Projects

The repo atlas, trimmed down to the projects that still have a point and the families that actually belong together.

This section is the public workbench for the GameCult GitHub org. Some repos are live systems. Some are research bursts that still smell faintly of ozone. Some are support machinery for the support machinery. The point is not to pretend every public repository deserves the same amount of ceremony. The point is to make the shape of the work legible without building a second museum for our own breadcrumbs.

GameCult

The identity authority for Yggdrasil, because rebuilding provider OAuth in every app is a bad hobby.

Heimdall

2 min read

Heimdall is the shared auth authority taking shape for GameCult-hosted experiments. It centralizes provider OAuth, linked identities, grants, entitlements, token sealing, and signed claim issuance so every new app does not have to rebuild Discord/Patreon/GitHub/Twitch login glue from scratch and then act shocked when the result grows mold.

GitHub Repo repixelizer

Started

26 Apr 2026

Last Public Push

29 Apr 2026

Stack

TypeScript / Fastify / JWT / Postgres

Status

Active auth service

Founding Idea

The founding idea is painfully simple: shared auth should actually be shared. Provider OAuth, linked identities, sessions, grants, and signed claims belong in one authority service, while app-domain data stays local so “shared auth” does not immediately become “shared swamp.”

Trajectory

The public history is a tight implementation burst around real integration seams rather than abstract identity theology. StreamPixels and Repixelizer show up early. Then you get managed provider credentials, Twitch verification, EventSub alignment, token scope normalization, and persisted credential handoff state. In other words, the repo is not philosophizing about auth. It is already tripping over the practical reasons a shared authority needs to exist.

Ambition

The ambition is to become the boring identity layer for GameCult’s hosted apps: one service that handles provider negotiation, token sealing, session issuance, and signed claims, while app backends verify locally and keep their own domain logic. Central authority, distributed dignity.

History Tells On Itself

  • 2026-04-26 Initial public repo creation
  • 2026-04-29 Add StreamPixels managed auth seams
  • 2026-04-29 Persist StreamPixels credential handoff state
  • 2026-04-29 Normalize OAuth token scopes
  • 2026-04-29 Record StreamPixels Twitch verification
  • 2026-04-29 Refresh managed provider credentials on resolve

Backlinks