Kodiqa Agent

v3.10.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 1mo AI Agents & Assistants

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ai-coding-agent claude cli coding-assistant developer-tools ollama

+2 more

openai python

Affected surfaces

auth

Summary

AI summary

OAuth 2.1 login added for remote MCP servers with interactive and machine‑to‑machine flows.

Type	Severity	Summary	CVE
Feature	Medium	Adds OAuth 2.1 login for remote MCP servers with interactive and machine-to-machine flows. Adds OAuth 2.1 login for remote MCP servers with interactive and machine-to-machine flows. Source: llm_adapter@2026-06-07 Confidence: high	—
Feature	Medium	Adds token caching and auto-refresh for OAuth credentials under ~/.kodiqa/oauth/ with 0600 permissions. Adds token caching and auto-refresh for OAuth credentials under ~/.kodiqa/oauth/ with 0600 permissions. Source: llm_adapter@2026-06-07 Confidence: high	—

Full changelog

Completes Remote MCP + OAuth.

OAuth 2.1 login for remote MCP servers. Two flows:
- Interactive — opens your browser (authorization-code + PKCE), with server discovery and dynamic client registration:
```
/mcp add linear https://mcp.linear.app/mcp --oauth
```
- Machine-to-machine (no browser):
```
/mcp add api https://example.com/mcp --oauth-client-id env:CID --oauth-client-secret env:CSEC
```
- Optional --scope "read write".
Token caching + auto-refresh — cached under ~/.kodiqa/oauth/ (0600), reused across sessions, refreshed before expiry and transparently on a 401.

Full coverage of PKCE, discovery, dynamic registration, the callback server, token exchange/refresh, both grants, a deterministic interactive end-to-end (real callback server + fake browser), and 401 refresh-and-retry. 409 total; ruff + CI green.

Only the live browser login is user-verified; everything around it is tested.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Kodiqa Agent

Get notified when new releases ship.

About Kodiqa Agent