# Tarn & Timber Docs ## Docs - [Tarn & Timber documentation](https://docs.tarnandtimber.com/): What Tarn & Timber is, and how to read these docs. - [Build your own shop](https://docs.tarnandtimber.com/getting-started): Run the local reference shop, connect Auth0, and adapt the deployment to your accounts. - [Personal Agent Protocol](https://docs.tarnandtimber.com/poppy): Why the shop uses Poppy, and how Sessions, grants and agent channels fit together. - [Connect an MCP client](https://docs.tarnandtimber.com/mcp): Connect an AI assistant with user consent and tool-specific permissions. ## Architecture - [System map](https://docs.tarnandtimber.com/architecture): The architecture and the two boundaries that must always hold. - [Components](https://docs.tarnandtimber.com/architecture/components): Webshop, API, MCP server, Auth0 proxy, backoffice, Auth0, and storage. - [Callers and tokens](https://docs.tarnandtimber.com/architecture/callers-and-tokens): Caller kinds, how each is recognized, customer authority, and scope translation. - [Poppy compliance](https://docs.tarnandtimber.com/architecture/poppy-compliance): Every Personal Agent Protocol requirement the shop meets, and the test that proves it. - [API pipeline](https://docs.tarnandtimber.com/architecture/api-pipeline): The oRPC handler, the middleware chain, one problem+json encoding, and authority before validation. - [How the API is built on oRPC](https://docs.tarnandtimber.com/architecture/orpc): The contract, the implementation, the context builders, the error encoding and the two OpenAPI views. - [Shop domain proxies](https://docs.tarnandtimber.com/architecture/shop-domain-proxies): The bearer-only Shop API proxy. - [Deployment](https://docs.tarnandtimber.com/architecture/deployment): Stacks, release choreography, and the infra.ts order. ### Request flows - [Signed-in checkout](https://docs.tarnandtimber.com/architecture/request-flows/signed-in-checkout): A signed-in shopper places an order in the storefront. - [Guest checkout](https://docs.tarnandtimber.com/architecture/request-flows/guest-checkout): Anonymous visitors shop with a signed guest session; the storefront runs guest checkout itself. - [MCP on behalf of the user](https://docs.tarnandtimber.com/architecture/request-flows/mcp-on-behalf-of): From dynamic client registration to an API call made as the user. - [Backoffice](https://docs.tarnandtimber.com/architecture/request-flows/backoffice): Operators sign in with Okta; the backoffice server calls the API as itself. - [Poppy agents](https://docs.tarnandtimber.com/architecture/request-flows/poppy-agents): Direct credentials, live Auth0 proxy admission, and dedicated web agent forwarders. - [Back-channel logout](https://docs.tarnandtimber.com/architecture/request-flows/back-channel-logout): How the webshop receives Auth0 back-channel logout and ends its own sessions. - [Account API expansion](https://docs.tarnandtimber.com/architecture/request-flows/account-api): Which account capabilities the Shop API serves and which the storefront runs itself. ### Auth0 - [How Auth0 is integrated](https://docs.tarnandtimber.com/architecture/auth0): Resource servers, clients, grants, and tenant settings. - [Resource servers](https://docs.tarnandtimber.com/architecture/auth0/resource-servers): Shop API and MCP resources, scopes, subject-type policies, and no trailing slash. - [Clients and grants](https://docs.tarnandtimber.com/architecture/auth0/clients-and-grants): Website, storefront, backoffice, agent forwarder and MCP clients, with third-party defaults. - [Token exchange](https://docs.tarnandtimber.com/architecture/auth0/token-exchange): On-Behalf-Of versus Custom Token Exchange, and act chains. - [My Account](https://docs.tarnandtimber.com/architecture/auth0/my-account): Web-only My Account, multi-resource refresh tokens, and step-up. - [Actions](https://docs.tarnandtimber.com/architecture/auth0/actions): Account-security Actions and audience allowlists. - [Invited agents](https://docs.tarnandtimber.com/architecture/auth0/invited-agents): Independent agent identities, owner consent and delegated browser sessions. - [Terraform map](https://docs.tarnandtimber.com/architecture/auth0/terraform): Where each Auth0 object lives in the repository, and the tests that pin it. ## Runbooks - [Account recovery](https://docs.tarnandtimber.com/runbooks/account-recovery): Explicitly resume an approved email change or deletion after partial provider failure. - [Durable Object transfer](https://docs.tarnandtimber.com/runbooks/do-transfer): Namespace ownership, callbacks, alarms and rollback for the move of the Durable Objects to the API Worker. - [Scheduled jobs](https://docs.tarnandtimber.com/runbooks/scheduled-jobs): API commerce recovery and independent diagnostic and operator-history retention. - [Diagnostic investigations](https://docs.tarnandtimber.com/runbooks/audit-investigations): Follow observed actions across applications and providers, with bounded demo inspection and explicit gaps. ## Agent skills - [tarn-timber-docs](https://docs.tarnandtimber.com/.well-known/agent-skills/tarn-timber-docs/SKILL.md): Read the Tarn & Timber Docs instead of answering from memory. Use when a task involves Tarn & Timber Docs: how it works, how to set it up or configure it, or its API. ## Agent resources - [llms-full.txt](https://docs.tarnandtimber.com/llms-full.txt): The full Markdown of every page in one file. - [Page Markdown](https://docs.tarnandtimber.com/index.md): Append `.md` to any page URL to fetch that page as raw Markdown. - [JSON API](https://docs.tarnandtimber.com/api/docs/pages.json): Page index of the JSON docs API; each entry links the page's JSON and Markdown forms. Described by the OpenAPI document at https://docs.tarnandtimber.com/openapi.json. - [Agent skills](https://docs.tarnandtimber.com/.well-known/agent-skills/index.json): Agent Skills discovery index of the skills this site publishes. - [API catalog](https://docs.tarnandtimber.com/.well-known/api-catalog): RFC 9727 linkset of the APIs documented here. - [AI catalog](https://docs.tarnandtimber.com/.well-known/ai-catalog.json): ARD manifest of the agent-facing resources on this site (MCP server, skills, APIs). - [agent-readability.json](https://docs.tarnandtimber.com/agent-readability.json): Manifest of every agent-facing artifact on this site. - [Sitemap](https://docs.tarnandtimber.com/sitemap.xml): Every indexable page URL with its last-modified date.