sulthan 4d70677add docs: design for password-gated web UI served by the same backend ...

Adds a browser-accessible bookmark list on a new subdomain, served by the
existing Go binary via go:embed'd templates and htmx. Cookie sessions
(HMAC-keyed off API_TOKEN, 60-day) gate /ui/*; the bearer-authenticated
/bookmarks* API and the userscript are untouched.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

2026-07-25 22:27:03 +07:00

..

superpowers/specs

docs: design for password-gated web UI served by the same backend

2026-07-25 22:27:03 +07:00