testmcpy-oauth-probe 0.1.0__tar.gz

testmcpy_oauth_probe-0.1.0/PKG-INFO

@@ -0,0 +1,66 @@
+Metadata-Version: 2.4
+Name: testmcpy-oauth-probe
+Version: 0.1.0
+Summary: Headless, vendor-neutral OAuth and MCP interoperability probe
+Author: Amin Ghadersohi
+License-Expression: Apache-2.0
+Project-URL: Homepage, https://github.com/preset-io/testmcpy
+Project-URL: Repository, https://github.com/preset-io/testmcpy
+Project-URL: Issues, https://github.com/preset-io/testmcpy/issues
+Keywords: oauth,mcp,ci,smoke-test,interoperability
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Software Development :: Testing
+Requires-Python: <3.13,>=3.10
+Description-Content-Type: text/markdown
+Requires-Dist: httpx<1.0.0,>=0.27.0
+Requires-Dist: pyyaml<7.0,>=6.0
+
+# testmcpy-oauth-probe
+
+The independently installable, headless distribution of testmcpy's OAuth/MCP
+interoperability probe. It depends on **HTTPX and PyYAML only** — installing it
+into a release pipeline will not pull in an agent runtime, a web server or an
+ORM, and so cannot conflict with whatever that pipeline already pins.
+
+```bash
+pip install "testmcpy-oauth-probe==0.1.0"
+```
+
+This distribution owns the `testmcpy-oauth` console script. The main `testmcpy`
+wheel depends on this one and exposes the same core as `testmcpy auth`; it does
+not ship a second copy of the package, so installing both is safe.
+
+It reports observable interoperability and configured policy outcomes. It is
+not a formal OAuth or MCP compliance certification.
+
+```bash
+testmcpy-oauth validate --config auth-smoke.yaml
+testmcpy-oauth schema --kind report > oauth-smoke-report-v1.schema.json
+testmcpy-oauth check --config auth-smoke.yaml --format json --output report.json
+```
+
+`--config` and `--manifest` are accepted interchangeably.
+
+`--service`, `--region`, `--revision` and `--deployment-id` are report labels
+recorded in the `correlation` block. They are never compared against the
+deployed target; the probe does not assert the running revision.
+
+## Versioning
+
+Versioned independently of `testmcpy`, because consumers pin it into release
+pipelines and rely on its dependency closure staying at two libraries. The
+manifest and report schemas carry their own version strings
+(`testmcpy.io/oauth-smoke/v1`, `testmcpy.io/oauth-smoke-report/v1`) and do not
+move with this package's version.
+
+## Provenance
+
+CI builds publish a `testmcpy-oauth-probe-<full Git SHA>` artifact containing
+the wheel, source archive, `SOURCE_COMMIT`, and `SHA256SUMS`. Pin the full
+commit/artifact name, confirm `SOURCE_COMMIT`, and verify the checksums before
+installation.

testmcpy_oauth_probe-0.1.0/README.md

@@ -0,0 +1,44 @@
+# testmcpy-oauth-probe
+
+The independently installable, headless distribution of testmcpy's OAuth/MCP
+interoperability probe. It depends on **HTTPX and PyYAML only** — installing it
+into a release pipeline will not pull in an agent runtime, a web server or an
+ORM, and so cannot conflict with whatever that pipeline already pins.
+
+```bash
+pip install "testmcpy-oauth-probe==0.1.0"
+```
+
+This distribution owns the `testmcpy-oauth` console script. The main `testmcpy`
+wheel depends on this one and exposes the same core as `testmcpy auth`; it does
+not ship a second copy of the package, so installing both is safe.
+
+It reports observable interoperability and configured policy outcomes. It is
+not a formal OAuth or MCP compliance certification.
+
+```bash
+testmcpy-oauth validate --config auth-smoke.yaml
+testmcpy-oauth schema --kind report > oauth-smoke-report-v1.schema.json
+testmcpy-oauth check --config auth-smoke.yaml --format json --output report.json
+```
+
+`--config` and `--manifest` are accepted interchangeably.
+
+`--service`, `--region`, `--revision` and `--deployment-id` are report labels
+recorded in the `correlation` block. They are never compared against the
+deployed target; the probe does not assert the running revision.
+
+## Versioning
+
+Versioned independently of `testmcpy`, because consumers pin it into release
+pipelines and rely on its dependency closure staying at two libraries. The
+manifest and report schemas carry their own version strings
+(`testmcpy.io/oauth-smoke/v1`, `testmcpy.io/oauth-smoke-report/v1`) and do not
+move with this package's version.
+
+## Provenance
+
+CI builds publish a `testmcpy-oauth-probe-<full Git SHA>` artifact containing
+the wheel, source archive, `SOURCE_COMMIT`, and `SHA256SUMS`. Pin the full
+commit/artifact name, confirm `SOURCE_COMMIT`, and verify the checksums before
+installation.

testmcpy_oauth_probe-0.1.0/pyproject.toml

@@ -0,0 +1,48 @@
+[build-system]
+requires = ["setuptools>=68", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "testmcpy-oauth-probe"
+# Versioned independently of `testmcpy`. This distribution is release-pipeline
+# infrastructure: consumers pin it exactly and expect its dependency closure to
+# stay at two libraries, so it must not inherit testmcpy's release cadence.
+version = "0.1.0"
+description = "Headless, vendor-neutral OAuth and MCP interoperability probe"
+readme = "README.md"
+authors = [{name = "Amin Ghadersohi"}]
+requires-python = ">=3.10,<3.13"
+license = "Apache-2.0"
+keywords = ["oauth", "mcp", "ci", "smoke-test", "interoperability"]
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Intended Audience :: Developers",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Topic :: Software Development :: Testing",
+]
+# Two libraries, deliberately. Consumers install this into release pipelines
+# that pin conflicting versions of the agent/server stack (sqlalchemy, fastmcp),
+# so anything added here has to survive being resolved against someone else's
+# lockfile. `unit_tests/test_oauth_probe_packaging.py` enforces the closure.
+dependencies = [
+    "httpx>=0.27.0,<1.0.0",
+    "pyyaml>=6.0,<7.0",
+]
+
+[project.scripts]
+testmcpy-oauth = "testmcpy_oauth_probe.cli:main"
+
+[project.urls]
+Homepage = "https://github.com/preset-io/testmcpy"
+Repository = "https://github.com/preset-io/testmcpy"
+Issues = "https://github.com/preset-io/testmcpy/issues"
+
+[tool.setuptools.packages.find]
+where = ["."]
+include = ["testmcpy_oauth_probe*"]
+
+[tool.setuptools.package-data]
+testmcpy_oauth_probe = ["schemas/*.json"]

testmcpy_oauth_probe-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

testmcpy_oauth_probe-0.1.0/testmcpy_oauth_probe/__init__.py

@@ -0,0 +1,44 @@
+"""Typed public API for the headless OAuth/MCP probe."""
+
+from testmcpy_oauth_probe.config import (
+    ConfigError,
+    load_manifest,
+    loads_manifest,
+    manifest_json_schema,
+    report_json_schema,
+)
+from testmcpy_oauth_probe.models import (
+    CONFIG_SCHEMA,
+    REPORT_SCHEMA,
+    AuthFlow,
+    CapabilityPolicy,
+    CheckResult,
+    CheckStatus,
+    Manifest,
+    ProbeReport,
+    RunReport,
+    TargetConfig,
+)
+from testmcpy_oauth_probe.runner import ProbeRunner, run_manifest
+from testmcpy_oauth_probe.transport import HttpTransport
+
+__all__ = [
+    "CONFIG_SCHEMA",
+    "REPORT_SCHEMA",
+    "AuthFlow",
+    "CapabilityPolicy",
+    "CheckResult",
+    "CheckStatus",
+    "ConfigError",
+    "Manifest",
+    "HttpTransport",
+    "ProbeReport",
+    "ProbeRunner",
+    "RunReport",
+    "TargetConfig",
+    "load_manifest",
+    "loads_manifest",
+    "manifest_json_schema",
+    "report_json_schema",
+    "run_manifest",
+]

testmcpy_oauth_probe-0.1.0/testmcpy_oauth_probe/__main__.py

@@ -0,0 +1,3 @@
+from testmcpy_oauth_probe.cli import main
+
+raise SystemExit(main())

testmcpy_oauth_probe-0.1.0/testmcpy_oauth_probe/cli.py

@@ -0,0 +1,152 @@
+"""Minimal argparse CLI, independent of testmcpy's UI/LLM dependencies."""
+
+from __future__ import annotations
+
+import argparse
+import asyncio
+import sys
+from collections.abc import Sequence
+from pathlib import Path
+
+from testmcpy_oauth_probe.config import (
+    ConfigError,
+    dump_manifest_schema,
+    dump_report_schema,
+    load_manifest,
+    loads_manifest,
+)
+from testmcpy_oauth_probe.models import CONFIG_SCHEMA, Correlation
+from testmcpy_oauth_probe.reporters import to_human, to_json, to_jsonl, to_junit
+from testmcpy_oauth_probe.runner import ProbeRunner
+
+# `--config` stays first so it remains the name in `--help` output and in every
+# existing pipeline; `--manifest` is an accepted alias. argparse stores both
+# under `dest="config"`.
+_MANIFEST_FLAGS = ("--config", "--manifest")
+_MANIFEST_KWARGS = {
+    "dest": "config",
+    "metavar": "PATH",
+    "help": "Path to the versioned probe manifest (YAML or JSON)",
+}
+
+
+def build_parser() -> argparse.ArgumentParser:
+    parser = argparse.ArgumentParser(
+        prog="testmcpy-oauth",
+        description="Vendor-neutral OAuth/MCP interoperability probe (not formal certification)",
+    )
+    subparsers = parser.add_subparsers(dest="command", required=True)
+    validate = subparsers.add_parser("validate", help="Validate a manifest without network access")
+    # Everything else — the docs, the schema name, the Auth Smoke page, this
+    # tool's own help text — calls the file a manifest, so `--manifest` is the
+    # flag people reach for first. Accept both rather than make them guess.
+    validate.add_argument(*_MANIFEST_FLAGS, required=True, **_MANIFEST_KWARGS)
+    schema = subparsers.add_parser("schema", help="Print a versioned JSON Schema")
+    schema.add_argument("--kind", choices=("manifest", "report"), default="manifest")
+    schema.set_defaults(command="schema")
+    check = subparsers.add_parser("check", help="Run configured targets headlessly")
+    check.add_argument(*_MANIFEST_FLAGS, required=True, **_MANIFEST_KWARGS)
+    check.add_argument("--target", action="append", dest="targets")
+    check.add_argument("--profile")
+    check.add_argument("--format", choices=("human", "json", "jsonl"), default="human")
+    check.add_argument("--output", default="-")
+    check.add_argument("--junit")
+    check.add_argument("--run-id")
+    check.add_argument("--service", help="Report label only: recorded in correlation.service.")
+    check.add_argument("--region", help="Report label only: recorded in correlation.region.")
+    check.add_argument(
+        "--revision",
+        help=(
+            "Report label only: recorded in correlation.revision and never "
+            "compared against the deployed revision. This is not a revision assertion."
+        ),
+    )
+    check.add_argument(
+        "--deployment-id", help="Report label only: recorded in correlation.deployment_id."
+    )
+    discover = subparsers.add_parser("discover", help="Run discovery without credentials")
+    discover.add_argument("--url", required=True)
+    discover.add_argument("--format", choices=("human", "json", "jsonl"), default="human")
+    return parser
+
+
+def _write(path: str, content: str) -> None:
+    if path == "-":
+        sys.stdout.write(content)
+    else:
+        Path(path).write_text(content, encoding="utf-8")
+
+
+def _render(report_format: str, report: object) -> str:
+    from testmcpy_oauth_probe.models import RunReport
+
+    assert isinstance(report, RunReport)
+    if report_format == "json":
+        return to_json(report)
+    if report_format == "jsonl":
+        return to_jsonl(report)
+    return to_human(report)
+
+
+async def _run(args: argparse.Namespace) -> int:
+    if args.command == "discover":
+        manifest = loads_manifest(
+            f"""schema: {CONFIG_SCHEMA}
+targets:
+  discovery:
+    mcp_url: {args.url!r}
+    oauth:
+      flow: none
+      # `discover` is advertised as read-only reconnaissance. error_probe
+      # defaults to true and now applies to every flow, so opt out explicitly
+      # rather than POST an unsupported grant to someone's token endpoint.
+      error_probe: false
+"""
+        )
+        report = await ProbeRunner().run_manifest(manifest)
+        _write("-", _render(args.format, report))
+        return report.exit_code
+    manifest = load_manifest(args.config)
+    report = await ProbeRunner().run_manifest(
+        manifest,
+        target_ids=args.targets,
+        profile=args.profile,
+        run_id=args.run_id,
+        correlation_override=Correlation(
+            service=args.service,
+            region=args.region,
+            revision=args.revision,
+            deployment_id=args.deployment_id,
+        ),
+    )
+    _write(args.output, _render(args.format, report))
+    if args.junit:
+        _write(args.junit, to_junit(report))
+    return report.exit_code
+
+
+def main(argv: Sequence[str] | None = None) -> int:
+    parser = build_parser()
+    args = parser.parse_args(argv)
+    try:
+        if args.command == "schema":
+            print(dump_report_schema() if args.kind == "report" else dump_manifest_schema())
+            return 0
+        if args.command == "validate":
+            manifest = load_manifest(args.config)
+            print(
+                f"valid {manifest.schema} manifest: {len(manifest.targets)} target(s), "
+                f"{len(manifest.profiles)} profile(s)"
+            )
+            return 0
+        return asyncio.run(_run(args))
+    except (ConfigError, ValueError) as exc:
+        print(f"configuration error: {exc}", file=sys.stderr)
+        return 2
+    except KeyboardInterrupt:
+        print("interrupted", file=sys.stderr)
+        return 2
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())