# RightSide

> RightSide is an agent-native deployment finishing layer. Canonical control, runtime, edge, and installer services are live for an invite-only closed beta. Access is allowlisted; public signup is unavailable; beta projects and data are disposable and may be erased before public beta.

## Start
- [Quickstart](https://docs.rightside.host/quickstart): installation, authorization, registration, verification
- [Agent guide](https://docs.rightside.host/agents): completion contract and agent-safe defaults
- [Deploy](https://docs.rightside.host/deploy): application contract and deploy flow

## Reference
- [MCP tools](https://docs.rightside.host/mcp): bounded tools for Claude Code and Codex
- [CLI reference](https://docs.rightside.host/cli): common commands and machine-readable output
- [Troubleshooting](https://docs.rightside.host/troubleshooting): stage-based recovery
- [Security](https://docs.rightside.host/security): credential and authority boundaries
- [Limits](https://docs.rightside.host/limits): current support and non-goals

## Canonical setup
```sh
curl -fsSL https://get.rightside.host/install | sh
rightside doctor --json
```

## Recommended Claude Code / Codex prompt
```text
Install and set up RightSide on this machine. Verify that Node.js is 22.13 or newer and that this is Linux x64, WSL2 x64, or Apple silicon macOS. Run `curl -fsSL https://get.rightside.host/install | sh`, let me complete browser authorization, and never ask me to paste a token, device code, cookie, or secret into chat. Then run `rightside doctor --json`. If it passes, inspect this project and deploy it with RightSide. Do not claim success until RightSide returns an HTTPS URL and you verify that URL responds correctly.
```

The one-line installer trusts HTTPS delivery of the bootstrap. The bootstrap verifies the immutable release payload against its manifest-pinned checksum; its own bytes are not out-of-band pinned by the one-line form.

Do not claim deployment success until the returned HTTPS URL is fetched directly and produces the expected response. Database is disabled by default. Hosted-app authentication is enabled when CLI/MCP creates a project; use explicit public paths or explicit auth:false/--no-auth when required.