@slashfi/agents-sdk 0.90.4 → 0.90.5

package/dist/mcp-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-client.js","sourceRoot":"","sources":["../src/mcp-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAqB7C,+CAA+C;AAC/C,kBAAkB;AAClB,+CAA+C;AAE/C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,UAAmC,UAAU,CAAC,KAAK;IAEnD,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,yCAAyC,CAAC;IACrF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+CAA+C;AAC/C,8BAA8B;AAC9B,+CAA+C;AAE/C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,oBAA4B,EAC5B,MAKC,EACD,UAAmC,UAAU,CAAC,KAAK;IAEnD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,oBAAoB,EAAE;QAC9C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,WAAW,EAAE,MAAM,CAAC,UAAU;YAC9B,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC,oBAAoB,CAAC;YACxD,0BAA0B,EACxB,MAAM,CAAC,uBAAuB,IAAI,MAAM;SAC3C,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,uCAAuC,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC3D,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,SAAmB;QAClC,YAAY,EAAE,IAAI,CAAC,aAAmC;KACvD,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,oBAAoB;AACpB,+CAA+C;AAE/C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAY5C;IAIC,MAAM,IAAI,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACzD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAC1B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;AAClE,CAAC;AAED,+CAA+C;AAC/C,iBAAiB;AACjB,+CAA+C;AAE/C;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,aAAqB,EACrB,MAMC,EACD,UAAmC,UAAU,CAAC,KAAK;IAOnD,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,oBAAoB;QAChC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,YAAY,EAAE,MAAM,CAAC,WAAW;KACjC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,QAAQ,EAAE,kBAAkB,EAAE;QAC9F,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC3D,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAsB;QACxC,YAAY,EAAE,IAAI,CAAC,aAAmC;QACtD,SAAS,EAAE,IAAI,CAAC,UAAgC;QAChD,SAAS,EAAE,IAAI,CAAC,UAAgC;KACjD,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,gBAAgB;AAChB,+CAA+C;AAE/C;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,aAAqB,EACrB,MAIC,EACD,UAAmC,UAAU,CAAC,KAAK;IAMnD,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,eAAe;QAC3B,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,SAAS,EAAE,MAAM,CAAC,QAAQ;KAC3B,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,QAAQ,EAAE,kBAAkB,EAAE;QAC9F,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC3D,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAsB;QACxC,YAAY,EAAE,IAAI,CAAC,aAAmC;QACtD,SAAS,EAAE,IAAI,CAAC,UAAgC;KACjD,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,4CAA4C;AAC5C,+CAA+C;AAE/C;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAc;IAEd,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7E,MAAM,IAAI,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,4CAA4C,CAAC,EAAE,CAAC;QAChF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IAC9C,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAWD,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,WAAmB,EACnB,UAAmB,UAAU,CAAC,KAAK;IAEnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8B,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAAmB,EACnB,UAAmB,UAAU,CAAC,KAAK;IAMnC,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YACvB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,CAAC;gBACL,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE;oBACN,eAAe,EAAE,YAAY;oBAC7B,YAAY,EAAE,EAAE;oBAChB,UAAU,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,EAAE;iBAC3D;aACF,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACzD,MAAM,WAAW,GAA4B,EAAE,CAAC;IAChD,IAAI,MAAM;QAAE,WAAW,CAAC,MAAM,GAAG,MAAM,CAAC;IACxC,IAAI,MAAM,CAAC,KAAK;QAAE,WAAW,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAEnD,MAAM,WAAW,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAC7C,IAAI,WAAW,EAAE,CAAC;QAChB,WAAW,CAAC,mBAAmB,GAAG,WAAW,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,iCAAiC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC/E,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,qBAAqB,EAAE,MAAM,EAAE,CAAC;gBAC3C,WAAW,CAAC,oBAAoB,GAAG,QAAQ,CAAC,qBAAqB,CAAC;YACpE,CAAC;YACD,IAAI,QAAQ,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;gBACtC,WAAW,CAAC,MAAM,GAAG,QAAQ,CAAC,gBAAgB,CAAC;YACjD,CAAC;YACD,IAAI,QAAQ,CAAC,wBAAwB,EAAE,MAAM,EAAE,CAAC;gBAC9C,WAAW,CAAC,sBAAsB,GAAG,QAAQ,CAAC,wBAAwB,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AACpC,CAAC"}
+{"version":3,"file":"mcp-client.js","sourceRoot":"","sources":["../src/mcp-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAmB7C,+CAA+C;AAC/C,kBAAkB;AAClB,+CAA+C;AAE/C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,UAAmC,UAAU,CAAC,KAAK;IAEnD,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,yCAAyC,CAAC;IACrF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+CAA+C;AAC/C,8BAA8B;AAC9B,+CAA+C;AAE/C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,oBAA4B,EAC5B,MAKC,EACD,UAAmC,UAAU,CAAC,KAAK;IAEnD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,oBAAoB,EAAE;QAC9C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,WAAW,EAAE,MAAM,CAAC,UAAU;YAC9B,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC,oBAAoB,CAAC;YACxD,0BAA0B,EAAE,MAAM,CAAC,uBAAuB,IAAI,MAAM;SACrE,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,uCAAuC,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC3D,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,SAAmB;QAClC,YAAY,EAAE,IAAI,CAAC,aAAmC;KACvD,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,oBAAoB;AACpB,+CAA+C;AAE/C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAY5C;IAIC,MAAM,IAAI,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACzD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAC1B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;AAClE,CAAC;AAUD,MAAM,0BAA0B,GAA4C;IAC1E,kBAAkB,EAAE;QAClB,YAAY;QACZ,MAAM;QACN,eAAe;QACf,cAAc;QACd,WAAW;QACX,eAAe;KAChB;IACD,mBAAmB,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,cAAc,CAAC;CAC7E,CAAC;AAEF,MAAM,yBAAyB,GAA4C;IACzE,kBAAkB,EAAE;QAClB,YAAY;QACZ,eAAe;QACf,WAAW;QACX,eAAe;KAChB;IACD,mBAAmB,EAAE,CAAC,YAAY,EAAE,eAAe,CAAC;CACrD,CAAC;AAEF,SAAS,cAAc,CAAC,QAAgB,EAAE,YAAoB;IAC5D,OAAO,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AAClF,CAAC;AAED,SAAS,sBAAsB,CAAC,MAM/B;IACC,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,mCAAmC;QACnD,MAAM,EAAE,kBAAkB;KAC3B,CAAC;IAEF,IACE,MAAM,CAAC,gBAAgB,KAAK,qBAAqB;QACjD,MAAM,CAAC,YAAY,EACnB,CAAC;QACD,OAAO,CAAC,aAAa,GAAG,cAAc,CACpC,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,CACpB,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,aAAqB,EACrB,MAOC,EACD,UAAmB,UAAU,CAAC,KAAK;IAOnC,MAAM,MAAM,GAAG,MAAM,CAAC,gBAAgB,IAAI,oBAAoB,CAAC;IAC/D,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC;QAC/C,SAAS,EAAE;YACT,UAAU,EAAE,oBAAoB;YAChC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;SACnE;QACD,aAAa,EAAE,0BAA0B,CAAC,MAAM,CAAC;QACjD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,gBAAgB,EAAE,MAAM;KACzB,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI;KACL,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC3D,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAsB;QACxC,YAAY,EAAE,IAAI,CAAC,aAAmC;QACtD,SAAS,EAAE,IAAI,CAAC,UAAgC;QAChD,SAAS,EAAE,IAAI,CAAC,UAAgC;KACjD,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,gBAAgB;AAChB,+CAA+C;AAE/C;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,aAAqB,EACrB,MAKC,EACD,UAAmB,UAAU,CAAC,KAAK;IAMnC,MAAM,MAAM,GAAG,MAAM,CAAC,gBAAgB,IAAI,oBAAoB,CAAC;IAC/D,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC;QAC/C,SAAS,EAAE;YACT,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;SACnE;QACD,aAAa,EAAE,yBAAyB,CAAC,MAAM,CAAC;QAChD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,gBAAgB,EAAE,MAAM;KACzB,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI;KACL,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC3D,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAsB;QACxC,YAAY,EAAE,IAAI,CAAC,aAAmC;QACtD,SAAS,EAAE,IAAI,CAAC,UAAgC;KACjD,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,4CAA4C;AAC5C,+CAA+C;AAE/C;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IAIjD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7E,MAAM,IAAI,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAC/B,4CAA4C,CAC7C,EAAE,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IAC9C,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAWD,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,WAAmB,EACnB,UAAmB,UAAU,CAAC,KAAK;IAEnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8B,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAAmB,EACnB,UAAmB,UAAU,CAAC,KAAK;IAMnC,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YACvB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,CAAC;gBACL,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE;oBACN,eAAe,EAAE,YAAY;oBAC7B,YAAY,EAAE,EAAE;oBAChB,UAAU,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,EAAE;iBAC3D;aACF,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACzD,MAAM,WAAW,GAA4B,EAAE,CAAC;IAChD,IAAI,MAAM;QAAE,WAAW,CAAC,MAAM,GAAG,MAAM,CAAC;IACxC,IAAI,MAAM,CAAC,KAAK;QAAE,WAAW,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAEnD,MAAM,WAAW,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAC7C,IAAI,WAAW,EAAE,CAAC;QAChB,WAAW,CAAC,mBAAmB,GAAG,WAAW,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,iCAAiC,CACtD,WAAW,EACX,OAAO,CACR,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,qBAAqB,EAAE,MAAM,EAAE,CAAC;gBAC3C,WAAW,CAAC,oBAAoB,GAAG,QAAQ,CAAC,qBAAqB,CAAC;YACpE,CAAC;YACD,IAAI,QAAQ,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;gBACtC,WAAW,CAAC,MAAM,GAAG,QAAQ,CAAC,gBAAgB,CAAC;YACjD,CAAC;YACD,IAAI,QAAQ,CAAC,wBAAwB,EAAE,MAAM,EAAE,CAAC;gBAC9C,WAAW,CAAC,sBAAsB,GAAG,QAAQ,CAAC,wBAAwB,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AACpC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@slashfi/agents-sdk",
-  "version": "0.90.4",
+  "version": "0.90.5",
   "author": "Slash Financial",
   "repository": {
     "type": "git",

package/src/config-store.test.ts

@@ -2099,3 +2099,136 @@ describe("isRefAuthComplete + cached authFields", () => {
     expect(result).toBe(false);
   });
 });
+
+describe("ADK ref.refreshToken() manifest-aware token endpoint", () => {
+  let registryServer: AgentServer;
+  let discoveryServer: ReturnType<typeof Bun.serve>;
+  let tokenServer: ReturnType<typeof Bun.serve>;
+  const REG_PORT = 19950;
+  const AS_PORT = 19951;
+  const TOKEN_PORT = 19952;
+  let tokenRefreshCount = 0;
+
+  beforeAll(async () => {
+    tokenServer = Bun.serve({
+      port: TOKEN_PORT,
+      async fetch(req) {
+        tokenRefreshCount++;
+        const params = new URLSearchParams(await req.text());
+        if (
+          params.get("grant_type") !== "refresh_token" ||
+          params.get("refresh_token") !== "discovery-refresh-token" ||
+          params.get("client_id") !== "discovery-client-id"
+        ) {
+          return new Response(JSON.stringify({ error: "invalid_grant" }), {
+            status: 400,
+          });
+        }
+        return new Response(
+          JSON.stringify({
+            access_token: "discovery-refreshed-token",
+            token_type: "Bearer",
+            expires_in: 3600,
+          }),
+          { headers: { "Content-Type": "application/json" } },
+        );
+      },
+    });
+
+    discoveryServer = Bun.serve({
+      port: AS_PORT,
+      fetch(req) {
+        const path = new URL(req.url).pathname;
+        if (path === "/.well-known/oauth-authorization-server") {
+          return Response.json({
+            issuer: `http://localhost:${AS_PORT}`,
+            authorization_endpoint: `http://localhost:${AS_PORT}/oauth/authorize`,
+            token_endpoint: `http://localhost:${TOKEN_PORT}`,
+          });
+        }
+        return new Response("not found", { status: 404 });
+      },
+    });
+
+    const stubTool = defineTool({
+      name: "noop",
+      description: "Unused in this test",
+      inputSchema: { type: "object" as const, properties: {} },
+      execute: async () => ({ ok: true }),
+    });
+    const agent = defineAgent({
+      path: "discovery-oauth-agent",
+      entrypoint: "Discovery OAuth agent",
+      tools: [stubTool],
+      visibility: "public",
+      config: {
+        security: {
+          type: "oauth2",
+          discoveryUrl: `http://localhost:${AS_PORT}/.well-known/oauth-authorization-server`,
+          flows: {
+            authorizationCode: {
+              authorizationUrl: `http://localhost:${AS_PORT}/oauth/authorize`,
+            },
+          },
+        },
+      },
+    });
+    const registry = createAgentRegistry();
+    registry.register(agent);
+    registryServer = createAgentServer(registry, { port: REG_PORT });
+    await registryServer.start();
+  });
+
+  afterAll(async () => {
+    await registryServer.stop();
+    discoveryServer.stop();
+    tokenServer.stop();
+  });
+
+  test("ref.refreshToken() discovers token endpoint from discoveryUrl when tokenUrl is absent", async () => {
+    tokenRefreshCount = 0;
+
+    const fs = createMemoryFs();
+    const adk = createAdk(fs, {
+      encryptionKey: "test-key-32-chars-long-enough!!",
+    });
+
+    await adk.registry.add({
+      name: "discovery-reg",
+      url: `http://localhost:${REG_PORT}`,
+    });
+    await adk.ref.add({
+      ref: "discovery-oauth-agent",
+      sourceRegistry: {
+        url: `http://localhost:${REG_PORT}`,
+        agentPath: "discovery-oauth-agent",
+      },
+    });
+
+    const config = await adk.readConfig();
+    await adk.writeConfig({
+      ...config,
+      refs: config.refs?.map((r: any) => {
+        if (r.ref === "discovery-oauth-agent") {
+          return {
+            ...r,
+            config: {
+              ...r.config,
+              access_token: "stale-token",
+              refresh_token: "discovery-refresh-token",
+              client_id: "discovery-client-id",
+            },
+          };
+        }
+        return r;
+      }),
+    });
+
+    const refreshed = await adk.ref.refreshToken("discovery-oauth-agent");
+    expect(refreshed).toEqual({ accessToken: "discovery-refreshed-token" });
+    expect(tokenRefreshCount).toBe(1);
+
+    const updated = await adk.ref.get("discovery-oauth-agent");
+    expect(typeof updated?.config?.expires_at).toBe("string");
+  });
+});

package/src/config-store.ts

@@ -33,6 +33,7 @@ import type { RegistryAuthRequirement } from "./define-config.js";
 import type { FetchFn } from "./fetch-types.js";
 import type { Logger } from "./logger.js";
 import {
+  type OAuthClientAuthMethod,
   buildOAuthAuthorizeUrl,
   discoverOAuthMetadata,
   dynamicClientRegistration,
@@ -1040,7 +1041,9 @@ export function createAdk(fs: FsStore, options: AdkOptions = {}): Adk {
     const raw = (security as { authFields?: unknown }).authFields;
     if (!raw || typeof raw !== "object" || Array.isArray(raw)) return undefined;
     const out: Record<string, RegistryCacheAuthField> = {};
-    for (const [field, meta] of Object.entries(raw as Record<string, unknown>)) {
+    for (const [field, meta] of Object.entries(
+      raw as Record<string, unknown>,
+    )) {
       if (!meta || typeof meta !== "object" || Array.isArray(meta)) continue;
       const m = meta as Record<string, unknown>;
       if (typeof m.required !== "boolean" || typeof m.automated !== "boolean") {
@@ -1227,6 +1230,7 @@ export function createAdk(fs: FsStore, options: AdkOptions = {}): Adk {
     codeVerifier: string;
     clientId: string;
     clientSecret?: string;
+    clientAuthMethod?: OAuthClientAuthMethod;
     tokenEndpoint: string;
     redirectUri: string;
     createdAt: number;
@@ -1434,6 +1438,109 @@ export function createAdk(fs: FsStore, options: AdkOptions = {}): Adk {
     }
   }
 
+  /**
+   * Resolve OAuth server metadata from a registry security scheme.
+   * Shared by `ref.auth` and `ref.refreshToken` so both paths discover
+   * token endpoints the same way — explicit manifest URLs, RFC 8414
+   * discovery via `discoveryUrl`, authorization-server discovery, and
+   * finally the MCP upstream URL for redirect-mode agents.
+   */
+  async function resolveOAuthMetadataFromSecurity(
+    security: SecuritySchemeSummary | null | undefined,
+    opts?: { serverUrl?: string },
+  ): Promise<import("./mcp-client.js").OAuthServerMetadata | null> {
+    if (!security || security.type !== "oauth2") return null;
+
+    const securityExt = security as {
+      discoveryUrl?: string;
+      flows?: {
+        authorizationCode?: {
+          authorizationUrl?: string;
+          tokenUrl?: string;
+          refreshUrl?: string;
+          scopes?: Record<string, string>;
+        };
+      };
+    };
+    const authCodeFlow = securityExt.flows?.authorizationCode;
+
+    const explicitEndpoint = authCodeFlow?.refreshUrl ?? authCodeFlow?.tokenUrl;
+    if (explicitEndpoint) {
+      const flowScopes = (authCodeFlow as Record<string, unknown> | undefined)
+        ?.scopes as Record<string, string> | undefined;
+      const authUrl = authCodeFlow?.authorizationUrl;
+      return {
+        issuer: authUrl
+          ? new URL(authUrl).origin
+          : new URL(explicitEndpoint).origin,
+        authorization_endpoint: authUrl ?? explicitEndpoint,
+        token_endpoint: explicitEndpoint,
+        scopes_supported: flowScopes ? Object.keys(flowScopes) : undefined,
+      };
+    }
+
+    if (securityExt.discoveryUrl) {
+      const fromDiscovery =
+        (await tryFetchOAuthMetadata(securityExt.discoveryUrl)) ??
+        (await discoverOAuthMetadata(securityExt.discoveryUrl));
+      if (fromDiscovery) return fromDiscovery;
+    }
+
+    const authUrl = authCodeFlow?.authorizationUrl;
+    if (authUrl) {
+      let metadata = await tryFetchOAuthMetadata(authUrl);
+      if (!metadata) {
+        metadata = await discoverOAuthMetadata(new URL(authUrl).origin);
+      }
+      if (metadata) return metadata;
+    }
+
+    const serverUrl = opts?.serverUrl;
+    if (serverUrl) {
+      let metadata = await discoverOAuthMetadata(serverUrl);
+      if (!metadata) {
+        metadata = await discoverOAuthMetadata(
+          serverUrl.replace(/\/(mcp|sse)$/, ""),
+        );
+      }
+      if (metadata) return metadata;
+    }
+
+    return null;
+  }
+
+  function resolveClientAuthMethod(
+    security: SecuritySchemeSummary | null | undefined,
+    metadata: OAuthServerMetadata | null,
+  ): OAuthClientAuthMethod {
+    const flowAuth = (
+      security as {
+        flows?: {
+          authorizationCode?: { clientAuth?: OAuthClientAuthMethod };
+        };
+      }
+    ).flows?.authorizationCode?.clientAuth;
+    if (flowAuth) return flowAuth;
+
+    const supported = metadata?.token_endpoint_auth_methods_supported;
+    if (supported?.length === 1 && supported[0] === "client_secret_basic") {
+      return "client_secret_basic";
+    }
+
+    const tokenEndpoint = metadata?.token_endpoint;
+    if (tokenEndpoint) {
+      try {
+        if (new URL(tokenEndpoint).hostname === "api.x.com") {
+          return "client_secret_basic";
+        }
+      } catch {
+        /* ignore malformed token endpoint */
+      }
+    }
+
+    return "client_secret_post";
+  }
+
   /**
    * Build a registryConsumer from the current config.
    * Decrypts secret: values in registry headers/auth before connecting.
@@ -1568,7 +1675,10 @@ export function createAdk(fs: FsStore, options: AdkOptions = {}): Adk {
     });
     if (!found) return false;
     for (const r of registries) {
-      if (typeof r !== "string" && (registryDisplayName(r) === nameOrUrl || registryUrl(r) === nameOrUrl)) {
+      if (
+        typeof r !== "string" &&
+        (registryDisplayName(r) === nameOrUrl || registryUrl(r) === nameOrUrl)
+      ) {
         await mutate(r);
       }
     }
@@ -2803,7 +2913,12 @@ export function createAdk(fs: FsStore, options: AdkOptions = {}): Adk {
             format: "basic" as const,
             parts: [
               { name: "username", label: "Username", secret: false },
-              { name: "password", label: "Password", secret: true, optional: true },
+              {
+                name: "password",
+                label: "Password",
+                secret: true,
+                optional: true,
+              },
             ],
           }),
         };
@@ -2987,8 +3102,11 @@ export function createAdk(fs: FsStore, options: AdkOptions = {}): Adk {
           const username =
             opts?.credentials?.["username"] ?? (await tryResolve("username"));
           const password =
-            opts?.credentials?.["password"] ?? (await tryResolve("password")) ?? "";
-          const hasUsername = username !== undefined && username !== null && username !== "";
+            opts?.credentials?.["password"] ??
+            (await tryResolve("password")) ??
+            "";
+          const hasUsername =
+            username !== undefined && username !== null && username !== "";
           if (!hasUsername) {
             return {
               type: "http",
@@ -3049,23 +3167,9 @@ export function createAdk(fs: FsStore, options: AdkOptions = {}): Adk {
         }
 
         const authUrl = authCodeFlow.authorizationUrl;
-        let metadata = await tryFetchOAuthMetadata(authUrl);
-        if (!metadata) {
-          const origin = new URL(authUrl).origin;
-          metadata = await discoverOAuthMetadata(origin);
-        }
-        // Fallback: construct metadata from the security scheme's explicit URLs
-        if (!metadata && authCodeFlow.tokenUrl) {
-          const flowScopes = (authCodeFlow as Record<string, unknown>).scopes as
-            | Record<string, string>
-            | undefined;
-          metadata = {
-            issuer: new URL(authUrl).origin,
-            authorization_endpoint: authUrl,
-            token_endpoint: authCodeFlow.tokenUrl,
-            scopes_supported: flowScopes ? Object.keys(flowScopes) : undefined,
-          } as import("./mcp-client.js").OAuthServerMetadata;
-        }
+        const metadata = await resolveOAuthMetadataFromSecurity(security, {
+          serverUrl: entry.url,
+        });
         if (!metadata) {
           throw new Error(`Could not discover OAuth metadata from ${authUrl}`);
         }
@@ -3176,11 +3280,13 @@ export function createAdk(fs: FsStore, options: AdkOptions = {}): Adk {
           });
 
         // Persist pending state so handleCallback works across processes
+        const clientAuthMethod = resolveClientAuthMethod(security, metadata);
         await storePendingOAuth(state, {
           refName: name,
           codeVerifier,
           clientId,
           clientSecret,
+          clientAuthMethod,
           tokenEndpoint: metadata.token_endpoint,
           redirectUri,
           createdAt: Date.now(),
@@ -3351,54 +3457,50 @@ export function createAdk(fs: FsStore, options: AdkOptions = {}): Adk {
 
       const status = await ref.authStatus(name);
       const security = status.security;
-      const flows =
-        security && "flows" in security
-          ? (
-              security as {
-                flows?: Record<
-                  string,
-                  { tokenUrl?: string; refreshUrl?: string }
-                >;
-              }
-            ).flows
-          : undefined;
-      const authCodeFlow = flows?.authorizationCode;
-      const tokenUrl = authCodeFlow?.refreshUrl ?? authCodeFlow?.tokenUrl;
-      if (!tokenUrl) return null;
-
-      const oauthClient = await resolveOAuthClient({ name, entry, security });
-      if (!oauthClient) return null;
-      const { clientId, clientSecret } = oauthClient;
-
-      // POST to the token endpoint with grant_type=refresh_token
-      const body = new URLSearchParams({
-        grant_type: "refresh_token",
-        refresh_token: refreshToken,
-        client_id: clientId,
+      const metadata = await resolveOAuthMetadataFromSecurity(security, {
+        serverUrl: entry.url,
       });
-      if (clientSecret) {
-        body.set("client_secret", clientSecret);
-      }
-
-      const res = await globalThis.fetch(tokenUrl, {
-        method: "POST",
-        headers: { "Content-Type": "application/x-www-form-urlencoded" },
-        body: body.toString(),
+      const tokenEndpoint = metadata?.token_endpoint;
+      if (!tokenEndpoint) return null;
+
+      const oauthClient = await resolveOAuthClient({
+        name,
+        entry,
+        security,
+        metadata,
       });
+      if (!oauthClient) return null;
 
-      if (!res.ok) return null;
-
-      const data = (await res.json()) as Record<string, unknown>;
-      const newAccessToken = data.access_token as string | undefined;
-      if (!newAccessToken) return null;
+      const clientAuthMethod = resolveClientAuthMethod(security, metadata);
+      const fetchFn = options.fetch ?? globalThis.fetch;
+      let tokens: Awaited<ReturnType<typeof refreshAccessToken>>;
+      try {
+        tokens = await refreshAccessToken(
+          tokenEndpoint,
+          {
+            refreshToken,
+            clientId: oauthClient.clientId,
+            clientSecret: oauthClient.clientSecret,
+            clientAuthMethod,
+          },
+          fetchFn,
+        );
+      } catch {
+        return null;
+      }
 
-      // Store the new tokens
-      await storeRefSecret(name, "access_token", newAccessToken);
-      if (data.refresh_token && typeof data.refresh_token === "string") {
-        await storeRefSecret(name, "refresh_token", data.refresh_token);
+      await storeRefSecret(name, "access_token", tokens.accessToken);
+      if (tokens.refreshToken) {
+        await storeRefSecret(name, "refresh_token", tokens.refreshToken);
+      }
+      if (tokens.expiresIn) {
+        const expiresAt = new Date(
+          Date.now() + tokens.expiresIn * 1000,
+        ).toISOString();
+        await storeRefSecret(name, "expires_at", expiresAt);
       }
 
-      return { accessToken: newAccessToken };
+      return { accessToken: tokens.accessToken };
     },
   };
 
@@ -3419,13 +3521,19 @@ export function createAdk(fs: FsStore, options: AdkOptions = {}): Adk {
       throw new Error(`No pending OAuth flow for state "${params.state}".`);
     }
 
-    const tokens = await exchangeCodeForTokens(pending.tokenEndpoint, {
-      code: params.code,
-      codeVerifier: pending.codeVerifier,
-      clientId: pending.clientId,
-      clientSecret: pending.clientSecret,
-      redirectUri: pending.redirectUri,
-    });
+    const fetchFn = options.fetch ?? globalThis.fetch;
+    const tokens = await exchangeCodeForTokens(
+      pending.tokenEndpoint,
+      {
+        code: params.code,
+        codeVerifier: pending.codeVerifier,
+        clientId: pending.clientId,
+        clientSecret: pending.clientSecret,
+        redirectUri: pending.redirectUri,
+        clientAuthMethod: pending.clientAuthMethod,
+      },
+      fetchFn,
+    );
 
     await storeRefSecret(pending.refName, "access_token", tokens.accessToken);
     if (tokens.refreshToken) {

package/src/index.ts

@@ -352,7 +352,10 @@ export {
   exchangeCodeForTokens,
   refreshAccessToken as refreshMcpAccessToken,
 } from "./mcp-client.js";
-export type { OAuthServerMetadata } from "./mcp-client.js";
+export type {
+  OAuthClientAuthMethod,
+  OAuthServerMetadata,
+} from "./mcp-client.js";
 
 // ============================================
 // Serialized Agent Definitions

package/src/mcp-client.test.ts

@@ -0,0 +1,80 @@
+import { describe, expect, it, vi } from "bun:test";
+import { exchangeCodeForTokens, refreshAccessToken } from "./mcp-client.js";
+
+describe("exchangeCodeForTokens", () => {
+  it("uses HTTP Basic auth for client_secret_basic", async () => {
+    const fetch = vi.fn(async () =>
+      Response.json({ access_token: "at", refresh_token: "rt" }),
+    );
+
+    await exchangeCodeForTokens(
+      "https://api.x.com/2/oauth2/token",
+      {
+        code: "auth-code",
+        codeVerifier: "verifier",
+        clientId: "client-id",
+        clientSecret: "client-secret",
+        redirectUri: "https://example.com/callback",
+        clientAuthMethod: "client_secret_basic",
+      },
+      fetch,
+    );
+
+    expect(fetch).toHaveBeenCalledTimes(1);
+    const [, init] = fetch.mock.calls[0] as [string, RequestInit];
+    const headers = init.headers as Record<string, string>;
+    expect(headers.Authorization).toBe(
+      `Basic ${Buffer.from("client-id:client-secret").toString("base64")}`,
+    );
+    expect(String(init.body)).not.toContain("client_secret");
+    expect(String(init.body)).not.toContain("client_id");
+  });
+
+  it("uses client_secret_post by default", async () => {
+    const fetch = vi.fn(async () => Response.json({ access_token: "at" }));
+
+    await exchangeCodeForTokens(
+      "https://example.com/token",
+      {
+        code: "auth-code",
+        codeVerifier: "verifier",
+        clientId: "client-id",
+        clientSecret: "client-secret",
+        redirectUri: "https://example.com/callback",
+      },
+      fetch,
+    );
+
+    const [, init] = fetch.mock.calls[0] as [string, RequestInit];
+    const headers = init.headers as Record<string, string>;
+    expect(headers.Authorization).toBeUndefined();
+    expect(String(init.body)).toContain("client_secret=client-secret");
+    expect(String(init.body)).toContain("client_id=client-id");
+  });
+});
+
+describe("refreshAccessToken", () => {
+  it("uses HTTP Basic auth for client_secret_basic", async () => {
+    const fetch = vi.fn(async () => Response.json({ access_token: "at" }));
+
+    await refreshAccessToken(
+      "https://api.x.com/2/oauth2/token",
+      {
+        refreshToken: "refresh-token",
+        clientId: "client-id",
+        clientSecret: "client-secret",
+        clientAuthMethod: "client_secret_basic",
+      },
+      fetch,
+    );
+
+    const [, init] = fetch.mock.calls[0] as [string, RequestInit];
+    const headers = init.headers as Record<string, string>;
+    expect(headers.Authorization).toBe(
+      `Basic ${Buffer.from("client-id:client-secret").toString("base64")}`,
+    );
+    expect(String(init.body)).toBe(
+      "grant_type=refresh_token&refresh_token=refresh-token",
+    );
+  });
+});