# Progress
## What Works
- Full infrastructure deployed via Terraform (VPC networking, ALB, ECS, ECR, Secrets Manager)
- Docker container with JWT proxy + Supergateway + github-mcp-server
- Okta OAuth 2.0 authentication (Authorization Code + PKCE)
- Streamable HTTP transport with multi-developer concurrent sessions
- Client configuration documented for Kiro, VS Code, and Cursor
- Build and deploy pipeline (`scripts/build-and-push.sh`)
- Process supervisor with crash recovery (`start.sh`)
## What's Left
- Nothing outstanding — project is operational
## Known Issues
- Self-signed cert requires `NODE_TLS_REJECT_UNAUTHORIZED=0` on clients
- Okta doesn't support RFC 8707 `resource` param (handled by token proxy stripping it)
## Project Evolution
- Started with SSE transport (single connection limit) → migrated to Streamable HTTP (multi-session)
- All infrastructure and application code delivered in a single initial commit
