@fluid-app/fluid-cli 0.1.20 → 0.1.22

package/dist/bin/fluid.mjs

@@ -538,6 +538,72 @@ async function importPlugin(specifier) {
 	return mod["default"] ?? mod;
 }
 //#endregion
+//#region src/plugins/format-load-line.ts
+/**
+* Format one-line diagnostics naming a CLI plugin build and where it was
+* resolved from. The resolved path is the load-bearing detail: a workspace
+* build and a published copy share the same name and version, so the path is
+* the only thing that distinguishes them. See CURRENT-3218.
+*/
+function modeLabel(preferInstallation) {
+	return preferInstallation ? "installation-preferred" : "project-first";
+}
+/**
+* Render a specifier for display: `file://` URLs become absolute filesystem
+* paths; anything else is shown verbatim. Never throws — a malformed `file://`
+* specifier falls back to its raw form so a diagnostic can never turn a
+* successful load into a reported failure.
+*/
+function displaySource(importSpecifier) {
+	if (!importSpecifier.startsWith("file://")) return importSpecifier;
+	try {
+		return fileURLToPath(importSpecifier);
+	} catch {
+		return importSpecifier;
+	}
+}
+function formatPluginLoadLine(info) {
+	return `Loaded plugin ${info.name}@${info.version} from ${displaySource(info.importSpecifier)} [${modeLabel(info.preferInstallation)}]`;
+}
+function formatPluginLoadFailure(info) {
+	return `Failed to load plugin ${info.name} from ${displaySource(info.importSpecifier)} [${modeLabel(info.preferInstallation)}]: ${info.message}`;
+}
+//#endregion
+//#region src/plugins/resolve-load-path.ts
+const defaultResolver = (specifier) => import.meta.resolve(specifier);
+/**
+* Return a `file://` URL for `importSpecifier`. `file://` specifiers (already
+* resolved by discovery) pass through untouched; bare specifiers are resolved
+* via `resolve`. If resolution throws, the bare specifier is returned so a
+* diagnostic degrades gracefully rather than failing the load.
+*/
+function resolveLoadPath(importSpecifier, resolve = defaultResolver) {
+	if (importSpecifier.startsWith("file://")) return importSpecifier;
+	try {
+		return resolve(importSpecifier);
+	} catch {
+		return importSpecifier;
+	}
+}
+//#endregion
+//#region src/plugins/should-log-plugin-loads.ts
+/**
+* Decide whether to print the per-plugin "Loaded plugin …" diagnostics.
+*
+* A fluid-mono checkout resolves ~a dozen plugin packages, so emitting a line
+* for each on every command (including `--help` and tab-completion, and into
+* Mist's captured stderr dialog) is noise. The success diagnostics are gated
+* behind an explicit opt-in; load *failures* are always surfaced by the loader
+* regardless of this flag. See CURRENT-3218.
+*/
+function isTruthyFlag(value) {
+	return value === "1" || value === "true";
+}
+function shouldLogPluginLoads(argv = process.argv, env = process.env) {
+	if (argv.includes("--verbose")) return true;
+	return isTruthyFlag(env["FLUID_CLI_DEBUG"] ?? env["FLUID_CLI_VERBOSE"]);
+}
+//#endregion
 //#region src/plugins/loader.ts
 function isFluidPlugin(value) {
 	if (typeof value !== "object" || value === null) return false;
@@ -548,7 +614,8 @@ function isFluidPlugin(value) {
 * Discover, import, and register all installed plugins
 */
 async function loadPlugins(program, basePath) {
-	const discovered = discoverPlugins(basePath, void 0, { preferInstallation: process.env["FLUID_CLI_PREFER_INSTALLATION_PLUGINS"] === "1" });
+	const preferInstallation = process.env["FLUID_CLI_PREFER_INSTALLATION_PLUGINS"] === "1";
+	const discovered = discoverPlugins(basePath, void 0, { preferInstallation });
 	const { enabledPlugins } = readConfig();
 	const allowedSet = enabledPlugins !== null ? new Set(enabledPlugins) : null;
 	const plugins = allowedSet ? discovered.filter((p) => allowedSet.has(p.name)) : discovered;
@@ -558,16 +625,31 @@ async function loadPlugins(program, basePath) {
 		getAuthToken,
 		configDir: getConfigDir()
 	};
-	for (const { name, importSpecifier } of plugins) try {
-		const exported = await importPlugin(importSpecifier);
-		if (!isFluidPlugin(exported)) {
-			console.warn(chalk.yellow(`Warning: ${name} does not export a valid FluidPlugin`));
-			continue;
+	const verbose = shouldLogPluginLoads();
+	for (const { name, importSpecifier } of plugins) {
+		const source = resolveLoadPath(importSpecifier);
+		try {
+			const exported = await importPlugin(importSpecifier);
+			if (!isFluidPlugin(exported)) {
+				console.warn(chalk.yellow(`Warning: ${name} does not export a valid FluidPlugin`));
+				continue;
+			}
+			await exported.register(ctx);
+			if (verbose) console.error(chalk.dim(formatPluginLoadLine({
+				name: exported.name,
+				version: exported.version,
+				importSpecifier: source,
+				preferInstallation
+			})));
+		} catch (err) {
+			const message = err instanceof Error ? err.message : String(err);
+			console.warn(chalk.yellow(`Warning: ${formatPluginLoadFailure({
+				name,
+				importSpecifier: source,
+				preferInstallation,
+				message
+			})}`));
 		}
-		await exported.register(ctx);
-	} catch (err) {
-		const message = err instanceof Error ? err.message : String(err);
-		console.warn(chalk.yellow(`Warning: Failed to load plugin ${name}: ${message}`));
 	}
 }
 //#endregion

package/dist/bin/fluid.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"fluid.mjs","names":[],"sources":["../../src/auth/profiles.ts","../../src/commands/login.ts","../../src/commands/logout.ts","../../src/commands/whoami.ts","../../src/commands/switch.ts","../../src/plugins/discovery.ts","../../src/plugins/loader.ts","../../src/bin/fluid.ts"],"sourcesContent":["/**\n * Helpers for constructing stored auth profiles.\n */\n\nimport type { FluidProfile } from \"../config/types.js\";\n\ninterface CreateFluidProfileInput {\n  readonly name: string;\n  readonly token: string;\n  readonly companyName: string;\n  readonly baseUrl: string;\n  readonly storedAt?: string;\n}\n\nexport function createFluidProfile({\n  name,\n  token,\n  companyName,\n  baseUrl,\n  storedAt,\n}: CreateFluidProfileInput): FluidProfile {\n  return {\n    name,\n    token,\n    companyName,\n    storedAt: storedAt ?? new Date().toISOString(),\n    baseUrl,\n  };\n}\n","/**\n * fluid login — authenticate via email MFA or API token\n */\n\nimport { Command } from \"commander\";\nimport chalk from \"chalk\";\nimport prompts from \"prompts\";\nimport ora from \"ora\";\nimport {\n  validateToken,\n  sendMfa,\n  confirmMfa,\n  getFluidApiBase,\n  type CompanyChoice,\n} from \"../auth/fluid-api.js\";\nimport { createFluidProfile } from \"../auth/profiles.js\";\nimport { updateConfig, readConfig } from \"../config/config.js\";\n\nasync function confirmOverwrite(profileName: string): Promise<boolean> {\n  const existing = readConfig().profiles[profileName];\n  if (!existing) return true;\n\n  const response = await prompts({\n    type: \"confirm\",\n    name: \"overwrite\",\n    message: `Profile \"${profileName}\" already exists (${existing.companyName}). Overwrite?`,\n    initial: false,\n  });\n  return Boolean(response[\"overwrite\"]);\n}\n\nfunction storeProfile(\n  profileName: string,\n  token: string,\n  companyName: string,\n): void {\n  updateConfig((config) => ({\n    ...config,\n    activeProfile: profileName,\n    profiles: {\n      ...config.profiles,\n      [profileName]: createFluidProfile({\n        name: profileName,\n        token,\n        companyName,\n        baseUrl: getFluidApiBase(),\n      }),\n    },\n  }));\n}\n\nasync function loginWithToken(\n  token: string,\n  profileName?: string,\n): Promise<void> {\n  const spinner = ora(\"Validating token...\").start();\n  const result = await validateToken(token);\n\n  if (!result.success) {\n    spinner.fail(chalk.red(result.error.message));\n    if (result.error.details) {\n      console.log(chalk.dim(result.error.details));\n    }\n    process.exitCode = 1;\n    return;\n  }\n\n  const name = profileName ?? result.value.name;\n\n  // Stop spinner before potential interactive prompt to avoid terminal corruption\n  spinner.succeed(\n    chalk.green(`Token valid — ${chalk.bold(result.value.name)}`),\n  );\n\n  if (!(await confirmOverwrite(name))) {\n    console.log(\n      chalk.yellow(\"Login cancelled — existing profile not overwritten.\"),\n    );\n    return;\n  }\n\n  storeProfile(name, token, result.value.name);\n  console.log(\n    chalk.green(\n      `Logged in as ${chalk.bold(result.value.name)} (profile: ${chalk.bold(name)})`,\n    ),\n  );\n}\n\nasync function loginWithEmail(\n  initialEmail?: string,\n  profileName?: string,\n): Promise<void> {\n  // 1. Prompt for email\n  let email = initialEmail;\n  if (!email) {\n    const response = await prompts({\n      type: \"text\",\n      name: \"email\",\n      message: \"Enter your email\",\n    });\n    email = response[\"email\"] as string | undefined;\n    if (!email) {\n      console.log(chalk.red(\"No email provided. Aborting.\"));\n      process.exitCode = 1;\n      return;\n    }\n  }\n\n  // 2. Send MFA code\n  const sendSpinner = ora(\"Sending verification code...\").start();\n  const sendResult = await sendMfa(email);\n\n  if (!sendResult.success) {\n    sendSpinner.fail(chalk.red(sendResult.error.message));\n    if (sendResult.error.details) {\n      console.log(chalk.dim(sendResult.error.details));\n    }\n    process.exitCode = 1;\n    return;\n  }\n\n  const expiresAt = new Date(sendResult.value.expiresAt);\n  const expiresInMs = expiresAt.getTime() - Date.now();\n  const expiresInMin = Math.round(expiresInMs / 1000 / 60);\n  const expiryNote =\n    expiresInMin > 0\n      ? `expires in ~${expiresInMin} min`\n      : \"code may expire soon — check your email quickly\";\n  sendSpinner.succeed(\n    `Verification code sent — check your email (${expiryNote})`,\n  );\n\n  // 3. Prompt for verification code (retry up to 3 times on invalid code)\n  const MAX_CODE_ATTEMPTS = 3;\n  let confirmResult;\n  for (let attempt = 1; attempt <= MAX_CODE_ATTEMPTS; attempt++) {\n    const codeResponse = await prompts({\n      type: \"text\",\n      name: \"code\",\n      message: \"Enter the 6-digit code\",\n    });\n    const code = codeResponse[\"code\"] as string | undefined;\n    if (!code) {\n      console.log(chalk.red(\"No code provided. Aborting.\"));\n      process.exitCode = 1;\n      return;\n    }\n    if (!/^\\d{6}$/.test(code)) {\n      console.log(chalk.red(\"Code must be exactly 6 digits.\"));\n      if (attempt < MAX_CODE_ATTEMPTS) continue;\n      console.log(chalk.red(\"Too many invalid attempts. Aborting.\"));\n      process.exitCode = 1;\n      return;\n    }\n\n    const confirmSpinner = ora(\"Verifying code...\").start();\n    confirmResult = await confirmMfa(sendResult.value.uuid, code);\n\n    if (confirmResult.success) {\n      confirmSpinner.succeed(\"Verified\");\n      break;\n    }\n\n    // Retryable: wrong code, still have attempts left\n    if (\n      confirmResult.error.code === \"INVALID_CODE\" &&\n      attempt < MAX_CODE_ATTEMPTS\n    ) {\n      confirmSpinner.fail(\n        chalk.red(\n          `${confirmResult.error.message} (attempt ${attempt}/${MAX_CODE_ATTEMPTS})`,\n        ),\n      );\n      continue;\n    }\n\n    // Non-retryable (expired, unreachable, etc.) or final attempt\n    confirmSpinner.fail(chalk.red(confirmResult.error.message));\n    if (confirmResult.error.details) {\n      console.log(chalk.dim(confirmResult.error.details));\n    }\n    process.exitCode = 1;\n    return;\n  }\n\n  if (!confirmResult?.success) return;\n\n  const { companies } = confirmResult.value;\n\n  if (companies.length === 0) {\n    console.log(chalk.red(\"No companies found for this account.\"));\n    process.exitCode = 1;\n    return;\n  }\n\n  // 4. Select company (auto-select if only one)\n  let selected: CompanyChoice;\n  if (companies.length === 1) {\n    const first = companies[0];\n    if (!first) {\n      console.log(chalk.red(\"No companies found for this account.\"));\n      process.exitCode = 1;\n      return;\n    }\n    selected = first;\n  } else {\n    // Key on `c.id`, not the array index, and resolve via `.find` —\n    // `prompts` autocomplete returns the raw typed string on Enter when\n    // the user hasn't arrow-key-highlighted a filtered choice, so an\n    // array-index lookup ends up asking for `companies[\"Fluid\"]` and\n    // failing with \"Invalid selection\". Same shape as `switch.ts`.\n    const companyChoices = companies.map((c) => ({\n      title: `${c.name} (${c.shopName})`,\n      value: c.id,\n    }));\n\n    const selectResponse = await prompts({\n      type: \"autocomplete\",\n      name: \"companyId\",\n      message: \"Select a company (type to search)\",\n      choices: companyChoices,\n      suggest: (input, choices) =>\n        Promise.resolve(\n          input\n            ? choices.filter((c) =>\n                c.title.toLowerCase().includes(input.toLowerCase()),\n              )\n            : choices,\n        ),\n    });\n\n    const companyId = selectResponse[\"companyId\"] as number | undefined;\n\n    if (companyId === undefined) {\n      console.log(chalk.red(\"No company selected. Aborting.\"));\n      process.exitCode = 1;\n      return;\n    }\n    const choice = companies.find((c) => c.id === companyId);\n    if (!choice) {\n      console.log(chalk.red(\"Invalid selection. Aborting.\"));\n      process.exitCode = 1;\n      return;\n    }\n    selected = choice;\n  }\n\n  // 5. Store profile\n  const name = profileName ?? selected.name;\n\n  if (!(await confirmOverwrite(name))) {\n    console.log(\n      chalk.yellow(\"Login cancelled — existing profile not overwritten.\"),\n    );\n    return;\n  }\n\n  storeProfile(name, selected.jwt, selected.name);\n  console.log(\n    chalk.green(\n      `Logged in as ${chalk.bold(selected.name)} (profile: ${chalk.bold(name)})`,\n    ),\n  );\n}\n\nexport const loginCommand = new Command(\"login\")\n  .description(\"Authenticate with the Fluid API\")\n  .option(\n    \"-t, --token <token>\",\n    \"API token (skips email flow). Prefer FLUID_TOKEN env var to avoid shell history exposure\",\n  )\n  .option(\"-e, --email <email>\", \"Email address for MFA login\")\n  .option(\"-n, --name <name>\", \"Profile name (defaults to company name)\")\n  .action(async (opts: { token?: string; email?: string; name?: string }) => {\n    // Accept token from env var to avoid shell history / process listing exposure\n    const token = opts.token ?? process.env[\"FLUID_TOKEN\"];\n    if (token) {\n      if (opts.token) {\n        console.log(\n          chalk.yellow(\n            \"Warning: token passed via --token flag is visible in shell history and process listings. \" +\n              \"Prefer the FLUID_TOKEN environment variable.\",\n          ),\n        );\n      }\n      await loginWithToken(token, opts.name);\n    } else {\n      await loginWithEmail(opts.email, opts.name);\n    }\n  });\n","/**\n * fluid logout — remove stored auth profile(s)\n */\n\nimport { Command } from \"commander\";\nimport chalk from \"chalk\";\nimport { readConfig, writeConfig } from \"../config/config.js\";\n\nexport const logoutCommand = new Command(\"logout\")\n  .description(\"Remove stored authentication\")\n  .option(\"-a, --all\", \"Remove all profiles\")\n  .action((opts: { all?: boolean }) => {\n    const config = readConfig();\n\n    if (opts.all) {\n      writeConfig({\n        ...config,\n        activeProfile: null,\n        profiles: {},\n      });\n      console.log(chalk.green(\"All profiles removed.\"));\n      return;\n    }\n\n    if (!config.activeProfile) {\n      console.log(chalk.yellow(\"Not currently logged in.\"));\n      return;\n    }\n\n    const profileName = config.activeProfile;\n    const { [profileName]: _, ...remainingProfiles } = config.profiles;\n\n    // Pick the first remaining profile as active, or null\n    const nextActive = Object.keys(remainingProfiles)[0] ?? null;\n\n    writeConfig({\n      ...config,\n      activeProfile: nextActive,\n      profiles: remainingProfiles,\n    });\n\n    console.log(\n      chalk.green(`Logged out of profile ${chalk.bold(profileName)}.`),\n    );\n    if (nextActive) {\n      console.log(chalk.dim(`Switched to profile ${nextActive}.`));\n    }\n  });\n","/**\n * fluid whoami — show current auth profile and validate against API\n */\n\nimport { Command } from \"commander\";\nimport chalk from \"chalk\";\nimport ora from \"ora\";\nimport { getActiveProfile } from \"../auth/token.js\";\nimport { validateToken } from \"../auth/fluid-api.js\";\n\nexport const whoamiCommand = new Command(\"whoami\")\n  .description(\"Show the current authenticated profile\")\n  .action(async () => {\n    const profile = getActiveProfile();\n\n    if (!profile) {\n      console.log(\n        chalk.yellow(\"Not logged in. Run `fluid login` to authenticate.\"),\n      );\n      process.exitCode = 1;\n      return;\n    }\n\n    const spinner = ora(\"Verifying token...\").start();\n    const result = await validateToken(profile.token);\n\n    if (!result.success) {\n      spinner.fail(chalk.red(\"Token is no longer valid.\"));\n      console.log(chalk.dim(`Profile: ${profile.name}`));\n      console.log(chalk.dim(\"Run `fluid login` to re-authenticate.\"));\n      process.exitCode = 1;\n      return;\n    }\n\n    spinner.succeed(chalk.green(\"Authenticated\"));\n    console.log(`  Profile:  ${chalk.bold(profile.name)}`);\n    console.log(`  Company:  ${chalk.bold(result.value.name)}`);\n    console.log(`  Stored:   ${chalk.dim(profile.storedAt)}`);\n  });\n","/**\n * fluid switch — switch between companies (fetched from API, with local fallback)\n */\n\nimport { Command } from \"commander\";\nimport chalk from \"chalk\";\nimport prompts from \"prompts\";\nimport ora from \"ora\";\nimport {\n  fetchUserCompanies,\n  switchCompany,\n  FLUID_API_ERROR,\n  getFluidApiBase,\n  type UserCompany,\n} from \"../auth/fluid-api.js\";\nimport { createFluidProfile } from \"../auth/profiles.js\";\nimport { getActiveProfile } from \"../auth/token.js\";\nimport { readConfig, updateConfig } from \"../config/config.js\";\n\nasync function localSwitch(profileArg?: string): Promise<void> {\n  const config = readConfig();\n  const profileNames = Object.keys(config.profiles);\n\n  if (profileNames.length === 0) {\n    console.log(chalk.yellow(\"No profiles stored. Run `fluid login` first.\"));\n    process.exitCode = 1;\n    return;\n  }\n\n  let targetProfile = profileArg;\n\n  if (!targetProfile) {\n    const profileChoices = profileNames.map((name) => ({\n      title: name === config.activeProfile ? `${name} (active)` : name,\n      value: name,\n    }));\n\n    const response = await prompts({\n      type: \"autocomplete\",\n      name: \"profile\",\n      message: \"Select a profile (type to search)\",\n      choices: profileChoices,\n      suggest: (input, choices) =>\n        Promise.resolve(\n          input\n            ? choices.filter((c) =>\n                c.value.toLowerCase().includes(input.toLowerCase()),\n              )\n            : choices,\n        ),\n    });\n    targetProfile = response[\"profile\"] as string | undefined;\n\n    if (!targetProfile) {\n      console.log(chalk.dim(\"Cancelled.\"));\n      return;\n    }\n  }\n\n  if (!config.profiles[targetProfile]) {\n    console.log(chalk.red(`Profile \"${targetProfile}\" not found.`));\n    console.log(chalk.dim(`Available: ${profileNames.join(\", \")}`));\n    process.exitCode = 1;\n    return;\n  }\n\n  updateConfig((c) => ({ ...c, activeProfile: targetProfile! }));\n  console.log(chalk.green(`Switched to profile ${chalk.bold(targetProfile)}.`));\n}\n\nasync function selectCompany(\n  companies: UserCompany[],\n  activeCompanyName: string | undefined,\n): Promise<UserCompany | undefined> {\n  const companyChoices = companies.map((c) => ({\n    title:\n      c.name === activeCompanyName\n        ? `${c.name} ${chalk.dim(\"(active)\")}`\n        : c.name,\n    value: c.id,\n  }));\n\n  const response = await prompts({\n    type: \"autocomplete\",\n    name: \"companyId\",\n    message: \"Select a company (type to search)\",\n    choices: companyChoices,\n    suggest: (input, choices) =>\n      Promise.resolve(\n        input\n          ? choices.filter((c) =>\n              c.title.toLowerCase().includes(input.toLowerCase()),\n            )\n          : choices,\n      ),\n  });\n\n  const companyId = response[\"companyId\"] as number | undefined;\n  if (companyId === undefined) return undefined;\n  return companies.find((c) => c.id === companyId);\n}\n\nasync function performSwitch(\n  token: string,\n  company: UserCompany,\n  baseUrl?: string,\n): Promise<void> {\n  const spinner = ora(`Switching to ${chalk.bold(company.name)}...`).start();\n  const result = await switchCompany(token, company.id, baseUrl);\n\n  if (!result.success) {\n    if (result.error.code === FLUID_API_ERROR.INVALID_TOKEN.code) {\n      spinner.fail(\n        chalk.red(\n          \"Your session has expired. Please run `fluid login` to re-authenticate.\",\n        ),\n      );\n    } else {\n      spinner.fail(chalk.red(result.error.message));\n      if (result.error.details) {\n        console.log(chalk.dim(result.error.details));\n      }\n    }\n    process.exitCode = 1;\n    return;\n  }\n\n  const { companyName, jwt } = result.value;\n\n  updateConfig((config) => ({\n    ...config,\n    activeProfile: companyName,\n    profiles: {\n      ...config.profiles,\n      [companyName]: createFluidProfile({\n        name: companyName,\n        token: jwt,\n        companyName,\n        baseUrl: baseUrl ?? getFluidApiBase(),\n      }),\n    },\n  }));\n\n  spinner.succeed(\n    chalk.green(\n      `Switched to ${chalk.bold(companyName)} (profile: ${chalk.bold(companyName)})`,\n    ),\n  );\n}\n\nexport const switchCommand = new Command(\"switch\")\n  .description(\"Switch between companies\")\n  .argument(\"[profile]\", \"Company or profile name to switch to\")\n  .action(async (profileArg?: string) => {\n    const activeProfile = getActiveProfile();\n\n    if (!activeProfile) {\n      console.log(chalk.yellow(\"Not logged in. Run `fluid login` first.\"));\n      process.exitCode = 1;\n      return;\n    }\n\n    const token = activeProfile.token;\n    const activeCompanyName = activeProfile.companyName;\n    const activeBaseUrl = activeProfile.baseUrl ?? getFluidApiBase();\n\n    // Fetch companies from API\n    const spinner = ora(\"Fetching companies...\").start();\n    const result = await fetchUserCompanies(token, activeBaseUrl);\n\n    if (!result.success) {\n      if (result.error.code === FLUID_API_ERROR.INVALID_TOKEN.code) {\n        spinner.fail(\n          chalk.red(\n            \"Your session has expired. Please run `fluid login` to re-authenticate.\",\n          ),\n        );\n        process.exitCode = 1;\n        return;\n      }\n      spinner.warn(\n        chalk.yellow(\n          `Could not fetch companies from API: ${result.error.message}`,\n        ),\n      );\n      console.log(chalk.dim(\"Falling back to locally stored profiles.\"));\n      await localSwitch(profileArg);\n      return;\n    }\n\n    const companies = result.value;\n    spinner.succeed(\n      `Found ${companies.length} company${companies.length === 1 ? \"\" : \"ies\"}`,\n    );\n\n    if (companies.length === 0) {\n      console.log(chalk.yellow(\"No companies found for this account.\"));\n      process.exitCode = 1;\n      return;\n    }\n\n    // If a profile argument was passed, match against API companies first\n    if (profileArg) {\n      const match = companies.find(\n        (c) => c.name.toLowerCase() === profileArg.toLowerCase(),\n      );\n\n      if (match) {\n        await performSwitch(token, match, activeBaseUrl);\n        return;\n      }\n\n      // Fall back to local profile matching\n      const config = readConfig();\n      if (config.profiles[profileArg]) {\n        updateConfig((c) => ({ ...c, activeProfile: profileArg! }));\n        console.log(\n          chalk.green(`Switched to profile ${chalk.bold(profileArg)}.`),\n        );\n        return;\n      }\n\n      console.log(chalk.red(`Company or profile \"${profileArg}\" not found.`));\n      process.exitCode = 1;\n      return;\n    }\n\n    // Interactive selection\n    const selected = await selectCompany(companies, activeCompanyName);\n    if (!selected) {\n      console.log(chalk.dim(\"Cancelled.\"));\n      return;\n    }\n\n    await performSwitch(token, selected, activeBaseUrl);\n  });\n","/**\n * Auto-discover @fluid-app CLI plugins.\n *\n * Three discovery strategies run in order:\n *\n * 1a. **node_modules scan (cwd)** — look in `<cwd>/node_modules/@fluid-app/`\n *     for directories whose names match the plugin naming convention.\n *     This is the primary mechanism for project-local plugin installs.\n *\n * 1b. **node_modules scan (CLI install location)** — look in the\n *     `node_modules/@fluid-app/` directory containing the CLI core package\n *     itself. This covers global installs where plugins are sibling packages\n *     under the same global `node_modules/`.\n *\n * 2.  **Workspace scan** — walk upward from the CLI core package root to the\n *     monorepo workspace root, then scan `packages/` for sibling plugin\n *     packages. This covers the pnpm-workspace development case where\n *     plugins are not symlinked into `node_modules`.\n *\n * Only first-party @fluid-app scoped packages are loaded.\n */\n\nimport { existsSync, readFileSync, readdirSync, realpathSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { fileURLToPath, pathToFileURL } from \"node:url\";\n\nconst PLUGIN_SCOPE = \"@fluid-app\";\n\n/**\n * A plugin package name must match one of these patterns:\n *  - @fluid-app/fluid-cli-*      (standard)\n *  - @fluid-app/*-cli-commands   (v2025-06 style)\n */\nfunction isPluginName(packageName: string): boolean {\n  if (!packageName.startsWith(`${PLUGIN_SCOPE}/`)) return false;\n  const bare = packageName.slice(`${PLUGIN_SCOPE}/`.length);\n  return bare.startsWith(\"fluid-cli-\") || bare.endsWith(\"-cli-commands\");\n}\n\n// ---------------------------------------------------------------------------\n// Strategy 1: node_modules scan (production / published installs)\n// ---------------------------------------------------------------------------\n\nfunction discoverFromNodeModules(basePath: string): DiscoveredPlugin[] {\n  const scopeDir = join(basePath, \"node_modules\", PLUGIN_SCOPE);\n\n  if (!existsSync(scopeDir)) return [];\n\n  return readdirSync(scopeDir, { withFileTypes: true })\n    .filter(\n      (entry) =>\n        (entry.isDirectory() || entry.isSymbolicLink()) &&\n        isPluginName(`${PLUGIN_SCOPE}/${entry.name}`),\n    )\n    .map((entry) => {\n      const name = `${PLUGIN_SCOPE}/${entry.name}`;\n      const entryDir = join(scopeDir, entry.name);\n      // Resolve symlinks (pnpm workspace links) to file:// URLs so the\n      // dynamic import works regardless of pnpm's strict module resolution.\n      try {\n        const realDir = realpathSync(entryDir);\n        const distEntry = join(realDir, \"dist\", \"index.mjs\");\n        if (existsSync(distEntry)) {\n          return { name, importSpecifier: pathToFileURL(distEntry).href };\n        }\n      } catch {\n        // Broken symlink or other fs error — fall through to bare specifier\n      }\n      // Fallback to bare specifier for non-workspace (published) installs\n      return { name, importSpecifier: name };\n    });\n}\n\n// ---------------------------------------------------------------------------\n// Strategy 2: workspace scan (pnpm monorepo development)\n// ---------------------------------------------------------------------------\n\nfunction findWorkspaceRoot(startDir: string): string | null {\n  let dir = startDir;\n  while (true) {\n    if (\n      existsSync(join(dir, \"pnpm-workspace.yaml\")) ||\n      existsSync(join(dir, \"pnpm-workspace.yml\"))\n    ) {\n      return dir;\n    }\n    const parent = dirname(dir);\n    if (parent === dir) return null;\n    dir = parent;\n  }\n}\n\nfunction readPackageName(dir: string): string | null {\n  const pkgPath = join(dir, \"package.json\");\n  if (!existsSync(pkgPath)) return null;\n  try {\n    const pkg = JSON.parse(readFileSync(pkgPath, \"utf-8\")) as {\n      name?: string;\n    };\n    return pkg.name ?? null;\n  } catch {\n    return null;\n  }\n}\n\nexport interface DiscoveredPlugin {\n  name: string;\n  importSpecifier: string;\n}\n\nexport interface PluginDiscoveryOptions {\n  /**\n   * Prefer plugins installed beside this CLI over same-named packages in the\n   * target project's node_modules. Desktop callers use this so an older\n   * project-local plugin cannot override the command contract bundled with\n   * the app. Normal project-local CLI invocations keep the existing order.\n   */\n  preferInstallation?: boolean;\n  /** Test seam for the directory containing the CLI installation. */\n  installationBasePath?: string;\n}\n\nfunction discoverFromWorkspace(startDir: string): DiscoveredPlugin[] {\n  const workspaceRoot = findWorkspaceRoot(startDir);\n  if (!workspaceRoot) return [];\n\n  const results: DiscoveredPlugin[] = [];\n  const packagesDir = join(workspaceRoot, \"packages\");\n  if (!existsSync(packagesDir)) return [];\n\n  // Scan exactly two levels deep under packages/ (e.g. packages/cli/themes,\n  // packages/cli/v2025-06). This matches the monorepo convention where all\n  // packages live at packages/<domain>/<package>/.\n  // If a plugin is added at a different depth, update this scan accordingly.\n  let domainDirs: string[];\n  try {\n    domainDirs = readdirSync(packagesDir, { withFileTypes: true })\n      .filter((e) => e.isDirectory())\n      .map((e) => join(packagesDir, e.name));\n  } catch {\n    return [];\n  }\n\n  for (const domainDir of domainDirs) {\n    let subDirs: string[];\n    try {\n      subDirs = readdirSync(domainDir, { withFileTypes: true })\n        .filter((e) => e.isDirectory())\n        .map((e) => join(domainDir, e.name));\n    } catch {\n      continue;\n    }\n\n    for (const subDir of subDirs) {\n      const name = readPackageName(subDir);\n      if (!name || !name.startsWith(`${PLUGIN_SCOPE}/`) || !isPluginName(name))\n        continue;\n\n      const distEntry = join(subDir, \"dist\", \"index.mjs\");\n      if (!existsSync(distEntry)) {\n        continue;\n      }\n\n      results.push({\n        name,\n        importSpecifier: pathToFileURL(distEntry).href,\n      });\n    }\n  }\n\n  return results;\n}\n\n// ---------------------------------------------------------------------------\n// Exported API\n// ---------------------------------------------------------------------------\n\n/** Resolved once — the CLI core package root (`packages/cli/core/`). */\nexport const corePackageDir = dirname(\n  dirname(dirname(fileURLToPath(import.meta.url))),\n);\n\n/**\n * Discover installed plugin packages. Returns a de-duplicated, sorted list\n * of `{ name, importSpecifier }` objects.\n *\n * @param basePath - Directory to scan for `node_modules/@fluid-app/`\n * @param searchFrom - Starting directory for workspace root detection\n *   (walked upward via `findWorkspaceRoot`). Pass `null` to skip workspace\n *   scanning (useful in tests). Defaults to `corePackageDir`.\n */\nexport function discoverPlugins(\n  basePath: string,\n  searchFrom?: string | null,\n  options: PluginDiscoveryOptions = {},\n): DiscoveredPlugin[] {\n  const seen = new Set<string>();\n  const results: DiscoveredPlugin[] = [];\n\n  const addPlugins = (plugins: DiscoveredPlugin[]) => {\n    for (const plugin of plugins) {\n      if (seen.has(plugin.name)) continue;\n      seen.add(plugin.name);\n      results.push(plugin);\n    }\n  };\n\n  const cliParent =\n    options.installationBasePath ?? dirname(dirname(dirname(corePackageDir)));\n  const projectPlugins = () => discoverFromNodeModules(basePath);\n  const installationPlugins = () =>\n    cliParent === basePath ? [] : discoverFromNodeModules(cliParent);\n  const workspacePlugins = () => {\n    if (searchFrom === null) return [];\n    return discoverFromWorkspace(searchFrom ?? corePackageDir);\n  };\n\n  if (options.preferInstallation) {\n    addPlugins(installationPlugins());\n    // In a monorepo development build, resolveFluidBinary() deliberately\n    // realpaths the CLI into packages/cli/core. Its sibling plugins are then\n    // discovered from the workspace rather than an installation-level\n    // node_modules, so they are part of the same trusted CLI installation.\n    addPlugins(workspacePlugins());\n    addPlugins(projectPlugins());\n  } else {\n    addPlugins(projectPlugins());\n    addPlugins(installationPlugins());\n    addPlugins(workspacePlugins());\n  }\n\n  return results.sort((a, b) => a.name.localeCompare(b.name));\n}\n\n/**\n * Dynamically import a plugin module and return its default export.\n *\n * @internal Not intended for external callers. Only called with specifiers\n * produced by {@link discoverPlugins}:\n * - bare package names (e.g. `@fluid-app/fluid-cli-portal`) from the\n *   node_modules scan, validated by {@link isPluginName}.\n * - `file://` URLs from {@link discoverFromWorkspace}, which constructs\n *   them internally from validated workspace paths (`packages/` tree,\n *   `dist/index.mjs`). These are trusted internal specifiers.\n */\nexport async function importPlugin(specifier: string): Promise<unknown> {\n  // file:// URLs are trusted — they originate from discoverFromWorkspace\n  // which builds them from validated workspace paths under packages/.\n  // For bare package names, verify they match the plugin naming convention.\n  if (!specifier.startsWith(\"file://\") && !isPluginName(specifier)) {\n    throw new Error(`Refusing to import non-plugin package: ${specifier}`);\n  }\n  const mod = (await import(specifier)) as Record<string, unknown>;\n  return mod[\"default\"] ?? mod;\n}\n","/**\n * Plugin loader — orchestrates discovery and registration\n */\n\nimport type { Command } from \"commander\";\nimport chalk from \"chalk\";\nimport { getConfigDir } from \"../config/paths.js\";\nimport { getAuthToken } from \"../auth/token.js\";\nimport { readConfig } from \"../config/config.js\";\nimport type { FluidPlugin, PluginContext } from \"./types.js\";\nimport { discoverPlugins, importPlugin } from \"./discovery.js\";\n\nfunction isFluidPlugin(value: unknown): value is FluidPlugin {\n  if (typeof value !== \"object\" || value === null) return false;\n  const obj = value as Record<string, unknown>;\n  return (\n    typeof obj[\"name\"] === \"string\" &&\n    typeof obj[\"version\"] === \"string\" &&\n    typeof obj[\"register\"] === \"function\"\n  );\n}\n\n/**\n * Discover, import, and register all installed plugins\n */\nexport async function loadPlugins(\n  program: Command,\n  basePath: string,\n): Promise<void> {\n  const discovered = discoverPlugins(basePath, undefined, {\n    preferInstallation:\n      process.env[\"FLUID_CLI_PREFER_INSTALLATION_PLUGINS\"] === \"1\",\n  });\n  const { enabledPlugins } = readConfig();\n\n  // If enabledPlugins is set, only load explicitly allowed plugins.\n  // This acts as an allow-list to prevent accidental supply-chain execution.\n  const allowedSet = enabledPlugins !== null ? new Set(enabledPlugins) : null;\n  const plugins = allowedSet\n    ? discovered.filter((p) => allowedSet.has(p.name))\n    : discovered;\n\n  if (plugins.length === 0) return;\n\n  const ctx: PluginContext = {\n    program,\n    getAuthToken,\n    configDir: getConfigDir(),\n  };\n\n  for (const { name, importSpecifier } of plugins) {\n    try {\n      const exported = await importPlugin(importSpecifier);\n\n      if (!isFluidPlugin(exported)) {\n        console.warn(\n          chalk.yellow(`Warning: ${name} does not export a valid FluidPlugin`),\n        );\n        continue;\n      }\n\n      await exported.register(ctx);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      console.warn(\n        chalk.yellow(`Warning: Failed to load plugin ${name}: ${message}`),\n      );\n    }\n  }\n}\n","#!/usr/bin/env node\n\nimport { createRequire } from \"node:module\";\nimport { Command } from \"commander\";\nimport { loginCommand } from \"../commands/login.js\";\nimport { logoutCommand } from \"../commands/logout.js\";\nimport { whoamiCommand } from \"../commands/whoami.js\";\nimport { switchCommand } from \"../commands/switch.js\";\nimport { loadPlugins } from \"../plugins/loader.js\";\n\nconst require = createRequire(import.meta.url);\nconst { version } = require(\"../../package.json\") as { version: string };\n\nconst packageRoot = process.cwd();\n\nconst program = new Command();\n\nprogram.name(\"fluid\").description(\"Fluid Commerce CLI\").version(version);\n\n// Built-in auth commands\nprogram.addCommand(loginCommand);\nprogram.addCommand(logoutCommand);\nprogram.addCommand(whoamiCommand);\nprogram.addCommand(switchCommand);\n\n// Discover and load all plugins (auto-discovered from node_modules and workspace)\nawait loadPlugins(program, packageRoot);\n\nprogram.parse(process.argv, { from: \"node\" });\n"],"mappings":";;;;;;;;;;;AAcA,SAAgB,mBAAmB,EACjC,MACA,OACA,aACA,SACA,YACwC;AACxC,QAAO;EACL;EACA;EACA;EACA,UAAU,6BAAY,IAAI,MAAM,EAAC,aAAa;EAC9C;EACD;;;;;;;ACTH,eAAe,iBAAiB,aAAuC;CACrE,MAAM,WAAW,YAAY,CAAC,SAAS;AACvC,KAAI,CAAC,SAAU,QAAO;CAEtB,MAAM,WAAW,MAAM,QAAQ;EAC7B,MAAM;EACN,MAAM;EACN,SAAS,YAAY,YAAY,oBAAoB,SAAS,YAAY;EAC1E,SAAS;EACV,CAAC;AACF,QAAO,QAAQ,SAAS,aAAa;;AAGvC,SAAS,aACP,aACA,OACA,aACM;AACN,eAAc,YAAY;EACxB,GAAG;EACH,eAAe;EACf,UAAU;GACR,GAAG,OAAO;IACT,cAAc,mBAAmB;IAChC,MAAM;IACN;IACA;IACA,SAAS,iBAAiB;IAC3B,CAAC;GACH;EACF,EAAE;;AAGL,eAAe,eACb,OACA,aACe;CACf,MAAM,UAAU,IAAI,sBAAsB,CAAC,OAAO;CAClD,MAAM,SAAS,MAAM,cAAc,MAAM;AAEzC,KAAI,CAAC,OAAO,SAAS;AACnB,UAAQ,KAAK,MAAM,IAAI,OAAO,MAAM,QAAQ,CAAC;AAC7C,MAAI,OAAO,MAAM,QACf,SAAQ,IAAI,MAAM,IAAI,OAAO,MAAM,QAAQ,CAAC;AAE9C,UAAQ,WAAW;AACnB;;CAGF,MAAM,OAAO,eAAe,OAAO,MAAM;AAGzC,SAAQ,QACN,MAAM,MAAM,iBAAiB,MAAM,KAAK,OAAO,MAAM,KAAK,GAAG,CAC9D;AAED,KAAI,CAAE,MAAM,iBAAiB,KAAK,EAAG;AACnC,UAAQ,IACN,MAAM,OAAO,sDAAsD,CACpE;AACD;;AAGF,cAAa,MAAM,OAAO,OAAO,MAAM,KAAK;AAC5C,SAAQ,IACN,MAAM,MACJ,gBAAgB,MAAM,KAAK,OAAO,MAAM,KAAK,CAAC,aAAa,MAAM,KAAK,KAAK,CAAC,GAC7E,CACF;;AAGH,eAAe,eACb,cACA,aACe;CAEf,IAAI,QAAQ;AACZ,KAAI,CAAC,OAAO;AAMV,WALiB,MAAM,QAAQ;GAC7B,MAAM;GACN,MAAM;GACN,SAAS;GACV,CAAC,EACe;AACjB,MAAI,CAAC,OAAO;AACV,WAAQ,IAAI,MAAM,IAAI,+BAA+B,CAAC;AACtD,WAAQ,WAAW;AACnB;;;CAKJ,MAAM,cAAc,IAAI,+BAA+B,CAAC,OAAO;CAC/D,MAAM,aAAa,MAAM,QAAQ,MAAM;AAEvC,KAAI,CAAC,WAAW,SAAS;AACvB,cAAY,KAAK,MAAM,IAAI,WAAW,MAAM,QAAQ,CAAC;AACrD,MAAI,WAAW,MAAM,QACnB,SAAQ,IAAI,MAAM,IAAI,WAAW,MAAM,QAAQ,CAAC;AAElD,UAAQ,WAAW;AACnB;;CAIF,MAAM,cADY,IAAI,KAAK,WAAW,MAAM,UAAU,CACxB,SAAS,GAAG,KAAK,KAAK;CACpD,MAAM,eAAe,KAAK,MAAM,cAAc,MAAO,GAAG;CACxD,MAAM,aACJ,eAAe,IACX,eAAe,aAAa,QAC5B;AACN,aAAY,QACV,8CAA8C,WAAW,GAC1D;CAGD,MAAM,oBAAoB;CAC1B,IAAI;AACJ,MAAK,IAAI,UAAU,GAAG,WAAW,mBAAmB,WAAW;EAM7D,MAAM,QALe,MAAM,QAAQ;GACjC,MAAM;GACN,MAAM;GACN,SAAS;GACV,CAAC,EACwB;AAC1B,MAAI,CAAC,MAAM;AACT,WAAQ,IAAI,MAAM,IAAI,8BAA8B,CAAC;AACrD,WAAQ,WAAW;AACnB;;AAEF,MAAI,CAAC,UAAU,KAAK,KAAK,EAAE;AACzB,WAAQ,IAAI,MAAM,IAAI,iCAAiC,CAAC;AACxD,OAAI,UAAU,kBAAmB;AACjC,WAAQ,IAAI,MAAM,IAAI,uCAAuC,CAAC;AAC9D,WAAQ,WAAW;AACnB;;EAGF,MAAM,iBAAiB,IAAI,oBAAoB,CAAC,OAAO;AACvD,kBAAgB,MAAM,WAAW,WAAW,MAAM,MAAM,KAAK;AAE7D,MAAI,cAAc,SAAS;AACzB,kBAAe,QAAQ,WAAW;AAClC;;AAIF,MACE,cAAc,MAAM,SAAS,kBAC7B,UAAU,mBACV;AACA,kBAAe,KACb,MAAM,IACJ,GAAG,cAAc,MAAM,QAAQ,YAAY,QAAQ,GAAG,kBAAkB,GACzE,CACF;AACD;;AAIF,iBAAe,KAAK,MAAM,IAAI,cAAc,MAAM,QAAQ,CAAC;AAC3D,MAAI,cAAc,MAAM,QACtB,SAAQ,IAAI,MAAM,IAAI,cAAc,MAAM,QAAQ,CAAC;AAErD,UAAQ,WAAW;AACnB;;AAGF,KAAI,CAAC,eAAe,QAAS;CAE7B,MAAM,EAAE,cAAc,cAAc;AAEpC,KAAI,UAAU,WAAW,GAAG;AAC1B,UAAQ,IAAI,MAAM,IAAI,uCAAuC,CAAC;AAC9D,UAAQ,WAAW;AACnB;;CAIF,IAAI;AACJ,KAAI,UAAU,WAAW,GAAG;EAC1B,MAAM,QAAQ,UAAU;AACxB,MAAI,CAAC,OAAO;AACV,WAAQ,IAAI,MAAM,IAAI,uCAAuC,CAAC;AAC9D,WAAQ,WAAW;AACnB;;AAEF,aAAW;QACN;EA0BL,MAAM,aAfiB,MAAM,QAAQ;GACnC,MAAM;GACN,MAAM;GACN,SAAS;GACT,SATqB,UAAU,KAAK,OAAO;IAC3C,OAAO,GAAG,EAAE,KAAK,IAAI,EAAE,SAAS;IAChC,OAAO,EAAE;IACV,EAAE;GAOD,UAAU,OAAO,YACf,QAAQ,QACN,QACI,QAAQ,QAAQ,MACd,EAAE,MAAM,aAAa,CAAC,SAAS,MAAM,aAAa,CAAC,CACpD,GACD,QACL;GACJ,CAAC,EAE+B;AAEjC,MAAI,cAAc,KAAA,GAAW;AAC3B,WAAQ,IAAI,MAAM,IAAI,iCAAiC,CAAC;AACxD,WAAQ,WAAW;AACnB;;EAEF,MAAM,SAAS,UAAU,MAAM,MAAM,EAAE,OAAO,UAAU;AACxD,MAAI,CAAC,QAAQ;AACX,WAAQ,IAAI,MAAM,IAAI,+BAA+B,CAAC;AACtD,WAAQ,WAAW;AACnB;;AAEF,aAAW;;CAIb,MAAM,OAAO,eAAe,SAAS;AAErC,KAAI,CAAE,MAAM,iBAAiB,KAAK,EAAG;AACnC,UAAQ,IACN,MAAM,OAAO,sDAAsD,CACpE;AACD;;AAGF,cAAa,MAAM,SAAS,KAAK,SAAS,KAAK;AAC/C,SAAQ,IACN,MAAM,MACJ,gBAAgB,MAAM,KAAK,SAAS,KAAK,CAAC,aAAa,MAAM,KAAK,KAAK,CAAC,GACzE,CACF;;AAGH,MAAa,eAAe,IAAI,QAAQ,QAAQ,CAC7C,YAAY,kCAAkC,CAC9C,OACC,uBACA,2FACD,CACA,OAAO,uBAAuB,8BAA8B,CAC5D,OAAO,qBAAqB,0CAA0C,CACtE,OAAO,OAAO,SAA4D;CAEzE,MAAM,QAAQ,KAAK,SAAS,QAAQ,IAAI;AACxC,KAAI,OAAO;AACT,MAAI,KAAK,MACP,SAAQ,IACN,MAAM,OACJ,wIAED,CACF;AAEH,QAAM,eAAe,OAAO,KAAK,KAAK;OAEtC,OAAM,eAAe,KAAK,OAAO,KAAK,KAAK;EAE7C;;;;;;AC1RJ,MAAa,gBAAgB,IAAI,QAAQ,SAAS,CAC/C,YAAY,+BAA+B,CAC3C,OAAO,aAAa,sBAAsB,CAC1C,QAAQ,SAA4B;CACnC,MAAM,SAAS,YAAY;AAE3B,KAAI,KAAK,KAAK;AACZ,cAAY;GACV,GAAG;GACH,eAAe;GACf,UAAU,EAAE;GACb,CAAC;AACF,UAAQ,IAAI,MAAM,MAAM,wBAAwB,CAAC;AACjD;;AAGF,KAAI,CAAC,OAAO,eAAe;AACzB,UAAQ,IAAI,MAAM,OAAO,2BAA2B,CAAC;AACrD;;CAGF,MAAM,cAAc,OAAO;CAC3B,MAAM,GAAG,cAAc,GAAG,GAAG,sBAAsB,OAAO;CAG1D,MAAM,aAAa,OAAO,KAAK,kBAAkB,CAAC,MAAM;AAExD,aAAY;EACV,GAAG;EACH,eAAe;EACf,UAAU;EACX,CAAC;AAEF,SAAQ,IACN,MAAM,MAAM,yBAAyB,MAAM,KAAK,YAAY,CAAC,GAAG,CACjE;AACD,KAAI,WACF,SAAQ,IAAI,MAAM,IAAI,uBAAuB,WAAW,GAAG,CAAC;EAE9D;;;;;;ACrCJ,MAAa,gBAAgB,IAAI,QAAQ,SAAS,CAC/C,YAAY,yCAAyC,CACrD,OAAO,YAAY;CAClB,MAAM,UAAU,kBAAkB;AAElC,KAAI,CAAC,SAAS;AACZ,UAAQ,IACN,MAAM,OAAO,oDAAoD,CAClE;AACD,UAAQ,WAAW;AACnB;;CAGF,MAAM,UAAU,IAAI,qBAAqB,CAAC,OAAO;CACjD,MAAM,SAAS,MAAM,cAAc,QAAQ,MAAM;AAEjD,KAAI,CAAC,OAAO,SAAS;AACnB,UAAQ,KAAK,MAAM,IAAI,4BAA4B,CAAC;AACpD,UAAQ,IAAI,MAAM,IAAI,YAAY,QAAQ,OAAO,CAAC;AAClD,UAAQ,IAAI,MAAM,IAAI,wCAAwC,CAAC;AAC/D,UAAQ,WAAW;AACnB;;AAGF,SAAQ,QAAQ,MAAM,MAAM,gBAAgB,CAAC;AAC7C,SAAQ,IAAI,eAAe,MAAM,KAAK,QAAQ,KAAK,GAAG;AACtD,SAAQ,IAAI,eAAe,MAAM,KAAK,OAAO,MAAM,KAAK,GAAG;AAC3D,SAAQ,IAAI,eAAe,MAAM,IAAI,QAAQ,SAAS,GAAG;EACzD;;;;;;ACnBJ,eAAe,YAAY,YAAoC;CAC7D,MAAM,SAAS,YAAY;CAC3B,MAAM,eAAe,OAAO,KAAK,OAAO,SAAS;AAEjD,KAAI,aAAa,WAAW,GAAG;AAC7B,UAAQ,IAAI,MAAM,OAAO,+CAA+C,CAAC;AACzE,UAAQ,WAAW;AACnB;;CAGF,IAAI,gBAAgB;AAEpB,KAAI,CAAC,eAAe;AAoBlB,mBAdiB,MAAM,QAAQ;GAC7B,MAAM;GACN,MAAM;GACN,SAAS;GACT,SATqB,aAAa,KAAK,UAAU;IACjD,OAAO,SAAS,OAAO,gBAAgB,GAAG,KAAK,aAAa;IAC5D,OAAO;IACR,EAAE;GAOD,UAAU,OAAO,YACf,QAAQ,QACN,QACI,QAAQ,QAAQ,MACd,EAAE,MAAM,aAAa,CAAC,SAAS,MAAM,aAAa,CAAC,CACpD,GACD,QACL;GACJ,CAAC,EACuB;AAEzB,MAAI,CAAC,eAAe;AAClB,WAAQ,IAAI,MAAM,IAAI,aAAa,CAAC;AACpC;;;AAIJ,KAAI,CAAC,OAAO,SAAS,gBAAgB;AACnC,UAAQ,IAAI,MAAM,IAAI,YAAY,cAAc,cAAc,CAAC;AAC/D,UAAQ,IAAI,MAAM,IAAI,cAAc,aAAa,KAAK,KAAK,GAAG,CAAC;AAC/D,UAAQ,WAAW;AACnB;;AAGF,eAAc,OAAO;EAAE,GAAG;EAAG,eAAe;EAAgB,EAAE;AAC9D,SAAQ,IAAI,MAAM,MAAM,uBAAuB,MAAM,KAAK,cAAc,CAAC,GAAG,CAAC;;AAG/E,eAAe,cACb,WACA,mBACkC;CAwBlC,MAAM,aAfW,MAAM,QAAQ;EAC7B,MAAM;EACN,MAAM;EACN,SAAS;EACT,SAZqB,UAAU,KAAK,OAAO;GAC3C,OACE,EAAE,SAAS,oBACP,GAAG,EAAE,KAAK,GAAG,MAAM,IAAI,WAAW,KAClC,EAAE;GACR,OAAO,EAAE;GACV,EAAE;EAOD,UAAU,OAAO,YACf,QAAQ,QACN,QACI,QAAQ,QAAQ,MACd,EAAE,MAAM,aAAa,CAAC,SAAS,MAAM,aAAa,CAAC,CACpD,GACD,QACL;EACJ,CAAC,EAEyB;AAC3B,KAAI,cAAc,KAAA,EAAW,QAAO,KAAA;AACpC,QAAO,UAAU,MAAM,MAAM,EAAE,OAAO,UAAU;;AAGlD,eAAe,cACb,OACA,SACA,SACe;CACf,MAAM,UAAU,IAAI,gBAAgB,MAAM,KAAK,QAAQ,KAAK,CAAC,KAAK,CAAC,OAAO;CAC1E,MAAM,SAAS,MAAM,cAAc,OAAO,QAAQ,IAAI,QAAQ;AAE9D,KAAI,CAAC,OAAO,SAAS;AACnB,MAAI,OAAO,MAAM,SAAS,gBAAgB,cAAc,KACtD,SAAQ,KACN,MAAM,IACJ,yEACD,CACF;OACI;AACL,WAAQ,KAAK,MAAM,IAAI,OAAO,MAAM,QAAQ,CAAC;AAC7C,OAAI,OAAO,MAAM,QACf,SAAQ,IAAI,MAAM,IAAI,OAAO,MAAM,QAAQ,CAAC;;AAGhD,UAAQ,WAAW;AACnB;;CAGF,MAAM,EAAE,aAAa,QAAQ,OAAO;AAEpC,eAAc,YAAY;EACxB,GAAG;EACH,eAAe;EACf,UAAU;GACR,GAAG,OAAO;IACT,cAAc,mBAAmB;IAChC,MAAM;IACN,OAAO;IACP;IACA,SAAS,WAAW,iBAAiB;IACtC,CAAC;GACH;EACF,EAAE;AAEH,SAAQ,QACN,MAAM,MACJ,eAAe,MAAM,KAAK,YAAY,CAAC,aAAa,MAAM,KAAK,YAAY,CAAC,GAC7E,CACF;;AAGH,MAAa,gBAAgB,IAAI,QAAQ,SAAS,CAC/C,YAAY,2BAA2B,CACvC,SAAS,aAAa,uCAAuC,CAC7D,OAAO,OAAO,eAAwB;CACrC,MAAM,gBAAgB,kBAAkB;AAExC,KAAI,CAAC,eAAe;AAClB,UAAQ,IAAI,MAAM,OAAO,0CAA0C,CAAC;AACpE,UAAQ,WAAW;AACnB;;CAGF,MAAM,QAAQ,cAAc;CAC5B,MAAM,oBAAoB,cAAc;CACxC,MAAM,gBAAgB,cAAc,WAAW,iBAAiB;CAGhE,MAAM,UAAU,IAAI,wBAAwB,CAAC,OAAO;CACpD,MAAM,SAAS,MAAM,mBAAmB,OAAO,cAAc;AAE7D,KAAI,CAAC,OAAO,SAAS;AACnB,MAAI,OAAO,MAAM,SAAS,gBAAgB,cAAc,MAAM;AAC5D,WAAQ,KACN,MAAM,IACJ,yEACD,CACF;AACD,WAAQ,WAAW;AACnB;;AAEF,UAAQ,KACN,MAAM,OACJ,uCAAuC,OAAO,MAAM,UACrD,CACF;AACD,UAAQ,IAAI,MAAM,IAAI,2CAA2C,CAAC;AAClE,QAAM,YAAY,WAAW;AAC7B;;CAGF,MAAM,YAAY,OAAO;AACzB,SAAQ,QACN,SAAS,UAAU,OAAO,UAAU,UAAU,WAAW,IAAI,KAAK,QACnE;AAED,KAAI,UAAU,WAAW,GAAG;AAC1B,UAAQ,IAAI,MAAM,OAAO,uCAAuC,CAAC;AACjE,UAAQ,WAAW;AACnB;;AAIF,KAAI,YAAY;EACd,MAAM,QAAQ,UAAU,MACrB,MAAM,EAAE,KAAK,aAAa,KAAK,WAAW,aAAa,CACzD;AAED,MAAI,OAAO;AACT,SAAM,cAAc,OAAO,OAAO,cAAc;AAChD;;AAKF,MADe,YAAY,CAChB,SAAS,aAAa;AAC/B,iBAAc,OAAO;IAAE,GAAG;IAAG,eAAe;IAAa,EAAE;AAC3D,WAAQ,IACN,MAAM,MAAM,uBAAuB,MAAM,KAAK,WAAW,CAAC,GAAG,CAC9D;AACD;;AAGF,UAAQ,IAAI,MAAM,IAAI,uBAAuB,WAAW,cAAc,CAAC;AACvE,UAAQ,WAAW;AACnB;;CAIF,MAAM,WAAW,MAAM,cAAc,WAAW,kBAAkB;AAClE,KAAI,CAAC,UAAU;AACb,UAAQ,IAAI,MAAM,IAAI,aAAa,CAAC;AACpC;;AAGF,OAAM,cAAc,OAAO,UAAU,cAAc;EACnD;;;;;;;;;;;;;;;;;;;;;;;;ACjNJ,MAAM,eAAe;;;;;;AAOrB,SAAS,aAAa,aAA8B;AAClD,KAAI,CAAC,YAAY,WAAW,GAAG,aAAa,GAAG,CAAE,QAAO;CACxD,MAAM,OAAO,YAAY,MAAM,GAAG,aAAa,GAAG,OAAO;AACzD,QAAO,KAAK,WAAW,aAAa,IAAI,KAAK,SAAS,gBAAgB;;AAOxE,SAAS,wBAAwB,UAAsC;CACrE,MAAM,WAAW,KAAK,UAAU,gBAAgB,aAAa;AAE7D,KAAI,CAAC,WAAW,SAAS,CAAE,QAAO,EAAE;AAEpC,QAAO,YAAY,UAAU,EAAE,eAAe,MAAM,CAAC,CAClD,QACE,WACE,MAAM,aAAa,IAAI,MAAM,gBAAgB,KAC9C,aAAa,GAAG,aAAa,GAAG,MAAM,OAAO,CAChD,CACA,KAAK,UAAU;EACd,MAAM,OAAO,GAAG,aAAa,GAAG,MAAM;EACtC,MAAM,WAAW,KAAK,UAAU,MAAM,KAAK;AAG3C,MAAI;GAEF,MAAM,YAAY,KADF,aAAa,SAAS,EACN,QAAQ,YAAY;AACpD,OAAI,WAAW,UAAU,CACvB,QAAO;IAAE;IAAM,iBAAiB,cAAc,UAAU,CAAC;IAAM;UAE3D;AAIR,SAAO;GAAE;GAAM,iBAAiB;GAAM;GACtC;;AAON,SAAS,kBAAkB,UAAiC;CAC1D,IAAI,MAAM;AACV,QAAO,MAAM;AACX,MACE,WAAW,KAAK,KAAK,sBAAsB,CAAC,IAC5C,WAAW,KAAK,KAAK,qBAAqB,CAAC,CAE3C,QAAO;EAET,MAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,WAAW,IAAK,QAAO;AAC3B,QAAM;;;AAIV,SAAS,gBAAgB,KAA4B;CACnD,MAAM,UAAU,KAAK,KAAK,eAAe;AACzC,KAAI,CAAC,WAAW,QAAQ,CAAE,QAAO;AACjC,KAAI;AAIF,SAHY,KAAK,MAAM,aAAa,SAAS,QAAQ,CAAC,CAG3C,QAAQ;SACb;AACN,SAAO;;;AAqBX,SAAS,sBAAsB,UAAsC;CACnE,MAAM,gBAAgB,kBAAkB,SAAS;AACjD,KAAI,CAAC,cAAe,QAAO,EAAE;CAE7B,MAAM,UAA8B,EAAE;CACtC,MAAM,cAAc,KAAK,eAAe,WAAW;AACnD,KAAI,CAAC,WAAW,YAAY,CAAE,QAAO,EAAE;CAMvC,IAAI;AACJ,KAAI;AACF,eAAa,YAAY,aAAa,EAAE,eAAe,MAAM,CAAC,CAC3D,QAAQ,MAAM,EAAE,aAAa,CAAC,CAC9B,KAAK,MAAM,KAAK,aAAa,EAAE,KAAK,CAAC;SAClC;AACN,SAAO,EAAE;;AAGX,MAAK,MAAM,aAAa,YAAY;EAClC,IAAI;AACJ,MAAI;AACF,aAAU,YAAY,WAAW,EAAE,eAAe,MAAM,CAAC,CACtD,QAAQ,MAAM,EAAE,aAAa,CAAC,CAC9B,KAAK,MAAM,KAAK,WAAW,EAAE,KAAK,CAAC;UAChC;AACN;;AAGF,OAAK,MAAM,UAAU,SAAS;GAC5B,MAAM,OAAO,gBAAgB,OAAO;AACpC,OAAI,CAAC,QAAQ,CAAC,KAAK,WAAW,GAAG,aAAa,GAAG,IAAI,CAAC,aAAa,KAAK,CACtE;GAEF,MAAM,YAAY,KAAK,QAAQ,QAAQ,YAAY;AACnD,OAAI,CAAC,WAAW,UAAU,CACxB;AAGF,WAAQ,KAAK;IACX;IACA,iBAAiB,cAAc,UAAU,CAAC;IAC3C,CAAC;;;AAIN,QAAO;;;AAQT,MAAa,iBAAiB,QAC5B,QAAQ,QAAQ,cAAc,OAAO,KAAK,IAAI,CAAC,CAAC,CACjD;;;;;;;;;;AAWD,SAAgB,gBACd,UACA,YACA,UAAkC,EAAE,EAChB;CACpB,MAAM,uBAAO,IAAI,KAAa;CAC9B,MAAM,UAA8B,EAAE;CAEtC,MAAM,cAAc,YAAgC;AAClD,OAAK,MAAM,UAAU,SAAS;AAC5B,OAAI,KAAK,IAAI,OAAO,KAAK,CAAE;AAC3B,QAAK,IAAI,OAAO,KAAK;AACrB,WAAQ,KAAK,OAAO;;;CAIxB,MAAM,YACJ,QAAQ,wBAAwB,QAAQ,QAAQ,QAAQ,eAAe,CAAC,CAAC;CAC3E,MAAM,uBAAuB,wBAAwB,SAAS;CAC9D,MAAM,4BACJ,cAAc,WAAW,EAAE,GAAG,wBAAwB,UAAU;CAClE,MAAM,yBAAyB;AAC7B,MAAI,eAAe,KAAM,QAAO,EAAE;AAClC,SAAO,sBAAsB,cAAc,eAAe;;AAG5D,KAAI,QAAQ,oBAAoB;AAC9B,aAAW,qBAAqB,CAAC;AAKjC,aAAW,kBAAkB,CAAC;AAC9B,aAAW,gBAAgB,CAAC;QACvB;AACL,aAAW,gBAAgB,CAAC;AAC5B,aAAW,qBAAqB,CAAC;AACjC,aAAW,kBAAkB,CAAC;;AAGhC,QAAO,QAAQ,MAAM,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,KAAK,CAAC;;;;;;;;;;;;;AAc7D,eAAsB,aAAa,WAAqC;AAItE,KAAI,CAAC,UAAU,WAAW,UAAU,IAAI,CAAC,aAAa,UAAU,CAC9D,OAAM,IAAI,MAAM,0CAA0C,YAAY;CAExE,MAAM,MAAO,MAAM,OAAO;AAC1B,QAAO,IAAI,cAAc;;;;ACjP3B,SAAS,cAAc,OAAsC;AAC3D,KAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;CACxD,MAAM,MAAM;AACZ,QACE,OAAO,IAAI,YAAY,YACvB,OAAO,IAAI,eAAe,YAC1B,OAAO,IAAI,gBAAgB;;;;;AAO/B,eAAsB,YACpB,SACA,UACe;CACf,MAAM,aAAa,gBAAgB,UAAU,KAAA,GAAW,EACtD,oBACE,QAAQ,IAAI,6CAA6C,KAC5D,CAAC;CACF,MAAM,EAAE,mBAAmB,YAAY;CAIvC,MAAM,aAAa,mBAAmB,OAAO,IAAI,IAAI,eAAe,GAAG;CACvE,MAAM,UAAU,aACZ,WAAW,QAAQ,MAAM,WAAW,IAAI,EAAE,KAAK,CAAC,GAChD;AAEJ,KAAI,QAAQ,WAAW,EAAG;CAE1B,MAAM,MAAqB;EACzB;EACA;EACA,WAAW,cAAc;EAC1B;AAED,MAAK,MAAM,EAAE,MAAM,qBAAqB,QACtC,KAAI;EACF,MAAM,WAAW,MAAM,aAAa,gBAAgB;AAEpD,MAAI,CAAC,cAAc,SAAS,EAAE;AAC5B,WAAQ,KACN,MAAM,OAAO,YAAY,KAAK,sCAAsC,CACrE;AACD;;AAGF,QAAM,SAAS,SAAS,IAAI;UACrB,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAQ,KACN,MAAM,OAAO,kCAAkC,KAAK,IAAI,UAAU,CACnE;;;;;ACvDP,MAAM,EAAE,YADQ,cAAc,OAAO,KAAK,IAAI,CAClB,qBAAqB;AAEjD,MAAM,cAAc,QAAQ,KAAK;AAEjC,MAAM,UAAU,IAAI,SAAS;AAE7B,QAAQ,KAAK,QAAQ,CAAC,YAAY,qBAAqB,CAAC,QAAQ,QAAQ;AAGxE,QAAQ,WAAW,aAAa;AAChC,QAAQ,WAAW,cAAc;AACjC,QAAQ,WAAW,cAAc;AACjC,QAAQ,WAAW,cAAc;AAGjC,MAAM,YAAY,SAAS,YAAY;AAEvC,QAAQ,MAAM,QAAQ,MAAM,EAAE,MAAM,QAAQ,CAAC"}
+{"version":3,"file":"fluid.mjs","names":[],"sources":["../../src/auth/profiles.ts","../../src/commands/login.ts","../../src/commands/logout.ts","../../src/commands/whoami.ts","../../src/commands/switch.ts","../../src/plugins/discovery.ts","../../src/plugins/format-load-line.ts","../../src/plugins/resolve-load-path.ts","../../src/plugins/should-log-plugin-loads.ts","../../src/plugins/loader.ts","../../src/bin/fluid.ts"],"sourcesContent":["/**\n * Helpers for constructing stored auth profiles.\n */\n\nimport type { FluidProfile } from \"../config/types.js\";\n\ninterface CreateFluidProfileInput {\n  readonly name: string;\n  readonly token: string;\n  readonly companyName: string;\n  readonly baseUrl: string;\n  readonly storedAt?: string;\n}\n\nexport function createFluidProfile({\n  name,\n  token,\n  companyName,\n  baseUrl,\n  storedAt,\n}: CreateFluidProfileInput): FluidProfile {\n  return {\n    name,\n    token,\n    companyName,\n    storedAt: storedAt ?? new Date().toISOString(),\n    baseUrl,\n  };\n}\n","/**\n * fluid login — authenticate via email MFA or API token\n */\n\nimport { Command } from \"commander\";\nimport chalk from \"chalk\";\nimport prompts from \"prompts\";\nimport ora from \"ora\";\nimport {\n  validateToken,\n  sendMfa,\n  confirmMfa,\n  getFluidApiBase,\n  type CompanyChoice,\n} from \"../auth/fluid-api.js\";\nimport { createFluidProfile } from \"../auth/profiles.js\";\nimport { updateConfig, readConfig } from \"../config/config.js\";\n\nasync function confirmOverwrite(profileName: string): Promise<boolean> {\n  const existing = readConfig().profiles[profileName];\n  if (!existing) return true;\n\n  const response = await prompts({\n    type: \"confirm\",\n    name: \"overwrite\",\n    message: `Profile \"${profileName}\" already exists (${existing.companyName}). Overwrite?`,\n    initial: false,\n  });\n  return Boolean(response[\"overwrite\"]);\n}\n\nfunction storeProfile(\n  profileName: string,\n  token: string,\n  companyName: string,\n): void {\n  updateConfig((config) => ({\n    ...config,\n    activeProfile: profileName,\n    profiles: {\n      ...config.profiles,\n      [profileName]: createFluidProfile({\n        name: profileName,\n        token,\n        companyName,\n        baseUrl: getFluidApiBase(),\n      }),\n    },\n  }));\n}\n\nasync function loginWithToken(\n  token: string,\n  profileName?: string,\n): Promise<void> {\n  const spinner = ora(\"Validating token...\").start();\n  const result = await validateToken(token);\n\n  if (!result.success) {\n    spinner.fail(chalk.red(result.error.message));\n    if (result.error.details) {\n      console.log(chalk.dim(result.error.details));\n    }\n    process.exitCode = 1;\n    return;\n  }\n\n  const name = profileName ?? result.value.name;\n\n  // Stop spinner before potential interactive prompt to avoid terminal corruption\n  spinner.succeed(\n    chalk.green(`Token valid — ${chalk.bold(result.value.name)}`),\n  );\n\n  if (!(await confirmOverwrite(name))) {\n    console.log(\n      chalk.yellow(\"Login cancelled — existing profile not overwritten.\"),\n    );\n    return;\n  }\n\n  storeProfile(name, token, result.value.name);\n  console.log(\n    chalk.green(\n      `Logged in as ${chalk.bold(result.value.name)} (profile: ${chalk.bold(name)})`,\n    ),\n  );\n}\n\nasync function loginWithEmail(\n  initialEmail?: string,\n  profileName?: string,\n): Promise<void> {\n  // 1. Prompt for email\n  let email = initialEmail;\n  if (!email) {\n    const response = await prompts({\n      type: \"text\",\n      name: \"email\",\n      message: \"Enter your email\",\n    });\n    email = response[\"email\"] as string | undefined;\n    if (!email) {\n      console.log(chalk.red(\"No email provided. Aborting.\"));\n      process.exitCode = 1;\n      return;\n    }\n  }\n\n  // 2. Send MFA code\n  const sendSpinner = ora(\"Sending verification code...\").start();\n  const sendResult = await sendMfa(email);\n\n  if (!sendResult.success) {\n    sendSpinner.fail(chalk.red(sendResult.error.message));\n    if (sendResult.error.details) {\n      console.log(chalk.dim(sendResult.error.details));\n    }\n    process.exitCode = 1;\n    return;\n  }\n\n  const expiresAt = new Date(sendResult.value.expiresAt);\n  const expiresInMs = expiresAt.getTime() - Date.now();\n  const expiresInMin = Math.round(expiresInMs / 1000 / 60);\n  const expiryNote =\n    expiresInMin > 0\n      ? `expires in ~${expiresInMin} min`\n      : \"code may expire soon — check your email quickly\";\n  sendSpinner.succeed(\n    `Verification code sent — check your email (${expiryNote})`,\n  );\n\n  // 3. Prompt for verification code (retry up to 3 times on invalid code)\n  const MAX_CODE_ATTEMPTS = 3;\n  let confirmResult;\n  for (let attempt = 1; attempt <= MAX_CODE_ATTEMPTS; attempt++) {\n    const codeResponse = await prompts({\n      type: \"text\",\n      name: \"code\",\n      message: \"Enter the 6-digit code\",\n    });\n    const code = codeResponse[\"code\"] as string | undefined;\n    if (!code) {\n      console.log(chalk.red(\"No code provided. Aborting.\"));\n      process.exitCode = 1;\n      return;\n    }\n    if (!/^\\d{6}$/.test(code)) {\n      console.log(chalk.red(\"Code must be exactly 6 digits.\"));\n      if (attempt < MAX_CODE_ATTEMPTS) continue;\n      console.log(chalk.red(\"Too many invalid attempts. Aborting.\"));\n      process.exitCode = 1;\n      return;\n    }\n\n    const confirmSpinner = ora(\"Verifying code...\").start();\n    confirmResult = await confirmMfa(sendResult.value.uuid, code);\n\n    if (confirmResult.success) {\n      confirmSpinner.succeed(\"Verified\");\n      break;\n    }\n\n    // Retryable: wrong code, still have attempts left\n    if (\n      confirmResult.error.code === \"INVALID_CODE\" &&\n      attempt < MAX_CODE_ATTEMPTS\n    ) {\n      confirmSpinner.fail(\n        chalk.red(\n          `${confirmResult.error.message} (attempt ${attempt}/${MAX_CODE_ATTEMPTS})`,\n        ),\n      );\n      continue;\n    }\n\n    // Non-retryable (expired, unreachable, etc.) or final attempt\n    confirmSpinner.fail(chalk.red(confirmResult.error.message));\n    if (confirmResult.error.details) {\n      console.log(chalk.dim(confirmResult.error.details));\n    }\n    process.exitCode = 1;\n    return;\n  }\n\n  if (!confirmResult?.success) return;\n\n  const { companies } = confirmResult.value;\n\n  if (companies.length === 0) {\n    console.log(chalk.red(\"No companies found for this account.\"));\n    process.exitCode = 1;\n    return;\n  }\n\n  // 4. Select company (auto-select if only one)\n  let selected: CompanyChoice;\n  if (companies.length === 1) {\n    const first = companies[0];\n    if (!first) {\n      console.log(chalk.red(\"No companies found for this account.\"));\n      process.exitCode = 1;\n      return;\n    }\n    selected = first;\n  } else {\n    // Key on `c.id`, not the array index, and resolve via `.find` —\n    // `prompts` autocomplete returns the raw typed string on Enter when\n    // the user hasn't arrow-key-highlighted a filtered choice, so an\n    // array-index lookup ends up asking for `companies[\"Fluid\"]` and\n    // failing with \"Invalid selection\". Same shape as `switch.ts`.\n    const companyChoices = companies.map((c) => ({\n      title: `${c.name} (${c.shopName})`,\n      value: c.id,\n    }));\n\n    const selectResponse = await prompts({\n      type: \"autocomplete\",\n      name: \"companyId\",\n      message: \"Select a company (type to search)\",\n      choices: companyChoices,\n      suggest: (input, choices) =>\n        Promise.resolve(\n          input\n            ? choices.filter((c) =>\n                c.title.toLowerCase().includes(input.toLowerCase()),\n              )\n            : choices,\n        ),\n    });\n\n    const companyId = selectResponse[\"companyId\"] as number | undefined;\n\n    if (companyId === undefined) {\n      console.log(chalk.red(\"No company selected. Aborting.\"));\n      process.exitCode = 1;\n      return;\n    }\n    const choice = companies.find((c) => c.id === companyId);\n    if (!choice) {\n      console.log(chalk.red(\"Invalid selection. Aborting.\"));\n      process.exitCode = 1;\n      return;\n    }\n    selected = choice;\n  }\n\n  // 5. Store profile\n  const name = profileName ?? selected.name;\n\n  if (!(await confirmOverwrite(name))) {\n    console.log(\n      chalk.yellow(\"Login cancelled — existing profile not overwritten.\"),\n    );\n    return;\n  }\n\n  storeProfile(name, selected.jwt, selected.name);\n  console.log(\n    chalk.green(\n      `Logged in as ${chalk.bold(selected.name)} (profile: ${chalk.bold(name)})`,\n    ),\n  );\n}\n\nexport const loginCommand = new Command(\"login\")\n  .description(\"Authenticate with the Fluid API\")\n  .option(\n    \"-t, --token <token>\",\n    \"API token (skips email flow). Prefer FLUID_TOKEN env var to avoid shell history exposure\",\n  )\n  .option(\"-e, --email <email>\", \"Email address for MFA login\")\n  .option(\"-n, --name <name>\", \"Profile name (defaults to company name)\")\n  .action(async (opts: { token?: string; email?: string; name?: string }) => {\n    // Accept token from env var to avoid shell history / process listing exposure\n    const token = opts.token ?? process.env[\"FLUID_TOKEN\"];\n    if (token) {\n      if (opts.token) {\n        console.log(\n          chalk.yellow(\n            \"Warning: token passed via --token flag is visible in shell history and process listings. \" +\n              \"Prefer the FLUID_TOKEN environment variable.\",\n          ),\n        );\n      }\n      await loginWithToken(token, opts.name);\n    } else {\n      await loginWithEmail(opts.email, opts.name);\n    }\n  });\n","/**\n * fluid logout — remove stored auth profile(s)\n */\n\nimport { Command } from \"commander\";\nimport chalk from \"chalk\";\nimport { readConfig, writeConfig } from \"../config/config.js\";\n\nexport const logoutCommand = new Command(\"logout\")\n  .description(\"Remove stored authentication\")\n  .option(\"-a, --all\", \"Remove all profiles\")\n  .action((opts: { all?: boolean }) => {\n    const config = readConfig();\n\n    if (opts.all) {\n      writeConfig({\n        ...config,\n        activeProfile: null,\n        profiles: {},\n      });\n      console.log(chalk.green(\"All profiles removed.\"));\n      return;\n    }\n\n    if (!config.activeProfile) {\n      console.log(chalk.yellow(\"Not currently logged in.\"));\n      return;\n    }\n\n    const profileName = config.activeProfile;\n    const { [profileName]: _, ...remainingProfiles } = config.profiles;\n\n    // Pick the first remaining profile as active, or null\n    const nextActive = Object.keys(remainingProfiles)[0] ?? null;\n\n    writeConfig({\n      ...config,\n      activeProfile: nextActive,\n      profiles: remainingProfiles,\n    });\n\n    console.log(\n      chalk.green(`Logged out of profile ${chalk.bold(profileName)}.`),\n    );\n    if (nextActive) {\n      console.log(chalk.dim(`Switched to profile ${nextActive}.`));\n    }\n  });\n","/**\n * fluid whoami — show current auth profile and validate against API\n */\n\nimport { Command } from \"commander\";\nimport chalk from \"chalk\";\nimport ora from \"ora\";\nimport { getActiveProfile } from \"../auth/token.js\";\nimport { validateToken } from \"../auth/fluid-api.js\";\n\nexport const whoamiCommand = new Command(\"whoami\")\n  .description(\"Show the current authenticated profile\")\n  .action(async () => {\n    const profile = getActiveProfile();\n\n    if (!profile) {\n      console.log(\n        chalk.yellow(\"Not logged in. Run `fluid login` to authenticate.\"),\n      );\n      process.exitCode = 1;\n      return;\n    }\n\n    const spinner = ora(\"Verifying token...\").start();\n    const result = await validateToken(profile.token);\n\n    if (!result.success) {\n      spinner.fail(chalk.red(\"Token is no longer valid.\"));\n      console.log(chalk.dim(`Profile: ${profile.name}`));\n      console.log(chalk.dim(\"Run `fluid login` to re-authenticate.\"));\n      process.exitCode = 1;\n      return;\n    }\n\n    spinner.succeed(chalk.green(\"Authenticated\"));\n    console.log(`  Profile:  ${chalk.bold(profile.name)}`);\n    console.log(`  Company:  ${chalk.bold(result.value.name)}`);\n    console.log(`  Stored:   ${chalk.dim(profile.storedAt)}`);\n  });\n","/**\n * fluid switch — switch between companies (fetched from API, with local fallback)\n */\n\nimport { Command } from \"commander\";\nimport chalk from \"chalk\";\nimport prompts from \"prompts\";\nimport ora from \"ora\";\nimport {\n  fetchUserCompanies,\n  switchCompany,\n  FLUID_API_ERROR,\n  getFluidApiBase,\n  type UserCompany,\n} from \"../auth/fluid-api.js\";\nimport { createFluidProfile } from \"../auth/profiles.js\";\nimport { getActiveProfile } from \"../auth/token.js\";\nimport { readConfig, updateConfig } from \"../config/config.js\";\n\nasync function localSwitch(profileArg?: string): Promise<void> {\n  const config = readConfig();\n  const profileNames = Object.keys(config.profiles);\n\n  if (profileNames.length === 0) {\n    console.log(chalk.yellow(\"No profiles stored. Run `fluid login` first.\"));\n    process.exitCode = 1;\n    return;\n  }\n\n  let targetProfile = profileArg;\n\n  if (!targetProfile) {\n    const profileChoices = profileNames.map((name) => ({\n      title: name === config.activeProfile ? `${name} (active)` : name,\n      value: name,\n    }));\n\n    const response = await prompts({\n      type: \"autocomplete\",\n      name: \"profile\",\n      message: \"Select a profile (type to search)\",\n      choices: profileChoices,\n      suggest: (input, choices) =>\n        Promise.resolve(\n          input\n            ? choices.filter((c) =>\n                c.value.toLowerCase().includes(input.toLowerCase()),\n              )\n            : choices,\n        ),\n    });\n    targetProfile = response[\"profile\"] as string | undefined;\n\n    if (!targetProfile) {\n      console.log(chalk.dim(\"Cancelled.\"));\n      return;\n    }\n  }\n\n  if (!config.profiles[targetProfile]) {\n    console.log(chalk.red(`Profile \"${targetProfile}\" not found.`));\n    console.log(chalk.dim(`Available: ${profileNames.join(\", \")}`));\n    process.exitCode = 1;\n    return;\n  }\n\n  updateConfig((c) => ({ ...c, activeProfile: targetProfile! }));\n  console.log(chalk.green(`Switched to profile ${chalk.bold(targetProfile)}.`));\n}\n\nasync function selectCompany(\n  companies: UserCompany[],\n  activeCompanyName: string | undefined,\n): Promise<UserCompany | undefined> {\n  const companyChoices = companies.map((c) => ({\n    title:\n      c.name === activeCompanyName\n        ? `${c.name} ${chalk.dim(\"(active)\")}`\n        : c.name,\n    value: c.id,\n  }));\n\n  const response = await prompts({\n    type: \"autocomplete\",\n    name: \"companyId\",\n    message: \"Select a company (type to search)\",\n    choices: companyChoices,\n    suggest: (input, choices) =>\n      Promise.resolve(\n        input\n          ? choices.filter((c) =>\n              c.title.toLowerCase().includes(input.toLowerCase()),\n            )\n          : choices,\n      ),\n  });\n\n  const companyId = response[\"companyId\"] as number | undefined;\n  if (companyId === undefined) return undefined;\n  return companies.find((c) => c.id === companyId);\n}\n\nasync function performSwitch(\n  token: string,\n  company: UserCompany,\n  baseUrl?: string,\n): Promise<void> {\n  const spinner = ora(`Switching to ${chalk.bold(company.name)}...`).start();\n  const result = await switchCompany(token, company.id, baseUrl);\n\n  if (!result.success) {\n    if (result.error.code === FLUID_API_ERROR.INVALID_TOKEN.code) {\n      spinner.fail(\n        chalk.red(\n          \"Your session has expired. Please run `fluid login` to re-authenticate.\",\n        ),\n      );\n    } else {\n      spinner.fail(chalk.red(result.error.message));\n      if (result.error.details) {\n        console.log(chalk.dim(result.error.details));\n      }\n    }\n    process.exitCode = 1;\n    return;\n  }\n\n  const { companyName, jwt } = result.value;\n\n  updateConfig((config) => ({\n    ...config,\n    activeProfile: companyName,\n    profiles: {\n      ...config.profiles,\n      [companyName]: createFluidProfile({\n        name: companyName,\n        token: jwt,\n        companyName,\n        baseUrl: baseUrl ?? getFluidApiBase(),\n      }),\n    },\n  }));\n\n  spinner.succeed(\n    chalk.green(\n      `Switched to ${chalk.bold(companyName)} (profile: ${chalk.bold(companyName)})`,\n    ),\n  );\n}\n\nexport const switchCommand = new Command(\"switch\")\n  .description(\"Switch between companies\")\n  .argument(\"[profile]\", \"Company or profile name to switch to\")\n  .action(async (profileArg?: string) => {\n    const activeProfile = getActiveProfile();\n\n    if (!activeProfile) {\n      console.log(chalk.yellow(\"Not logged in. Run `fluid login` first.\"));\n      process.exitCode = 1;\n      return;\n    }\n\n    const token = activeProfile.token;\n    const activeCompanyName = activeProfile.companyName;\n    const activeBaseUrl = activeProfile.baseUrl ?? getFluidApiBase();\n\n    // Fetch companies from API\n    const spinner = ora(\"Fetching companies...\").start();\n    const result = await fetchUserCompanies(token, activeBaseUrl);\n\n    if (!result.success) {\n      if (result.error.code === FLUID_API_ERROR.INVALID_TOKEN.code) {\n        spinner.fail(\n          chalk.red(\n            \"Your session has expired. Please run `fluid login` to re-authenticate.\",\n          ),\n        );\n        process.exitCode = 1;\n        return;\n      }\n      spinner.warn(\n        chalk.yellow(\n          `Could not fetch companies from API: ${result.error.message}`,\n        ),\n      );\n      console.log(chalk.dim(\"Falling back to locally stored profiles.\"));\n      await localSwitch(profileArg);\n      return;\n    }\n\n    const companies = result.value;\n    spinner.succeed(\n      `Found ${companies.length} company${companies.length === 1 ? \"\" : \"ies\"}`,\n    );\n\n    if (companies.length === 0) {\n      console.log(chalk.yellow(\"No companies found for this account.\"));\n      process.exitCode = 1;\n      return;\n    }\n\n    // If a profile argument was passed, match against API companies first\n    if (profileArg) {\n      const match = companies.find(\n        (c) => c.name.toLowerCase() === profileArg.toLowerCase(),\n      );\n\n      if (match) {\n        await performSwitch(token, match, activeBaseUrl);\n        return;\n      }\n\n      // Fall back to local profile matching\n      const config = readConfig();\n      if (config.profiles[profileArg]) {\n        updateConfig((c) => ({ ...c, activeProfile: profileArg! }));\n        console.log(\n          chalk.green(`Switched to profile ${chalk.bold(profileArg)}.`),\n        );\n        return;\n      }\n\n      console.log(chalk.red(`Company or profile \"${profileArg}\" not found.`));\n      process.exitCode = 1;\n      return;\n    }\n\n    // Interactive selection\n    const selected = await selectCompany(companies, activeCompanyName);\n    if (!selected) {\n      console.log(chalk.dim(\"Cancelled.\"));\n      return;\n    }\n\n    await performSwitch(token, selected, activeBaseUrl);\n  });\n","/**\n * Auto-discover @fluid-app CLI plugins.\n *\n * Three discovery strategies run in order:\n *\n * 1a. **node_modules scan (cwd)** — look in `<cwd>/node_modules/@fluid-app/`\n *     for directories whose names match the plugin naming convention.\n *     This is the primary mechanism for project-local plugin installs.\n *\n * 1b. **node_modules scan (CLI install location)** — look in the\n *     `node_modules/@fluid-app/` directory containing the CLI core package\n *     itself. This covers global installs where plugins are sibling packages\n *     under the same global `node_modules/`.\n *\n * 2.  **Workspace scan** — walk upward from the CLI core package root to the\n *     monorepo workspace root, then scan `packages/` for sibling plugin\n *     packages. This covers the pnpm-workspace development case where\n *     plugins are not symlinked into `node_modules`.\n *\n * Only first-party @fluid-app scoped packages are loaded.\n */\n\nimport { existsSync, readFileSync, readdirSync, realpathSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { fileURLToPath, pathToFileURL } from \"node:url\";\n\nconst PLUGIN_SCOPE = \"@fluid-app\";\n\n/**\n * A plugin package name must match one of these patterns:\n *  - @fluid-app/fluid-cli-*      (standard)\n *  - @fluid-app/*-cli-commands   (v2025-06 style)\n */\nfunction isPluginName(packageName: string): boolean {\n  if (!packageName.startsWith(`${PLUGIN_SCOPE}/`)) return false;\n  const bare = packageName.slice(`${PLUGIN_SCOPE}/`.length);\n  return bare.startsWith(\"fluid-cli-\") || bare.endsWith(\"-cli-commands\");\n}\n\n// ---------------------------------------------------------------------------\n// Strategy 1: node_modules scan (production / published installs)\n// ---------------------------------------------------------------------------\n\nfunction discoverFromNodeModules(basePath: string): DiscoveredPlugin[] {\n  const scopeDir = join(basePath, \"node_modules\", PLUGIN_SCOPE);\n\n  if (!existsSync(scopeDir)) return [];\n\n  return readdirSync(scopeDir, { withFileTypes: true })\n    .filter(\n      (entry) =>\n        (entry.isDirectory() || entry.isSymbolicLink()) &&\n        isPluginName(`${PLUGIN_SCOPE}/${entry.name}`),\n    )\n    .map((entry) => {\n      const name = `${PLUGIN_SCOPE}/${entry.name}`;\n      const entryDir = join(scopeDir, entry.name);\n      // Resolve symlinks (pnpm workspace links) to file:// URLs so the\n      // dynamic import works regardless of pnpm's strict module resolution.\n      try {\n        const realDir = realpathSync(entryDir);\n        const distEntry = join(realDir, \"dist\", \"index.mjs\");\n        if (existsSync(distEntry)) {\n          return { name, importSpecifier: pathToFileURL(distEntry).href };\n        }\n      } catch {\n        // Broken symlink or other fs error — fall through to bare specifier\n      }\n      // Fallback to bare specifier for non-workspace (published) installs\n      return { name, importSpecifier: name };\n    });\n}\n\n// ---------------------------------------------------------------------------\n// Strategy 2: workspace scan (pnpm monorepo development)\n// ---------------------------------------------------------------------------\n\nfunction findWorkspaceRoot(startDir: string): string | null {\n  let dir = startDir;\n  while (true) {\n    if (\n      existsSync(join(dir, \"pnpm-workspace.yaml\")) ||\n      existsSync(join(dir, \"pnpm-workspace.yml\"))\n    ) {\n      return dir;\n    }\n    const parent = dirname(dir);\n    if (parent === dir) return null;\n    dir = parent;\n  }\n}\n\nfunction readPackageName(dir: string): string | null {\n  const pkgPath = join(dir, \"package.json\");\n  if (!existsSync(pkgPath)) return null;\n  try {\n    const pkg = JSON.parse(readFileSync(pkgPath, \"utf-8\")) as {\n      name?: string;\n    };\n    return pkg.name ?? null;\n  } catch {\n    return null;\n  }\n}\n\nexport interface DiscoveredPlugin {\n  name: string;\n  importSpecifier: string;\n}\n\nexport interface PluginDiscoveryOptions {\n  /**\n   * Prefer plugins installed beside this CLI over same-named packages in the\n   * target project's node_modules. Desktop callers use this so an older\n   * project-local plugin cannot override the command contract bundled with\n   * the app. Normal project-local CLI invocations keep the existing order.\n   */\n  preferInstallation?: boolean;\n  /** Test seam for the directory containing the CLI installation. */\n  installationBasePath?: string;\n}\n\nfunction discoverFromWorkspace(startDir: string): DiscoveredPlugin[] {\n  const workspaceRoot = findWorkspaceRoot(startDir);\n  if (!workspaceRoot) return [];\n\n  const results: DiscoveredPlugin[] = [];\n  const packagesDir = join(workspaceRoot, \"packages\");\n  if (!existsSync(packagesDir)) return [];\n\n  // Scan exactly two levels deep under packages/ (e.g. packages/cli/themes,\n  // packages/cli/v2025-06). This matches the monorepo convention where all\n  // packages live at packages/<domain>/<package>/.\n  // If a plugin is added at a different depth, update this scan accordingly.\n  let domainDirs: string[];\n  try {\n    domainDirs = readdirSync(packagesDir, { withFileTypes: true })\n      .filter((e) => e.isDirectory())\n      .map((e) => join(packagesDir, e.name));\n  } catch {\n    return [];\n  }\n\n  for (const domainDir of domainDirs) {\n    let subDirs: string[];\n    try {\n      subDirs = readdirSync(domainDir, { withFileTypes: true })\n        .filter((e) => e.isDirectory())\n        .map((e) => join(domainDir, e.name));\n    } catch {\n      continue;\n    }\n\n    for (const subDir of subDirs) {\n      const name = readPackageName(subDir);\n      if (!name || !name.startsWith(`${PLUGIN_SCOPE}/`) || !isPluginName(name))\n        continue;\n\n      const distEntry = join(subDir, \"dist\", \"index.mjs\");\n      if (!existsSync(distEntry)) {\n        continue;\n      }\n\n      results.push({\n        name,\n        importSpecifier: pathToFileURL(distEntry).href,\n      });\n    }\n  }\n\n  return results;\n}\n\n// ---------------------------------------------------------------------------\n// Exported API\n// ---------------------------------------------------------------------------\n\n/** Resolved once — the CLI core package root (`packages/cli/core/`). */\nexport const corePackageDir = dirname(\n  dirname(dirname(fileURLToPath(import.meta.url))),\n);\n\n/**\n * Discover installed plugin packages. Returns a de-duplicated, sorted list\n * of `{ name, importSpecifier }` objects.\n *\n * @param basePath - Directory to scan for `node_modules/@fluid-app/`\n * @param searchFrom - Starting directory for workspace root detection\n *   (walked upward via `findWorkspaceRoot`). Pass `null` to skip workspace\n *   scanning (useful in tests). Defaults to `corePackageDir`.\n */\nexport function discoverPlugins(\n  basePath: string,\n  searchFrom?: string | null,\n  options: PluginDiscoveryOptions = {},\n): DiscoveredPlugin[] {\n  const seen = new Set<string>();\n  const results: DiscoveredPlugin[] = [];\n\n  const addPlugins = (plugins: DiscoveredPlugin[]) => {\n    for (const plugin of plugins) {\n      if (seen.has(plugin.name)) continue;\n      seen.add(plugin.name);\n      results.push(plugin);\n    }\n  };\n\n  const cliParent =\n    options.installationBasePath ?? dirname(dirname(dirname(corePackageDir)));\n  const projectPlugins = () => discoverFromNodeModules(basePath);\n  const installationPlugins = () =>\n    cliParent === basePath ? [] : discoverFromNodeModules(cliParent);\n  const workspacePlugins = () => {\n    if (searchFrom === null) return [];\n    return discoverFromWorkspace(searchFrom ?? corePackageDir);\n  };\n\n  if (options.preferInstallation) {\n    addPlugins(installationPlugins());\n    // In a monorepo development build, resolveFluidBinary() deliberately\n    // realpaths the CLI into packages/cli/core. Its sibling plugins are then\n    // discovered from the workspace rather than an installation-level\n    // node_modules, so they are part of the same trusted CLI installation.\n    addPlugins(workspacePlugins());\n    addPlugins(projectPlugins());\n  } else {\n    addPlugins(projectPlugins());\n    addPlugins(installationPlugins());\n    addPlugins(workspacePlugins());\n  }\n\n  return results.sort((a, b) => a.name.localeCompare(b.name));\n}\n\n/**\n * Dynamically import a plugin module and return its default export.\n *\n * @internal Not intended for external callers. Only called with specifiers\n * produced by {@link discoverPlugins}:\n * - bare package names (e.g. `@fluid-app/fluid-cli-portal`) from the\n *   node_modules scan, validated by {@link isPluginName}.\n * - `file://` URLs from {@link discoverFromWorkspace}, which constructs\n *   them internally from validated workspace paths (`packages/` tree,\n *   `dist/index.mjs`). These are trusted internal specifiers.\n */\nexport async function importPlugin(specifier: string): Promise<unknown> {\n  // file:// URLs are trusted — they originate from discoverFromWorkspace\n  // which builds them from validated workspace paths under packages/.\n  // For bare package names, verify they match the plugin naming convention.\n  if (!specifier.startsWith(\"file://\") && !isPluginName(specifier)) {\n    throw new Error(`Refusing to import non-plugin package: ${specifier}`);\n  }\n  const mod = (await import(specifier)) as Record<string, unknown>;\n  return mod[\"default\"] ?? mod;\n}\n","/**\n * Format one-line diagnostics naming a CLI plugin build and where it was\n * resolved from. The resolved path is the load-bearing detail: a workspace\n * build and a published copy share the same name and version, so the path is\n * the only thing that distinguishes them. See CURRENT-3218.\n */\n\nimport { fileURLToPath } from \"node:url\";\n\nexport interface PluginLoadInfo {\n  readonly name: string;\n  readonly version: string;\n  /**\n   * Where the plugin was resolved from — an absolute `file://` URL (workspace\n   * or published install, resolved upstream) or, only when resolution failed,\n   * a bare package name.\n   */\n  readonly importSpecifier: string;\n  /**\n   * Whether installation-bundled plugins were preferred over project-local\n   * ones (`FLUID_CLI_PREFER_INSTALLATION_PLUGINS=1`, set by Mist).\n   */\n  readonly preferInstallation: boolean;\n}\n\nexport interface PluginLoadFailureInfo {\n  readonly name: string;\n  readonly importSpecifier: string;\n  readonly preferInstallation: boolean;\n  readonly message: string;\n}\n\nexport function modeLabel(preferInstallation: boolean): string {\n  return preferInstallation ? \"installation-preferred\" : \"project-first\";\n}\n\n/**\n * Render a specifier for display: `file://` URLs become absolute filesystem\n * paths; anything else is shown verbatim. Never throws — a malformed `file://`\n * specifier falls back to its raw form so a diagnostic can never turn a\n * successful load into a reported failure.\n */\nexport function displaySource(importSpecifier: string): string {\n  if (!importSpecifier.startsWith(\"file://\")) return importSpecifier;\n  try {\n    return fileURLToPath(importSpecifier);\n  } catch {\n    return importSpecifier;\n  }\n}\n\nexport function formatPluginLoadLine(info: PluginLoadInfo): string {\n  return `Loaded plugin ${info.name}@${info.version} from ${displaySource(\n    info.importSpecifier,\n  )} [${modeLabel(info.preferInstallation)}]`;\n}\n\nexport function formatPluginLoadFailure(info: PluginLoadFailureInfo): string {\n  return `Failed to load plugin ${info.name} from ${displaySource(\n    info.importSpecifier,\n  )} [${modeLabel(info.preferInstallation)}]: ${info.message}`;\n}\n","/**\n * Resolve a plugin import specifier to a concrete path for diagnostics.\n *\n * The node_modules discovery strategy falls back to a bare package name when it\n * cannot realpath a workspace symlink — precisely the published-install case\n * where the path is the only thing that would reveal a stale plugin winning.\n * Resolving the bare specifier recovers that path. See CURRENT-3218.\n */\n\nexport type Resolver = (specifier: string) => string;\n\nconst defaultResolver: Resolver = (specifier) => import.meta.resolve(specifier);\n\n/**\n * Return a `file://` URL for `importSpecifier`. `file://` specifiers (already\n * resolved by discovery) pass through untouched; bare specifiers are resolved\n * via `resolve`. If resolution throws, the bare specifier is returned so a\n * diagnostic degrades gracefully rather than failing the load.\n */\nexport function resolveLoadPath(\n  importSpecifier: string,\n  resolve: Resolver = defaultResolver,\n): string {\n  if (importSpecifier.startsWith(\"file://\")) return importSpecifier;\n  try {\n    return resolve(importSpecifier);\n  } catch {\n    return importSpecifier;\n  }\n}\n","/**\n * Decide whether to print the per-plugin \"Loaded plugin …\" diagnostics.\n *\n * A fluid-mono checkout resolves ~a dozen plugin packages, so emitting a line\n * for each on every command (including `--help` and tab-completion, and into\n * Mist's captured stderr dialog) is noise. The success diagnostics are gated\n * behind an explicit opt-in; load *failures* are always surfaced by the loader\n * regardless of this flag. See CURRENT-3218.\n */\n\nfunction isTruthyFlag(value: string | undefined): boolean {\n  return value === \"1\" || value === \"true\";\n}\n\nexport function shouldLogPluginLoads(\n  argv: readonly string[] = process.argv,\n  env: NodeJS.ProcessEnv = process.env,\n): boolean {\n  if (argv.includes(\"--verbose\")) return true;\n  return isTruthyFlag(env[\"FLUID_CLI_DEBUG\"] ?? env[\"FLUID_CLI_VERBOSE\"]);\n}\n","/**\n * Plugin loader — orchestrates discovery and registration\n */\n\nimport type { Command } from \"commander\";\nimport chalk from \"chalk\";\nimport { getConfigDir } from \"../config/paths.js\";\nimport { getAuthToken } from \"../auth/token.js\";\nimport { readConfig } from \"../config/config.js\";\nimport type { FluidPlugin, PluginContext } from \"./types.js\";\nimport { discoverPlugins, importPlugin } from \"./discovery.js\";\nimport {\n  formatPluginLoadLine,\n  formatPluginLoadFailure,\n} from \"./format-load-line.js\";\nimport { resolveLoadPath } from \"./resolve-load-path.js\";\nimport { shouldLogPluginLoads } from \"./should-log-plugin-loads.js\";\n\nfunction isFluidPlugin(value: unknown): value is FluidPlugin {\n  if (typeof value !== \"object\" || value === null) return false;\n  const obj = value as Record<string, unknown>;\n  return (\n    typeof obj[\"name\"] === \"string\" &&\n    typeof obj[\"version\"] === \"string\" &&\n    typeof obj[\"register\"] === \"function\"\n  );\n}\n\n/**\n * Discover, import, and register all installed plugins\n */\nexport async function loadPlugins(\n  program: Command,\n  basePath: string,\n): Promise<void> {\n  const preferInstallation =\n    process.env[\"FLUID_CLI_PREFER_INSTALLATION_PLUGINS\"] === \"1\";\n  const discovered = discoverPlugins(basePath, undefined, {\n    preferInstallation,\n  });\n  const { enabledPlugins } = readConfig();\n\n  // If enabledPlugins is set, only load explicitly allowed plugins.\n  // This acts as an allow-list to prevent accidental supply-chain execution.\n  const allowedSet = enabledPlugins !== null ? new Set(enabledPlugins) : null;\n  const plugins = allowedSet\n    ? discovered.filter((p) => allowedSet.has(p.name))\n    : discovered;\n\n  if (plugins.length === 0) return;\n\n  const ctx: PluginContext = {\n    program,\n    getAuthToken,\n    configDir: getConfigDir(),\n  };\n\n  // Success diagnostics are opt-in (a checkout resolves ~a dozen plugins);\n  // load failures below are always surfaced. See CURRENT-3218.\n  const verbose = shouldLogPluginLoads();\n\n  for (const { name, importSpecifier } of plugins) {\n    // Resolve to a concrete path so a published install is distinguishable\n    // from a workspace build at a glance.\n    const source = resolveLoadPath(importSpecifier);\n    try {\n      const exported = await importPlugin(importSpecifier);\n\n      if (!isFluidPlugin(exported)) {\n        console.warn(\n          chalk.yellow(`Warning: ${name} does not export a valid FluidPlugin`),\n        );\n        continue;\n      }\n\n      await exported.register(ctx);\n\n      if (verbose) {\n        console.error(\n          chalk.dim(\n            formatPluginLoadLine({\n              name: exported.name,\n              version: exported.version,\n              importSpecifier: source,\n              preferInstallation,\n            }),\n          ),\n        );\n      }\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      // Always name what failed to load and from where — this is exactly the\n      // invisible-artifact failure the diagnostic exists to catch.\n      console.warn(\n        chalk.yellow(\n          `Warning: ${formatPluginLoadFailure({\n            name,\n            importSpecifier: source,\n            preferInstallation,\n            message,\n          })}`,\n        ),\n      );\n    }\n  }\n}\n","#!/usr/bin/env node\n\nimport { createRequire } from \"node:module\";\nimport { Command } from \"commander\";\nimport { loginCommand } from \"../commands/login.js\";\nimport { logoutCommand } from \"../commands/logout.js\";\nimport { whoamiCommand } from \"../commands/whoami.js\";\nimport { switchCommand } from \"../commands/switch.js\";\nimport { loadPlugins } from \"../plugins/loader.js\";\n\nconst require = createRequire(import.meta.url);\nconst { version } = require(\"../../package.json\") as { version: string };\n\nconst packageRoot = process.cwd();\n\nconst program = new Command();\n\nprogram.name(\"fluid\").description(\"Fluid Commerce CLI\").version(version);\n\n// Built-in auth commands\nprogram.addCommand(loginCommand);\nprogram.addCommand(logoutCommand);\nprogram.addCommand(whoamiCommand);\nprogram.addCommand(switchCommand);\n\n// Discover and load all plugins (auto-discovered from node_modules and workspace)\nawait loadPlugins(program, packageRoot);\n\nprogram.parse(process.argv, { from: \"node\" });\n"],"mappings":";;;;;;;;;;;AAcA,SAAgB,mBAAmB,EACjC,MACA,OACA,aACA,SACA,YACwC;AACxC,QAAO;EACL;EACA;EACA;EACA,UAAU,6BAAY,IAAI,MAAM,EAAC,aAAa;EAC9C;EACD;;;;;;;ACTH,eAAe,iBAAiB,aAAuC;CACrE,MAAM,WAAW,YAAY,CAAC,SAAS;AACvC,KAAI,CAAC,SAAU,QAAO;CAEtB,MAAM,WAAW,MAAM,QAAQ;EAC7B,MAAM;EACN,MAAM;EACN,SAAS,YAAY,YAAY,oBAAoB,SAAS,YAAY;EAC1E,SAAS;EACV,CAAC;AACF,QAAO,QAAQ,SAAS,aAAa;;AAGvC,SAAS,aACP,aACA,OACA,aACM;AACN,eAAc,YAAY;EACxB,GAAG;EACH,eAAe;EACf,UAAU;GACR,GAAG,OAAO;IACT,cAAc,mBAAmB;IAChC,MAAM;IACN;IACA;IACA,SAAS,iBAAiB;IAC3B,CAAC;GACH;EACF,EAAE;;AAGL,eAAe,eACb,OACA,aACe;CACf,MAAM,UAAU,IAAI,sBAAsB,CAAC,OAAO;CAClD,MAAM,SAAS,MAAM,cAAc,MAAM;AAEzC,KAAI,CAAC,OAAO,SAAS;AACnB,UAAQ,KAAK,MAAM,IAAI,OAAO,MAAM,QAAQ,CAAC;AAC7C,MAAI,OAAO,MAAM,QACf,SAAQ,IAAI,MAAM,IAAI,OAAO,MAAM,QAAQ,CAAC;AAE9C,UAAQ,WAAW;AACnB;;CAGF,MAAM,OAAO,eAAe,OAAO,MAAM;AAGzC,SAAQ,QACN,MAAM,MAAM,iBAAiB,MAAM,KAAK,OAAO,MAAM,KAAK,GAAG,CAC9D;AAED,KAAI,CAAE,MAAM,iBAAiB,KAAK,EAAG;AACnC,UAAQ,IACN,MAAM,OAAO,sDAAsD,CACpE;AACD;;AAGF,cAAa,MAAM,OAAO,OAAO,MAAM,KAAK;AAC5C,SAAQ,IACN,MAAM,MACJ,gBAAgB,MAAM,KAAK,OAAO,MAAM,KAAK,CAAC,aAAa,MAAM,KAAK,KAAK,CAAC,GAC7E,CACF;;AAGH,eAAe,eACb,cACA,aACe;CAEf,IAAI,QAAQ;AACZ,KAAI,CAAC,OAAO;AAMV,WALiB,MAAM,QAAQ;GAC7B,MAAM;GACN,MAAM;GACN,SAAS;GACV,CAAC,EACe;AACjB,MAAI,CAAC,OAAO;AACV,WAAQ,IAAI,MAAM,IAAI,+BAA+B,CAAC;AACtD,WAAQ,WAAW;AACnB;;;CAKJ,MAAM,cAAc,IAAI,+BAA+B,CAAC,OAAO;CAC/D,MAAM,aAAa,MAAM,QAAQ,MAAM;AAEvC,KAAI,CAAC,WAAW,SAAS;AACvB,cAAY,KAAK,MAAM,IAAI,WAAW,MAAM,QAAQ,CAAC;AACrD,MAAI,WAAW,MAAM,QACnB,SAAQ,IAAI,MAAM,IAAI,WAAW,MAAM,QAAQ,CAAC;AAElD,UAAQ,WAAW;AACnB;;CAIF,MAAM,cADY,IAAI,KAAK,WAAW,MAAM,UAAU,CACxB,SAAS,GAAG,KAAK,KAAK;CACpD,MAAM,eAAe,KAAK,MAAM,cAAc,MAAO,GAAG;CACxD,MAAM,aACJ,eAAe,IACX,eAAe,aAAa,QAC5B;AACN,aAAY,QACV,8CAA8C,WAAW,GAC1D;CAGD,MAAM,oBAAoB;CAC1B,IAAI;AACJ,MAAK,IAAI,UAAU,GAAG,WAAW,mBAAmB,WAAW;EAM7D,MAAM,QALe,MAAM,QAAQ;GACjC,MAAM;GACN,MAAM;GACN,SAAS;GACV,CAAC,EACwB;AAC1B,MAAI,CAAC,MAAM;AACT,WAAQ,IAAI,MAAM,IAAI,8BAA8B,CAAC;AACrD,WAAQ,WAAW;AACnB;;AAEF,MAAI,CAAC,UAAU,KAAK,KAAK,EAAE;AACzB,WAAQ,IAAI,MAAM,IAAI,iCAAiC,CAAC;AACxD,OAAI,UAAU,kBAAmB;AACjC,WAAQ,IAAI,MAAM,IAAI,uCAAuC,CAAC;AAC9D,WAAQ,WAAW;AACnB;;EAGF,MAAM,iBAAiB,IAAI,oBAAoB,CAAC,OAAO;AACvD,kBAAgB,MAAM,WAAW,WAAW,MAAM,MAAM,KAAK;AAE7D,MAAI,cAAc,SAAS;AACzB,kBAAe,QAAQ,WAAW;AAClC;;AAIF,MACE,cAAc,MAAM,SAAS,kBAC7B,UAAU,mBACV;AACA,kBAAe,KACb,MAAM,IACJ,GAAG,cAAc,MAAM,QAAQ,YAAY,QAAQ,GAAG,kBAAkB,GACzE,CACF;AACD;;AAIF,iBAAe,KAAK,MAAM,IAAI,cAAc,MAAM,QAAQ,CAAC;AAC3D,MAAI,cAAc,MAAM,QACtB,SAAQ,IAAI,MAAM,IAAI,cAAc,MAAM,QAAQ,CAAC;AAErD,UAAQ,WAAW;AACnB;;AAGF,KAAI,CAAC,eAAe,QAAS;CAE7B,MAAM,EAAE,cAAc,cAAc;AAEpC,KAAI,UAAU,WAAW,GAAG;AAC1B,UAAQ,IAAI,MAAM,IAAI,uCAAuC,CAAC;AAC9D,UAAQ,WAAW;AACnB;;CAIF,IAAI;AACJ,KAAI,UAAU,WAAW,GAAG;EAC1B,MAAM,QAAQ,UAAU;AACxB,MAAI,CAAC,OAAO;AACV,WAAQ,IAAI,MAAM,IAAI,uCAAuC,CAAC;AAC9D,WAAQ,WAAW;AACnB;;AAEF,aAAW;QACN;EA0BL,MAAM,aAfiB,MAAM,QAAQ;GACnC,MAAM;GACN,MAAM;GACN,SAAS;GACT,SATqB,UAAU,KAAK,OAAO;IAC3C,OAAO,GAAG,EAAE,KAAK,IAAI,EAAE,SAAS;IAChC,OAAO,EAAE;IACV,EAAE;GAOD,UAAU,OAAO,YACf,QAAQ,QACN,QACI,QAAQ,QAAQ,MACd,EAAE,MAAM,aAAa,CAAC,SAAS,MAAM,aAAa,CAAC,CACpD,GACD,QACL;GACJ,CAAC,EAE+B;AAEjC,MAAI,cAAc,KAAA,GAAW;AAC3B,WAAQ,IAAI,MAAM,IAAI,iCAAiC,CAAC;AACxD,WAAQ,WAAW;AACnB;;EAEF,MAAM,SAAS,UAAU,MAAM,MAAM,EAAE,OAAO,UAAU;AACxD,MAAI,CAAC,QAAQ;AACX,WAAQ,IAAI,MAAM,IAAI,+BAA+B,CAAC;AACtD,WAAQ,WAAW;AACnB;;AAEF,aAAW;;CAIb,MAAM,OAAO,eAAe,SAAS;AAErC,KAAI,CAAE,MAAM,iBAAiB,KAAK,EAAG;AACnC,UAAQ,IACN,MAAM,OAAO,sDAAsD,CACpE;AACD;;AAGF,cAAa,MAAM,SAAS,KAAK,SAAS,KAAK;AAC/C,SAAQ,IACN,MAAM,MACJ,gBAAgB,MAAM,KAAK,SAAS,KAAK,CAAC,aAAa,MAAM,KAAK,KAAK,CAAC,GACzE,CACF;;AAGH,MAAa,eAAe,IAAI,QAAQ,QAAQ,CAC7C,YAAY,kCAAkC,CAC9C,OACC,uBACA,2FACD,CACA,OAAO,uBAAuB,8BAA8B,CAC5D,OAAO,qBAAqB,0CAA0C,CACtE,OAAO,OAAO,SAA4D;CAEzE,MAAM,QAAQ,KAAK,SAAS,QAAQ,IAAI;AACxC,KAAI,OAAO;AACT,MAAI,KAAK,MACP,SAAQ,IACN,MAAM,OACJ,wIAED,CACF;AAEH,QAAM,eAAe,OAAO,KAAK,KAAK;OAEtC,OAAM,eAAe,KAAK,OAAO,KAAK,KAAK;EAE7C;;;;;;AC1RJ,MAAa,gBAAgB,IAAI,QAAQ,SAAS,CAC/C,YAAY,+BAA+B,CAC3C,OAAO,aAAa,sBAAsB,CAC1C,QAAQ,SAA4B;CACnC,MAAM,SAAS,YAAY;AAE3B,KAAI,KAAK,KAAK;AACZ,cAAY;GACV,GAAG;GACH,eAAe;GACf,UAAU,EAAE;GACb,CAAC;AACF,UAAQ,IAAI,MAAM,MAAM,wBAAwB,CAAC;AACjD;;AAGF,KAAI,CAAC,OAAO,eAAe;AACzB,UAAQ,IAAI,MAAM,OAAO,2BAA2B,CAAC;AACrD;;CAGF,MAAM,cAAc,OAAO;CAC3B,MAAM,GAAG,cAAc,GAAG,GAAG,sBAAsB,OAAO;CAG1D,MAAM,aAAa,OAAO,KAAK,kBAAkB,CAAC,MAAM;AAExD,aAAY;EACV,GAAG;EACH,eAAe;EACf,UAAU;EACX,CAAC;AAEF,SAAQ,IACN,MAAM,MAAM,yBAAyB,MAAM,KAAK,YAAY,CAAC,GAAG,CACjE;AACD,KAAI,WACF,SAAQ,IAAI,MAAM,IAAI,uBAAuB,WAAW,GAAG,CAAC;EAE9D;;;;;;ACrCJ,MAAa,gBAAgB,IAAI,QAAQ,SAAS,CAC/C,YAAY,yCAAyC,CACrD,OAAO,YAAY;CAClB,MAAM,UAAU,kBAAkB;AAElC,KAAI,CAAC,SAAS;AACZ,UAAQ,IACN,MAAM,OAAO,oDAAoD,CAClE;AACD,UAAQ,WAAW;AACnB;;CAGF,MAAM,UAAU,IAAI,qBAAqB,CAAC,OAAO;CACjD,MAAM,SAAS,MAAM,cAAc,QAAQ,MAAM;AAEjD,KAAI,CAAC,OAAO,SAAS;AACnB,UAAQ,KAAK,MAAM,IAAI,4BAA4B,CAAC;AACpD,UAAQ,IAAI,MAAM,IAAI,YAAY,QAAQ,OAAO,CAAC;AAClD,UAAQ,IAAI,MAAM,IAAI,wCAAwC,CAAC;AAC/D,UAAQ,WAAW;AACnB;;AAGF,SAAQ,QAAQ,MAAM,MAAM,gBAAgB,CAAC;AAC7C,SAAQ,IAAI,eAAe,MAAM,KAAK,QAAQ,KAAK,GAAG;AACtD,SAAQ,IAAI,eAAe,MAAM,KAAK,OAAO,MAAM,KAAK,GAAG;AAC3D,SAAQ,IAAI,eAAe,MAAM,IAAI,QAAQ,SAAS,GAAG;EACzD;;;;;;ACnBJ,eAAe,YAAY,YAAoC;CAC7D,MAAM,SAAS,YAAY;CAC3B,MAAM,eAAe,OAAO,KAAK,OAAO,SAAS;AAEjD,KAAI,aAAa,WAAW,GAAG;AAC7B,UAAQ,IAAI,MAAM,OAAO,+CAA+C,CAAC;AACzE,UAAQ,WAAW;AACnB;;CAGF,IAAI,gBAAgB;AAEpB,KAAI,CAAC,eAAe;AAoBlB,mBAdiB,MAAM,QAAQ;GAC7B,MAAM;GACN,MAAM;GACN,SAAS;GACT,SATqB,aAAa,KAAK,UAAU;IACjD,OAAO,SAAS,OAAO,gBAAgB,GAAG,KAAK,aAAa;IAC5D,OAAO;IACR,EAAE;GAOD,UAAU,OAAO,YACf,QAAQ,QACN,QACI,QAAQ,QAAQ,MACd,EAAE,MAAM,aAAa,CAAC,SAAS,MAAM,aAAa,CAAC,CACpD,GACD,QACL;GACJ,CAAC,EACuB;AAEzB,MAAI,CAAC,eAAe;AAClB,WAAQ,IAAI,MAAM,IAAI,aAAa,CAAC;AACpC;;;AAIJ,KAAI,CAAC,OAAO,SAAS,gBAAgB;AACnC,UAAQ,IAAI,MAAM,IAAI,YAAY,cAAc,cAAc,CAAC;AAC/D,UAAQ,IAAI,MAAM,IAAI,cAAc,aAAa,KAAK,KAAK,GAAG,CAAC;AAC/D,UAAQ,WAAW;AACnB;;AAGF,eAAc,OAAO;EAAE,GAAG;EAAG,eAAe;EAAgB,EAAE;AAC9D,SAAQ,IAAI,MAAM,MAAM,uBAAuB,MAAM,KAAK,cAAc,CAAC,GAAG,CAAC;;AAG/E,eAAe,cACb,WACA,mBACkC;CAwBlC,MAAM,aAfW,MAAM,QAAQ;EAC7B,MAAM;EACN,MAAM;EACN,SAAS;EACT,SAZqB,UAAU,KAAK,OAAO;GAC3C,OACE,EAAE,SAAS,oBACP,GAAG,EAAE,KAAK,GAAG,MAAM,IAAI,WAAW,KAClC,EAAE;GACR,OAAO,EAAE;GACV,EAAE;EAOD,UAAU,OAAO,YACf,QAAQ,QACN,QACI,QAAQ,QAAQ,MACd,EAAE,MAAM,aAAa,CAAC,SAAS,MAAM,aAAa,CAAC,CACpD,GACD,QACL;EACJ,CAAC,EAEyB;AAC3B,KAAI,cAAc,KAAA,EAAW,QAAO,KAAA;AACpC,QAAO,UAAU,MAAM,MAAM,EAAE,OAAO,UAAU;;AAGlD,eAAe,cACb,OACA,SACA,SACe;CACf,MAAM,UAAU,IAAI,gBAAgB,MAAM,KAAK,QAAQ,KAAK,CAAC,KAAK,CAAC,OAAO;CAC1E,MAAM,SAAS,MAAM,cAAc,OAAO,QAAQ,IAAI,QAAQ;AAE9D,KAAI,CAAC,OAAO,SAAS;AACnB,MAAI,OAAO,MAAM,SAAS,gBAAgB,cAAc,KACtD,SAAQ,KACN,MAAM,IACJ,yEACD,CACF;OACI;AACL,WAAQ,KAAK,MAAM,IAAI,OAAO,MAAM,QAAQ,CAAC;AAC7C,OAAI,OAAO,MAAM,QACf,SAAQ,IAAI,MAAM,IAAI,OAAO,MAAM,QAAQ,CAAC;;AAGhD,UAAQ,WAAW;AACnB;;CAGF,MAAM,EAAE,aAAa,QAAQ,OAAO;AAEpC,eAAc,YAAY;EACxB,GAAG;EACH,eAAe;EACf,UAAU;GACR,GAAG,OAAO;IACT,cAAc,mBAAmB;IAChC,MAAM;IACN,OAAO;IACP;IACA,SAAS,WAAW,iBAAiB;IACtC,CAAC;GACH;EACF,EAAE;AAEH,SAAQ,QACN,MAAM,MACJ,eAAe,MAAM,KAAK,YAAY,CAAC,aAAa,MAAM,KAAK,YAAY,CAAC,GAC7E,CACF;;AAGH,MAAa,gBAAgB,IAAI,QAAQ,SAAS,CAC/C,YAAY,2BAA2B,CACvC,SAAS,aAAa,uCAAuC,CAC7D,OAAO,OAAO,eAAwB;CACrC,MAAM,gBAAgB,kBAAkB;AAExC,KAAI,CAAC,eAAe;AAClB,UAAQ,IAAI,MAAM,OAAO,0CAA0C,CAAC;AACpE,UAAQ,WAAW;AACnB;;CAGF,MAAM,QAAQ,cAAc;CAC5B,MAAM,oBAAoB,cAAc;CACxC,MAAM,gBAAgB,cAAc,WAAW,iBAAiB;CAGhE,MAAM,UAAU,IAAI,wBAAwB,CAAC,OAAO;CACpD,MAAM,SAAS,MAAM,mBAAmB,OAAO,cAAc;AAE7D,KAAI,CAAC,OAAO,SAAS;AACnB,MAAI,OAAO,MAAM,SAAS,gBAAgB,cAAc,MAAM;AAC5D,WAAQ,KACN,MAAM,IACJ,yEACD,CACF;AACD,WAAQ,WAAW;AACnB;;AAEF,UAAQ,KACN,MAAM,OACJ,uCAAuC,OAAO,MAAM,UACrD,CACF;AACD,UAAQ,IAAI,MAAM,IAAI,2CAA2C,CAAC;AAClE,QAAM,YAAY,WAAW;AAC7B;;CAGF,MAAM,YAAY,OAAO;AACzB,SAAQ,QACN,SAAS,UAAU,OAAO,UAAU,UAAU,WAAW,IAAI,KAAK,QACnE;AAED,KAAI,UAAU,WAAW,GAAG;AAC1B,UAAQ,IAAI,MAAM,OAAO,uCAAuC,CAAC;AACjE,UAAQ,WAAW;AACnB;;AAIF,KAAI,YAAY;EACd,MAAM,QAAQ,UAAU,MACrB,MAAM,EAAE,KAAK,aAAa,KAAK,WAAW,aAAa,CACzD;AAED,MAAI,OAAO;AACT,SAAM,cAAc,OAAO,OAAO,cAAc;AAChD;;AAKF,MADe,YAAY,CAChB,SAAS,aAAa;AAC/B,iBAAc,OAAO;IAAE,GAAG;IAAG,eAAe;IAAa,EAAE;AAC3D,WAAQ,IACN,MAAM,MAAM,uBAAuB,MAAM,KAAK,WAAW,CAAC,GAAG,CAC9D;AACD;;AAGF,UAAQ,IAAI,MAAM,IAAI,uBAAuB,WAAW,cAAc,CAAC;AACvE,UAAQ,WAAW;AACnB;;CAIF,MAAM,WAAW,MAAM,cAAc,WAAW,kBAAkB;AAClE,KAAI,CAAC,UAAU;AACb,UAAQ,IAAI,MAAM,IAAI,aAAa,CAAC;AACpC;;AAGF,OAAM,cAAc,OAAO,UAAU,cAAc;EACnD;;;;;;;;;;;;;;;;;;;;;;;;ACjNJ,MAAM,eAAe;;;;;;AAOrB,SAAS,aAAa,aAA8B;AAClD,KAAI,CAAC,YAAY,WAAW,GAAG,aAAa,GAAG,CAAE,QAAO;CACxD,MAAM,OAAO,YAAY,MAAM,GAAG,aAAa,GAAG,OAAO;AACzD,QAAO,KAAK,WAAW,aAAa,IAAI,KAAK,SAAS,gBAAgB;;AAOxE,SAAS,wBAAwB,UAAsC;CACrE,MAAM,WAAW,KAAK,UAAU,gBAAgB,aAAa;AAE7D,KAAI,CAAC,WAAW,SAAS,CAAE,QAAO,EAAE;AAEpC,QAAO,YAAY,UAAU,EAAE,eAAe,MAAM,CAAC,CAClD,QACE,WACE,MAAM,aAAa,IAAI,MAAM,gBAAgB,KAC9C,aAAa,GAAG,aAAa,GAAG,MAAM,OAAO,CAChD,CACA,KAAK,UAAU;EACd,MAAM,OAAO,GAAG,aAAa,GAAG,MAAM;EACtC,MAAM,WAAW,KAAK,UAAU,MAAM,KAAK;AAG3C,MAAI;GAEF,MAAM,YAAY,KADF,aAAa,SAAS,EACN,QAAQ,YAAY;AACpD,OAAI,WAAW,UAAU,CACvB,QAAO;IAAE;IAAM,iBAAiB,cAAc,UAAU,CAAC;IAAM;UAE3D;AAIR,SAAO;GAAE;GAAM,iBAAiB;GAAM;GACtC;;AAON,SAAS,kBAAkB,UAAiC;CAC1D,IAAI,MAAM;AACV,QAAO,MAAM;AACX,MACE,WAAW,KAAK,KAAK,sBAAsB,CAAC,IAC5C,WAAW,KAAK,KAAK,qBAAqB,CAAC,CAE3C,QAAO;EAET,MAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,WAAW,IAAK,QAAO;AAC3B,QAAM;;;AAIV,SAAS,gBAAgB,KAA4B;CACnD,MAAM,UAAU,KAAK,KAAK,eAAe;AACzC,KAAI,CAAC,WAAW,QAAQ,CAAE,QAAO;AACjC,KAAI;AAIF,SAHY,KAAK,MAAM,aAAa,SAAS,QAAQ,CAAC,CAG3C,QAAQ;SACb;AACN,SAAO;;;AAqBX,SAAS,sBAAsB,UAAsC;CACnE,MAAM,gBAAgB,kBAAkB,SAAS;AACjD,KAAI,CAAC,cAAe,QAAO,EAAE;CAE7B,MAAM,UAA8B,EAAE;CACtC,MAAM,cAAc,KAAK,eAAe,WAAW;AACnD,KAAI,CAAC,WAAW,YAAY,CAAE,QAAO,EAAE;CAMvC,IAAI;AACJ,KAAI;AACF,eAAa,YAAY,aAAa,EAAE,eAAe,MAAM,CAAC,CAC3D,QAAQ,MAAM,EAAE,aAAa,CAAC,CAC9B,KAAK,MAAM,KAAK,aAAa,EAAE,KAAK,CAAC;SAClC;AACN,SAAO,EAAE;;AAGX,MAAK,MAAM,aAAa,YAAY;EAClC,IAAI;AACJ,MAAI;AACF,aAAU,YAAY,WAAW,EAAE,eAAe,MAAM,CAAC,CACtD,QAAQ,MAAM,EAAE,aAAa,CAAC,CAC9B,KAAK,MAAM,KAAK,WAAW,EAAE,KAAK,CAAC;UAChC;AACN;;AAGF,OAAK,MAAM,UAAU,SAAS;GAC5B,MAAM,OAAO,gBAAgB,OAAO;AACpC,OAAI,CAAC,QAAQ,CAAC,KAAK,WAAW,GAAG,aAAa,GAAG,IAAI,CAAC,aAAa,KAAK,CACtE;GAEF,MAAM,YAAY,KAAK,QAAQ,QAAQ,YAAY;AACnD,OAAI,CAAC,WAAW,UAAU,CACxB;AAGF,WAAQ,KAAK;IACX;IACA,iBAAiB,cAAc,UAAU,CAAC;IAC3C,CAAC;;;AAIN,QAAO;;;AAQT,MAAa,iBAAiB,QAC5B,QAAQ,QAAQ,cAAc,OAAO,KAAK,IAAI,CAAC,CAAC,CACjD;;;;;;;;;;AAWD,SAAgB,gBACd,UACA,YACA,UAAkC,EAAE,EAChB;CACpB,MAAM,uBAAO,IAAI,KAAa;CAC9B,MAAM,UAA8B,EAAE;CAEtC,MAAM,cAAc,YAAgC;AAClD,OAAK,MAAM,UAAU,SAAS;AAC5B,OAAI,KAAK,IAAI,OAAO,KAAK,CAAE;AAC3B,QAAK,IAAI,OAAO,KAAK;AACrB,WAAQ,KAAK,OAAO;;;CAIxB,MAAM,YACJ,QAAQ,wBAAwB,QAAQ,QAAQ,QAAQ,eAAe,CAAC,CAAC;CAC3E,MAAM,uBAAuB,wBAAwB,SAAS;CAC9D,MAAM,4BACJ,cAAc,WAAW,EAAE,GAAG,wBAAwB,UAAU;CAClE,MAAM,yBAAyB;AAC7B,MAAI,eAAe,KAAM,QAAO,EAAE;AAClC,SAAO,sBAAsB,cAAc,eAAe;;AAG5D,KAAI,QAAQ,oBAAoB;AAC9B,aAAW,qBAAqB,CAAC;AAKjC,aAAW,kBAAkB,CAAC;AAC9B,aAAW,gBAAgB,CAAC;QACvB;AACL,aAAW,gBAAgB,CAAC;AAC5B,aAAW,qBAAqB,CAAC;AACjC,aAAW,kBAAkB,CAAC;;AAGhC,QAAO,QAAQ,MAAM,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,KAAK,CAAC;;;;;;;;;;;;;AAc7D,eAAsB,aAAa,WAAqC;AAItE,KAAI,CAAC,UAAU,WAAW,UAAU,IAAI,CAAC,aAAa,UAAU,CAC9D,OAAM,IAAI,MAAM,0CAA0C,YAAY;CAExE,MAAM,MAAO,MAAM,OAAO;AAC1B,QAAO,IAAI,cAAc;;;;;;;;;;AC7N3B,SAAgB,UAAU,oBAAqC;AAC7D,QAAO,qBAAqB,2BAA2B;;;;;;;;AASzD,SAAgB,cAAc,iBAAiC;AAC7D,KAAI,CAAC,gBAAgB,WAAW,UAAU,CAAE,QAAO;AACnD,KAAI;AACF,SAAO,cAAc,gBAAgB;SAC/B;AACN,SAAO;;;AAIX,SAAgB,qBAAqB,MAA8B;AACjE,QAAO,iBAAiB,KAAK,KAAK,GAAG,KAAK,QAAQ,QAAQ,cACxD,KAAK,gBACN,CAAC,IAAI,UAAU,KAAK,mBAAmB,CAAC;;AAG3C,SAAgB,wBAAwB,MAAqC;AAC3E,QAAO,yBAAyB,KAAK,KAAK,QAAQ,cAChD,KAAK,gBACN,CAAC,IAAI,UAAU,KAAK,mBAAmB,CAAC,KAAK,KAAK;;;;ACjDrD,MAAM,mBAA6B,cAAc,OAAO,KAAK,QAAQ,UAAU;;;;;;;AAQ/E,SAAgB,gBACd,iBACA,UAAoB,iBACZ;AACR,KAAI,gBAAgB,WAAW,UAAU,CAAE,QAAO;AAClD,KAAI;AACF,SAAO,QAAQ,gBAAgB;SACzB;AACN,SAAO;;;;;;;;;;;;;;ACjBX,SAAS,aAAa,OAAoC;AACxD,QAAO,UAAU,OAAO,UAAU;;AAGpC,SAAgB,qBACd,OAA0B,QAAQ,MAClC,MAAyB,QAAQ,KACxB;AACT,KAAI,KAAK,SAAS,YAAY,CAAE,QAAO;AACvC,QAAO,aAAa,IAAI,sBAAsB,IAAI,qBAAqB;;;;ACDzE,SAAS,cAAc,OAAsC;AAC3D,KAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;CACxD,MAAM,MAAM;AACZ,QACE,OAAO,IAAI,YAAY,YACvB,OAAO,IAAI,eAAe,YAC1B,OAAO,IAAI,gBAAgB;;;;;AAO/B,eAAsB,YACpB,SACA,UACe;CACf,MAAM,qBACJ,QAAQ,IAAI,6CAA6C;CAC3D,MAAM,aAAa,gBAAgB,UAAU,KAAA,GAAW,EACtD,oBACD,CAAC;CACF,MAAM,EAAE,mBAAmB,YAAY;CAIvC,MAAM,aAAa,mBAAmB,OAAO,IAAI,IAAI,eAAe,GAAG;CACvE,MAAM,UAAU,aACZ,WAAW,QAAQ,MAAM,WAAW,IAAI,EAAE,KAAK,CAAC,GAChD;AAEJ,KAAI,QAAQ,WAAW,EAAG;CAE1B,MAAM,MAAqB;EACzB;EACA;EACA,WAAW,cAAc;EAC1B;CAID,MAAM,UAAU,sBAAsB;AAEtC,MAAK,MAAM,EAAE,MAAM,qBAAqB,SAAS;EAG/C,MAAM,SAAS,gBAAgB,gBAAgB;AAC/C,MAAI;GACF,MAAM,WAAW,MAAM,aAAa,gBAAgB;AAEpD,OAAI,CAAC,cAAc,SAAS,EAAE;AAC5B,YAAQ,KACN,MAAM,OAAO,YAAY,KAAK,sCAAsC,CACrE;AACD;;AAGF,SAAM,SAAS,SAAS,IAAI;AAE5B,OAAI,QACF,SAAQ,MACN,MAAM,IACJ,qBAAqB;IACnB,MAAM,SAAS;IACf,SAAS,SAAS;IAClB,iBAAiB;IACjB;IACD,CAAC,CACH,CACF;WAEI,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAGhE,WAAQ,KACN,MAAM,OACJ,YAAY,wBAAwB;IAClC;IACA,iBAAiB;IACjB;IACA;IACD,CAAC,GACH,CACF;;;;;;AC3FP,MAAM,EAAE,YADQ,cAAc,OAAO,KAAK,IAAI,CAClB,qBAAqB;AAEjD,MAAM,cAAc,QAAQ,KAAK;AAEjC,MAAM,UAAU,IAAI,SAAS;AAE7B,QAAQ,KAAK,QAAQ,CAAC,YAAY,qBAAqB,CAAC,QAAQ,QAAQ;AAGxE,QAAQ,WAAW,aAAa;AAChC,QAAQ,WAAW,cAAc;AACjC,QAAQ,WAAW,cAAc;AACjC,QAAQ,WAAW,cAAc;AAGjC,MAAM,YAAY,SAAS,YAAY;AAEvC,QAAQ,MAAM,QAAQ,MAAM,EAAE,MAAM,QAAQ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fluid-app/fluid-cli",
-  "version": "0.1.20",
+  "version": "0.1.22",
   "description": "Core CLI for Fluid Commerce — auth, config, and plugin system",
   "bin": {
     "fluid": "./dist/bin/fluid.mjs"