`gj *UdZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlmZddlmZmZddlmZddlmZddlmZmZddlmZej8eZd Z dd l m!Z!dd l"m#Z#m$Z$m%Z%m&Z&d Z ddl)m*Z*Gdde+Z,da-e.dze/d<ej`dd Z1de/d<ej`dd Z2de/d<e3hdZ4dZ5dHde6ezdzdefdZ7de6de6fdZ8de.fdZ9iZ:de/d<d Z;de.fd!Zde?fd&Z@d'e6ddfd(ZAed)ZBed*ZCde?fd+ZDd,edeEdzfd-ZFd,ed.eEddfd/ZGGd0d1ZHdeIeJeEffd2ZKdHd3e.d4e6dzfd5ZLdeIe6e6dzffd6ZMd3e.fd7ZNd8eEddfd9ZOdd:d;e6de6ezdzddfd<ZP dHd=eEd"d#de.fd>ZQd=eEd3e.de6fd?ZRd=eEdd@fdAZSd"d1d=eEdBd@ddfdCZT dHd;e6dDe6dEeEdzddFfdGZUy#e'$rejQd YzwxYw#e'$rdZ*YwxYw)Ia MCP OAuth 2.1 Client Support Implements the browser-based OAuth 2.1 authorization code flow with PKCE for MCP servers that require OAuth authentication instead of static bearer tokens. Uses the MCP Python SDK's ``OAuthClientProvider`` (an ``httpx.Auth`` subclass) which handles discovery, dynamic client registration, PKCE, token exchange, refresh, and step-up authorization automatically. This module provides the glue: - ``HermesTokenStorage``: persists tokens/client-info to disk so they survive across process restarts. - Callback server: ephemeral localhost HTTP server to capture the OAuth redirect with the authorization code. - ``build_oauth_auth()``: entry point called by ``mcp_tool.py`` that wires everything together and returns the ``httpx.Auth`` object. Configuration in config.yaml:: mcp_servers: my_server: url: "https://mcp.example.com/mcp" auth: oauth oauth: # all fields optional client_id: "pre-registered-id" # skip dynamic registration client_secret: "secret" # confidential clients only scope: "read write" # default: server-provided redirect_port: 0 # 0 = auto-pick free port redirect_uri: "https://proxy/callback" # default: loopback callback redirect_host: "localhost" # loopback hostname (WAF-safe) client_name: "My Custom Client" # default: "Hermes Agent" N)contextmanager)BaseHTTPRequestHandler HTTPServer)Path)Any)parse_qsurlparse)secure_parent_dirF)OAuthClientProvider)OAuthClientInformationFullOAuthClientMetadata OAuthMetadata OAuthTokenTz8MCP OAuth types not available -- OAuth MCP auth disabled)AnyUrlceZdZdZy)OAuthNonInteractiveErrorzHRaised when OAuth requires browser interaction in a non-interactive env.N)__name__ __module__ __qualname____doc__B/root/.hermes/venv/lib/python3.12/site-packages/tools/mcp_oauth.pyrrXsRrr _oauth_port_oauth_interactive_enabled)defaultzcontextvars.ContextVar[bool]_oauth_interactive_forced>nqsnoquitskipcancel__hermes_user_skipped__ hermes_homereturnc  ddlm}| t|nt|}|dz S#t$rNttj j dttjdz }Y|dz SwxYw)zReturn the directory for MCP OAuth token files. Uses HERMES_HOME so each profile gets its own OAuth tokens. Layout: ``HERMES_HOME/mcp-tokens/`` r)get_hermes_home HERMES_HOMEz.hermesz mcp-tokens) hermes_constantsr)r ImportErrorosenvirongetstrhome)r&r)bases r_get_token_dirr3sx Q4$/$;tK oFWAX ,  QBJJNN=#diikI6M2NOP , Qs#*ABBnamec\tjdd|jdddxsdS)zBSanitize a server name for use as a filename (no path separators).z[^\w\-]_Nr)resubstrip)r4s r_safe_filenamer;s, 66*c4 ( . .s 3DS 9 FYFrctjtjtj5}|jd|j dcdddS#1swYyxYw)z(Find an available TCP port on localhost. 127.0.0.1rN)socketAF_INET SOCK_STREAMbind getsockname)r s r_find_free_portrEsL v~~v'9'9 :"a  }}q!"""s $A!!A*zdict[int, socket.socket]_reserved_socketscFtjtjtj} |jd|j d}tttk\r}tttj\}}tjtttd |j tttk\r}|t|<|S#t$r|j wxYw#t$rYKwxYw)a?Pick an ephemeral callback port and keep its socket bound. Returns the port. The bound (not yet listening) socket is parked in ``_reserved_sockets`` so no other process can bind the port before ``_wait_for_callback`` adopts it. Adoption (or ``server_close``) owns the socket's lifetime from there. r=r?N)r@rArBrCOSErrorcloserDlenrF_MAX_RESERVED_SOCKETSnextiteritemspop)r portr6stales r_reserve_callback_portrSs  fnnf&8&89A   ==?1 D  $9 9.446785d4(9#:;TB  KKM  $9 9 d K       sC6D6D D D storagezHermesTokenStorage | Nonec|y t|j}|sy|j dxsgD]i} t t|}|jdk(s(|jdvs7|jdk(sG|jTt|jcSy#tttf$rYywxYw#ttf$rYwxYw)aReturn the loopback callback port from cached client registration. OAuth providers bind a dynamically-registered ``client_id`` to the exact redirect URI that was registered with it. If Hermes restarts and chooses a new random callback port while reusing the stored ``client_id``, providers such as Summ reject the authorization request with ``redirect_uri does not match any registered URIs``. Reusing the cached redirect port keeps the authorization request consistent with the stored client registration. N redirect_urishttp> localhostr> /callback) _read_json_client_info_pathAttributeError TypeError ValueErrorr/r r0schemehostnamepathrQintrTdatauriparseds r_cached_redirect_portrgs'3356 xx(.B $ c#h'F MMV ##== {* 'v{{# # $ # Iz 2:&   s"B#B=#B:9B:=CCcT|y t|j}|xsij dxsgD]@} t t|}|jdk(s(|js5t|cSy#tttf$rYywxYw#ttf$rYowxYw)zAReturn a cached non-loopback redirect URI, if one was registered.NrVhttps) rZr[r\r]r^r/r r0r_netlocrcs r_cached_redirect_urirks'3356 06B c#h'F ==G # s8O   Iz 2 :&   s"A;B;BBB'&B'ctjsytjry tjj S#t tf$rYywxYw)z@Return True if we can reasonably expect to interact with a user.FT)rr/rsysstdinisattyr\r^rrr_is_interactiverpsO % ) ) + $$&yy!! J 'sA AAleadc4tst|dy)a7Raise ``OAuthNonInteractiveError`` unless an interactive session exists. ``lead`` is the boundary-specific first sentence; this helper appends the shared, actionable ``hermes mcp login`` next-step so the guidance wording lives in one place across every non-interactive OAuth boundary (#57836). zd Run `hermes mcp login ` interactively to (re)authorize, then restart or reload the gateway.N)rpr)rqs r_raise_if_non_interactiverss+  &f2 2   rc#Ktjd} dtj|y#tj|wxYww)uaTreat the current execution context as interactive despite no TTY. For GUI-driven auth (dashboard/desktop REST endpoint): the user IS present — just not on stdin. Opens the browser + localhost callback flow that the TTY heuristic would otherwise refuse. Same ContextVar propagation story as suppress_interactive_oauth() (#35927). TN)rsetresettokens rforce_interactive_oauthrys= & ) )$ /E/ !''.!''.A 3A A  A c#Ktjd} dtj|y#tj|wxYww)u}Disable stdin-based OAuth prompts for the current execution context. Uses a ContextVar so the suppression propagates from a background-discovery thread onto the coroutine scheduled (via run_coroutine_threadsafe) on the dedicated MCP event-loop thread — where the OAuth callback actually runs (#35927). A threading.local would not cross that thread boundary. FN)rrurvrws rsuppress_interactive_oauthr|%s= ' * *5 1E0 "((/"((/rzctjjdstjjdrytjdk(ry tjj dk(ry tjjdstjjdryy#t $rYKwxYw) z3Return True if opening a browser is likely to work. SSH_CLIENTSSH_TTYFntTDarwinDISPLAYWAYLAND_DISPLAY)r-r.r/r4unamesysnamer\rrr_can_open_browserr5s zz~~l#rzz~~i'@ ww$ 88:   ) *  zz~~i BJJNN3D$E     s!B88 CCrac|jsy tj|jdS#tjt f$r!}t jd||Yd}~yd}~wwxYw)zCRead a JSON file, returning None if it doesn't exist or is invalid.Nutf-8encodingzFailed to read %s: %s)existsjsonloads read_textJSONDecodeErrorrIloggerwarning)raexcs rrZrZHs\ ;;=zz$..'.:;;  ' *.c:s$8A2A--A2rdc2|jjddt||jdt j dt jd} t jt|tjtjztjztjtjz}t j |dd5}t#j$||d t |j't j(|j+d d d t j,||y #1swY xYw#t.$r$ |j1d #t.$rYwxYwwxYw) aWrite a dict as JSON with restricted permissions (0o600). Uses ``os.open`` with ``O_EXCL`` and an explicit mode so the file is created atomically at 0o600. The previous ``write_text`` + post-write ``chmod`` opened a TOCTOU window where the temp file briefly inherited the process umask (commonly 0o644 = world-readable), exposing OAuth tokens to other local users between create and chmod. Mirrors the fix in ``agent/google_oauth.py`` (#19673). Tparentsexist_okz.tmp..wrr)indentrN missing_ok)parentmkdirr with_suffixr-getpidsecrets token_hexopenr0O_WRONLYO_CREATO_EXCLstatS_IRUSRS_IWUSRfdopenrdumpflushfsyncfilenoreplacerIunlink)rardtmpfdfhs r _write_jsonrSs> KKdT2d   U299;-q1B1B11E0FG HC WW H KK"** $ryy 0 LL4<< '  YYr3 1 "R IIdBq# 6 HHJ HHRYY[ ! " 3  " "   JJ$J '     sJ&BE)-AE>E)E&"E)) F3FF FFFFceZdZdZdddedeezdzfdZdefdZdefd Zdefd Z dd Z dd Z dd Z ddZ ddZddZd dZdeeeffdZdddeeefdeddfdZdefdZdefdZy)!HermesTokenStoragea6Persist OAuth tokens and client registration to JSON files. File layout:: HERMES_HOME/mcp-tokens/.json -- tokens HERMES_HOME/mcp-tokens/.client.json -- client info HERMES_HOME/mcp-tokens/.meta.json -- oauth server metadata Nr& server_namer&cXt||_|t||_yd|_yN)r; _server_namer _hermes_home)selfrr&s r__init__zHermesTokenStorage.__init__s(*;71<1HD-drr'cLt|j|jdz S)Nz.jsonr3rrrs r _tokens_pathzHermesTokenStorage._tokens_paths&d//0d6G6G5H3NNNrcLt|j|jdz S)Nz .client.jsonrrs rr[z$HermesTokenStorage._client_info_paths&d//0d6G6G5H 3UUUrcLt|j|jdz S)Nz .meta.jsonrrs r _meta_pathzHermesTokenStorage._meta_paths&d//0d6G6G5H 3SSSrcKt|j}|y|jdd}|.tt |t j z d|d<n{|j dj |jjj}|? |t|dz}tt |t j z d|d< tj|S#t$rd}YdwxYw#ttf$rY8wxYw#tttf$r/}tj!d|j|Yd}~yd}~wwxYww)N expires_atr expires_inz$Corrupt tokens at %s -- ignoring: %s)rZrrPrbmaxtimer/rst_mtimerIr]r^rmodel_validateKeyErrorrr)rrdabsolute_expiry file_mtimeimplied_expiryrs r get_tokenszHermesTokenStorage.get_tokenssF$++-. < ((<6  &!$S499;)F%J!KD  XXl # / "!..0557@@ %%/#d<6H2I%IN),S$))+1Mq-Q)RD& ,,T2 2 "!  " ":.Ix0  NNA4CTCTCVX[ \ srA0E3(C2E>DD1E2 D=E?DEDEDEE,%EEEEc>K|jdd}|jd}|$ tjt|z|d<t |j|tjd|jy#tt f$rYLwxYww)NrTmode exclude_nonerrzOAuth tokens saved for %s) model_dumpr/rrbr]r^rrrdebugr)rtokenspayloadrs r set_tokenszHermesTokenStorage.set_tokenss##d#C[[.  ! (, c*o(E % D%%'1 0$2C2CD z*  s('B#B ;BBBBBcKt|j}|y tj|S#tt t f$r/}tjd|j|Yd}~yd}~wwxYww)Nz)Corrupt client info at %s -- ignoring: %s) rZr[r rr^r]rrrrrdrs rget_client_infoz"HermesTokenStorage.get_client_infosk$0023 < -< bytes for whichever of the three state files exist. Feed back to ``restore()`` to undo an intervening ``remove()`` when a re-authentication attempt fails, so a still-valid token isn't destroyed. )rr[r read_bytesr4rI)rsnaprs rsnapshotzHermesTokenStorage.snapshotsk"$##%t'='='?ARS A  ||~QVV      sA A#"A#F)only_if_absentrrc*|r`td|j|j|jfDr!tj d|j y|j|syt|j}|jdd|jD]\}}||z } tjt|tjtj ztj"zt$j&t$j(z}tj*|d5}|j-|dddy#1swY xYw#t.$r!} tj1d|| Yd} ~ d} ~ wwxYw)zGRevert to a snapshot without overwriting a concurrent successful write.c3<K|]}|jywr)r).0ras r z-HermesTokenStorage.restore..s"  KKM" sz9Skipping OAuth rollback for %s because newer state existsNTrwbz$Failed to restore OAuth state %s: %s)anyrr[rrinforrr3rrrOr-rr0rrO_TRUNCrrrrwriterIr) rrr token_dirfnamerdrarrrs rrestorezHermesTokenStorage.restore sI c" **,d.D.D.FHYZ"   KKK!!    "4#4#45 t4#>>+ SKE4u$D SWWIKK"**,rzz9LL4<</ YYr4(#BHHTN# S## SEucRR Ss1:BE(?EE(E% !E(( F1F  Fc|j}|jsy|j|jdz} |j |j |jd|jjdtjd|j|jy#t $r!}tjd||Yd}~d}~wwxYw)uDiscard a dead dynamically-registered client so it gets re-created. Called when the IdP rejects our cached ``client_id`` with ``invalid_client`` on the token endpoint — proof the server-side registration is gone (IdP redeploy / DB wipe / rebrand). Deleting ``client.json`` makes the MCP SDK's ``async_auth_flow`` take the ``if not client_info`` branch and re-run RFC 7591 dynamic client registration on the next flow. The stale ``meta.json`` is dropped too so discovery re-runs against a freshly fetched document. Tokens are intentionally left in place — the subsequent re-authorization overwrites them, and keeping them avoids losing a still-valid refresh token if the re-registration never completes. A single ``.bak`` copy of the client file is kept for recovery. Returns True if a client file was present and removed. Fz.bakz'Could not back up client info at %s: %sNTrzMCP OAuth '%s': cached client registration rejected as invalid_client; removed client.json + meta.json (backup at %s) to force re-registration) r[r with_namer4 write_bytesrrIrrrrr)r client_pathbackuprs rpoison_client_registrationz-HermesTokenStorage.poison_client_registration*s$,,. !!#&&{'7'7&'@A X   {557 8 d+   D 1 V   v{{  X NNDkSV W W XsB>> C(C##C(c>|jjS)z7Return True if we have tokens on disk (may be expired).)rrrs rhas_cached_tokensz$HermesTokenStorage.has_cached_tokensMs  "))++r)r'zOAuthToken | None)rrr'N)r'z!OAuthClientInformationFull | None)rr r'N)rrr'N)r'zOAuthMetadata | Noner'N)rrrrr0rrrr[rrrrrrrrdictbytesrboolrrrrrrrr}sNRSCStd9JSOdOV4VTDT %NE,JG& $sEz* MRSS%Z 0STSVZS:!D!F,4,rrc:ddddGfddt}|fS)aTCreate a per-flow callback HTTP handler class with its own result dict. Returns ``(HandlerClass, result_dict)`` where *result_dict* is a mutable dict that the handler writes ``auth_code`` and ``state`` into when the OAuth redirect arrives. Each call returns a fresh pair so concurrent flows don't stomp on each other. N) auth_codestateerrorc.eZdZdfd ZdededdfdZy)(_make_callback_handler.._Handlerr'Nctt|jj}|j ddgd}|j ddgd}|j ddgd}|d<|d<|d<|rdn d|xsdd }|j d |j d d |j|jj|jy) Ncoderr r rzn

Authorization Successful

You can close this tab and return to Hermes.

z3

Authorization Failed

Error: unknownz

z Content-Typeztext/html; charset=utf-8) rr raqueryr/ send_response send_header end_headerswfilerencode)rparamsrr r bodyresults rdo_GETz/_make_callback_handler.._Handler.do_GETbshtyy1778F::ftf-a0DJJw/2EJJw/2E"&F; #F7O#F7O T"/i00BD    s #   ^-G H     JJ  T[[] +rfmtargsc6tjd||zy)NzOAuth callback: %s)rr)rrrs r log_messagez4_make_callback_handler.._Handler.log_messagexs LL-sTz :rr)rrrrr0rr)rsr_Handlerr as" ,, ;3 ;s ;t ;rr)r)rrs @r_make_callback_handlerr Ws+,0$NF;);4 V rrQ redirect_uric(dtddffd }|S)aReturn a redirect handler closure that closes over the given port. Using a closure instead of reading the module-level ``_oauth_port`` avoids cross-server state pollution when multiple MCP servers run OAuth concurrently (fixes #44588). ``redirect_uri`` is the configured proxy callback (e.g. a Tailscale Funnel URL), or ``None`` for the loopback default. It tailors the remote-session hint: a proxied callback reaches this machine on its own, so the loopback SSH-tunnel guidance would be misleading. authorization_urlr'Nc Kddlm}|}||j|d{ytdd|d}t |t j ttjdxstjd }|r"r t d d t j n)|r'r%t d d ddt j trQ tj|}|rt dt j nt dt j yyt dt j y7+#t$rt dt j YywxYww)zShow the authorization URL to the user. Opens the browser automatically when possible; always prints the URL as a fallback for headless/SSH/gateway environments. rget_dashboard_oauth_flowNzvMCP OAuth requires browser authorization but no interactive session is available (non-interactive/background context).zL MCP OAuth: authorization required. Open this URL in your browser:  filer~rzN Remote session detected. After you authorize, the provider redirects to uU which forwards to the callback listener on this machine — no SSH tunnel needed. z_ Remote session detected. After you authorize, the provider redirects to http://127.0.0.1:u/callback which only the listener on THIS machine can receive. Two options: 1. Easiest — when your browser shows a connection error after authorizing, copy the full URL from the address bar and paste it at the prompt below. The pasted ``code=...&state=...`` is enough to complete the flow. 2. Or forward the port first in a separate terminal: ssh -N -L z :127.0.0.1:z @ then open the URL above and let it redirect normally. See: https://hermes-agent.nousresearch.com/docs/guides/oauth-over-ssh z" (Browser opened automatically.) u= (Could not open browser — please open the URL manually.) u= (Headless environment detected — open the URL manually.) )tools.mcp_dashboard_oauthr&publish_authorization_urlrsprintrmstderrrr-getenvr webbrowserr Exception)r#r&dashboard_flowmsgon_sshopenedrQr!s r_redirect_handlerz1_make_redirect_handler.._redirect_handlers G13  % ::;LM M M  " I $%R ) c #bii -E91EF l #n%hiZZ    ((,v .&'+V;tf=\ ]ZZ $   i#):;?cjjQZadakaklR RY\YcYc dM NF iV]`]g]gh is5$E?EB=E?&AE4E?$E<9E?;E<<E?)r0)rQr!r5s`` r_make_redirect_handlerr6s%Pe3Pe4Ped rchKt tdttd{S7w)u9Wait for the OAuth callback on the legacy module-level port. Kept for backwards compatibility with callers that never went through :func:`build_oauth_auth`'s per-flow wiring. New code paths receive a per-flow waiter from :func:`_make_callback_waiter` so concurrent OAuth flows cannot cross ports (#34260). Raises: RuntimeError: If ``_oauth_port`` has not been set, which would indicate that ``build_oauth_auth`` was skipped — the asserting form below was a silent bug when running Python with ``-O``/``-OO``. Nu_OAuth callback port not set — build_oauth_auth must be called before _wait_for_oauth_callback)r RuntimeError_make_callback_waiterrrr_wait_for_callbackr:s9 .  4&{35 55 5s )202c@dtttdzfffd }|S)azReturn a callback waiter bound to a single OAuth flow's port. Closing over the port (instead of reading the module-level ``_oauth_port``) keeps concurrent OAuth flows isolated: flow A's waiter listens on flow A's port even when flow B's ``_configure_callback_port`` overwrites the legacy global afterwards (#34260, the callback-side sibling of the #44588 redirect-handler fix). The waiter polls for the redirect without blocking the event loop. On an interactive TTY it races the HTTP listener against a stdin paste fallback so users without an SSH tunnel can paste the redirect URL (or just the ``code=...&state=...`` query string) from a browser on another machine. Raises (when awaited): OAuthNonInteractiveError: If the callback times out (no user present to complete the browser auth), or in non-interactive contexts. r'NclKddlm}|}||jd{Stdt \}} t d f|d}t j d}|G|jj||_|j|_ |jn'd|_ |j|jt#j$|j&d }|j)d}t+rIt-d t.j0d t#j$t2|fd}|j)d} d} d} | | kr3|d|dn(t5j6| d{| | z } | | kr3|j9|dt:k(r t!d|drt=d|d|d t!d|d|dfS7#t$r}t!d d |d |d}~wwxYw7#|j9wxYww)Nrr%zOAuth callback requires an interactive session but none is available (non-interactive/background context); skipping browser authorization without binding a callback listener.r>F)bind_and_activateTzOAuth callback port z is already in use (zk). Close any other in-progress login, or set a free `oauth.redirect_port` in the server config, then retry.)targetdaemonz Or paste the redirect URL here (or the ``?code=...&state=...`` portion) and press Enter. Type ``skip`` + Enter to continue without this server:)r)r)r>rr?gr@g?grr  user_skippedzOAuth authorization failed: uqOAuth callback timed out — no authorization code received. Ensure you completed the browser authorization flow.r )r*r&wait_for_callbackrsr rrFrPr@rJrDserver_addressserver_activateallow_reuse_address server_bindrIr threadingThreadhandle_requeststartrpr,rmr-_paste_callback_readerasynciosleep server_close_USER_SKIPPED_SENTINELr8) r&r1 handler_clsrserverreservedr server_thread paste_threadtimeout poll_intervalelapsedrQs r_waitz$_make_callback_waiter.._wait stF13  %'99;; ; " A 56 V d#[EF),,T48H# ##% ( (0(<(<(>%&&(-1*""$&&("((0E0EdS  15   'ZZ  %++-VIdL      "G#+&2fWo6QmmM222=( G#    ! '?4 4*>: : '?!=fWo=NOP P +  &*G  k"F7O33G` later to authenticate, or set ``enabled: false`` on that server in config.yaml to disable persistently.r(?r?uA Could not parse pasted input as an OAuth redirect — ignoring.rrr uD Pasted input did not contain ``code=`` or ``error=`` — ignoring.u8 Got authorization code from paste — completing flow.)rmrnreadlineKeyboardInterruptrIr^r:r/lower _SKIP_TOKENSrNr,r-split startswithrr])rlinerrrr r s rrJrJysyy!!#  ::=F>*G.-G.rrcjt||}|jtjd|y)z8Delete stored OAuth tokens and client info for a server.rzOAuth tokens removed for '%s'N)rrrr)rr&rTs rremove_oauth_tokensrcs) !+FG NN KK/=rcfgc@ddlm}|}|(d|d<|jdxs |j|d<yt |}|jds |r ||d<d|d<yt |jdd}|xst |xs t}||d<|a|S)aPick or validate the OAuth callback port. Stores the resolved port into ``cfg['_resolved_port']`` so sibling helpers (and the manager) can read it from the same dict. Returns the resolved port. Port choice precedence: 1. explicit ``oauth.redirect_port`` config 2. cached client registration redirect URI port 3. newly allocated free port NOTE: also sets the legacy module-level ``_oauth_port`` so existing calls to ``_wait_for_callback`` keep working. The legacy global is the root cause of issue #5344 (port collision on concurrent OAuth flows); replacing it with a ContextVar is out of scope for this consolidation PR. rr%_resolved_portr! redirect_port) r*r&r/r!rkrbrgrSr)rdrTr&r1cached_redirect_uri requestedrQs r_configure_callback_portrjs,C-/N! ! !ggn5T9T9TN.w7 77> "':1N ! CGGOQ/0I  R-g6 R:P:RD CK Krch|jd}|r|S|jdxsd}d|d|dS)uResolve the OAuth callback URL: configured ``redirect_uri`` or loopback. A configured ``redirect_uri`` lets the callback go through a proxy (e.g. a Tailscale Funnel exposing a public HTTPS URL that forwards to localhost); otherwise we default to ``http://:/callback``. An empty value is treated as unset. Both the client metadata and any pre-registered client info must derive the redirect_uri here so they stay identical — a mismatch makes the authorization server reject the callback. ``redirect_host`` (default ``127.0.0.1``) tweaks only the hostname of the loopback callback. Some providers' WAFs (e.g. Reclaim.ai's AWS API Gateway) reject any authorize request whose query string contains a literal ``127.0.0.1``, returning ``{"message":"Forbidden"}``; ``redirect_host: localhost`` works around that. The callback listener still binds ``127.0.0.1`` either way. r! redirect_hostr>zhttp://:rY)r/)rdrQ configuredhosts r_resolve_redirect_urirpsC"(J 77? # 2{D TF!D6 ++rr c*|jd}| td|jdd}|jd}t||}|t|gddgdgd d }|r||d<|jd rd |d <t j |S)zBuild OAuthClientMetadata from the oauth config dict. Requires ``cfg['_resolved_port']`` to have been populated by :func:`_configure_callback_port` first. rfzI_configure_callback_port() must be called before _build_client_metadata() client_namez Hermes Agentscopeauthorization_code refresh_tokenrnone)rrrV grant_typesresponse_typestoken_endpoint_auth_method client_secretclient_secret_postry)r/r^rprr r)rdrQrrrsr!metadata_kwargss r_build_client_metadatar}/s 77# $D | W  ''-8K GGG E(d3L# ./,o>!(&, 'O #(  ww8L45  - -o >>rclient_metadatac|jd}|sy|d}t||}||g|j|j|jd}|jdr|d|d<|jdr|d|d<|jdr|d|d<t j |}t|j|jdd tjd ||jy) z=If cfg has a pre-registered client_id, persist it to storage. client_idNrf)rrVrwrxryrzrrrsrTrz$Pre-registered client_id=%s for '%s') r/rprwrxryr rrr[rrrr)rTrdr~rrQr! info_dictrs r_maybe_preregister_clientrMs  $I   D(d3L&&22)88&5&P&P !I ww%(%9 /" ww}#&}#5 -  www \ ',;;IFK))+[-C-C^b-C-cd LL7GDXDXYr server_url oauth_configzOAuthClientProvider | Nonec tstjd|yt|xsi}t |}t s"|j std|d|dt||t|}t||||jdt}t||jdxsd}t|}t|||||t!|jd d  S) aQBuild an ``httpx.Auth``-compatible OAuth handler for an MCP server. Public API preserved for backwards compatibility. New code should use :func:`tools.mcp_oauth_manager.get_manager` so OAuth state is shared across config-time, runtime, and reconnect paths. Args: server_name: Server key in mcp_servers config (used for storage). server_url: MCP server endpoint URL. oauth_config: Optional dict from the ``oauth:`` block in config.yaml. Returns: An ``OAuthClientProvider`` instance, or None if the MCP SDK lacks OAuth support. zjMCP OAuth requested for '%s' but SDK auth types are not available. Install with: pip install 'mcp>=1.26.0'NzMCP OAuth for 'z': non-interactive environment and no cached tokens found. The OAuth flow requires browser authorization. Run `hermes mcp login z[` interactively first to complete initial authorization, then cached tokens will be reused.rfr!)r!rTi,)rr~rTredirect_handlercallback_handlerrT)_OAUTH_AVAILABLErrrrrprrrjr}rr/rr6r9r float) rrrrdrTr~ resolved_portrrs rbuild_oauth_authrls(  6   |!r "C -G  W%>%>%@& }!!, .H H  S'*,S1OgsO<GG,k:M-CGGN$;$Ct-]; '))cggi-.  rr)VrrK contextvarsrloggingr-r8rr@rrmrFrr/ contextlibr http.serverrrpathlibrtypingr urllib.parserr r+r getLoggerrrrmcp.client.authr mcp.shared.authr r rrr,rpydanticrr8rrrb__annotations__ ContextVarrr frozensetr^rNr0r3r;rErFrLrSrgrkrrprsryr|rrrZrrrXtyper r6r:r9rJrcrjrpr}rrrrrrs!F    %:+.   8 $  M3S|S S4Z>T[=S=S $>:=SK 3: F"=#*$    C  D   / / 0 04&TdTk"d"$"4"TR,R,t$dDj 1$X^^C$J^B6%S4Z"86*}}@Q[4Q[DQ[x&*>>td"> >,,0. . (. .b,t,3,3,0??)>?<Z !Z Z+Z ZD!%:::+:" :E!M LLKLM  Fs$5G* H*HHHH