@eve-horizon/cli 0.2.1 → 0.2.6

package/dist/commands/auth.js

@@ -271,6 +271,46 @@ async function handleAuth(subcommand, flags, context, credentials) {
             console.log(tokenEntry.access_token);
             return;
         }
+        case 'mint': {
+            const email = (0, args_1.getStringFlag)(flags, ['email']);
+            const orgId = (0, args_1.getStringFlag)(flags, ['org']);
+            const projectId = (0, args_1.getStringFlag)(flags, ['project']);
+            const role = (0, args_1.getStringFlag)(flags, ['role']) ?? 'member';
+            const ttlStr = (0, args_1.getStringFlag)(flags, ['ttl']);
+            const ttlDays = ttlStr ? parseInt(ttlStr, 10) : undefined;
+            if (ttlDays !== undefined && (isNaN(ttlDays) || ttlDays < 1 || ttlDays > 90)) {
+                throw new Error('--ttl must be between 1 and 90 days');
+            }
+            if (!email) {
+                throw new Error('Usage: eve auth mint --email <email> [--org <org_id> | --project <project_id>] [--role <role>]');
+            }
+            if (!orgId && !projectId) {
+                throw new Error('Usage: eve auth mint --email <email> [--org <org_id> | --project <project_id>] [--role <role>]');
+            }
+            if (!['admin', 'member'].includes(role)) {
+                throw new Error(`Invalid role: ${role}. Must be one of: admin, member`);
+            }
+            const response = await (0, client_1.requestJson)(context, '/auth/mint', {
+                method: 'POST',
+                body: {
+                    email,
+                    org_id: orgId,
+                    project_id: projectId,
+                    role,
+                    ttl_days: ttlDays,
+                },
+            });
+            if (json) {
+                (0, output_1.outputJson)(response, json);
+                return;
+            }
+            if (!response.access_token) {
+                throw new Error('Mint response missing access_token');
+            }
+            // Print only the token to stdout, nothing else
+            console.log(response.access_token);
+            return;
+        }
         case 'sync': {
             const claudeOnly = (0, args_1.getBooleanFlag)(flags, ['claude']) ?? false;
             const codexOnly = (0, args_1.getBooleanFlag)(flags, ['codex']) ?? false;

package/dist/commands/build.js

@@ -0,0 +1,366 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleBuild = handleBuild;
+const args_1 = require("../lib/args");
+const client_1 = require("../lib/client");
+const output_1 = require("../lib/output");
+const node_child_process_1 = require("node:child_process");
+// ---------------------------------------------------------------------------
+// Entry point
+// ---------------------------------------------------------------------------
+async function handleBuild(subcommand, positionals, flags, context) {
+    const json = Boolean(flags.json);
+    switch (subcommand) {
+        case 'create':
+            return handleCreate(flags, context, json);
+        case 'list':
+            return handleList(positionals, flags, context, json);
+        case 'show':
+            return handleShow(positionals, flags, context, json);
+        case 'run':
+            return handleRun(positionals, flags, context, json);
+        case 'runs':
+            return handleRuns(positionals, flags, context, json);
+        case 'logs':
+            return handleLogs(positionals, flags, context, json);
+        case 'artifacts':
+            return handleArtifacts(positionals, flags, context, json);
+        case 'diagnose':
+            return handleDiagnose(positionals, flags, context, json);
+        case 'cancel':
+            return handleCancel(positionals, flags, context, json);
+        default:
+            throw new Error('Usage: eve build <create|list|show|run|runs|logs|artifacts|diagnose|cancel>\n' +
+                '  create   --project <id> --ref <sha> [--services <list>]  - create a build spec\n' +
+                '  list     [--project <id>]                                - list build specs\n' +
+                '  show     <build_id>                                      - show build spec details\n' +
+                '  run      <build_id>                                      - start a build run\n' +
+                '  runs     <build_id>                                      - list runs for a build\n' +
+                '  logs     <build_id> [--run <id>]                         - show build logs\n' +
+                '  artifacts <build_id>                                     - list build artifacts\n' +
+                '  diagnose <build_id>                                      - show full build state\n' +
+                '  cancel   <build_id>                                      - cancel active build run');
+    }
+}
+// ---------------------------------------------------------------------------
+// Subcommands
+// ---------------------------------------------------------------------------
+async function handleCreate(flags, context, json) {
+    const projectId = (0, args_1.getStringFlag)(flags, ['project']) ?? context.projectId;
+    const ref = (0, args_1.getStringFlag)(flags, ['ref']);
+    const manifestHash = (0, args_1.getStringFlag)(flags, ['manifest-hash', 'manifest']);
+    const services = (0, args_1.getStringFlag)(flags, ['services']);
+    if (!projectId || !ref || !manifestHash) {
+        throw new Error('Usage: eve build create --project <id> --ref <sha> --manifest-hash <hash> [--services <s1,s2>]');
+    }
+    // Resolve git ref to actual 40-char SHA
+    let gitSha;
+    try {
+        gitSha = (0, node_child_process_1.execSync)(`git rev-parse ${ref}`, {
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
+        if (!json) {
+            console.log(`Resolved ref '${ref}' → ${gitSha.substring(0, 8)}...`);
+        }
+    }
+    catch (error) {
+        throw new Error(`Failed to resolve git ref '${ref}': ${error instanceof Error ? error.message : String(error)}\n` +
+            'Make sure you are in a git repository and the ref exists.');
+    }
+    const body = { git_sha: gitSha, manifest_hash: manifestHash };
+    if (services) {
+        body.services = services.split(',').map(s => s.trim());
+    }
+    const build = await (0, client_1.requestJson)(context, `/projects/${projectId}/builds`, { method: 'POST', body });
+    if (json) {
+        (0, output_1.outputJson)(build, json);
+        return;
+    }
+    console.log(`Build created: ${build.id}`);
+    console.log(`  Project:  ${build.project_id}`);
+    console.log(`  SHA:      ${build.git_sha}`);
+    if (build.manifest_hash) {
+        console.log(`  Manifest: ${build.manifest_hash.substring(0, 12)}...`);
+    }
+    console.log(`  Created:  ${build.created_at}`);
+}
+async function handleList(positionals, flags, context, json) {
+    const projectId = positionals[0] ?? (0, args_1.getStringFlag)(flags, ['project']) ?? context.projectId;
+    if (!projectId) {
+        throw new Error('Usage: eve build list [--project <id>]');
+    }
+    const query = buildQuery({
+        limit: (0, args_1.getStringFlag)(flags, ['limit']),
+        offset: (0, args_1.getStringFlag)(flags, ['offset']),
+    });
+    const response = await (0, client_1.requestJson)(context, `/projects/${projectId}/builds${query}`);
+    if (json) {
+        (0, output_1.outputJson)(response, json);
+        return;
+    }
+    if (response.data.length === 0) {
+        console.log('No builds found.');
+        return;
+    }
+    formatBuildList(response.data);
+}
+async function handleShow(positionals, flags, context, json) {
+    const buildId = positionals[0] ?? (0, args_1.getStringFlag)(flags, ['id']);
+    if (!buildId) {
+        throw new Error('Usage: eve build show <build_id>');
+    }
+    const build = await (0, client_1.requestJson)(context, `/builds/${buildId}`);
+    if (json) {
+        (0, output_1.outputJson)(build, json);
+        return;
+    }
+    formatBuildDetail(build);
+}
+async function handleRun(positionals, flags, context, json) {
+    const buildId = positionals[0] ?? (0, args_1.getStringFlag)(flags, ['id']);
+    if (!buildId) {
+        throw new Error('Usage: eve build run <build_id>');
+    }
+    const run = await (0, client_1.requestJson)(context, `/builds/${buildId}/runs`, { method: 'POST' });
+    if (json) {
+        (0, output_1.outputJson)(run, json);
+        return;
+    }
+    console.log(`Build run started: ${run.id}`);
+    console.log(`  Build:   ${run.build_id}`);
+    console.log(`  Status:  ${run.status}`);
+    if (run.backend) {
+        console.log(`  Backend: ${run.backend}`);
+    }
+}
+async function handleRuns(positionals, flags, context, json) {
+    const buildId = positionals[0] ?? (0, args_1.getStringFlag)(flags, ['id']);
+    if (!buildId) {
+        throw new Error('Usage: eve build runs <build_id>');
+    }
+    const query = buildQuery({
+        limit: (0, args_1.getStringFlag)(flags, ['limit']),
+        offset: (0, args_1.getStringFlag)(flags, ['offset']),
+    });
+    const response = await (0, client_1.requestJson)(context, `/builds/${buildId}/runs${query}`);
+    if (json) {
+        (0, output_1.outputJson)(response, json);
+        return;
+    }
+    if (response.data.length === 0) {
+        console.log('No runs found for this build.');
+        return;
+    }
+    formatRunList(response.data);
+}
+async function handleLogs(positionals, flags, context, json) {
+    const buildId = positionals[0] ?? (0, args_1.getStringFlag)(flags, ['id']);
+    const runId = (0, args_1.getStringFlag)(flags, ['run']);
+    if (!buildId) {
+        throw new Error('Usage: eve build logs <build_id> [--run <run_id>]');
+    }
+    const query = runId ? `?run_id=${encodeURIComponent(runId)}` : '';
+    const logs = await (0, client_1.requestJson)(context, `/builds/${buildId}/logs${query}`);
+    if (json) {
+        (0, output_1.outputJson)(logs, json);
+        return;
+    }
+    if (logs.logs.length === 0) {
+        console.log('No logs available.');
+        return;
+    }
+    for (const entry of logs.logs) {
+        const line = entry.line;
+        if (typeof line.message === 'string') {
+            console.log(line.message);
+            continue;
+        }
+        if (Array.isArray(line.lines)) {
+            for (const item of line.lines) {
+                if (typeof item === 'string') {
+                    console.log(item);
+                }
+            }
+            continue;
+        }
+        console.log(JSON.stringify(line));
+    }
+}
+async function handleArtifacts(positionals, flags, context, json) {
+    const buildId = positionals[0] ?? (0, args_1.getStringFlag)(flags, ['id']);
+    if (!buildId) {
+        throw new Error('Usage: eve build artifacts <build_id>');
+    }
+    const response = await (0, client_1.requestJson)(context, `/builds/${buildId}/artifacts`);
+    if (json) {
+        (0, output_1.outputJson)(response, json);
+        return;
+    }
+    if (response.data.length === 0) {
+        console.log('No artifacts found for this build.');
+        return;
+    }
+    formatArtifactList(response.data);
+}
+async function handleCancel(positionals, flags, context, json) {
+    const buildId = positionals[0] ?? (0, args_1.getStringFlag)(flags, ['id']);
+    if (!buildId) {
+        throw new Error('Usage: eve build cancel <build_id>');
+    }
+    const result = await (0, client_1.requestJson)(context, `/builds/${buildId}/cancel`, { method: 'POST' });
+    if (json) {
+        (0, output_1.outputJson)(result, json);
+        return;
+    }
+    console.log(`Build cancelled: ${buildId}`);
+}
+async function handleDiagnose(positionals, flags, context, json) {
+    const buildId = positionals[0] ?? (0, args_1.getStringFlag)(flags, ['id']);
+    if (!buildId) {
+        throw new Error('Usage: eve build diagnose <build_id>');
+    }
+    const spec = await (0, client_1.requestJson)(context, `/builds/${buildId}`);
+    const runs = await (0, client_1.requestJson)(context, `/builds/${buildId}/runs?limit=20&offset=0`);
+    const artifacts = await (0, client_1.requestJson)(context, `/builds/${buildId}/artifacts`);
+    const latestRun = runs.data[0];
+    const logs = latestRun
+        ? await (0, client_1.requestJson)(context, `/builds/${buildId}/logs?run_id=${encodeURIComponent(latestRun.id)}`)
+        : { logs: [] };
+    const payload = { spec, runs: runs.data, artifacts: artifacts.data, logs: logs.logs };
+    if (json) {
+        (0, output_1.outputJson)(payload, json);
+        return;
+    }
+    console.log(`Build diagnose: ${spec.id}`);
+    formatBuildDetail(spec);
+    console.log('');
+    if (runs.data.length > 0) {
+        formatRunList(runs.data);
+    }
+    else {
+        console.log('No runs found.');
+    }
+    console.log('');
+    if (artifacts.data.length > 0) {
+        formatArtifactList(artifacts.data);
+    }
+    else {
+        console.log('No artifacts found.');
+    }
+    console.log('');
+    if (logs.logs.length > 0) {
+        console.log('Recent logs:');
+        for (const entry of logs.logs.slice(-50)) {
+            const line = entry.line;
+            if (typeof line.message === 'string') {
+                console.log(line.message);
+                continue;
+            }
+            if (Array.isArray(line.lines)) {
+                for (const item of line.lines) {
+                    if (typeof item === 'string') {
+                        console.log(item);
+                    }
+                }
+                continue;
+            }
+            console.log(JSON.stringify(line));
+        }
+    }
+    else {
+        console.log('No logs found.');
+    }
+}
+// ---------------------------------------------------------------------------
+// Formatters
+// ---------------------------------------------------------------------------
+function formatBuildList(builds) {
+    console.log('Build ID'.padEnd(30) + 'SHA'.padEnd(12) + 'Created By'.padEnd(20) + 'Created');
+    console.log('-'.repeat(90));
+    for (const build of builds) {
+        const id = build.id.padEnd(30);
+        const sha = build.git_sha.substring(0, 8).padEnd(12);
+        const creator = (build.created_by ?? '-').padEnd(20);
+        const created = new Date(build.created_at).toLocaleString();
+        console.log(`${id}${sha}${creator}${created}`);
+    }
+    console.log('');
+    console.log(`Total: ${builds.length} builds`);
+}
+function formatBuildDetail(build) {
+    console.log(`Build: ${build.id}`);
+    console.log(`  Project:       ${build.project_id}`);
+    console.log(`  SHA:           ${build.git_sha}`);
+    console.log(`  Manifest Hash: ${build.manifest_hash}`);
+    console.log(`  Created By:    ${build.created_by ?? '-'}`);
+    console.log(`  Created:       ${build.created_at}`);
+    if (build.services_json) {
+        console.log(`  Services:      ${JSON.stringify(build.services_json)}`);
+    }
+    if (build.inputs_json) {
+        console.log(`  Inputs:        ${JSON.stringify(build.inputs_json)}`);
+    }
+    if (build.registry_json) {
+        console.log(`  Registry:      ${JSON.stringify(build.registry_json)}`);
+    }
+    if (build.cache_json) {
+        console.log(`  Cache:         ${JSON.stringify(build.cache_json)}`);
+    }
+}
+function formatRunList(runs) {
+    console.log('Run ID'.padEnd(30) + 'Status'.padEnd(15) + 'Backend'.padEnd(15) + 'Started');
+    console.log('-'.repeat(80));
+    for (const run of runs) {
+        const id = run.id.padEnd(30);
+        const status = run.status.padEnd(15);
+        const backend = (run.backend ?? '-').padEnd(15);
+        const started = run.started_at ? new Date(run.started_at).toLocaleString() : '-';
+        console.log(`${id}${status}${backend}${started}`);
+        if (run.error_message) {
+            console.log(`  Error: ${run.error_message}`);
+        }
+    }
+    console.log('');
+    console.log(`Total: ${runs.length} runs`);
+}
+function formatArtifactList(artifacts) {
+    console.log('Service'.padEnd(25) + 'Image'.padEnd(50) + 'Size');
+    console.log('-'.repeat(90));
+    for (const artifact of artifacts) {
+        const service = artifact.service_name.padEnd(25);
+        const image = artifact.image_ref.padEnd(50);
+        const size = artifact.size_bytes ? formatBytes(artifact.size_bytes) : '-';
+        console.log(`${service}${image}${size}`);
+        if (artifact.digest) {
+            console.log(`  Digest: ${artifact.digest}`);
+        }
+        if (artifact.platforms_json && artifact.platforms_json.length > 0) {
+            console.log(`  Platforms: ${artifact.platforms_json.join(', ')}`);
+        }
+    }
+    console.log('');
+    console.log(`Total: ${artifacts.length} artifacts`);
+}
+function formatBytes(bytes) {
+    if (bytes < 1024)
+        return `${bytes} B`;
+    if (bytes < 1024 * 1024)
+        return `${(bytes / 1024).toFixed(1)} KB`;
+    if (bytes < 1024 * 1024 * 1024)
+        return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
+    return `${(bytes / (1024 * 1024 * 1024)).toFixed(1)} GB`;
+}
+// ---------------------------------------------------------------------------
+// Utilities
+// ---------------------------------------------------------------------------
+function buildQuery(params) {
+    const search = new URLSearchParams();
+    Object.entries(params).forEach(([key, value]) => {
+        if (value === undefined || value === '')
+            return;
+        search.set(key, value);
+    });
+    const query = search.toString();
+    return query ? `?${query}` : '';
+}

package/dist/commands/env.js

@@ -161,7 +161,7 @@ async function handleCreate(positionals, flags, context, json) {
     }
 }
 /**
- * eve env deploy [project] <name> --ref <sha> [--direct] [--inputs <json>]
+ * eve env deploy [project] <name> --ref <sha> [--direct] [--inputs <json>] [--image-tag <tag>]
  * Deploy to an environment
  * If project is in profile, can use: eve env deploy <name> --ref <sha>
  */
@@ -194,13 +194,28 @@ async function handleDeploy(positionals, flags, context, json) {
         envName = flagName;
     }
     if (!projectId || !envName) {
-        throw new Error('Usage: eve env deploy <env> --ref <sha> [--direct] [--inputs <json>] [--project=<id>]');
+        throw new Error('Usage: eve env deploy <env> --ref <sha> [--direct] [--inputs <json>] [--image-tag <tag>] [--project=<id>]');
     }
     // --ref flag is now required
-    const gitSha = (0, args_1.getStringFlag)(flags, ['ref']);
-    if (!gitSha) {
+    const ref = (0, args_1.getStringFlag)(flags, ['ref']);
+    if (!ref) {
         throw new Error('Usage: eve env deploy <env> --ref <sha> [options]\n\nThe --ref flag is required (git SHA or commit reference)');
     }
+    // Resolve git ref to actual 40-char SHA
+    let gitSha;
+    try {
+        gitSha = (0, child_process_1.execSync)(`git rev-parse ${ref}`, {
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
+        if (!json) {
+            console.log(`Resolved ref '${ref}' → ${gitSha.substring(0, 8)}...`);
+        }
+    }
+    catch (error) {
+        throw new Error(`Failed to resolve git ref '${ref}': ${error instanceof Error ? error.message : String(error)}\n` +
+            'Make sure you are in a git repository and the ref exists.');
+    }
     if (!json) {
         console.log(`Deploying commit ${gitSha.substring(0, 8)} to ${envName}...`);
     }
@@ -226,6 +241,8 @@ async function handleDeploy(positionals, flags, context, json) {
                 'Example: --inputs \'{"release_id":"rel_xxx","smoke_test":false}\'');
         }
     }
+    // Parse --image-tag flag (optional)
+    const imageTag = (0, args_1.getStringFlag)(flags, ['image-tag', 'image_tag', 'imageTag']);
     // POST deployment
     const body = {
         git_sha: gitSha,
@@ -237,6 +254,9 @@ async function handleDeploy(positionals, flags, context, json) {
     if (inputs) {
         body.inputs = inputs;
     }
+    if (imageTag) {
+        body.image_tag = imageTag;
+    }
     const response = await (0, client_1.requestJson)(context, `/projects/${projectId}/envs/${envName}/deploy`, {
         method: 'POST',
         body,

package/dist/commands/org.js

@@ -12,6 +12,7 @@ async function handleOrg(subcommand, positionals, flags, context) {
         case 'ensure': {
             let orgId = typeof flags.id === 'string' ? flags.id : '';
             let orgName = typeof flags.name === 'string' ? flags.name : '';
+            let orgSlug = typeof flags.slug === 'string' ? flags.slug : '';
             const nameOrId = positionals[0];
             if (!orgId && nameOrId) {
                 if (/^org_[a-zA-Z0-9]+$/.test(nameOrId)) {
@@ -25,7 +26,7 @@ async function handleOrg(subcommand, positionals, flags, context) {
             }
             orgId = orgId || context.orgId || DEFAULT_ORG_ID;
             orgName = orgName || DEFAULT_ORG_NAME;
-            const body = { id: orgId, name: orgName };
+            const body = { id: orgId, name: orgName, ...(orgSlug ? { slug: orgSlug } : {}) };
             const org = await (0, client_1.requestJson)(context, '/orgs/ensure', {
                 method: 'POST',
                 body,

package/dist/commands/pipeline.js

@@ -4,6 +4,7 @@ exports.handlePipeline = handlePipeline;
 const args_1 = require("../lib/args");
 const client_1 = require("../lib/client");
 const output_1 = require("../lib/output");
+const node_child_process_1 = require("node:child_process");
 async function handlePipeline(subcommand, positionals, flags, context) {
     const json = Boolean(flags.json);
     switch (subcommand) {
@@ -165,6 +166,21 @@ async function handleRun(positionals, flags, context, json) {
     if (!pipelineName || !projectId || !ref) {
         throw new Error('Usage: eve pipeline run <name> --ref <sha> [--env <env>] [--project <id>] [--wait] [--inputs <json>] [--only <step>]');
     }
+    // Resolve git ref to actual 40-char SHA
+    let gitSha;
+    try {
+        gitSha = (0, node_child_process_1.execSync)(`git rev-parse ${ref}`, {
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
+        if (!json) {
+            console.log(`Resolved ref '${ref}' → ${gitSha.substring(0, 8)}...`);
+        }
+    }
+    catch (error) {
+        throw new Error(`Failed to resolve git ref '${ref}': ${error instanceof Error ? error.message : String(error)}\n` +
+            'Make sure you are in a git repository and the ref exists.');
+    }
     let inputs;
     if (inputsRaw) {
         try {
@@ -175,11 +191,11 @@ async function handleRun(positionals, flags, context, json) {
         }
     }
     // Emit event before creating the pipeline run
-    await emitPipelineRunEvent(context, projectId, pipelineName, { env, ref, inputs });
+    await emitPipelineRunEvent(context, projectId, pipelineName, { env, ref: gitSha, inputs });
     if (only) {
         const response = await (0, client_1.requestJson)(context, `/projects/${projectId}/pipelines/${pipelineName}/runs`, {
             method: 'POST',
-            body: { git_sha: ref, env_name: env, inputs, only },
+            body: { git_sha: gitSha, env_name: env, inputs, only },
         });
         if (json) {
             (0, output_1.outputJson)(response, json);
@@ -203,7 +219,7 @@ async function handleRun(positionals, flags, context, json) {
     const url = `/projects/${projectId}/pipelines/${pipelineName}/run${queryString ? `?${queryString}` : ''}`;
     const response = await (0, client_1.requestJson)(context, url, {
         method: 'POST',
-        body: { ref, env, inputs },
+        body: { ref: gitSha, env, inputs },
     });
     if (json) {
         (0, output_1.outputJson)(response, json);

package/dist/commands/profile.js

@@ -64,10 +64,10 @@ function handleProfile(subcommand, positionals, flags, config) {
             return;
         }
         case 'use': {
-            const isLocal = Boolean(flags.local);
+            const isGlobal = Boolean(flags.global);
             const isClear = Boolean(flags.clear);
-            // Handle --local --clear: remove local profile
-            if (isLocal && isClear) {
+            // Handle --clear: remove local profile
+            if (isClear) {
                 const removed = (0, context_1.removeRepoProfile)();
                 if (removed) {
                     (0, output_1.outputJson)({ cleared: true, path: (0, context_1.getRepoProfilePath)() }, json, `✓ Removed local profile`);
@@ -79,15 +79,21 @@ function handleProfile(subcommand, positionals, flags, config) {
             }
             const name = positionals[0];
             if (!name) {
-                throw new Error('Usage: eve profile use <name> [--local]');
+                throw new Error('Usage: eve profile use <name> [--global]');
             }
-            // Validate profile exists in global config
+            // Validate profile exists in global config (auto-create if needed)
             if (!config.profiles[name]) {
                 config.profiles[name] = {};
                 (0, config_1.saveConfig)(config);
             }
-            if (isLocal) {
-                // Write to .eve/profile.yaml
+            if (isGlobal) {
+                // Explicit: set global active profile in ~/.eve/config.json
+                config.active_profile = name;
+                (0, config_1.saveConfig)(config);
+                (0, output_1.outputJson)({ active_profile: name }, json, `✓ Active profile: ${name} (global)`);
+            }
+            else {
+                // Default: write to .eve/profile.yaml (local project mode)
                 const repoProfile = { profile: name };
                 // Apply any override flags
                 if (typeof flags['api-url'] === 'string')
@@ -99,12 +105,6 @@ function handleProfile(subcommand, positionals, flags, config) {
                 (0, context_1.saveRepoProfile)(repoProfile);
                 (0, output_1.outputJson)({ profile: name, local: true, path: (0, context_1.getRepoProfilePath)(), ...repoProfile }, json, `✓ Local profile set: ${name} (${(0, context_1.getRepoProfilePath)()})`);
             }
-            else {
-                // Set global active profile
-                config.active_profile = name;
-                (0, config_1.saveConfig)(config);
-                (0, output_1.outputJson)({ active_profile: name }, json, `✓ Active profile: ${name}`);
-            }
             return;
         }
         case 'create': {
@@ -121,13 +121,42 @@ function handleProfile(subcommand, positionals, flags, config) {
             return;
         }
         case 'set': {
-            const name = positionals[0] ?? config.active_profile;
-            if (!config.profiles[name]) {
-                config.profiles[name] = {};
+            const isGlobal = Boolean(flags.global);
+            if (isGlobal) {
+                // Explicit: write to global ~/.eve/config.json
+                const name = positionals[0] ?? config.active_profile;
+                if (!config.profiles[name]) {
+                    config.profiles[name] = {};
+                }
+                config.profiles[name] = applyProfileFlags(config.profiles[name], flags);
+                config.active_profile = name;
+                (0, config_1.saveConfig)(config);
+                (0, output_1.outputJson)({ active_profile: name, ...config.profiles[name] }, json, `✓ Profile set: ${name} (global)`);
+            }
+            else {
+                // Default: write to local .eve/profile.yaml
+                const globalOnlyFields = ['supabase-url', 'supabase-anon-key', 'default-email', 'default-ssh-key'];
+                const usedGlobalFields = globalOnlyFields.filter(f => typeof flags[f] === 'string');
+                if (usedGlobalFields.length > 0) {
+                    throw new Error(`${usedGlobalFields.map(f => `--${f}`).join(', ')} are user-level settings.\n` +
+                        `Use --global to write them to ~/.eve/config.json`);
+                }
+                const existing = (0, context_1.loadRepoProfile)() ?? {};
+                const repoProfile = { ...existing };
+                const name = positionals[0];
+                if (name)
+                    repoProfile.profile = name;
+                if (typeof flags['api-url'] === 'string')
+                    repoProfile.api_url = flags['api-url'];
+                if (typeof flags.org === 'string')
+                    repoProfile.org_id = flags.org;
+                if (typeof flags.project === 'string')
+                    repoProfile.project_id = flags.project;
+                if (typeof flags.harness === 'string')
+                    repoProfile.default_harness = flags.harness;
+                (0, context_1.saveRepoProfile)(repoProfile);
+                (0, output_1.outputJson)({ ...repoProfile, path: (0, context_1.getRepoProfilePath)() }, json, `✓ Profile set: ${repoProfile.profile ?? 'local'} (${(0, context_1.getRepoProfilePath)()})`);
             }
-            config.profiles[name] = applyProfileFlags(config.profiles[name], flags);
-            (0, config_1.saveConfig)(config);
-            (0, output_1.outputJson)({ name, ...config.profiles[name] }, json, `✓ Profile updated: ${name}`);
             return;
         }
         case 'remove': {

package/dist/commands/system.js

@@ -34,8 +34,10 @@ async function handleSystem(subcommand, positionals, flags, context) {
             return handleConfig(context, json);
         case 'settings':
             return handleSettings(positionals, flags, context, json);
+        case 'orchestrator':
+            return handleOrchestrator(positionals, flags, context, json);
         default:
-            throw new Error('Usage: eve system <status|health|jobs|envs|logs|pods|events|config|settings>');
+            throw new Error('Usage: eve system <status|health|jobs|envs|logs|pods|events|config|settings|orchestrator>');
     }
 }
 // ============================================================================
@@ -61,10 +63,10 @@ async function handleStatus(context, json) {
         }
     }
     catch (error) {
-        // If /system/status doesn't exist yet, fall back to basic health check
+        // If /system/status is missing, fall back to basic health check
         const err = error;
         if (err.message?.includes('HTTP 404')) {
-            console.log('Note: Full system status endpoint not yet implemented.');
+            console.log('Note: /system/status not available on this API version.');
             console.log('Falling back to basic health check...');
             console.log('');
             return handleHealth(context, json);
@@ -318,6 +320,47 @@ async function handleConfig(context, json) {
         response.deployments.forEach((deployment) => console.log(`    - ${deployment}`));
     }
 }
+/**
+ * eve system orchestrator <status|set-concurrency>
+ * Manage orchestrator concurrency settings
+ */
+async function handleOrchestrator(positionals, flags, context, json) {
+    const subcommand = positionals[0];
+    if (subcommand === 'status') {
+        const response = await requestOrchestratorJson(context, '/system/orchestrator/status');
+        if (json) {
+            (0, output_1.outputJson)(response, json);
+        }
+        else {
+            formatOrchestratorStatus(response);
+        }
+        return;
+    }
+    if (subcommand === 'set-concurrency') {
+        const limitStr = positionals[1];
+        if (!limitStr) {
+            throw new Error('Usage: eve system orchestrator set-concurrency <n>');
+        }
+        const limit = parseInt(limitStr, 10);
+        if (isNaN(limit) || limit < 1) {
+            throw new Error('Concurrency limit must be a positive integer');
+        }
+        const response = await requestOrchestratorJson(context, '/system/orchestrator/concurrency', {
+            method: 'POST',
+            body: JSON.stringify({ limit }),
+        });
+        if (json) {
+            (0, output_1.outputJson)(response, json);
+        }
+        else {
+            console.log(`Concurrency limit updated to ${limit}`);
+            console.log('');
+            formatOrchestratorStatus(response);
+        }
+        return;
+    }
+    throw new Error('Usage: eve system orchestrator <status|set-concurrency>');
+}
 /**
  * eve system settings [get <key>] [set <key> <value>]
  * Admin only: Get or set system settings
@@ -526,3 +569,81 @@ function padRight(str, width) {
         return str;
     return str + ' '.repeat(width - str.length);
 }
+/**
+ * Get orchestrator URL from context.
+ * Derives from API URL by replacing the port with the orchestrator port.
+ */
+function getOrchestratorUrl(context) {
+    const envUrl = process.env.EVE_ORCHESTRATOR_URL;
+    if (envUrl) {
+        return envUrl;
+    }
+    // Derive from API URL by changing the port
+    const orchPort = process.env.EVE_ORCHESTRATOR_PORT || '4802';
+    const apiUrl = new URL(context.apiUrl);
+    apiUrl.port = orchPort;
+    return apiUrl.toString().replace(/\/$/, '');
+}
+/**
+ * Request JSON from the orchestrator service.
+ * Similar to requestJson but targets the orchestrator directly.
+ */
+async function requestOrchestratorJson(context, path, options) {
+    const orchUrl = getOrchestratorUrl(context);
+    const url = `${orchUrl}${path}`;
+    const headers = {};
+    if (options?.body) {
+        headers['Content-Type'] = 'application/json';
+    }
+    if (context.token) {
+        headers.Authorization = `Bearer ${context.token}`;
+    }
+    const response = await fetch(url, {
+        method: options?.method ?? 'GET',
+        headers,
+        body: options?.body,
+    });
+    const text = await response.text();
+    let data = null;
+    if (text) {
+        try {
+            data = JSON.parse(text);
+        }
+        catch {
+            data = text;
+        }
+    }
+    if (!response.ok) {
+        const message = typeof data === 'string' ? data : text;
+        throw new Error(`HTTP ${response.status}: ${message}`);
+    }
+    return data;
+}
+/**
+ * Format orchestrator status for human-readable output
+ */
+function formatOrchestratorStatus(status) {
+    console.log('Orchestrator Concurrency Status');
+    console.log('═══════════════════════════════════════');
+    console.log('');
+    console.log(`  Limit:          ${status.limit}`);
+    console.log(`  In-Flight:      ${status.inFlight}`);
+    console.log(`  Uptime:         ${formatUptime(status.uptimeSeconds)}`);
+    console.log(`  Last Change:    ${status.lastChange}`);
+    console.log('');
+}
+/**
+ * Format uptime seconds to human-readable format
+ */
+function formatUptime(seconds) {
+    const hours = Math.floor(seconds / 3600);
+    const minutes = Math.floor((seconds % 3600) / 60);
+    const secs = seconds % 60;
+    if (hours > 0) {
+        return `${hours}h ${minutes}m ${secs}s`;
+    }
+    if (minutes > 0) {
+        return `${minutes}m ${secs}s`;
+    }
+    return `${secs}s`;
+}

package/dist/index.js

@@ -25,6 +25,7 @@ const agents_1 = require("./commands/agents");
 const init_1 = require("./commands/init");
 const release_1 = require("./commands/release");
 const manifest_1 = require("./commands/manifest");
+const build_1 = require("./commands/build");
 async function main() {
     const { flags, positionals } = (0, args_1.parseArgs)(process.argv.slice(2));
     const command = positionals[0];
@@ -111,6 +112,9 @@ async function main() {
         case 'manifest':
             await (0, manifest_1.handleManifest)(subcommand, rest, flags, context);
             return;
+        case 'build':
+            await (0, build_1.handleBuild)(subcommand, rest, flags, context);
+            return;
         default:
             (0, help_1.showMainHelp)();
     }

package/dist/lib/help.js

@@ -530,7 +530,11 @@ Jobs default to 'ready' phase, making them immediately schedulable.`,
     },
     profile: {
         description: `Manage CLI profiles. Profiles store defaults (API URL, org, project) so you don't
-have to specify them on every command. Useful when working with multiple environments.`,
+have to specify them on every command.
+
+By default, set and use write to .eve/profile.yaml (project-local). Use --global to
+write to ~/.eve/config.json instead. This lets you work on multiple projects without
+clobbering your global config.`,
         usage: 'eve profile <subcommand> [options]',
         subcommands: {
             list: {
@@ -538,17 +542,28 @@ have to specify them on every command. Useful when working with multiple environ
                 usage: 'eve profile list',
             },
             show: {
-                description: 'Show profile details',
+                description: 'Show profile details (local overrides applied)',
                 usage: 'eve profile show [name]',
                 examples: ['eve profile show', 'eve profile show prod'],
             },
             use: {
-                description: 'Switch active profile',
-                usage: 'eve profile use <name>',
-                examples: ['eve profile use prod'],
+                description: 'Switch active profile (defaults to local .eve/profile.yaml)',
+                usage: 'eve profile use <name> [--global] [--org <id>] [--project <id>]',
+                options: [
+                    '--global               Write to ~/.eve/config.json instead of local project',
+                    '--org <id>             Set org override',
+                    '--project <id>         Set project override',
+                    '--api-url <url>        Set API URL override',
+                    '--clear                Remove local .eve/profile.yaml',
+                ],
+                examples: [
+                    'eve profile use staging --org org_xxx --project proj_yyy',
+                    'eve profile use staging --global',
+                    'eve profile use --clear',
+                ],
             },
             create: {
-                description: 'Create a new profile',
+                description: 'Create a new named profile (always global)',
                 usage: 'eve profile create <name> [--api-url <url>] [--org <id>] [--project <id>]',
                 options: [
                     '--api-url <url>           API base URL',
@@ -566,13 +581,16 @@ have to specify them on every command. Useful when working with multiple environ
                 ],
             },
             set: {
-                description: 'Update profile settings',
-                usage: 'eve profile set [name] [--api-url <url>] [--org <id>] [--project <id>]',
+                description: 'Update profile settings (defaults to local .eve/profile.yaml)',
+                usage: 'eve profile set [name] [--org <id>] [--project <id>] [--global]',
                 options: [
-                    '--api-url <url>           API base URL',
                     '--org <id>                Default organization ID',
                     '--project <id>            Default project ID',
+                    '--api-url <url>           API base URL',
                     '--harness <name>          Default harness',
+                    '--global                  Write to ~/.eve/config.json instead of local project',
+                    '',
+                    'Global-only (require --global):',
                     '--supabase-url <url>      Supabase URL',
                     '--supabase-anon-key <key> Supabase anon key',
                     '--default-email <email>   Default email for auth login',
@@ -580,25 +598,25 @@ have to specify them on every command. Useful when working with multiple environ
                 ],
                 examples: [
                     'eve profile set --org org_xxx --project proj_yyy',
-                    'eve profile set prod --api-url https://new-api.example.com',
-                    'eve profile set --default-email user@example.com --default-ssh-key ~/.ssh/id_rsa',
+                    'eve profile set staging --org org_xxx --project proj_yyy',
+                    'eve profile set --global --default-email user@example.com',
                 ],
             },
             remove: {
-                description: 'Remove a profile',
+                description: 'Remove a named profile (global)',
                 usage: 'eve profile remove <name>',
             },
         },
         examples: [
-            'eve profile create local --api-url http://localhost:4701',
-            'eve profile use local',
-            'eve profile set --org org_xxx',
+            'eve profile set --org org_xxx --project proj_yyy     # writes .eve/profile.yaml',
+            'eve profile use staging --org org_xxx                 # writes .eve/profile.yaml',
+            'eve profile set --global --default-email me@dev.com   # writes ~/.eve/config.json',
         ],
     },
     auth: {
         description: `Authenticate with Eve Horizon. Auth is optional for local development but required
 for cloud deployments. Credentials are stored per-profile.`,
-        usage: 'eve auth <login|logout|status|whoami|bootstrap|sync|creds|token>',
+        usage: 'eve auth <login|logout|status|whoami|bootstrap|sync|creds|token|mint>',
         subcommands: {
             login: {
                 description: 'Login via GitHub SSH challenge (default) or Supabase (legacy)',
@@ -643,6 +661,23 @@ for cloud deployments. Credentials are stored per-profile.`,
                     'eve auth token  # Share with reviewers for PR preview access',
                 ],
             },
+            mint: {
+                description: 'Mint a user token (admin-only, no SSH login required)',
+                usage: 'eve auth mint --email <email> [--org <org_id> | --project <project_id>] [--role <role>] [--ttl <days>]',
+                options: [
+                    '--email <email>     Target user email (created if missing)',
+                    '--org <org_id>      Org scope for membership and permission checks',
+                    '--project <id>      Project scope for membership and permission checks',
+                    '--role <role>       Role to assign (member|admin), default member',
+                    '--ttl <days>        Token TTL in days (1-90, default: server configured)',
+                ],
+                examples: [
+                    'eve auth mint --email app-bot@example.com --org org_xxx',
+                    'eve auth mint --email app-bot@example.com --project proj_xxx',
+                    'eve auth mint --email app-bot@example.com --project proj_xxx --role admin',
+                    'eve auth mint --email bot@example.com --org org_xxx --ttl 90',
+                ],
+            },
             bootstrap: {
                 description: 'Bootstrap the first admin user with flexible security modes',
                 usage: 'eve auth bootstrap --email <email> [--token <token>] [options]',
@@ -736,12 +771,13 @@ for cloud deployments. Credentials are stored per-profile.`,
             },
             deploy: {
                 description: 'Deploy to an environment',
-                usage: 'eve env deploy <env> --ref <sha> [--direct] [--inputs <json>] [--project <id>]',
+                usage: 'eve env deploy <env> --ref <sha> [--direct] [--inputs <json>] [--image-tag <tag>] [--project <id>]',
                 options: [
                     '<env>                  Environment name (staging, production, test)',
                     '--ref <sha>            Git SHA or commit reference (required)',
                     '--direct               Bypass pipeline and do direct deploy',
                     '--inputs <json>        JSON inputs for the deployment (e.g., \'{"release_id":"rel_xxx"}\')',
+                    '--image-tag <tag>      Use a specific image tag for deploy (direct only)',
                     '--project <id>         Project ID or slug (uses profile default if omitted)',
                     '--watch                Poll deployment status until ready (default: true)',
                     '--timeout <seconds>    Watch timeout in seconds (default: 120)',
@@ -751,6 +787,7 @@ for cloud deployments. Credentials are stored per-profile.`,
                     'eve env deploy staging --ref abc123 --direct',
                     'eve env deploy staging --ref abc123 --inputs \'{"release_id":"rel_xxx","smoke_test":false}\'',
                     'eve env deploy staging --ref abc123 --direct --inputs \'{"release_id":"rel_xxx"}\'',
+                    'eve env deploy staging --ref abc123 --direct --image-tag demo-abc123',
                 ],
             },
             diagnose: {
@@ -1091,6 +1128,105 @@ for cloud deployments. Credentials are stored per-profile.`,
             'eve release resolve v1.2.3 --json',
         ],
     },
+    build: {
+        description: 'Manage builds. Builds are first-class primitives for container image creation (specs, runs, artifacts).',
+        usage: 'eve build <subcommand> [options]',
+        subcommands: {
+            create: {
+                description: 'Create a new build spec',
+                usage: 'eve build create --project <id> --ref <sha> --manifest-hash <hash> [--services <s1,s2>]',
+                options: [
+                    '--project <id>       Project ID (uses profile default)',
+                    '--ref <sha>          Git SHA or commit reference (required)',
+                    '--manifest-hash <h>  Manifest hash (required)',
+                    '--services <list>    Comma-separated service names to build',
+                ],
+                examples: [
+                    'eve build create --ref abc123 --manifest-hash mfst_123',
+                    'eve build create --project proj_xxx --ref abc123 --manifest-hash mfst_123 --services api,web',
+                ],
+            },
+            list: {
+                description: 'List build specs for a project',
+                usage: 'eve build list [--project <id>] [--limit <n>] [--offset <n>]',
+                options: [
+                    '--project <id>       Project ID (uses profile default)',
+                    '--limit <n>          Number of results',
+                    '--offset <n>         Skip first n results',
+                ],
+                examples: [
+                    'eve build list',
+                    'eve build list --project proj_xxx --limit 20',
+                ],
+            },
+            show: {
+                description: 'Show build spec details',
+                usage: 'eve build show <build_id>',
+                examples: [
+                    'eve build show build_xxx',
+                ],
+            },
+            run: {
+                description: 'Start a build run for an existing build spec',
+                usage: 'eve build run <build_id>',
+                examples: [
+                    'eve build run build_xxx',
+                ],
+            },
+            runs: {
+                description: 'List runs for a build spec',
+                usage: 'eve build runs <build_id> [--limit <n>]',
+                options: [
+                    '--limit <n>          Number of results',
+                    '--offset <n>         Skip first n results',
+                ],
+                examples: [
+                    'eve build runs build_xxx',
+                ],
+            },
+            logs: {
+                description: 'Show build logs',
+                usage: 'eve build logs <build_id> [--run <run_id>]',
+                options: [
+                    '--run <id>           Specific run ID (default: latest)',
+                ],
+                examples: [
+                    'eve build logs build_xxx',
+                    'eve build logs build_xxx --run brun_yyy',
+                ],
+            },
+            artifacts: {
+                description: 'List build artifacts (images produced)',
+                usage: 'eve build artifacts <build_id>',
+                examples: [
+                    'eve build artifacts build_xxx',
+                ],
+            },
+            diagnose: {
+                description: 'Show full build state (spec, runs, artifacts, logs)',
+                usage: 'eve build diagnose <build_id>',
+                examples: [
+                    'eve build diagnose build_xxx',
+                ],
+            },
+            cancel: {
+                description: 'Cancel an active build run',
+                usage: 'eve build cancel <build_id>',
+                examples: [
+                    'eve build cancel build_xxx',
+                ],
+            },
+        },
+        examples: [
+            'eve build create --ref abc123 --manifest-hash mfst_123 --services api,web',
+            'eve build list',
+            'eve build show build_xxx',
+            'eve build run build_xxx',
+            'eve build logs build_xxx',
+            'eve build artifacts build_xxx',
+            'eve build diagnose build_xxx',
+        ],
+    },
     init: {
         description: `Initialize a new Eve Horizon project from a template.
 
@@ -1196,6 +1332,31 @@ eve-new-project-setup skill to complete configuration.`,
                 usage: 'eve system config',
                 examples: ['eve system config'],
             },
+            settings: {
+                description: 'Get or set system settings (admin only)',
+                usage: 'eve system settings [get <key>] [set <key> <value>]',
+                options: [
+                    'get <key>            Get specific setting',
+                    'set <key> <value>    Update setting value',
+                ],
+                examples: [
+                    'eve system settings',
+                    'eve system settings get some-key',
+                    'eve system settings set some-key some-value',
+                ],
+            },
+            orchestrator: {
+                description: 'Manage orchestrator concurrency settings',
+                usage: 'eve system orchestrator <status|set-concurrency>',
+                options: [
+                    'status                           Show concurrency status',
+                    'set-concurrency <n>              Set concurrency limit',
+                ],
+                examples: [
+                    'eve system orchestrator status',
+                    'eve system orchestrator set-concurrency 8',
+                ],
+            },
         },
         examples: [
             'eve system health',
@@ -1203,6 +1364,7 @@ eve-new-project-setup skill to complete configuration.`,
             'eve system jobs',
             'eve system envs',
             'eve system logs api',
+            'eve system orchestrator status',
         ],
     },
 };
@@ -1220,6 +1382,7 @@ function showMainHelp() {
     console.log('  manifest   Validate manifests (schema, secrets)');
     console.log('  job        Manage jobs (create, list, show, update, claim, etc.)');
     console.log('  env        Manage environments (list, show, deploy)');
+    console.log('  build      Manage builds (create, run, logs, artifacts)');
     console.log('  release    Manage and inspect releases');
     console.log('  api        Explore API sources and call endpoints');
     console.log('  db         Inspect env DB schema, RLS, and SQL');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eve-horizon/cli",
-  "version": "0.2.1",
+  "version": "0.2.6",
   "description": "Eve Horizon CLI",
   "license": "MIT",
   "repository": {