stacklok / toolhive / 40766101900

73%

Build Type

push

github

Committed by web-flow

Commit Message

Add --scopes flag to thv llm setup and config set (#6964)

* Add --scopes flag to thv llm setup and config set

The gateway token is requested with only the default OIDC scopes
(openid, offline_access), and there was no way to ask for more. A gateway
or a companion API that requires a specific scope (for example a
requiredScope on the token issuer) rejected the token, and the only
workaround was editing config.yaml by hand.

--scopes adds scopes on top of the defaults, so the defaults cannot be
dropped by accident. Omitting the flag keeps the current scopes, and an
empty value resets to the defaults. Re-running with a different list
replaces the earlier extras rather than accumulating them.

A refresh-token grant returns only the scopes the token was first issued
with, so a changed list reaches a signed-in user only through a fresh
login. setup and config set therefore clear the cached tokens when the
scopes change, and leave them alone when they do not, so re-running the
same command stays browser-free.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

* Regenerate CLI docs for the --scopes flag

The generated CLI reference did not include the new flag, which fails the
generated-documentation check. The flag help now also states that a changed
scope list clears the cached tokens, rather than asking the user to sign in
again.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

* Wrap the --scopes help text to satisfy the line-length lint

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

* Request offline_access plus the given scopes and clear tokens after validation

--scopes no longer forces openid. It requests offline_access, which the
provider needs to return a refresh token, followed by the scopes given, so a
hand-edited scope list without openid keeps working. An empty value stores
nothing and the default scopes apply again.

Clearing the cached tokens for a changed scope list moves into pkg/llm so both
commands decide... (continued)

Coverage Stats

57 of 67 new or added lines in 3 files covered. (85.07%)

13 existing lines in 4 files now uncovered.

90636 of 125779 relevant lines covered (72.06%)

130.83 hits per line