docs: update site-docs, server docs, and shared READMEs
Documentation refresh accompanying the 2026-06-05 launch-plan wave:
site-docs guide/about/legal pages, server architecture/cli docs,
multithreaded oauth flow, and docengine/synckit-client docs.
- Co-Authored-By
- Claude Opus 4.8 (1M context) <noreply@anthropic.com>
20 files changed,
+35 insertions,
-35 deletions
| 178 |
178 |
|
- `src/csrf.rs` -- CSRF token generation, middleware, constant-time comparison
|
| 179 |
179 |
|
- `src/internal_auth.rs` -- HMAC-SHA256 auth for MNW-to-MT internal API (separate from OAuth)
|
| 180 |
180 |
|
- `src/main.rs` -- session store setup, session layer config, middleware stack
|
| 181 |
|
- |
- `deploy/env.hetzner` -- production env vars (hetzner)
|
| 182 |
|
- |
- `deploy/env.production` -- production env vars (astra)
|
|
181 |
+ |
- `deploy/deploy-hetzner.sh`, `deploy/deploy.sh` -- deploy scripts (production env vars are provisioned on-server, not committed to the repo)
|
| 344 |
344 |
|
| Error types | `src/error.rs` |
|
| 345 |
345 |
|
| Authentication | `src/auth.rs` |
|
| 346 |
346 |
|
| CSRF middleware | `src/csrf.rs` |
|
| 347 |
|
- |
| Database modules | `src/db/` (49 submodules) |
|
|
347 |
+ |
| Database modules | `src/db/` (65 files) |
|
| 348 |
348 |
|
| Route modules | `src/routes/` (17 submodules) |
|
| 349 |
349 |
|
| Template structs | `src/templates/` |
|
| 350 |
350 |
|
| Email service | `src/email/` |
|
| 608 |
608 |
|
|
| 609 |
609 |
|
## Key Paths
|
| 610 |
610 |
|
|
| 611 |
|
- |
- Design doc: `docs/mnw/server/cli.md` (this file)
|
|
611 |
+ |
- Design doc: `server/docs/cli.md` (this file)
|
| 612 |
612 |
|
- Project code: `mnw-cli/`
|
| 613 |
613 |
|
- MNW API routes: `MNW/server/src/routes/api/`
|
| 614 |
614 |
|
- MNW SSH key storage: `MNW/server/src/db/` (user_ssh_keys queries)
|
| 105 |
105 |
|
|
| 106 |
106 |
|
| Project | Features used | Preset |
|
| 107 |
107 |
|
|---------|--------------|--------|
|
| 108 |
|
- |
| MNW | `doc-loader`, `directives`, `frontmatter`, `media-urls` | Permissive (docs/blog), Standard (descriptions) |
|
|
108 |
+ |
| MNW | `doc-loader`, `directives`, `frontmatter`, `media-urls`, `assumptions` | Permissive (docs/blog), Standard (descriptions) |
|
| 109 |
109 |
|
| Multithreaded | `mentions`, `quotes` | Strict (forum posts) |
|
| 110 |
110 |
|
| GoingsOn | core only | Standard (notes, descriptions) |
|
| 111 |
111 |
|
| Balanced Breakfast | core only | Sanitize-only (RSS feed content) |
|
| 14 |
14 |
|
```
|
| 15 |
15 |
|
src/
|
| 16 |
16 |
|
lib.rs Crate root. Re-exports public types, quick-start doc example.
|
| 17 |
|
- |
client.rs SyncKitClient struct and all HTTP methods (auth, push/pull,
|
| 18 |
|
- |
blobs, devices, encryption setup). Retry logic and token
|
|
17 |
+ |
client/ SyncKitClient struct and all HTTP methods, split across
|
|
18 |
+ |
submodules (auth, sync, blob, encryption, rotation,
|
|
19 |
+ |
subscribe, subscription, helpers). Retry logic and token
|
| 19 |
20 |
|
expiry detection live here.
|
| 20 |
21 |
|
crypto.rs Encryption engine. Key derivation (Argon2id), key wrapping
|
| 21 |
22 |
|
(XChaCha20-Poly1305), per-entry encrypt/decrypt, blob
|