Start with the README, QUICK_START.md, and DEMO.md. This index is the compact map for setup, client integration, security, release, and maintenance docs.
- ../README.md / ../README.zh-CN.md - product overview and positioning.
- QUICK_START.md / QUICK_START.zh-CN.md - local-first setup for one server, one agent, one project, and one client.
- DEMO.md / DEMO.zh-CN.md - expected safe coding workflow.
- CONCEPTS.md / CONCEPTS.zh-CN.md - vocabulary and mental model.
- ARCHITECTURE.md - product architecture and Rust module map.
- MCP.md / MCP.zh-CN.md - remote MCP endpoint, authentication, default coding loop, read-only LSP and validation intelligence, and common MCP errors.
- GPT_ACTIONS.md / GPT_ACTIONS.zh-CN.md - Custom GPT setup, OpenAPI import, authentication, generic validation-summary access, and workflow guidance.
- assets/README.md / assets/README.zh-CN.md - screenshots used by MCP and GPT Actions guides.
- BUILD_INSTALL.md / BUILD_INSTALL.zh-CN.md - build/install command reference and artifact details.
- DEPLOYMENT.md / DEPLOYMENT.zh-CN.md - production server bootstrap, HTTPS, systemd, OAuth, QUIC, and smoke checks.
- OPERATIONS.md - day-to-day operations, token model, project registration, session workflow, and smoke testing.
- TROUBLESHOOTING.md / TROUBLESHOOTING.zh-CN.md - common deployment and integration failures.
- ../SECURITY.md - security model, model capabilities, project boundary, shell/job risk, token handling, audit evidence, revocation, and vulnerability reporting.
- AUTH_MODEL.md / AUTH_MODEL.zh-CN.md - shared key, bootstrap token, account credential, PAT, OAuth token, agent token, and hash storage.
- OAUTH2_INTERNALS.md - OAuth2 storage, client management, authorize flow, token exchange, revocation, and delegated scope enforcement.
- OAUTH2_SMOKE_TEST.md - manual end-to-end OAuth2 validation.
- OAUTH2_BRIDGE_THREAT_MODEL.md - shared-key OAuth bridge threat model and subject model constraints.
- AGENT_PROJECTS.md / AGENT_PROJECTS.zh-CN.md - agent project registry format and runtime project ids.
- AGENT_TRANSPORTS.md / AGENT_TRANSPORTS.zh-CN.md - QUIC, WebSocket, polling, fallback, and transport validation.
- AGENT_PROTOCOL.md / AGENT_PROTOCOL.zh-CN.md - agent auth, identity, typed read-only LSP bridge, protocol, and redacted policy summaries.
- SHELL_PROFILES.md / SHELL_PROFILES.zh-CN.md - prepared shell environment snapshots and safety boundaries.
- LSP_NAVIGATION.md - read-only Rust LSP navigation tools, startup capability summary, boundaries, limits, and error codes.
- RELEASE_NOTES_v0.2.0.md - external-facing 0.2.0 release notes.
- RELEASE_CHECKLIST.md - release readiness and acceptance procedure.
- ROADMAP.md / ROADMAP.zh-CN.md - short roadmap.
- TESTING.md - test lanes, test layout, and ignored-test inventory.
- E2E_VALIDATION.md / E2E_VALIDATION.zh-CN.md - local end-to-end validation scripts and documentation scan guidance.
- ../AGENTS.md - agent execution contract (safety, editing, git, validation, architecture musts).
- agent/architecture-decisions.md, agent/session-model.md, agent/session-correlation.md, agent/permission-model.md, agent/oauth-bridge-plan.md, agent/openapi-guidelines.md, agent/release-process.md - long-form design moved out of AGENTS.md (session dual model, optional session correlation, permission decision layer, OAuth bridge, OpenAPI, release).