@eve-horizon/cli 0.2.34 → 0.2.36

package/dist/index.js

@@ -8750,9 +8750,9 @@ var require_src3 = __commonJS({
 var require_module_details_from_path = __commonJS({
   "../../node_modules/.pnpm/module-details-from-path@1.0.4/node_modules/module-details-from-path/index.js"(exports2, module2) {
     "use strict";
-    var sep = require("path").sep;
+    var sep2 = require("path").sep;
     module2.exports = function(file) {
-      var segments = file.split(sep);
+      var segments = file.split(sep2);
       var index = segments.lastIndexOf("node_modules");
       if (index === -1) return;
       if (!segments[index + 1]) return;
@@ -8765,22 +8765,22 @@ var require_module_details_from_path = __commonJS({
         if (i === lastBaseDirSegmentIndex) {
           basedir += segments[i];
         } else {
-          basedir += segments[i] + sep;
+          basedir += segments[i] + sep2;
         }
       }
-      var path7 = "";
+      var path8 = "";
       var lastSegmentIndex = segments.length - 1;
       for (var i2 = index + offset; i2 <= lastSegmentIndex; i2++) {
         if (i2 === lastSegmentIndex) {
-          path7 += segments[i2];
+          path8 += segments[i2];
         } else {
-          path7 += segments[i2] + sep;
+          path8 += segments[i2] + sep2;
         }
       }
       return {
         name,
         basedir,
-        path: path7
+        path: path8
       };
     };
   }
@@ -8886,8 +8886,8 @@ var require_path_parse = __commonJS({
 // ../../node_modules/.pnpm/resolve@1.22.11/node_modules/resolve/lib/node-modules-paths.js
 var require_node_modules_paths = __commonJS({
   "../../node_modules/.pnpm/resolve@1.22.11/node_modules/resolve/lib/node-modules-paths.js"(exports2, module2) {
-    var path7 = require("path");
-    var parse3 = path7.parse || require_path_parse();
+    var path8 = require("path");
+    var parse3 = path8.parse || require_path_parse();
     var driveLetterRegex = /^([A-Za-z]:)/;
     var uncPathRegex = /^\\\\/;
     var getNodeModulesDirs = function getNodeModulesDirs2(absoluteStart, modules) {
@@ -8905,7 +8905,7 @@ var require_node_modules_paths = __commonJS({
       }
       return paths.reduce(function(dirs, aPath) {
         return dirs.concat(modules.map(function(moduleDir) {
-          return path7.resolve(prefix, aPath, moduleDir);
+          return path8.resolve(prefix, aPath, moduleDir);
         }));
       }, []);
     };
@@ -9266,26 +9266,26 @@ var require_is_core_module = __commonJS({
 // ../../node_modules/.pnpm/resolve@1.22.11/node_modules/resolve/lib/async.js
 var require_async = __commonJS({
   "../../node_modules/.pnpm/resolve@1.22.11/node_modules/resolve/lib/async.js"(exports2, module2) {
-    var fs5 = require("fs");
+    var fs6 = require("fs");
     var getHomedir = require_homedir();
-    var path7 = require("path");
+    var path8 = require("path");
     var caller = require_caller();
     var nodeModulesPaths = require_node_modules_paths();
     var normalizeOptions = require_normalize_options();
     var isCore = require_is_core_module();
-    var realpathFS = process.platform !== "win32" && fs5.realpath && typeof fs5.realpath.native === "function" ? fs5.realpath.native : fs5.realpath;
+    var realpathFS = process.platform !== "win32" && fs6.realpath && typeof fs6.realpath.native === "function" ? fs6.realpath.native : fs6.realpath;
     var relativePathRegex = /^(?:\.\.?(?:\/|$)|\/|([A-Za-z]:)?[/\\])/;
     var windowsDriveRegex = /^\w:[/\\]*$/;
     var nodeModulesRegex = /[/\\]node_modules[/\\]*$/;
     var homedir6 = getHomedir();
     var defaultPaths = function() {
       return [
-        path7.join(homedir6, ".node_modules"),
-        path7.join(homedir6, ".node_libraries")
+        path8.join(homedir6, ".node_modules"),
+        path8.join(homedir6, ".node_libraries")
       ];
     };
     var defaultIsFile = function isFile(file, cb) {
-      fs5.stat(file, function(err, stat) {
+      fs6.stat(file, function(err, stat) {
         if (!err) {
           return cb(null, stat.isFile() || stat.isFIFO());
         }
@@ -9294,7 +9294,7 @@ var require_async = __commonJS({
       });
     };
     var defaultIsDir = function isDirectory(dir, cb) {
-      fs5.stat(dir, function(err, stat) {
+      fs6.stat(dir, function(err, stat) {
         if (!err) {
           return cb(null, stat.isDirectory());
         }
@@ -9331,7 +9331,7 @@ var require_async = __commonJS({
     var getPackageCandidates = function getPackageCandidates2(x, start, opts) {
       var dirs = nodeModulesPaths(start, opts, x);
       for (var i = 0; i < dirs.length; i++) {
-        dirs[i] = path7.join(dirs[i], x);
+        dirs[i] = path8.join(dirs[i], x);
       }
       return dirs;
     };
@@ -9351,7 +9351,7 @@ var require_async = __commonJS({
       opts = normalizeOptions(x, opts);
       var isFile = opts.isFile || defaultIsFile;
       var isDirectory = opts.isDirectory || defaultIsDir;
-      var readFile = opts.readFile || fs5.readFile;
+      var readFile = opts.readFile || fs6.readFile;
       var realpath = opts.realpath || defaultRealpath;
       var readPackage = opts.readPackage || defaultReadPackage;
       if (opts.readFile && opts.readPackage) {
@@ -9363,10 +9363,10 @@ var require_async = __commonJS({
       var packageIterator = opts.packageIterator;
       var extensions = opts.extensions || [".js"];
       var includeCoreModules = opts.includeCoreModules !== false;
-      var basedir = opts.basedir || path7.dirname(caller());
+      var basedir = opts.basedir || path8.dirname(caller());
       var parent = opts.filename || basedir;
       opts.paths = opts.paths || defaultPaths();
-      var absoluteStart = path7.resolve(basedir);
+      var absoluteStart = path8.resolve(basedir);
       maybeRealpath(
         realpath,
         absoluteStart,
@@ -9379,7 +9379,7 @@ var require_async = __commonJS({
       var res;
       function init(basedir2) {
         if (relativePathRegex.test(x)) {
-          res = path7.resolve(basedir2, x);
+          res = path8.resolve(basedir2, x);
           if (x === "." || x === ".." || x.slice(-1) === "/") res += "/";
           if (x.slice(-1) === "/" && res === basedir2) {
             loadAsDirectory(res, opts.package, onfile);
@@ -9437,17 +9437,17 @@ var require_async = __commonJS({
           var file = x3 + exts2[0];
           var pkg = loadPackage;
           if (pkg) onpkg(null, pkg);
-          else loadpkg(path7.dirname(file), onpkg);
+          else loadpkg(path8.dirname(file), onpkg);
           function onpkg(err2, pkg_, dir) {
             pkg = pkg_;
             if (err2) return cb2(err2);
             if (dir && pkg && opts.pathFilter) {
-              var rfile = path7.relative(dir, file);
+              var rfile = path8.relative(dir, file);
               var rel = rfile.slice(0, rfile.length - exts2[0].length);
               var r = opts.pathFilter(pkg, x3, rel);
               if (r) return load(
                 [""].concat(extensions.slice()),
-                path7.resolve(dir, r),
+                path8.resolve(dir, r),
                 pkg
               );
             }
@@ -9467,10 +9467,10 @@ var require_async = __commonJS({
         }
         if (nodeModulesRegex.test(dir)) return cb2(null);
         maybeRealpath(realpath, dir, opts, function(unwrapErr, pkgdir) {
-          if (unwrapErr) return loadpkg(path7.dirname(dir), cb2);
-          var pkgfile = path7.join(pkgdir, "package.json");
+          if (unwrapErr) return loadpkg(path8.dirname(dir), cb2);
+          var pkgfile = path8.join(pkgdir, "package.json");
           isFile(pkgfile, function(err2, ex) {
-            if (!ex) return loadpkg(path7.dirname(dir), cb2);
+            if (!ex) return loadpkg(path8.dirname(dir), cb2);
             readPackage(readFile, pkgfile, function(err3, pkgParam) {
               if (err3) cb2(err3);
               var pkg = pkgParam;
@@ -9491,10 +9491,10 @@ var require_async = __commonJS({
         }
         maybeRealpath(realpath, x2, opts, function(unwrapErr, pkgdir) {
           if (unwrapErr) return cb2(unwrapErr);
-          var pkgfile = path7.join(pkgdir, "package.json");
+          var pkgfile = path8.join(pkgdir, "package.json");
           isFile(pkgfile, function(err2, ex) {
             if (err2) return cb2(err2);
-            if (!ex) return loadAsFile(path7.join(x2, "index"), fpkg, cb2);
+            if (!ex) return loadAsFile(path8.join(x2, "index"), fpkg, cb2);
             readPackage(readFile, pkgfile, function(err3, pkgParam) {
               if (err3) return cb2(err3);
               var pkg = pkgParam;
@@ -9510,20 +9510,20 @@ var require_async = __commonJS({
                 if (pkg.main === "." || pkg.main === "./") {
                   pkg.main = "index";
                 }
-                loadAsFile(path7.resolve(x2, pkg.main), pkg, function(err4, m, pkg2) {
+                loadAsFile(path8.resolve(x2, pkg.main), pkg, function(err4, m, pkg2) {
                   if (err4) return cb2(err4);
                   if (m) return cb2(null, m, pkg2);
-                  if (!pkg2) return loadAsFile(path7.join(x2, "index"), pkg2, cb2);
-                  var dir = path7.resolve(x2, pkg2.main);
+                  if (!pkg2) return loadAsFile(path8.join(x2, "index"), pkg2, cb2);
+                  var dir = path8.resolve(x2, pkg2.main);
                   loadAsDirectory(dir, pkg2, function(err5, n, pkg3) {
                     if (err5) return cb2(err5);
                     if (n) return cb2(null, n, pkg3);
-                    loadAsFile(path7.join(x2, "index"), pkg3, cb2);
+                    loadAsFile(path8.join(x2, "index"), pkg3, cb2);
                   });
                 });
                 return;
               }
-              loadAsFile(path7.join(x2, "/index"), pkg, cb2);
+              loadAsFile(path8.join(x2, "/index"), pkg, cb2);
             });
           });
         });
@@ -9531,7 +9531,7 @@ var require_async = __commonJS({
       function processDirs(cb2, dirs) {
         if (dirs.length === 0) return cb2(null, void 0);
         var dir = dirs[0];
-        isDirectory(path7.dirname(dir), isdir);
+        isDirectory(path8.dirname(dir), isdir);
         function isdir(err2, isdir2) {
           if (err2) return cb2(err2);
           if (!isdir2) return processDirs(cb2, dirs.slice(1));
@@ -9760,26 +9760,26 @@ var require_is_core = __commonJS({
 var require_sync = __commonJS({
   "../../node_modules/.pnpm/resolve@1.22.11/node_modules/resolve/lib/sync.js"(exports2, module2) {
     var isCore = require_is_core_module();
-    var fs5 = require("fs");
-    var path7 = require("path");
+    var fs6 = require("fs");
+    var path8 = require("path");
     var getHomedir = require_homedir();
     var caller = require_caller();
     var nodeModulesPaths = require_node_modules_paths();
     var normalizeOptions = require_normalize_options();
-    var realpathFS = process.platform !== "win32" && fs5.realpathSync && typeof fs5.realpathSync.native === "function" ? fs5.realpathSync.native : fs5.realpathSync;
+    var realpathFS = process.platform !== "win32" && fs6.realpathSync && typeof fs6.realpathSync.native === "function" ? fs6.realpathSync.native : fs6.realpathSync;
     var relativePathRegex = /^(?:\.\.?(?:\/|$)|\/|([A-Za-z]:)?[/\\])/;
     var windowsDriveRegex = /^\w:[/\\]*$/;
     var nodeModulesRegex = /[/\\]node_modules[/\\]*$/;
     var homedir6 = getHomedir();
     var defaultPaths = function() {
       return [
-        path7.join(homedir6, ".node_modules"),
-        path7.join(homedir6, ".node_libraries")
+        path8.join(homedir6, ".node_modules"),
+        path8.join(homedir6, ".node_libraries")
       ];
     };
     var defaultIsFile = function isFile(file) {
       try {
-        var stat = fs5.statSync(file, { throwIfNoEntry: false });
+        var stat = fs6.statSync(file, { throwIfNoEntry: false });
       } catch (e) {
         if (e && (e.code === "ENOENT" || e.code === "ENOTDIR")) return false;
         throw e;
@@ -9788,7 +9788,7 @@ var require_sync = __commonJS({
     };
     var defaultIsDir = function isDirectory(dir) {
       try {
-        var stat = fs5.statSync(dir, { throwIfNoEntry: false });
+        var stat = fs6.statSync(dir, { throwIfNoEntry: false });
       } catch (e) {
         if (e && (e.code === "ENOENT" || e.code === "ENOTDIR")) return false;
         throw e;
@@ -9811,8 +9811,8 @@ var require_sync = __commonJS({
       }
       return x;
     };
-    var defaultReadPackageSync = function defaultReadPackageSync2(readFileSync23, pkgfile) {
-      var body = readFileSync23(pkgfile);
+    var defaultReadPackageSync = function defaultReadPackageSync2(readFileSync24, pkgfile) {
+      var body = readFileSync24(pkgfile);
       try {
         var pkg = JSON.parse(body);
         return pkg;
@@ -9822,7 +9822,7 @@ var require_sync = __commonJS({
     var getPackageCandidates = function getPackageCandidates2(x, start, opts) {
       var dirs = nodeModulesPaths(start, opts, x);
       for (var i = 0; i < dirs.length; i++) {
-        dirs[i] = path7.join(dirs[i], x);
+        dirs[i] = path8.join(dirs[i], x);
       }
       return dirs;
     };
@@ -9832,7 +9832,7 @@ var require_sync = __commonJS({
       }
       var opts = normalizeOptions(x, options);
       var isFile = opts.isFile || defaultIsFile;
-      var readFileSync23 = opts.readFileSync || fs5.readFileSync;
+      var readFileSync24 = opts.readFileSync || fs6.readFileSync;
       var isDirectory = opts.isDirectory || defaultIsDir;
       var realpathSync = opts.realpathSync || defaultRealpathSync;
       var readPackageSync = opts.readPackageSync || defaultReadPackageSync;
@@ -9842,12 +9842,12 @@ var require_sync = __commonJS({
       var packageIterator = opts.packageIterator;
       var extensions = opts.extensions || [".js"];
       var includeCoreModules = opts.includeCoreModules !== false;
-      var basedir = opts.basedir || path7.dirname(caller());
+      var basedir = opts.basedir || path8.dirname(caller());
       var parent = opts.filename || basedir;
       opts.paths = opts.paths || defaultPaths();
-      var absoluteStart = maybeRealpathSync(realpathSync, path7.resolve(basedir), opts);
+      var absoluteStart = maybeRealpathSync(realpathSync, path8.resolve(basedir), opts);
       if (relativePathRegex.test(x)) {
-        var res = path7.resolve(absoluteStart, x);
+        var res = path8.resolve(absoluteStart, x);
         if (x === "." || x === ".." || x.slice(-1) === "/") res += "/";
         var m = loadAsFileSync(res) || loadAsDirectorySync(res);
         if (m) return maybeRealpathSync(realpathSync, m, opts);
@@ -9861,12 +9861,12 @@ var require_sync = __commonJS({
       err.code = "MODULE_NOT_FOUND";
       throw err;
       function loadAsFileSync(x2) {
-        var pkg = loadpkg(path7.dirname(x2));
+        var pkg = loadpkg(path8.dirname(x2));
         if (pkg && pkg.dir && pkg.pkg && opts.pathFilter) {
-          var rfile = path7.relative(pkg.dir, x2);
+          var rfile = path8.relative(pkg.dir, x2);
           var r = opts.pathFilter(pkg.pkg, x2, rfile);
           if (r) {
-            x2 = path7.resolve(pkg.dir, r);
+            x2 = path8.resolve(pkg.dir, r);
           }
         }
         if (isFile(x2)) {
@@ -9885,11 +9885,11 @@ var require_sync = __commonJS({
           return;
         }
         if (nodeModulesRegex.test(dir)) return;
-        var pkgfile = path7.join(maybeRealpathSync(realpathSync, dir, opts), "package.json");
+        var pkgfile = path8.join(maybeRealpathSync(realpathSync, dir, opts), "package.json");
         if (!isFile(pkgfile)) {
-          return loadpkg(path7.dirname(dir));
+          return loadpkg(path8.dirname(dir));
         }
-        var pkg = readPackageSync(readFileSync23, pkgfile);
+        var pkg = readPackageSync(readFileSync24, pkgfile);
         if (pkg && opts.packageFilter) {
           pkg = opts.packageFilter(
             pkg,
@@ -9900,10 +9900,10 @@ var require_sync = __commonJS({
         return { pkg, dir };
       }
       function loadAsDirectorySync(x2) {
-        var pkgfile = path7.join(maybeRealpathSync(realpathSync, x2, opts), "/package.json");
+        var pkgfile = path8.join(maybeRealpathSync(realpathSync, x2, opts), "/package.json");
         if (isFile(pkgfile)) {
           try {
-            var pkg = readPackageSync(readFileSync23, pkgfile);
+            var pkg = readPackageSync(readFileSync24, pkgfile);
           } catch (e) {
           }
           if (pkg && opts.packageFilter) {
@@ -9923,15 +9923,15 @@ var require_sync = __commonJS({
               pkg.main = "index";
             }
             try {
-              var m2 = loadAsFileSync(path7.resolve(x2, pkg.main));
+              var m2 = loadAsFileSync(path8.resolve(x2, pkg.main));
               if (m2) return m2;
-              var n2 = loadAsDirectorySync(path7.resolve(x2, pkg.main));
+              var n2 = loadAsDirectorySync(path8.resolve(x2, pkg.main));
               if (n2) return n2;
             } catch (e) {
             }
           }
         }
-        return loadAsFileSync(path7.join(x2, "/index"));
+        return loadAsFileSync(path8.join(x2, "/index"));
       }
       function loadNodeModulesSync(x2, start) {
         var thunk = function() {
@@ -9940,7 +9940,7 @@ var require_sync = __commonJS({
         var dirs = packageIterator ? packageIterator(x2, start, thunk, opts) : thunk();
         for (var i = 0; i < dirs.length; i++) {
           var dir = dirs[i];
-          if (isDirectory(path7.dirname(dir))) {
+          if (isDirectory(path8.dirname(dir))) {
             var m2 = loadAsFileSync(dir);
             if (m2) return m2;
             var n2 = loadAsDirectorySync(dir);
@@ -10031,7 +10031,7 @@ var require_package = __commonJS({
 var require_require_in_the_middle = __commonJS({
   "../../node_modules/.pnpm/require-in-the-middle@7.5.2/node_modules/require-in-the-middle/index.js"(exports2, module2) {
     "use strict";
-    var path7 = require("path");
+    var path8 = require("path");
     var Module = require("module");
     var debug = require_src3()("require-in-the-middle");
     var moduleDetailsFromPath = require_module_details_from_path();
@@ -10205,7 +10205,7 @@ var require_require_in_the_middle = __commonJS({
           }
           moduleName = filename;
         } else if (hasWhitelist === true && modules.includes(filename)) {
-          const parsedPath = path7.parse(filename);
+          const parsedPath = path8.parse(filename);
           moduleName = parsedPath.name;
           basedir = parsedPath.dir;
         } else {
@@ -10243,7 +10243,7 @@ var require_require_in_the_middle = __commonJS({
             }
             if (res !== filename) {
               if (internals === true) {
-                moduleName = moduleName + path7.sep + path7.relative(basedir, filename);
+                moduleName = moduleName + path8.sep + path8.relative(basedir, filename);
                 debug("preparing to process require of internal file: %s", moduleName);
               } else {
                 debug("ignoring require of non-main module file: %s", res);
@@ -10279,8 +10279,8 @@ var require_require_in_the_middle = __commonJS({
       }
     };
     function resolveModuleName(stat) {
-      const normalizedPath = path7.sep !== "/" ? stat.path.split(path7.sep).join("/") : stat.path;
-      return path7.posix.join(stat.name, normalizedPath).replace(normalize2, "");
+      const normalizedPath = path8.sep !== "/" ? stat.path.split(path8.sep).join("/") : stat.path;
+      return path8.posix.join(stat.name, normalizedPath).replace(normalize2, "");
     }
   }
 });
@@ -10369,7 +10369,7 @@ var require_RequireInTheMiddleSingleton = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.RequireInTheMiddleSingleton = void 0;
     var require_in_the_middle_1 = require_require_in_the_middle();
-    var path7 = require("path");
+    var path8 = require("path");
     var ModuleNameTrie_1 = require_ModuleNameTrie();
     var isMocha = [
       "afterEach",
@@ -10433,7 +10433,7 @@ var require_RequireInTheMiddleSingleton = __commonJS({
     };
     exports2.RequireInTheMiddleSingleton = RequireInTheMiddleSingleton;
     function normalizePathSeparators(moduleNameOrPath) {
-      return path7.sep !== ModuleNameTrie_1.ModuleNameSeparator ? moduleNameOrPath.split(path7.sep).join(ModuleNameTrie_1.ModuleNameSeparator) : moduleNameOrPath;
+      return path8.sep !== ModuleNameTrie_1.ModuleNameSeparator ? moduleNameOrPath.split(path8.sep).join(ModuleNameTrie_1.ModuleNameSeparator) : moduleNameOrPath;
     }
   }
 });
@@ -10493,7 +10493,7 @@ var require_register = __commonJS({
 // ../../node_modules/.pnpm/import-in-the-middle@1.15.0/node_modules/import-in-the-middle/index.js
 var require_import_in_the_middle = __commonJS({
   "../../node_modules/.pnpm/import-in-the-middle@1.15.0/node_modules/import-in-the-middle/index.js"(exports2, module2) {
-    var path7 = require("path");
+    var path8 = require("path");
     var parse3 = require_module_details_from_path();
     var { fileURLToPath } = require("url");
     var { MessageChannel } = require("worker_threads");
@@ -10589,7 +10589,7 @@ var require_import_in_the_middle = __commonJS({
             if (moduleName === name) {
               if (baseDir) {
                 if (internals) {
-                  name = name + path7.sep + path7.relative(baseDir, fileURLToPath(filename));
+                  name = name + path8.sep + path8.relative(baseDir, fileURLToPath(filename));
                 } else {
                   if (!getExperimentalPatchInternals() && !baseDir.endsWith(specifiers.get(filename))) continue;
                 }
@@ -10665,7 +10665,7 @@ var require_instrumentation2 = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.InstrumentationBase = void 0;
-    var path7 = require("path");
+    var path8 = require("path");
     var util_1 = require("util");
     var semver_1 = require_semver2();
     var shimmer_1 = require_shimmer();
@@ -10762,7 +10762,7 @@ var require_instrumentation2 = __commonJS({
       }
       _extractPackageVersion(baseDir) {
         try {
-          const json = (0, fs_1.readFileSync)(path7.join(baseDir, "package.json"), {
+          const json = (0, fs_1.readFileSync)(path8.join(baseDir, "package.json"), {
             encoding: "utf8"
           });
           const version2 = JSON.parse(json).version;
@@ -10805,7 +10805,7 @@ var require_instrumentation2 = __commonJS({
           return exports3;
         }
         const files = (_a = module3.files) !== null && _a !== void 0 ? _a : [];
-        const normalizedName = path7.normalize(name);
+        const normalizedName = path8.normalize(name);
         const supportedFileInstrumentations = files.filter((f) => f.name === normalizedName).filter((f) => isSupported(f.supportedVersions, version2, module3.includePrerelease));
         return supportedFileInstrumentations.reduce((patchedExports, file) => {
           file.moduleExports = patchedExports;
@@ -10851,8 +10851,8 @@ var require_instrumentation2 = __commonJS({
         this._warnOnPreloadedModules();
         for (const module3 of this._modules) {
           const hookFn = (exports3, name, baseDir) => {
-            if (!baseDir && path7.isAbsolute(name)) {
-              const parsedPath = path7.parse(name);
+            if (!baseDir && path8.isAbsolute(name)) {
+              const parsedPath = path8.parse(name);
               name = parsedPath.name;
               baseDir = parsedPath.dir;
             }
@@ -10861,7 +10861,7 @@ var require_instrumentation2 = __commonJS({
           const onRequire = (exports3, name, baseDir) => {
             return this._onRequire(module3, exports3, name, baseDir);
           };
-          const hook = path7.isAbsolute(module3.name) ? new require_in_the_middle_1.Hook([module3.name], { internals: true }, onRequire) : this._requireInTheMiddleSingleton.register(module3.name, onRequire);
+          const hook = path8.isAbsolute(module3.name) ? new require_in_the_middle_1.Hook([module3.name], { internals: true }, onRequire) : this._requireInTheMiddleSingleton.register(module3.name, onRequire);
           this._hooks.push(hook);
           const esmHook = new import_in_the_middle_1.Hook([module3.name], { internals: false }, hookFn);
           this._hooks.push(esmHook);
@@ -18108,8 +18108,8 @@ var require_instrumentation3 = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.AwsLambdaInstrumentation = exports2.lambdaMaxInitInMilliseconds = void 0;
-    var path7 = require("path");
-    var fs5 = require("fs");
+    var path8 = require("path");
+    var fs6 = require("fs");
     var instrumentation_1 = require_src4();
     var api_1 = (init_esm(), __toCommonJS(esm_exports));
     var semantic_conventions_1 = (init_esm3(), __toCommonJS(esm_exports3));
@@ -18136,21 +18136,21 @@ var require_instrumentation3 = __commonJS({
           this._diag.debug("Skipping lambda instrumentation: no _HANDLER/lambdaHandler or LAMBDA_TASK_ROOT.", { taskRoot, handlerDef });
           return [];
         }
-        const handler = path7.basename(handlerDef);
+        const handler = path8.basename(handlerDef);
         const moduleRoot = handlerDef.substr(0, handlerDef.length - handler.length);
         const [module3, functionName] = handler.split(".", 2);
-        let filename = path7.resolve(taskRoot, moduleRoot, module3);
+        let filename = path8.resolve(taskRoot, moduleRoot, module3);
         if (!filename.endsWith(".js")) {
           try {
-            fs5.statSync(`${filename}.js`);
+            fs6.statSync(`${filename}.js`);
             filename += ".js";
           } catch (e) {
             try {
-              fs5.statSync(`${filename}.mjs`);
+              fs6.statSync(`${filename}.mjs`);
               filename += ".mjs";
             } catch (e2) {
               try {
-                fs5.statSync(`${filename}.cjs`);
+                fs6.statSync(`${filename}.cjs`);
                 filename += ".cjs";
               } catch (e3) {
                 this._diag.warn("No handler file was able to resolved with one of the known extensions for the file", filename);
@@ -21306,16 +21306,16 @@ var require_utils7 = __commonJS({
       request[internal_types_1._LAYERS_STORE_PROPERTY].push(value);
     };
     exports2.storeLayerPath = storeLayerPath;
-    var getRouterPath = (path7, layer) => {
+    var getRouterPath = (path8, layer) => {
       var _a, _b, _c, _d;
       const stackLayer = (_b = (_a = layer.handle) === null || _a === void 0 ? void 0 : _a.stack) === null || _b === void 0 ? void 0 : _b[0];
       if ((_c = stackLayer === null || stackLayer === void 0 ? void 0 : stackLayer.route) === null || _c === void 0 ? void 0 : _c.path) {
-        return `${path7}${stackLayer.route.path}`;
+        return `${path8}${stackLayer.route.path}`;
       }
       if ((_d = stackLayer === null || stackLayer === void 0 ? void 0 : stackLayer.handle) === null || _d === void 0 ? void 0 : _d.stack) {
-        return (0, exports2.getRouterPath)(path7, stackLayer);
+        return (0, exports2.getRouterPath)(path8, stackLayer);
       }
-      return path7;
+      return path8;
     };
     exports2.getRouterPath = getRouterPath;
     var getLayerMetadata = (route, layer, layerPath) => {
@@ -21515,7 +21515,7 @@ var require_instrumentation10 = __commonJS({
             return original;
           const patched = function(req, res) {
             (0, utils_1.storeLayerPath)(req, layerPath);
-            const route = req[internal_types_1._LAYERS_STORE_PROPERTY].filter((path7) => path7 !== "/" && path7 !== "/*").join("").replace(/\/{2,}/g, "/");
+            const route = req[internal_types_1._LAYERS_STORE_PROPERTY].filter((path8) => path8 !== "/" && path8 !== "/*").join("").replace(/\/{2,}/g, "/");
             const attributes = {
               [semantic_conventions_1.SEMATTRS_HTTP_ROUTE]: route.length > 0 ? route : "/"
             };
@@ -22154,19 +22154,19 @@ var require_utils9 = __commonJS({
       }
     }
     exports2.splitTwoLevels = splitTwoLevels;
-    function indexFs(fs5, member) {
+    function indexFs(fs6, member) {
       if (!member)
         throw new Error(JSON.stringify({ member }));
       const splitResult = splitTwoLevels(member);
       const [functionName1, functionName2] = splitResult;
       if (functionName2) {
         return {
-          objectToPatch: fs5[functionName1],
+          objectToPatch: fs6[functionName1],
           functionNameToPatch: functionName2
         };
       } else {
         return {
-          objectToPatch: fs5,
+          objectToPatch: fs6,
           functionNameToPatch: functionName1
         };
       }
@@ -22197,16 +22197,16 @@ var require_instrumentation12 = __commonJS({
       }
       init() {
         return [
-          new instrumentation_1.InstrumentationNodeModuleDefinition("fs", ["*"], (fs5) => {
+          new instrumentation_1.InstrumentationNodeModuleDefinition("fs", ["*"], (fs6) => {
             for (const fName of constants_1.SYNC_FUNCTIONS) {
-              const { objectToPatch, functionNameToPatch } = (0, utils_1.indexFs)(fs5, fName);
+              const { objectToPatch, functionNameToPatch } = (0, utils_1.indexFs)(fs6, fName);
               if ((0, instrumentation_1.isWrapped)(objectToPatch[functionNameToPatch])) {
                 this._unwrap(objectToPatch, functionNameToPatch);
               }
               this._wrap(objectToPatch, functionNameToPatch, this._patchSyncFunction.bind(this, fName));
             }
             for (const fName of constants_1.CALLBACK_FUNCTIONS) {
-              const { objectToPatch, functionNameToPatch } = (0, utils_1.indexFs)(fs5, fName);
+              const { objectToPatch, functionNameToPatch } = (0, utils_1.indexFs)(fs6, fName);
               if ((0, instrumentation_1.isWrapped)(objectToPatch[functionNameToPatch])) {
                 this._unwrap(objectToPatch, functionNameToPatch);
               }
@@ -22217,30 +22217,30 @@ var require_instrumentation12 = __commonJS({
               this._wrap(objectToPatch, functionNameToPatch, this._patchCallbackFunction.bind(this, fName));
             }
             for (const fName of constants_1.PROMISE_FUNCTIONS) {
-              if ((0, instrumentation_1.isWrapped)(fs5.promises[fName])) {
-                this._unwrap(fs5.promises, fName);
+              if ((0, instrumentation_1.isWrapped)(fs6.promises[fName])) {
+                this._unwrap(fs6.promises, fName);
               }
-              this._wrap(fs5.promises, fName, this._patchPromiseFunction.bind(this, fName));
+              this._wrap(fs6.promises, fName, this._patchPromiseFunction.bind(this, fName));
             }
-            return fs5;
-          }, (fs5) => {
-            if (fs5 === void 0)
+            return fs6;
+          }, (fs6) => {
+            if (fs6 === void 0)
               return;
             for (const fName of constants_1.SYNC_FUNCTIONS) {
-              const { objectToPatch, functionNameToPatch } = (0, utils_1.indexFs)(fs5, fName);
+              const { objectToPatch, functionNameToPatch } = (0, utils_1.indexFs)(fs6, fName);
               if ((0, instrumentation_1.isWrapped)(objectToPatch[functionNameToPatch])) {
                 this._unwrap(objectToPatch, functionNameToPatch);
               }
             }
             for (const fName of constants_1.CALLBACK_FUNCTIONS) {
-              const { objectToPatch, functionNameToPatch } = (0, utils_1.indexFs)(fs5, fName);
+              const { objectToPatch, functionNameToPatch } = (0, utils_1.indexFs)(fs6, fName);
               if ((0, instrumentation_1.isWrapped)(objectToPatch[functionNameToPatch])) {
                 this._unwrap(objectToPatch, functionNameToPatch);
               }
             }
             for (const fName of constants_1.PROMISE_FUNCTIONS) {
-              if ((0, instrumentation_1.isWrapped)(fs5.promises[fName])) {
-                this._unwrap(fs5.promises, fName);
+              if ((0, instrumentation_1.isWrapped)(fs6.promises[fName])) {
+                this._unwrap(fs6.promises, fName);
               }
             }
           }),
@@ -22393,8 +22393,8 @@ var require_instrumentation12 = __commonJS({
           }
         };
         const functionWithOriginalProperties = patchedFunctionWithOriginalProperties(patchedFunction, original);
-        const promisified = function(path7) {
-          return new Promise((resolve8) => functionWithOriginalProperties(path7, resolve8));
+        const promisified = function(path8) {
+          return new Promise((resolve8) => functionWithOriginalProperties(path8, resolve8));
         };
         Object.defineProperty(promisified, "name", { value: functionName });
         Object.defineProperty(functionWithOriginalProperties, util_1.promisify.custom, {
@@ -22769,26 +22769,26 @@ var require_utils10 = __commonJS({
       span.setAttribute(AttributeNames_1.AttributeNames.SOURCE, source);
     }
     exports2.addSpanSource = addSpanSource;
-    function createFieldIfNotExists(tracer, getConfig, contextValue, info, path7) {
-      let field = getField(contextValue, path7);
+    function createFieldIfNotExists(tracer, getConfig, contextValue, info, path8) {
+      let field = getField(contextValue, path8);
       let spanAdded = false;
       if (!field) {
         spanAdded = true;
-        const parent = getParentField(contextValue, path7);
+        const parent = getParentField(contextValue, path8);
         field = {
           parent,
-          span: createResolverSpan(tracer, getConfig, contextValue, info, path7, parent.span),
+          span: createResolverSpan(tracer, getConfig, contextValue, info, path8, parent.span),
           error: null
         };
-        addField(contextValue, path7, field);
+        addField(contextValue, path8, field);
       }
       return { spanAdded, field };
     }
-    function createResolverSpan(tracer, getConfig, contextValue, info, path7, parentSpan) {
+    function createResolverSpan(tracer, getConfig, contextValue, info, path8, parentSpan) {
       var _a, _b;
       const attributes = {
         [AttributeNames_1.AttributeNames.FIELD_NAME]: info.fieldName,
-        [AttributeNames_1.AttributeNames.FIELD_PATH]: path7.join("."),
+        [AttributeNames_1.AttributeNames.FIELD_PATH]: path8.join("."),
         [AttributeNames_1.AttributeNames.FIELD_TYPE]: info.returnType.toString()
       };
       const span = tracer.startSpan(`${enum_1.SpanNames.RESOLVE} ${attributes[AttributeNames_1.AttributeNames.FIELD_PATH]}`, {
@@ -22828,15 +22828,15 @@ var require_utils10 = __commonJS({
       }
     }
     exports2.getOperation = getOperation;
-    function addField(contextValue, path7, field) {
-      return contextValue[symbols_1.OTEL_GRAPHQL_DATA_SYMBOL].fields[path7.join(".")] = field;
+    function addField(contextValue, path8, field) {
+      return contextValue[symbols_1.OTEL_GRAPHQL_DATA_SYMBOL].fields[path8.join(".")] = field;
     }
-    function getField(contextValue, path7) {
-      return contextValue[symbols_1.OTEL_GRAPHQL_DATA_SYMBOL].fields[path7.join(".")];
+    function getField(contextValue, path8) {
+      return contextValue[symbols_1.OTEL_GRAPHQL_DATA_SYMBOL].fields[path8.join(".")];
     }
-    function getParentField(contextValue, path7) {
-      for (let i = path7.length - 1; i > 0; i--) {
-        const field = getField(contextValue, path7.slice(0, i));
+    function getParentField(contextValue, path8) {
+      for (let i = path8.length - 1; i > 0; i--) {
+        const field = getField(contextValue, path8.slice(0, i));
         if (field) {
           return field;
         }
@@ -22845,9 +22845,9 @@ var require_utils10 = __commonJS({
         span: contextValue[symbols_1.OTEL_GRAPHQL_DATA_SYMBOL].span
       };
     }
-    function pathToArray(mergeItems, path7) {
+    function pathToArray(mergeItems, path8) {
       const flattened = [];
-      let curr = path7;
+      let curr = path8;
       while (curr) {
         let key = curr.key;
         if (mergeItems && typeof key === "number") {
@@ -22984,14 +22984,14 @@ var require_utils10 = __commonJS({
         if (!contextValue[symbols_1.OTEL_GRAPHQL_DATA_SYMBOL]) {
           return fieldResolver.call(this, source, args, contextValue, info);
         }
-        const path7 = pathToArray(config.mergeItems, info && info.path);
-        const depth = path7.filter((item) => typeof item === "string").length;
+        const path8 = pathToArray(config.mergeItems, info && info.path);
+        const depth = path8.filter((item) => typeof item === "string").length;
         let field;
         let shouldEndSpan = false;
         if (config.depth >= 0 && config.depth < depth) {
-          field = getParentField(contextValue, path7);
+          field = getParentField(contextValue, path8);
         } else {
-          const newField = createFieldIfNotExists(tracer, getConfig, contextValue, info, path7);
+          const newField = createFieldIfNotExists(tracer, getConfig, contextValue, info, path8);
           field = newField.field;
           shouldEndSpan = newField.spanAdded;
         }
@@ -28447,12 +28447,12 @@ var require_utils14 = __commonJS({
       const reqUrlObject = requestUrl || {};
       const protocol = reqUrlObject.protocol || fallbackProtocol;
       const port = (reqUrlObject.port || "").toString();
-      const path7 = reqUrlObject.path || "/";
+      const path8 = reqUrlObject.path || "/";
       let host = reqUrlObject.host || reqUrlObject.hostname || headers.host || "localhost";
       if (host.indexOf(":") === -1 && port && port !== "80" && port !== "443") {
         host += `:${port}`;
       }
-      return `${protocol}//${host}${path7}`;
+      return `${protocol}//${host}${path8}`;
     };
     exports2.getAbsoluteUrl = getAbsoluteUrl;
     var parseResponseStatus = (kind, statusCode) => {
@@ -30520,11 +30520,11 @@ var require_instrumentation20 = __commonJS({
         const router = dispatchLayer.router;
         const routesStack = (_a = router === null || router === void 0 ? void 0 : router.stack) !== null && _a !== void 0 ? _a : [];
         for (const pathLayer of routesStack) {
-          const path7 = pathLayer.path;
+          const path8 = pathLayer.path;
           const pathStack = pathLayer.stack;
           for (let j = 0; j < pathStack.length; j++) {
             const routedMiddleware = pathStack[j];
-            pathStack[j] = this._patchLayer(routedMiddleware, true, path7);
+            pathStack[j] = this._patchLayer(routedMiddleware, true, path8);
           }
         }
         return dispatchLayer;
@@ -36914,8 +36914,8 @@ var require_instrumentation32 = __commonJS({
       }
       _methodPatcher(original, methodName) {
         const instrumentation = this;
-        return function(path7, ...handler) {
-          return original.call(this, path7, ...instrumentation._handlerPatcher({ type: types_1.LayerType.REQUEST_HANDLER, path: path7, methodName }, handler));
+        return function(path8, ...handler) {
+          return original.call(this, path8, ...instrumentation._handlerPatcher({ type: types_1.LayerType.REQUEST_HANDLER, path: path8, methodName }, handler));
         };
       }
       // will return the same type as `handler`, but all functions recursively patched
@@ -38863,9 +38863,9 @@ var require_getMachineId_linux = __commonJS({
     var api_1 = (init_esm(), __toCommonJS(esm_exports));
     async function getMachineId() {
       const paths = ["/etc/machine-id", "/var/lib/dbus/machine-id"];
-      for (const path7 of paths) {
+      for (const path8 of paths) {
         try {
-          const result = await fs_1.promises.readFile(path7, { encoding: "utf8" });
+          const result = await fs_1.promises.readFile(path8, { encoding: "utf8" });
           return result.trim();
         } catch (e) {
           api_1.diag.debug(`error reading machine id: ${e}`);
@@ -39785,7 +39785,7 @@ var require_AwsBeanstalkDetectorSync = __commonJS({
     var resources_1 = require_src48();
     var semantic_conventions_1 = (init_esm3(), __toCommonJS(esm_exports3));
     var semconv_1 = require_semconv();
-    var fs5 = require("fs");
+    var fs6 = require("fs");
     var util2 = require("util");
     var DEFAULT_BEANSTALK_CONF_PATH = "/var/elasticbeanstalk/xray/environment.conf";
     var WIN_OS_BEANSTALK_CONF_PATH = "C:\\Program Files\\Amazon\\XRay\\environment.conf";
@@ -39811,7 +39811,7 @@ var require_AwsBeanstalkDetectorSync = __commonJS({
        */
       async _getAttributes(_config) {
         try {
-          await _AwsBeanstalkDetectorSync.fileAccessAsync(this.BEANSTALK_CONF_PATH, fs5.constants.R_OK);
+          await _AwsBeanstalkDetectorSync.fileAccessAsync(this.BEANSTALK_CONF_PATH, fs6.constants.R_OK);
           const rawData = await _AwsBeanstalkDetectorSync.readFileAsync(this.BEANSTALK_CONF_PATH, "utf8");
           const parsedData = JSON.parse(rawData);
           return {
@@ -39829,8 +39829,8 @@ var require_AwsBeanstalkDetectorSync = __commonJS({
       }
     };
     exports2.AwsBeanstalkDetectorSync = AwsBeanstalkDetectorSync;
-    AwsBeanstalkDetectorSync.readFileAsync = util2.promisify(fs5.readFile);
-    AwsBeanstalkDetectorSync.fileAccessAsync = util2.promisify(fs5.access);
+    AwsBeanstalkDetectorSync.readFileAsync = util2.promisify(fs6.readFile);
+    AwsBeanstalkDetectorSync.fileAccessAsync = util2.promisify(fs6.access);
     exports2.awsBeanstalkDetectorSync = new AwsBeanstalkDetectorSync();
   }
 });
@@ -40010,7 +40010,7 @@ var require_AwsEcsDetectorSync = __commonJS({
     var semconv_1 = require_semconv();
     var http = require("http");
     var util2 = require("util");
-    var fs5 = require("fs");
+    var fs6 = require("fs");
     var os4 = require("os");
     var HTTP_TIMEOUT_IN_MS = 1e3;
     var AwsEcsDetectorSync = class _AwsEcsDetectorSync {
@@ -40148,7 +40148,7 @@ var require_AwsEcsDetectorSync = __commonJS({
     exports2.AwsEcsDetectorSync = AwsEcsDetectorSync;
     AwsEcsDetectorSync.CONTAINER_ID_LENGTH = 64;
     AwsEcsDetectorSync.DEFAULT_CGROUP_PATH = "/proc/self/cgroup";
-    AwsEcsDetectorSync.readFileAsync = util2.promisify(fs5.readFile);
+    AwsEcsDetectorSync.readFileAsync = util2.promisify(fs6.readFile);
     exports2.awsEcsDetectorSync = new AwsEcsDetectorSync();
   }
 });
@@ -40181,7 +40181,7 @@ var require_AwsEksDetectorSync = __commonJS({
     var resources_1 = require_src48();
     var semconv_1 = require_semconv();
     var https = require("https");
-    var fs5 = require("fs");
+    var fs6 = require("fs");
     var util2 = require("util");
     var api_2 = (init_esm(), __toCommonJS(esm_exports));
     var AwsEksDetectorSync = class _AwsEksDetectorSync {
@@ -40351,8 +40351,8 @@ var require_AwsEksDetectorSync = __commonJS({
       }
     };
     exports2.AwsEksDetectorSync = AwsEksDetectorSync;
-    AwsEksDetectorSync.readFileAsync = util2.promisify(fs5.readFile);
-    AwsEksDetectorSync.fileAccessAsync = util2.promisify(fs5.access);
+    AwsEksDetectorSync.readFileAsync = util2.promisify(fs6.readFile);
+    AwsEksDetectorSync.fileAccessAsync = util2.promisify(fs6.access);
     exports2.awsEksDetectorSync = new AwsEksDetectorSync();
   }
 });
@@ -40593,7 +40593,7 @@ var require_ContainerDetector = __commonJS({
     exports2.containerDetector = exports2.ContainerDetector = void 0;
     var resources_1 = require_src48();
     var semantic_conventions_1 = (init_esm3(), __toCommonJS(esm_exports3));
-    var fs5 = require("fs");
+    var fs6 = require("fs");
     var util2 = require("util");
     var api_1 = (init_esm(), __toCommonJS(esm_exports));
     var core_1 = require_src();
@@ -40683,7 +40683,7 @@ var require_ContainerDetector = __commonJS({
       }
     };
     exports2.ContainerDetector = ContainerDetector;
-    ContainerDetector.readFileAsync = util2.promisify(fs5.readFile);
+    ContainerDetector.readFileAsync = util2.promisify(fs6.readFile);
     exports2.containerDetector = new ContainerDetector();
   }
 });
@@ -41553,14 +41553,14 @@ var require_url_state_machine = __commonJS({
       return url.replace(/\u0009|\u000A|\u000D/g, "");
     }
     function shortenPath(url) {
-      const path7 = url.path;
-      if (path7.length === 0) {
+      const path8 = url.path;
+      if (path8.length === 0) {
         return;
       }
-      if (url.scheme === "file" && path7.length === 1 && isNormalizedWindowsDriveLetter(path7[0])) {
+      if (url.scheme === "file" && path8.length === 1 && isNormalizedWindowsDriveLetter(path8[0])) {
         return;
       }
-      path7.pop();
+      path8.pop();
     }
     function includesCredentials(url) {
       return url.username !== "" || url.password !== "";
@@ -48612,21 +48612,21 @@ function ensureConfigDir() {
     (0, import_node_fs.mkdirSync)(CONFIG_DIR, { recursive: true });
   }
 }
-function readJsonFile(path7, fallback) {
-  if (!(0, import_node_fs.existsSync)(path7)) return fallback;
-  const raw = (0, import_node_fs.readFileSync)(path7, "utf8");
+function readJsonFile(path8, fallback) {
+  if (!(0, import_node_fs.existsSync)(path8)) return fallback;
+  const raw = (0, import_node_fs.readFileSync)(path8, "utf8");
   if (!raw.trim()) return fallback;
   try {
     return JSON.parse(raw);
   } catch (error) {
-    throw new Error(`Failed to parse ${path7}: ${error.message}`);
+    throw new Error(`Failed to parse ${path8}: ${error.message}`);
   }
 }
-function writeJsonFile(path7, value) {
+function writeJsonFile(path8, value) {
   ensureConfigDir();
-  (0, import_node_fs.writeFileSync)(path7, JSON.stringify(value, null, 2));
+  (0, import_node_fs.writeFileSync)(path8, JSON.stringify(value, null, 2));
   try {
-    (0, import_node_fs.chmodSync)(path7, 384);
+    (0, import_node_fs.chmodSync)(path8, 384);
   } catch {
   }
 }
@@ -49514,7 +49514,7 @@ and switching profiles won't affect other checkouts.`,
   auth: {
     description: `Authenticate with Eve Horizon. Auth is optional for local development but required
 for cloud deployments. Credentials are stored globally per API URL.`,
-    usage: "eve auth <login|logout|status|whoami|bootstrap|sync|creds|token|mint|permissions>",
+    usage: "eve auth <login|logout|status|whoami|bootstrap|sync|creds|token|mint|permissions|request-access>",
     subcommands: {
       login: {
         description: "Login via GitHub SSH challenge (default) or Supabase (legacy)",
@@ -49642,6 +49642,24 @@ for cloud deployments. Credentials are stored globally per API URL.`,
           "eve auth permissions",
           "eve auth permissions --json"
         ]
+      },
+      "request-access": {
+        description: "Self-service access request \u2014 submit your SSH key and wait for admin approval",
+        usage: 'eve auth request-access --org "<org name>" [--ssh-key <path>] [--email <email>] [--wait]',
+        options: [
+          "--org <name>          Organization to request access to (required)",
+          "--org-slug <slug>     Preferred org slug",
+          "--ssh-key <path>      Path to SSH public key (default: ~/.ssh/id_ed25519.pub)",
+          "--email <email>       Contact email",
+          "--nostr-pubkey <hex>  Nostr public key (alternative to SSH)",
+          "--wait                Poll until approved, then auto-login",
+          "--status <id>         Check status of an existing request"
+        ],
+        examples: [
+          'eve auth request-access --org "Acme Corp" --ssh-key ~/.ssh/id_ed25519.pub --wait',
+          'eve auth request-access --org "Acme Corp" --email user@example.com --wait',
+          "eve auth request-access --status <request_id>"
+        ]
       }
     }
   },
@@ -50293,17 +50311,40 @@ for cloud deployments. Credentials are stored globally per API URL.`,
     usage: "eve admin <subcommand> [options]",
     subcommands: {
       invite: {
-        description: "Invite a user by registering their GitHub SSH keys and adding them to an org",
-        usage: "eve admin invite --email <email> [--github <username>] [--role <role>] [--org <org_id>]",
+        description: "Invite a user by registering their SSH keys (from GitHub or a local file) and adding them to an org",
+        usage: "eve admin invite --email <email> [--github <username>] [--ssh-key <path>] [--role <role>] [--org <org_id>] [--web] [--redirect-to <url>]",
         options: [
           "--email <email>       User email address (required)",
           "--github <username>   GitHub username to fetch SSH keys from",
+          "--ssh-key <path>      Path to an SSH public key file to register",
           "--role <role>         Org role: owner, admin, member (default: member)",
-          "--org <org_id>        Organization to add user to"
+          "--org <org_id>        Organization to add user to",
+          "--web                 Send a Supabase Auth invite email",
+          "--redirect-to <url>   Redirect URL after web login",
+          "",
+          "At least one auth method (--github, --ssh-key, or --web) is recommended.",
+          'Users can also self-register: eve auth request-access --org "Org" --ssh-key ~/.ssh/id_ed25519.pub --wait'
         ],
         examples: [
           "eve admin invite --email user@example.com --github octocat",
-          "eve admin invite --email user@example.com --github octocat --role admin --org org_xxx"
+          "eve admin invite --email user@example.com --ssh-key ~/.ssh/id_ed25519.pub --org org_xxx",
+          "eve admin invite --email user@example.com --github octocat --role admin --org org_xxx",
+          "eve admin invite --email user@example.com --web --redirect-to https://app.example.com"
+        ]
+      },
+      "access-requests": {
+        description: "Review, approve, or reject self-service access requests",
+        usage: 'eve admin access-requests [approve|reject <id>] [--reason "..."]',
+        options: [
+          "(no action)          List pending access requests",
+          "approve <id>         Approve a request (creates user, org membership, and identity)",
+          "reject <id>          Reject a request",
+          '--reason "<text>"    Note to attach to approval/rejection'
+        ],
+        examples: [
+          "eve admin access-requests",
+          "eve admin access-requests approve ar_xxx",
+          'eve admin access-requests reject ar_xxx --reason "Unknown user"'
         ]
       },
       "ingress-aliases": {
@@ -50321,7 +50362,9 @@ for cloud deployments. Credentials are stored globally per API URL.`,
     },
     examples: [
       "eve admin invite --email user@example.com --github octocat",
-      "eve admin invite --email user@example.com --github octocat --org org_xxx",
+      "eve admin invite --email user@example.com --ssh-key ~/.ssh/id_ed25519.pub --org org_xxx",
+      "eve admin access-requests",
+      "eve admin access-requests approve ar_xxx",
       "eve admin ingress-aliases list"
     ]
   },
@@ -51425,8 +51468,8 @@ function showSubcommandHelp(command, subcommand) {
 }
 
 // src/lib/client.ts
-async function requestJson(context2, path7, options = {}) {
-  const response = await requestRaw(context2, path7, options);
+async function requestJson(context2, path8, options = {}) {
+  const response = await requestRaw(context2, path8, options);
   const method = options.method ?? "GET";
   if (response.status === 401 && options.tokenOverride === void 0) {
     const refreshed = await attemptRefresh(context2);
@@ -51434,20 +51477,20 @@ async function requestJson(context2, path7, options = {}) {
       context2.token = refreshed.access_token;
       context2.refreshToken = refreshed.refresh_token;
       context2.expiresAt = refreshed.expires_at;
-      const retry = await requestRaw(context2, path7, {
+      const retry = await requestRaw(context2, path8, {
         ...options,
         tokenOverride: refreshed.access_token
       });
       if (!retry.ok && !options.allowError) {
         const message = formatErrorMessage(retry);
-        throw new Error(`HTTP ${retry.status}: ${method} ${path7}: ${message}`);
+        throw new Error(`HTTP ${retry.status}: ${method} ${path8}: ${message}`);
       }
       return retry.data;
     }
   }
   if (!response.ok && !options.allowError) {
     const message = formatErrorMessage(response);
-    const requestTarget = `${method} ${path7}`;
+    const requestTarget = `${method} ${path8}`;
     const requestFailedContext = `while calling ${requestTarget}: ${message}`;
     if ((response.status === 404 || response.status === 500) && message.includes("Project not found")) {
       const projectIdMatch = message.match(/Project not found: (proj_[a-z0-9]+)/);
@@ -51479,7 +51522,7 @@ function unwrapListResponse(value) {
   }
   throw new Error("Expected list response envelope with data[]");
 }
-async function requestRaw(context2, path7, options = {}) {
+async function requestRaw(context2, path8, options = {}) {
   const headers = {
     ...options.headers
   };
@@ -51490,7 +51533,7 @@ async function requestRaw(context2, path7, options = {}) {
   if (token) {
     headers.Authorization = `Bearer ${token}`;
   }
-  const url = `${context2.apiUrl}${path7}`;
+  const url = `${context2.apiUrl}${path8}`;
   const method = options.method ?? "GET";
   let response;
   try {
@@ -52346,7 +52389,7 @@ function buildQuery2(params) {
 }
 
 // src/commands/job.ts
-var import_child_process = require("child_process");
+var import_child_process2 = require("child_process");
 var import_fs = require("fs");
 var import_path = require("path");
 
@@ -52828,8 +52871,8 @@ function getErrorMap() {
 
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path: path7, errorMaps, issueData } = params;
-  const fullPath = [...path7, ...issueData.path || []];
+  const { data, path: path8, errorMaps, issueData } = params;
+  const fullPath = [...path8, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -52945,11 +52988,11 @@ var errorUtil;
 
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value, path7, key) {
+  constructor(parent, value, path8, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path7;
+    this._path = path8;
     this._key = key;
   }
   get path() {
@@ -56493,6 +56536,81 @@ var configSchema = external_exports.object({
   ZAI_MODEL: external_exports.string().optional()
 });
 
+// ../shared/dist/harnesses/config.js
+var fs = __toESM(require("node:fs"), 1);
+var path = __toESM(require("node:path"), 1);
+function resolveHarnessConfigRoot(options) {
+  const env = options.env ?? process.env;
+  const envRoot = env.EVE_HARNESS_CONFIG_ROOT;
+  if (envRoot) {
+    return { root: path.join(envRoot, options.harness), source: "env" };
+  }
+  const repoPath = options.repoPath ?? process.cwd();
+  return {
+    root: path.join(repoPath, ".agent", "harnesses", options.harness),
+    source: options.repoPath ? "repo" : "default"
+  };
+}
+function resolveHarnessConfig(options) {
+  const { root, source } = resolveHarnessConfigRoot(options);
+  if (!options.variant) {
+    return {
+      configDir: root,
+      baseDir: root,
+      hasVariant: false,
+      source
+    };
+  }
+  const variantDir = path.join(root, "variants", options.variant);
+  const hasVariant = fs.existsSync(variantDir);
+  return {
+    configDir: hasVariant ? variantDir : root,
+    baseDir: root,
+    hasVariant,
+    source
+  };
+}
+function resolveClaudeConfigDir(harness, variant, options) {
+  const env = options?.env ?? process.env;
+  const existing = env.CLAUDE_CONFIG_DIR;
+  if (existing) {
+    if (!variant)
+      return existing;
+    const normalized = existing.replace(/\/+$/, "");
+    const marker = `${path.sep}variants${path.sep}`;
+    if (normalized.includes(marker)) {
+      return existing;
+    }
+    return path.join(normalized, "variants", variant);
+  }
+  return resolveHarnessConfig({
+    harness,
+    variant,
+    repoPath: options?.repoPath,
+    env
+  }).configDir;
+}
+function resolveCodeConfigDir(harness, variant, options) {
+  const env = options?.env ?? process.env;
+  const existing = env.CODEX_HOME;
+  if (existing) {
+    if (!variant)
+      return existing;
+    const normalized = existing.replace(/\/+$/, "");
+    const marker = `${path.sep}variants${path.sep}`;
+    if (normalized.includes(marker)) {
+      return existing;
+    }
+    return path.join(normalized, "variants", variant);
+  }
+  return resolveHarnessConfig({
+    harness,
+    variant,
+    repoPath: options?.repoPath,
+    env
+  }).configDir;
+}
+
 // ../shared/dist/harnesses/auth.js
 var import_node_child_process2 = require("node:child_process");
 var import_node_fs4 = require("node:fs");
@@ -56683,6 +56801,207 @@ var HARNESS_CAPABILITIES = {
   }
 };
 
+// ../shared/dist/harnesses/adapters/reasoning.js
+var CLAUDE_THINKING_TOKENS = {
+  low: "1024",
+  medium: "8192",
+  high: "16000",
+  "x-high": "32000"
+};
+var CODE_REASONING_MAP = {
+  low: "low",
+  medium: "medium",
+  high: "high",
+  "x-high": "xhigh"
+};
+function mapReasoningEffort(harness, effort) {
+  if (!effort)
+    return void 0;
+  if (!["low", "medium", "high", "x-high"].includes(effort))
+    return void 0;
+  if (harness === "mclaude" || harness === "claude" || harness === "zai") {
+    return CLAUDE_THINKING_TOKENS[effort];
+  }
+  if (harness === "code" || harness === "coder" || harness === "codex") {
+    return CODE_REASONING_MAP[effort];
+  }
+  if (harness === "gemini") {
+    return effort;
+  }
+  return void 0;
+}
+
+// ../shared/dist/harnesses/adapters/claude.js
+var claudeAdapter = {
+  name: "claude",
+  buildOptions: async (ctx) => {
+    const model = ctx.invocation.harness_options?.model ?? (ctx.env.CLAUDE_MODEL || "opus");
+    const variant = ctx.invocation.harness_options?.variant ?? ctx.invocation.variant;
+    const reasoning = mapReasoningEffort(ctx.harness, ctx.invocation.harness_options?.reasoning_effort);
+    const configDir = resolveClaudeConfigDir("claude", variant, {
+      repoPath: ctx.repoPath,
+      env: ctx.env
+    });
+    const auth = await ctx.helpers.resolveMclaudeAuth({ configDir });
+    return {
+      harness: ctx.harness,
+      permission: ctx.permission,
+      variant,
+      model,
+      reasoning,
+      env: {
+        ...auth.env,
+        ANTHROPIC_BASE_URL: ctx.env.ANTHROPIC_BASE_URL,
+        CLAUDE_CONFIG_DIR: configDir
+      }
+    };
+  }
+};
+
+// ../shared/dist/harnesses/adapters/mclaude.js
+var mclaudeAdapter = {
+  name: "mclaude",
+  buildOptions: async (ctx) => {
+    const model = ctx.invocation.harness_options?.model ?? (ctx.env.CLAUDE_MODEL || "opus");
+    const variant = ctx.invocation.harness_options?.variant ?? ctx.invocation.variant;
+    const reasoning = mapReasoningEffort(ctx.harness, ctx.invocation.harness_options?.reasoning_effort);
+    const configDir = resolveClaudeConfigDir("mclaude", variant, {
+      repoPath: ctx.repoPath,
+      env: ctx.env
+    });
+    const auth = await ctx.helpers.resolveMclaudeAuth({ configDir });
+    return {
+      harness: ctx.harness,
+      permission: ctx.permission,
+      variant,
+      model,
+      reasoning,
+      env: {
+        ...auth.env,
+        ANTHROPIC_BASE_URL: ctx.env.ANTHROPIC_BASE_URL,
+        CLAUDE_CONFIG_DIR: configDir
+      }
+    };
+  }
+};
+
+// ../shared/dist/harnesses/adapters/zai.js
+var zaiAdapter = {
+  name: "zai",
+  buildOptions: async (ctx) => {
+    const apiKey = ctx.env.Z_AI_API_KEY ?? ctx.env.ZAI_API_KEY;
+    if (!apiKey) {
+      throw new Error("Zai harness requires Z_AI_API_KEY environment variable");
+    }
+    const model = ctx.invocation.harness_options?.model ?? (ctx.env.ZAI_MODEL || ctx.env.CLAUDE_MODEL);
+    const variant = ctx.invocation.harness_options?.variant ?? ctx.invocation.variant;
+    const reasoning = mapReasoningEffort(ctx.harness, ctx.invocation.harness_options?.reasoning_effort);
+    const configDir = resolveClaudeConfigDir("zai", variant, {
+      repoPath: ctx.repoPath,
+      env: ctx.env
+    });
+    return {
+      harness: ctx.harness,
+      permission: ctx.permission,
+      variant,
+      model,
+      reasoning,
+      env: {
+        Z_AI_API_KEY: apiKey,
+        Z_AI_BASE_URL: ctx.env.Z_AI_BASE_URL,
+        ANTHROPIC_BASE_URL: ctx.env.ANTHROPIC_BASE_URL ?? ctx.env.Z_AI_BASE_URL,
+        // Claude Code reads ANTHROPIC_API_KEY - use Z_AI_API_KEY for zai provider
+        ANTHROPIC_API_KEY: apiKey,
+        CLAUDE_CONFIG_DIR: configDir
+      }
+    };
+  }
+};
+
+// ../shared/dist/harnesses/adapters/gemini.js
+var geminiAdapter = {
+  name: "gemini",
+  buildOptions: async (ctx) => ({
+    harness: ctx.harness,
+    permission: ctx.permission,
+    variant: ctx.invocation.harness_options?.variant ?? ctx.invocation.variant,
+    model: ctx.invocation.harness_options?.model,
+    reasoning: mapReasoningEffort(ctx.harness, ctx.invocation.harness_options?.reasoning_effort)
+  })
+};
+
+// ../shared/dist/harnesses/adapters/code.js
+var codeAdapter = {
+  name: "code",
+  aliases: ["coder"],
+  buildOptions: async (ctx) => {
+    const variant = ctx.invocation.harness_options?.variant ?? ctx.invocation.variant;
+    const model = ctx.invocation.harness_options?.model;
+    const reasoning = mapReasoningEffort(ctx.harness, ctx.invocation.harness_options?.reasoning_effort);
+    const configDir = resolveCodeConfigDir("code", variant, {
+      repoPath: ctx.repoPath,
+      env: ctx.env
+    });
+    const auth = await ctx.helpers.resolveCodeAuth({ configDir });
+    return {
+      harness: ctx.harness,
+      permission: ctx.permission,
+      variant,
+      model,
+      reasoning,
+      env: {
+        ...auth.env,
+        CODEX_HOME: configDir
+      }
+    };
+  }
+};
+
+// ../shared/dist/harnesses/adapters/codex.js
+var codexAdapter = {
+  name: "codex",
+  buildOptions: async (ctx) => {
+    const variant = ctx.invocation.harness_options?.variant ?? ctx.invocation.variant;
+    const model = ctx.invocation.harness_options?.model;
+    const reasoning = mapReasoningEffort(ctx.harness, ctx.invocation.harness_options?.reasoning_effort);
+    const configDir = resolveCodeConfigDir("codex", variant, {
+      repoPath: ctx.repoPath,
+      env: ctx.env
+    });
+    const auth = await ctx.helpers.resolveCodeAuth({ configDir });
+    return {
+      harness: ctx.harness,
+      permission: ctx.permission,
+      variant,
+      model,
+      reasoning,
+      env: {
+        ...auth.env,
+        CODEX_HOME: configDir
+      }
+    };
+  }
+};
+
+// ../shared/dist/harnesses/adapters/index.js
+var adapters = [
+  claudeAdapter,
+  mclaudeAdapter,
+  zaiAdapter,
+  geminiAdapter,
+  codeAdapter,
+  codexAdapter
+];
+var registry = /* @__PURE__ */ new Map();
+for (const adapter of adapters) {
+  registry.set(adapter.name, adapter);
+  if (adapter.aliases) {
+    for (const alias of adapter.aliases) {
+      registry.set(alias, adapter);
+    }
+  }
+}
+
 // ../shared/dist/types/job.js
 var JobStatus;
 (function(JobStatus2) {
@@ -57425,7 +57744,8 @@ var AuthStatusResponseSchema = external_exports.object({
   is_admin: external_exports.boolean().optional(),
   is_job_token: external_exports.boolean().optional(),
   is_service_principal: external_exports.boolean().optional(),
-  permissions: external_exports.array(external_exports.string()).optional()
+  permissions: external_exports.array(external_exports.string()).optional(),
+  memberships: external_exports.array(external_exports.object({ org_id: external_exports.string(), role: external_exports.string() })).optional()
 });
 var AuthChallengeRequestSchema = external_exports.object({
   provider: external_exports.enum(["github_ssh", "nostr"]).default("github_ssh"),
@@ -59783,23 +60103,23 @@ var correlationStorage = new import_async_hooks.AsyncLocalStorage();
 var import_auto_instrumentations_node = __toESM(require_src57(), 1);
 
 // ../shared/dist/lib/pack-resolver.js
-var fs = __toESM(require("node:fs"), 1);
-var path2 = __toESM(require("node:path"), 1);
+var fs2 = __toESM(require("node:fs"), 1);
+var path3 = __toESM(require("node:path"), 1);
 var os = __toESM(require("node:os"), 1);
 var import_node_child_process3 = require("node:child_process");
 var import_yaml2 = require("yaml");
-var CACHE_ROOT = path2.join(os.homedir(), ".eve", "cache", "packs");
+var CACHE_ROOT = path3.join(os.homedir(), ".eve", "cache", "packs");
 async function resolvePack(entry, projectSlug, repoRoot) {
   const packDir = await fetchPackSource(entry, repoRoot);
-  const packYamlPath = path2.join(packDir, "eve", "pack.yaml");
-  const eveDir = path2.join(packDir, "eve");
-  if (fs.existsSync(packYamlPath)) {
-    const raw = fs.readFileSync(packYamlPath, "utf-8");
+  const packYamlPath = path3.join(packDir, "eve", "pack.yaml");
+  const eveDir = path3.join(packDir, "eve");
+  if (fs2.existsSync(packYamlPath)) {
+    const raw = fs2.readFileSync(packYamlPath, "utf-8");
     const parsed = PackYamlSchema.parse((0, import_yaml2.parse)(raw));
-    const agents = loadYamlMap(path2.join(packDir, parsed.imports.agents));
-    const teams = loadYamlMap(path2.join(packDir, parsed.imports.teams));
-    const chat = parsed.imports.chat ? loadYamlMap(path2.join(packDir, parsed.imports.chat)) : null;
-    const xEve = parsed.imports.x_eve ? loadYamlMap(path2.join(packDir, parsed.imports.x_eve)) : null;
+    const agents = loadYamlMap(path3.join(packDir, parsed.imports.agents));
+    const teams = loadYamlMap(path3.join(packDir, parsed.imports.teams));
+    const chat = parsed.imports.chat ? loadYamlMap(path3.join(packDir, parsed.imports.chat)) : null;
+    const xEve = parsed.imports.x_eve ? loadYamlMap(path3.join(packDir, parsed.imports.x_eve)) : null;
     const prefixedAgents = prefixAgentSlugs(agents, projectSlug);
     const packDefaultPolicy = parsed.gateway?.default_policy ?? "none";
     const gatewayResolvedAgents = resolveAgentGatewayPolicies(prefixedAgents, packDefaultPolicy);
@@ -59815,12 +60135,12 @@ async function resolvePack(entry, projectSlug, repoRoot) {
       skillPaths: skillPaths2
     };
   }
-  if (fs.existsSync(eveDir)) {
+  if (fs2.existsSync(eveDir)) {
     throw new Error(`Pack "${entry.source}" has eve/ directory but no pack.yaml. Add eve/pack.yaml or remove the eve/ directory.`);
   }
   const skillPaths = discoverSkillPaths(packDir);
   return {
-    id: path2.basename(packDir),
+    id: path3.basename(packDir),
     source: entry.source,
     ref: entry.ref ?? resolveLocalRef(packDir),
     agents: {},
@@ -59834,8 +60154,8 @@ async function fetchPackSource(entry, repoRoot) {
   const { source, ref } = entry;
   if (source.startsWith("./") || source.startsWith("../") || source.startsWith("/")) {
     const base = repoRoot ?? process.cwd();
-    const resolved = path2.resolve(base, source);
-    if (!fs.existsSync(resolved)) {
+    const resolved = path3.resolve(base, source);
+    if (!fs2.existsSync(resolved)) {
       throw new Error(`Local pack source not found: ${resolved}`);
     }
     return resolved;
@@ -59843,17 +60163,17 @@ async function fetchPackSource(entry, repoRoot) {
   if (!ref) {
     throw new Error(`Remote pack source "${source}" requires a ref (40-char SHA)`);
   }
-  const cacheDir = path2.join(CACHE_ROOT, ref);
-  if (fs.existsSync(cacheDir)) {
+  const cacheDir = path3.join(CACHE_ROOT, ref);
+  if (fs2.existsSync(cacheDir)) {
     return cacheDir;
   }
-  fs.mkdirSync(cacheDir, { recursive: true });
+  fs2.mkdirSync(cacheDir, { recursive: true });
   try {
     const gitUrl = resolveGitUrl(source);
     (0, import_node_child_process3.execSync)(`git clone --depth 1 ${JSON.stringify(gitUrl)} ${JSON.stringify(cacheDir)}`, { stdio: "pipe", timeout: 6e4 });
     (0, import_node_child_process3.execSync)(`git -C ${JSON.stringify(cacheDir)} checkout ${ref}`, { stdio: "pipe", timeout: 3e4 });
   } catch (err) {
-    fs.rmSync(cacheDir, { recursive: true, force: true });
+    fs2.rmSync(cacheDir, { recursive: true, force: true });
     throw new Error(`Failed to clone pack "${source}" at ref ${ref}: ${err}`);
   }
   return cacheDir;
@@ -59871,10 +60191,10 @@ function resolveGitUrl(source) {
   return source;
 }
 function loadYamlMap(filePath) {
-  if (!fs.existsSync(filePath)) {
+  if (!fs2.existsSync(filePath)) {
     throw new Error(`Pack import file not found: ${filePath}`);
   }
-  const raw = fs.readFileSync(filePath, "utf-8");
+  const raw = fs2.readFileSync(filePath, "utf-8");
   const parsed = (0, import_yaml2.parse)(raw);
   if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
     throw new Error(`Pack import file must be a YAML map: ${filePath}`);
@@ -59940,16 +60260,16 @@ function resolveAgentGatewayPolicies(agentsConfig, packDefaultPolicy) {
 }
 function discoverSkillPaths(packDir) {
   const paths = [];
-  const skillsDir = path2.join(packDir, "skills");
-  if (!fs.existsSync(skillsDir)) {
+  const skillsDir = path3.join(packDir, "skills");
+  if (!fs2.existsSync(skillsDir)) {
     return paths;
   }
   const walk = (dir) => {
-    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+    for (const entry of fs2.readdirSync(dir, { withFileTypes: true })) {
       if (!entry.isDirectory() || entry.name.startsWith("."))
         continue;
-      const fullPath = path2.join(dir, entry.name);
-      if (fs.existsSync(path2.join(fullPath, "SKILL.md"))) {
+      const fullPath = path3.join(dir, entry.name);
+      if (fs2.existsSync(path3.join(fullPath, "SKILL.md"))) {
         paths.push(fullPath);
       }
       walk(fullPath);
@@ -60038,10 +60358,10 @@ function mergeXEve(packFragments, projectXEve) {
 // ../shared/dist/lib/resource-uris.js
 var ORG_DOCS_PREFIX = "org_docs:/";
 var JOB_ATTACHMENTS_PREFIX = "job_attachments:/";
-function normalizeOrgDocPath(path7) {
-  if (!path7)
+function normalizeOrgDocPath(path8) {
+  if (!path8)
     return "/";
-  return path7.startsWith("/") ? path7 : `/${path7}`;
+  return path8.startsWith("/") ? path8 : `/${path8}`;
 }
 function parseResourceUri(uri) {
   if (!uri || typeof uri !== "string")
@@ -60052,11 +60372,11 @@ function parseResourceUri(uri) {
       return null;
     const match = raw.match(/^(.*)@v(\d+)$/);
     if (match) {
-      const path7 = normalizeOrgDocPath(match[1]);
+      const path8 = normalizeOrgDocPath(match[1]);
       const version2 = Number(match[2]);
       if (!Number.isFinite(version2) || version2 <= 0)
         return null;
-      return { scheme: "org_docs", path: path7, version: version2 };
+      return { scheme: "org_docs", path: path8, version: version2 };
     }
     return { scheme: "org_docs", path: normalizeOrgDocPath(raw) };
   }
@@ -61863,6 +62183,11 @@ var ALL_PERMISSIONS = [
 ];
 var PERMISSION_SET = new Set(ALL_PERMISSIONS);
 
+// ../shared/dist/git/git-workspace.js
+var import_child_process = require("child_process");
+var import_util4 = require("util");
+var execFileAsync = (0, import_util4.promisify)(import_child_process.execFile);
+
 // src/commands/job.ts
 async function handleJob(subcommand, positionals, flags, context2) {
   const json = Boolean(flags.json);
@@ -64451,7 +64776,7 @@ async function handleRunnerLogs(positionals, flags, context2) {
     console.log(`No pod_name in runtime_meta, using label selector: job-id=${jobId}`);
     kubectlArgs = ["-n", "eve", "logs", "-f", "-l", `job-id=${jobId}`];
   }
-  const kubectl = (0, import_child_process.spawn)("kubectl", kubectlArgs, {
+  const kubectl = (0, import_child_process2.spawn)("kubectl", kubectlArgs, {
     stdio: "inherit"
   });
   return new Promise((resolve8, reject) => {
@@ -64930,8 +65255,21 @@ async function handleAuth(subcommand, flags, context2, credentials) {
       }
       if (!json && data.permissions && data.permissions.length > 0) {
         console.log(`User: ${data.user_id ?? "unknown"} (${data.email ?? "no email"})`);
-        console.log(`Role: ${data.role ?? "member"}`);
+        let displayRole = data.role ?? "member";
+        if (context2.orgId && data.memberships?.length) {
+          const match = data.memberships.find((m) => m.org_id === context2.orgId);
+          if (match) displayRole = match.role;
+        }
+        console.log(`Role: ${displayRole}`);
         console.log(`Admin: ${data.is_admin ?? false}`);
+        if (context2.orgId && data.memberships?.length) {
+          console.log(`
+Org memberships:`);
+          for (const m of data.memberships) {
+            const marker = m.org_id === context2.orgId ? " (active)" : "";
+            console.log(`  ${m.org_id}: ${m.role}${marker}`);
+          }
+        }
         console.log(`
 Permissions (${data.permissions.length}):`);
         for (const perm of data.permissions) {
@@ -65201,37 +65539,14 @@ Permissions (${data.permissions.length}):`);
           }
         }
         if (!extractedTokens.CODEX_OAUTH_ACCESS_TOKEN || !extractedTokens.CODEX_AUTH_JSON_B64) {
-          const codexAuthPaths = [
-            `${(0, import_node_os3.homedir)()}/.codex/auth.json`,
-            `${(0, import_node_os3.homedir)()}/.code/auth.json`
-          ];
-          for (const authPath of codexAuthPaths) {
-            if ((0, import_node_fs5.existsSync)(authPath)) {
-              try {
-                const content = (0, import_node_fs5.readFileSync)(authPath, "utf8");
-                const auth = JSON.parse(content);
-                if (!extractedTokens.CODEX_AUTH_JSON_B64) {
-                  extractedTokens.CODEX_AUTH_JSON_B64 = Buffer.from(content, "utf8").toString("base64");
-                }
-                const tokens = auth.tokens;
-                if (tokens?.access_token) {
-                  if (!extractedTokens.CODEX_OAUTH_ACCESS_TOKEN) {
-                    extractedTokens.CODEX_OAUTH_ACCESS_TOKEN = tokens.access_token;
-                  }
-                  break;
-                }
-                if (auth.oauth_token || auth.access_token) {
-                  if (!extractedTokens.CODEX_OAUTH_ACCESS_TOKEN) {
-                    extractedTokens.CODEX_OAUTH_ACCESS_TOKEN = auth.oauth_token || auth.access_token;
-                  }
-                  break;
-                }
-                if (auth.OPENAI_API_KEY && typeof auth.OPENAI_API_KEY === "string") {
-                  extractedTokens.OPENAI_API_KEY = auth.OPENAI_API_KEY;
-                  break;
-                }
-              } catch {
-              }
+          const freshest = pickFreshestCodeAuth();
+          if (freshest) {
+            extractedTokens.CODEX_AUTH_JSON_B64 = freshest.authJsonB64;
+            if (freshest.accessToken) {
+              extractedTokens.CODEX_OAUTH_ACCESS_TOKEN = freshest.accessToken;
+            }
+            if (freshest.apiKey) {
+              extractedTokens.OPENAI_API_KEY = freshest.apiKey;
             }
           }
         }
@@ -65386,37 +65701,15 @@ ${tokenList.map((t) => `  - ${t.name}`).join("\n")}`
           }
         }
         if (!codexFound) {
-          const codexAuthPaths = [
-            `${(0, import_node_os3.homedir)()}/.codex/auth.json`,
-            `${(0, import_node_os3.homedir)()}/.code/auth.json`
-          ];
-          for (const authPath of codexAuthPaths) {
-            if ((0, import_node_fs5.existsSync)(authPath)) {
-              try {
-                const content = (0, import_node_fs5.readFileSync)(authPath, "utf8");
-                const auth = JSON.parse(content);
-                const tokens = auth.tokens;
-                if (tokens?.access_token) {
-                  codexFound = true;
-                  codexSource = authPath.replace((0, import_node_os3.homedir)(), "~");
-                  codexPreview = tokens.access_token.substring(0, 15) + "...";
-                  break;
-                }
-                if (auth.oauth_token || auth.access_token) {
-                  codexFound = true;
-                  codexSource = authPath.replace((0, import_node_os3.homedir)(), "~");
-                  const token = auth.oauth_token || auth.access_token;
-                  codexPreview = token.substring(0, 15) + "...";
-                  break;
-                }
-                if (auth.OPENAI_API_KEY && typeof auth.OPENAI_API_KEY === "string") {
-                  codexFound = true;
-                  codexSource = authPath.replace((0, import_node_os3.homedir)(), "~") + " (API key)";
-                  codexPreview = auth.OPENAI_API_KEY.substring(0, 10) + "...";
-                  break;
-                }
-              } catch {
-              }
+          const freshest = pickFreshestCodeAuth();
+          if (freshest) {
+            codexFound = true;
+            codexSource = freshest.sourcePath.replace((0, import_node_os3.homedir)(), "~");
+            if (freshest.accessToken) {
+              codexPreview = freshest.accessToken.substring(0, 15) + "...";
+            } else if (freshest.apiKey) {
+              codexSource += " (API key)";
+              codexPreview = freshest.apiKey.substring(0, 10) + "...";
             }
           }
         }
@@ -65513,7 +65806,10 @@ ${tokenList.map((t) => `  - ${t.name}`).join("\n")}`
       const requestData = submitResponse.data;
       if (!wait) {
         outputJson(requestData, json, `Access request submitted: ${requestData.id} (status: ${requestData.status})
-Poll with: eve auth request-access --status ${requestData.id}`);
+Poll with: eve auth request-access --status ${requestData.id}
+
+Tip: Use --wait to auto-poll and login on approval:
+  eve auth request-access --org "${orgName}" --wait`);
         return;
       }
       console.log(`Access request submitted: ${requestData.id}`);
@@ -65665,6 +65961,52 @@ No token minted (use --scopes to mint a token).`);
       throw new Error("Usage: eve auth <login|logout|status|whoami|bootstrap|sync|creds|token|mint|permissions|request-access|create-service-account|list-service-accounts|revoke-service-account>");
   }
 }
+function pickFreshestCodeAuth() {
+  const codexAuthPaths = [
+    `${(0, import_node_os3.homedir)()}/.codex/auth.json`,
+    `${(0, import_node_os3.homedir)()}/.code/auth.json`
+  ];
+  const candidates = [];
+  for (const authPath of codexAuthPaths) {
+    if (!(0, import_node_fs5.existsSync)(authPath)) continue;
+    try {
+      const content = (0, import_node_fs5.readFileSync)(authPath, "utf8");
+      const auth = JSON.parse(content);
+      const authJsonB64 = Buffer.from(content, "utf8").toString("base64");
+      const tokens = auth.tokens;
+      if (tokens?.access_token) {
+        const expiresAt = typeof tokens.expires_at === "number" ? tokens.expires_at : 0;
+        candidates.push({
+          sourcePath: authPath,
+          authJsonB64,
+          accessToken: tokens.access_token,
+          expiresAt
+        });
+        continue;
+      }
+      if (auth.oauth_token || auth.access_token) {
+        candidates.push({
+          sourcePath: authPath,
+          authJsonB64,
+          accessToken: auth.oauth_token || auth.access_token,
+          expiresAt: 0
+        });
+        continue;
+      }
+      if (auth.OPENAI_API_KEY && typeof auth.OPENAI_API_KEY === "string") {
+        candidates.push({
+          sourcePath: authPath,
+          authJsonB64,
+          apiKey: auth.OPENAI_API_KEY,
+          expiresAt: 0
+        });
+      }
+    } catch {
+    }
+  }
+  if (candidates.length === 0) return null;
+  return candidates.reduce((best, c) => c.expiresAt > best.expiresAt ? c : best);
+}
 function signNonceWithSsh(keyPath, nonce) {
   const tempDir = (0, import_node_fs5.mkdtempSync)((0, import_node_path5.join)((0, import_node_os3.tmpdir)(), "eve-auth-"));
   const noncePath = (0, import_node_path5.join)(tempDir, "nonce");
@@ -66758,9 +67100,9 @@ function getOrchestratorUrl(context2) {
   apiUrl.port = orchPort;
   return apiUrl.toString().replace(/\/$/, "");
 }
-async function requestOrchestratorJson(context2, path7, options) {
+async function requestOrchestratorJson(context2, path8, options) {
   const orchUrl = getOrchestratorUrl(context2);
-  const url = `${orchUrl}${path7}`;
+  const url = `${orchUrl}${path8}`;
   const headers = {};
   if (options?.body) {
     headers["Content-Type"] = "application/json";
@@ -68966,13 +69308,13 @@ async function handleCall(positionals, flags, context2) {
   const body = graphqlBody ?? jsonBody;
   const method = methodInput.toUpperCase();
   const resolvedBaseUrl = resolveApiBaseUrlForRuntime(api.base_url, context2.apiUrl);
-  const path7 = resolveApiPath(resolvedBaseUrl, pathInput);
+  const path8 = resolveApiPath(resolvedBaseUrl, pathInput);
   const tokenOverride = getStringFlag(flags, ["token"]);
   const authToken = tokenOverride ?? process.env.EVE_JOB_TOKEN ?? context2.token;
   if (printCurl) {
     const curl = buildCurlCommand({
       method,
-      url: path7,
+      url: path8,
       authToken,
       jsonBody: body,
       authHint: tokenOverride ? "override" : process.env.EVE_JOB_TOKEN ? "job" : "user"
@@ -68980,7 +69322,7 @@ async function handleCall(positionals, flags, context2) {
     console.log(curl);
     return;
   }
-  const response = await fetch(path7, {
+  const response = await fetch(path8, {
     method,
     headers: buildApiHeaders(authToken, body),
     body: body ? JSON.stringify(body) : void 0
@@ -69076,7 +69418,7 @@ async function fetchApiSpec(context2, projectId, name, env) {
 function buildCurlExamples(api, spec) {
   const paths = spec.paths ?? {};
   const examples = [];
-  Object.entries(paths).forEach(([path7, methods]) => {
+  Object.entries(paths).forEach(([path8, methods]) => {
     Object.entries(methods).forEach(([method, operation]) => {
       const lower = method.toLowerCase();
       if (!["get", "post", "put", "patch", "delete"].includes(lower)) {
@@ -69087,7 +69429,7 @@ function buildCurlExamples(api, spec) {
       const needsBody = ["post", "put", "patch"].includes(lower);
       const curl = buildCurlCommand({
         method: lower.toUpperCase(),
-        url: resolveApiPath(api.base_url, path7),
+        url: resolveApiPath(api.base_url, path8),
         authToken: api.auth_mode === "eve" ? "$EVE_JOB_TOKEN" : void 0,
         jsonBody: needsBody ? examplePayload ?? {} : void 0,
         authHint: "job"
@@ -69109,15 +69451,15 @@ function extractExamplePayload(requestBody) {
   if (examples.length === 0) return void 0;
   return examples[0]?.value;
 }
-function resolveApiPath(baseUrl, path7) {
-  if (path7.startsWith("http://") || path7.startsWith("https://")) {
-    return path7;
+function resolveApiPath(baseUrl, path8) {
+  if (path8.startsWith("http://") || path8.startsWith("https://")) {
+    return path8;
   }
   if (!baseUrl) {
-    return path7;
+    return path8;
   }
   const trimmedBase = baseUrl.endsWith("/") ? baseUrl.slice(0, -1) : baseUrl;
-  const trimmedPath = path7.startsWith("/") ? path7 : `/${path7}`;
+  const trimmedPath = path8.startsWith("/") ? path8 : `/${path8}`;
   return `${trimmedBase}${trimmedPath}`;
 }
 function resolveApiBaseUrlForRuntime(baseUrl, eveApiUrl) {
@@ -70846,13 +71188,13 @@ function Subscribe(postgres2, options) {
       }
     }
     function handle(a, b2) {
-      const path7 = b2.relation.schema + "." + b2.relation.table;
+      const path8 = b2.relation.schema + "." + b2.relation.table;
       call("*", a, b2);
-      call("*:" + path7, a, b2);
-      b2.relation.keys.length && call("*:" + path7 + "=" + b2.relation.keys.map((x2) => a[x2.name]), a, b2);
+      call("*:" + path8, a, b2);
+      b2.relation.keys.length && call("*:" + path8 + "=" + b2.relation.keys.map((x2) => a[x2.name]), a, b2);
       call(b2.command, a, b2);
-      call(b2.command + ":" + path7, a, b2);
-      b2.relation.keys.length && call(b2.command + ":" + path7 + "=" + b2.relation.keys.map((x2) => a[x2.name]), a, b2);
+      call(b2.command + ":" + path8, a, b2);
+      b2.relation.keys.length && call(b2.command + ":" + path8 + "=" + b2.relation.keys.map((x2) => a[x2.name]), a, b2);
     }
     function pong() {
       const x2 = Buffer.alloc(34);
@@ -70965,8 +71307,8 @@ function parseEvent(x) {
   const xs = x.match(/^(\*|insert|update|delete)?:?([^.]+?\.?[^=]+)?=?(.+)?/i) || [];
   if (!xs)
     throw new Error("Malformed subscribe pattern: " + x);
-  const [, command, path7, key] = xs;
-  return (command || "*") + (path7 ? ":" + (path7.indexOf(".") === -1 ? "public." + path7 : path7) : "") + (key ? "=" + key : "");
+  const [, command, path8, key] = xs;
+  return (command || "*") + (path8 ? ":" + (path8.indexOf(".") === -1 ? "public." + path8 : path8) : "") + (key ? "=" + key : "");
 }
 
 // ../../node_modules/.pnpm/postgres@3.4.8/node_modules/postgres/src/large.js
@@ -71111,10 +71453,10 @@ function Postgres(a, b2) {
       });
       return query;
     }
-    function file(path7, args = [], options2 = {}) {
+    function file(path8, args = [], options2 = {}) {
       arguments.length === 2 && !Array.isArray(args) && (options2 = args, args = []);
       const query = new Query([], args, (query2) => {
-        import_fs2.default.readFile(path7, "utf8", (err, string) => {
+        import_fs2.default.readFile(path8, "utf8", (err, string) => {
           if (err)
             return query2.reject(err);
           query2.strings = [string];
@@ -72502,10 +72844,10 @@ function padRight6(str, width) {
 }
 
 // src/commands/skills.ts
-var fs3 = __toESM(require("node:fs"));
-var path5 = __toESM(require("node:path"));
+var fs4 = __toESM(require("node:fs"));
+var path6 = __toESM(require("node:path"));
 var import_node_child_process7 = require("node:child_process");
-var UNIVERSAL_SKILLS_DIR = path5.join(".agents", "skills");
+var UNIVERSAL_SKILLS_DIR = path6.join(".agents", "skills");
 var PRIVATE_SKILLS_DIRNAME = "private-skills";
 async function handleSkills(subcommand, positionals, flags) {
   switch (subcommand) {
@@ -72521,8 +72863,8 @@ async function handleInstall(positionals, flags) {
   const skipInstalled = Boolean(flags["skip-installed"]);
   const projectRoot = process.cwd();
   const skillsBin = resolveSkillsBinary();
-  const manifestPath = path5.join(projectRoot, "skills.txt");
-  const skillsDir = path5.join(projectRoot, UNIVERSAL_SKILLS_DIR);
+  const manifestPath = path6.join(projectRoot, "skills.txt");
+  const skillsDir = path6.join(projectRoot, UNIVERSAL_SKILLS_DIR);
   const source = positionals[0];
   if (source) {
     const parsed = parseSkillSource(source);
@@ -72555,7 +72897,7 @@ async function handleInstall(positionals, flags) {
 function installSkill(skillsBin, skill, projectRoot) {
   console.log(`  Installing: ${skill.source} (${skill.type})`);
   const localDir = resolveLocalDirIfExists(skill, projectRoot);
-  const wantsExcludePrivate = localDir !== null && fs3.existsSync(path5.join(localDir, PRIVATE_SKILLS_DIRNAME)) && !sourcePathExplicitlyTargetsPrivate(skill.source);
+  const wantsExcludePrivate = localDir !== null && fs4.existsSync(path6.join(localDir, PRIVATE_SKILLS_DIRNAME)) && !sourcePathExplicitlyTargetsPrivate(skill.source);
   try {
     const agents = ["claude-code", "codex", "gemini-cli"];
     if (wantsExcludePrivate && localDir) {
@@ -72566,7 +72908,7 @@ function installSkill(skillsBin, skill, projectRoot) {
       }
       console.log(`  Installing ${skillDirs.length} public skill(s) (excluding ${PRIVATE_SKILLS_DIRNAME}/)...`);
       for (const dir of skillDirs) {
-        const rel = path5.relative(projectRoot, dir);
+        const rel = path6.relative(projectRoot, dir);
         const installSource = rel.startsWith(".") ? rel : `./${rel}`;
         for (const agent of agents) {
           (0, import_node_child_process7.execSync)(`${skillsBin} add ${JSON.stringify(installSource)} -a ${agent} -s '*' -y --full-depth`, {
@@ -72590,16 +72932,16 @@ function installSkill(skillsBin, skill, projectRoot) {
   }
 }
 function persistToManifest(manifestPath, source) {
-  if (!fs3.existsSync(manifestPath)) {
-    fs3.writeFileSync(manifestPath, `${source}
+  if (!fs4.existsSync(manifestPath)) {
+    fs4.writeFileSync(manifestPath, `${source}
 `);
     console.log(`Created skills.txt with ${source}`);
     return;
   }
-  const content = fs3.readFileSync(manifestPath, "utf-8");
+  const content = fs4.readFileSync(manifestPath, "utf-8");
   const lines = content.split("\n").map((l) => l.split("#")[0].trim());
   if (!lines.includes(source)) {
-    fs3.appendFileSync(manifestPath, `
+    fs4.appendFileSync(manifestPath, `
 ${source}
 `);
     console.log(`Added ${source} to skills.txt`);
@@ -72607,11 +72949,11 @@ ${source}
 }
 function resolveSkillsBinary() {
   const candidates = [
-    path5.resolve(__dirname, "..", "node_modules", ".bin", "skills"),
-    path5.resolve(__dirname, "..", "..", ".bin", "skills")
+    path6.resolve(__dirname, "..", "node_modules", ".bin", "skills"),
+    path6.resolve(__dirname, "..", "..", ".bin", "skills")
   ];
   for (const candidate of candidates) {
-    if (fs3.existsSync(candidate)) return candidate;
+    if (fs4.existsSync(candidate)) return candidate;
   }
   if (commandExists("skills")) return "skills";
   throw new Error(
@@ -72635,21 +72977,21 @@ function expandGlobPattern(pattern, basePath, explicitPrivateTarget) {
   const basePattern = pattern.replace(/\/\*+$/, "");
   let searchRoot;
   if (basePattern.startsWith("./") || basePattern.startsWith("../")) {
-    searchRoot = path5.resolve(path5.dirname(basePath), basePattern);
+    searchRoot = path6.resolve(path6.dirname(basePath), basePattern);
   } else if (basePattern.startsWith("/")) {
     searchRoot = basePattern;
   } else if (basePattern.startsWith("~")) {
     searchRoot = basePattern.replace(/^~/, process.env.HOME || "~");
   } else {
-    searchRoot = path5.resolve(path5.dirname(basePath), basePattern);
+    searchRoot = path6.resolve(path6.dirname(basePath), basePattern);
   }
-  if (!fs3.existsSync(searchRoot)) {
+  if (!fs4.existsSync(searchRoot)) {
     console.warn(`Warning: Glob pattern base directory not found: ${searchRoot}`);
     return sources;
   }
   const findSkillDirs2 = (dir, depth) => {
     try {
-      const entries = fs3.readdirSync(dir, { withFileTypes: true });
+      const entries = fs4.readdirSync(dir, { withFileTypes: true });
       for (const entry of entries) {
         if (!entry.isDirectory() || entry.name.startsWith(".")) {
           continue;
@@ -72657,11 +72999,11 @@ function expandGlobPattern(pattern, basePath, explicitPrivateTarget) {
         if (!explicitPrivateTarget && entry.name === PRIVATE_SKILLS_DIRNAME) {
           continue;
         }
-        const fullPath = path5.join(dir, entry.name);
-        const skillMdPath = path5.join(fullPath, "SKILL.md");
-        if (fs3.existsSync(skillMdPath)) {
+        const fullPath = path6.join(dir, entry.name);
+        const skillMdPath = path6.join(fullPath, "SKILL.md");
+        if (fs4.existsSync(skillMdPath)) {
           const name = entry.name;
-          const relativePath = path5.relative(path5.dirname(basePath), fullPath);
+          const relativePath = path6.relative(path6.dirname(basePath), fullPath);
           const source = relativePath.startsWith(".") ? relativePath : `./${relativePath}`;
           if (!explicitPrivateTarget && pathContainsPrivateSkills(source)) {
             continue;
@@ -72685,10 +73027,10 @@ function expandGlobPattern(pattern, basePath, explicitPrivateTarget) {
   return sources;
 }
 function parseSkillsManifest(manifestPath) {
-  if (!fs3.existsSync(manifestPath)) {
+  if (!fs4.existsSync(manifestPath)) {
     return [];
   }
-  const content = fs3.readFileSync(manifestPath, "utf-8");
+  const content = fs4.readFileSync(manifestPath, "utf-8");
   const sources = [];
   for (const rawLine of content.split("\n")) {
     const line = rawLine.split("#")[0].trim();
@@ -72714,22 +73056,22 @@ function parseSkillSource(line) {
     return { raw: line, source: line, type: "github", name: name2 };
   }
   if (line.startsWith("/") || line.startsWith("~")) {
-    const name2 = path5.basename(line);
+    const name2 = path6.basename(line);
     return { raw: line, source: line, type: "local", name: name2 };
   }
   if (line.startsWith("./") || line.startsWith("../")) {
-    const name2 = path5.basename(line);
+    const name2 = path6.basename(line);
     return { raw: line, source: line, type: "local", name: name2 };
   }
-  if (fs3.existsSync(line)) {
-    const name2 = path5.basename(line);
+  if (fs4.existsSync(line)) {
+    const name2 = path6.basename(line);
     return { raw: line, source: `./${line}`, type: "local", name: name2 };
   }
   if (line.includes("/") && !line.includes(" ")) {
     const name2 = extractNameFromRepo(line);
     return { raw: line, source: line, type: "github", name: name2 };
   }
-  const name = path5.basename(line);
+  const name = path6.basename(line);
   return { raw: line, source: `./${line}`, type: "local", name };
 }
 function extractNameFromUrl(url) {
@@ -72737,7 +73079,7 @@ function extractNameFromUrl(url) {
   if (match) {
     return match[1].replace(/\.git$/, "");
   }
-  return path5.basename(new URL(url).pathname).replace(/\.git$/, "");
+  return path6.basename(new URL(url).pathname).replace(/\.git$/, "");
 }
 function extractNameFromRepo(repo) {
   const parts = repo.split("/");
@@ -72745,10 +73087,10 @@ function extractNameFromRepo(repo) {
 }
 function getInstalledSkills(skillsDir) {
   const installed = /* @__PURE__ */ new Set();
-  if (!fs3.existsSync(skillsDir)) {
+  if (!fs4.existsSync(skillsDir)) {
     return installed;
   }
-  const entries = fs3.readdirSync(skillsDir, { withFileTypes: true });
+  const entries = fs4.readdirSync(skillsDir, { withFileTypes: true });
   for (const entry of entries) {
     if (entry.isDirectory() && !entry.name.startsWith(".")) {
       installed.add(entry.name);
@@ -72757,46 +73099,46 @@ function getInstalledSkills(skillsDir) {
   return installed;
 }
 function ensureSkillsSymlink(projectRoot) {
-  const agentSkills = path5.join(projectRoot, UNIVERSAL_SKILLS_DIR);
-  const claudeDir = path5.join(projectRoot, ".claude");
-  const claudeSkills = path5.join(claudeDir, "skills");
-  if (!fs3.existsSync(agentSkills)) {
-    fs3.mkdirSync(agentSkills, { recursive: true });
+  const agentSkills = path6.join(projectRoot, UNIVERSAL_SKILLS_DIR);
+  const claudeDir = path6.join(projectRoot, ".claude");
+  const claudeSkills = path6.join(claudeDir, "skills");
+  if (!fs4.existsSync(agentSkills)) {
+    fs4.mkdirSync(agentSkills, { recursive: true });
   }
-  if (!fs3.existsSync(claudeDir)) {
-    fs3.mkdirSync(claudeDir, { recursive: true });
+  if (!fs4.existsSync(claudeDir)) {
+    fs4.mkdirSync(claudeDir, { recursive: true });
   }
-  if (fs3.existsSync(claudeSkills) && !fs3.lstatSync(claudeSkills).isSymbolicLink()) {
+  if (fs4.existsSync(claudeSkills) && !fs4.lstatSync(claudeSkills).isSymbolicLink()) {
     try {
-      const claudeStat = fs3.lstatSync(claudeSkills);
+      const claudeStat = fs4.lstatSync(claudeSkills);
       if (claudeStat.isDirectory()) {
-        const entries = fs3.readdirSync(agentSkills, { withFileTypes: true });
+        const entries = fs4.readdirSync(agentSkills, { withFileTypes: true });
         for (const entry of entries) {
           if (!entry.isDirectory() || entry.name.startsWith(".")) continue;
-          const dst = path5.join(claudeSkills, entry.name);
-          if (fs3.existsSync(dst)) continue;
-          fs3.symlinkSync(path5.join("..", "..", UNIVERSAL_SKILLS_DIR, entry.name), dst);
+          const dst = path6.join(claudeSkills, entry.name);
+          if (fs4.existsSync(dst)) continue;
+          fs4.symlinkSync(path6.join("..", "..", UNIVERSAL_SKILLS_DIR, entry.name), dst);
         }
       }
     } catch {
     }
     return;
   }
-  if (fs3.existsSync(claudeSkills)) {
-    const stat = fs3.lstatSync(claudeSkills);
+  if (fs4.existsSync(claudeSkills)) {
+    const stat = fs4.lstatSync(claudeSkills);
     if (stat.isSymbolicLink()) {
-      const target = fs3.readlinkSync(claudeSkills);
+      const target = fs4.readlinkSync(claudeSkills);
       if (target === `../${UNIVERSAL_SKILLS_DIR}` || target === agentSkills) {
         return;
       }
-      fs3.unlinkSync(claudeSkills);
+      fs4.unlinkSync(claudeSkills);
     } else {
       console.log(".claude/skills exists and is not a symlink; skipping");
       return;
     }
   }
   try {
-    fs3.symlinkSync(`../${UNIVERSAL_SKILLS_DIR}`, claudeSkills);
+    fs4.symlinkSync(`../${UNIVERSAL_SKILLS_DIR}`, claudeSkills);
     console.log(`Linked .claude/skills -> ${UNIVERSAL_SKILLS_DIR}`);
   } catch (err) {
     console.warn("Warning: Failed to create symlink:", err);
@@ -72808,10 +73150,10 @@ function resolveLocalDirIfExists(skill, projectRoot) {
   if (source.startsWith("~")) {
     source = source.replace(/^~/, process.env.HOME || "~");
   }
-  const abs = path5.isAbsolute(source) ? source : path5.resolve(projectRoot, source);
+  const abs = path6.isAbsolute(source) ? source : path6.resolve(projectRoot, source);
   try {
-    if (!fs3.existsSync(abs)) return null;
-    if (!fs3.statSync(abs).isDirectory()) return null;
+    if (!fs4.existsSync(abs)) return null;
+    if (!fs4.statSync(abs).isDirectory()) return null;
     return abs;
   } catch {
     return null;
@@ -72821,7 +73163,7 @@ function sourcePathExplicitlyTargetsPrivate(source) {
   return pathContainsPrivateSkills(source);
 }
 function pathContainsPrivateSkills(source) {
-  const normalized = path5.normalize(source).replace(/\\/g, "/");
+  const normalized = path6.normalize(source).replace(/\\/g, "/");
   const segments = normalized.split("/").filter(Boolean);
   return segments.includes(PRIVATE_SKILLS_DIRNAME);
 }
@@ -72837,7 +73179,7 @@ function findSkillDirs(rootDir, opts) {
   const walk = (dir) => {
     let entries;
     try {
-      entries = fs3.readdirSync(dir, { withFileTypes: true });
+      entries = fs4.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -72849,7 +73191,7 @@ function findSkillDirs(rootDir, opts) {
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
       if (shouldSkipDir(dir, entry.name)) continue;
-      walk(path5.join(dir, entry.name));
+      walk(path6.join(dir, entry.name));
     }
   };
   walk(rootDir);
@@ -72857,18 +73199,20 @@ function findSkillDirs(rootDir, opts) {
 }
 
 // src/commands/admin.ts
+var import_node_fs10 = require("node:fs");
 async function handleAdmin(subcommand, positionals, flags, context2) {
   const json = Boolean(flags.json);
   switch (subcommand) {
     case "invite": {
       const githubUsername = getStringFlag(flags, ["github"]);
+      const sshKeyPath = getStringFlag(flags, ["ssh-key"]);
       const email = getStringFlag(flags, ["email"]);
       const role = getStringFlag(flags, ["role"]) ?? "member";
       const orgId = getStringFlag(flags, ["org"]) ?? context2.orgId;
       const web = getBooleanFlag(flags, ["web"]) ?? false;
       const redirectTo = getStringFlag(flags, ["redirect-to"]);
       if (!email) {
-        throw new Error("Usage: eve admin invite --email <email> [--github <username>] [--role <role>] [--org <org_id>] [--web] [--redirect-to <url>]");
+        throw new Error("Usage: eve admin invite --email <email> [--github <username>] [--ssh-key <path>] [--role <role>] [--org <org_id>] [--web] [--redirect-to <url>]");
       }
       if (!["owner", "admin", "member"].includes(role)) {
         throw new Error(`Invalid role: ${role}. Must be one of: owner, admin, member`);
@@ -72908,6 +73252,29 @@ async function handleAdmin(subcommand, positionals, flags, context2) {
           results.keys_registered += 1;
         }
       }
+      if (sshKeyPath) {
+        if (!(0, import_node_fs10.existsSync)(sshKeyPath)) {
+          throw new Error(`SSH public key not found: ${sshKeyPath}`);
+        }
+        const publicKey = (0, import_node_fs10.readFileSync)(sshKeyPath, "utf8").trim();
+        if (!publicKey.startsWith("ssh-")) {
+          throw new Error(`File does not look like an SSH public key: ${sshKeyPath}`);
+        }
+        const identity = await requestJson(context2, "/auth/identities", {
+          method: "POST",
+          body: {
+            email,
+            public_key: publicKey,
+            label: `ssh-key`
+          }
+        });
+        results.identities.push(identity);
+        results.keys_registered += 1;
+      }
+      if (!githubUsername && !sshKeyPath && !web) {
+        console.warn("Warning: No auth method specified (--github, --ssh-key, or --web). User won't be able to log in.");
+        console.warn('Tip: The user can self-register via: eve auth request-access --org "<org>" --ssh-key ~/.ssh/id_ed25519.pub --wait');
+      }
       if (web) {
         const body = { email };
         if (redirectTo) {
@@ -73117,8 +73484,8 @@ async function handleAdmin(subcommand, positionals, flags, context2) {
           if (untilRaw) params.set("until", untilRaw);
           if (limit) params.set("limit", limit);
           const qs = params.toString();
-          const path7 = `/admin/orgs/${orgId}/balance/transactions${qs ? `?${qs}` : ""}`;
-          const response = await requestJson(context2, path7);
+          const path8 = `/admin/orgs/${orgId}/balance/transactions${qs ? `?${qs}` : ""}`;
+          const response = await requestJson(context2, path8);
           if (json) {
             outputJson(response, true);
           } else {
@@ -73156,8 +73523,8 @@ ${response.length} transaction(s)`);
           if (untilRaw) params.set("until", untilRaw);
           if (limit) params.set("limit", limit);
           const qs = params.toString();
-          const path7 = `/admin/orgs/${orgId}/usage${qs ? `?${qs}` : ""}`;
-          const response = await requestJson(context2, path7);
+          const path8 = `/admin/orgs/${orgId}/usage${qs ? `?${qs}` : ""}`;
+          const response = await requestJson(context2, path8);
           if (json) {
             outputJson(response, true);
           } else {
@@ -73181,8 +73548,8 @@ ${response.length} record(s)`);
           if (sinceRaw) params.set("since", parseSinceValue4(sinceRaw));
           if (untilRaw) params.set("until", untilRaw);
           const qs = params.toString();
-          const path7 = `/admin/orgs/${orgId}/usage/summary${qs ? `?${qs}` : ""}`;
-          const response = await requestJson(context2, path7);
+          const path8 = `/admin/orgs/${orgId}/usage/summary${qs ? `?${qs}` : ""}`;
+          const response = await requestJson(context2, path8);
           if (json) {
             outputJson(response, true);
           } else {
@@ -73218,8 +73585,8 @@ ${response.length} record(s)`);
           if (limit) params.set("limit", limit);
           if (offset) params.set("offset", offset);
           const query = params.toString();
-          const path7 = `/admin/ingress-aliases${query ? `?${query}` : ""}`;
-          const response = await requestJson(context2, path7);
+          const path8 = `/admin/ingress-aliases${query ? `?${query}` : ""}`;
+          const response = await requestJson(context2, path8);
           if (json) {
             outputJson(response, true);
             return;
@@ -73314,6 +73681,8 @@ ${rows.length} alias(es)`);
           }
           console.log(`Approve: eve admin access-requests approve <id>`);
           console.log(`Reject:  eve admin access-requests reject <id> --reason "..."`);
+          console.log("");
+          console.log(`Tip: Users can self-register with: eve auth request-access --org "Org Name" --ssh-key ~/.ssh/id_ed25519.pub --wait`);
           return;
         }
       }
@@ -73374,11 +73743,11 @@ async function fetchGitHubKeys2(username) {
 
 // src/commands/agents.ts
 var import_node_child_process8 = require("node:child_process");
-var import_node_fs10 = require("node:fs");
+var import_node_fs11 = require("node:fs");
 var import_node_path11 = require("node:path");
 var import_yaml3 = require("yaml");
 function readYamlFile(filePath) {
-  const raw = (0, import_node_fs10.readFileSync)(filePath, "utf-8");
+  const raw = (0, import_node_fs11.readFileSync)(filePath, "utf-8");
   const parsed = (0, import_yaml3.parse)(raw);
   if (!parsed || typeof parsed !== "object") {
     throw new Error(`Invalid YAML in ${filePath}`);
@@ -73401,11 +73770,11 @@ function resolveAgentsConfigPaths(repoRoot, manifest) {
 function pickString(value) {
   return typeof value === "string" && value.trim().length > 0 ? value : void 0;
 }
-function ensureFileExists(path7, label) {
-  if (!(0, import_node_fs10.existsSync)(path7)) {
-    throw new Error(`Missing ${label} at ${path7}. Update manifest config_path or add the file.`);
+function ensureFileExists(path8, label) {
+  if (!(0, import_node_fs11.existsSync)(path8)) {
+    throw new Error(`Missing ${label} at ${path8}. Update manifest config_path or add the file.`);
   }
-  return path7;
+  return path8;
 }
 function isLocalApiUrl(apiUrl) {
   try {
@@ -73419,7 +73788,7 @@ function isLocalApiUrl(apiUrl) {
 function loadAgentsConfig(repoRoot) {
   const eveDir = (0, import_node_path11.join)(repoRoot, ".eve");
   const manifestPath = (0, import_node_path11.join)(eveDir, "manifest.yaml");
-  if ((0, import_node_fs10.existsSync)(manifestPath)) {
+  if ((0, import_node_fs11.existsSync)(manifestPath)) {
     const manifest = readYamlFile(manifestPath);
     const xEve = manifest["x-eve"] || manifest["x_eve"] || {};
     const policy = xEve["agents"] || null;
@@ -73469,16 +73838,16 @@ async function resolvePacksAndMerge(repoRoot, manifest, projectSlug) {
     }
   }
   const configPaths = resolveAgentsConfigPaths(repoRoot, manifest);
-  if ((0, import_node_fs10.existsSync)(configPaths.agentsPath)) {
-    const projectAgents = (0, import_yaml3.parse)((0, import_node_fs10.readFileSync)(configPaths.agentsPath, "utf-8")) ?? {};
+  if ((0, import_node_fs11.existsSync)(configPaths.agentsPath)) {
+    const projectAgents = (0, import_yaml3.parse)((0, import_node_fs11.readFileSync)(configPaths.agentsPath, "utf-8")) ?? {};
     mergedAgents = mergeMapConfig(mergedAgents, projectAgents);
   }
-  if ((0, import_node_fs10.existsSync)(configPaths.teamsPath)) {
-    const projectTeams = (0, import_yaml3.parse)((0, import_node_fs10.readFileSync)(configPaths.teamsPath, "utf-8")) ?? {};
+  if ((0, import_node_fs11.existsSync)(configPaths.teamsPath)) {
+    const projectTeams = (0, import_yaml3.parse)((0, import_node_fs11.readFileSync)(configPaths.teamsPath, "utf-8")) ?? {};
     mergedTeams = mergeMapConfig(mergedTeams, projectTeams);
   }
-  if ((0, import_node_fs10.existsSync)(configPaths.chatPath)) {
-    const projectChat = (0, import_yaml3.parse)((0, import_node_fs10.readFileSync)(configPaths.chatPath, "utf-8")) ?? {};
+  if ((0, import_node_fs11.existsSync)(configPaths.chatPath)) {
+    const projectChat = (0, import_yaml3.parse)((0, import_node_fs11.readFileSync)(configPaths.chatPath, "utf-8")) ?? {};
     mergedChat = mergeChatConfig(
       mergedChat,
       projectChat
@@ -73508,9 +73877,9 @@ async function resolvePacksAndMerge(repoRoot, manifest, projectSlug) {
     }
   };
   const eveDir = (0, import_node_path11.join)(repoRoot, ".eve");
-  (0, import_node_fs10.mkdirSync)(eveDir, { recursive: true });
+  (0, import_node_fs11.mkdirSync)(eveDir, { recursive: true });
   const lockfilePath = (0, import_node_path11.join)(eveDir, "packs.lock.yaml");
-  (0, import_node_fs10.writeFileSync)(lockfilePath, (0, import_yaml3.stringify)(lockfile), "utf-8");
+  (0, import_node_fs11.writeFileSync)(lockfilePath, (0, import_yaml3.stringify)(lockfile), "utf-8");
   console.log(`  \u2713 Lockfile written: .eve/packs.lock.yaml`);
   const packRefs = resolvedPacks.map((p) => ({ id: p.id, source: p.source, ref: p.ref }));
   return {
@@ -73653,7 +74022,7 @@ async function handleAgents(subcommand, positionals, flags, context2) {
         throw new Error("Working tree is dirty. Commit changes or pass --allow-dirty to sync anyway.");
       }
       const manifestPath = (0, import_node_path11.join)(repoRoot, ".eve", "manifest.yaml");
-      if (!(0, import_node_fs10.existsSync)(manifestPath)) {
+      if (!(0, import_node_fs11.existsSync)(manifestPath)) {
         throw new Error(`Missing manifest at ${manifestPath}. Expected .eve/manifest.yaml.`);
       }
       const manifest = readYamlFile(manifestPath);
@@ -73682,9 +74051,9 @@ async function handleAgents(subcommand, positionals, flags, context2) {
         packRefs = packResult.packRefs;
       } else {
         const configPaths = resolveAgentsConfigPaths(repoRoot, manifest);
-        agentsYaml = (0, import_node_fs10.readFileSync)(ensureFileExists(configPaths.agentsPath, "agents config"), "utf-8");
-        teamsYaml = (0, import_node_fs10.readFileSync)(ensureFileExists(configPaths.teamsPath, "teams config"), "utf-8");
-        chatYaml = (0, import_node_fs10.readFileSync)(ensureFileExists(configPaths.chatPath, "chat config"), "utf-8");
+        agentsYaml = (0, import_node_fs11.readFileSync)(ensureFileExists(configPaths.agentsPath, "agents config"), "utf-8");
+        teamsYaml = (0, import_node_fs11.readFileSync)(ensureFileExists(configPaths.teamsPath, "teams config"), "utf-8");
+        chatYaml = (0, import_node_fs11.readFileSync)(ensureFileExists(configPaths.chatPath, "chat config"), "utf-8");
       }
       let gitSha;
       let branch;
@@ -73807,8 +74176,8 @@ function formatAgeSeconds(isoDate) {
 }
 
 // src/commands/init.ts
-var fs4 = __toESM(require("node:fs"));
-var path6 = __toESM(require("node:path"));
+var fs5 = __toESM(require("node:fs"));
+var path7 = __toESM(require("node:path"));
 var os3 = __toESM(require("node:os"));
 var import_node_child_process9 = require("node:child_process");
 var DEFAULT_TEMPLATE = "https://github.com/incept5/eve-horizon-starter";
@@ -73818,12 +74187,12 @@ async function handleInit(positionals, flags) {
   const template = getStringFlag(flags, ["template", "t"]) || DEFAULT_TEMPLATE;
   const branch = getStringFlag(flags, ["branch", "b"]) || DEFAULT_BRANCH;
   const skipSkills = Boolean(flags["skip-skills"]);
-  const resolvedTarget = path6.resolve(targetDir);
-  const targetName = path6.basename(resolvedTarget);
+  const resolvedTarget = path7.resolve(targetDir);
+  const targetName = path7.basename(resolvedTarget);
   const isCurrentDir = targetDir === ".";
   if (isCurrentDir) {
-    if (fs4.existsSync(resolvedTarget)) {
-      const entries = fs4.readdirSync(resolvedTarget);
+    if (fs5.existsSync(resolvedTarget)) {
+      const entries = fs5.readdirSync(resolvedTarget);
       const nonHiddenEntries = entries.filter((e) => !e.startsWith("."));
       if (nonHiddenEntries.length > 0) {
         throw new Error(
@@ -73833,8 +74202,8 @@ async function handleInit(positionals, flags) {
       }
     }
   } else {
-    if (fs4.existsSync(resolvedTarget)) {
-      const entries = fs4.readdirSync(resolvedTarget);
+    if (fs5.existsSync(resolvedTarget)) {
+      const entries = fs5.readdirSync(resolvedTarget);
       if (entries.length > 0) {
         throw new Error(
           `Directory '${targetDir}' already exists and is not empty.`
@@ -73846,7 +74215,7 @@ async function handleInit(positionals, flags) {
   console.log(`Template: ${template}`);
   console.log(`Branch: ${branch}`);
   console.log("");
-  const tempDir = fs4.mkdtempSync(path6.join(os3.tmpdir(), "eve-init-"));
+  const tempDir = fs5.mkdtempSync(path7.join(os3.tmpdir(), "eve-init-"));
   try {
     console.log("Downloading template...");
     const cloneResult = (0, import_node_child_process9.spawnSync)("git", ["clone", "--depth=1", `--branch=${branch}`, template, tempDir], {
@@ -73859,12 +74228,12 @@ async function handleInit(positionals, flags) {
 ${cloneResult.stderr || cloneResult.stdout}`
       );
     }
-    const gitDir = path6.join(tempDir, ".git");
-    if (fs4.existsSync(gitDir)) {
-      fs4.rmSync(gitDir, { recursive: true, force: true });
+    const gitDir = path7.join(tempDir, ".git");
+    if (fs5.existsSync(gitDir)) {
+      fs5.rmSync(gitDir, { recursive: true, force: true });
     }
-    if (!fs4.existsSync(resolvedTarget)) {
-      fs4.mkdirSync(resolvedTarget, { recursive: true });
+    if (!fs5.existsSync(resolvedTarget)) {
+      fs5.mkdirSync(resolvedTarget, { recursive: true });
     }
     console.log("Setting up project...");
     copyDirRecursive(tempDir, resolvedTarget);
@@ -73899,38 +74268,38 @@ ${cloneResult.stderr || cloneResult.stdout}`
     console.log("  - Set up your project manifest");
     console.log("  - Help you set up your own Git remote");
   } finally {
-    if (fs4.existsSync(tempDir)) {
-      fs4.rmSync(tempDir, { recursive: true, force: true });
+    if (fs5.existsSync(tempDir)) {
+      fs5.rmSync(tempDir, { recursive: true, force: true });
     }
   }
 }
 function copyDirRecursive(src, dest) {
-  const entries = fs4.readdirSync(src, { withFileTypes: true });
+  const entries = fs5.readdirSync(src, { withFileTypes: true });
   for (const entry of entries) {
-    const srcPath = path6.join(src, entry.name);
-    const destPath = path6.join(dest, entry.name);
+    const srcPath = path7.join(src, entry.name);
+    const destPath = path7.join(dest, entry.name);
     if (entry.isDirectory()) {
-      if (!fs4.existsSync(destPath)) {
-        fs4.mkdirSync(destPath, { recursive: true });
+      if (!fs5.existsSync(destPath)) {
+        fs5.mkdirSync(destPath, { recursive: true });
       }
       copyDirRecursive(srcPath, destPath);
     } else if (entry.isSymbolicLink()) {
-      const linkTarget = fs4.readlinkSync(srcPath);
-      if (!fs4.existsSync(destPath)) {
-        fs4.symlinkSync(linkTarget, destPath);
+      const linkTarget = fs5.readlinkSync(srcPath);
+      if (!fs5.existsSync(destPath)) {
+        fs5.symlinkSync(linkTarget, destPath);
       }
     } else {
-      fs4.copyFileSync(srcPath, destPath);
+      fs5.copyFileSync(srcPath, destPath);
     }
   }
 }
 function resolveSkillsBinary2() {
   const candidates = [
-    path6.resolve(__dirname, "..", "node_modules", ".bin", "skills"),
-    path6.resolve(__dirname, "..", "..", ".bin", "skills")
+    path7.resolve(__dirname, "..", "node_modules", ".bin", "skills"),
+    path7.resolve(__dirname, "..", "..", ".bin", "skills")
   ];
   for (const candidate of candidates) {
-    if (fs4.existsSync(candidate)) return candidate;
+    if (fs5.existsSync(candidate)) return candidate;
   }
   const result = (0, import_node_child_process9.spawnSync)("which", ["skills"], { encoding: "utf8" });
   if (result.status === 0) return "skills";
@@ -73939,15 +74308,15 @@ function resolveSkillsBinary2() {
   );
 }
 async function installSkills(projectRoot) {
-  const skillsTxt = path6.join(projectRoot, "skills.txt");
-  if (!fs4.existsSync(skillsTxt)) {
+  const skillsTxt = path7.join(projectRoot, "skills.txt");
+  if (!fs5.existsSync(skillsTxt)) {
     console.log("No skills.txt found, skipping skill installation");
     return;
   }
   const skillsBin = resolveSkillsBinary2();
   const agents = ["claude-code", "codex", "gemini-cli"];
   try {
-    const content = fs4.readFileSync(skillsTxt, "utf-8");
+    const content = fs5.readFileSync(skillsTxt, "utf-8");
     const lines = content.split("\n").map((line) => line.split("#")[0].trim()).filter((line) => line.length > 0);
     for (const source of lines) {
       console.log(`  Installing: ${source}`);
@@ -73983,51 +74352,51 @@ async function installSkills(projectRoot) {
   }
 }
 function ensureSkillsSymlink2(projectRoot) {
-  const agentSkills = path6.join(projectRoot, ".agents", "skills");
-  const claudeDir = path6.join(projectRoot, ".claude");
-  const claudeSkills = path6.join(claudeDir, "skills");
-  if (!fs4.existsSync(agentSkills)) {
-    fs4.mkdirSync(agentSkills, { recursive: true });
+  const agentSkills = path7.join(projectRoot, ".agents", "skills");
+  const claudeDir = path7.join(projectRoot, ".claude");
+  const claudeSkills = path7.join(claudeDir, "skills");
+  if (!fs5.existsSync(agentSkills)) {
+    fs5.mkdirSync(agentSkills, { recursive: true });
   }
-  if (!fs4.existsSync(claudeDir)) {
-    fs4.mkdirSync(claudeDir, { recursive: true });
+  if (!fs5.existsSync(claudeDir)) {
+    fs5.mkdirSync(claudeDir, { recursive: true });
   }
-  if (fs4.existsSync(claudeSkills) && !fs4.lstatSync(claudeSkills).isSymbolicLink()) {
+  if (fs5.existsSync(claudeSkills) && !fs5.lstatSync(claudeSkills).isSymbolicLink()) {
     try {
-      const stat = fs4.lstatSync(claudeSkills);
+      const stat = fs5.lstatSync(claudeSkills);
       if (stat.isDirectory()) {
-        const entries = fs4.readdirSync(agentSkills, { withFileTypes: true });
+        const entries = fs5.readdirSync(agentSkills, { withFileTypes: true });
         for (const entry of entries) {
           if (!entry.isDirectory() || entry.name.startsWith(".")) continue;
-          const dst = path6.join(claudeSkills, entry.name);
-          if (fs4.existsSync(dst)) continue;
-          fs4.symlinkSync(path6.join("..", "..", ".agents", "skills", entry.name), dst);
+          const dst = path7.join(claudeSkills, entry.name);
+          if (fs5.existsSync(dst)) continue;
+          fs5.symlinkSync(path7.join("..", "..", ".agents", "skills", entry.name), dst);
         }
       }
     } catch {
     }
     return;
   }
-  if (fs4.existsSync(claudeSkills)) {
-    const stat = fs4.lstatSync(claudeSkills);
+  if (fs5.existsSync(claudeSkills)) {
+    const stat = fs5.lstatSync(claudeSkills);
     if (stat.isSymbolicLink()) {
-      const target = fs4.readlinkSync(claudeSkills);
+      const target = fs5.readlinkSync(claudeSkills);
       if (target === "../.agents/skills" || target === agentSkills) {
         return;
       }
-      fs4.unlinkSync(claudeSkills);
+      fs5.unlinkSync(claudeSkills);
     } else {
       return;
     }
   }
   try {
-    fs4.symlinkSync("../.agents/skills", claudeSkills);
+    fs5.symlinkSync("../.agents/skills", claudeSkills);
   } catch {
   }
 }
 
 // src/commands/release.ts
-var import_node_fs11 = require("node:fs");
+var import_node_fs12 = require("node:fs");
 var import_node_path12 = require("node:path");
 async function handleRelease2(subcommand, positionals, flags, context2) {
   const json = Boolean(flags.json);
@@ -74042,7 +74411,7 @@ async function handleRelease2(subcommand, positionals, flags, context2) {
         const dir = typeof flags.dir === "string" ? flags.dir : process.cwd();
         const manifestPath = (0, import_node_path12.join)(dir, ".eve", "manifest.yaml");
         try {
-          const yaml = (0, import_node_fs11.readFileSync)(manifestPath, "utf-8");
+          const yaml = (0, import_node_fs12.readFileSync)(manifestPath, "utf-8");
           const projectMatch = yaml.match(/^project:\s*(\S+)/m);
           if (projectMatch) {
             projectId = projectMatch[1];
@@ -74091,7 +74460,7 @@ Make sure the release exists and the tag is correct.`
 }
 
 // src/commands/manifest.ts
-var import_node_fs12 = require("node:fs");
+var import_node_fs13 = require("node:fs");
 var import_node_path13 = require("node:path");
 async function handleManifest(subcommand, positionals, flags, context2) {
   const json = Boolean(flags.json);
@@ -74106,7 +74475,7 @@ async function handleManifest(subcommand, positionals, flags, context2) {
       let manifestYaml;
       if (!useLatest) {
         try {
-          manifestYaml = (0, import_node_fs12.readFileSync)(manifestPath, "utf-8");
+          manifestYaml = (0, import_node_fs13.readFileSync)(manifestPath, "utf-8");
         } catch (error) {
           throw new Error(`Failed to read manifest at ${manifestPath}: ${error.message}`);
         }
@@ -74174,7 +74543,7 @@ async function handleManifest(subcommand, positionals, flags, context2) {
 }
 
 // src/commands/packs.ts
-var import_node_fs13 = require("node:fs");
+var import_node_fs14 = require("node:fs");
 var import_node_path14 = require("node:path");
 var import_yaml4 = require("yaml");
 async function handlePacks(subcommand, _rest, flags, _context) {
@@ -74196,12 +74565,12 @@ async function handlePacks(subcommand, _rest, flags, _context) {
 function printPacksStatus(repoRoot) {
   const lockfilePath = (0, import_node_path14.join)(repoRoot, ".eve", "packs.lock.yaml");
   const manifestPath = (0, import_node_path14.join)(repoRoot, ".eve", "manifest.yaml");
-  if (!(0, import_node_fs13.existsSync)(lockfilePath)) {
+  if (!(0, import_node_fs14.existsSync)(lockfilePath)) {
     console.log("No lockfile found at .eve/packs.lock.yaml");
     console.log('Run "eve agents sync" to resolve packs and generate the lockfile.');
     return;
   }
-  const lockRaw = (0, import_node_fs13.readFileSync)(lockfilePath, "utf-8");
+  const lockRaw = (0, import_node_fs14.readFileSync)(lockfilePath, "utf-8");
   const lock = (0, import_yaml4.parse)(lockRaw);
   if (!lock || !lock.packs) {
     console.log("Lockfile is empty or malformed.");
@@ -74236,8 +74605,8 @@ function printPacksStatus(repoRoot) {
   console.log(`  Agents: ${lock.effective.agents_count}`);
   console.log(`  Teams:  ${lock.effective.teams_count}`);
   console.log(`  Routes: ${lock.effective.routes_count}`);
-  if ((0, import_node_fs13.existsSync)(manifestPath)) {
-    const manifestRaw = (0, import_node_fs13.readFileSync)(manifestPath, "utf-8");
+  if ((0, import_node_fs14.existsSync)(manifestPath)) {
+    const manifestRaw = (0, import_node_fs14.readFileSync)(manifestPath, "utf-8");
     const manifest = (0, import_yaml4.parse)(manifestRaw);
     if (manifest) {
       const xEve = manifest["x-eve"] ?? manifest["x_eve"] ?? {};
@@ -74284,10 +74653,10 @@ function printPacksResolve(repoRoot, dryRun) {
   if (dryRun) {
     const lockfilePath = (0, import_node_path14.join)(repoRoot, ".eve", "packs.lock.yaml");
     const manifestPath = (0, import_node_path14.join)(repoRoot, ".eve", "manifest.yaml");
-    if (!(0, import_node_fs13.existsSync)(manifestPath)) {
+    if (!(0, import_node_fs14.existsSync)(manifestPath)) {
       throw new Error("No manifest found at .eve/manifest.yaml");
     }
-    const manifestRaw = (0, import_node_fs13.readFileSync)(manifestPath, "utf-8");
+    const manifestRaw = (0, import_node_fs14.readFileSync)(manifestPath, "utf-8");
     const manifest = (0, import_yaml4.parse)(manifestRaw);
     if (!manifest) {
       throw new Error("Manifest is empty or malformed.");
@@ -74305,8 +74674,8 @@ function printPacksResolve(repoRoot, dryRun) {
       const refShort = mp.ref ? mp.ref.substring(0, 12) : "(local)";
       console.log(`  - ${mp.source} @ ${refShort}`);
     }
-    if ((0, import_node_fs13.existsSync)(lockfilePath)) {
-      const lockRaw = (0, import_node_fs13.readFileSync)(lockfilePath, "utf-8");
+    if ((0, import_node_fs14.existsSync)(lockfilePath)) {
+      const lockRaw = (0, import_node_fs14.readFileSync)(lockfilePath, "utf-8");
       const lock = (0, import_yaml4.parse)(lockRaw);
       if (lock?.packs) {
         const drift = detectDrift(lock, manifestPacks);
@@ -75196,7 +75565,7 @@ Cursor: ${result.cursor}`);
 }
 
 // src/commands/migrate.ts
-var import_node_fs14 = require("node:fs");
+var import_node_fs15 = require("node:fs");
 var import_node_path15 = require("node:path");
 var import_yaml5 = require("yaml");
 async function handleMigrate2(subcommand, _rest, _flags) {
@@ -75218,11 +75587,11 @@ async function migrateSkillsToPacks() {
     throw new Error("Not in a git repository. Run this from your project root.");
   }
   const skillsTxtPath = (0, import_node_path15.join)(repoRoot, "skills.txt");
-  if (!(0, import_node_fs14.existsSync)(skillsTxtPath)) {
+  if (!(0, import_node_fs15.existsSync)(skillsTxtPath)) {
     console.log("No skills.txt found at repository root. Nothing to migrate.");
     return;
   }
-  const content = (0, import_node_fs14.readFileSync)(skillsTxtPath, "utf-8");
+  const content = (0, import_node_fs15.readFileSync)(skillsTxtPath, "utf-8");
   const lines = content.split("\n");
   const localSources = [];
   const remoteSources = [];
@@ -75360,7 +75729,7 @@ function padRight9(str, width) {
 }
 
 // src/commands/access.ts
-var import_node_fs15 = require("node:fs");
+var import_node_fs16 = require("node:fs");
 var import_node_path16 = require("node:path");
 var readline3 = __toESM(require("node:readline/promises"));
 var import_yaml6 = require("yaml");
@@ -75856,8 +76225,8 @@ async function handleBindings(action, flags, context2, json) {
     params.set("project_id", projectId);
   }
   const queryString = params.toString();
-  const path7 = queryString ? `/orgs/${orgId}/access/bindings?${queryString}` : `/orgs/${orgId}/access/bindings`;
-  const bindingsResponse = await requestJson(context2, path7);
+  const path8 = queryString ? `/orgs/${orgId}/access/bindings?${queryString}` : `/orgs/${orgId}/access/bindings`;
+  const bindingsResponse = await requestJson(context2, path8);
   const bindings = unwrapListResponse(bindingsResponse);
   if (json) {
     outputJson({ data: bindings }, json);
@@ -76124,10 +76493,10 @@ function resolveFilePath(flags) {
   return (0, import_node_path16.resolve)(process.cwd(), filePath);
 }
 function loadAccessYaml(filePath) {
-  if (!(0, import_node_fs15.existsSync)(filePath)) {
+  if (!(0, import_node_fs16.existsSync)(filePath)) {
     throw new Error(`File not found: ${filePath}`);
   }
-  const raw = (0, import_node_fs15.readFileSync)(filePath, "utf-8");
+  const raw = (0, import_node_fs16.readFileSync)(filePath, "utf-8");
   let parsed;
   try {
     parsed = (0, import_yaml6.parse)(raw);
@@ -77095,10 +77464,10 @@ Sync complete: ${parts.join(", ")}`);
 }
 
 // src/commands/docs.ts
-var import_node_fs16 = require("node:fs");
+var import_node_fs17 = require("node:fs");
 var import_node_path17 = require("node:path");
-function encodeDocPathParam(path7) {
-  const trimmed = path7.startsWith("/") ? path7.slice(1) : path7;
+function encodeDocPathParam(path8) {
+  const trimmed = path8.startsWith("/") ? path8.slice(1) : path8;
   return encodeURIComponent(trimmed);
 }
 function parseWhereClause(raw) {
@@ -77171,9 +77540,9 @@ async function handleDocs(subcommand, positionals, flags, context2) {
       const filePath = getStringFlag(flags, ["file"]);
       const useStdin = flags.stdin === true || flags.stdin === "true";
       if (filePath) {
-        content = (0, import_node_fs16.readFileSync)((0, import_node_path17.resolve)(filePath), "utf-8");
+        content = (0, import_node_fs17.readFileSync)((0, import_node_path17.resolve)(filePath), "utf-8");
       } else if (useStdin) {
-        content = (0, import_node_fs16.readFileSync)(0, "utf-8");
+        content = (0, import_node_fs17.readFileSync)(0, "utf-8");
       } else {
         throw new Error("Provide --file <path> or --stdin to supply document content");
       }
@@ -77411,7 +77780,7 @@ async function handleDocs(subcommand, positionals, flags, context2) {
 }
 
 // src/commands/memory.ts
-var import_node_fs17 = require("node:fs");
+var import_node_fs18 = require("node:fs");
 var import_node_path18 = require("node:path");
 function parseCsv(raw) {
   if (!raw) return [];
@@ -77471,9 +77840,9 @@ async function handleMemory(subcommand, positionals, flags, context2) {
       if (contentInline !== void 0) {
         content = contentInline;
       } else if (filePath) {
-        content = (0, import_node_fs17.readFileSync)((0, import_node_path18.resolve)(filePath), "utf-8");
+        content = (0, import_node_fs18.readFileSync)((0, import_node_path18.resolve)(filePath), "utf-8");
       } else if (useStdin) {
-        content = (0, import_node_fs17.readFileSync)(0, "utf-8");
+        content = (0, import_node_fs18.readFileSync)(0, "utf-8");
       } else {
         throw new Error("Provide --file <path>, --stdin, or --content <text>");
       }
@@ -78130,8 +78499,8 @@ function normalizeManagedModelRows(payload) {
 function looksLikeGatewayPath(baseUrl) {
   try {
     const parsed = new URL(baseUrl);
-    const path7 = parsed.pathname.toLowerCase();
-    return path7.includes("/inference/v1") || path7.endsWith("/v1");
+    const path8 = parsed.pathname.toLowerCase();
+    return path8.includes("/inference/v1") || path8.endsWith("/v1");
   } catch {
     return false;
   }
@@ -78594,7 +78963,7 @@ async function handleOllama(subcommand, positionals, flags, context2) {
 
 // src/commands/fs.ts
 var import_promises = require("node:fs/promises");
-var import_node_fs18 = require("node:fs");
+var import_node_fs19 = require("node:fs");
 var import_node_os5 = require("node:os");
 function getOrgOrThrow(flags, context2) {
   const orgId = getStringFlag(flags, ["org", "org-id", "org_id"]) ?? context2.orgId;
@@ -78838,7 +79207,7 @@ async function handleSync2(action, positionals, flags, context2) {
       for (const link of links.data) {
         let writable = false;
         try {
-          await (0, import_promises.access)(link.local_path, import_node_fs18.constants.R_OK | import_node_fs18.constants.W_OK);
+          await (0, import_promises.access)(link.local_path, import_node_fs19.constants.R_OK | import_node_fs19.constants.W_OK);
           writable = true;
         } catch {
           writable = false;
@@ -78871,7 +79240,7 @@ async function handleFs(subcommand, positionals, flags, context2) {
 }
 
 // src/commands/local.ts
-var import_node_fs19 = require("node:fs");
+var import_node_fs20 = require("node:fs");
 var import_node_crypto = require("node:crypto");
 var import_node_child_process10 = require("node:child_process");
 var import_node_os6 = require("node:os");
@@ -79289,7 +79658,7 @@ async function ensureManagedTool(tool, runtimeOptions) {
   if (findExecutable(tool)) {
     return;
   }
-  (0, import_node_fs19.mkdirSync)(MANAGED_BIN_DIR, { recursive: true });
+  (0, import_node_fs20.mkdirSync)(MANAGED_BIN_DIR, { recursive: true });
   if (tool === "k3d") {
     printProgress(runtimeOptions, `Installing k3d ${K3D_VERSION} into ${MANAGED_BIN_DIR}...`);
     await installK3dBinary();
@@ -79370,9 +79739,9 @@ async function fetchText(url, headers) {
 }
 function writeExecutable(destination, bytes) {
   const tempPath = `${destination}.tmp-${Date.now()}-${process.pid}`;
-  (0, import_node_fs19.writeFileSync)(tempPath, bytes);
-  (0, import_node_fs19.chmodSync)(tempPath, 493);
-  (0, import_node_fs19.renameSync)(tempPath, destination);
+  (0, import_node_fs20.writeFileSync)(tempPath, bytes);
+  (0, import_node_fs20.chmodSync)(tempPath, 493);
+  (0, import_node_fs20.renameSync)(tempPath, destination);
 }
 async function ensureClusterReady(runtimeOptions) {
   const k3d = requireToolPath("k3d", "Run 'eve local up' again to auto-install managed tools.");
@@ -79469,10 +79838,10 @@ async function fetchRegistryTags(imageRef) {
   if (slashIndex < 0) {
     throw new Error(`Invalid image reference '${imageRef}'.`);
   }
-  const registry = imageRef.slice(0, slashIndex);
+  const registry2 = imageRef.slice(0, slashIndex);
   const repository = imageRef.slice(slashIndex + 1);
   const tagsPayload = await fetchText(
-    `https://${registry}/v2/${repository}/tags/list?n=200`
+    `https://${registry2}/v2/${repository}/tags/list?n=200`
   );
   return JSON.parse(tagsPayload).tags ?? [];
 }
@@ -79522,8 +79891,8 @@ function importImageViaTar(docker, k3d, imageTag, component, stdio) {
     run(docker, ["image", "save", "--platform", "linux/amd64", imageTag, "-o", tarPath], { stdio });
     run(k3d, ["image", "import", "--mode", "direct", tarPath, "-c", DEFAULT_CLUSTER_NAME], { stdio });
   } finally {
-    if ((0, import_node_fs19.existsSync)(tarPath)) {
-      (0, import_node_fs19.unlinkSync)(tarPath);
+    if ((0, import_node_fs20.existsSync)(tarPath)) {
+      (0, import_node_fs20.unlinkSync)(tarPath);
     }
   }
 }
@@ -79796,7 +80165,7 @@ function assertLocalAssetsPresent() {
     (0, import_node_path19.join)(LOCAL_STACK_BASE, "auth-bootstrap-job.yaml")
   ];
   for (const file of files) {
-    if (!(0, import_node_fs19.existsSync)(file)) {
+    if (!(0, import_node_fs20.existsSync)(file)) {
       throw new Error(
         `Missing local stack assets at ${file}. Reinstall the CLI or ensure package assets were published.`
       );
@@ -79884,7 +80253,7 @@ function parseTimeoutSeconds(flags, defaultValue) {
 }
 function run(command, args, options = {}) {
   const env = { ...process.env };
-  if ((0, import_node_fs19.existsSync)(MANAGED_BIN_DIR)) {
+  if ((0, import_node_fs20.existsSync)(MANAGED_BIN_DIR)) {
     env.PATH = `${MANAGED_BIN_DIR}:${env.PATH ?? ""}`;
   }
   const result = (0, import_node_child_process10.spawnSync)(command, args, {
@@ -79905,7 +80274,7 @@ function run(command, args, options = {}) {
 }
 function findExecutable(name) {
   const managed = (0, import_node_path19.join)(MANAGED_BIN_DIR, name);
-  if ((0, import_node_fs19.existsSync)(managed)) {
+  if ((0, import_node_fs20.existsSync)(managed)) {
     return managed;
   }
   const found = (0, import_node_child_process10.spawnSync)("which", [name], {
@@ -79923,11 +80292,11 @@ function ensureTool(name, installHint) {
   }
 }
 function requireToolPath(name, hint) {
-  const path7 = findExecutable(name);
-  if (!path7) {
+  const path8 = findExecutable(name);
+  if (!path8) {
     throw new Error(`Missing required tool '${name}'. ${hint}`);
   }
-  return path7;
+  return path8;
 }
 function assertDockerRunning() {
   const docker = findExecutable("docker");