OptionalapprovalRelay approval format. signedApprovalV1 delivers keys for approved e scopes
and rejects bare-grant downgrades.
Omitted or bareGrant selects a grant without an approval envelope.
signedApprovalV1 sets af=v1 in the authorization link.
App identifier shown in the user's grant/session list, typically a domain.
OptionalrelayOptional HTTP relay base, e.g. "https://demo.httprelay.io/inbox/".
Defaults to the default Synonym-hosted relay when omitted.
OptionalxOptional return destinations for success, error, and cancellation.
Options for starting a grant-backed pubkyauth flow.