- Analyzed agent-forum-v4 blueprint and created `ASSESSMENT.md`.
- Implemented `git_storage_poc.ts` to prove we can read/write Git Notes invisibly.
- Implemented `dag_engine_poc.ts` to prove we can parse YAML DAGs and calculate critical path.
- Implemented `code_intelligence_poc.ts` to prove we can parse AST-like JSON from raw source.
- Stored all work in an isolated `scratch/agent-forum-experiments/` directory to strictly prevent interference with the core Auth-Yes repository logic.
Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>
Co-authored-by: mrteye <1945243+mrteye@users.noreply.github.com>
- Implement iterative session cookie candidate resolution in getAuthenticatedUser
- Eliminate Hono first-match limitation causing mobile login redirect loops
- Use absolute UTC ISO strings for PostgreSQL session expiry queries
- Opportunistically clear host-level cookies upon shadow detection
- Ensure exhaustive server-side session revocation across all cookie candidates on logout
- Add automated regression test for cookie shadowing in server/main.test.ts
- Rename and standardize tasks/path.md with 5-template orchestrator standard
