AIToolAuthorization
A sign-in a tool call waits for, such as "Connect Linear", and how it ended.
The agent's backend writes it on the call's ai_tool_call step, which waits with status awaiting_authorization, and holds the call until the person signs in at the provider in a browser. Once they connect, the call goes on. When the sign-in is declined, expires or fails, the call is cancelled and never runs. The step holds no credential, since url is the agent's own sign-in page and the provider hands what it grants to the agent's backend, never to the app.
Parameters
How the person signs in. Defaults to Kind.OAuth when the agent sends none.
The provider, such as linear.
What people call the provider, such as "Linear".
The question, such as "Connect Linear".
What signing in means for the person.
The sign-in page to open: an https URL, or an http one on this device itself (localhost or a loopback address), as a router run locally serves. Open launchUrl, which carries the handoffToken.
What binds the sign-in to the first browser that opens it. It goes in the page's fragment, which no server sees. Gone once the sign-in is over.
When the sign-in expires.
How it ended, once it did.
Constructors
Properties
The page to open in a browser, which is url with the handoffToken in its fragment.
Functions
The sign-in with its handoffToken masked, so logging it, or a part that carries it, doesn't leak a live token.