Implement Go MCP server to verify OAuth flow

.github/workflows/release.yml

@@ -0,0 +1,229 @@
+name: Release
+
+on:
+  push:
+    branches: [br_release]
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    name: Create Release with Native Binaries
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Get version from latest tag
+        id: version
+        run: |
+          # Get the latest tag on this branch
+          VERSION_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
+
+          if [ -z "$VERSION_TAG" ]; then
+            echo "Error: No tags found. Run dump-version.sh first."
+            exit 1
+          fi
+
+          # Remove 'v' prefix for version number
+          VERSION="${VERSION_TAG#v}"
+
+          # Determine if this is a prerelease
+          # X.Y.Z-N (numeric extension) is NOT a prerelease
+          # X.Y.Z-alpha, X.Y.Z-rc1, etc. ARE prereleases
+          if echo "$VERSION" | grep -qE '^[0-9]+\.[0-9]+\.[0-9]+-[0-9]+$'; then
+            # Numeric extension like 0.1.2-4 - NOT a prerelease
+            IS_PRERELEASE="false"
+          elif echo "$VERSION" | grep -qE '-'; then
+            # Has hyphen but not numeric - IS a prerelease (e.g., -rc1, -alpha)
+            IS_PRERELEASE="true"
+          else
+            # No hyphen - NOT a prerelease
+            IS_PRERELEASE="false"
+          fi
+
+          echo "version_tag=${VERSION_TAG}" >> $GITHUB_OUTPUT
+          echo "version=${VERSION}" >> $GITHUB_OUTPUT
+          echo "is_prerelease=${IS_PRERELEASE}" >> $GITHUB_OUTPUT
+          echo "Version Tag: ${VERSION_TAG}"
+          echo "Version: ${VERSION}"
+          echo "Is Prerelease: ${IS_PRERELEASE}"
+
+      - name: Check if release already exists
+        id: check_release
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          if gh release view ${{ steps.version.outputs.version_tag }} &>/dev/null; then
+            echo "Release ${{ steps.version.outputs.version_tag }} already exists"
+            echo "exists=true" >> $GITHUB_OUTPUT
+          else
+            echo "Release ${{ steps.version.outputs.version_tag }} does not exist"
+            echo "exists=false" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Download native binaries from gopher-orch
+        id: gopher_orch
+        if: steps.check_release.outputs.exists != 'true'
+        env:
+          GH_TOKEN: ${{ secrets.GOPHER_ORCH_TOKEN }}
+        run: |
+          VERSION="${{ steps.version.outputs.version }}"
+
+          # Extract base version (X.Y.Z) from extended version (X.Y.Z-E)
+          # e.g., 0.1.2-3 -> 0.1.2
+          if echo "$VERSION" | grep -qE '^[0-9]+\.[0-9]+\.[0-9]+-[0-9]+$'; then
+            BASE_VERSION=$(echo "$VERSION" | sed -E 's/^([0-9]+\.[0-9]+\.[0-9]+)-[0-9]+$/\1/')
+          else
+            BASE_VERSION="$VERSION"
+          fi
+
+          GOPHER_ORCH_TAG="v${BASE_VERSION}"
+          echo "gopher_orch_version=${GOPHER_ORCH_TAG}" >> $GITHUB_OUTPUT
+          echo "Downloading native binaries from gopher-orch ${GOPHER_ORCH_TAG}..."
+
+          mkdir -p downloads
+          gh release download "${GOPHER_ORCH_TAG}" \
+            -R GopherSecurity/gopher-orch \
+            -D downloads \
+            -p "libgopher-orch-*.tar.gz" \
+            -p "libgopher-orch-*.zip"
+
+      - name: Prepare release assets
+        if: steps.check_release.outputs.exists != 'true'
+        run: |
+          mkdir -p release-assets
+          cp downloads/* release-assets/
+
+      - name: Generate release notes
+        if: steps.check_release.outputs.exists != 'true'
+        run: |
+          VERSION="${{ steps.version.outputs.version }}"
+          VERSION_TAG="${{ steps.version.outputs.version_tag }}"
+
+          cat > RELEASE_NOTES.md << EOF
+          ## gopher-mcp-go ${VERSION_TAG}
+
+          Go SDK for gopher-orch orchestration framework.
+
+          ### Installation
+
+          \`\`\`bash
+          # Install Go module
+          go get github.com/GopherSecurity/gopher-mcp-go@${VERSION_TAG}
+
+          # Download native library for your platform
+          # macOS (Apple Silicon)
+          gh release download ${VERSION_TAG} -R GopherSecurity/gopher-mcp-go -p "libgopher-orch-macos-arm64.tar.gz"
+          tar -xzf libgopher-orch-macos-arm64.tar.gz -C /usr/local
+
+          # macOS (Intel)
+          gh release download ${VERSION_TAG} -R GopherSecurity/gopher-mcp-go -p "libgopher-orch-macos-x64.tar.gz"
+          tar -xzf libgopher-orch-macos-x64.tar.gz -C /usr/local
+
+          # Linux (x64)
+          gh release download ${VERSION_TAG} -R GopherSecurity/gopher-mcp-go -p "libgopher-orch-linux-x64.tar.gz"
+          sudo tar -xzf libgopher-orch-linux-x64.tar.gz -C /usr/local
+
+          # Linux (arm64)
+          gh release download ${VERSION_TAG} -R GopherSecurity/gopher-mcp-go -p "libgopher-orch-linux-arm64.tar.gz"
+          sudo tar -xzf libgopher-orch-linux-arm64.tar.gz -C /usr/local
+          \`\`\`
+
+          ### Environment Setup
+
+          \`\`\`bash
+          export CGO_CFLAGS="-I/usr/local/include"
+          export CGO_LDFLAGS="-L/usr/local/lib -lgopher-orch"
+          export DYLD_LIBRARY_PATH="/usr/local/lib:\$DYLD_LIBRARY_PATH"  # macOS
+          export LD_LIBRARY_PATH="/usr/local/lib:\$LD_LIBRARY_PATH"      # Linux
+          \`\`\`
+
+          ### Build Information
+
+          - **Version:** ${VERSION}
+          - **gopher-orch:** ${{ steps.gopher_orch.outputs.gopher_orch_version }}
+          - **Commit:** ${{ github.sha }}
+          - **Date:** $(date -u +"%Y-%m-%d %H:%M:%S UTC")
+
+          EOF
+
+          # Extract changelog content
+          if [ -f "CHANGELOG.md" ]; then
+            echo "### What's Changed" >> RELEASE_NOTES.md
+            echo "" >> RELEASE_NOTES.md
+
+            # Get content from the version section
+            sed -n "/^## \[${VERSION}\]/,/^## \[/p" CHANGELOG.md | \
+              grep -v "^## \[" | \
+              head -30 >> RELEASE_NOTES.md || true
+          fi
+
+          # Add comparison link
+          PREV_TAG=$(git tag --sort=-creatordate | grep -v "^${VERSION_TAG}$" | head -1)
+          if [ -n "$PREV_TAG" ]; then
+            echo "" >> RELEASE_NOTES.md
+            echo "**Full Changelog**: https://github.com/${{ github.repository }}/compare/${PREV_TAG}...${VERSION_TAG}" >> RELEASE_NOTES.md
+          fi
+
+          echo "=== Release Notes ==="
+          cat RELEASE_NOTES.md
+
+      - name: Create GitHub Release
+        if: steps.check_release.outputs.exists != 'true'
+        uses: softprops/action-gh-release@v1
+        with:
+          tag_name: ${{ steps.version.outputs.version_tag }}
+          name: gopher-mcp-go ${{ steps.version.outputs.version_tag }}
+          body_path: RELEASE_NOTES.md
+          draft: false
+          prerelease: ${{ steps.version.outputs.is_prerelease == 'true' }}
+          files: release-assets/*
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Summary
+        run: |
+          echo "## Release Summary" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "- **Version:** ${{ steps.version.outputs.version_tag }}" >> $GITHUB_STEP_SUMMARY
+          echo "- **Release URL:** https://github.com/${{ github.repository }}/releases/tag/${{ steps.version.outputs.version_tag }}" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "### Native Libraries" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          if [ -d "release-assets" ]; then
+            ls release-assets/ | while read file; do
+              echo "- \`${file}\`" >> $GITHUB_STEP_SUMMARY
+            done
+          fi
+
+  test:
+    name: Run Tests
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: '1.21'
+
+      - name: Run tests (without native library)
+        run: |
+          # Run tests that don't require native library
+          go test ./... -v -short || echo "Some tests may require native library"
+
+  notify:
+    name: Notify on Failure
+    needs: [release, test]
+    runs-on: ubuntu-latest
+    if: failure()
+    steps:
+      - name: Report failure
+        run: |
+          echo "Release workflow failed!"
+          echo "Check the logs for details."

.gitmodules

@@ -1,3 +1,4 @@
 [submodule "third_party/gopher-orch"]
 	path = third_party/gopher-orch
 	url = https://github.com/GopherSecurity/gopher-orch.git
+    branch = br_release

CHANGELOG.md

@@ -0,0 +1,21 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+### Added
+- Initial release of gopher-mcp-go SDK
+- Go bindings for gopher-orch native library
+- OAuth 2.0 authentication support (AuthContext, WwwAuthenticate)
+- MCP (Model Context Protocol) client implementation
+
+### Changed
+- Updated module path to github.com/GopherSecurity/gopher-mcp-go
+
+---
+
+[Unreleased]: https://github.com/GopherSecurity/gopher-mcp-go/compare/HEAD

README.md

@@ -1,6 +1,6 @@
-# gopher-orch - Go SDK
+# gopher-mcp-go
 
-Go SDK for Gopher Orch - AI Agent orchestration framework with native C++ performance.
+Go SDK for Gopher MCP - AI Agent orchestration framework with native C++ performance.
 
 ## Table of Contents
 
@@ -45,6 +45,7 @@ Go SDK for Gopher Orch - AI Agent orchestration framework with native C++ perfor
 - **Native Performance** - Powered by C++ core with Go bindings via CGO
 - **AI Agent Framework** - Build intelligent agents with LLM integration
 - **MCP Protocol** - Model Context Protocol client and server support
+- **OAuth 2.0 Authentication** - JWT token validation with JWKS support
 - **Tool Orchestration** - Manage and execute tools across multiple MCP servers
 - **State Management** - Built-in state graph for complex workflows
 - **Type Safety** - Full Go type safety with idiomatic patterns
@@ -95,10 +96,10 @@ This SDK is ideal for:
 
 ## Installation
 
-### Option 1: Go Modules (when published)
+### Option 1: Go Modules
 
 ```bash
-go get github.com/GopherSecurity/gopher-orch-go
+go get github.com/GopherSecurity/gopher-mcp-go
 ```
 
 ### Option 2: Build from Source
@@ -114,7 +115,7 @@ import (
     "fmt"
     "log"
 
-    "github.com/GopherSecurity/gopher-orch-go/src"
+    "github.com/GopherSecurity/gopher-mcp-go/src"
 )
 
 func main() {
@@ -289,7 +290,7 @@ export LD_LIBRARY_PATH=/path/to/lib:$LD_LIBRARY_PATH
 The main type for creating and running AI agents:
 
 ```go
-import "github.com/GopherSecurity/gopher-orch-go/src"
+import "github.com/GopherSecurity/gopher-mcp-go/src"
 
 // Initialize the library (called automatically on first Create)
 src.Init()
@@ -359,8 +360,8 @@ The SDK provides typed errors for different failure scenarios:
 
 ```go
 import (
-    "github.com/GopherSecurity/gopher-orch-go/src"
-    "github.com/GopherSecurity/gopher-orch-go/src/errors"
+    "github.com/GopherSecurity/gopher-mcp-go/src"
+    "github.com/GopherSecurity/gopher-mcp-go/src/errors"
 )
 
 agent, err := src.Create(config)
@@ -392,7 +393,7 @@ import (
     "log"
     "os"
 
-    "github.com/GopherSecurity/gopher-orch-go/src"
+    "github.com/GopherSecurity/gopher-mcp-go/src"
 )
 
 func main() {
@@ -423,7 +424,7 @@ import (
     "fmt"
     "log"
 
-    "github.com/GopherSecurity/gopher-orch-go/src"
+    "github.com/GopherSecurity/gopher-mcp-go/src"
 )
 
 const serverConfig = `{
@@ -487,6 +488,45 @@ DYLD_LIBRARY_PATH=native/lib \
 go run examples/client_example_json.go
 ```
 
+### Auth Example (OAuth 2.0 MCP Server)
+
+The auth example demonstrates building an MCP server with OAuth 2.0 authentication:
+
+```bash
+cd examples/auth
+./run_example.sh
+```
+
+**Features:**
+- JWT token validation using JWKS
+- OAuth 2.0 protected resource metadata
+- Scope-based tool authorization
+- Configurable auth server integration
+
+**What it does:**
+1. Downloads the latest SDK from GitHub releases
+2. Downloads native libraries for your platform
+3. Builds and runs an authenticated MCP server
+
+**Server Endpoints:**
+- `/health` - Health check
+- `/mcp` - MCP endpoint (requires authentication)
+- `/.well-known/oauth-protected-resource` - OAuth discovery
+
+**Configuration:**
+Edit `server.config` to configure:
+- Auth server URL (JWKS URI, issuer)
+- Server host/port
+- Tool scope requirements
+
+```bash
+# Run without authentication (for testing)
+./run_example.sh --no-auth
+
+# Run on custom port
+./run_example.sh --port 8080
+```
+
 ---
 
 ## Development
@@ -653,7 +693,7 @@ Contributions are welcome! Please read our contributing guidelines.
 
 ## License
 
-MIT License - see [LICENSE](LICENSE) file for details.
+Apache License 2.0 - see [LICENSE](LICENSE) file for details.
 
 ## Links