Code Debt & Improvements

Technical debt and improvement opportunities discovered during development. Items here are not blocking but worth addressing in future passes. This page is the hub; each topic file below holds the entries, moved verbatim from the earlier single document (version 52 and before).

Topics

• Server core: path safety, resilience, handler logger, store performance, flat layout removal, TUI link regions
• MCP self-conflict: publish and append returning conflict responses after a successful write
• Broker OIDC AllowDomains gate: kind smoke, gate site tests, Claims mutation, refresh re-gating
• Broker runtime Secrets under GitOps: lookup-derived cookie key and seeded Secrets drift under Argo, with a parked fix
• Graph and crawl: node identity history, Obsidian plan copies, graph machinery after the pilot review, LIST walkers
• Agent crawl load: agent re-crawls its own hub output, five-minute production interval
• Review findings: items deferred from pull request reviews and the state file rename
• OpenCode plugins: demarkus-knowledge V1 load failure, README V1 command path, no plugin CI, V2 runtime unverified, uninstall leftovers

Architecture quality ledger

Resolved and opened entries per track of the architecture quality plan. New ledger entries go to a new track file, not to an existing one near 8 KB.

• Tracks 3a and 3b: the first passes, store and backend contract, policy decorator
• Track 3c: client split, one URL parser, marktools, docwrite, CLI edit
• Track 3d, broker adopts: broker on the client packages, world registry, the simplify pass
• Track 3d, broker split and debt fold: broker package split, mcpbind, the cached contract test
• Track 3e: plugin binary split, managed server startup, review follow-up
• Refactor review follow-up: required correctness fixes from the main-branch review

Related documents

• Conflict merge plan: merge-candidate feature behind the self-conflict debt item
• Broker auth-code grant plan: PR3 smoke stage the AllowDomains gaps build on
• Journal 2026-06-08: context for the AllowDomains gate debt
• Security hardening plan: plan covering the path-safety items listed here