Add project-scoped OAuth attach flow

tests/test_project_attach_oauth.py

@@ -0,0 +1,58 @@
+#!/usr/bin/env python3
+"""Smoke-test existing-project OAuth attachment for folder bootstrap."""
+
+import importlib.util
+import pathlib
+import sys
+
+
+PROJECT_ID = "11111111-1111-1111-1111-111111111111"
+
+
+def load_module():
+    script_path = pathlib.Path(__file__).resolve().parents[1] / "resources" / "scripts" / "napseer_mcp_server.py"
+    sys.path.insert(0, str(script_path.parent))
+    spec = importlib.util.spec_from_file_location("napseer_mcp_server_project_attach_test", script_path)
+    module = importlib.util.module_from_spec(spec)
+    assert spec and spec.loader
+    spec.loader.exec_module(module)
+    return module
+
+
+def run():
+    mod = load_module()
+    saves = []
+
+    def save_auth(updates):
+        saves.append(dict(updates))
+
+    mod.oauth_loopback_authorize = lambda args: {
+        "api_base_url": "https://api.example.test",
+        "access_token": "oauth-token",
+        "expires_in": 3600,
+        "scope": args["scope"],
+        "project_id": PROJECT_ID,
+    }
+    mod.save_auth_file_credentials = save_auth
+    mod.request_json = lambda method, path: {
+        "id": PROJECT_ID,
+        "slug": "existing-project",
+        "name": "Existing Project",
+        "encryption_state": "plaintext",
+    }
+
+    result = mod.operator_loopback_login({"open_browser": False})
+
+    assert saves[0]["token"] == "oauth-token"
+    assert saves[0]["project_id"] == PROJECT_ID
+    assert saves[0]["account_mode"] == "operator_project"
+    assert "napseer.projects.read" in saves[0]["oauth_scope"]
+    assert saves[1]["project_slug"] == "existing-project"
+    assert result["project_id"] == PROJECT_ID
+    assert result["project"]["name"] == "Existing Project"
+
+    print("ok: project attach OAuth smoke passed")
+
+
+if __name__ == "__main__":
+    run()