@fml-inc/fml 0.2.0 → 0.3.0

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "fml",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "FML agent tools for Claude Code",
   "mcpServers": {
     "fml": {

package/dist/{chunk-NFC24I3N.js → chunk-CFPXJT5Q.js}

@@ -2,7 +2,7 @@ import {
   SYNC_PID_FILE,
   isDaemonRunning,
   panopticonExec
-} from "./chunk-ZKHH6EYQ.js";
+} from "./chunk-MUKYS4IB.js";
 
 // src/commands/daemon.ts
 function parsePanopticonRunning() {
@@ -30,4 +30,4 @@ export {
   handleStart,
   handleStop
 };
-//# sourceMappingURL=chunk-NFC24I3N.js.map
+//# sourceMappingURL=chunk-CFPXJT5Q.js.map

package/dist/chunk-MUKYS4IB.js

@@ -0,0 +1,93 @@
+import {
+  FML_DATA_DIR,
+  FML_LOG_DIR
+} from "./chunk-4YEAQJPF.js";
+
+// src/daemon-utils.ts
+import fs2 from "fs";
+import path2 from "path";
+
+// src/bin-utils.ts
+import fs from "fs";
+import path from "path";
+import { execFileSync, execSync } from "child_process";
+var IS_WIN = process.platform === "win32";
+var DEFAULT_PATHEXT = ".COM;.EXE;.BAT;.CMD";
+function resolveBin(name) {
+  const pathDirs = (process.env.PATH ?? "").split(path.delimiter).filter(Boolean);
+  const hasExt = path.extname(name) !== "";
+  const exts = !IS_WIN || hasExt ? [""] : (process.env.PATHEXT ?? DEFAULT_PATHEXT).split(";").filter(Boolean);
+  for (const dir of pathDirs) {
+    for (const ext of exts) {
+      const candidate = path.join(dir, name + ext);
+      try {
+        if (fs.statSync(candidate).isFile()) return candidate;
+      } catch {
+      }
+    }
+  }
+  return null;
+}
+function isWinShim(bin) {
+  return IS_WIN && /\.(cmd|bat)$/i.test(bin);
+}
+function quoteWinArg(arg) {
+  if (arg.length === 0) return '""';
+  if (/^[A-Za-z0-9@\-_+=:/.,]+$/.test(arg)) return arg;
+  const crt = arg.replace(/(\\*)"/g, '$1$1\\"').replace(/(\\+)$/, "$1$1");
+  const quoted = `"${crt}"`;
+  return quoted.replace(/([()%!^<>&|"])/g, "^$1");
+}
+function execBinSync(bin, args, opts = {}) {
+  const { timeout = 1e4, encoding = "utf-8", stdio = "pipe" } = opts;
+  if (isWinShim(bin)) {
+    const command = [bin, ...args].map(quoteWinArg).join(" ");
+    return execSync(command, { timeout, encoding, stdio });
+  }
+  return execFileSync(bin, args, { timeout, encoding, stdio });
+}
+
+// src/daemon-utils.ts
+var SYNC_PID_FILE = path2.join(FML_DATA_DIR, "sync.pid");
+var SYNC_LOG_FILE = path2.join(FML_LOG_DIR, "sync.log");
+function isDaemonRunning(pidFile) {
+  if (!fs2.existsSync(pidFile)) return { running: false, pid: null };
+  const pid = parseInt(fs2.readFileSync(pidFile, "utf-8").trim(), 10);
+  try {
+    process.kill(pid, 0);
+    return { running: true, pid };
+  } catch {
+    return { running: false, pid };
+  }
+}
+function resolvePanopticonBin() {
+  return resolveBin("panopticon");
+}
+function panopticonExec(...argsAndOpts) {
+  let timeout = 1e4;
+  const args = [];
+  for (const a of argsAndOpts) {
+    if (typeof a === "string") args.push(a);
+    else timeout = a.timeout ?? timeout;
+  }
+  const bin = resolvePanopticonBin();
+  if (!bin) return { ok: false, stdout: "panopticon binary not found" };
+  try {
+    const stdout = execBinSync(bin, args, { timeout });
+    return { ok: true, stdout };
+  } catch (err) {
+    const e = err;
+    return { ok: false, stdout: (e.stdout ?? "") + (e.stderr ?? "") };
+  }
+}
+
+export {
+  resolveBin,
+  execBinSync,
+  SYNC_PID_FILE,
+  SYNC_LOG_FILE,
+  isDaemonRunning,
+  resolvePanopticonBin,
+  panopticonExec
+};
+//# sourceMappingURL=chunk-MUKYS4IB.js.map

package/dist/chunk-MUKYS4IB.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/daemon-utils.ts","../src/bin-utils.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport path from \"node:path\";\nimport { execBinSync, resolveBin } from \"./bin-utils.js\";\nimport { FML_DATA_DIR, FML_LOG_DIR } from \"./dirs.js\";\n\nexport const SYNC_PID_FILE = path.join(FML_DATA_DIR, \"sync.pid\");\nexport const SYNC_LOG_FILE = path.join(FML_LOG_DIR, \"sync.log\");\n\nexport function isDaemonRunning(pidFile: string): {\n  running: boolean;\n  pid: number | null;\n} {\n  if (!fs.existsSync(pidFile)) return { running: false, pid: null };\n  const pid = parseInt(fs.readFileSync(pidFile, \"utf-8\").trim(), 10);\n  try {\n    process.kill(pid, 0);\n    return { running: true, pid };\n  } catch {\n    return { running: false, pid };\n  }\n}\n\n/** Resolve the panopticon CLI binary from PATH (globally installed). */\nexport function resolvePanopticonBin(): string | null {\n  return resolveBin(\"panopticon\");\n}\n\n/** Run a panopticon CLI command and return stdout. */\nexport function panopticonExec(...args: string[]): {\n  ok: boolean;\n  stdout: string;\n};\nexport function panopticonExec(\n  ...argsAndOpts: [...string[], { timeout?: number }]\n): { ok: boolean; stdout: string };\nexport function panopticonExec(\n  ...argsAndOpts: Array<string | { timeout?: number }>\n): {\n  ok: boolean;\n  stdout: string;\n} {\n  let timeout = 10_000;\n  const args: string[] = [];\n  for (const a of argsAndOpts) {\n    if (typeof a === \"string\") args.push(a);\n    else timeout = a.timeout ?? timeout;\n  }\n  const bin = resolvePanopticonBin();\n  if (!bin) return { ok: false, stdout: \"panopticon binary not found\" };\n  try {\n    const stdout = execBinSync(bin, args, { timeout });\n    return { ok: true, stdout };\n  } catch (err: unknown) {\n    const e = err as { stdout?: string; stderr?: string; status?: number };\n    return { ok: false, stdout: (e.stdout ?? \"\") + (e.stderr ?? \"\") };\n  }\n}\n","import fs from \"node:fs\";\nimport path from \"node:path\";\nimport { execFileSync, execSync } from \"node:child_process\";\n\nconst IS_WIN = process.platform === \"win32\";\nconst DEFAULT_PATHEXT = \".COM;.EXE;.BAT;.CMD\";\n\n/**\n * Resolve a CLI binary by walking process.env.PATH. On Windows, probe each\n * process.env.PATHEXT extension. Returns an absolute path or null.\n *\n * Pass the bare command name (e.g. \"npm\", not \"npm.cmd\"); the extension is\n * applied via PATHEXT on Windows. If the caller does include an extension,\n * it's used as-is.\n *\n * Replaces `which`/`where`: avoids spawning a child process and works the\n * same on macOS, Linux, and Windows.\n */\nexport function resolveBin(name: string): string | null {\n  const pathDirs = (process.env.PATH ?? \"\").split(path.delimiter).filter(Boolean);\n  const hasExt = path.extname(name) !== \"\";\n  const exts = !IS_WIN || hasExt\n    ? [\"\"]\n    : (process.env.PATHEXT ?? DEFAULT_PATHEXT).split(\";\").filter(Boolean);\n\n  for (const dir of pathDirs) {\n    for (const ext of exts) {\n      const candidate = path.join(dir, name + ext);\n      try {\n        if (fs.statSync(candidate).isFile()) return candidate;\n      } catch {}\n    }\n  }\n  return null;\n}\n\n/** True for Windows shell shims that execFile cannot run directly. */\nfunction isWinShim(bin: string): boolean {\n  return IS_WIN && /\\.(cmd|bat)$/i.test(bin);\n}\n\n/**\n * Quote a single argument for safe inclusion in a Windows command line that\n * will be parsed by cmd.exe and then re-parsed by a CRT program.\n *\n * Two layers:\n *   1. CRT (CommandLineToArgvW): wrap in `\"`, escape internal `\"` as `\\\"`,\n *      double any backslashes that precede a quote.\n *   2. cmd.exe: escape its metacharacters with `^` so they aren't expanded\n *      before the CRT layer sees them. `%` and `!` (delayed expansion) are\n *      the dangerous ones inside quotes; the rest are safest belt-and-braces.\n */\nexport function quoteWinArg(arg: string): string {\n  if (arg.length === 0) return '\"\"';\n\n  // Fast path: bare-word args that need no quoting at all.\n  // Backslash is intentionally excluded so `path\\` and similar still go\n  // through the trailing-backslash doubling logic below.\n  if (/^[A-Za-z0-9@\\-_+=:/.,]+$/.test(arg)) return arg;\n\n  // CRT layer: double backslashes before quotes, escape quotes, double trailing backslashes.\n  const crt = arg\n    .replace(/(\\\\*)\"/g, '$1$1\\\\\"')\n    .replace(/(\\\\+)$/, \"$1$1\");\n  const quoted = `\"${crt}\"`;\n\n  // cmd.exe layer: escape metacharacters (including the surrounding quotes)\n  // so cmd's first pass passes them through verbatim.\n  return quoted.replace(/([()%!^<>&|\"])/g, \"^$1\");\n}\n\nexport interface ExecBinOptions {\n  timeout?: number;\n  encoding?: BufferEncoding;\n  stdio?: \"pipe\" | \"inherit\" | \"ignore\";\n}\n\n/**\n * Run a resolved binary path with the given args, handling Windows .cmd/.bat\n * shims correctly. Throws on non-zero exit (matching execFileSync).\n */\nexport function execBinSync(\n  bin: string,\n  args: string[],\n  opts: ExecBinOptions = {},\n): string {\n  const { timeout = 10_000, encoding = \"utf-8\", stdio = \"pipe\" } = opts;\n\n  if (isWinShim(bin)) {\n    // CVE-2024-27980: Node refuses to spawn .cmd/.bat without shell: true.\n    // Build the command string ourselves so we control the quoting.\n    const command = [bin, ...args].map(quoteWinArg).join(\" \");\n    return execSync(command, { timeout, encoding, stdio });\n  }\n\n  return execFileSync(bin, args, { timeout, encoding, stdio });\n}\n"],"mappings":";;;;;;AAAA,OAAOA,SAAQ;AACf,OAAOC,WAAU;;;ACDjB,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,cAAc,gBAAgB;AAEvC,IAAM,SAAS,QAAQ,aAAa;AACpC,IAAM,kBAAkB;AAajB,SAAS,WAAW,MAA6B;AACtD,QAAM,YAAY,QAAQ,IAAI,QAAQ,IAAI,MAAM,KAAK,SAAS,EAAE,OAAO,OAAO;AAC9E,QAAM,SAAS,KAAK,QAAQ,IAAI,MAAM;AACtC,QAAM,OAAO,CAAC,UAAU,SACpB,CAAC,EAAE,KACF,QAAQ,IAAI,WAAW,iBAAiB,MAAM,GAAG,EAAE,OAAO,OAAO;AAEtE,aAAW,OAAO,UAAU;AAC1B,eAAW,OAAO,MAAM;AACtB,YAAM,YAAY,KAAK,KAAK,KAAK,OAAO,GAAG;AAC3C,UAAI;AACF,YAAI,GAAG,SAAS,SAAS,EAAE,OAAO,EAAG,QAAO;AAAA,MAC9C,QAAQ;AAAA,MAAC;AAAA,IACX;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,UAAU,KAAsB;AACvC,SAAO,UAAU,gBAAgB,KAAK,GAAG;AAC3C;AAaO,SAAS,YAAY,KAAqB;AAC/C,MAAI,IAAI,WAAW,EAAG,QAAO;AAK7B,MAAI,2BAA2B,KAAK,GAAG,EAAG,QAAO;AAGjD,QAAM,MAAM,IACT,QAAQ,WAAW,SAAS,EAC5B,QAAQ,UAAU,MAAM;AAC3B,QAAM,SAAS,IAAI,GAAG;AAItB,SAAO,OAAO,QAAQ,mBAAmB,KAAK;AAChD;AAYO,SAAS,YACd,KACA,MACA,OAAuB,CAAC,GAChB;AACR,QAAM,EAAE,UAAU,KAAQ,WAAW,SAAS,QAAQ,OAAO,IAAI;AAEjE,MAAI,UAAU,GAAG,GAAG;AAGlB,UAAM,UAAU,CAAC,KAAK,GAAG,IAAI,EAAE,IAAI,WAAW,EAAE,KAAK,GAAG;AACxD,WAAO,SAAS,SAAS,EAAE,SAAS,UAAU,MAAM,CAAC;AAAA,EACvD;AAEA,SAAO,aAAa,KAAK,MAAM,EAAE,SAAS,UAAU,MAAM,CAAC;AAC7D;;;AD3FO,IAAM,gBAAgBC,MAAK,KAAK,cAAc,UAAU;AACxD,IAAM,gBAAgBA,MAAK,KAAK,aAAa,UAAU;AAEvD,SAAS,gBAAgB,SAG9B;AACA,MAAI,CAACC,IAAG,WAAW,OAAO,EAAG,QAAO,EAAE,SAAS,OAAO,KAAK,KAAK;AAChE,QAAM,MAAM,SAASA,IAAG,aAAa,SAAS,OAAO,EAAE,KAAK,GAAG,EAAE;AACjE,MAAI;AACF,YAAQ,KAAK,KAAK,CAAC;AACnB,WAAO,EAAE,SAAS,MAAM,IAAI;AAAA,EAC9B,QAAQ;AACN,WAAO,EAAE,SAAS,OAAO,IAAI;AAAA,EAC/B;AACF;AAGO,SAAS,uBAAsC;AACpD,SAAO,WAAW,YAAY;AAChC;AAUO,SAAS,kBACX,aAIH;AACA,MAAI,UAAU;AACd,QAAM,OAAiB,CAAC;AACxB,aAAW,KAAK,aAAa;AAC3B,QAAI,OAAO,MAAM,SAAU,MAAK,KAAK,CAAC;AAAA,QACjC,WAAU,EAAE,WAAW;AAAA,EAC9B;AACA,QAAM,MAAM,qBAAqB;AACjC,MAAI,CAAC,IAAK,QAAO,EAAE,IAAI,OAAO,QAAQ,8BAA8B;AACpE,MAAI;AACF,UAAM,SAAS,YAAY,KAAK,MAAM,EAAE,QAAQ,CAAC;AACjD,WAAO,EAAE,IAAI,MAAM,OAAO;AAAA,EAC5B,SAAS,KAAc;AACrB,UAAM,IAAI;AACV,WAAO,EAAE,IAAI,OAAO,SAAS,EAAE,UAAU,OAAO,EAAE,UAAU,IAAI;AAAA,EAClE;AACF;","names":["fs","path","path","fs"]}

package/dist/cli.js

@@ -27,10 +27,12 @@ import {
   handleStart,
   handleStop,
   parsePanopticonRunning
-} from "./chunk-NFC24I3N.js";
+} from "./chunk-CFPXJT5Q.js";
 import {
-  panopticonExec
-} from "./chunk-ZKHH6EYQ.js";
+  execBinSync,
+  panopticonExec,
+  resolveBin
+} from "./chunk-MUKYS4IB.js";
 import {
   FML_DATA_DIR,
   FML_LOG_DIR
@@ -273,7 +275,6 @@ async function handleDoctor(opts) {
 }
 
 // src/commands/install.ts
-import { execFileSync } from "child_process";
 import fs from "fs";
 import os from "os";
 import path from "path";
@@ -369,7 +370,7 @@ async function handleInstall() {
   const pluginRoot = getPluginRoot();
   console.log("Installing fml...\n");
   console.log("[1/5] Setting up panopticon...");
-  const { resolvePanopticonBin } = await import("./daemon-utils-EUOTVCKL.js");
+  const { resolvePanopticonBin } = await import("./daemon-utils-CJO4XVJQ.js");
   let freshInstall = false;
   const bin = resolvePanopticonBin();
   let needsInstall = !bin;
@@ -386,18 +387,22 @@ async function handleInstall() {
     console.log(
       bin ? "      Upgrading @fml-inc/panopticon..." : "      Installing @fml-inc/panopticon globally..."
     );
-    try {
-      execFileSync("npm", ["install", "-g", "@fml-inc/panopticon@latest"], {
-        encoding: "utf-8",
-        timeout: 12e4,
-        stdio: "pipe"
-      });
-      freshInstall = true;
-      console.log("      Installed @fml-inc/panopticon");
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      console.error(`      Failed to install panopticon: ${msg}`);
+    const npmBin = resolveBin("npm");
+    if (!npmBin) {
+      console.error("      Failed to install panopticon: npm not found on PATH");
       console.error("      Install manually: npm install -g @fml-inc/panopticon@latest");
+    } else {
+      try {
+        execBinSync(npmBin, ["install", "-g", "@fml-inc/panopticon@latest"], {
+          timeout: 12e4
+        });
+        freshInstall = true;
+        console.log("      Installed @fml-inc/panopticon");
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`      Failed to install panopticon: ${msg}`);
+        console.error("      Install manually: npm install -g @fml-inc/panopticon@latest");
+      }
     }
   }
   if (!freshInstall) {
@@ -481,21 +486,26 @@ async function handleInstall() {
   settings.enabledPlugins["fml@local-plugins"] = true;
   writeJsonFile(CLAUDE_SETTINGS_PATH, settings);
   console.log(`      Claude settings: ${CLAUDE_SETTINGS_PATH}`);
-  try {
+  const claudeBin = resolveBin("claude");
+  if (!claudeBin) {
+    console.log("      warn: claude CLI not found, run 'claude plugin install fml@local-plugins' manually");
+  } else {
     try {
-      execFileSync("claude", ["plugin", "install", "fml@local-plugins"], {
-        stdio: "pipe",
-        timeout: 15e3
-      });
-    } catch {
-      execFileSync("claude", ["plugin", "update", "fml@local-plugins"], {
-        stdio: "pipe",
-        timeout: 15e3
-      });
+      try {
+        execBinSync(claudeBin, ["plugin", "install", "fml@local-plugins"], {
+          timeout: 15e3
+        });
+      } catch {
+        execBinSync(claudeBin, ["plugin", "update", "fml@local-plugins"], {
+          timeout: 15e3
+        });
+      }
+      console.log("      Plugin registered via Claude Code CLI");
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      console.log(`      warn: claude plugin install/update failed: ${msg}`);
+      console.log("      Run 'claude plugin install fml@local-plugins' manually");
     }
-    console.log("      Plugin registered via Claude Code CLI");
-  } catch {
-    console.log("      warn: claude CLI not found, run 'claude plugin install fml@local-plugins' manually");
   }
   console.log();
   console.log("[5/5] Configuring sync target...");
@@ -531,7 +541,6 @@ async function handleInstall() {
 }
 
 // src/commands/uninstall.ts
-import { execFileSync as execFileSync2 } from "child_process";
 import fs2 from "fs";
 import os2 from "os";
 import path2 from "path";
@@ -568,14 +577,17 @@ function handleUninstall(opts) {
     console.log("[1/5] Skipping plugin uninstall (target-specific uninstall)");
   } else {
     console.log("[1/5] Uninstalling MCP plugin...");
-    try {
-      execFileSync2(
-        "claude",
-        ["plugin", "uninstall", "fml@local-plugins", "--scope", "user"],
-        { stdio: "pipe", timeout: 1e4 }
-      );
-      console.log("      Uninstalled (user scope)");
-    } catch {
+    const claudeBin = resolveBin("claude");
+    if (claudeBin) {
+      try {
+        execBinSync(
+          claudeBin,
+          ["plugin", "uninstall", "fml@local-plugins", "--scope", "user"],
+          { timeout: 1e4 }
+        );
+        console.log("      Uninstalled (user scope)");
+      } catch {
+      }
     }
     const installedPluginsPath = path2.join(
       CLAUDE_DIR2,
@@ -689,7 +701,7 @@ function handleUninstall(opts) {
 // src/commands/update.ts
 import { execSync as execSync2 } from "child_process";
 async function handleUpdate() {
-  const currentVersion = true ? "0.2.0+beaba19" : "unknown";
+  const currentVersion = true ? "0.3.0+3bdd3b3" : "unknown";
   console.log(`Current: ${currentVersion}`);
   console.log("Updating via npm...\n");
   try {
@@ -1934,7 +1946,7 @@ async function handleConfigDetail(opts) {
 // src/commands/tools.ts
 import { readFileSync } from "fs";
 import path3 from "path";
-var pluginVersion = true ? "0.2.0+beaba19" : void 0;
+var pluginVersion = true ? "0.3.0+3bdd3b3" : void 0;
 async function getApi() {
   const api = await getAuthenticatedClient();
   if (!api) {
@@ -2066,7 +2078,7 @@ if (process.argv.length <= 2 || process.argv.includes("--help") || process.argv.
   printBanner();
 }
 var program = new Command().name("fml").description("FML agent tools for Claude Code").version(
-  true ? "0.2.0+beaba19" : "dev"
+  true ? "0.3.0+3bdd3b3" : "dev"
 );
 var tools = program.command("tools", { hidden: true }).description("List all available CLI commands (including hidden agent tools)").action(() => {
   function formatCmd(cmd, prefix = "") {