Merge branch 'main' into feature/reflexive-core

Merge branch 'main' into feature/provenance-ledger

🤖 Implement Story 4: Reflexive Core

🤖 Implement Story 3: Provenance Ledger

🤖 Implement Story 2: Inter-Agent Contract Module

Merge branch 'jlowin:main' into main

switch from `pyright` to `ty` (#1545)

feat: introduce fastmcp.json configuration system (#1517)

feat: Add --workspace flag to fastmcp install cursor (#1522)

Phase 1 : Pluggable Policy Engine — design an interface that allows policies to be loaded/unloaded at runtime; each policy should define machine-checkable invariants and decision logic.

Add mounted_components_raise_on_load_error setting for debugging (#1534)

Add OAuth proxy that allows authentication with social IDPs without DCR support (#1434)

Remove trailing slash in unit tests (#1535)

Improve stdio and mcp_config clean-up (#1444)

Fix breaking change: restore output_schema=False compatibility (#1482)

Support importing custom_route endpoints when mounting servers (#1470)

Optimize OpenAPI payload size by 46% (#1452)

Add documentation for get_access_token() dependency function (#1446)

Ensure transformed tools generate structured content (#1443)

Clean up complexity from PR #1426 (#1435)

Enable Protected Resource Metadata to provide resource_name and resou… (#1371)

fixes #1398: Add JWT claims to AccessToken (#1399)

Fix OpenAPI transitive references and performance (#1372) (#1426)

Fix OpenAPI allOf handling at requestBody top level (#1378) (#1425)

Ensure resource + template names are properly prefixed when importing/mounting (#1423)

Increase performance test threshold to 100ms (#1406)

Improve redirect handling to address 307's (#1387)

Fix client-side logging bug #1394 (#1397)

Add comprehensive tests for utilities.components module (#1395)

Add remote auth provider tests (#1351)

Support factory functions in fastmcp run (#1384)

Add async support to client_factory in FastMCPProxy (#1286) (#1375)

Fix server_version field in inspect manifest (#1383)

Remove unused arg (#1382)

Manually set _key after model_copy (#1357)

Fix method-bound tools (#1360)

Introduce `RemoteAuthProvider` for cleaner external identity provider integration, update docs (#1346)

Add comprehensive OAuth 2.1 authentication system with WorkOS integration (#1327)

Ensure validation errors are raised when masked (#1330)

Change server flag to --name (#1248)

Add unit tests and docs for denying tool calls with middleware (#1333)

Add unit test for sampling with image messages (#1329)

Structured client-side logging (#1326)

Remove unused TimedCache (#1303)

Add test for proxy tags visibility (#1302)

Add complete support for TokenVerifier protocol (#1297)

feat: Allow Resource Metadata URL as field in OAuthProvider (#1287)

Add meta support to tool transformation utilities (#1295)

Add meta parameter support to tools, resources, templates, and prompts decorators (#1294)

Fix server argument passing in CLI run command (#1293)