From 851321dd8e607c4cd6a7524c2c2723585df2dd88 Mon Sep 17 00:00:00 2001 From: Sawyer Cutler Date: Sun, 27 Sep 2026 21:14:57 -0700 Subject: [PATCH] chore(deps): pin Codex provider to published npm 0.1.1 --- bun.lock | 6 ++---- package.json | 2 +- tests/unit/codex-auth.test.ts | 11 +++++++++++ 3 files changed, 14 insertions(+), 5 deletions(-) diff --git a/bun.lock b/bun.lock index f0d63e190..6bf9f830c 100644 --- a/bun.lock +++ b/bun.lock @@ -6,7 +6,7 @@ "name": "@corbits/code", "dependencies": { "@corbits/agent-intern": "workspace:*", - "@corbits/codex-provider": "github:corbitsdev/corbits-codex-provider", + "@corbits/codex-provider": "0.1.1", "@corbits/oauth-core": "0.2.0", "@corbits/openai-responses": "github:corbitsdev/corbits-openai-responses", "@corbits/xai-provider": "github:corbitsdev/corbits-xai-provider", @@ -249,7 +249,7 @@ "@corbits/agent-intern": ["@corbits/agent-intern@workspace:agents/intern"], - "@corbits/codex-provider": ["@corbits/codex-provider@github:corbitsdev/corbits-codex-provider#bf07850", { "dependencies": { "@corbits/oauth-core": "github:corbitsdev/corbits-oauth-core", "@corbits/openai-responses": "github:corbitsdev/corbits-openai-responses", "arktype": "2.2.3" }, "peerDependencies": { "@intx/inference": ">=0.3.0", "@intx/types": ">=0.3.0" } }, "corbitsdev-corbits-codex-provider-bf07850", "sha512-5dVtVXd/CjWcXp4AitJAhcxky5mjhAq6G77q0t0iWs1bnms54VDLDnjN9oSqPJiD3nEiXmAoRbxiH1CxJkwTrA=="], + "@corbits/codex-provider": ["@corbits/codex-provider@0.1.1", "", { "dependencies": { "arktype": "^2.2.3" }, "peerDependencies": { "@corbits/oauth-core": "^0.2.0", "@corbits/openai-responses": "^0.2.0", "@intx/inference": "^0.4.0", "@intx/types": "^0.4.0" } }, "sha512-MiGA5djQNtRpHqLvJAGdFgHEbUl808AbveMPwt7krLjOH0i20DyElpitHPZF3ltCXkFMhcKIoyTAEpRDqeB/Rw=="], "@corbits/first-class-providers": ["@corbits/first-class-providers@workspace:packages/first-class-providers"], @@ -949,8 +949,6 @@ "zod-to-json-schema": ["zod-to-json-schema@3.25.2", "", { "peerDependencies": { "zod": "^3.25.28 || ^4" } }, "sha512-O/PgfnpT1xKSDeQYSCfRI5Gy3hPf91mKVDuYLUHZJMiDFptvP41MSnWofm8dnCm0256ZNfZIM7DSzuSMAFnjHA=="], - "@corbits/codex-provider/@corbits/oauth-core": ["@corbits/oauth-core@github:corbitsdev/corbits-oauth-core#e1e69e6", { "dependencies": { "arktype": "2.2.3" } }, "corbitsdev-corbits-oauth-core-e1e69e6", "sha512-wUrD73iVyk/Dtb4yRn3hCh6N8syfsEvAkRz4XYqT0FIB3sYDSMYEWHcDMJx9nq64my/HBOeN1J6PHIOtpjhtPg=="], - "@corbits/xai-provider/@corbits/oauth-core": ["@corbits/oauth-core@github:corbitsdev/corbits-oauth-core#e1e69e6", { "dependencies": { "arktype": "2.2.3" } }, "corbitsdev-corbits-oauth-core-e1e69e6", "sha512-wUrD73iVyk/Dtb4yRn3hCh6N8syfsEvAkRz4XYqT0FIB3sYDSMYEWHcDMJx9nq64my/HBOeN1J6PHIOtpjhtPg=="], "@intx/db/@intx/crypto": ["@intx/crypto@0.4.0", "", { "dependencies": { "@intx/types": "0.4.0" } }, "sha512-4/qWypC90GevbV9u1i/93tn46jsXhj8wE1Pn+awg8/ECpwhHnhPLT5Uy423Arr9eGmRmF6HiMyXcEgH1Z9/Rkw=="], diff --git a/package.json b/package.json index 92f0b8bed..ad75e9939 100644 --- a/package.json +++ b/package.json @@ -87,7 +87,7 @@ }, "dependencies": { "@corbits/agent-intern": "workspace:*", - "@corbits/codex-provider": "github:corbitsdev/corbits-codex-provider", + "@corbits/codex-provider": "0.1.1", "@corbits/oauth-core": "0.2.0", "@corbits/openai-responses": "github:corbitsdev/corbits-openai-responses", "@corbits/xai-provider": "github:corbitsdev/corbits-xai-provider", diff --git a/tests/unit/codex-auth.test.ts b/tests/unit/codex-auth.test.ts index e73ad6ae5..942dad407 100644 --- a/tests/unit/codex-auth.test.ts +++ b/tests/unit/codex-auth.test.ts @@ -157,6 +157,17 @@ describe("accountIdFromIdToken", () => { expect(accountIdFromIdToken("not-a-jwt")).toBeUndefined(); expect(accountIdFromIdToken(makeIdToken({ sub: "x" }))).toBeUndefined(); }); + + test("omits account ids that would split a chatgpt-account-id header", () => { + expect( + accountIdFromIdToken( + makeIdToken({ chatgpt_account_id: "acct\r\ninjected" }), + ), + ).toBeUndefined(); + expect( + accountIdFromIdToken(makeIdToken({ chatgpt_account_id: "acct\0nul" })), + ).toBeUndefined(); + }); }); describe("Codex profile store", () => {