homeassistant-ai/ha-mcp

Largest clones in the code

• 714 lines in 2 placespython4,040 tokens
  homeassistant-addon-webhook-proxy-dev/mcp_proxy_dev/oauth_indirect.py:1–714·homeassistant-addon-webhook-proxy/mcp_proxy/oauth_indirect.py:1–714

  1"""ha_auth-mode OAuth indirection in front of Home Assistant core.
  2
  3The proxy-owned authorize and token routes keep client endpoint caches stable
  4while Home Assistant core remains the authorization server. This module also
  5validates cross-origin Client ID Metadata Documents before translating their
  6client identities into the same-origin form accepted by core.
  7
  8MIRROR: this module is the near-verbatim twin of
  9``custom_components/ha_mcp_tools/oauth_ha_auth.py``. Keep behavioural changes
  10on the two sides in step. This pair has exactly TWO intended deltas. The
  

  First 10 of 714 lines.

• 361 lines in 2 placespython2,058 tokens
  homeassistant-addon-webhook-proxy-dev/mcp_proxy_dev/oauth.py:396–756·homeassistant-addon-webhook-proxy/mcp_proxy/oauth.py:396–756

  396HEARTBEAT_FILE = Path("/config/.mcp_proxy_dev_heartbeat")
  397_HEARTBEAT_MAX_AGE = 90.0  # three missed 30-second touches
  398# Only the NEGATIVE verdict is cached (#2218 review): a clean shutdown deletes
  399# the heartbeat file but cannot clear a cache in the integration process, so a
  400# cached True would keep the surface serving after the stop. A fresh stat per
  401# request while alive is microseconds in the executor; the cache exists so an
  402# anonymous flood against a STOPPED install does not stat per request.
  403#
  404# The lease MUST stay shorter than start.py's `_probe_oauth_active` delay
  405# (2 s between 3 attempts): that probe drives a DESTRUCTIVE path — it tears
  

  First 10 of 361 lines.

• 333 lines in 2 placespython2,050 tokens
  homeassistant-addon-webhook-proxy-dev/mcp_proxy_dev/oauth_autoapprove.py:269–601·homeassistant-addon-webhook-proxy/mcp_proxy/oauth_autoapprove.py:269–601

  269def __init__(self, hass: HomeAssistant) -> None:
  270    """Bind the view to the HA instance; liveness is resolved per request."""
  271    self._hass = hass
  272
  273async def get(self, request: web.Request) -> web.Response:
  274    """Dispatch an authorization request to the currently active mode."""
  275    if not await _addon_alive(self._hass):
  276        return _json_not_found()
  277    data = _domain_data(self._hass)
  278    if data is None:
  

  First 10 of 333 lines.