feat: Add Enterprise Managed Authorization (SEP-990) support

.claude/skills/kdoc/SKILL.md

@@ -0,0 +1,81 @@
+---
+name: kdoc
+description: "Add KDoc documentation to Kotlin public API. Use whenever the user asks to document Kotlin code, add KDoc, generate API docs, mentions undocumented public declarations, or wants to improve existing documentation. Also trigger when the user says 'add docs', 'document this class/file/module', 'write KDoc', or asks about missing documentation in Kotlin code."
+---
+
+# KDoc Generator
+
+Add KDoc to all public Kotlin declarations (classes, interfaces, objects, functions, properties, enums, type aliases, annotations — including `@Deprecated`). Read the implementation, not just the signature, to write accurate descriptions.
+
+## Tag placement
+
+| Where the declaration lives | Tag |
+|---|---|
+| Primary-ctor `val` / `var` (public, internal, or protected) | `@property` in class KDoc |
+| Primary-ctor `name: Type` (no `val`/`var`) | `@param` in class KDoc |
+| Primary-ctor `private val` / `private var` | `@param` in class KDoc |
+| Body of class/object/interface/sealed interface | inline `/** */` above the declaration |
+| Function parameter | `@param` |
+| Non-Unit return type | `@return` |
+
+## Style
+
+- Summary: one concise sentence, third-person verb ("Creates", "Returns", "Represents"). Expand to 2-3 sentences only when genuinely complex.
+- **Example block**: mandatory for DSL builders (show full receiver-scope usage); add for complex functions or non-obvious extension functions; skip for one-liners and simple getters.
+- KDoc links (`[ClassName]`, `[methodName]`) only where they add navigational value.
+- Don't write `@throws` or "suspend" notes.
+- Rewrite existing KDoc if incomplete or low quality.
+
+## Examples
+
+**Class with mixed primary-constructor parameters:**
+
+````kotlin
+/**
+ * Manages active client sessions and their lifecycle.
+ *
+ * @property maxSessions upper limit on concurrent sessions
+ * @param scope coroutine scope for session lifecycle tasks
+ * @param secret used internally for session token signing
+ */
+public class SessionManager(
+    public val maxSessions: Int,         // public val  → @property
+    scope: CoroutineScope,                // no val/var → @param
+    private val secret: ByteArray,        // private val → @param
+)
+````
+
+**Body and interface properties (inline `/** */`):**
+
+````kotlin
+/** Represents an entity that includes additional metadata. */
+public interface WithMeta {
+    /** Optional metadata attached to this entity. */
+    public val meta: JsonObject?
+}
+
+public class Connection(public val id: String) {
+    /** Capabilities negotiated during the handshake, or `null` before initialize completes. */
+    public val capabilities: ServerCapabilities? get() = ...
+}
+````
+
+**Function with Example block:**
+
+````kotlin
+/**
+ * Registers a new tool with the given handler.
+ *
+ * Example:
+ * ```kotlin
+ * server.addTool(name = "echo", description = "Echoes input back") { request ->
+ *     CallToolResult(content = listOf(TextContent("Echo: ${request.arguments}")))
+ * }
+ * ```
+ *
+ * @param name unique tool identifier
+ * @param description human-readable tool description
+ * @param handler suspend function invoked when the tool is called
+ * @return the registered tool definition
+ */
+````

.claude/skills/mcp-docs/SKILL.md

@@ -0,0 +1,76 @@
+---
+name: mcp-docs
+description: >
+  Fetch live MCP specification and docs from modelcontextprotocol.io. Training data may be
+  outdated — default to using this skill when the query touches MCP protocol in any way.
+  Trigger for: implementing or debugging MCP features (sampling, elicitation, completion, tools,
+  resources, prompts, transports); SEPs or spec requirements; MCP transport behavior (SSE,
+  Streamable HTTP, reconnection, retry); authorization/OAuth; conformance test failures;
+  capability negotiation; message schemas. Skip only for pure Kotlin, build system, or
+  refactoring tasks with zero MCP protocol dependency. When in doubt, trigger.
+user_invocable: true
+---
+
+# MCP Documentation Skill
+
+Provides access to the official MCP specification and docs from modelcontextprotocol.io. The spec evolves faster than training data — always consult live documentation for protocol specifics like message schemas, required fields, capability negotiation, error handling, and transport requirements.
+
+## When to use
+
+**Proactively** (without being asked):
+- Implementing a feature defined in the MCP spec
+- Reviewing code that implements MCP protocol behavior
+- Fixing conformance test failures
+
+**On demand** (user asks or invokes `/mcp-docs`):
+- Questions about how a specific MCP feature works
+- Clarifying spec ambiguities
+- Looking up SEPs (Specification Enhancement Proposals)
+
+## How to fetch documentation
+
+### Strategy: MCP tool first, llms.txt fallback
+
+**Step 1 — Try the MCP search tool.** If `search_model_context_protocol` is available, use it:
+
+```
+search_model_context_protocol(query: "<your search query>")
+```
+
+One call, semantically ranked results. Fastest path.
+
+**Step 2 — Fallback to llms.txt + WebFetch.** If the MCP tool is not available:
+
+1. Fetch the documentation index:
+   ```
+   WebFetch("https://modelcontextprotocol.io/llms.txt", "Return the full content as-is")
+   ```
+
+2. Identify the relevant page URL(s) from the index. Key sections:
+   - **Specification**: `specification/...` — protocol details, message formats, transports, lifecycle
+   - **SEPs**: `seps/...` — specification enhancement proposals
+   - **Learning**: `docs/learn/...` — architecture, concepts
+   - **Development**: `docs/develop/...` — building clients/servers
+
+3. Fetch the specific page:
+   ```
+   WebFetch("<page-url>", "Return the full content of this documentation page")
+   ```
+
+### Version handling
+
+Always use the latest spec version by default. Only use a specific version or draft when the user explicitly requests it (e.g., "check the 2025-03-26 spec" or "what does the draft say").
+
+### Search guidance
+
+- Protocol message formats, required fields, capability negotiation → **Specification** section
+- Feature motivation, design rationale → relevant **SEP**
+- High-level concepts and architecture → **Learning** resources
+- Use your judgment on query count. A field-level question may need one page; implementing a feature may need 2-3.
+
+## Presenting information
+
+- **Always cite sources.** Include links to spec pages used: `(source: <url>)`
+- **Spec over training data** for specific protocol details (schemas, fields, error codes, capabilities). Training data is fine for general MCP concepts.
+- **Preserve RFC 2119 language.** The spec uses MUST/SHOULD/MAY — keep this distinction when explaining requirements.
+- **Be concise.** Focus on the details relevant to the user's task. Avoid dumping entire spec pages — extract what matters for the specific question or implementation at hand.

.github/dependabot.yml

@@ -1,20 +1,109 @@
-# Configuration options:
-# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#about-the-dependabotyml-file
+# yaml-language-server: $schema=https://json.schemastore.org/dependabot-2.0.json
+# Configuration: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
 
 version: 2
+
 updates:
+  # Root Gradle project (includes buildSrc)
   - package-ecosystem: "gradle"
     directory: "/"
     schedule:
       interval: "weekly"
+      day: "monday"
+    commit-message:
+      prefix: "chore(deps):"
     labels:
       - "dependencies"
       - "kotlin"
+    open-pull-requests-limit: 10
+    groups:
+      ktor:
+        patterns:
+          - "io.ktor:*"
+      kotlinx:
+        patterns:
+          - "org.jetbrains.kotlinx:*"
+      kotlin:
+        patterns:
+          - "org.jetbrains.kotlin:*"
+      kotest:
+        patterns:
+          - "io.kotest:*"
+      testing:
+        patterns:
+          - "io.mockk:*"
+          - "dev.mokksy:*"
+          - "org.awaitility:*"
+          - "org.junit.jupiter:*"
+      infrastructure:
+        patterns:
+          - "io.netty:*"
+          - "io.github.oshai:*"
+          - "org.slf4j:*"
+      gradle-plugins:
+        patterns:
+          - "dev.detekt"
+          - "org.jetbrains.kotlinx.kover"
+          - "org.jlleitschuh.gradle.ktlint"
+          - "org.jetbrains.kotlinx.knit"
+          - "org.jetbrains.kotlinx.binary-compatibility-validator"
+          - "org.openapi.generator"
+          - "org.jetbrains.dokka:*"
+          - "com.vanniktech:*"
+
+  # Samples (independent Gradle builds)
+  - package-ecosystem: "gradle"
+    directories:
+      - "/samples/*"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    commit-message:
+      prefix: "chore(deps):"
+    labels:
+      - "dependencies"
+      - "kotlin"
+      - "samples"
+    open-pull-requests-limit: 10
+    groups:
+      other-dependencies:
+        patterns:
+          - "*"
+        exclude-patterns:
+          - "io.ktor*"
+          - "org.jetbrains.kotlin*"
+          - "io.modelcontextprotocol*"
+
+  # npm (integration tests)
+  - package-ecosystem: "npm"
+    directory: "/integration-test/src/jvmTest/typescript"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    commit-message:
+      prefix: "chore(deps):"
+    labels:
+      - "dependencies"
+      - "javascript"
+    open-pull-requests-limit: 10
+    groups:
+      all-dependencies:
+        patterns:
+          - "*"
 
+  # GitHub Actions
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "weekly"
+      day: "monday"
+    commit-message:
+      prefix: "chore(deps):"
     labels:
       - "dependencies"
       - "github-actions"
+    open-pull-requests-limit: 10
+    groups:
+      all-actions:
+        patterns:
+          - "*"

.github/workflows/apidocs.yaml

@@ -24,10 +24,7 @@ jobs:
 
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
-        with:
-          submodules: true  # Fetch Hugo themes (true OR recursive)
-          fetch-depth: 0    # Fetch all history for .GitInfo and .Lastmod
+      - uses: actions/checkout@v7
 
       - name: Set up JDK ${{ env.JAVA_VERSION }}
         uses: actions/setup-java@v5
@@ -37,17 +34,17 @@ jobs:
           cache: gradle
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v5
+        uses: gradle/actions/setup-gradle@v6
 
       - name: Generate Dokka Site
         run: |-
-          ./gradlew clean knit docs:classes docs:knitCheck dokkaGenerate
+          ./gradlew knit docs:classes docs:knitCheck dokkaGenerate
 
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v4
+        uses: actions/upload-pages-artifact@v5
         with:
           path: build/dokka/html
 
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5