codex-multi-auth 2.1.4 → 2.1.6

package/scripts/codex.js

@@ -41,6 +41,23 @@ const RUNTIME_ROTATION_SHADOW_HOME_OMIT_STATE_FILES = new Set([
 	"auth.json",
 	"accounts.json",
 ]);
+const RUNTIME_ROTATION_SHADOW_HOME_OMIT_ROOT_DIRS = new Set(["multi-auth"]);
+const RUNTIME_ROTATION_SHADOW_HOME_LINK_ONLY_ROOT_DIRS = new Set([
+	".sandbox",
+	".sandbox-bin",
+	".sandbox-secrets",
+	".tmp",
+	"ambient-suggestions",
+	"archived_sessions",
+	"backups",
+	"cache",
+	"generated_images",
+	"log",
+	"sqlite",
+	"tmp",
+	"understand-anything",
+	"vendor_imports",
+]);
 const SHADOW_HOME_STATE_FILE_SET = new Set(SHADOW_HOME_STATE_FILES);
 const SHADOW_HOME_CONFIG_FILE = "config.toml";
 const SHADOW_HOME_SYNC_LOCK_DIR = ".codex-multi-auth-shadow-sync.lock";
@@ -63,8 +80,8 @@ const DEFAULT_APP_RUNTIME_HELPER_DETACH_GRACE_MS = 5_000;
 const APP_RUNTIME_HELPER_LAUNCH_TIMEOUT_MS = 15_000;
 const APP_SERVER_SHIM_DIR_NAME = "app-server-shims";
 const APP_SERVER_SHIM_HELPER_PREFIX = "helper-";
-const DEFAULT_STARTUP_AUTO_UPDATE_BUDGET_MS = 3_000;
-const STARTUP_AUTO_UPDATE_TIMED_OUT = Symbol("startup-auto-update-timed-out");
+const DEFAULT_STARTUP_UPDATE_NOTICE_BUDGET_MS = 3_000;
+const STARTUP_UPDATE_NOTICE_TIMED_OUT = Symbol("startup-update-notice-timed-out");
 let shadowHomeCleanupBusyFailuresRemaining = Number.parseInt(
 	process.env.CODEX_MULTI_AUTH_TEST_SHADOW_CLEANUP_BUSY_FAILURES ?? "0",
 	10,
@@ -90,6 +107,8 @@ const shadowHomeCleanupRetryMarkerDir =
 let warnedInvalidRuntimeRotationProxyEnv = false;
 let warnedPendingAccountReadIdOverflow = false;
 let warnedShadowHomeSqliteLinkFailure = false;
+const warnedShadowHomeLinkOnlyDirectoryFailures = new Set();
+const warnedShadowHomeSqliteSidecarPlaceholderFailures = new Set();
 
 async function loadRuntimeConstants() {
 	const fallback = {
@@ -261,31 +280,27 @@ function readBooleanEnvFlag(name) {
 	return null;
 }
 
-function isStartupAutoUpdateDebugEnabled() {
+function isStartupUpdateNoticeDebugEnabled() {
 	return readBooleanEnvFlag("CODEX_MULTI_AUTH_DEBUG") === true;
 }
 
-function shouldLogStartupAutoUpdateProgress() {
-	return process.stderr.isTTY === true || isStartupAutoUpdateDebugEnabled();
+function shouldLogStartupUpdateNotice() {
+	return process.stderr.isTTY === true || isStartupUpdateNoticeDebugEnabled();
 }
 
-function readStartupAutoUpdateBudgetMs() {
+function readStartupUpdateNoticeBudgetMs() {
 	const raw =
-		process.env.CODEX_MULTI_AUTH_AUTO_UPDATE_STARTUP_BUDGET_MS ??
-		process.env.CODEX_MULTI_AUTH_TEST_STARTUP_AUTO_UPDATE_BUDGET_MS;
-	if (!raw) return DEFAULT_STARTUP_AUTO_UPDATE_BUDGET_MS;
+		process.env.CODEX_MULTI_AUTH_UPDATE_NOTICE_STARTUP_BUDGET_MS ??
+		process.env.CODEX_MULTI_AUTH_TEST_STARTUP_UPDATE_NOTICE_BUDGET_MS;
+	if (!raw) return DEFAULT_STARTUP_UPDATE_NOTICE_BUDGET_MS;
 	const parsed = Number.parseInt(raw, 10);
 	return Number.isFinite(parsed) && parsed > 0
 		? parsed
-		: DEFAULT_STARTUP_AUTO_UPDATE_BUDGET_MS;
+		: DEFAULT_STARTUP_UPDATE_NOTICE_BUDGET_MS;
 }
 
-function resolveStartupAutoUpdateTimeouts(budgetMs) {
-	const fetchTimeoutMs = Math.max(1, Math.floor(budgetMs * 0.4));
-	return {
-		fetchTimeoutMs,
-		updateTimeoutMs: Math.max(1, budgetMs - fetchTimeoutMs),
-	};
+function resolveStartupUpdateNoticeTimeoutMs(budgetMs) {
+	return Math.max(1, Math.floor(budgetMs * 0.8));
 }
 
 function isModuleNotFoundError(error) {
@@ -297,7 +312,7 @@ function isModuleNotFoundError(error) {
 	);
 }
 
-function shouldRunStartupAutoUpdate(rawArgs, normalizedArgs) {
+function shouldRunStartupUpdateNotice(rawArgs, normalizedArgs) {
 	if ((process.env.CODEX_MULTI_AUTH_BYPASS ?? "").trim() === "1") {
 		return false;
 	}
@@ -310,7 +325,7 @@ function shouldRunStartupAutoUpdate(rawArgs, normalizedArgs) {
 	return true;
 }
 
-async function withStartupAutoUpdateBudget(promise, budgetMs) {
+async function withStartupUpdateNoticeBudget(promise, budgetMs) {
 	let timeout = null;
 	try {
 		return await Promise.race([
@@ -319,7 +334,7 @@ async function withStartupAutoUpdateBudget(promise, budgetMs) {
 				timeout = setTimeout(
 					() => {
 						timeout?.unref?.();
-						resolve(STARTUP_AUTO_UPDATE_TIMED_OUT);
+						resolve(STARTUP_UPDATE_NOTICE_TIMED_OUT);
 					},
 					budgetMs,
 				);
@@ -330,51 +345,42 @@ async function withStartupAutoUpdateBudget(promise, budgetMs) {
 	}
 }
 
-function logStartupAutoUpdateDebug(message) {
-	if (isStartupAutoUpdateDebugEnabled()) {
+function logStartupUpdateNoticeDebug(message) {
+	if (isStartupUpdateNoticeDebugEnabled()) {
 		console.error(`codex-multi-auth: ${message}`);
 	}
 }
 
-async function autoUpdatePackageIfEnabled(rawArgs, normalizedArgs) {
-	if (!shouldRunStartupAutoUpdate(rawArgs, normalizedArgs)) return;
-	const budgetMs = readStartupAutoUpdateBudgetMs();
-	const { fetchTimeoutMs, updateTimeoutMs } =
-		resolveStartupAutoUpdateTimeouts(budgetMs);
+async function showUpdateNoticeIfAvailable(rawArgs, normalizedArgs) {
+	if (!shouldRunStartupUpdateNotice(rawArgs, normalizedArgs)) return;
+	const budgetMs = readStartupUpdateNoticeBudgetMs();
+	const fetchTimeoutMs = resolveStartupUpdateNoticeTimeoutMs(budgetMs);
 	try {
-		const mod = await import("../dist/lib/auto-update-checker.js");
-		if (typeof mod.autoUpdateIfAvailable !== "function") {
+		const mod = await import("../dist/lib/update-notice.js");
+		if (typeof mod.checkForUpdates !== "function") {
 			return;
 		}
-		const updatePromise = mod.autoUpdateIfAvailable({
-			fetchTimeoutMs,
-			timeoutMs: updateTimeoutMs,
-			onUpdateStart: (update) => {
-				if (!update?.latestVersion) return;
-				if (!shouldLogStartupAutoUpdateProgress()) return;
-				console.error(
-					`codex-multi-auth: auto-update found ${update.latestVersion}; starting npm update -g codex-multi-auth. Startup will continue if it exceeds ${budgetMs}ms.`,
-				);
-			},
-		});
-		const result = await withStartupAutoUpdateBudget(updatePromise, budgetMs);
-		if (result === STARTUP_AUTO_UPDATE_TIMED_OUT) {
-			logStartupAutoUpdateDebug(
-				`auto-update skipped: startup budget exceeded after ${budgetMs}ms`,
+		const checkPromise = mod.checkForUpdates(false, fetchTimeoutMs);
+		const result = await withStartupUpdateNoticeBudget(checkPromise, budgetMs);
+		if (result === STARTUP_UPDATE_NOTICE_TIMED_OUT) {
+			logStartupUpdateNoticeDebug(
+				`update notice skipped: startup budget exceeded after ${budgetMs}ms`,
 			);
 			return;
 		}
-		if (result?.updated && result.latestVersion) {
-			if (shouldLogStartupAutoUpdateProgress()) {
+		if (result?.hasUpdate && result.latestVersion && shouldLogStartupUpdateNotice()) {
+			if (typeof mod.formatManualUpdateNotice === "function") {
+				console.error(mod.formatManualUpdateNotice(result));
+			} else {
 				console.error(
-					`codex-multi-auth: auto-updated to ${result.latestVersion}. New sessions will use the latest package.`,
+					`codex-multi-auth update available: v${result.latestVersion}; current: v${result.currentVersion}; run: ${result.updateCommand}`,
 				);
 			}
 		}
 	} catch (error) {
 		if (isModuleNotFoundError(error)) return;
-		logStartupAutoUpdateDebug(
-			`auto-update skipped: ${error instanceof Error ? error.message : String(error)}`,
+		logStartupUpdateNoticeDebug(
+			`update notice skipped: ${error instanceof Error ? error.message : String(error)}`,
 		);
 	}
 }
@@ -1879,6 +1885,41 @@ function mirrorDirectoryIntoShadowHome(sourcePath, destinationPath) {
 	return "copied";
 }
 
+function linkDirectoryIntoShadowHome(sourcePath, destinationPath) {
+	try {
+		if ((process.env.CODEX_MULTI_AUTH_TEST_FORCE_SHADOW_DIR_COPY ?? "").trim() === "1") {
+			throw new Error("simulated directory link failure");
+		}
+		symlinkSync(
+			sourcePath,
+			destinationPath,
+			process.platform === "win32" ? "junction" : "dir",
+		);
+		return true;
+	} catch {
+		return false;
+	}
+}
+
+function warnSkippedLinkOnlyShadowHomeDirectory(name) {
+	if (warnedShadowHomeLinkOnlyDirectoryFailures.has(name)) {
+		return;
+	}
+	warnedShadowHomeLinkOnlyDirectoryFailures.add(name);
+	console.error(
+		`codex-multi-auth: skipped optional shadow-home directory ${name} because linking failed; refusing to copy generated runtime data.`,
+	);
+}
+
+function shouldCopyRuntimeGeneratedShadowHomeDirectoryFallback() {
+	const normalized = (
+		process.env.CODEX_MULTI_AUTH_RUNTIME_SHADOW_COPY_GENERATED_DIRS ?? ""
+	)
+		.trim()
+		.toLowerCase();
+	return normalized === "1" || normalized === "true" || normalized === "yes";
+}
+
 function linkFileIntoShadowHome(sourcePath, destinationPath) {
 	try {
 		symlinkSync(sourcePath, destinationPath, "file");
@@ -1903,25 +1944,148 @@ function mirrorFileIntoShadowHome(sourcePath, destinationPath, tightenFile) {
 	tightenFile(destinationPath);
 }
 
+function isSqliteMainFile(name) {
+	return /\.sqlite$/i.test(name);
+}
+
+function isSqliteSidecarFile(name) {
+	return /\.sqlite-(?:shm|wal)$/i.test(name);
+}
+
+function normalizeRuntimeShadowHomeEntryName(name) {
+	return process.platform === "win32" || process.platform === "darwin"
+		? name.toLowerCase()
+		: name;
+}
+
+function isCodexRuntimeLocalSqliteFile(name) {
+	const normalizedName = normalizeRuntimeShadowHomeEntryName(name);
+	return /^(?:state|logs)_\d+\.sqlite(?:-(?:shm|wal))?$/.test(normalizedName);
+}
+
+function isCodexRuntimeTransientStateFile(name) {
+	const normalizedName = normalizeRuntimeShadowHomeEntryName(name);
+	return (
+		/^(?:auth|accounts)\.json\.\d+\.[a-z0-9]+\.tmp$/.test(
+			normalizedName,
+		) ||
+		/^\.codex-global-state\.json\.tmp-[a-z0-9-]+$/.test(normalizedName)
+	);
+}
+
+function isRuntimeRotationShadowHomeOmittedEntry(name) {
+	const normalizedName = normalizeRuntimeShadowHomeEntryName(name);
+	return (
+		RUNTIME_ROTATION_SHADOW_HOME_OMIT_ROOT_DIRS.has(normalizedName) ||
+		isCodexRuntimeLocalSqliteFile(name) ||
+		isCodexRuntimeTransientStateFile(name)
+	);
+}
+
+function isRuntimeRotationShadowHomeLinkOnlyDirectory(name) {
+	const normalizedName = normalizeRuntimeShadowHomeEntryName(name);
+	return RUNTIME_ROTATION_SHADOW_HOME_LINK_ONLY_ROOT_DIRS.has(normalizedName);
+}
+
 function shouldMaterializeFileIntoShadowHome(name) {
-	return /\.sqlite(?:-(?:shm|wal))?$/i.test(name);
+	return isSqliteMainFile(name) || isSqliteSidecarFile(name);
 }
 
-function materializeFileIntoShadowHome(sourcePath, destinationPath) {
+function warnSkippedSqliteShadowHomeMaterialization() {
+	if (!warnedShadowHomeSqliteLinkFailure) {
+		warnedShadowHomeSqliteLinkFailure = true;
+		console.error(
+			"codex-multi-auth: skipped SQLite shadow-home materialization because linking failed; refusing to copy active SQLite state.",
+		);
+	}
+}
+
+function warnSkippedSqliteShadowHomeSidecarPlaceholder(error, destinationPath) {
+	if (!warnedShadowHomeSqliteSidecarPlaceholderFailures.has(destinationPath)) {
+		warnedShadowHomeSqliteSidecarPlaceholderFailures.add(destinationPath);
+		console.error(
+			`codex-multi-auth: skipped SQLite shadow-home sidecar placeholder for ${destinationPath} because linking failed: ${error instanceof Error ? error.message : String(error)}`,
+		);
+	}
+}
+
+function materializeSqliteSidecarPlaceholder(sourceSidecarPath, destinationSidecarPath) {
 	try {
-		linkSync(sourcePath, destinationPath);
+		if (
+			(process.env.CODEX_MULTI_AUTH_TEST_FORCE_SHADOW_SIDECAR_PLACEHOLDER_FAILURE ??
+				""
+			).trim() === "1"
+		) {
+			const error = new Error("simulated SQLite sidecar placeholder failure");
+			error.code = "EPERM";
+			throw error;
+		}
+		symlinkSync(sourceSidecarPath, destinationSidecarPath, "file");
 		return true;
-	} catch {
-		if (!warnedShadowHomeSqliteLinkFailure) {
-			warnedShadowHomeSqliteLinkFailure = true;
-			console.error(
-				"codex-multi-auth: skipped SQLite shadow-home materialization because hard-linking failed; refusing to copy active SQLite state.",
-			);
+	} catch (error) {
+		if (error?.code === "EEXIST") {
+			return true;
+		}
+		warnSkippedSqliteShadowHomeSidecarPlaceholder(error, destinationSidecarPath);
+		return false;
+	}
+}
+
+function materializeFileIntoShadowHome(sourcePath, destinationPath) {
+	try {
+		if (
+			(process.env.CODEX_MULTI_AUTH_TEST_FORCE_SHADOW_SQLITE_SIDECAR_LINK_FAILURE ??
+				""
+			).trim() === "1" &&
+			isSqliteSidecarFile(basename(sourcePath))
+		) {
+			throw new Error("simulated SQLite sidecar link failure");
+		}
+		if (linkFileIntoShadowHome(sourcePath, destinationPath)) {
+			return true;
 		}
+		warnSkippedSqliteShadowHomeMaterialization();
+	} catch {
+		warnSkippedSqliteShadowHomeMaterialization();
 	}
 	return false;
 }
 
+function materializeSqliteSidecarsIntoShadowHome(sourcePath, destinationPath) {
+	for (const suffix of ["-wal", "-shm"]) {
+		const sourceSidecarPath = `${sourcePath}${suffix}`;
+		const destinationSidecarPath = `${destinationPath}${suffix}`;
+		if (existsSync(destinationSidecarPath)) {
+			continue;
+		}
+		if (existsSync(sourceSidecarPath)) {
+			if (!materializeFileIntoShadowHome(sourceSidecarPath, destinationSidecarPath)) {
+				if (!materializeSqliteSidecarPlaceholder(
+					sourceSidecarPath,
+					destinationSidecarPath,
+				)) {
+					return false;
+				}
+			}
+			continue;
+		}
+		if (!materializeSqliteSidecarPlaceholder(sourceSidecarPath, destinationSidecarPath)) {
+			return false;
+		}
+	}
+	return true;
+}
+
+function removeSqliteShadowHomeMaterialization(destinationPath) {
+	for (const path of [destinationPath, `${destinationPath}-wal`, `${destinationPath}-shm`]) {
+		try {
+			rmSync(path, { force: true });
+		} catch {
+			// Best-effort cleanup; keep removing the remaining SQLite siblings.
+		}
+	}
+}
+
 function collectShadowHomeSyncFileNames(shadowCodexHome, syncFileNames) {
 	try {
 		for (const entry of readdirSync(shadowCodexHome, { withFileTypes: true })) {
@@ -2031,9 +2195,14 @@ function syncAdditionalShadowHomeFiles(
 	originalFileStates,
 	tightenFile,
 	skipSyncBackNames = new Set(),
+	skipSyncBackPredicate = () => false,
 ) {
 	for (const name of names) {
-		if (SHADOW_HOME_STATE_FILE_SET.has(name) || skipSyncBackNames.has(name)) {
+		if (
+			SHADOW_HOME_STATE_FILE_SET.has(name) ||
+			skipSyncBackNames.has(name) ||
+			skipSyncBackPredicate(name)
+		) {
 			continue;
 		}
 		const shadowPath = join(shadowCodexHome, name);
@@ -2069,6 +2238,10 @@ function createShadowHomeMirror(
 ) {
 	const syncFileNames = new Set(SHADOW_HOME_STATE_FILES);
 	const skipSyncBackNames = new Set(options.skipSyncBackNames ?? []);
+	const skipMirrorPredicate = options.skipMirrorPredicate ?? (() => false);
+	const skipSyncBackPredicate = options.skipSyncBackPredicate ?? (() => false);
+	const linkOnlyDirectoryPredicate =
+		options.linkOnlyDirectoryPredicate ?? (() => false);
 	const originalFileStates = new Map();
 	const copiedDirectoryNames = new Set();
 	const rememberSyncFile = (name) => {
@@ -2090,7 +2263,8 @@ function createShadowHomeMirror(
 			if (
 				name === SHADOW_HOME_CONFIG_FILE ||
 				name === SHADOW_HOME_SYNC_STATE_FILE ||
-				name === SHADOW_HOME_SYNC_LOCK_DIR
+				name === SHADOW_HOME_SYNC_LOCK_DIR ||
+				skipMirrorPredicate(name)
 			) {
 				continue;
 			}
@@ -2114,6 +2288,15 @@ function createShadowHomeMirror(
 					throw new Error(`Expected ${name} to be a file`);
 				}
 				if (directoryLike) {
+					if (
+						linkOnlyDirectoryPredicate(name) &&
+						!shouldCopyRuntimeGeneratedShadowHomeDirectoryFallback()
+					) {
+						if (!linkDirectoryIntoShadowHome(sourcePath, destinationPath)) {
+							warnSkippedLinkOnlyShadowHomeDirectory(name);
+						}
+						continue;
+					}
 					if (mirrorDirectoryIntoShadowHome(sourcePath, destinationPath) === "copied") {
 						copiedDirectoryNames.add(name);
 					}
@@ -2125,7 +2308,14 @@ function createShadowHomeMirror(
 						copyFileSync(sourcePath, destinationPath);
 						tightenFile(destinationPath);
 					} else if (shouldMaterializeFile) {
-						materializeFileIntoShadowHome(sourcePath, destinationPath);
+						if (isSqliteSidecarFile(name)) {
+							continue;
+						}
+						if (materializeFileIntoShadowHome(sourcePath, destinationPath) && isSqliteMainFile(name)) {
+							if (!materializeSqliteSidecarsIntoShadowHome(sourcePath, destinationPath)) {
+								removeSqliteShadowHomeMaterialization(destinationPath);
+							}
+						}
 					} else {
 						mirrorFileIntoShadowHome(sourcePath, destinationPath, tightenFile);
 					}
@@ -2164,6 +2354,7 @@ function createShadowHomeMirror(
 				originalFileStates,
 				tightenFile,
 				skipSyncBackNames,
+				skipSyncBackPredicate,
 			);
 		} catch {
 			// Best-effort only; runtime auth refreshes should not fail cleanup.
@@ -2220,6 +2411,10 @@ function resolveOriginalMultiAuthDir(env) {
 	return undefined;
 }
 
+function resolveRuntimeRotationOriginalMultiAuthDir(originalCodexHome, env) {
+	return resolveOriginalMultiAuthDir(env) ?? join(originalCodexHome, "multi-auth");
+}
+
 function parseRuntimeRotationProxyEnv(value) {
 	if (value === undefined) return undefined;
 	const normalized = value.trim().toLowerCase();
@@ -2329,7 +2524,10 @@ function createRuntimeRotationProxyCodexHome(
 			shadowCodexHome,
 			tightenShadowHomePermissions,
 			{
+				skipMirrorPredicate: isRuntimeRotationShadowHomeOmittedEntry,
 				skipSyncBackNames: RUNTIME_ROTATION_SHADOW_HOME_OMIT_STATE_FILES,
+				skipSyncBackPredicate: isRuntimeRotationShadowHomeOmittedEntry,
+				linkOnlyDirectoryPredicate: isRuntimeRotationShadowHomeLinkOnlyDirectory,
 			},
 		);
 		omitRuntimeRotationShadowHomeStateFiles(shadowCodexHome);
@@ -2354,11 +2552,11 @@ function createRuntimeRotationProxyCodexHome(
 		...baseEnv,
 		CODEX_HOME: shadowCodexHome,
 		OPENAI_API_KEY: clientApiKey,
+		CODEX_MULTI_AUTH_DIR: resolveRuntimeRotationOriginalMultiAuthDir(
+			originalCodexHome,
+			baseEnv,
+		),
 	};
-	const originalMultiAuthDir = resolveOriginalMultiAuthDir(baseEnv);
-	if (originalMultiAuthDir) {
-		forwardedEnv.CODEX_MULTI_AUTH_DIR = originalMultiAuthDir;
-	}
 
 	return {
 		env: forwardedEnv,
@@ -2813,6 +3011,10 @@ function startRuntimeRotationAppHelper(baseContext) {
 			{
 				env: {
 					...baseContext.env,
+					CODEX_MULTI_AUTH_DIR: resolveRuntimeRotationOriginalMultiAuthDir(
+						realCodexHome,
+						baseContext.env,
+					),
 					[APP_RUNTIME_HELPER_OWNER_PID_ENV]: String(process.pid),
 					[APP_RUNTIME_HELPER_REAL_CODEX_HOME_ENV]: realCodexHome,
 				},
@@ -3541,6 +3743,8 @@ function repairCodexSessionIndex(codexHome) {
 
 		const additions = [];
 		for (const rolloutPath of collectRolloutFiles(sessionsDir)) {
+			const idFromName = extractRolloutIdFromFilename(basename(rolloutPath));
+			if (idFromName && seen.has(idFromName)) continue;
 			const entry = parseRolloutIndexEntry(rolloutPath);
 			if (!entry || seen.has(entry.id)) continue;
 			seen.add(entry.id);
@@ -3871,7 +4075,7 @@ async function main() {
 	}
 
 	const normalizedArgs = normalizeAuthAlias(rawArgs);
-	await autoUpdatePackageIfEnabled(rawArgs, normalizedArgs);
+	await showUpdateNoticeIfAvailable(rawArgs, normalizedArgs);
 	ensureWindowsShellShimGuards();
 
 	const bypass = (process.env.CODEX_MULTI_AUTH_BYPASS ?? "").trim() === "1";

package/scripts/install-codex-auth-utils.js

@@ -3,8 +3,47 @@
 import { rename as fsRename } from "node:fs/promises";
 import { homedir } from "node:os";
 import { join } from "node:path";
+import process from "node:process";
 
 const PLUGIN_NAME = "codex-multi-auth";
+
+const TRUE_VALUES = new Set(["1", "true", "yes"]);
+const FALSE_VALUES = new Set(["0", "false", "no"]);
+const CI_ENV_KEYS = [
+	"CI",
+	"GITHUB_ACTIONS",
+	"GITLAB_CI",
+	"CIRCLECI",
+	"BUILDKITE",
+	"TF_BUILD",
+	"TEAMCITY_VERSION",
+	"JENKINS_URL",
+	"TRAVIS",
+	"APPVEYOR",
+	"BITBUCKET_BUILD_NUMBER",
+];
+
+/** @param {string | undefined} value */
+function readOptionalBooleanValue(value) {
+	if (value === undefined || value.trim().length === 0) return null;
+	const normalized = value.trim().toLowerCase();
+	if (TRUE_VALUES.has(normalized)) return true;
+	if (FALSE_VALUES.has(normalized)) return false;
+	return null;
+}
+
+/** @param {NodeJS.ProcessEnv} env @param {string} key */
+function isEnabledEnvFlag(env, key) {
+	const value = env[key];
+	if (value === undefined || value.trim().length === 0) return false;
+	return readOptionalBooleanValue(value) !== false;
+}
+
+/** @param {NodeJS.ProcessEnv} [env] */
+export function isCiEnvironment(env = process.env) {
+	if (readOptionalBooleanValue(env.npm_config_ignore_scripts) === true) return true;
+	return CI_ENV_KEYS.some((key) => isEnabledEnvFlag(env, key));
+}
 export const FILE_RETRY_CODES = new Set([
 	"EBUSY",
 	"EPERM",
@@ -48,6 +87,15 @@ export function resolveInstallPaths(
 	};
 }
 
+/** @param {unknown} list */
+export function removePluginFromList(list) {
+	const entries = Array.isArray(list) ? list.filter(Boolean) : [];
+	return entries.filter((entry) => {
+		if (typeof entry !== "string") return true;
+		return entry !== PLUGIN_NAME && !entry.startsWith(`${PLUGIN_NAME}@`);
+	});
+}
+
 /** @param {unknown} list */
 export function normalizePluginList(list) {
 	const entries = Array.isArray(list) ? list.filter(Boolean) : [];