WARNING: The codebase is the only source of truth. This documentation may be secondary.
Docs may be outdated, incorrect, or aspirational. Some files describe features that no longer exist or have changed. Always verify claims against the actual source code and running system before acting on them. If there is a conflict between docs and code, the code wins.
setup/: Guides for local environment (Vite, Supabase CLI) and production deployment.architecture/: Architecture Decision Records (ADRs) and component descriptions (database schema, frontend state, token security).security/: Threat models (XSS/CSP, token lifecycle), compliance notes, and agent guidelines.integrations/: Google Workspace OAuth scopes and API quotas, Razorpay checkout flow and webhooks, Edge Function API reference.