@kvell007/embed-labs-cli 0.1.0-alpha.16 → 0.1.0-alpha.17

package/README.md

@@ -81,6 +81,18 @@ embedlabs doctor
 embedlabs auth login --token <token>
 ```
 
+If a cloud or plugin command reaches a protected API before a token is
+configured, the CLI returns `auth_token_missing` with the registration URL and
+these setup options:
+
+```bash
+open https://api.embedboard.com/dashboard
+embedlabs auth login --token <your_token>
+# or for automation:
+export EMBED_API_TOKEN=<your_token>
+embedlabs auth status
+```
+
 For the current public API plus local TaishanPi verification path, see
 `docs/runbooks/PUBLIC_CLI_USER_VERIFICATION.md`.
 

package/dist/index.js

@@ -18,6 +18,7 @@ const qrcodeTerminal = require("qrcode-terminal");
 const DEFAULT_BRIDGE_URL = process.env.EMBED_BRIDGE_URL ?? "http://127.0.0.1:18083";
 const DEFAULT_CLOUD_API_URL = process.env.EMBED_CLOUD_API_URL ?? "http://127.0.0.1:18100";
 const DEFAULT_AUTH_FILE = process.env.EMBED_AUTH_FILE ?? ".embed-labs/auth.json";
+const DEFAULT_DASHBOARD_URL = process.env.EMBED_DASHBOARD_URL ?? "https://api.embedboard.com/dashboard";
 const DEFAULT_AGENT_ARTIFACT_DIR = process.env.EMBED_AGENT_ARTIFACT_DIR ?? ".embed-labs/artifacts";
 const DOCTOR_USAGE = "Usage: embed doctor [--json]";
 const DOCTOR_HTTP_TIMEOUT_MS = 8000;
@@ -1200,7 +1201,8 @@ function authDoctorCheck(status) {
             : {
                 code: "auth_not_ready",
                 message: "No CLI auth token is configured.",
-                remediation: "Run: embed auth login --token <token>"
+                remediation: cloudAuthSetupRemediation(),
+                details: cloudAuthSetupDetails()
             }
     };
 }
@@ -1411,7 +1413,7 @@ async function cloudDownloadArtifact(artifactId, outputPath) {
         });
         if (!response.ok) {
             const parsed = await parseErrorResponse(response);
-            return parsed ?? fail("artifact_download_failed", `Artifact download failed with HTTP ${response.status}.`);
+            return parsed ? enrichCloudAuthFailure(parsed, Boolean(token)) : fail("artifact_download_failed", `Artifact download failed with HTTP ${response.status}.`);
         }
         const bytes = Buffer.from(await response.arrayBuffer());
         const expectedSha256 = response.headers.get("x-embed-artifact-sha256")?.trim();
@@ -1454,7 +1456,8 @@ async function cloudRequest(method, path, body) {
             headers: Object.keys(headers).length > 0 ? headers : undefined,
             body: body === undefined ? undefined : bodyText
         });
-        return await response.json();
+        const parsed = await response.json();
+        return enrichCloudAuthFailure(parsed, Boolean(token));
     }
     catch (error) {
         return fail("cloud_api_unreachable", error instanceof Error ? error.message : String(error), {
@@ -1462,6 +1465,39 @@ async function cloudRequest(method, path, body) {
         });
     }
 }
+function enrichCloudAuthFailure(response, hadToken) {
+    if (response.ok || response.error.code !== "unauthorized") {
+        return response;
+    }
+    if (!hadToken) {
+        return fail("auth_token_missing", "Embed Labs API Token is not configured. Register or sign in, create an API Token, then configure it locally before using cloud and plugin services.", {
+            remediation: cloudAuthSetupRemediation(),
+            details: cloudAuthSetupDetails()
+        });
+    }
+    return fail("auth_token_rejected", "The configured Embed Labs API Token was rejected by the server. Recreate or copy a fresh token from the dashboard and sign in again.", {
+        remediation: cloudAuthSetupRemediation(),
+        details: cloudAuthSetupDetails()
+    });
+}
+function cloudAuthSetupRemediation() {
+    return [
+        `1. Open ${DEFAULT_DASHBOARD_URL} and register or sign in.`,
+        "2. Create or copy your Embed Labs API Token from the user dashboard.",
+        "3. Run: embedlabs auth login --token <your_token>",
+        "4. For automation, set: EMBED_API_TOKEN=<your_token>",
+        "5. Verify with: embedlabs auth status"
+    ].join("\n");
+}
+function cloudAuthSetupDetails() {
+    return {
+        dashboard_url: DEFAULT_DASHBOARD_URL,
+        login_command: "embedlabs auth login --token <your_token>",
+        env_var: "EMBED_API_TOKEN",
+        auth_status_command: "embedlabs auth status",
+        auth_file: DEFAULT_AUTH_FILE
+    };
+}
 function addCloudRequestSignature(headers, method, pathWithQuery, bodyText, token) {
     if (process.env.EMBED_CLOUD_API_SIGNING === "0") {
         return;
@@ -1914,7 +1950,8 @@ async function cleanupLegacyCodexPluginRemnants(targetRoot) {
     ];
     legacyPaths.push(...await discoverLegacyCodexCachePaths(targetRoot));
     if (resolve(targetRoot) === resolve(defaultCodexPluginRoot())) {
-        legacyPaths.push(join(defaultCodexHome(), ".tmp", "plugins"), join(defaultCodexHome(), ".tmp", "plugins.sha"), join(defaultCodexHome(), "skills", "dbt-agent"), join(defaultCodexHome(), "skills", "development-board-toolchain-dev"), join(defaultCodexHome(), "memories", "skills", "dbt-agent-live-board-ops"), join(defaultCodexHome(), "memories", "skills", "dbt-agent-platform-plugin-maintenance"));
+        legacyPaths.push(join(defaultCodexHome(), ".tmp", "plugins"), join(defaultCodexHome(), ".tmp", "plugins.sha"), join(defaultCodexHome(), "ambient-suggestions"), join(defaultCodexHome(), "skills", "dbt-agent"), join(defaultCodexHome(), "skills", "development-board-toolchain-dev"), join(defaultCodexHome(), "memories", "skills", "dbt-agent-live-board-ops"), join(defaultCodexHome(), "memories", "skills", "dbt-agent-platform-plugin-maintenance"));
+        legacyPaths.push(...await discoverLegacyHomeAgentsMarketplacePaths(warnings), ...legacyDevelopmentBoardRuntimePluginPaths());
     }
     for (const candidate of legacyPaths) {
         try {
@@ -1986,7 +2023,56 @@ async function stopLegacyCodexPluginProcesses(warnings) {
 function isLegacyCodexPluginProcess(command) {
     const trimmed = command.trim();
     return /^\/.*\/dbt-agent-mcp-bridge(?:\s|$)/.test(trimmed)
-        || /^dbt-agent-mcp-bridge(?:\s|$)/.test(trimmed);
+        || /^dbt-agent-mcp-bridge(?:\s|$)/.test(trimmed)
+        || legacyDevelopmentBoardRuntimeProcessPatterns().some((pattern) => pattern.test(trimmed));
+}
+function legacyDevelopmentBoardRuntimeProcessPatterns() {
+    const home = escapeRegExp(homedir());
+    return [
+        new RegExp(`^${home}/Library/development-board-toolchain/agent/bin/dbt-agentd(?:\\s|$)`),
+        new RegExp(`^${home}/Library/Application Support/development-board-toolchain/agent/bin/dbt-agentd(?:\\s|$)`),
+        new RegExp(`^${home}/Library/development-board-toolchain/runtime/dbtctl\\s+status(?:\\s|$)`),
+        new RegExp(`^${home}/Library/Application Support/development-board-toolchain/runtime/dbtctl\\s+status(?:\\s|$)`),
+        new RegExp(`^${home}/.*?/DBT-Agent\\.app/Contents/MacOS/DBT-Agent(?:\\s|$)`)
+    ];
+}
+function legacyDevelopmentBoardRuntimePluginPaths() {
+    return [
+        join(homedir(), "Library", "development-board-toolchain", "runtime", "editor_plugins"),
+        join(homedir(), "Library", "development-board-toolchain", "runtime", "opencode_plugin"),
+        join(homedir(), "Library", "Application Support", "development-board-toolchain", "runtime", "editor_plugins"),
+        join(homedir(), "Library", "Application Support", "development-board-toolchain", "runtime", "opencode_plugin")
+    ];
+}
+async function discoverLegacyHomeAgentsMarketplacePaths(warnings) {
+    const paths = [];
+    const pluginRoot = join(homedir(), ".agents", "plugins");
+    try {
+        const entries = await readdir(pluginRoot, { withFileTypes: true });
+        for (const entry of entries) {
+            if (!entry.isFile() || !entry.name.startsWith("marketplace.json"))
+                continue;
+            const filePath = join(pluginRoot, entry.name);
+            try {
+                const current = await readFile(filePath, "utf8");
+                if (isLegacyHomeAgentsMarketplace(current)) {
+                    paths.push(filePath);
+                }
+            }
+            catch (error) {
+                warnings.push(`Could not inspect legacy Codex home marketplace ${filePath}: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+    }
+    catch {
+        return paths;
+    }
+    return paths;
+}
+function isLegacyHomeAgentsMarketplace(text) {
+    return text.includes('"name" : "plugins"') || text.includes('"name": "plugins"')
+        ? text.includes('"dbt-agent"') || text.includes('"./.codex/plugins/dbt-agent"') || text.includes('"./plugins/dbt-agent"')
+        : false;
 }
 async function discoverLegacyCodexCachePaths(targetRoot) {
     const paths = [];
@@ -2074,7 +2160,8 @@ function isLegacyCodexConfigTable(table) {
         || table === "mcp_servers.dbt-agent"
         || table.startsWith("mcp_servers.dbt-agent.")
         || table === 'mcp_servers."dbt-agent"'
-        || table.startsWith('mcp_servers."dbt-agent".');
+        || table.startsWith('mcp_servers."dbt-agent".')
+        || /^projects\."[^"]*\/DBT-Agent-Project(?:\/[^"]*)?"$/.test(table);
 }
 function legacyCodexCleanupWarning(cleanup) {
     const parts = [];