@opencode/core 0.0.0-dev-19587 → 0.0.0-dev-19589

package/dist/types/mcp/oauth.d.ts

@@ -1,68 +1,44 @@
 export * as McpOAuth from "./oauth.js";
-import { type OAuthClientProvider, type OAuthServerInfo } from "@modelcontextprotocol/sdk/client/auth.js";
-import type { OAuthClientInformationMixed, OAuthTokens } from "@modelcontextprotocol/sdk/shared/auth.js";
-import type { FetchLike } from "@modelcontextprotocol/sdk/shared/transport.js";
+import { type FetchLike, type OAuthClientProvider, type OAuthDiscoveryState, type StoredOAuthClientInformation, type StoredOAuthTokens } from "@modelcontextprotocol/client";
 import { Effect } from "effect";
-import { Credential } from "@opencode/schema/credential";
 import { ConfigMCP } from "@opencode/schema/config/mcp";
+import { Credential } from "../credential.js";
 import type { Integration } from "../integration.js";
-/**
- * opencode's OAuth Client ID Metadata Document. Authorization servers that support CIMD accept this URL as the
- * client_id and fetch it to learn our name and redirect URIs, so no per-server dynamic registration is needed.
- */
+/** Client ID Metadata Document: servers that support CIMD accept this URL as the client_id without registration. */
 export declare const CLIENT_METADATA_URL = "https://opencode.ai/oauth/opencode/client.json";
-/** Observe OAuth failures before the SDK handles them by invalidating credentials or redirecting. */
 export declare const loggedFetch: (fields: {
     readonly server: string;
     readonly directory?: string;
 }) => Effect.Effect<FetchLike, never, never>;
-/** Persists the OAuth artifacts for one MCP server session: DCR client info, PKCE verifier, and tokens. */
 export interface Store {
-    readonly tokens: () => Promise<OAuthTokens | undefined>;
-    readonly saveTokens: (tokens: OAuthTokens) => Promise<void>;
-    readonly clientInformation: () => Promise<OAuthClientInformationMixed | undefined>;
-    readonly saveClientInformation: (info: OAuthClientInformationMixed) => Promise<void>;
+    readonly tokens: () => Promise<StoredOAuthTokens | undefined>;
+    readonly saveTokens: (tokens: StoredOAuthTokens) => Promise<void>;
+    readonly clientInformation: () => Promise<StoredOAuthClientInformation | undefined>;
+    readonly saveClientInformation: (info: StoredOAuthClientInformation) => Promise<void>;
     readonly codeVerifier: () => Promise<string | undefined>;
     readonly saveCodeVerifier: (verifier: string) => Promise<void>;
 }
 export interface Options {
-    /** Loopback URL the authorization server redirects back to after the user approves. */
-    readonly redirectUrl: string;
-    /** Space-delimited OAuth scopes to request when the server requires specific ones. */
-    readonly scope?: string;
-    /** CSRF state embedded in the authorization request; required by the spec and enforced by some servers.
-     * The caller is responsible for validating the value echoed back to the redirect. */
-    readonly state?: string;
-    /** Statically pre-registered client credentials from config; when set, the SDK skips dynamic registration. */
-    readonly client?: {
-        readonly id: string;
-        readonly secret?: string;
+    readonly config: typeof ConfigMCP.Remote.Type;
+    readonly store: Store;
+    /** Absent on connect: the provider then refuses to register a client or redirect, ending in needs_auth. */
+    readonly redirect?: {
+        readonly url: string;
+        readonly state: string;
+        readonly open: (url: URL) => void | Promise<void>;
     };
-    /** Use opencode's Client ID Metadata Document as the client_id instead of registering dynamically. */
     readonly clientMetadataUrl?: string;
-    /** Pre-fetched authorization server discovery so the SDK does not repeat it. */
-    readonly discovery?: OAuthServerInfo;
-    /** Invoked by the SDK to drop credentials it has determined are invalid (e.g. a rejected refresh token). */
-    readonly invalidate?: (scope: "all" | "client" | "tokens" | "verifier" | "discovery") => void | Promise<void>;
-    /** Receives the authorization URL so the caller can open a browser and capture the eventual code. */
-    readonly onRedirect: (url: URL) => void | Promise<void>;
-    readonly store: Store;
+    readonly discovery?: OAuthDiscoveryState;
+    readonly invalidate?: OAuthClientProvider["invalidateCredentials"];
 }
-/**
- * Builds the MCP SDK's OAuthClientProvider. The SDK drives dynamic client registration, PKCE, and
- * token refresh through these callbacks; we only persist whatever it hands back via `store`.
- */
 export declare const provider: (options: Options) => OAuthClientProvider;
-/** A Store that keeps OAuth artifacts in memory for the duration of one interactive login attempt. */
 export declare const memoryStore: () => Store;
-/** Reads the dynamically-registered client info we stash in a credential's metadata, for token refresh. */
-export declare const clientFromCredential: (credential: Credential.OAuth) => OAuthClientInformationMixed | undefined;
-/** Folds SDK tokens (plus DCR client info and the server URL) into a storable credential. */
+export declare const clientFromCredential: (credential: Credential.OAuth) => StoredOAuthClientInformation | undefined;
 export declare const toCredential: (input: {
     readonly methodID: Integration.MethodID;
     readonly serverUrl: string;
-    readonly tokens: OAuthTokens;
-    readonly client: OAuthClientInformationMixed | undefined;
+    readonly tokens: StoredOAuthTokens;
+    readonly client: StoredOAuthClientInformation | undefined;
 }) => {
     readonly type: "oauth";
     readonly methodID: string & import("effect/Brand").Brand<"Integration.MethodID">;
@@ -73,16 +49,15 @@ export declare const toCredential: (input: {
         readonly [x: string]: unknown;
     } | undefined;
 };
-/** Reconstructs SDK tokens from a stored credential so the connect-time provider can present them. */
-export declare const toTokens: (credential: Credential.OAuth) => OAuthTokens;
-/**
- * Runs the interactive OAuth login for one remote MCP server. Stands up a loopback callback server,
- * lets the SDK drive DCR + PKCE to produce an authorization URL, and returns an attempt whose callback
- * exchanges the redirect code for a storable credential. Scoped: the callback server closes with the scope.
- */
+export declare const toTokens: (credential: Credential.OAuth) => StoredOAuthTokens;
+export declare const connectProvider: (input: {
+    readonly config: typeof ConfigMCP.Remote.Type;
+    readonly integrationID: Integration.ID;
+}) => Effect.Effect<OAuthClientProvider, never, Credential.Service>;
 export declare const authorize: (input: {
     readonly name: string;
     readonly config: typeof ConfigMCP.Remote.Type;
+    readonly integrationID: Integration.ID;
     readonly methodID: Integration.MethodID;
 }) => Effect.Effect<{
     url: string;
@@ -98,4 +73,4 @@ export declare const authorize: (input: {
             readonly [x: string]: unknown;
         } | undefined;
     }, Error, never>;
-}, Error, import("effect/Scope").Scope>;
+}, Error, import("effect/Scope").Scope | Credential.Service>;

package/dist/types/mcp/stdio.d.ts

@@ -1,5 +1,5 @@
 export * as McpStdio from "./stdio.js";
-import type { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
+import { type Transport } from "@modelcontextprotocol/client";
 import { Effect, Scope } from "effect";
 import { Environment } from "../environment/index.js";
 export interface Options {

package/dist/types/v1/config/migrate.d.ts

@@ -98,6 +98,7 @@ export declare function migrate(info: typeof ConfigV1.Info.Type): {
                     readonly startup?: number | undefined;
                     readonly execution?: number | undefined;
                 } | undefined;
+                readonly protocol?: "auto" | "legacy" | "2026-07-28" | undefined;
                 readonly cwd?: string | undefined;
                 readonly environment?: {
                     readonly [x: string]: string;
@@ -122,6 +123,7 @@ export declare function migrate(info: typeof ConfigV1.Info.Type): {
                     readonly startup?: number | undefined;
                     readonly execution?: number | undefined;
                 } | undefined;
+                readonly protocol?: "auto" | "legacy" | "2026-07-28" | undefined;
                 readonly codemode?: boolean | undefined;
             };
         } | undefined;

package/dist/util/error-summary.js

@@ -1,7 +1,7 @@
 import {
   from2,
   exports_error_summary
-} from "../chunks/aisdk-native-0q0f95c6.js";
+} from "../chunks/generate-0q0f95c6.js";
 export {
   exports_error_summary as ErrorSummary,
   from2 as from

package/dist/util/error.js

@@ -1,6 +1,6 @@
 import {
   NamedError2
-} from "../chunks/aisdk-native-2axfhc9x.js";
+} from "../chunks/generate-2axfhc9x.js";
 export {
   NamedError2 as NamedError
 };

package/dist/util/git-executable.js

@@ -1,8 +1,8 @@
 import {
   resolveGitExecutable2,
   gitExecutable2
-} from "../chunks/aisdk-native-ef5x83kb.js";
-import"../chunks/aisdk-native-qaymkmh1.js";
+} from "../chunks/generate-ef5x83kb.js";
+import"../chunks/generate-qaymkmh1.js";
 export {
   gitExecutable2 as gitExecutable,
   resolveGitExecutable2 as resolveGitExecutable

package/dist/util/iife.js

@@ -1,6 +1,6 @@
 import {
   iife2
-} from "../chunks/aisdk-native-1kg9ymc8.js";
+} from "../chunks/generate-1kg9ymc8.js";
 export {
   iife2 as iife
 };

package/dist/util/lazy.js

@@ -1,6 +1,6 @@
 import {
   lazy2
-} from "../chunks/aisdk-native-88xbtdfr.js";
+} from "../chunks/generate-88xbtdfr.js";
 export {
   lazy2 as lazy
 };

package/dist/util/slug.js

@@ -1,6 +1,6 @@
 import {
   Slug2
-} from "../chunks/aisdk-native-gebd4c9n.js";
+} from "../chunks/generate-gebd4c9n.js";
 export {
   Slug2 as Slug
 };

package/dist/util/token.js

@@ -1,7 +1,7 @@
 import {
   estimate2,
   exports_token
-} from "../chunks/aisdk-native-h6vf3j39.js";
+} from "../chunks/generate-h6vf3j39.js";
 export {
   exports_token as Token,
   estimate2 as estimate

package/dist/util/which.js

@@ -1,6 +1,6 @@
 import {
   which2
-} from "../chunks/aisdk-native-qaymkmh1.js";
+} from "../chunks/generate-qaymkmh1.js";
 export {
   which2 as which
 };

package/dist/util/wildcard.js

@@ -1,7 +1,7 @@
 import {
   match2,
   exports_wildcard
-} from "../chunks/aisdk-native-y1fvbwt7.js";
+} from "../chunks/generate-y1fvbwt7.js";
 export {
   exports_wildcard as Wildcard,
   match2 as match

package/dist/v1/config/agent.js

@@ -1,10 +1,10 @@
 import {
-  Info9,
+  Info12,
   exports_agent3
-} from "../../chunks/aisdk-native-jvdd4w81.js";
-import"../../chunks/aisdk-native-50mzsvk4.js";
-import"../../chunks/aisdk-native-922hggd3.js";
+} from "../../chunks/generate-ep6z9mt6.js";
+import"../../chunks/generate-magykp64.js";
+import"../../chunks/generate-922hggd3.js";
 export {
   exports_agent3 as ConfigAgentV1,
-  Info9 as Info
+  Info12 as Info
 };

package/dist/v1/config/attachment.js

@@ -1,11 +1,11 @@
 import {
   Image2,
-  Info10,
+  Info11,
   exports_attachment
-} from "../../chunks/aisdk-native-37s12vcn.js";
-import"../../chunks/aisdk-native-922hggd3.js";
+} from "../../chunks/generate-dj9sq318.js";
+import"../../chunks/generate-922hggd3.js";
 export {
   exports_attachment as ConfigAttachmentV1,
   Image2 as Image,
-  Info10 as Info
+  Info11 as Info
 };

package/dist/v1/config/command.js

@@ -1,8 +1,8 @@
 import {
-  Info12,
-  exports_command4
-} from "../../chunks/aisdk-native-tkmwgdpd.js";
+  Info17,
+  exports_command5
+} from "../../chunks/generate-fm2qvscf.js";
 export {
-  exports_command4 as ConfigCommandV1,
-  Info12 as Info
+  exports_command5 as ConfigCommandV1,
+  Info17 as Info
 };

package/dist/v1/config/config.js

@@ -1,23 +1,23 @@
 import {
   WellKnown2,
-  Info5,
+  Info10,
   exports_config2
-} from "../../chunks/aisdk-native-h0vxvrcv.js";
-import"../../chunks/aisdk-native-a6v99qxw.js";
-import"../../chunks/aisdk-native-enw7m7xp.js";
-import"../../chunks/aisdk-native-607tc6va.js";
-import"../../chunks/aisdk-native-q2b1ymqp.js";
-import"../../chunks/aisdk-native-jvdd4w81.js";
-import"../../chunks/aisdk-native-37s12vcn.js";
-import"../../chunks/aisdk-native-yjptyezs.js";
-import"../../chunks/aisdk-native-zeh9ct20.js";
-import"../../chunks/aisdk-native-tkmwgdpd.js";
-import"../../chunks/aisdk-native-0f9afca0.js";
-import"../../chunks/aisdk-native-21r38tys.js";
-import"../../chunks/aisdk-native-50mzsvk4.js";
-import"../../chunks/aisdk-native-922hggd3.js";
+} from "../../chunks/generate-0zzb6e4a.js";
+import"../../chunks/generate-21r38tys.js";
+import"../../chunks/generate-dj9sq318.js";
+import"../../chunks/generate-zeh9ct20.js";
+import"../../chunks/generate-ep6z9mt6.js";
+import"../../chunks/generate-e6hmchc5.js";
+import"../../chunks/generate-vncycja5.js";
+import"../../chunks/generate-magykp64.js";
+import"../../chunks/generate-6anwy9fs.js";
+import"../../chunks/generate-fm2qvscf.js";
+import"../../chunks/generate-dg5bcj4q.js";
+import"../../chunks/generate-7gvwkz6m.js";
+import"../../chunks/generate-2k8khapm.js";
+import"../../chunks/generate-922hggd3.js";
 export {
   exports_config2 as ConfigV1,
-  Info5 as Info,
+  Info10 as Info,
   WellKnown2 as WellKnown
 };

package/dist/v1/config/error.js

@@ -5,8 +5,8 @@ import {
   DirectoryTypoError2,
   RemoteAuthError2,
   exports_error
-} from "../../chunks/aisdk-native-z63w68vq.js";
-import"../../chunks/aisdk-native-2axfhc9x.js";
+} from "../../chunks/generate-z63w68vq.js";
+import"../../chunks/generate-2axfhc9x.js";
 export {
   exports_error as ConfigErrorV1,
   DirectoryTypoError2 as DirectoryTypoError,

package/dist/v1/config/formatter.js

@@ -1,10 +1,10 @@
 import {
   Entry4,
-  Info7,
+  Info18,
   exports_formatter3
-} from "../../chunks/aisdk-native-enw7m7xp.js";
+} from "../../chunks/generate-dg5bcj4q.js";
 export {
   exports_formatter3 as ConfigFormatterV1,
   Entry4 as Entry,
-  Info7 as Info
+  Info18 as Info
 };

package/dist/v1/config/layout.js

@@ -1,7 +1,7 @@
 import {
   Layout2,
   exports_layout
-} from "../../chunks/aisdk-native-21r38tys.js";
+} from "../../chunks/generate-21r38tys.js";
 export {
   exports_layout as ConfigLayoutV1,
   Layout2 as Layout

package/dist/v1/config/lsp.js

@@ -3,14 +3,14 @@ import {
   Entry3,
   builtinServerIds2,
   requiresExtensionsForCustomServers2,
-  Info6,
+  Info16,
   exports_lsp
-} from "../../chunks/aisdk-native-a6v99qxw.js";
+} from "../../chunks/generate-6anwy9fs.js";
 export {
   exports_lsp as ConfigLSPV1,
   Disabled2 as Disabled,
   Entry3 as Entry,
-  Info6 as Info,
+  Info16 as Info,
   builtinServerIds2 as builtinServerIds,
   requiresExtensionsForCustomServers2 as requiresExtensionsForCustomServers
 };

package/dist/v1/config/mcp.js

@@ -2,13 +2,13 @@ import {
   Local2,
   OAuth2,
   Remote2,
-  Info13,
+  Info19,
   exports_mcp5
-} from "../../chunks/aisdk-native-0f9afca0.js";
-import"../../chunks/aisdk-native-922hggd3.js";
+} from "../../chunks/generate-7gvwkz6m.js";
+import"../../chunks/generate-922hggd3.js";
 export {
   exports_mcp5 as ConfigMCPV1,
-  Info13 as Info,
+  Info19 as Info,
   Local2 as Local,
   OAuth2 as OAuth,
   Remote2 as Remote

package/dist/v1/config/migrate.js

@@ -7,10 +7,10 @@ import {
   migrateProvider2,
   providerID2,
   exports_migrate
-} from "../../chunks/aisdk-native-pt1wzm9p.js";
-import"../../chunks/aisdk-native-0paq2nw3.js";
-import"../../chunks/aisdk-native-jghsd1wz.js";
-import"../../chunks/aisdk-native-33n3bzdy.js";
+} from "../../chunks/generate-cwkg32z7.js";
+import"../../chunks/generate-0paq2nw3.js";
+import"../../chunks/generate-htd8zck5.js";
+import"../../chunks/generate-938z9950.js";
 export {
   exports_migrate as ConfigMigrateV1,
   commands2 as commands,

package/dist/v1/config/permission.js

@@ -2,13 +2,13 @@ import {
   Action2,
   Object2,
   Rule2,
-  Info14,
+  Info15,
   exports_permission
-} from "../../chunks/aisdk-native-50mzsvk4.js";
+} from "../../chunks/generate-magykp64.js";
 export {
   Action2 as Action,
   exports_permission as ConfigPermissionV1,
-  Info14 as Info,
+  Info15 as Info,
   Object2 as Object,
   Rule2 as Rule
 };

package/dist/v1/config/plugin.js

@@ -1,10 +1,10 @@
 import {
-  Options5,
+  Options8,
   Spec2,
   exports_plugin3
-} from "../../chunks/aisdk-native-607tc6va.js";
+} from "../../chunks/generate-2k8khapm.js";
 export {
   exports_plugin3 as ConfigPluginV1,
-  Options5 as Options,
+  Options8 as Options,
   Spec2 as Spec
 };

package/dist/v1/config/provider-options.js

@@ -2,7 +2,7 @@ import {
   provider2,
   model2,
   exports_provider_options
-} from "../../chunks/aisdk-native-0paq2nw3.js";
+} from "../../chunks/generate-0paq2nw3.js";
 export {
   exports_provider_options as ConfigProviderOptionsV1,
   model2 as model,

package/dist/v1/config/provider.js

@@ -1,13 +1,13 @@
 import {
   ModelStatus2,
   Model2,
-  Info11,
+  Info13,
   exports_provider2
-} from "../../chunks/aisdk-native-yjptyezs.js";
-import"../../chunks/aisdk-native-922hggd3.js";
+} from "../../chunks/generate-e6hmchc5.js";
+import"../../chunks/generate-922hggd3.js";
 export {
   exports_provider2 as ConfigProviderV1,
-  Info11 as Info,
+  Info13 as Info,
   Model2 as Model,
   ModelStatus2 as ModelStatus
 };

package/dist/v1/config/server.js

@@ -1,8 +1,8 @@
 import {
   Server2,
   exports_server
-} from "../../chunks/aisdk-native-zeh9ct20.js";
-import"../../chunks/aisdk-native-922hggd3.js";
+} from "../../chunks/generate-zeh9ct20.js";
+import"../../chunks/generate-922hggd3.js";
 export {
   exports_server as ConfigServerV1,
   Server2 as Server

package/dist/v1/config/skills.js

@@ -1,8 +1,8 @@
 import {
-  Info8,
+  Info14,
   exports_skills
-} from "../../chunks/aisdk-native-q2b1ymqp.js";
+} from "../../chunks/generate-vncycja5.js";
 export {
   exports_skills as ConfigSkillsV1,
-  Info8 as Info
+  Info14 as Info
 };

package/dist/v1/permission.js

@@ -1,6 +1,6 @@
 import {
   __export
-} from "../chunks/aisdk-native-9rqn6x4v.js";
+} from "../chunks/generate-9rqn6x4v.js";
 
 // src/v1/permission.ts
 var exports_permission = {};

package/dist/vcs/patch.js

@@ -10,7 +10,7 @@ import {
   splitGitPatch2,
   chunksByFile2,
   exports_patch2
-} from "../chunks/aisdk-native-tazgh4e4.js";
+} from "../chunks/generate-tazgh4e4.js";
 export {
   MAX_PATCH_BYTES2 as MAX_PATCH_BYTES,
   MAX_TOTAL_PATCH_BYTES2 as MAX_TOTAL_PATCH_BYTES,