Preserve OAuth scopes across unrelated metadata

[RhysSullivan]

Preserves declared OAuth scopes when same-origin authorization-server metadata points at different authorization or token endpoints. This prevents unrelated OAuth surfaces from stripping the requested scope parameter.

Verified with the full SDK test suite (449 tests) and workspace typecheck.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	executor-cloud	cb26b2d	Jul 16 2026, 10:02 PM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	cb26b2d	Commit Preview URL Branch Preview URL	Jul 16 2026, 10:00 PM

[github-actions]

Cloudflare preview

Console	https://executor-preview-pr-1425.executor-e2e.workers.dev
MCP	https://executor-preview-pr-1425.executor-e2e.workers.dev/mcp
Deployed commit	cb26b2d

Sign-in is Cloudflare Access (one-time PIN to an allowed email). The preview has its own database and encryption key; it is destroyed when this PR closes.

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@1425

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@1425

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@1425

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@1425

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@1425

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@1425

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@1425

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@1425

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@1425

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@1425

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@1425

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@1425

executor

npm i https://pkg.pr.new/executor@1425

commit: cb26b2d