mitra-interactions-sdk 1.0.60-beta.26 → 1.0.60-beta.27

package/README.md

@@ -275,11 +275,9 @@ Retorna uma `AgentTaskSession` que encapsula o ciclo de vida do chat. A task é
 ```typescript
 import { getAgentTaskMitra } from 'mitra-interactions-sdk';
 
-// Chat novo — taskId é preenchido no primeiro send() (evento taskCreated)
-const session = getAgentTaskMitra({ create: true, agentType: 'ANTHROPIC_CLAUDE_OPUS', name: 'Meu chat' });
-
-// Chat com um agente business (system prompt + SFs do agente; token escopado)
-const sales = getAgentTaskMitra({ create: true, agentId: 'uuid-do-agente' });
+// Chat novo — SEMPRE com agentId (sessão sem agente não executa nada).
+// taskId é preenchido no primeiro send() (evento taskCreated)
+const session = getAgentTaskMitra({ create: true, agentId: 'uuid-do-agente', agentType: 'ANTHROPIC_CLAUDE_OPUS', name: 'Meu chat' });
 
 // Chat existente
 const existing = getAgentTaskMitra({ taskId: 'uuid-da-task' });
@@ -289,7 +287,7 @@ await existing.loadHistory({ limit: 50 });
 `getAgentTaskMitra({ create: true, agentType?, name?, agentId?, transport? })` ou `getAgentTaskMitra({ taskId, transport? })`.
 
 - `agentType` vem de `manageAgentCredentialMitra({ action: 'list_models' })` — ex.: `'ANTHROPIC_CLAUDE_OPUS'`, `'OPENAI_GPT5'`, `'GOOGLE_GEMINI_PRO'`. Default: `'ANTHROPIC_CLAUDE_OPUS'`.
-- **`agentId`**: id de um agente business (CRUD via `mitra-sdk`: `listAgentsMitra` e família). A sessão sobe com o system prompt do agente e um token escopado — as tools enxergam só as Server Functions dele. Sem `agentId`, é o chat de desenvolvimento.
+- **`agentId`**: id de um agente business (CRUD via `mitra-sdk`: `listAgentsMitra` e família). A sessão sobe com o system prompt do agente e um token escopado — as tools enxergam só as Server Functions dele. **Sem `agentId`: sessão business sem agente** — sem system prompt e sem acesso às Server Functions (as tools recusam); não há adoção automática de agente único. Na prática, sempre passe `agentId`.
 
 #### Propriedades (somente leitura)
 
@@ -318,7 +316,7 @@ await existing.loadHistory({ limit: 50 });
 `statusChange` · `historyLoaded` · `taskCreated` · `turnStart` · `delta` (`{ delta, kind: 'text' | 'thinking' }`) · `tool` (`{ tool, toolId?, input?, content?, phase: 'call' | 'result' }`) · `turnEnd` (`{ content }`) · `cancelled` · `queueChange` · `error` (`{ code?, error }`) · `raw` (eventos não mapeados do stream, ex.: `workspace`).
 
 ```typescript
-const session = getAgentTaskMitra({ create: true });
+const session = getAgentTaskMitra({ create: true, agentId: 'uuid-do-agente' });
 
 session.on('delta', ({ delta, kind }) => { if (kind === 'text') process.stdout.write(delta); });
 session.on('tool',  ({ tool, phase }) => console.log('🔧', phase, tool));

package/dist/index.d.mts

@@ -205,7 +205,7 @@ interface AgentChat {
     id: string;
     name: string | null;
     agentType: AgentType;
-    /** Agente business dono do chat (null = chat de desenvolvimento). */
+    /** Agente business dono do chat (null = sessão business sem agente — não executa nada). */
     agentId: string | null;
     archived: boolean;
     createdAt: string;
@@ -276,8 +276,10 @@ interface GetAgentTaskCreateOptions {
     /**
      * ID de um agente business (CRUD via mitra-sdk: listAgentsMitra e família).
      * Com agentId, a sessão sobe com o system prompt do agente e um token escopado —
-     * as tools enxergam só as Server Functions daquele agente. Sem agentId, é o
-     * chat de desenvolvimento de sempre.
+     * as tools enxergam só as Server Functions daquele agente.
+     * Sem agentId: sessão business SEM agente — sem system prompt e sem acesso às
+     * Server Functions (as tools recusam). Não há adoção automática de agente
+     * único; na prática, sempre passe agentId.
      */
     agentId?: string;
     /** Transporte do prompt (default 'ws'). */
@@ -523,29 +525,33 @@ declare function getConfig(): MitraConfig;
 declare function resolveProjectId(projectId?: number | string): number | string;
 
 /**
- * Mitra Interactions SDK - Autenticação (Router)
+ * Mitra Interactions SDK - Autenticação (Novo Mitra)
  *
- * Roteia chamadas de auth para a implementação correta com base no `authUrl`:
- * - URLs legadas (`coder.mitralab.io/sdk-auth/`, `agent.mitralab.io/sdk-auth/`) → auth-legacy.ts
- * - Qualquer outro authUrl → auth-new.ts (novo Mitra: Kong gateway + IAM service)
- *
- * A API pública é idêntica à legacy. Consumers não precisam alterar código.
+ * Implementação do auth para o novo Mitra (Kong gateway).
+ * - Email login/signup/refresh: via BFF (mitra-legacy-bff), POST {gateway}/auth/*.
+ *   O BFF resolve projectId->appId, chama o mitra-iam e já devolve o envelope
+ *   { token, baseURL, integrationURL } que a SDK consome.
+ * - SSO (Google): página atravessadora (sdk-auth.html) faz o start do OAuth e
+ *   devolve o `code` cru (popup via postMessage, redirect via #codeMitra). A SDK
+ *   troca o code por token no BFF (POST {gateway}/auth/{provider}), mesmo host do
+ *   /email/login. Provider-agnóstico: Microsoft entra só mudando a allowlist
+ *   quando o back liberar o endpoint. Suporta popup (desktop) e redirect (mobile).
  */
 
-declare function loginMitra(method: 'email' | 'google' | 'microsoft' | 'mitra', options?: LoginOptions): Promise<LoginResponse>;
-declare function loginWithGoogleMitra(options?: LoginOptions): Promise<LoginResponse>;
-declare function loginWithMicrosoftMitra(options?: LoginOptions): Promise<LoginResponse>;
-declare function refreshTokenSilently(authUrl: string, projectId: number | string): Promise<LoginResponse>;
 /**
- * Gera o JWT a partir do code do SSO (novo Mitra). O app lê codeMitra/stateMitra
- * do fragment (lógica de template) e chama aqui pra validar o nonce e trocar o
- * code por token no BFF. Exclusivo do novo mundo — no legacy o token já vem
- * pronto no fragment (tokenMitra).
+ * Gera o JWT a partir do `code` do SSO (retorno do redirect). Valida o `state`
+ * contra o nonce gerado no start (anti-CSRF), troca o code no BFF
+ * (POST {gateway}/auth/{provider}) e configura o SDK. Ler/limpar o fragment da
+ * URL é responsabilidade do app — aqui só se gera o token.
  */
 declare function exchangeSsoCodeMitra(options: {
     code: string;
     state: string;
 }): Promise<LoginResponse>;
+declare function loginWithGoogleMitra(options?: LoginOptions): Promise<LoginResponse>;
+declare function loginWithMicrosoftMitra(options?: LoginOptions): Promise<LoginResponse>;
+declare function loginMitra(method: 'email' | 'google' | 'microsoft' | 'mitra', options?: LoginOptions): Promise<LoginResponse>;
+declare function refreshTokenSilently(authUrl: string, _projectId: number | string): Promise<LoginResponse>;
 
 /**
  * Mitra Interactions SDK — Agent Chat (via BFF)

package/dist/index.d.ts

@@ -205,7 +205,7 @@ interface AgentChat {
     id: string;
     name: string | null;
     agentType: AgentType;
-    /** Agente business dono do chat (null = chat de desenvolvimento). */
+    /** Agente business dono do chat (null = sessão business sem agente — não executa nada). */
     agentId: string | null;
     archived: boolean;
     createdAt: string;
@@ -276,8 +276,10 @@ interface GetAgentTaskCreateOptions {
     /**
      * ID de um agente business (CRUD via mitra-sdk: listAgentsMitra e família).
      * Com agentId, a sessão sobe com o system prompt do agente e um token escopado —
-     * as tools enxergam só as Server Functions daquele agente. Sem agentId, é o
-     * chat de desenvolvimento de sempre.
+     * as tools enxergam só as Server Functions daquele agente.
+     * Sem agentId: sessão business SEM agente — sem system prompt e sem acesso às
+     * Server Functions (as tools recusam). Não há adoção automática de agente
+     * único; na prática, sempre passe agentId.
      */
     agentId?: string;
     /** Transporte do prompt (default 'ws'). */
@@ -523,29 +525,33 @@ declare function getConfig(): MitraConfig;
 declare function resolveProjectId(projectId?: number | string): number | string;
 
 /**
- * Mitra Interactions SDK - Autenticação (Router)
+ * Mitra Interactions SDK - Autenticação (Novo Mitra)
  *
- * Roteia chamadas de auth para a implementação correta com base no `authUrl`:
- * - URLs legadas (`coder.mitralab.io/sdk-auth/`, `agent.mitralab.io/sdk-auth/`) → auth-legacy.ts
- * - Qualquer outro authUrl → auth-new.ts (novo Mitra: Kong gateway + IAM service)
- *
- * A API pública é idêntica à legacy. Consumers não precisam alterar código.
+ * Implementação do auth para o novo Mitra (Kong gateway).
+ * - Email login/signup/refresh: via BFF (mitra-legacy-bff), POST {gateway}/auth/*.
+ *   O BFF resolve projectId->appId, chama o mitra-iam e já devolve o envelope
+ *   { token, baseURL, integrationURL } que a SDK consome.
+ * - SSO (Google): página atravessadora (sdk-auth.html) faz o start do OAuth e
+ *   devolve o `code` cru (popup via postMessage, redirect via #codeMitra). A SDK
+ *   troca o code por token no BFF (POST {gateway}/auth/{provider}), mesmo host do
+ *   /email/login. Provider-agnóstico: Microsoft entra só mudando a allowlist
+ *   quando o back liberar o endpoint. Suporta popup (desktop) e redirect (mobile).
  */
 
-declare function loginMitra(method: 'email' | 'google' | 'microsoft' | 'mitra', options?: LoginOptions): Promise<LoginResponse>;
-declare function loginWithGoogleMitra(options?: LoginOptions): Promise<LoginResponse>;
-declare function loginWithMicrosoftMitra(options?: LoginOptions): Promise<LoginResponse>;
-declare function refreshTokenSilently(authUrl: string, projectId: number | string): Promise<LoginResponse>;
 /**
- * Gera o JWT a partir do code do SSO (novo Mitra). O app lê codeMitra/stateMitra
- * do fragment (lógica de template) e chama aqui pra validar o nonce e trocar o
- * code por token no BFF. Exclusivo do novo mundo — no legacy o token já vem
- * pronto no fragment (tokenMitra).
+ * Gera o JWT a partir do `code` do SSO (retorno do redirect). Valida o `state`
+ * contra o nonce gerado no start (anti-CSRF), troca o code no BFF
+ * (POST {gateway}/auth/{provider}) e configura o SDK. Ler/limpar o fragment da
+ * URL é responsabilidade do app — aqui só se gera o token.
  */
 declare function exchangeSsoCodeMitra(options: {
     code: string;
     state: string;
 }): Promise<LoginResponse>;
+declare function loginWithGoogleMitra(options?: LoginOptions): Promise<LoginResponse>;
+declare function loginWithMicrosoftMitra(options?: LoginOptions): Promise<LoginResponse>;
+declare function loginMitra(method: 'email' | 'google' | 'microsoft' | 'mitra', options?: LoginOptions): Promise<LoginResponse>;
+declare function refreshTokenSilently(authUrl: string, _projectId: number | string): Promise<LoginResponse>;
 
 /**
  * Mitra Interactions SDK — Agent Chat (via BFF)

package/dist/index.js

@@ -1,166 +1,5 @@
 'use strict';
 
-// src/auth-legacy.ts
-var AUTH_MESSAGE_TYPE = "mitra-auth-result";
-var POPUP_WIDTH = 420;
-var POPUP_HEIGHT = 520;
-function getOriginFromUrl(url) {
-  try {
-    const parsed = new URL(url);
-    return parsed.origin;
-  } catch (e) {
-    return "";
-  }
-}
-function openAuthPopup(url, expectedOrigin) {
-  return new Promise((resolve, reject) => {
-    const left = (typeof window.screenX === "number" ? window.screenX : 0) + (window.outerWidth - POPUP_WIDTH) / 2;
-    const top = (typeof window.screenY === "number" ? window.screenY : 0) + (window.outerHeight - POPUP_HEIGHT) / 2;
-    const popup = window.open(
-      url,
-      "mitra-auth",
-      `width=${POPUP_WIDTH},height=${POPUP_HEIGHT},left=${left},top=${top},menubar=no,toolbar=no,status=no`
-    );
-    if (!popup) {
-      reject(new Error("Popup bloqueado pelo navegador. Permita popups para este site."));
-      return;
-    }
-    function onMessage(event) {
-      if (event.origin !== expectedOrigin) return;
-      if (!event.data || event.data.type !== AUTH_MESSAGE_TYPE) return;
-      cleanup();
-      if (event.data.success) {
-        resolve(event.data.data);
-      } else {
-        reject(new Error(event.data.error || "Erro na autentica\xE7\xE3o"));
-      }
-    }
-    const pollTimer = setInterval(() => {
-      if (popup.closed) {
-        cleanup();
-        reject(new Error("Login cancelado pelo usu\xE1rio"));
-      }
-    }, 500);
-    function cleanup() {
-      window.removeEventListener("message", onMessage);
-      clearInterval(pollTimer);
-    }
-    window.addEventListener("message", onMessage);
-  });
-}
-function autoConfigureFromLogin(response, authUrl, projectId) {
-  if (!response.baseURL) return;
-  configureSdkMitra({
-    baseURL: response.baseURL,
-    token: response.token,
-    authUrl,
-    projectId,
-    ...response.integrationURL ? { integrationURL: response.integrationURL } : {}
-  });
-}
-function buildAuthUrl(authUrl, method, projectId, opts) {
-  const base = authUrl.endsWith("/") ? authUrl : authUrl + "/";
-  const separator = base.includes("?") ? "&" : "?";
-  let url = `${base}${separator}method=${method}&projectId=${encodeURIComponent(projectId)}`;
-  if (opts == null ? void 0 : opts.returnTo) url += `&returnTo=${encodeURIComponent(opts.returnTo)}`;
-  if (opts == null ? void 0 : opts.create) url += `&create=true`;
-  if (opts == null ? void 0 : opts.title) url += `&title=${encodeURIComponent(opts.title)}`;
-  if (typeof window !== "undefined") {
-    url += `&originUrl=${encodeURIComponent(window.location.href)}`;
-  }
-  return url;
-}
-function resolveLoginOptions(options) {
-  var _a;
-  const config = isConfigured() ? getConfig() : null;
-  const authUrl = (options == null ? void 0 : options.authUrl) || (config == null ? void 0 : config.authUrl);
-  const projectId = (_a = options == null ? void 0 : options.projectId) != null ? _a : config == null ? void 0 : config.projectId;
-  if (!authUrl) {
-    throw new Error("authUrl \xE9 obrigat\xF3rio. Passe em LoginOptions ou configure via configureSdkMitra({ authUrl }).");
-  }
-  if (projectId == null) {
-    throw new Error("projectId \xE9 obrigat\xF3rio. Passe em LoginOptions ou configure via configureSdkMitra({ projectId }).");
-  }
-  return { authUrl, projectId };
-}
-function resolveReturnTo(returnTo) {
-  if (typeof window === "undefined") return returnTo || "";
-  if (!returnTo) return window.location.href;
-  if (/^https?:\/\//.test(returnTo)) return returnTo;
-  return new URL(returnTo, window.location.origin).href;
-}
-async function doLogin(method, options) {
-  const { authUrl, projectId } = resolveLoginOptions(options);
-  const mode = (options == null ? void 0 : options.mode) || "popup";
-  const origin = getOriginFromUrl(authUrl);
-  const url = buildAuthUrl(authUrl, method, projectId, {
-    returnTo: mode === "redirect" ? resolveReturnTo(options == null ? void 0 : options.returnTo) : void 0,
-    create: options == null ? void 0 : options.create,
-    title: options == null ? void 0 : options.title
-  });
-  if (mode === "redirect") {
-    window.location.href = url;
-    return new Promise(() => {
-    });
-  }
-  const response = await openAuthPopup(url, origin);
-  autoConfigureFromLogin(response, authUrl, projectId);
-  return response;
-}
-async function loginWithGoogleMitra(options) {
-  return doLogin("google", options);
-}
-async function loginWithMicrosoftMitra(options) {
-  return doLogin("microsoft", options);
-}
-async function loginMitra(method, options) {
-  return doLogin(method, options);
-}
-var REFRESH_TIMEOUT_MS = 15e3;
-var _refreshPromise = null;
-function openAuthIframe(url, expectedOrigin) {
-  return new Promise((resolve, reject) => {
-    const iframe = document.createElement("iframe");
-    iframe.style.display = "none";
-    iframe.src = url;
-    const timer = setTimeout(() => {
-      cleanup();
-      reject(new Error("Token refresh timeout"));
-    }, REFRESH_TIMEOUT_MS);
-    function onMessage(event) {
-      if (event.origin !== expectedOrigin) return;
-      if (!event.data || event.data.type !== AUTH_MESSAGE_TYPE) return;
-      cleanup();
-      if (event.data.success) {
-        resolve(event.data.data);
-      } else {
-        reject(new Error(event.data.error || "Erro no refresh do token"));
-      }
-    }
-    function cleanup() {
-      window.removeEventListener("message", onMessage);
-      clearTimeout(timer);
-      if (iframe.parentNode) iframe.parentNode.removeChild(iframe);
-    }
-    window.addEventListener("message", onMessage);
-    document.body.appendChild(iframe);
-  });
-}
-async function refreshTokenSilently(authUrl, projectId) {
-  if (_refreshPromise) return _refreshPromise;
-  _refreshPromise = (async () => {
-    try {
-      const origin = getOriginFromUrl(authUrl);
-      const url = buildAuthUrl(authUrl, "refresh", projectId);
-      const response = await openAuthIframe(url, origin);
-      return response;
-    } finally {
-      _refreshPromise = null;
-    }
-  })();
-  return _refreshPromise;
-}
-
 // src/auth-new.ts
 function getFetch() {
   if (typeof globalThis.fetch === "function") return globalThis.fetch;
@@ -170,7 +9,7 @@ function buildBffAuthEndpoint(gateway, path) {
   const base = gateway.replace(/\/+$/, "");
   return `${base}/auth${path}`;
 }
-function resolveLoginOptions2(options) {
+function resolveLoginOptions(options) {
   var _a;
   const config = isConfigured() ? getConfig() : null;
   const authUrl = (options == null ? void 0 : options.authUrl) || (config == null ? void 0 : config.authUrl) || (config == null ? void 0 : config.baseURL);
@@ -183,7 +22,7 @@ function resolveLoginOptions2(options) {
   }
   return { authUrl, projectId };
 }
-function autoConfigureFromLogin2(response, authUrl, projectId) {
+function autoConfigureFromLogin(response, authUrl, projectId) {
   if (!response.baseURL) return;
   configureSdkMitra({
     baseURL: response.baseURL,
@@ -257,7 +96,7 @@ async function exchangeSsoCode(authUrl, provider, code, redirectUri, projectId)
     baseURL: authUrl,
     ...data.refreshToken ? { refreshToken: data.refreshToken } : {}
   };
-  autoConfigureFromLogin2(response, authUrl, projectId);
+  autoConfigureFromLogin(response, authUrl, projectId);
   return response;
 }
 var SSO_REDIRECT_STORE_KEY = "mitra_sso_redirect";
@@ -297,7 +136,7 @@ function buildStartUrl(authPageUrl, provider, state, appId, apiUrl, returnTo) {
   if (returnTo) query.returnTo = returnTo;
   return authPageUrl + sep + new URLSearchParams(query).toString();
 }
-function getOriginFromUrl2(url) {
+function getOriginFromUrl(url) {
   try {
     return new URL(url).origin;
   } catch (e) {
@@ -379,11 +218,11 @@ async function loginWithProvider(provider, options) {
   if (_oauthInFlight) return _oauthInFlight;
   _oauthInFlight = (async () => {
     try {
-      const { authUrl, projectId } = resolveLoginOptions2(options);
+      const { authUrl, projectId } = resolveLoginOptions(options);
       const state = generateState();
       const appId = String(projectId);
       const authPageUrl = await fetchSsoAuthPageUrl(authUrl);
-      const pageOrigin = getOriginFromUrl2(authPageUrl);
+      const pageOrigin = getOriginFromUrl(authPageUrl);
       const redirectUri = stripToOriginPath(authPageUrl);
       const startUrl = buildStartUrl(authPageUrl, provider, state, appId, authUrl);
       const { code, token } = await openOAuthPopup(startUrl, pageOrigin, state);
@@ -391,7 +230,7 @@ async function loginWithProvider(provider, options) {
         return await exchangeSsoCode(authUrl, provider, code, redirectUri, projectId);
       }
       const response = normalizeResponse(token, authUrl);
-      autoConfigureFromLogin2(response, authUrl, projectId);
+      autoConfigureFromLogin(response, authUrl, projectId);
       return response;
     } finally {
       _oauthInFlight = null;
@@ -400,7 +239,7 @@ async function loginWithProvider(provider, options) {
   return _oauthInFlight;
 }
 async function startSsoRedirect(provider, options) {
-  const { authUrl, projectId } = resolveLoginOptions2(options);
+  const { authUrl, projectId } = resolveLoginOptions(options);
   const state = generateState();
   const appId = String(projectId);
   const authPageUrl = await fetchSsoAuthPageUrl();
@@ -419,21 +258,21 @@ async function exchangeSsoCodeMitra(options) {
   }
   return exchangeSsoCode(ctx.authUrl, ctx.provider, options.code, ctx.redirectUri, ctx.projectId);
 }
-async function loginWithGoogleMitra2(options) {
+async function loginWithGoogleMitra(options) {
   return loginWithProvider("google", options);
 }
-async function loginWithMicrosoftMitra2(options) {
+async function loginWithMicrosoftMitra(options) {
   return loginWithProvider("microsoft", options);
 }
-async function loginMitra2(method, options) {
+async function loginMitra(method, options) {
   if (method === "google") return loginWithProvider("google", options);
   if (method === "microsoft") return loginWithProvider("microsoft", options);
   throw new Error(NOT_SUPPORTED_POPUP);
 }
-var _refreshPromise2 = null;
-async function refreshTokenSilently2(authUrl, _projectId) {
-  if (_refreshPromise2) return _refreshPromise2;
-  _refreshPromise2 = (async () => {
+var _refreshPromise = null;
+async function refreshTokenSilently(authUrl, _projectId) {
+  if (_refreshPromise) return _refreshPromise;
+  _refreshPromise = (async () => {
     try {
       const config = isConfigured() ? getConfig() : null;
       const refreshToken = config == null ? void 0 : config.refreshToken;
@@ -448,52 +287,10 @@ async function refreshTokenSilently2(authUrl, _projectId) {
         ...data.refreshToken ? { refreshToken: data.refreshToken } : {}
       };
     } finally {
-      _refreshPromise2 = null;
+      _refreshPromise = null;
     }
   })();
-  return _refreshPromise2;
-}
-
-// src/auth.ts
-var LEGACY_AUTH_URLS = [
-  "https://coder.mitralab.io/sdk-auth/",
-  "https://agent.mitralab.io/sdk-auth/"
-];
-function normalize(url) {
-  const stripped = url.split("?")[0].split("#")[0];
-  return stripped.endsWith("/") ? stripped : stripped + "/";
-}
-function isLegacyAuthUrl(authUrl) {
-  if (!authUrl) return false;
-  return LEGACY_AUTH_URLS.includes(normalize(authUrl));
-}
-function isNewWorld(authUrl) {
-  const resolved = isConfigured() ? getConfig().authUrl : void 0;
-  if (!resolved) return false;
-  return !isLegacyAuthUrl(resolved);
-}
-function resolveAuthUrlFromOptions(options) {
-  if (options == null ? void 0 : options.authUrl) return options.authUrl;
-  if (isConfigured()) return getConfig().authUrl;
-  return void 0;
-}
-async function loginMitra3(method, options) {
-  const authUrl = resolveAuthUrlFromOptions(options);
-  return isLegacyAuthUrl(authUrl) ? loginMitra(method, options) : loginMitra2(method, options);
-}
-async function loginWithGoogleMitra3(options) {
-  const authUrl = resolveAuthUrlFromOptions(options);
-  return isLegacyAuthUrl(authUrl) ? loginWithGoogleMitra(options) : loginWithGoogleMitra2(options);
-}
-async function loginWithMicrosoftMitra3(options) {
-  const authUrl = resolveAuthUrlFromOptions(options);
-  return isLegacyAuthUrl(authUrl) ? loginWithMicrosoftMitra(options) : loginWithMicrosoftMitra2(options);
-}
-async function refreshTokenSilently3(authUrl, projectId) {
-  return isLegacyAuthUrl(authUrl) ? refreshTokenSilently(authUrl, projectId) : refreshTokenSilently2(authUrl);
-}
-async function exchangeSsoCodeMitra2(options) {
-  return exchangeSsoCodeMitra(options);
+  return _refreshPromise;
 }
 
 // src/client.ts
@@ -522,36 +319,11 @@ function buildUrl(endpoint, params) {
   return url;
 }
 async function tryRefreshToken() {
-  var _a, _b;
   const config = getConfig();
   if (!config.token || config.projectId == null || !config.baseURL) return false;
-  if (!isNewWorld()) {
-    try {
-      const baseURL = config.baseURL.replace(/\/+$/, "");
-      const resp = await getFetch2()(`${baseURL}/mitraspace/project/refreshedToken/${config.projectId}`, {
-        method: "GET",
-        headers: { "Authorization": formatToken(config.token) }
-      });
-      if (resp.ok) {
-        const data = await resp.json();
-        if (data.token) {
-          const newToken = `Bearer ${stripBearer(data.token)}`;
-          const session = {
-            token: newToken,
-            baseURL: ((_a = data.merge) == null ? void 0 : _a.backURL) || config.baseURL,
-            ...((_b = data.merge) == null ? void 0 : _b.integrationURL) ? { integrationURL: data.merge.integrationURL } : {}
-          };
-          updateGlobalToken(session.token);
-          if (config.onTokenRefresh) config.onTokenRefresh(session);
-          return true;
-        }
-      }
-    } catch (e) {
-    }
-  }
-  if (!config.authUrl || typeof window === "undefined") return false;
+  const gateway = config.authUrl || config.baseURL;
   try {
-    const session = await refreshTokenSilently3(config.authUrl, config.projectId);
+    const session = await refreshTokenSilently(gateway, config.projectId);
     updateGlobalToken(session.token, session.refreshToken);
     if (config.onTokenRefresh) config.onTokenRefresh(session);
     return true;
@@ -577,8 +349,7 @@ async function handleResponse(response) {
 async function fetchWithRefresh(url, init) {
   const fetchFn = getFetch2();
   const response = await fetchFn(url, init);
-  const expiredStatus = isNewWorld() ? 401 : 403;
-  if (response.status === expiredStatus) {
+  if (response.status === 401) {
     const refreshed = await tryRefreshToken();
     if (refreshed) {
       const newHeaders = { ...buildHeaders() };
@@ -1265,33 +1036,10 @@ function createMitraInstance(initialConfig) {
     return data;
   }
   async function tryRefreshToken2() {
-    var _a2, _b;
     if (!_config.token || _config.projectId == null || !_config.baseURL) return false;
+    const gateway = _config.authUrl || _config.baseURL;
     try {
-      const baseURL = _config.baseURL.replace(/\/+$/, "");
-      const resp = await getFetch3()(`${baseURL}/mitraspace/project/refreshedToken/${_config.projectId}`, {
-        method: "GET",
-        headers: { "Authorization": formatToken2(_config.token) }
-      });
-      if (resp.ok) {
-        const data = await resp.json();
-        if (data.token) {
-          const newToken = `Bearer ${stripBearer(data.token)}`;
-          const session = {
-            token: newToken,
-            baseURL: ((_a2 = data.merge) == null ? void 0 : _a2.backURL) || _config.baseURL,
-            ...((_b = data.merge) == null ? void 0 : _b.integrationURL) ? { integrationURL: data.merge.integrationURL } : {}
-          };
-          _config = { ..._config, token: stripBearer(session.token) };
-          if (_config.onTokenRefresh) _config.onTokenRefresh(session);
-          return true;
-        }
-      }
-    } catch (e) {
-    }
-    if (!_config.authUrl || typeof window === "undefined") return false;
-    try {
-      const session = await refreshTokenSilently3(_config.authUrl, _config.projectId);
+      const session = await refreshTokenSilently(gateway, _config.projectId);
       _config = {
         ..._config,
         token: stripBearer(session.token),
@@ -1306,7 +1054,7 @@ function createMitraInstance(initialConfig) {
   async function fetchWithRefresh2(url, init) {
     const fetchFn = getFetch3();
     const response = await fetchFn(url, init);
-    if (response.status === 403) {
+    if (response.status === 401) {
       const refreshed = await tryRefreshToken2();
       if (refreshed) {
         const newHeaders = { ...authHeaders() };
@@ -1708,7 +1456,7 @@ exports.createMitraInstance = createMitraInstance;
 exports.createRecordMitra = createRecordMitra;
 exports.createRecordsBatchMitra = createRecordsBatchMitra;
 exports.deleteRecordMitra = deleteRecordMitra;
-exports.exchangeSsoCodeMitra = exchangeSsoCodeMitra2;
+exports.exchangeSsoCodeMitra = exchangeSsoCodeMitra;
 exports.executePublicServerFunctionAsyncMitra = executePublicServerFunctionAsyncMitra;
 exports.executePublicServerFunctionMitra = executePublicServerFunctionMitra;
 exports.executeServerFunctionAsyncMitra = executeServerFunctionAsyncMitra;
@@ -1719,13 +1467,13 @@ exports.getPublicServerFunctionExecutionMitra = getPublicServerFunctionExecution
 exports.getRecordMitra = getRecordMitra;
 exports.listIntegrationsMitra = listIntegrationsMitra;
 exports.listRecordsMitra = listRecordsMitra;
-exports.loginMitra = loginMitra3;
-exports.loginWithGoogleMitra = loginWithGoogleMitra3;
-exports.loginWithMicrosoftMitra = loginWithMicrosoftMitra3;
+exports.loginMitra = loginMitra;
+exports.loginWithGoogleMitra = loginWithGoogleMitra;
+exports.loginWithMicrosoftMitra = loginWithMicrosoftMitra;
 exports.manageAgentChatMitra = manageAgentChatMitra;
 exports.manageAgentCredentialMitra = manageAgentCredentialMitra;
 exports.patchRecordMitra = patchRecordMitra;
-exports.refreshTokenSilently = refreshTokenSilently3;
+exports.refreshTokenSilently = refreshTokenSilently;
 exports.resolveProjectId = resolveProjectId;
 exports.stopServerFunctionExecutionMitra = stopServerFunctionExecutionMitra;
 exports.updateRecordMitra = updateRecordMitra;