feat(managed-auth): add TS CUA worker contract (KERNEL-1456)

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 127
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel/kernel-0c99f133dc7e81a8e74e829299f4a7bfdd9f4fadc40e69a9a10c81ab28318f7a.yml
-openapi_spec_hash: 6e7e04300dc9554b2d1cf4284ee46504
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel/kernel-5b9eb5cdadbc7a5f404f5c2cec40f726e5fece54bf8e2dd29ab5c7700eb44f0e.yml
+openapi_spec_hash: 63dd0798a4c0ed6477af50fff397f5dc
 config_hash: 77ee715aa17061166f9a02b264a21b8d

src/resources/auth/connections.ts

@@ -352,6 +352,12 @@ export interface ManagedAuth {
     | 'requires_sms_code'
     | 'requires_email_code';
 
+  /**
+   * Canonical choices awaiting selection. Prefer this over pending_sso_buttons,
+   * mfa_options, and sign_in_options when present.
+   */
+  choices?: Array<ManagedAuth.Choice> | null;
+
   /**
    * Reference to credentials for the auth connection. Use one of:
    *
@@ -383,6 +389,12 @@ export interface ManagedAuth {
    */
   external_action_message?: string | null;
 
+  /**
+   * Canonical fields awaiting input. Prefer this over discovered_fields when
+   * present.
+   */
+  fields?: Array<ManagedAuth.Field> | null;
+
   /**
    * When the current flow expires (null when no flow in progress). A flow past this
    * timestamp is no longer valid and its `flow_status` will be `EXPIRED`. Clients
@@ -503,6 +515,43 @@ export interface ManagedAuth {
 }
 
 export namespace ManagedAuth {
+  /**
+   * Canonical auth-flow choice awaiting user selection.
+   */
+  export interface Choice {
+    /**
+     * Stable choice identifier for canonical submit.
+     */
+    id: string;
+
+    /**
+     * Human-readable choice label.
+     */
+    label: string;
+
+    /**
+     * Choice type.
+     */
+    type:
+      | 'mfa_method'
+      | 'sso_provider'
+      | 'sign_in_method'
+      | 'auth_method'
+      | 'identifier_method'
+      | 'account'
+      | 'other';
+
+    /**
+     * Additional context for the choice.
+     */
+    description?: string | null;
+
+    /**
+     * Selector for the visible choice, when available.
+     */
+    observed_selector?: string | null;
+  }
+
   /**
    * Reference to credentials for the auth connection. Use one of:
    *
@@ -579,6 +628,41 @@ export namespace ManagedAuth {
     required?: boolean;
   }
 
+  /**
+   * Canonical field awaiting user input.
+   */
+  export interface Field {
+    /**
+     * Stable field identifier for canonical submit.
+     */
+    id: string;
+
+    /**
+     * Credential reference name to store the submitted value under.
+     */
+    ref: string;
+
+    /**
+     * Managed-auth field type.
+     */
+    type: 'identifier' | 'password' | 'code' | 'totp_code' | 'totp_secret' | 'text';
+
+    /**
+     * Human-readable label shown to the user.
+     */
+    label?: string;
+
+    /**
+     * Selector for the visible field, when available.
+     */
+    observed_selector?: string | null;
+
+    /**
+     * Whether this field is required.
+     */
+    required?: boolean;
+  }
+
   /**
    * An MFA method option for verification
    */
@@ -989,10 +1073,17 @@ export namespace ManagedAuthUpdateRequest {
 
 /**
  * Request to submit field values, click an SSO button, select an MFA method, or
- * select a sign-in option. Provide exactly one of fields, sso_button_selector,
- * sso_provider, mfa_option_id, or sign_in_option_id.
+ * select a sign-in option. Prefer canonical selected_choice_id/field_values when
+ * the API returns fields/choices; legacy
+ * fields/sso_button_selector/sso_provider/mfa_option_id/sign_in_option_id remain
+ * supported during deprecation.
  */
 export interface SubmitFieldsRequest {
+  /**
+   * Canonical map of field ID to submitted value.
+   */
+  field_values?: { [key: string]: string };
+
   /**
    * Map of field name to value
    */
@@ -1003,6 +1094,11 @@ export interface SubmitFieldsRequest {
    */
   mfa_option_id?: string;
 
+  /**
+   * Canonical choice ID selected by the user.
+   */
+  selected_choice_id?: string;
+
   /**
    * The sign-in option ID to select (when sign_in_options were returned)
    */
@@ -1064,6 +1160,12 @@ export namespace ConnectionFollowResponse {
      */
     timestamp: string;
 
+    /**
+     * Canonical choices awaiting selection. Prefer this over pending_sso_buttons,
+     * mfa_options, and sign_in_options when present.
+     */
+    choices?: Array<ManagedAuthStateEvent.Choice>;
+
     /**
      * Fields awaiting input (present when flow_step=AWAITING_INPUT; may also be
      * present with AWAITING_EXTERNAL_ACTION as fallback actions).
@@ -1086,6 +1188,12 @@ export namespace ConnectionFollowResponse {
      */
     external_action_message?: string;
 
+    /**
+     * Canonical fields awaiting input. Prefer this over discovered_fields when
+     * present.
+     */
+    fields?: Array<ManagedAuthStateEvent.Field>;
+
     /**
      * Type of the current flow.
      */
@@ -1133,6 +1241,43 @@ export namespace ConnectionFollowResponse {
   }
 
   export namespace ManagedAuthStateEvent {
+    /**
+     * Canonical auth-flow choice awaiting user selection.
+     */
+    export interface Choice {
+      /**
+       * Stable choice identifier for canonical submit.
+       */
+      id: string;
+
+      /**
+       * Human-readable choice label.
+       */
+      label: string;
+
+      /**
+       * Choice type.
+       */
+      type:
+        | 'mfa_method'
+        | 'sso_provider'
+        | 'sign_in_method'
+        | 'auth_method'
+        | 'identifier_method'
+        | 'account'
+        | 'other';
+
+      /**
+       * Additional context for the choice.
+       */
+      description?: string | null;
+
+      /**
+       * Selector for the visible choice, when available.
+       */
+      observed_selector?: string | null;
+    }
+
     /**
      * A discovered form field
      */
@@ -1180,6 +1325,41 @@ export namespace ConnectionFollowResponse {
       required?: boolean;
     }
 
+    /**
+     * Canonical field awaiting user input.
+     */
+    export interface Field {
+      /**
+       * Stable field identifier for canonical submit.
+       */
+      id: string;
+
+      /**
+       * Credential reference name to store the submitted value under.
+       */
+      ref: string;
+
+      /**
+       * Managed-auth field type.
+       */
+      type: 'identifier' | 'password' | 'code' | 'totp_code' | 'totp_secret' | 'text';
+
+      /**
+       * Human-readable label shown to the user.
+       */
+      label?: string;
+
+      /**
+       * Selector for the visible field, when available.
+       */
+      observed_selector?: string | null;
+
+      /**
+       * Whether this field is required.
+       */
+      required?: boolean;
+    }
+
     /**
      * An MFA method option for verification
      */
@@ -1562,6 +1742,11 @@ export namespace ConnectionLoginParams {
 }
 
 export interface ConnectionSubmitParams {
+  /**
+   * Canonical map of field ID to submitted value.
+   */
+  field_values?: { [key: string]: string };
+
   /**
    * Map of field name to value
    */
@@ -1572,6 +1757,11 @@ export interface ConnectionSubmitParams {
    */
   mfa_option_id?: string;
 
+  /**
+   * Canonical choice ID selected by the user.
+   */
+  selected_choice_id?: string;
+
   /**
    * The sign-in option ID to select (when sign_in_options were returned)
    */