Issues

• wp-native-auth: prune DCR clients that never get a grant, and mark self-asserted client names on consent

  Extra-Chill/wp-native#105 · Filter by author chubes4 opened on Oct 26, 2026

• Bearer validation ignores the token's RFC 8707 resource audience

  Extra-Chill/wp-native#98 · Filter by author chubes4 opened on Oct 2, 2026

• Adding nonce_action to the consent template contract silently breaks every host template

  Extra-Chill/wp-native#95 · Filter by author chubes4 opened on Sep 18, 2026

• wp-native/auth-sessions and wp-native/auth-revoke-session always fail with ability_invalid_output

  Extra-Chill/wp-native#87 · Filter by author chubes4 opened on Sep 12, 2026

• Wire managed CI gates for packages/shell and packages/api-client (npm workspace dependency setup)

  Extra-Chill/wp-native#84 · Filter by author chubes4 opened on Sep 12, 2026

• fix: emit Node-loadable ESM imports in wp-native-client

  Extra-Chill/wp-native#72 · Filter by author chubes4 opened on Aug 15, 2026

• EPIC: native push notification delivery — the keystone for community revival (wp-native primitive + EC triggers + app client)

  Extra-Chill/wp-native#59 · Filter by author chubes4 opened on Jun 27, 2026
  3

• AUTH_SALT per-purpose derivation — re-scoped: only the cross-site HMAC leg survives #76 consolidation (design)

  Extra-Chill/wp-native#56 · Filter by author chubes4 opened on May 31, 2026

• Browser handoff tokens are per-site on multisite — same bug as #47, different file

  Extra-Chill/wp-native#50 · Filter by author chubes4 opened on May 26, 2026

• OAuth strategy decision (post-v0.1)

  Extra-Chill/wp-native#18 · Filter by author chubes4 opened on May 2, 2026