feat: Enhance AuthAgentInvocation with step and last activity tracking

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 89
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel%2Fkernel-13214b99e392aab631aa1ca99b6a51a58df81e34156d21b8d639bea779566123.yml
-openapi_spec_hash: a88d175fc3980de3097ac1411d8dcbff
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel%2Fkernel-2cf104c4b88159c6a50713b019188f83983748b9cacec598089cf9068dc5b1cd.yml
+openapi_spec_hash: 84ea30ae65ad7ebcc04d2f3907d1e73b
 config_hash: 179f33af31ece83563163d5b3d751d13

src/resources/agents/auth/auth.ts

@@ -161,6 +161,11 @@ export interface AgentAuthInvocationResponse {
    */
   status: 'IN_PROGRESS' | 'SUCCESS' | 'EXPIRED' | 'CANCELED';
 
+  /**
+   * Current step in the invocation workflow
+   */
+  step: 'initialized' | 'discovering' | 'awaiting_input' | 'submitting' | 'completed' | 'expired';
+
   /**
    * Target domain for authentication
    */
@@ -337,7 +342,7 @@ export namespace AuthAgentInvocationCreateResponse {
     /**
      * Indicates the agent is already authenticated and no invocation was created.
      */
-    status: 'already_authenticated';
+    status: 'ALREADY_AUTHENTICATED';
   }
 
   /**
@@ -367,7 +372,7 @@ export namespace AuthAgentInvocationCreateResponse {
     /**
      * Indicates an invocation was created.
      */
-    status: 'invocation_created';
+    status: 'INVOCATION_CREATED';
   }
 }
 
@@ -413,7 +418,7 @@ export interface ReauthResponse {
   /**
    * Result of the re-authentication attempt
    */
-  status: 'reauth_started' | 'already_authenticated' | 'cannot_reauth';
+  status: 'REAUTH_STARTED' | 'ALREADY_AUTHENTICATED' | 'CANNOT_REAUTH';
 
   /**
    * ID of the re-auth invocation if one was created

src/resources/agents/auth/invocations.ts

@@ -28,8 +28,8 @@ export class Invocations extends APIResource {
   }
 
   /**
-   * Returns invocation details including app_name and target_domain. Uses the JWT
-   * returned by the exchange endpoint, or standard API key or JWT authentication.
+   * Returns invocation details including status, app_name, and target_domain.
+   * Supports both API key and JWT (from exchange endpoint) authentication.
    *
    * @example
    * ```ts
@@ -46,7 +46,7 @@ export class Invocations extends APIResource {
   /**
    * Inspects the target site to detect logged-in state or discover required fields.
    * Returns 200 with success: true when fields are found, or 4xx/5xx for failures.
-   * Requires the JWT returned by the exchange endpoint.
+   * Supports both API key and JWT (from exchange endpoint) authentication.
    *
    * @example
    * ```ts
@@ -87,7 +87,8 @@ export class Invocations extends APIResource {
 
   /**
    * Submits field values for the discovered login form and may return additional
-   * auth fields or success. Requires the JWT returned by the exchange endpoint.
+   * auth fields or success. Supports both API key and JWT (from exchange endpoint)
+   * authentication.
    *
    * @example
    * ```ts