@eve-horizon/cli 0.2.33 → 0.2.35

package/dist/index.js

@@ -8768,19 +8768,19 @@ var require_module_details_from_path = __commonJS({
           basedir += segments[i] + sep;
         }
       }
-      var path6 = "";
+      var path7 = "";
       var lastSegmentIndex = segments.length - 1;
       for (var i2 = index + offset; i2 <= lastSegmentIndex; i2++) {
         if (i2 === lastSegmentIndex) {
-          path6 += segments[i2];
+          path7 += segments[i2];
         } else {
-          path6 += segments[i2] + sep;
+          path7 += segments[i2] + sep;
         }
       }
       return {
         name,
         basedir,
-        path: path6
+        path: path7
       };
     };
   }
@@ -8886,8 +8886,8 @@ var require_path_parse = __commonJS({
 // ../../node_modules/.pnpm/resolve@1.22.11/node_modules/resolve/lib/node-modules-paths.js
 var require_node_modules_paths = __commonJS({
   "../../node_modules/.pnpm/resolve@1.22.11/node_modules/resolve/lib/node-modules-paths.js"(exports2, module2) {
-    var path6 = require("path");
-    var parse3 = path6.parse || require_path_parse();
+    var path7 = require("path");
+    var parse3 = path7.parse || require_path_parse();
     var driveLetterRegex = /^([A-Za-z]:)/;
     var uncPathRegex = /^\\\\/;
     var getNodeModulesDirs = function getNodeModulesDirs2(absoluteStart, modules) {
@@ -8905,7 +8905,7 @@ var require_node_modules_paths = __commonJS({
       }
       return paths.reduce(function(dirs, aPath) {
         return dirs.concat(modules.map(function(moduleDir) {
-          return path6.resolve(prefix, aPath, moduleDir);
+          return path7.resolve(prefix, aPath, moduleDir);
         }));
       }, []);
     };
@@ -9268,7 +9268,7 @@ var require_async = __commonJS({
   "../../node_modules/.pnpm/resolve@1.22.11/node_modules/resolve/lib/async.js"(exports2, module2) {
     var fs5 = require("fs");
     var getHomedir = require_homedir();
-    var path6 = require("path");
+    var path7 = require("path");
     var caller = require_caller();
     var nodeModulesPaths = require_node_modules_paths();
     var normalizeOptions = require_normalize_options();
@@ -9280,8 +9280,8 @@ var require_async = __commonJS({
     var homedir6 = getHomedir();
     var defaultPaths = function() {
       return [
-        path6.join(homedir6, ".node_modules"),
-        path6.join(homedir6, ".node_libraries")
+        path7.join(homedir6, ".node_modules"),
+        path7.join(homedir6, ".node_libraries")
       ];
     };
     var defaultIsFile = function isFile(file, cb) {
@@ -9331,7 +9331,7 @@ var require_async = __commonJS({
     var getPackageCandidates = function getPackageCandidates2(x, start, opts) {
       var dirs = nodeModulesPaths(start, opts, x);
       for (var i = 0; i < dirs.length; i++) {
-        dirs[i] = path6.join(dirs[i], x);
+        dirs[i] = path7.join(dirs[i], x);
       }
       return dirs;
     };
@@ -9363,10 +9363,10 @@ var require_async = __commonJS({
       var packageIterator = opts.packageIterator;
       var extensions = opts.extensions || [".js"];
       var includeCoreModules = opts.includeCoreModules !== false;
-      var basedir = opts.basedir || path6.dirname(caller());
+      var basedir = opts.basedir || path7.dirname(caller());
       var parent = opts.filename || basedir;
       opts.paths = opts.paths || defaultPaths();
-      var absoluteStart = path6.resolve(basedir);
+      var absoluteStart = path7.resolve(basedir);
       maybeRealpath(
         realpath,
         absoluteStart,
@@ -9379,7 +9379,7 @@ var require_async = __commonJS({
       var res;
       function init(basedir2) {
         if (relativePathRegex.test(x)) {
-          res = path6.resolve(basedir2, x);
+          res = path7.resolve(basedir2, x);
           if (x === "." || x === ".." || x.slice(-1) === "/") res += "/";
           if (x.slice(-1) === "/" && res === basedir2) {
             loadAsDirectory(res, opts.package, onfile);
@@ -9437,17 +9437,17 @@ var require_async = __commonJS({
           var file = x3 + exts2[0];
           var pkg = loadPackage;
           if (pkg) onpkg(null, pkg);
-          else loadpkg(path6.dirname(file), onpkg);
+          else loadpkg(path7.dirname(file), onpkg);
           function onpkg(err2, pkg_, dir) {
             pkg = pkg_;
             if (err2) return cb2(err2);
             if (dir && pkg && opts.pathFilter) {
-              var rfile = path6.relative(dir, file);
+              var rfile = path7.relative(dir, file);
               var rel = rfile.slice(0, rfile.length - exts2[0].length);
               var r = opts.pathFilter(pkg, x3, rel);
               if (r) return load(
                 [""].concat(extensions.slice()),
-                path6.resolve(dir, r),
+                path7.resolve(dir, r),
                 pkg
               );
             }
@@ -9467,10 +9467,10 @@ var require_async = __commonJS({
         }
         if (nodeModulesRegex.test(dir)) return cb2(null);
         maybeRealpath(realpath, dir, opts, function(unwrapErr, pkgdir) {
-          if (unwrapErr) return loadpkg(path6.dirname(dir), cb2);
-          var pkgfile = path6.join(pkgdir, "package.json");
+          if (unwrapErr) return loadpkg(path7.dirname(dir), cb2);
+          var pkgfile = path7.join(pkgdir, "package.json");
           isFile(pkgfile, function(err2, ex) {
-            if (!ex) return loadpkg(path6.dirname(dir), cb2);
+            if (!ex) return loadpkg(path7.dirname(dir), cb2);
             readPackage(readFile, pkgfile, function(err3, pkgParam) {
               if (err3) cb2(err3);
               var pkg = pkgParam;
@@ -9491,10 +9491,10 @@ var require_async = __commonJS({
         }
         maybeRealpath(realpath, x2, opts, function(unwrapErr, pkgdir) {
           if (unwrapErr) return cb2(unwrapErr);
-          var pkgfile = path6.join(pkgdir, "package.json");
+          var pkgfile = path7.join(pkgdir, "package.json");
           isFile(pkgfile, function(err2, ex) {
             if (err2) return cb2(err2);
-            if (!ex) return loadAsFile(path6.join(x2, "index"), fpkg, cb2);
+            if (!ex) return loadAsFile(path7.join(x2, "index"), fpkg, cb2);
             readPackage(readFile, pkgfile, function(err3, pkgParam) {
               if (err3) return cb2(err3);
               var pkg = pkgParam;
@@ -9510,20 +9510,20 @@ var require_async = __commonJS({
                 if (pkg.main === "." || pkg.main === "./") {
                   pkg.main = "index";
                 }
-                loadAsFile(path6.resolve(x2, pkg.main), pkg, function(err4, m, pkg2) {
+                loadAsFile(path7.resolve(x2, pkg.main), pkg, function(err4, m, pkg2) {
                   if (err4) return cb2(err4);
                   if (m) return cb2(null, m, pkg2);
-                  if (!pkg2) return loadAsFile(path6.join(x2, "index"), pkg2, cb2);
-                  var dir = path6.resolve(x2, pkg2.main);
+                  if (!pkg2) return loadAsFile(path7.join(x2, "index"), pkg2, cb2);
+                  var dir = path7.resolve(x2, pkg2.main);
                   loadAsDirectory(dir, pkg2, function(err5, n, pkg3) {
                     if (err5) return cb2(err5);
                     if (n) return cb2(null, n, pkg3);
-                    loadAsFile(path6.join(x2, "index"), pkg3, cb2);
+                    loadAsFile(path7.join(x2, "index"), pkg3, cb2);
                   });
                 });
                 return;
               }
-              loadAsFile(path6.join(x2, "/index"), pkg, cb2);
+              loadAsFile(path7.join(x2, "/index"), pkg, cb2);
             });
           });
         });
@@ -9531,7 +9531,7 @@ var require_async = __commonJS({
       function processDirs(cb2, dirs) {
         if (dirs.length === 0) return cb2(null, void 0);
         var dir = dirs[0];
-        isDirectory(path6.dirname(dir), isdir);
+        isDirectory(path7.dirname(dir), isdir);
         function isdir(err2, isdir2) {
           if (err2) return cb2(err2);
           if (!isdir2) return processDirs(cb2, dirs.slice(1));
@@ -9761,7 +9761,7 @@ var require_sync = __commonJS({
   "../../node_modules/.pnpm/resolve@1.22.11/node_modules/resolve/lib/sync.js"(exports2, module2) {
     var isCore = require_is_core_module();
     var fs5 = require("fs");
-    var path6 = require("path");
+    var path7 = require("path");
     var getHomedir = require_homedir();
     var caller = require_caller();
     var nodeModulesPaths = require_node_modules_paths();
@@ -9773,8 +9773,8 @@ var require_sync = __commonJS({
     var homedir6 = getHomedir();
     var defaultPaths = function() {
       return [
-        path6.join(homedir6, ".node_modules"),
-        path6.join(homedir6, ".node_libraries")
+        path7.join(homedir6, ".node_modules"),
+        path7.join(homedir6, ".node_libraries")
       ];
     };
     var defaultIsFile = function isFile(file) {
@@ -9811,8 +9811,8 @@ var require_sync = __commonJS({
       }
       return x;
     };
-    var defaultReadPackageSync = function defaultReadPackageSync2(readFileSync23, pkgfile) {
-      var body = readFileSync23(pkgfile);
+    var defaultReadPackageSync = function defaultReadPackageSync2(readFileSync24, pkgfile) {
+      var body = readFileSync24(pkgfile);
       try {
         var pkg = JSON.parse(body);
         return pkg;
@@ -9822,7 +9822,7 @@ var require_sync = __commonJS({
     var getPackageCandidates = function getPackageCandidates2(x, start, opts) {
       var dirs = nodeModulesPaths(start, opts, x);
       for (var i = 0; i < dirs.length; i++) {
-        dirs[i] = path6.join(dirs[i], x);
+        dirs[i] = path7.join(dirs[i], x);
       }
       return dirs;
     };
@@ -9832,7 +9832,7 @@ var require_sync = __commonJS({
       }
       var opts = normalizeOptions(x, options);
       var isFile = opts.isFile || defaultIsFile;
-      var readFileSync23 = opts.readFileSync || fs5.readFileSync;
+      var readFileSync24 = opts.readFileSync || fs5.readFileSync;
       var isDirectory = opts.isDirectory || defaultIsDir;
       var realpathSync = opts.realpathSync || defaultRealpathSync;
       var readPackageSync = opts.readPackageSync || defaultReadPackageSync;
@@ -9842,12 +9842,12 @@ var require_sync = __commonJS({
       var packageIterator = opts.packageIterator;
       var extensions = opts.extensions || [".js"];
       var includeCoreModules = opts.includeCoreModules !== false;
-      var basedir = opts.basedir || path6.dirname(caller());
+      var basedir = opts.basedir || path7.dirname(caller());
       var parent = opts.filename || basedir;
       opts.paths = opts.paths || defaultPaths();
-      var absoluteStart = maybeRealpathSync(realpathSync, path6.resolve(basedir), opts);
+      var absoluteStart = maybeRealpathSync(realpathSync, path7.resolve(basedir), opts);
       if (relativePathRegex.test(x)) {
-        var res = path6.resolve(absoluteStart, x);
+        var res = path7.resolve(absoluteStart, x);
         if (x === "." || x === ".." || x.slice(-1) === "/") res += "/";
         var m = loadAsFileSync(res) || loadAsDirectorySync(res);
         if (m) return maybeRealpathSync(realpathSync, m, opts);
@@ -9861,12 +9861,12 @@ var require_sync = __commonJS({
       err.code = "MODULE_NOT_FOUND";
       throw err;
       function loadAsFileSync(x2) {
-        var pkg = loadpkg(path6.dirname(x2));
+        var pkg = loadpkg(path7.dirname(x2));
         if (pkg && pkg.dir && pkg.pkg && opts.pathFilter) {
-          var rfile = path6.relative(pkg.dir, x2);
+          var rfile = path7.relative(pkg.dir, x2);
           var r = opts.pathFilter(pkg.pkg, x2, rfile);
           if (r) {
-            x2 = path6.resolve(pkg.dir, r);
+            x2 = path7.resolve(pkg.dir, r);
           }
         }
         if (isFile(x2)) {
@@ -9885,11 +9885,11 @@ var require_sync = __commonJS({
           return;
         }
         if (nodeModulesRegex.test(dir)) return;
-        var pkgfile = path6.join(maybeRealpathSync(realpathSync, dir, opts), "package.json");
+        var pkgfile = path7.join(maybeRealpathSync(realpathSync, dir, opts), "package.json");
         if (!isFile(pkgfile)) {
-          return loadpkg(path6.dirname(dir));
+          return loadpkg(path7.dirname(dir));
         }
-        var pkg = readPackageSync(readFileSync23, pkgfile);
+        var pkg = readPackageSync(readFileSync24, pkgfile);
         if (pkg && opts.packageFilter) {
           pkg = opts.packageFilter(
             pkg,
@@ -9900,10 +9900,10 @@ var require_sync = __commonJS({
         return { pkg, dir };
       }
       function loadAsDirectorySync(x2) {
-        var pkgfile = path6.join(maybeRealpathSync(realpathSync, x2, opts), "/package.json");
+        var pkgfile = path7.join(maybeRealpathSync(realpathSync, x2, opts), "/package.json");
         if (isFile(pkgfile)) {
           try {
-            var pkg = readPackageSync(readFileSync23, pkgfile);
+            var pkg = readPackageSync(readFileSync24, pkgfile);
           } catch (e) {
           }
           if (pkg && opts.packageFilter) {
@@ -9923,15 +9923,15 @@ var require_sync = __commonJS({
               pkg.main = "index";
             }
             try {
-              var m2 = loadAsFileSync(path6.resolve(x2, pkg.main));
+              var m2 = loadAsFileSync(path7.resolve(x2, pkg.main));
               if (m2) return m2;
-              var n2 = loadAsDirectorySync(path6.resolve(x2, pkg.main));
+              var n2 = loadAsDirectorySync(path7.resolve(x2, pkg.main));
               if (n2) return n2;
             } catch (e) {
             }
           }
         }
-        return loadAsFileSync(path6.join(x2, "/index"));
+        return loadAsFileSync(path7.join(x2, "/index"));
       }
       function loadNodeModulesSync(x2, start) {
         var thunk = function() {
@@ -9940,7 +9940,7 @@ var require_sync = __commonJS({
         var dirs = packageIterator ? packageIterator(x2, start, thunk, opts) : thunk();
         for (var i = 0; i < dirs.length; i++) {
           var dir = dirs[i];
-          if (isDirectory(path6.dirname(dir))) {
+          if (isDirectory(path7.dirname(dir))) {
             var m2 = loadAsFileSync(dir);
             if (m2) return m2;
             var n2 = loadAsDirectorySync(dir);
@@ -10031,7 +10031,7 @@ var require_package = __commonJS({
 var require_require_in_the_middle = __commonJS({
   "../../node_modules/.pnpm/require-in-the-middle@7.5.2/node_modules/require-in-the-middle/index.js"(exports2, module2) {
     "use strict";
-    var path6 = require("path");
+    var path7 = require("path");
     var Module = require("module");
     var debug = require_src3()("require-in-the-middle");
     var moduleDetailsFromPath = require_module_details_from_path();
@@ -10083,7 +10083,7 @@ var require_require_in_the_middle = __commonJS({
       }
       return _resolve(moduleName, basedir);
     }
-    var normalize = /([/\\]index)?(\.js)?$/;
+    var normalize2 = /([/\\]index)?(\.js)?$/;
     var ExportsCache = class {
       constructor() {
         this._localCache = /* @__PURE__ */ new Map();
@@ -10205,7 +10205,7 @@ var require_require_in_the_middle = __commonJS({
           }
           moduleName = filename;
         } else if (hasWhitelist === true && modules.includes(filename)) {
-          const parsedPath = path6.parse(filename);
+          const parsedPath = path7.parse(filename);
           moduleName = parsedPath.name;
           basedir = parsedPath.dir;
         } else {
@@ -10243,7 +10243,7 @@ var require_require_in_the_middle = __commonJS({
             }
             if (res !== filename) {
               if (internals === true) {
-                moduleName = moduleName + path6.sep + path6.relative(basedir, filename);
+                moduleName = moduleName + path7.sep + path7.relative(basedir, filename);
                 debug("preparing to process require of internal file: %s", moduleName);
               } else {
                 debug("ignoring require of non-main module file: %s", res);
@@ -10279,8 +10279,8 @@ var require_require_in_the_middle = __commonJS({
       }
     };
     function resolveModuleName(stat) {
-      const normalizedPath = path6.sep !== "/" ? stat.path.split(path6.sep).join("/") : stat.path;
-      return path6.posix.join(stat.name, normalizedPath).replace(normalize, "");
+      const normalizedPath = path7.sep !== "/" ? stat.path.split(path7.sep).join("/") : stat.path;
+      return path7.posix.join(stat.name, normalizedPath).replace(normalize2, "");
     }
   }
 });
@@ -10369,7 +10369,7 @@ var require_RequireInTheMiddleSingleton = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.RequireInTheMiddleSingleton = void 0;
     var require_in_the_middle_1 = require_require_in_the_middle();
-    var path6 = require("path");
+    var path7 = require("path");
     var ModuleNameTrie_1 = require_ModuleNameTrie();
     var isMocha = [
       "afterEach",
@@ -10433,7 +10433,7 @@ var require_RequireInTheMiddleSingleton = __commonJS({
     };
     exports2.RequireInTheMiddleSingleton = RequireInTheMiddleSingleton;
     function normalizePathSeparators(moduleNameOrPath) {
-      return path6.sep !== ModuleNameTrie_1.ModuleNameSeparator ? moduleNameOrPath.split(path6.sep).join(ModuleNameTrie_1.ModuleNameSeparator) : moduleNameOrPath;
+      return path7.sep !== ModuleNameTrie_1.ModuleNameSeparator ? moduleNameOrPath.split(path7.sep).join(ModuleNameTrie_1.ModuleNameSeparator) : moduleNameOrPath;
     }
   }
 });
@@ -10493,7 +10493,7 @@ var require_register = __commonJS({
 // ../../node_modules/.pnpm/import-in-the-middle@1.15.0/node_modules/import-in-the-middle/index.js
 var require_import_in_the_middle = __commonJS({
   "../../node_modules/.pnpm/import-in-the-middle@1.15.0/node_modules/import-in-the-middle/index.js"(exports2, module2) {
-    var path6 = require("path");
+    var path7 = require("path");
     var parse3 = require_module_details_from_path();
     var { fileURLToPath } = require("url");
     var { MessageChannel } = require("worker_threads");
@@ -10589,7 +10589,7 @@ var require_import_in_the_middle = __commonJS({
             if (moduleName === name) {
               if (baseDir) {
                 if (internals) {
-                  name = name + path6.sep + path6.relative(baseDir, fileURLToPath(filename));
+                  name = name + path7.sep + path7.relative(baseDir, fileURLToPath(filename));
                 } else {
                   if (!getExperimentalPatchInternals() && !baseDir.endsWith(specifiers.get(filename))) continue;
                 }
@@ -10665,7 +10665,7 @@ var require_instrumentation2 = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.InstrumentationBase = void 0;
-    var path6 = require("path");
+    var path7 = require("path");
     var util_1 = require("util");
     var semver_1 = require_semver2();
     var shimmer_1 = require_shimmer();
@@ -10762,7 +10762,7 @@ var require_instrumentation2 = __commonJS({
       }
       _extractPackageVersion(baseDir) {
         try {
-          const json = (0, fs_1.readFileSync)(path6.join(baseDir, "package.json"), {
+          const json = (0, fs_1.readFileSync)(path7.join(baseDir, "package.json"), {
             encoding: "utf8"
           });
           const version2 = JSON.parse(json).version;
@@ -10805,7 +10805,7 @@ var require_instrumentation2 = __commonJS({
           return exports3;
         }
         const files = (_a = module3.files) !== null && _a !== void 0 ? _a : [];
-        const normalizedName = path6.normalize(name);
+        const normalizedName = path7.normalize(name);
         const supportedFileInstrumentations = files.filter((f) => f.name === normalizedName).filter((f) => isSupported(f.supportedVersions, version2, module3.includePrerelease));
         return supportedFileInstrumentations.reduce((patchedExports, file) => {
           file.moduleExports = patchedExports;
@@ -10851,8 +10851,8 @@ var require_instrumentation2 = __commonJS({
         this._warnOnPreloadedModules();
         for (const module3 of this._modules) {
           const hookFn = (exports3, name, baseDir) => {
-            if (!baseDir && path6.isAbsolute(name)) {
-              const parsedPath = path6.parse(name);
+            if (!baseDir && path7.isAbsolute(name)) {
+              const parsedPath = path7.parse(name);
               name = parsedPath.name;
               baseDir = parsedPath.dir;
             }
@@ -10861,7 +10861,7 @@ var require_instrumentation2 = __commonJS({
           const onRequire = (exports3, name, baseDir) => {
             return this._onRequire(module3, exports3, name, baseDir);
           };
-          const hook = path6.isAbsolute(module3.name) ? new require_in_the_middle_1.Hook([module3.name], { internals: true }, onRequire) : this._requireInTheMiddleSingleton.register(module3.name, onRequire);
+          const hook = path7.isAbsolute(module3.name) ? new require_in_the_middle_1.Hook([module3.name], { internals: true }, onRequire) : this._requireInTheMiddleSingleton.register(module3.name, onRequire);
           this._hooks.push(hook);
           const esmHook = new import_in_the_middle_1.Hook([module3.name], { internals: false }, hookFn);
           this._hooks.push(esmHook);
@@ -18108,7 +18108,7 @@ var require_instrumentation3 = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.AwsLambdaInstrumentation = exports2.lambdaMaxInitInMilliseconds = void 0;
-    var path6 = require("path");
+    var path7 = require("path");
     var fs5 = require("fs");
     var instrumentation_1 = require_src4();
     var api_1 = (init_esm(), __toCommonJS(esm_exports));
@@ -18136,10 +18136,10 @@ var require_instrumentation3 = __commonJS({
           this._diag.debug("Skipping lambda instrumentation: no _HANDLER/lambdaHandler or LAMBDA_TASK_ROOT.", { taskRoot, handlerDef });
           return [];
         }
-        const handler = path6.basename(handlerDef);
+        const handler = path7.basename(handlerDef);
         const moduleRoot = handlerDef.substr(0, handlerDef.length - handler.length);
         const [module3, functionName] = handler.split(".", 2);
-        let filename = path6.resolve(taskRoot, moduleRoot, module3);
+        let filename = path7.resolve(taskRoot, moduleRoot, module3);
         if (!filename.endsWith(".js")) {
           try {
             fs5.statSync(`${filename}.js`);
@@ -21306,16 +21306,16 @@ var require_utils7 = __commonJS({
       request[internal_types_1._LAYERS_STORE_PROPERTY].push(value);
     };
     exports2.storeLayerPath = storeLayerPath;
-    var getRouterPath = (path6, layer) => {
+    var getRouterPath = (path7, layer) => {
       var _a, _b, _c, _d;
       const stackLayer = (_b = (_a = layer.handle) === null || _a === void 0 ? void 0 : _a.stack) === null || _b === void 0 ? void 0 : _b[0];
       if ((_c = stackLayer === null || stackLayer === void 0 ? void 0 : stackLayer.route) === null || _c === void 0 ? void 0 : _c.path) {
-        return `${path6}${stackLayer.route.path}`;
+        return `${path7}${stackLayer.route.path}`;
       }
       if ((_d = stackLayer === null || stackLayer === void 0 ? void 0 : stackLayer.handle) === null || _d === void 0 ? void 0 : _d.stack) {
-        return (0, exports2.getRouterPath)(path6, stackLayer);
+        return (0, exports2.getRouterPath)(path7, stackLayer);
       }
-      return path6;
+      return path7;
     };
     exports2.getRouterPath = getRouterPath;
     var getLayerMetadata = (route, layer, layerPath) => {
@@ -21515,7 +21515,7 @@ var require_instrumentation10 = __commonJS({
             return original;
           const patched = function(req, res) {
             (0, utils_1.storeLayerPath)(req, layerPath);
-            const route = req[internal_types_1._LAYERS_STORE_PROPERTY].filter((path6) => path6 !== "/" && path6 !== "/*").join("").replace(/\/{2,}/g, "/");
+            const route = req[internal_types_1._LAYERS_STORE_PROPERTY].filter((path7) => path7 !== "/" && path7 !== "/*").join("").replace(/\/{2,}/g, "/");
             const attributes = {
               [semantic_conventions_1.SEMATTRS_HTTP_ROUTE]: route.length > 0 ? route : "/"
             };
@@ -22393,8 +22393,8 @@ var require_instrumentation12 = __commonJS({
           }
         };
         const functionWithOriginalProperties = patchedFunctionWithOriginalProperties(patchedFunction, original);
-        const promisified = function(path6) {
-          return new Promise((resolve8) => functionWithOriginalProperties(path6, resolve8));
+        const promisified = function(path7) {
+          return new Promise((resolve8) => functionWithOriginalProperties(path7, resolve8));
         };
         Object.defineProperty(promisified, "name", { value: functionName });
         Object.defineProperty(functionWithOriginalProperties, util_1.promisify.custom, {
@@ -22769,26 +22769,26 @@ var require_utils10 = __commonJS({
       span.setAttribute(AttributeNames_1.AttributeNames.SOURCE, source);
     }
     exports2.addSpanSource = addSpanSource;
-    function createFieldIfNotExists(tracer, getConfig, contextValue, info, path6) {
-      let field = getField(contextValue, path6);
+    function createFieldIfNotExists(tracer, getConfig, contextValue, info, path7) {
+      let field = getField(contextValue, path7);
       let spanAdded = false;
       if (!field) {
         spanAdded = true;
-        const parent = getParentField(contextValue, path6);
+        const parent = getParentField(contextValue, path7);
         field = {
           parent,
-          span: createResolverSpan(tracer, getConfig, contextValue, info, path6, parent.span),
+          span: createResolverSpan(tracer, getConfig, contextValue, info, path7, parent.span),
           error: null
         };
-        addField(contextValue, path6, field);
+        addField(contextValue, path7, field);
       }
       return { spanAdded, field };
     }
-    function createResolverSpan(tracer, getConfig, contextValue, info, path6, parentSpan) {
+    function createResolverSpan(tracer, getConfig, contextValue, info, path7, parentSpan) {
       var _a, _b;
       const attributes = {
         [AttributeNames_1.AttributeNames.FIELD_NAME]: info.fieldName,
-        [AttributeNames_1.AttributeNames.FIELD_PATH]: path6.join("."),
+        [AttributeNames_1.AttributeNames.FIELD_PATH]: path7.join("."),
         [AttributeNames_1.AttributeNames.FIELD_TYPE]: info.returnType.toString()
       };
       const span = tracer.startSpan(`${enum_1.SpanNames.RESOLVE} ${attributes[AttributeNames_1.AttributeNames.FIELD_PATH]}`, {
@@ -22828,15 +22828,15 @@ var require_utils10 = __commonJS({
       }
     }
     exports2.getOperation = getOperation;
-    function addField(contextValue, path6, field) {
-      return contextValue[symbols_1.OTEL_GRAPHQL_DATA_SYMBOL].fields[path6.join(".")] = field;
+    function addField(contextValue, path7, field) {
+      return contextValue[symbols_1.OTEL_GRAPHQL_DATA_SYMBOL].fields[path7.join(".")] = field;
     }
-    function getField(contextValue, path6) {
-      return contextValue[symbols_1.OTEL_GRAPHQL_DATA_SYMBOL].fields[path6.join(".")];
+    function getField(contextValue, path7) {
+      return contextValue[symbols_1.OTEL_GRAPHQL_DATA_SYMBOL].fields[path7.join(".")];
     }
-    function getParentField(contextValue, path6) {
-      for (let i = path6.length - 1; i > 0; i--) {
-        const field = getField(contextValue, path6.slice(0, i));
+    function getParentField(contextValue, path7) {
+      for (let i = path7.length - 1; i > 0; i--) {
+        const field = getField(contextValue, path7.slice(0, i));
         if (field) {
           return field;
         }
@@ -22845,9 +22845,9 @@ var require_utils10 = __commonJS({
         span: contextValue[symbols_1.OTEL_GRAPHQL_DATA_SYMBOL].span
       };
     }
-    function pathToArray(mergeItems, path6) {
+    function pathToArray(mergeItems, path7) {
       const flattened = [];
-      let curr = path6;
+      let curr = path7;
       while (curr) {
         let key = curr.key;
         if (mergeItems && typeof key === "number") {
@@ -22984,14 +22984,14 @@ var require_utils10 = __commonJS({
         if (!contextValue[symbols_1.OTEL_GRAPHQL_DATA_SYMBOL]) {
           return fieldResolver.call(this, source, args, contextValue, info);
         }
-        const path6 = pathToArray(config.mergeItems, info && info.path);
-        const depth = path6.filter((item) => typeof item === "string").length;
+        const path7 = pathToArray(config.mergeItems, info && info.path);
+        const depth = path7.filter((item) => typeof item === "string").length;
         let field;
         let shouldEndSpan = false;
         if (config.depth >= 0 && config.depth < depth) {
-          field = getParentField(contextValue, path6);
+          field = getParentField(contextValue, path7);
         } else {
-          const newField = createFieldIfNotExists(tracer, getConfig, contextValue, info, path6);
+          const newField = createFieldIfNotExists(tracer, getConfig, contextValue, info, path7);
           field = newField.field;
           shouldEndSpan = newField.spanAdded;
         }
@@ -28447,12 +28447,12 @@ var require_utils14 = __commonJS({
       const reqUrlObject = requestUrl || {};
       const protocol = reqUrlObject.protocol || fallbackProtocol;
       const port = (reqUrlObject.port || "").toString();
-      const path6 = reqUrlObject.path || "/";
+      const path7 = reqUrlObject.path || "/";
       let host = reqUrlObject.host || reqUrlObject.hostname || headers.host || "localhost";
       if (host.indexOf(":") === -1 && port && port !== "80" && port !== "443") {
         host += `:${port}`;
       }
-      return `${protocol}//${host}${path6}`;
+      return `${protocol}//${host}${path7}`;
     };
     exports2.getAbsoluteUrl = getAbsoluteUrl;
     var parseResponseStatus = (kind, statusCode) => {
@@ -30520,11 +30520,11 @@ var require_instrumentation20 = __commonJS({
         const router = dispatchLayer.router;
         const routesStack = (_a = router === null || router === void 0 ? void 0 : router.stack) !== null && _a !== void 0 ? _a : [];
         for (const pathLayer of routesStack) {
-          const path6 = pathLayer.path;
+          const path7 = pathLayer.path;
           const pathStack = pathLayer.stack;
           for (let j = 0; j < pathStack.length; j++) {
             const routedMiddleware = pathStack[j];
-            pathStack[j] = this._patchLayer(routedMiddleware, true, path6);
+            pathStack[j] = this._patchLayer(routedMiddleware, true, path7);
           }
         }
         return dispatchLayer;
@@ -36914,8 +36914,8 @@ var require_instrumentation32 = __commonJS({
       }
       _methodPatcher(original, methodName) {
         const instrumentation = this;
-        return function(path6, ...handler) {
-          return original.call(this, path6, ...instrumentation._handlerPatcher({ type: types_1.LayerType.REQUEST_HANDLER, path: path6, methodName }, handler));
+        return function(path7, ...handler) {
+          return original.call(this, path7, ...instrumentation._handlerPatcher({ type: types_1.LayerType.REQUEST_HANDLER, path: path7, methodName }, handler));
         };
       }
       // will return the same type as `handler`, but all functions recursively patched
@@ -38863,9 +38863,9 @@ var require_getMachineId_linux = __commonJS({
     var api_1 = (init_esm(), __toCommonJS(esm_exports));
     async function getMachineId() {
       const paths = ["/etc/machine-id", "/var/lib/dbus/machine-id"];
-      for (const path6 of paths) {
+      for (const path7 of paths) {
         try {
-          const result = await fs_1.promises.readFile(path6, { encoding: "utf8" });
+          const result = await fs_1.promises.readFile(path7, { encoding: "utf8" });
           return result.trim();
         } catch (e) {
           api_1.diag.debug(`error reading machine id: ${e}`);
@@ -41012,7 +41012,7 @@ var require_tr46 = __commonJS({
       TRANSITIONAL: 0,
       NONTRANSITIONAL: 1
     };
-    function normalize(str) {
+    function normalize2(str) {
       return str.split("\0").map(function(s) {
         return s.normalize("NFC");
       }).join("\0");
@@ -41092,7 +41092,7 @@ var require_tr46 = __commonJS({
         processing_option = PROCESSING_OPTIONS.NONTRANSITIONAL;
       }
       var error = false;
-      if (normalize(label) !== label || label[3] === "-" && label[4] === "-" || label[0] === "-" || label[label.length - 1] === "-" || label.indexOf(".") !== -1 || label.search(combiningMarksRegex) === 0) {
+      if (normalize2(label) !== label || label[3] === "-" && label[4] === "-" || label[0] === "-" || label[label.length - 1] === "-" || label.indexOf(".") !== -1 || label.search(combiningMarksRegex) === 0) {
         error = true;
       }
       var len = countSymbols(label);
@@ -41110,7 +41110,7 @@ var require_tr46 = __commonJS({
     }
     function processing(domain_name, useSTD3, processing_option) {
       var result = mapChars(domain_name, useSTD3, processing_option);
-      result.string = normalize(result.string);
+      result.string = normalize2(result.string);
       var labels = result.string.split(".");
       for (var i = 0; i < labels.length; ++i) {
         try {
@@ -41553,14 +41553,14 @@ var require_url_state_machine = __commonJS({
       return url.replace(/\u0009|\u000A|\u000D/g, "");
     }
     function shortenPath(url) {
-      const path6 = url.path;
-      if (path6.length === 0) {
+      const path7 = url.path;
+      if (path7.length === 0) {
         return;
       }
-      if (url.scheme === "file" && path6.length === 1 && isNormalizedWindowsDriveLetter(path6[0])) {
+      if (url.scheme === "file" && path7.length === 1 && isNormalizedWindowsDriveLetter(path7[0])) {
         return;
       }
-      path6.pop();
+      path7.pop();
     }
     function includesCredentials(url) {
       return url.username !== "" || url.password !== "";
@@ -48612,21 +48612,21 @@ function ensureConfigDir() {
     (0, import_node_fs.mkdirSync)(CONFIG_DIR, { recursive: true });
   }
 }
-function readJsonFile(path6, fallback) {
-  if (!(0, import_node_fs.existsSync)(path6)) return fallback;
-  const raw = (0, import_node_fs.readFileSync)(path6, "utf8");
+function readJsonFile(path7, fallback) {
+  if (!(0, import_node_fs.existsSync)(path7)) return fallback;
+  const raw = (0, import_node_fs.readFileSync)(path7, "utf8");
   if (!raw.trim()) return fallback;
   try {
     return JSON.parse(raw);
   } catch (error) {
-    throw new Error(`Failed to parse ${path6}: ${error.message}`);
+    throw new Error(`Failed to parse ${path7}: ${error.message}`);
   }
 }
-function writeJsonFile(path6, value) {
+function writeJsonFile(path7, value) {
   ensureConfigDir();
-  (0, import_node_fs.writeFileSync)(path6, JSON.stringify(value, null, 2));
+  (0, import_node_fs.writeFileSync)(path7, JSON.stringify(value, null, 2));
   try {
-    (0, import_node_fs.chmodSync)(path6, 384);
+    (0, import_node_fs.chmodSync)(path7, 384);
   } catch {
   }
 }
@@ -49514,7 +49514,7 @@ and switching profiles won't affect other checkouts.`,
   auth: {
     description: `Authenticate with Eve Horizon. Auth is optional for local development but required
 for cloud deployments. Credentials are stored globally per API URL.`,
-    usage: "eve auth <login|logout|status|whoami|bootstrap|sync|creds|token|mint|permissions>",
+    usage: "eve auth <login|logout|status|whoami|bootstrap|sync|creds|token|mint|permissions|request-access>",
     subcommands: {
       login: {
         description: "Login via GitHub SSH challenge (default) or Supabase (legacy)",
@@ -49642,6 +49642,24 @@ for cloud deployments. Credentials are stored globally per API URL.`,
           "eve auth permissions",
           "eve auth permissions --json"
         ]
+      },
+      "request-access": {
+        description: "Self-service access request \u2014 submit your SSH key and wait for admin approval",
+        usage: 'eve auth request-access --org "<org name>" [--ssh-key <path>] [--email <email>] [--wait]',
+        options: [
+          "--org <name>          Organization to request access to (required)",
+          "--org-slug <slug>     Preferred org slug",
+          "--ssh-key <path>      Path to SSH public key (default: ~/.ssh/id_ed25519.pub)",
+          "--email <email>       Contact email",
+          "--nostr-pubkey <hex>  Nostr public key (alternative to SSH)",
+          "--wait                Poll until approved, then auto-login",
+          "--status <id>         Check status of an existing request"
+        ],
+        examples: [
+          'eve auth request-access --org "Acme Corp" --ssh-key ~/.ssh/id_ed25519.pub --wait',
+          'eve auth request-access --org "Acme Corp" --email user@example.com --wait',
+          "eve auth request-access --status <request_id>"
+        ]
       }
     }
   },
@@ -50293,17 +50311,40 @@ for cloud deployments. Credentials are stored globally per API URL.`,
     usage: "eve admin <subcommand> [options]",
     subcommands: {
       invite: {
-        description: "Invite a user by registering their GitHub SSH keys and adding them to an org",
-        usage: "eve admin invite --email <email> [--github <username>] [--role <role>] [--org <org_id>]",
+        description: "Invite a user by registering their SSH keys (from GitHub or a local file) and adding them to an org",
+        usage: "eve admin invite --email <email> [--github <username>] [--ssh-key <path>] [--role <role>] [--org <org_id>] [--web] [--redirect-to <url>]",
         options: [
           "--email <email>       User email address (required)",
           "--github <username>   GitHub username to fetch SSH keys from",
+          "--ssh-key <path>      Path to an SSH public key file to register",
           "--role <role>         Org role: owner, admin, member (default: member)",
-          "--org <org_id>        Organization to add user to"
+          "--org <org_id>        Organization to add user to",
+          "--web                 Send a Supabase Auth invite email",
+          "--redirect-to <url>   Redirect URL after web login",
+          "",
+          "At least one auth method (--github, --ssh-key, or --web) is recommended.",
+          'Users can also self-register: eve auth request-access --org "Org" --ssh-key ~/.ssh/id_ed25519.pub --wait'
         ],
         examples: [
           "eve admin invite --email user@example.com --github octocat",
-          "eve admin invite --email user@example.com --github octocat --role admin --org org_xxx"
+          "eve admin invite --email user@example.com --ssh-key ~/.ssh/id_ed25519.pub --org org_xxx",
+          "eve admin invite --email user@example.com --github octocat --role admin --org org_xxx",
+          "eve admin invite --email user@example.com --web --redirect-to https://app.example.com"
+        ]
+      },
+      "access-requests": {
+        description: "Review, approve, or reject self-service access requests",
+        usage: 'eve admin access-requests [approve|reject <id>] [--reason "..."]',
+        options: [
+          "(no action)          List pending access requests",
+          "approve <id>         Approve a request (creates user, org membership, and identity)",
+          "reject <id>          Reject a request",
+          '--reason "<text>"    Note to attach to approval/rejection'
+        ],
+        examples: [
+          "eve admin access-requests",
+          "eve admin access-requests approve ar_xxx",
+          'eve admin access-requests reject ar_xxx --reason "Unknown user"'
         ]
       },
       "ingress-aliases": {
@@ -50321,7 +50362,9 @@ for cloud deployments. Credentials are stored globally per API URL.`,
     },
     examples: [
       "eve admin invite --email user@example.com --github octocat",
-      "eve admin invite --email user@example.com --github octocat --org org_xxx",
+      "eve admin invite --email user@example.com --ssh-key ~/.ssh/id_ed25519.pub --org org_xxx",
+      "eve admin access-requests",
+      "eve admin access-requests approve ar_xxx",
       "eve admin ingress-aliases list"
     ]
   },
@@ -51425,8 +51468,8 @@ function showSubcommandHelp(command, subcommand) {
 }
 
 // src/lib/client.ts
-async function requestJson(context2, path6, options = {}) {
-  const response = await requestRaw(context2, path6, options);
+async function requestJson(context2, path7, options = {}) {
+  const response = await requestRaw(context2, path7, options);
   const method = options.method ?? "GET";
   if (response.status === 401 && options.tokenOverride === void 0) {
     const refreshed = await attemptRefresh(context2);
@@ -51434,20 +51477,20 @@ async function requestJson(context2, path6, options = {}) {
       context2.token = refreshed.access_token;
       context2.refreshToken = refreshed.refresh_token;
       context2.expiresAt = refreshed.expires_at;
-      const retry = await requestRaw(context2, path6, {
+      const retry = await requestRaw(context2, path7, {
         ...options,
         tokenOverride: refreshed.access_token
       });
       if (!retry.ok && !options.allowError) {
         const message = formatErrorMessage(retry);
-        throw new Error(`HTTP ${retry.status}: ${method} ${path6}: ${message}`);
+        throw new Error(`HTTP ${retry.status}: ${method} ${path7}: ${message}`);
       }
       return retry.data;
     }
   }
   if (!response.ok && !options.allowError) {
     const message = formatErrorMessage(response);
-    const requestTarget = `${method} ${path6}`;
+    const requestTarget = `${method} ${path7}`;
     const requestFailedContext = `while calling ${requestTarget}: ${message}`;
     if ((response.status === 404 || response.status === 500) && message.includes("Project not found")) {
       const projectIdMatch = message.match(/Project not found: (proj_[a-z0-9]+)/);
@@ -51479,7 +51522,7 @@ function unwrapListResponse(value) {
   }
   throw new Error("Expected list response envelope with data[]");
 }
-async function requestRaw(context2, path6, options = {}) {
+async function requestRaw(context2, path7, options = {}) {
   const headers = {
     ...options.headers
   };
@@ -51490,7 +51533,7 @@ async function requestRaw(context2, path6, options = {}) {
   if (token) {
     headers.Authorization = `Bearer ${token}`;
   }
-  const url = `${context2.apiUrl}${path6}`;
+  const url = `${context2.apiUrl}${path7}`;
   const method = options.method ?? "GET";
   let response;
   try {
@@ -52828,8 +52871,8 @@ function getErrorMap() {
 
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path: path6, errorMaps, issueData } = params;
-  const fullPath = [...path6, ...issueData.path || []];
+  const { data, path: path7, errorMaps, issueData } = params;
+  const fullPath = [...path7, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -52945,11 +52988,11 @@ var errorUtil;
 
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value, path6, key) {
+  constructor(parent, value, path7, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path6;
+    this._path = path7;
     this._key = key;
   }
   get path() {
@@ -60038,10 +60081,10 @@ function mergeXEve(packFragments, projectXEve) {
 // ../shared/dist/lib/resource-uris.js
 var ORG_DOCS_PREFIX = "org_docs:/";
 var JOB_ATTACHMENTS_PREFIX = "job_attachments:/";
-function normalizeOrgDocPath(path6) {
-  if (!path6)
+function normalizeOrgDocPath(path7) {
+  if (!path7)
     return "/";
-  return path6.startsWith("/") ? path6 : `/${path6}`;
+  return path7.startsWith("/") ? path7 : `/${path7}`;
 }
 function parseResourceUri(uri) {
   if (!uri || typeof uri !== "string")
@@ -60052,11 +60095,11 @@ function parseResourceUri(uri) {
       return null;
     const match = raw.match(/^(.*)@v(\d+)$/);
     if (match) {
-      const path6 = normalizeOrgDocPath(match[1]);
+      const path7 = normalizeOrgDocPath(match[1]);
       const version2 = Number(match[2]);
       if (!Number.isFinite(version2) || version2 <= 0)
         return null;
-      return { scheme: "org_docs", path: path6, version: version2 };
+      return { scheme: "org_docs", path: path7, version: version2 };
     }
     return { scheme: "org_docs", path: normalizeOrgDocPath(raw) };
   }
@@ -65513,7 +65556,10 @@ ${tokenList.map((t) => `  - ${t.name}`).join("\n")}`
       const requestData = submitResponse.data;
       if (!wait) {
         outputJson(requestData, json, `Access request submitted: ${requestData.id} (status: ${requestData.status})
-Poll with: eve auth request-access --status ${requestData.id}`);
+Poll with: eve auth request-access --status ${requestData.id}
+
+Tip: Use --wait to auto-poll and login on approval:
+  eve auth request-access --org "${orgName}" --wait`);
         return;
       }
       console.log(`Access request submitted: ${requestData.id}`);
@@ -66758,9 +66804,9 @@ function getOrchestratorUrl(context2) {
   apiUrl.port = orchPort;
   return apiUrl.toString().replace(/\/$/, "");
 }
-async function requestOrchestratorJson(context2, path6, options) {
+async function requestOrchestratorJson(context2, path7, options) {
   const orchUrl = getOrchestratorUrl(context2);
-  const url = `${orchUrl}${path6}`;
+  const url = `${orchUrl}${path7}`;
   const headers = {};
   if (options?.body) {
     headers["Content-Type"] = "application/json";
@@ -68966,13 +69012,13 @@ async function handleCall(positionals, flags, context2) {
   const body = graphqlBody ?? jsonBody;
   const method = methodInput.toUpperCase();
   const resolvedBaseUrl = resolveApiBaseUrlForRuntime(api.base_url, context2.apiUrl);
-  const path6 = resolveApiPath(resolvedBaseUrl, pathInput);
+  const path7 = resolveApiPath(resolvedBaseUrl, pathInput);
   const tokenOverride = getStringFlag(flags, ["token"]);
   const authToken = tokenOverride ?? process.env.EVE_JOB_TOKEN ?? context2.token;
   if (printCurl) {
     const curl = buildCurlCommand({
       method,
-      url: path6,
+      url: path7,
       authToken,
       jsonBody: body,
       authHint: tokenOverride ? "override" : process.env.EVE_JOB_TOKEN ? "job" : "user"
@@ -68980,7 +69026,7 @@ async function handleCall(positionals, flags, context2) {
     console.log(curl);
     return;
   }
-  const response = await fetch(path6, {
+  const response = await fetch(path7, {
     method,
     headers: buildApiHeaders(authToken, body),
     body: body ? JSON.stringify(body) : void 0
@@ -69076,7 +69122,7 @@ async function fetchApiSpec(context2, projectId, name, env) {
 function buildCurlExamples(api, spec) {
   const paths = spec.paths ?? {};
   const examples = [];
-  Object.entries(paths).forEach(([path6, methods]) => {
+  Object.entries(paths).forEach(([path7, methods]) => {
     Object.entries(methods).forEach(([method, operation]) => {
       const lower = method.toLowerCase();
       if (!["get", "post", "put", "patch", "delete"].includes(lower)) {
@@ -69087,7 +69133,7 @@ function buildCurlExamples(api, spec) {
       const needsBody = ["post", "put", "patch"].includes(lower);
       const curl = buildCurlCommand({
         method: lower.toUpperCase(),
-        url: resolveApiPath(api.base_url, path6),
+        url: resolveApiPath(api.base_url, path7),
         authToken: api.auth_mode === "eve" ? "$EVE_JOB_TOKEN" : void 0,
         jsonBody: needsBody ? examplePayload ?? {} : void 0,
         authHint: "job"
@@ -69109,15 +69155,15 @@ function extractExamplePayload(requestBody) {
   if (examples.length === 0) return void 0;
   return examples[0]?.value;
 }
-function resolveApiPath(baseUrl, path6) {
-  if (path6.startsWith("http://") || path6.startsWith("https://")) {
-    return path6;
+function resolveApiPath(baseUrl, path7) {
+  if (path7.startsWith("http://") || path7.startsWith("https://")) {
+    return path7;
   }
   if (!baseUrl) {
-    return path6;
+    return path7;
   }
   const trimmedBase = baseUrl.endsWith("/") ? baseUrl.slice(0, -1) : baseUrl;
-  const trimmedPath = path6.startsWith("/") ? path6 : `/${path6}`;
+  const trimmedPath = path7.startsWith("/") ? path7 : `/${path7}`;
   return `${trimmedBase}${trimmedPath}`;
 }
 function resolveApiBaseUrlForRuntime(baseUrl, eveApiUrl) {
@@ -69314,7 +69360,7 @@ function buildCurlCommand(options) {
 
 // src/commands/db.ts
 var import_node_fs9 = require("node:fs");
-var import_node_path9 = require("node:path");
+var import_node_path10 = require("node:path");
 
 // ../../node_modules/.pnpm/postgres@3.4.8/node_modules/postgres/src/index.js
 var import_os = __toESM(require("os"), 1);
@@ -70846,13 +70892,13 @@ function Subscribe(postgres2, options) {
       }
     }
     function handle(a, b2) {
-      const path6 = b2.relation.schema + "." + b2.relation.table;
+      const path7 = b2.relation.schema + "." + b2.relation.table;
       call("*", a, b2);
-      call("*:" + path6, a, b2);
-      b2.relation.keys.length && call("*:" + path6 + "=" + b2.relation.keys.map((x2) => a[x2.name]), a, b2);
+      call("*:" + path7, a, b2);
+      b2.relation.keys.length && call("*:" + path7 + "=" + b2.relation.keys.map((x2) => a[x2.name]), a, b2);
       call(b2.command, a, b2);
-      call(b2.command + ":" + path6, a, b2);
-      b2.relation.keys.length && call(b2.command + ":" + path6 + "=" + b2.relation.keys.map((x2) => a[x2.name]), a, b2);
+      call(b2.command + ":" + path7, a, b2);
+      b2.relation.keys.length && call(b2.command + ":" + path7 + "=" + b2.relation.keys.map((x2) => a[x2.name]), a, b2);
     }
     function pong() {
       const x2 = Buffer.alloc(34);
@@ -70965,8 +71011,8 @@ function parseEvent(x) {
   const xs = x.match(/^(\*|insert|update|delete)?:?([^.]+?\.?[^=]+)?=?(.+)?/i) || [];
   if (!xs)
     throw new Error("Malformed subscribe pattern: " + x);
-  const [, command, path6, key] = xs;
-  return (command || "*") + (path6 ? ":" + (path6.indexOf(".") === -1 ? "public." + path6 : path6) : "") + (key ? "=" + key : "");
+  const [, command, path7, key] = xs;
+  return (command || "*") + (path7 ? ":" + (path7.indexOf(".") === -1 ? "public." + path7 : path7) : "") + (key ? "=" + key : "");
 }
 
 // ../../node_modules/.pnpm/postgres@3.4.8/node_modules/postgres/src/large.js
@@ -71111,10 +71157,10 @@ function Postgres(a, b2) {
       });
       return query;
     }
-    function file(path6, args = [], options2 = {}) {
+    function file(path7, args = [], options2 = {}) {
       arguments.length === 2 && !Array.isArray(args) && (options2 = args, args = []);
       const query = new Query([], args, (query2) => {
-        import_fs2.default.readFile(path6, "utf8", (err, string) => {
+        import_fs2.default.readFile(path7, "utf8", (err, string) => {
           if (err)
             return query2.reject(err);
           query2.strings = [string];
@@ -71490,6 +71536,11 @@ async function ensureMigrationsTable(db) {
     )
   `;
 }
+async function ensureExtensions(db) {
+  console.log("Ensuring optional migration prerequisites...");
+  await db`CREATE EXTENSION IF NOT EXISTS pgcrypto`;
+  await db`CREATE EXTENSION IF NOT EXISTS "uuid-ossp"`;
+}
 async function listMigrations(options) {
   const db = src_default(options.connectionUrl, {
     max: 1,
@@ -71526,6 +71577,7 @@ async function applyMigrations(options) {
   });
   try {
     await ensureMigrationsTable(db);
+    await ensureExtensions(db);
     const appliedRows = await db`
       SELECT name, checksum
       FROM schema_migrations
@@ -71534,6 +71586,7 @@ async function applyMigrations(options) {
     const appliedMap = new Map(appliedRows.map((row) => [row.name, row.checksum]));
     const results = [];
     const isBaseline = appliedMap.size === 0;
+    console.log(`Running ${migrations.length} migration file(s) from directory: ${options.migrationsDir ?? "(inline)"}`);
     for (const migration of migrations) {
       const checksum = (0, import_crypto6.createHash)("sha256").update(migration.sql).digest("hex");
       const existingChecksum = appliedMap.get(migration.name);
@@ -71594,6 +71647,9 @@ async function resetSchema(connectionUrl) {
 }
 
 // ../migrate/dist/index.js
+var import_node_path9 = __toESM(require("node:path"), 1);
+var import_node_url = require("node:url");
+var import_meta = {};
 async function main() {
   const databaseUrl = process.env.DATABASE_URL;
   const migrationsDir = process.env.MIGRATIONS_DIR || "/migrations";
@@ -71625,7 +71681,8 @@ Migration failed: ${message}`);
   }
 }
 var scriptPath = (process.argv[1] ?? "").replace(/\\/g, "/");
-var invokedAsCli = scriptPath.endsWith("/eve-migrate") || scriptPath.endsWith("/migrate/dist/index.js") || scriptPath.endsWith("/@eve/migrate/dist/index.js");
+var scriptUrl = process.argv[1] ? (0, import_node_url.pathToFileURL)(import_node_path9.default.resolve(scriptPath)).href : "";
+var invokedAsCli = import_meta.url === scriptUrl;
 if (invokedAsCli) {
   void main();
 }
@@ -71697,12 +71754,12 @@ function handleRlsInit(flags, jsonOutput) {
     throw new Error("Usage: eve db rls init --with-groups [--out <path>] [--force]");
   }
   const outPath = getStringFlag(flags, ["out"]) ?? "db/rls/helpers.sql";
-  const fullPath = (0, import_node_path9.resolve)(outPath);
+  const fullPath = (0, import_node_path10.resolve)(outPath);
   if ((0, import_node_fs9.existsSync)(fullPath) && !force) {
     throw new Error(`RLS helper file already exists: ${fullPath}
 Use --force to overwrite.`);
   }
-  (0, import_node_fs9.mkdirSync)((0, import_node_path9.dirname)(fullPath), { recursive: true });
+  (0, import_node_fs9.mkdirSync)((0, import_node_path10.dirname)(fullPath), { recursive: true });
   (0, import_node_fs9.writeFileSync)(fullPath, renderRlsHelperTemplate());
   const payload = {
     path: fullPath,
@@ -71791,7 +71848,7 @@ async function handleSql(positionals, flags, context2, jsonOutput) {
   const sqlPositionals = target.mode === "env" ? target.remainingPositionals : positionals;
   const sqlInput = getStringFlag(flags, ["sql"]) ?? sqlPositionals.join(" ");
   const fileInput = getStringFlag(flags, ["file"]);
-  const sqlText = fileInput ? (0, import_node_fs9.readFileSync)((0, import_node_path9.resolve)(fileInput), "utf-8") : sqlInput;
+  const sqlText = fileInput ? (0, import_node_fs9.readFileSync)((0, import_node_path10.resolve)(fileInput), "utf-8") : sqlInput;
   if (!sqlText) {
     throw new Error("Usage: eve db sql --env <name>|--url <postgres-url> --sql <statement> [--params <json>] [--write]");
   }
@@ -71879,7 +71936,7 @@ function resolveDbUrlFromEnv() {
   return readEnvFileValue("EVE_DB_URL");
 }
 function readEnvFileValue(key) {
-  const envPath = (0, import_node_path9.resolve)(".env");
+  const envPath = (0, import_node_path10.resolve)(".env");
   if (!(0, import_node_fs9.existsSync)(envPath)) return void 0;
   const content = (0, import_node_fs9.readFileSync)(envPath, "utf-8");
   for (const rawLine of content.split(/\r?\n/)) {
@@ -71898,7 +71955,7 @@ function readEnvFileValue(key) {
   return void 0;
 }
 function loadMigrationsFromPath(migrationsPath) {
-  const fullPath = (0, import_node_path9.resolve)(migrationsPath);
+  const fullPath = (0, import_node_path10.resolve)(migrationsPath);
   if (!(0, import_node_fs9.existsSync)(fullPath)) {
     throw new Error(`Migrations directory not found: ${fullPath}`);
   }
@@ -71914,7 +71971,7 @@ Example: 20260128100000_create_users.sql`
   }
   return files.map((file) => ({
     name: file,
-    sql: (0, import_node_fs9.readFileSync)((0, import_node_path9.join)(fullPath, file), "utf-8")
+    sql: (0, import_node_fs9.readFileSync)((0, import_node_path10.join)(fullPath, file), "utf-8")
   }));
 }
 async function executeSqlDirect(connectionUrl, sql, params, allowWrite) {
@@ -72164,11 +72221,11 @@ function handleNew(positionals, flags) {
   ].join("");
   const filename = `${timestamp}_${normalizedDescription}.sql`;
   const migrationsPath = getStringFlag(flags, ["path"]) ?? "db/migrations";
-  const fullPath = (0, import_node_path9.resolve)(migrationsPath);
+  const fullPath = (0, import_node_path10.resolve)(migrationsPath);
   if (!(0, import_node_fs9.existsSync)(fullPath)) {
     (0, import_node_fs9.mkdirSync)(fullPath, { recursive: true });
   }
-  const filePath = (0, import_node_path9.join)(fullPath, filename);
+  const filePath = (0, import_node_path10.join)(fullPath, filename);
   if ((0, import_node_fs9.existsSync)(filePath)) {
     throw new Error(`Migration file already exists: ${filePath}`);
   }
@@ -72492,9 +72549,9 @@ function padRight6(str, width) {
 
 // src/commands/skills.ts
 var fs3 = __toESM(require("node:fs"));
-var path4 = __toESM(require("node:path"));
+var path5 = __toESM(require("node:path"));
 var import_node_child_process7 = require("node:child_process");
-var UNIVERSAL_SKILLS_DIR = path4.join(".agents", "skills");
+var UNIVERSAL_SKILLS_DIR = path5.join(".agents", "skills");
 var PRIVATE_SKILLS_DIRNAME = "private-skills";
 async function handleSkills(subcommand, positionals, flags) {
   switch (subcommand) {
@@ -72510,8 +72567,8 @@ async function handleInstall(positionals, flags) {
   const skipInstalled = Boolean(flags["skip-installed"]);
   const projectRoot = process.cwd();
   const skillsBin = resolveSkillsBinary();
-  const manifestPath = path4.join(projectRoot, "skills.txt");
-  const skillsDir = path4.join(projectRoot, UNIVERSAL_SKILLS_DIR);
+  const manifestPath = path5.join(projectRoot, "skills.txt");
+  const skillsDir = path5.join(projectRoot, UNIVERSAL_SKILLS_DIR);
   const source = positionals[0];
   if (source) {
     const parsed = parseSkillSource(source);
@@ -72544,7 +72601,7 @@ async function handleInstall(positionals, flags) {
 function installSkill(skillsBin, skill, projectRoot) {
   console.log(`  Installing: ${skill.source} (${skill.type})`);
   const localDir = resolveLocalDirIfExists(skill, projectRoot);
-  const wantsExcludePrivate = localDir !== null && fs3.existsSync(path4.join(localDir, PRIVATE_SKILLS_DIRNAME)) && !sourcePathExplicitlyTargetsPrivate(skill.source);
+  const wantsExcludePrivate = localDir !== null && fs3.existsSync(path5.join(localDir, PRIVATE_SKILLS_DIRNAME)) && !sourcePathExplicitlyTargetsPrivate(skill.source);
   try {
     const agents = ["claude-code", "codex", "gemini-cli"];
     if (wantsExcludePrivate && localDir) {
@@ -72555,7 +72612,7 @@ function installSkill(skillsBin, skill, projectRoot) {
       }
       console.log(`  Installing ${skillDirs.length} public skill(s) (excluding ${PRIVATE_SKILLS_DIRNAME}/)...`);
       for (const dir of skillDirs) {
-        const rel = path4.relative(projectRoot, dir);
+        const rel = path5.relative(projectRoot, dir);
         const installSource = rel.startsWith(".") ? rel : `./${rel}`;
         for (const agent of agents) {
           (0, import_node_child_process7.execSync)(`${skillsBin} add ${JSON.stringify(installSource)} -a ${agent} -s '*' -y --full-depth`, {
@@ -72596,8 +72653,8 @@ ${source}
 }
 function resolveSkillsBinary() {
   const candidates = [
-    path4.resolve(__dirname, "..", "node_modules", ".bin", "skills"),
-    path4.resolve(__dirname, "..", "..", ".bin", "skills")
+    path5.resolve(__dirname, "..", "node_modules", ".bin", "skills"),
+    path5.resolve(__dirname, "..", "..", ".bin", "skills")
   ];
   for (const candidate of candidates) {
     if (fs3.existsSync(candidate)) return candidate;
@@ -72618,19 +72675,19 @@ function commandExists(cmd) {
 function isGlobPattern(line) {
   return line.includes("*");
 }
-function expandGlobPattern(pattern, basePath) {
+function expandGlobPattern(pattern, basePath, explicitPrivateTarget) {
   const sources = [];
   const isRecursive = pattern.endsWith("/**");
   const basePattern = pattern.replace(/\/\*+$/, "");
   let searchRoot;
   if (basePattern.startsWith("./") || basePattern.startsWith("../")) {
-    searchRoot = path4.resolve(path4.dirname(basePath), basePattern);
+    searchRoot = path5.resolve(path5.dirname(basePath), basePattern);
   } else if (basePattern.startsWith("/")) {
     searchRoot = basePattern;
   } else if (basePattern.startsWith("~")) {
     searchRoot = basePattern.replace(/^~/, process.env.HOME || "~");
   } else {
-    searchRoot = path4.resolve(path4.dirname(basePath), basePattern);
+    searchRoot = path5.resolve(path5.dirname(basePath), basePattern);
   }
   if (!fs3.existsSync(searchRoot)) {
     console.warn(`Warning: Glob pattern base directory not found: ${searchRoot}`);
@@ -72643,12 +72700,18 @@ function expandGlobPattern(pattern, basePath) {
         if (!entry.isDirectory() || entry.name.startsWith(".")) {
           continue;
         }
-        const fullPath = path4.join(dir, entry.name);
-        const skillMdPath = path4.join(fullPath, "SKILL.md");
+        if (!explicitPrivateTarget && entry.name === PRIVATE_SKILLS_DIRNAME) {
+          continue;
+        }
+        const fullPath = path5.join(dir, entry.name);
+        const skillMdPath = path5.join(fullPath, "SKILL.md");
         if (fs3.existsSync(skillMdPath)) {
           const name = entry.name;
-          const relativePath = path4.relative(path4.dirname(basePath), fullPath);
+          const relativePath = path5.relative(path5.dirname(basePath), fullPath);
           const source = relativePath.startsWith(".") ? relativePath : `./${relativePath}`;
+          if (!explicitPrivateTarget && pathContainsPrivateSkills(source)) {
+            continue;
+          }
           sources.push({
             raw: pattern,
             source,
@@ -72677,7 +72740,8 @@ function parseSkillsManifest(manifestPath) {
     const line = rawLine.split("#")[0].trim();
     if (!line) continue;
     if (isGlobPattern(line)) {
-      const expanded = expandGlobPattern(line, manifestPath);
+      const explicitPrivateTarget = sourcePathExplicitlyTargetsPrivate(line);
+      const expanded = expandGlobPattern(line, manifestPath, explicitPrivateTarget);
       sources.push(...expanded);
     } else {
       sources.push(parseSkillSource(line));
@@ -72696,22 +72760,22 @@ function parseSkillSource(line) {
     return { raw: line, source: line, type: "github", name: name2 };
   }
   if (line.startsWith("/") || line.startsWith("~")) {
-    const name2 = path4.basename(line);
+    const name2 = path5.basename(line);
     return { raw: line, source: line, type: "local", name: name2 };
   }
   if (line.startsWith("./") || line.startsWith("../")) {
-    const name2 = path4.basename(line);
+    const name2 = path5.basename(line);
     return { raw: line, source: line, type: "local", name: name2 };
   }
   if (fs3.existsSync(line)) {
-    const name2 = path4.basename(line);
+    const name2 = path5.basename(line);
     return { raw: line, source: `./${line}`, type: "local", name: name2 };
   }
   if (line.includes("/") && !line.includes(" ")) {
     const name2 = extractNameFromRepo(line);
     return { raw: line, source: line, type: "github", name: name2 };
   }
-  const name = path4.basename(line);
+  const name = path5.basename(line);
   return { raw: line, source: `./${line}`, type: "local", name };
 }
 function extractNameFromUrl(url) {
@@ -72719,7 +72783,7 @@ function extractNameFromUrl(url) {
   if (match) {
     return match[1].replace(/\.git$/, "");
   }
-  return path4.basename(new URL(url).pathname).replace(/\.git$/, "");
+  return path5.basename(new URL(url).pathname).replace(/\.git$/, "");
 }
 function extractNameFromRepo(repo) {
   const parts = repo.split("/");
@@ -72739,9 +72803,9 @@ function getInstalledSkills(skillsDir) {
   return installed;
 }
 function ensureSkillsSymlink(projectRoot) {
-  const agentSkills = path4.join(projectRoot, UNIVERSAL_SKILLS_DIR);
-  const claudeDir = path4.join(projectRoot, ".claude");
-  const claudeSkills = path4.join(claudeDir, "skills");
+  const agentSkills = path5.join(projectRoot, UNIVERSAL_SKILLS_DIR);
+  const claudeDir = path5.join(projectRoot, ".claude");
+  const claudeSkills = path5.join(claudeDir, "skills");
   if (!fs3.existsSync(agentSkills)) {
     fs3.mkdirSync(agentSkills, { recursive: true });
   }
@@ -72755,9 +72819,9 @@ function ensureSkillsSymlink(projectRoot) {
         const entries = fs3.readdirSync(agentSkills, { withFileTypes: true });
         for (const entry of entries) {
           if (!entry.isDirectory() || entry.name.startsWith(".")) continue;
-          const dst = path4.join(claudeSkills, entry.name);
+          const dst = path5.join(claudeSkills, entry.name);
           if (fs3.existsSync(dst)) continue;
-          fs3.symlinkSync(path4.join("..", "..", UNIVERSAL_SKILLS_DIR, entry.name), dst);
+          fs3.symlinkSync(path5.join("..", "..", UNIVERSAL_SKILLS_DIR, entry.name), dst);
         }
       }
     } catch {
@@ -72790,7 +72854,7 @@ function resolveLocalDirIfExists(skill, projectRoot) {
   if (source.startsWith("~")) {
     source = source.replace(/^~/, process.env.HOME || "~");
   }
-  const abs = path4.isAbsolute(source) ? source : path4.resolve(projectRoot, source);
+  const abs = path5.isAbsolute(source) ? source : path5.resolve(projectRoot, source);
   try {
     if (!fs3.existsSync(abs)) return null;
     if (!fs3.statSync(abs).isDirectory()) return null;
@@ -72800,8 +72864,12 @@ function resolveLocalDirIfExists(skill, projectRoot) {
   }
 }
 function sourcePathExplicitlyTargetsPrivate(source) {
-  const normalized = source.replace(/\\/g, "/");
-  return normalized === PRIVATE_SKILLS_DIRNAME || normalized.includes(`/${PRIVATE_SKILLS_DIRNAME}/`);
+  return pathContainsPrivateSkills(source);
+}
+function pathContainsPrivateSkills(source) {
+  const normalized = path5.normalize(source).replace(/\\/g, "/");
+  const segments = normalized.split("/").filter(Boolean);
+  return segments.includes(PRIVATE_SKILLS_DIRNAME);
 }
 function findSkillDirs(rootDir, opts) {
   const out = [];
@@ -72827,7 +72895,7 @@ function findSkillDirs(rootDir, opts) {
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
       if (shouldSkipDir(dir, entry.name)) continue;
-      walk(path4.join(dir, entry.name));
+      walk(path5.join(dir, entry.name));
     }
   };
   walk(rootDir);
@@ -72835,18 +72903,20 @@ function findSkillDirs(rootDir, opts) {
 }
 
 // src/commands/admin.ts
+var import_node_fs10 = require("node:fs");
 async function handleAdmin(subcommand, positionals, flags, context2) {
   const json = Boolean(flags.json);
   switch (subcommand) {
     case "invite": {
       const githubUsername = getStringFlag(flags, ["github"]);
+      const sshKeyPath = getStringFlag(flags, ["ssh-key"]);
       const email = getStringFlag(flags, ["email"]);
       const role = getStringFlag(flags, ["role"]) ?? "member";
       const orgId = getStringFlag(flags, ["org"]) ?? context2.orgId;
       const web = getBooleanFlag(flags, ["web"]) ?? false;
       const redirectTo = getStringFlag(flags, ["redirect-to"]);
       if (!email) {
-        throw new Error("Usage: eve admin invite --email <email> [--github <username>] [--role <role>] [--org <org_id>] [--web] [--redirect-to <url>]");
+        throw new Error("Usage: eve admin invite --email <email> [--github <username>] [--ssh-key <path>] [--role <role>] [--org <org_id>] [--web] [--redirect-to <url>]");
       }
       if (!["owner", "admin", "member"].includes(role)) {
         throw new Error(`Invalid role: ${role}. Must be one of: owner, admin, member`);
@@ -72886,6 +72956,29 @@ async function handleAdmin(subcommand, positionals, flags, context2) {
           results.keys_registered += 1;
         }
       }
+      if (sshKeyPath) {
+        if (!(0, import_node_fs10.existsSync)(sshKeyPath)) {
+          throw new Error(`SSH public key not found: ${sshKeyPath}`);
+        }
+        const publicKey = (0, import_node_fs10.readFileSync)(sshKeyPath, "utf8").trim();
+        if (!publicKey.startsWith("ssh-")) {
+          throw new Error(`File does not look like an SSH public key: ${sshKeyPath}`);
+        }
+        const identity = await requestJson(context2, "/auth/identities", {
+          method: "POST",
+          body: {
+            email,
+            public_key: publicKey,
+            label: `ssh-key`
+          }
+        });
+        results.identities.push(identity);
+        results.keys_registered += 1;
+      }
+      if (!githubUsername && !sshKeyPath && !web) {
+        console.warn("Warning: No auth method specified (--github, --ssh-key, or --web). User won't be able to log in.");
+        console.warn('Tip: The user can self-register via: eve auth request-access --org "<org>" --ssh-key ~/.ssh/id_ed25519.pub --wait');
+      }
       if (web) {
         const body = { email };
         if (redirectTo) {
@@ -73095,8 +73188,8 @@ async function handleAdmin(subcommand, positionals, flags, context2) {
           if (untilRaw) params.set("until", untilRaw);
           if (limit) params.set("limit", limit);
           const qs = params.toString();
-          const path6 = `/admin/orgs/${orgId}/balance/transactions${qs ? `?${qs}` : ""}`;
-          const response = await requestJson(context2, path6);
+          const path7 = `/admin/orgs/${orgId}/balance/transactions${qs ? `?${qs}` : ""}`;
+          const response = await requestJson(context2, path7);
           if (json) {
             outputJson(response, true);
           } else {
@@ -73134,8 +73227,8 @@ ${response.length} transaction(s)`);
           if (untilRaw) params.set("until", untilRaw);
           if (limit) params.set("limit", limit);
           const qs = params.toString();
-          const path6 = `/admin/orgs/${orgId}/usage${qs ? `?${qs}` : ""}`;
-          const response = await requestJson(context2, path6);
+          const path7 = `/admin/orgs/${orgId}/usage${qs ? `?${qs}` : ""}`;
+          const response = await requestJson(context2, path7);
           if (json) {
             outputJson(response, true);
           } else {
@@ -73159,8 +73252,8 @@ ${response.length} record(s)`);
           if (sinceRaw) params.set("since", parseSinceValue4(sinceRaw));
           if (untilRaw) params.set("until", untilRaw);
           const qs = params.toString();
-          const path6 = `/admin/orgs/${orgId}/usage/summary${qs ? `?${qs}` : ""}`;
-          const response = await requestJson(context2, path6);
+          const path7 = `/admin/orgs/${orgId}/usage/summary${qs ? `?${qs}` : ""}`;
+          const response = await requestJson(context2, path7);
           if (json) {
             outputJson(response, true);
           } else {
@@ -73196,8 +73289,8 @@ ${response.length} record(s)`);
           if (limit) params.set("limit", limit);
           if (offset) params.set("offset", offset);
           const query = params.toString();
-          const path6 = `/admin/ingress-aliases${query ? `?${query}` : ""}`;
-          const response = await requestJson(context2, path6);
+          const path7 = `/admin/ingress-aliases${query ? `?${query}` : ""}`;
+          const response = await requestJson(context2, path7);
           if (json) {
             outputJson(response, true);
             return;
@@ -73292,6 +73385,8 @@ ${rows.length} alias(es)`);
           }
           console.log(`Approve: eve admin access-requests approve <id>`);
           console.log(`Reject:  eve admin access-requests reject <id> --reason "..."`);
+          console.log("");
+          console.log(`Tip: Users can self-register with: eve auth request-access --org "Org Name" --ssh-key ~/.ssh/id_ed25519.pub --wait`);
           return;
         }
       }
@@ -73352,11 +73447,11 @@ async function fetchGitHubKeys2(username) {
 
 // src/commands/agents.ts
 var import_node_child_process8 = require("node:child_process");
-var import_node_fs10 = require("node:fs");
-var import_node_path10 = require("node:path");
+var import_node_fs11 = require("node:fs");
+var import_node_path11 = require("node:path");
 var import_yaml3 = require("yaml");
 function readYamlFile(filePath) {
-  const raw = (0, import_node_fs10.readFileSync)(filePath, "utf-8");
+  const raw = (0, import_node_fs11.readFileSync)(filePath, "utf-8");
   const parsed = (0, import_yaml3.parse)(raw);
   if (!parsed || typeof parsed !== "object") {
     throw new Error(`Invalid YAML in ${filePath}`);
@@ -73368,9 +73463,9 @@ function resolveAgentsConfigPaths(repoRoot, manifest) {
   const agentsBlock = xEve["agents"] || {};
   const chatBlock = xEve["chat"] || {};
   const manifestChat = manifest["chat"] || {};
-  const agentsPath = (0, import_node_path10.resolve)(repoRoot, pickString(agentsBlock.config_path) ?? "agents/agents.yaml");
-  const teamsPath = (0, import_node_path10.resolve)(repoRoot, pickString(agentsBlock.teams_path) ?? "agents/teams.yaml");
-  const chatPath = (0, import_node_path10.resolve)(
+  const agentsPath = (0, import_node_path11.resolve)(repoRoot, pickString(agentsBlock.config_path) ?? "agents/agents.yaml");
+  const teamsPath = (0, import_node_path11.resolve)(repoRoot, pickString(agentsBlock.teams_path) ?? "agents/teams.yaml");
+  const chatPath = (0, import_node_path11.resolve)(
     repoRoot,
     pickString(chatBlock.config_path) ?? pickString(manifestChat.config_path) ?? "agents/chat.yaml"
   );
@@ -73379,11 +73474,11 @@ function resolveAgentsConfigPaths(repoRoot, manifest) {
 function pickString(value) {
   return typeof value === "string" && value.trim().length > 0 ? value : void 0;
 }
-function ensureFileExists(path6, label) {
-  if (!(0, import_node_fs10.existsSync)(path6)) {
-    throw new Error(`Missing ${label} at ${path6}. Update manifest config_path or add the file.`);
+function ensureFileExists(path7, label) {
+  if (!(0, import_node_fs11.existsSync)(path7)) {
+    throw new Error(`Missing ${label} at ${path7}. Update manifest config_path or add the file.`);
   }
-  return path6;
+  return path7;
 }
 function isLocalApiUrl(apiUrl) {
   try {
@@ -73395,9 +73490,9 @@ function isLocalApiUrl(apiUrl) {
   }
 }
 function loadAgentsConfig(repoRoot) {
-  const eveDir = (0, import_node_path10.join)(repoRoot, ".eve");
-  const manifestPath = (0, import_node_path10.join)(eveDir, "manifest.yaml");
-  if ((0, import_node_fs10.existsSync)(manifestPath)) {
+  const eveDir = (0, import_node_path11.join)(repoRoot, ".eve");
+  const manifestPath = (0, import_node_path11.join)(eveDir, "manifest.yaml");
+  if ((0, import_node_fs11.existsSync)(manifestPath)) {
     const manifest = readYamlFile(manifestPath);
     const xEve = manifest["x-eve"] || manifest["x_eve"] || {};
     const policy = xEve["agents"] || null;
@@ -73447,16 +73542,16 @@ async function resolvePacksAndMerge(repoRoot, manifest, projectSlug) {
     }
   }
   const configPaths = resolveAgentsConfigPaths(repoRoot, manifest);
-  if ((0, import_node_fs10.existsSync)(configPaths.agentsPath)) {
-    const projectAgents = (0, import_yaml3.parse)((0, import_node_fs10.readFileSync)(configPaths.agentsPath, "utf-8")) ?? {};
+  if ((0, import_node_fs11.existsSync)(configPaths.agentsPath)) {
+    const projectAgents = (0, import_yaml3.parse)((0, import_node_fs11.readFileSync)(configPaths.agentsPath, "utf-8")) ?? {};
     mergedAgents = mergeMapConfig(mergedAgents, projectAgents);
   }
-  if ((0, import_node_fs10.existsSync)(configPaths.teamsPath)) {
-    const projectTeams = (0, import_yaml3.parse)((0, import_node_fs10.readFileSync)(configPaths.teamsPath, "utf-8")) ?? {};
+  if ((0, import_node_fs11.existsSync)(configPaths.teamsPath)) {
+    const projectTeams = (0, import_yaml3.parse)((0, import_node_fs11.readFileSync)(configPaths.teamsPath, "utf-8")) ?? {};
     mergedTeams = mergeMapConfig(mergedTeams, projectTeams);
   }
-  if ((0, import_node_fs10.existsSync)(configPaths.chatPath)) {
-    const projectChat = (0, import_yaml3.parse)((0, import_node_fs10.readFileSync)(configPaths.chatPath, "utf-8")) ?? {};
+  if ((0, import_node_fs11.existsSync)(configPaths.chatPath)) {
+    const projectChat = (0, import_yaml3.parse)((0, import_node_fs11.readFileSync)(configPaths.chatPath, "utf-8")) ?? {};
     mergedChat = mergeChatConfig(
       mergedChat,
       projectChat
@@ -73485,10 +73580,10 @@ async function resolvePacksAndMerge(repoRoot, manifest, projectSlug) {
       chat_hash: simpleHash(JSON.stringify(mergedChat))
     }
   };
-  const eveDir = (0, import_node_path10.join)(repoRoot, ".eve");
-  (0, import_node_fs10.mkdirSync)(eveDir, { recursive: true });
-  const lockfilePath = (0, import_node_path10.join)(eveDir, "packs.lock.yaml");
-  (0, import_node_fs10.writeFileSync)(lockfilePath, (0, import_yaml3.stringify)(lockfile), "utf-8");
+  const eveDir = (0, import_node_path11.join)(repoRoot, ".eve");
+  (0, import_node_fs11.mkdirSync)(eveDir, { recursive: true });
+  const lockfilePath = (0, import_node_path11.join)(eveDir, "packs.lock.yaml");
+  (0, import_node_fs11.writeFileSync)(lockfilePath, (0, import_yaml3.stringify)(lockfile), "utf-8");
   console.log(`  \u2713 Lockfile written: .eve/packs.lock.yaml`);
   const packRefs = resolvedPacks.map((p) => ({ id: p.id, source: p.source, ref: p.ref }));
   return {
@@ -73561,7 +73656,7 @@ async function handleAgents(subcommand, positionals, flags, context2) {
   const command = subcommand ?? "config";
   const json = Boolean(flags.json);
   const includeHarnesses = !(getBooleanFlag(flags, ["no-harnesses"]) ?? false);
-  const repoRoot = (0, import_node_path10.resolve)(getStringFlag(flags, ["repo-dir", "repo_dir", "dir", "path"]) ?? process.cwd());
+  const repoRoot = (0, import_node_path11.resolve)(getStringFlag(flags, ["repo-dir", "repo_dir", "dir", "path"]) ?? process.cwd());
   switch (command) {
     case "config": {
       const result = loadAgentsConfig(repoRoot);
@@ -73630,8 +73725,8 @@ async function handleAgents(subcommand, positionals, flags, context2) {
       if (dirty && !allowDirty) {
         throw new Error("Working tree is dirty. Commit changes or pass --allow-dirty to sync anyway.");
       }
-      const manifestPath = (0, import_node_path10.join)(repoRoot, ".eve", "manifest.yaml");
-      if (!(0, import_node_fs10.existsSync)(manifestPath)) {
+      const manifestPath = (0, import_node_path11.join)(repoRoot, ".eve", "manifest.yaml");
+      if (!(0, import_node_fs11.existsSync)(manifestPath)) {
         throw new Error(`Missing manifest at ${manifestPath}. Expected .eve/manifest.yaml.`);
       }
       const manifest = readYamlFile(manifestPath);
@@ -73660,9 +73755,9 @@ async function handleAgents(subcommand, positionals, flags, context2) {
         packRefs = packResult.packRefs;
       } else {
         const configPaths = resolveAgentsConfigPaths(repoRoot, manifest);
-        agentsYaml = (0, import_node_fs10.readFileSync)(ensureFileExists(configPaths.agentsPath, "agents config"), "utf-8");
-        teamsYaml = (0, import_node_fs10.readFileSync)(ensureFileExists(configPaths.teamsPath, "teams config"), "utf-8");
-        chatYaml = (0, import_node_fs10.readFileSync)(ensureFileExists(configPaths.chatPath, "chat config"), "utf-8");
+        agentsYaml = (0, import_node_fs11.readFileSync)(ensureFileExists(configPaths.agentsPath, "agents config"), "utf-8");
+        teamsYaml = (0, import_node_fs11.readFileSync)(ensureFileExists(configPaths.teamsPath, "teams config"), "utf-8");
+        chatYaml = (0, import_node_fs11.readFileSync)(ensureFileExists(configPaths.chatPath, "chat config"), "utf-8");
       }
       let gitSha;
       let branch;
@@ -73786,7 +73881,7 @@ function formatAgeSeconds(isoDate) {
 
 // src/commands/init.ts
 var fs4 = __toESM(require("node:fs"));
-var path5 = __toESM(require("node:path"));
+var path6 = __toESM(require("node:path"));
 var os3 = __toESM(require("node:os"));
 var import_node_child_process9 = require("node:child_process");
 var DEFAULT_TEMPLATE = "https://github.com/incept5/eve-horizon-starter";
@@ -73796,8 +73891,8 @@ async function handleInit(positionals, flags) {
   const template = getStringFlag(flags, ["template", "t"]) || DEFAULT_TEMPLATE;
   const branch = getStringFlag(flags, ["branch", "b"]) || DEFAULT_BRANCH;
   const skipSkills = Boolean(flags["skip-skills"]);
-  const resolvedTarget = path5.resolve(targetDir);
-  const targetName = path5.basename(resolvedTarget);
+  const resolvedTarget = path6.resolve(targetDir);
+  const targetName = path6.basename(resolvedTarget);
   const isCurrentDir = targetDir === ".";
   if (isCurrentDir) {
     if (fs4.existsSync(resolvedTarget)) {
@@ -73824,7 +73919,7 @@ async function handleInit(positionals, flags) {
   console.log(`Template: ${template}`);
   console.log(`Branch: ${branch}`);
   console.log("");
-  const tempDir = fs4.mkdtempSync(path5.join(os3.tmpdir(), "eve-init-"));
+  const tempDir = fs4.mkdtempSync(path6.join(os3.tmpdir(), "eve-init-"));
   try {
     console.log("Downloading template...");
     const cloneResult = (0, import_node_child_process9.spawnSync)("git", ["clone", "--depth=1", `--branch=${branch}`, template, tempDir], {
@@ -73837,7 +73932,7 @@ async function handleInit(positionals, flags) {
 ${cloneResult.stderr || cloneResult.stdout}`
       );
     }
-    const gitDir = path5.join(tempDir, ".git");
+    const gitDir = path6.join(tempDir, ".git");
     if (fs4.existsSync(gitDir)) {
       fs4.rmSync(gitDir, { recursive: true, force: true });
     }
@@ -73885,8 +73980,8 @@ ${cloneResult.stderr || cloneResult.stdout}`
 function copyDirRecursive(src, dest) {
   const entries = fs4.readdirSync(src, { withFileTypes: true });
   for (const entry of entries) {
-    const srcPath = path5.join(src, entry.name);
-    const destPath = path5.join(dest, entry.name);
+    const srcPath = path6.join(src, entry.name);
+    const destPath = path6.join(dest, entry.name);
     if (entry.isDirectory()) {
       if (!fs4.existsSync(destPath)) {
         fs4.mkdirSync(destPath, { recursive: true });
@@ -73904,8 +73999,8 @@ function copyDirRecursive(src, dest) {
 }
 function resolveSkillsBinary2() {
   const candidates = [
-    path5.resolve(__dirname, "..", "node_modules", ".bin", "skills"),
-    path5.resolve(__dirname, "..", "..", ".bin", "skills")
+    path6.resolve(__dirname, "..", "node_modules", ".bin", "skills"),
+    path6.resolve(__dirname, "..", "..", ".bin", "skills")
   ];
   for (const candidate of candidates) {
     if (fs4.existsSync(candidate)) return candidate;
@@ -73917,7 +74012,7 @@ function resolveSkillsBinary2() {
   );
 }
 async function installSkills(projectRoot) {
-  const skillsTxt = path5.join(projectRoot, "skills.txt");
+  const skillsTxt = path6.join(projectRoot, "skills.txt");
   if (!fs4.existsSync(skillsTxt)) {
     console.log("No skills.txt found, skipping skill installation");
     return;
@@ -73961,9 +74056,9 @@ async function installSkills(projectRoot) {
   }
 }
 function ensureSkillsSymlink2(projectRoot) {
-  const agentSkills = path5.join(projectRoot, ".agents", "skills");
-  const claudeDir = path5.join(projectRoot, ".claude");
-  const claudeSkills = path5.join(claudeDir, "skills");
+  const agentSkills = path6.join(projectRoot, ".agents", "skills");
+  const claudeDir = path6.join(projectRoot, ".claude");
+  const claudeSkills = path6.join(claudeDir, "skills");
   if (!fs4.existsSync(agentSkills)) {
     fs4.mkdirSync(agentSkills, { recursive: true });
   }
@@ -73977,9 +74072,9 @@ function ensureSkillsSymlink2(projectRoot) {
         const entries = fs4.readdirSync(agentSkills, { withFileTypes: true });
         for (const entry of entries) {
           if (!entry.isDirectory() || entry.name.startsWith(".")) continue;
-          const dst = path5.join(claudeSkills, entry.name);
+          const dst = path6.join(claudeSkills, entry.name);
           if (fs4.existsSync(dst)) continue;
-          fs4.symlinkSync(path5.join("..", "..", ".agents", "skills", entry.name), dst);
+          fs4.symlinkSync(path6.join("..", "..", ".agents", "skills", entry.name), dst);
         }
       }
     } catch {
@@ -74005,8 +74100,8 @@ function ensureSkillsSymlink2(projectRoot) {
 }
 
 // src/commands/release.ts
-var import_node_fs11 = require("node:fs");
-var import_node_path11 = require("node:path");
+var import_node_fs12 = require("node:fs");
+var import_node_path12 = require("node:path");
 async function handleRelease2(subcommand, positionals, flags, context2) {
   const json = Boolean(flags.json);
   switch (subcommand) {
@@ -74018,9 +74113,9 @@ async function handleRelease2(subcommand, positionals, flags, context2) {
       let projectId = typeof flags.project === "string" ? flags.project : context2.projectId;
       if (!projectId) {
         const dir = typeof flags.dir === "string" ? flags.dir : process.cwd();
-        const manifestPath = (0, import_node_path11.join)(dir, ".eve", "manifest.yaml");
+        const manifestPath = (0, import_node_path12.join)(dir, ".eve", "manifest.yaml");
         try {
-          const yaml = (0, import_node_fs11.readFileSync)(manifestPath, "utf-8");
+          const yaml = (0, import_node_fs12.readFileSync)(manifestPath, "utf-8");
           const projectMatch = yaml.match(/^project:\s*(\S+)/m);
           if (projectMatch) {
             projectId = projectMatch[1];
@@ -74069,8 +74164,8 @@ Make sure the release exists and the tag is correct.`
 }
 
 // src/commands/manifest.ts
-var import_node_fs12 = require("node:fs");
-var import_node_path12 = require("node:path");
+var import_node_fs13 = require("node:fs");
+var import_node_path13 = require("node:path");
 async function handleManifest(subcommand, positionals, flags, context2) {
   const json = Boolean(flags.json);
   switch (subcommand) {
@@ -74080,11 +74175,11 @@ async function handleManifest(subcommand, positionals, flags, context2) {
       const validateSecretsFlag = flags["validate-secrets"] ?? flags.validate_secrets;
       const validateSecrets = toBoolean(validateSecretsFlag) ?? false;
       const dir = typeof flags.dir === "string" ? flags.dir : process.cwd();
-      const manifestPath = getStringFlag(flags, ["path"]) ?? (0, import_node_path12.join)(dir, ".eve", "manifest.yaml");
+      const manifestPath = getStringFlag(flags, ["path"]) ?? (0, import_node_path13.join)(dir, ".eve", "manifest.yaml");
       let manifestYaml;
       if (!useLatest) {
         try {
-          manifestYaml = (0, import_node_fs12.readFileSync)(manifestPath, "utf-8");
+          manifestYaml = (0, import_node_fs13.readFileSync)(manifestPath, "utf-8");
         } catch (error) {
           throw new Error(`Failed to read manifest at ${manifestPath}: ${error.message}`);
         }
@@ -74152,11 +74247,11 @@ async function handleManifest(subcommand, positionals, flags, context2) {
 }
 
 // src/commands/packs.ts
-var import_node_fs13 = require("node:fs");
-var import_node_path13 = require("node:path");
+var import_node_fs14 = require("node:fs");
+var import_node_path14 = require("node:path");
 var import_yaml4 = require("yaml");
 async function handlePacks(subcommand, _rest, flags, _context) {
-  const repoRoot = (0, import_node_path13.resolve)(getStringFlag(flags, ["repo-dir", "repo_dir", "dir", "path"]) ?? process.cwd());
+  const repoRoot = (0, import_node_path14.resolve)(getStringFlag(flags, ["repo-dir", "repo_dir", "dir", "path"]) ?? process.cwd());
   switch (subcommand) {
     case "status": {
       printPacksStatus(repoRoot);
@@ -74172,14 +74267,14 @@ async function handlePacks(subcommand, _rest, flags, _context) {
   }
 }
 function printPacksStatus(repoRoot) {
-  const lockfilePath = (0, import_node_path13.join)(repoRoot, ".eve", "packs.lock.yaml");
-  const manifestPath = (0, import_node_path13.join)(repoRoot, ".eve", "manifest.yaml");
-  if (!(0, import_node_fs13.existsSync)(lockfilePath)) {
+  const lockfilePath = (0, import_node_path14.join)(repoRoot, ".eve", "packs.lock.yaml");
+  const manifestPath = (0, import_node_path14.join)(repoRoot, ".eve", "manifest.yaml");
+  if (!(0, import_node_fs14.existsSync)(lockfilePath)) {
     console.log("No lockfile found at .eve/packs.lock.yaml");
     console.log('Run "eve agents sync" to resolve packs and generate the lockfile.');
     return;
   }
-  const lockRaw = (0, import_node_fs13.readFileSync)(lockfilePath, "utf-8");
+  const lockRaw = (0, import_node_fs14.readFileSync)(lockfilePath, "utf-8");
   const lock = (0, import_yaml4.parse)(lockRaw);
   if (!lock || !lock.packs) {
     console.log("Lockfile is empty or malformed.");
@@ -74214,8 +74309,8 @@ function printPacksStatus(repoRoot) {
   console.log(`  Agents: ${lock.effective.agents_count}`);
   console.log(`  Teams:  ${lock.effective.teams_count}`);
   console.log(`  Routes: ${lock.effective.routes_count}`);
-  if ((0, import_node_fs13.existsSync)(manifestPath)) {
-    const manifestRaw = (0, import_node_fs13.readFileSync)(manifestPath, "utf-8");
+  if ((0, import_node_fs14.existsSync)(manifestPath)) {
+    const manifestRaw = (0, import_node_fs14.readFileSync)(manifestPath, "utf-8");
     const manifest = (0, import_yaml4.parse)(manifestRaw);
     if (manifest) {
       const xEve = manifest["x-eve"] ?? manifest["x_eve"] ?? {};
@@ -74260,12 +74355,12 @@ function detectDrift(lock, manifestPacks) {
 }
 function printPacksResolve(repoRoot, dryRun) {
   if (dryRun) {
-    const lockfilePath = (0, import_node_path13.join)(repoRoot, ".eve", "packs.lock.yaml");
-    const manifestPath = (0, import_node_path13.join)(repoRoot, ".eve", "manifest.yaml");
-    if (!(0, import_node_fs13.existsSync)(manifestPath)) {
+    const lockfilePath = (0, import_node_path14.join)(repoRoot, ".eve", "packs.lock.yaml");
+    const manifestPath = (0, import_node_path14.join)(repoRoot, ".eve", "manifest.yaml");
+    if (!(0, import_node_fs14.existsSync)(manifestPath)) {
       throw new Error("No manifest found at .eve/manifest.yaml");
     }
-    const manifestRaw = (0, import_node_fs13.readFileSync)(manifestPath, "utf-8");
+    const manifestRaw = (0, import_node_fs14.readFileSync)(manifestPath, "utf-8");
     const manifest = (0, import_yaml4.parse)(manifestRaw);
     if (!manifest) {
       throw new Error("Manifest is empty or malformed.");
@@ -74283,8 +74378,8 @@ function printPacksResolve(repoRoot, dryRun) {
       const refShort = mp.ref ? mp.ref.substring(0, 12) : "(local)";
       console.log(`  - ${mp.source} @ ${refShort}`);
     }
-    if ((0, import_node_fs13.existsSync)(lockfilePath)) {
-      const lockRaw = (0, import_node_fs13.readFileSync)(lockfilePath, "utf-8");
+    if ((0, import_node_fs14.existsSync)(lockfilePath)) {
+      const lockRaw = (0, import_node_fs14.readFileSync)(lockfilePath, "utf-8");
       const lock = (0, import_yaml4.parse)(lockRaw);
       if (lock?.packs) {
         const drift = detectDrift(lock, manifestPacks);
@@ -75174,8 +75269,8 @@ Cursor: ${result.cursor}`);
 }
 
 // src/commands/migrate.ts
-var import_node_fs14 = require("node:fs");
-var import_node_path14 = require("node:path");
+var import_node_fs15 = require("node:fs");
+var import_node_path15 = require("node:path");
 var import_yaml5 = require("yaml");
 async function handleMigrate2(subcommand, _rest, _flags) {
   switch (subcommand) {
@@ -75195,12 +75290,12 @@ async function migrateSkillsToPacks() {
   if (!repoRoot) {
     throw new Error("Not in a git repository. Run this from your project root.");
   }
-  const skillsTxtPath = (0, import_node_path14.join)(repoRoot, "skills.txt");
-  if (!(0, import_node_fs14.existsSync)(skillsTxtPath)) {
+  const skillsTxtPath = (0, import_node_path15.join)(repoRoot, "skills.txt");
+  if (!(0, import_node_fs15.existsSync)(skillsTxtPath)) {
     console.log("No skills.txt found at repository root. Nothing to migrate.");
     return;
   }
-  const content = (0, import_node_fs14.readFileSync)(skillsTxtPath, "utf-8");
+  const content = (0, import_node_fs15.readFileSync)(skillsTxtPath, "utf-8");
   const lines = content.split("\n");
   const localSources = [];
   const remoteSources = [];
@@ -75338,8 +75433,8 @@ function padRight9(str, width) {
 }
 
 // src/commands/access.ts
-var import_node_fs15 = require("node:fs");
-var import_node_path15 = require("node:path");
+var import_node_fs16 = require("node:fs");
+var import_node_path16 = require("node:path");
 var readline3 = __toESM(require("node:readline/promises"));
 var import_yaml6 = require("yaml");
 function resolvePrincipalSelection(flags, options) {
@@ -75834,8 +75929,8 @@ async function handleBindings(action, flags, context2, json) {
     params.set("project_id", projectId);
   }
   const queryString = params.toString();
-  const path6 = queryString ? `/orgs/${orgId}/access/bindings?${queryString}` : `/orgs/${orgId}/access/bindings`;
-  const bindingsResponse = await requestJson(context2, path6);
+  const path7 = queryString ? `/orgs/${orgId}/access/bindings?${queryString}` : `/orgs/${orgId}/access/bindings`;
+  const bindingsResponse = await requestJson(context2, path7);
   const bindings = unwrapListResponse(bindingsResponse);
   if (json) {
     outputJson({ data: bindings }, json);
@@ -76099,13 +76194,13 @@ async function handleMemberships(flags, context2, json) {
 var DEFAULT_ACCESS_YAML = ".eve/access.yaml";
 function resolveFilePath(flags) {
   const filePath = getStringFlag(flags, ["file", "f"]) ?? DEFAULT_ACCESS_YAML;
-  return (0, import_node_path15.resolve)(process.cwd(), filePath);
+  return (0, import_node_path16.resolve)(process.cwd(), filePath);
 }
 function loadAccessYaml(filePath) {
-  if (!(0, import_node_fs15.existsSync)(filePath)) {
+  if (!(0, import_node_fs16.existsSync)(filePath)) {
     throw new Error(`File not found: ${filePath}`);
   }
-  const raw = (0, import_node_fs15.readFileSync)(filePath, "utf-8");
+  const raw = (0, import_node_fs16.readFileSync)(filePath, "utf-8");
   let parsed;
   try {
     parsed = (0, import_yaml6.parse)(raw);
@@ -77073,10 +77168,10 @@ Sync complete: ${parts.join(", ")}`);
 }
 
 // src/commands/docs.ts
-var import_node_fs16 = require("node:fs");
-var import_node_path16 = require("node:path");
-function encodeDocPathParam(path6) {
-  const trimmed = path6.startsWith("/") ? path6.slice(1) : path6;
+var import_node_fs17 = require("node:fs");
+var import_node_path17 = require("node:path");
+function encodeDocPathParam(path7) {
+  const trimmed = path7.startsWith("/") ? path7.slice(1) : path7;
   return encodeURIComponent(trimmed);
 }
 function parseWhereClause(raw) {
@@ -77149,9 +77244,9 @@ async function handleDocs(subcommand, positionals, flags, context2) {
       const filePath = getStringFlag(flags, ["file"]);
       const useStdin = flags.stdin === true || flags.stdin === "true";
       if (filePath) {
-        content = (0, import_node_fs16.readFileSync)((0, import_node_path16.resolve)(filePath), "utf-8");
+        content = (0, import_node_fs17.readFileSync)((0, import_node_path17.resolve)(filePath), "utf-8");
       } else if (useStdin) {
-        content = (0, import_node_fs16.readFileSync)(0, "utf-8");
+        content = (0, import_node_fs17.readFileSync)(0, "utf-8");
       } else {
         throw new Error("Provide --file <path> or --stdin to supply document content");
       }
@@ -77389,8 +77484,8 @@ async function handleDocs(subcommand, positionals, flags, context2) {
 }
 
 // src/commands/memory.ts
-var import_node_fs17 = require("node:fs");
-var import_node_path17 = require("node:path");
+var import_node_fs18 = require("node:fs");
+var import_node_path18 = require("node:path");
 function parseCsv(raw) {
   if (!raw) return [];
   return raw.split(",").map((item) => item.trim()).filter(Boolean);
@@ -77449,9 +77544,9 @@ async function handleMemory(subcommand, positionals, flags, context2) {
       if (contentInline !== void 0) {
         content = contentInline;
       } else if (filePath) {
-        content = (0, import_node_fs17.readFileSync)((0, import_node_path17.resolve)(filePath), "utf-8");
+        content = (0, import_node_fs18.readFileSync)((0, import_node_path18.resolve)(filePath), "utf-8");
       } else if (useStdin) {
-        content = (0, import_node_fs17.readFileSync)(0, "utf-8");
+        content = (0, import_node_fs18.readFileSync)(0, "utf-8");
       } else {
         throw new Error("Provide --file <path>, --stdin, or --content <text>");
       }
@@ -78108,8 +78203,8 @@ function normalizeManagedModelRows(payload) {
 function looksLikeGatewayPath(baseUrl) {
   try {
     const parsed = new URL(baseUrl);
-    const path6 = parsed.pathname.toLowerCase();
-    return path6.includes("/inference/v1") || path6.endsWith("/v1");
+    const path7 = parsed.pathname.toLowerCase();
+    return path7.includes("/inference/v1") || path7.endsWith("/v1");
   } catch {
     return false;
   }
@@ -78572,7 +78667,7 @@ async function handleOllama(subcommand, positionals, flags, context2) {
 
 // src/commands/fs.ts
 var import_promises = require("node:fs/promises");
-var import_node_fs18 = require("node:fs");
+var import_node_fs19 = require("node:fs");
 var import_node_os5 = require("node:os");
 function getOrgOrThrow(flags, context2) {
   const orgId = getStringFlag(flags, ["org", "org-id", "org_id"]) ?? context2.orgId;
@@ -78816,7 +78911,7 @@ async function handleSync2(action, positionals, flags, context2) {
       for (const link of links.data) {
         let writable = false;
         try {
-          await (0, import_promises.access)(link.local_path, import_node_fs18.constants.R_OK | import_node_fs18.constants.W_OK);
+          await (0, import_promises.access)(link.local_path, import_node_fs19.constants.R_OK | import_node_fs19.constants.W_OK);
           writable = true;
         } catch {
           writable = false;
@@ -78849,22 +78944,22 @@ async function handleFs(subcommand, positionals, flags, context2) {
 }
 
 // src/commands/local.ts
-var import_node_fs19 = require("node:fs");
+var import_node_fs20 = require("node:fs");
 var import_node_crypto = require("node:crypto");
 var import_node_child_process10 = require("node:child_process");
 var import_node_os6 = require("node:os");
-var import_node_path18 = require("node:path");
+var import_node_path19 = require("node:path");
 var import_promises2 = require("node:readline/promises");
 var DEFAULT_CLUSTER_NAME = "eve-local";
 var DEFAULT_KUBE_CONTEXT = "k3d-eve-local";
-var MANAGED_BIN_DIR = (0, import_node_path18.join)((0, import_node_os6.homedir)(), ".eve", "bin");
+var MANAGED_BIN_DIR = (0, import_node_path19.join)((0, import_node_os6.homedir)(), ".eve", "bin");
 var LOCAL_API_URL = "http://api.eve.lvh.me";
 var WATCH_INTERVAL_MS = 5e3;
 var K3D_VERSION = "v5.7.5";
 var KUBECTL_STABLE_URL = "https://dl.k8s.io/release/stable.txt";
-var LOCAL_STACK_ROOT = (0, import_node_path18.resolve)(__dirname, "..", "assets", "local-k8s");
-var LOCAL_STACK_OVERLAY = (0, import_node_path18.join)(LOCAL_STACK_ROOT, "overlays", "local");
-var LOCAL_STACK_BASE = (0, import_node_path18.join)(LOCAL_STACK_ROOT, "base");
+var LOCAL_STACK_ROOT = (0, import_node_path19.resolve)(__dirname, "..", "assets", "local-k8s");
+var LOCAL_STACK_OVERLAY = (0, import_node_path19.join)(LOCAL_STACK_ROOT, "overlays", "local");
+var LOCAL_STACK_BASE = (0, import_node_path19.join)(LOCAL_STACK_ROOT, "base");
 var DEFAULT_PLATFORM_NAMESPACE = "eve-horizon";
 var CONFIGURED_REGISTRY = process.env.ECR_REGISTRY?.trim();
 var CONFIGURED_NAMESPACE = process.env.ECR_NAMESPACE?.trim() || DEFAULT_PLATFORM_NAMESPACE;
@@ -79267,7 +79362,7 @@ async function ensureManagedTool(tool, runtimeOptions) {
   if (findExecutable(tool)) {
     return;
   }
-  (0, import_node_fs19.mkdirSync)(MANAGED_BIN_DIR, { recursive: true });
+  (0, import_node_fs20.mkdirSync)(MANAGED_BIN_DIR, { recursive: true });
   if (tool === "k3d") {
     printProgress(runtimeOptions, `Installing k3d ${K3D_VERSION} into ${MANAGED_BIN_DIR}...`);
     await installK3dBinary();
@@ -79283,7 +79378,7 @@ async function installK3dBinary() {
   const platform2 = normalizePlatform(process.platform);
   const arch = normalizeArch(process.arch);
   const url = `https://github.com/k3d-io/k3d/releases/download/${K3D_VERSION}/k3d-${platform2}-${arch}`;
-  await downloadBinary(url, (0, import_node_path18.join)(MANAGED_BIN_DIR, "k3d"));
+  await downloadBinary(url, (0, import_node_path19.join)(MANAGED_BIN_DIR, "k3d"));
 }
 async function installKubectlBinary() {
   const platform2 = normalizePlatform(process.platform);
@@ -79303,7 +79398,7 @@ async function installKubectlBinary() {
   if (expectedChecksum !== actualChecksum) {
     throw new Error(`kubectl checksum verification failed (expected ${expectedChecksum}, got ${actualChecksum}).`);
   }
-  writeExecutable((0, import_node_path18.join)(MANAGED_BIN_DIR, "kubectl"), binary);
+  writeExecutable((0, import_node_path19.join)(MANAGED_BIN_DIR, "kubectl"), binary);
 }
 function normalizePlatform(platform2) {
   if (platform2 === "darwin" || platform2 === "linux") {
@@ -79348,9 +79443,9 @@ async function fetchText(url, headers) {
 }
 function writeExecutable(destination, bytes) {
   const tempPath = `${destination}.tmp-${Date.now()}-${process.pid}`;
-  (0, import_node_fs19.writeFileSync)(tempPath, bytes);
-  (0, import_node_fs19.chmodSync)(tempPath, 493);
-  (0, import_node_fs19.renameSync)(tempPath, destination);
+  (0, import_node_fs20.writeFileSync)(tempPath, bytes);
+  (0, import_node_fs20.chmodSync)(tempPath, 493);
+  (0, import_node_fs20.renameSync)(tempPath, destination);
 }
 async function ensureClusterReady(runtimeOptions) {
   const k3d = requireToolPath("k3d", "Run 'eve local up' again to auto-install managed tools.");
@@ -79495,13 +79590,13 @@ async function importPlatformImages(version2, runtimeOptions) {
   }
 }
 function importImageViaTar(docker, k3d, imageTag, component, stdio) {
-  const tarPath = (0, import_node_path18.join)((0, import_node_os6.tmpdir)(), `eve-local-${component}-${Date.now()}-${process.pid}.tar`);
+  const tarPath = (0, import_node_path19.join)((0, import_node_os6.tmpdir)(), `eve-local-${component}-${Date.now()}-${process.pid}.tar`);
   try {
     run(docker, ["image", "save", "--platform", "linux/amd64", imageTag, "-o", tarPath], { stdio });
     run(k3d, ["image", "import", "--mode", "direct", tarPath, "-c", DEFAULT_CLUSTER_NAME], { stdio });
   } finally {
-    if ((0, import_node_fs19.existsSync)(tarPath)) {
-      (0, import_node_fs19.unlinkSync)(tarPath);
+    if ((0, import_node_fs20.existsSync)(tarPath)) {
+      (0, import_node_fs20.unlinkSync)(tarPath);
     }
   }
 }
@@ -79568,7 +79663,7 @@ function writeManagerMarker(kubectl, runtimeOptions) {
 }
 function runDbMigration(timeoutSeconds, runtimeOptions) {
   const kubectl = requireToolPath("kubectl", "Run 'eve local up' again to auto-install managed tools.");
-  const migrateJobPath = (0, import_node_path18.join)(LOCAL_STACK_BASE, "db-migrate-job.yaml");
+  const migrateJobPath = (0, import_node_path19.join)(LOCAL_STACK_BASE, "db-migrate-job.yaml");
   printProgress(runtimeOptions, "Running database migrations...");
   run(kubectl, ["--context", DEFAULT_KUBE_CONTEXT, "-n", "eve", "delete", "job/eve-db-migrate", "--ignore-not-found"], {
     stdio: "pipe",
@@ -79669,7 +79764,7 @@ function readSecretValue(kubectl, key) {
 }
 function runAuthBootstrap(timeoutSeconds, runtimeOptions) {
   const kubectl = requireToolPath("kubectl", "Run 'eve local up' again to auto-install managed tools.");
-  const bootstrapJobPath = (0, import_node_path18.join)(LOCAL_STACK_BASE, "auth-bootstrap-job.yaml");
+  const bootstrapJobPath = (0, import_node_path19.join)(LOCAL_STACK_BASE, "auth-bootstrap-job.yaml");
   printProgress(runtimeOptions, "Bootstrapping auth database role...");
   run(kubectl, ["--context", DEFAULT_KUBE_CONTEXT, "-n", "eve", "delete", "job/auth-db-bootstrap", "--ignore-not-found"], {
     stdio: "pipe",
@@ -79769,12 +79864,12 @@ function assertLocalAssetsPresent() {
   const files = [
     LOCAL_STACK_OVERLAY,
     LOCAL_STACK_BASE,
-    (0, import_node_path18.join)(LOCAL_STACK_OVERLAY, "kustomization.yaml"),
-    (0, import_node_path18.join)(LOCAL_STACK_BASE, "db-migrate-job.yaml"),
-    (0, import_node_path18.join)(LOCAL_STACK_BASE, "auth-bootstrap-job.yaml")
+    (0, import_node_path19.join)(LOCAL_STACK_OVERLAY, "kustomization.yaml"),
+    (0, import_node_path19.join)(LOCAL_STACK_BASE, "db-migrate-job.yaml"),
+    (0, import_node_path19.join)(LOCAL_STACK_BASE, "auth-bootstrap-job.yaml")
   ];
   for (const file of files) {
-    if (!(0, import_node_fs19.existsSync)(file)) {
+    if (!(0, import_node_fs20.existsSync)(file)) {
       throw new Error(
         `Missing local stack assets at ${file}. Reinstall the CLI or ensure package assets were published.`
       );
@@ -79862,7 +79957,7 @@ function parseTimeoutSeconds(flags, defaultValue) {
 }
 function run(command, args, options = {}) {
   const env = { ...process.env };
-  if ((0, import_node_fs19.existsSync)(MANAGED_BIN_DIR)) {
+  if ((0, import_node_fs20.existsSync)(MANAGED_BIN_DIR)) {
     env.PATH = `${MANAGED_BIN_DIR}:${env.PATH ?? ""}`;
   }
   const result = (0, import_node_child_process10.spawnSync)(command, args, {
@@ -79882,8 +79977,8 @@ function run(command, args, options = {}) {
   return { status, stdout, stderr };
 }
 function findExecutable(name) {
-  const managed = (0, import_node_path18.join)(MANAGED_BIN_DIR, name);
-  if ((0, import_node_fs19.existsSync)(managed)) {
+  const managed = (0, import_node_path19.join)(MANAGED_BIN_DIR, name);
+  if ((0, import_node_fs20.existsSync)(managed)) {
     return managed;
   }
   const found = (0, import_node_child_process10.spawnSync)("which", [name], {
@@ -79901,11 +79996,11 @@ function ensureTool(name, installHint) {
   }
 }
 function requireToolPath(name, hint) {
-  const path6 = findExecutable(name);
-  if (!path6) {
+  const path7 = findExecutable(name);
+  if (!path7) {
     throw new Error(`Missing required tool '${name}'. ${hint}`);
   }
-  return path6;
+  return path7;
 }
 function assertDockerRunning() {
   const docker = findExecutable("docker");