durar-ai 2026.4.4

package/docs/help/troubleshooting.md

@@ -0,0 +1,372 @@
+---
+summary: "Symptom first troubleshooting hub for Durar"
+read_when:
+  - Durar is not working and you need the fastest path to a fix
+  - You want a triage flow before diving into deep runbooks
+title: "General Troubleshooting"
+---
+
+# Troubleshooting
+
+If you only have 2 minutes, use this page as a triage front door.
+
+## First 60 seconds
+
+Run this exact ladder in order:
+
+```bash
+Durar status
+Durar status --all
+Durar gateway probe
+Durar gateway status
+Durar doctor
+Durar channels status --probe
+Durar logs --follow
+```
+
+Good output in one line:
+
+- `Durar status` → shows configured channels and no obvious auth errors.
+- `Durar status --all` → full report is present and shareable.
+- `Durar gateway probe` → expected gateway target is reachable (`Reachable: yes`). `RPC: limited - missing scope: operator.read` is degraded diagnostics, not a connect failure.
+- `Durar gateway status` → `Runtime: running` and `RPC probe: ok`.
+- `Durar doctor` → no blocking config/service errors.
+- `Durar channels status --probe` → reachable gateway returns live per-account
+  transport state plus probe/audit results such as `works` or `audit ok`; if the
+  gateway is unreachable, the command falls back to config-only summaries.
+- `Durar logs --follow` → steady activity, no repeating fatal errors.
+
+## Anthropic long context 429
+
+If you see:
+`HTTP 429: rate_limit_error: Extra usage is required for long context requests`,
+go to [/gateway/troubleshooting#anthropic-429-extra-usage-required-for-long-context](/gateway/troubleshooting#anthropic-429-extra-usage-required-for-long-context).
+
+## Plugin install fails with missing Durar extensions
+
+If install fails with `package.json missing Durar.extensions`, the plugin package
+is using an old shape that Durar no longer accepts.
+
+Fix in the plugin package:
+
+1. Add `Durar.extensions` to `package.json`.
+2. Point entries at built runtime files (usually `./dist/index.js`).
+3. Republish the plugin and run `Durar plugins install <package>` again.
+
+Example:
+
+```json
+{
+  "name": "@Durar/my-plugin",
+  "version": "1.2.3",
+  "Durar": {
+    "extensions": ["./dist/index.js"]
+  }
+}
+```
+
+Reference: [Plugin architecture](/plugins/architecture)
+
+## Decision tree
+
+```mermaid
+flowchart TD
+  A[Durar is not working] --> B{What breaks first}
+  B --> C[No replies]
+  B --> D[Dashboard or Control UI will not connect]
+  B --> E[Gateway will not start or service not running]
+  B --> F[Channel connects but messages do not flow]
+  B --> G[Cron or heartbeat did not fire or did not deliver]
+  B --> H[Node is paired but camera canvas screen exec fails]
+  B --> I[Browser tool fails]
+
+  C --> C1[/No replies section/]
+  D --> D1[/Control UI section/]
+  E --> E1[/Gateway section/]
+  F --> F1[/Channel flow section/]
+  G --> G1[/Automation section/]
+  H --> H1[/Node tools section/]
+  I --> I1[/Browser section/]
+```
+
+<AccordionGroup>
+  <Accordion title="No replies">
+    ```bash
+    Durar status
+    Durar gateway status
+    Durar channels status --probe
+    Durar pairing list --channel <channel> [--account <id>]
+    Durar logs --follow
+    ```
+
+    Good output looks like:
+
+    - `Runtime: running`
+    - `RPC probe: ok`
+    - Your channel shows transport connected and, where supported, `works` or `audit ok` in `channels status --probe`
+    - Sender appears approved (or DM policy is open/allowlist)
+
+    Common log signatures:
+
+    - `drop guild message (mention required` → mention gating blocked the message in Discord.
+    - `pairing request` → sender is unapproved and waiting for DM pairing approval.
+    - `blocked` / `allowlist` in channel logs → sender, room, or group is filtered.
+
+    Deep pages:
+
+    - [/gateway/troubleshooting#no-replies](/gateway/troubleshooting#no-replies)
+    - [/channels/troubleshooting](/channels/troubleshooting)
+    - [/channels/pairing](/channels/pairing)
+
+  </Accordion>
+
+  <Accordion title="Dashboard or Control UI will not connect">
+    ```bash
+    Durar status
+    Durar gateway status
+    Durar logs --follow
+    Durar doctor
+    Durar channels status --probe
+    ```
+
+    Good output looks like:
+
+    - `Dashboard: http://...` is shown in `Durar gateway status`
+    - `RPC probe: ok`
+    - No auth loop in logs
+
+    Common log signatures:
+
+    - `device identity required` → HTTP/non-secure context cannot complete device auth.
+    - `origin not allowed` → browser `Origin` is not allowed for the Control UI
+      gateway target.
+    - `AUTH_TOKEN_MISMATCH` with retry hints (`canRetryWithDeviceToken=true`) → one trusted device-token retry may occur automatically.
+    - That cached-token retry reuses the cached scope set stored with the paired
+      device token. Explicit `deviceToken` / explicit `scopes` callers keep
+      their requested scope set instead.
+    - On the async Tailscale Serve Control UI path, failed attempts for the same
+      `{scope, ip}` are serialized before the limiter records the failure, so a
+      second concurrent bad retry can already show `retry later`.
+    - `too many failed authentication attempts (retry later)` from a localhost
+      browser origin → repeated failures from that same `Origin` are temporarily
+      locked out; another localhost origin uses a separate bucket.
+    - repeated `unauthorized` after that retry → wrong token/password, auth mode mismatch, or stale paired device token.
+    - `gateway connect failed:` → UI is targeting the wrong URL/port or unreachable gateway.
+
+    Deep pages:
+
+    - [/gateway/troubleshooting#dashboard-control-ui-connectivity](/gateway/troubleshooting#dashboard-control-ui-connectivity)
+    - [/web/control-ui](/web/control-ui)
+    - [/gateway/authentication](/gateway/authentication)
+
+  </Accordion>
+
+  <Accordion title="Gateway will not start or service installed but not running">
+    ```bash
+    Durar status
+    Durar gateway status
+    Durar logs --follow
+    Durar doctor
+    Durar channels status --probe
+    ```
+
+    Good output looks like:
+
+    - `Service: ... (loaded)`
+    - `Runtime: running`
+    - `RPC probe: ok`
+
+    Common log signatures:
+
+    - `Gateway start blocked: set gateway.mode=local` or `existing config is missing gateway.mode` → gateway mode is remote, or the config file is missing the local-mode stamp and should be repaired.
+    - `refusing to bind gateway ... without auth` → non-loopback bind without a valid gateway auth path (token/password, or trusted-proxy where configured).
+    - `another gateway instance is already listening` or `EADDRINUSE` → port already taken.
+
+    Deep pages:
+
+    - [/gateway/troubleshooting#gateway-service-not-running](/gateway/troubleshooting#gateway-service-not-running)
+    - [/gateway/background-process](/gateway/background-process)
+    - [/gateway/configuration](/gateway/configuration)
+
+  </Accordion>
+
+  <Accordion title="Channel connects but messages do not flow">
+    ```bash
+    Durar status
+    Durar gateway status
+    Durar logs --follow
+    Durar doctor
+    Durar channels status --probe
+    ```
+
+    Good output looks like:
+
+    - Channel transport is connected.
+    - Pairing/allowlist checks pass.
+    - Mentions are detected where required.
+
+    Common log signatures:
+
+    - `mention required` → group mention gating blocked processing.
+    - `pairing` / `pending` → DM sender is not approved yet.
+    - `not_in_channel`, `missing_scope`, `Forbidden`, `401/403` → channel permission token issue.
+
+    Deep pages:
+
+    - [/gateway/troubleshooting#channel-connected-messages-not-flowing](/gateway/troubleshooting#channel-connected-messages-not-flowing)
+    - [/channels/troubleshooting](/channels/troubleshooting)
+
+  </Accordion>
+
+  <Accordion title="Cron or heartbeat did not fire or did not deliver">
+    ```bash
+    Durar status
+    Durar gateway status
+    Durar cron status
+    Durar cron list
+    Durar cron runs --id <jobId> --limit 20
+    Durar logs --follow
+    ```
+
+    Good output looks like:
+
+    - `cron.status` shows enabled with a next wake.
+    - `cron runs` shows recent `ok` entries.
+    - Heartbeat is enabled and not outside active hours.
+
+    Common log signatures:
+
+- `cron: scheduler disabled; jobs will not run automatically` → cron is disabled.
+- `heartbeat skipped` with `reason=quiet-hours` → outside configured active hours.
+- `heartbeat skipped` with `reason=empty-heartbeat-file` → `HEARTBEAT.md` exists but only contains blank/header-only scaffolding.
+- `heartbeat skipped` with `reason=no-tasks-due` → `HEARTBEAT.md` task mode is active but none of the task intervals are due yet.
+- `heartbeat skipped` with `reason=alerts-disabled` → all heartbeat visibility is disabled (`showOk`, `showAlerts`, and `useIndicator` are all off).
+- `requests-in-flight` → main lane busy; heartbeat wake was deferred. - `unknown accountId` → heartbeat delivery target account does not exist.
+
+      Deep pages:
+
+      - [/gateway/troubleshooting#cron-and-heartbeat-delivery](/gateway/troubleshooting#cron-and-heartbeat-delivery)
+      - [/automation/cron-jobs#troubleshooting](/automation/cron-jobs#troubleshooting)
+      - [/gateway/heartbeat](/gateway/heartbeat)
+
+    </Accordion>
+
+    <Accordion title="Node is paired but tool fails camera canvas screen exec">
+      ```bash
+      Durar status
+      Durar gateway status
+      Durar nodes status
+      Durar nodes describe --node <idOrNameOrIp>
+      Durar logs --follow
+      ```
+
+      Good output looks like:
+
+      - Node is listed as connected and paired for role `node`.
+      - Capability exists for the command you are invoking.
+      - Permission state is granted for the tool.
+
+      Common log signatures:
+
+      - `NODE_BACKGROUND_UNAVAILABLE` → bring node app to foreground.
+      - `*_PERMISSION_REQUIRED` → OS permission was denied/missing.
+      - `SYSTEM_RUN_DENIED: approval required` → exec approval is pending.
+      - `SYSTEM_RUN_DENIED: allowlist miss` → command not on exec allowlist.
+
+      Deep pages:
+
+      - [/gateway/troubleshooting#node-paired-tool-fails](/gateway/troubleshooting#node-paired-tool-fails)
+      - [/nodes/troubleshooting](/nodes/troubleshooting)
+      - [/tools/exec-approvals](/tools/exec-approvals)
+
+    </Accordion>
+
+    <Accordion title="Exec suddenly asks for approval">
+      ```bash
+      Durar config get tools.exec.host
+      Durar config get tools.exec.security
+      Durar config get tools.exec.ask
+      Durar gateway restart
+      ```
+
+      What changed:
+
+      - If `tools.exec.host` is unset, the default is `auto`.
+      - `host=auto` resolves to `sandbox` when a sandbox runtime is active, `gateway` otherwise.
+      - `host=auto` is routing only; the no-prompt "YOLO" behavior comes from `security=full` plus `ask=off` on gateway/node.
+      - On `gateway` and `node`, unset `tools.exec.security` defaults to `full`.
+      - Unset `tools.exec.ask` defaults to `off`.
+      - Result: if you are seeing approvals, some host-local or per-session policy tightened exec away from the current defaults.
+
+      Restore current default no-approval behavior:
+
+      ```bash
+      Durar config set tools.exec.host gateway
+      Durar config set tools.exec.security full
+      Durar config set tools.exec.ask off
+      Durar gateway restart
+      ```
+
+      Safer alternatives:
+
+      - Set only `tools.exec.host=gateway` if you just want stable host routing.
+      - Use `security=allowlist` with `ask=on-miss` if you want host exec but still want review on allowlist misses.
+      - Enable sandbox mode if you want `host=auto` to resolve back to `sandbox`.
+
+      Common log signatures:
+
+      - `Approval required.` → command is waiting on `/approve ...`.
+      - `SYSTEM_RUN_DENIED: approval required` → node-host exec approval is pending.
+      - `exec host=sandbox requires a sandbox runtime for this session` → implicit/explicit sandbox selection but sandbox mode is off.
+
+      Deep pages:
+
+      - [/tools/exec](/tools/exec)
+      - [/tools/exec-approvals](/tools/exec-approvals)
+      - [/gateway/security#runtime-expectation-drift](/gateway/security#runtime-expectation-drift)
+
+    </Accordion>
+
+    <Accordion title="Browser tool fails">
+      ```bash
+      Durar status
+      Durar gateway status
+      Durar browser status
+      Durar logs --follow
+      Durar doctor
+      ```
+
+      Good output looks like:
+
+      - Browser status shows `running: true` and a chosen browser/profile.
+      - `Durar` starts, or `user` can see local Chrome tabs.
+
+      Common log signatures:
+
+      - `unknown command "browser"` or `unknown command 'browser'` → `plugins.allow` is set and does not include `browser`.
+      - `Failed to start Chrome CDP on port` → local browser launch failed.
+      - `browser.executablePath not found` → configured binary path is wrong.
+      - `browser.cdpUrl must be http(s) or ws(s)` → the configured CDP URL uses an unsupported scheme.
+      - `browser.cdpUrl has invalid port` → the configured CDP URL has a bad or out-of-range port.
+      - `No Chrome tabs found for profile="user"` → the Chrome MCP attach profile has no open local Chrome tabs.
+      - `Remote CDP for profile "<name>" is not reachable` → the configured remote CDP endpoint is not reachable from this host.
+      - `Browser attachOnly is enabled ... not reachable` or `Browser attachOnly is enabled and CDP websocket ... is not reachable` → attach-only profile has no live CDP target.
+      - stale viewport / dark-mode / locale / offline overrides on attach-only or remote CDP profiles → run `Durar browser stop --browser-profile <name>` to close the active control session and release emulation state without restarting the gateway.
+
+      Deep pages:
+
+      - [/gateway/troubleshooting#browser-tool-fails](/gateway/troubleshooting#browser-tool-fails)
+      - [/tools/browser#missing-browser-command-or-tool](/tools/browser#missing-browser-command-or-tool)
+      - [/tools/browser-linux-troubleshooting](/tools/browser-linux-troubleshooting)
+      - [/tools/browser-wsl2-windows-remote-cdp-troubleshooting](/tools/browser-wsl2-windows-remote-cdp-troubleshooting)
+
+    </Accordion>
+  </AccordionGroup>
+
+## Related
+
+- [FAQ](/help/faq) — frequently asked questions
+- [Gateway Troubleshooting](/gateway/troubleshooting) — gateway-specific issues
+- [Doctor](/gateway/doctor) — automated health checks and repairs
+- [Channel Troubleshooting](/channels/troubleshooting) — channel connectivity issues
+- [Automation Troubleshooting](/automation/cron-jobs#troubleshooting) — cron and heartbeat issues

package/docs/images/groups-flow.svg

@@ -0,0 +1,52 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="960" height="260" viewBox="0 0 960 260" role="img" aria-label="Group message flow">
+  <defs>
+    <style>
+      .box { fill: #f6f5f3; stroke: #2b2b2b; stroke-width: 2; }
+      .drop { fill: #fff1f1; stroke: #a33; stroke-width: 2; }
+      .note { fill: #fffaf0; stroke: #9a7b00; stroke-width: 2; }
+      .text { font: 14px "SF Pro Text", -apple-system, Helvetica, Arial, sans-serif; fill: #1a1a1a; }
+      .label { font: 12px "SF Pro Text", -apple-system, Helvetica, Arial, sans-serif; fill: #333; }
+      .arrow { stroke: #2b2b2b; stroke-width: 2; fill: none; marker-end: url(#arrow); }
+    </style>
+    <marker id="arrow" markerWidth="10" markerHeight="10" refX="8" refY="3" orient="auto">
+      <path d="M0,0 L8,3 L0,6 Z" fill="#2b2b2b" />
+    </marker>
+  </defs>
+
+  <rect class="box" x="20" y="40" width="140" height="60" rx="8" />
+  <text class="text" x="90" y="75" text-anchor="middle">Group message</text>
+
+  <rect class="box" x="200" y="40" width="160" height="60" rx="8" />
+  <text class="text" x="280" y="68" text-anchor="middle">Group policy</text>
+  <text class="label" x="280" y="86" text-anchor="middle">open / disabled / allowlist</text>
+
+  <rect class="box" x="400" y="40" width="150" height="60" rx="8" />
+  <text class="text" x="475" y="75" text-anchor="middle">Allowlist</text>
+
+  <rect class="box" x="580" y="40" width="170" height="60" rx="8" />
+  <text class="text" x="665" y="68" text-anchor="middle">Mention gating</text>
+  <text class="label" x="665" y="86" text-anchor="middle">requireMention</text>
+
+  <rect class="box" x="780" y="40" width="140" height="60" rx="8" />
+  <text class="text" x="850" y="75" text-anchor="middle">Reply</text>
+
+  <line class="arrow" x1="160" y1="70" x2="200" y2="70" />
+  <line class="arrow" x1="360" y1="70" x2="400" y2="70" />
+  <line class="arrow" x1="550" y1="70" x2="580" y2="70" />
+  <line class="arrow" x1="750" y1="70" x2="780" y2="70" />
+
+  <rect class="drop" x="220" y="150" width="120" height="50" rx="8" />
+  <text class="text" x="280" y="180" text-anchor="middle">Drop</text>
+  <line class="arrow" x1="280" y1="100" x2="280" y2="150" />
+  <text class="label" x="250" y="130" text-anchor="end">disabled</text>
+
+  <rect class="drop" x="410" y="150" width="120" height="50" rx="8" />
+  <text class="text" x="470" y="180" text-anchor="middle">Drop</text>
+  <line class="arrow" x1="475" y1="100" x2="470" y2="150" />
+  <text class="label" x="445" y="130" text-anchor="end">not allowed</text>
+
+  <rect class="note" x="600" y="150" width="200" height="50" rx="8" />
+  <text class="text" x="700" y="175" text-anchor="middle">Store for context</text>
+  <text class="label" x="700" y="192" text-anchor="middle">(no mention)</text>
+  <line class="arrow" x1="665" y1="100" x2="700" y2="150" />
+</svg>

package/docs/index.md

@@ -0,0 +1,196 @@
+---
+summary: "Durar is a multi-channel gateway for AI agents that runs on any OS."
+read_when:
+  - Introducing Durar to newcomers
+title: "Durar"
+---
+
+# Durar 🦞
+
+<p align="center">
+    <img
+        src="/assets/Durar-logo-text-dark.png"
+        alt="Durar"
+        width="500"
+        class="dark:hidden"
+    />
+    <img
+        src="/assets/Durar-logo-text.png"
+        alt="Durar"
+        width="500"
+        class="hidden dark:block"
+    />
+</p>
+
+> _"EXFOLIATE! EXFOLIATE!"_ — A space lobster, probably
+
+<p align="center">
+  <strong>Any OS gateway for AI agents across Discord, Google Chat, iMessage, Matrix, Microsoft Teams, Signal, Slack, Telegram, WhatsApp, Zalo, and more.</strong><br />
+  Send a message, get an agent response from your pocket. Run one Gateway across built-in channels, bundled channel plugins, WebChat, and mobile nodes.
+</p>
+
+<Columns>
+  <Card title="Get Started" href="/start/getting-started" icon="rocket">
+    Install Durar and bring up the Gateway in minutes.
+  </Card>
+  <Card title="Run Onboarding" href="/start/wizard" icon="sparkles">
+    Guided setup with `Durar onboard` and pairing flows.
+  </Card>
+  <Card title="Open the Control UI" href="/web/control-ui" icon="layout-dashboard">
+    Launch the browser dashboard for chat, config, and sessions.
+  </Card>
+</Columns>
+
+## What is Durar?
+
+Durar is a **self-hosted gateway** that connects your favorite chat apps and channel surfaces — built-in channels plus bundled or external channel plugins such as Discord, Google Chat, iMessage, Matrix, Microsoft Teams, Signal, Slack, Telegram, WhatsApp, Zalo, and more — to AI coding agents like Pi. You run a single Gateway process on your own machine (or a server), and it becomes the bridge between your messaging apps and an always-available AI assistant.
+
+**Who is it for?** Developers and power users who want a personal AI assistant they can message from anywhere — without giving up control of their data or relying on a hosted service.
+
+**What makes it different?**
+
+- **Self-hosted**: runs on your hardware, your rules
+- **Multi-channel**: one Gateway serves built-in channels plus bundled or external channel plugins simultaneously
+- **Agent-native**: built for coding agents with tool use, sessions, memory, and multi-agent routing
+- **Open source**: MIT licensed, community-driven
+
+**What do you need?** Node 24 (recommended), or Node 22 LTS (`22.14+`) for compatibility, an API key from your chosen provider, and 5 minutes. For best quality and security, use the strongest latest-generation model available.
+
+## How it works
+
+```mermaid
+flowchart LR
+  A["Chat apps + plugins"] --> B["Gateway"]
+  B --> C["Pi agent"]
+  B --> D["CLI"]
+  B --> E["Web Control UI"]
+  B --> F["macOS app"]
+  B --> G["iOS and Android nodes"]
+```
+
+The Gateway is the single source of truth for sessions, routing, and channel connections.
+
+## Key capabilities
+
+<Columns>
+  <Card title="Multi-channel gateway" icon="network">
+    Discord, iMessage, Signal, Slack, Telegram, WhatsApp, WebChat, and more with a single Gateway process.
+  </Card>
+  <Card title="Plugin channels" icon="plug">
+    Bundled plugins add Matrix, Nostr, Twitch, Zalo, and more in normal current releases.
+  </Card>
+  <Card title="Multi-agent routing" icon="route">
+    Isolated sessions per agent, workspace, or sender.
+  </Card>
+  <Card title="Media support" icon="image">
+    Send and receive images, audio, and documents.
+  </Card>
+  <Card title="Web Control UI" icon="monitor">
+    Browser dashboard for chat, config, sessions, and nodes.
+  </Card>
+  <Card title="Mobile nodes" icon="smartphone">
+    Pair iOS and Android nodes for Canvas, camera, and voice-enabled workflows.
+  </Card>
+</Columns>
+
+## Quick start
+
+<Steps>
+  <Step title="Install Durar">
+    ```bash
+    npm install -g Durar@latest
+    ```
+  </Step>
+  <Step title="Onboard and install the service">
+    ```bash
+    Durar onboard --install-daemon
+    ```
+  </Step>
+  <Step title="Chat">
+    Open the Control UI in your browser and send a message:
+
+    ```bash
+    Durar dashboard
+    ```
+
+    Or connect a channel ([Telegram](/channels/telegram) is fastest) and chat from your phone.
+
+  </Step>
+</Steps>
+
+Need the full install and dev setup? See [Getting Started](/start/getting-started).
+
+## Dashboard
+
+Open the browser Control UI after the Gateway starts.
+
+- Local default: [http://127.0.0.1:18789/](http://127.0.0.1:18789/)
+- Remote access: [Web surfaces](/web) and [Tailscale](/gateway/tailscale)
+
+<p align="center">
+  <img src="/whatsapp-Durar.jpg" alt="Durar" width="420" />
+</p>
+
+## Configuration (optional)
+
+Config lives at `~/.Durar/Durar.json`.
+
+- If you **do nothing**, Durar uses the bundled Pi binary in RPC mode with per-sender sessions.
+- If you want to lock it down, start with `channels.whatsapp.allowFrom` and (for groups) mention rules.
+
+Example:
+
+```json5
+{
+  channels: {
+    whatsapp: {
+      allowFrom: ["+15555550123"],
+      groups: { "*": { requireMention: true } },
+    },
+  },
+  messages: { groupChat: { mentionPatterns: ["@Durar"] } },
+}
+```
+
+## Start here
+
+<Columns>
+  <Card title="Docs hubs" href="/start/hubs" icon="book-open">
+    All docs and guides, organized by use case.
+  </Card>
+  <Card title="Configuration" href="/gateway/configuration" icon="settings">
+    Core Gateway settings, tokens, and provider config.
+  </Card>
+  <Card title="Remote access" href="/gateway/remote" icon="globe">
+    SSH and tailnet access patterns.
+  </Card>
+  <Card title="Channels" href="/channels/telegram" icon="message-square">
+    Channel-specific setup for Feishu, Microsoft Teams, WhatsApp, Telegram, Discord, and more.
+  </Card>
+  <Card title="Nodes" href="/nodes" icon="smartphone">
+    iOS and Android nodes with pairing, Canvas, camera, and device actions.
+  </Card>
+  <Card title="Help" href="/help" icon="life-buoy">
+    Common fixes and troubleshooting entry point.
+  </Card>
+</Columns>
+
+## Learn more
+
+<Columns>
+  <Card title="Full feature list" href="/concepts/features" icon="list">
+    Complete channel, routing, and media capabilities.
+  </Card>
+  <Card title="Multi-agent routing" href="/concepts/multi-agent" icon="route">
+    Workspace isolation and per-agent sessions.
+  </Card>
+  <Card title="Security" href="/gateway/security" icon="shield">
+    Tokens, allowlists, and safety controls.
+  </Card>
+  <Card title="Troubleshooting" href="/gateway/troubleshooting" icon="wrench">
+    Gateway diagnostics and common errors.
+  </Card>
+  <Card title="About and credits" href="/reference/credits" icon="info">
+    Project origins, contributors, and license.
+  </Card>
+</Columns>