@mitralab.io/platform-sdk 1.1.3 → 1.1.5-beta.0

package/CHANGELOG.md

@@ -1,96 +1,136 @@
-# Changelog
-
-All notable changes to this project are documented in this file.
-
-## 1.1.3
-
-- A chat created through `session({ create: true })` over the `auto` or `websocket` transport is
-  born on the T3 box: the create request carries `runtime: "T3"`. A chat created with
-  `transport: "http"` stays on the runner, and an explicit `runtime` is forwarded as given.
-- The box channel is asked for once. The Copilot now holds the channel request while the box
-  boots, so the 2 s polling on a 202 answer is gone; a 202 from an older Copilot means the chat
-  follows the Copilot socket.
-- Depend on `@mitralab.io/sdk-core@0.2.4`, which carries the `runtime` session option into the
-  create request, exports `AgentTaskRuntime`, and sends a prompt whose task already exists even
-  when the session was closed inside its `taskCreated` handler.
-
-## 1.2.0-beta.1
-
-- Add `signInWithEmail()`: the platform auth page collects the address and the one-time code, and
-  the single-use exchange code it returns is redeemed at IAM's `/auth/magic-link/exchange` for the
-  same app session Google and Microsoft SSO already produce.
-- Add `completeEmailSignInRedirect()`, which finishes both the mobile redirect and the tab opened
-  by the link in the message.
-- Keep the pending email request, the one-time state and the auth page URL and never a token, in
-  `localStorage` for 10 minutes, so the tab opened by the link in the message finishes the flow
-  through the same state check the redirect uses. Writing it is best effort for a popup and
-  required for a redirect.
-- Consume a fragment of the flow's own provider even when it cannot be completed, so a rejected or
-  expired redirect is reported once instead of on every reload. A fragment of another flow stays
-  untouched, and a pending request is still dropped only when it expires.
-- Name the flow in the one-time state (`google.<random>`, `microsoft.<random>`, `email.<random>`),
-  which the auth page echoes verbatim, so every `complete*SignInRedirect()` recognizes its own
-  fragment: a fragment from another method returns `null` untouched, whatever this browser has
-  pending, and an application that offers all three can call all three at startup in any order. A
-  fragment that names this flow without matching its pending request is rejected as forged.
-- Generalize the auth page handshake into `AuthPageFlow`, parameterized by provider, exchange
-  route, and where the pending request lives, instead of a second copy for email.
-- Upgrading mid-flow: a redirect started by an earlier version stored a state without the provider
-  name, so the completion after the upgrade returns `null` and the person signs in again. Nothing
-  is lost beyond that one attempt, and only for redirects in flight during the upgrade.
-- Give each provider its own popup window name.
-- Point the deprecated `signIn` and `signUp` failures at `signInWithEmail()`.
-
-## 1.1.0-beta.2
-
-`1.1.0-beta.1` was published from `main` before this change landed, so it still depends on Core `0.2.0-beta.0`; use `1.1.0-beta.2`.
-
-- Depend on `@mitralab.io/sdk-core@0.2.0-beta.1`, which reads back integration configs with a
-  null `templateId` (configs born from an inline definition). The browser adapter still only
-  lists and executes integration configs; authoring stays in the studio SDK and the MCP.
-
-## 1.1.0-beta.0
-
-- Complete native Function sync, async, polling, cancellation, and anonymous public execution.
-- Expose browser-safe Agent Tasks, restricted Agent Credentials, and model discovery through Core 0.2 contracts.
-- Compose the Core-owned Agent task session manager with Platform WebSocket and HTTP/SSE adapters.
-- Add native anonymous polling for executions created by the public async Function route.
-- Keep business-Agent administration out of the browser adapter according to the app-role permission matrix.
-- Expose app-scoped integration config listing and execution by alias from Core 0.2.
-- Document the missing producer contract for native record selection by `jdbcConnectionConfigId` instead of inventing a browser-side translation.
-- Document that entity `update` already implements the producer's partial PUT semantics, so no duplicate PATCH method is needed.
-- Derive Function execution, integration proxy input, and custom query result types directly from Core without narrowing nullable or producer-returned fields.
-- Preserve the complete Data Manager record envelope and execute Custom Queries with only
-  producer parameters, without a caller-selected Data Source or an `init()` precondition.
-
-- Refresh app sessions proactively through IAM before authenticated native requests, with a 30-second JWT expiry heuristic and one shared refresh flight.
-- Preserve sessions on transient refresh failures, clear them on definitive IAM client failures, and retain the one-time reactive `401` retry.
-- Rotate both tokens without fetching the current user or notifying public auth-state listeners, while keeping the legacy bridge synchronized.
-- Reject decodable access and refresh tokens whose app scope is missing or differs from the configured app while keeping opaque tokens server-authoritative.
-- Fence refresh responses by session generation so late success or failure cannot undo sign-out or overwrite a newer login or bridged session.
-- Bind reactive `401` handling to the token used by the rejected request so an old response cannot refresh or clear a replacement session.
-- Redact values under sensitive credential field names from recursive API error details.
-- Preserve the retained session when `auth.me()` reaches `401` after transient proactive and reactive refresh failures.
-- Add native Google SSO through popup and redirect flows with direct IAM code exchange.
-- Validate Google SSO origin, popup source, one-time state, cancellation, timeout, and token response shape.
-- Require redirect errors to bind to the stored state before exposing or consuming them.
-- Keep Google options limited to popup or redirect mode; account creation and locale remain producer concerns.
-- Leave legacy-only `returnTo` and `title` on the deprecated aliases because the old runtime did not implement them as native Google controls.
-- Preserve the email/password methods already public in Platform SDK 1.0.9 without presenting them as the new template flow.
-- Route deprecated calls and legacy authentication through `${apiUrl}/legacy`.
-- Apply the native auth page URL precedence to the deprecated SSO bridge.
-- Propagate native sign-in, refresh, token changes, and sign-out to the legacy SDK session.
-- Re-export the deprecated `mitra-interactions-sdk` surface from the package entrypoint.
-- Mark every legacy type alias as deprecated in generated declarations.
-- Share one session between this SDK and the legacy SDK in both directions.
-- Make the SonarCloud job wait for the Quality Gate result.
-- Align the public package metadata and ESM, CommonJS, and TypeScript artifacts.
-- Add package shape checks and public tarball smoke coverage.
-- Correct public imports and required configuration in documentation examples.
-- Add the MIT license.
-
-## 1.0.8
-
-- Share environment-neutral API contracts through `@mitralab.io/sdk-core`.
-- Preserve the Platform SDK 1.x browser authentication and entity facade.
-- Validate redirects, API errors, sensitive-value redaction, and package consumers.
+# Changelog
+
+All notable changes to this project are documented in this file.
+
+## 1.1.5-beta.0
+
+- The eight `agentCredentials` methods take a trailing `{ scope: "ACCOUNT" }`, sent as the
+  `scope=ACCOUNT` query parameter, and `session({ create: true })` and `agentTasks.create()`
+  accept `scope: "ACCOUNT"` in the create body, so the credential and the chat resolve against
+  the person's own account instead of the app. Without `scope` nothing changes on the wire. The
+  Copilot honors `ACCOUNT` only for apps listed by flag and answers
+  `ACCOUNT_CREDENTIAL_NOT_ALLOWED` otherwise.
+- Depend on `@mitralab.io/sdk-core@0.2.5-beta.0`, which carries the `scope` option through the
+  credential calls and into the create request and exports `AgentCredentialScope` and
+  `AgentCredentialOptions`.
+
+## 1.1.4-beta.0
+
+- On the direct channel the message and the interrupt are written on the box socket, as the
+  client frames the box already reads, instead of `POST /copilot/api/v1/tasks/{id}/inputs`. The
+  box asks the Copilot for admission itself and answers on the same socket, so the Copilot's host
+  socket buffer no longer bounds the message: the only limit is the box channel's own. REST stays
+  for a chat with no box socket, for a socket not open at the moment of the send, a redial in
+  progress included, and for every approval answer. A frame written on a socket that closes
+  before the box acknowledges it is not resent over REST, since the box may have admitted the
+  turn already; the redial's replay recovers it.
+
+## 1.1.3
+
+- A chat created through `session({ create: true })` over the `auto` or `websocket` transport is
+  born on the T3 box: the create request carries `runtime: "T3"`. A chat created with
+  `transport: "http"` stays on the runner, and an explicit `runtime` is forwarded as given.
+- The box channel is asked for once. The Copilot now holds the channel request while the box
+  boots, so the 2 s polling on a 202 answer is gone; a 202 from an older Copilot means the chat
+  follows the Copilot socket.
+- Depend on `@mitralab.io/sdk-core@0.2.4`, which carries the `runtime` session option into the
+  create request, exports `AgentTaskRuntime`, and sends a prompt whose task already exists even
+  when the session was closed inside its `taskCreated` handler.
+
+## 1.2.0-beta.1
+
+- Add `signInWithEmail()`: the platform auth page collects the address and the one-time code, and
+  the single-use exchange code it returns is redeemed at IAM's `/auth/magic-link/exchange` for the
+  same app session Google and Microsoft SSO already produce.
+- Add `completeEmailSignInRedirect()`, which finishes both the mobile redirect and the tab opened
+  by the link in the message.
+- Keep the pending email request, the one-time state and the auth page URL and never a token, in
+  `localStorage` for 10 minutes, so the tab opened by the link in the message finishes the flow
+  through the same state check the redirect uses. Writing it is best effort for a popup and
+  required for a redirect.
+- Consume a fragment of the flow's own provider even when it cannot be completed, so a rejected or
+  expired redirect is reported once instead of on every reload. A fragment of another flow stays
+  untouched, and a pending request is still dropped only when it expires.
+- Name the flow in the one-time state (`google.<random>`, `microsoft.<random>`, `email.<random>`),
+  which the auth page echoes verbatim, so every `complete*SignInRedirect()` recognizes its own
+  fragment: a fragment from another method returns `null` untouched, whatever this browser has
+  pending, and an application that offers all three can call all three at startup in any order. A
+  fragment that names this flow without matching its pending request is rejected as forged.
+- Generalize the auth page handshake into `AuthPageFlow`, parameterized by provider, exchange
+  route, and where the pending request lives, instead of a second copy for email.
+- Upgrading mid-flow: a redirect started by an earlier version stored a state without the provider
+  name, so the completion after the upgrade returns `null` and the person signs in again. Nothing
+  is lost beyond that one attempt, and only for redirects in flight during the upgrade.
+- Give each provider its own popup window name.
+- Point the deprecated `signIn` and `signUp` failures at `signInWithEmail()`.
+- Add `mitra.emailLoginEnabled`, read from `/info` during `init()` next to `allowSignup`, so an
+  application only offers "sign in with email" when this app is inside the platform's rollout.
+  A Code Studio older than the field answers without it, and any value that is not a boolean is
+  read as `false`, so `init()` keeps working and an app that cannot prove it is enabled stops
+  offering the option.
+
+## 1.1.2
+
+- Move the `@mitralab.io/sdk-core` pin from `0.2.1` to `0.2.2`: same surface, published with the
+  contract corpus that consumers pin, so every SDK released that day sits on the same core.
+
+## 1.1.1
+
+- Depend on `@mitralab.io/sdk-core@0.2.1`, which replays `textChunk` and late deltas after an
+  interrupted turn.
+- Serve the Agent chat from the T3 box over the direct channel when the Copilot offers it.
+- Treat a half-open Agent session channel as a disconnect instead of a live one.
+
+## 1.1.0-beta.2
+
+`1.1.0-beta.1` was published from `main` before this change landed, so it still depends on Core `0.2.0-beta.0`; use `1.1.0-beta.2`.
+
+- Depend on `@mitralab.io/sdk-core@0.2.0-beta.1`, which reads back integration configs with a
+  null `templateId` (configs born from an inline definition). The browser adapter still only
+  lists and executes integration configs; authoring stays in the studio SDK and the MCP.
+
+## 1.1.0-beta.0
+
+- Complete native Function sync, async, polling, cancellation, and anonymous public execution.
+- Expose browser-safe Agent Tasks, restricted Agent Credentials, and model discovery through Core 0.2 contracts.
+- Compose the Core-owned Agent task session manager with Platform WebSocket and HTTP/SSE adapters.
+- Add native anonymous polling for executions created by the public async Function route.
+- Keep business-Agent administration out of the browser adapter according to the app-role permission matrix.
+- Expose app-scoped integration config listing and execution by alias from Core 0.2.
+- Document the missing producer contract for native record selection by `jdbcConnectionConfigId` instead of inventing a browser-side translation.
+- Document that entity `update` already implements the producer's partial PUT semantics, so no duplicate PATCH method is needed.
+- Derive Function execution, integration proxy input, and custom query result types directly from Core without narrowing nullable or producer-returned fields.
+- Preserve the complete Data Manager record envelope and execute Custom Queries with only
+  producer parameters, without a caller-selected Data Source or an `init()` precondition.
+
+- Refresh app sessions proactively through IAM before authenticated native requests, with a 30-second JWT expiry heuristic and one shared refresh flight.
+- Preserve sessions on transient refresh failures, clear them on definitive IAM client failures, and retain the one-time reactive `401` retry.
+- Rotate both tokens without fetching the current user or notifying public auth-state listeners, while keeping the legacy bridge synchronized.
+- Reject decodable access and refresh tokens whose app scope is missing or differs from the configured app while keeping opaque tokens server-authoritative.
+- Fence refresh responses by session generation so late success or failure cannot undo sign-out or overwrite a newer login or bridged session.
+- Bind reactive `401` handling to the token used by the rejected request so an old response cannot refresh or clear a replacement session.
+- Redact values under sensitive credential field names from recursive API error details.
+- Preserve the retained session when `auth.me()` reaches `401` after transient proactive and reactive refresh failures.
+- Add native Google SSO through popup and redirect flows with direct IAM code exchange.
+- Validate Google SSO origin, popup source, one-time state, cancellation, timeout, and token response shape.
+- Require redirect errors to bind to the stored state before exposing or consuming them.
+- Keep Google options limited to popup or redirect mode; account creation and locale remain producer concerns.
+- Leave legacy-only `returnTo` and `title` on the deprecated aliases because the old runtime did not implement them as native Google controls.
+- Preserve the email/password methods already public in Platform SDK 1.0.9 without presenting them as the new template flow.
+- Route deprecated calls and legacy authentication through `${apiUrl}/legacy`.
+- Apply the native auth page URL precedence to the deprecated SSO bridge.
+- Propagate native sign-in, refresh, token changes, and sign-out to the legacy SDK session.
+- Re-export the deprecated `mitra-interactions-sdk` surface from the package entrypoint.
+- Mark every legacy type alias as deprecated in generated declarations.
+- Share one session between this SDK and the legacy SDK in both directions.
+- Make the SonarCloud job wait for the Quality Gate result.
+- Align the public package metadata and ESM, CommonJS, and TypeScript artifacts.
+- Add package shape checks and public tarball smoke coverage.
+- Correct public imports and required configuration in documentation examples.
+- Add the MIT license.
+
+## 1.0.8
+
+- Share environment-neutral API contracts through `@mitralab.io/sdk-core`.
+- Preserve the Platform SDK 1.x browser authentication and entity facade.
+- Validate redirects, API errors, sensitive-value redaction, and package consumers.

package/README.md

@@ -30,10 +30,10 @@ await mitra.init()
 ```
 
 `init()` resolves the application's public Code Studio configuration, including nullable
-`dataSourceId` and `allowSignup`. The Data Source value remains part of the Platform 1.x
-compatibility flow; native Entities and Custom Queries resolve the current app through the
-authenticated request. Call `init()` during application startup before the compatibility sign-up
-method needs `allowSignup`.
+`dataSourceId`, `allowSignup`, and `emailLoginEnabled`. The Data Source value remains part of the
+Platform 1.x compatibility flow; native Entities and Custom Queries resolve the current app through
+the authenticated request. Call `init()` during application startup before the compatibility
+sign-up method needs `allowSignup` or the login screen needs `emailLoginEnabled`.
 
 ## Configuration
 
@@ -169,6 +169,23 @@ the app session SSO already returns, persisted and refreshed the same way:
 const user = await mitra.auth.signInWithEmail()
 ```
 
+Not every app is in the rollout. `mitra.emailLoginEnabled` is this app's own verdict, read from
+`/info` during `init()`, and it is what a login screen should offer the option on:
+
+```typescript
+await mitra.init()
+
+if (mitra.emailLoginEnabled) {
+  // render "sign in with email"
+}
+```
+
+It is `false` before `init()` runs, `false` when the server answers without the field or with
+something that is not a boolean, and `false` is the safe answer: the app is outside the rollout,
+IAM answers a request neutrally without sending anything, and the person would wait for a message
+that never arrives. Calling `signInWithEmail()` anyway is not blocked by the SDK; the verdict is
+there so the application does not offer a door that does not open.
+
 Redirect mode navigates the current page instead of opening a popup, and is completed during
 startup like the SSO redirect:
 
@@ -314,12 +331,18 @@ session.close()
 
 A chat created with `create: true` over the `auto` or `websocket` transport is born on the T3 box (`runtime: "T3"` in the create request), so the first open does not wait for the box to adopt it; a chat created with `transport: "http"` stays on the Copilot runner. Pass `runtime: "RUNNER"` or `runtime: "T3"` to decide explicitly.
 
+`session({ create: true, agentId, scope: "ACCOUNT" })` and `agentTasks.create({ agentType, agentId, scope: "ACCOUNT" })` send `scope` in the create body, so the chat runs on the credential the person connected to their own account, the one the IDE and the builder read, instead of the agent's connection. The Copilot honors `ACCOUNT` only for apps listed by flag and answers `ACCOUNT_CREDENTIAL_NOT_ALLOWED` otherwise; a turn without a credential on the account fails with `ACCOUNT_CREDENTIAL_MISSING`. Through `agentTasks.session(...)` those refusals reach the session `error` event with the message and code the Copilot sends; through `agentTasks.create()` and the `agentCredentials` methods they reject the promise with a `MitraApiError` carrying status and code. No platform session is involved: the app token is used as always. Without `scope` nothing changes.
+
 Open an existing task with `session({ taskId })`. The default `auto` transport refreshes before connecting, asks the Copilot once where the chat is served, and opens whichever channel it names: the box that runs the agent when one is offered, `/copilot/ws/tasks/{taskId}` otherwise. The Copilot holds that request while the box boots and answers only once the box is ready or cannot be had; the SDK does not poll. The choice belongs to the server, never to application configuration, so a Copilot that stops offering the box leaves every application on the Copilot socket without a republish. Opening the box never asks it to replay, whether the conversation is new to the session or is being opened again after an idle close: what an idle conversation missed is history, which the application loads over REST. A box socket that drops in the middle of a turn is redialed by the SDK itself, with a bounded backoff (1, 2, 4, 8 and 16 seconds) and the replay from the last position seen on that socket, so the answer keeps streaming; a position taken on one box is forgotten when the Copilot points the conversation to another box; replayed `textChunk` frames reach the `delta` event like live text. While that happens the session emits `raw` events of type `channelReconnecting` (payload `attempt`, `maxAttempts`, `reason`) and `channelConnected` (payload `attempt`); the session `status` stays `streaming`, because Core has no reconnecting status. The disconnect reaches Core, and with it the `error` event, only when the attempts run out or the Copilot no longer offers the box. A drop with no turn in flight, a channel taken over by another tab (close code 4409), and any close of the Copilot socket the session did not ask for are reported at once, whatever the code, so the next send reopens the channel instead of waiting on a socket that is gone. Recovery through persisted history plus the HTTP/SSE channel is unchanged. Set `transport: "http"` when WebSockets are unavailable. Messages sent during a turn enter a FIFO queue with a maximum of 10 items; the session also exposes edit, remove, clear, approval, cancel, history, close, and typed events.
 
+On the direct channel the message and the interrupt are written on the box socket itself, as the frames the box reads from a client: `{ "type": "message", "content", "agentType"?, "reasoningEffort"? }` and `{ "type": "interrupt" }`. The box asks the Copilot to admit the turn and the Copilot records the history; the admission, its refusal and the turn itself come back on that same socket as the events the session already handles, so a message the box refuses surfaces through the `error` event with the box's code. `POST /copilot/api/v1/tasks/{taskId}/inputs` is the path when there is no box socket: a chat served by the Copilot socket or by SSE, a box socket that is not open at the moment of the send (a drop being redialed included), and every approval answer. A frame written on a socket that closes before the box acknowledges it is not sent again over REST, because the box may already have admitted the turn; the redial replays the box log, as it does for a turn started over REST.
+
 A prompt sent while the browser says it is offline (`navigator.onLine === false`) does not enter Core at all, because Core opens the channel and reads the turn baseline before the prompt goes out and every one of those requests would fail first: the session keeps the prompt in an outbox, emits a `raw` event of type `inputUnsent` (payload `attempt` 0, `reason`, `waitingForOnline` true) and hands it to Core, in order, when the browser fires `online`; the turn starts then. A prompt whose `POST /inputs` went out but got no response at all is kept the same way: the session sends the same request again when the browser fires `online` or on a bounded backoff (2, 5, 10, 20 and 40 seconds), while the turn stays `streaming`, with `inputUnsent` events (payload `attempt`, `reason`, `waitingForOnline`, `retryInMs` when a timer is armed) and, once it goes through, `inputSent` (payload `attempts`). A response from the server, an error included, is never retried: the prompt fails through the `error` event as before. A session closed with a prompt still waiting emits `error` with code `INPUT_UNSENT` before it goes quiet, and `sendAndWait` rejects. The retry cannot tell a request the server never received from one whose response was lost on the way back, so a prompt may reach the server twice in that case; the Copilot's `/inputs` accepts no client message id yet. The public `agentTasks.sendInput` primitive is not held back: it fails immediately, as it always did.
 
 API keys and removal accept `ANTHROPIC` or `OPENAI`. OAuth accepts only `ANTHROPIC`; device authorization accepts only `OPENAI`. The facade enforces those producer-supported pairs in TypeScript and at runtime.
 
+Every `agentCredentials` method takes a trailing `options` with `scope: "ACCOUNT"`, sent as the `scope` query parameter, so the credential is read from or written to the person's own account instead of the app: `startOAuth("ANTHROPIC", { scope: "ACCOUNT" })`, `exchangeOAuth("ANTHROPIC", input, { scope: "ACCOUNT" })`, `list({ scope: "ACCOUNT" })`. The Copilot honors `ACCOUNT` only for apps listed by flag and answers `ACCOUNT_CREDENTIAL_NOT_ALLOWED` otherwise. No platform session is involved: the app token is used as always. Without `options` the request is the same as before.
+
 The browser token roles expose Agent tasks, credential status, and model discovery. Administrative business-Agent CRUD is intentionally not exposed by this adapter because the `USE` app role does not carry `AGENT_*` authority.
 
 ## Custom queries
@@ -392,7 +415,7 @@ await loginWithGoogleMitra()
 console.log(mitra.auth.accessToken)
 ```
 
-Google SSO is available through `mitra.auth.signInWithGoogle` and `mitra.auth.completeGoogleSignInRedirect`. Agent tasks, Agent credentials, public Functions, entities, custom queries, Function execution, and integrations now have native replacements. Microsoft SSO remains available only through the complete deprecated re-export surface.
+Google, Microsoft and e-mail sign-in have native replacements: `mitra.auth.signInWithGoogle`, `mitra.auth.signInWithMicrosoft` and `mitra.auth.signInWithEmail`, each with its `complete...SignInRedirect` counterpart. Agent tasks, Agent credentials, public Functions, entities, custom queries, Function execution, and integrations also have native replacements. Only `loginMitra('mitra')` still has no native equivalent and remains available through the deprecated re-export surface.
 
 `createClient` configures the legacy SDK with both `baseURL` and `authUrl` set to `${apiUrl}/legacy`, after removing trailing slashes, plus `projectId: appId`. This keeps deprecated calls and legacy login routed through the BFF while the new modules call their native APIs directly. Its `authPageUrl` uses the same precedence as native Google SSO: explicit client config, `window.__mitraEnv.authPageUrl`, then `/sdk-auth.html` on the `apiUrl` origin. Existing query parameters are preserved.
 

package/dist/index.cjs

@@ -1811,6 +1811,7 @@ var CONNECT_TIMEOUT_MS = 15e3;
 var SILENCE_TIMEOUT_MS = 6e4;
 var RECONNECT_DELAYS_MS = [1e3, 2e3, 4e3, 8e3, 16e3];
 var SUPERSEDED_CLOSE_CODE = 4409;
+var SOCKET_OPEN = 1;
 var SilenceWatchdog = class {
   constructor(onSilence) {
     this.onSilence = onSilence;
@@ -1926,6 +1927,8 @@ var BrowserAgentTaskEventSource = class {
    */
   boxCursors = /* @__PURE__ */ new Map();
   boxAddresses = /* @__PURE__ */ new Map();
+  /** The box socket a task is talking on right now; absent while it is lost or being redialed. */
+  directSockets = /* @__PURE__ */ new Map();
   async open(taskId, observer, signal, transport = "auto") {
     if (transport === "http") return this.openSse(taskId, observer, signal);
     if (transport === "websocket") return this.openWebSocket(taskId, observer, signal);
@@ -1957,6 +1960,23 @@ var BrowserAgentTaskEventSource = class {
       }
     };
   }
+  /**
+   * Writes a message or an interrupt on the box socket when the task is on the direct channel
+   * and that socket is open right now. The box accepts the core's input as its own inbound
+   * frame, asks the copilot for admission itself and answers on this same socket with the
+   * frames the observer already reads, so the copilot's host socket is off the message path.
+   * False sends the caller to REST: no direct channel, a socket lost or mid-redial, or an
+   * approval, which stays on REST as it is.
+   *
+   * A frame written on a socket that closes before the box acknowledges it is not sent again
+   * over REST: the box may have admitted the turn already, and a second copy would start it
+   * twice. The redial replays the box log, which is the same recovery a REST 202 gets when its
+   * turn is lost.
+   */
+  sendOnChannel(taskId, input) {
+    if (input.type === "approval_response") return false;
+    return this.directSockets.get(taskId)?.send(JSON.stringify(input)) ?? false;
+  }
   async requireFreshToken() {
     const fresh = await this.auth.ensureFreshSession();
     const token = this.auth.accessToken;
@@ -2043,6 +2063,11 @@ var BrowserAgentTaskEventSource = class {
     signal?.addEventListener("abort", onAbort, { once: true });
     let inTurn = false;
     let current = null;
+    const track = (socket) => {
+      if (socket) this.directSockets.set(taskId, socket);
+      else if (current && this.directSockets.get(taskId) === current) this.directSockets.delete(taskId);
+      current = socket;
+    };
     const onFrame = (event) => {
       if (typeof event.sequence === "number") {
         const seen = this.boxCursors.get(taskId) ?? 0;
@@ -2052,22 +2077,21 @@ var BrowserAgentTaskEventSource = class {
       observer.onEvent(event);
     };
     const onLost = (error, code) => {
-      current = null;
+      track(null);
       if (link.signal.aborted) return;
       if (!inTurn || code === SUPERSEDED_CLOSE_CODE) {
         observer.onDisconnect(error);
         return;
       }
-      void this.redial(taskId, error, link.signal, observer, { onFrame, onLost }).then((socket) => {
-        current = socket;
-      });
+      void this.redial(taskId, error, link.signal, observer, { onFrame, onLost }).then(track);
     };
-    current = await this.dial(channel.wsUrl, { signal: link.signal, onFrame, onLost });
+    track(await this.dial(channel.wsUrl, { signal: link.signal, onFrame, onLost }));
     return {
       close: () => {
         signal?.removeEventListener("abort", onAbort);
         link.abort();
         current?.close();
+        track(null);
       }
     };
   }
@@ -2152,6 +2176,15 @@ var BrowserAgentTaskEventSource = class {
         removeAbortListener();
         socket.close(1e3, "Client closed");
       };
+      const send = (frame) => {
+        if (intentionalClose || socket.readyState !== SOCKET_OPEN) return false;
+        try {
+          socket.send(frame);
+          return true;
+        } catch {
+          return false;
+        }
+      };
       const onAbort = () => {
         if (!opened) {
           rejectHandshake(signal?.reason instanceof Error ? signal.reason : new Error("Agent WebSocket connection aborted."));
@@ -2175,7 +2208,7 @@ var BrowserAgentTaskEventSource = class {
           } catch {
           }
         }
-        resolve({ close });
+        resolve({ close, send });
       };
       socket.onerror = () => {
         if (!opened) rejectHandshake(new Error("Failed to connect to the Agent WebSocket."));
@@ -2311,7 +2344,10 @@ function createBrowserAgentTasksModule(httpClient, auth, apiUrl) {
     }
   };
   const manager = (0, import_sdk_core8.createAgentTaskSessionManager)({
-    tasks: { ...tasks, sendInput: (taskId, input) => outbox.sendInput(taskId, input) },
+    tasks: {
+      ...tasks,
+      sendInput: (taskId, input) => source.sendOnChannel(taskId, input) ? Promise.resolve() : outbox.sendInput(taskId, input)
+    },
     eventSource
   });
   return (0, import_sdk_core8.withAgentTaskSessions)(tasks, {
@@ -2329,31 +2365,31 @@ function requireProvider(provider, allowed, flow) {
 function createBrowserAgentCredentialsModule(httpClient) {
   const core = (0, import_sdk_core9.createAgentCredentialsModule)(httpClient, coreErrors);
   return {
-    list: () => core.list(),
-    listModels: (agentId) => core.listModels(agentId),
-    saveApiKey: (provider, apiKey) => {
+    list: (options) => core.list(options),
+    listModels: (agentId, options) => core.listModels(agentId, options),
+    saveApiKey: (provider, apiKey, options) => {
       requireProvider(provider, ["ANTHROPIC", "OPENAI"], "API key authentication");
-      return core.saveApiKey(provider, apiKey);
+      return core.saveApiKey(provider, apiKey, options);
     },
-    remove: (provider) => {
+    remove: (provider, options) => {
       requireProvider(provider, ["ANTHROPIC", "OPENAI"], "Credential removal");
-      return core.remove(provider);
+      return core.remove(provider, options);
     },
-    startOAuth: (provider) => {
+    startOAuth: (provider, options) => {
       requireProvider(provider, ["ANTHROPIC"], "OAuth");
-      return core.startOAuth(provider);
+      return core.startOAuth(provider, options);
     },
-    exchangeOAuth: (provider, input) => {
+    exchangeOAuth: (provider, input, options) => {
       requireProvider(provider, ["ANTHROPIC"], "OAuth");
-      return core.exchangeOAuth(provider, input);
+      return core.exchangeOAuth(provider, input, options);
     },
-    startDeviceAuthorization: (provider) => {
+    startDeviceAuthorization: (provider, options) => {
       requireProvider(provider, ["OPENAI"], "Device authorization");
-      return core.startDeviceAuthorization(provider);
+      return core.startDeviceAuthorization(provider, options);
     },
-    pollDeviceAuthorization: (provider, deviceAuthId) => {
+    pollDeviceAuthorization: (provider, deviceAuthId, options) => {
       requireProvider(provider, ["OPENAI"], "Device authorization");
-      return core.pollDeviceAuthorization(provider, deviceAuthId);
+      return core.pollDeviceAuthorization(provider, deviceAuthId, options);
     }
   };
 }
@@ -2377,7 +2413,12 @@ function expectAppInfoResponse(value) {
   }
   return {
     dataSourceId: response.dataSourceId,
-    allowSignup: response.allowSignup
+    allowSignup: response.allowSignup,
+    // Unlike the fields above, a missing or non-boolean value is read as `false`
+    // instead of failing `init()`: a Code Studio older than the email login gate
+    // answers without this field, and an app that cannot prove it is enabled
+    // should stop offering the option, not stop starting.
+    emailLoginEnabled: response.emailLoginEnabled === true
   };
 }
 function createClient(config) {
@@ -2445,6 +2486,7 @@ function createClient(config) {
   legacyBridge.connect();
   let initialized = false;
   let allowSignup = true;
+  let emailLoginEnabled = false;
   async function init() {
     if (initialized) return;
     const publicClient = new HttpClient({
@@ -2460,6 +2502,7 @@ function createClient(config) {
       entitiesModule.setDataSourceId(appInfo.dataSourceId);
     }
     allowSignup = appInfo.allowSignup;
+    emailLoginEnabled = appInfo.emailLoginEnabled;
     initialized = true;
   }
   return {
@@ -2475,6 +2518,9 @@ function createClient(config) {
     get allowSignup() {
       return allowSignup;
     },
+    get emailLoginEnabled() {
+      return emailLoginEnabled;
+    },
     config
   };
 }

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { Transport, TransportRequestOptions, QueryParamValue, EntityTable, FunctionExecution, ListTemplateConfigsOptions, TemplateConfigPage, ProxyResult, ProxyInput, QueryResult, CredentialStatus, AgentModel as AgentModel$1, OAuthStartResult, OAuthExchangeInput, AuthenticationResult, DeviceAuthorization, PublicFunctionsModule, AgentTasksWithSessions } from '@mitralab.io/sdk-core';
-export { AgentQueueItem, AgentSendAndWaitOptions, AgentSendOptions, AgentSessionTransport, AgentTask, AgentTaskCreateInput, AgentTaskInput, AgentTaskListOptions, AgentTaskRuntime, AgentTaskSessionEventMap, AgentTaskSessionOptions, AgentTaskSessionStatus, AgentTurnResult, AuthenticationResult, CredentialStatus, DeviceAuthorization, EntityListOptions, EntityTable, ExistingAgentTaskSessionOptions, FunctionExecution, ListTemplateConfigsOptions, AgentMessage as NativeAgentMessage, AgentModel as NativeAgentModel, AgentTaskSession as NativeAgentTaskSession, AgentTimelineItem as NativeAgentTimelineItem, AgentToolEvent as NativeAgentToolEvent, NewAgentTaskSessionOptions, OAuthExchangeInput, OAuthStartResult, Page, PageOptions, ProxyInput, ProxyResult, PublicFunctionAsyncResult, PublicFunctionResult, PublicFunctionsModule, QueryResult, TemplateConfigPage } from '@mitralab.io/sdk-core';
+import { Transport, TransportRequestOptions, QueryParamValue, EntityTable, FunctionExecution, ListTemplateConfigsOptions, TemplateConfigPage, ProxyResult, ProxyInput, QueryResult, AgentCredentialOptions, CredentialStatus, AgentModel as AgentModel$1, OAuthStartResult, OAuthExchangeInput, AuthenticationResult, DeviceAuthorization, PublicFunctionsModule, AgentTasksWithSessions } from '@mitralab.io/sdk-core';
+export { AgentCredentialOptions, AgentCredentialScope, AgentQueueItem, AgentSendAndWaitOptions, AgentSendOptions, AgentSessionTransport, AgentTask, AgentTaskCreateInput, AgentTaskInput, AgentTaskListOptions, AgentTaskRuntime, AgentTaskSessionEventMap, AgentTaskSessionOptions, AgentTaskSessionStatus, AgentTurnResult, AuthenticationResult, CredentialStatus, DeviceAuthorization, EntityListOptions, EntityTable, ExistingAgentTaskSessionOptions, FunctionExecution, ListTemplateConfigsOptions, AgentMessage as NativeAgentMessage, AgentModel as NativeAgentModel, AgentTaskSession as NativeAgentTaskSession, AgentTimelineItem as NativeAgentTimelineItem, AgentToolEvent as NativeAgentToolEvent, NewAgentTaskSessionOptions, OAuthExchangeInput, OAuthStartResult, Page, PageOptions, ProxyInput, ProxyResult, PublicFunctionAsyncResult, PublicFunctionResult, PublicFunctionsModule, QueryResult, TemplateConfigPage } from '@mitralab.io/sdk-core';
 import * as LegacyTypes from 'mitra-interactions-sdk';
 import { exchangeSsoCodeMitra as exchangeSsoCodeMitra$1, loginMitra as loginMitra$1, loginWithGoogleMitra as loginWithGoogleMitra$1, loginWithMicrosoftMitra as loginWithMicrosoftMitra$1 } from 'mitra-interactions-sdk';
 export { callIntegrationMitra, configureSdkMitra, createMitraInstance, createRecordMitra, createRecordsBatchMitra, deleteRecordMitra, executePublicServerFunctionAsyncMitra, executePublicServerFunctionMitra, executeServerFunctionAsyncMitra, executeServerFunctionMitra, getAgentTaskMitra, getConfig, getPublicServerFunctionExecutionMitra, getRecordMitra, listIntegrationsMitra, listRecordsMitra, manageAgentChatMitra, manageAgentCredentialMitra, patchRecordMitra, refreshTokenSilently, resolveProjectId, stopServerFunctionExecutionMitra, updateRecordMitra } from 'mitra-interactions-sdk';
@@ -652,14 +652,14 @@ type AgentCredentialProvider = 'ANTHROPIC' | 'OPENAI';
 type AgentOAuthProvider = 'ANTHROPIC';
 type AgentDeviceProvider = 'OPENAI';
 interface AgentCredentialsModule {
-    list(): Promise<CredentialStatus[]>;
-    listModels(agentId?: string): Promise<AgentModel$1[]>;
-    saveApiKey(provider: AgentCredentialProvider, apiKey: string): Promise<void>;
-    remove(provider: AgentCredentialProvider): Promise<void>;
-    startOAuth(provider: AgentOAuthProvider): Promise<OAuthStartResult>;
-    exchangeOAuth(provider: AgentOAuthProvider, input: OAuthExchangeInput): Promise<AuthenticationResult>;
-    startDeviceAuthorization(provider: AgentDeviceProvider): Promise<DeviceAuthorization>;
-    pollDeviceAuthorization(provider: AgentDeviceProvider, deviceAuthId: string): Promise<AuthenticationResult>;
+    list(options?: AgentCredentialOptions): Promise<CredentialStatus[]>;
+    listModels(agentId?: string, options?: AgentCredentialOptions): Promise<AgentModel$1[]>;
+    saveApiKey(provider: AgentCredentialProvider, apiKey: string, options?: AgentCredentialOptions): Promise<void>;
+    remove(provider: AgentCredentialProvider, options?: AgentCredentialOptions): Promise<void>;
+    startOAuth(provider: AgentOAuthProvider, options?: AgentCredentialOptions): Promise<OAuthStartResult>;
+    exchangeOAuth(provider: AgentOAuthProvider, input: OAuthExchangeInput, options?: AgentCredentialOptions): Promise<AuthenticationResult>;
+    startDeviceAuthorization(provider: AgentDeviceProvider, options?: AgentCredentialOptions): Promise<DeviceAuthorization>;
+    pollDeviceAuthorization(provider: AgentDeviceProvider, deviceAuthId: string, options?: AgentCredentialOptions): Promise<AuthenticationResult>;
 }
 
 /**
@@ -741,7 +741,8 @@ interface MitraClient {
     /**
      * Initializes the client by resolving app config from the server.
      *
-     * Fetches the compatibility dataSourceId and allowSignup from the public app info endpoint.
+     * Fetches the compatibility dataSourceId, allowSignup, and emailLoginEnabled
+     * from the public app info endpoint.
      *
      * Safe to call multiple times. Subsequent calls are no-ops.
      *
@@ -827,6 +828,13 @@ interface MitraClient {
      * Defaults to `true` before `init()` is called.
      */
     readonly allowSignup: boolean;
+    /**
+     * Whether this app offers sign-in by email, so the application can hide the
+     * option instead of sending people to a request IAM would answer neutrally.
+     * Defaults to `false` before `init()` is called, and stays `false` when the
+     * server does not answer the field.
+     */
+    readonly emailLoginEnabled: boolean;
     /**
      * The configuration used to create this client.
      */
@@ -842,8 +850,8 @@ interface MitraClient {
  * - **integration**: Proxy HTTP requests to external APIs
  * - **queries**: Custom query management and execution
  *
- * After creating the client, call `init()` to resolve the app's compatibility config
- * (dataSourceId, allowSignup) automatically from the server.
+ * After creating the client, call `init()` to resolve the app's public config
+ * (dataSourceId, allowSignup, emailLoginEnabled) automatically from the server.
  *
  * @param config - Configuration options for the client.
  * @returns A configured MitraClient instance.
@@ -895,8 +903,10 @@ declare function createClient(config: MitraClientConfig): MitraClient;
  */
 
 /**
- * @deprecated Use `mitra.auth.signInWithGoogle()` when `method` is Google.
- * Other legacy login methods remain supported until an equivalent exists.
+ * @deprecated Use `mitra.auth.signInWithGoogle()` when `method` is `google`,
+ * `mitra.auth.signInWithMicrosoft()` when it is `microsoft`, and
+ * `mitra.auth.signInWithEmail()` when it is `email`. Only `mitra` has no native
+ * equivalent yet and remains supported through this surface.
  */
 declare const loginMitra: typeof loginMitra$1;
 /**

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { Transport, TransportRequestOptions, QueryParamValue, EntityTable, FunctionExecution, ListTemplateConfigsOptions, TemplateConfigPage, ProxyResult, ProxyInput, QueryResult, CredentialStatus, AgentModel as AgentModel$1, OAuthStartResult, OAuthExchangeInput, AuthenticationResult, DeviceAuthorization, PublicFunctionsModule, AgentTasksWithSessions } from '@mitralab.io/sdk-core';
-export { AgentQueueItem, AgentSendAndWaitOptions, AgentSendOptions, AgentSessionTransport, AgentTask, AgentTaskCreateInput, AgentTaskInput, AgentTaskListOptions, AgentTaskRuntime, AgentTaskSessionEventMap, AgentTaskSessionOptions, AgentTaskSessionStatus, AgentTurnResult, AuthenticationResult, CredentialStatus, DeviceAuthorization, EntityListOptions, EntityTable, ExistingAgentTaskSessionOptions, FunctionExecution, ListTemplateConfigsOptions, AgentMessage as NativeAgentMessage, AgentModel as NativeAgentModel, AgentTaskSession as NativeAgentTaskSession, AgentTimelineItem as NativeAgentTimelineItem, AgentToolEvent as NativeAgentToolEvent, NewAgentTaskSessionOptions, OAuthExchangeInput, OAuthStartResult, Page, PageOptions, ProxyInput, ProxyResult, PublicFunctionAsyncResult, PublicFunctionResult, PublicFunctionsModule, QueryResult, TemplateConfigPage } from '@mitralab.io/sdk-core';
+import { Transport, TransportRequestOptions, QueryParamValue, EntityTable, FunctionExecution, ListTemplateConfigsOptions, TemplateConfigPage, ProxyResult, ProxyInput, QueryResult, AgentCredentialOptions, CredentialStatus, AgentModel as AgentModel$1, OAuthStartResult, OAuthExchangeInput, AuthenticationResult, DeviceAuthorization, PublicFunctionsModule, AgentTasksWithSessions } from '@mitralab.io/sdk-core';
+export { AgentCredentialOptions, AgentCredentialScope, AgentQueueItem, AgentSendAndWaitOptions, AgentSendOptions, AgentSessionTransport, AgentTask, AgentTaskCreateInput, AgentTaskInput, AgentTaskListOptions, AgentTaskRuntime, AgentTaskSessionEventMap, AgentTaskSessionOptions, AgentTaskSessionStatus, AgentTurnResult, AuthenticationResult, CredentialStatus, DeviceAuthorization, EntityListOptions, EntityTable, ExistingAgentTaskSessionOptions, FunctionExecution, ListTemplateConfigsOptions, AgentMessage as NativeAgentMessage, AgentModel as NativeAgentModel, AgentTaskSession as NativeAgentTaskSession, AgentTimelineItem as NativeAgentTimelineItem, AgentToolEvent as NativeAgentToolEvent, NewAgentTaskSessionOptions, OAuthExchangeInput, OAuthStartResult, Page, PageOptions, ProxyInput, ProxyResult, PublicFunctionAsyncResult, PublicFunctionResult, PublicFunctionsModule, QueryResult, TemplateConfigPage } from '@mitralab.io/sdk-core';
 import * as LegacyTypes from 'mitra-interactions-sdk';
 import { exchangeSsoCodeMitra as exchangeSsoCodeMitra$1, loginMitra as loginMitra$1, loginWithGoogleMitra as loginWithGoogleMitra$1, loginWithMicrosoftMitra as loginWithMicrosoftMitra$1 } from 'mitra-interactions-sdk';
 export { callIntegrationMitra, configureSdkMitra, createMitraInstance, createRecordMitra, createRecordsBatchMitra, deleteRecordMitra, executePublicServerFunctionAsyncMitra, executePublicServerFunctionMitra, executeServerFunctionAsyncMitra, executeServerFunctionMitra, getAgentTaskMitra, getConfig, getPublicServerFunctionExecutionMitra, getRecordMitra, listIntegrationsMitra, listRecordsMitra, manageAgentChatMitra, manageAgentCredentialMitra, patchRecordMitra, refreshTokenSilently, resolveProjectId, stopServerFunctionExecutionMitra, updateRecordMitra } from 'mitra-interactions-sdk';
@@ -652,14 +652,14 @@ type AgentCredentialProvider = 'ANTHROPIC' | 'OPENAI';
 type AgentOAuthProvider = 'ANTHROPIC';
 type AgentDeviceProvider = 'OPENAI';
 interface AgentCredentialsModule {
-    list(): Promise<CredentialStatus[]>;
-    listModels(agentId?: string): Promise<AgentModel$1[]>;
-    saveApiKey(provider: AgentCredentialProvider, apiKey: string): Promise<void>;
-    remove(provider: AgentCredentialProvider): Promise<void>;
-    startOAuth(provider: AgentOAuthProvider): Promise<OAuthStartResult>;
-    exchangeOAuth(provider: AgentOAuthProvider, input: OAuthExchangeInput): Promise<AuthenticationResult>;
-    startDeviceAuthorization(provider: AgentDeviceProvider): Promise<DeviceAuthorization>;
-    pollDeviceAuthorization(provider: AgentDeviceProvider, deviceAuthId: string): Promise<AuthenticationResult>;
+    list(options?: AgentCredentialOptions): Promise<CredentialStatus[]>;
+    listModels(agentId?: string, options?: AgentCredentialOptions): Promise<AgentModel$1[]>;
+    saveApiKey(provider: AgentCredentialProvider, apiKey: string, options?: AgentCredentialOptions): Promise<void>;
+    remove(provider: AgentCredentialProvider, options?: AgentCredentialOptions): Promise<void>;
+    startOAuth(provider: AgentOAuthProvider, options?: AgentCredentialOptions): Promise<OAuthStartResult>;
+    exchangeOAuth(provider: AgentOAuthProvider, input: OAuthExchangeInput, options?: AgentCredentialOptions): Promise<AuthenticationResult>;
+    startDeviceAuthorization(provider: AgentDeviceProvider, options?: AgentCredentialOptions): Promise<DeviceAuthorization>;
+    pollDeviceAuthorization(provider: AgentDeviceProvider, deviceAuthId: string, options?: AgentCredentialOptions): Promise<AuthenticationResult>;
 }
 
 /**
@@ -741,7 +741,8 @@ interface MitraClient {
     /**
      * Initializes the client by resolving app config from the server.
      *
-     * Fetches the compatibility dataSourceId and allowSignup from the public app info endpoint.
+     * Fetches the compatibility dataSourceId, allowSignup, and emailLoginEnabled
+     * from the public app info endpoint.
      *
      * Safe to call multiple times. Subsequent calls are no-ops.
      *
@@ -827,6 +828,13 @@ interface MitraClient {
      * Defaults to `true` before `init()` is called.
      */
     readonly allowSignup: boolean;
+    /**
+     * Whether this app offers sign-in by email, so the application can hide the
+     * option instead of sending people to a request IAM would answer neutrally.
+     * Defaults to `false` before `init()` is called, and stays `false` when the
+     * server does not answer the field.
+     */
+    readonly emailLoginEnabled: boolean;
     /**
      * The configuration used to create this client.
      */
@@ -842,8 +850,8 @@ interface MitraClient {
  * - **integration**: Proxy HTTP requests to external APIs
  * - **queries**: Custom query management and execution
  *
- * After creating the client, call `init()` to resolve the app's compatibility config
- * (dataSourceId, allowSignup) automatically from the server.
+ * After creating the client, call `init()` to resolve the app's public config
+ * (dataSourceId, allowSignup, emailLoginEnabled) automatically from the server.
  *
  * @param config - Configuration options for the client.
  * @returns A configured MitraClient instance.
@@ -895,8 +903,10 @@ declare function createClient(config: MitraClientConfig): MitraClient;
  */
 
 /**
- * @deprecated Use `mitra.auth.signInWithGoogle()` when `method` is Google.
- * Other legacy login methods remain supported until an equivalent exists.
+ * @deprecated Use `mitra.auth.signInWithGoogle()` when `method` is `google`,
+ * `mitra.auth.signInWithMicrosoft()` when it is `microsoft`, and
+ * `mitra.auth.signInWithEmail()` when it is `email`. Only `mitra` has no native
+ * equivalent yet and remains supported through this surface.
  */
 declare const loginMitra: typeof loginMitra$1;
 /**

package/dist/index.js

@@ -1774,6 +1774,7 @@ var CONNECT_TIMEOUT_MS = 15e3;
 var SILENCE_TIMEOUT_MS = 6e4;
 var RECONNECT_DELAYS_MS = [1e3, 2e3, 4e3, 8e3, 16e3];
 var SUPERSEDED_CLOSE_CODE = 4409;
+var SOCKET_OPEN = 1;
 var SilenceWatchdog = class {
   constructor(onSilence) {
     this.onSilence = onSilence;
@@ -1889,6 +1890,8 @@ var BrowserAgentTaskEventSource = class {
    */
   boxCursors = /* @__PURE__ */ new Map();
   boxAddresses = /* @__PURE__ */ new Map();
+  /** The box socket a task is talking on right now; absent while it is lost or being redialed. */
+  directSockets = /* @__PURE__ */ new Map();
   async open(taskId, observer, signal, transport = "auto") {
     if (transport === "http") return this.openSse(taskId, observer, signal);
     if (transport === "websocket") return this.openWebSocket(taskId, observer, signal);
@@ -1920,6 +1923,23 @@ var BrowserAgentTaskEventSource = class {
       }
     };
   }
+  /**
+   * Writes a message or an interrupt on the box socket when the task is on the direct channel
+   * and that socket is open right now. The box accepts the core's input as its own inbound
+   * frame, asks the copilot for admission itself and answers on this same socket with the
+   * frames the observer already reads, so the copilot's host socket is off the message path.
+   * False sends the caller to REST: no direct channel, a socket lost or mid-redial, or an
+   * approval, which stays on REST as it is.
+   *
+   * A frame written on a socket that closes before the box acknowledges it is not sent again
+   * over REST: the box may have admitted the turn already, and a second copy would start it
+   * twice. The redial replays the box log, which is the same recovery a REST 202 gets when its
+   * turn is lost.
+   */
+  sendOnChannel(taskId, input) {
+    if (input.type === "approval_response") return false;
+    return this.directSockets.get(taskId)?.send(JSON.stringify(input)) ?? false;
+  }
   async requireFreshToken() {
     const fresh = await this.auth.ensureFreshSession();
     const token = this.auth.accessToken;
@@ -2006,6 +2026,11 @@ var BrowserAgentTaskEventSource = class {
     signal?.addEventListener("abort", onAbort, { once: true });
     let inTurn = false;
     let current = null;
+    const track = (socket) => {
+      if (socket) this.directSockets.set(taskId, socket);
+      else if (current && this.directSockets.get(taskId) === current) this.directSockets.delete(taskId);
+      current = socket;
+    };
     const onFrame = (event) => {
       if (typeof event.sequence === "number") {
         const seen = this.boxCursors.get(taskId) ?? 0;
@@ -2015,22 +2040,21 @@ var BrowserAgentTaskEventSource = class {
       observer.onEvent(event);
     };
     const onLost = (error, code) => {
-      current = null;
+      track(null);
       if (link.signal.aborted) return;
       if (!inTurn || code === SUPERSEDED_CLOSE_CODE) {
         observer.onDisconnect(error);
         return;
       }
-      void this.redial(taskId, error, link.signal, observer, { onFrame, onLost }).then((socket) => {
-        current = socket;
-      });
+      void this.redial(taskId, error, link.signal, observer, { onFrame, onLost }).then(track);
     };
-    current = await this.dial(channel.wsUrl, { signal: link.signal, onFrame, onLost });
+    track(await this.dial(channel.wsUrl, { signal: link.signal, onFrame, onLost }));
     return {
       close: () => {
         signal?.removeEventListener("abort", onAbort);
         link.abort();
         current?.close();
+        track(null);
       }
     };
   }
@@ -2115,6 +2139,15 @@ var BrowserAgentTaskEventSource = class {
         removeAbortListener();
         socket.close(1e3, "Client closed");
       };
+      const send = (frame) => {
+        if (intentionalClose || socket.readyState !== SOCKET_OPEN) return false;
+        try {
+          socket.send(frame);
+          return true;
+        } catch {
+          return false;
+        }
+      };
       const onAbort = () => {
         if (!opened) {
           rejectHandshake(signal?.reason instanceof Error ? signal.reason : new Error("Agent WebSocket connection aborted."));
@@ -2138,7 +2171,7 @@ var BrowserAgentTaskEventSource = class {
           } catch {
           }
         }
-        resolve({ close });
+        resolve({ close, send });
       };
       socket.onerror = () => {
         if (!opened) rejectHandshake(new Error("Failed to connect to the Agent WebSocket."));
@@ -2274,7 +2307,10 @@ function createBrowserAgentTasksModule(httpClient, auth, apiUrl) {
     }
   };
   const manager = createAgentTaskSessionManager({
-    tasks: { ...tasks, sendInput: (taskId, input) => outbox.sendInput(taskId, input) },
+    tasks: {
+      ...tasks,
+      sendInput: (taskId, input) => source.sendOnChannel(taskId, input) ? Promise.resolve() : outbox.sendInput(taskId, input)
+    },
     eventSource
   });
   return withAgentTaskSessions(tasks, {
@@ -2294,31 +2330,31 @@ function requireProvider(provider, allowed, flow) {
 function createBrowserAgentCredentialsModule(httpClient) {
   const core = createAgentCredentialsModule(httpClient, coreErrors);
   return {
-    list: () => core.list(),
-    listModels: (agentId) => core.listModels(agentId),
-    saveApiKey: (provider, apiKey) => {
+    list: (options) => core.list(options),
+    listModels: (agentId, options) => core.listModels(agentId, options),
+    saveApiKey: (provider, apiKey, options) => {
       requireProvider(provider, ["ANTHROPIC", "OPENAI"], "API key authentication");
-      return core.saveApiKey(provider, apiKey);
+      return core.saveApiKey(provider, apiKey, options);
     },
-    remove: (provider) => {
+    remove: (provider, options) => {
       requireProvider(provider, ["ANTHROPIC", "OPENAI"], "Credential removal");
-      return core.remove(provider);
+      return core.remove(provider, options);
     },
-    startOAuth: (provider) => {
+    startOAuth: (provider, options) => {
       requireProvider(provider, ["ANTHROPIC"], "OAuth");
-      return core.startOAuth(provider);
+      return core.startOAuth(provider, options);
     },
-    exchangeOAuth: (provider, input) => {
+    exchangeOAuth: (provider, input, options) => {
       requireProvider(provider, ["ANTHROPIC"], "OAuth");
-      return core.exchangeOAuth(provider, input);
+      return core.exchangeOAuth(provider, input, options);
     },
-    startDeviceAuthorization: (provider) => {
+    startDeviceAuthorization: (provider, options) => {
       requireProvider(provider, ["OPENAI"], "Device authorization");
-      return core.startDeviceAuthorization(provider);
+      return core.startDeviceAuthorization(provider, options);
     },
-    pollDeviceAuthorization: (provider, deviceAuthId) => {
+    pollDeviceAuthorization: (provider, deviceAuthId, options) => {
       requireProvider(provider, ["OPENAI"], "Device authorization");
-      return core.pollDeviceAuthorization(provider, deviceAuthId);
+      return core.pollDeviceAuthorization(provider, deviceAuthId, options);
     }
   };
 }
@@ -2342,7 +2378,12 @@ function expectAppInfoResponse(value) {
   }
   return {
     dataSourceId: response.dataSourceId,
-    allowSignup: response.allowSignup
+    allowSignup: response.allowSignup,
+    // Unlike the fields above, a missing or non-boolean value is read as `false`
+    // instead of failing `init()`: a Code Studio older than the email login gate
+    // answers without this field, and an app that cannot prove it is enabled
+    // should stop offering the option, not stop starting.
+    emailLoginEnabled: response.emailLoginEnabled === true
   };
 }
 function createClient(config) {
@@ -2410,6 +2451,7 @@ function createClient(config) {
   legacyBridge.connect();
   let initialized = false;
   let allowSignup = true;
+  let emailLoginEnabled = false;
   async function init() {
     if (initialized) return;
     const publicClient = new HttpClient({
@@ -2425,6 +2467,7 @@ function createClient(config) {
       entitiesModule.setDataSourceId(appInfo.dataSourceId);
     }
     allowSignup = appInfo.allowSignup;
+    emailLoginEnabled = appInfo.emailLoginEnabled;
     initialized = true;
   }
   return {
@@ -2440,6 +2483,9 @@ function createClient(config) {
     get allowSignup() {
       return allowSignup;
     },
+    get emailLoginEnabled() {
+      return emailLoginEnabled;
+    },
     config
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mitralab.io/platform-sdk",
-  "version": "1.1.3",
+  "version": "1.1.5-beta.0",
   "description": "JavaScript/TypeScript SDK for building apps on the Mitra Platform",
   "type": "module",
   "sideEffects": false,
@@ -62,7 +62,7 @@
     "url": "https://github.com/mitralab-dev/mitra-platform-sdk/issues"
   },
   "dependencies": {
-    "@mitralab.io/sdk-core": "0.2.4",
+    "@mitralab.io/sdk-core": "0.2.5-beta.0",
     "mitra-interactions-sdk": "1.0.60-beta.48"
   },
   "devDependencies": {