Exchanges the code from the redirect for the workspace's tokens.
Rotates the tokens. The previous refresh token is invalidated. Given the previous tokens, resolves the merged result (see applyRefresh); given a refresh token, resolves the raw response, which may omit the workspace and permission fields.
Rotates the tokens. The previous refresh token is invalidated. Given the previous tokens, resolves the merged result (see applyRefresh); given a refresh token, resolves the raw response, which may omit the workspace and permission fields.
The OAuth authorization-code flow an agent app completes when a workspace installs it, and the refresh it performs before tokens expire.