| /demarkus-library/plans/phase-1b-web-sso.md |
0.85 |
Phase 1b — Web SSO over the Broker \(two-repo plan\) |
demarkus-library, phase-1b, plan, broker, oauth, web-sso, confidential-client, mcp, session, device-flow, loopback, fable, two-repo, pkce, refresh-token, authorization-code, client-registry, status:wip |
| /adr/0001-broker-confidential-web-clients.md |
0.85 |
ADR 0001 — Broker confidential web-client registry |
adr, decision, broker, oauth, confidential-client, web-sso, client-secret, redirect-uri, refresh-token, pkce, status:accepted |
| /demarkus-library/audit-2026-06-18.md |
0.80 |
demarkus-library — Architecture & Code-Quality Audit \(2026-06-18\) |
demarkus-library, audit, code-quality, architecture, robustness, security, csrf, concurrency, ha, replicacount, error-handling, test-coverage, hardening, hexagonal, adr-0002, type:reference, timeouts, body-limit, cache-invalidation, xss, oauth, pkce, broker, session |
| /plans/broker-auth-code-grant.md |
0.65 |
Plan: Broker Authorization Code Grant |
plan, broker, oauth, authorization-code, pkce, mcp, oidc, device-flow, refresh-token, discovery, kind-smoke, claude-code, knowledge-join, rfc-8252, redirect-uri, security, universe-onboarding, status:complete |
| /journal/2026-05-31.md |
0.60 |
Journal — 2026-05-31 |
demarkus-memory, plugin, release, lookup, self-documentation, security, journal, broker, auth-code-grant, pkce, kind-smoke, plan-reconciliation, gitignore, coderabbit, oauth, status:complete |
| /demarkus-library/journal/2026-06-11.md |
0.60 |
2026-06-11 — demarkus-library Phase 1b: plan + steps 2.2/2.5 |
demarkus-library, journal, phase-1b, oauth, session, single-flight, broker, confidential-client, pkce, basic-auth, gotcha, mcp-go, session-pool, federation, multi-world, tls, mkcert, frontmatter, turnstile, web-sso |