chore(chrome-extension): Add postbuild script to verify no RHC

.changeset/sixty-eggs-hug.md

@@ -0,0 +1,2 @@
+---
+---

packages/chrome-extension/package.json

@@ -33,6 +33,7 @@
   ],
   "scripts": {
     "build": "tsup",
+    "postbuild": "node ../../scripts/search-for-rhc.mjs dist",
     "build:declarations": "tsc -p tsconfig.declarations.json",
     "clean": "rimraf ./dist",
     "dev": "tsup --watch",

scripts/search-for-rhc.mjs

@@ -0,0 +1,23 @@
+#!/usr/bin/env zx
+
+/**
+ * The purpose of this script is to search for RHC (remotely hosted code) in the build outputs of a package.
+ * For example, @clerk/chrome-extension should not have any RHC in it, this includes unused functions that include remote URLs.
+ */
+
+import { $, argv } from 'zx';
+
+async function run() {
+  const buildFolder = argv._[0];
+  console.log(`🔍 Inspecting folder: ${buildFolder}`);
+  const flags = ['--recursive', '--quiet', '--include=*.js', '--include=*.mjs'];
+
+  // Leveraging https://google.github.io/zx/process-promise#nothrow to avoid throwing an error if the command fails
+  if ((await $`grep ${flags} 'https://\${scriptHost}/npm/@clerk/clerk-js' ${buildFolder}`.exitCode) === 0) {
+    throw new Error('Found RHC in build output');
+  } else {
+    console.log('✅ No RHC found in build output');
+  }
+}
+
+run();