OptionalauthThe caller's EDGE presentation, so EDGE can associate the flow with the current identity.
Optionalkindapp for a grant that acts as DXOS's registered app; absent for a user grant.
Optionalloginatproto handle or DID; atproto cannot resolve the user's auth server without it.
OptionalpurposeAccount recovery only — selects the flow and asks EDGE to write the recovery binding.
OptionalregisterOptionalresourceThe MCP server a provider: 'mcp' grant is for.
The client's
InitiateOAuthFlowRequest, as the shell's initiate command takes it.