Migrate to Vite+ unified toolchain (#428)

plugins/auth-oauth2/src/grants/authorizationCode.ts

@@ -148,7 +148,7 @@ async function getCodeViaEmbeddedBrowser(
   const authorizationUrlStr = authorizationUrl.toString();
   console.log('[oauth2] Authorizing via embedded browser', authorizationUrlStr);
 
-  // biome-ignore lint/suspicious/noAsyncPromiseExecutor: Required for this pattern
+  // oxlint-disable-next-line no-async-promise-executor -- Required for this pattern
   return new Promise<string>(async (resolve, reject) => {
     let foundCode = false;
     const { close } = await ctx.window.openUrl({

plugins/auth-oauth2/src/grants/clientCredentials.ts

@@ -53,6 +53,7 @@ function buildClientAssertionJwt(params: {
     signingKey = secret;
   } else if (trimmed.startsWith('{')) {
     // Looks like JSON - treat as JWK. There is surely a better way to detect JWK vs a raw secret, but this should work in most cases.
+    // oxlint-disable-next-line no-explicit-any
     let jwk: any;
     try {
       jwk = JSON.parse(trimmed);

plugins/auth-oauth2/src/grants/implicit.ts

@@ -105,7 +105,7 @@ async function getTokenViaEmbeddedBrowser(
   const authorizationUrlStr = authorizationUrl.toString();
   console.log('[oauth2] Authorizing via embedded browser (implicit)', authorizationUrlStr);
 
-  // biome-ignore lint/suspicious/noAsyncPromiseExecutor: Required for this pattern
+  // oxlint-disable-next-line no-async-promise-executor -- Required for this pattern
   return new Promise<AccessToken>(async (resolve, reject) => {
     let foundAccessToken = false;
     const { close } = await ctx.window.openUrl({