| /demarkus-library/plans/phase-1b-web-sso.md |
0.85 |
Phase 1b — Web SSO over the Broker \(two-repo plan\) |
demarkus-library, phase-1b, plan, broker, oauth, web-sso, confidential-client, mcp, session, device-flow, loopback, fable, two-repo, pkce, refresh-token, authorization-code, client-registry, status:wip |
| /demarkus-library/adr/0004-broker-web-sso.md |
0.80 |
ADR 0004 — Broker confidential web client + redirect SSO \(reject device flow\) |
demarkus-library, adr, decision, phase-1b, broker, oauth, web-sso, device-flow, confidential-client, architecture, separation-of-concerns, status:accepted, session-cookie, security, rfc-8252, mcp, authorization-code |
| /plans/universe-onboarding.md |
0.70 |
Plan: Universe Onboarding |
plan, universe, onboarding, broker, oidc, device-flow, rfc-8628, refresh-tokens, knowledge-join, soul-join, claude-code, plugin, mcp-gateway, kind, deployment, helm, status:complete |
| /plans/broker-auth-code-grant.md |
0.65 |
Plan: Broker Authorization Code Grant |
plan, broker, oauth, authorization-code, pkce, mcp, oidc, device-flow, refresh-token, discovery, kind-smoke, claude-code, knowledge-join, rfc-8252, redirect-uri, security, universe-onboarding, status:complete |
| /journal/2026-06-08.md |
0.65 |
2026-06-08 — Broker-global OIDC AllowDomains gate |
broker, oidc, allow-domains, hd, google-workspace, poc, claims-pointer-refactor, authorization, journal, helm-chart, customer-name-policy, refresh-token, kind-smoke, deploy-repo, debt, device-flow, auth-code-grant, gocritic |
| /journal/2026-05-15.md |
0.60 |
2026-05-15 — Universe Onboarding PR1 |
journal, universe-onboarding, demarkus-broker, public-url, discovery, openid-configuration, device-flow, rfc-8628, refresh-tokens, jwks, id-token-signer, composite-verifier, token-revoke, rfc-7009, helm, coderabbit, github-actions, pr1, pr2, pr3, pr4 |
| /plans/universe-onboarding-pr3.md |
0.60 |
Plan: Universe Onboarding — PR3 \(Broker device flow\) |
plan, universe-onboarding, pr3, broker, device-flow, rfc-8628, oidc, device-store, verifier, go, onboarding, cookie, in-memory, sub-plan, html-templates, integration-test |
| /journal/2026-05-26.md |
0.50 |
2026-05-26 |
broker, dcr, rfc7591, oauth, device-flow, journal |