@eve-horizon/cli 0.2.40 → 0.2.42

package/dist/index.js

@@ -51269,12 +51269,15 @@ Requires Docker Desktop; k3d and kubectl are auto-managed by the CLI.`,
         usage: "eve ollama targets [--scope-kind <platform|org|project>] [--scope-id <id>] [--json]"
       },
       target: {
-        description: "Manage a single target (add, rm, test)",
-        usage: "eve ollama target <add|rm|test> [options]",
+        description: "Manage a single target (add, rm, test, wake, pull, models)",
+        usage: "eve ollama target <add|rm|test|wake|pull|models> [options]",
         options: [
           "add: --name <name> --base-url <url> [--scope-kind <kind>] [--scope-id <id>] [--target-type <type>] [--transport-profile <profile>] [--api-key-ref <secret-ref>]",
           "rm: <target-id>",
-          "test: <target-id>"
+          "test: <target-id>",
+          "wake: <target-id> [--wait true] [--timeout-ms <ms>]  \u2014 Trigger GPU wake via ASG. Without --wait, returns immediately with retry_after_seconds (caller must poll). With --wait, server polls every 2.5s until target is healthy or timeout (default 120s, ~65s typical cold start).",
+          "pull: <target-id> --model-id <id>  \u2014 Pull a model onto a remote Ollama target",
+          "models: <target-id>  \u2014 List models currently loaded on a remote target"
         ]
       },
       models: {
@@ -51337,6 +51340,11 @@ Requires Docker Desktop; k3d and kubectl are auto-managed by the CLI.`,
     },
     examples: [
       "eve ollama target add --name local --base-url http://localhost:11434 --scope-kind platform --target-type external_ollama",
+      "eve ollama target wake itgt_xxx --wait true              # Block until GPU target is healthy (~65s)",
+      "eve ollama target wake itgt_xxx --wait true --timeout-ms 180000  # Wait up to 3 minutes",
+      "eve ollama target wake itgt_xxx                          # Fire-and-forget (returns retry_after_seconds)",
+      "eve ollama target pull itgt_xxx --model-id imod_xxx      # Pull model onto remote target",
+      "eve ollama target models itgt_xxx                        # List models on remote target",
       "eve ollama model add --canonical gpt-oss:120b --provider ollama --slug gpt-oss:120b",
       "eve ollama install add --target-id itgt_xxx --model-id imod_xxx --min-target-capacity 1",
       "eve ollama assignments --scope-kind platform",
@@ -51361,6 +51369,55 @@ Requires Docker Desktop; k3d and kubectl are auto-managed by the CLI.`,
     examples: [
       "eve migrate skills-to-packs"
     ]
+  },
+  github: {
+    description: "Set up GitHub webhook integration.\nOne command to connect GitHub push/PR events to Eve pipelines.",
+    usage: "eve github <subcommand> [options]",
+    subcommands: {
+      setup: {
+        description: "Configure GitHub webhook (auto-creates via gh CLI if available)",
+        usage: "eve github setup [--project <id>] [--regenerate]",
+        options: [
+          "--project <id>       Project ID (uses profile default)",
+          "--regenerate         Generate a new webhook secret (replaces existing)",
+          "--json               Output as JSON"
+        ],
+        examples: [
+          "eve github setup",
+          "eve github setup --project proj_xxx",
+          "eve github setup --regenerate"
+        ]
+      },
+      status: {
+        description: "Check if GitHub webhook is configured",
+        usage: "eve github status [--project <id>]",
+        options: [
+          "--project <id>       Project ID (uses profile default)",
+          "--json               Output as JSON"
+        ],
+        examples: [
+          "eve github status"
+        ]
+      },
+      test: {
+        description: "Send a test github.push event to verify pipeline triggers",
+        usage: "eve github test [--project <id>]",
+        options: [
+          "--project <id>       Project ID (uses profile default)",
+          "--json               Output as JSON"
+        ],
+        examples: [
+          "eve github test",
+          "eve github test --project proj_xxx"
+        ]
+      }
+    },
+    examples: [
+      "eve github setup                  # Auto-create webhook via gh CLI",
+      "eve github setup --regenerate     # Rotate webhook secret",
+      "eve github status                 # Check if configured",
+      "eve github test                   # Fire test event"
+    ]
   }
 };
 function showMainHelp() {
@@ -51392,6 +51449,7 @@ function showMainHelp() {
   console.log("  harness    Inspect harnesses and auth status");
   console.log("  agents     Inspect agent policy and harness capabilities");
   console.log("  packs      Manage AgentPack lockfile and resolution");
+  console.log("  github     Set up GitHub webhook integration");
   console.log("  integrations  Manage chat integrations (Slack)");
   console.log("  chat       Simulate chat messages (gateway testing)");
   console.log("  supervise   Long-poll child events (lead agent coordination)");
@@ -56563,7 +56621,15 @@ var configSchema = external_exports.object({
   EVE_CORS_ORIGIN: external_exports.string().default("*"),
   // CORS origin: '*' (any), 'true' (reflect), or specific URL
   Z_AI_API_KEY: external_exports.string().optional(),
-  ZAI_MODEL: external_exports.string().optional()
+  ZAI_MODEL: external_exports.string().optional(),
+  EVE_STORAGE_BACKEND: external_exports.string().optional(),
+  EVE_STORAGE_ENDPOINT: external_exports.string().optional(),
+  EVE_STORAGE_PUBLIC_ENDPOINT: external_exports.string().optional(),
+  EVE_STORAGE_REGION: external_exports.string().optional(),
+  EVE_STORAGE_ACCESS_KEY_ID: external_exports.string().optional(),
+  EVE_STORAGE_SECRET_ACCESS_KEY: external_exports.string().optional(),
+  EVE_STORAGE_ORG_BUCKET_PREFIX: external_exports.string().optional(),
+  EVE_STORAGE_INTERNAL_BUCKET: external_exports.string().optional()
 });
 
 // ../shared/dist/harnesses/config.js
@@ -56766,7 +56832,7 @@ var HARNESS_CAPABILITIES = {
   mclaude: {
     supports_model: true,
     model_notes: "Model override supported via CLAUDE_MODEL or --model.",
-    model_examples: ["opus-4.5", "sonnet-4", "haiku-4.5"],
+    model_examples: ["opus-4-6", "sonnet-4-6", "opus-4.5", "sonnet-4.5", "haiku-4.5"],
     reasoning: {
       supported: true,
       levels: ["low", "medium", "high", "x-high"],
@@ -56777,7 +56843,7 @@ var HARNESS_CAPABILITIES = {
   claude: {
     supports_model: true,
     model_notes: "Model override supported via CLAUDE_MODEL or --model.",
-    model_examples: ["opus-4.5", "sonnet-4", "haiku-4.5"],
+    model_examples: ["opus-4-6", "sonnet-4-6", "opus-4.5", "sonnet-4.5", "haiku-4.5"],
     reasoning: {
       supported: true,
       levels: ["low", "medium", "high", "x-high"],
@@ -58549,6 +58615,18 @@ var IngressConfigSchema = external_exports.object({
   port: external_exports.number().optional(),
   alias: external_exports.string().min(3).max(63).regex(IngressAliasPattern).optional()
 }).passthrough();
+var ObjectStoreBucketSchema = external_exports.object({
+  name: external_exports.string().min(1).regex(/^[a-z][a-z0-9-]*[a-z0-9]$/, "Bucket name must be lowercase alphanumeric with hyphens"),
+  visibility: external_exports.enum(["private", "public"]).default("private"),
+  cors: external_exports.object({
+    origins: external_exports.array(external_exports.string()).optional(),
+    methods: external_exports.array(external_exports.string()).optional(),
+    max_age_seconds: external_exports.number().optional()
+  }).optional()
+}).passthrough();
+var ObjectStoreConfigSchema = external_exports.object({
+  buckets: external_exports.array(ObjectStoreBucketSchema).optional()
+}).passthrough();
 var ServiceXeveSchema = external_exports.object({
   role: external_exports.string().optional(),
   ingress: IngressConfigSchema.optional(),
@@ -58559,7 +58637,8 @@ var ServiceXeveSchema = external_exports.object({
   worker_type: external_exports.string().optional(),
   files: external_exports.array(ServiceFilesEntrySchema).optional(),
   storage: ServiceStorageSchema.optional(),
-  managed: ManagedDbConfigSchema.optional()
+  managed: ManagedDbConfigSchema.optional(),
+  object_store: ObjectStoreConfigSchema.optional()
 }).passthrough();
 var ServiceSchema = external_exports.object({
   image: external_exports.string().optional(),
@@ -59685,7 +59764,11 @@ var OrgFsEventSchema = external_exports.object({
   size_bytes: external_exports.number().int().nonnegative().nullable().optional(),
   source_side: OrgFsEventSourceSideSchema,
   metadata: external_exports.record(external_exports.unknown()).optional(),
-  created_at: external_exports.string()
+  created_at: external_exports.string(),
+  download_url: external_exports.string().nullable().optional(),
+  // presigned GET URL, included for file.created/file.updated
+  storage_key: external_exports.string().nullable().optional()
+  // S3 object key, for reference
 });
 var OrgFsEventListResponseSchema = external_exports.object({
   data: external_exports.array(OrgFsEventSchema),
@@ -59726,7 +59809,11 @@ var OrgFsInternalIngestEventRequestSchema = external_exports.object({
   content_hash: external_exports.string().optional(),
   size_bytes: external_exports.number().int().nonnegative().optional(),
   source_side: OrgFsEventSourceSideSchema,
-  metadata: external_exports.record(external_exports.unknown()).optional()
+  metadata: external_exports.record(external_exports.unknown()).optional(),
+  storage_key: external_exports.string().optional(),
+  // S3 key; if provided, upserts org_fs_objects
+  mime_type: external_exports.string().optional()
+  // MIME type; used for org_fs_objects upsert
 });
 var OrgFsInternalHeartbeatRequestSchema = external_exports.object({
   cursor: external_exports.number().int().nonnegative().optional(),
@@ -59736,6 +59823,76 @@ var OrgFsInternalHeartbeatRequestSchema = external_exports.object({
 var OrgFsInternalMetricsRequestSchema = external_exports.object({
   metrics: external_exports.record(external_exports.unknown())
 });
+var OrgFsUploadUrlResponseSchema = external_exports.object({
+  upload_url: external_exports.string(),
+  storage_key: external_exports.string(),
+  method: external_exports.literal("PUT"),
+  expires_at: external_exports.string(),
+  max_bytes: external_exports.number().int().positive()
+});
+var OrgFsDownloadUrlResponseSchema = external_exports.object({
+  download_url: external_exports.string(),
+  storage_key: external_exports.string(),
+  content_hash: external_exports.string(),
+  size_bytes: external_exports.number().int().nonnegative(),
+  mime_type: external_exports.string(),
+  expires_at: external_exports.string()
+});
+var OrgFsObjectSchema = external_exports.object({
+  id: external_exports.string(),
+  path: external_exports.string(),
+  storage_key: external_exports.string(),
+  content_hash: external_exports.string(),
+  size_bytes: external_exports.number().int().nonnegative(),
+  mime_type: external_exports.string(),
+  deleted_at: external_exports.string().nullable().optional(),
+  updated_at: external_exports.string(),
+  created_at: external_exports.string()
+});
+var OrgFsObjectListResponseSchema = external_exports.object({
+  data: external_exports.array(OrgFsObjectSchema),
+  pagination: external_exports.object({
+    limit: external_exports.number().int().positive(),
+    next_after: external_exports.string().nullable()
+  })
+});
+var OrgFsCreateShareRequestSchema = external_exports.object({
+  path: external_exports.string().min(1),
+  expires_in: external_exports.string().optional(),
+  // e.g. '7d', '24h', '30m'; null = never expires
+  label: external_exports.string().optional()
+});
+var OrgFsShareSchema = external_exports.object({
+  id: external_exports.string(),
+  org_id: external_exports.string(),
+  path: external_exports.string(),
+  label: external_exports.string().nullable(),
+  url: external_exports.string(),
+  created_by: external_exports.string(),
+  expires_at: external_exports.string().nullable(),
+  accessed_at: external_exports.string().nullable(),
+  access_count: external_exports.number().int().nonnegative(),
+  revoked_at: external_exports.string().nullable(),
+  created_at: external_exports.string()
+});
+var OrgFsShareListResponseSchema = external_exports.object({
+  data: external_exports.array(OrgFsShareSchema)
+});
+var OrgFsCreatePublicPathRequestSchema = external_exports.object({
+  path_prefix: external_exports.string().min(1),
+  label: external_exports.string().optional()
+});
+var OrgFsPublicPathSchema = external_exports.object({
+  id: external_exports.string(),
+  org_id: external_exports.string(),
+  path_prefix: external_exports.string(),
+  label: external_exports.string().nullable(),
+  created_by: external_exports.string(),
+  created_at: external_exports.string()
+});
+var OrgFsPublicPathListResponseSchema = external_exports.object({
+  data: external_exports.array(OrgFsPublicPathSchema)
+});
 
 // ../shared/dist/schemas/resource.js
 var ResolveResourcesRequestSchema = external_exports.object({
@@ -60607,11 +60764,46 @@ var DEFAULT_RATE_CARD_V1 = {
   llm: {
     byok: {
       anthropic: {
+        "claude-opus-4-6": {
+          input_per_million_usd: "5.00",
+          output_per_million_usd: "25.00",
+          cache_read_per_million_usd: "0.50",
+          cache_write_per_million_usd: "6.25",
+          reasoning_per_million_usd: null
+        },
+        "claude-sonnet-4-6": {
+          input_per_million_usd: "3.00",
+          output_per_million_usd: "15.00",
+          cache_read_per_million_usd: "0.30",
+          cache_write_per_million_usd: "3.75",
+          reasoning_per_million_usd: null
+        },
         "claude-opus-4-5": {
-          input_per_million_usd: "15.00",
-          output_per_million_usd: "75.00",
-          cache_read_per_million_usd: "1.50",
-          cache_write_per_million_usd: "18.75",
+          input_per_million_usd: "5.00",
+          output_per_million_usd: "25.00",
+          cache_read_per_million_usd: "0.50",
+          cache_write_per_million_usd: "6.25",
+          reasoning_per_million_usd: null
+        },
+        "claude-sonnet-4-5": {
+          input_per_million_usd: "3.00",
+          output_per_million_usd: "15.00",
+          cache_read_per_million_usd: "0.30",
+          cache_write_per_million_usd: "3.75",
+          reasoning_per_million_usd: null
+        },
+        "claude-haiku-4-5": {
+          input_per_million_usd: "1.00",
+          output_per_million_usd: "5.00",
+          cache_read_per_million_usd: "0.10",
+          cache_write_per_million_usd: "1.25",
+          reasoning_per_million_usd: null
+        },
+        "claude-sonnet-4": {
+          input_per_million_usd: "3.00",
+          output_per_million_usd: "15.00",
+          cache_read_per_million_usd: "0.30",
+          cache_write_per_million_usd: "3.75",
           reasoning_per_million_usd: null
         }
       },
@@ -67380,32 +67572,46 @@ async function resolveGitRef(context2, projectId, ref, repoDir) {
     return ref;
   }
   const resolvedRepoDir = repoDir ?? getGitRoot();
-  if (!resolvedRepoDir) {
-    throw new Error(
-      `Failed to resolve git ref '${ref}': not in a git repository.
-Run the command from the project repository, pass --repo-dir <path>, or use a 40-character SHA.`
-    );
-  }
+  let useLocal = !!resolvedRepoDir;
+  let projectRepoUrl;
   if (projectId) {
     const project = await requestJson(context2, `/projects/${projectId}`);
+    projectRepoUrl = project.repo_url;
     const expected = normalizeRepoIdentity(project.repo_url);
-    const actual = normalizeRepoIdentity(getGitOriginUrl(resolvedRepoDir));
-    const repoDirIdentity = normalizeRepoIdentity(resolvedRepoDir);
+    const actual = resolvedRepoDir ? normalizeRepoIdentity(getGitOriginUrl(resolvedRepoDir)) : null;
+    const repoDirIdentity = resolvedRepoDir ? normalizeRepoIdentity(resolvedRepoDir) : null;
     if (expected && actual && expected !== actual) {
-      throw new Error(
-        `Failed to resolve git ref '${ref}': current repo does not match project repo.
-  Project repo: ${project.repo_url}
-  Current repo: ${getGitOriginUrl(resolvedRepoDir)}
-Run the command from the project repository, pass --repo-dir <path>, or use a 40-character SHA.`
-      );
+      useLocal = false;
     }
     if (expected && !actual && (!repoDirIdentity || repoDirIdentity !== expected)) {
-      throw new Error(
-        `Failed to resolve git ref '${ref}': current repo has no origin remote to validate against project repo.
-  Project repo: ${project.repo_url}
-Run the command from the project repository, pass --repo-dir <path>, or use a 40-character SHA.`
-      );
+      useLocal = false;
+    }
+  }
+  if (useLocal && resolvedRepoDir) {
+    try {
+      return (0, import_node_child_process5.execSync)(`git rev-parse ${ref}`, {
+        cwd: resolvedRepoDir,
+        encoding: "utf-8",
+        stdio: ["pipe", "pipe", "pipe"]
+      }).trim();
+    } catch {
+    }
+  }
+  if (projectRepoUrl) {
+    const sha = resolveRefRemote(projectRepoUrl, ref);
+    if (sha) {
+      return sha;
     }
+    throw new Error(
+      `Failed to resolve git ref '${ref}' against remote '${projectRepoUrl}'.
+Make sure the ref (branch or tag) exists in the remote repository, or use a 40-character SHA.`
+    );
+  }
+  if (!resolvedRepoDir) {
+    throw new Error(
+      `Failed to resolve git ref '${ref}': not in a git repository.
+Run the command from the project repository, pass --repo-dir <path>, or use a 40-character SHA.`
+    );
   }
   try {
     return (0, import_node_child_process5.execSync)(`git rev-parse ${ref}`, {
@@ -67470,6 +67676,25 @@ function resolveGitBranch(repoDir, ref) {
     return null;
   }
 }
+function resolveRefRemote(repoUrl, ref) {
+  try {
+    const output = (0, import_node_child_process5.execSync)(`git ls-remote ${repoUrl} ${ref}`, {
+      encoding: "utf-8",
+      stdio: ["pipe", "pipe", "pipe"],
+      timeout: 15e3
+    }).trim();
+    for (const line of output.split("\n")) {
+      const [sha, refName] = line.split("	");
+      if (!sha || !refName) continue;
+      if (refName === `refs/heads/${ref}` || refName === `refs/tags/${ref}` || refName === ref) {
+        return sha;
+      }
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
 function getGitOriginUrl(repoDir) {
   try {
     const url = (0, import_node_child_process5.execSync)("git config --get remote.origin.url", {
@@ -73112,28 +73337,31 @@ async function handleInstall(positionals, flags) {
 function installSkill(skillsBin, skill, projectRoot) {
   console.log(`  Installing: ${skill.source} (${skill.type})`);
   const localDir = resolveLocalDirIfExists(skill, projectRoot);
-  const wantsExcludePrivate = localDir !== null && fs4.existsSync(path6.join(localDir, PRIVATE_SKILLS_DIRNAME)) && !sourcePathExplicitlyTargetsPrivate(skill.source);
+  const excludePrivate = localDir !== null && !sourcePathExplicitlyTargetsPrivate(skill.source);
   try {
     const agents = ["claude-code", "codex", "gemini-cli"];
-    if (wantsExcludePrivate && localDir) {
-      const skillDirs = findSkillDirs(localDir, { fullDepth: true, excludePrivate: true });
+    if (localDir) {
+      const skillDirs = findSkillDirs(localDir, { fullDepth: true, excludePrivate });
       if (skillDirs.length === 0) {
-        console.log(`  No skills found under ${skill.source} (after excluding ${PRIVATE_SKILLS_DIRNAME}/)`);
+        console.log(`  No skills found under ${skill.source}`);
         return;
       }
-      console.log(`  Installing ${skillDirs.length} public skill(s) (excluding ${PRIVATE_SKILLS_DIRNAME}/)...`);
-      for (const dir of skillDirs) {
-        const rel = path6.relative(projectRoot, dir);
-        const installSource = rel.startsWith(".") ? rel : `./${rel}`;
-        for (const agent of agents) {
-          (0, import_node_child_process7.execSync)(`${skillsBin} add ${JSON.stringify(installSource)} -a ${agent} -s '*' -y --full-depth`, {
-            cwd: projectRoot,
-            stdio: "inherit",
-            timeout: 12e4
-          });
+      if (skillDirs.length > 1 || skillDirs[0] !== localDir) {
+        const label = excludePrivate ? ` (excluding ${PRIVATE_SKILLS_DIRNAME}/)` : "";
+        console.log(`  Installing ${skillDirs.length} skill(s)${label}...`);
+        for (const dir of skillDirs) {
+          const rel = path6.relative(projectRoot, dir);
+          const installSource = rel.startsWith(".") ? rel : `./${rel}`;
+          for (const agent of agents) {
+            (0, import_node_child_process7.execSync)(`${skillsBin} add ${JSON.stringify(installSource)} -a ${agent} -s '*' -y --full-depth`, {
+              cwd: projectRoot,
+              stdio: "inherit",
+              timeout: 12e4
+            });
+          }
         }
+        return;
       }
-      return;
     }
     for (const agent of agents) {
       (0, import_node_child_process7.execSync)(`${skillsBin} add ${JSON.stringify(skill.source)} -a ${agent} -s '*' -y --full-depth`, {
@@ -78910,7 +79138,57 @@ async function handleOllama(subcommand, positionals, flags, context2) {
         }
         return;
       }
-      throw new Error("Usage: eve ollama target <add|rm|test|wake> ...");
+      if (action === "pull") {
+        const targetId = positionals[1];
+        if (!targetId) throw new Error("Usage: eve ollama target pull <target-id> --model-id <id>");
+        const modelId = requireString(flags, "model-id");
+        const query = new URLSearchParams();
+        query.set("model_id", modelId);
+        const result = await requestJson(
+          context2,
+          `/inference/targets/${targetId}/pull?${query.toString()}`,
+          { method: "POST" }
+        );
+        outputJson(result, json);
+        if (!json) {
+          if (result.ok) {
+            console.log(`Pull complete: ${result.model} on ${result.target}`);
+          } else {
+            console.error(`Pull failed: ${result.message}`);
+            process.exitCode = 1;
+          }
+        }
+        return;
+      }
+      if (action === "models") {
+        const targetId = positionals[1];
+        if (!targetId) throw new Error("Usage: eve ollama target models <target-id>");
+        const result = await requestJson(
+          context2,
+          `/inference/targets/${targetId}/remote-models`
+        );
+        if (json) {
+          outputJson(result, json);
+          return;
+        }
+        console.log(`Models on target "${result.target}":`);
+        if (result.models.length === 0) {
+          console.log("  (none)");
+          return;
+        }
+        printTable(
+          ["Name", "Size (GB)", "Modified"],
+          result.models.map((m) => [
+            m.name,
+            (m.size / 1e9).toFixed(1),
+            m.modified_at
+          ])
+        );
+        return;
+      }
+      throw new Error(
+        "Usage: eve ollama target <add|rm|test|wake|pull|models> ...\n  wake: <target-id> [--wait true] [--timeout-ms <ms>]  Trigger GPU wake (default timeout 120s with --wait)"
+      );
     }
     case "models": {
       const models = await requestJson(context2, "/inference/models");
@@ -79512,8 +79790,65 @@ async function handleFs(subcommand, positionals, flags, context2) {
       await handleSync2(action, positionals.slice(1), flags, context2);
       return;
     }
+    case "share": {
+      const orgId = getOrgOrThrow(flags, context2);
+      const path8 = positionals[0];
+      if (!path8) throw new Error("Usage: eve fs share <path> --org <org> [--expires <duration>] [--label <text>]");
+      const body = {
+        path: path8,
+        expires_in: getStringFlag(flags, ["expires", "expires-in", "ttl"]) ?? void 0,
+        label: getStringFlag(flags, ["label"]) ?? void 0
+      };
+      const json = Boolean(flags["json"]);
+      const share = await requestJson(context2, `/orgs/${orgId}/fs/share`, { method: "POST", body });
+      if (json) {
+        outputJson(share, true);
+      } else {
+        console.log(`Share URL: ${share.url}`);
+        if (share.expires_at) console.log(`Expires:   ${share.expires_at}`);
+        if (share.label) console.log(`Label:     ${share.label}`);
+        console.log(`Token:     ${share.id}`);
+      }
+      return;
+    }
+    case "shares": {
+      const orgId = getOrgOrThrow(flags, context2);
+      const json = Boolean(flags["json"]);
+      const result = await requestJson(context2, `/orgs/${orgId}/fs/shares`);
+      outputJson(result, json, `${result.data.length} active share(s)`);
+      return;
+    }
+    case "revoke": {
+      const orgId = getOrgOrThrow(flags, context2);
+      const token = positionals[0];
+      if (!token) throw new Error("Usage: eve fs revoke <token> --org <org>");
+      const json = Boolean(flags["json"]);
+      const share = await requestJson(context2, `/orgs/${orgId}/fs/shares/${token}`, { method: "DELETE" });
+      outputJson(share, json, `Share token ${token} revoked`);
+      return;
+    }
+    case "publish": {
+      const orgId = getOrgOrThrow(flags, context2);
+      const pathPrefix = positionals[0];
+      if (!pathPrefix) throw new Error("Usage: eve fs publish <path-prefix> --org <org> [--label <text>]");
+      const body = {
+        path_prefix: pathPrefix,
+        label: getStringFlag(flags, ["label"]) ?? void 0
+      };
+      const json = Boolean(flags["json"]);
+      const result = await requestJson(context2, `/orgs/${orgId}/fs/public-paths`, { method: "POST", body });
+      outputJson(result, json, `Published path prefix: ${pathPrefix}`);
+      return;
+    }
+    case "public-paths": {
+      const orgId = getOrgOrThrow(flags, context2);
+      const json = Boolean(flags["json"]);
+      const result = await requestJson(context2, `/orgs/${orgId}/fs/public-paths`);
+      outputJson(result, json, `${result.data.length} public path(s)`);
+      return;
+    }
     default:
-      throw new Error("Usage: eve fs sync <init|status|logs|pause|resume|disconnect|mode|conflicts|resolve|doctor>");
+      throw new Error("Usage: eve fs <sync|share|shares|revoke|publish|public-paths> ...");
   }
 }
 
@@ -80629,6 +80964,161 @@ function sleep(ms) {
   });
 }
 
+// src/commands/github.ts
+var import_node_child_process11 = require("node:child_process");
+async function handleGithub(subcommand, positionals, flags, context2) {
+  const json = Boolean(flags.json);
+  const projectId = getStringFlag(flags, ["project"]) ?? context2.projectId;
+  if (!projectId) {
+    throw new Error("Missing --project flag or profile default project.");
+  }
+  switch (subcommand) {
+    case "setup":
+      await setupGithub(projectId, flags, json, context2);
+      return;
+    case "status":
+      await statusGithub(projectId, json, context2);
+      return;
+    case "test":
+      await testGithub(projectId, json, context2);
+      return;
+    default:
+      throw new Error("Usage: eve github <setup|status|test> [--project <id>]");
+  }
+}
+async function setupGithub(projectId, flags, json, context2) {
+  const regenerate = getBooleanFlag(flags, ["regenerate"]) ?? false;
+  const result = await requestJson(context2, `/projects/${projectId}/github/setup`, {
+    method: "POST",
+    body: { regenerate }
+  });
+  if (json) {
+    outputJson(result, true);
+    return;
+  }
+  const ownerRepo = extractOwnerRepo(result.repo_url);
+  if (!ownerRepo) {
+    printManualInstructions(result);
+    return;
+  }
+  if (tryGhWebhook(ownerRepo, result.webhook_url, result.secret, result.events)) {
+    console.log(`Webhook created on ${ownerRepo}!`);
+    console.log("");
+    console.log(`  Events: ${result.events.join(", ")}`);
+    console.log(`  URL:    ${result.webhook_url}`);
+    console.log("");
+    console.log("GitHub will now send push and pull_request events to Eve.");
+    console.log('Run "eve github test" to verify the pipeline trigger fires.');
+  } else {
+    printManualInstructions(result);
+  }
+}
+async function statusGithub(projectId, json, context2) {
+  const result = await requestJson(context2, `/projects/${projectId}/github/status`);
+  if (json) {
+    outputJson(result, true);
+    return;
+  }
+  if (result.configured) {
+    console.log("GitHub webhook: configured");
+  } else {
+    console.log("GitHub webhook: not configured");
+    console.log('Run "eve github setup" to configure.');
+  }
+  console.log(`  Webhook URL: ${result.webhook_url}`);
+}
+async function testGithub(projectId, json, context2) {
+  const result = await requestJson(context2, `/projects/${projectId}/github/test`, {
+    method: "POST"
+  });
+  if (json) {
+    outputJson(result, true);
+    return;
+  }
+  console.log(`Test event created: ${result.event_id}`);
+  console.log("");
+  console.log("If you have a pipeline with a github.push trigger, it should fire now.");
+  console.log("Check with: eve event list --project " + projectId);
+}
+function extractOwnerRepo(repoUrl) {
+  const httpsMatch = repoUrl.match(/github\.com\/([^/]+\/[^/]+?)(?:\.git)?$/);
+  if (httpsMatch) return httpsMatch[1];
+  const sshMatch = repoUrl.match(/github\.com:([^/]+\/[^/]+?)(?:\.git)?$/);
+  if (sshMatch) return sshMatch[1];
+  return null;
+}
+function tryGhWebhook(ownerRepo, webhookUrl, secret, events) {
+  try {
+    (0, import_node_child_process11.execSync)("gh auth status", { stdio: "pipe", timeout: 1e4 });
+  } catch {
+    return false;
+  }
+  try {
+    const existing = (0, import_node_child_process11.execSync)(
+      `gh api repos/${ownerRepo}/hooks --jq '[.[] | select(.config.url == "${webhookUrl}")] | length'`,
+      { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"], timeout: 15e3 }
+    ).trim();
+    if (existing !== "0") {
+      const hookId = (0, import_node_child_process11.execSync)(
+        `gh api repos/${ownerRepo}/hooks --jq '[.[] | select(.config.url == "${webhookUrl}")][0].id'`,
+        { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"], timeout: 15e3 }
+      ).trim();
+      if (hookId) {
+        (0, import_node_child_process11.execSync)(
+          `gh api repos/${ownerRepo}/hooks/${hookId} -X PATCH -f config[url]="${webhookUrl}" -f config[content_type]=json -f config[secret]="${secret}" -f config[insecure_ssl]=0 ` + events.map((e) => `-f events[]=${e}`).join(" ") + ` -f active=true`,
+          { stdio: "pipe", timeout: 15e3 }
+        );
+        return true;
+      }
+    }
+  } catch {
+  }
+  try {
+    (0, import_node_child_process11.execSync)(
+      `gh api repos/${ownerRepo}/hooks -X POST -f name=web -f config[url]="${webhookUrl}" -f config[content_type]=json -f config[secret]="${secret}" -f config[insecure_ssl]=0 ` + events.map((e) => `-f events[]=${e}`).join(" ") + ` -f active=true`,
+      { stdio: "pipe", timeout: 15e3 }
+    );
+    return true;
+  } catch {
+    return false;
+  }
+}
+function printManualInstructions(result) {
+  const ownerRepo = extractOwnerRepo(result.repo_url);
+  console.log("GitHub webhook setup");
+  console.log("");
+  console.log(`  Webhook URL:    ${result.webhook_url}`);
+  console.log(`  Secret:         ${result.secret}`);
+  console.log(`  Content type:   application/json`);
+  console.log(`  Events:         ${result.events.join(", ")}`);
+  console.log("");
+  if (ownerRepo) {
+    console.log("Auto-setup with gh CLI (install from https://cli.github.com):");
+    console.log("");
+    console.log(`  gh api repos/${ownerRepo}/hooks -X POST \\`);
+    console.log(`    -f name=web \\`);
+    console.log(`    -f config[url]="${result.webhook_url}" \\`);
+    console.log(`    -f config[content_type]=json \\`);
+    console.log(`    -f config[secret]="${result.secret}" \\`);
+    result.events.forEach((e) => {
+      console.log(`    -f events[]=${e} \\`);
+    });
+    console.log(`    -f active=true`);
+    console.log("");
+  }
+  console.log("Or configure manually:");
+  if (ownerRepo) {
+    console.log(`  1. Go to https://github.com/${ownerRepo}/settings/hooks/new`);
+  } else {
+    console.log("  1. Go to your repo Settings > Webhooks > Add webhook");
+  }
+  console.log("  2. Payload URL: " + result.webhook_url);
+  console.log("  3. Content type: application/json");
+  console.log("  4. Secret: " + result.secret);
+  console.log('  5. Events: "push" and "pull_request"');
+  console.log('  6. Click "Add webhook"');
+}
+
 // src/index.ts
 function getCliVersion() {
   try {
@@ -80821,6 +81311,9 @@ async function main2() {
     case "local":
       await handleLocal(subcommand, rest, flags, context2);
       return;
+    case "github":
+      await handleGithub(subcommand, rest, flags, context2);
+      return;
     default:
       showMainHelp();
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eve-horizon/cli",
-  "version": "0.2.40",
+  "version": "0.2.42",
   "description": "Eve Horizon CLI",
   "license": "MIT",
   "repository": {
@@ -18,6 +18,9 @@
     "assets",
     "README.md"
   ],
+  "scripts": {
+    "build": "rm -rf dist && esbuild src/index.ts --bundle --platform=node --target=node22 --outfile=dist/index.js --format=cjs --external:yaml"
+  },
   "publishConfig": {
     "access": "public"
   },
@@ -28,14 +31,11 @@
     "yaml": "^2.5.1"
   },
   "devDependencies": {
+    "@eve/migrate": "workspace:*",
+    "@eve/shared": "workspace:*",
     "@types/node": "^22.0.0",
     "esbuild": "^0.27.3",
     "postgres": "^3.4.0",
-    "typescript": "^5.7.0",
-    "@eve/migrate": "0.0.1",
-    "@eve/shared": "0.0.1"
-  },
-  "scripts": {
-    "build": "rm -rf dist && esbuild src/index.ts --bundle --platform=node --target=node22 --outfile=dist/index.js --format=cjs --external:yaml"
+    "typescript": "^5.7.0"
   }
-}
+}