@eve-horizon/cli 0.2.34 → 0.2.35

package/dist/index.js

@@ -9811,8 +9811,8 @@ var require_sync = __commonJS({
       }
       return x;
     };
-    var defaultReadPackageSync = function defaultReadPackageSync2(readFileSync23, pkgfile) {
-      var body = readFileSync23(pkgfile);
+    var defaultReadPackageSync = function defaultReadPackageSync2(readFileSync24, pkgfile) {
+      var body = readFileSync24(pkgfile);
       try {
         var pkg = JSON.parse(body);
         return pkg;
@@ -9832,7 +9832,7 @@ var require_sync = __commonJS({
       }
       var opts = normalizeOptions(x, options);
       var isFile = opts.isFile || defaultIsFile;
-      var readFileSync23 = opts.readFileSync || fs5.readFileSync;
+      var readFileSync24 = opts.readFileSync || fs5.readFileSync;
       var isDirectory = opts.isDirectory || defaultIsDir;
       var realpathSync = opts.realpathSync || defaultRealpathSync;
       var readPackageSync = opts.readPackageSync || defaultReadPackageSync;
@@ -9889,7 +9889,7 @@ var require_sync = __commonJS({
         if (!isFile(pkgfile)) {
           return loadpkg(path7.dirname(dir));
         }
-        var pkg = readPackageSync(readFileSync23, pkgfile);
+        var pkg = readPackageSync(readFileSync24, pkgfile);
         if (pkg && opts.packageFilter) {
           pkg = opts.packageFilter(
             pkg,
@@ -9903,7 +9903,7 @@ var require_sync = __commonJS({
         var pkgfile = path7.join(maybeRealpathSync(realpathSync, x2, opts), "/package.json");
         if (isFile(pkgfile)) {
           try {
-            var pkg = readPackageSync(readFileSync23, pkgfile);
+            var pkg = readPackageSync(readFileSync24, pkgfile);
           } catch (e) {
           }
           if (pkg && opts.packageFilter) {
@@ -49514,7 +49514,7 @@ and switching profiles won't affect other checkouts.`,
   auth: {
     description: `Authenticate with Eve Horizon. Auth is optional for local development but required
 for cloud deployments. Credentials are stored globally per API URL.`,
-    usage: "eve auth <login|logout|status|whoami|bootstrap|sync|creds|token|mint|permissions>",
+    usage: "eve auth <login|logout|status|whoami|bootstrap|sync|creds|token|mint|permissions|request-access>",
     subcommands: {
       login: {
         description: "Login via GitHub SSH challenge (default) or Supabase (legacy)",
@@ -49642,6 +49642,24 @@ for cloud deployments. Credentials are stored globally per API URL.`,
           "eve auth permissions",
           "eve auth permissions --json"
         ]
+      },
+      "request-access": {
+        description: "Self-service access request \u2014 submit your SSH key and wait for admin approval",
+        usage: 'eve auth request-access --org "<org name>" [--ssh-key <path>] [--email <email>] [--wait]',
+        options: [
+          "--org <name>          Organization to request access to (required)",
+          "--org-slug <slug>     Preferred org slug",
+          "--ssh-key <path>      Path to SSH public key (default: ~/.ssh/id_ed25519.pub)",
+          "--email <email>       Contact email",
+          "--nostr-pubkey <hex>  Nostr public key (alternative to SSH)",
+          "--wait                Poll until approved, then auto-login",
+          "--status <id>         Check status of an existing request"
+        ],
+        examples: [
+          'eve auth request-access --org "Acme Corp" --ssh-key ~/.ssh/id_ed25519.pub --wait',
+          'eve auth request-access --org "Acme Corp" --email user@example.com --wait',
+          "eve auth request-access --status <request_id>"
+        ]
       }
     }
   },
@@ -50293,17 +50311,40 @@ for cloud deployments. Credentials are stored globally per API URL.`,
     usage: "eve admin <subcommand> [options]",
     subcommands: {
       invite: {
-        description: "Invite a user by registering their GitHub SSH keys and adding them to an org",
-        usage: "eve admin invite --email <email> [--github <username>] [--role <role>] [--org <org_id>]",
+        description: "Invite a user by registering their SSH keys (from GitHub or a local file) and adding them to an org",
+        usage: "eve admin invite --email <email> [--github <username>] [--ssh-key <path>] [--role <role>] [--org <org_id>] [--web] [--redirect-to <url>]",
         options: [
           "--email <email>       User email address (required)",
           "--github <username>   GitHub username to fetch SSH keys from",
+          "--ssh-key <path>      Path to an SSH public key file to register",
           "--role <role>         Org role: owner, admin, member (default: member)",
-          "--org <org_id>        Organization to add user to"
+          "--org <org_id>        Organization to add user to",
+          "--web                 Send a Supabase Auth invite email",
+          "--redirect-to <url>   Redirect URL after web login",
+          "",
+          "At least one auth method (--github, --ssh-key, or --web) is recommended.",
+          'Users can also self-register: eve auth request-access --org "Org" --ssh-key ~/.ssh/id_ed25519.pub --wait'
         ],
         examples: [
           "eve admin invite --email user@example.com --github octocat",
-          "eve admin invite --email user@example.com --github octocat --role admin --org org_xxx"
+          "eve admin invite --email user@example.com --ssh-key ~/.ssh/id_ed25519.pub --org org_xxx",
+          "eve admin invite --email user@example.com --github octocat --role admin --org org_xxx",
+          "eve admin invite --email user@example.com --web --redirect-to https://app.example.com"
+        ]
+      },
+      "access-requests": {
+        description: "Review, approve, or reject self-service access requests",
+        usage: 'eve admin access-requests [approve|reject <id>] [--reason "..."]',
+        options: [
+          "(no action)          List pending access requests",
+          "approve <id>         Approve a request (creates user, org membership, and identity)",
+          "reject <id>          Reject a request",
+          '--reason "<text>"    Note to attach to approval/rejection'
+        ],
+        examples: [
+          "eve admin access-requests",
+          "eve admin access-requests approve ar_xxx",
+          'eve admin access-requests reject ar_xxx --reason "Unknown user"'
         ]
       },
       "ingress-aliases": {
@@ -50321,7 +50362,9 @@ for cloud deployments. Credentials are stored globally per API URL.`,
     },
     examples: [
       "eve admin invite --email user@example.com --github octocat",
-      "eve admin invite --email user@example.com --github octocat --org org_xxx",
+      "eve admin invite --email user@example.com --ssh-key ~/.ssh/id_ed25519.pub --org org_xxx",
+      "eve admin access-requests",
+      "eve admin access-requests approve ar_xxx",
       "eve admin ingress-aliases list"
     ]
   },
@@ -65513,7 +65556,10 @@ ${tokenList.map((t) => `  - ${t.name}`).join("\n")}`
       const requestData = submitResponse.data;
       if (!wait) {
         outputJson(requestData, json, `Access request submitted: ${requestData.id} (status: ${requestData.status})
-Poll with: eve auth request-access --status ${requestData.id}`);
+Poll with: eve auth request-access --status ${requestData.id}
+
+Tip: Use --wait to auto-poll and login on approval:
+  eve auth request-access --org "${orgName}" --wait`);
         return;
       }
       console.log(`Access request submitted: ${requestData.id}`);
@@ -72857,18 +72903,20 @@ function findSkillDirs(rootDir, opts) {
 }
 
 // src/commands/admin.ts
+var import_node_fs10 = require("node:fs");
 async function handleAdmin(subcommand, positionals, flags, context2) {
   const json = Boolean(flags.json);
   switch (subcommand) {
     case "invite": {
       const githubUsername = getStringFlag(flags, ["github"]);
+      const sshKeyPath = getStringFlag(flags, ["ssh-key"]);
       const email = getStringFlag(flags, ["email"]);
       const role = getStringFlag(flags, ["role"]) ?? "member";
       const orgId = getStringFlag(flags, ["org"]) ?? context2.orgId;
       const web = getBooleanFlag(flags, ["web"]) ?? false;
       const redirectTo = getStringFlag(flags, ["redirect-to"]);
       if (!email) {
-        throw new Error("Usage: eve admin invite --email <email> [--github <username>] [--role <role>] [--org <org_id>] [--web] [--redirect-to <url>]");
+        throw new Error("Usage: eve admin invite --email <email> [--github <username>] [--ssh-key <path>] [--role <role>] [--org <org_id>] [--web] [--redirect-to <url>]");
       }
       if (!["owner", "admin", "member"].includes(role)) {
         throw new Error(`Invalid role: ${role}. Must be one of: owner, admin, member`);
@@ -72908,6 +72956,29 @@ async function handleAdmin(subcommand, positionals, flags, context2) {
           results.keys_registered += 1;
         }
       }
+      if (sshKeyPath) {
+        if (!(0, import_node_fs10.existsSync)(sshKeyPath)) {
+          throw new Error(`SSH public key not found: ${sshKeyPath}`);
+        }
+        const publicKey = (0, import_node_fs10.readFileSync)(sshKeyPath, "utf8").trim();
+        if (!publicKey.startsWith("ssh-")) {
+          throw new Error(`File does not look like an SSH public key: ${sshKeyPath}`);
+        }
+        const identity = await requestJson(context2, "/auth/identities", {
+          method: "POST",
+          body: {
+            email,
+            public_key: publicKey,
+            label: `ssh-key`
+          }
+        });
+        results.identities.push(identity);
+        results.keys_registered += 1;
+      }
+      if (!githubUsername && !sshKeyPath && !web) {
+        console.warn("Warning: No auth method specified (--github, --ssh-key, or --web). User won't be able to log in.");
+        console.warn('Tip: The user can self-register via: eve auth request-access --org "<org>" --ssh-key ~/.ssh/id_ed25519.pub --wait');
+      }
       if (web) {
         const body = { email };
         if (redirectTo) {
@@ -73314,6 +73385,8 @@ ${rows.length} alias(es)`);
           }
           console.log(`Approve: eve admin access-requests approve <id>`);
           console.log(`Reject:  eve admin access-requests reject <id> --reason "..."`);
+          console.log("");
+          console.log(`Tip: Users can self-register with: eve auth request-access --org "Org Name" --ssh-key ~/.ssh/id_ed25519.pub --wait`);
           return;
         }
       }
@@ -73374,11 +73447,11 @@ async function fetchGitHubKeys2(username) {
 
 // src/commands/agents.ts
 var import_node_child_process8 = require("node:child_process");
-var import_node_fs10 = require("node:fs");
+var import_node_fs11 = require("node:fs");
 var import_node_path11 = require("node:path");
 var import_yaml3 = require("yaml");
 function readYamlFile(filePath) {
-  const raw = (0, import_node_fs10.readFileSync)(filePath, "utf-8");
+  const raw = (0, import_node_fs11.readFileSync)(filePath, "utf-8");
   const parsed = (0, import_yaml3.parse)(raw);
   if (!parsed || typeof parsed !== "object") {
     throw new Error(`Invalid YAML in ${filePath}`);
@@ -73402,7 +73475,7 @@ function pickString(value) {
   return typeof value === "string" && value.trim().length > 0 ? value : void 0;
 }
 function ensureFileExists(path7, label) {
-  if (!(0, import_node_fs10.existsSync)(path7)) {
+  if (!(0, import_node_fs11.existsSync)(path7)) {
     throw new Error(`Missing ${label} at ${path7}. Update manifest config_path or add the file.`);
   }
   return path7;
@@ -73419,7 +73492,7 @@ function isLocalApiUrl(apiUrl) {
 function loadAgentsConfig(repoRoot) {
   const eveDir = (0, import_node_path11.join)(repoRoot, ".eve");
   const manifestPath = (0, import_node_path11.join)(eveDir, "manifest.yaml");
-  if ((0, import_node_fs10.existsSync)(manifestPath)) {
+  if ((0, import_node_fs11.existsSync)(manifestPath)) {
     const manifest = readYamlFile(manifestPath);
     const xEve = manifest["x-eve"] || manifest["x_eve"] || {};
     const policy = xEve["agents"] || null;
@@ -73469,16 +73542,16 @@ async function resolvePacksAndMerge(repoRoot, manifest, projectSlug) {
     }
   }
   const configPaths = resolveAgentsConfigPaths(repoRoot, manifest);
-  if ((0, import_node_fs10.existsSync)(configPaths.agentsPath)) {
-    const projectAgents = (0, import_yaml3.parse)((0, import_node_fs10.readFileSync)(configPaths.agentsPath, "utf-8")) ?? {};
+  if ((0, import_node_fs11.existsSync)(configPaths.agentsPath)) {
+    const projectAgents = (0, import_yaml3.parse)((0, import_node_fs11.readFileSync)(configPaths.agentsPath, "utf-8")) ?? {};
     mergedAgents = mergeMapConfig(mergedAgents, projectAgents);
   }
-  if ((0, import_node_fs10.existsSync)(configPaths.teamsPath)) {
-    const projectTeams = (0, import_yaml3.parse)((0, import_node_fs10.readFileSync)(configPaths.teamsPath, "utf-8")) ?? {};
+  if ((0, import_node_fs11.existsSync)(configPaths.teamsPath)) {
+    const projectTeams = (0, import_yaml3.parse)((0, import_node_fs11.readFileSync)(configPaths.teamsPath, "utf-8")) ?? {};
     mergedTeams = mergeMapConfig(mergedTeams, projectTeams);
   }
-  if ((0, import_node_fs10.existsSync)(configPaths.chatPath)) {
-    const projectChat = (0, import_yaml3.parse)((0, import_node_fs10.readFileSync)(configPaths.chatPath, "utf-8")) ?? {};
+  if ((0, import_node_fs11.existsSync)(configPaths.chatPath)) {
+    const projectChat = (0, import_yaml3.parse)((0, import_node_fs11.readFileSync)(configPaths.chatPath, "utf-8")) ?? {};
     mergedChat = mergeChatConfig(
       mergedChat,
       projectChat
@@ -73508,9 +73581,9 @@ async function resolvePacksAndMerge(repoRoot, manifest, projectSlug) {
     }
   };
   const eveDir = (0, import_node_path11.join)(repoRoot, ".eve");
-  (0, import_node_fs10.mkdirSync)(eveDir, { recursive: true });
+  (0, import_node_fs11.mkdirSync)(eveDir, { recursive: true });
   const lockfilePath = (0, import_node_path11.join)(eveDir, "packs.lock.yaml");
-  (0, import_node_fs10.writeFileSync)(lockfilePath, (0, import_yaml3.stringify)(lockfile), "utf-8");
+  (0, import_node_fs11.writeFileSync)(lockfilePath, (0, import_yaml3.stringify)(lockfile), "utf-8");
   console.log(`  \u2713 Lockfile written: .eve/packs.lock.yaml`);
   const packRefs = resolvedPacks.map((p) => ({ id: p.id, source: p.source, ref: p.ref }));
   return {
@@ -73653,7 +73726,7 @@ async function handleAgents(subcommand, positionals, flags, context2) {
         throw new Error("Working tree is dirty. Commit changes or pass --allow-dirty to sync anyway.");
       }
       const manifestPath = (0, import_node_path11.join)(repoRoot, ".eve", "manifest.yaml");
-      if (!(0, import_node_fs10.existsSync)(manifestPath)) {
+      if (!(0, import_node_fs11.existsSync)(manifestPath)) {
         throw new Error(`Missing manifest at ${manifestPath}. Expected .eve/manifest.yaml.`);
       }
       const manifest = readYamlFile(manifestPath);
@@ -73682,9 +73755,9 @@ async function handleAgents(subcommand, positionals, flags, context2) {
         packRefs = packResult.packRefs;
       } else {
         const configPaths = resolveAgentsConfigPaths(repoRoot, manifest);
-        agentsYaml = (0, import_node_fs10.readFileSync)(ensureFileExists(configPaths.agentsPath, "agents config"), "utf-8");
-        teamsYaml = (0, import_node_fs10.readFileSync)(ensureFileExists(configPaths.teamsPath, "teams config"), "utf-8");
-        chatYaml = (0, import_node_fs10.readFileSync)(ensureFileExists(configPaths.chatPath, "chat config"), "utf-8");
+        agentsYaml = (0, import_node_fs11.readFileSync)(ensureFileExists(configPaths.agentsPath, "agents config"), "utf-8");
+        teamsYaml = (0, import_node_fs11.readFileSync)(ensureFileExists(configPaths.teamsPath, "teams config"), "utf-8");
+        chatYaml = (0, import_node_fs11.readFileSync)(ensureFileExists(configPaths.chatPath, "chat config"), "utf-8");
       }
       let gitSha;
       let branch;
@@ -74027,7 +74100,7 @@ function ensureSkillsSymlink2(projectRoot) {
 }
 
 // src/commands/release.ts
-var import_node_fs11 = require("node:fs");
+var import_node_fs12 = require("node:fs");
 var import_node_path12 = require("node:path");
 async function handleRelease2(subcommand, positionals, flags, context2) {
   const json = Boolean(flags.json);
@@ -74042,7 +74115,7 @@ async function handleRelease2(subcommand, positionals, flags, context2) {
         const dir = typeof flags.dir === "string" ? flags.dir : process.cwd();
         const manifestPath = (0, import_node_path12.join)(dir, ".eve", "manifest.yaml");
         try {
-          const yaml = (0, import_node_fs11.readFileSync)(manifestPath, "utf-8");
+          const yaml = (0, import_node_fs12.readFileSync)(manifestPath, "utf-8");
           const projectMatch = yaml.match(/^project:\s*(\S+)/m);
           if (projectMatch) {
             projectId = projectMatch[1];
@@ -74091,7 +74164,7 @@ Make sure the release exists and the tag is correct.`
 }
 
 // src/commands/manifest.ts
-var import_node_fs12 = require("node:fs");
+var import_node_fs13 = require("node:fs");
 var import_node_path13 = require("node:path");
 async function handleManifest(subcommand, positionals, flags, context2) {
   const json = Boolean(flags.json);
@@ -74106,7 +74179,7 @@ async function handleManifest(subcommand, positionals, flags, context2) {
       let manifestYaml;
       if (!useLatest) {
         try {
-          manifestYaml = (0, import_node_fs12.readFileSync)(manifestPath, "utf-8");
+          manifestYaml = (0, import_node_fs13.readFileSync)(manifestPath, "utf-8");
         } catch (error) {
           throw new Error(`Failed to read manifest at ${manifestPath}: ${error.message}`);
         }
@@ -74174,7 +74247,7 @@ async function handleManifest(subcommand, positionals, flags, context2) {
 }
 
 // src/commands/packs.ts
-var import_node_fs13 = require("node:fs");
+var import_node_fs14 = require("node:fs");
 var import_node_path14 = require("node:path");
 var import_yaml4 = require("yaml");
 async function handlePacks(subcommand, _rest, flags, _context) {
@@ -74196,12 +74269,12 @@ async function handlePacks(subcommand, _rest, flags, _context) {
 function printPacksStatus(repoRoot) {
   const lockfilePath = (0, import_node_path14.join)(repoRoot, ".eve", "packs.lock.yaml");
   const manifestPath = (0, import_node_path14.join)(repoRoot, ".eve", "manifest.yaml");
-  if (!(0, import_node_fs13.existsSync)(lockfilePath)) {
+  if (!(0, import_node_fs14.existsSync)(lockfilePath)) {
     console.log("No lockfile found at .eve/packs.lock.yaml");
     console.log('Run "eve agents sync" to resolve packs and generate the lockfile.');
     return;
   }
-  const lockRaw = (0, import_node_fs13.readFileSync)(lockfilePath, "utf-8");
+  const lockRaw = (0, import_node_fs14.readFileSync)(lockfilePath, "utf-8");
   const lock = (0, import_yaml4.parse)(lockRaw);
   if (!lock || !lock.packs) {
     console.log("Lockfile is empty or malformed.");
@@ -74236,8 +74309,8 @@ function printPacksStatus(repoRoot) {
   console.log(`  Agents: ${lock.effective.agents_count}`);
   console.log(`  Teams:  ${lock.effective.teams_count}`);
   console.log(`  Routes: ${lock.effective.routes_count}`);
-  if ((0, import_node_fs13.existsSync)(manifestPath)) {
-    const manifestRaw = (0, import_node_fs13.readFileSync)(manifestPath, "utf-8");
+  if ((0, import_node_fs14.existsSync)(manifestPath)) {
+    const manifestRaw = (0, import_node_fs14.readFileSync)(manifestPath, "utf-8");
     const manifest = (0, import_yaml4.parse)(manifestRaw);
     if (manifest) {
       const xEve = manifest["x-eve"] ?? manifest["x_eve"] ?? {};
@@ -74284,10 +74357,10 @@ function printPacksResolve(repoRoot, dryRun) {
   if (dryRun) {
     const lockfilePath = (0, import_node_path14.join)(repoRoot, ".eve", "packs.lock.yaml");
     const manifestPath = (0, import_node_path14.join)(repoRoot, ".eve", "manifest.yaml");
-    if (!(0, import_node_fs13.existsSync)(manifestPath)) {
+    if (!(0, import_node_fs14.existsSync)(manifestPath)) {
       throw new Error("No manifest found at .eve/manifest.yaml");
     }
-    const manifestRaw = (0, import_node_fs13.readFileSync)(manifestPath, "utf-8");
+    const manifestRaw = (0, import_node_fs14.readFileSync)(manifestPath, "utf-8");
     const manifest = (0, import_yaml4.parse)(manifestRaw);
     if (!manifest) {
       throw new Error("Manifest is empty or malformed.");
@@ -74305,8 +74378,8 @@ function printPacksResolve(repoRoot, dryRun) {
       const refShort = mp.ref ? mp.ref.substring(0, 12) : "(local)";
       console.log(`  - ${mp.source} @ ${refShort}`);
     }
-    if ((0, import_node_fs13.existsSync)(lockfilePath)) {
-      const lockRaw = (0, import_node_fs13.readFileSync)(lockfilePath, "utf-8");
+    if ((0, import_node_fs14.existsSync)(lockfilePath)) {
+      const lockRaw = (0, import_node_fs14.readFileSync)(lockfilePath, "utf-8");
       const lock = (0, import_yaml4.parse)(lockRaw);
       if (lock?.packs) {
         const drift = detectDrift(lock, manifestPacks);
@@ -75196,7 +75269,7 @@ Cursor: ${result.cursor}`);
 }
 
 // src/commands/migrate.ts
-var import_node_fs14 = require("node:fs");
+var import_node_fs15 = require("node:fs");
 var import_node_path15 = require("node:path");
 var import_yaml5 = require("yaml");
 async function handleMigrate2(subcommand, _rest, _flags) {
@@ -75218,11 +75291,11 @@ async function migrateSkillsToPacks() {
     throw new Error("Not in a git repository. Run this from your project root.");
   }
   const skillsTxtPath = (0, import_node_path15.join)(repoRoot, "skills.txt");
-  if (!(0, import_node_fs14.existsSync)(skillsTxtPath)) {
+  if (!(0, import_node_fs15.existsSync)(skillsTxtPath)) {
     console.log("No skills.txt found at repository root. Nothing to migrate.");
     return;
   }
-  const content = (0, import_node_fs14.readFileSync)(skillsTxtPath, "utf-8");
+  const content = (0, import_node_fs15.readFileSync)(skillsTxtPath, "utf-8");
   const lines = content.split("\n");
   const localSources = [];
   const remoteSources = [];
@@ -75360,7 +75433,7 @@ function padRight9(str, width) {
 }
 
 // src/commands/access.ts
-var import_node_fs15 = require("node:fs");
+var import_node_fs16 = require("node:fs");
 var import_node_path16 = require("node:path");
 var readline3 = __toESM(require("node:readline/promises"));
 var import_yaml6 = require("yaml");
@@ -76124,10 +76197,10 @@ function resolveFilePath(flags) {
   return (0, import_node_path16.resolve)(process.cwd(), filePath);
 }
 function loadAccessYaml(filePath) {
-  if (!(0, import_node_fs15.existsSync)(filePath)) {
+  if (!(0, import_node_fs16.existsSync)(filePath)) {
     throw new Error(`File not found: ${filePath}`);
   }
-  const raw = (0, import_node_fs15.readFileSync)(filePath, "utf-8");
+  const raw = (0, import_node_fs16.readFileSync)(filePath, "utf-8");
   let parsed;
   try {
     parsed = (0, import_yaml6.parse)(raw);
@@ -77095,7 +77168,7 @@ Sync complete: ${parts.join(", ")}`);
 }
 
 // src/commands/docs.ts
-var import_node_fs16 = require("node:fs");
+var import_node_fs17 = require("node:fs");
 var import_node_path17 = require("node:path");
 function encodeDocPathParam(path7) {
   const trimmed = path7.startsWith("/") ? path7.slice(1) : path7;
@@ -77171,9 +77244,9 @@ async function handleDocs(subcommand, positionals, flags, context2) {
       const filePath = getStringFlag(flags, ["file"]);
       const useStdin = flags.stdin === true || flags.stdin === "true";
       if (filePath) {
-        content = (0, import_node_fs16.readFileSync)((0, import_node_path17.resolve)(filePath), "utf-8");
+        content = (0, import_node_fs17.readFileSync)((0, import_node_path17.resolve)(filePath), "utf-8");
       } else if (useStdin) {
-        content = (0, import_node_fs16.readFileSync)(0, "utf-8");
+        content = (0, import_node_fs17.readFileSync)(0, "utf-8");
       } else {
         throw new Error("Provide --file <path> or --stdin to supply document content");
       }
@@ -77411,7 +77484,7 @@ async function handleDocs(subcommand, positionals, flags, context2) {
 }
 
 // src/commands/memory.ts
-var import_node_fs17 = require("node:fs");
+var import_node_fs18 = require("node:fs");
 var import_node_path18 = require("node:path");
 function parseCsv(raw) {
   if (!raw) return [];
@@ -77471,9 +77544,9 @@ async function handleMemory(subcommand, positionals, flags, context2) {
       if (contentInline !== void 0) {
         content = contentInline;
       } else if (filePath) {
-        content = (0, import_node_fs17.readFileSync)((0, import_node_path18.resolve)(filePath), "utf-8");
+        content = (0, import_node_fs18.readFileSync)((0, import_node_path18.resolve)(filePath), "utf-8");
       } else if (useStdin) {
-        content = (0, import_node_fs17.readFileSync)(0, "utf-8");
+        content = (0, import_node_fs18.readFileSync)(0, "utf-8");
       } else {
         throw new Error("Provide --file <path>, --stdin, or --content <text>");
       }
@@ -78594,7 +78667,7 @@ async function handleOllama(subcommand, positionals, flags, context2) {
 
 // src/commands/fs.ts
 var import_promises = require("node:fs/promises");
-var import_node_fs18 = require("node:fs");
+var import_node_fs19 = require("node:fs");
 var import_node_os5 = require("node:os");
 function getOrgOrThrow(flags, context2) {
   const orgId = getStringFlag(flags, ["org", "org-id", "org_id"]) ?? context2.orgId;
@@ -78838,7 +78911,7 @@ async function handleSync2(action, positionals, flags, context2) {
       for (const link of links.data) {
         let writable = false;
         try {
-          await (0, import_promises.access)(link.local_path, import_node_fs18.constants.R_OK | import_node_fs18.constants.W_OK);
+          await (0, import_promises.access)(link.local_path, import_node_fs19.constants.R_OK | import_node_fs19.constants.W_OK);
           writable = true;
         } catch {
           writable = false;
@@ -78871,7 +78944,7 @@ async function handleFs(subcommand, positionals, flags, context2) {
 }
 
 // src/commands/local.ts
-var import_node_fs19 = require("node:fs");
+var import_node_fs20 = require("node:fs");
 var import_node_crypto = require("node:crypto");
 var import_node_child_process10 = require("node:child_process");
 var import_node_os6 = require("node:os");
@@ -79289,7 +79362,7 @@ async function ensureManagedTool(tool, runtimeOptions) {
   if (findExecutable(tool)) {
     return;
   }
-  (0, import_node_fs19.mkdirSync)(MANAGED_BIN_DIR, { recursive: true });
+  (0, import_node_fs20.mkdirSync)(MANAGED_BIN_DIR, { recursive: true });
   if (tool === "k3d") {
     printProgress(runtimeOptions, `Installing k3d ${K3D_VERSION} into ${MANAGED_BIN_DIR}...`);
     await installK3dBinary();
@@ -79370,9 +79443,9 @@ async function fetchText(url, headers) {
 }
 function writeExecutable(destination, bytes) {
   const tempPath = `${destination}.tmp-${Date.now()}-${process.pid}`;
-  (0, import_node_fs19.writeFileSync)(tempPath, bytes);
-  (0, import_node_fs19.chmodSync)(tempPath, 493);
-  (0, import_node_fs19.renameSync)(tempPath, destination);
+  (0, import_node_fs20.writeFileSync)(tempPath, bytes);
+  (0, import_node_fs20.chmodSync)(tempPath, 493);
+  (0, import_node_fs20.renameSync)(tempPath, destination);
 }
 async function ensureClusterReady(runtimeOptions) {
   const k3d = requireToolPath("k3d", "Run 'eve local up' again to auto-install managed tools.");
@@ -79522,8 +79595,8 @@ function importImageViaTar(docker, k3d, imageTag, component, stdio) {
     run(docker, ["image", "save", "--platform", "linux/amd64", imageTag, "-o", tarPath], { stdio });
     run(k3d, ["image", "import", "--mode", "direct", tarPath, "-c", DEFAULT_CLUSTER_NAME], { stdio });
   } finally {
-    if ((0, import_node_fs19.existsSync)(tarPath)) {
-      (0, import_node_fs19.unlinkSync)(tarPath);
+    if ((0, import_node_fs20.existsSync)(tarPath)) {
+      (0, import_node_fs20.unlinkSync)(tarPath);
     }
   }
 }
@@ -79796,7 +79869,7 @@ function assertLocalAssetsPresent() {
     (0, import_node_path19.join)(LOCAL_STACK_BASE, "auth-bootstrap-job.yaml")
   ];
   for (const file of files) {
-    if (!(0, import_node_fs19.existsSync)(file)) {
+    if (!(0, import_node_fs20.existsSync)(file)) {
       throw new Error(
         `Missing local stack assets at ${file}. Reinstall the CLI or ensure package assets were published.`
       );
@@ -79884,7 +79957,7 @@ function parseTimeoutSeconds(flags, defaultValue) {
 }
 function run(command, args, options = {}) {
   const env = { ...process.env };
-  if ((0, import_node_fs19.existsSync)(MANAGED_BIN_DIR)) {
+  if ((0, import_node_fs20.existsSync)(MANAGED_BIN_DIR)) {
     env.PATH = `${MANAGED_BIN_DIR}:${env.PATH ?? ""}`;
   }
   const result = (0, import_node_child_process10.spawnSync)(command, args, {
@@ -79905,7 +79978,7 @@ function run(command, args, options = {}) {
 }
 function findExecutable(name) {
   const managed = (0, import_node_path19.join)(MANAGED_BIN_DIR, name);
-  if ((0, import_node_fs19.existsSync)(managed)) {
+  if ((0, import_node_fs20.existsSync)(managed)) {
     return managed;
   }
   const found = (0, import_node_child_process10.spawnSync)("which", [name], {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eve-horizon/cli",
-  "version": "0.2.34",
+  "version": "0.2.35",
   "description": "Eve Horizon CLI",
   "license": "MIT",
   "repository": {