Explore what your code knows.

CodeFacts uses Tauri v2 with a React + TypeScript frontend. Tailwind CSS handles layout and the checked-in shadcn/ui components provide accessible controls without a runtime design-system service.

GitHub network calls stay in Rust so the webview never receives cross-origin privileges beyond Tauri IPC.

The iOS app authorizes with GitHub's OAuth Device Flow. The public OAuth client ID is bundled with the app and may be overridden at build time with VITE_GITHUB_CLIENT_ID; no client secret ships in the app.

The OAuth access token is held by Rust and persisted in the Apple Keychain. The repo read:org scopes let the app discover private and organization repositories; CodeFacts only performs read requests.

The website uses GitHub's web flow through Cloudflare Pages Functions. It validates state, uses PKCE, keeps the client secret in a Pages secret, and stores the resulting token in a secure HTTP-only cookie. Same-origin Functions proxy repository and .codefacts/ reads so the token is never exposed to browser JavaScript.

Each UTF-8 .md, .markdown, .txt, or .json file below .codefacts/ becomes one card. Directories are explored recursively and cards are ordered by path.

Markdown uses its first # Heading as the title and may begin with YAML front matter containing status, verified, and sources. JSON may provide the same metadata alongside title or name plus body, content, or summary:

{
  "title": "API contract",
  "body": "Responses use camelCase.",
  "status": "active",
  "verified": "2025-08-14",
  "sources": ["https://example.com/api"]
}

The web deck includes cards whose status is active or omitted for backward compatibility. It renders the verified date beneath the title, carries sources as non-visible provenance metadata, and gives only content that does not fit in the card a clipped preview and Read more dialog instead of scrolling inside the card.

The shared @codefacts/markdown package renders inline code and fenced code blocks in both clients without allowing raw HTML. Other files use their filename as the title. Files over 256 KiB are ignored because cards are prose, not artifacts.

The Home Screen widget is a native WidgetKit extension. The app writes the selected card through tauri-plugin-widgets into App Group group.me.aevsai.codefacts, then asks WidgetKit to reload its timeline.

Infisical is the source of build and release configuration. The GitHub client ID is public but lives there with the Apple team, signing, and App Store Connect values so local and CI builds use one injection path.

The repository uses pnpm workspaces and Turbo with two apps: the Tauri iOS client in apps/mobile and a static Astro site in apps/web.

The single-screen website at codefacts.aevsai.me reads these same .codefacts/ files at build time and publishes /skill.md for agent installation. This keeps the sample and agent instructions versioned with the product instead of creating separate content sources.