oc-codex-multi-auth 6.22.0 → 6.24.0

package/scripts/audit-dev-allowlist.js

@@ -1,114 +1,114 @@
-#!/usr/bin/env node
-
-import { execSync } from "node:child_process";
-
-const ALLOWED_HIGH_OR_CRITICAL_PACKAGES = new Set([
-	"eslint",
-	"ajv",
-	"@eslint-community/eslint-utils",
-	"@typescript-eslint/eslint-plugin",
-	"@typescript-eslint/parser",
-	"@typescript-eslint/type-utils",
-	"@typescript-eslint/typescript-estree",
-	"@typescript-eslint/utils",
-	"minimatch",
-]);
-
-function summarizeVia(via) {
-	if (!Array.isArray(via)) return [];
-	return via
-		.map((item) => {
-			if (typeof item === "string") return item;
-			if (!item || typeof item !== "object") return "unknown";
-			const name = typeof item.name === "string" ? item.name : "unknown";
-			const range = typeof item.range === "string" ? item.range : "";
-			return range ? `${name}:${range}` : name;
-		})
-		.slice(0, 5);
-}
-
-let rawAuditOutput = "";
-try {
-	rawAuditOutput = execSync("npm audit --json", {
-		encoding: "utf8",
-		stdio: ["ignore", "pipe", "pipe"],
-	}).trim();
-} catch (error) {
-	const execError = error;
-	const stdout =
-		execError &&
-		typeof execError === "object" &&
-		"stdout" in execError &&
-		typeof execError.stdout === "string"
-			? execError.stdout
-			: "";
-	const stderr =
-		execError &&
-		typeof execError === "object" &&
-		"stderr" in execError &&
-		typeof execError.stderr === "string"
-			? execError.stderr
-			: "";
-	rawAuditOutput = stdout.trim() || stderr.trim();
-}
-
-if (!rawAuditOutput) {
-	console.error("Failed to read npm audit JSON output.");
-	process.exit(1);
-}
-
-let auditJson;
-try {
-	auditJson = JSON.parse(rawAuditOutput.replace(/^\uFEFF/, ""));
-} catch (error) {
-	console.error("Failed to parse npm audit JSON output.");
-	console.error(error instanceof Error ? error.message : String(error));
-	process.exit(1);
-}
-
-const vulnerabilities =
-	auditJson && typeof auditJson === "object" && auditJson.vulnerabilities && typeof auditJson.vulnerabilities === "object"
-		? auditJson.vulnerabilities
-		: {};
-
-const unexpected = [];
-const allowlisted = [];
-
-for (const [name, details] of Object.entries(vulnerabilities)) {
-	if (!details || typeof details !== "object") continue;
-	const severity = typeof details.severity === "string" ? details.severity : "unknown";
-	if (severity !== "high" && severity !== "critical") continue;
-
-	const entry = {
-		name,
-		severity,
-		via: summarizeVia(details.via),
-		fixAvailable: details.fixAvailable ?? false,
-	};
-
-	if (ALLOWED_HIGH_OR_CRITICAL_PACKAGES.has(name)) {
-		allowlisted.push(entry);
-		continue;
-	}
-	unexpected.push(entry);
-}
-
-if (unexpected.length > 0) {
-	console.error("Unexpected high/critical vulnerabilities detected in dev dependency audit:");
-	for (const entry of unexpected) {
-		console.error(
-			`- ${entry.name} (${entry.severity}) via ${entry.via.join(", ") || "unknown"} fixAvailable=${String(entry.fixAvailable)}`,
-		);
-	}
-	process.exit(1);
-}
-
-if (allowlisted.length > 0) {
-	console.warn("Allowlisted high/critical dev vulnerabilities detected:");
-	for (const entry of allowlisted) {
-		console.warn(
-			`- ${entry.name} (${entry.severity}) via ${entry.via.join(", ") || "unknown"} fixAvailable=${String(entry.fixAvailable)}`,
-		);
-	}
-	console.warn("No unexpected high/critical vulnerabilities found.");
-}
+#!/usr/bin/env node
+
+import { execSync } from "node:child_process";
+
+const ALLOWED_HIGH_OR_CRITICAL_PACKAGES = new Set([
+	"eslint",
+	"ajv",
+	"@eslint-community/eslint-utils",
+	"@typescript-eslint/eslint-plugin",
+	"@typescript-eslint/parser",
+	"@typescript-eslint/type-utils",
+	"@typescript-eslint/typescript-estree",
+	"@typescript-eslint/utils",
+	"minimatch",
+]);
+
+function summarizeVia(via) {
+	if (!Array.isArray(via)) return [];
+	return via
+		.map((item) => {
+			if (typeof item === "string") return item;
+			if (!item || typeof item !== "object") return "unknown";
+			const name = typeof item.name === "string" ? item.name : "unknown";
+			const range = typeof item.range === "string" ? item.range : "";
+			return range ? `${name}:${range}` : name;
+		})
+		.slice(0, 5);
+}
+
+let rawAuditOutput = "";
+try {
+	rawAuditOutput = execSync("npm audit --json", {
+		encoding: "utf8",
+		stdio: ["ignore", "pipe", "pipe"],
+	}).trim();
+} catch (error) {
+	const execError = error;
+	const stdout =
+		execError &&
+		typeof execError === "object" &&
+		"stdout" in execError &&
+		typeof execError.stdout === "string"
+			? execError.stdout
+			: "";
+	const stderr =
+		execError &&
+		typeof execError === "object" &&
+		"stderr" in execError &&
+		typeof execError.stderr === "string"
+			? execError.stderr
+			: "";
+	rawAuditOutput = stdout.trim() || stderr.trim();
+}
+
+if (!rawAuditOutput) {
+	console.error("Failed to read npm audit JSON output.");
+	process.exit(1);
+}
+
+let auditJson;
+try {
+	auditJson = JSON.parse(rawAuditOutput.replace(/^\uFEFF/, ""));
+} catch (error) {
+	console.error("Failed to parse npm audit JSON output.");
+	console.error(error instanceof Error ? error.message : String(error));
+	process.exit(1);
+}
+
+const vulnerabilities =
+	auditJson && typeof auditJson === "object" && auditJson.vulnerabilities && typeof auditJson.vulnerabilities === "object"
+		? auditJson.vulnerabilities
+		: {};
+
+const unexpected = [];
+const allowlisted = [];
+
+for (const [name, details] of Object.entries(vulnerabilities)) {
+	if (!details || typeof details !== "object") continue;
+	const severity = typeof details.severity === "string" ? details.severity : "unknown";
+	if (severity !== "high" && severity !== "critical") continue;
+
+	const entry = {
+		name,
+		severity,
+		via: summarizeVia(details.via),
+		fixAvailable: details.fixAvailable ?? false,
+	};
+
+	if (ALLOWED_HIGH_OR_CRITICAL_PACKAGES.has(name)) {
+		allowlisted.push(entry);
+		continue;
+	}
+	unexpected.push(entry);
+}
+
+if (unexpected.length > 0) {
+	console.error("Unexpected high/critical vulnerabilities detected in dev dependency audit:");
+	for (const entry of unexpected) {
+		console.error(
+			`- ${entry.name} (${entry.severity}) via ${entry.via.join(", ") || "unknown"} fixAvailable=${String(entry.fixAvailable)}`,
+		);
+	}
+	process.exit(1);
+}
+
+if (allowlisted.length > 0) {
+	console.warn("Allowlisted high/critical dev vulnerabilities detected:");
+	for (const entry of allowlisted) {
+		console.warn(
+			`- ${entry.name} (${entry.severity}) via ${entry.via.join(", ") || "unknown"} fixAvailable=${String(entry.fixAvailable)}`,
+		);
+	}
+	console.warn("No unexpected high/critical vulnerabilities found.");
+}

package/scripts/clean-dist.js

@@ -1,27 +1,27 @@
-import { promises as fs } from "node:fs";
-import { dirname, relative, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
-
-function normalizeRelativePath(path) {
-	return path.replaceAll("\\", "/");
-}
-
-export async function cleanDist(options = {}) {
-	const repoRoot = resolve(options.repoRoot ?? resolve(__dirname, ".."));
-	const distDir = resolve(options.distDir ?? resolve(repoRoot, "dist"));
-	const relativeDist = normalizeRelativePath(relative(repoRoot, distDir));
-
-	if (relativeDist !== "dist") {
-		throw new Error(`Refusing to clean non-dist path: ${distDir}`);
-	}
-
-	await fs.rm(distDir, { recursive: true, force: true });
-	return { distDir };
-}
-
-if (process.argv[1] && resolve(process.argv[1]) === __filename) {
-	await cleanDist();
-}
+import { promises as fs } from "node:fs";
+import { dirname, relative, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+
+function normalizeRelativePath(path) {
+	return path.replaceAll("\\", "/");
+}
+
+export async function cleanDist(options = {}) {
+	const repoRoot = resolve(options.repoRoot ?? resolve(__dirname, ".."));
+	const distDir = resolve(options.distDir ?? resolve(repoRoot, "dist"));
+	const relativeDist = normalizeRelativePath(relative(repoRoot, distDir));
+
+	if (relativeDist !== "dist") {
+		throw new Error(`Refusing to clean non-dist path: ${distDir}`);
+	}
+
+	await fs.rm(distDir, { recursive: true, force: true });
+	return { distDir };
+}
+
+if (process.argv[1] && resolve(process.argv[1]) === __filename) {
+	await cleanDist();
+}

package/scripts/copy-oauth-success.js

@@ -1,47 +1,47 @@
-import { promises as fs } from "node:fs";
-import { dirname, join, resolve } from "node:path";
-import { fileURLToPath, pathToFileURL } from "node:url";
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
-
-function normalizePathForCompare(path) {
-	const resolved = resolve(path);
-	return process.platform === "win32" ? resolved.toLowerCase() : resolved;
-}
-
-function getDefaultPaths() {
-	const modulePath = join(__dirname, "..", "dist", "lib", "oauth-success.js");
-	const dest = join(__dirname, "..", "dist", "lib", "oauth-success.html");
-	return { modulePath, dest };
-}
-
-async function loadOAuthSuccessHtml(modulePath) {
-	const moduleUrl = pathToFileURL(modulePath).href;
-	const mod = await import(moduleUrl);
-	if (typeof mod.oauthSuccessHtml !== "string") {
-		throw new TypeError(`Expected oauthSuccessHtml string export from ${modulePath}`);
-	}
-	return mod.oauthSuccessHtml;
-}
-
-export async function copyOAuthSuccessHtml(options = {}) {
-	const defaults = getDefaultPaths();
-	const modulePath = options.modulePath ?? defaults.modulePath;
-	const dest = options.dest ?? defaults.dest;
-	const html = options.html ?? (await loadOAuthSuccessHtml(modulePath));
-
-	await fs.mkdir(dirname(dest), { recursive: true });
-	await fs.writeFile(dest, html, "utf-8");
-
-	return { modulePath, dest };
-}
-
-const isDirectRun = (() => {
-	if (!process.argv[1]) return false;
-	return normalizePathForCompare(process.argv[1]) === normalizePathForCompare(__filename);
-})();
-
-if (isDirectRun) {
-	await copyOAuthSuccessHtml();
-}
+import { promises as fs } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+
+function normalizePathForCompare(path) {
+	const resolved = resolve(path);
+	return process.platform === "win32" ? resolved.toLowerCase() : resolved;
+}
+
+function getDefaultPaths() {
+	const modulePath = join(__dirname, "..", "dist", "lib", "oauth-success.js");
+	const dest = join(__dirname, "..", "dist", "lib", "oauth-success.html");
+	return { modulePath, dest };
+}
+
+async function loadOAuthSuccessHtml(modulePath) {
+	const moduleUrl = pathToFileURL(modulePath).href;
+	const mod = await import(moduleUrl);
+	if (typeof mod.oauthSuccessHtml !== "string") {
+		throw new TypeError(`Expected oauthSuccessHtml string export from ${modulePath}`);
+	}
+	return mod.oauthSuccessHtml;
+}
+
+export async function copyOAuthSuccessHtml(options = {}) {
+	const defaults = getDefaultPaths();
+	const modulePath = options.modulePath ?? defaults.modulePath;
+	const dest = options.dest ?? defaults.dest;
+	const html = options.html ?? (await loadOAuthSuccessHtml(modulePath));
+
+	await fs.mkdir(dirname(dest), { recursive: true });
+	await fs.writeFile(dest, html, "utf-8");
+
+	return { modulePath, dest };
+}
+
+const isDirectRun = (() => {
+	if (!process.argv[1]) return false;
+	return normalizePathForCompare(process.argv[1]) === normalizePathForCompare(__filename);
+})();
+
+if (isDirectRun) {
+	await copyOAuthSuccessHtml();
+}