relmio 0.2.11 → 0.2.12

package/CHANGELOG.md

@@ -7,6 +7,18 @@ checks the registry separately after publication.
 
 ## Unreleased
 
+## [0.2.12] - 2026-08-04
+
+### Fixed
+
+- Install the pinned `openai-oauth@2.0.0` helper with its exact compatible
+  `zod@4.1.8` peer even when inherited npm settings omit peer dependencies,
+  preventing the Windows sign-in helper from exiting before it prints a URL.
+- Accept the same strictly validated authorization line from either helper
+  output stream, including Windows terminal framing and final drained output.
+- Run npm package builds through the current Node.js runtime on Windows instead
+  of executing `npm.cmd` directly with `shell: false`.
+
 ## [0.2.11] - 2026-08-04
 
 ### Fixed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "relmio",
-  "version": "0.2.11",
+  "version": "0.2.12",
   "description": "Turn a supported ChatGPT/Codex OAuth sign-in into a private OpenAI-compatible endpoint, starting with self-hosted n8n.",
   "keywords": [
     "relmio",

package/scripts/build-npm-package.js

@@ -10,15 +10,48 @@ import {
   rm,
 } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { basename, join, resolve } from "node:path";
+import { basename, dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { promisify } from "node:util";
 
 const execFileAsync = promisify(execFile);
-const npmCommand = process.platform === "win32" ? "npm.cmd" : "npm";
 const sourceRoot = fileURLToPath(new URL("..", import.meta.url));
 const defaultOutputDirectory = join(sourceRoot, "dist", "npm");
 
+export function resolveNpmInvocation({
+  env = process.env,
+  execPath = process.execPath,
+  platform = process.platform,
+} = {}) {
+  if (platform !== "win32") {
+    return { command: "npm", prefixArgs: [] };
+  }
+
+  const npmExecPathKey = Object.keys(env ?? {}).find(
+    (key) => key.toLowerCase() === "npm_execpath",
+  );
+  const npmExecPath =
+    npmExecPathKey === undefined ? undefined : env[npmExecPathKey];
+  let npmCliPath;
+
+  if (typeof npmExecPath === "string") {
+    if (/(?:^|[\\/])npm-cli\.js$/iu.test(npmExecPath)) {
+      npmCliPath = resolve(npmExecPath);
+    } else if (/(?:^|[\\/])npx-cli\.js$/iu.test(npmExecPath)) {
+      npmCliPath = resolve(dirname(npmExecPath), "npm-cli.js");
+    }
+  }
+
+  return {
+    command: execPath,
+    // Windows cannot execute npm.cmd directly with shell:false.
+    prefixArgs: [
+      npmCliPath ??
+        resolve(dirname(execPath), "node_modules", "npm", "bin", "npm-cli.js"),
+    ],
+  };
+}
+
 async function copyPublishEntry({ entry, stagingDirectory }) {
   const source = join(sourceRoot, entry);
   const target = join(stagingDirectory, entry);
@@ -61,9 +94,11 @@ export async function buildNpmPackage({
     const expectedPath = join(outputDirectory, expectedFilename);
     await rm(expectedPath, { force: true });
 
+    const npmInvocation = resolveNpmInvocation();
     const { stdout } = await execFileAsync(
-      npmCommand,
+      npmInvocation.command,
       [
+        ...npmInvocation.prefixArgs,
         "pack",
         stagingDirectory,
         "--json",

package/src/services/oauth.js

@@ -214,7 +214,12 @@ export async function startOAuthLogin({
   const args = [
     "--yes",
     "--ignore-scripts",
-    "openai-oauth@2.0.0",
+    "--legacy-peer-deps=false",
+    "--include=peer",
+    "--package=openai-oauth@2.0.0",
+    "--package=zod@4.1.8",
+    "--",
+    "openai-oauth",
     "login",
     "--no-open",
     "--login-timeout-ms",
@@ -279,11 +284,8 @@ export async function startOAuthLogin({
       return;
     }
     loginOutput[stream] += output;
-    if (stream !== "stdout") {
-      return;
-    }
     try {
-      const authorizationUrl = extractAuthorizationUrl(loginOutput.stdout);
+      const authorizationUrl = extractAuthorizationUrl(loginOutput[stream]);
       if (authorizationUrl) {
         settleAuthorizationUrl(null, authorizationUrl);
       }
@@ -325,9 +327,13 @@ export async function startOAuthLogin({
   child.once("close", (code) => {
     if (!authorizationUrlSettled) {
       try {
-        const authorizationUrl = extractAuthorizationUrl(loginOutput.stdout, {
-          includeFinalLine: true,
-        });
+        const authorizationUrl =
+          extractAuthorizationUrl(loginOutput.stdout, {
+            includeFinalLine: true,
+          }) ??
+          extractAuthorizationUrl(loginOutput.stderr, {
+            includeFinalLine: true,
+          });
         if (authorizationUrl) {
           settleAuthorizationUrl(null, authorizationUrl);
         } else {