@creature-ai/sdk 0.1.15 → 0.1.17

package/dist/server/index.d.ts

@@ -207,10 +207,10 @@ interface ToolContext {
      */
     instanceId: string;
     /**
-     * Creature App Token for identity retrieval.
-     * ONLY present when:
-     * 1. App opted into Creature-managed auth (`auth: { creatureManaged: true }`)
-     * 2. Tool call originated from Creature host
+     * Creature token for identity retrieval.
+     * Present when either:
+     * 1. Tool call originated from Creature host (injected via `_creatureToken` arg)
+     * 2. Tool call includes OAuth bearer token in Authorization header (ChatGPT/other hosts)
      *
      * Use `getIdentity(context.creatureToken)` to retrieve user identity
      * for multi-tenant data access.
@@ -430,6 +430,8 @@ declare class App {
     private singletonInstances;
     /** Whether the connected host supports multiInstance. ChatGPT doesn't, Creature does. */
     private hostSupportsMultiInstance;
+    /** OAuth discovery endpoint configuration. */
+    private oauthDiscoveryConfig;
     constructor(config: AppConfig, callerDir?: string);
     /**
      * Define a UI resource.
@@ -439,6 +441,28 @@ declare class App {
      * Define a tool.
      */
     tool<TInput extends z.ZodType>(name: string, config: ToolConfig<TInput>, handler: ToolHandler<z.infer<TInput>>): this;
+    /**
+     * Serve an OAuth discovery endpoint.
+     * Used by OAuth clients (like ChatGPT) to discover authorization server metadata.
+     *
+     * @param config.path - The endpoint path (e.g., "/.well-known/oauth-authorization-server")
+     * @param config.[rest] - All other properties become the JSON response body
+     *
+     * @example
+     * app.serveOAuthDiscovery({
+     *   path: "/.well-known/oauth-authorization-server",
+     *   issuer: "https://creature.run",
+     *   authorization_endpoint: "https://creature.run/oauth/authorize",
+     *   token_endpoint: "https://api.creature.run/apps/v1/oauth/token",
+     *   response_types_supported: ["code"],
+     *   grant_types_supported: ["authorization_code", "refresh_token"],
+     *   code_challenge_methods_supported: ["S256"],
+     * });
+     */
+    serveOAuthDiscovery(config: {
+        path: string;
+        [key: string]: unknown;
+    }): this;
     /**
      * Start the MCP server.
      */