@runuai/host 0.9.51 → 0.9.53

package/lib/engine-login.ts

@@ -190,6 +190,10 @@ interface LoginOperation {
   /** ADR-116: when set, the captured credential lands in a labeled extra
    * account instead of the default slot. */
   accountLabel: string | null;
+  /** Diagnosis breadcrumb: has ANY output arrived after the one-time code
+   * was written? Distinguishes "stdin never delivered" from "CLI answered
+   * and we ignored it" without reading the PTY transcript. */
+  postInputOutputSeen: boolean;
 }
 
 const defaultTimers: EngineLoginTimers = {
@@ -391,6 +395,7 @@ export class EngineLoginManager {
       pendingInput: null,
       callbackTarget: null,
       accountLabel: label ?? null,
+      postInputOutputSeen: false,
     };
     this.operations.set(opId, operation);
     this.engineOperations.set(engine, operation);
@@ -664,6 +669,29 @@ export class EngineLoginManager {
     );
 
     if (operation.engine === "claude") {
+      if (operation.inputUsed && !operation.postInputOutputSeen) {
+        operation.postInputOutputSeen = true;
+        console.log(
+          `[engine-login] output resumed after input for ${operation.opId} — the code reached the login TUI`,
+        );
+      }
+      // The TUI answers a bad/expired/mismatched code with an error AND an
+      // open prompt — no exit, no token. Detect it and fail visibly instead
+      // of the silent wait-for-timeout that hid the 2026-08-20 hangs.
+      if (operation.inputUsed && !operation.finishing) {
+        const cliError = detectClaudeCliError(operation.outputTail);
+        if (cliError) {
+          console.warn(
+            `[engine-login] login CLI rejected the code for ${operation.opId}: ${cliError}`,
+          );
+          void this.fail(
+            operation,
+            "invalid_input",
+            `The sign-in CLI rejected the code: ${cliError} Make sure the code comes from THIS attempt's authorization page, then retry.`,
+          );
+          return;
+        }
+      }
       // Before the one-time input is consumed, token-shaped output could only
       // be an authorization URL/detail or hostile terminal content. This also
       // prevents an input echo from becoming the credential boundary.
@@ -1047,6 +1075,27 @@ export function createEngineLoginManager(
   return new EngineLoginManager(options);
 }
 
+/** Detect the TUI's post-input rejection ("OAuth error: Invalid code…",
+ * expired codes, …) in the sanitized output. ANSI stripping can eat spaces
+ * ("Invalidcode"), so the patterns tolerate missing whitespace. Exported for
+ * tests. */
+export function detectClaudeCliError(tail: string): string | null {
+  const lines = tail
+    .replace(/\u001b\[[0-9;?]*[ -\/]*[@-~]/g, "")
+    .replace(/[\u0000-\u0009\u000b-\u001f\u007f]/g, "")
+    .split("\n")
+    .map((line) => line.trim())
+    .filter(Boolean);
+  const match = lines.find((line) =>
+    /oauth\s*error|invalid\s*cod|code\s*.{0,12}expired|authentication\s*failed/i.test(
+      line,
+    ),
+  );
+  if (!match) return null;
+  if (/sk-ant-|Bearer |[A-Za-z0-9_-]{40,}/.test(match)) return null;
+  return match.slice(0, 200);
+}
+
 /** The last visible, sanitized line of the login CLI's output — bounded and
  * secret-checked so it can ride a terminal event message (ADR-116). Anything
  * token-shaped disqualifies the whole line rather than risking a partial. */
@@ -1440,7 +1489,12 @@ export function engineLoginContainerArgs(
           // a client id (live 2026-08-18). stty targets the PTY `script`
           // just allocated.
           "stty cols 500 rows 50 2>/dev/null; exec claude setup-token",
-          "/dev/null",
+          // The PTY transcript lands in the op's private bind leaf (same
+          // trust class as the codex auth.json captured there; the leaf is
+          // 0700 and deleted at cleanup). A stuck flow can then be read
+          // VERBATIM from the host — the 2026-08-20 hang was undiagnosable
+          // because the typescript went to /dev/null.
+          `${LOGIN_MOUNT}/typescript`,
         ]
       : ["codex", "login"];
   if (engineLoginBackend().apple) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runuai/host",
-  "version": "0.9.51",
+  "version": "0.9.53",
   "description": "Uai host — runs ephemeral AI tasks in containers on a machine you control.",
   "license": "MIT",
   "author": "Uai Tech <team@runuai.com>",

package/scripts/install/linux.ts

@@ -376,7 +376,18 @@ function inspectSystemdState(execute: StepExecutor): {
     );
   }
   const enabled = enabledResult.status === 0 && enabledState === "enabled";
-  if (!enabled && !DISABLED_SYSTEMD_STATES.has(enabledState)) {
+  // A unit that was never installed answers differently across systemd
+  // versions: newer ones print "not-found", older ones (Amazon Linux 2023's
+  // systemd, live 2026-08-20) print NOTHING on stdout and put "Failed to get
+  // unit file state … No such file or directory" on stderr. Both mean the
+  // same thing on a first install: not enabled.
+  const neverInstalled =
+    enabledResult.status !== 0 &&
+    enabledState === "" &&
+    /no such file or directory|failed to get unit file state/i.test(
+      enabledResult.stderr,
+    );
+  if (!enabled && !neverInstalled && !DISABLED_SYSTEMD_STATES.has(enabledState)) {
     throw stepFailure(
       "systemctl",
       enabledArgs,