@westbayberry/dg 2.0.1 → 2.0.2

package/dist/api/analyze.js

@@ -182,6 +182,14 @@ function resolveApiBaseUrl(env) {
 function resolveToken(env) {
     return envAuthToken(env) ?? readAuthStateSafe(env)?.token;
 }
+export function identityHeaders(env) {
+    const headers = { "X-Device-Id": getOrCreateDeviceId(env) };
+    const token = resolveToken(env);
+    if (token) {
+        headers.Authorization = `Bearer ${token}`;
+    }
+    return headers;
+}
 function readAuthStateSafe(env) {
     try {
         return readAuthState(env);

package/dist/proxy/server.js

@@ -15,6 +15,7 @@ import { artifactDisplayName, artifactUrlHash, extractRegistryMetadataIdentities
 import { authorityFor, connectViaUpstreamProxy, selectUpstreamProxy } from "./upstream-proxy.js";
 import { redactSecrets } from "../launcher/output-redaction.js";
 import { envAuthToken } from "../auth/env-token.js";
+import { identityHeaders } from "../api/analyze.js";
 export async function startProductionHttpProxy(options) {
     const ca = createEphemeralCertificateAuthority(options.session.files.ca);
     const state = {
@@ -629,7 +630,8 @@ async function lookupVerdict(options, target, sha256, upstream, identity) {
         const response = await fetch(`${options.apiBaseUrl}/v1/install-verdict`, {
             method: "POST",
             headers: {
-                "Content-Type": "application/json"
+                "Content-Type": "application/json",
+                ...identityHeaders(options.env)
             },
             body: JSON.stringify({
                 manager: options.classification.manager,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@westbayberry/dg",
-  "version": "2.0.1",
+  "version": "2.0.2",
   "description": "Dependency Guardian supply-chain firewall CLI",
   "type": "module",
   "bin": {