Tests fixes, audit progress, UI completions

src/Authority/StellaOps.Authority/StellaOps.Auth.Client/AGENTS.md

@@ -0,0 +1,23 @@
+# Auth Client AGENTS
+
+## Purpose & Scope
+- Working directory: `src/Authority/StellaOps.Authority/StellaOps.Auth.Client/`.
+- Roles: backend engineer, QA automation.
+- Focus: token acquisition, discovery/JWKS caching, and auth handler integration.
+
+## Required Reading (treat as read before DOING)
+- `docs/README.md`
+- `docs/07_HIGH_LEVEL_ARCHITECTURE.md`
+- `docs/modules/platform/architecture-overview.md`
+- `docs/modules/authority/architecture.md`
+- Relevant sprint files.
+
+## Working Agreements
+- Keep token flows deterministic and time-aware (TimeProvider, skew handling).
+- Respect offline/air-gap posture and egress policy checks.
+- Avoid leaking sensitive credentials in logs.
+- Update `docs/implplan/SPRINT_*.md` and local `TASKS.md` when starting or completing work.
+
+## Testing
+- Use xUnit + FluentAssertions + TestKit.
+- Cover discovery/JWKS caches, token client error paths, and auth handler behavior.

src/Authority/StellaOps.Authority/StellaOps.Auth.Client/TASKS.md

@@ -0,0 +1,10 @@
+# Auth Client Task Board
+
+This board mirrors active sprint tasks for this module.
+Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
+
+| Task ID | Status | Notes |
+| --- | --- | --- |
+| AUDIT-0080-M | DONE | Maintainability audit for StellaOps.Auth.Client. |
+| AUDIT-0080-T | DONE | Test coverage audit for StellaOps.Auth.Client. |
+| AUDIT-0080-A | TODO | Pending approval for changes. |