| Doc | Covers |
|---|---|
| ARCHITECTURE.md | Rendering model, middleware chain, data source map, env var resolution, the abandoned -new redesign, directory layout |
| ENVIRONMENT.md | How .env / .dev.vars / Cloudflare dashboard env vars actually resolve, full variable audit table, known gaps |
| API.md | Reference table of every route under src/pages/api/: auth, upstream, notes |
| SECURITY.md | The security rules that came out of six audit rounds, each tied to the incident that produced it |
| NOTION.md | All 7 Notion databases, which routes consume each, the two integration patterns in use |
| EVENTS.md | The /events page in detail — Notion fetch, image handling, no-polling behavior |
| PROJECTS.md | ProjectHub integration for /projects, and how it differs from the unrelated project-proxy form endpoint |
| DONATIONS.md | QGIV → EmailOctopus/Hub → Plausible conversion pipeline, the KV dropped-event fallback, and the admin dashboard |
| E4P.md | Entrepreneurs for Palestine pledge/signatory flow |
Also relevant, at the repo root:
../CLAUDE.md— agent-facing project guidance (commands, conventions, security rules)../AGENTS.md— short pointer to the files above for non-Claude agents../CONTRIBUTING.md— setup and the pre-PR checklist../DEPLOYMENT.md— Cloudflare Pages deployment and the full environment variable list../PRODUCT.md/../DESIGN.md— brand, product positioning, and the live design systemsuperpowers/holds historical design specs and implementation plans. They record decisions at the time and are not current guidance; trust the code and the docs aboveadr/holds short architecture decision records