Start with the source of truth.
Create a workspace, connect authorized source, then explore or analyze changes.
Getting started
Run the Next frontend and FastAPI API after applying Alembic migrations. Both http://localhost:3000 and http://127.0.0.1:3000 are accepted in development at the configured port. Production accepts only explicit HTTPS origins. Create an account with any valid personal email and a 12-character or longer password.
GitHub App
Repository access requires backend GITHUB_APP_ID, GITHUB_APP_SLUG, GITHUB_PRIVATE_KEY_PATH, GITHUB_CLIENT_ID, GITHUB_CLIENT_SECRET, GITHUB_WEBHOOK_SECRET and SESSION_SECRET. Callback: frontend-origin/api/github/callback. Permissions: metadata/read, contents/read, pull requests/read, checks/write and organization members/read. No credentials means connection stays unavailable.
OAuth
Google: create a Web application OAuth client, external consent audience and authorized callback frontend-origin/api/auth/oauth/google/callback. Configure GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET securely on the API. GitHub: create a separate OAuth App with frontend-origin/api/auth/oauth/github/callback and GITHUB_LOGIN_CLIENT_ID/SECRET. Register exact local and production callback origins. Repository App authorization is separate from social login.
Repository intelligence
Open a connected repository, choose Explore code, select a branch and index it. Files, search, architecture and dependencies share that pinned index. Refresh after changes. Embedding search is optional; creating vectors and embedding a query both require OpenAI credentials and paid consent.
BYOK
Open provider settings and validate your own OpenAI or OpenRouter key. Listing models does not prove generation access. Keys disappear on refresh; nonsecret preferences can be saved. Each code-generating or answering operation requires explicit approval.
Troubleshooting
Origin errors: match the exact scheme, host and port; use ALLOWED_ORIGINS for extra trusted origins. GitHub unavailable: configure App credentials rather than a social OAuth client. Missing source: inspect index coverage or refresh a deleted/moved branch. Runner unavailable: supported static workflows continue; do not run repository code on the API host.