@tickernelz/paperclip-pro-adapter-utils 2026.925.0

package/dist/login-capability.js

@@ -0,0 +1,78 @@
+// The adapter login capability. An adapter declares this optional capability to
+// describe how the server drives an interactive sandbox login. The module holds
+// the capability types, the fixed value sets, and one runtime validator. The
+// validator fails closed: it rejects a malformed capability shape with a clear
+// error, so the loader never accepts a partial capability.
+//
+// Security (secret handling): the capability data holds no secret. The scalar
+// fields carry only a fixed, non-secret value. The function members are code,
+// not data; a member can return a runtime secret (for example a minted token),
+// but the capability object never stores a secret. API-key-only vendors declare
+// no login capability.
+/**
+ * The login panel mode. `displayed_code` shows a one-time code that the user
+ * enters in the browser. `submitted_browser_code` asks the user to paste a code
+ * from the browser back into the login flow.
+ */
+export const ADAPTER_LOGIN_PANEL_MODES = ["displayed_code", "submitted_browser_code"];
+/**
+ * The host-side timeout policy. `caller_bounded` lets the caller set the
+ * timeout. `fixed` binds the timeout to a fixed adapter value.
+ */
+export const ADAPTER_LOGIN_TIMEOUT_POLICIES = ["caller_bounded", "fixed"];
+/**
+ * The optional completion claim that the login flow records on success.
+ * `storedSessionId` marks that the flow stored a session identifier.
+ */
+export const ADAPTER_LOGIN_COMPLETION_CLAIMS = ["storedSessionId"];
+function isOneOf(values, candidate) {
+    return typeof candidate === "string" && values.includes(candidate);
+}
+/**
+ * Validates one login capability. The function fails closed: it throws a clear
+ * error for a malformed shape. It checks each scalar field against its fixed
+ * value set, checks each required function member, and checks each optional
+ * member only when the member is present. `adapterType` names the adapter in the
+ * error text.
+ */
+export function assertValidAdapterLoginCapability(value, adapterType) {
+    const prefix = `Adapter "${adapterType}" declares an invalid login capability`;
+    if (typeof value !== "object" || value === null) {
+        throw new Error(`${prefix}: the capability must be an object.`);
+    }
+    const cap = value;
+    if (!isOneOf(ADAPTER_LOGIN_PANEL_MODES, cap.panelMode)) {
+        throw new Error(`${prefix}: "panelMode" must be one of ${ADAPTER_LOGIN_PANEL_MODES.join(", ")}.`);
+    }
+    if (!isOneOf(ADAPTER_LOGIN_TIMEOUT_POLICIES, cap.timeoutPolicy)) {
+        throw new Error(`${prefix}: "timeoutPolicy" must be one of ${ADAPTER_LOGIN_TIMEOUT_POLICIES.join(", ")}.`);
+    }
+    if (typeof cap.getCommand !== "function") {
+        throw new Error(`${prefix}: "getCommand" must be a function.`);
+    }
+    if (typeof cap.parsePrompt !== "function") {
+        throw new Error(`${prefix}: "parsePrompt" must be a function.`);
+    }
+    if (cap.captureCredential !== undefined && typeof cap.captureCredential !== "function") {
+        throw new Error(`${prefix}: "captureCredential" must be a function when present.`);
+    }
+    if (cap.onComplete !== undefined && typeof cap.onComplete !== "function") {
+        throw new Error(`${prefix}: "onComplete" must be a function when present.`);
+    }
+    if (cap.completionClaim !== undefined &&
+        !isOneOf(ADAPTER_LOGIN_COMPLETION_CLAIMS, cap.completionClaim)) {
+        throw new Error(`${prefix}: "completionClaim" must be one of ${ADAPTER_LOGIN_COMPLETION_CLAIMS.join(", ")} when present.`);
+    }
+}
+/**
+ * Validates the optional login capability of an adapter module. The function is
+ * a no-op when the module declares no login capability. It throws a clear error
+ * when the module declares a malformed capability, so the loader fails closed.
+ */
+export function validateAdapterLoginCapability(mod) {
+    if (mod.loginCapability === undefined)
+        return;
+    const adapterType = typeof mod.type === "string" && mod.type.length > 0 ? mod.type : "unknown";
+    assertValidAdapterLoginCapability(mod.loginCapability, adapterType);
+}
+//# sourceMappingURL=login-capability.js.map

package/dist/login-capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-capability.js","sourceRoot":"","sources":["../src/login-capability.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,gFAAgF;AAChF,6EAA6E;AAC7E,+EAA+E;AAC/E,2DAA2D;AAC3D,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,gFAAgF;AAChF,uBAAuB;AAEvB;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,gBAAgB,EAAE,wBAAwB,CAAU,CAAC;AAG/F;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,gBAAgB,EAAE,OAAO,CAAU,CAAC;AAGnF;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,iBAAiB,CAAU,CAAC;AAyD5E,SAAS,OAAO,CAA8B,MAAS,EAAE,SAAkB;IACzE,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAK,MAA4B,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AAC5F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iCAAiC,CAC/C,KAAc,EACd,WAAmB;IAEnB,MAAM,MAAM,GAAG,YAAY,WAAW,wCAAwC,CAAC;IAC/E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,qCAAqC,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAE7C,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,gCAAgC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,8BAA8B,EAAE,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,oCAAoC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC1F,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,oCAAoC,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,qCAAqC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,iBAAiB,KAAK,UAAU,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,wDAAwD,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,iDAAiD,CAAC,CAAC;IAC9E,CAAC;IACD,IACE,GAAG,CAAC,eAAe,KAAK,SAAS;QACjC,CAAC,OAAO,CAAC,+BAA+B,EAAE,GAAG,CAAC,eAAe,CAAC,EAC9D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,sCAAsC,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAC1G,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAAC,GAG9C;IACC,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS;QAAE,OAAO;IAC9C,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,iCAAiC,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;AACtE,CAAC"}

package/dist/login-capability.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=login-capability.test.d.ts.map

package/dist/login-capability.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-capability.test.d.ts","sourceRoot":"","sources":["../src/login-capability.test.ts"],"names":[],"mappings":""}

package/dist/login-capability.test.js

@@ -0,0 +1,78 @@
+import { describe, expect, it } from "vitest";
+import { assertValidAdapterLoginCapability, validateAdapterLoginCapability, } from "./login-capability.js";
+// A well-formed login capability. Each test starts from a clone of this value
+// and then breaks one field, so each case checks exactly one rule.
+function validCapability() {
+    return {
+        panelMode: "displayed_code",
+        timeoutPolicy: "caller_bounded",
+        getCommand: () => "vendor login",
+        parsePrompt: () => null,
+    };
+}
+describe("assertValidAdapterLoginCapability", () => {
+    it("accepts a well-formed capability with only the required fields", () => {
+        expect(() => assertValidAdapterLoginCapability(validCapability(), "vendor")).not.toThrow();
+    });
+    it("accepts a well-formed capability with every optional member set", () => {
+        const capability = {
+            panelMode: "submitted_browser_code",
+            timeoutPolicy: "fixed",
+            getCommand: () => "vendor setup-token",
+            parsePrompt: () => null,
+            captureCredential: () => null,
+            onComplete: async () => { },
+            completionClaim: "storedSessionId",
+        };
+        expect(() => assertValidAdapterLoginCapability(capability, "vendor")).not.toThrow();
+    });
+    it("rejects a non-object capability", () => {
+        expect(() => assertValidAdapterLoginCapability(null, "vendor")).toThrow(/must be an object/);
+        expect(() => assertValidAdapterLoginCapability("displayed_code", "vendor")).toThrow(/must be an object/);
+    });
+    it("rejects an unknown panelMode", () => {
+        const bad = { ...validCapability(), panelMode: "hidden_code" };
+        expect(() => assertValidAdapterLoginCapability(bad, "vendor")).toThrow(/panelMode/);
+    });
+    it("rejects an unknown timeoutPolicy", () => {
+        const bad = { ...validCapability(), timeoutPolicy: "unbounded" };
+        expect(() => assertValidAdapterLoginCapability(bad, "vendor")).toThrow(/timeoutPolicy/);
+    });
+    it("rejects a missing getCommand", () => {
+        const bad = { ...validCapability(), getCommand: "vendor login" };
+        expect(() => assertValidAdapterLoginCapability(bad, "vendor")).toThrow(/getCommand/);
+    });
+    it("rejects a missing parsePrompt", () => {
+        const bad = { ...validCapability(), parsePrompt: undefined };
+        expect(() => assertValidAdapterLoginCapability(bad, "vendor")).toThrow(/parsePrompt/);
+    });
+    it("rejects a non-function captureCredential", () => {
+        const bad = { ...validCapability(), captureCredential: "token" };
+        expect(() => assertValidAdapterLoginCapability(bad, "vendor")).toThrow(/captureCredential/);
+    });
+    it("rejects a non-function onComplete", () => {
+        const bad = { ...validCapability(), onComplete: true };
+        expect(() => assertValidAdapterLoginCapability(bad, "vendor")).toThrow(/onComplete/);
+    });
+    it("rejects an unknown completionClaim", () => {
+        const bad = { ...validCapability(), completionClaim: "storedToken" };
+        expect(() => assertValidAdapterLoginCapability(bad, "vendor")).toThrow(/completionClaim/);
+    });
+    it("names the adapter in the error text", () => {
+        const bad = { ...validCapability(), panelMode: "hidden_code" };
+        expect(() => assertValidAdapterLoginCapability(bad, "codex_local")).toThrow(/codex_local/);
+    });
+});
+describe("validateAdapterLoginCapability", () => {
+    it("accepts a module with no login capability", () => {
+        expect(() => validateAdapterLoginCapability({ type: "vendor_local" })).not.toThrow();
+    });
+    it("accepts a module with a well-formed login capability", () => {
+        expect(() => validateAdapterLoginCapability({ type: "vendor_local", loginCapability: validCapability() })).not.toThrow();
+    });
+    it("rejects a module with a malformed login capability", () => {
+        const bad = { ...validCapability(), panelMode: "hidden_code" };
+        expect(() => validateAdapterLoginCapability({ type: "vendor_local", loginCapability: bad })).toThrow(/vendor_local/);
+    });
+});
+//# sourceMappingURL=login-capability.test.js.map

package/dist/login-capability.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-capability.test.js","sourceRoot":"","sources":["../src/login-capability.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,iCAAiC,EACjC,8BAA8B,GAE/B,MAAM,uBAAuB,CAAC;AAE/B,8EAA8E;AAC9E,mEAAmE;AACnE,SAAS,eAAe;IACtB,OAAO;QACL,SAAS,EAAE,gBAAgB;QAC3B,aAAa,EAAE,gBAAgB;QAC/B,UAAU,EAAE,GAAG,EAAE,CAAC,cAAc;QAChC,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI;KACxB,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,CAAC,GAAG,EAAE,CAAC,iCAAiC,CAAC,eAAe,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,UAAU,GAA2B;YACzC,SAAS,EAAE,wBAAwB;YACnC,aAAa,EAAE,OAAO;YACtB,UAAU,EAAE,GAAG,EAAE,CAAC,oBAAoB;YACtC,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI;YACvB,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI;YAC7B,UAAU,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YAC1B,eAAe,EAAE,iBAAiB;SACnC,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CAAC,iCAAiC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,GAAG,EAAE,CAAC,iCAAiC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC7F,MAAM,CAAC,GAAG,EAAE,CAAC,iCAAiC,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CACjF,mBAAmB,CACpB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,GAAG,GAAG,EAAE,GAAG,eAAe,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;QAC/D,MAAM,CAAC,GAAG,EAAE,CAAC,iCAAiC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,GAAG,GAAG,EAAE,GAAG,eAAe,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;QACjE,MAAM,CAAC,GAAG,EAAE,CAAC,iCAAiC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,GAAG,GAAG,EAAE,GAAG,eAAe,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;QACjE,MAAM,CAAC,GAAG,EAAE,CAAC,iCAAiC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,GAAG,GAAG,EAAE,GAAG,eAAe,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;QAC7D,MAAM,CAAC,GAAG,EAAE,CAAC,iCAAiC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,GAAG,GAAG,EAAE,GAAG,eAAe,EAAE,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC;QACjE,MAAM,CAAC,GAAG,EAAE,CAAC,iCAAiC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,GAAG,GAAG,EAAE,GAAG,eAAe,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACvD,MAAM,CAAC,GAAG,EAAE,CAAC,iCAAiC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,GAAG,GAAG,EAAE,GAAG,eAAe,EAAE,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC;QACrE,MAAM,CAAC,GAAG,EAAE,CAAC,iCAAiC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,GAAG,GAAG,EAAE,GAAG,eAAe,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;QAC/D,MAAM,CAAC,GAAG,EAAE,CAAC,iCAAiC,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,EAAE,CAAC,8BAA8B,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,GAAG,EAAE,CACV,8BAA8B,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,EAAE,CAAC,CAC7F,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,GAAG,GAAG,EAAE,GAAG,eAAe,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;QAC/D,MAAM,CAAC,GAAG,EAAE,CACV,8BAA8B,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAC/E,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/login-pty-transport.d.ts

@@ -0,0 +1,80 @@
+/**
+ * A live pseudo-terminal session for one setup-token login command. A sandbox
+ * provider opens it. The session allocates a real pseudo-terminal, streams the
+ * raw terminal output, accepts delayed input, and stops the child. The session
+ * forwards the raw terminal bytes; it runs no ANSI or OSC 8 handling.
+ */
+export interface LoginPtySession {
+    /**
+     * Registers the one output listener. The session streams each raw terminal
+     * output chunk to `listener`, in order, as the pseudo-terminal emits it.
+     */
+    onData(listener: (chunk: string) => void): void;
+    /**
+     * Writes raw input bytes to the pseudo-terminal. The runner writes the browser
+     * code plus the Enter byte here, after the command starts. The session
+     * forwards the bytes unchanged, so the code reaches the pseudo-terminal first
+     * and the Enter byte reaches it last.
+     */
+    write(data: string): void;
+    /** Resolves with the child exit code when the command ends. */
+    wait(): Promise<{
+        exitCode: number | null;
+    }>;
+    /**
+     * Stops the child process with a direct child stop. The characterization
+     * showed that the child needs `SIGKILL`. The method must be safe to call more
+     * than one time.
+     */
+    kill(): void;
+    /** Releases the session resources. The method must be safe to call more than one time. */
+    close(): Promise<void>;
+}
+/**
+ * Opens a pseudo-terminal session for `command`. A provider binds this to its
+ * sandbox. The transport calls it one time, on start.
+ */
+export type LoginPtySessionOpener = (command: string) => Promise<LoginPtySession>;
+/**
+ * The child side of the setup-token run, in the shape the login runner needs.
+ * The transport starts the command on a pseudo-terminal, streams the terminal
+ * output, delivers delayed input, and stops the child for a terminal state.
+ *
+ * The shape matches the runner `SetupTokenPtyDriver` interface, so the runner
+ * accepts the transport with no adapter. The transport never imports the runner,
+ * so the runner package keeps its one-way dependency on this package.
+ */
+export interface LoginPtyTransport {
+    /**
+     * Opens the pseudo-terminal session for `command` and streams the terminal
+     * output to `onData` in order. Resolves with the child exit code when the
+     * command ends. The transport calls this one time.
+     */
+    start(command: string, onData: (chunk: string) => void): Promise<{
+        exitCode: number | null;
+    }>;
+    /**
+     * Writes `input` to the pseudo-terminal. The runner writes the browser code
+     * plus the Enter byte one time, after it matches the prompt. An input that
+     * arrives before the session opens waits in a small buffer, and the transport
+     * flushes it in order when the session opens.
+     */
+    write(input: string): void;
+    /**
+     * Stops the child with a direct child stop. The method is safe to call before
+     * start and safe to call more than one time. A stop before the session opens
+     * marks the run, and the transport kills the child as soon as the session
+     * opens.
+     */
+    stop(): void;
+    /** Releases the transport resources. The method is safe to call more than one time. */
+    dispose(): Promise<void>;
+}
+/**
+ * Creates a {@link LoginPtyTransport} over `open`. The transport adapts a
+ * pseudo-terminal session into the runner driver shape. It buffers an early
+ * input write, it honors an early stop, and it forwards the raw terminal bytes
+ * with no ANSI or OSC 8 handling.
+ */
+export declare function createLoginPtyTransport(open: LoginPtySessionOpener): LoginPtyTransport;
+//# sourceMappingURL=login-pty-transport.d.ts.map

package/dist/login-pty-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-pty-transport.d.ts","sourceRoot":"","sources":["../src/login-pty-transport.ts"],"names":[],"mappings":"AAgBA;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IAChD;;;;;OAKG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,+DAA+D;IAC/D,IAAI,IAAI,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAC7C;;;;OAIG;IACH,IAAI,IAAI,IAAI,CAAC;IACb,0FAA0F;IAC1F,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;AAElF;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAC9F;;;;;OAKG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;;OAKG;IACH,IAAI,IAAI,IAAI,CAAC;IACb,uFAAuF;IACvF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,qBAAqB,GAC1B,iBAAiB,CAkDnB"}

package/dist/login-pty-transport.js

@@ -0,0 +1,75 @@
+// The login pseudo-terminal (PTY) transport. It gives the Claude `setup-token`
+// login runner a child that runs on a real pseudo-terminal (PTY). The command
+// needs a PTY: pipe stdio emits no login prompt. The transport starts the
+// command on a PTY, streams the incremental terminal output, delivers delayed
+// input, and stops the child for a terminal state.
+//
+// This module is provider-agnostic and pure. It holds no Node built-in import,
+// so the browser-safe root entry can re-export it. A sandbox provider (for
+// example the Daytona plugin) opens the concrete pseudo-terminal through a
+// {@link LoginPtySessionOpener}. A unit test opens a fake pseudo-terminal
+// through the same opener.
+//
+// Boundary (ANSI and OSC 8): the transport forwards the raw terminal bytes
+// unchanged. It runs no ANSI or OSC 8 handling. The setup-token parser owns that
+// handling, so the transport keeps every terminal byte intact for the parser.
+/**
+ * Creates a {@link LoginPtyTransport} over `open`. The transport adapts a
+ * pseudo-terminal session into the runner driver shape. It buffers an early
+ * input write, it honors an early stop, and it forwards the raw terminal bytes
+ * with no ANSI or OSC 8 handling.
+ */
+export function createLoginPtyTransport(open) {
+    let session = null;
+    let started = false;
+    let stopped = false;
+    // Input that the runner writes before the session opens. The transport flushes
+    // it in order when the session opens. In the normal flow the runner writes
+    // only after the first output, so this buffer stays empty.
+    const pendingInput = [];
+    const flushPendingInput = () => {
+        if (!session)
+            return;
+        while (pendingInput.length > 0) {
+            const next = pendingInput.shift();
+            if (next !== undefined)
+                session.write(next);
+        }
+    };
+    return {
+        async start(command, onData) {
+            if (started) {
+                throw new Error("login PTY transport already started.");
+            }
+            started = true;
+            const opened = await open(command);
+            session = opened;
+            // Register the output listener before any delayed input, so no output
+            // chunk is missed between the open and the first write.
+            opened.onData(onData);
+            flushPendingInput();
+            // A stop that arrived while the session was opening kills the child now.
+            if (stopped)
+                opened.kill();
+            return opened.wait();
+        },
+        write(input) {
+            if (session) {
+                session.write(input);
+                return;
+            }
+            pendingInput.push(input);
+        },
+        stop() {
+            stopped = true;
+            session?.kill();
+        },
+        async dispose() {
+            // Release only a session that opened. A run that stopped before start
+            // opens no session, so there is nothing to close.
+            if (session)
+                await session.close();
+        },
+    };
+}
+//# sourceMappingURL=login-pty-transport.js.map

package/dist/login-pty-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-pty-transport.js","sourceRoot":"","sources":["../src/login-pty-transport.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAC9E,mDAAmD;AACnD,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,2EAA2E;AAC3E,0EAA0E;AAC1E,2BAA2B;AAC3B,EAAE;AACF,2EAA2E;AAC3E,iFAAiF;AACjF,8EAA8E;AAyE9E;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAA2B;IAE3B,IAAI,OAAO,GAA2B,IAAI,CAAC;IAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,+EAA+E;IAC/E,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,MAAM,iBAAiB,GAAG,GAAS,EAAE;QACnC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM;YACzB,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,GAAG,MAAM,CAAC;YACjB,sEAAsE;YACtE,wDAAwD;YACxD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACtB,iBAAiB,EAAE,CAAC;YACpB,yEAAyE;YACzE,IAAI,OAAO;gBAAE,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;QACD,KAAK,CAAC,KAAK;YACT,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI;YACF,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;QACD,KAAK,CAAC,OAAO;YACX,sEAAsE;YACtE,kDAAkD;YAClD,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACrC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/login-pty-transport.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=login-pty-transport.test.d.ts.map

package/dist/login-pty-transport.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-pty-transport.test.d.ts","sourceRoot":"","sources":["../src/login-pty-transport.test.ts"],"names":[],"mappings":""}

package/dist/login-pty-transport.test.js

@@ -0,0 +1,185 @@
+import { describe, expect, it } from "vitest";
+import { createLoginPtyTransport, } from "./login-pty-transport.js";
+// The Enter byte the terminal login UI reads to submit the browser code. The
+// login runner appends this byte to the code. The transport forwards the bytes
+// unchanged, so the pseudo-terminal receives the code and then the Enter byte.
+const ENTER = "\r";
+/**
+ * A fake pseudo-terminal session. It records each input write, drives the output
+ * stream on demand, and records the stop and the close. The tests use it in
+ * place of a real pseudo-terminal, so the transport runs with no sandbox.
+ */
+function createFakePtySession() {
+    const writes = [];
+    let listener = null;
+    let resolveWait = null;
+    const waitPromise = new Promise((resolve) => {
+        resolveWait = resolve;
+    });
+    let markReady = null;
+    const ready = new Promise((resolve) => {
+        markReady = resolve;
+    });
+    let killed = 0;
+    let closed = 0;
+    return {
+        ready,
+        onData(next) {
+            listener = next;
+            markReady?.();
+        },
+        write(data) {
+            writes.push(data);
+        },
+        wait() {
+            return waitPromise;
+        },
+        kill() {
+            killed += 1;
+        },
+        async close() {
+            closed += 1;
+        },
+        // Test control below. The transport never reads these fields.
+        emit(chunk) {
+            listener?.(chunk);
+        },
+        finish(exitCode) {
+            resolveWait?.({ exitCode });
+        },
+        get writes() {
+            return writes;
+        },
+        get killed() {
+            return killed;
+        },
+        get closed() {
+            return closed;
+        },
+    };
+}
+describe("createLoginPtyTransport", () => {
+    it("delivers delayed input to the process", async () => {
+        const session = createFakePtySession();
+        const transport = createLoginPtyTransport(async () => session);
+        const started = transport.start("claude setup-token", () => { });
+        await session.ready;
+        // The input arrives after the start and after the first output, so the
+        // transport delivers it to the running process, not before it.
+        session.emit("... the url below to sign in ...");
+        transport.write("ABCD");
+        session.finish(0);
+        await started;
+        expect(session.writes).toEqual(["ABCD"]);
+    });
+    it("returns incremental terminal output to the runner", async () => {
+        const session = createFakePtySession();
+        const received = [];
+        const transport = createLoginPtyTransport(async () => session);
+        const started = transport.start("claude setup-token", (chunk) => {
+            received.push(chunk);
+        });
+        await session.ready;
+        // Each output chunk reaches the runner as the pseudo-terminal emits it, not
+        // as one final batch at the end.
+        session.emit("first ");
+        expect(received).toEqual(["first "]);
+        session.emit("second");
+        expect(received).toEqual(["first ", "second"]);
+        session.finish(0);
+        await started;
+    });
+    it("delivers the Enter byte after the browser code", async () => {
+        const session = createFakePtySession();
+        const transport = createLoginPtyTransport(async () => session);
+        const started = transport.start("claude setup-token", () => { });
+        await session.ready;
+        // The runner writes the code plus the Enter byte in one write. The transport
+        // forwards the bytes unchanged, so the code comes first and the Enter byte
+        // comes last.
+        transport.write("WXYZ" + ENTER);
+        session.finish(0);
+        await started;
+        const delivered = session.writes.join("");
+        expect(delivered).toBe("WXYZ" + ENTER);
+        expect(delivered.endsWith(ENTER)).toBe(true);
+        expect(delivered.indexOf("WXYZ")).toBeLessThan(delivered.lastIndexOf(ENTER));
+    });
+    it("resolves start with the child exit code", async () => {
+        const session = createFakePtySession();
+        const transport = createLoginPtyTransport(async () => session);
+        const started = transport.start("claude setup-token", () => { });
+        session.finish(7);
+        await expect(started).resolves.toEqual({ exitCode: 7 });
+    });
+    it("stops the child with a direct kill", async () => {
+        const session = createFakePtySession();
+        const transport = createLoginPtyTransport(async () => session);
+        const started = transport.start("claude setup-token", () => { });
+        await session.ready;
+        transport.stop();
+        expect(session.killed).toBe(1);
+        session.finish(null);
+        await started;
+    });
+    it("disposes the session resources", async () => {
+        const session = createFakePtySession();
+        const transport = createLoginPtyTransport(async () => session);
+        const started = transport.start("claude setup-token", () => { });
+        session.finish(0);
+        await started;
+        await transport.dispose();
+        expect(session.closed).toBe(1);
+    });
+    it("stays safe when stop and dispose run before start", async () => {
+        const session = createFakePtySession();
+        const transport = createLoginPtyTransport(async () => session);
+        // The runner may stop or dispose before it starts the child. The transport
+        // must not throw, and it must not open a session for a run it already stopped.
+        transport.stop();
+        await transport.dispose();
+        expect(session.killed).toBe(0);
+        expect(session.closed).toBe(0);
+    });
+    it("kills a session that opens after an early stop", async () => {
+        const session = createFakePtySession();
+        let resolveOpen;
+        const openGate = new Promise((resolve) => {
+            resolveOpen = resolve;
+        });
+        const transport = createLoginPtyTransport(async () => {
+            await openGate;
+            return session;
+        });
+        const started = transport.start("claude setup-token", () => { });
+        // The stop arrives while the session is still opening. The transport must
+        // kill the child as soon as the session exists.
+        transport.stop();
+        resolveOpen();
+        session.finish(null);
+        await started;
+        expect(session.killed).toBe(1);
+    });
+    it("buffers input that arrives before the session opens", async () => {
+        const session = createFakePtySession();
+        let resolveOpen;
+        const openGate = new Promise((resolve) => {
+            resolveOpen = resolve;
+        });
+        const transport = createLoginPtyTransport(async () => {
+            await openGate;
+            return session;
+        });
+        const started = transport.start("claude setup-token", () => { });
+        transport.write("EARLY" + ENTER);
+        expect(session.writes).toEqual([]);
+        resolveOpen();
+        // Let the pending open resolve and flush the buffered input.
+        await Promise.resolve();
+        await Promise.resolve();
+        expect(session.writes).toEqual(["EARLY" + ENTER]);
+        session.finish(0);
+        await started;
+    });
+});
+//# sourceMappingURL=login-pty-transport.test.js.map

package/dist/login-pty-transport.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-pty-transport.test.js","sourceRoot":"","sources":["../src/login-pty-transport.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,uBAAuB,GAExB,MAAM,0BAA0B,CAAC;AAElC,6EAA6E;AAC7E,+EAA+E;AAC/E,+EAA+E;AAC/E,MAAM,KAAK,GAAG,IAAI,CAAC;AAEnB;;;;GAIG;AACH,SAAS,oBAAoB;IAW3B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,QAAQ,GAAqC,IAAI,CAAC;IACtD,IAAI,WAAW,GAA0D,IAAI,CAAC;IAC9E,MAAM,WAAW,GAAG,IAAI,OAAO,CAA8B,CAAC,OAAO,EAAE,EAAE;QACvE,WAAW,GAAG,OAAO,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,IAAI,SAAS,GAAwB,IAAI,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC1C,SAAS,GAAG,OAAO,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO;QACL,KAAK;QACL,MAAM,CAAC,IAA6B;YAClC,QAAQ,GAAG,IAAI,CAAC;YAChB,SAAS,EAAE,EAAE,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,IAAY;YAChB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,IAAI;YACF,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,IAAI;YACF,MAAM,IAAI,CAAC,CAAC;QACd,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,IAAI,CAAC,CAAC;QACd,CAAC;QACD,8DAA8D;QAC9D,IAAI,CAAC,KAAa;YAChB,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QACD,MAAM,CAAC,QAAuB;YAC5B,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,MAAM;YACR,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,MAAM;YACR,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,MAAM;YACR,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,oBAAoB,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAChE,MAAM,OAAO,CAAC,KAAK,CAAC;QACpB,uEAAuE;QACvE,+DAA+D;QAC/D,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACjD,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxB,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,OAAO,CAAC;QAEd,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC9D,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,KAAK,CAAC;QAEpB,4EAA4E;QAC5E,iCAAiC;QACjC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAE/C,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,OAAO,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,oBAAoB,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAChE,MAAM,OAAO,CAAC,KAAK,CAAC;QACpB,6EAA6E;QAC7E,2EAA2E;QAC3E,cAAc;QACd,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,OAAO,CAAC;QAEd,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,oBAAoB,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAElB,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,oBAAoB,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAChE,MAAM,OAAO,CAAC,KAAK,CAAC;QACpB,SAAS,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE/B,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,OAAO,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,oBAAoB,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,OAAO,CAAC;QAEd,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC;QAE/D,2EAA2E;QAC3E,+EAA+E;QAC/E,SAAS,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;QAE1B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;QACvC,IAAI,WAAwB,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC7C,WAAW,GAAG,OAAO,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,IAAI,EAAE;YACnD,MAAM,QAAQ,CAAC;YACf,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,oBAAoB,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAChE,0EAA0E;QAC1E,gDAAgD;QAChD,SAAS,CAAC,IAAI,EAAE,CAAC;QACjB,WAAW,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,OAAO,CAAC;QAEd,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;QACvC,IAAI,WAAwB,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC7C,WAAW,GAAG,OAAO,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,IAAI,EAAE;YACnD,MAAM,QAAQ,CAAC;YACf,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,oBAAoB,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAChE,SAAS,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAEnC,WAAW,EAAE,CAAC;QACd,6DAA6D;QAC7D,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC;QAElD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,OAAO,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/login-runner-lifecycle.d.ts

@@ -0,0 +1,70 @@
+/**
+ * The terminal outcome of a login runner. A runner reports exactly one value.
+ * The value is a fixed, non-secret status.
+ */
+export type LoginRunnerOutcome = "success" | "failure" | "timeout" | "cancelled";
+/**
+ * The base result of a login runner. Every runner returns at least these three
+ * fields. A runner can extend the base with its own non-secret status fields. The
+ * result never carries a URL, a code, or a token byte.
+ */
+export interface LoginRunnerResult {
+    outcome: LoginRunnerOutcome;
+    exitCode: number | null;
+    promptSurfaced: boolean;
+}
+/**
+ * A non-leaking progress sink. It receives only fixed status lines. A runner
+ * never passes a URL, a code, or a token byte to this sink.
+ */
+export type LoginRunnerLog = (line: string) => void;
+/**
+ * The shared lifecycle options. Both runners set the host-side timeout, accept an
+ * optional cancellation signal, and accept an optional log sink. Each runner
+ * option type extends this base with its own callbacks.
+ */
+export interface LoginRunnerLifecycleOptions {
+    /** The host-side timeout in milliseconds. */
+    timeoutMs: number;
+    /** An optional cancellation signal. */
+    signal?: AbortSignal;
+    /** A non-leaking progress sink. It receives only fixed status lines. */
+    log?: LoginRunnerLog;
+}
+/**
+ * The dispose contract. A login driver releases its resources through `dispose`.
+ * The runner always disposes the driver one time for every terminal state. The
+ * method must be safe to call one time on every path.
+ */
+export interface LoginRunnerDisposable {
+    /** Releases the driver resources. */
+    dispose(): Promise<void>;
+}
+/**
+ * The result of the timeout race. The `exit` kind carries the command exit code.
+ * The `timeout` kind and the `cancelled` kind each mark a terminal state with no
+ * exit code.
+ */
+export type LoginRunnerRaceResult = {
+    kind: "exit";
+    exitCode: number | null;
+} | {
+    kind: "timeout";
+} | {
+    kind: "cancelled";
+};
+/**
+ * Races the streaming `work` against the timeout and the cancellation signal. The
+ * work result resolves the race with an `exit` status; the timeout resolves it
+ * with a `timeout` status; the signal resolves it with a `cancelled` status. A
+ * pre-aborted signal resolves the race with a `cancelled` status at once, before
+ * the helper starts the timer or listens to the work. A work error rejects the
+ * race, so the caller can convert it to a fixed, non-secret error. A late work
+ * rejection after the race already settled is consumed here, so it never becomes
+ * an unhandled rejection. The helper clears the timer and removes the signal
+ * listener on the first settle.
+ */
+export declare function raceLoginRunnerExit(work: Promise<{
+    exitCode: number | null;
+}>, timeoutMs: number, signal: AbortSignal | undefined): Promise<LoginRunnerRaceResult>;
+//# sourceMappingURL=login-runner-lifecycle.d.ts.map

package/dist/login-runner-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-runner-lifecycle.d.ts","sourceRoot":"","sources":["../src/login-runner-lifecycle.ts"],"names":[],"mappings":"AAWA;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;AAEjF;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,OAAO,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;AAEpD;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,wEAAwE;IACxE,GAAG,CAAC,EAAE,cAAc,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,qCAAqC;IACrC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC;AAE1B;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,EAC1C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,GAAG,SAAS,GAC9B,OAAO,CAAC,qBAAqB,CAAC,CAgChC"}