operator notes
self-hosted by design, distributed deliberately
Sidelined is a single-operator deployment, not public SaaS. This page documents the runtime and access boundary so evaluators can understand what self-hosting entails without mistaking this hosted instance for an open signup or download service.
what runs
- A Next.js application and one Postgres 17 database.
- An HTTPS origin supplied as
BASE_URL, used for browser, OAuth, MCP, and public discovery URLs. - An OIDC provider, encrypted session secret, and email allowlist for the hosted human interface.
- Bearer-authenticated MCP for agents, using API keys or a pre-registered OAuth client.
storage and portability
Documents are stored as Postgres rows and reconstructed as Markdown with YAML frontmatter when read. Append-only revisions retain actor attribution. Project owners can download a one-way ZIP containing every current Markdown body. The export excludes frontmatter, project metadata, and revision history; there is no import, restore, or full-instance backup workflow.
source and hosted access
The source repository and production image registry are not anonymously readable today. Source distribution is limited to authorized operators, and this hosted instance is allowlisted. No public signup, public install artifact, or anonymous project data is offered here.