mitra-interactions-sdk 1.0.58-beta.5 → 1.0.58-beta.6

package/dist/index.d.mts

@@ -657,7 +657,19 @@ type CredentialTarget = AgentSubscriptionTarget | AgentApiKeyTarget;
  * de baixo nível + abre popup + espera autorização):
  *   connect
  */
-type CredentialAction = 'connect' | 'status' | 'remove' | 'list' | 'list_models' | 'validate' | 'save' | 'oauth_start' | 'oauth_exchange' | 'device_start' | 'device_poll' | 'device_cancel';
+type CredentialAction = 'auth' | 'connect' | 'status' | 'remove' | 'list' | 'list_models' | 'list_providers' | 'validate' | 'save' | 'oauth_start' | 'oauth_exchange' | 'device_start' | 'device_poll' | 'device_cancel';
+/** Forma de acesso a uma credencial. */
+type CredentialAccessType = 'subscription' | 'api_key';
+/** Método de conexão — diz ao app/agent qual UI montar. */
+type AuthMethod = 'api_key' | 'paste_code' | 'device';
+/** Metadados pra montar a UI de conexão (vem em cada provider de list_providers). */
+interface AgentAuthMeta {
+    method: AuthMethod;
+    /** Só para method='api_key'. */
+    keyLabel?: string;
+    /** Só para method='api_key'. */
+    keyPlaceholder?: string;
+}
 /** Um modelo selecionável (retornado por action='list_models'). */
 interface AgentModelOption {
     /** Passe direto em send({ modelId }) ou getAgentTaskMitra({ create, modelId }). */
@@ -669,13 +681,34 @@ interface AgentModelOption {
 interface AgentModelGroup {
     id: string;
     name: string;
-    kind: 'subscription' | 'api_key';
+    type: CredentialAccessType;
     models: AgentModelOption[];
 }
 /** Retorno de manageAgentCredentialMitra({ action: 'list_models' }). */
 interface ListAgentModelsResult {
     providers: AgentModelGroup[];
 }
+/** Um provedor suportado + status (retornado por action='list_providers'). */
+interface AgentProviderListItem {
+    id: string;
+    name: string;
+    type: CredentialAccessType;
+    /** Passe direto em auth/connect/save/remove. */
+    target: string;
+    /** Como conectar: method (api_key|paste_code|device) + label/placeholder. */
+    auth: AgentAuthMeta;
+    connected: boolean;
+    /** Presente em subscription Claude conectada. */
+    account?: AgentSubscriptionAccount;
+    expiresAt?: number;
+    /** Presente em API key conectada. */
+    maskedKey?: string;
+    updatedAt?: string | Date;
+}
+/** Retorno de manageAgentCredentialMitra({ action: 'list_providers' }). */
+interface ListAgentProvidersResult {
+    providers: AgentProviderListItem[];
+}
 /**
  * Opções de baixo nível (RPC direto) de `manageAgentCredentialMitra`. Campos
  * extras (key, code, codeVerifier, redirectUri, pollId, accessToken,
@@ -684,8 +717,8 @@ interface ListAgentModelsResult {
  * NÃO use com action='connect' — para isso use ConnectAgentCredentialOptions.
  */
 interface ManageAgentCredentialOptions {
-    action: Exclude<CredentialAction, 'connect'>;
-    /** Obrigatório exceto para action='list'. */
+    action: Exclude<CredentialAction, 'connect' | 'auth'>;
+    /** Obrigatório exceto para action='list' / 'list_models'. */
     target?: CredentialTarget;
     /** Para `save` / `validate` de API key. */
     key?: string;
@@ -717,46 +750,54 @@ interface AgentSubscriptionAccount {
  * Orquestra o fluxo OAuth/device ponta-a-ponta no browser (abre popup, espera
  * autorização, troca por tokens server-side).
  */
+/**
+ * Targets que conectam SEM redirect (paste código / device flow). O
+ * 'openai_oauth' fica de fora porque depende de redirect localhost:1455
+ * (client OAuth compartilhado da OpenAI) — inviável em domínio de cliente.
+ * OpenAI subscription conecta via 'codex' (device flow).
+ */
+type ConnectableSubscriptionTarget = 'claude' | 'codex';
+interface AuthAgentCredentialOptions {
+    action: 'auth';
+    target: ConnectableSubscriptionTarget;
+}
+/** Resultado de auth(claude): abra a authUrl, depois connect com o código. */
+interface AuthClaudeResult {
+    target: 'claude';
+    /** URL pra abrir (a Anthropic mostra o código na própria tela). */
+    authUrl: string;
+    /** Passe de volta no connect junto com o código. */
+    state: string;
+}
+/** Resultado de auth(codex): mostre userCode/verificationUrl, depois connect com pollId. */
+interface AuthCodexResult {
+    target: 'codex';
+    /** Código que o user digita no site da OpenAI. */
+    userCode: string | null;
+    /** URL que o user abre pra autorizar. */
+    verificationUrl: string | null;
+    /** Passe de volta no connect; a SDK faz o polling. */
+    pollId: string;
+}
+type AuthAgentCredentialResult = AuthClaudeResult | AuthCodexResult;
 interface ConnectAgentCredentialOptions {
     action: 'connect';
-    target: AgentSubscriptionTarget;
-    /**
-     * Callback que retorna o código que o usuário copiou da página da Anthropic
-     * após autorizar. **Obrigatório** para target='claude'.
-     */
-    onCodeNeeded?: (info: {
-        authUrl: string;
-        state: string;
-    }) => Promise<string> | string;
-    /**
-     * URL no domínio do app publicado que captura o `?code=` da OAuth e faz
-     * `window.opener.postMessage({ mitraOpenAICode: code }, '*')`.
-     * **Obrigatório** para target='openai_oauth'.
-     */
-    redirectUri?: string;
-    /** Timeout esperando o postMessage (default 5min). */
-    messageTimeoutMs?: number;
-    /**
-     * Callback opcional que recebe o `userCode` e `verificationUrl` assim que
-     * o device flow inicia (use pra exibir na UI além do popup automático).
-     */
-    onDeviceCode?: (info: {
-        userCode: string | null;
-        verificationUrl: string | null;
-    }) => void;
+    target: ConnectableSubscriptionTarget;
+    /** Código que o user copiou da página da Anthropic. Obrigatório p/ claude. */
+    code?: string;
+    /** O `state` devolvido por auth(claude). Obrigatório p/ claude. */
+    state?: string;
+    /** O `pollId` devolvido por auth(codex). Obrigatório p/ codex. */
+    pollId?: string;
     /** Intervalo de poll do device flow (default 2000ms). */
     pollIntervalMs?: number;
     /** Timeout total do device flow (default 15min). */
     deviceTimeoutMs?: number;
-    /** Nome da window do popup (default depende do target). */
-    windowName?: string;
-    /** `features` string passada para `window.open`. */
-    windowFeatures?: string;
 }
 interface ConnectAgentSubscriptionResult {
-    target: AgentSubscriptionTarget;
+    target: ConnectableSubscriptionTarget;
     success: boolean;
-    /** Presente em claude / openai_oauth (epoch ms). */
+    /** Presente em claude (epoch ms). */
     expiresAt?: number;
     /** Presente apenas em claude. */
     account?: AgentSubscriptionAccount | null;
@@ -973,48 +1014,48 @@ declare function getAgentTaskMitra(options: GetAgentTaskOptions): AgentTaskSessi
  * Função ÚNICA `manageAgentCredentialMitra` sobre /sdk-ws para todas as
  * operações de credencial do agente:
  *   - API keys (8 providers: anthropic, openai, gemini, kimi, minimax, glm, qwen, openrouter)
- *   - Subscriptions OAuth (Claude / OpenAI / Codex device flow)
+ *   - Subscriptions OAuth (Claude paste-código / OpenAI device flow via Codex)
  *
  * Actions de baixo nível (RPC direto contra o backend):
- *   status | remove | list | validate | save
+ *   status | remove | list | list_models | validate | save
  *   oauth_start | oauth_exchange | device_start | device_poll | device_cancel
  *
- * Action de alto nível (orquestra o fluxo ponta-a-ponta no browser):
- *   connect — abre popup, espera código/postMessage/poll, troca por tokens.
+ * Actions de alto nível (orquestradas na SDK — o app controla UI/popup/timing):
+ *   auth     — inicia o fluxo e retorna o que a UI mostra (sem efeito colateral
+ *              de janela). claude → { authUrl, state }; codex → { userCode,
+ *              verificationUrl, pollId }.
+ *   connect  — finaliza/salva. claude → passa { code, state }; codex → passa
+ *              { pollId } e a SDK faz o polling até autorizar.
+ *
+ * Fluxo típico (sem callbacks, sem redirect, sem callback page):
+ *   const { authUrl, state } = await manageAgentCredentialMitra({ action:'auth', target:'claude' });
+ *   // app abre authUrl + coleta o código do user
+ *   await manageAgentCredentialMitra({ action:'connect', target:'claude', code, state });
+ *
+ *   const { userCode, verificationUrl, pollId } = await manageAgentCredentialMitra({ action:'auth', target:'codex' });
+ *   // app mostra "abra {verificationUrl}, digite {userCode}"
+ *   await manageAgentCredentialMitra({ action:'connect', target:'codex', pollId });
  *
  * SEGURANÇA: o token de subscription NUNCA volta cru pro cliente. É salvo
- * server-side (Firestore) e injetado no sandbox E2B direto de lá. O retorno
- * de `connect`/`oauth_exchange` traz só { connected, expiresAt, account }.
+ * server-side (Firestore) e injetado no sandbox E2B direto de lá.
  */
 
 /**
- * Conecta uma subscription ponta-a-ponta (abre popup, espera autorização,
- * troca por tokens). Retorno tipado: { target, success, expiresAt?, account? }.
- *
- * @example
- * // Claude — caller mostra modal pedindo o paste do código
- * await manageAgentCredentialMitra({
- *   action: 'connect', target: 'claude',
- *   onCodeNeeded: async () => prompt('Cole o código:') ?? ''
- * });
- *
- * @example
- * // OpenAI — callback page no domínio do app faz postMessage
- * await manageAgentCredentialMitra({
- *   action: 'connect', target: 'openai_oauth',
- *   redirectUri: window.location.origin + '/auth/openai-callback'
- * });
- *
- * @example
- * // Codex — device flow automático (abre verificação, polling)
- * await manageAgentCredentialMitra({ action: 'connect', target: 'codex' });
+ * Inicia um fluxo de subscription. Não abre janelas — retorna os dados pra UI:
+ *   claude → { authUrl, state }   codex → { userCode, verificationUrl, pollId }
+ */
+declare function manageAgentCredentialMitra(options: AuthAgentCredentialOptions): Promise<AuthAgentCredentialResult>;
+/**
+ * Finaliza/salva uma subscription:
+ *   claude → { code, state }   codex → { pollId } (a SDK faz o polling)
  */
 declare function manageAgentCredentialMitra(options: ConnectAgentCredentialOptions): Promise<ConnectAgentSubscriptionResult>;
 /**
- * RPC direto contra o backend. Retorno depende de (action, target) — veja docs.
+ * RPC direto contra o backend. Retorno depende de (action, target).
  *
  * @example
  * await manageAgentCredentialMitra({ action: 'list' });
+ * await manageAgentCredentialMitra({ action: 'list_models' });
  * await manageAgentCredentialMitra({ action: 'status', target: 'anthropic' });
  * await manageAgentCredentialMitra({ action: 'validate', target: 'openai', key: 'sk-...' });
  * await manageAgentCredentialMitra({ action: 'save', target: 'glm', key: '...' });
@@ -1177,4 +1218,4 @@ declare function setProfileScreensMitra(options: SetProfileScreensOptions): Prom
  */
 declare function setProfileServerFunctionsMitra(options: SetProfileServerFunctionsOptions): Promise<SetProfilePermissionResponse>;
 
-export { type AgentApiKeyTarget, type AgentChat, type AgentDeltaEvent, type AgentErrorEvent, type AgentMessage, type AgentModelGroup, type AgentModelOption, type AgentQueueChangeEvent, type AgentStatusChangeEvent, type AgentSubscriptionAccount, type AgentSubscriptionTarget, type AgentTaskCreatedEvent, type AgentTaskEventMap, type AgentTaskEventName, type AgentTaskSession, type AgentTaskStatus, type AgentToolEvent, type AgentTurnEndEvent, type AgentType, type CallIntegrationOptions, type CallIntegrationResponse, type ConnectAgentCredentialOptions, type ConnectAgentSubscriptionResult, type CreateProfileOptions, type CreateProfileResponse, type CreateRecordOptions, type CreateRecordsBatchOptions, type CredentialAction, type CredentialTarget, type DeleteProfileOptions, type DeleteProfileResponse, type DeleteRecordOptions, type EmailLoginOptions, type EmailResendCodeOptions, type EmailSignupOptions, type EmailVerifyCodeOptions, type ExecuteDataLoaderOptions, type ExecuteDataLoaderResponse, type ExecuteDbActionOptions, type ExecuteDbActionResponse, type ExecutePublicServerFunctionAsyncResponse, type ExecutePublicServerFunctionOptions, type ExecutePublicServerFunctionResponse, type ExecuteServerFunctionAsyncOptions, type ExecuteServerFunctionAsyncResponse, type ExecuteServerFunctionOptions, type ExecuteServerFunctionResponse, type GetAgentChatsOptions, type GetAgentTaskCreateOptions, type GetAgentTaskOpenOptions, type GetAgentTaskOptions, type GetProfileDetailsOptions, type GetProfileDetailsResponse, type GetPublicServerFunctionExecutionOptions, type GetPublicServerFunctionExecutionResponse, type GetRecordOptions, type GetVariableOptions, type GetVariableResponse, type IntegrationResponse, type ListAgentModelsResult, type ListIntegrationsOptions, type ListProfilesOptions, type ListProfilesResponse, type ListRecordsOptions, type ListRecordsResponse, type ListVariablesOptions, type ListVariablesResponse, type LoginOptions, type LoginResponse, type ManageAgentCredentialOptions, type ManageAgentCredentialResult, type MitraConfig, type MitraInstance, type PatchRecordOptions, type ProfileTableRef, type QueuedItem, type ResetPasswordOptions, type RunActionOptions, type RunActionResponse, type SendOptions, type SendPasswordResetCodeOptions, type SetFileStatusOptions, type SetFileStatusResponse, type SetProfileActionsOptions, type SetProfileDmlTablesOptions, type SetProfilePermissionResponse, type SetProfileScreensOptions, type SetProfileSelectTablesOptions, type SetProfileServerFunctionsOptions, type SetProfileUsersOptions, type SetVariableOptions, type SetVariableResponse, type StopServerFunctionExecutionOptions, type StopServerFunctionExecutionResponse, type UpdateProfileOptions, type UpdateProfileResponse, type UpdateRecordOptions, type UploadFileOptions, type UploadFileResponse, type ValidatePasswordResetCodeOptions, callIntegrationMitra, closeChatMitra, configureSdkMitra, createMitraInstance, createProfileMitra, createRecordMitra, createRecordsBatchMitra, deleteProfileMitra, deleteRecordMitra, emailLoginMitra, emailResendCodeMitra, emailSignupMitra, emailVerifyCodeMitra, executeDataLoaderMitra, executeDbActionMitra, executePublicServerFunctionAsyncMitra, executePublicServerFunctionMitra, executeServerFunctionAsyncMitra, executeServerFunctionMitra, getAgentChatsMitra, getAgentTaskMitra, getConfig, getProfileDetailsMitra, getPublicServerFunctionExecutionMitra, getRecordMitra, getVariableMitra, listIntegrationsMitra, listProfilesMitra, listRecordsMitra, listVariablesMitra, loginMitra, loginWithEmailMitra, loginWithGoogleMitra, loginWithMicrosoftMitra, manageAgentCredentialMitra, openChatMitra, patchRecordMitra, refreshTokenSilently, resetPasswordMitra, resolveProjectId, runActionMitra, sendPasswordResetCodeMitra, setFileStatusMitra, setProfileActionsMitra, setProfileDmlTablesMitra, setProfileScreensMitra, setProfileSelectTablesMitra, setProfileServerFunctionsMitra, setProfileUsersMitra, setVariableMitra, stopServerFunctionExecutionMitra, updateProfileMitra, updateRecordMitra, uploadFileLoadableMitra, uploadFilePublicMitra, validatePasswordResetCodeMitra };
+export { type AgentApiKeyTarget, type AgentAuthMeta, type AgentChat, type AgentDeltaEvent, type AgentErrorEvent, type AgentMessage, type AgentModelGroup, type AgentModelOption, type AgentProviderListItem, type AgentQueueChangeEvent, type AgentStatusChangeEvent, type AgentSubscriptionAccount, type AgentSubscriptionTarget, type AgentTaskCreatedEvent, type AgentTaskEventMap, type AgentTaskEventName, type AgentTaskSession, type AgentTaskStatus, type AgentToolEvent, type AgentTurnEndEvent, type AgentType, type AuthAgentCredentialOptions, type AuthAgentCredentialResult, type AuthClaudeResult, type AuthCodexResult, type AuthMethod, type CallIntegrationOptions, type CallIntegrationResponse, type ConnectAgentCredentialOptions, type ConnectAgentSubscriptionResult, type ConnectableSubscriptionTarget, type CreateProfileOptions, type CreateProfileResponse, type CreateRecordOptions, type CreateRecordsBatchOptions, type CredentialAccessType, type CredentialAction, type CredentialTarget, type DeleteProfileOptions, type DeleteProfileResponse, type DeleteRecordOptions, type EmailLoginOptions, type EmailResendCodeOptions, type EmailSignupOptions, type EmailVerifyCodeOptions, type ExecuteDataLoaderOptions, type ExecuteDataLoaderResponse, type ExecuteDbActionOptions, type ExecuteDbActionResponse, type ExecutePublicServerFunctionAsyncResponse, type ExecutePublicServerFunctionOptions, type ExecutePublicServerFunctionResponse, type ExecuteServerFunctionAsyncOptions, type ExecuteServerFunctionAsyncResponse, type ExecuteServerFunctionOptions, type ExecuteServerFunctionResponse, type GetAgentChatsOptions, type GetAgentTaskCreateOptions, type GetAgentTaskOpenOptions, type GetAgentTaskOptions, type GetProfileDetailsOptions, type GetProfileDetailsResponse, type GetPublicServerFunctionExecutionOptions, type GetPublicServerFunctionExecutionResponse, type GetRecordOptions, type GetVariableOptions, type GetVariableResponse, type IntegrationResponse, type ListAgentModelsResult, type ListAgentProvidersResult, type ListIntegrationsOptions, type ListProfilesOptions, type ListProfilesResponse, type ListRecordsOptions, type ListRecordsResponse, type ListVariablesOptions, type ListVariablesResponse, type LoginOptions, type LoginResponse, type ManageAgentCredentialOptions, type ManageAgentCredentialResult, type MitraConfig, type MitraInstance, type PatchRecordOptions, type ProfileTableRef, type QueuedItem, type ResetPasswordOptions, type RunActionOptions, type RunActionResponse, type SendOptions, type SendPasswordResetCodeOptions, type SetFileStatusOptions, type SetFileStatusResponse, type SetProfileActionsOptions, type SetProfileDmlTablesOptions, type SetProfilePermissionResponse, type SetProfileScreensOptions, type SetProfileSelectTablesOptions, type SetProfileServerFunctionsOptions, type SetProfileUsersOptions, type SetVariableOptions, type SetVariableResponse, type StopServerFunctionExecutionOptions, type StopServerFunctionExecutionResponse, type UpdateProfileOptions, type UpdateProfileResponse, type UpdateRecordOptions, type UploadFileOptions, type UploadFileResponse, type ValidatePasswordResetCodeOptions, callIntegrationMitra, closeChatMitra, configureSdkMitra, createMitraInstance, createProfileMitra, createRecordMitra, createRecordsBatchMitra, deleteProfileMitra, deleteRecordMitra, emailLoginMitra, emailResendCodeMitra, emailSignupMitra, emailVerifyCodeMitra, executeDataLoaderMitra, executeDbActionMitra, executePublicServerFunctionAsyncMitra, executePublicServerFunctionMitra, executeServerFunctionAsyncMitra, executeServerFunctionMitra, getAgentChatsMitra, getAgentTaskMitra, getConfig, getProfileDetailsMitra, getPublicServerFunctionExecutionMitra, getRecordMitra, getVariableMitra, listIntegrationsMitra, listProfilesMitra, listRecordsMitra, listVariablesMitra, loginMitra, loginWithEmailMitra, loginWithGoogleMitra, loginWithMicrosoftMitra, manageAgentCredentialMitra, openChatMitra, patchRecordMitra, refreshTokenSilently, resetPasswordMitra, resolveProjectId, runActionMitra, sendPasswordResetCodeMitra, setFileStatusMitra, setProfileActionsMitra, setProfileDmlTablesMitra, setProfileScreensMitra, setProfileSelectTablesMitra, setProfileServerFunctionsMitra, setProfileUsersMitra, setVariableMitra, stopServerFunctionExecutionMitra, updateProfileMitra, updateRecordMitra, uploadFileLoadableMitra, uploadFilePublicMitra, validatePasswordResetCodeMitra };

package/dist/index.d.ts

@@ -657,7 +657,19 @@ type CredentialTarget = AgentSubscriptionTarget | AgentApiKeyTarget;
  * de baixo nível + abre popup + espera autorização):
  *   connect
  */
-type CredentialAction = 'connect' | 'status' | 'remove' | 'list' | 'list_models' | 'validate' | 'save' | 'oauth_start' | 'oauth_exchange' | 'device_start' | 'device_poll' | 'device_cancel';
+type CredentialAction = 'auth' | 'connect' | 'status' | 'remove' | 'list' | 'list_models' | 'list_providers' | 'validate' | 'save' | 'oauth_start' | 'oauth_exchange' | 'device_start' | 'device_poll' | 'device_cancel';
+/** Forma de acesso a uma credencial. */
+type CredentialAccessType = 'subscription' | 'api_key';
+/** Método de conexão — diz ao app/agent qual UI montar. */
+type AuthMethod = 'api_key' | 'paste_code' | 'device';
+/** Metadados pra montar a UI de conexão (vem em cada provider de list_providers). */
+interface AgentAuthMeta {
+    method: AuthMethod;
+    /** Só para method='api_key'. */
+    keyLabel?: string;
+    /** Só para method='api_key'. */
+    keyPlaceholder?: string;
+}
 /** Um modelo selecionável (retornado por action='list_models'). */
 interface AgentModelOption {
     /** Passe direto em send({ modelId }) ou getAgentTaskMitra({ create, modelId }). */
@@ -669,13 +681,34 @@ interface AgentModelOption {
 interface AgentModelGroup {
     id: string;
     name: string;
-    kind: 'subscription' | 'api_key';
+    type: CredentialAccessType;
     models: AgentModelOption[];
 }
 /** Retorno de manageAgentCredentialMitra({ action: 'list_models' }). */
 interface ListAgentModelsResult {
     providers: AgentModelGroup[];
 }
+/** Um provedor suportado + status (retornado por action='list_providers'). */
+interface AgentProviderListItem {
+    id: string;
+    name: string;
+    type: CredentialAccessType;
+    /** Passe direto em auth/connect/save/remove. */
+    target: string;
+    /** Como conectar: method (api_key|paste_code|device) + label/placeholder. */
+    auth: AgentAuthMeta;
+    connected: boolean;
+    /** Presente em subscription Claude conectada. */
+    account?: AgentSubscriptionAccount;
+    expiresAt?: number;
+    /** Presente em API key conectada. */
+    maskedKey?: string;
+    updatedAt?: string | Date;
+}
+/** Retorno de manageAgentCredentialMitra({ action: 'list_providers' }). */
+interface ListAgentProvidersResult {
+    providers: AgentProviderListItem[];
+}
 /**
  * Opções de baixo nível (RPC direto) de `manageAgentCredentialMitra`. Campos
  * extras (key, code, codeVerifier, redirectUri, pollId, accessToken,
@@ -684,8 +717,8 @@ interface ListAgentModelsResult {
  * NÃO use com action='connect' — para isso use ConnectAgentCredentialOptions.
  */
 interface ManageAgentCredentialOptions {
-    action: Exclude<CredentialAction, 'connect'>;
-    /** Obrigatório exceto para action='list'. */
+    action: Exclude<CredentialAction, 'connect' | 'auth'>;
+    /** Obrigatório exceto para action='list' / 'list_models'. */
     target?: CredentialTarget;
     /** Para `save` / `validate` de API key. */
     key?: string;
@@ -717,46 +750,54 @@ interface AgentSubscriptionAccount {
  * Orquestra o fluxo OAuth/device ponta-a-ponta no browser (abre popup, espera
  * autorização, troca por tokens server-side).
  */
+/**
+ * Targets que conectam SEM redirect (paste código / device flow). O
+ * 'openai_oauth' fica de fora porque depende de redirect localhost:1455
+ * (client OAuth compartilhado da OpenAI) — inviável em domínio de cliente.
+ * OpenAI subscription conecta via 'codex' (device flow).
+ */
+type ConnectableSubscriptionTarget = 'claude' | 'codex';
+interface AuthAgentCredentialOptions {
+    action: 'auth';
+    target: ConnectableSubscriptionTarget;
+}
+/** Resultado de auth(claude): abra a authUrl, depois connect com o código. */
+interface AuthClaudeResult {
+    target: 'claude';
+    /** URL pra abrir (a Anthropic mostra o código na própria tela). */
+    authUrl: string;
+    /** Passe de volta no connect junto com o código. */
+    state: string;
+}
+/** Resultado de auth(codex): mostre userCode/verificationUrl, depois connect com pollId. */
+interface AuthCodexResult {
+    target: 'codex';
+    /** Código que o user digita no site da OpenAI. */
+    userCode: string | null;
+    /** URL que o user abre pra autorizar. */
+    verificationUrl: string | null;
+    /** Passe de volta no connect; a SDK faz o polling. */
+    pollId: string;
+}
+type AuthAgentCredentialResult = AuthClaudeResult | AuthCodexResult;
 interface ConnectAgentCredentialOptions {
     action: 'connect';
-    target: AgentSubscriptionTarget;
-    /**
-     * Callback que retorna o código que o usuário copiou da página da Anthropic
-     * após autorizar. **Obrigatório** para target='claude'.
-     */
-    onCodeNeeded?: (info: {
-        authUrl: string;
-        state: string;
-    }) => Promise<string> | string;
-    /**
-     * URL no domínio do app publicado que captura o `?code=` da OAuth e faz
-     * `window.opener.postMessage({ mitraOpenAICode: code }, '*')`.
-     * **Obrigatório** para target='openai_oauth'.
-     */
-    redirectUri?: string;
-    /** Timeout esperando o postMessage (default 5min). */
-    messageTimeoutMs?: number;
-    /**
-     * Callback opcional que recebe o `userCode` e `verificationUrl` assim que
-     * o device flow inicia (use pra exibir na UI além do popup automático).
-     */
-    onDeviceCode?: (info: {
-        userCode: string | null;
-        verificationUrl: string | null;
-    }) => void;
+    target: ConnectableSubscriptionTarget;
+    /** Código que o user copiou da página da Anthropic. Obrigatório p/ claude. */
+    code?: string;
+    /** O `state` devolvido por auth(claude). Obrigatório p/ claude. */
+    state?: string;
+    /** O `pollId` devolvido por auth(codex). Obrigatório p/ codex. */
+    pollId?: string;
     /** Intervalo de poll do device flow (default 2000ms). */
     pollIntervalMs?: number;
     /** Timeout total do device flow (default 15min). */
     deviceTimeoutMs?: number;
-    /** Nome da window do popup (default depende do target). */
-    windowName?: string;
-    /** `features` string passada para `window.open`. */
-    windowFeatures?: string;
 }
 interface ConnectAgentSubscriptionResult {
-    target: AgentSubscriptionTarget;
+    target: ConnectableSubscriptionTarget;
     success: boolean;
-    /** Presente em claude / openai_oauth (epoch ms). */
+    /** Presente em claude (epoch ms). */
     expiresAt?: number;
     /** Presente apenas em claude. */
     account?: AgentSubscriptionAccount | null;
@@ -973,48 +1014,48 @@ declare function getAgentTaskMitra(options: GetAgentTaskOptions): AgentTaskSessi
  * Função ÚNICA `manageAgentCredentialMitra` sobre /sdk-ws para todas as
  * operações de credencial do agente:
  *   - API keys (8 providers: anthropic, openai, gemini, kimi, minimax, glm, qwen, openrouter)
- *   - Subscriptions OAuth (Claude / OpenAI / Codex device flow)
+ *   - Subscriptions OAuth (Claude paste-código / OpenAI device flow via Codex)
  *
  * Actions de baixo nível (RPC direto contra o backend):
- *   status | remove | list | validate | save
+ *   status | remove | list | list_models | validate | save
  *   oauth_start | oauth_exchange | device_start | device_poll | device_cancel
  *
- * Action de alto nível (orquestra o fluxo ponta-a-ponta no browser):
- *   connect — abre popup, espera código/postMessage/poll, troca por tokens.
+ * Actions de alto nível (orquestradas na SDK — o app controla UI/popup/timing):
+ *   auth     — inicia o fluxo e retorna o que a UI mostra (sem efeito colateral
+ *              de janela). claude → { authUrl, state }; codex → { userCode,
+ *              verificationUrl, pollId }.
+ *   connect  — finaliza/salva. claude → passa { code, state }; codex → passa
+ *              { pollId } e a SDK faz o polling até autorizar.
+ *
+ * Fluxo típico (sem callbacks, sem redirect, sem callback page):
+ *   const { authUrl, state } = await manageAgentCredentialMitra({ action:'auth', target:'claude' });
+ *   // app abre authUrl + coleta o código do user
+ *   await manageAgentCredentialMitra({ action:'connect', target:'claude', code, state });
+ *
+ *   const { userCode, verificationUrl, pollId } = await manageAgentCredentialMitra({ action:'auth', target:'codex' });
+ *   // app mostra "abra {verificationUrl}, digite {userCode}"
+ *   await manageAgentCredentialMitra({ action:'connect', target:'codex', pollId });
  *
  * SEGURANÇA: o token de subscription NUNCA volta cru pro cliente. É salvo
- * server-side (Firestore) e injetado no sandbox E2B direto de lá. O retorno
- * de `connect`/`oauth_exchange` traz só { connected, expiresAt, account }.
+ * server-side (Firestore) e injetado no sandbox E2B direto de lá.
  */
 
 /**
- * Conecta uma subscription ponta-a-ponta (abre popup, espera autorização,
- * troca por tokens). Retorno tipado: { target, success, expiresAt?, account? }.
- *
- * @example
- * // Claude — caller mostra modal pedindo o paste do código
- * await manageAgentCredentialMitra({
- *   action: 'connect', target: 'claude',
- *   onCodeNeeded: async () => prompt('Cole o código:') ?? ''
- * });
- *
- * @example
- * // OpenAI — callback page no domínio do app faz postMessage
- * await manageAgentCredentialMitra({
- *   action: 'connect', target: 'openai_oauth',
- *   redirectUri: window.location.origin + '/auth/openai-callback'
- * });
- *
- * @example
- * // Codex — device flow automático (abre verificação, polling)
- * await manageAgentCredentialMitra({ action: 'connect', target: 'codex' });
+ * Inicia um fluxo de subscription. Não abre janelas — retorna os dados pra UI:
+ *   claude → { authUrl, state }   codex → { userCode, verificationUrl, pollId }
+ */
+declare function manageAgentCredentialMitra(options: AuthAgentCredentialOptions): Promise<AuthAgentCredentialResult>;
+/**
+ * Finaliza/salva uma subscription:
+ *   claude → { code, state }   codex → { pollId } (a SDK faz o polling)
  */
 declare function manageAgentCredentialMitra(options: ConnectAgentCredentialOptions): Promise<ConnectAgentSubscriptionResult>;
 /**
- * RPC direto contra o backend. Retorno depende de (action, target) — veja docs.
+ * RPC direto contra o backend. Retorno depende de (action, target).
  *
  * @example
  * await manageAgentCredentialMitra({ action: 'list' });
+ * await manageAgentCredentialMitra({ action: 'list_models' });
  * await manageAgentCredentialMitra({ action: 'status', target: 'anthropic' });
  * await manageAgentCredentialMitra({ action: 'validate', target: 'openai', key: 'sk-...' });
  * await manageAgentCredentialMitra({ action: 'save', target: 'glm', key: '...' });
@@ -1177,4 +1218,4 @@ declare function setProfileScreensMitra(options: SetProfileScreensOptions): Prom
  */
 declare function setProfileServerFunctionsMitra(options: SetProfileServerFunctionsOptions): Promise<SetProfilePermissionResponse>;
 
-export { type AgentApiKeyTarget, type AgentChat, type AgentDeltaEvent, type AgentErrorEvent, type AgentMessage, type AgentModelGroup, type AgentModelOption, type AgentQueueChangeEvent, type AgentStatusChangeEvent, type AgentSubscriptionAccount, type AgentSubscriptionTarget, type AgentTaskCreatedEvent, type AgentTaskEventMap, type AgentTaskEventName, type AgentTaskSession, type AgentTaskStatus, type AgentToolEvent, type AgentTurnEndEvent, type AgentType, type CallIntegrationOptions, type CallIntegrationResponse, type ConnectAgentCredentialOptions, type ConnectAgentSubscriptionResult, type CreateProfileOptions, type CreateProfileResponse, type CreateRecordOptions, type CreateRecordsBatchOptions, type CredentialAction, type CredentialTarget, type DeleteProfileOptions, type DeleteProfileResponse, type DeleteRecordOptions, type EmailLoginOptions, type EmailResendCodeOptions, type EmailSignupOptions, type EmailVerifyCodeOptions, type ExecuteDataLoaderOptions, type ExecuteDataLoaderResponse, type ExecuteDbActionOptions, type ExecuteDbActionResponse, type ExecutePublicServerFunctionAsyncResponse, type ExecutePublicServerFunctionOptions, type ExecutePublicServerFunctionResponse, type ExecuteServerFunctionAsyncOptions, type ExecuteServerFunctionAsyncResponse, type ExecuteServerFunctionOptions, type ExecuteServerFunctionResponse, type GetAgentChatsOptions, type GetAgentTaskCreateOptions, type GetAgentTaskOpenOptions, type GetAgentTaskOptions, type GetProfileDetailsOptions, type GetProfileDetailsResponse, type GetPublicServerFunctionExecutionOptions, type GetPublicServerFunctionExecutionResponse, type GetRecordOptions, type GetVariableOptions, type GetVariableResponse, type IntegrationResponse, type ListAgentModelsResult, type ListIntegrationsOptions, type ListProfilesOptions, type ListProfilesResponse, type ListRecordsOptions, type ListRecordsResponse, type ListVariablesOptions, type ListVariablesResponse, type LoginOptions, type LoginResponse, type ManageAgentCredentialOptions, type ManageAgentCredentialResult, type MitraConfig, type MitraInstance, type PatchRecordOptions, type ProfileTableRef, type QueuedItem, type ResetPasswordOptions, type RunActionOptions, type RunActionResponse, type SendOptions, type SendPasswordResetCodeOptions, type SetFileStatusOptions, type SetFileStatusResponse, type SetProfileActionsOptions, type SetProfileDmlTablesOptions, type SetProfilePermissionResponse, type SetProfileScreensOptions, type SetProfileSelectTablesOptions, type SetProfileServerFunctionsOptions, type SetProfileUsersOptions, type SetVariableOptions, type SetVariableResponse, type StopServerFunctionExecutionOptions, type StopServerFunctionExecutionResponse, type UpdateProfileOptions, type UpdateProfileResponse, type UpdateRecordOptions, type UploadFileOptions, type UploadFileResponse, type ValidatePasswordResetCodeOptions, callIntegrationMitra, closeChatMitra, configureSdkMitra, createMitraInstance, createProfileMitra, createRecordMitra, createRecordsBatchMitra, deleteProfileMitra, deleteRecordMitra, emailLoginMitra, emailResendCodeMitra, emailSignupMitra, emailVerifyCodeMitra, executeDataLoaderMitra, executeDbActionMitra, executePublicServerFunctionAsyncMitra, executePublicServerFunctionMitra, executeServerFunctionAsyncMitra, executeServerFunctionMitra, getAgentChatsMitra, getAgentTaskMitra, getConfig, getProfileDetailsMitra, getPublicServerFunctionExecutionMitra, getRecordMitra, getVariableMitra, listIntegrationsMitra, listProfilesMitra, listRecordsMitra, listVariablesMitra, loginMitra, loginWithEmailMitra, loginWithGoogleMitra, loginWithMicrosoftMitra, manageAgentCredentialMitra, openChatMitra, patchRecordMitra, refreshTokenSilently, resetPasswordMitra, resolveProjectId, runActionMitra, sendPasswordResetCodeMitra, setFileStatusMitra, setProfileActionsMitra, setProfileDmlTablesMitra, setProfileScreensMitra, setProfileSelectTablesMitra, setProfileServerFunctionsMitra, setProfileUsersMitra, setVariableMitra, stopServerFunctionExecutionMitra, updateProfileMitra, updateRecordMitra, uploadFileLoadableMitra, uploadFilePublicMitra, validatePasswordResetCodeMitra };
+export { type AgentApiKeyTarget, type AgentAuthMeta, type AgentChat, type AgentDeltaEvent, type AgentErrorEvent, type AgentMessage, type AgentModelGroup, type AgentModelOption, type AgentProviderListItem, type AgentQueueChangeEvent, type AgentStatusChangeEvent, type AgentSubscriptionAccount, type AgentSubscriptionTarget, type AgentTaskCreatedEvent, type AgentTaskEventMap, type AgentTaskEventName, type AgentTaskSession, type AgentTaskStatus, type AgentToolEvent, type AgentTurnEndEvent, type AgentType, type AuthAgentCredentialOptions, type AuthAgentCredentialResult, type AuthClaudeResult, type AuthCodexResult, type AuthMethod, type CallIntegrationOptions, type CallIntegrationResponse, type ConnectAgentCredentialOptions, type ConnectAgentSubscriptionResult, type ConnectableSubscriptionTarget, type CreateProfileOptions, type CreateProfileResponse, type CreateRecordOptions, type CreateRecordsBatchOptions, type CredentialAccessType, type CredentialAction, type CredentialTarget, type DeleteProfileOptions, type DeleteProfileResponse, type DeleteRecordOptions, type EmailLoginOptions, type EmailResendCodeOptions, type EmailSignupOptions, type EmailVerifyCodeOptions, type ExecuteDataLoaderOptions, type ExecuteDataLoaderResponse, type ExecuteDbActionOptions, type ExecuteDbActionResponse, type ExecutePublicServerFunctionAsyncResponse, type ExecutePublicServerFunctionOptions, type ExecutePublicServerFunctionResponse, type ExecuteServerFunctionAsyncOptions, type ExecuteServerFunctionAsyncResponse, type ExecuteServerFunctionOptions, type ExecuteServerFunctionResponse, type GetAgentChatsOptions, type GetAgentTaskCreateOptions, type GetAgentTaskOpenOptions, type GetAgentTaskOptions, type GetProfileDetailsOptions, type GetProfileDetailsResponse, type GetPublicServerFunctionExecutionOptions, type GetPublicServerFunctionExecutionResponse, type GetRecordOptions, type GetVariableOptions, type GetVariableResponse, type IntegrationResponse, type ListAgentModelsResult, type ListAgentProvidersResult, type ListIntegrationsOptions, type ListProfilesOptions, type ListProfilesResponse, type ListRecordsOptions, type ListRecordsResponse, type ListVariablesOptions, type ListVariablesResponse, type LoginOptions, type LoginResponse, type ManageAgentCredentialOptions, type ManageAgentCredentialResult, type MitraConfig, type MitraInstance, type PatchRecordOptions, type ProfileTableRef, type QueuedItem, type ResetPasswordOptions, type RunActionOptions, type RunActionResponse, type SendOptions, type SendPasswordResetCodeOptions, type SetFileStatusOptions, type SetFileStatusResponse, type SetProfileActionsOptions, type SetProfileDmlTablesOptions, type SetProfilePermissionResponse, type SetProfileScreensOptions, type SetProfileSelectTablesOptions, type SetProfileServerFunctionsOptions, type SetProfileUsersOptions, type SetVariableOptions, type SetVariableResponse, type StopServerFunctionExecutionOptions, type StopServerFunctionExecutionResponse, type UpdateProfileOptions, type UpdateProfileResponse, type UpdateRecordOptions, type UploadFileOptions, type UploadFileResponse, type ValidatePasswordResetCodeOptions, callIntegrationMitra, closeChatMitra, configureSdkMitra, createMitraInstance, createProfileMitra, createRecordMitra, createRecordsBatchMitra, deleteProfileMitra, deleteRecordMitra, emailLoginMitra, emailResendCodeMitra, emailSignupMitra, emailVerifyCodeMitra, executeDataLoaderMitra, executeDbActionMitra, executePublicServerFunctionAsyncMitra, executePublicServerFunctionMitra, executeServerFunctionAsyncMitra, executeServerFunctionMitra, getAgentChatsMitra, getAgentTaskMitra, getConfig, getProfileDetailsMitra, getPublicServerFunctionExecutionMitra, getRecordMitra, getVariableMitra, listIntegrationsMitra, listProfilesMitra, listRecordsMitra, listVariablesMitra, loginMitra, loginWithEmailMitra, loginWithGoogleMitra, loginWithMicrosoftMitra, manageAgentCredentialMitra, openChatMitra, patchRecordMitra, refreshTokenSilently, resetPasswordMitra, resolveProjectId, runActionMitra, sendPasswordResetCodeMitra, setFileStatusMitra, setProfileActionsMitra, setProfileDmlTablesMitra, setProfileScreensMitra, setProfileSelectTablesMitra, setProfileServerFunctionsMitra, setProfileUsersMitra, setVariableMitra, stopServerFunctionExecutionMitra, updateProfileMitra, updateRecordMitra, uploadFileLoadableMitra, uploadFilePublicMitra, validatePasswordResetCodeMitra };