Teknium 38d8446011 feat: implement MCP OAuth 2.1 PKCE client support (#5420) ...

Implement tools/mcp_oauth.py — the OAuth adapter that mcp_tool.py's
existing auth: oauth hook has been waiting for.

Components:
- HermesTokenStorage: persists tokens + client registration to
  HERMES_HOME/mcp-tokens/<server>.json with 0o600 permissions
- Callback handler factory: per-flow isolated HTTP handlers (safe for
  concurrent OAuth flows across multiple MCP servers)
- OAuthClientProvider integration: wraps the MCP SDK's httpx.Auth
  subclass which handles discovery, DCR, PKCE, token exchange,
  refresh, and step-up auth (403 insufficient_scope) automatically
- Non-interactive detection: warns when gateway/cron environments
  try to OAuth without cached tokens
- Pre-registered client support: injects client_id/secret from config
  for servers that don't support Dynamic Client Registration (e.g. Slack)
- Path traversal protection on server names
- remove_oauth_tokens() for cleanup

Config format:
  mcp_servers:
    sentry:
      url: 'https://mcp.sentry.dev/mcp'
      auth: oauth
      oauth:                          # all optional
        client_id: '...'              # skip DCR
        client_secret: '...'          # confidential client
        scope: 'read write'           # server-provided by default

Also passes oauth config dict through from mcp_tool.py (was passing
only server_name and url before).

E2E verified: full OAuth flow (401 → discovery → DCR → authorize →
token exchange → authenticated request → tokens persisted) against
local test servers. 23 unit tests + 186 MCP suite tests pass.

2026-04-05 22:08:00 -07:00

..

__init__.py

…

test_ansi_strip.py

…

test_approval.py

…

test_browser_camofox_persistence.py

…

test_browser_camofox_state.py

…

test_browser_camofox.py

fix: URL-based auth for third-party Anthropic endpoints + CI test fixes (#4148)

2026-03-30 20:36:56 -07:00

test_browser_cdp_override.py

…

test_browser_cleanup.py

Fix browser cleanup consistency and screenshot recovery

2026-03-14 11:28:26 -07:00

test_browser_console.py

fix: add browser_console to browser toolset and core tools list (#1084)

2026-03-17 02:02:57 -07:00

test_browser_content_none_guard.py

…

test_browser_homebrew_paths.py

…

test_browser_secret_exfil.py

…

test_browser_ssrf_local.py

…

test_checkpoint_manager.py

…

test_clarify_tool.py

test(tools): add unit tests for clarify_tool.py

2026-02-27 03:29:26 -05:00

test_clipboard.py

…

test_code_execution.py

fix: remove stale test skips, fix regex backtracking, file search bug, and test flakiness

2026-04-04 10:18:57 -07:00

test_command_guards.py

fix: make tirith block verdicts approvable instead of hard-blocking (#3428)

2026-03-27 13:22:01 -07:00

test_config_null_guard.py

…

test_credential_files.py

feat: wire skills.external_dirs into all remaining discovery paths

2026-04-03 21:14:42 -07:00

test_cron_prompt_injection.py

…

test_cronjob_tools.py

fix(tools): remove unnecessary crontab requirement from cronjob tool (#1638)

2026-03-17 01:40:02 -07:00

test_daytona_environment.py

…

test_debug_helpers.py

fix(tests): isolate HERMES_HOME in tests and adjust log directory for debug session

2026-03-02 04:34:21 -08:00

test_delegate_toolset_scope.py

…

test_delegate.py

…

test_docker_environment.py

…

test_docker_find.py

fix: Docker backend fails when docker is not in PATH (macOS gateway)

2026-03-10 20:45:13 -07:00

test_env_passthrough.py

feat: env var passthrough for skills and user config (#2807)

2026-03-24 08:19:34 -07:00

test_file_operations.py

fix: search_files now reports error for non-existent paths instead of silent empty results

2026-03-08 16:47:20 -07:00

test_file_read_guards.py

…

test_file_staleness.py

fix(file_tools): refresh staleness timestamp after writes (#4390)

2026-04-01 00:50:08 -07:00

test_file_tools_live.py

…

test_file_tools.py

…

test_file_write_safety.py

…

test_force_dangerous_override.py

…

test_fuzzy_match.py

test: reorganize test structure and add missing unit tests

2026-02-26 03:20:08 +03:00

test_hidden_dir_filter.py

…

test_homeassistant_tool.py

…

test_interrupt.py

…

test_llm_content_none_guard.py

…

test_local_env_blocklist.py

…

test_local_persistent.py

fix(terminal): avoid merging heredoc EOF with fence wrapper (#3598)

2026-03-28 14:43:41 -07:00

test_managed_browserbase_and_modal.py

…

test_managed_media_gateways.py

…

test_managed_modal_environment.py

…

test_managed_tool_gateway.py

…

test_mcp_dynamic_discovery.py

…

test_mcp_oauth.py

…

test_mcp_probe.py

…

test_mcp_stability.py

fix(mcp): stability fix pack — reload timeout, shutdown cleanup, event loop handler, OAuth non-blocking (#4757)

2026-04-03 02:29:20 -07:00

test_mcp_tool_issue_948.py

…

test_mcp_tool.py

…

test_memory_tool.py

fix(memory): profile-scoped memory isolation and clone support (#4845)

2026-04-03 13:10:11 -07:00

test_mixture_of_agents_tool.py

…

test_modal_sandbox_fixes.py

…

test_modal_snapshot_isolation.py

…

test_osv_check.py

…

test_parse_env_var.py

…

test_patch_parser.py

fix: handle addition-only hunks in V4A patch parser (#3325)

2026-03-26 19:38:04 -07:00

test_process_registry.py

fix(gateway): persist watcher metadata in checkpoint for crash recovery (#1706)

2026-03-17 03:52:15 -07:00

test_read_loop_detection.py

…

test_registry.py

…

test_rl_training_tool.py

…

test_search_hidden_dirs.py

…

test_send_message_missing_platforms.py

…

test_send_message_tool.py

…

test_session_search.py

feat(sessions): add --source flag for third-party session isolation (#3255)

2026-03-26 14:35:31 -07:00

test_singularity_preflight.py

…

test_skill_env_passthrough.py

…

test_skill_improvements.py

…

test_skill_manager_tool.py

…

test_skill_size_limits.py

…

test_skill_view_path_check.py

…

test_skill_view_traversal.py

…

test_skills_guard.py

fix(skills): preserve trust for skills-sh identifiers + reduce resolution churn (#3251)

2026-03-26 13:40:21 -07:00

test_skills_hub_clawhub.py

…

test_skills_hub.py

…

test_skills_sync.py

feat: nix flake — uv2nix build, NixOS module, persistent container mode (#20)

2026-03-26 01:08:02 +05:30

test_skills_tool.py

fix(skills): stop marking persisted env vars missing on remote backends (#3650)

2026-03-28 17:52:32 -07:00

test_ssh_environment.py

merge: resolve conflicts with origin/main (SSH preflight check)

2026-03-15 21:13:40 -07:00

test_symlink_prefix_confusion.py

…

test_terminal_disk_usage.py

…

test_terminal_exit_semantics.py

…

test_terminal_requirements.py

…

test_terminal_timeout_output.py

…

test_terminal_tool_requirements.py

…

test_tirith_security.py

fix: send_animation metadata, MarkdownV2 inline code splitting, tirith cosign-free install (#1626)

2026-03-16 23:39:41 -07:00

test_todo_tool.py

…

test_transcription_tools.py

…

test_transcription.py

…

test_url_safety.py

…

test_vision_tools.py

fix(vision): reject non-image files and enforce website policy (salvage #1940) (#3845)

2026-03-29 20:55:04 -07:00

test_voice_cli_integration.py

…

test_voice_mode.py

…

test_web_tools_config.py

…

test_web_tools_tavily.py

…

test_website_policy.py

fix: resolve 7 failing CI tests (#3936)

2026-03-30 08:10:14 -07:00

test_windows_compat.py

fix: guard POSIX-only process functions for Windows compatibility

2026-03-01 01:54:27 +03:00

test_write_deny.py

…

test_yolo_mode.py

…