| .. |
| access-token-options.ts | Stop capping WorkOS access token age at 24 hours (#2009) | 1 month ago |
| api-jwt-bearer.ts | Fix: accept WorkOS device-login tokens on the /api plane (wrong JWKS) (#1079) | 4 months ago |
| api-keys.node.test.ts | Add admin Users console page (#1469) | 3 months ago |
| api-keys.ts | Revert "Cache api key validations per isolate (#1864)" (#1870) | 2 months ago |
| api.ts | Authorize org membership from the local mirror (#2026) | 1 month ago |
| bearer.ts | Unified provider architecture (#877) | 5 months ago |
| context.ts | MCP session cold init resilience (#1787) | 2 months ago |
| cookies.ts | Gate signed-out document requests at the edge instead of flashing the app-shell skeleton (#975) | 5 months ago |
| doc-gate.ts | Authorize from the mirror unconditionally; alert on a stale reconciler (#2031) | 1 month ago |
| errors.test.ts | Classify transient WorkOS failures as retryable during MCP auth (#1352) | 4 months ago |
| errors.ts | Feed the cloud membership mirror from login and member writes (#2004) | 1 month ago |
| handlers.ts | Authorize org membership from the local mirror (#2026) | 1 month ago |
| jwks-cache.node.test.ts | Cache JWKS across isolates and serve stale keys on refresh failure (#1665) | 2 months ago |
| jwks-cache.ts | Split the jwt_verify cost into store read vs key import (#1668) | 2 months ago |
| last-org-cookie.ts | Authorize org membership from the local mirror (#2026) | 1 month ago |
| login-state.test.ts | Gate signed-out document requests at the edge instead of flashing the app-shell skeleton (#975) | 5 months ago |
| login-state.ts | Gate signed-out document requests at the edge instead of flashing the app-shell skeleton (#975) | 5 months ago |
| member-directory.ts | Authorize org membership from the local mirror (#2026) | 1 month ago |
| middleware-live.ts | Preserve URL org scope in cloud auth flows (#1143) | 4 months ago |
| middleware.ts | Unified provider architecture (#877) | 5 months ago |
| mirror-feeders.node.test.ts | Authorize from the mirror unconditionally; alert on a stale reconciler (#2031) | 1 month ago |
| mirror-feeders.ts | Read members from the directory and add email search (#2025) | 1 month ago |
| mirror-readiness-store.ts | Authorize from the mirror unconditionally; alert on a stale reconciler (#2031) | 1 month ago |
| org-api-key-auth.node.test.ts | Authorize from the mirror unconditionally; alert on a stale reconciler (#2031) | 1 month ago |
| org-api-key-mint.node.test.ts | Add admin Users console page (#1469) | 3 months ago |
| org-selector-auth.node.test.ts | Authorize from the mirror unconditionally; alert on a stale reconciler (#2031) | 1 month ago |
| organization.ts | Authorize from the mirror unconditionally; alert on a stale reconciler (#2031) | 1 month ago |
| request-origin.test.ts | Org-slug console URLs across cloud, self-host, and cloudflare hosts (#974) | 4 months ago |
| request-origin.ts | Org-slug console URLs across cloud, self-host, and cloudflare hosts (#974) | 4 months ago |
| return-to.test.ts | Normalize login return destinations (#2002) | 1 month ago |
| return-to.ts | Normalize login return destinations (#2002) | 1 month ago |
| route-paths.ts | Render the real shell from the gate's verified identity — delete the full-page skeleton (#986) | 4 months ago |
| user-store-error.node.test.ts | MCP session cold init resilience (#1787) | 2 months ago |
| user-store.ts | Authorize org membership from the local mirror (#2026) | 1 month ago |
| workos-auth-provider.ts | Authorize from the mirror unconditionally; alert on a stale reconciler (#2031) | 1 month ago |
| workos-callback-state.node.test.ts | Authorize org membership from the local mirror (#2026) | 1 month ago |
| workos-events-replay.ts | Reconcile the membership mirror from WorkOS events (#2024) | 1 month ago |
| workos-events-runner.node.test.ts | Authorize from the mirror unconditionally; alert on a stale reconciler (#2031) | 1 month ago |
| workos-events-runner.ts | Authorize from the mirror unconditionally; alert on a stale reconciler (#2031) | 1 month ago |
| workos-events-sync.node.test.ts | Authorize from the mirror unconditionally; alert on a stale reconciler (#2031) | 1 month ago |
| workos-events-sync.ts | Reconcile the membership mirror from WorkOS events (#2024) | 1 month ago |
| workos-mirror-backfill.ts | Reconcile the membership mirror from WorkOS events (#2024) | 1 month ago |
| workos-mirror-store.ts | Reconcile the membership mirror from WorkOS events (#2024) | 1 month ago |
| workos-mirror.node.test.ts | Authorize from the mirror unconditionally; alert on a stale reconciler (#2031) | 1 month ago |
| workos-mirror.ts | Reconcile the membership mirror from WorkOS events (#2024) | 1 month ago |
| workos-webhook.ts | Reconcile the membership mirror from WorkOS events (#2024) | 1 month ago |
| workos.node.test.ts | Validate WorkOS sessions locally with a cached JWKS (#1376) | 4 months ago |
| workos.ts | Authorize org membership from the local mirror (#2026) | 1 month ago |