@epilot/cli 0.1.193 → 0.1.195

package/dist/auth-N3CDDMDS.js

@@ -0,0 +1,235 @@
+#!/usr/bin/env node
+import {
+  ACCESS_PROFILE_INFO,
+  AgentAuthError,
+  deleteAgentRecord,
+  formatExpiresIn,
+  isAccessProfile,
+  loadAgentIdentity,
+  organizationGrants
+} from "./chunk-5Q3PQUI2.js";
+import {
+  loadCredentials,
+  removeCredentials
+} from "./chunk-G564QXNL.js";
+import {
+  getResolvedProfile,
+  resolveProfileName,
+  upsertProfile
+} from "./chunk-QPUCHKXS.js";
+import {
+  BOLD,
+  DIM,
+  GREEN,
+  RED,
+  RESET,
+  YELLOW
+} from "./chunk-7ZQ666ZQ.js";
+
+// src/commands/auth.ts
+import { defineCommand } from "citty";
+var auth_default = defineCommand({
+  meta: {
+    name: "auth",
+    description: "Manage authentication"
+  },
+  subCommands: {
+    login: () => import("./auth-login-ACQGAE72.js").then((m) => m.default),
+    token: () => import("./auth-token-JOSBGVGA.js").then((m) => m.default),
+    logout: defineCommand({
+      meta: { name: "logout", description: "Remove stored credentials" },
+      args: {
+        profile: { type: "string", description: "Profile to log out (or EPILOT_PROFILE env)" }
+      },
+      run: async ({ args }) => {
+        const profileName = args.profile || process.env.EPILOT_PROFILE;
+        const loaded = loadAgentIdentity(profileName);
+        if (loaded) {
+          try {
+            await loaded.client.revokeAgent(loaded.identity.hostKey, loaded.identity.agentId);
+            process.stdout.write(`${DIM}Agent ${loaded.record.agent_id} revoked.${RESET}
+`);
+          } catch (error) {
+            const reason = error instanceof AgentAuthError ? error.code : "error";
+            process.stdout.write(
+              `${DIM}Could not revoke agent ${loaded.record.agent_id} (${reason}); removing it locally.${RESET}
+`
+            );
+          }
+          deleteAgentRecord(profileName);
+          const resolvedName = resolveProfileName(profileName);
+          if (resolvedName && getResolvedProfile(profileName)?.token) {
+            upsertProfile(resolvedName, {
+              token: void 0,
+              org_id: void 0,
+              user_id: void 0,
+              expires_at: void 0,
+              access_profile: void 0
+            });
+          }
+        }
+        const removed = removeCredentials();
+        if (removed || loaded) {
+          process.stdout.write(`${GREEN}Logged out successfully.${RESET}
+`);
+        } else {
+          process.stdout.write(`No stored credentials found.
+`);
+        }
+      }
+    }),
+    status: defineCommand({
+      meta: { name: "status", description: "Show authentication status" },
+      args: {
+        profile: { type: "string", description: "Profile to inspect (or EPILOT_PROFILE env)" }
+      },
+      run: async ({ args }) => {
+        const profileName = args.profile || process.env.EPILOT_PROFILE;
+        const loaded = loadAgentIdentity(profileName);
+        if (!loaded) {
+          const plain = loadCredentials();
+          if (!plain) {
+            process.stdout.write(`${YELLOW}Not authenticated.${RESET}
+`);
+            process.stdout.write(`Run ${BOLD}epilot auth login${RESET} to authenticate.
+`);
+            return;
+          }
+          printTokenStatus(plain, { agent: false });
+          return;
+        }
+        const creds = loadCredentials() ?? profileCredentials(profileName);
+        if (creds) {
+          printTokenStatus(creds, { agent: true });
+        } else {
+          process.stdout.write(`${YELLOW}No valid token stored${RESET} ${DIM}(issued on next API call)${RESET}
+`);
+        }
+        process.stdout.write(`
+${BOLD}Agent Auth${RESET}
+`);
+        process.stdout.write(`  Agent:   ${loaded.record.agent_id} ${DIM}(${loaded.record.name})${RESET}
+`);
+        process.stdout.write(`  Host:    ${loaded.record.host_id}
+`);
+        process.stdout.write(`  Issuer:  ${loaded.record.issuer}
+`);
+        try {
+          const status = await loaded.client.getAgentStatus(loaded.identity.hostKey, loaded.identity.agentId);
+          const color = status.status === "active" ? GREEN : status.status === "pending" ? YELLOW : RED;
+          process.stdout.write(`  Status:  ${color}${status.status}${RESET}`);
+          if (status.expires_at) process.stdout.write(` ${DIM}(expires ${status.expires_at})${RESET}`);
+          process.stdout.write("\n");
+          const grants = organizationGrants(status.agent_capability_grants);
+          if (grants.length) {
+            process.stdout.write(`  Grants:
+`);
+            for (const g of grants) {
+              const expiry = formatExpiresIn(g.expiresAt);
+              const expired = expiry === "expired";
+              const level = [g.profile, g.anonymized ? "anonymized" : "", expiry ?? ""].filter(Boolean);
+              const statusColor = g.grant.status === "active" && !expired ? GREEN : g.grant.status === "pending" ? YELLOW : RED;
+              const active = g.organizationId && g.organizationId === creds?.org_id && g.profile === (creds?.access_profile ?? "read") ? ` ${DIM}(active)${RESET}` : "";
+              const reason = g.reason ? ` ${DIM}\u2014 "${g.reason}"${RESET}` : "";
+              process.stdout.write(
+                `    ${(g.organizationId ?? "login organization").padEnd(12)} ${statusColor}${expired ? "expired" : g.grant.status}${RESET} ${DIM}${level.join(", ")}${RESET}${active}${reason}
+`
+              );
+            }
+          }
+        } catch (error) {
+          const reason = error instanceof AgentAuthError ? `${error.message} (${error.code})` : String(error);
+          process.stdout.write(`  Status:  ${RED}unavailable${RESET} ${DIM}${reason}${RESET}
+`);
+        }
+      }
+    })
+  }
+});
+var profileCredentials = (profileName) => {
+  const profile = getResolvedProfile(profileName);
+  if (!profile?.token) return null;
+  if (profile.expires_at && new Date(profile.expires_at) < /* @__PURE__ */ new Date()) return null;
+  return {
+    token: profile.token,
+    org_id: profile.org_id,
+    user_id: profile.user_id,
+    expires_at: profile.expires_at,
+    access_profile: profile.access_profile
+  };
+};
+var printTokenStatus = (creds, { agent }) => {
+  const claims = parseJwtPayload(creds.token);
+  const isApiToken = claims?.token_type === "api";
+  const isCognitoToken = typeof claims?.iss === "string" && claims.iss.includes("cognito-idp");
+  const tokenType = isApiToken ? "API Token" : isCognitoToken ? "User Token" : "Token";
+  process.stdout.write(`${GREEN}${BOLD}Authenticated${RESET} ${DIM}(${tokenType})${RESET}
+`);
+  const name = claims?.token_name || claims?.email || claims?.["cognito:username"] || creds.name;
+  const orgId = claims?.org_id || claims?.["custom:ivy_org_id"] || creds.org_id;
+  const userId = claims?.user_id || claims?.["custom:ivy_user_id"] || creds.user_id;
+  const tokenId = claims?.token_id;
+  const adminEmail = claims?.admin_email;
+  const tokenUse = claims?.token_use;
+  const roles = claims?.assume_roles;
+  const readOnly = claims?.read_only === true;
+  const anonymize = claims?.anonymize === true;
+  if (name) process.stdout.write(`  Name:    ${name}
+`);
+  if (adminEmail && adminEmail !== name) process.stdout.write(`  Email:   ${adminEmail}
+`);
+  if (orgId) process.stdout.write(`  Org:     ${orgId}
+`);
+  if (userId) process.stdout.write(`  User:    ${userId}
+`);
+  if (tokenId && tokenId !== userId) process.stdout.write(`  Token ID: ${tokenId}
+`);
+  if (tokenUse) process.stdout.write(`  Use:     ${tokenUse}
+`);
+  if (roles?.length) process.stdout.write(`  Roles:   ${roles.join(", ")}
+`);
+  process.stdout.write(`  Access:  ${readOnly ? `${YELLOW}read-only${RESET}` : `${GREEN}read-write${RESET}`}
+`);
+  if (isAccessProfile(creds.access_profile)) {
+    process.stdout.write(
+      `  Profile: ${creds.access_profile} ${DIM}(${ACCESS_PROFILE_INFO[creds.access_profile].title})${RESET}
+`
+    );
+  }
+  if (anonymize) process.stdout.write(`  Data:    ${YELLOW}anonymized${RESET}
+`);
+  if (creds.expires_at) {
+    const expiry = new Date(creds.expires_at);
+    const now = /* @__PURE__ */ new Date();
+    const diffMs = expiry.getTime() - now.getTime();
+    const label = agent ? diffMs < 864e5 ? `${Math.floor(diffMs / 36e5)}h ${Math.floor(diffMs % 36e5 / 6e4)}m` : `${Math.floor(diffMs / 864e5)} days` : `${Math.floor(diffMs / (1e3 * 60 * 60 * 24))} days`;
+    process.stdout.write(`  Expires: ${creds.expires_at} ${DIM}(${label})${RESET}
+`);
+  } else if (claims?.exp) {
+    const expiry = new Date(claims.exp * 1e3);
+    const now = /* @__PURE__ */ new Date();
+    const diffMs = expiry.getTime() - now.getTime();
+    const label = diffMs < 0 ? `${RED}expired${RESET}` : diffMs < 864e5 ? `${Math.floor(diffMs / 36e5)}h ${Math.floor(diffMs % 36e5 / 6e4)}m` : `${Math.floor(diffMs / 864e5)} days`;
+    process.stdout.write(`  Expires: ${expiry.toISOString()} ${DIM}(${label})${RESET}
+`);
+  } else if (claims?.iat && !claims?.exp) {
+    const issued = new Date(claims.iat * 1e3);
+    process.stdout.write(`  Issued:  ${issued.toISOString()} ${DIM}(no expiry)${RESET}
+`);
+  }
+  process.stdout.write(`  Token:   ${creds.token.substring(0, 20)}...${RESET}
+`);
+};
+var parseJwtPayload = (token) => {
+  try {
+    const parts = token.split(".");
+    if (parts.length !== 3) return null;
+    const payload = Buffer.from(parts[1], "base64url").toString("utf-8");
+    return JSON.parse(payload);
+  } catch {
+    return null;
+  }
+};
+export {
+  auth_default as default
+};

package/dist/auth-login-ACQGAE72.js

@@ -0,0 +1,34 @@
+#!/usr/bin/env node
+import {
+  AGENT_FLAG_DESCRIPTION,
+  agentLogin,
+  auth_login_default,
+  browserLogin,
+  chooseOrganization,
+  describeAccess,
+  openBrowser,
+  parseAccessProfile,
+  printApproval,
+  readOnlySibling,
+  resolveLoginProfile,
+  resolveReason
+} from "./chunk-U4YGZRJY.js";
+import "./chunk-IOLKUHUB.js";
+import "./chunk-5Q3PQUI2.js";
+import "./chunk-G564QXNL.js";
+import "./chunk-QPUCHKXS.js";
+import "./chunk-7ZQ666ZQ.js";
+export {
+  AGENT_FLAG_DESCRIPTION,
+  agentLogin,
+  browserLogin,
+  chooseOrganization,
+  auth_login_default as default,
+  describeAccess,
+  openBrowser,
+  parseAccessProfile,
+  printApproval,
+  readOnlySibling,
+  resolveLoginProfile,
+  resolveReason
+};

package/dist/{auth-token-APXLIQAO.js → auth-token-JOSBGVGA.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   saveCredentials
-} from "./chunk-M3M3C5WH.js";
-import "./chunk-YHQA2AVG.js";
+} from "./chunk-G564QXNL.js";
+import "./chunk-QPUCHKXS.js";
 import {
   BOLD,
   GREEN,

package/dist/{automation-22LGZB4O.js → automation-NYSYIXDW.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-CMVLVDYF.js";
+} from "./chunk-36I64456.js";
+import "./chunk-BYNI3AGG.js";
 import "./chunk-IOLKUHUB.js";
-import "./chunk-ENVFJFZZ.js";
-import "./chunk-M3M3C5WH.js";
-import "./chunk-YHQA2AVG.js";
+import "./chunk-G564QXNL.js";
+import "./chunk-QPUCHKXS.js";
 import "./chunk-7ZQ666ZQ.js";
 
 // src/commands/apis/automation.ts

package/dist/{billing-O4UZP4LR.js → billing-6SWQNULS.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-CMVLVDYF.js";
+} from "./chunk-36I64456.js";
+import "./chunk-BYNI3AGG.js";
 import "./chunk-IOLKUHUB.js";
-import "./chunk-ENVFJFZZ.js";
-import "./chunk-M3M3C5WH.js";
-import "./chunk-YHQA2AVG.js";
+import "./chunk-G564QXNL.js";
+import "./chunk-QPUCHKXS.js";
 import "./chunk-7ZQ666ZQ.js";
 
 // src/commands/apis/billing.ts

package/dist/bin/epilot.js

@@ -11,7 +11,7 @@ import { defineCommand } from "citty";
 var main = defineCommand({
   meta: {
     name: "epilot",
-    version: "0.1.193",
+    version: "0.1.195",
     description: "CLI for epilot APIs"
   },
   args: {
@@ -27,65 +27,66 @@ var main = defineCommand({
     jsonata: { type: "string", description: "JSONata expression" }
   },
   subCommands: {
-    auth: () => import("../auth-WMXFMPWE.js").then((m) => m.default),
-    profile: () => import("../profile-OZJL5ZPT.js").then((m) => m.default),
-    config: () => import("../config-DGZIMLZK.js").then((m) => m.default),
+    auth: () => import("../auth-N3CDDMDS.js").then((m) => m.default),
+    org: () => import("../org-UWRWFPRZ.js").then((m) => m.default),
+    profile: () => import("../profile-G2FH3DXR.js").then((m) => m.default),
+    config: () => import("../config-PJWYWLQH.js").then((m) => m.default),
     completion: () => import("../completion-AACHNJ6B.js").then((m) => m.default),
-    upgrade: () => import("../upgrade-EBCK4LM6.js").then((m) => m.default),
-    "access-token": () => import("../access-token-CMXAXZ3R.js").then((m) => m.default),
-    address: () => import("../address-556I5SBF.js").then((m) => m.default),
-    "address-suggestions": () => import("../address-suggestions-5KHWKGNW.js").then((m) => m.default),
-    "ai-agents": () => import("../ai-agents-5QBOUUL5.js").then((m) => m.default),
-    app: () => import("../app-W7SP77LS.js").then((m) => m.default),
-    "audit-logs": () => import("../audit-logs-N6ZFVTBE.js").then((m) => m.default),
-    automation: () => import("../automation-22LGZB4O.js").then((m) => m.default),
-    billing: () => import("../billing-O4UZP4LR.js").then((m) => m.default),
-    "blueprint-manifest": () => import("../blueprint-manifest-RGKFKTQW.js").then((m) => m.default),
-    calendar: () => import("../calendar-BAZUUP7W.js").then((m) => m.default),
-    chat: () => import("../chat-Q2OKVJTT.js").then((m) => m.default),
-    "configuration-hub": () => import("../configuration-hub-LVEKC5UV.js").then((m) => m.default),
-    consent: () => import("../consent-42RHQN4U.js").then((m) => m.default),
-    "customer-portal": () => import("../customer-portal-CPYSHWMQ.js").then((m) => m.default),
-    dashboard: () => import("../dashboard-X2MFX52H.js").then((m) => m.default),
-    "data-governance": () => import("../data-governance-6TG574RV.js").then((m) => m.default),
-    deduplication: () => import("../deduplication-TT46SFOU.js").then((m) => m.default),
-    design: () => import("../design-IG7LWD4X.js").then((m) => m.default),
-    document: () => import("../document-5KYSBLGK.js").then((m) => m.default),
-    "email-settings": () => import("../email-settings-MZ7XM4H7.js").then((m) => m.default),
-    "email-template": () => import("../email-template-FUMBRAJC.js").then((m) => m.default),
-    entity: () => import("../entity-VBD2YEZX.js").then((m) => m.default),
-    "entity-mapping": () => import("../entity-mapping-YRLTIJQW.js").then((m) => m.default),
-    environments: () => import("../environments-KTG3J2N5.js").then((m) => m.default),
-    "event-catalog": () => import("../event-catalog-Z6XAAUZU.js").then((m) => m.default),
-    "external-values": () => import("../external-values-ZWMXARW2.js").then((m) => m.default),
-    file: () => import("../file-762S5MIJ.js").then((m) => m.default),
-    iban: () => import("../iban-KOXXBC27.js").then((m) => m.default),
-    identity: () => import("../identity-6ZFNTQ3I.js").then((m) => m.default),
-    "integration-toolkit": () => import("../integration-toolkit-GGVOJ54C.js").then((m) => m.default),
-    journey: () => import("../journey-67YFR7GP.js").then((m) => m.default),
-    kanban: () => import("../kanban-ADY77D7C.js").then((m) => m.default),
-    message: () => import("../message-NDXC2GK4.js").then((m) => m.default),
-    metering: () => import("../metering-RKYF77CI.js").then((m) => m.default),
-    notes: () => import("../notes-5TJY7RB5.js").then((m) => m.default),
-    notification: () => import("../notification-H6YLABKW.js").then((m) => m.default),
-    organization: () => import("../organization-ILSV2FAU.js").then((m) => m.default),
-    "partner-directory": () => import("../partner-directory-BCH6MF5E.js").then((m) => m.default),
-    permissions: () => import("../permissions-YJNGIXNZ.js").then((m) => m.default),
-    pricing: () => import("../pricing-G67JCXSJ.js").then((m) => m.default),
-    "pricing-tier": () => import("../pricing-tier-ZHL7YDIR.js").then((m) => m.default),
-    purpose: () => import("../purpose-TLIZRKF2.js").then((m) => m.default),
-    query: () => import("../query-RJFX7FVF.js").then((m) => m.default),
-    sandbox: () => import("../sandbox-UVLVVTEA.js").then((m) => m.default),
-    sharing: () => import("../sharing-U5O6SIM2.js").then((m) => m.default),
-    snapshot: () => import("../snapshot-VSORAWHR.js").then((m) => m.default),
-    submission: () => import("../submission-HVNOP5T6.js").then((m) => m.default),
-    targeting: () => import("../targeting-STSFTPYR.js").then((m) => m.default),
-    "template-variables": () => import("../template-variables-MFDAUYI4.js").then((m) => m.default),
-    user: () => import("../user-Y5N4UYAI.js").then((m) => m.default),
-    "validation-rules": () => import("../validation-rules-LTKHB7BK.js").then((m) => m.default),
-    webhooks: () => import("../webhooks-XU3W66DH.js").then((m) => m.default),
-    workflow: () => import("../workflow-N6IJ6LYR.js").then((m) => m.default),
-    "workflow-definition": () => import("../workflow-definition-GTOTMANE.js").then((m) => m.default)
+    upgrade: () => import("../upgrade-ON2KV5LK.js").then((m) => m.default),
+    "access-token": () => import("../access-token-Q2UGZIMP.js").then((m) => m.default),
+    address: () => import("../address-AX4UT6BO.js").then((m) => m.default),
+    "address-suggestions": () => import("../address-suggestions-GMVIIZY6.js").then((m) => m.default),
+    "ai-agents": () => import("../ai-agents-J2ZTLDLV.js").then((m) => m.default),
+    app: () => import("../app-RHHZR5YW.js").then((m) => m.default),
+    "audit-logs": () => import("../audit-logs-VLVHBCF5.js").then((m) => m.default),
+    automation: () => import("../automation-NYSYIXDW.js").then((m) => m.default),
+    billing: () => import("../billing-6SWQNULS.js").then((m) => m.default),
+    "blueprint-manifest": () => import("../blueprint-manifest-3RS3SQE6.js").then((m) => m.default),
+    calendar: () => import("../calendar-WQIQK46M.js").then((m) => m.default),
+    chat: () => import("../chat-EMJD5AN5.js").then((m) => m.default),
+    "configuration-hub": () => import("../configuration-hub-BVTAC26A.js").then((m) => m.default),
+    consent: () => import("../consent-UZSED4QQ.js").then((m) => m.default),
+    "customer-portal": () => import("../customer-portal-CZSHTI3Q.js").then((m) => m.default),
+    dashboard: () => import("../dashboard-NQHQ65ME.js").then((m) => m.default),
+    "data-governance": () => import("../data-governance-WOUP2NNR.js").then((m) => m.default),
+    deduplication: () => import("../deduplication-EUAFCYY3.js").then((m) => m.default),
+    design: () => import("../design-XR6C6OTA.js").then((m) => m.default),
+    document: () => import("../document-EWDEIA2Z.js").then((m) => m.default),
+    "email-settings": () => import("../email-settings-IOHMQBXH.js").then((m) => m.default),
+    "email-template": () => import("../email-template-K6X722R7.js").then((m) => m.default),
+    entity: () => import("../entity-Z6JH5EDY.js").then((m) => m.default),
+    "entity-mapping": () => import("../entity-mapping-PZY5PCRG.js").then((m) => m.default),
+    environments: () => import("../environments-FL7IAAHN.js").then((m) => m.default),
+    "event-catalog": () => import("../event-catalog-GUAWJ3RG.js").then((m) => m.default),
+    "external-values": () => import("../external-values-A7C75KBV.js").then((m) => m.default),
+    file: () => import("../file-IRUY5MWL.js").then((m) => m.default),
+    iban: () => import("../iban-3MLGKYKV.js").then((m) => m.default),
+    identity: () => import("../identity-LI26M7EG.js").then((m) => m.default),
+    "integration-toolkit": () => import("../integration-toolkit-GSDL2CE2.js").then((m) => m.default),
+    journey: () => import("../journey-ASQNGOEH.js").then((m) => m.default),
+    kanban: () => import("../kanban-7XW56ILD.js").then((m) => m.default),
+    message: () => import("../message-XYB34GBX.js").then((m) => m.default),
+    metering: () => import("../metering-GJSVL6OZ.js").then((m) => m.default),
+    notes: () => import("../notes-FZPFGPFO.js").then((m) => m.default),
+    notification: () => import("../notification-X6IHCJDI.js").then((m) => m.default),
+    organization: () => import("../organization-374MUWDY.js").then((m) => m.default),
+    "partner-directory": () => import("../partner-directory-BC7XF3VN.js").then((m) => m.default),
+    permissions: () => import("../permissions-UAXXL2OG.js").then((m) => m.default),
+    pricing: () => import("../pricing-Q43OPFUT.js").then((m) => m.default),
+    "pricing-tier": () => import("../pricing-tier-AHRG3AVC.js").then((m) => m.default),
+    purpose: () => import("../purpose-FXBJ24XT.js").then((m) => m.default),
+    query: () => import("../query-Y5XZZBFS.js").then((m) => m.default),
+    sandbox: () => import("../sandbox-7DPZVDMD.js").then((m) => m.default),
+    sharing: () => import("../sharing-4IMN5325.js").then((m) => m.default),
+    snapshot: () => import("../snapshot-OE7NRZGS.js").then((m) => m.default),
+    submission: () => import("../submission-R2GYF5UV.js").then((m) => m.default),
+    targeting: () => import("../targeting-NLHZEKAE.js").then((m) => m.default),
+    "template-variables": () => import("../template-variables-BEBZD6IW.js").then((m) => m.default),
+    user: () => import("../user-C2MPCWFC.js").then((m) => m.default),
+    "validation-rules": () => import("../validation-rules-MCQP5FYV.js").then((m) => m.default),
+    webhooks: () => import("../webhooks-CXLFLDRO.js").then((m) => m.default),
+    workflow: () => import("../workflow-WGG5Y45V.js").then((m) => m.default),
+    "workflow-definition": () => import("../workflow-definition-P5RIZCJK.js").then((m) => m.default)
   }
 });
 
@@ -97,6 +98,9 @@ var VALUE_TAKING_FLAGS = /* @__PURE__ */ new Set([
   "--server",
   "--jsonata",
   "--definition",
+  "--org",
+  "--access",
+  "--reason",
   // short
   "-t",
   "-s"
@@ -137,7 +141,7 @@ process.stderr.on("error", (err) => {
   if (err.code === "EPIPE") process.exit(0);
   throw err;
 });
-var VERSION = true ? "0.1.193" : (await null).default.version;
+var VERSION = true ? "0.1.195" : (await null).default.version;
 var reorderedArgv = hoistFlagsAfterSubcommand(process.argv.slice(2));
 process.argv = [process.argv[0], process.argv[1], ...reorderedArgv];
 var args = process.argv.slice(2);
@@ -251,6 +255,22 @@ function printRootHelp() {
   w(`  ${CYAN}upgrade${R}                 Upgrade to the latest version
 `);
   w(`
+`);
+  w(`${BOLD}AGENT MODE${R} ${DIM}(optional)${R}
+`);
+  w(
+    `  ${CYAN}auth login --agent${R}      Register this CLI as an Agent Auth agent ${DIM}(org switching, silent token refresh, scoped access profiles)${R}
+`
+  );
+  w(`  ${CYAN}org list${R}                List your organizations and this CLI's access
+`);
+  w(`  ${CYAN}org use${R} <id>            Switch the active organization
+`);
+  w(`  ${CYAN}org request${R} <id>        Request access ${DIM}(--access <profile> --reason "\u2026")${R}
+`);
+  w(`  ${CYAN}org current${R}             Show the active organization
+`);
+  w(`
 `);
   w(`${BOLD}APIs${R}
 `);
@@ -279,6 +299,10 @@ function printRootHelp() {
   w(`  ${YELLOW}$${R} epilot entity searchEntities --use-dev ${DIM}# target dev environment${R}
 `);
   w(`  ${YELLOW}$${R} epilot config set stage dev ${DIM}# persist dev as default${R}
+`);
+  w(`  ${YELLOW}$${R} epilot auth login --agent --org 739224 ${DIM}# agent mode (optional)${R}
+`);
+  w(`  ${YELLOW}$${R} epilot org request 739224 --access config:write --reason "Fix the PV journey mapping"
 `);
   w(`
 `);

package/dist/{blueprint-manifest-RGKFKTQW.js → blueprint-manifest-3RS3SQE6.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-CMVLVDYF.js";
+} from "./chunk-36I64456.js";
+import "./chunk-BYNI3AGG.js";
 import "./chunk-IOLKUHUB.js";
-import "./chunk-ENVFJFZZ.js";
-import "./chunk-M3M3C5WH.js";
-import "./chunk-YHQA2AVG.js";
+import "./chunk-G564QXNL.js";
+import "./chunk-QPUCHKXS.js";
 import "./chunk-7ZQ666ZQ.js";
 
 // src/commands/apis/blueprint-manifest.ts

package/dist/{calendar-BAZUUP7W.js → calendar-WQIQK46M.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-CMVLVDYF.js";
+} from "./chunk-36I64456.js";
+import "./chunk-BYNI3AGG.js";
 import "./chunk-IOLKUHUB.js";
-import "./chunk-ENVFJFZZ.js";
-import "./chunk-M3M3C5WH.js";
-import "./chunk-YHQA2AVG.js";
+import "./chunk-G564QXNL.js";
+import "./chunk-QPUCHKXS.js";
 import "./chunk-7ZQ666ZQ.js";
 
 // src/commands/apis/calendar.ts

package/dist/{chat-Q2OKVJTT.js → chat-EMJD5AN5.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-CMVLVDYF.js";
+} from "./chunk-36I64456.js";
+import "./chunk-BYNI3AGG.js";
 import "./chunk-IOLKUHUB.js";
-import "./chunk-ENVFJFZZ.js";
-import "./chunk-M3M3C5WH.js";
-import "./chunk-YHQA2AVG.js";
+import "./chunk-G564QXNL.js";
+import "./chunk-QPUCHKXS.js";
 import "./chunk-7ZQ666ZQ.js";
 
 // src/commands/apis/chat.ts

package/dist/{chunk-CMVLVDYF.js → chunk-36I64456.js}

@@ -1,4 +1,7 @@
 #!/usr/bin/env node
+import {
+  CLI_USER_AGENT
+} from "./chunk-BYNI3AGG.js";
 import {
   formatOperationsTable,
   isInteractive,
@@ -6,15 +9,12 @@ import {
   promptParam
 } from "./chunk-IOLKUHUB.js";
 import {
-  CLI_USER_AGENT
-} from "./chunk-ENVFJFZZ.js";
-import {
-  resolveToken
-} from "./chunk-M3M3C5WH.js";
+  resolveTokenAsync
+} from "./chunk-G564QXNL.js";
 import {
   getResolvedProfile,
   getStage
-} from "./chunk-YHQA2AVG.js";
+} from "./chunk-QPUCHKXS.js";
 import {
   BG_GREEN,
   BG_RED,
@@ -738,7 +738,7 @@ ${BOLD}Available operations:${RESET}
 `);
     process.exit(1);
   }
-  let token = resolveToken(args.token, args.profile);
+  let token = await resolveTokenAsync(args.token, args.profile);
   if (!token) {
     if (isInteractive({ interactive: args.interactive })) {
       const { promptToken } = await import("./interactive-LSY5SADM.js");

package/dist/{chunk-7TLX5QRJ.js → chunk-5DFIPWJS.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   CLI_USER_AGENT
-} from "./chunk-ENVFJFZZ.js";
+} from "./chunk-BYNI3AGG.js";
 import {
   loadCredentials,
   resolveToken
-} from "./chunk-M3M3C5WH.js";
+} from "./chunk-G564QXNL.js";
 import {
   getResolvedProfile
-} from "./chunk-YHQA2AVG.js";
+} from "./chunk-QPUCHKXS.js";
 import {
   BOLD,
   DIM,