chore: archive 15 completed OpenSpec changes

Move the following audited-and-implemented changes into
openspec/changes/archive/2026-06-12-completed-changes-archive/:

- backend-frontend-refactoring
- config-profile-git-mounts
- config-profile-includes-ui
- config-profile-multi-repo-mounts
- container-monitoring-notifications
- git-mount-url-validation
- home-path-expansion
- mobile-terminal-ux
- mount-specificity-ordering
- notification-center
- persistent-terminal-sessions
- session-list-overhaul
- ssh-key-mounting
- terminal-fullscreen-unified-header
- tool-session-progress-and-updates

Also regenerated .pi-map*.md files for openspec/changes so the
remaining active changes (multi-session-terminal-ux, reorganize-long-files,
working-copies, workspace-first-ui) reflect the new layout.
This commit is contained in:
Developer
2026-06-12 14:26:55 +00:00
parent 30549f4863
commit caadd59441
493 changed files with 3563 additions and 3490 deletions
@@ -1,10 +1,10 @@
# openspec/changes/archive/2026-05-17-auth-oauth
dir: openspec/changes/archive/2026-05-17-auth-oauth
# archive/2026-05-17-auth-oauth
dir: archive/2026-05-17-auth-oauth
index: openspec/changes/archive/2026-05-17-auth-oauth/.pi-map.index.md
index: archive/2026-05-17-auth-oauth/.pi-map.index.md
## role
Archive of a 2026-05-17 design proposal for implementing OAuth2/OIDC authentication with Authentik integration in a backend API.
Archive directory containing design documents and proposals for an OAuth2/OIDC authentication system with Authentik integration and JWT token management.
## files
- .openspec.yaml | Defines an OpenAPI specification file metadata with schema type and creation date
- README.md | Documents a project that implements OAuth2/OIDC authentication using Authentik with internal JWTs and database-backed refresh tokens | dep: Authentik, OAuth2, OIDC, JWT
@@ -12,7 +12,7 @@ Archive of a 2026-05-17 design proposal for implementing OAuth2/OIDC authenticat
- proposal.md | Proposes a technical implementation plan for adding production-ready OAuth2/OIDC authentication with Authentik integration, JWT session management, and secure token lifecycle handling to a backend API project. | dep: Authentik, OAuth2/OIDC, JWKS, JWT, database, apps/api/src, config, models, auth services, API routes
- tasks.md | Task tracking document for implementing OIDC/JWT authentication system with refresh tokens in a backend application. | dep: SQLAlchemy, Alembic, Authentik OIDC, pytest, ruff, mypy, asyncpg, PostgreSQL
## arch
Specification-driven design documentation using OpenAPI metadata, with phased implementation planning (proposal → design → tasks → README) for a hybrid token architecture (JWT access tokens + opaque DB-backed refresh tokens) with environment-aware security policies.
Document-driven design specification using markdown-based RFCs, with OpenAPI metadata, separating concerns into design rationale (design.md), implementation planning (proposal.md), task tracking (tasks.md), and project documentation (README.md).
## tags
oidc, authentik, oauth2, jwt, authentication, tokens, refresh, design
## symbols