apps/server/src/auth/EnvironmentAuth.ts               | 163 ++++++++-
 apps/server/src/auth/McpOAuth.test.ts                 | 505 ++++++++++++++++++++++++++
 apps/server/src/auth/McpOAuth.ts                      | 603 ++++++++++++++++++++++++++++++++
 apps/server/src/auth/SessionStore.test.ts             |  14 +
 apps/server/src/auth/SessionStore.ts                  |   7 +
 apps/server/src/auth/mcpOAuthHtml.ts                  |  46 +++
 apps/server/src/auth/mcpOAuthHttp.ts                  | 159 +++++++++
 apps/server/src/mcp/McpHttpServer.test.ts             | 155 +++++++-
 apps/server/src/mcp/McpHttpServer.ts                  | 133 ++++---
 apps/server/src/mcp/McpInvocationContext.test.ts      |   2 +-
 apps/server/src/mcp/McpInvocationContext.ts           |  12 +-
 apps/server/src/mcp/McpToolAccess.race.test.ts        |   2 +-
 apps/server/src/mcp/McpToolAccess.test.ts             |  12 +-
 apps/server/src/mcp/McpToolAccess.ts                  |  25 +-
 apps/server/src/mcp/OrchestratorMcpService.test.ts    |  21 +-
 apps/server/src/mcp/OrchestratorMcpService.ts         |  13 +-
 apps/server/src/mcp/threadAccess.ts                   |   2 +-
 apps/server/src/mcp/toolkits/core.test.ts             |  74 +++-
 apps/server/src/mcp/toolkits/project/handlers.test.ts |   2 +-
 apps/server/src/server.ts                             |   4 +
 apps/web/src/components/auth/ConnectAgentSurface.tsx  | 317 +++++++++++++++++
 apps/web/src/routeTree.gen.ts                         |  21 ++
 apps/web/src/routes/__root.tsx                        |   2 +-
 apps/web/src/routes/connect-agent.tsx                 |   7 +
 apps/web/vite.config.ts                               |   7 +-
 docs/internals/environment-auth.md                    |  31 +-
 packages/contracts/src/auth.ts                        | 180 ++++++++++
 packages/contracts/src/environmentHttp.ts             |  66 ++++
 packages/shared/src/devProxy.ts                       |  13 +-
 29 files changed, 2531 insertions(+), 67 deletions(-)