@kvell007/embed-labs-cli 0.1.0-alpha.14 → 0.1.0-alpha.16

package/dist/index.js

@@ -1352,27 +1352,45 @@ function isApiResponse(value) {
 }
 async function bridgeGet(path) {
     const response = await fetch(`${DEFAULT_BRIDGE_URL}${path}`, {
-        headers: bridgeHeaders()
+        headers: bridgeHeaders("GET", path, "")
     });
     return await response.json();
 }
 async function bridgePost(path, body) {
+    const bodyText = JSON.stringify(body);
     const response = await fetch(`${DEFAULT_BRIDGE_URL}${path}`, {
         method: "POST",
-        headers: bridgeHeaders({ "content-type": "application/json" }),
-        body: JSON.stringify(body)
+        headers: bridgeHeaders("POST", path, bodyText, { "content-type": "application/json" }),
+        body: bodyText
     });
     return await response.json();
 }
-function bridgeHeaders(base = {}) {
+function bridgeHeaders(method, path, bodyText, base = {}) {
     const token = process.env.EMBED_BRIDGE_TOKEN?.trim();
     if (!token) {
         return base;
     }
-    return {
+    const headers = {
         ...base,
         authorization: `Bearer ${token}`
     };
+    addBridgeRequestSignature(headers, method, path, bodyText, token);
+    return headers;
+}
+function addBridgeRequestSignature(headers, method, pathWithQuery, bodyText, token) {
+    if (process.env.EMBED_BRIDGE_SIGNING === "0") {
+        return;
+    }
+    const timestamp = String(Math.floor(Date.now() / 1000));
+    const nonce = randomBytes(16).toString("hex");
+    const bodySha256 = createHash("sha256").update(bodyText).digest("hex");
+    const keyId = createHash("sha256").update(token).digest("hex").slice(0, 16);
+    const canonical = cloudRequestCanonicalString(method, pathWithQuery, timestamp, nonce, bodySha256);
+    headers["x-embed-key-id"] = keyId;
+    headers["x-embed-timestamp"] = timestamp;
+    headers["x-embed-nonce"] = nonce;
+    headers["x-embed-body-sha256"] = bodySha256;
+    headers["x-embed-signature"] = createHmac("sha256", token).update(canonical).digest("hex");
 }
 async function cloudGet(path) {
     return await cloudRequest("GET", path);
@@ -1896,7 +1914,7 @@ async function cleanupLegacyCodexPluginRemnants(targetRoot) {
     ];
     legacyPaths.push(...await discoverLegacyCodexCachePaths(targetRoot));
     if (resolve(targetRoot) === resolve(defaultCodexPluginRoot())) {
-        legacyPaths.push(join(defaultCodexHome(), ".tmp", "plugins"), join(defaultCodexHome(), ".tmp", "plugins.sha"), join(defaultCodexHome(), "memories", "skills", "dbt-agent-live-board-ops"), join(defaultCodexHome(), "memories", "skills", "dbt-agent-platform-plugin-maintenance"));
+        legacyPaths.push(join(defaultCodexHome(), ".tmp", "plugins"), join(defaultCodexHome(), ".tmp", "plugins.sha"), join(defaultCodexHome(), "skills", "dbt-agent"), join(defaultCodexHome(), "skills", "development-board-toolchain-dev"), join(defaultCodexHome(), "memories", "skills", "dbt-agent-live-board-ops"), join(defaultCodexHome(), "memories", "skills", "dbt-agent-platform-plugin-maintenance"));
     }
     for (const candidate of legacyPaths) {
         try {
@@ -2023,6 +2041,8 @@ async function cleanupLegacyCodexTextFile(filePath, warnings) {
 function isLegacyCodexHistoryMention(line) {
     return line.includes("plugin://dbt-agent@plugins")
         || line.includes("plugin://dbt-agent@embed-labs")
+        || line.includes("development-board-toolchain-dev")
+        || line.includes("development-board-toolchain")
         || /dbt-agent/i.test(line);
 }
 function removeLegacyCodexConfigTables(text) {
@@ -2085,6 +2105,7 @@ async function cleanupLegacyOpenCodePluginRemnants(targetRoot, globalInstall) {
     ];
     if (globalInstall) {
         legacyPaths.push(join(targetRoot, "plugins", "embed-labs.js"));
+        legacyPaths.push(...await discoverLegacyOpenCodeBackupPaths(targetRoot, warnings));
     }
     for (const candidate of legacyPaths) {
         try {
@@ -2103,6 +2124,30 @@ async function cleanupLegacyOpenCodePluginRemnants(targetRoot, globalInstall) {
         ...(warnings.length > 0 ? { warnings } : {})
     };
 }
+async function discoverLegacyOpenCodeBackupPaths(targetRoot, warnings) {
+    const paths = [];
+    try {
+        const entries = await readdir(targetRoot, { withFileTypes: true });
+        for (const entry of entries) {
+            if (!entry.isFile() || !entry.name.includes(".bak"))
+                continue;
+            const filePath = join(targetRoot, entry.name);
+            try {
+                const current = await readFile(filePath, "utf8");
+                if (current.includes("dbt-agent") || current.includes("development-board-toolchain")) {
+                    paths.push(filePath);
+                }
+            }
+            catch (error) {
+                warnings.push(`Could not inspect legacy OpenCode backup ${filePath}: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+    }
+    catch {
+        return paths;
+    }
+    return paths;
+}
 function legacyOpenCodeCleanupWarning(cleanup) {
     const parts = [];
     if (cleanup.legacy_removed_paths.length > 0) {