Teacher-tool Agent

Authentication

1. Use scripts/credentials.py to retrieve the credential for the configured Teacher-tool origin. Never display, log, or place the token in a normal file.
2. If no credential exists, explain that browser approval is required and, after the user confirms, install the reviewed local dependency with python3 -m pip install -r scripts/requirements.txt, then run this already installed local file: python3 scripts/oauth_login.py --issuer https://cloudexp.net.
3. The helper opens the issuer's OAuth page using PKCE and stores the access token in the OS credential store. Do not download or execute any script from a URL.

API workflow