@danhachuel/thunderbolt 0.5.4 → 0.5.6

package/app/main.py

@@ -7105,14 +7105,17 @@ def _render_media_provider_card(settings: dict[str, Any], cards: list[dict[str,
     if card.get("provider") == "canva":
         callback_code = str(st.query_params.get("code") or "").strip()
         callback_state = str(st.query_params.get("state") or "").strip()
-        pending_state = str(st.session_state.get(f"canva_state_{card_id}") or "")
+        oauth_pending = card.get("oauth_pending") if isinstance(card.get("oauth_pending"), dict) else {}
+        pending_state = str(st.session_state.get(f"canva_state_{card_id}") or oauth_pending.get("state") or "")
+        pending_verifier = str(st.session_state.get(f"canva_verifier_{card_id}") or oauth_pending.get("code_verifier") or "")
         if callback_code:
-            if callback_state != pending_state:
+            if not pending_state or callback_state != pending_state:
                 st.error("Canva OAuth rejeitado: state inválido. Inicie a autorização novamente.")
             else:
                 try:
-                    token = exchange_code(str(card.get("client_id") or ""), str(card.get("client_secret") or ""), callback_code, str(card.get("redirect_uri") or ""), str(st.session_state.get(f"canva_verifier_{card_id}") or ""))
+                    token = exchange_code(str(card.get("client_id") or ""), str(card.get("client_secret") or ""), callback_code, str(card.get("redirect_uri") or ""), pending_verifier)
                     card["oauth_token"] = token
+                    card.pop("oauth_pending", None)
                     cards[index] = card
                     _persist_media_cards(settings, cards, str(settings.get(MEDIA_IMAGE_ACTIVE_CARD_KEY) or ""), str(settings.get(MEDIA_VIDEO_ACTIVE_CARD_KEY) or ""))
                     st.session_state.pop(f"canva_state_{card_id}", None)
@@ -7135,6 +7138,7 @@ def _render_media_provider_card(settings: dict[str, Any], cards: list[dict[str,
         with card_form:
             key_col, model_col = st.columns(2)
             refresh_clicked = False
+            authorize_clicked = False
             with key_col:
                 api_key = str(card.get("api_key") or "")
                 if definition.requires_api_key:
@@ -7200,6 +7204,7 @@ def _render_media_provider_card(settings: dict[str, Any], cards: list[dict[str,
                         st.session_state[f"canva_verifier_{card_id}"] = verifier
                         st.session_state[f"canva_state_{card_id}"] = state
                         st.session_state[f"canva_authorization_url_{card_id}"] = authorization_url(client_id, redirect_uri, state=state, code_challenge=challenge)
+                        extra_values["oauth_pending"] = {"state": state, "code_verifier": verifier}
                     authorization_link = str(st.session_state.get(f"canva_authorization_url_{card_id}") or "")
                     if authorization_link:
                         st.markdown(f"[Abrir autorização Canva]({authorization_link})")
@@ -7231,7 +7236,12 @@ def _render_media_provider_card(settings: dict[str, Any], cards: list[dict[str,
         edited = dict(card)
         edited.update({"api_key": str(api_key or "").strip(), "model": str(model or "").strip(), "base_url": str(base_url or "").strip(), "enabled": bool(enabled), "supports_image": bool(supports_image), "supports_video": bool(supports_video), "priority": int(priority), **extra_values})
         cards[index] = edited
-        if refresh_clicked:
+        if authorize_clicked:
+            # Guardar as credenciais antes de o browser sair para a Canva. No
+            # callback, o código OAuth é trocado usando este card persistido.
+            _persist_media_cards(settings, cards, str(settings.get(MEDIA_IMAGE_ACTIVE_CARD_KEY) or ""), str(settings.get(MEDIA_VIDEO_ACTIVE_CARD_KEY) or ""))
+            st.success("Credenciais Canva guardadas. Abra o link para autorizar.")
+        elif refresh_clicked:
             try:
                 discovered = _fetch_media_models(edited)
                 st.session_state[f"media_model_catalog_{card_id}"] = discovered

package/hermes_ui/media_providers.py

@@ -232,6 +232,12 @@ def normalize_media_card(card: Any, index: int = 0) -> dict[str, Any]:
         result["thumbnail_width"] = raw_width if raw_width in {"1280", "1792"} else "1280"
         result["thumbnail_height"] = raw_height if raw_height in {"720", "1024"} else ("1024" if result["thumbnail_width"] == "1792" else "720")
         result["oauth_token"] = dict(source.get("oauth_token") or {}) if isinstance(source.get("oauth_token"), Mapping) else {}
+        pending = source.get("oauth_pending")
+        if isinstance(pending, Mapping) and pending.get("state") and pending.get("code_verifier"):
+            result["oauth_pending"] = {
+                "state": str(pending.get("state")),
+                "code_verifier": str(pending.get("code_verifier")),
+            }
     if provider == "nano_banana":
         result["aspect_ratio"] = str(source.get("aspect_ratio") or INTERNAL_IMAGE_ASPECT_RATIO).strip()
         result["image_size"] = str(source.get("image_size") or INTERNAL_IMAGE_SIZE).strip()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@danhachuel/thunderbolt",
-  "version": "0.5.4",
+  "version": "0.5.6",
   "description": "Thunderbolt — interface local para operação de canais faceless e motor MoneyPrinterTurbo",
   "license": "MIT",
   "main": "scripts/cli.mjs",