Add Streamable HTTP OAuth and core Smolify MCP - #277
Closed
yxlyx wants to merge 10 commits into
Closed
Conversation
Add native remote MCP transport with JSON and SSE responses, session handling, security limits, and workspace consent integration. Implement OAuth discovery, dynamic registration, PKCE login, persisted token refresh, and CLI support for remote servers. Connect Smolify as an optional core documentation service. Co-Authored-By: Codegraff <blackfloofie@codegraff.com>
Complete protected-resource and authorization-server discovery, enforce PKCE and protocol negotiation, preserve home-less MCP config commands, and split oversized MCP/main sources. Co-Authored-By: Codegraff <blackfloofie@codegraff.com>
Disable the hosted core Smolify connection for deterministic protocol and PTY integration tests. Co-Authored-By: Codegraff <blackfloofie@codegraff.com>
Print captured graff stderr when the offline integration process exits early so CI reports the underlying failure. Co-Authored-By: Codegraff <blackfloofie@codegraff.com>
Open the identity directory with a real readable descriptor before applying permissions, avoiding the Linux O_PATH fchmod panic exposed by control-protocol CI. Co-Authored-By: Codegraff <blackfloofie@codegraff.com>
Align Codex transport and parallel-title tests with the Responses API behavior that omits unsupported top-level max_output_tokens fields. Co-Authored-By: Codegraff <blackfloofie@codegraff.com>
Drop the flagged-off limyuxi_* birthday easter eggs (glitter + ASCII dragon spinners, pastel-pink auto-theme, cwd gating) that have been disabled since the default theme/spinner became universal. The PastelPink theme stays available as a normal /theme option. No behavioral change — the flag was already false. Co-Authored-By: Codegraff <blackfloofie@codegraff.com>
Drop the hidden spinner render flag, PTY test and CI wiring, and the stale debugging references. Co-Authored-By: Codegraff <blackfloofie@codegraff.com>
Keep the variant outside the public animation pool while adding per-frame visual and text variation for its intended local profile. Preserve the existing normal-spinner opt-out and cover the gate and renderer with tests. Co-Authored-By: Codegraff <blackfloofie@codegraff.com>
Owner
|
Closing as abandoned vs tip. Smolify is not a reserved core MCP. This July Streamable-HTTP / OAuth / core-Smolify rewrite does not apply to current MCP (ADR 0029 / 0035 / 0050). #250 stays parked — reopen a fresh PR against tip if Streamable HTTP + OAuth is still wanted without pinning Smolify as core. |
yermakoffivan
pushed a commit
to yermakoffivan/codegraff
that referenced
this pull request
Aug 31, 2026
…justrach#694 Record the three product merges on the new release branch, remap the TLS-generation ADR to 0048 so 0042 stays TUI claims, and leave justrach#277 / justrach#200 parked.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
graff mcp add <name> --url ..., static headers,graff mcp login <name>, and runtime/mcp add ... --url ...GRAFF_NO_SMOLIFY=1as the offline/privacy opt-outSecurity
Validation
zig build testzig buildzig build -Dtarget=x86_64-windowsgit diff --checkCloses #250