Use this section as the quick dependency map before you dive into app-specific code or canonical feature specs. Each dependency page explains what the repo uses it for, why that choice was made, how upgrades should be approached, and which canonical sources to read next.
Support-dev dependency pages are orientation docs. They should make the repo easier to understand, not duplicate full specs, changelogs, or implementation history.
| Dependency |
Where it matters |
Why we use it |
| Better Auth |
apps/auth, packages/nuxt-auth-layer, apps/web, apps/web-token-replacer, apps/api |
Web identity, sessions, workforce SSO, connector OAuth account binding, and API runtime auth checks. |
| Payload |
apps/cms-customer, apps/cms-leverage |
Native CMS operator accounts, customer control-plane content, and Leverage-owned internal review surfaces. |
| Nuxt |
apps/web, apps/web-token-replacer, packages/nuxt-auth-layer |
Main authenticated workspace UI, token replacer shell, and shared Nuxt auth layer. |
| Feathers |
apps/api, apps/web |
Authenticated SSE realtime transport for connector, chat/sidebar, HITL, notification, and safe system-status events. |
| Astro Starlight |
apps/support-dev |
This developer support site. |
| Dependency |
Where it matters |
Why we use it |
| Mastra |
apps/api |
Agents, workflows, memory, tools, eval datasets/scorers, storage, observability, and Studio inspection. |
| Meltano |
apps/meltano, apps/api, packages/taps/* |
Indexed connector extraction and sync orchestration for providers that retain searchable indexed data. |
| Dependency |
Where it matters |
Why we use it |
| MongoDB |
Auth, CMS, API, Mastra, local infra |
Durable metadata, auth state, CMS content, connector state, and Mastra runtime memory. |
| Prisma ORM |
apps/api |
Typed access to API-owned MongoDB models and explicit schema/index sync for those collections. |
| Redis |
apps/api, apps/meltano, local infra |
Shared low-latency coordination store used by queueing, connector sync runtime paths, and realtime fanout. |
| BullMQ |
apps/api |
Redis-backed connector sync queues and worker coordination. |
| Qdrant |
apps/api, local infra |
Vector retrieval for indexed connector content, stored chunk text, and research vectors. |
| ClickHouse |
apps/api, local observability profile |
Mastra observability storage when the configured provider is ClickHouse. |
| LibSQL |
apps/api |
Mastra eval datasets, experiments, and scorer storage domains. |
web owns the main user-facing Nuxt workspace UI.web-token-replacer owns the future token replacer Nuxt app shell.packages/nuxt-auth-layer owns shared Nuxt auth UI/session/runtime code for web-user apps.auth owns Better Auth routes, setup, and workforce SSO provider registration.api owns Mastra runtime, connector orchestration, chat APIs, queues, retrieval, live-query tools, and Feathers realtime SSE.cms-customer owns customer/deployment control-plane settings and operator review surfaces.cms-leverage owns Leverage-operated internal review and product-improvement workflows.support-dev is a concise Astro/Starlight mirror of current repo shape. It is not a canonical requirements source.
- Use the dependency page first to find the owned package pins, image tags, repo verification commands, and canonical feature docs.
- Use the official dependency docs second for the current upgrade command, migration notes, and version-specific breaking changes.
- Do not update shared data stores, auth persistence, CMS schemas, or customer-cluster deployment behavior without checking the relevant
docs/features/** specs first.
apps/api/package.jsonapps/api/prisma/schema.prismaapps/support-dev/src/content/docs/dependencies/apps/support-dev/package.jsondocker-compose.ymldocs/features/authentication/spec.mddocs/features/connectors/spec.mddocs/features/chat/spec.mddocs/features/cms-control-plane-split/spec.md