@tickernelz/paperclip-pro-adapter-codex-local 2026.925.0

package/dist/server/device-login-parse.test.js

@@ -0,0 +1,269 @@
+import { readFileSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { describe, expect, it } from "vitest";
+import { parseDeviceLoginPrompt } from "./device-login-parse.js";
+const fixturesDir = path.join(path.dirname(fileURLToPath(import.meta.url)), "__fixtures__");
+function readFixture(name) {
+    return readFileSync(path.join(fixturesDir, name), "utf8");
+}
+const EXACT_URL = "https://auth.openai.com/codex/device";
+describe("parseDeviceLoginPrompt", () => {
+    it("parse_returns_url_and_code_from_sample", () => {
+        const result = parseDeviceLoginPrompt(readFixture("device-login-sample.txt"));
+        expect(result).not.toBeNull();
+        expect(result?.url).toBe(EXACT_URL);
+        // The committed sample keeps the capture-time redaction of the code. The
+        // parser extracts the four-hyphen-five structure without a real secret.
+        expect(result?.code).toBe("????-?????");
+    });
+    it("parse_returns_url_and_code_from_ansi_colored_output", () => {
+        // Codex CLI 0.128.0 and later add ANSI color (SGR) sequences around the URL
+        // and the code. A live sandbox run confirmed this format. The parser removes
+        // the Control Sequence Introducer sequences and reads the tokens the same as
+        // plain output.
+        const cyan = "\x1b[36m";
+        const bold = "\x1b[1m";
+        const reset = "\x1b[0m";
+        const text = [
+            "1. Open this link in your browser and sign in to your account",
+            `${cyan}${EXACT_URL}${reset}`,
+            "2. Enter this one-time code (expires in 15 minutes)",
+            `${bold}ABCD-EFGHJ${reset}`,
+        ].join("\n");
+        const result = parseDeviceLoginPrompt(text);
+        expect(result).not.toBeNull();
+        expect(result?.url).toBe(EXACT_URL);
+        expect(result?.code).toBe("ABCD-EFGHJ");
+    });
+    it("parse_returns_url_and_code_from_carriage_return_line_endings", () => {
+        // A pseudo-terminal ends each line with a carriage return and a line feed.
+        // The carriage return is whitespace, so the URL token stops before it, and the
+        // code line trims it. The parser reads the tokens the same as line-feed output.
+        const text = [
+            "1. Open this link in your browser and sign in to your account",
+            EXACT_URL,
+            "2. Enter this one-time code (expires in 15 minutes)",
+            "ABCD-EFGHJ",
+        ].join("\r\n");
+        const result = parseDeviceLoginPrompt(text);
+        expect(result).not.toBeNull();
+        expect(result?.url).toBe(EXACT_URL);
+        expect(result?.code).toBe("ABCD-EFGHJ");
+    });
+    it("parse_returns_url_and_code_with_a_terminal_title_osc_sequence", () => {
+        // A pseudo-terminal can emit an Operating System Command (OSC) title sequence
+        // in the stream. The device-auth prompt still prints the URL and the code as
+        // plain standalone tokens on their own lines. The OSC title sequence carries no
+        // URL token, so it does not shift the URL or the code, and the parser reads
+        // both tokens.
+        const osc = "\x1b]0;Codex\x07";
+        const text = [
+            `${osc}1. Open this link in your browser and sign in to your account`,
+            EXACT_URL,
+            "2. Enter this one-time code (expires in 15 minutes)",
+            "ABCD-EFGHJ",
+        ].join("\n");
+        const result = parseDeviceLoginPrompt(text);
+        expect(result).not.toBeNull();
+        expect(result?.url).toBe(EXACT_URL);
+        expect(result?.code).toBe("ABCD-EFGHJ");
+    });
+    it("parse_returns_url_and_code_from_a_merged_raw_pseudo_terminal_frame", () => {
+        // One buffer holds the whole prompt as a real pseudo-terminal emits it: a
+        // leading title Operating System Command (OSC) sequence, color Control
+        // Sequence Introducer (CSI) sequences around the URL and the code, and
+        // carriage-return line endings. The parser removes the color sequences and
+        // reads the plain tokens.
+        const title = "\x1b]0;Codex login\x07";
+        const cyan = "\x1b[36m";
+        const bold = "\x1b[1m";
+        const reset = "\x1b[0m";
+        const text = `${title}1. Open this link in your browser and sign in to your account\r\n` +
+            `${cyan}${EXACT_URL}${reset}\r\n` +
+            `2. Enter this one-time code (expires in 15 minutes)\r\n` +
+            `${bold}ABCD-EFGHJ${reset}\r\n`;
+        const result = parseDeviceLoginPrompt(text);
+        expect(result).not.toBeNull();
+        expect(result?.url).toBe(EXACT_URL);
+        expect(result?.code).toBe("ABCD-EFGHJ");
+    });
+    it("parse_returns_null_when_prompt_absent", () => {
+        const text = "Some unrelated log line\nNothing to see here\n";
+        expect(parseDeviceLoginPrompt(text)).toBeNull();
+    });
+    it("parse_returns_null_for_url_with_query_or_fragment", () => {
+        const withQuery = [
+            "Open this link",
+            "https://auth.openai.com/codex/device?foo=bar",
+            "ABCD-EFGHJ",
+        ].join("\n");
+        const withFragment = [
+            "Open this link",
+            "https://auth.openai.com/codex/device#section",
+            "ABCD-EFGHJ",
+        ].join("\n");
+        expect(parseDeviceLoginPrompt(withQuery)).toBeNull();
+        expect(parseDeviceLoginPrompt(withFragment)).toBeNull();
+    });
+    it("parse_returns_the_printed_url_with_a_bare_trailing_fragment_marker", () => {
+        // A printed URL that ends with a bare `#` carries an empty fragment. The
+        // platform `URL` parser keeps the marker in its normalized form. The parser
+        // returns that normalized form, not the fixed constant.
+        const preamble = "2. Enter this one-time code (expires in 15 minutes)";
+        const text = [`${EXACT_URL}#`, preamble, "ABCD-EFGHJ"].join("\n");
+        const result = parseDeviceLoginPrompt(text);
+        expect(result).not.toBeNull();
+        expect(result?.url).toBe("https://auth.openai.com/codex/device#");
+    });
+    it("parse_returns_the_normalized_url_for_an_explicit_default_port_or_an_uppercase_host", () => {
+        // The platform `URL` parser normalizes an explicit default port and an
+        // uppercase host. The parser returns that normalized form.
+        const preamble = "2. Enter this one-time code (expires in 15 minutes)";
+        const withPort = [`${EXACT_URL.replace("auth.openai.com", "auth.openai.com:443")}`, preamble, "ABCD-EFGHJ"].join("\n");
+        const withUppercaseHost = [
+            `${EXACT_URL.replace("auth.openai.com", "AUTH.OPENAI.COM")}`,
+            preamble,
+            "ABCD-EFGHJ",
+        ].join("\n");
+        expect(parseDeviceLoginPrompt(withPort)?.url).toBe(EXACT_URL);
+        expect(parseDeviceLoginPrompt(withUppercaseHost)?.url).toBe(EXACT_URL);
+    });
+    it("parse_returns_null_for_wrong_origin_or_path", () => {
+        const wrongOrigin = [
+            "Open this link",
+            "https://auth.example.com/codex/device",
+            "ABCD-EFGHJ",
+        ].join("\n");
+        const wrongPath = [
+            "Open this link",
+            "https://auth.openai.com/codex/device/extra",
+            "ABCD-EFGHJ",
+        ].join("\n");
+        const httpScheme = [
+            "Open this link",
+            "http://auth.openai.com/codex/device",
+            "ABCD-EFGHJ",
+        ].join("\n");
+        expect(parseDeviceLoginPrompt(wrongOrigin)).toBeNull();
+        expect(parseDeviceLoginPrompt(wrongPath)).toBeNull();
+        expect(parseDeviceLoginPrompt(httpScheme)).toBeNull();
+    });
+    it("parse_returns_null_for_malformed_short_code", () => {
+        // Each input carries the code preamble after the URL, so the test exercises
+        // the code-structure check and not the preamble check.
+        const preamble = "2. Enter this one-time code (expires in 15 minutes)";
+        const shortCode = [EXACT_URL, preamble, "ABC-EFGHJ"].join("\n"); // 3 then 5
+        const longCode = [EXACT_URL, preamble, "ABCDE-EFGHJ"].join("\n"); // 5 then 5
+        const noHyphen = [EXACT_URL, preamble, "ABCDEFGHJ"].join("\n");
+        const noCode = [EXACT_URL, preamble, "no code on this line"].join("\n");
+        expect(parseDeviceLoginPrompt(shortCode)).toBeNull();
+        expect(parseDeviceLoginPrompt(longCode)).toBeNull();
+        expect(parseDeviceLoginPrompt(noHyphen)).toBeNull();
+        expect(parseDeviceLoginPrompt(noCode)).toBeNull();
+    });
+    it("parse_binds_code_to_url_and_ignores_a_code_before_the_url", () => {
+        // A code-shaped token appears before the URL. The parser reads the code only
+        // after the URL, so it uses the code that follows the URL.
+        const text = [
+            "WXYZ-98765",
+            "1. Open this link in your browser and sign in to your account",
+            EXACT_URL,
+            "2. Enter this one-time code (expires in 15 minutes)",
+            "ABCD-EFGHJ",
+        ].join("\n");
+        const result = parseDeviceLoginPrompt(text);
+        expect(result).not.toBeNull();
+        expect(result?.code).toBe("ABCD-EFGHJ");
+    });
+    it("parse_returns_null_when_only_code_is_before_the_url", () => {
+        // The only code-shaped token sits before the URL. No code follows the URL,
+        // so the parser rejects the output instead of binding the earlier token.
+        const text = ["WXYZ-98765", "Open this link", EXACT_URL].join("\n");
+        expect(parseDeviceLoginPrompt(text)).toBeNull();
+    });
+    it("parse_returns_null_when_code_is_far_after_the_url", () => {
+        // A code-shaped token sits far below the URL, past the proximity window. The
+        // parser does not bind a distant token to the URL.
+        const filler = "unrelated log line\n".repeat(40);
+        const text = [EXACT_URL, filler, "ABCD-EFGHJ"].join("\n");
+        expect(parseDeviceLoginPrompt(text)).toBeNull();
+    });
+    it("parse_ignores_a_code_between_the_url_and_the_code_preamble", () => {
+        // A code-shaped token sits after the URL but before the "one-time code"
+        // preamble line. The parser anchors the code on the preamble, so it ignores
+        // the earlier token and returns the real code after the preamble.
+        const text = [
+            "1. Open this link in your browser and sign in to your account",
+            EXACT_URL,
+            "session id WXYZ-98765 for this attempt",
+            "2. Enter this one-time code (expires in 15 minutes)",
+            "ABCD-EFGHJ",
+        ].join("\n");
+        const result = parseDeviceLoginPrompt(text);
+        expect(result).not.toBeNull();
+        expect(result?.code).toBe("ABCD-EFGHJ");
+    });
+    it("parse_ignores_a_code_that_shares_the_preamble_line", () => {
+        // A code-shaped token shares the preamble line with the "one-time code"
+        // phrase. The parser advances past the whole preamble line, so it ignores the
+        // token on that line and returns the code from the dedicated code line below.
+        const text = [
+            EXACT_URL,
+            "2. Enter this one-time code (ref WXYZ-98765, expires in 15 minutes)",
+            "ABCD-EFGHJ",
+        ].join("\n");
+        const result = parseDeviceLoginPrompt(text);
+        expect(result).not.toBeNull();
+        expect(result?.code).toBe("ABCD-EFGHJ");
+    });
+    it("parse_returns_null_when_a_noise_line_follows_the_preamble", () => {
+        // A line that mixes a code-shaped token with other text sits right after the
+        // preamble line. The parser reads the code only from a dedicated code line, so
+        // it never surfaces the embedded token. It rejects the output instead. This
+        // proves the parser binds the code to the prompt-code line and not to any
+        // nearby code-shaped token.
+        const text = [
+            EXACT_URL,
+            "2. Enter this one-time code (expires in 15 minutes)",
+            "your session token is WXYZ-98765 here",
+            "ABCD-EFGHJ",
+        ].join("\n");
+        expect(parseDeviceLoginPrompt(text)).toBeNull();
+    });
+    it("parse_returns_null_when_the_code_preamble_is_absent", () => {
+        // A valid code follows the URL, but the "one-time code" preamble is absent.
+        // The parser requires the preamble, so it rejects the output. This binds the
+        // code to the prompt structure and not to a bare code-shaped token.
+        const text = [
+            "1. Open this link in your browser and sign in to your account",
+            EXACT_URL,
+            "ABCD-EFGHJ",
+        ].join("\n");
+        expect(parseDeviceLoginPrompt(text)).toBeNull();
+    });
+    it("parse_ignores_token_like_text", () => {
+        // Token-like noise without the exact device URL must not yield a prompt.
+        const text = [
+            "tokens received",
+            "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.payload.signature",
+            "sk-proj-ABCD1234ABCD1234ABCD1234",
+            "ABCD-EFGHJ",
+        ].join("\n");
+        expect(parseDeviceLoginPrompt(text)).toBeNull();
+    });
+    it("parse_returns_null_for_edge_sample", () => {
+        // The grounded edge row carries a URL, but a wrong path and a wrong origin
+        // segment, so the parser rejects it.
+        expect(parseDeviceLoginPrompt(readFixture("device-login-edge.txt"))).toBeNull();
+    });
+    it("keeps the url and the code out of a thrown error", () => {
+        // A non-string input is a programming error, but the message must never
+        // carry secret-bearing input. The parser returns null instead of throwing.
+        // @ts-expect-error deliberate wrong type
+        expect(parseDeviceLoginPrompt(undefined)).toBeNull();
+        // @ts-expect-error deliberate wrong type
+        expect(parseDeviceLoginPrompt(12345)).toBeNull();
+    });
+});
+//# sourceMappingURL=device-login-parse.test.js.map

package/dist/server/device-login-parse.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-login-parse.test.js","sourceRoot":"","sources":["../../src/server/device-login-parse.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;AAE5F,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,SAAS,GAAG,sCAAsC,CAAC;AAEzD,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,sBAAsB,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAC9E,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,4EAA4E;QAC5E,6EAA6E;QAC7E,6EAA6E;QAC7E,gBAAgB;QAChB,MAAM,IAAI,GAAG,UAAU,CAAC;QACxB,MAAM,IAAI,GAAG,SAAS,CAAC;QACvB,MAAM,KAAK,GAAG,SAAS,CAAC;QACxB,MAAM,IAAI,GAAG;YACX,+DAA+D;YAC/D,GAAG,IAAI,GAAG,SAAS,GAAG,KAAK,EAAE;YAC7B,qDAAqD;YACrD,GAAG,IAAI,aAAa,KAAK,EAAE;SAC5B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,2EAA2E;QAC3E,+EAA+E;QAC/E,gFAAgF;QAChF,MAAM,IAAI,GAAG;YACX,+DAA+D;YAC/D,SAAS;YACT,qDAAqD;YACrD,YAAY;SACb,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACf,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,8EAA8E;QAC9E,6EAA6E;QAC7E,gFAAgF;QAChF,4EAA4E;QAC5E,eAAe;QACf,MAAM,GAAG,GAAG,kBAAkB,CAAC;QAC/B,MAAM,IAAI,GAAG;YACX,GAAG,GAAG,+DAA+D;YACrE,SAAS;YACT,qDAAqD;YACrD,YAAY;SACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,0EAA0E;QAC1E,uEAAuE;QACvE,uEAAuE;QACvE,2EAA2E;QAC3E,0BAA0B;QAC1B,MAAM,KAAK,GAAG,wBAAwB,CAAC;QACvC,MAAM,IAAI,GAAG,UAAU,CAAC;QACxB,MAAM,IAAI,GAAG,SAAS,CAAC;QACvB,MAAM,KAAK,GAAG,SAAS,CAAC;QACxB,MAAM,IAAI,GACR,GAAG,KAAK,mEAAmE;YAC3E,GAAG,IAAI,GAAG,SAAS,GAAG,KAAK,MAAM;YACjC,yDAAyD;YACzD,GAAG,IAAI,aAAa,KAAK,MAAM,CAAC;QAClC,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,IAAI,GAAG,gDAAgD,CAAC;QAC9D,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,SAAS,GAAG;YAChB,gBAAgB;YAChB,8CAA8C;YAC9C,YAAY;SACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,YAAY,GAAG;YACnB,gBAAgB;YAChB,8CAA8C;YAC9C,YAAY;SACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACrD,MAAM,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,yEAAyE;QACzE,4EAA4E;QAC5E,wDAAwD;QACxD,MAAM,QAAQ,GAAG,qDAAqD,CAAC;QACvE,MAAM,IAAI,GAAG,CAAC,GAAG,SAAS,GAAG,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,uEAAuE;QACvE,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,qDAAqD,CAAC;QACvE,MAAM,QAAQ,GAAG,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,IAAI,CAC9G,IAAI,CACL,CAAC;QACF,MAAM,iBAAiB,GAAG;YACxB,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,EAAE;YAC5D,QAAQ;YACR,YAAY;SACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9D,MAAM,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,WAAW,GAAG;YAClB,gBAAgB;YAChB,uCAAuC;YACvC,YAAY;SACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,SAAS,GAAG;YAChB,gBAAgB;YAChB,4CAA4C;YAC5C,YAAY;SACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,UAAU,GAAG;YACjB,gBAAgB;YAChB,qCAAqC;YACrC,YAAY;SACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACvD,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACrD,MAAM,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,4EAA4E;QAC5E,uDAAuD;QACvD,MAAM,QAAQ,GAAG,qDAAqD,CAAC;QACvE,MAAM,SAAS,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW;QAC5E,MAAM,QAAQ,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW;QAC7E,MAAM,QAAQ,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,sBAAsB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACrD,MAAM,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpD,MAAM,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpD,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,6EAA6E;QAC7E,2DAA2D;QAC3D,MAAM,IAAI,GAAG;YACX,YAAY;YACZ,+DAA+D;YAC/D,SAAS;YACT,qDAAqD;YACrD,YAAY;SACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,2EAA2E;QAC3E,yEAAyE;QACzE,MAAM,IAAI,GAAG,CAAC,YAAY,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,6EAA6E;QAC7E,mDAAmD;QACnD,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,wEAAwE;QACxE,4EAA4E;QAC5E,kEAAkE;QAClE,MAAM,IAAI,GAAG;YACX,+DAA+D;YAC/D,SAAS;YACT,wCAAwC;YACxC,qDAAqD;YACrD,YAAY;SACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,wEAAwE;QACxE,8EAA8E;QAC9E,8EAA8E;QAC9E,MAAM,IAAI,GAAG;YACX,SAAS;YACT,qEAAqE;YACrE,YAAY;SACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,6EAA6E;QAC7E,+EAA+E;QAC/E,4EAA4E;QAC5E,0EAA0E;QAC1E,4BAA4B;QAC5B,MAAM,IAAI,GAAG;YACX,SAAS;YACT,qDAAqD;YACrD,uCAAuC;YACvC,YAAY;SACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,4EAA4E;QAC5E,6EAA6E;QAC7E,oEAAoE;QACpE,MAAM,IAAI,GAAG;YACX,+DAA+D;YAC/D,SAAS;YACT,YAAY;SACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,yEAAyE;QACzE,MAAM,IAAI,GAAG;YACX,iBAAiB;YACjB,wDAAwD;YACxD,kCAAkC;YAClC,YAAY;SACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,2EAA2E;QAC3E,qCAAqC;QACrC,MAAM,CAAC,sBAAsB,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,wEAAwE;QACxE,2EAA2E;QAC3E,yCAAyC;QACzC,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACrD,yCAAyC;QACzC,MAAM,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/device-login-runner.d.ts

@@ -0,0 +1,69 @@
+import { type LoginRunnerDisposable, type LoginRunnerLifecycleOptions, type LoginRunnerOutcome, type LoginRunnerResult } from "@tickernelz/paperclip-pro-adapter-utils";
+import { type DeviceLoginPrompt } from "./device-login-parse.js";
+/** The default Codex device-login command. */
+export declare const CODEX_DEVICE_LOGIN_COMMAND = "codex login --device-auth";
+/**
+ * The sandbox side of the device-login run. The runner never calls Daytona
+ * directly; a caller injects a concrete driver. A production driver binds `start`
+ * to the shared login pseudo-terminal (PTY) transport, binds `readFile` to a
+ * descriptor-bound credential read, and binds `dispose` to the transport dispose.
+ *
+ * The `start` shape matches the shared login pseudo-terminal transport start
+ * method, so the driver runs the login command on a real pseudo-terminal. The
+ * login command
+ * needs a pseudo-terminal: pipe stdio emits no login prompt. The runner never
+ * calls `stop` or `write` on the driver; the device-login flow needs no delayed
+ * input, and the service owns the sandbox delete. The runner disposes the driver
+ * one time on every terminal state.
+ */
+export interface SandboxLoginDriver extends LoginRunnerDisposable {
+    /**
+     * Starts `command` on a pseudo-terminal and streams the terminal output to
+     * `onData` in memory, in order, as the pseudo-terminal emits it. Resolves with
+     * the command exit code when the command ends. A driver must not persist the raw
+     * output to any durable log.
+     */
+    start(command: string, onData: (chunk: string) => void): Promise<{
+        exitCode: number | null;
+    }>;
+    /**
+     * Reads the credential bytes with one descriptor-bound read. The read is
+     * separate from the pseudo-terminal session; the session has no file-read
+     * method. A driver runs one fixed, server-controlled operation that opens the
+     * verified session home and the credential file with no symlink follow, checks
+     * the opened descriptor, and reads only from that same descriptor.
+     */
+    readFile(path: string): Promise<Buffer>;
+}
+/** Receives the parsed prompt one time in memory. The caller displays it. */
+export type DeviceLoginPromptSink = (prompt: DeviceLoginPrompt) => void;
+/** The device-login runner outcome. It is a fixed, non-secret status. */
+export type DeviceLoginOutcome = LoginRunnerOutcome;
+/** The runner result. It never carries a URL, a code, or a token byte. */
+export type DeviceLoginResult = LoginRunnerResult;
+export interface RunDeviceLoginOptions extends LoginRunnerLifecycleOptions {
+    /** The login command. Defaults to {@link CODEX_DEVICE_LOGIN_COMMAND}. */
+    command?: string;
+    /** Parses the prompt from the login output. Defaults to
+     *  {@link parseDeviceLoginPrompt}. */
+    parsePrompt?: (output: string) => DeviceLoginPrompt | null;
+    /** Receives the parsed prompt one time in memory. The caller displays it. */
+    onPrompt: DeviceLoginPromptSink;
+    /**
+     * Receives the sandbox `auth.json` bytes one time in memory on success. The
+     * runner reads the bytes with {@link SandboxLoginDriver.readFile} before it
+     * disposes the driver. Set together with {@link authPath}.
+     */
+    onCredential?: (authBytes: Buffer) => void | Promise<void>;
+    /** The sandbox path of the credential file to read on success. */
+    authPath?: string;
+}
+/**
+ * Runs the device-login command through `driver`. Surfaces the prompt one time
+ * through `onPrompt`. On success it reads the credential and surfaces the bytes
+ * one time through `onCredential`. Returns a fixed status. Always disposes the
+ * driver. Never logs the raw stream, and never puts a URL, a code, or a token
+ * into a log line, the result, or a thrown error.
+ */
+export declare function runDeviceLogin(driver: SandboxLoginDriver, options: RunDeviceLoginOptions): Promise<DeviceLoginResult>;
+//# sourceMappingURL=device-login-runner.d.ts.map

package/dist/server/device-login-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-login-runner.d.ts","sourceRoot":"","sources":["../../src/server/device-login-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACvB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAA0B,KAAK,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAiBzF,8CAA8C;AAC9C,eAAO,MAAM,0BAA0B,8BAA8B,CAAC;AAatE;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,kBAAmB,SAAQ,qBAAqB;IAC/D;;;;;OAKG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAC9F;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACzC;AAED,6EAA6E;AAC7E,MAAM,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,CAAC;AAExE,yEAAyE;AACzE,MAAM,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAEpD,0EAA0E;AAC1E,MAAM,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAElD,MAAM,WAAW,qBAAsB,SAAQ,2BAA2B;IACxE,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;0CACsC;IACtC,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,iBAAiB,GAAG,IAAI,CAAC;IAC3D,6EAA6E;IAC7E,QAAQ,EAAE,qBAAqB,CAAC;IAChC;;;;OAIG;IACH,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,kBAAkB,EAC1B,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CA0E5B"}

package/dist/server/device-login-runner.js

@@ -0,0 +1,109 @@
+import { raceLoginRunnerExit, } from "@tickernelz/paperclip-pro-adapter-utils";
+import { parseDeviceLoginPrompt } from "./device-login-parse.js";
+// The device-login runner. It runs the Codex device-login command through an
+// injected {@link SandboxLoginDriver}, surfaces the login prompt one time in
+// memory, and handles a timeout and a cancellation. The runner always disposes
+// the driver.
+//
+// Security (Control 1 — secret handling): the runner treats every byte of the
+// sandbox stream as secret-bearing, untrusted input. It parses the stream in an
+// in-memory buffer only. It drops the buffer as soon as it finds the prompt. It
+// never forwards the raw text to a log or an artifact, and it never stores the
+// raw text on the result. The runner reports only a fixed, non-secret status. It
+// passes the prompt one time through the in-memory `onPrompt` callback. It passes
+// the credential bytes one time through the in-memory `onCredential` callback.
+// The runner keeps the URL, the code, and any token byte out of every log line
+// and every thrown error.
+/** The default Codex device-login command. */
+export const CODEX_DEVICE_LOGIN_COMMAND = "codex login --device-auth";
+/**
+ * The maximum number of characters the runner keeps for the next chunk. The
+ * Codex prompt is small and puts the URL and the code close together. A sandbox
+ * can stream a large volume of output before the prompt. So after each parse the
+ * runner keeps only the most recent characters up to this limit. The retained
+ * buffer cannot grow without a bound across many chunks. The limit is far larger
+ * than the prompt, so the trailing window never drops a real prompt that spans a
+ * chunk boundary.
+ */
+const MAX_PARSE_BUFFER_CHARS = 64 * 1024;
+/**
+ * Runs the device-login command through `driver`. Surfaces the prompt one time
+ * through `onPrompt`. On success it reads the credential and surfaces the bytes
+ * one time through `onCredential`. Returns a fixed status. Always disposes the
+ * driver. Never logs the raw stream, and never puts a URL, a code, or a token
+ * into a log line, the result, or a thrown error.
+ */
+export async function runDeviceLogin(driver, options) {
+    const { onPrompt, onCredential, authPath, timeoutMs, signal } = options;
+    const command = options.command ?? CODEX_DEVICE_LOGIN_COMMAND;
+    const parsePrompt = options.parsePrompt ?? parseDeviceLoginPrompt;
+    const log = options.log ?? (() => { });
+    let promptSurfaced = false;
+    // The in-memory parse buffer. The runner drops it as soon as it finds the
+    // prompt, so the secret-bearing stream never lives longer than one parse. The
+    // runner parses the full buffer, and it includes the whole new chunk. So a
+    // prompt at the start of one large chunk still parses. The runner bounds only
+    // the buffer that it keeps for the next chunk to {@link MAX_PARSE_BUFFER_CHARS}.
+    // The runner keeps the trailing window and drops the oldest characters. The
+    // prompt puts the URL and the code close together, so the trailing window
+    // always holds a real prompt that spans a chunk boundary.
+    let buffer = "";
+    const onStdout = (chunk) => {
+        if (promptSurfaced)
+            return;
+        buffer += chunk;
+        const prompt = parsePrompt(buffer);
+        if (prompt) {
+            promptSurfaced = true;
+            buffer = "";
+            onPrompt(prompt);
+            return;
+        }
+        if (buffer.length > MAX_PARSE_BUFFER_CHARS) {
+            buffer = buffer.slice(buffer.length - MAX_PARSE_BUFFER_CHARS);
+        }
+    };
+    try {
+        if (signal?.aborted) {
+            log("[paperclip] Device login cancelled before start.");
+            return { outcome: "cancelled", exitCode: null, promptSurfaced };
+        }
+        const started = driver.start(command, onStdout);
+        const raced = await raceLoginRunnerExit(started, timeoutMs, signal);
+        if (raced.kind === "timeout") {
+            log("[paperclip] Device login timed out; disposing the sandbox.");
+            return { outcome: "timeout", exitCode: null, promptSurfaced };
+        }
+        if (raced.kind === "cancelled") {
+            log("[paperclip] Device login cancelled; disposing the sandbox.");
+            return { outcome: "cancelled", exitCode: null, promptSurfaced };
+        }
+        const exitCode = raced.exitCode;
+        if (exitCode !== 0) {
+            log("[paperclip] Device login command ended with a non-zero exit code.");
+            return { outcome: "failure", exitCode, promptSurfaced };
+        }
+        if (onCredential && authPath) {
+            const authBytes = await driver.readFile(authPath);
+            await onCredential(authBytes);
+        }
+        log("[paperclip] Device login command ended successfully.");
+        return { outcome: "success", exitCode, promptSurfaced };
+    }
+    catch {
+        // Convert any driver error to a fixed, non-secret error. The original error
+        // may embed streamed bytes, so the runner never propagates its message.
+        throw new Error("device login failed: the sandbox login command errored.");
+    }
+    finally {
+        // Always dispose the driver. A dispose error must not leak or mask the
+        // result, so the runner swallows it and logs a fixed line.
+        try {
+            await driver.dispose();
+        }
+        catch {
+            log("[paperclip] Device login: the sandbox dispose step errored.");
+        }
+    }
+}
+//# sourceMappingURL=device-login-runner.js.map

package/dist/server/device-login-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-login-runner.js","sourceRoot":"","sources":["../../src/server/device-login-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAKpB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAA0B,MAAM,yBAAyB,CAAC;AAEzF,6EAA6E;AAC7E,6EAA6E;AAC7E,+EAA+E;AAC/E,cAAc;AACd,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,gFAAgF;AAChF,+EAA+E;AAC/E,iFAAiF;AACjF,kFAAkF;AAClF,+EAA+E;AAC/E,+EAA+E;AAC/E,0BAA0B;AAE1B,8CAA8C;AAC9C,MAAM,CAAC,MAAM,0BAA0B,GAAG,2BAA2B,CAAC;AAEtE;;;;;;;;GAQG;AACH,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAC;AA6DzC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAA0B,EAC1B,OAA8B;IAE9B,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACxE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,0BAA0B,CAAC;IAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,sBAAsB,CAAC;IAClE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAEtC,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,0EAA0E;IAC1E,8EAA8E;IAC9E,2EAA2E;IAC3E,8EAA8E;IAC9E,iFAAiF;IACjF,4EAA4E;IAC5E,0EAA0E;IAC1E,0DAA0D;IAC1D,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAQ,EAAE;QACvC,IAAI,cAAc;YAAE,OAAO;QAC3B,MAAM,IAAI,KAAK,CAAC;QAChB,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,MAAM,EAAE,CAAC;YACX,cAAc,GAAG,IAAI,CAAC;YACtB,MAAM,GAAG,EAAE,CAAC;YACZ,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;YAC3C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,sBAAsB,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,kDAAkD,CAAC,CAAC;YACxD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QAClE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAEpE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,4DAA4D,CAAC,CAAC;YAClE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QAChE,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/B,GAAG,CAAC,4DAA4D,CAAC,CAAC;YAClE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QAClE,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACnB,GAAG,CAAC,mEAAmE,CAAC,CAAC;YACzE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;QAC1D,CAAC;QAED,IAAI,YAAY,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAClD,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;QACD,GAAG,CAAC,sDAAsD,CAAC,CAAC;QAC5D,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,wEAAwE;QACxE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;YAAS,CAAC;QACT,uEAAuE;QACvE,2DAA2D;QAC3D,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,6DAA6D,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/server/device-login-runner.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=device-login-runner.test.d.ts.map

package/dist/server/device-login-runner.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-login-runner.test.d.ts","sourceRoot":"","sources":["../../src/server/device-login-runner.test.ts"],"names":[],"mappings":""}