Skip to content

Replace aws4fetch with owned SigV4 signer - #312

Merged
admdly merged 2 commits into
mainfrom
codex/directory-package-builds
Nov 10, 2026
Merged

admdly merged 2 commits into
mainfrom
codex/directory-package-builds

Conversation

@admdly

@admdly admdly commented Nov 10, 2026 •

Copy link
Copy Markdown
Contributor

Drops the unmaintained aws4fetch dependency (last published Aug 2024) in favor of a minimal owned SigV4 signer (src/lib/adapters/b2/sigv4.ts, ~130 lines, crypto.subtle only, zero deps, Workers + Node compatible).

  • package-store.ts signs via signS3Request() with identical behavior (path-style URLs, redirect: manual, 15s timeout, versionId delete flow); PUT reuses the caller checksum as payload hash so bodies are not rehashed.
  • New sigv4.node.test.ts: fixed-date GET cross-checked against an independent Node-crypto recomputation, PUT metadata-header signing, versionId bound to signature.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Nov 10, 2026 •

Copy link
Copy Markdown
Codex Review Summary: ✅ Completed

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
🔒 Security Review ✅ Completed 2026-11-10T05:48:45.843772Z 244a19d PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Nov 10, 2026 •

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
✅ Deployment successful!
View logs
api 7a023a5 Nov 10 2026, 05:51 AM

@admdly admdly self-assigned this Nov 10, 2026
@admdly
admdly force-pushed the codex/directory-package-builds branch from 244a19d to 25bb85c Compare November 10, 2026 05:48

@cubic-dev-ai cubic-dev-ai Bot left a comment •

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All reported issues were addressed

Reply with feedback, questions, or to request a fix.

Turn on auto-fix | Re-trigger cubic

@admdly
admdly merged commit b2cbc69 into main Nov 10, 2026
9 checks passed
@admdly
admdly deleted the codex/directory-package-builds branch November 10, 2026 05:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant