@runuai/host 0.9.53 → 0.9.54

package/lib/engine-login.ts

@@ -55,6 +55,9 @@ import {
 import { ASDF_DATA_VOLUME, STANDARD_IMAGE_TAG } from "./standard-image";
 
 export const ENGINE_LOGIN_TIMEOUT_MS = 10 * 60_000;
+/** Delay before the separate submit keystroke — long enough for the TUI to
+ * finish ingesting the pasted code chunk, short enough to feel instant. */
+export const SUBMIT_KEYSTROKE_DELAY_MS = 300;
 // Global serialization keeps a failed per-operation stale-resource sweep from
 // ever deleting another live login's labeled container or marked temp dir.
 export const MAX_CONCURRENT_ENGINE_LOGINS = 1;
@@ -459,27 +462,38 @@ export class EngineLoginManager {
     );
     operation.inputUsed = true;
     operation.outputTail = "";
-    // CARRIAGE RETURN, not newline: `claude setup-token` is an Ink raw-mode
-    // TUI whose code prompt submits only on \r. A trailing \n types the code
-    // and then sits forever — reproduced live 2026-08-20 (fake code + \n →
-    // masked input, no response; the same code + \r → immediate "OAuth
-    // error: Invalid code"). Every cloud-pane Claude login ever attempted
-    // hung on exactly this.
-    const value = `${text}\r`;
     if (!operation.process) {
       console.log(
         `[engine-login] input buffered for ${opId} (login process still starting)`,
       );
-      operation.pendingInput = value;
+      operation.pendingInput = text;
       return true;
     }
+    return this.deliverOneTimeCode(operation, text);
+  }
+
+  /**
+   * The submit is a SEPARATE, delayed carriage return — both halves of that
+   * are load-bearing, reproduced live 2026-08-20/21:
+   *  - `\r`, not `\n`: the Ink raw-mode prompt only submits on carriage
+   *    return (a `\n` types the code and sits forever).
+   *  - a separate delayed write, not one chunk: a real 92-char code + `\r`
+   *    in one write is treated as PASTE data and the embedded `\r` is
+   *    swallowed — stars appear, nothing submits (short test codes slipped
+   *    under the paste threshold, which is why every isolated repro passed
+   *    while production hung).
+   */
+  private deliverOneTimeCode(operation: LoginOperation, text: string): boolean {
+    const process = operation.process;
+    if (!process) return false;
     try {
-      operation.process.writeInput(value);
-      console.log(`[engine-login] input written to the login process for ${opId}`);
-      return true;
+      process.writeInput(text);
+      console.log(
+        `[engine-login] input written to the login process for ${operation.opId}`,
+      );
     } catch {
       console.warn(
-        `[engine-login] input write FAILED for ${opId}: the login process rejected stdin`,
+        `[engine-login] input write FAILED for ${operation.opId}: the login process rejected stdin`,
       );
       void this.fail(
         operation,
@@ -488,6 +502,29 @@ export class EngineLoginManager {
       );
       return false;
     }
+    const submitTimer = setTimeout(() => {
+      if (
+        !this.isCurrent(operation) ||
+        operation.finishing ||
+        operation.process !== process
+      ) {
+        return;
+      }
+      try {
+        process.writeInput("\r");
+        console.log(
+          `[engine-login] submit keystroke dispatched for ${operation.opId}`,
+        );
+      } catch {
+        void this.fail(
+          operation,
+          "invalid_input",
+          "The login process could not accept the submit keystroke.",
+        );
+      }
+    }, SUBMIT_KEYSTROKE_DELAY_MS);
+    unrefTimer(submitTimer);
+    return true;
   }
 
   /** Validate and replay a Codex callback only to this operation's listener. */
@@ -625,16 +662,7 @@ export class EngineLoginManager {
       if (operation.pendingInput !== null) {
         const pending = operation.pendingInput;
         operation.pendingInput = null;
-        try {
-          processHandle.writeInput(pending);
-        } catch {
-          await this.fail(
-            operation,
-            "invalid_input",
-            "The login process could not accept the one-time code.",
-          );
-          return;
-        }
+        if (!this.deliverOneTimeCode(operation, pending)) return;
       }
       void processHandle.completion.then(
         (result) => this.onProcessComplete(operation, result),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runuai/host",
-  "version": "0.9.53",
+  "version": "0.9.54",
   "description": "Uai host — runs ephemeral AI tasks in containers on a machine you control.",
   "license": "MIT",
   "author": "Uai Tech <team@runuai.com>",