Function waitForBrowserLogin

cli/src/commands/login.ts:115–236

(apiUrl: string, timeoutMs = LOGIN_TIMEOUT_MS)

};

async function waitForBrowserLogin(apiUrl: string, timeoutMs = LOGIN_TIMEOUT_MS): Promise<BrowserLoginResult> {
  const cliState = randomBytes(16).toString("hex");

  let settled = false;
  let server: Server | null = null;
  // Single timeout handle that's cleared in finish() and the outer
  // finally — earlier versions had two setTimeouts and one of them
  // wasn't cleared on success, keeping the Node event loop alive for
  // the full timeout (2 min) after a successful login. Symptom was
  // the terminal hanging after "Logged in to <host>" printed.
  let timeoutHandle: ReturnType<typeof setTimeout> | undefined;

  try {
    return await new Promise<BrowserLoginResult>((resolve, reject) => {
      const finish = async (value: BrowserLoginResult | Error, isError: boolean) => {
        if (settled) return;
        settled = true;
        if (timeoutHandle) clearTimeout(timeoutHandle);
        if (server) {
          await closeServer(server);
        }
        if (isError) reject(value);
        else resolve(value as BrowserLoginResult);
      };

      timeoutHandle = setTimeout(
        () => void finish(new Error("timed out waiting for browser login"), true),
        timeoutMs,
      );

      server = createServer(async (req, res) => {
        res.setHeader("Connection", "close");
        try {
          if (req.method !== "POST") {
            res.statusCode = 405;
            res.setHeader("Content-Type", "text/html; charset=utf-8");
            res.end(renderCallbackPage("Return to your terminal", "Run e2a login again to finish connecting the CLI."));
            return;
          }

          const body = await readRequestBody(req);
          const params = new URLSearchParams(body);
          const returnedState = params.get("cli_state") || "";
          const apiKey = params.get("api_key") || "";
          const agentEmail = params.get("agent_email") || "";
          const error = params.get("error") || "";

          if (returnedState != cliState) {
            res.statusCode = 400;
            res.setHeader("Content-Type", "text/html; charset=utf-8");
            res.end(renderCallbackPage("e2a login failed", "The browser login state did not match this terminal session. Return to the terminal and try again."));
            await finish(new Error("browser login state mismatch"), true);
            return;
          }

          if (error) {
            res.statusCode = 400;
            res.setHeader("Content-Type", "text/html; charset=utf-8");