@with-logic/elwood 0.1.0

package/dist/claude/login/expiry-screen.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Recognizer for Claude's re-authentication-required screens (PRD §5.3,
+ * C-CLAUDE-17/18). The Claude CLI shows these when a login lapses or is revoked
+ * and the session can no longer act until the human re-runs `/login`. Owned by the
+ * Claude login area (not generic startup infra) because it is Claude-specific and
+ * version-coupled to that CLI's wording (v2.1.x).
+ *
+ * Recognized as INDEPENDENT linear searches (no unbounded backtracking, since
+ * this runs on every rendered frame): a lapsed-or-absent-login phrase AND a
+ * `/login` recovery directive both present, or the self-contained
+ * "run /login to sign in" directive on its own. Anchoring on the directive stops
+ * an unrelated mention of "login" from tripping it.
+ *
+ * The lapsed-login phrase covers a session that expired/was revoked mid-run
+ * (`Login expired`, `Session expired`, `OAuth token revoked`) as well as an
+ * outright signed-out session (`Not logged in`, which Claude renders when auth is
+ * dropped entirely). All four are the same recovery for the caller — re-run
+ * `/login` — so they map to one banner. The startup path already flags the
+ * single-line `not logged in` form; recognizing it here closes the MID-SESSION gap
+ * (a ready session that logs out and shows "Not logged in · Run /login").
+ */
+/** Whether the text shows a Claude re-authentication-required banner. */
+export declare function isClaudeReauthRequiredText(text: string): boolean;
+//# sourceMappingURL=expiry-screen.d.ts.map

package/dist/claude/login/expiry-screen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expiry-screen.d.ts","sourceRoot":"","sources":["../../../src/claude/login/expiry-screen.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAOH,yEAAyE;AACzE,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGhE"}

package/dist/claude/login/expiry-screen.js

@@ -0,0 +1,31 @@
+/**
+ * Recognizer for Claude's re-authentication-required screens (PRD §5.3,
+ * C-CLAUDE-17/18). The Claude CLI shows these when a login lapses or is revoked
+ * and the session can no longer act until the human re-runs `/login`. Owned by the
+ * Claude login area (not generic startup infra) because it is Claude-specific and
+ * version-coupled to that CLI's wording (v2.1.x).
+ *
+ * Recognized as INDEPENDENT linear searches (no unbounded backtracking, since
+ * this runs on every rendered frame): a lapsed-or-absent-login phrase AND a
+ * `/login` recovery directive both present, or the self-contained
+ * "run /login to sign in" directive on its own. Anchoring on the directive stops
+ * an unrelated mention of "login" from tripping it.
+ *
+ * The lapsed-login phrase covers a session that expired/was revoked mid-run
+ * (`Login expired`, `Session expired`, `OAuth token revoked`) as well as an
+ * outright signed-out session (`Not logged in`, which Claude renders when auth is
+ * dropped entirely). All four are the same recovery for the caller — re-run
+ * `/login` — so they map to one banner. The startup path already flags the
+ * single-line `not logged in` form; recognizing it here closes the MID-SESSION gap
+ * (a ready session that logs out and shows "Not logged in · Run /login").
+ */
+const lapsedLoginPhrase = /(?:(?:login|session|oauth token)\s+(?:expired|revoked)|not\s+logged\s+in)/i;
+const runLoginDirective = /(?:run|please run)\s+\/login/i;
+const runLoginToSignIn = /(?:run|please run)\s+\/login\s+to\s+sign in/i;
+/** Whether the text shows a Claude re-authentication-required banner. */
+export function isClaudeReauthRequiredText(text) {
+    if (runLoginToSignIn.test(text))
+        return true;
+    return lapsedLoginPhrase.test(text) && runLoginDirective.test(text);
+}
+//# sourceMappingURL=expiry-screen.js.map

package/dist/claude/login/expiry-screen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expiry-screen.js","sourceRoot":"","sources":["../../../src/claude/login/expiry-screen.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,iBAAiB,GACrB,4EAA4E,CAAC;AAC/E,MAAM,iBAAiB,GAAG,+BAA+B,CAAC;AAC1D,MAAM,gBAAgB,GAAG,8CAA8C,CAAC;AAExE,yEAAyE;AACzE,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtE,CAAC"}

package/dist/claude/login/screens.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Screen matchers for Claude's interactive `/login` flow (PRD §5.3, C-API-43).
+ * Each regex recognizes one stage of the real CLI flow so the driver can detect
+ * which screen is showing and react. Matched on the rendered snapshot text; the
+ * literal strings mirror the CLI's own wording (v2.1.x).
+ */
+/** The "Select login method" list that `/login` shows before authorizing. */
+export declare const methodPickerVisible: RegExp;
+/** The screen that offers/opens the browser authorization URL. */
+export declare const authUrlVisible: RegExp;
+/** The manual authorization-code entry prompt (default account flow). */
+export declare const pasteCodePrompt: RegExp;
+/** A successful login. */
+export declare const loginSucceeded: RegExp;
+/** An explicit login failure or a rejected/invalid authorization code. */
+export declare const loginFailed: RegExp;
+/** Extract the first authorization URL on screen, or undefined when none is shown yet. */
+export declare function extractAuthUrl(text: string): string | undefined;
+/**
+ * The ACTIVE region of the screen: the last few non-blank lines, where the CLI's
+ * current prompt/banner lives. Sensitive stage matching (code prompt, success,
+ * failure) is scoped to this tail so unrelated model/repository output scrolled
+ * into the viewport cannot spoof a login stage or trigger code disclosure.
+ */
+export declare function activeRegion(text: string): string;
+//# sourceMappingURL=screens.d.ts.map

package/dist/claude/login/screens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"screens.d.ts","sourceRoot":"","sources":["../../../src/claude/login/screens.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,6EAA6E;AAC7E,eAAO,MAAM,mBAAmB,QAAyB,CAAC;AAE1D,kEAAkE;AAClE,eAAO,MAAM,cAAc,QAC2F,CAAC;AAEvH,yEAAyE;AACzE,eAAO,MAAM,eAAe,QAAqB,CAAC;AAElD,0BAA0B;AAC1B,eAAO,MAAM,cAAc,QAAmC,CAAC;AAE/D,0EAA0E;AAC1E,eAAO,MAAM,WAAW,QACyE,CAAC;AAMlG,0FAA0F;AAC1F,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE/D;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGjD"}

package/dist/claude/login/screens.js

@@ -0,0 +1,33 @@
+/**
+ * Screen matchers for Claude's interactive `/login` flow (PRD §5.3, C-API-43).
+ * Each regex recognizes one stage of the real CLI flow so the driver can detect
+ * which screen is showing and react. Matched on the rendered snapshot text; the
+ * literal strings mirror the CLI's own wording (v2.1.x).
+ */
+/** The "Select login method" list that `/login` shows before authorizing. */
+export const methodPickerVisible = /select login method/i;
+/** The screen that offers/opens the browser authorization URL. */
+export const authUrlVisible = /authenticate your account at|browser didn'?t open|opening browser to authorize|if the browser didn'?t open, visit/i;
+/** The manual authorization-code entry prompt (default account flow). */
+export const pasteCodePrompt = /paste code here/i;
+/** A successful login. */
+export const loginSucceeded = /login successful|logged in as/i;
+/** An explicit login failure or a rejected/invalid authorization code. */
+export const loginFailed = /login failed|oauth (?:login failed|error)|invalid code|failed to exchange authorization code/i;
+/** A `claude.ai`/console OAuth authorize URL, captured from the screen if present. */
+const authUrlCapture = /(https?:\/\/[^\s'"]*(?:claude\.com|claude\.ai|anthropic\.com)\/oauth[^\s'"]*)/i;
+/** Extract the first authorization URL on screen, or undefined when none is shown yet. */
+export function extractAuthUrl(text) {
+    return authUrlCapture.exec(text)?.[1];
+}
+/**
+ * The ACTIVE region of the screen: the last few non-blank lines, where the CLI's
+ * current prompt/banner lives. Sensitive stage matching (code prompt, success,
+ * failure) is scoped to this tail so unrelated model/repository output scrolled
+ * into the viewport cannot spoof a login stage or trigger code disclosure.
+ */
+export function activeRegion(text) {
+    const lines = text.split("\n").filter((line) => line.trim() !== "");
+    return lines.slice(-6).join("\n");
+}
+//# sourceMappingURL=screens.js.map

package/dist/claude/login/screens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"screens.js","sourceRoot":"","sources":["../../../src/claude/login/screens.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AAE1D,kEAAkE;AAClE,MAAM,CAAC,MAAM,cAAc,GACzB,oHAAoH,CAAC;AAEvH,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAElD,0BAA0B;AAC1B,MAAM,CAAC,MAAM,cAAc,GAAG,gCAAgC,CAAC;AAE/D,0EAA0E;AAC1E,MAAM,CAAC,MAAM,WAAW,GACtB,+FAA+F,CAAC;AAElG,sFAAsF;AACtF,MAAM,cAAc,GAClB,gFAAgF,CAAC;AAEnF,0FAA0F;AAC1F,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC"}

package/dist/claude/login/session-login.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Wires a ClaudeSessionApi's primitives into the `/login` driver (PRD §5.3,
+ * C-API-43). Runs the flow as an EXCLUSIVE control-queue task: a fresh-`ready`
+ * watch is armed up front so `awaitUsable` resolves only on a post-start `ready`
+ * transition (renewed usability, not a stale banner), `/login` and all interactive
+ * keystrokes are written directly (the lease already owns the queue), and the task
+ * aborts when the session closes. Kept out of the session file for the size cap.
+ */
+import type { ControlQueue } from "../../core/control-queue/index.ts";
+import type { ScreenTerminal } from "../../core/models/tui-screen.ts";
+import { type ClaudeLoginOptions } from "./types.ts";
+export type LoginSessionDeps = {
+    readonly controlQueue: ControlQueue;
+    readonly terminal: ScreenTerminal;
+    /** Whether a blocking dialog is on screen (login writes hold while true). */
+    readonly blocked: () => boolean;
+    /**
+     * Subscribe to `ready` transitions. Returns an unsubscribe. Fires on a fresh
+     * transition, so `awaitUsable` observes the session become usable AFTER auth.
+     */
+    readonly onReady: (handler: () => void) => () => void;
+};
+export declare function runSessionLogin(deps: LoginSessionDeps, options: ClaudeLoginOptions): Promise<void>;
+//# sourceMappingURL=session-login.d.ts.map

package/dist/claude/login/session-login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-login.d.ts","sourceRoot":"","sources":["../../../src/claude/login/session-login.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAEtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAStE,OAAO,EAAE,KAAK,kBAAkB,EAAyB,MAAM,YAAY,CAAC;AAI5E,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC;IAChC;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;CACvD,CAAC;AAEF,wBAAgB,eAAe,CAC7B,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,IAAI,CAAC,CA8Cf"}

package/dist/claude/login/session-login.js

@@ -0,0 +1,97 @@
+/**
+ * Wires a ClaudeSessionApi's primitives into the `/login` driver (PRD §5.3,
+ * C-API-43). Runs the flow as an EXCLUSIVE control-queue task: a fresh-`ready`
+ * watch is armed up front so `awaitUsable` resolves only on a post-start `ready`
+ * transition (renewed usability, not a stale banner), `/login` and all interactive
+ * keystrokes are written directly (the lease already owns the queue), and the task
+ * aborts when the session closes. Kept out of the session file for the size cap.
+ */
+import { commandEnterDelayMs } from "../../core/input/index.js";
+import { abortableDelay, abortError, deadlineSignal, holdWhileBlocked, raceSettle, } from "./abort.js";
+import { driveLogin } from "./driver.js";
+import { defaultLoginTimeoutMs } from "./types.js";
+const escapeKey = "\u001b";
+export function runSessionLogin(deps, options) {
+    // Start the OVERALL deadline NOW — before the queue dispatches the exclusive
+    // task — so `timeoutMs` bounds the whole call including any time spent WAITING
+    // behind other queued operations, honoring the `login_timeout after timeoutMs`
+    // contract regardless of queue depth.
+    const timeoutMs = options.timeoutMs ?? defaultLoginTimeoutMs;
+    const controller = new AbortController();
+    const deadline = deadlineSignal(timeoutMs, controller.signal);
+    return deps.controlQueue
+        .runExclusive("login", async (queueClose) => {
+        // Compose the pre-started deadline with the queue's close signal so the flow
+        // settles on the FIRST of timeout, session close, success, or failure.
+        queueClose.addEventListener("abort", () => controller.abort(), { once: true });
+        const readies = watchReadyCount(deps, deadline.signal);
+        try {
+            await driveLogin({
+                terminal: deps.terminal,
+                blocked: deps.blocked,
+                submit: (command) => submitLoginCommand(deps, command, deadline.signal),
+                awaitUsable: () => raceSettle(readies.waitForNext(), deadline.signal),
+            }, options, deadline.signal);
+        }
+        catch (error) {
+            // Best-effort: cancel the still-open login UI before releasing the lease,
+            // so a failed/timed-out attempt leaves no dialog for the next queued op to
+            // write into. Never masks the original error.
+            try {
+                await deps.terminal.sendInput(escapeKey);
+            }
+            catch {
+                // A closed terminal makes the cancel a no-op; the original error stands.
+            }
+            throw error;
+        }
+        finally {
+            readies.stop();
+        }
+    }, 
+    // Drop this login if its deadline fires while it is STILL QUEUED behind other
+    // work, so the timeout bounds queue-wait too.
+    { signal: deadline.signal, error: () => abortError(deadline.signal) })
+        .finally(() => deadline.cancel());
+}
+// Track a monotonic count of `ready` transitions since login started, and let a
+// caller wait for the NEXT ready strictly after the count it captures — so a ready
+// observed before success is never mistaken for post-auth usability.
+function watchReadyCount(deps, signal) {
+    let count = 0;
+    const waiters = new Set();
+    const off = deps.onReady(() => {
+        count += 1;
+        for (const w of waiters)
+            w();
+        waiters.clear();
+    });
+    const stop = () => {
+        off();
+        signal.removeEventListener("abort", stop);
+    };
+    signal.addEventListener("abort", stop, { once: true });
+    return {
+        stop,
+        // Resolve on the NEXT ready strictly after this call (post-success). A ready
+        // that already fired earlier in the flow does not satisfy it.
+        waitForNext: () => {
+            const baseline = count;
+            return new Promise((resolve) => {
+                const check = () => (count > baseline ? resolve() : waiters.add(check));
+                check();
+            });
+        },
+    };
+}
+// Write `/login` directly (the exclusive lease already owns the queue): hold while
+// a dialog blocks, then the command text, a settle delay, then a single Enter —
+// mirroring command mode. Every step races the signal so a mid-submission
+// close/timeout settles promptly instead of writing into a dead terminal.
+async function submitLoginCommand(deps, command, signal) {
+    await holdWhileBlocked(deps.blocked, signal);
+    await raceSettle(Promise.resolve(deps.terminal.sendInput(command)), signal);
+    await abortableDelay(commandEnterDelayMs, signal);
+    await raceSettle(Promise.resolve(deps.terminal.sendInput("\r")), signal);
+}
+//# sourceMappingURL=session-login.js.map

package/dist/claude/login/session-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-login.js","sourceRoot":"","sources":["../../../src/claude/login/session-login.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,EACL,cAAc,EACd,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,UAAU,GACX,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAA2B,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAE5E,MAAM,SAAS,GAAG,QAAQ,CAAC;AAc3B,MAAM,UAAU,eAAe,CAC7B,IAAsB,EACtB,OAA2B;IAE3B,6EAA6E;IAC7E,+EAA+E;IAC/E,+EAA+E;IAC/E,sCAAsC;IACtC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,qBAAqB,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,YAAY;SACrB,YAAY,CACX,OAAO,EACP,KAAK,EAAE,UAAU,EAAE,EAAE;QACnB,6EAA6E;QAC7E,uEAAuE;QACvE,UAAU,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,UAAU,CACd;gBACE,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC;gBACvE,WAAW,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC;aACtE,EACD,OAAO,EACP,QAAQ,CAAC,MAAM,CAChB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,0EAA0E;YAC1E,2EAA2E;YAC3E,8CAA8C;YAC9C,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,yEAAyE;YAC3E,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IACD,8EAA8E;IAC9E,8CAA8C;IAC9C,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CACtE;SACA,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,gFAAgF;AAChF,mFAAmF;AACnF,qEAAqE;AACrE,SAAS,eAAe,CAAC,IAAsB,EAAE,MAAmB;IAClE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAG,IAAI,GAAG,EAAc,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;QAC5B,KAAK,IAAI,CAAC,CAAC;QACX,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,GAAG,EAAE,CAAC;QACN,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,OAAO;QACL,IAAI;QACJ,6EAA6E;QAC7E,8DAA8D;QAC9D,WAAW,EAAE,GAAkB,EAAE;YAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC;YACvB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBACnC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;gBACxE,KAAK,EAAE,CAAC;YACV,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,gFAAgF;AAChF,0EAA0E;AAC1E,0EAA0E;AAC1E,KAAK,UAAU,kBAAkB,CAC/B,IAAsB,EACtB,OAAe,EACf,MAAmB;IAEnB,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5E,MAAM,cAAc,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAC3E,CAAC"}

package/dist/claude/login/stages.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Individual stages of the `/login` flow (PRD §5.3, C-API-43): method selection,
+ * URL reporting, and the poll-to-outcome that feeds a validated authorization
+ * code. Each stage polls the rendered screen and aborts on the driver's combined
+ * deadline/lifecycle signal. Untrusted inputs (the scraped URL, the human code)
+ * are validated before they are reported or written.
+ */
+import type { LoginIo } from "./driver.ts";
+import type { ClaudeLoginOptions } from "./types.ts";
+/** If the "Select login method" list renders, move to the chosen row and Enter. */
+export declare function selectMethodIfShown(io: LoginIo, options: ClaudeLoginOptions, signal: AbortSignal): Promise<void>;
+/**
+ * Poll to a success/failure outcome: report the authorization URL once a VALID one
+ * appears, and feed a validated code once the code prompt shows AFTER authorizing.
+ * Markers are scoped to the screen's ACTIVE region and required NEW to this attempt
+ * (stale/off-region text can't drive the flow). Critically, the AUTHORIZING stage
+ * requires a valid extracted URL — https on an approved Anthropic host — not merely
+ * the phrase "Authenticate…", so arbitrary model/repo output that echoes the phrase
+ * plus "Paste code here" cannot reach the code stage and disclose the code.
+ */
+export declare function awaitLoginOutcome(io: LoginIo, options: ClaudeLoginOptions, baseline: string, signal: AbortSignal): Promise<void>;
+//# sourceMappingURL=stages.d.ts.map

package/dist/claude/login/stages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stages.d.ts","sourceRoot":"","sources":["../../../src/claude/login/stages.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAU3C,OAAO,KAAK,EAAqB,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAwBxE,mFAAmF;AACnF,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,OAAO,EACX,OAAO,EAAE,kBAAkB,EAC3B,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,OAAO,EACX,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC,CAyBf"}

package/dist/claude/login/stages.js

@@ -0,0 +1,144 @@
+/**
+ * Individual stages of the `/login` flow (PRD §5.3, C-API-43): method selection,
+ * URL reporting, and the poll-to-outcome that feeds a validated authorization
+ * code. Each stage polls the rendered screen and aborts on the driver's combined
+ * deadline/lifecycle signal. Untrusted inputs (the scraped URL, the human code)
+ * are validated before they are reported or written.
+ */
+import { elwoodError } from "../../core/errors.js";
+import { abortError, holdWhileBlocked, pollDelay, raceSettle } from "./abort.js";
+import { activeRegion, authUrlVisible, extractAuthUrl, loginFailed, loginSucceeded, methodPickerVisible, pasteCodePrompt, } from "./screens.js";
+import { isSafeAuthCode, safeAuthUrl } from "./validate.js";
+// Zero-based row each method occupies in the CLI's "Select login method" list — an
+// implementation detail of driving the picker, so it lives here (not public types).
+const loginMethodRow = {
+    claudeai: 0,
+    console: 1,
+    third_party: 2,
+};
+const cursorDown = "\u001b[B";
+const enter = "\r";
+/** True once the flow has clearly moved past the method picker (or ended). */
+function pastPicker(text) {
+    return (authUrlVisible.test(text) ||
+        pasteCodePrompt.test(text) ||
+        loginSucceeded.test(text) ||
+        loginFailed.test(text));
+}
+/** If the "Select login method" list renders, move to the chosen row and Enter. */
+export async function selectMethodIfShown(io, options, signal) {
+    const shown = await pollUntil(io.terminal, signal, (t) => methodPickerVisible.test(t) || pastPicker(t));
+    if (!methodPickerVisible.test(shown))
+        return;
+    const rows = loginMethodRow[options.method ?? "claudeai"];
+    for (let i = 0; i < rows; i += 1)
+        await write(io, cursorDown, signal);
+    await write(io, enter, signal);
+}
+/**
+ * Poll to a success/failure outcome: report the authorization URL once a VALID one
+ * appears, and feed a validated code once the code prompt shows AFTER authorizing.
+ * Markers are scoped to the screen's ACTIVE region and required NEW to this attempt
+ * (stale/off-region text can't drive the flow). Critically, the AUTHORIZING stage
+ * requires a valid extracted URL — https on an approved Anthropic host — not merely
+ * the phrase "Authenticate…", so arbitrary model/repo output that echoes the phrase
+ * plus "Paste code here" cannot reach the code stage and disclose the code.
+ */
+export async function awaitLoginOutcome(io, options, baseline, signal) {
+    const terminal = io.terminal;
+    const succeeded = freshInRegion(loginSucceeded, baseline);
+    const failed = freshInRegion(loginFailed, baseline);
+    const codePrompt = freshInRegion(pasteCodePrompt, baseline);
+    let authorizing = false;
+    let codeSent = false;
+    for (;;) {
+        const text = terminal.snapshot().text;
+        const url = freshAuthUrl(text, baseline);
+        if (url && !authorizing) {
+            authorizing = true;
+            reportUrl(options, url);
+        }
+        if (succeeded(text))
+            return;
+        if (failed(text))
+            throw elwoodError("login_failed", "Claude /login reported a failure.");
+        if (authorizing && !codeSent && codePrompt(text)) {
+            codeSent = true;
+            // Re-check the prompt is STILL the current active screen right before writing
+            // the secret: `provideCode` is async, so the prompt may have vanished while
+            // the human fetched the code — the code must never land in a different screen.
+            await submitCode(io, options, () => codePrompt(io.terminal.snapshot().text), signal);
+        }
+        await pollDelay(signal);
+    }
+}
+// Report the (validated) URL to the untrusted `onAuthUrl` callback; a throw becomes
+// a bounded typed error rather than escaping raw out of the login transaction.
+function reportUrl(options, url) {
+    if (!options.onAuthUrl)
+        return;
+    try {
+        options.onAuthUrl(url);
+    }
+    catch (error) {
+        throw elwoodError("login_failed", "The /login onAuthUrl callback failed.", {
+            cause: error instanceof Error ? error.message : String(error),
+        });
+    }
+}
+// True once a valid, NEW authorization URL is on screen (an approved-host https
+// claude.ai OAuth URL absent from the pre-login baseline) — the trustworthy signal
+// that the real CLI has entered its browser-authorize stage.
+function freshAuthUrl(text, baseline) {
+    const url = safeAuthUrl(extractAuthUrl(text) ?? "");
+    return url !== undefined && url !== safeAuthUrl(extractAuthUrl(baseline) ?? "") ? url : undefined;
+}
+// A predicate matching only when the marker is in the current ACTIVE region AND
+// was absent from the pre-login baseline's active region — so neither stale nor
+// off-region on-screen text can drive the flow.
+function freshInRegion(marker, baseline) {
+    const wasPresent = marker.test(activeRegion(baseline));
+    return (text) => marker.test(activeRegion(text)) && !wasPresent;
+}
+/** Ask the caller for the code, validate it, re-check the prompt, then submit it. */
+async function submitCode(io, options, stillPrompted, signal) {
+    let code;
+    try {
+        code = await raceSettle(Promise.resolve(options.provideCode()), signal);
+    }
+    catch (error) {
+        if (signal.aborted)
+            throw abortError(signal);
+        throw elwoodError("login_failed", "The /login code callback failed.", {
+            cause: error instanceof Error ? error.message : String(error),
+        });
+    }
+    if (!isSafeAuthCode(code)) {
+        throw elwoodError("login_failed", "The /login authorization code was empty, oversized, or contained control characters.");
+    }
+    // The paste-code prompt must STILL be the current active screen: if it vanished
+    // while `provideCode` was pending, writing the secret now would land it in a
+    // different screen (e.g. the composer), so fail instead of disclosing it.
+    if (!stillPrompted()) {
+        throw elwoodError("login_failed", "The /login code prompt was gone before the code could be entered.");
+    }
+    await write(io, code, signal);
+    await write(io, enter, signal);
+}
+/** Poll `snapshot().text` until `test` holds; aborts on the combined signal. */
+async function pollUntil(terminal, signal, test) {
+    for (;;) {
+        const text = terminal.snapshot().text;
+        if (test(text))
+            return text;
+        await pollDelay(signal);
+    }
+}
+// Write a login keystroke: hold while a blocking dialog is on screen (dialog
+// safety — a keystroke there would confirm its option), then write, racing the
+// deadline/lifecycle signal throughout.
+async function write(io, data, signal) {
+    await holdWhileBlocked(io.blocked, signal);
+    await raceSettle(Promise.resolve(io.terminal.sendInput(data)), signal);
+}
+//# sourceMappingURL=stages.js.map

package/dist/claude/login/stages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stages.js","sourceRoot":"","sources":["../../../src/claude/login/stages.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEjF,OAAO,EACL,YAAY,EACZ,cAAc,EACd,cAAc,EACd,WAAW,EACX,cAAc,EACd,mBAAmB,EACnB,eAAe,GAChB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5D,mFAAmF;AACnF,oFAAoF;AACpF,MAAM,cAAc,GAAgD;IAClE,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,CAAC;CACf,CAAC;AAEF,MAAM,UAAU,GAAG,UAAU,CAAC;AAC9B,MAAM,KAAK,GAAG,IAAI,CAAC;AAEnB,8EAA8E;AAC9E,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,CACL,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QACzB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QACzB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,EAAW,EACX,OAA2B,EAC3B,MAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,SAAS,CAC3B,EAAE,CAAC,QAAQ,EACX,MAAM,EACN,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CACpD,CAAC;IACF,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO;IAC7C,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC,CAAC;IAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC;QAAE,MAAM,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACtE,MAAM,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAW,EACX,OAA2B,EAC3B,QAAgB,EAChB,MAAmB;IAEnB,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC;IAC7B,MAAM,SAAS,GAAG,aAAa,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,aAAa,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IAC5D,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC;QACtC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACzC,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACxB,WAAW,GAAG,IAAI,CAAC;YACnB,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC;YAAE,OAAO;QAC5B,IAAI,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,WAAW,CAAC,cAAc,EAAE,mCAAmC,CAAC,CAAC;QACzF,IAAI,WAAW,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,QAAQ,GAAG,IAAI,CAAC;YAChB,8EAA8E;YAC9E,4EAA4E;YAC5E,+EAA+E;YAC/E,MAAM,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,+EAA+E;AAC/E,SAAS,SAAS,CAAC,OAA2B,EAAE,GAAW;IACzD,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO;IAC/B,IAAI,CAAC;QACH,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,cAAc,EAAE,uCAAuC,EAAE;YACzE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,mFAAmF;AACnF,6DAA6D;AAC7D,SAAS,YAAY,CAAC,IAAY,EAAE,QAAgB;IAClD,MAAM,GAAG,GAAG,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACpD,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACpG,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,gDAAgD;AAChD,SAAS,aAAa,CAAC,MAAc,EAAE,QAAgB;IACrD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvD,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;AAClE,CAAC;AAED,qFAAqF;AACrF,KAAK,UAAU,UAAU,CACvB,EAAW,EACX,OAA2B,EAC3B,aAA4B,EAC5B,MAAmB;IAEnB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,WAAW,CAAC,cAAc,EAAE,kCAAkC,EAAE;YACpE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,WAAW,CACf,cAAc,EACd,sFAAsF,CACvF,CAAC;IACJ,CAAC;IACD,gFAAgF;IAChF,6EAA6E;IAC7E,0EAA0E;IAC1E,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,MAAM,WAAW,CACf,cAAc,EACd,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9B,MAAM,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,SAAS,CACtB,QAAwB,EACxB,MAAmB,EACnB,IAA+B;IAE/B,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC;QACtC,IAAI,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,+EAA+E;AAC/E,wCAAwC;AACxC,KAAK,UAAU,KAAK,CAAC,EAAW,EAAE,IAAY,EAAE,MAAmB;IACjE,MAAM,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACzE,CAAC"}

package/dist/claude/login/types.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Public option types for the Claude `/login` recovery flow (PRD §5.3, C-API-43).
+ */
+/**
+ * Which entry to select from Claude's "Select login method" list. The literals
+ * map to the CLI's menu rows (labels as rendered by claude v2.1.x):
+ * - `claudeai` → "Claude account with subscription" (Pro/Max/Team/Enterprise).
+ * - `console` → "Anthropic Console account" (API usage billing).
+ * - `third_party` → "3rd-party platform" (Amazon Bedrock / Microsoft Foundry /
+ *   Vertex AI). Selecting it only picks that menu row; the subsequent platform
+ *   configuration is outside Elwood's scope.
+ */
+export type ClaudeLoginMethod = "claudeai" | "console" | "third_party";
+export type ClaudeLoginOptions = {
+    /**
+     * Which method to select if the "Select login method" list renders. Defaults
+     * to `claudeai` (the Claude subscription account). If the list never renders
+     * (the CLI went straight to authorizing), the selection is skipped.
+     */
+    readonly method?: ClaudeLoginMethod;
+    /**
+     * Called with the browser authorization URL once it is scraped off screen, so
+     * the caller can open/show it. Optional — the URL is best-effort and a flow
+     * that never prints one simply never invokes this.
+     */
+    readonly onAuthUrl?: (url: string) => void;
+    /**
+     * REQUIRED for the default account flow: called when the CLI reaches its
+     * "paste code here" prompt. The returned authorization code (from the browser
+     * success page) is submitted to the terminal. A flow that self-completes
+     * without a code prompt never calls this.
+     */
+    readonly provideCode: () => string | Promise<string>;
+    /** Bounds the whole flow; defaults to 300000 ms. */
+    readonly timeoutMs?: number;
+};
+export declare const defaultLoginTimeoutMs = 300000;
+//# sourceMappingURL=types.d.ts.map

package/dist/claude/login/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/claude/login/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;;;;;GAQG;AACH,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,CAAC;AAEvE,MAAM,MAAM,kBAAkB,GAAG;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,oDAAoD;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,eAAO,MAAM,qBAAqB,SAAU,CAAC"}

package/dist/claude/login/types.js

@@ -0,0 +1,5 @@
+/**
+ * Public option types for the Claude `/login` recovery flow (PRD §5.3, C-API-43).
+ */
+export const defaultLoginTimeoutMs = 300_000;
+//# sourceMappingURL=types.js.map

package/dist/claude/login/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/claude/login/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAqCH,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC"}

package/dist/claude/login/validate.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Input validation for the `/login` flow (PRD §5.3, C-API-43): a human-supplied
+ * authorization code and a scraped browser URL are both untrusted, so each is
+ * validated before it is written to the PTY or handed to a caller callback. A code
+ * that could inject terminal controls, or a URL on an unapproved host, is rejected.
+ */
+/** A human authorization code is safe to submit as terminal input. */
+export declare function isSafeAuthCode(code: string): boolean;
+/**
+ * Parse a scraped authorization URL and return it ONLY when it is an `https:` URL
+ * on an exactly-approved host with no embedded credentials; otherwise undefined,
+ * so a spoofed `https://evilclaude.com/oauth/...` is never handed to the caller.
+ */
+export declare function safeAuthUrl(raw: string): string | undefined;
+//# sourceMappingURL=validate.d.ts.map

package/dist/claude/login/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../src/claude/login/validate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAiBH,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAU3D"}

package/dist/claude/login/validate.js

@@ -0,0 +1,43 @@
+/**
+ * Input validation for the `/login` flow (PRD §5.3, C-API-43): a human-supplied
+ * authorization code and a scraped browser URL are both untrusted, so each is
+ * validated before it is written to the PTY or handed to a caller callback. A code
+ * that could inject terminal controls, or a URL on an unapproved host, is rejected.
+ */
+const MAX_CODE_LENGTH = 512;
+// Bracketed-paste sentinels, CR/LF, Escape, all C0/C1 controls, and Unicode line
+// separators — any of which could end code entry and turn following bytes into
+// live keystrokes. A valid authorization code is a single line of printable text.
+// biome-ignore lint/suspicious/noControlCharactersInRegex: rejecting control input is the point.
+const unsafeCodeChar = /[\u0000-\u001f\u007f-\u009f\u2028\u2029]/;
+/** Approved OAuth hosts the scraped login URL may point at (exact host match). */
+const approvedAuthHosts = new Set([
+    "claude.ai",
+    "claude.com",
+    "platform.claude.com",
+    "console.anthropic.com",
+]);
+/** A human authorization code is safe to submit as terminal input. */
+export function isSafeAuthCode(code) {
+    return code.length > 0 && code.length <= MAX_CODE_LENGTH && !unsafeCodeChar.test(code);
+}
+/**
+ * Parse a scraped authorization URL and return it ONLY when it is an `https:` URL
+ * on an exactly-approved host with no embedded credentials; otherwise undefined,
+ * so a spoofed `https://evilclaude.com/oauth/...` is never handed to the caller.
+ */
+export function safeAuthUrl(raw) {
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        return undefined;
+    }
+    if (url.protocol !== "https:")
+        return undefined;
+    if (url.username !== "" || url.password !== "")
+        return undefined;
+    return approvedAuthHosts.has(url.hostname) ? url.toString() : undefined;
+}
+//# sourceMappingURL=validate.js.map

package/dist/claude/login/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../src/claude/login/validate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,iFAAiF;AACjF,+EAA+E;AAC/E,kFAAkF;AAClF,iGAAiG;AACjG,MAAM,cAAc,GAAG,0CAA0C,CAAC;AAElE,kFAAkF;AAClF,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC;IACrD,WAAW;IACX,YAAY;IACZ,qBAAqB;IACrB,uBAAuB;CACxB,CAAC,CAAC;AAEH,sEAAsE;AACtE,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,eAAe,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACjE,OAAO,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1E,CAAC"}

package/dist/claude/login-expired.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Mid-session Claude login-expiry detection (PRD §5.3, §5.7, C-CLAUDE-18).
+ * When a lapsed/revoked-login banner appears on a session that has ALREADY
+ * reached readiness — login expiring during use — Elwood surfaces a bounded,
+ * content-free `login_expired` warning and leaves the session alive so the caller
+ * can recover in place via `session.login()`, tear down, or re-auth out of band.
+ * The startup-time form of the same banner is handled fatally in runtime/startup/index.ts.
+ */
+import type { ElwoodWarningEvent } from "../core/types.ts";
+export declare const LOGIN_RECOVERY_COMMAND: "/login";
+export declare const LOGIN_EXPIRED_MESSAGE = "Claude's login expired mid-session; it cannot act until re-authenticated. Run /login (or session.login()) to recover.";
+/**
+ * Edge-detects the login-expired banner so the warning fires ONCE per occurrence.
+ * Two-phase peek/commit: `peek` reports whether this frame is a fresh raised edge
+ * WITHOUT mutating state, and `commit` advances to "present". The caller commits
+ * BEFORE the live fan-out (warnings are live-only and fire exactly once — committing
+ * after a throwing listener would re-fire the same incident to listeners that already
+ * received it). A frame with no banner clears the flag immediately, so a banner that
+ * clears and reappears is a genuinely new edge that warns again.
+ */
+export declare class LoginExpiredWatcher {
+    private present;
+    /** Whether this frame is a fresh raised edge (banner appears while absent). */
+    peek(screenText: string): boolean;
+    /** Advance to "present"; the caller commits BEFORE its live fan-out (see above). */
+    commit(): void;
+    /** Single-shot observe (peek + commit) for callers that emit unconditionally. */
+    observe(screenText: string): boolean;
+}
+export declare function loginExpiredWarning(elwoodSessionId: string): ElwoodWarningEvent;
+//# sourceMappingURL=login-expired.d.ts.map

package/dist/claude/login-expired.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-expired.d.ts","sourceRoot":"","sources":["../../src/claude/login-expired.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAG3D,eAAO,MAAM,sBAAsB,EAAG,QAAiB,CAAC;AAKxD,eAAO,MAAM,qBAAqB,0HACuF,CAAC;AAG1H;;;;;;;;GAQG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,OAAO,CAAS;IAExB,+EAA+E;IAC/E,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAUjC,oFAAoF;IACpF,MAAM,IAAI,IAAI;IAId,iFAAiF;IACjF,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;CAKrC;AAED,wBAAgB,mBAAmB,CAAC,eAAe,EAAE,MAAM,GAAG,kBAAkB,CAW/E"}