@slashfi/agents-sdk 0.7.0 → 0.8.0

package/src/server.ts

@@ -14,8 +14,10 @@
  * - list_agents  → List registered agents and their tools
  *
  * Additional endpoints:
- * - POST /oauth/token → OAuth2 client_credentials (when @auth registered)
- * - GET /health       → Health check
+ * - POST /oauth/token             → OAuth2 client_credentials (when @auth registered)
+ * - GET  /oauth/callback          → Unified OAuth callback (provider from state)
+ * - GET  /integrations/callback/* → Legacy OAuth callback (provider from URL path)
+ * - GET  /health                  → Health check
  *
  * Auth Integration:
  * When an `@auth` agent is registered, the server automatically:
@@ -702,13 +704,8 @@ export function createAgentServer(
       }
 
 
-      // GET /integrations/callback/:provider - OAuth callback
-      if (path.startsWith("/integrations/callback/") && req.method === "GET") {
-        const provider = path.split("/integrations/callback/")[1]?.split("?")[0];
-        if (!provider) {
-          return addCors(jsonResponse({ error: "Missing provider" }, 400));
-        }
-
+      // ---- Shared OAuth callback handler ----
+      async function handleIntegrationOAuthCallback(provider: string, req: Request): Promise<Response> {
         const url = new URL(req.url);
         const code = url.searchParams.get("code");
         const state = url.searchParams.get("state");
@@ -726,7 +723,6 @@ export function createAgentServer(
           return addCors(jsonResponse({ error: "Missing authorization code" }, 400));
         }
 
-        // Call handle_oauth_callback tool on @integrations
         try {
           await registry.call({
             action: "execute_tool",
@@ -741,13 +737,19 @@ export function createAgentServer(
             },
           } as any);
 
-          // Parse redirect URL from state
+          // Parse redirect URL from state (base64-encoded JSON)
           let redirectUrl = "/";
           if (state) {
             try {
-              const parsed = JSON.parse(state);
+              const parsed = JSON.parse(atob(state));
               if (parsed.redirectUrl) redirectUrl = parsed.redirectUrl;
-            } catch {}
+            } catch {
+              // Fallback: try raw JSON for backward compat
+              try {
+                const parsed = JSON.parse(state);
+                if (parsed.redirectUrl) redirectUrl = parsed.redirectUrl;
+              } catch {}
+            }
           }
 
           const sep = redirectUrl.includes("?") ? "&" : "?";
@@ -760,6 +762,38 @@ export function createAgentServer(
         }
       }
 
+      // GET /oauth/callback - Unified OAuth callback (provider from state param)
+      if (path === "/oauth/callback" && req.method === "GET") {
+        const url = new URL(req.url);
+        const state = url.searchParams.get("state");
+        let provider: string | undefined;
+        if (state) {
+          try {
+            const parsed = JSON.parse(atob(state));
+            provider = parsed.providerId;
+          } catch {
+            // Fallback: try raw JSON for backward compat
+            try {
+              const parsed = JSON.parse(state);
+              provider = parsed.providerId;
+            } catch {}
+          }
+        }
+        if (!provider) {
+          return addCors(jsonResponse({ error: "Missing provider in state param" }, 400));
+        }
+        return handleIntegrationOAuthCallback(provider, req);
+      }
+
+      // GET /integrations/callback/:provider - Legacy OAuth callback (provider from URL path)
+      if (path.startsWith("/integrations/callback/") && req.method === "GET") {
+        const provider = path.split("/integrations/callback/")[1]?.split("?")[0];
+        if (!provider) {
+          return addCors(jsonResponse({ error: "Missing provider" }, 400));
+        }
+        return handleIntegrationOAuthCallback(provider, req);
+      }
+
 
       // GET /secrets/form/:token - Serve hosted secrets form
       if (path.startsWith("/secrets/form/") && req.method === "GET") {

package/src/types.ts

@@ -421,8 +421,21 @@ export interface ToolDefinition<
 
   /**
    * Execute the tool with validated input.
+   * Optional — some registries load tool implementations dynamically.
    */
-  execute: (input: TInput, ctx: TContext) => Promise<TOutput>;
+  execute?: (input: TInput, ctx: TContext) => Promise<TOutput>;
+
+  /**
+   * Path to the tool source file (e.g., '/agents/@clock/timer.tool.ts').
+   * Used for tool discovery and prompt composition.
+   */
+  path?: string;
+
+  /**
+   * Full documentation content for system prompt composition.
+   * When set, rendered directly into the agent's system prompt.
+   */
+  doc?: string;
 }
 
 /**
@@ -473,6 +486,12 @@ export interface AgentDefinition<TContext extends ToolContext = ToolContext> {
    * by @integrations via standard methods (setup, list, connect, get, update).
    */
   integrationMethods?: IntegrationMethods;
+
+  /**
+   * Lazy loader for lifecycle listeners.
+   * Called once to load runtime hooks exported from the agent's entrypoint module.
+   */
+  loadListeners?: () => Promise<unknown>;
 }
 
 // ============================================