@askalf/dario 4.8.125 → 4.8.126

package/dist/oauth.js

@@ -454,8 +454,8 @@ export async function startAutoOAuthFlow() {
             // Exchange the code for tokens
             server.close();
             exchangeCodeWithRedirect(code, codeVerifier, state, port)
-                .then(resolve)
-                .catch(reject);
+                .then((tokens) => { clearTimeout(loginTimeout); resolve(tokens); })
+                .catch((e) => { clearTimeout(loginTimeout); reject(e); });
         });
         let port = 0;
         server.listen(0, 'localhost', async () => {
@@ -490,11 +490,14 @@ export async function startAutoOAuthFlow() {
         server.on('error', (err) => {
             reject(new Error(`Failed to start OAuth callback server: ${err.message}`));
         });
-        // Timeout after 5 minutes
-        setTimeout(() => {
+        // Timeout after 5 minutes. unref so a completed login (server already
+        // closed, promise resolved on the success path) does not pin the process
+        // for 5 min — the #642-audit CLI hang. Also cleared on success below.
+        const loginTimeout = setTimeout(() => {
             server.close();
             reject(new Error('OAuth flow timed out. Try again with `dario login`.'));
         }, 300_000);
+        loginTimeout.unref();
     });
 }
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askalf/dario",
-  "version": "4.8.125",
+  "version": "4.8.126",
   "description": "Use your Claude Pro/Max subscription in any tool — Cursor, Cline, Aider, the Agent SDK, your scripts — at subscription pricing, not per-token API bills. One local Anthropic + OpenAI-compatible endpoint.",
   "type": "module",
   "bin": {