fix: inject OAuth token into MCP server headers at runtime

ToolRouter now accepts hf_token and injects Authorization header
into MCP server configs per-session. Config no longer needs HF_TOKEN
at load time — auth is added when the session's ToolRouter is created.

agent/core/tools.py

@@ -135,7 +135,7 @@ class ToolRouter:
     Based on codex-rs/core/src/tools/router.rs
     """
 
-    def __init__(self, mcp_servers: dict[str, MCPServerConfig]):
+    def __init__(self, mcp_servers: dict[str, MCPServerConfig], hf_token: str | None = None):
         self.tools: dict[str, ToolSpec] = {}
         self.mcp_servers: dict[str, dict[str, Any]] = {}
 
@@ -146,7 +146,10 @@ class ToolRouter:
         if mcp_servers:
             mcp_servers_payload = {}
             for name, server in mcp_servers.items():
-                mcp_servers_payload[name] = server.model_dump()
+                data = server.model_dump()
+                if hf_token:
+                    data.setdefault("headers", {})["Authorization"] = f"Bearer {hf_token}"
+                mcp_servers_payload[name] = data
             self.mcp_client = Client({"mcpServers": mcp_servers_payload})
         self._mcp_initialized = False
 

backend/session_manager.py

@@ -131,7 +131,7 @@ class SessionManager:
 
         def _create_session_sync():
             t0 = _time.monotonic()
-            tool_router = ToolRouter(self.config.mcpServers)
+            tool_router = ToolRouter(self.config.mcpServers, hf_token=hf_token)
             session = Session(
                 event_queue, config=self.config, tool_router=tool_router,
                 hf_token=hf_token,

configs/main_agent_config.json

@@ -9,10 +9,7 @@
   "_mcpServers_disabled": {
     "hf-mcp-server": {
       "transport": "http",
-      "url": "https://huggingface.co/mcp?login",
-      "headers": {
-        "Authorization": "Bearer ${HF_TOKEN:-}"
-      }
+      "url": "https://huggingface.co/mcp?login"
     }
   }
 }