| /demarkus-library/plans/phase-1b-web-sso.md |
0.85 |
Phase 1b — Web SSO over the Broker \(two-repo plan\) |
demarkus-library, phase-1b, plan, broker, oauth, web-sso, confidential-client, mcp, session, device-flow, loopback, fable, two-repo, pkce, refresh-token, authorization-code, client-registry, status:wip |
| /adr/0001-broker-confidential-web-clients.md |
0.85 |
ADR 0001 — Broker confidential web-client registry |
adr, decision, broker, oauth, confidential-client, web-sso, client-secret, redirect-uri, refresh-token, pkce, status:accepted |
| /demarkus-library/roadmap.md |
0.82 |
demarkus-library — Roadmap & Resume |
demarkus-library, roadmap, resume, handoff, phase-1b, broker, oauth, mcp, fable, build-model, status, plan, reading-room, trail, floor, phase-3, phase-4, ai-librarian, nib, reader-mode, hardening, deploy, argocd, pane-scroll, observability, status:wip |
| /demarkus-library/adr/0004-broker-web-sso.md |
0.80 |
ADR 0004 — Broker confidential web client + redirect SSO \(reject device flow\) |
demarkus-library, adr, decision, phase-1b, broker, oauth, web-sso, device-flow, confidential-client, architecture, separation-of-concerns, status:accepted, session-cookie, security, rfc-8252, mcp, authorization-code |
| /demarkus-library/audit-2026-06-18.md |
0.80 |
demarkus-library — Architecture & Code-Quality Audit \(2026-06-18\) |
demarkus-library, audit, code-quality, architecture, robustness, security, csrf, concurrency, ha, replicacount, error-handling, test-coverage, hardening, hexagonal, adr-0002, type:reference, timeouts, body-limit, cache-invalidation, xss, oauth, pkce, broker, session |
| /plans/opencode-knowledge-plugin.md |
0.75 |
OpenCode Knowledge Plugin Port |
plan, plugins, opencode, opencode-knowledge, knowledge-system, oauth, mcp, typescript, policy-gate, completed, pr-review, security, installer, concurrency, uninstall, deadlines, ci, linux |
| /demarkus-library/debugging.md |
0.70 |
demarkus-library — Debugging & Gotchas |
demarkus-library, debugging, gotcha, oauth, basic-auth, rfc6749, refresh-token, rotation, invalid-grant, broker, rate-limit, mcp-session, ci, argocd, secrets, federation, quic, reader-overlay, mark-worlds, htmx, authorization, floor |
| /plans/broker-https-gateway.md |
0.70 |
Plan: Broker MCP Gateway \(Knowledge-System Layer\) |
plan, broker, mcp-gateway, mcp, knowledge-system, oauth, sso, session-cache, world-token, mcp-go, streamable-http, knowledge-join, helm, federation, graph-store, conflict-merge, plugin, universe-onboarding, status:complete |
| /plans/broker-auth-code-grant.md |
0.65 |
Plan: Broker Authorization Code Grant |
plan, broker, oauth, authorization-code, pkce, mcp, oidc, device-flow, refresh-token, discovery, kind-smoke, claude-code, knowledge-join, rfc-8252, redirect-uri, security, universe-onboarding, status:complete |
| /journal/2026-05-31.md |
0.60 |
Journal — 2026-05-31 |
demarkus-memory, plugin, release, lookup, self-documentation, security, journal, broker, auth-code-grant, pkce, kind-smoke, plan-reconciliation, gitignore, coderabbit, oauth, status:complete |