Getting started

Run the web workspace

From the repo root, install dependencies and start the app you need:

1. pnpm install
2. pnpm --filter apps-site dev for this public site.
3. pnpm --filter web dev for the authenticated dashboard.

Open the right surface

• The Astro public site owns landing pages and docs.
• The TanStack Start dashboard owns sign-in and protected app routes.
• Use /auth/sign-in to enter the dashboard auth flow.

Configure auth for dashboard work

Copy .env.example to .env.local when working on real dashboard auth. WorkOS secrets stay in local environment files and should never be committed.

Connect the CLI

Run bindhub login to connect this machine. The CLI opens the dashboard's/auth/cli route, waits for browser sign-in, then stores the returned Bindhub session locally. The API derives account identity from the verified browser session; do not pass raw account IDs for hosted browser auth.

For CI or local alpha work without live WorkOS, setBINDHUB_LOCAL_DEV_CLI_AUTH=1 with a local API URL and service token. That mode is local-dev only and is not production authentication. The direct local session helper additionally requiresBINDHUB_API_ENABLE_LOCAL_DEV_SESSION=1 on the API and loopback API URLs in the CLI by default.

Before connecting real folders

Read the trust page. Bindhub is designed for messy developer folders, but secrets, generated files, sparse cache state, and local overlays need clear policy before they are treated as safe continuity.