@claudexor/cli 3.6.0 → 3.8.0

package/dist/setup-login-pty.js

@@ -1,58 +1,299 @@
-import { existsSync } from "node:fs";
-/** Refusal when this host has no way to give a login a terminal. */
-export const PTY_UNAVAILABLE = "this sign-in needs a terminal on stdin and no terminal helper (expect, script) is available here; run the CLI login instead";
-/** Refusal when the sealed command cannot be carried to the helper verbatim. */
-export const PTY_UNQUOTABLE = "this sign-in command contains characters the terminal helper cannot carry unchanged; run the CLI login instead";
+import { spawn } from "node:child_process";
+import { constants } from "node:fs";
+import { access, lstat } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+export const CONPTY_HELPER_PROTOCOL = "claudexor-conpty-helper-v1";
+export const CONPTY_HELPER_ARCHITECTURE = "x64";
+const SAFE_DETAILS = {
+    unavailable: "terminal transport helper is unavailable on this host",
+    unsupported: "terminal transport is unsupported on this host",
+    probe_failed: "terminal transport capability probe failed",
+};
 /**
- * Wrap a login command that needs a real terminal on stdin.
+ * Resolve and wrap a login command that needs a real terminal on stdin.
  *
- * Proven by experiment on this platform pair (2026-08-16): BSD `script(1)`
- * calls `tcgetattr` on its OWN stdin and dies with "Operation not supported"
- * the moment that stdin is a pipe, which is exactly how a daemon-hosted runner
- * spawns it — so macOS cannot use it. `expect(1)`, which ships with macOS,
- * allocates the pty itself and relays plain pipes, and util-linux `script`
- * accepts non-tty stdio where `expect` is usually not installed. Probing for
- * the tool rather than branching on the platform therefore lands on the one
- * that works on both, with a typed refusal when neither exists.
- *
- * The command is passed to Tcl brace-quoted; a word containing a brace or a
- * backslash is REFUSED rather than escaped, because a mis-escaped word would
- * become a different command than the manifest digest sealed.
+ * This is the single host-capability and spawn-spec owner used by setup
+ * admission, status projection, and the worker immediately before spawn. A
+ * Windows helper is never reported ready from file presence: its bounded
+ * `--probe` must create and close an HPCON and return the exact protocol marker.
  */
-export function ptyWrappedCommand(binary, args, exists = existsSync) {
-    const words = [binary, ...args];
-    const EXPECT = "/usr/bin/expect";
-    const SCRIPT = "/usr/bin/script";
-    if (exists(EXPECT)) {
-        if (words.some((word) => /[{}\\\n]/.test(word)))
-            return { refusal: PTY_UNQUOTABLE };
-        const spawnCommand = words.map((word) => `{${word}}`).join(" ");
+export async function resolvePtyWrappedCommand(childBinary, childArgs, options = {}) {
+    const platform = options.platform ?? process.platform;
+    const inspect = options.inspectExecutable ?? inspectExecutable;
+    if (platform === "win32") {
+        const helper = await resolveWindowsHelper(options.helperPath, inspect);
+        if (helper.status !== "ready")
+            return helper;
+        const probe = await (options.probeConpty ?? probeConptyHelper)(helper.path);
+        if (probe === "unsupported") {
+            return {
+                status: "unsupported",
+                backend: "windows_conpty",
+                errorCode: "terminal_transport_unsupported",
+                detail: SAFE_DETAILS.unsupported,
+            };
+        }
+        if (probe !== "ready") {
+            return {
+                status: "probe_failed",
+                backend: "windows_conpty",
+                errorCode: "terminal_transport_probe_failed",
+                detail: SAFE_DETAILS.probe_failed,
+            };
+        }
         return {
-            binary: EXPECT,
-            // `interact` relays our pipes both ways for the whole login; the vendor
-            // sees a terminal, we see its URL and can write the pasted code.
-            //
-            // Everything after it exists because `interact` returns expect's OWN
-            // status, not the vendor's: without this an authentication that the
-            // vendor REJECTED would be recorded as a successful login, and its
-            // diagnostic tail would be dropped. `wait` yields the child's exit code,
-            // a signal death is reported as one, and a spawn that never started is
-            // 127 — the same shape a shell would give.
-            args: [
-                "-c",
-                `set timeout -1; if {[catch {spawn -noecho ${spawnCommand}}]} { exit 127 }; ` +
-                    "set pid [exp_pid]; interact; catch {wait} r; " +
-                    "if {[lsearch -exact $r CHILDKILLED] >= 0} { exit 129 }; " +
-                    "catch {exec kill -TERM $pid}; exit [lindex $r 3]",
-            ],
+            status: "ready",
+            backend: "windows_conpty",
+            command: { binary: helper.path, args: ["--", childBinary, ...childArgs] },
+            helperControlStderr: true,
         };
     }
-    if (exists(SCRIPT) && process.platform !== "darwin") {
+    const words = [childBinary, ...childArgs];
+    const expectPath = options.expectPath ?? "/usr/bin/expect";
+    const scriptPath = options.scriptPath ?? "/usr/bin/script";
+    const expect = await inspect(expectPath);
+    if (expect === "regular_executable") {
+        if (!words.some((word) => /[{}\\\n]/.test(word))) {
+            const spawnCommand = words.map((word) => `{${word}}`).join(" ");
+            return {
+                status: "ready",
+                backend: "expect",
+                command: {
+                    binary: expectPath,
+                    // `interact` relays our pipes for the whole login. `wait` is
+                    // load-bearing: interact returns expect's status, not the vendor's.
+                    args: [
+                        "-c",
+                        `set timeout -1; if {[catch {spawn -noecho ${spawnCommand}}]} { exit 127 }; ` +
+                            "set pid [exp_pid]; interact; catch {wait} r; " +
+                            "if {[lsearch -exact $r CHILDKILLED] >= 0} { exit 129 }; " +
+                            "catch {exec kill -TERM $pid}; exit [lindex $r 3]",
+                    ],
+                },
+                helperControlStderr: false,
+            };
+        }
+        // Linux can still carry this exact argv through util-linux script. macOS
+        // script requires its own stdin to be a TTY and is not a daemon backend.
+        if (platform === "darwin") {
+            return {
+                status: "unsupported",
+                backend: "expect",
+                errorCode: "terminal_transport_unsupported",
+                detail: SAFE_DETAILS.unsupported,
+            };
+        }
+    }
+    if (platform === "linux" && (await inspect(scriptPath)) === "regular_executable") {
         const quoted = words.map((word) => `'${word.replaceAll("'", `'"'"'`)}'`).join(" ");
-        // `-e` for the same reason: without it script reports its own status and
-        // a rejected login reads as a successful one.
-        return { binary: SCRIPT, args: ["-e", "-q", "-c", quoted, "/dev/null"] };
+        return {
+            status: "ready",
+            backend: "script",
+            command: { binary: scriptPath, args: ["-e", "-q", "-c", quoted, "/dev/null"] },
+            helperControlStderr: false,
+        };
+    }
+    return {
+        status: "unavailable",
+        backend: null,
+        errorCode: "terminal_transport_unavailable",
+        detail: SAFE_DETAILS.unavailable,
+    };
+}
+async function resolveWindowsHelper(explicitPath, inspect) {
+    const candidates = explicitPath
+        ? [explicitPath]
+        : [
+            fileURLToPath(new URL("./native/claudexor-conpty-helper.exe", import.meta.url)),
+            fileURLToPath(new URL("../../core/dist/native/claudexor-conpty-helper.exe", import.meta.url)),
+        ];
+    for (const candidate of candidates) {
+        const result = await inspect(candidate);
+        if (result === "missing")
+            continue;
+        if (result === "regular_executable")
+            return { status: "ready", path: candidate };
+        // A present non-regular adjacent entry is a fail-closed unavailable
+        // backend, never permission to search a less-authoritative fallback.
+        break;
+    }
+    return {
+        status: "unavailable",
+        backend: "windows_conpty",
+        errorCode: "terminal_transport_unavailable",
+        detail: SAFE_DETAILS.unavailable,
+    };
+}
+async function inspectExecutable(path) {
+    try {
+        const info = await lstat(path);
+        if (!info.isFile() || info.isSymbolicLink())
+            return "invalid";
+        await access(path, constants.X_OK);
+        return "regular_executable";
     }
-    return { refusal: PTY_UNAVAILABLE };
+    catch (error) {
+        return error.code === "ENOENT" ? "missing" : "invalid";
+    }
+}
+async function probeConptyHelper(path) {
+    return await new Promise((resolveProbe) => {
+        const cap = 4_096;
+        const stdout = [];
+        const stderr = [];
+        let stdoutBytes = 0;
+        let stderrBytes = 0;
+        let settled = false;
+        let timer;
+        const settle = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            if (timer)
+                clearTimeout(timer);
+            resolveProbe(result);
+        };
+        let child;
+        try {
+            child = spawn(path, ["--probe"], {
+                shell: false,
+                windowsHide: true,
+                detached: false,
+                stdio: ["ignore", "pipe", "pipe"],
+            });
+        }
+        catch {
+            settle("failed");
+            return;
+        }
+        const overflow = () => {
+            try {
+                child.kill();
+            }
+            catch {
+                /* best effort */
+            }
+            settle("failed");
+        };
+        child.stdout?.on("data", (chunk) => {
+            stdoutBytes += chunk.length;
+            if (stdoutBytes > cap)
+                return overflow();
+            stdout.push(Buffer.from(chunk));
+        });
+        child.stderr?.on("data", (chunk) => {
+            stderrBytes += chunk.length;
+            if (stderrBytes > cap)
+                return overflow();
+            stderr.push(Buffer.from(chunk));
+        });
+        child.once("error", () => settle("failed"));
+        child.once("close", (code, signal) => {
+            if (settled)
+                return;
+            if (code === 3 && signal === null && isExactUnsupportedProbeFrame(stdoutBytes, stderr)) {
+                return settle("unsupported");
+            }
+            const marker = Buffer.concat(stdout);
+            settle(code === 0 &&
+                signal === null &&
+                stderrBytes === 0 &&
+                marker.equals(Buffer.from(`${CONPTY_HELPER_PROTOCOL}\t${CONPTY_HELPER_ARCHITECTURE}\n`, "ascii"))
+                ? "ready"
+                : "failed");
+        });
+        timer = setTimeout(() => overflow(), 5_000);
+        timer.unref?.();
+    });
+}
+/** Exit 3 is authoritative only when the owned helper reports the one API-load
+ * unsupported frame it can emit before creating an HPCON. No raw phase or
+ * Win32 error code crosses the resolver boundary. */
+function isExactUnsupportedProbeFrame(stdoutBytes, stderr) {
+    if (stdoutBytes !== 0)
+        return false;
+    const frame = Buffer.concat(stderr);
+    const prefix = Buffer.from(`${CONPTY_HELPER_PROTOCOL}\terror\t1\t`, "ascii");
+    if (frame.length < prefix.length + 2 ||
+        !frame.subarray(0, prefix.length).equals(prefix) ||
+        frame[frame.length - 1] !== 0x0a) {
+        return false;
+    }
+    const codeBytes = frame.subarray(prefix.length, frame.length - 1);
+    if (codeBytes.length === 0 ||
+        (codeBytes.length > 1 && codeBytes[0] === 0x30) ||
+        codeBytes.some((byte) => byte < 0x30 || byte > 0x39)) {
+        return false;
+    }
+    const code = Number(codeBytes.toString("ascii"));
+    return Number.isSafeInteger(code) && code >= 0 && code <= 0xffff_ffff;
+}
+/** Bounded parser for helper-only stderr. It never returns raw bytes. */
+export function createConptyControlParser(limit = 4_096) {
+    const chunks = [];
+    let bytes = 0;
+    let overflow = false;
+    return {
+        push(chunk) {
+            if (overflow)
+                return;
+            bytes += chunk.length;
+            if (bytes > limit) {
+                overflow = true;
+                chunks.length = 0;
+                return;
+            }
+            chunks.push(Buffer.from(chunk));
+        },
+        finish() {
+            const state = {
+                started: false,
+                childPid: null,
+                error: null,
+                malformed: overflow,
+            };
+            if (overflow)
+                return state;
+            const text = Buffer.concat(chunks).toString("ascii");
+            for (const line of text.split(/\r?\n/).filter(Boolean)) {
+                const fields = line.split("\t");
+                if (fields[0] !== CONPTY_HELPER_PROTOCOL) {
+                    state.malformed = true;
+                    continue;
+                }
+                if (fields[1] === "started" && fields.length === 3) {
+                    const pid = Number(fields[2]);
+                    if (state.started || !Number.isSafeInteger(pid) || pid <= 0)
+                        state.malformed = true;
+                    else {
+                        state.started = true;
+                        state.childPid = pid;
+                    }
+                    continue;
+                }
+                if (fields[1] === "error" && fields.length === 4) {
+                    const phase = Number(fields[2]);
+                    const code = Number(fields[3]);
+                    if (state.error !== null ||
+                        !Number.isSafeInteger(phase) ||
+                        phase < 1 ||
+                        phase > 10 ||
+                        !Number.isSafeInteger(code) ||
+                        code < 0 ||
+                        code > 0xffff_ffff) {
+                        state.malformed = true;
+                    }
+                    else {
+                        state.error = { phase, code };
+                    }
+                    continue;
+                }
+                state.malformed = true;
+            }
+            if (!state.started && state.error === null)
+                state.malformed = true;
+            return state;
+        },
+    };
 }
 //# sourceMappingURL=setup-login-pty.js.map

package/dist/setup-login-pty.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup-login-pty.js","sourceRoot":"","sources":["../src/setup-login-pty.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,oEAAoE;AACpE,MAAM,CAAC,MAAM,eAAe,GAC1B,6HAA6H,CAAC;AAEhI,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GACzB,gHAAgH,CAAC;AAEnH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,IAAc,EACd,MAAM,GAA8B,UAAU;IAE9C,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,iBAAiB,CAAC;IACjC,MAAM,MAAM,GAAG,iBAAiB,CAAC;IACjC,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;QACpF,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO;YACL,MAAM,EAAE,MAAM;YACd,wEAAwE;YACxE,iEAAiE;YACjE,EAAE;YACF,qEAAqE;YACrE,oEAAoE;YACpE,mEAAmE;YACnE,yEAAyE;YACzE,uEAAuE;YACvE,2CAA2C;YAC3C,IAAI,EAAE;gBACJ,IAAI;gBACJ,6CAA6C,YAAY,oBAAoB;oBAC3E,+CAA+C;oBAC/C,0DAA0D;oBAC1D,kDAAkD;aACrD;SACF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnF,yEAAyE;QACzE,8CAA8C;QAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;AACtC,CAAC"}
+{"version":3,"file":"setup-login-pty.js","sourceRoot":"","sources":["../src/setup-login-pty.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,MAAM,CAAC,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;AACnE,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC;AAiDhD,MAAM,YAAY,GAAG;IACnB,WAAW,EAAE,uDAAuD;IACpE,WAAW,EAAE,gDAAgD;IAC7D,YAAY,EAAE,4CAA4C;CAClD,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,WAAmB,EACnB,SAA4B,EAC5B,OAAO,GAAqC,EAAE;IAE9C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,IAAI,iBAAiB,CAAC;IAE/D,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACvE,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO,MAAM,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,iBAAiB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5E,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;YAC5B,OAAO;gBACL,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,gBAAgB;gBACzB,SAAS,EAAE,gCAAgC;gBAC3C,MAAM,EAAE,YAAY,CAAC,WAAW;aACjC,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACtB,OAAO;gBACL,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,gBAAgB;gBACzB,SAAS,EAAE,iCAAiC;gBAC5C,MAAM,EAAE,YAAY,CAAC,YAAY;aAClC,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,gBAAgB;YACzB,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC,EAAE;YACzE,mBAAmB,EAAE,IAAI;SAC1B,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,GAAG,SAAS,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC;IAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACjD,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChE,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,QAAQ;gBACjB,OAAO,EAAE;oBACP,MAAM,EAAE,UAAU;oBAClB,6DAA6D;oBAC7D,oEAAoE;oBACpE,IAAI,EAAE;wBACJ,IAAI;wBACJ,6CAA6C,YAAY,oBAAoB;4BAC3E,+CAA+C;4BAC/C,0DAA0D;4BAC1D,kDAAkD;qBACrD;iBACF;gBACD,mBAAmB,EAAE,KAAK;aAC3B,CAAC;QACJ,CAAC;QACD,yEAAyE;QACzE,yEAAyE;QACzE,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO;gBACL,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,QAAQ;gBACjB,SAAS,EAAE,gCAAgC;gBAC3C,MAAM,EAAE,YAAY,CAAC,WAAW;aACjC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,IAAI,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,oBAAoB,EAAE,CAAC;QACjF,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnF,OAAO;YACL,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE;YAC9E,mBAAmB,EAAE,KAAK;SAC3B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,gCAAgC;QAC3C,MAAM,EAAE,YAAY,CAAC,WAAW;KACjC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,YAAgC,EAChC,OAAwD;IAKxD,MAAM,UAAU,GAAG,YAAY;QAC7B,CAAC,CAAC,CAAC,YAAY,CAAC;QAChB,CAAC,CAAC;YACE,aAAa,CAAC,IAAI,GAAG,CAAC,sCAAsC,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/E,aAAa,CACX,IAAI,GAAG,CAAC,oDAAoD,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAC/E;SACF,CAAC;IACN,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QACnC,IAAI,MAAM,KAAK,oBAAoB;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACjF,oEAAoE;QACpE,qEAAqE;QACrE,MAAM;IACR,CAAC;IACD,OAAO;QACL,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,gBAAgB;QACzB,SAAS,EAAE,gCAAgC;QAC3C,MAAM,EAAE,YAAY,CAAC,WAAW;KACjC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,OAAO,SAAS,CAAC;QAC9D,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,OAAO,MAAM,IAAI,OAAO,CAAoB,CAAC,YAAY,EAAE,EAAE;QAC3D,MAAM,GAAG,GAAG,KAAK,CAAC;QAClB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,KAAiC,CAAC;QACtC,MAAM,MAAM,GAAG,CAAC,MAAyB,EAAE,EAAE;YAC3C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC/B,YAAY,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC;QACF,IAAI,KAA+B,CAAC;QACpC,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE;gBAC/B,KAAK,EAAE,KAAK;gBACZ,WAAW,EAAE,IAAI;gBACjB,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,EAAE;YACpB,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;YACD,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnB,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;YAC5B,IAAI,WAAW,GAAG,GAAG;gBAAE,OAAO,QAAQ,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;YAC5B,IAAI,WAAW,GAAG,GAAG;gBAAE,OAAO,QAAQ,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,IAAI,KAAK,CAAC,IAAI,MAAM,KAAK,IAAI,IAAI,4BAA4B,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC;gBACvF,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;YAC/B,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,CACJ,IAAI,KAAK,CAAC;gBACR,MAAM,KAAK,IAAI;gBACf,WAAW,KAAK,CAAC;gBACjB,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,IAAI,CAAC,GAAG,sBAAsB,KAAK,0BAA0B,IAAI,EAAE,OAAO,CAAC,CACnF;gBACD,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,QAAQ,CACb,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5C,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;qDAEqD;AACrD,SAAS,4BAA4B,CAAC,WAAmB,EAAE,MAAyB;IAClF,IAAI,WAAW,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,sBAAsB,cAAc,EAAE,OAAO,CAAC,CAAC;IAC7E,IACE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC;QAChC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;QAChD,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,IAAI,EAChC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClE,IACE,SAAS,CAAC,MAAM,KAAK,CAAC;QACtB,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QAC/C,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,IAAI,CAAC,EACpD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,WAAW,CAAC;AACxE,CAAC;AASD,yEAAyE;AACzE,MAAM,UAAU,yBAAyB,CAAC,KAAK,GAAG,KAAK;IAIrD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO;QACL,IAAI,CAAC,KAAK;YACR,IAAI,QAAQ;gBAAE,OAAO;YACrB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;gBAClB,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;gBAClB,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,MAAM;YACJ,MAAM,KAAK,GAAuB;gBAChC,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,IAAI;gBACX,SAAS,EAAE,QAAQ;aACpB,CAAC;YACF,IAAI,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACrD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,sBAAsB,EAAE,CAAC;oBACzC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;oBACvB,SAAS;gBACX,CAAC;gBACD,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACnD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC9B,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;wBAAE,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;yBAC/E,CAAC;wBACJ,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;wBACrB,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC;oBACvB,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACjD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC/B,IACE,KAAK,CAAC,KAAK,KAAK,IAAI;wBACpB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;wBAC5B,KAAK,GAAG,CAAC;wBACT,KAAK,GAAG,EAAE;wBACV,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC;wBAC3B,IAAI,GAAG,CAAC;wBACR,IAAI,GAAG,WAAW,EAClB,CAAC;wBACD,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;oBACzB,CAAC;yBAAM,CAAC;wBACN,KAAK,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;oBAChC,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;YACzB,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI;gBAAE,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;YACnE,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/setup-login-runner-support.d.ts

@@ -0,0 +1,12 @@
+import type { ChildProcess } from "node:child_process";
+import { type SetupLoginManifest, type SetupLoginRunnerResult } from "./setup-login-protocol.js";
+export declare function persistRunnerResult(manifest: SetupLoginManifest, result: Omit<SetupLoginRunnerResult, "version" | "jobId" | "executionId" | "commandDigest" | "manifestDigest">): void;
+export declare function persistRunnerFailure(manifest: SetupLoginManifest, now: () => Date, permitIssuedAt: string | null, errorCode: NonNullable<SetupLoginRunnerResult["errorCode"]>, outputTail?: string): void;
+export declare function persistRunnerCommandFailure(manifest: SetupLoginManifest, now: () => Date, permitIssuedAt: string | null, errorCode: NonNullable<SetupLoginRunnerResult["errorCode"]>, commandStarted: boolean, outputTail?: string): void;
+export declare function waitForRunnerExit(child: ChildProcess): Promise<{
+    code: number | null;
+    signal: NodeJS.Signals | null;
+}>;
+/** The bootstrap itself never needs model/provider credentials. */
+export declare function runnerBootstrapEnv(source?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+//# sourceMappingURL=setup-login-runner-support.d.ts.map

package/dist/setup-login-runner-support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-login-runner-support.d.ts","sourceRoot":"","sources":["../src/setup-login-runner-support.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC5B,MAAM,2BAA2B,CAAC;AAEnC,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,kBAAkB,EAC5B,MAAM,EAAE,IAAI,CACV,sBAAsB,EACtB,SAAS,GAAG,OAAO,GAAG,aAAa,GAAG,eAAe,GAAG,gBAAgB,CACzE,GACA,IAAI,CASN;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,kBAAkB,EAC5B,GAAG,EAAE,MAAM,IAAI,EACf,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,SAAS,EAAE,WAAW,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,EAC3D,UAAU,CAAC,EAAE,MAAM,GAClB,IAAI,CAEN;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,kBAAkB,EAC5B,GAAG,EAAE,MAAM,IAAI,EACf,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,SAAS,EAAE,WAAW,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,EAC3D,cAAc,EAAE,OAAO,EACvB,UAAU,CAAC,EAAE,MAAM,GAClB,IAAI,CAUN;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAA;CAAE,CAAC,CAKjE;AAED,mEAAmE;AACnE,wBAAgB,kBAAkB,CAAC,MAAM,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CA8B7F"}

package/dist/setup-login-runner-support.js

@@ -0,0 +1,65 @@
+import { WINDOWS_RUNTIME_ENV_KEYS, pickAllowlistedEnv } from "@claudexor/core";
+import { SETUP_LOGIN_PROTOCOL_VERSION, atomicPrivateJson, } from "./setup-login-protocol.js";
+export function persistRunnerResult(manifest, result) {
+    atomicPrivateJson(manifest.resultPath, {
+        version: SETUP_LOGIN_PROTOCOL_VERSION,
+        jobId: manifest.jobId,
+        executionId: manifest.executionId,
+        commandDigest: manifest.commandDigest,
+        manifestDigest: manifest.manifestDigest,
+        ...result,
+    });
+}
+export function persistRunnerFailure(manifest, now, permitIssuedAt, errorCode, outputTail) {
+    persistRunnerCommandFailure(manifest, now, permitIssuedAt, errorCode, false, outputTail);
+}
+export function persistRunnerCommandFailure(manifest, now, permitIssuedAt, errorCode, commandStarted, outputTail) {
+    persistRunnerResult(manifest, {
+        permitIssuedAt,
+        commandStarted,
+        errorCode,
+        exitCode: null,
+        signal: null,
+        finishedAt: now().toISOString(),
+        ...(outputTail === undefined ? {} : { outputTail }),
+    });
+}
+export function waitForRunnerExit(child) {
+    return new Promise((resolveExit, reject) => {
+        child.once("error", reject);
+        child.once("close", (code, signal) => resolveExit({ code, signal }));
+    });
+}
+/** The bootstrap itself never needs model/provider credentials. */
+export function runnerBootstrapEnv(source = process.env) {
+    return pickAllowlistedEnv(source, [
+        "PATH",
+        "HOME",
+        "TMPDIR",
+        "LANG",
+        "LC_ALL",
+        "LC_CTYPE",
+        "TERM",
+        "COLORTERM",
+        "NO_COLOR",
+        "SHELL",
+        "USER",
+        "LOGNAME",
+        "CLAUDEXOR_CONFIG_DIR",
+        "CLAUDEXOR_CODEX_NATIVE_HOME",
+        "CLAUDEXOR_CLAUDE_NATIVE_DIR",
+        "HTTP_PROXY",
+        "HTTPS_PROXY",
+        "NO_PROXY",
+        "ALL_PROXY",
+        "http_proxy",
+        "https_proxy",
+        "no_proxy",
+        "all_proxy",
+        "SSL_CERT_FILE",
+        "SSL_CERT_DIR",
+        "NODE_EXTRA_CA_CERTS",
+        ...WINDOWS_RUNTIME_ENV_KEYS,
+    ]);
+}
+//# sourceMappingURL=setup-login-runner-support.js.map

package/dist/setup-login-runner-support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-login-runner-support.js","sourceRoot":"","sources":["../src/setup-login-runner-support.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EACL,4BAA4B,EAC5B,iBAAiB,GAGlB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,UAAU,mBAAmB,CACjC,QAA4B,EAC5B,MAGC;IAED,iBAAiB,CAAC,QAAQ,CAAC,UAAU,EAAE;QACrC,OAAO,EAAE,4BAA4B;QACrC,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,GAAG,MAAM;KACuB,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAA4B,EAC5B,GAAe,EACf,cAA6B,EAC7B,SAA2D,EAC3D,UAAmB;IAEnB,2BAA2B,CAAC,QAAQ,EAAE,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAA4B,EAC5B,GAAe,EACf,cAA6B,EAC7B,SAA2D,EAC3D,cAAuB,EACvB,UAAmB;IAEnB,mBAAmB,CAAC,QAAQ,EAAE;QAC5B,cAAc;QACd,cAAc;QACd,SAAS;QACT,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;QAC/B,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;KACpD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,KAAmB;IAEnB,OAAO,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE;QACzC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,kBAAkB,CAAC,MAAM,GAAsB,OAAO,CAAC,GAAG;IACxE,OAAO,kBAAkB,CAAC,MAAM,EAAE;QAChC,MAAM;QACN,MAAM;QACN,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,UAAU;QACV,MAAM;QACN,WAAW;QACX,UAAU;QACV,OAAO;QACP,MAAM;QACN,SAAS;QACT,sBAAsB;QACtB,6BAA6B;QAC7B,6BAA6B;QAC7B,YAAY;QACZ,aAAa;QACb,UAAU;QACV,WAAW;QACX,YAAY;QACZ,aAAa;QACb,UAAU;QACV,WAAW;QACX,eAAe;QACf,cAAc;QACd,qBAAqB;QACrB,GAAG,wBAAwB;KAC5B,CAAC,CAAC;AACL,CAAC"}

package/dist/setup-login-runner.d.ts

@@ -2,6 +2,7 @@
 import { spawn } from "node:child_process";
 import { processGroupServiceWithWindowsSupport } from "@claudexor/core";
 export { terminateAppServerChild } from "./setup-login-child-lifecycle.js";
+import { resolvePtyWrappedCommand } from "./setup-login-pty.js";
 export { createOAuthUrlDetector, extractOAuthUrl } from "./setup-login-url.js";
 export interface SetupLoginRunnerOptions {
     now?: () => Date;
@@ -10,6 +11,7 @@ export interface SetupLoginRunnerOptions {
     processGroupService?: ReturnType<typeof processGroupServiceWithWindowsSupport>;
     selfPid?: number;
     runnerPath?: string;
+    resolvePtyCommand?: typeof resolvePtyWrappedCommand;
 }
 /**
  * Terminal-visible bootstrap. It creates a detached worker process group and

package/dist/setup-login-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup-login-runner.d.ts","sourceRoot":"","sources":["../src/setup-login-runner.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,KAAK,EAAwC,MAAM,oBAAoB,CAAC;AAKjF,OAAO,EAGL,qCAAqC,EACtC,MAAM,iBAAiB,CAAC;AAOzB,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAI3E,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAc/E,MAAM,WAAW,uBAAuB;IACtC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,YAAY,CAAC,EAAE,OAAO,KAAK,CAAC;IAC5B,mBAAmB,CAAC,EAAE,UAAU,CAAC,OAAO,qCAAqC,CAAC,CAAC;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,MAAM,CAAC,CAcjB;AAED,gFAAgF;AAChF,wBAAsB,mBAAmB,CACvC,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,MAAM,CAAC,CA8KjB"}
+{"version":3,"file":"setup-login-runner.d.ts","sourceRoot":"","sources":["../src/setup-login-runner.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,KAAK,EAAwC,MAAM,oBAAoB,CAAC;AAKjF,OAAO,EAAE,qCAAqC,EAAE,MAAM,iBAAiB,CAAC;AAOxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAE3E,OAAO,EAEL,wBAAwB,EAEzB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAoB/E,MAAM,WAAW,uBAAuB;IACtC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,YAAY,CAAC,EAAE,OAAO,KAAK,CAAC;IAC5B,mBAAmB,CAAC,EAAE,UAAU,CAAC,OAAO,qCAAqC,CAAC,CAAC;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,OAAO,wBAAwB,CAAC;CACrD;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,MAAM,CAAC,CAgBjB;AAED,gFAAgF;AAChF,wBAAsB,mBAAmB,CACvC,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,MAAM,CAAC,CAkPjB"}