feat(auth): connect premium sessions to shared launch pipeline and restrict raw logs

Author: WieszczY85

docs/ROADMAP.md

@@ -292,7 +292,7 @@ Goal: add official premium authentication without changing the fundamental Minec
 
 ## Token lifecycle
 
-- [ ] Before enabling premium sessions, review and redact sensitive strings in Minecraft process stdout/stderr logs; v0.1 currently redirects raw game output to private per-session files.
+- [ ] 🚧 IN PROGRESS — premium LaunchPlan now flags credential-bearing sessions and default process starter discards stdout/stderr rather than persisting raw tokens. Game-owned logs and crash reports still require security review.
 
 - [ ] Refresh expired/expiring sessions automatically when possible.
 - [ ] Store long-lived secrets/tokens using an appropriate secure OS mechanism.
@@ -303,7 +303,7 @@ Goal: add official premium authentication without changing the fundamental Minec
 ## Launch integration
 
 - [ ] Convert authenticated account/session to existing launch account/session inputs.
-- [ ] Supply valid access token/profile information to Minecraft launch arguments.
+- [ ] 🚧 IN PROGRESS — coordinator accepts normalized premium LaunchAuthentication and uses standard metadata placeholder replacement; desktop selection and live verification pending.
 - [ ] Avoid a duplicate premium-specific launch pipeline.
 
 ## v0.3 UI

docs/WORKLOG.md

@@ -8,6 +8,39 @@ Every code/build/documentation/CI task must add an entry according to `AGENTS.md
 
 ---
 
+## 2026-10-19 — Share launch pipeline with credential-bearing sessions
+
+**Milestone:** v0.3
+**Author/Agent:** ChatGPT GPT-6
+**Status:** Partial — desktop sign-in and Minecraft live testing remain
+
+### Completed
+- Extended the existing MinecraftLaunchCoordinator to accept a normalized premium LaunchAuthentication payload.
+- Marked premium LaunchPlan as credential-sensitive while keeping the offline plan unchanged.
+- Prevented raw stdout/stderr files for premium child processes in the default ProcessBuilder starter, avoiding accidental token leakage from redirected output.
+
+### Changed files
+- launcher-core/src/main/kotlin/pl/syntaxdevteam/syntaxlauncher/core/launch/LaunchPlan.kt
+- launcher-core/src/main/kotlin/pl/syntaxdevteam/syntaxlauncher/core/launch/LaunchPlanBuilder.kt
+- launcher-core/src/main/kotlin/pl/syntaxdevteam/syntaxlauncher/core/launch/MinecraftLaunchCoordinator.kt
+- launcher-core/src/main/kotlin/pl/syntaxdevteam/syntaxlauncher/core/launch/MinecraftProcessManager.kt
+- docs/ROADMAP.md and docs/WORKLOG.md
+
+### Verification
+- ./gradlew test — NOT RUN locally; GitHub CI pending.
+- ./gradlew build — NOT RUN locally; GitHub CI pending.
+- Real Minecraft authenticated client — NOT RUN.
+
+### Roadmap updates
+- [ ] v0.3 premium process log review is partial; game-owned logs still pending.
+- [ ] v0.3 launch wiring prepared; account UI/session management pending.
+
+### Follow-ups / known issues
+- Raw game-managed local logs and crash reports can still contain tokens and must never be uploaded without sanitization.
+- A correctly approved Microsoft application registration is required.
+
+---
+
 ## 2026-10-19 — Xbox/XSTS/Minecraft provider exchanges
 
 **Milestone:** v0.3

launcher-core/src/main/kotlin/pl/syntaxdevteam/syntaxlauncher/core/launch/LaunchPlan.kt

@@ -9,6 +9,8 @@ data class LaunchPlan(
     val mainClass: String,
     val jvmArguments: List<String>,
     val gameArguments: List<String>,
+    /** Avoid persisting raw child stdout/stderr when session credentials are present. */
+    val sensitiveOutput: Boolean = false,
 ) {
     val command: List<String>
         get() = buildList {

launcher-core/src/main/kotlin/pl/syntaxdevteam/syntaxlauncher/core/launch/LaunchPlanBuilder.kt

@@ -89,6 +89,7 @@ class LaunchPlanBuilder(
             mainClass = version.mainClass,
             jvmArguments = jvmArguments,
             gameArguments = gameArguments,
+            sensitiveOutput = request.authentication.userType == "msa",
         )
     }
 

launcher-core/src/main/kotlin/pl/syntaxdevteam/syntaxlauncher/core/launch/MinecraftLaunchCoordinator.kt

@@ -58,6 +58,7 @@ class MinecraftLaunchCoordinator(
         account: Account,
         options: LaunchOptions,
         instanceLayout: MinecraftInstallationLayout = layout,
+        authentication: LaunchAuthentication = LaunchAuthentication.offline(account),
     ): LaunchPipelineStatus {
         if (!launchMutex.tryLock()) return mutableStatus.value
         try {
@@ -104,6 +105,7 @@ class MinecraftLaunchCoordinator(
                     runtime = runtime,
                     platform = platform,
                     options = options,
+                    authentication = authentication,
                 ),
             )
             stage(LaunchPhase.STARTING_GAME, "Starting Minecraft")

launcher-core/src/main/kotlin/pl/syntaxdevteam/syntaxlauncher/core/launch/MinecraftProcessManager.kt

@@ -69,15 +69,20 @@ fun interface MinecraftProcessStarter {
  * Owns at most one Minecraft process at a time. Does not depend on Compose.
  * OS-level stdout/stderr file redirection is intentional: DETACH works even if
  * the launcher JVM exits. These files contain raw game output and are private
- * on POSIX systems; a future premium flow must review possible token emission.
+ * on POSIX systems. For premium sessions, the default process starter discards
+ * raw stdout/stderr instead of persisting potentially credential-bearing output.
+ * This does not control game-owned files such as logs/latest.log; those still
+ * require independent review and should never be uploaded automatically.
  */
 class MinecraftProcessManager(
     private val logsDirectory: Path,
     private val starter: MinecraftProcessStarter = MinecraftProcessStarter { plan, stdout, stderr ->
         ProcessBuilder(plan.command)
             .directory(plan.workingDirectory.toFile())
-            .redirectOutput(ProcessBuilder.Redirect.to(stdout.toFile()))
-            .redirectError(ProcessBuilder.Redirect.to(stderr.toFile()))
+            .redirectOutput(if (plan.sensitiveOutput) ProcessBuilder.Redirect.DISCARD
+                else ProcessBuilder.Redirect.to(stdout.toFile()))
+            .redirectError(if (plan.sensitiveOutput) ProcessBuilder.Redirect.DISCARD
+                else ProcessBuilder.Redirect.to(stderr.toFile()))
             .start()
     },
 ) {