snow-flow 10.0.136 → 10.0.138

package/README.md

@@ -55,8 +55,8 @@ Or pre-configure in `snow-flow.jsonc`:
 {
   "$schema": "https://snow-flow.dev/config.json",
   "provider": {
-    "anthropic": {}
-  }
+    "anthropic": {},
+  },
 }
 ```
 
@@ -164,20 +164,20 @@ Connect to your ServiceNow instance and access **200+ tools**:
       "environment": {
         "SERVICENOW_INSTANCE_URL": "https://your-instance.service-now.com",
         "SERVICENOW_CLIENT_ID": "...",
-        "SERVICENOW_CLIENT_SECRET": "..."
-      }
-    }
-  }
+        "SERVICENOW_CLIENT_SECRET": "...",
+      },
+    },
+  },
 }
 ```
 
 ## Agents
 
-| Agent | Description |
-|:------|:------------|
-| **build** | Full access agent for development work |
-| **plan** | Read-only agent for analysis — denies edits, asks before bash |
-| **general** | Subagent for complex multi-step tasks (`@general`) |
+| Agent       | Description                                                   |
+| :---------- | :------------------------------------------------------------ |
+| **build**   | Full access agent for development work                        |
+| **plan**    | Read-only agent for analysis — denies edits, asks before bash |
+| **general** | Subagent for complex multi-step tasks (`@general`)            |
 
 ## CLI
 
@@ -197,13 +197,13 @@ snow-flow pr                     # Pull request automation
 
 Config is loaded from (in priority order):
 
-| Priority | Source |
-|:---------|:-------|
-| 1 | Remote/well-known organization configs |
-| 2 | Global config (`~/.snow-flow/`) |
-| 3 | `SNOW_FLOW_CONFIG` env variable |
-| 4 | Project config (`snow-flow.jsonc`) |
-| 5 | `SNOW_FLOW_CONFIG_CONTENT` inline |
+| Priority | Source                                 |
+| :------- | :------------------------------------- |
+| 1        | Remote/well-known organization configs |
+| 2        | Global config (`~/.snow-flow/`)        |
+| 3        | `SNOW_FLOW_CONFIG` env variable        |
+| 4        | Project config (`snow-flow.jsonc`)     |
+| 5        | `SNOW_FLOW_CONFIG_CONTENT` inline      |
 
 <details>
 <summary><b>MCP servers</b></summary>
@@ -213,8 +213,8 @@ Config is loaded from (in priority order):
 {
   "mcp": {
     "my-server": { "type": "local", "command": ["node", "./server.js"] },
-    "remote":    { "type": "remote", "url": "https://example.com/mcp" }
-  }
+    "remote": { "type": "remote", "url": "https://example.com/mcp" },
+  },
 }
 ```
 
@@ -228,7 +228,7 @@ Supports stdio, SSE, and streamable HTTP with OAuth.
 
 ```jsonc
 {
-  "plugin": ["my-snow-flow-plugin", "file://./local-plugin"]
+  "plugin": ["my-snow-flow-plugin", "file://./local-plugin"],
 }
 ```
 
@@ -244,8 +244,8 @@ Supports stdio, SSE, and streamable HTTP with OAuth.
     "bash": "ask",
     "write": "allow",
     "read": "allow",
-    "external_directory": "deny"
-  }
+    "external_directory": "deny",
+  },
 }
 ```
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
-  "version": "10.0.136",
+  "version": "10.0.138",
   "name": "snow-flow",
   "description": "Snow-Flow - ServiceNow Multi-Agent Development Framework powered by AI",
   "license": "Elastic-2.0",

package/scripts/postinstall.cjs

@@ -1,49 +1,49 @@
 #!/usr/bin/env node
-const https = require('https');
-const fs = require('fs');
-const path = require('path');
-const os = require('os');
-const { execSync } = require('child_process');
+const https = require("https")
+const fs = require("fs")
+const path = require("path")
+const os = require("os")
+const { execSync } = require("child_process")
 
-const pkg = require('../package.json');
-const VERSION = pkg.version;
-const REPO = 'groeimetai/snow-flow';
+const pkg = require("../package.json")
+const VERSION = pkg.version
+const REPO = "groeimetai/snow-flow"
 
-const platformMap = { darwin: 'darwin', linux: 'linux', win32: 'windows' };
-const archMap = { x64: 'x64', arm64: 'arm64' };
+const platformMap = { darwin: "darwin", linux: "linux", win32: "windows" }
+const archMap = { x64: "x64", arm64: "arm64" }
 
-const platform = platformMap[os.platform()] || os.platform();
-const arch = archMap[os.arch()] || os.arch();
-const tarballName = 'snow-flow-' + platform + '-' + arch + '.tar.gz';
+const platform = platformMap[os.platform()] || os.platform()
+const arch = archMap[os.arch()] || os.arch()
+const tarballName = "snow-flow-" + platform + "-" + arch + ".tar.gz"
 
-const pkgDir = path.join(__dirname, '..');
-const binaryName = platform === 'windows' ? 'snow-code.exe' : 'snow-code';
-const binaryPath = path.join(pkgDir, 'bin', binaryName);
+const pkgDir = path.join(__dirname, "..")
+const binaryName = platform === "windows" ? "snow-code.exe" : "snow-code"
+const binaryPath = path.join(pkgDir, "bin", binaryName)
 
 // Verify the binary matches the current platform by checking magic bytes
 function binaryMatchesPlatform(filePath) {
   try {
-    var fd = fs.openSync(filePath, 'r');
-    var buf = Buffer.alloc(4);
-    fs.readSync(fd, buf, 0, 4, 0);
-    fs.closeSync(fd);
-    var magic = buf.toString('hex');
+    var fd = fs.openSync(filePath, "r")
+    var buf = Buffer.alloc(4)
+    fs.readSync(fd, buf, 0, 4, 0)
+    fs.closeSync(fd)
+    var magic = buf.toString("hex")
 
-    if (platform === 'darwin') {
+    if (platform === "darwin") {
       // Mach-O: cffaedfe (64-bit LE), feedfacf (64-bit BE), cafebabe (universal/fat)
-      return magic === 'cffaedfe' || magic === 'feedfacf' || magic === 'cafebabe';
+      return magic === "cffaedfe" || magic === "feedfacf" || magic === "cafebabe"
     }
-    if (platform === 'linux') {
+    if (platform === "linux") {
       // ELF: 7f454c46
-      return magic === '7f454c46';
+      return magic === "7f454c46"
     }
-    if (platform === 'windows') {
+    if (platform === "windows") {
       // PE/MZ: 4d5a
-      return magic.startsWith('4d5a');
+      return magic.startsWith("4d5a")
     }
-    return false;
+    return false
   } catch (e) {
-    return false;
+    return false
   }
 }
 
@@ -51,52 +51,54 @@ function binaryMatchesPlatform(filePath) {
 // Launcher scripts are small (~2KB), actual binaries are 20MB+
 // Also verify the binary is for the current platform (not a leftover from CI)
 if (fs.existsSync(binaryPath)) {
-  var stats = fs.statSync(binaryPath);
+  var stats = fs.statSync(binaryPath)
   if (stats.size > 100000 && binaryMatchesPlatform(binaryPath)) {
-    console.log('snow-code: Binary already exists');
-    process.exit(0);
+    console.log("snow-code: Binary already exists")
+    process.exit(0)
   }
   if (stats.size > 100000) {
-    console.log('snow-code: Binary exists but is for wrong platform, re-downloading...');
+    console.log("snow-code: Binary exists but is for wrong platform, re-downloading...")
   }
 }
 
-const releaseUrl = 'https://github.com/' + REPO + '/releases/download/v' + VERSION + '/' + tarballName;
-console.log('snow-code: Downloading binary for ' + platform + '-' + arch + '...');
+const releaseUrl = "https://github.com/" + REPO + "/releases/download/v" + VERSION + "/" + tarballName
+console.log("snow-code: Downloading binary for " + platform + "-" + arch + "...")
 
 function followRedirects(url, callback) {
-  https.get(url, { headers: { 'User-Agent': 'snow-code' } }, function(res) {
+  https.get(url, { headers: { "User-Agent": "snow-code" } }, function (res) {
     if (res.statusCode === 302 || res.statusCode === 301) {
-      followRedirects(res.headers.location, callback);
+      followRedirects(res.headers.location, callback)
     } else {
-      callback(res);
+      callback(res)
     }
-  });
+  })
 }
 
-var tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'snow-flow-'));
-var tarPath = path.join(tmpDir, tarballName);
-var file = fs.createWriteStream(tarPath);
+var tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "snow-flow-"))
+var tarPath = path.join(tmpDir, tarballName)
+var file = fs.createWriteStream(tarPath)
 
-followRedirects(releaseUrl, function(res) {
+followRedirects(releaseUrl, function (res) {
   if (res.statusCode !== 200) {
-    console.warn('snow-code: Could not download binary (HTTP ' + res.statusCode + ')');
-    console.warn('snow-code: Download manually from: https://github.com/' + REPO + '/releases');
-    process.exit(0);
+    console.warn("snow-code: Could not download binary (HTTP " + res.statusCode + ")")
+    console.warn("snow-code: Download manually from: https://github.com/" + REPO + "/releases")
+    process.exit(0)
   }
 
-  res.pipe(file);
-  file.on('finish', function() {
-    file.close();
+  res.pipe(file)
+  file.on("finish", function () {
+    file.close()
     try {
-      execSync('tar -xzf "' + tarPath + '" -C "' + pkgDir + '"', { stdio: 'pipe' });
-      if (platform !== 'windows' && fs.existsSync(binaryPath)) {
-        fs.chmodSync(binaryPath, 493);
+      execSync('tar -xzf "' + tarPath + '" -C "' + pkgDir + '"', { stdio: "pipe" })
+      if (platform !== "windows" && fs.existsSync(binaryPath)) {
+        fs.chmodSync(binaryPath, 493)
       }
-      console.log('snow-code: Binary installed successfully!');
+      console.log("snow-code: Binary installed successfully!")
     } catch (e) {
-      console.warn('snow-code: Could not extract binary');
+      console.warn("snow-code: Could not extract binary")
     }
-    try { fs.rmSync(tmpDir, { recursive: true }); } catch (e) {}
-  });
-});
+    try {
+      fs.rmSync(tmpDir, { recursive: true })
+    } catch (e) {}
+  })
+})

package/src/agent/agent.ts

@@ -115,7 +115,8 @@ export namespace Agent {
       },
       review: {
         name: "review",
-        description: "Review mode. Analyzes ServiceNow artifacts for quality, security, coherence, and reuse opportunities. Enterprise only.",
+        description:
+          "Review mode. Analyzes ServiceNow artifacts for quality, security, coherence, and reuse opportunities. Enterprise only.",
         options: {},
         temperature: 0.3,
         color: "#a855f7",

package/src/auth/index.ts

@@ -147,7 +147,16 @@ export namespace Auth {
     .meta({ ref: "MidServer" })
 
   export const Info = z
-    .discriminatedUnion("type", [Oauth, Api, WellKnown, ServiceNowOAuth, ServiceNowBasic, Enterprise, Portal, MidServer])
+    .discriminatedUnion("type", [
+      Oauth,
+      Api,
+      WellKnown,
+      ServiceNowOAuth,
+      ServiceNowBasic,
+      Enterprise,
+      Portal,
+      MidServer,
+    ])
     .meta({ ref: "Auth" })
   export type Info = z.infer<typeof Info>
 

package/src/auth/portal-sync.ts

@@ -11,7 +11,7 @@ import type z from "zod/v4"
 export namespace PortalSync {
   interface CredentialPayload {
     service: string
-    credentialType?: 'api_token' | 'basic_auth'
+    credentialType?: "api_token" | "basic_auth"
     baseUrl: string
     email?: string
     username?: string
@@ -28,11 +28,11 @@ export namespace PortalSync {
     // Jira credentials (uses unified Atlassian credentials)
     if (auth.jiraBaseUrl && auth.atlassianApiToken) {
       credentials.push({
-        service: 'jira',
-        credentialType: 'api_token',
+        service: "jira",
+        credentialType: "api_token",
         baseUrl: auth.jiraBaseUrl,
         email: auth.atlassianEmail,
-        apiToken: auth.atlassianApiToken
+        apiToken: auth.atlassianApiToken,
       })
     }
 
@@ -40,21 +40,21 @@ export namespace PortalSync {
     if (auth.azureOrg && auth.azurePat) {
       const baseUrl = `https://dev.azure.com/${auth.azureOrg}`
       credentials.push({
-        service: 'azure-devops',
-        credentialType: 'api_token',
+        service: "azure-devops",
+        credentialType: "api_token",
         baseUrl,
-        apiToken: auth.azurePat
+        apiToken: auth.azurePat,
       })
     }
 
     // Confluence credentials (uses unified Atlassian credentials)
     if (auth.confluenceUrl && auth.atlassianApiToken) {
       credentials.push({
-        service: 'confluence',
-        credentialType: 'api_token',
+        service: "confluence",
+        credentialType: "api_token",
         baseUrl: auth.confluenceUrl,
         email: auth.atlassianEmail,
-        apiToken: auth.atlassianApiToken
+        apiToken: auth.atlassianApiToken,
       })
     }
 
@@ -70,7 +70,7 @@ export namespace PortalSync {
    */
   export async function syncToPortal(
     licenseKey: string,
-    portalUrl?: string
+    portalUrl?: string,
   ): Promise<{
     success: boolean
     message?: string
@@ -84,7 +84,7 @@ export namespace PortalSync {
       if (!auth || auth.type !== "enterprise") {
         return {
           success: false,
-          error: "No enterprise authentication found in local storage"
+          error: "No enterprise authentication found in local storage",
         }
       }
 
@@ -94,7 +94,7 @@ export namespace PortalSync {
       if (credentials.length === 0) {
         return {
           success: true,
-          message: "No third-party credentials to sync"
+          message: "No third-party credentials to sync",
         }
       }
 
@@ -106,12 +106,12 @@ export namespace PortalSync {
       const response = await fetch(syncUrl, {
         method: "POST",
         headers: {
-          "Content-Type": "application/json"
+          "Content-Type": "application/json",
         },
         body: JSON.stringify({
           licenseKey,
-          credentials
-        })
+          credentials,
+        }),
       })
 
       const data = await response.json()
@@ -119,19 +119,19 @@ export namespace PortalSync {
       if (!response.ok) {
         return {
           success: false,
-          error: data.error || `HTTP ${response.status}: ${response.statusText}`
+          error: data.error || `HTTP ${response.status}: ${response.statusText}`,
         }
       }
 
       return {
         success: true,
         message: data.message || "Credentials synced successfully",
-        results: data.results
+        results: data.results,
       }
     } catch (error) {
       return {
         success: false,
-        error: error instanceof Error ? error.message : String(error)
+        error: error instanceof Error ? error.message : String(error),
       }
     }
   }
@@ -165,8 +165,8 @@ export namespace PortalSync {
    * Credential from portal (decrypted)
    */
   interface PortalCredential {
-    service: 'jira' | 'azure-devops' | 'confluence' | 'github' | 'gitlab'
-    credentialType: 'api_token' | 'basic_auth'
+    service: "jira" | "azure-devops" | "confluence" | "github" | "gitlab"
+    credentialType: "api_token" | "basic_auth"
     baseUrl: string
     email?: string
     username?: string
@@ -184,7 +184,7 @@ export namespace PortalSync {
    */
   export async function fetchFromPortal(
     licenseKey: string,
-    portalUrl?: string
+    portalUrl?: string,
   ): Promise<{
     success: boolean
     credentials?: PortalCredential[]
@@ -193,10 +193,10 @@ export namespace PortalSync {
   }> {
     try {
       // Validate license key
-      if (!licenseKey || licenseKey.trim() === '') {
+      if (!licenseKey || licenseKey.trim() === "") {
         return {
           success: false,
-          error: "No license key provided"
+          error: "No license key provided",
         }
       }
 
@@ -208,10 +208,10 @@ export namespace PortalSync {
       const response = await fetch(fetchUrl, {
         method: "POST",
         headers: {
-          "Content-Type": "application/json"
+          "Content-Type": "application/json",
         },
         body: JSON.stringify({ licenseKey }),
-        signal: AbortSignal.timeout(15000)
+        signal: AbortSignal.timeout(15000),
       })
 
       const data = await response.json()
@@ -219,20 +219,20 @@ export namespace PortalSync {
       if (!response.ok) {
         return {
           success: false,
-          error: data.error || data.details || `HTTP ${response.status}: ${response.statusText}`
+          error: data.error || data.details || `HTTP ${response.status}: ${response.statusText}`,
         }
       }
 
       return {
         success: true,
         credentials: data.credentials || [],
-        message: data.message
+        message: data.message,
       }
     } catch (error) {
       const errorMessage = error instanceof Error ? error.message : String(error)
       return {
         success: false,
-        error: errorMessage.includes('timeout') ? 'Connection timeout' : errorMessage
+        error: errorMessage.includes("timeout") ? "Connection timeout" : errorMessage,
       }
     }
   }
@@ -246,7 +246,7 @@ export namespace PortalSync {
    */
   export async function pullFromPortal(
     licenseKey: string,
-    portalUrl?: string
+    portalUrl?: string,
   ): Promise<{
     success: boolean
     message?: string
@@ -266,7 +266,7 @@ export namespace PortalSync {
       if (!result.success || !result.credentials) {
         return {
           success: false,
-          error: result.error || "No credentials found"
+          error: result.error || "No credentials found",
         }
       }
 
@@ -274,7 +274,7 @@ export namespace PortalSync {
         return {
           success: true,
           message: "No credentials configured in portal",
-          credentials: {}
+          credentials: {},
         }
       }
 
@@ -289,37 +289,37 @@ export namespace PortalSync {
 
       for (const cred of result.credentials) {
         switch (cred.service) {
-          case 'jira':
+          case "jira":
             credentials.jira = {
               baseUrl: cred.baseUrl,
               email: cred.email,
-              apiToken: cred.apiToken
+              apiToken: cred.apiToken,
             }
             break
-          case 'azure-devops':
+          case "azure-devops":
             // Extract org from baseUrl (https://dev.azure.com/ORG)
             const orgMatch = cred.baseUrl.match(/dev\.azure\.com\/([^\/]+)/)
             credentials.azureDevOps = {
               org: orgMatch ? orgMatch[1] : cred.baseUrl,
-              pat: cred.apiToken
+              pat: cred.apiToken,
             }
             break
-          case 'confluence':
+          case "confluence":
             credentials.confluence = {
               baseUrl: cred.baseUrl,
               email: cred.email,
-              apiToken: cred.apiToken
+              apiToken: cred.apiToken,
             }
             break
-          case 'github':
+          case "github":
             credentials.github = {
-              apiToken: cred.apiToken
+              apiToken: cred.apiToken,
             }
             break
-          case 'gitlab':
+          case "gitlab":
             credentials.gitlab = {
-              baseUrl: cred.baseUrl || 'https://gitlab.com',
-              apiToken: cred.apiToken
+              baseUrl: cred.baseUrl || "https://gitlab.com",
+              apiToken: cred.apiToken,
             }
             break
         }
@@ -328,12 +328,12 @@ export namespace PortalSync {
       return {
         success: true,
         message: `Found ${result.credentials.length} credential(s) in portal`,
-        credentials
+        credentials,
       }
     } catch (error) {
       return {
         success: false,
-        error: error instanceof Error ? error.message : String(error)
+        error: error instanceof Error ? error.message : String(error),
       }
     }
   }

package/src/auth/providers/anthropic.ts

@@ -10,9 +10,7 @@ const CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e"
 async function authorize(mode: "max" | "console") {
   const pkce = await generatePKCE()
 
-  const url = new URL(
-    `https://${mode === "console" ? "console.anthropic.com" : "claude.ai"}/oauth/authorize`,
-  )
+  const url = new URL(`https://${mode === "console" ? "console.anthropic.com" : "claude.ai"}/oauth/authorize`)
   url.searchParams.set("code", "true")
   url.searchParams.set("client_id", CLIENT_ID)
   url.searchParams.set("response_type", "code")