Current project, blockers, or disputes.

Web document editing

Authenticated Node

Authentication for service-to-service:

Grpc handlers we pass configuration, policy checks across the tech stack was the hardest part.

problems with the CORS on the wiring. We had open CORS, but HTTP routing in Go is cumbersome.

Authentication doesn't need cookies. If you have credentials, you can call from wherever. We use local storage, not cookies.

Metric Routes can't be called, and they shouldn't require authentication.

middleware issues.

admin credentials from ElectronJS,

Authentication for client-to-client

Local security makes sense to be different.

Authenticated User, we want to consolidate.

Notify, Vault, Hosting, Private Documents, Agents, etc.

Signing requests is easy for payloads, but in gRPC, it's not so easy. Canonicalization for those bodies is a mess. Auth1 was that (sign messages), Auth2 moved away from that.

Authoring projects

New Projects shape up:

Objective: Best-in-Class Local-First Experience

Vault Account Management

Account creation and Sign In

Agents Experiments

Notes

Move subdomains to paths.