@kvell007/embed-labs-cli 0.1.0-alpha.2 → 0.1.0-alpha.20

package/dist/index.js

@@ -1,12 +1,15 @@
 #!/usr/bin/env node
-import { createHash } from "node:crypto";
+import { createHash, createHmac, randomBytes } from "node:crypto";
+import { constants } from "node:fs";
 import { spawn } from "node:child_process";
-import { cp, mkdir, mkdtemp, readFile, rm, stat, writeFile } from "node:fs/promises";
+import { access, cp, mkdir, mkdtemp, readFile, readdir, rm, stat, writeFile } from "node:fs/promises";
 import { createRequire } from "node:module";
 import { homedir, tmpdir } from "node:os";
-import { basename, dirname, join, resolve } from "node:path";
+import { basename, delimiter, dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { startServer } from "@embed-labs/local-bridge";
+import { composeBootLogoPackage } from "./image-compose.js";
+import { buildTaishanPiQtSmoke, compileTaishanPiSingleFile, currentLocalToolchain, installLocalToolchain, latestLocalToolchain, validateLocalToolchain } from "./local-toolchain.js";
 import { fail, ok } from "@embed-labs/protocol";
 const require = createRequire(import.meta.url);
 const CLI_MODULE_DIR = dirname(fileURLToPath(import.meta.url));
@@ -15,6 +18,7 @@ const qrcodeTerminal = require("qrcode-terminal");
 const DEFAULT_BRIDGE_URL = process.env.EMBED_BRIDGE_URL ?? "http://127.0.0.1:18083";
 const DEFAULT_CLOUD_API_URL = process.env.EMBED_CLOUD_API_URL ?? "http://127.0.0.1:18100";
 const DEFAULT_AUTH_FILE = process.env.EMBED_AUTH_FILE ?? ".embed-labs/auth.json";
+const DEFAULT_DASHBOARD_URL = process.env.EMBED_DASHBOARD_URL ?? "https://api.embedboard.com/dashboard";
 const DEFAULT_AGENT_ARTIFACT_DIR = process.env.EMBED_AGENT_ARTIFACT_DIR ?? ".embed-labs/artifacts";
 const DOCTOR_USAGE = "Usage: embed doctor [--json]";
 const DOCTOR_HTTP_TIMEOUT_MS = 8000;
@@ -24,6 +28,9 @@ const DEVICE_PROBE_USAGE = "Usage: embed device probe --host <host> --ports 22,1
 const QUERY_USAGE = "Usage: embed query <natural language request> [--account <account_id>] [--qr] [--json]";
 const DEFAULT_PLUGIN_RELEASE_URL = process.env.EMBED_PLUGIN_RELEASE_URL?.trim() || "https://api.embedboard.com/plugin-releases/agent-plugins/latest";
 const PLUGIN_LIST_USAGE = "Usage: embed plugin list [--release-dir <dir>] [--release-url <url>] [--json]";
+const CODEX_PLUGIN_NAME = "embed-labs";
+const CODEX_MARKETPLACE_NAME = "embed-labs";
+const LEGACY_CODEX_MARKETPLACE_NAMES = new Set(["embed-labs-plugins"]);
 const PLUGIN_INSTALL_USAGE = "Usage: embed plugin install <codex|opencode|all> [--release-dir <dir>] [--release-url <url>] [--target <dir>] [--codex-target <dir>] [--opencode-target <dir>] [--force] [--json]";
 const CLOUD_TASK_ARTIFACTS_USAGE = "Usage: embed cloud task artifacts <task_id> [--json]";
 const CLOUD_TASK_EVIDENCE_USAGE = "Usage: embed cloud task evidence <task_id> [--json]";
@@ -74,6 +81,16 @@ const BUILD_APPLICATION_STUB_USAGE = "Usage: embed build application stub --work
 const BUILD_APPLICATION_GENERATE_USAGE = "Usage: embed build application generate --workspace <workspace_id> --prompt <request> [--account <account_id>] [--target <source_path>] [--provider stub|openai|bai|cc|claude-code] [--model <model>] [--json]";
 const BUILD_APPLICATION_COMPILE_USAGE = "Usage: embed build application compile --workspace <workspace_id> [--account <account_id>] [--source <source_path>] [--execution-mode docker_worker|server_direct|dry_run] [--compiler auto|cc|gcc|clang|aarch64-linux-gnu-gcc] [--json]";
 const BUILD_IMAGE_GENERATE_USAGE = "Usage: embed build image generate --workspace <workspace_id> --prompt <request> [--account <account_id>] [--image-profile <profile_id>] [--provider stub|openai|bai|cc|claude-code] [--model <model>] [--execution-mode cloud_worker|dry_run] [--worker-pool <pool>] [--json]";
+const BUILD_IMAGE_BOOT_LOGO_USAGE = "Usage: embed build image boot-logo --logo <local_image> [--account <account_id>] [--project <project_id>] [--board taishanpi] [--variant 1M-RK3566] [--kernel-logo <local_image>] [--rotate -90] [--scale 100] [--output <package.json>] [--json]";
+const IMAGE_BOOT_LOGO_COMPOSE_USAGE = "Usage: embed image boot-logo compose --package <boot-logo-package.json> --base-image <boot.img|image.img> --output <image> [--manifest <manifest.json>] [--force] [--json]";
+const BUILD_IMAGE_DTB_USAGE = "Usage: embed build image dtb --dtb <local.dtb|local.dts> [--input-format auto|dtb|dts] [--account <account_id>] [--project <project_id>] [--board taishanpi] [--variant 1M-RK3566] [--output <package.json>] [--json]";
+const IMAGE_DTB_COMPOSE_USAGE = "Usage: embed image dtb compose --package <dtb-package.json> --base-image <boot.img|image.img> --output <image> [--manifest <manifest.json>] [--force] [--json]";
+const LOCAL_TOOLCHAIN_LATEST_USAGE = "Usage: embed local toolchain latest [--board taishanpi-1m-rk3566] [--channel stable] [--metadata-root <path>] [--json]";
+const LOCAL_TOOLCHAIN_CURRENT_USAGE = "Usage: embed local toolchain current [--install-root <path>] [--json]";
+const LOCAL_TOOLCHAIN_INSTALL_USAGE = "Usage: embed local toolchain install [--board taishanpi-1m-rk3566] [--channel stable] [--metadata-root <path>] [--source-url <tar.gz-url>|--source-release-root <path>] [--install-root <path>] [--mode minimal|compile|qt|full|images] [--force] [--json]\nDefault source: the production download channel at download.embedboard.com.";
+const LOCAL_TOOLCHAIN_VALIDATE_USAGE = "Usage: embed local toolchain validate [--release-root <path>] [--mode minimal|compile|qt|full|images] [--json]";
+const LOCAL_COMPILE_TAISHANPI_USAGE = "Usage: embed local compile taishanpi --source <main.c|main.cpp> --output <artifact> [--release-root <path>] [--account <account_id>] [--json]";
+const LOCAL_BUILD_QT_SMOKE_USAGE = "Usage: embed local build qt-smoke --build-dir <dir> [--source <qt-smoke-dir>] [--release-root <path>] [--account <account_id>] [--json]";
 const BOARD_REGISTRY_LIST_USAGE = "Usage: embed board registry list [--json]";
 const BOARD_REGISTRY_SHOW_USAGE = "Usage: embed board registry show <template_id> [--json]";
 const BOARD_METHODS_USAGE = "Usage: embed board methods <template_id> [--json]";
@@ -82,9 +99,10 @@ const BOARD_KNOWLEDGE_FILE_USAGE = "Usage: embed board knowledge file <template_
 const MODEL_LIST_USAGE = "Usage: embed model list [--json]";
 const MODEL_DEFAULT_USAGE = "Usage: embed model default [--json]";
 const SERVICE_MODES_USAGE = "Usage: embed service modes [--json]";
-const AGENT_RUN_USAGE = "Usage: embed agent run --prompt <request> [--account <account_id>] [--workspace <workspace_id>] [--provider stub|openai|bai|cc|claude-code] [--model <model>] [--max-tool-calls 4] [--host <ip>] [--ports 22,15301] [--artifact <local_file>|--artifact-id <artifact_id>|--artifact-task <task_id>] [--artifact-output <path>] [--remote-path <path>] [--run] [--approve] [--json]";
+const AGENT_RUN_USAGE = "Usage: embed agent run --prompt <request> [--account <account_id>] [--workspace <workspace_id>] [--provider stub|openai|bai|cc|claude-code] [--model <model>] [--max-tool-calls 6] [--host <ip>] [--ports 22,15301] [--artifact <local_file>|--artifact-id <artifact_id>|--artifact-task <task_id>] [--artifact-output <path>] [--remote-path <path>] [--run] [--approve] [--json]";
 const TOOL_LIST_USAGE = "Usage: embed tool list [--json]";
 const TOOL_CALL_USAGE = "Usage: embed tool call <capability_id> [--input-json '<json>'] [--approve] [--json]";
+const MCP_TOOL_EVENT_USAGE = "Usage: embed mcp log --tool <tool_name> [--client codex|opencode] [--mode local_ai|server_ai] [--server-model-used true|false] [--success true|false] [--request-id <id>] [--duration-ms <ms>] [--input-summary <text>] [--output-summary <text>] [--json]";
 const BOARD_DEPLOY_TAISHANPI_USAGE = "Usage: embed deploy taishanpi --host <ip> --artifact <local_file> --approve [--user root] [--remote-path /userdata/embed-labs/apps/app] [--run] [--timeout 30] [--json]";
 const CLOUD_TASK_EVENT_APPEND_USAGE = "Usage: embed cloud task event append <task_id> [--state <state>] [--progress-stage <stage>|--stage <stage>] [--progress-text <text>|--message <text>] [--progress-percent 0-100] [--severity info|warning|error] [--type <event_type>] [--artifact-json '<json>'] [--evidence-json '<json>'] [--json]";
 const TASK_STATES = new Set([
@@ -354,6 +372,16 @@ async function main(argv) {
                 USAGE_EVENTS_USAGE
             ].join("\n")), undefined, 2);
         }
+        if (area === "mcp") {
+            if (action === "log" || action === "tool-event") {
+                const body = mcpToolEventBody(parsed);
+                if (typeof body === "string") {
+                    return output(parsed, fail("invalid_args", body), undefined, 2);
+                }
+                return output(parsed, await cloudPost("/v1/mcp/tool-events", body), renderMcpToolEvent);
+            }
+            return output(parsed, fail("invalid_args", MCP_TOOL_EVENT_USAGE), undefined, 2);
+        }
         if (area === "billing") {
             if (action === "statement") {
                 const request = billingStatementRequest(parsed);
@@ -475,6 +503,75 @@ async function main(argv) {
                 BILLING_SNAPSHOT_SHOW_USAGE
             ].join("\n")), undefined, 2);
         }
+        if (area === "image") {
+            if ((action === "boot-logo" && parsed.command[2] === "compose") || (action === "compose" && parsed.command[2] === "boot-logo")) {
+                const request = imageBootLogoComposeRequest(parsed, IMAGE_BOOT_LOGO_COMPOSE_USAGE);
+                if (typeof request === "string") {
+                    return output(parsed, fail("invalid_args", request), undefined, 2);
+                }
+                return output(parsed, ok(await composeBootLogoPackage(request)), renderBootLogoComposeResult);
+            }
+            if ((action === "dtb" && parsed.command[2] === "compose") || (action === "compose" && parsed.command[2] === "dtb")) {
+                const request = imageBootLogoComposeRequest(parsed, IMAGE_DTB_COMPOSE_USAGE);
+                if (typeof request === "string") {
+                    return output(parsed, fail("invalid_args", request), undefined, 2);
+                }
+                return output(parsed, ok(await composeBootLogoPackage(request)), renderBootLogoComposeResult);
+            }
+            return output(parsed, fail("invalid_args", [IMAGE_BOOT_LOGO_COMPOSE_USAGE, IMAGE_DTB_COMPOSE_USAGE].join("\n")), undefined, 2);
+        }
+        if (area === "local") {
+            if (action === "toolchain" && parsed.command[2] === "latest") {
+                const request = localToolchainLatestRequest(parsed);
+                if (typeof request === "string") {
+                    return output(parsed, fail("invalid_args", request), undefined, 2);
+                }
+                return output(parsed, ok(await latestLocalToolchain(request)), renderLocalToolchainLatest);
+            }
+            if (action === "toolchain" && parsed.command[2] === "current") {
+                const request = localToolchainCurrentRequest(parsed);
+                if (typeof request === "string") {
+                    return output(parsed, fail("invalid_args", request), undefined, 2);
+                }
+                return output(parsed, ok(await currentLocalToolchain(request.installRoot)), renderLocalToolchainCurrent);
+            }
+            if (action === "toolchain" && parsed.command[2] === "install") {
+                const request = localToolchainInstallRequest(parsed);
+                if (typeof request === "string") {
+                    return output(parsed, fail("invalid_args", request), undefined, 2);
+                }
+                return output(parsed, ok(await installLocalToolchain(request)), renderLocalToolchainInstall);
+            }
+            if (action === "toolchain" && parsed.command[2] === "validate") {
+                const request = localToolchainValidateRequest(parsed);
+                if (typeof request === "string") {
+                    return output(parsed, fail("invalid_args", request), undefined, 2);
+                }
+                return output(parsed, ok(await validateLocalToolchain(request)), renderLocalToolchainValidation);
+            }
+            if (action === "compile" && parsed.command[2] === "taishanpi") {
+                const request = localCompileTaishanPiRequest(parsed, await authStatus());
+                if (typeof request === "string") {
+                    return output(parsed, fail("invalid_args", request), undefined, 2);
+                }
+                return output(parsed, ok(await compileTaishanPiSingleFile(request)), renderLocalCompileResult);
+            }
+            if (action === "build" && parsed.command[2] === "qt-smoke") {
+                const request = localBuildQtSmokeRequest(parsed, await authStatus());
+                if (typeof request === "string") {
+                    return output(parsed, fail("invalid_args", request), undefined, 2);
+                }
+                return output(parsed, ok(await buildTaishanPiQtSmoke(request)), renderLocalCompileResult);
+            }
+            return output(parsed, fail("invalid_args", [
+                LOCAL_TOOLCHAIN_LATEST_USAGE,
+                LOCAL_TOOLCHAIN_CURRENT_USAGE,
+                LOCAL_TOOLCHAIN_INSTALL_USAGE,
+                LOCAL_TOOLCHAIN_VALIDATE_USAGE,
+                LOCAL_COMPILE_TAISHANPI_USAGE,
+                LOCAL_BUILD_QT_SMOKE_USAGE
+            ].join("\n")), undefined, 2);
+        }
         if (area === "build") {
             if (action === "template") {
                 const templateAction = parsed.command[2];
@@ -620,6 +717,44 @@ async function main(argv) {
                 }
                 return output(parsed, await cloudPost("/v1/build/image-generate", body), renderJob);
             }
+            if (action === "image" && (parsed.command[2] === "boot-logo" || parsed.command[2] === "boot-logo-package")) {
+                const request = await buildImageBootLogoPackageRequest(parsed);
+                if (typeof request === "string") {
+                    return output(parsed, fail("invalid_args", request), undefined, 2);
+                }
+                const created = await cloudPost("/v1/build/image/boot-logo-package", request.body);
+                if (!created.ok || !request.output_path) {
+                    return output(parsed, created, renderJob, created.ok ? 0 : 2);
+                }
+                const packageArtifact = created.data.artifacts?.find((artifact) => artifact.kind === "patch" && artifact.name === "boot-logo-package.json");
+                if (!packageArtifact) {
+                    return output(parsed, fail("artifact_not_found", "Boot-logo package task did not include boot-logo-package.json."), undefined, 2);
+                }
+                const downloaded = await cloudDownloadArtifact(packageArtifact.artifact_id, request.output_path);
+                if (!downloaded.ok) {
+                    return output(parsed, downloaded, renderArtifactDownload, 2);
+                }
+                return output(parsed, ok({ task: created.data, downloaded_artifact: downloaded.data }), renderBootLogoPackageResult);
+            }
+            if (action === "image" && (parsed.command[2] === "dtb" || parsed.command[2] === "dtb-package")) {
+                const request = await buildImageDtbPackageRequest(parsed);
+                if (typeof request === "string") {
+                    return output(parsed, fail("invalid_args", request), undefined, 2);
+                }
+                const created = await cloudPost("/v1/build/image/dtb-package", request.body);
+                if (!created.ok || !request.output_path) {
+                    return output(parsed, created, renderJob, created.ok ? 0 : 2);
+                }
+                const packageArtifact = created.data.artifacts?.find((artifact) => artifact.kind === "patch" && artifact.name === "dtb-package.json");
+                if (!packageArtifact) {
+                    return output(parsed, fail("artifact_not_found", "DTB package task did not include dtb-package.json."), undefined, 2);
+                }
+                const downloaded = await cloudDownloadArtifact(packageArtifact.artifact_id, request.output_path);
+                if (!downloaded.ok) {
+                    return output(parsed, downloaded, renderArtifactDownload, 2);
+                }
+                return output(parsed, ok({ task: created.data, downloaded_artifact: downloaded.data }), renderDtbPackageResult);
+            }
             return output(parsed, fail("invalid_args", [
                 BUILD_TEMPLATE_LIST_USAGE,
                 BUILD_TEMPLATE_SHOW_USAGE,
@@ -636,7 +771,9 @@ async function main(argv) {
                 BUILD_APPLICATION_STUB_USAGE,
                 BUILD_APPLICATION_GENERATE_USAGE,
                 BUILD_APPLICATION_COMPILE_USAGE,
-                BUILD_IMAGE_GENERATE_USAGE
+                BUILD_IMAGE_GENERATE_USAGE,
+                BUILD_IMAGE_BOOT_LOGO_USAGE,
+                BUILD_IMAGE_DTB_USAGE
             ].join("\n")), undefined, 2);
         }
         if (area === "project" && action === "create") {
@@ -1067,7 +1204,8 @@ function authDoctorCheck(status) {
             : {
                 code: "auth_not_ready",
                 message: "No CLI auth token is configured.",
-                remediation: "Run: embed auth login --token <token>"
+                remediation: cloudAuthSetupRemediation(),
+                details: cloudAuthSetupDetails()
             }
     };
 }
@@ -1218,17 +1356,47 @@ function isApiResponse(value) {
     return isJsonObject(error) && typeof error.code === "string" && typeof error.message === "string";
 }
 async function bridgeGet(path) {
-    const response = await fetch(`${DEFAULT_BRIDGE_URL}${path}`);
+    const response = await fetch(`${DEFAULT_BRIDGE_URL}${path}`, {
+        headers: bridgeHeaders("GET", path, "")
+    });
     return await response.json();
 }
 async function bridgePost(path, body) {
+    const bodyText = JSON.stringify(body);
     const response = await fetch(`${DEFAULT_BRIDGE_URL}${path}`, {
         method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify(body)
+        headers: bridgeHeaders("POST", path, bodyText, { "content-type": "application/json" }),
+        body: bodyText
     });
     return await response.json();
 }
+function bridgeHeaders(method, path, bodyText, base = {}) {
+    const token = process.env.EMBED_BRIDGE_TOKEN?.trim();
+    if (!token) {
+        return base;
+    }
+    const headers = {
+        ...base,
+        authorization: `Bearer ${token}`
+    };
+    addBridgeRequestSignature(headers, method, path, bodyText, token);
+    return headers;
+}
+function addBridgeRequestSignature(headers, method, pathWithQuery, bodyText, token) {
+    if (process.env.EMBED_BRIDGE_SIGNING === "0") {
+        return;
+    }
+    const timestamp = String(Math.floor(Date.now() / 1000));
+    const nonce = randomBytes(16).toString("hex");
+    const bodySha256 = createHash("sha256").update(bodyText).digest("hex");
+    const keyId = createHash("sha256").update(token).digest("hex").slice(0, 16);
+    const canonical = cloudRequestCanonicalString(method, pathWithQuery, timestamp, nonce, bodySha256);
+    headers["x-embed-key-id"] = keyId;
+    headers["x-embed-timestamp"] = timestamp;
+    headers["x-embed-nonce"] = nonce;
+    headers["x-embed-body-sha256"] = bodySha256;
+    headers["x-embed-signature"] = createHmac("sha256", token).update(canonical).digest("hex");
+}
 async function cloudGet(path) {
     return await cloudRequest("GET", path);
 }
@@ -1241,13 +1409,14 @@ async function cloudDownloadArtifact(artifactId, outputPath) {
         const token = await cloudAuthToken();
         if (token) {
             headers.authorization = `Bearer ${token}`;
+            addCloudRequestSignature(headers, "GET", `/v1/artifacts/${encodeURIComponent(artifactId)}/download`, "", token);
         }
         const response = await fetch(`${serviceBaseUrl(DEFAULT_CLOUD_API_URL)}/v1/artifacts/${encodeURIComponent(artifactId)}/download`, {
             headers: Object.keys(headers).length > 0 ? headers : undefined
         });
         if (!response.ok) {
             const parsed = await parseErrorResponse(response);
-            return parsed ?? fail("artifact_download_failed", `Artifact download failed with HTTP ${response.status}.`);
+            return parsed ? enrichCloudAuthFailure(parsed, Boolean(token)) : fail("artifact_download_failed", `Artifact download failed with HTTP ${response.status}.`);
         }
         const bytes = Buffer.from(await response.arrayBuffer());
         const expectedSha256 = response.headers.get("x-embed-artifact-sha256")?.trim();
@@ -1276,19 +1445,22 @@ async function cloudDownloadArtifact(artifactId, outputPath) {
 async function cloudRequest(method, path, body) {
     try {
         const headers = {};
-        if (body !== undefined) {
+        const bodyText = body === undefined ? "" : JSON.stringify(body);
+        if (bodyText) {
             headers["content-type"] = "application/json";
         }
         const token = await cloudAuthToken();
         if (token) {
             headers.authorization = `Bearer ${token}`;
+            addCloudRequestSignature(headers, method, path, bodyText, token);
         }
         const response = await fetch(`${serviceBaseUrl(DEFAULT_CLOUD_API_URL)}${path}`, {
             method,
             headers: Object.keys(headers).length > 0 ? headers : undefined,
-            body: body === undefined ? undefined : JSON.stringify(body)
+            body: body === undefined ? undefined : bodyText
         });
-        return await response.json();
+        const parsed = await response.json();
+        return enrichCloudAuthFailure(parsed, Boolean(token));
     }
     catch (error) {
         return fail("cloud_api_unreachable", error instanceof Error ? error.message : String(error), {
@@ -1296,6 +1468,72 @@ async function cloudRequest(method, path, body) {
         });
     }
 }
+function enrichCloudAuthFailure(response, hadToken) {
+    if (response.ok || response.error.code !== "unauthorized") {
+        return response;
+    }
+    if (!hadToken) {
+        return fail("auth_token_missing", "Embed Labs API Token is not configured. Register or sign in, create an API Token, then configure it locally before using cloud and plugin services.", {
+            remediation: cloudAuthSetupRemediation(),
+            details: cloudAuthSetupDetails()
+        });
+    }
+    return fail("auth_token_rejected", "The configured Embed Labs API Token was rejected by the server. Recreate or copy a fresh token from the dashboard and sign in again.", {
+        remediation: cloudAuthSetupRemediation(),
+        details: cloudAuthSetupDetails()
+    });
+}
+function cloudAuthSetupRemediation() {
+    return [
+        `1. Open ${DEFAULT_DASHBOARD_URL} and register or sign in.`,
+        "2. Create or copy your Embed Labs API Token from the user dashboard.",
+        "3. Run: embedlabs auth login --token <your_token>",
+        "4. For automation, set: EMBED_API_TOKEN=<your_token>",
+        "5. Verify with: embedlabs auth status"
+    ].join("\n");
+}
+function cloudAuthSetupDetails() {
+    return {
+        dashboard_url: DEFAULT_DASHBOARD_URL,
+        login_command: "embedlabs auth login --token <your_token>",
+        env_var: "EMBED_API_TOKEN",
+        auth_status_command: "embedlabs auth status",
+        auth_file: DEFAULT_AUTH_FILE
+    };
+}
+function addCloudRequestSignature(headers, method, pathWithQuery, bodyText, token) {
+    if (process.env.EMBED_CLOUD_API_SIGNING === "0") {
+        return;
+    }
+    const timestamp = String(Math.floor(Date.now() / 1000));
+    const nonce = randomBytes(16).toString("hex");
+    const bodySha256 = createHash("sha256").update(bodyText).digest("hex");
+    const keyId = createHash("sha256").update(token).digest("hex").slice(0, 16);
+    const canonical = cloudRequestCanonicalString(method, pathWithQuery, timestamp, nonce, bodySha256);
+    headers["x-embed-key-id"] = keyId;
+    headers["x-embed-timestamp"] = timestamp;
+    headers["x-embed-nonce"] = nonce;
+    headers["x-embed-body-sha256"] = bodySha256;
+    headers["x-embed-signature"] = createHmac("sha256", token).update(canonical).digest("hex");
+}
+function cloudRequestCanonicalString(method, pathWithQuery, timestamp, nonce, bodySha256) {
+    return [
+        method.toUpperCase(),
+        normalizeCloudPathForSignature(pathWithQuery),
+        timestamp,
+        nonce,
+        bodySha256
+    ].join("\n");
+}
+function normalizeCloudPathForSignature(pathWithQuery) {
+    try {
+        const parsed = new URL(pathWithQuery, "http://embed.local");
+        return `${parsed.pathname}${parsed.search}`;
+    }
+    catch {
+        return pathWithQuery.startsWith("/") ? pathWithQuery : `/${pathWithQuery}`;
+    }
+}
 async function pluginList(parsed) {
     const releaseDir = stringFlag(parsed, "release-dir");
     const manifest = releaseDir ? await readPluginReleaseManifest(releaseDir) : undefined;
@@ -1307,16 +1545,16 @@ async function pluginList(parsed) {
         return remoteManifest;
     }
     const effectiveManifest = manifest?.data ?? remoteManifest?.data;
-    const codexPackage = manifest?.data.packages?.find((item) => item.id === "codex-dbt-agent");
-    const opencodePackage = manifest?.data.packages?.find((item) => item.id === "opencode-dbt-agent");
-    const effectiveCodexPackage = effectiveManifest?.packages?.find((item) => item.id === "codex-dbt-agent") ?? codexPackage;
-    const effectiveOpenCodePackage = effectiveManifest?.packages?.find((item) => item.id === "opencode-dbt-agent") ?? opencodePackage;
+    const codexPackage = manifest?.data.packages?.find((item) => item.id === "codex-embed-labs");
+    const opencodePackage = manifest?.data.packages?.find((item) => item.id === "opencode-embed-labs");
+    const effectiveCodexPackage = effectiveManifest?.packages?.find((item) => item.id === "codex-embed-labs") ?? codexPackage;
+    const effectiveOpenCodePackage = effectiveManifest?.packages?.find((item) => item.id === "opencode-embed-labs") ?? opencodePackage;
     const source = releaseDir || remoteManifest ? "release_dir" : "source_checkout";
     return ok({
         plugins: [
             {
                 id: "codex",
-                display_name: "Embed Labs Cloud Codex plugin",
+                display_name: "Embed Labs Codex plugin",
                 source,
                 version: effectiveCodexPackage?.version ?? effectiveManifest?.version ?? await localPluginVersion("codex"),
                 release_file: effectiveCodexPackage?.file,
@@ -1325,7 +1563,7 @@ async function pluginList(parsed) {
             },
             {
                 id: "opencode",
-                display_name: "Embed Labs Cloud OpenCode plugin",
+                display_name: "Embed Labs OpenCode plugin",
                 source,
                 version: effectiveOpenCodePackage?.version ?? effectiveManifest?.version ?? await localPluginVersion("opencode"),
                 release_file: effectiveOpenCodePackage?.file,
@@ -1401,7 +1639,8 @@ async function installCodexPlugin(parsed, context) {
         return source;
     }
     const targetRoot = codexPluginTargetRoot(parsed, context.installingAll);
-    const targetPath = join(targetRoot, "dbt-agent");
+    const targetPath = join(targetRoot, CODEX_PLUGIN_NAME);
+    const legacyCleanup = await cleanupLegacyCodexPluginRemnants(targetRoot);
     if (await pathExists(targetPath) && !booleanFlag(parsed, "force")) {
         return fail("plugin_already_installed", `Codex plugin already exists at ${targetPath}.`, {
             remediation: "Pass --force to replace it, or pass --codex-target/--target to install into a different directory."
@@ -1410,12 +1649,25 @@ async function installCodexPlugin(parsed, context) {
     await rm(targetPath, { recursive: true, force: true });
     await mkdir(targetRoot, { recursive: true });
     await cp(source.data.sourcePath, targetPath, { recursive: true });
+    const mcpRegistration = await maybeRegisterCodexMcp(parsed, targetRoot, targetPath);
+    const marketplaceRegistration = await maybeRegisterCodexMarketplace(parsed, targetRoot, targetPath);
     return ok({
         id: "codex",
         target_path: targetPath,
         source: source.data.sourceLabel,
         version: source.data.version,
-        command_hint: "Restart Codex or reload plugins after installing."
+        command_hint: mcpRegistration.registered
+            ? (marketplaceRegistration.registered
+                ? "Codex MCP and plugin marketplace entry were registered. Fully restart Codex to reload @Embed Labs."
+                : "Codex MCP was registered. Start a new Codex session to reload tools.")
+            : mcpRegistration.hint,
+        warning: legacyCodexCleanupWarning(legacyCleanup),
+        mcp_registered: mcpRegistration.registered,
+        mcp_warning: mcpRegistration.warning,
+        marketplace_registered: marketplaceRegistration.registered,
+        marketplace_path: marketplaceRegistration.marketplacePath,
+        marketplace_warning: marketplaceRegistration.warning,
+        cleanup: legacyCleanup
     });
 }
 async function installOpenCodePlugin(parsed, context) {
@@ -1424,8 +1676,10 @@ async function installOpenCodePlugin(parsed, context) {
         return source;
     }
     const targetRoot = openCodePluginTargetRoot(parsed, context.installingAll);
-    const wrapperPath = join(targetRoot, "plugins", "development-board-toolchain.js");
-    if (await pathExists(wrapperPath) && !booleanFlag(parsed, "force")) {
+    const globalInstall = isGlobalOpenCodeRoot(targetRoot);
+    const wrapperPath = join(targetRoot, "plugins", "embed-labs.js");
+    const legacyCleanup = await cleanupLegacyOpenCodePluginRemnants(targetRoot, globalInstall);
+    if (!globalInstall && await pathExists(wrapperPath) && !booleanFlag(parsed, "force")) {
         return fail("plugin_already_installed", `OpenCode plugin wrapper already exists at ${wrapperPath}.`, {
             remediation: "Pass --force to replace it, or pass --opencode-target/--target to install into a different directory."
         });
@@ -1451,20 +1705,32 @@ async function installOpenCodePlugin(parsed, context) {
         });
     }
     await ensureOpenCodeInstallPackageJson(targetRoot);
-    await writeFile(wrapperPath, `export { default, DevelopmentBoardToolchainPlugin } from "dbt-agent";\n`, "utf8");
+    if (globalInstall) {
+        await rm(wrapperPath, { force: true });
+        legacyCleanup.legacy_removed_config_entries?.push(...await ensureOpenCodeGlobalPluginConfig());
+    }
+    else {
+        await writeFile(wrapperPath, `export { default, DevelopmentBoardToolchainPlugin } from "embed-labs";\n`, "utf8");
+    }
+    const duplicateWarning = await openCodeDuplicatePluginWarning(targetRoot);
+    const cleanupWarning = legacyOpenCodeCleanupWarning(legacyCleanup);
     return ok({
         id: "opencode",
         target_path: targetRoot,
         source: source.data.sourceLabel,
         version: source.data.version,
-        command_hint: "Start OpenCode from the project containing this .opencode directory."
+        command_hint: globalInstall
+            ? "Restart OpenCode so the global embed-labs package plugin is reloaded."
+            : "Start OpenCode from the project containing this .opencode directory.",
+        warning: combineWarnings(cleanupWarning, duplicateWarning),
+        cleanup: legacyCleanup
     });
 }
 async function resolveCodexPluginSource(context) {
     if (context.releaseDir) {
-        const item = context.manifest?.packages?.find((entry) => entry.id === "codex-dbt-agent");
+        const item = context.manifest?.packages?.find((entry) => entry.id === "codex-embed-labs");
         if (!item?.file) {
-            return fail("plugin_release_not_found", `Release manifest in ${context.releaseDir} does not include codex-dbt-agent.`);
+            return fail("plugin_release_not_found", `Release manifest in ${context.releaseDir} does not include codex-embed-labs.`);
         }
         const tarball = resolve(context.releaseDir, item.file);
         const verified = await verifyReleasePackage(tarball, item);
@@ -1479,13 +1745,13 @@ async function resolveCodexPluginSource(context) {
                 details: { exit_code: tarResult.code, stderr_tail: tarResult.stderr.split("\n").slice(-20) }
             });
         }
-        const sourcePath = join(extractDir, "codex_plugin", "plugins", "dbt-agent");
+        const sourcePath = join(extractDir, "codex_plugin", "plugins", "embed-labs");
         if (!await pathExists(join(sourcePath, ".codex-plugin", "plugin.json"))) {
-            return fail("plugin_release_invalid", `Codex plugin release ${tarball} did not contain plugins/dbt-agent/.codex-plugin/plugin.json.`);
+            return fail("plugin_release_invalid", `Codex plugin release ${tarball} did not contain plugins/embed-labs/.codex-plugin/plugin.json.`);
         }
         return ok({ sourcePath, sourceLabel: tarball, version: item.version ?? context.manifest?.version });
     }
-    const sourcePath = sourceCheckoutPath("platform_plugins", "codex_plugin", "plugins", "dbt-agent");
+    const sourcePath = sourceCheckoutPath("platform_plugins", "codex_plugin", "plugins", "embed-labs");
     if (!await pathExists(join(sourcePath, ".codex-plugin", "plugin.json"))) {
         return fail("plugin_source_not_found", "Could not find Codex plugin source in this checkout.", {
             remediation: "Run from the Embed-Labs-Cloud repo root or pass --release-dir pointing to a plugin release directory."
@@ -1495,9 +1761,9 @@ async function resolveCodexPluginSource(context) {
 }
 async function resolveOpenCodePluginSource(context) {
     if (context.releaseDir) {
-        const item = context.manifest?.packages?.find((entry) => entry.id === "opencode-dbt-agent");
+        const item = context.manifest?.packages?.find((entry) => entry.id === "opencode-embed-labs");
         if (!item?.file) {
-            return fail("plugin_release_not_found", `Release manifest in ${context.releaseDir} does not include opencode-dbt-agent.`);
+            return fail("plugin_release_not_found", `Release manifest in ${context.releaseDir} does not include opencode-embed-labs.`);
         }
         const tarball = resolve(context.releaseDir, item.file);
         const verified = await verifyReleasePackage(tarball, item);
@@ -1512,7 +1778,32 @@ async function resolveOpenCodePluginSource(context) {
             remediation: "Run from the Embed-Labs-Cloud repo root or pass --release-dir pointing to a plugin release directory."
         });
     }
-    return ok({ packagePath, sourceLabel: packagePath, version: await localPluginVersion("opencode") });
+    const packed = await runLocalProcess("npm", ["pack", packagePath, "--pack-destination", context.tempDir, "--json"]);
+    if (packed.code !== 0) {
+        return fail("opencode_plugin_pack_failed", "npm pack failed while preparing the OpenCode plugin source package.", {
+            details: {
+                exit_code: packed.code,
+                stdout_tail: packed.stdout.split("\n").slice(-20),
+                stderr_tail: packed.stderr.split("\n").slice(-20)
+            }
+        });
+    }
+    let tarballName = "";
+    try {
+        const parsed = JSON.parse(packed.stdout);
+        tarballName = basename(parsed[0]?.filename || "");
+    }
+    catch {
+        tarballName = "";
+    }
+    if (!tarballName) {
+        return fail("opencode_plugin_pack_failed", "npm pack did not report an OpenCode plugin tarball filename.");
+    }
+    const tarballPath = join(context.tempDir, tarballName);
+    if (!await pathExists(tarballPath)) {
+        return fail("opencode_plugin_pack_failed", `npm pack reported ${tarballName}, but the tarball was not found.`);
+    }
+    return ok({ packagePath: tarballPath, sourceLabel: `${packagePath} -> ${tarballPath}`, version: await localPluginVersion("opencode") });
 }
 async function fetchRemotePluginManifest(parsed) {
     const manifestUrl = `${pluginReleaseBaseUrl(parsed)}/manifest.json`;
@@ -1646,14 +1937,679 @@ function openCodePluginTargetRoot(parsed, installingAll) {
     return resolve(target ?? defaultOpenCodeRoot());
 }
 function defaultCodexPluginRoot() {
-    return join(process.env.CODEX_HOME?.trim() || join(homedir(), ".codex"), "plugins");
+    return join(defaultCodexHome(), "plugins");
+}
+function defaultCodexHome() {
+    return resolve(process.env.CODEX_HOME?.trim() || join(homedir(), ".codex"));
+}
+function codexConfigPath() {
+    return join(defaultCodexHome(), "config.toml");
+}
+async function cleanupLegacyCodexPluginRemnants(targetRoot) {
+    const removedPaths = [];
+    const removedConfigTables = [];
+    const warnings = [];
+    const stoppedProcesses = await stopLegacyCodexPluginProcesses(warnings);
+    const legacyPaths = [
+        join(targetRoot, "dbt-agent"),
+        join(targetRoot, "development-board-toolchain"),
+        join(targetRoot, "cache", "embed-labs", "dbt-agent"),
+        join(targetRoot, "cache", "dbt-agent"),
+        join(targetRoot, "cache", "plugins", "dbt-agent")
+    ];
+    legacyPaths.push(...await discoverLegacyCodexCachePaths(targetRoot));
+    if (resolve(targetRoot) === resolve(defaultCodexPluginRoot())) {
+        legacyPaths.push(join(defaultCodexHome(), ".tmp", "plugins"), join(defaultCodexHome(), ".tmp", "plugins.sha"), join(defaultCodexHome(), "ambient-suggestions"), join(defaultCodexHome(), "skills", "dbt-agent"), join(defaultCodexHome(), "skills", "development-board-toolchain-dev"), join(defaultCodexHome(), "memories", "skills", "dbt-agent-live-board-ops"), join(defaultCodexHome(), "memories", "skills", "dbt-agent-platform-plugin-maintenance"));
+        legacyPaths.push(...await discoverLegacyHomeAgentsMarketplacePaths(warnings), ...legacyDevelopmentBoardRuntimePluginPaths());
+    }
+    for (const candidate of legacyPaths) {
+        try {
+            if (await pathExists(candidate)) {
+                await rm(candidate, { recursive: true, force: true });
+                removedPaths.push(candidate);
+            }
+        }
+        catch (error) {
+            warnings.push(`Could not remove ${candidate}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    if (resolve(targetRoot) === resolve(defaultCodexPluginRoot())) {
+        const configPath = codexConfigPath();
+        try {
+            if (await pathExists(configPath)) {
+                const current = await readFile(configPath, "utf8");
+                const updated = removeLegacyCodexConfigTables(current);
+                if (updated.text !== current) {
+                    await writeFile(configPath, updated.text, "utf8");
+                }
+                removedConfigTables.push(...updated.removedTables);
+            }
+        }
+        catch (error) {
+            warnings.push(`Could not update ${configPath}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    const removedHistoryEntries = await cleanupLegacyCodexTextState(warnings);
+    return {
+        legacy_removed_paths: Array.from(new Set(removedPaths)),
+        legacy_removed_config_tables: removedConfigTables,
+        legacy_removed_history_entries: removedHistoryEntries,
+        legacy_stopped_processes: stoppedProcesses,
+        ...(warnings.length > 0 ? { warnings } : {})
+    };
+}
+async function stopLegacyCodexPluginProcesses(warnings) {
+    if (process.platform === "win32")
+        return 0;
+    try {
+        const ps = await runLocalProcess("ps", ["-axo", "pid=,command="]);
+        if (ps.code !== 0)
+            return 0;
+        let stopped = 0;
+        for (const line of ps.stdout.split("\n")) {
+            const match = /^\s*(\d+)\s+(.+)$/.exec(line);
+            if (!match)
+                continue;
+            const pid = Number(match[1]);
+            const command = match[2] || "";
+            if (!isLegacyCodexPluginProcess(command))
+                continue;
+            try {
+                process.kill(pid, "SIGTERM");
+                stopped += 1;
+            }
+            catch (error) {
+                warnings.push(`Could not stop legacy Codex plugin process ${pid}: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+        return stopped;
+    }
+    catch (error) {
+        warnings.push(`Could not scan legacy Codex plugin processes: ${error instanceof Error ? error.message : String(error)}`);
+        return 0;
+    }
+}
+function isLegacyCodexPluginProcess(command) {
+    const trimmed = command.trim();
+    return /^\/.*\/dbt-agent-mcp-bridge(?:\s|$)/.test(trimmed)
+        || /^dbt-agent-mcp-bridge(?:\s|$)/.test(trimmed)
+        || legacyDevelopmentBoardRuntimeProcessPatterns().some((pattern) => pattern.test(trimmed));
+}
+function legacyDevelopmentBoardRuntimeProcessPatterns() {
+    const home = escapeRegExp(homedir());
+    return [
+        new RegExp(`^${home}/Library/development-board-toolchain/agent/bin/dbt-agentd(?:\\s|$)`),
+        new RegExp(`^${home}/Library/Application Support/development-board-toolchain/agent/bin/dbt-agentd(?:\\s|$)`),
+        new RegExp(`^${home}/Library/development-board-toolchain/runtime/dbtctl\\s+status(?:\\s|$)`),
+        new RegExp(`^${home}/Library/Application Support/development-board-toolchain/runtime/dbtctl\\s+status(?:\\s|$)`),
+        new RegExp(`^${home}/.*?/DBT-Agent\\.app/Contents/MacOS/DBT-Agent(?:\\s|$)`)
+    ];
+}
+function legacyDevelopmentBoardRuntimePluginPaths() {
+    return [
+        join(homedir(), "Library", "development-board-toolchain", "runtime", "editor_plugins"),
+        join(homedir(), "Library", "development-board-toolchain", "runtime", "opencode_plugin"),
+        join(homedir(), "Library", "Application Support", "development-board-toolchain", "runtime", "editor_plugins"),
+        join(homedir(), "Library", "Application Support", "development-board-toolchain", "runtime", "opencode_plugin")
+    ];
+}
+async function discoverLegacyHomeAgentsMarketplacePaths(warnings) {
+    const paths = [];
+    const pluginRoot = join(homedir(), ".agents", "plugins");
+    try {
+        const entries = await readdir(pluginRoot, { withFileTypes: true });
+        for (const entry of entries) {
+            if (!entry.isFile() || !entry.name.startsWith("marketplace.json"))
+                continue;
+            const filePath = join(pluginRoot, entry.name);
+            try {
+                const current = await readFile(filePath, "utf8");
+                if (isLegacyHomeAgentsMarketplace(current)) {
+                    paths.push(filePath);
+                }
+            }
+            catch (error) {
+                warnings.push(`Could not inspect legacy Codex home marketplace ${filePath}: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+    }
+    catch {
+        return paths;
+    }
+    return paths;
+}
+function isLegacyHomeAgentsMarketplace(text) {
+    return text.includes('"name" : "plugins"') || text.includes('"name": "plugins"')
+        ? text.includes('"dbt-agent"') || text.includes('"./.codex/plugins/dbt-agent"') || text.includes('"./plugins/dbt-agent"')
+        : false;
+}
+async function discoverLegacyCodexCachePaths(targetRoot) {
+    const paths = [];
+    const cacheRoot = join(targetRoot, "cache");
+    try {
+        const marketplaces = await readdir(cacheRoot, { withFileTypes: true });
+        for (const entry of marketplaces) {
+            if (!entry.isDirectory())
+                continue;
+            paths.push(join(cacheRoot, entry.name, "dbt-agent"));
+            paths.push(join(cacheRoot, entry.name, "development-board-toolchain"));
+        }
+    }
+    catch {
+        return paths;
+    }
+    return paths;
+}
+async function cleanupLegacyCodexTextState(warnings) {
+    let removed = 0;
+    removed += await cleanupLegacyCodexTextFile(join(defaultCodexHome(), "history.jsonl"), warnings);
+    removed += await cleanupLegacyCodexTextFile(join(defaultCodexHome(), "session_index.jsonl"), warnings);
+    removed += await cleanupLegacyCodexTextFile(join(defaultCodexHome(), "rules", "default.rules"), warnings);
+    return removed;
+}
+async function cleanupLegacyCodexTextFile(filePath, warnings) {
+    try {
+        if (!await pathExists(filePath))
+            return 0;
+        const current = await readFile(filePath, "utf8");
+        const lines = current.split("\n");
+        let removed = 0;
+        const kept = lines.filter((line) => {
+            if (!line)
+                return true;
+            if (isLegacyCodexHistoryMention(line)) {
+                removed += 1;
+                return false;
+            }
+            return true;
+        });
+        if (removed > 0) {
+            await writeFile(filePath, kept.join("\n"), "utf8");
+        }
+        return removed;
+    }
+    catch (error) {
+        warnings.push(`Could not clean Codex legacy text state ${filePath}: ${error instanceof Error ? error.message : String(error)}`);
+        return 0;
+    }
+}
+function isLegacyCodexHistoryMention(line) {
+    return line.includes("plugin://dbt-agent@plugins")
+        || line.includes("plugin://dbt-agent@embed-labs")
+        || line.includes("development-board-toolchain-dev")
+        || line.includes("development-board-toolchain")
+        || /dbt-agent/i.test(line);
+}
+function removeLegacyCodexConfigTables(text) {
+    const lines = text.match(/[^\n]*\n|[^\n]+$/g) ?? [];
+    const output = [];
+    const removedTables = [];
+    let skipping = false;
+    for (const line of lines) {
+        const table = parseTomlTableHeader(line);
+        if (table) {
+            skipping = isLegacyCodexConfigTable(table);
+            if (skipping) {
+                removedTables.push(table);
+                continue;
+            }
+        }
+        if (!skipping) {
+            output.push(line);
+        }
+    }
+    return { text: output.join("").replace(/\n{3,}/g, "\n\n"), removedTables };
+}
+function parseTomlTableHeader(line) {
+    const match = /^\s*\[([^\]]+)\]\s*(?:#.*)?$/.exec(line);
+    return match?.[1]?.trim();
+}
+function isLegacyCodexConfigTable(table) {
+    return /^plugins\."dbt-agent@[^"]+"$/.test(table)
+        || isLegacyEmbedLabsCodexMarketplaceConfigTable(table)
+        || table === "mcp_servers.dbt-agent"
+        || table.startsWith("mcp_servers.dbt-agent.")
+        || table === 'mcp_servers."dbt-agent"'
+        || table.startsWith('mcp_servers."dbt-agent".')
+        || /^projects\."[^"]*\/DBT-Agent-Project(?:\/[^"]*)?"$/.test(table);
+}
+function isLegacyEmbedLabsCodexMarketplaceConfigTable(table) {
+    for (const marketplaceName of LEGACY_CODEX_MARKETPLACE_NAMES) {
+        if (table === `marketplaces.${marketplaceName}`) {
+            return true;
+        }
+        if (table === `plugins."${CODEX_PLUGIN_NAME}@${marketplaceName}"`) {
+            return true;
+        }
+    }
+    return false;
+}
+function legacyCodexCleanupWarning(cleanup) {
+    const parts = [];
+    if (cleanup.legacy_removed_paths.length > 0) {
+        parts.push(`removed ${cleanup.legacy_removed_paths.length} legacy Codex plugin path(s)`);
+    }
+    if (cleanup.legacy_removed_config_tables?.length) {
+        parts.push(`removed ${cleanup.legacy_removed_config_tables.length} legacy Codex config table(s)`);
+    }
+    if (cleanup.legacy_removed_history_entries) {
+        parts.push(`removed ${cleanup.legacy_removed_history_entries} legacy Codex text-state mention(s)`);
+    }
+    if (cleanup.legacy_stopped_processes) {
+        parts.push(`stopped ${cleanup.legacy_stopped_processes} legacy Codex plugin process(es)`);
+    }
+    if (cleanup.warnings?.length) {
+        parts.push(`cleanup warning(s): ${cleanup.warnings.join("; ")}`);
+    }
+    return parts.length > 0 ? `Legacy dbt-agent cleanup: ${parts.join(", ")}.` : undefined;
+}
+async function cleanupLegacyOpenCodePluginRemnants(targetRoot, globalInstall) {
+    const removedPaths = [];
+    const warnings = [];
+    const legacyPaths = [
+        join(targetRoot, "plugins", "development-board-toolchain.js"),
+        join(targetRoot, "plugins", "dbt-agent.js"),
+        join(targetRoot, "node_modules", "dbt-agent")
+    ];
+    if (globalInstall) {
+        legacyPaths.push(join(targetRoot, "plugins", "embed-labs.js"));
+        legacyPaths.push(...await discoverLegacyOpenCodeBackupPaths(targetRoot, warnings));
+    }
+    for (const candidate of legacyPaths) {
+        try {
+            if (await pathExists(candidate)) {
+                await rm(candidate, { recursive: true, force: true });
+                removedPaths.push(candidate);
+            }
+        }
+        catch (error) {
+            warnings.push(`Could not remove ${candidate}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    return {
+        legacy_removed_paths: removedPaths,
+        legacy_removed_config_entries: [],
+        ...(warnings.length > 0 ? { warnings } : {})
+    };
+}
+async function discoverLegacyOpenCodeBackupPaths(targetRoot, warnings) {
+    const paths = [];
+    try {
+        const entries = await readdir(targetRoot, { withFileTypes: true });
+        for (const entry of entries) {
+            if (!entry.isFile() || !entry.name.includes(".bak"))
+                continue;
+            const filePath = join(targetRoot, entry.name);
+            try {
+                const current = await readFile(filePath, "utf8");
+                if (current.includes("dbt-agent") || current.includes("development-board-toolchain")) {
+                    paths.push(filePath);
+                }
+            }
+            catch (error) {
+                warnings.push(`Could not inspect legacy OpenCode backup ${filePath}: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+    }
+    catch {
+        return paths;
+    }
+    return paths;
+}
+function legacyOpenCodeCleanupWarning(cleanup) {
+    const parts = [];
+    if (cleanup.legacy_removed_paths.length > 0) {
+        parts.push(`removed ${cleanup.legacy_removed_paths.length} legacy OpenCode plugin path(s)`);
+    }
+    if (cleanup.legacy_removed_config_entries?.length) {
+        parts.push(`removed ${cleanup.legacy_removed_config_entries.length} legacy OpenCode config entry(s)`);
+    }
+    if (cleanup.warnings?.length) {
+        parts.push(`cleanup warning(s): ${cleanup.warnings.join("; ")}`);
+    }
+    return parts.length > 0 ? `Legacy OpenCode cleanup: ${parts.join(", ")}.` : undefined;
+}
+function combineWarnings(...warnings) {
+    const actual = warnings.filter((warning) => Boolean(warning));
+    return actual.length > 0 ? actual.join(" ") : undefined;
+}
+async function maybeRegisterCodexMcp(parsed, targetRoot, targetPath) {
+    const explicitTarget = Boolean(stringFlag(parsed, "target") || stringFlag(parsed, "codex-target"));
+    if (explicitTarget && process.env.EMBED_CODEX_MCP_REGISTER !== "1") {
+        return {
+            registered: false,
+            hint: `Installed into a custom target. Register manually with: codex mcp add embed-labs -- node ${join(targetPath, "scripts", "embed-labs-mcp-bridge.mjs")}`
+        };
+    }
+    const bridgePath = join(targetPath, "scripts", "embed-labs-mcp-bridge.mjs");
+    if (!await pathExists(bridgePath)) {
+        return {
+            registered: false,
+            hint: "Restart Codex or reload plugins after installing.",
+            warning: `Codex MCP bridge was not found at ${bridgePath}.`
+        };
+    }
+    const codexBin = await resolveExecutableOnPath("codex");
+    if (!codexBin) {
+        return {
+            registered: false,
+            hint: `Codex CLI was not found on PATH. Register manually with: codex mcp add embed-labs -- node ${bridgePath}`
+        };
+    }
+    const embedCliBin = process.env.EMBED_CLI_BIN?.trim() || await resolveExecutableOnPath("embedlabs") || await resolveExecutableOnPath("embed") || "";
+    const authFile = resolve(process.env.EMBED_AUTH_FILE?.trim() || DEFAULT_AUTH_FILE);
+    const cloudUrl = pluginMcpCloudApiUrl(parsed);
+    const existing = await runLocalProcess(codexBin, ["mcp", "get", "embed-labs", "--json"]);
+    if (existing.code === 0 && codexMcpAlreadyRegistered(existing.stdout, bridgePath, cloudUrl, authFile, embedCliBin)) {
+        const warning = await upsertCodexMcpRuntimeConfig(bridgePath);
+        if (warning) {
+            return { registered: true, warning };
+        }
+        return { registered: true };
+    }
+    await runLocalProcess(codexBin, ["mcp", "remove", "embed-labs"]);
+    const args = [
+        "mcp",
+        "add",
+        "embed-labs",
+        "--env",
+        `EMBED_CLOUD_API_URL=${cloudUrl}`,
+        "--env",
+        `EMBED_AUTH_FILE=${authFile}`
+    ];
+    if (embedCliBin) {
+        args.push("--env", `EMBED_CLI_BIN=${embedCliBin}`);
+    }
+    args.push("--", process.execPath, bridgePath);
+    const addResult = await runLocalProcess(codexBin, args);
+    if (addResult.code !== 0) {
+        return {
+            registered: false,
+            hint: `Codex plugin installed. Register manually with: codex mcp add embed-labs -- ${process.execPath} ${bridgePath}`,
+            warning: `codex mcp add failed: ${addResult.stderr.trim() || addResult.stdout.trim() || `exit ${addResult.code}`}`
+        };
+    }
+    const warning = await upsertCodexMcpRuntimeConfig(bridgePath);
+    return warning ? { registered: true, warning } : { registered: true };
+}
+async function maybeRegisterCodexMarketplace(parsed, targetRoot, targetPath) {
+    const explicitTarget = Boolean(stringFlag(parsed, "target") || stringFlag(parsed, "codex-target"));
+    if (explicitTarget && process.env.EMBED_CODEX_MARKETPLACE_REGISTER !== "1") {
+        return {
+            registered: false,
+            warning: "Codex plugin marketplace entry was not registered because a custom target was used. Set EMBED_CODEX_MARKETPLACE_REGISTER=1 to register it anyway."
+        };
+    }
+    if (resolve(targetRoot) !== resolve(defaultCodexPluginRoot()) && process.env.EMBED_CODEX_MARKETPLACE_REGISTER !== "1") {
+        return {
+            registered: false,
+            warning: "Codex plugin marketplace entry was not registered because the install target is not the default Codex plugin root."
+        };
+    }
+    const marketplacePath = defaultCodexLocalMarketplaceRoot();
+    const marketplacePluginPath = join(marketplacePath, "plugins", CODEX_PLUGIN_NAME);
+    try {
+        if (!await pathExists(join(targetPath, ".codex-plugin", "plugin.json"))) {
+            return {
+                registered: false,
+                warning: `Codex plugin manifest was not found at ${join(targetPath, ".codex-plugin", "plugin.json")}.`
+            };
+        }
+        await rm(marketplacePluginPath, { recursive: true, force: true });
+        await mkdir(dirname(marketplacePluginPath), { recursive: true });
+        await cp(targetPath, marketplacePluginPath, { recursive: true });
+        await writeCodexLocalMarketplaceManifest(marketplacePath);
+        const warning = await upsertCodexPluginMarketplaceConfig(marketplacePath);
+        return warning ? { registered: true, marketplacePath, warning } : { registered: true, marketplacePath };
+    }
+    catch (error) {
+        return {
+            registered: false,
+            marketplacePath,
+            warning: `Could not register Codex plugin marketplace entry: ${error instanceof Error ? error.message : String(error)}`
+        };
+    }
+}
+function defaultCodexLocalMarketplaceRoot() {
+    return join(defaultCodexHome(), "local-marketplaces", CODEX_PLUGIN_NAME);
+}
+async function writeCodexLocalMarketplaceManifest(marketplacePath) {
+    const manifestPath = join(marketplacePath, ".agents", "plugins", "marketplace.json");
+    const manifest = {
+        name: CODEX_MARKETPLACE_NAME,
+        interface: {
+            displayName: "Embed Labs"
+        },
+        plugins: [
+            {
+                name: CODEX_PLUGIN_NAME,
+                source: {
+                    source: "local",
+                    path: `./plugins/${CODEX_PLUGIN_NAME}`
+                },
+                policy: {
+                    installation: "AVAILABLE",
+                    authentication: "ON_USE"
+                },
+                category: "Developer Tools"
+            }
+        ]
+    };
+    await mkdir(dirname(manifestPath), { recursive: true });
+    await writeFile(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`, "utf8");
+}
+async function upsertCodexPluginMarketplaceConfig(marketplacePath) {
+    const configPath = codexConfigPath();
+    try {
+        await mkdir(dirname(configPath), { recursive: true });
+        let text = "";
+        try {
+            text = await readFile(configPath, "utf8");
+        }
+        catch {
+            text = "";
+        }
+        const original = text;
+        const cleaned = removeLegacyCodexConfigTables(text).text;
+        let updated = upsertTomlTableKeys(cleaned, `marketplaces.${CODEX_MARKETPLACE_NAME}`, {
+            source_type: tomlString("local"),
+            source: tomlString(marketplacePath),
+            last_updated: tomlString(new Date().toISOString().replace(/\.\d{3}Z$/, "Z"))
+        });
+        updated = upsertTomlTableKeys(updated, `plugins."${CODEX_PLUGIN_NAME}@${CODEX_MARKETPLACE_NAME}"`, {
+            enabled: "true"
+        });
+        if (updated !== original) {
+            await writeFile(configPath, updated, "utf8");
+        }
+        return undefined;
+    }
+    catch (error) {
+        return `${configPath} could not be updated with the Embed Labs plugin marketplace entry: ${error instanceof Error ? error.message : String(error)}`;
+    }
+}
+function codexMcpAlreadyRegistered(stdout, bridgePath, cloudUrl, authFile, embedCliBin) {
+    try {
+        const parsed = JSON.parse(stdout);
+        const transport = parsed.transport;
+        if (transport?.type !== "stdio" || transport.command !== process.execPath)
+            return false;
+        if (!transport.args?.includes(bridgePath))
+            return false;
+        const env = transport.env || {};
+        if (env.EMBED_CLOUD_API_URL !== cloudUrl)
+            return false;
+        if (env.EMBED_AUTH_FILE !== authFile)
+            return false;
+        if (embedCliBin && env.EMBED_CLI_BIN !== embedCliBin)
+            return false;
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function upsertCodexMcpRuntimeConfig(bridgePath) {
+    const configPath = join(process.env.CODEX_HOME?.trim() || join(homedir(), ".codex"), "config.toml");
+    try {
+        await mkdir(dirname(configPath), { recursive: true });
+        let text = "";
+        try {
+            text = await readFile(configPath, "utf8");
+        }
+        catch {
+            text = "";
+        }
+        const updated = upsertTomlTableKeys(text, "mcp_servers.embed-labs", {
+            command: tomlString(process.execPath),
+            args: `[${tomlString(bridgePath)}]`,
+            startup_timeout_sec: "120"
+        });
+        if (updated !== text) {
+            await writeFile(configPath, updated, "utf8");
+        }
+        return undefined;
+    }
+    catch (error) {
+        return `Codex MCP was registered, but ${configPath} could not be updated with startup_timeout_sec: ${error instanceof Error ? error.message : String(error)}`;
+    }
+}
+function upsertTomlTableKeys(text, tableName, values) {
+    const normalized = text.endsWith("\n") || text.length === 0 ? text : `${text}\n`;
+    const header = `[${tableName}]`;
+    const tablePattern = new RegExp(`(^|\\n)(\\[${escapeRegExp(tableName)}\\]\\n)([\\s\\S]*?)(?=\\n\\[|$)`);
+    const match = tablePattern.exec(normalized);
+    const bodyWithValues = (body) => {
+        let updated = body;
+        for (const [key, value] of Object.entries(values)) {
+            const keyPattern = new RegExp(`^${escapeRegExp(key)}\\s*=.*$`, "m");
+            if (keyPattern.test(updated)) {
+                updated = updated.replace(keyPattern, `${key} = ${value}`);
+            }
+            else {
+                updated = `${updated.replace(/\s*$/, "\n")}${key} = ${value}\n`;
+            }
+        }
+        return updated;
+    };
+    if (!match) {
+        const prefix = normalized.length > 0 && !normalized.endsWith("\n\n") ? `${normalized}\n` : normalized;
+        return `${prefix}${header}\n${bodyWithValues("")}`;
+    }
+    return `${normalized.slice(0, match.index)}${match[1]}${match[2]}${bodyWithValues(match[3])}${normalized.slice(match.index + match[0].length)}`;
+}
+function tomlString(value) {
+    return JSON.stringify(value);
+}
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function pluginMcpCloudApiUrl(parsed) {
+    const explicit = process.env.EMBED_CLOUD_API_URL?.trim();
+    if (explicit)
+        return explicit.replace(/\/+$/, "");
+    const releaseUrl = stringFlag(parsed, "release-url") || DEFAULT_PLUGIN_RELEASE_URL;
+    try {
+        return new URL(releaseUrl).origin;
+    }
+    catch {
+        return DEFAULT_CLOUD_API_URL.replace(/\/+$/, "");
+    }
+}
+async function resolveExecutableOnPath(name) {
+    if (name.includes("/")) {
+        try {
+            await access(name, constants.X_OK);
+            return name;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    const pathEntries = (process.env.PATH || "").split(delimiter).filter(Boolean);
+    for (const entry of pathEntries) {
+        const candidate = join(entry, name);
+        try {
+            await access(candidate, constants.X_OK);
+            return candidate;
+        }
+        catch {
+            // Keep searching PATH.
+        }
+    }
+    return undefined;
 }
 function defaultOpenCodeRoot() {
-    return join(process.cwd(), ".opencode");
+    return globalOpenCodeRoot();
+}
+function globalOpenCodeRoot() {
+    return join(homedir(), ".config", "opencode");
+}
+function isGlobalOpenCodeRoot(targetRoot) {
+    return resolve(targetRoot) === resolve(globalOpenCodeRoot());
+}
+async function ensureOpenCodeGlobalPluginConfig() {
+    const configPath = join(globalOpenCodeRoot(), "opencode.json");
+    let existing = {};
+    try {
+        const parsed = JSON.parse(await readFile(configPath, "utf8"));
+        if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+            existing = parsed;
+        }
+    }
+    catch {
+        existing = {};
+    }
+    const configured = Array.isArray(existing.plugin)
+        ? existing.plugin.filter((item) => typeof item === "string")
+        : Array.isArray(existing.plugins)
+            ? existing.plugins.filter((item) => typeof item === "string")
+            : [];
+    const removed = configured.filter(isLegacyOpenCodePluginConfigEntry);
+    const cleaned = configured.filter((item) => !isLegacyOpenCodePluginConfigEntry(item));
+    if (!cleaned.includes("embed-labs")) {
+        cleaned.push("embed-labs");
+    }
+    await writeFile(configPath, `${JSON.stringify({
+        ...existing,
+        plugin: cleaned,
+        plugins: undefined
+    }, null, 2)}\n`, "utf8");
+    return removed;
+}
+function isLegacyOpenCodePluginConfigEntry(item) {
+    const normalized = item.replace(/\\/g, "/");
+    return item === "dbt-agent"
+        || item === "development-board-toolchain"
+        || normalized === "./plugins/development-board-toolchain"
+        || normalized === "./plugins/development-board-toolchain.js"
+        || normalized.endsWith("/plugins/development-board-toolchain.js")
+        || normalized.includes("development-board-toolchain");
+}
+async function openCodeDuplicatePluginWarning(targetRoot) {
+    const globalRoot = globalOpenCodeRoot();
+    if (resolve(targetRoot) === resolve(globalRoot))
+        return undefined;
+    const configPath = join(globalRoot, "opencode.json");
+    try {
+        const parsed = JSON.parse(await readFile(configPath, "utf8"));
+        const configuredPlugins = Array.isArray(parsed.plugin)
+            ? parsed.plugin
+            : Array.isArray(parsed.plugins)
+                ? parsed.plugins
+                : [];
+        if (configuredPlugins.some((item) => item === "embed-labs")) {
+            return "Global OpenCode config already enables embed-labs; OpenCode may load both the global plugin and this project .opencode plugin. Disable one entry if duplicate DBT tools appear.";
+        }
+    }
+    catch {
+        return undefined;
+    }
+    return undefined;
 }
 async function localPluginVersion(kind) {
     const filePath = kind === "codex"
-        ? sourceCheckoutPath("platform_plugins", "codex_plugin", "plugins", "dbt-agent", ".codex-plugin", "plugin.json")
+        ? sourceCheckoutPath("platform_plugins", "codex_plugin", "plugins", "embed-labs", ".codex-plugin", "plugin.json")
         : sourceCheckoutPath("platform_plugins", "opencode_plugin", "package.json");
     try {
         const parsed = JSON.parse(await readFile(filePath, "utf8"));
@@ -1664,7 +2620,7 @@ async function localPluginVersion(kind) {
     }
 }
 async function localPluginSourcesAvailable() {
-    return await pathExists(sourceCheckoutPath("platform_plugins", "codex_plugin", "plugins", "dbt-agent", ".codex-plugin", "plugin.json"))
+    return await pathExists(sourceCheckoutPath("platform_plugins", "codex_plugin", "plugins", "embed-labs", ".codex-plugin", "plugin.json"))
         && await pathExists(sourceCheckoutPath("platform_plugins", "opencode_plugin", "package.json"));
 }
 function sourceCheckoutPath(...segments) {
@@ -2104,6 +3060,36 @@ function agentRunToolInputs(parsed) {
             ports: ports.values.length > 0 ? ports.values : [22, 15301],
             timeout_ms: timeout.value !== undefined ? timeout.value * 1000 : undefined
         });
+        inputs["wifi.scan"] = compactBody({
+            host: host.value,
+            user: user.value,
+            timeout_seconds: timeout.value
+        });
+        inputs["bluetooth.scan"] = compactBody({
+            host: host.value,
+            user: user.value,
+            timeout_seconds: timeout.value
+        });
+        inputs["chip.cpu.frequency"] = compactBody({
+            host: host.value,
+            user: user.value,
+            timeout_seconds: timeout.value
+        });
+        inputs["chip.temperature"] = compactBody({
+            host: host.value,
+            user: user.value,
+            timeout_seconds: timeout.value
+        });
+        inputs["qml.runtime.status"] = compactBody({
+            host: host.value,
+            user: user.value,
+            timeout_seconds: timeout.value
+        });
+        inputs["qml.runtime.start"] = compactBody({
+            host: host.value,
+            user: user.value,
+            timeout_seconds: timeout.value
+        });
     }
     if (artifact.value || remotePath.value || user.value || booleanFlag(parsed, "run")) {
         inputs["taishanpi.deploy"] = compactBody({
@@ -2711,78 +3697,303 @@ function buildApplicationCompileBody(parsed) {
         compiler: compiler.value
     });
 }
-function buildImageGenerateBody(parsed) {
+function buildImageGenerateBody(parsed) {
+    const unknownFlag = firstUnknownFlag(parsed, [
+        "json",
+        "workspace",
+        "workspace-id",
+        "account",
+        "prompt",
+        "image-profile",
+        "image-profile-id",
+        "provider",
+        "model",
+        "execution-mode",
+        "worker-pool"
+    ]);
+    if (unknownFlag) {
+        return `Unknown flag --${unknownFlag}. ${BUILD_IMAGE_GENERATE_USAGE}`;
+    }
+    const extra = parsed.command.slice(3);
+    if (extra.length > 0) {
+        return `Unexpected argument: ${extra[0]}. ${BUILD_IMAGE_GENERATE_USAGE}`;
+    }
+    const workspace = optionalTrimmedStringAliasFlag(parsed, ["workspace", "workspace-id"], "workspace or workspace-id");
+    if (workspace.error) {
+        return workspace.error;
+    }
+    if (!workspace.value) {
+        return BUILD_IMAGE_GENERATE_USAGE;
+    }
+    const prompt = optionalTrimmedStringFlag(parsed, "prompt");
+    if (prompt.error) {
+        return prompt.error;
+    }
+    if (!prompt.value) {
+        return BUILD_IMAGE_GENERATE_USAGE;
+    }
+    const account = optionalTrimmedStringFlag(parsed, "account");
+    if (account.error) {
+        return account.error;
+    }
+    const imageProfile = optionalTrimmedStringAliasFlag(parsed, ["image-profile", "image-profile-id"], "image-profile or image-profile-id");
+    if (imageProfile.error) {
+        return imageProfile.error;
+    }
+    const provider = optionalTrimmedStringFlag(parsed, "provider");
+    if (provider.error) {
+        return provider.error;
+    }
+    const model = optionalTrimmedStringFlag(parsed, "model");
+    if (model.error) {
+        return model.error;
+    }
+    const executionMode = optionalTrimmedStringFlag(parsed, "execution-mode");
+    if (executionMode.error) {
+        return executionMode.error;
+    }
+    if (executionMode.value && !["cloud_worker", "dry_run"].includes(executionMode.value)) {
+        return "--execution-mode must be cloud_worker or dry_run.";
+    }
+    const workerPool = optionalTrimmedStringFlag(parsed, "worker-pool");
+    if (workerPool.error) {
+        return workerPool.error;
+    }
+    return compactBody({
+        workspace_id: workspace.value,
+        account_id: account.value,
+        prompt: prompt.value,
+        image_profile_id: imageProfile.value,
+        provider: provider.value,
+        model: model.value,
+        execution_mode: executionMode.value,
+        worker_pool: workerPool.value
+    });
+}
+async function buildImageBootLogoPackageRequest(parsed) {
+    const unknownFlag = firstUnknownFlag(parsed, [
+        "json",
+        "account",
+        "project",
+        "project-id",
+        "board",
+        "board-id",
+        "variant",
+        "variant-id",
+        "logo",
+        "logo-path",
+        "kernel-logo",
+        "kernel-logo-path",
+        "rotate",
+        "scale",
+        "output"
+    ]);
+    if (unknownFlag) {
+        return `Unknown flag --${unknownFlag}. ${BUILD_IMAGE_BOOT_LOGO_USAGE}`;
+    }
+    const extra = parsed.command.slice(3);
+    if (extra.length > 0) {
+        return `Unexpected argument: ${extra[0]}. ${BUILD_IMAGE_BOOT_LOGO_USAGE}`;
+    }
+    const logo = optionalTrimmedStringAliasFlag(parsed, ["logo", "logo-path"], "logo or logo-path");
+    if (logo.error) {
+        return logo.error;
+    }
+    if (!logo.value) {
+        return BUILD_IMAGE_BOOT_LOGO_USAGE;
+    }
+    const logoPath = resolve(logo.value);
+    const logoRead = await readLocalFileForUpload(logoPath, "logo");
+    if (typeof logoRead === "string") {
+        return logoRead;
+    }
+    const kernelLogo = optionalTrimmedStringAliasFlag(parsed, ["kernel-logo", "kernel-logo-path"], "kernel-logo or kernel-logo-path");
+    if (kernelLogo.error) {
+        return kernelLogo.error;
+    }
+    let kernelLogoRead;
+    if (kernelLogo.value) {
+        const kernelLogoPath = resolve(kernelLogo.value);
+        const read = await readLocalFileForUpload(kernelLogoPath, "kernel-logo");
+        if (typeof read === "string") {
+            return read;
+        }
+        kernelLogoRead = read;
+    }
+    const account = optionalTrimmedStringFlag(parsed, "account");
+    if (account.error) {
+        return account.error;
+    }
+    const project = optionalTrimmedStringAliasFlag(parsed, ["project", "project-id"], "project or project-id");
+    if (project.error) {
+        return project.error;
+    }
+    const board = optionalTrimmedStringAliasFlag(parsed, ["board", "board-id"], "board or board-id");
+    if (board.error) {
+        return board.error;
+    }
+    const variant = optionalTrimmedStringAliasFlag(parsed, ["variant", "variant-id"], "variant or variant-id");
+    if (variant.error) {
+        return variant.error;
+    }
+    const rotate = optionalTrimmedStringFlag(parsed, "rotate");
+    if (rotate.error) {
+        return rotate.error;
+    }
+    const scale = optionalTrimmedStringFlag(parsed, "scale");
+    if (scale.error) {
+        return scale.error;
+    }
+    const outputPath = optionalTrimmedStringFlag(parsed, "output");
+    if (outputPath.error) {
+        return outputPath.error;
+    }
+    const body = {
+        account_id: account.value,
+        project_id: project.value,
+        board_id: board.value ?? "taishanpi",
+        variant_id: variant.value,
+        logo_name: basename(logoRead.path),
+        logo_content_base64: logoRead.bytes.toString("base64"),
+        logo_sha256: logoRead.sha256,
+        kernel_logo_name: kernelLogoRead ? basename(kernelLogoRead.path) : undefined,
+        kernel_logo_content_base64: kernelLogoRead?.bytes.toString("base64"),
+        kernel_logo_sha256: kernelLogoRead?.sha256,
+        rotate: rotate.value,
+        scale: scale.value
+    };
+    return {
+        body,
+        output_path: outputPath.value ? resolve(outputPath.value) : undefined
+    };
+}
+async function buildImageDtbPackageRequest(parsed) {
     const unknownFlag = firstUnknownFlag(parsed, [
         "json",
-        "workspace",
-        "workspace-id",
         "account",
-        "prompt",
-        "image-profile",
-        "image-profile-id",
-        "provider",
-        "model",
-        "execution-mode",
-        "worker-pool"
+        "project",
+        "project-id",
+        "board",
+        "board-id",
+        "variant",
+        "variant-id",
+        "dtb",
+        "dtb-path",
+        "dts",
+        "dts-path",
+        "input-format",
+        "output"
     ]);
     if (unknownFlag) {
-        return `Unknown flag --${unknownFlag}. ${BUILD_IMAGE_GENERATE_USAGE}`;
+        return `Unknown flag --${unknownFlag}. ${BUILD_IMAGE_DTB_USAGE}`;
     }
     const extra = parsed.command.slice(3);
     if (extra.length > 0) {
-        return `Unexpected argument: ${extra[0]}. ${BUILD_IMAGE_GENERATE_USAGE}`;
-    }
-    const workspace = optionalTrimmedStringAliasFlag(parsed, ["workspace", "workspace-id"], "workspace or workspace-id");
-    if (workspace.error) {
-        return workspace.error;
+        return `Unexpected argument: ${extra[0]}. ${BUILD_IMAGE_DTB_USAGE}`;
     }
-    if (!workspace.value) {
-        return BUILD_IMAGE_GENERATE_USAGE;
+    const dtb = optionalTrimmedStringAliasFlag(parsed, ["dtb", "dtb-path", "dts", "dts-path"], "dtb or dts path");
+    if (dtb.error) {
+        return dtb.error;
     }
-    const prompt = optionalTrimmedStringFlag(parsed, "prompt");
-    if (prompt.error) {
-        return prompt.error;
+    if (!dtb.value) {
+        return BUILD_IMAGE_DTB_USAGE;
     }
-    if (!prompt.value) {
-        return BUILD_IMAGE_GENERATE_USAGE;
+    const dtbPath = resolve(dtb.value);
+    const dtbRead = await readLocalFileForUpload(dtbPath, "dtb");
+    if (typeof dtbRead === "string") {
+        return dtbRead;
     }
     const account = optionalTrimmedStringFlag(parsed, "account");
     if (account.error) {
         return account.error;
     }
-    const imageProfile = optionalTrimmedStringAliasFlag(parsed, ["image-profile", "image-profile-id"], "image-profile or image-profile-id");
-    if (imageProfile.error) {
-        return imageProfile.error;
-    }
-    const provider = optionalTrimmedStringFlag(parsed, "provider");
-    if (provider.error) {
-        return provider.error;
+    const project = optionalTrimmedStringAliasFlag(parsed, ["project", "project-id"], "project or project-id");
+    if (project.error) {
+        return project.error;
     }
-    const model = optionalTrimmedStringFlag(parsed, "model");
-    if (model.error) {
-        return model.error;
+    const board = optionalTrimmedStringAliasFlag(parsed, ["board", "board-id"], "board or board-id");
+    if (board.error) {
+        return board.error;
     }
-    const executionMode = optionalTrimmedStringFlag(parsed, "execution-mode");
-    if (executionMode.error) {
-        return executionMode.error;
+    const variant = optionalTrimmedStringAliasFlag(parsed, ["variant", "variant-id"], "variant or variant-id");
+    if (variant.error) {
+        return variant.error;
     }
-    if (executionMode.value && !["cloud_worker", "dry_run"].includes(executionMode.value)) {
-        return "--execution-mode must be cloud_worker or dry_run.";
+    const inputFormat = optionalTrimmedStringFlag(parsed, "input-format");
+    if (inputFormat.error) {
+        return inputFormat.error;
     }
-    const workerPool = optionalTrimmedStringFlag(parsed, "worker-pool");
-    if (workerPool.error) {
-        return workerPool.error;
+    const outputPath = optionalTrimmedStringFlag(parsed, "output");
+    if (outputPath.error) {
+        return outputPath.error;
     }
-    return compactBody({
-        workspace_id: workspace.value,
+    const body = {
         account_id: account.value,
-        prompt: prompt.value,
-        image_profile_id: imageProfile.value,
-        provider: provider.value,
-        model: model.value,
-        execution_mode: executionMode.value,
-        worker_pool: workerPool.value
-    });
+        project_id: project.value,
+        board_id: board.value ?? "taishanpi",
+        variant_id: variant.value,
+        dtb_name: basename(dtbRead.path),
+        dtb_content_base64: dtbRead.bytes.toString("base64"),
+        dtb_sha256: dtbRead.sha256,
+        input_format: inputFormat.value
+    };
+    return {
+        body,
+        output_path: outputPath.value ? resolve(outputPath.value) : undefined
+    };
+}
+function imageBootLogoComposeRequest(parsed, usage) {
+    const unknownFlag = firstUnknownFlag(parsed, [
+        "json",
+        "package",
+        "package-path",
+        "base-image",
+        "base-image-path",
+        "output",
+        "output-image",
+        "manifest",
+        "manifest-path",
+        "force"
+    ]);
+    if (unknownFlag) {
+        return `Unknown flag --${unknownFlag}. ${usage}`;
+    }
+    const extra = parsed.command.slice(3);
+    if (extra.length > 0) {
+        return `Unexpected argument: ${extra[0]}. ${usage}`;
+    }
+    const packagePath = optionalTrimmedStringAliasFlag(parsed, ["package", "package-path"], "package or package-path");
+    if (packagePath.error) {
+        return packagePath.error;
+    }
+    if (!packagePath.value) {
+        return usage;
+    }
+    const baseImage = optionalTrimmedStringAliasFlag(parsed, ["base-image", "base-image-path"], "base-image or base-image-path");
+    if (baseImage.error) {
+        return baseImage.error;
+    }
+    if (!baseImage.value) {
+        return usage;
+    }
+    const outputImage = optionalTrimmedStringAliasFlag(parsed, ["output", "output-image"], "output or output-image");
+    if (outputImage.error) {
+        return outputImage.error;
+    }
+    if (!outputImage.value) {
+        return usage;
+    }
+    const manifest = optionalTrimmedStringAliasFlag(parsed, ["manifest", "manifest-path"], "manifest or manifest-path");
+    if (manifest.error) {
+        return manifest.error;
+    }
+    return {
+        packagePath: resolve(packagePath.value),
+        baseImagePath: resolve(baseImage.value),
+        outputImagePath: resolve(outputImage.value),
+        manifestPath: manifest.value ? resolve(manifest.value) : undefined,
+        force: booleanFlag(parsed, "force")
+    };
 }
 function boardKnowledgeFileRequest(parsed) {
     const unknownFlag = firstUnknownFlag(parsed, ["json", "source", "path", "output"]);
@@ -3116,6 +4327,73 @@ function usageRecordBody(parsed) {
         created_at: createdAtResult.value
     });
 }
+function mcpToolEventBody(parsed) {
+    const unknownFlag = firstUnknownFlag(parsed, [
+        "json",
+        "account",
+        "account-id",
+        "tool",
+        "client",
+        "mode",
+        "server-model-used",
+        "success",
+        "request-id",
+        "duration-ms",
+        "input-summary",
+        "output-summary"
+    ]);
+    if (unknownFlag) {
+        return `Unknown flag --${unknownFlag}. ${MCP_TOOL_EVENT_USAGE}`;
+    }
+    const extra = parsed.command.slice(2);
+    if (extra.length > 0) {
+        return `Unexpected argument: ${extra[0]}. ${MCP_TOOL_EVENT_USAGE}`;
+    }
+    const toolResult = optionalTrimmedStringFlag(parsed, "tool");
+    if (toolResult.error)
+        return toolResult.error;
+    if (!toolResult.value)
+        return MCP_TOOL_EVENT_USAGE;
+    const accountResult = optionalTrimmedStringAliasFlag(parsed, ["account", "account-id"], "account or account-id");
+    if (accountResult.error)
+        return accountResult.error;
+    const clientResult = optionalTrimmedStringFlag(parsed, "client");
+    if (clientResult.error)
+        return clientResult.error;
+    const modeResult = optionalTrimmedStringFlag(parsed, "mode");
+    if (modeResult.error)
+        return modeResult.error;
+    const requestIdResult = optionalTrimmedStringFlag(parsed, "request-id");
+    if (requestIdResult.error)
+        return requestIdResult.error;
+    const inputSummaryResult = optionalTrimmedStringFlag(parsed, "input-summary");
+    if (inputSummaryResult.error)
+        return inputSummaryResult.error;
+    const outputSummaryResult = optionalTrimmedStringFlag(parsed, "output-summary");
+    if (outputSummaryResult.error)
+        return outputSummaryResult.error;
+    const durationResult = optionalNonNegativeIntegerFlag(parsed, "duration-ms");
+    if (durationResult.error)
+        return durationResult.error;
+    const serverModelUsed = optionalBooleanFlag(parsed, "server-model-used");
+    if (typeof serverModelUsed === "string")
+        return serverModelUsed;
+    const success = optionalBooleanFlag(parsed, "success");
+    if (typeof success === "string")
+        return success;
+    return compactBody({
+        account_id: accountResult.value,
+        tool_name: toolResult.value,
+        client: clientResult.value,
+        mode: modeResult.value,
+        server_model_used: serverModelUsed,
+        success,
+        request_id: requestIdResult.value,
+        duration_ms: durationResult.value,
+        input_summary: inputSummaryResult.value,
+        output_summary: outputSummaryResult.value
+    });
+}
 function usageSummaryRequest(parsed) {
     const unknownFlag = firstUnknownFlag(parsed, ["json", "account", "account-id", "api-key-id", "from", "to"]);
     if (unknownFlag) {
@@ -3451,6 +4729,189 @@ function billingSnapshotListRequest(parsed) {
     }
     return { path: `/v1/accounts/${encodeURIComponent(accountResult.value)}/billing/snapshots` };
 }
+function localToolchainLatestRequest(parsed) {
+    const unknownFlag = firstUnknownFlag(parsed, ["json", "board", "board-id", "channel", "metadata-root"]);
+    if (unknownFlag) {
+        return `Unknown flag --${unknownFlag}. ${LOCAL_TOOLCHAIN_LATEST_USAGE}`;
+    }
+    const extra = parsed.command.slice(3);
+    if (extra.length > 0) {
+        return `Unexpected argument: ${extra[0]}. ${LOCAL_TOOLCHAIN_LATEST_USAGE}`;
+    }
+    const board = optionalTrimmedStringAliasFlag(parsed, ["board", "board-id"], "board or board-id");
+    if (board.error)
+        return board.error;
+    const channel = optionalTrimmedStringFlag(parsed, "channel");
+    if (channel.error)
+        return channel.error;
+    const metadataRoot = optionalTrimmedStringFlag(parsed, "metadata-root");
+    if (metadataRoot.error)
+        return metadataRoot.error;
+    return { boardId: board.value, channel: channel.value, metadataRoot: metadataRoot.value };
+}
+function localToolchainCurrentRequest(parsed) {
+    const unknownFlag = firstUnknownFlag(parsed, ["json", "install-root"]);
+    if (unknownFlag) {
+        return `Unknown flag --${unknownFlag}. ${LOCAL_TOOLCHAIN_CURRENT_USAGE}`;
+    }
+    const extra = parsed.command.slice(3);
+    if (extra.length > 0) {
+        return `Unexpected argument: ${extra[0]}. ${LOCAL_TOOLCHAIN_CURRENT_USAGE}`;
+    }
+    const installRoot = optionalTrimmedStringFlag(parsed, "install-root");
+    if (installRoot.error)
+        return installRoot.error;
+    return { installRoot: installRoot.value };
+}
+function localToolchainInstallRequest(parsed) {
+    const unknownFlag = firstUnknownFlag(parsed, ["json", "board", "board-id", "channel", "metadata-root", "source-url", "source-release-root", "install-root", "mode", "force"]);
+    if (unknownFlag) {
+        return `Unknown flag --${unknownFlag}. ${LOCAL_TOOLCHAIN_INSTALL_USAGE}`;
+    }
+    const extra = parsed.command.slice(3);
+    if (extra.length > 0) {
+        return `Unexpected argument: ${extra[0]}. ${LOCAL_TOOLCHAIN_INSTALL_USAGE}`;
+    }
+    const board = optionalTrimmedStringAliasFlag(parsed, ["board", "board-id"], "board or board-id");
+    if (board.error)
+        return board.error;
+    const channel = optionalTrimmedStringFlag(parsed, "channel");
+    if (channel.error)
+        return channel.error;
+    const metadataRoot = optionalTrimmedStringFlag(parsed, "metadata-root");
+    if (metadataRoot.error)
+        return metadataRoot.error;
+    const sourceUrl = optionalTrimmedStringFlag(parsed, "source-url");
+    if (sourceUrl.error)
+        return sourceUrl.error;
+    const sourceReleaseRoot = optionalTrimmedStringFlag(parsed, "source-release-root");
+    if (sourceReleaseRoot.error)
+        return sourceReleaseRoot.error;
+    if (sourceUrl.value && sourceReleaseRoot.value) {
+        return "Use only one of --source-url or --source-release-root.";
+    }
+    const installRoot = optionalTrimmedStringFlag(parsed, "install-root");
+    if (installRoot.error)
+        return installRoot.error;
+    const mode = optionalTrimmedStringFlag(parsed, "mode");
+    if (mode.error)
+        return mode.error;
+    return {
+        boardId: board.value,
+        channel: channel.value,
+        metadataRoot: metadataRoot.value,
+        sourceUrl: sourceUrl.value,
+        sourceReleaseRoot: sourceReleaseRoot.value,
+        installRoot: installRoot.value,
+        mode: mode.value,
+        force: booleanFlag(parsed, "force")
+    };
+}
+function localToolchainValidateRequest(parsed) {
+    const unknownFlag = firstUnknownFlag(parsed, ["json", "release-root", "mode"]);
+    if (unknownFlag) {
+        return `Unknown flag --${unknownFlag}. ${LOCAL_TOOLCHAIN_VALIDATE_USAGE}`;
+    }
+    const extra = parsed.command.slice(3);
+    if (extra.length > 0) {
+        return `Unexpected argument: ${extra[0]}. ${LOCAL_TOOLCHAIN_VALIDATE_USAGE}`;
+    }
+    const releaseRoot = optionalTrimmedStringFlag(parsed, "release-root");
+    if (releaseRoot.error) {
+        return releaseRoot.error;
+    }
+    const mode = optionalTrimmedStringFlag(parsed, "mode");
+    if (mode.error) {
+        return mode.error;
+    }
+    return { releaseRoot: releaseRoot.value, mode: mode.value };
+}
+function localCompileTaishanPiRequest(parsed, auth) {
+    const unknownFlag = firstUnknownFlag(parsed, ["json", "source", "output", "release-root", "account", "account-id"]);
+    if (unknownFlag) {
+        return `Unknown flag --${unknownFlag}. ${LOCAL_COMPILE_TAISHANPI_USAGE}`;
+    }
+    const extra = parsed.command.slice(3);
+    if (extra.length > 0) {
+        return `Unexpected argument: ${extra[0]}. ${LOCAL_COMPILE_TAISHANPI_USAGE}`;
+    }
+    const source = optionalTrimmedStringFlag(parsed, "source");
+    if (source.error) {
+        return source.error;
+    }
+    const outputPath = optionalTrimmedStringFlag(parsed, "output");
+    if (outputPath.error) {
+        return outputPath.error;
+    }
+    if (!source.value || !outputPath.value) {
+        return LOCAL_COMPILE_TAISHANPI_USAGE;
+    }
+    const releaseRoot = optionalTrimmedStringFlag(parsed, "release-root");
+    if (releaseRoot.error) {
+        return releaseRoot.error;
+    }
+    const account = optionalTrimmedStringAliasFlag(parsed, ["account", "account-id"], "account or account-id");
+    if (account.error) {
+        return account.error;
+    }
+    return {
+        boardId: "taishanpi-1m-rk3566",
+        sourcePath: source.value,
+        outputPath: outputPath.value,
+        releaseRoot: releaseRoot.value,
+        accountId: account.value,
+        auth: localToolchainAuthContext(auth, account.value)
+    };
+}
+function localBuildQtSmokeRequest(parsed, auth) {
+    const unknownFlag = firstUnknownFlag(parsed, ["json", "source", "build-dir", "release-root", "target-name", "account", "account-id"]);
+    if (unknownFlag) {
+        return `Unknown flag --${unknownFlag}. ${LOCAL_BUILD_QT_SMOKE_USAGE}`;
+    }
+    const extra = parsed.command.slice(3);
+    if (extra.length > 0) {
+        return `Unexpected argument: ${extra[0]}. ${LOCAL_BUILD_QT_SMOKE_USAGE}`;
+    }
+    const buildDir = optionalTrimmedStringFlag(parsed, "build-dir");
+    if (buildDir.error) {
+        return buildDir.error;
+    }
+    if (!buildDir.value) {
+        return LOCAL_BUILD_QT_SMOKE_USAGE;
+    }
+    const source = optionalTrimmedStringFlag(parsed, "source");
+    if (source.error) {
+        return source.error;
+    }
+    const releaseRoot = optionalTrimmedStringFlag(parsed, "release-root");
+    if (releaseRoot.error) {
+        return releaseRoot.error;
+    }
+    const targetName = optionalTrimmedStringFlag(parsed, "target-name");
+    if (targetName.error) {
+        return targetName.error;
+    }
+    const account = optionalTrimmedStringAliasFlag(parsed, ["account", "account-id"], "account or account-id");
+    if (account.error) {
+        return account.error;
+    }
+    return {
+        sourceDir: source.value,
+        buildDir: buildDir.value,
+        releaseRoot: releaseRoot.value,
+        targetName: targetName.value,
+        accountId: account.value,
+        auth: localToolchainAuthContext(auth, account.value)
+    };
+}
+function localToolchainAuthContext(auth, accountId) {
+    return {
+        authenticated: auth.authenticated,
+        profile: auth.profile,
+        source: auth.source,
+        account_id: accountId
+    };
+}
 function usageEventsRequest(parsed) {
     const unknownFlag = firstUnknownFlag(parsed, ["json", "account", "account-id", "api-key-id", "from", "to", "limit"]);
     if (unknownFlag) {
@@ -3508,6 +4969,26 @@ function compactBody(input) {
     }
     return body;
 }
+async function readLocalFileForUpload(filePath, label) {
+    try {
+        const info = await stat(filePath);
+        if (!info.isFile()) {
+            return `${label} must point to a file: ${filePath}`;
+        }
+        const bytes = await readFile(filePath);
+        if (bytes.length === 0) {
+            return `${label} must not be empty: ${filePath}`;
+        }
+        return {
+            path: filePath,
+            bytes,
+            sha256: createHash("sha256").update(bytes).digest("hex")
+        };
+    }
+    catch (error) {
+        return `Could not read ${label} file ${filePath}: ${error instanceof Error ? error.message : String(error)}`;
+    }
+}
 function projectCreateBody(parsed) {
     const extra = parsed.command.slice(3);
     if (extra.length > 0) {
@@ -3801,8 +5282,15 @@ function renderServiceModeCatalog(catalog) {
         `  model_gateway=${catalog.boundaries.model_gateway}`,
         `  server_resource_orchestration=${catalog.boundaries.server_resource_orchestration}`,
         `  local_bridge=${catalog.boundaries.local_bridge}`,
+        catalog.boundaries.free_registered_operations ? `  free_registered_operations=${catalog.boundaries.free_registered_operations}` : "",
+        catalog.boundaries.paid_server_operations ? `  paid_server_operations=${catalog.boundaries.paid_server_operations}` : "",
+        catalog.allocation_rule ? `allocation_rule=${catalog.allocation_rule}` : "",
+        "free_registered_capabilities:",
+        ...(catalog.free_registered_capabilities ?? []).map((item) => `  - ${item.policy_id} workspace=${item.requires_server_workspace} lease=${item.allocates_server_resource_lease} meters=${item.meters.join(",") || "none"}`),
+        "paid_capabilities:",
+        ...(catalog.paid_capabilities ?? []).map((item) => `  - ${item.policy_id} workspace=${item.requires_server_workspace} lease=${item.allocates_server_resource_lease} meters=${item.meters.join(",") || "none"}`),
         "modes:"
-    ];
+    ].filter(Boolean);
     for (const mode of catalog.modes) {
         lines.push([
             `  ${mode.default ? "*" : "-"}`,
@@ -3843,6 +5331,24 @@ function renderPluginInstall(result) {
         if (item.command_hint) {
             lines.push(`    ${item.command_hint}`);
         }
+        if (item.warning) {
+            lines.push(`    warning=${item.warning}`);
+        }
+        if (item.mcp_registered !== undefined) {
+            lines.push(`    codex_mcp_registered=${item.mcp_registered}`);
+        }
+        if (item.mcp_warning) {
+            lines.push(`    warning=${item.mcp_warning}`);
+        }
+        if (item.marketplace_registered !== undefined) {
+            lines.push(`    codex_marketplace_registered=${item.marketplace_registered}`);
+        }
+        if (item.marketplace_path) {
+            lines.push(`    codex_marketplace=${item.marketplace_path}`);
+        }
+        if (item.marketplace_warning) {
+            lines.push(`    warning=${item.marketplace_warning}`);
+        }
     }
     return lines.join("\n");
 }
@@ -3926,6 +5432,20 @@ function renderUsageRecord(record) {
         `created_at=${record.created_at}`
     ].filter(Boolean).join(" ");
 }
+function renderMcpToolEvent(event) {
+    return [
+        `${event.event_id} tool=${event.tool_name}`,
+        event.account_id ? `account=${event.account_id}` : "",
+        event.api_key_id ? `api_key=${event.api_key_id}` : "",
+        `client=${event.client}`,
+        `mode=${event.mode}`,
+        `server_model_used=${event.server_model_used}`,
+        `success=${event.success}`,
+        event.request_id ? `request=${event.request_id}` : "",
+        event.duration_ms !== undefined ? `duration_ms=${event.duration_ms}` : "",
+        `created_at=${event.created_at}`
+    ].filter(Boolean).join(" ");
+}
 function renderUsageSummary(summary) {
     const lines = [
         summary.account_id ? `account=${summary.account_id}` : "",
@@ -4214,10 +5734,13 @@ function renderBoardMethods(data) {
         method.operation,
         `status=${method.status}`,
         `runtime=${method.runtime}`,
+        method.access_tier ? `access=${method.access_tier}` : "",
         `endpoint=${method.http_method} ${method.path}`,
         `workspace=${method.requires_workspace}`,
+        method.allocates_server_workspace !== undefined ? `alloc_workspace=${method.allocates_server_workspace}` : "",
+        method.allocates_server_resource_lease !== undefined ? `alloc_lease=${method.allocates_server_resource_lease}` : "",
         `approval=${method.requires_approval}`
-    ].join(" ")).join("\n");
+    ].filter(Boolean).join(" ")).join("\n");
 }
 function renderBoardKnowledge(data) {
     const files = isJsonObject(data) && Array.isArray(data.knowledge_files)
@@ -4446,6 +5969,141 @@ function renderBuildWorkspaceSourcePatch(result) {
     }
     return lines.join("\n");
 }
+function renderLocalToolchainLatest(result) {
+    const lines = [
+        `board=${result.board_id}`,
+        `channel=${result.channel}`,
+        `version=${result.version}`,
+        `host=${result.host}`,
+        result.metadata_root ? `metadata_root=${result.metadata_root}` : "metadata=built-in",
+        result.download?.source_url ? `download=${result.download.mirror_kind}:${result.download.source_url}` : "",
+        result.download?.archive ? `archive_sha256=${result.download.archive.sha256}` : "",
+        result.download?.archive ? `archive_size_bytes=${result.download.archive.size_bytes}` : "",
+        result.download?.components?.length ? `components=${result.download.components.length}` : "",
+        result.download?.default_mode ? `default_mode=${result.download.default_mode}` : "",
+        result.download_error ? `download_error=${result.download_error}` : ""
+    ].filter(Boolean);
+    if (result.download?.components?.length) {
+        lines.push("download_components:");
+        for (const component of result.download.components) {
+            lines.push(`  ${component.id}@${component.version} modes=${component.install_modes?.join(",") || "all"} bytes=${component.archive.size_bytes}`);
+        }
+    }
+    if (result.packages.length > 0) {
+        lines.push("packages:");
+        for (const pkg of result.packages) {
+            lines.push(`  ${pkg.id}@${pkg.version}`);
+        }
+    }
+    return lines.join("\n");
+}
+function renderLocalToolchainCurrent(result) {
+    if (!result.installed) {
+        return [
+            "No local toolchain installed.",
+            `board=${result.board_id}`,
+            `install_root=${result.install_root}`,
+            `registry=${result.registry_path}`
+        ].join("\n");
+    }
+    return [
+        "Local toolchain installed.",
+        `board=${result.board_id}`,
+        result.version ? `version=${result.version}` : "",
+        result.channel ? `channel=${result.channel}` : "",
+        result.mode ? `mode=${result.mode}` : "",
+        result.release_root ? `release_root=${result.release_root}` : "",
+        `install_root=${result.install_root}`,
+        `registry=${result.registry_path}`
+    ].filter(Boolean).join("\n");
+}
+function renderLocalToolchainInstall(result) {
+    const lines = [
+        "Local toolchain installed.",
+        `board=${result.board_id}`,
+        `version=${result.version}`,
+        `channel=${result.channel}`,
+        `host=${result.host}`,
+        `mode=${result.mode}`,
+        `install_root=${result.install_root}`,
+        `release_root=${result.release_root}`,
+        `registry=${result.registry_path}`,
+        `source=${result.source.kind}:${result.source.value}`,
+        result.source.downloaded_path ? `downloaded=${result.source.downloaded_path}` : "",
+        result.source.components?.length ? `components=${result.source.components.length}` : "",
+        `validation=${result.validation.ok ? "ok" : "failed"}`
+    ].filter(Boolean);
+    if (result.source.components?.length) {
+        lines.push("installed_components:");
+        for (const component of result.source.components) {
+            lines.push(`  ${component.id}@${component.version} ${component.mirror_kind || ""} bytes=${component.size_bytes}`);
+        }
+    }
+    if (result.installed_paths.length > 0) {
+        lines.push("installed_paths:");
+        for (const installedPath of result.installed_paths) {
+            lines.push(`  ${installedPath}`);
+        }
+    }
+    if (result.packages.length > 0) {
+        lines.push("packages:");
+        for (const pkg of result.packages) {
+            lines.push(`  ${pkg.id}@${pkg.version}`);
+        }
+    }
+    return lines.join("\n");
+}
+function renderLocalToolchainValidation(result) {
+    const lines = [
+        result.ok ? "Local toolchain ready." : "Local toolchain not ready.",
+        `board=${result.board_id}`,
+        `mode=${result.mode}`,
+        `host=${result.host.platform}/${result.host.arch}`,
+        `release_root=${result.release_root}`
+    ];
+    for (const check of result.checked_paths) {
+        lines.push(`${check.exists ? "ok" : "missing"} ${check.label}: ${check.path}`);
+    }
+    if (result.notes.length > 0) {
+        lines.push("notes:");
+        for (const note of result.notes) {
+            lines.push(`  ${note}`);
+        }
+    }
+    return lines.join("\n");
+}
+function renderLocalCompileResult(result) {
+    const lines = [
+        `${result.operation} succeeded.`,
+        `board=${result.board_id}`,
+        result.account_id ? `account=${result.account_id}` : "",
+        `auth=${result.auth.authenticated ? "authenticated" : "anonymous"} profile=${result.auth.profile}${result.auth.source ? ` source=${result.auth.source}` : ""}`,
+        `source=${result.source_path}`,
+        result.build_dir ? `build_dir=${result.build_dir}` : "",
+        `artifact=${result.artifact_path}`,
+        `size=${result.artifact_size_bytes}`,
+        `sha256=${result.artifact_sha256}`,
+        result.file_info ? `file=${result.file_info}` : "",
+        `manifest=${result.manifest_path}`
+    ].filter(Boolean);
+    for (const command of result.commands) {
+        lines.push(`command_exit=${command.exit_code} cwd=${command.cwd}`);
+        lines.push(`  ${command.command.join(" ")}`);
+        if (command.stdout_tail.length > 0) {
+            lines.push("  stdout_tail:");
+            for (const line of command.stdout_tail.slice(-12)) {
+                lines.push(`    ${line}`);
+            }
+        }
+        if (command.stderr_tail.length > 0) {
+            lines.push("  stderr_tail:");
+            for (const line of command.stderr_tail.slice(-12)) {
+                lines.push(`    ${line}`);
+            }
+        }
+    }
+    return lines.join("\n");
+}
 function renderDoctor(result) {
     const lines = [
         `${result.status === "ready" ? "Ready" : "Not ready"}: ${result.summary_for_user}`,
@@ -4616,6 +6274,46 @@ function renderJob(job) {
     }
     return lines.join("\n");
 }
+function renderBootLogoPackageResult(result) {
+    const lines = [renderJob(result.task)];
+    if (result.downloaded_artifact) {
+        lines.push("downloaded_package:");
+        lines.push(`  artifact=${result.downloaded_artifact.artifact_id}`);
+        lines.push(`  output=${result.downloaded_artifact.output_path}`);
+        lines.push(`  size=${result.downloaded_artifact.size_bytes}`);
+    }
+    lines.push("next=merge the downloaded package with the local base image, then flash only after explicit approval.");
+    return lines.join("\n");
+}
+function renderDtbPackageResult(result) {
+    const lines = [renderJob(result.task)];
+    if (result.downloaded_artifact) {
+        lines.push("downloaded_package:");
+        lines.push(`  artifact=${result.downloaded_artifact.artifact_id}`);
+        lines.push(`  output=${result.downloaded_artifact.output_path}`);
+        lines.push(`  size=${result.downloaded_artifact.size_bytes}`);
+    }
+    lines.push("next=merge the downloaded DTB package with the local base image, then flash only after explicit approval.");
+    return lines.join("\n");
+}
+function renderBootLogoComposeResult(result) {
+    const label = result.operation_kind === "image.dtb.compose" ? "DTB" : "Boot-logo";
+    return [
+        result.ready_for_flash ? `${label} compose ready for flash review.` : `${label} compose created a guarded local result.`,
+        `board=${result.board_id}`,
+        result.variant_id ? `variant=${result.variant_id}` : "",
+        `package=${result.package_path}`,
+        `base=${result.base_image_path}`,
+        `output=${result.output_image_path}`,
+        `manifest=${result.manifest_path}`,
+        `strategy=${result.local_merge_strategy}`,
+        `patches=${result.patch_operations_applied}/${result.patch_operations_total}`,
+        `replacement_applied=${result.replacement_applied}`,
+        `ready_for_flash=${result.ready_for_flash}`,
+        `cross_platform=${result.cross_platform} platform=${result.platform}/${result.arch}`,
+        result.summary_for_user
+    ].filter(Boolean).join("\n");
+}
 function safeArtifactOutputFileName(name) {
     return name.replace(/[^A-Za-z0-9._-]+/g, "_") || "artifact.out";
 }
@@ -4814,6 +6512,22 @@ function stringFlag(parsed, name) {
 function booleanFlag(parsed, name) {
     return parsed.flags[name] === true;
 }
+function optionalBooleanFlag(parsed, name) {
+    const values = flagValues(parsed, name);
+    if (values.length === 0)
+        return undefined;
+    const value = values[values.length - 1];
+    if (value === true)
+        return true;
+    if (typeof value !== "string")
+        return `--${name} must be true or false.`;
+    const normalized = value.trim().toLowerCase();
+    if (["1", "true", "yes", "y", "on"].includes(normalized))
+        return true;
+    if (["0", "false", "no", "n", "off"].includes(normalized))
+        return false;
+    return `--${name} must be true or false.`;
+}
 function switchFlag(parsed, name) {
     const values = flagValues(parsed, name);
     for (const value of values) {
@@ -5095,7 +6809,7 @@ async function waitForever() {
     return 0;
 }
 function printHelp() {
-    console.log(`embed CLI
+    printCliHelp(`embed CLI
 
 Usage:
   embed <command> [options]
@@ -5117,13 +6831,19 @@ Main workflow:
      embed model default
   4. Run a natural-language local tool loop:
      embed agent run --prompt "验证开发板状态"
-  5. Pick a cloud build template:
+  5. Validate or use the local TaishanPi toolchain:
+     embed local toolchain latest
+     embed local toolchain install
+     embed local toolchain validate
+     embed local compile taishanpi --source ./main.c --output ./.embed-labs/build/main
+     embed local build qt-smoke --build-dir ./.embed-labs/build/qt-smoke
+  6. Pick a cloud build template:
      embed board registry list
      embed board methods taishanpi-1m-rk3566
      embed board knowledge taishanpi-1m-rk3566
      embed build template list
      embed build template show <template_id>
-  6. Provision and populate a build workspace:
+  7. Provision and populate a build workspace:
      embed build workspace provision --account <account_id> --project <project_id> --template <template_id>
      embed build resource lease create --workspace <workspace_id> --execution-mode cloud_worker
      embed build workspace source put <workspace_id> --file ./main.c:src/main.c
@@ -5132,13 +6852,15 @@ Main workflow:
      embed build workspace source search <workspace_id> --query init --glob "**/*.c"
      embed build workspace source patch <workspace_id> --patch ./fix.patch
      embed build workspace release <workspace_id> --dry-run
-  7. Generate application source on the server and follow artifacts:
+  8. Generate application source on the server and follow artifacts:
      embed build application generate --workspace <workspace_id> --prompt "Create a minimal Linux app" --provider bai --model gpt-5.2
      embed build application compile --workspace <workspace_id> --source app/generated.c --execution-mode docker_worker
      embed build image generate --workspace <workspace_id> --prompt "Generate a minimal TaishanPi image"
+     embed build image boot-logo --logo ./logo.png --board taishanpi --variant 1M-RK3566 --output ./boot-logo-package.json
+     embed image boot-logo compose --package ./boot-logo-package.json --base-image ./boot.img --output ./boot-logo.img
      embed cloud task artifacts <task_id>
      embed artifact download <artifact_id> --output ./artifact.bin
-  8. Check credits or create a recharge QR:
+  9. Check credits or create a recharge QR:
      embed billing balance --account <account_id>
      embed billing tokens --account <account_id>
      embed billing ledger --account <account_id>
@@ -5153,7 +6875,17 @@ Local hardware:
   embed agent run --prompt "部署生成的泰山派应用" --host 198.19.77.2 --artifact-task <task_id> --remote-path /userdata/embed-labs/apps/app --approve --run
   embed tool list
   embed tool call device.probe --input-json '{"host":"198.19.77.2","ports":[22,15301]}'
+  embed tool call wifi.scan --input-json '{"host":"198.19.77.2","user":"root"}'
+  embed tool call chip.temperature --input-json '{"host":"198.19.77.2","user":"root"}'
+  embed tool call qml.runtime.status --input-json '{"host":"198.19.77.2","user":"root","port":18130}'
   embed device list
+  embed local toolchain latest
+  embed local toolchain current
+  embed local toolchain install
+  embed local toolchain validate
+  embed local compile taishanpi --source ./main.c --output ./.embed-labs/build/main
+  embed local build qt-smoke --build-dir ./.embed-labs/build/qt-smoke
+  embed image boot-logo compose --package ./boot-logo-package.json --base-image ./boot.img --output ./boot-logo.img
   embed deploy taishanpi --host 198.19.77.2 --artifact ./artifact.bin --approve --run
   embed flash plan --board <rp2350|taishanpi>
 
@@ -5188,7 +6920,7 @@ function printHelpTopic(topic) {
         printCommandReference();
         return;
     }
-    console.log(`Unknown help topic: ${topic}
+    printCliHelp(`Unknown help topic: ${topic}
 
 Available topics:
   embed help getting-started
@@ -5196,7 +6928,7 @@ Available topics:
 `);
 }
 function printGettingStartedHelp() {
-    console.log(`embed getting started
+    printCliHelp(`embed getting started
 
 After npm install, use the installed embed binary directly:
 
@@ -5225,6 +6957,9 @@ Cloud build path:
   embed model list
   embed model default
   embed agent run --prompt "验证开发板状态"
+  embed local toolchain validate
+  embed local compile taishanpi --source ./main.c --output ./.embed-labs/build/main
+  embed local build qt-smoke --build-dir ./.embed-labs/build/qt-smoke
   embed board registry list
   embed board registry show taishanpi-1m-rk3566
   embed board methods taishanpi-1m-rk3566
@@ -5242,6 +6977,8 @@ Cloud build path:
   embed build application generate --workspace <workspace_id> --prompt "Create a minimal Linux app" --provider bai --model gpt-5.2
   embed build application compile --workspace <workspace_id> --source app/generated.c --execution-mode docker_worker
   embed build image generate --workspace <workspace_id> --prompt "Generate a minimal TaishanPi image"
+  embed build image boot-logo --logo ./logo.png --board taishanpi --variant 1M-RK3566 --output ./boot-logo-package.json
+  embed image boot-logo compose --package ./boot-logo-package.json --base-image ./boot.img --output ./boot-logo.img
   embed cloud task status <task_id>
   embed cloud task artifacts <task_id>
   embed artifact download <artifact_id> --output ./artifact.bin
@@ -5279,7 +7016,7 @@ Use --json on commands when scripting or running in CI.
 `);
 }
 function printCommandReference() {
-    console.log(`embed CLI
+    printCliHelp(`embed CLI
 
 Usage:
   embed doctor [--json]
@@ -5299,7 +7036,7 @@ Usage:
   embed board methods <template_id> [--json]
   embed board knowledge <template_id> [--json]
   embed board knowledge file <template_id> --source board_pack|build_template|registry --path <relative_path> [--output <local_path>] [--json]
-  embed agent run --prompt <request> [--account <account_id>] [--workspace <workspace_id>] [--provider stub|openai|bai|cc|claude-code] [--model <model>] [--max-tool-calls 4] [--host <ip>] [--ports 22,15301] [--artifact <local_file>|--artifact-id <artifact_id>|--artifact-task <task_id>] [--artifact-output <path>] [--remote-path <path>] [--run] [--approve] [--json]
+  embed agent run --prompt <request> [--account <account_id>] [--workspace <workspace_id>] [--provider stub|openai|bai|cc|claude-code] [--model <model>] [--max-tool-calls 6] [--host <ip>] [--ports 22,15301] [--artifact <local_file>|--artifact-id <artifact_id>|--artifact-task <task_id>] [--artifact-output <path>] [--remote-path <path>] [--run] [--approve] [--json]
   embed run <natural language request> [--provider stub|openai|bai|cc|claude-code] [--approve] [--json]
   embed tool list [--json]
   embed tool call <capability_id> [--input-json '<json>'] [--approve] [--json]
@@ -5344,7 +7081,26 @@ Usage:
   embed build application generate --workspace <workspace_id> --prompt <request> [--account <account_id>] [--target <source_path>] [--provider stub|openai|bai|cc|claude-code] [--model <model>] [--json]
   embed build application compile --workspace <workspace_id> [--account <account_id>] [--source <source_path>] [--execution-mode docker_worker|server_direct|dry_run] [--compiler auto|cc|gcc|clang|aarch64-linux-gnu-gcc] [--json]
   embed build image generate --workspace <workspace_id> --prompt <request> [--account <account_id>] [--image-profile <profile_id>] [--provider stub|openai|bai|cc|claude-code] [--model <model>] [--execution-mode cloud_worker|dry_run] [--worker-pool <pool>] [--json]
+  embed build image boot-logo --logo <local_image> [--account <account_id>] [--project <project_id>] [--board taishanpi] [--variant 1M-RK3566] [--kernel-logo <local_image>] [--rotate -90] [--scale 100] [--output <package.json>] [--json]
+  embed image boot-logo compose --package <boot-logo-package.json> --base-image <boot.img|image.img> --output <image> [--manifest <manifest.json>] [--force] [--json]
+  embed local toolchain latest [--board taishanpi-1m-rk3566] [--channel stable] [--metadata-root <path>] [--json]
+  embed local toolchain current [--install-root <path>] [--json]
+  embed local toolchain install [--board taishanpi-1m-rk3566] [--channel stable] [--metadata-root <path>] [--source-url <tar.gz-url>|--source-release-root <path>] [--install-root <path>] [--mode minimal|compile|qt|full|images] [--force] [--json]
+      Defaults to the production download channel at download.embedboard.com.
+  embed local toolchain validate [--release-root <path>] [--mode minimal|compile|qt|full|images] [--json]
+  embed local compile taishanpi --source <main.c|main.cpp> --output <artifact> [--release-root <path>] [--account <account_id>] [--json]
+  embed local build qt-smoke --build-dir <dir> [--source <qt-smoke-dir>] [--release-root <path>] [--account <account_id>] [--json]
   embed debug tools [--json]
+  embed tool list [--json]
+  embed tool call wifi.scan --input-json '{"host":"198.19.77.2","user":"root"}' [--json]
+  embed tool call bluetooth.scan --input-json '{"host":"198.19.77.2","user":"root","duration_seconds":8}' [--json]
+  embed tool call chip.cpu.frequency --input-json '{"host":"198.19.77.2","user":"root"}' [--json]
+  embed tool call chip.temperature --input-json '{"host":"198.19.77.2","user":"root"}' [--json]
+  embed tool call qml.runtime.status --input-json '{"host":"198.19.77.2","user":"root","port":18130}' [--json]
+  embed tool call qml.runtime.start --input-json '{"host":"198.19.77.2","user":"root","port":18130}' [--json]
+  embed tool call rp2350.monitor.status [--json]
+  embed tool call rp2350.monitor.logic.capture --input-json '{"pin_base":16,"pin_count":4,"sample_rate":1000000,"samples":4096}' [--json]
+  embed tool call rp2350.monitor.logic.decode --input-json '{"input_path":".embed-labs/rp2350-monitor/captures/logic.jsonl","decoder":"summary"}' [--json]
   embed deploy taishanpi --host <ip> --artifact <local_file> --approve [--remote-path /userdata/embed-labs/apps/app] [--run] [--json]
   embed board deploy taishanpi --host <ip> --artifact <local_file> --approve [--remote-path /userdata/embed-labs/apps/app] [--run] [--json]
   embed device list [--json]
@@ -5383,6 +7139,23 @@ Environment:
   CODEX_HOME=~/.codex
 `);
 }
+function printCliHelp(text) {
+    console.log(formatCliHelp(text));
+}
+function formatCliHelp(text) {
+    if (currentCommandName() !== "embedlabs") {
+        return text;
+    }
+    return text
+        .replace(/^embed CLI$/m, "embedlabs CLI")
+        .replace(/^embed getting started$/m, "embedlabs getting started")
+        .replace("After npm install, use the installed embed binary directly:", "After npm install, use the installed embedlabs binary directly:")
+        .replace(/(^|\n)(\s*)embed(\s+)/g, "$1$2embedlabs$3");
+}
+function currentCommandName() {
+    const invoked = basename(process.argv[1] ?? "");
+    return invoked.startsWith("embedlabs") ? "embedlabs" : "embed";
+}
 main(process.argv.slice(2))
     .then((code) => {
     process.exitCode = code;