@runuai/host 0.9.60 → 0.9.61

package/lib/engine-login.ts

@@ -169,7 +169,11 @@ export interface EngineLoginManagerOptions {
   seams?: Partial<EngineLoginSeams>;
 }
 
-type OperationStage = "starting" | "awaiting_input" | "awaiting_callback";
+type OperationStage =
+  | "starting"
+  | "awaiting_input"
+  | "awaiting_callback"
+  | "awaiting_confirmation";
 
 interface CodexCallbackTarget {
   readonly origin: string;
@@ -819,6 +823,25 @@ export class EngineLoginManager {
     }
 
     if (operation.stage === "starting") {
+      const device = findCodexDeviceAuthorization(operation.outputTail);
+      if (device) {
+        console.log(
+          `[engine-login] codex device authorization found for ${operation.opId}; awaiting operator confirmation`,
+        );
+        operation.stage = "awaiting_confirmation";
+        safeEmit(
+          operation.emit,
+          authorizeEvent(operation, device.verificationUrl),
+        );
+        safeEmit(operation.emit, {
+          kind: "engine.login.event",
+          opId: operation.opId,
+          engine: operation.engine,
+          phase: "awaiting_confirmation",
+          message: `Enter code ${device.userCode} on the verification page. Nothing to paste here — this completes on its own.`,
+        });
+        return;
+      }
       const authorization = findCodexAuthorization(operation.outputTail);
       if (authorization) {
         // Symmetric with the claude branch: this breadcrumb's ABSENCE was
@@ -1489,6 +1512,24 @@ export function findSafeHttpsUrl(value: string): string | null {
   return null;
 }
 
+/**
+ * Codex `--device-auth` banner: a verification URL plus a short one-time
+ * code ("AC57-MDV9G" shape). Both the phrase gate and the code shape are
+ * required so container names, hashes, or URL fragments cannot fake a
+ * device prompt. Reads the merged tail — codex prints to stderr.
+ */
+export function findCodexDeviceAuthorization(
+  value: string,
+): { verificationUrl: string; userCode: string } | null {
+  const plain = stripTerminalControl(value);
+  if (!/one-time code|device code/i.test(plain)) return null;
+  const verificationUrl = findSafeHttpsUrl(plain);
+  if (!verificationUrl) return null;
+  const code = /(?:^|\s)([A-Z0-9]{4,8}-[A-Z0-9]{4,10})(?:\s|$)/m.exec(plain);
+  if (!code) return null;
+  return { verificationUrl, userCode: code[1]! };
+}
+
 export function extractClaudeOAuthToken(value: string): string | null {
   const plain = stripTerminalControl(value);
   // The FULL `sk-ant-oat01-` prefix and a realistic minimum length are both
@@ -1921,7 +1962,12 @@ export function engineLoginContainerArgs(
           // because the typescript went to /dev/null.
           `${LOGIN_MOUNT}/typescript`,
         ]
-      : ["codex", "login"];
+      : // Device-code flow: no localhost callback, no paste — the CLI prints
+        // a verification URL + one-time code, the operator confirms on the
+        // provider's page, and the CLI polls to completion (ADR-116 v2,
+        // 2026-08-24). The callback machinery below stays as the fallback
+        // for CLIs that still print the localhost authorize URL.
+        ["codex", "login", "--device-auth"];
   if (engineLoginBackend().apple) {
     // Same containment contract, Apple dialect: read-only root, all caps
     // dropped, a plain tmpfs at /tmp (the Apple CLI takes no mount options —

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runuai/host",
-  "version": "0.9.60",
+  "version": "0.9.61",
   "description": "Uai host — runs ephemeral AI tasks in containers on a machine you control.",
   "license": "MIT",
   "author": "Uai Tech <team@runuai.com>",

package/src/protocol.ts

@@ -345,6 +345,9 @@ export type EngineLoginEventFrame =
         | "starting"
         | "awaiting_input"
         | "awaiting_callback"
+        // Device-code flow (codex `--device-auth`): the operator confirms a
+        // short one-time code on the provider's page; nothing is pasted back.
+        | "awaiting_confirmation"
         | "succeeded"
         | "cancelled";
       url?: never;
@@ -787,6 +790,7 @@ export function isEngineLoginEventFrame(
     (frame.phase === "starting" ||
       frame.phase === "awaiting_input" ||
       frame.phase === "awaiting_callback" ||
+      frame.phase === "awaiting_confirmation" ||
       frame.phase === "succeeded" ||
       frame.phase === "cancelled") &&
     !Object.hasOwn(frame, "errorCode")