRun))
-        return false;
-    const graceMs = Math.max(status.interval_seconds * 2000, 120_000);
-    return nextRun + graceMs >= Date.now();
-}
-export async function status(opts) {
-    const payload = await buildStatus();
-    if (opts.json) {
-        process.stdout.write(`${JSON.stringify(payload, null, 2)}\n`);
-        return;
-    }
-    process.stdout.write(`\n${symbols.dot}  ${c.bold("Floom status")}\n\n`);
-    process.stdout.write(`   ${c.dim("cloud signed in:")} ${payload.cloud.signed_in ? "yes" : "no"}\n`);
-    const cloudVisible = payload.cloud.visible_total ?? (payload.cloud.visible_has_more ? `${payload.cloud.visible_sample_count ?? "?"}+` : "unknown");
-    process.stdout.write(`   ${c.dim("cloud visible skills:")} ${cloudVisible}\n`);
-    if (payload.cloud.error)
-        process.stdout.write(`   ${c.dim("cloud status:")} ${payload.cloud.error}\n`);
-    process.stdout.write(`   ${c.dim("daemon:")} ${payload.daemon.running ? "running" : "not running"}${payload.daemon.version ? ` (${payload.daemon.version})` : ""}\n`);
-    if (payload.daemon.last_completed_at)
-        process.stdout.write(`   ${c.dim("last completed:")} ${payload.daemon.last_completed_at}\n`);
-    process.stdout.write("\n");
-    for (const target of AGENT_TARGETS) {
-        const row = payload.targets[target];
-        const daemon = row.daemon ? ` daemon=${row.daemon.ok ? "ok" : "error"} synced=${row.daemon.synced ?? "?"} conflicts=${row.daemon.conflicts ?? "?"}` : "";
-        process.stdout.write(`   ${c.cyan(target.padEnd(8))} cache=${row.cache_packages} native=${row.native_packages} nativeTracked=${row.native_manifest_skills}${daemon}\n`);
-    }
-    process.stdout.write("\n");
-    for (const note of payload.notes)
-        process.stdout.write(`   ${c.dim(`- ${note}`)}\n`);
-    process.stdout.write("\n");
-}