@eve-horizon/cli 0.2.45 → 0.2.46

package/assets/local-k8s/base/worker-deployment.yaml

@@ -53,6 +53,8 @@ spec:
               value: "4749"
             - name: EVE_DEFAULT_DOMAIN
               value: lvh.me
+            - name: EVE_ORG_FS_ROOT
+              value: /org
           ports:
             - name: http
               containerPort: 4749

package/dist/index.js

@@ -80791,14 +80791,17 @@ async function importPlatformImages(version2, runtimeOptions) {
   const docker = requireToolPath("docker", "Install Docker Desktop.");
   const k3d = requireToolPath("k3d", "Run 'eve local up' again to auto-install managed tools.");
   const stdio = runtimeOptions.verbose && !runtimeOptions.quiet ? "inherit" : "pipe";
+  ensureDockerRegistryAuth(docker, runtimeOptions);
   for (const image of PLATFORM_IMAGES) {
     const remoteTag = `${image.remote}:${version2}`;
     printProgress(runtimeOptions, `Pulling image ${remoteTag}...`);
     const pull = pullImageWithRetry(docker, remoteTag, stdio, runtimeOptions);
     if (pull.status !== 0) {
-      throw new Error(
-        `Failed to pull ${remoteTag}. Ensure image availability/access at ${image.remote} and the version exists. Try: eve local up --version <x.y.z>`
-      );
+      const pullOutput = `${pull.stderr}
+${pull.stdout}`.toLowerCase();
+      const isAuthError = pullOutput.includes("403") || pullOutput.includes("401") || pullOutput.includes("unauthorized");
+      const hint = isAuthError ? "This is likely an ECR authentication issue. Run: aws ecr-public get-login-password --region us-east-1 | docker login --username AWS --password-stdin public.ecr.aws" : `Ensure image availability/access at ${image.remote} and the version exists. Try: eve local up --version <x.y.z>`;
+      throw new Error(`Failed to pull ${remoteTag}. ${hint}`);
     }
     run(docker, ["tag", remoteTag, image.local], { stdio });
     printProgress(runtimeOptions, `Importing image ${image.component} into k3d...`);
@@ -80829,7 +80832,7 @@ function pullImageWithRetry(docker, remoteTag, stdio, runtimeOptions) {
     }
     const combined = `${pull.stderr}
 ${pull.stdout}`.toLowerCase();
-    const retryable = combined.includes("unexpected eof") || combined.includes("short read") || combined.includes("i/o timeout") || combined.includes("timed out");
+    const retryable = combined.includes("unexpected eof") || combined.includes("short read") || combined.includes("i/o timeout") || combined.includes("timed out") || combined.includes("403 forbidden") || combined.includes("toomanyrequests");
     if (!retryable || attempt === maxAttempts) {
       return pull;
     }
@@ -80837,6 +80840,42 @@ ${pull.stdout}`.toLowerCase();
   }
   return { status: 1, stdout: "", stderr: "pull retry exhausted" };
 }
+function ensureDockerRegistryAuth(docker, runtimeOptions) {
+  const registry2 = PLATFORM_IMAGE_REGISTRY.split("/")[0];
+  if (!registry2 || !registry2.includes("ecr.aws")) {
+    return;
+  }
+  printProgress(runtimeOptions, "Authenticating Docker to ECR public registry...");
+  if (dockerLoginViaAwsCli(docker, registry2)) {
+    printProgress(runtimeOptions, "Docker registry auth succeeded.");
+    return;
+  }
+  printProgress(
+    runtimeOptions,
+    "Warning: could not authenticate to ECR. Pulls may hit rate limits.\n  Install AWS CLI and configure credentials to avoid this: https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html"
+  );
+}
+function dockerLoginViaAwsCli(docker, registry2) {
+  const aws = findExecutable("aws");
+  if (!aws) {
+    return false;
+  }
+  const token = run(aws, ["ecr-public", "get-login-password", "--region", "us-east-1"], {
+    stdio: "pipe",
+    allowFailure: true,
+    timeoutMs: 15e3
+  });
+  if (token.status !== 0 || !token.stdout.trim()) {
+    return false;
+  }
+  const login = (0, import_node_child_process10.spawnSync)(docker, ["login", "--username", "AWS", "--password-stdin", registry2], {
+    input: token.stdout.trim(),
+    encoding: "utf8",
+    stdio: ["pipe", "pipe", "pipe"],
+    timeout: 15e3
+  });
+  return login.status === 0;
+}
 function applyLocalManifests(runtimeOptions) {
   const kubectl = requireToolPath("kubectl", "Run 'eve local up' again to auto-install managed tools.");
   printProgress(runtimeOptions, "Applying local Kubernetes manifests...");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eve-horizon/cli",
-  "version": "0.2.45",
+  "version": "0.2.46",
   "description": "Eve Horizon CLI",
   "license": "MIT",
   "repository": {
@@ -18,6 +18,9 @@
     "assets",
     "README.md"
   ],
+  "scripts": {
+    "build": "rm -rf dist && esbuild src/index.ts --bundle --platform=node --target=node22 --outfile=dist/index.js --format=cjs --external:yaml"
+  },
   "publishConfig": {
     "access": "public"
   },
@@ -28,14 +31,11 @@
     "yaml": "^2.5.1"
   },
   "devDependencies": {
+    "@eve/migrate": "workspace:*",
+    "@eve/shared": "workspace:*",
     "@types/node": "^22.0.0",
     "esbuild": "^0.27.3",
     "postgres": "^3.4.0",
-    "typescript": "^5.7.0",
-    "@eve/migrate": "0.0.1",
-    "@eve/shared": "0.0.1"
-  },
-  "scripts": {
-    "build": "rm -rf dist && esbuild src/index.ts --bundle --platform=node --target=node22 --outfile=dist/index.js --format=cjs --external:yaml"
+    "typescript": "^5.7.0"
   }
-}
+}