Every diagram on this page is an interactive Archify artifact generated from the repository at
1e55d62 — pan, switch themes, and export SVG/PNG from the fullscreen view. They are the
visual companion to Architecture: start here for the picture, then follow the
mid-content embeds on each topic page for the details.
Everything from everything to everything: actors, Vercel edge, the five apps, the data plane, and the SaaS fan-out. Dashed arrows are async, webhook, or failover paths.
The three-layer auth model — proxy gate, layout defense-in-depth, per-route RBAC — as a call chain. Also embedded mid-content in Workspace.
What happens between a demo-form submit and Salesforce, Slack, and the confirmation email. Also embedded in Lead Attribution.
Edit to fresh page: webhook, tag invalidation, and the workspace settings write-back. Also embedded in Content & CMS.
The public-500 playbook as a decision tree: roll back first, triage while it propagates. Also embedded in Runbooks.
Funnel stages, the two clocks that cannot race, and the revivable ReNurture state. Also embedded in 90-Day Deal Lifecycle.
The visitor state machine from loadLink to the watermarked view.
Also embedded in Memo Architecture.
Beacon batches, the API validates and splits raw events from visit state, and a cron derives cross-visit signals. Also embedded in Memo Observability.
Six gates before any page or handler: host, public bypass, Clerk, admission, org, server gate. Also embedded in Partners Authentication.
Signup to dashboard: verified email, company lookup, approval request, admin action, poll flip. Also embedded in Partners Authentication.
Editor postMessage to the marketing preview iframe, origin plus Zod guards, then the real production card — plus server-side conversion counting. Also embedded in Overture.
Every root request runs host, honeypot, scraper-UA, workspace-only, and rate-limit gates before rendering. Also embedded in Monorepo.
Primary SES/SMTP, one retry through the always-armed Resend backup, Sentry tags for triage. Also embedded in Runbooks.
Discovery, dynamic registration, authorize plus consent, token issue, and single-use refresh rotation to the first MCP call. Also embedded in Memo Access.
Stage, per-file esbuild compile, transactional commit, atomic flip for visitors. Also embedded in Publish Pipeline.
Registry defaults, stored routes, allSettled fan-out to in-app, email, and pinned Slack webhooks. Also embedded in Notifications.
Mongo-first ingest, dirty-bucket queue, three-pass reconcile, degraded-flag reads. Also embedded in Telemetry.
Stand up, verify on preview, set the Clerk cookie domain, add the subdomain, flip one env var. Also embedded in Deployment.
Batch capture, JWT-checked ingest, gz-blob appends, ownership-gated playback. Also embedded in Replay.
Factory, room-scoped token, transport join, Yjs sync, debounced durable save. Also embedded in Collaboration.
Same pipeline for preview and download, PII resolution in the middle, audit at the end. Also embedded in Data Export.
Svix verify, allowlist decide, purge-or-create enforce — with no session required. Also embedded in Webhooks.
Shared gate machine, slug-bound space JWT, membership-checked viewer, space-scoped visits. Also embedded in Spaces.
Bearer resolve, registry dispatch, actor-tagged audit per call. Also embedded in MCP Server.
One triangle repeated per module: private CPT, workspace studio, public pages, tagged cache. Also embedded in CPT Pattern.
Best-effort writes after success, critical-type alerts, RBAC-gated reads. Also embedded in Audit Log.
Diagrams live as versioned candidates under .archify/ at the repo root and are served from
apps/webdocs/public/diagrams/. To regenerate after an architecture change, run the
finalize command recorded in each candidate folder with --repo-root pointed at the repo,
then copy the HTML into public/diagrams/. Keep the diagram and the docs in the same PR —
stale diagrams are worse than none.