Scoped identity
Server-backed sessions, tenant resolution, role checks, and feature entitlements are enforced on protected boundaries.
Tenant-aware by design
Use the live reference to understand request schemas and authenticated routes for workspaces, models, source files, training, chat streams, agents, approvals, plugins, and plan management.
Server-backed sessions, tenant resolution, role checks, and feature entitlements are enforced on protected boundaries.
Request sizes, schemas, search counts, URLs, redirects, and tool arguments are constrained before expensive or external work.
Unavailable connectors and workflow dispatch return explicit unavailable states instead of simulated success.
The production backend runs on the private VPS. GitHub Pages hosts only the static client and indexable public content; browser secrets are never used as backend credentials.