@runuai/host 0.9.111 → 0.9.112

package/lib/engine-login.ts

@@ -27,6 +27,7 @@ import { homedir, tmpdir } from "node:os";
 import { basename, dirname, join, resolve } from "node:path";
 
 import {
+  ENGINE_LOGIN_KINDS,
   HOST_ACCOUNT_SCOPE,
   isEngineAccountLabel,
   isEngineAccountScope,
@@ -808,7 +809,14 @@ export class EngineLoginManager {
             "The login container stopped unexpectedly.",
           ),
       );
-    } catch {
+    } catch (error) {
+      // The operator sees a one-line failure; the journal must say WHY (the
+      // 2026-09-09 sweep refusal was silent for six hours).
+      console.warn(
+        `[engine-login] ${operation.engine} login could not start: ${
+          error instanceof Error ? error.message : String(error)
+        }`,
+      );
       if (processHandle && !operation.process) {
         await this.stopDetachedProcess(processHandle);
       }
@@ -2260,8 +2268,15 @@ export function codexCallbackReplayDockerRequest(
   };
 }
 
-function isEngineLoginContainerName(value: string): boolean {
-  return /^uai-login-(?:claude|codex)-[0-9a-f]{16}$/.test(value);
+const ENGINE_LOGIN_CONTAINER_NAME = new RegExp(
+  `^uai-login-(?:${ENGINE_LOGIN_KINDS.join("|")})-[0-9a-f]{16}$`,
+);
+
+/** `uai-login-<kind>-<16 hex>` for every login kind. The sweep, the log
+ *  follower, the remover, and the codex callback replay all gate on this, so
+ *  a kind missing here strands its containers AND blocks every later login. */
+export function isEngineLoginContainerName(value: string): boolean {
+  return ENGINE_LOGIN_CONTAINER_NAME.test(value);
 }
 
 /** The CLI that owns login containers (ADR-106): the ambient docker client,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runuai/host",
-  "version": "0.9.111",
+  "version": "0.9.112",
   "description": "Uai host — runs ephemeral AI tasks in containers on a machine you control.",
   "license": "MIT",
   "author": "Uai Tech <team@runuai.com>",

package/src/protocol.ts

@@ -332,7 +332,12 @@ export type HostLogsEndFrame =
 /** Engines with a REMOTE sign-in (login container driven from the cloud).
  * grok since host 0.9.105: `grok login --device-auth`, same device-code shape
  * as codex. Kimi/OpenCode remain host-terminal (or key) for now. */
-export type EngineLoginKind = "claude" | "codex" | "grok";
+/** Every engine with a remote sign-in flow. ONE list: the login container
+ *  name pattern, the wire guard, and the cloud validator all derive from it
+ *  (a kind added to the type alone left grok containers unrecognized by the
+ *  stale-container sweep, which then refused EVERY login — live 2026-09-09). */
+export const ENGINE_LOGIN_KINDS = ["claude", "codex", "grok"] as const;
+export type EngineLoginKind = (typeof ENGINE_LOGIN_KINDS)[number];
 export type EngineLoginPhase =
   | "starting"
   | "authorize"
@@ -674,7 +679,7 @@ function isBoundedMessage(value: unknown): value is string {
 }
 
 function isEngineLoginKind(value: unknown): value is EngineLoginKind {
-  return value === "claude" || value === "codex" || value === "grok";
+  return (ENGINE_LOGIN_KINDS as readonly unknown[]).includes(value);
 }
 
 function isEngineLoginErrorCode(value: unknown): value is EngineLoginErrorCode {