code-puppy 0.0.892__tar.gz → 0.0.893__tar.gz

{code_puppy-0.0.892 → code_puppy-0.0.893}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: code-puppy
-Version: 0.0.892
+Version: 0.0.893
 Summary: Code generation agent
 Project-URL: repository, https://github.com/mpfaffenberger/code_puppy
 Project-URL: HomePage, https://github.com/mpfaffenberger/code_puppy

{code_puppy-0.0.892 → code_puppy-0.0.893}/code_puppy/mcp_/http_auth.py

@@ -37,4 +37,13 @@ def http_auth(config: dict, url: str, headers: dict | None) -> OAuth | None:
         raise ValueError(t("mcp.oauth.https_required"))
     if not parsed.hostname or parsed.username or parsed.password:
         raise ValueError(t("mcp.oauth.https_required"))
-    return OAuth(client_name="Code Puppy", callback_host="127.0.0.1")
+    # Register as a public client (RFC 8252 §8.4): a CLI cannot keep a secret,
+    # and PKCE already protects the code exchange. Left unset, servers default
+    # to client_secret_basic, and the MCP SDK then sends the Basic header *and*
+    # client_id in the body; strict servers (mcp.cloudflare.com) reject that
+    # token request as "multiple authentication methods".
+    return OAuth(
+        client_name="Code Puppy",
+        callback_host="127.0.0.1",
+        additional_client_metadata={"token_endpoint_auth_method": "none"},
+    )

{code_puppy-0.0.892 → code_puppy-0.0.893}/code_puppy/models_dev_parser.py

@@ -554,9 +554,8 @@ def get_registry() -> Optional[ModelsDevRegistry]:
 
     This serves the model-resolution path (``config.get_model_max_output_tokens``),
     which runs at startup and on every model switch, so it must never touch the
-    network: a plain ``hi`` would otherwise phone models.dev, and the CI egress
-    guard (``tests/integration/test_network_traffic_monitoring.py``) blocks
-    every release over it. The interactive ``/add_model`` and
+    network: a plain ``hi`` would otherwise phone models.dev (pinned by
+    ``tests/test_models_dev_registry_cache.py``). The interactive ``/add_model`` and
     ``/refresh_models`` commands build their own live ``ModelsDevRegistry()``
     on demand, so the snapshot only ever lags until the user asks for fresh
     data. The first caller pays the parse cost once; everyone after reuses

{code_puppy-0.0.892 → code_puppy-0.0.893}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "code-puppy"
-version = "0.0.892"
+version = "0.0.893"
 description = "Code generation agent"
 readme = "README.md"
 requires-python = ">=3.11,<3.15"