@inkeep/agents-manage-api 0.0.0-dev-20250930181023 → 0.0.0-dev-20250930184723

package/dist/index.cjs

@@ -3776,20 +3776,21 @@ var OAuthService = class {
       clientName: config.clientName || process.env.OAUTH_CLIENT_NAME || "Inkeep Agent Framework",
       clientUri: config.clientUri || process.env.OAUTH_CLIENT_URI || "https://inkeep.com",
       logoUri: config.logoUri || process.env.OAUTH_CLIENT_LOGO_URI || "https://inkeep.com/images/logos/inkeep-logo-blue.svg",
-      redirectBaseUrl: config.redirectBaseUrl || process.env.OAUTH_REDIRECT_BASE_URL || "http://localhost:3002"
+      redirectBaseUrl: config.redirectBaseUrl || env.AGENTS_MANAGE_API_URL
     };
   }
   /**
    * Initiate OAuth flow for an MCP tool
    */
   async initiateOAuthFlow(params) {
-    const { tool, tenantId, projectId, toolId } = params;
+    const { tool, tenantId, projectId, toolId, baseUrl } = params;
     const oAuthConfig = await agentsCore.discoverOAuthEndpoints(tool.config.mcp.server.url, logger4);
     if (!oAuthConfig) {
       throw new Error("OAuth not supported by this server");
     }
     const { codeVerifier, codeChallenge } = await this.generatePKCEInternal();
-    const redirectUri = `${this.defaultConfig.redirectBaseUrl}/oauth/callback`;
+    const redirectBaseUrl = baseUrl || this.defaultConfig.redirectBaseUrl;
+    const redirectUri = `${redirectBaseUrl}/oauth/callback`;
     let clientId = this.defaultConfig.defaultClientId;
     if (oAuthConfig.supportsDynamicRegistration && oAuthConfig.registrationUrl) {
       clientId = await this.performDynamicClientRegistration(
@@ -3817,12 +3818,13 @@ var OAuthService = class {
    * Exchange authorization code for access tokens
    */
   async exchangeCodeForTokens(params) {
-    const { code, codeVerifier, clientId, tool } = params;
+    const { code, codeVerifier, clientId, tool, baseUrl } = params;
     const oAuthConfig = await agentsCore.discoverOAuthEndpoints(tool.config.mcp.server.url, logger4);
     if (!oAuthConfig?.tokenUrl) {
       throw new Error("Could not discover OAuth token endpoint");
     }
-    const redirectUri = `${this.defaultConfig.redirectBaseUrl}/oauth/callback`;
+    const redirectBaseUrl = baseUrl || this.defaultConfig.redirectBaseUrl;
+    const redirectUri = `${redirectBaseUrl}/oauth/callback`;
     let tokens;
     try {
       tokens = await this.exchangeWithOpenIdClient({
@@ -4014,6 +4016,10 @@ async function findOrCreateCredential(tenantId, projectId, credentialData) {
 }
 var app17 = new zodOpenapi.OpenAPIHono();
 var logger5 = agentsCore.getLogger("oauth-callback");
+function getBaseUrlFromRequest(c) {
+  const url = new URL(c.req.url);
+  return `${url.protocol}//${url.host}`;
+}
 var OAuthLoginQuerySchema = zodOpenapi.z.object({
   tenantId: zodOpenapi.z.string().min(1, "Tenant ID is required"),
   projectId: zodOpenapi.z.string().min(1, "Project ID is required"),
@@ -4076,11 +4082,13 @@ app17.openapi(
       }
       const credentialStores = c.get("credentialStores");
       const mcpTool = await agentsCore.dbResultToMcpTool(tool, dbClient_default, credentialStores);
+      const baseUrl = getBaseUrlFromRequest(c);
       const { redirectUrl } = await oauthService.initiateOAuthFlow({
         tool: mcpTool,
         tenantId,
         projectId,
-        toolId
+        toolId,
+        baseUrl
       });
       return c.redirect(redirectUrl, 302);
     } catch (error) {
@@ -4152,11 +4160,13 @@ app17.openapi(
       logger5.info({ toolId }, "Exchanging authorization code for access token");
       const credentialStores = c.get("credentialStores");
       const mcpTool = await agentsCore.dbResultToMcpTool(tool, dbClient_default, credentialStores);
+      const baseUrl = getBaseUrlFromRequest(c);
       const { tokens } = await oauthService.exchangeCodeForTokens({
         code,
         codeVerifier,
         clientId,
-        tool: mcpTool
+        tool: mcpTool,
+        baseUrl
       });
       logger5.info(
         { toolId, tokenType: tokens.token_type, hasRefresh: !!tokens.refresh_token },

package/dist/index.js

@@ -3772,20 +3772,21 @@ var OAuthService = class {
       clientName: config.clientName || process.env.OAUTH_CLIENT_NAME || "Inkeep Agent Framework",
       clientUri: config.clientUri || process.env.OAUTH_CLIENT_URI || "https://inkeep.com",
       logoUri: config.logoUri || process.env.OAUTH_CLIENT_LOGO_URI || "https://inkeep.com/images/logos/inkeep-logo-blue.svg",
-      redirectBaseUrl: config.redirectBaseUrl || process.env.OAUTH_REDIRECT_BASE_URL || "http://localhost:3002"
+      redirectBaseUrl: config.redirectBaseUrl || env.AGENTS_MANAGE_API_URL
     };
   }
   /**
    * Initiate OAuth flow for an MCP tool
    */
   async initiateOAuthFlow(params) {
-    const { tool, tenantId, projectId, toolId } = params;
+    const { tool, tenantId, projectId, toolId, baseUrl } = params;
     const oAuthConfig = await discoverOAuthEndpoints(tool.config.mcp.server.url, logger4);
     if (!oAuthConfig) {
       throw new Error("OAuth not supported by this server");
     }
     const { codeVerifier, codeChallenge } = await this.generatePKCEInternal();
-    const redirectUri = `${this.defaultConfig.redirectBaseUrl}/oauth/callback`;
+    const redirectBaseUrl = baseUrl || this.defaultConfig.redirectBaseUrl;
+    const redirectUri = `${redirectBaseUrl}/oauth/callback`;
     let clientId = this.defaultConfig.defaultClientId;
     if (oAuthConfig.supportsDynamicRegistration && oAuthConfig.registrationUrl) {
       clientId = await this.performDynamicClientRegistration(
@@ -3813,12 +3814,13 @@ var OAuthService = class {
    * Exchange authorization code for access tokens
    */
   async exchangeCodeForTokens(params) {
-    const { code, codeVerifier, clientId, tool } = params;
+    const { code, codeVerifier, clientId, tool, baseUrl } = params;
     const oAuthConfig = await discoverOAuthEndpoints(tool.config.mcp.server.url, logger4);
     if (!oAuthConfig?.tokenUrl) {
       throw new Error("Could not discover OAuth token endpoint");
     }
-    const redirectUri = `${this.defaultConfig.redirectBaseUrl}/oauth/callback`;
+    const redirectBaseUrl = baseUrl || this.defaultConfig.redirectBaseUrl;
+    const redirectUri = `${redirectBaseUrl}/oauth/callback`;
     let tokens;
     try {
       tokens = await this.exchangeWithOpenIdClient({
@@ -4010,6 +4012,10 @@ async function findOrCreateCredential(tenantId, projectId, credentialData) {
 }
 var app17 = new OpenAPIHono();
 var logger5 = getLogger("oauth-callback");
+function getBaseUrlFromRequest(c) {
+  const url = new URL(c.req.url);
+  return `${url.protocol}//${url.host}`;
+}
 var OAuthLoginQuerySchema = z$1.object({
   tenantId: z$1.string().min(1, "Tenant ID is required"),
   projectId: z$1.string().min(1, "Project ID is required"),
@@ -4072,11 +4078,13 @@ app17.openapi(
       }
       const credentialStores = c.get("credentialStores");
       const mcpTool = await dbResultToMcpTool(tool, dbClient_default, credentialStores);
+      const baseUrl = getBaseUrlFromRequest(c);
       const { redirectUrl } = await oauthService.initiateOAuthFlow({
         tool: mcpTool,
         tenantId,
         projectId,
-        toolId
+        toolId,
+        baseUrl
       });
       return c.redirect(redirectUrl, 302);
     } catch (error) {
@@ -4148,11 +4156,13 @@ app17.openapi(
       logger5.info({ toolId }, "Exchanging authorization code for access token");
       const credentialStores = c.get("credentialStores");
       const mcpTool = await dbResultToMcpTool(tool, dbClient_default, credentialStores);
+      const baseUrl = getBaseUrlFromRequest(c);
       const { tokens } = await oauthService.exchangeCodeForTokens({
         code,
         codeVerifier,
         clientId,
-        tool: mcpTool
+        tool: mcpTool,
+        baseUrl
       });
       logger5.info(
         { toolId, tokenType: tokens.token_type, hasRefresh: !!tokens.refresh_token },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inkeep/agents-manage-api",
-  "version": "0.0.0-dev-20250930181023",
+  "version": "0.0.0-dev-20250930184723",
   "description": "Agents Manage API for Inkeep Agent Framework - handles CRUD operations and OAuth",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -23,7 +23,7 @@
     "openid-client": "^6.6.4",
     "pino": "^9.7.0",
     "zod": "^4.1.5",
-    "@inkeep/agents-core": "^0.0.0-dev-20250930181023"
+    "@inkeep/agents-core": "^0.0.0-dev-20250930184723"
   },
   "optionalDependencies": {
     "keytar": "^7.9.0"