Add [sso].public_url so the browser SSO authorize redirect uses the
public MCIAS hostname while the code exchange stays on the internal
address (mcdsl v1.9.0). Document the SSO URL split and the rootless-podman
/ unikernel-eligibility rules in CLAUDE.md.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Builds a table of contents client-side from rendered heading IDs.
Highlights the current section on scroll. Collapses to inline on
narrow screens.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Go templates require all referenced functions to be defined at parse
time, even in branches that won't execute.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
When [sso].redirect_uri is configured, the web UI shows a "Sign in
with MCIAS" button instead of the username/password form. Upgrades
mcdsl to v1.7.0 which includes the Firefox cookie fix.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Adds push, list, get, delete, and login subcommands backed by an HTTP
API client, plus an MCP server for tool-based access to the document
queue.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Adds a delete route and handler to the web UI so documents can be
removed directly from the reading page. Uses CSRF-protected POST with a
browser confirmation dialog. Styled with a danger accent.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
CSS custom properties overridden via [data-theme="dark"] with
prefers-color-scheme fallback. Toggle in nav persists choice to
localStorage. No Go changes — CSS and template only.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Cream background, serif typography (Georgia/Palatino), italic headings,
small-caps labels, minimal chrome. Reading area at 70% width. Designed
for long-form markdown reading on mobile and desktop.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Custom config package with optional TLS fields. When tls_cert/tls_key
are empty, serves plain HTTP (behind mc-proxy which terminates TLS).
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Single-binary service: push raw markdown via REST/gRPC API, read rendered
HTML through mobile-friendly web UI. MCIAS auth on all endpoints, SQLite
storage, goldmark rendering with GFM and syntax highlighting.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
