# Lenso

> Compose, run locally, connect, and read status for agent-ready Rust modular applications and microservices.

## Docs

- [Start Here](https://lenso.dev/docs): Compose a Lenso app, run it locally, connect Console, and read exact System status.

## Build an app

- [Host Quickstart](https://lenso.dev/docs/quickstart): Compose a Support Desk app, start its connected local environment, and inspect exact status.
- [Product Blueprints](https://lenso.dev/docs/product-blueprints): Materialize an exact product-shaped app composition for local development.
- [CLI Reference](https://lenso.dev/docs/cli-reference): Current public commands for composing a Lenso app, starting its connected local environment, and reading status.
- [Lenso Console](https://lenso.dev/docs/runtime-console): Connect an exact System, load Module Surfaces, and inspect direct operational status.
- [Troubleshooting](https://lenso.dev/docs/troubleshooting): Diagnose the current Compose, Run locally, Connect, and Status lifecycle.

### Official Linked Modules

- [Official Linked Modules](https://lenso.dev/docs/built-in-modules): Choose and install the official linked modules known to the Lenso CLI.
- [auth](https://lenso.dev/docs/built-in-modules/auth): Install the host-owned authentication anchor for users, identities, and sessions.
- [auth-anonymous](https://lenso.dev/docs/built-in-modules/auth-anonymous): Add anonymous guest sessions that can later upgrade to normal credentials.
- [auth-password](https://lenso.dev/docs/built-in-modules/auth-password): Add password registration and login to the auth anchor.
- [auth-phone](https://lenso.dev/docs/built-in-modules/auth-phone): Add phone OTP and phone-password authentication.
- [auth-oauth](https://lenso.dev/docs/built-in-modules/auth-oauth): Install the shared OAuth substrate used by first-party OAuth login modules.
- [auth-github](https://lenso.dev/docs/built-in-modules/auth-github): Add GitHub OAuth login backed by the shared auth anchor.
- [auth-google](https://lenso.dev/docs/built-in-modules/auth-google): Add Google OAuth and OpenID Connect login backed by the shared auth anchor.
- [auth-oidc](https://lenso.dev/docs/built-in-modules/auth-oidc): Expose the Host as an OpenID Connect provider backed by auth sessions.
- [auth-device](https://lenso.dev/docs/built-in-modules/auth-device): Record device ids and attach device policy to auth sessions.
- [organization](https://lenso.dev/docs/built-in-modules/organization): Add reusable organizations, roles, memberships, and invitations.
- [audit-log](https://lenso.dev/docs/built-in-modules/audit-log): Add append-only, module-owned business audit events.

## Author modules

- [Module Authoring](https://lenso.dev/docs/module-authoring): Add a business capability with an explicit manifest, Business API, and owner-local checks.
- [Business APIs and Console Surfaces](https://lenso.dev/docs/admin-surfaces): Design typed Module operations and bind Console UI to exact generated clients.
- [Auth and Capabilities](https://lenso.dev/docs/auth-capabilities): Use platform auth extractors and module capabilities without importing auth internals.
- [Runtime and Lifecycle](https://lenso.dev/docs/runtime-lifecycle): Declare runtime functions, schedules, event handlers, lifecycle checks, and startup activation work.
- [Module Console UI](https://lenso.dev/docs/console-packages): Publish a receipt-bound console_ui_esm artifact for an exact Module Release.
- [Examples](https://lenso.dev/docs/examples): Run the Support Desk product acceptance through public Lenso entrypoints.

## Concepts

- [Platform Concepts](https://lenso.dev/docs/platform-concepts): Understand the app, Module, Service, and System Plane boundaries behind the public Lenso lifecycle.
- [Service Capability Tiers](https://lenso.dev/docs/autonomous-services): Choose the current Provider or Autonomous Service tier without overstating language support.
- [Runtime Stories](https://lenso.dev/docs/runtime-stories): Follow one business flow through the receipt-bound Story Module Surface.
- [Service System Plane](https://lenso.dev/docs/service-system-plane): Connect an exact lenso.system.v2 mixed topology without turning Console into a deployment plane.
- [Manifest Reference](https://lenso.dev/docs/manifest-reference): Understand the serializable ModuleManifest contract that every Lenso module exposes.
- [Contracts and Checks](https://lenso.dev/docs/contracts-and-checks): Source-controlled contracts and the local gates that keep Lenso safe for agents and teams.

## Agent development

- [Agent Development](https://lenso.dev/docs/agent-development): Use Lenso skills, scaffolds, checks, and Lenso Console status to develop with coding agents.

## Api

- [Lenso API](https://lenso.dev/docs/api)

### auth

- [GET /.well-known/jwks.json](https://lenso.dev/docs/api/auth/auth-oidc-jwks)
- [GET /.well-known/openid-configuration](https://lenso.dev/docs/api/auth/auth-oidc-provider-metadata)
- [GET /oauth/authorize](https://lenso.dev/docs/api/auth/auth-oidc-authorize)
- [POST /oauth/token](https://lenso.dev/docs/api/auth/auth-oidc-token)
- [POST /v1/auth/anonymous/login](https://lenso.dev/docs/api/auth/auth-anonymous-login)
- [POST /v1/auth/dev/sessions](https://lenso.dev/docs/api/auth/auth-create-dev-session)
- [GET /v1/auth/github/callback](https://lenso.dev/docs/api/auth/auth-github-callback)
- [GET /v1/auth/github/start](https://lenso.dev/docs/api/auth/auth-github-start)
- [GET /v1/auth/google/callback](https://lenso.dev/docs/api/auth/auth-google-callback)
- [GET /v1/auth/google/start](https://lenso.dev/docs/api/auth/auth-google-start)
- [POST /v1/auth/password/login](https://lenso.dev/docs/api/auth/auth-password-login)
- [POST /v1/auth/password/register](https://lenso.dev/docs/api/auth/auth-password-register)
- [POST /v1/auth/phone/otp/start](https://lenso.dev/docs/api/auth/auth-phone-otp-start)
- [POST /v1/auth/phone/otp/verify](https://lenso.dev/docs/api/auth/auth-phone-otp-verify)
- [POST /v1/auth/phone/password/login](https://lenso.dev/docs/api/auth/auth-phone-password-login)
- [POST /v1/auth/phone/password/set](https://lenso.dev/docs/api/auth/auth-phone-password-set)
- [POST /v1/auth/sessions/revoke](https://lenso.dev/docs/api/auth/auth-revoke-session)

### auth-console

- [GET /v1/auth/console/artifact](https://lenso.dev/docs/api/auth-console/auth-console-artifact)
- [GET /v1/auth/console/release](https://lenso.dev/docs/api/auth-console/auth-console-release)
- [GET /v1/auth/console/sessions](https://lenso.dev/docs/api/auth-console/auth-console-list-sessions)
- [POST /v1/auth/console/sessions/{session_id}/revoke](https://lenso.dev/docs/api/auth-console/auth-console-revoke-session)
- [GET /v1/auth/console/users](https://lenso.dev/docs/api/auth-console/auth-console-list-users)
- [POST /v1/auth/console/users/{user_id}/disable](https://lenso.dev/docs/api/auth-console/auth-console-disable-user)
- [POST /v1/auth/console/users/{user_id}/enable](https://lenso.dev/docs/api/auth-console/auth-console-enable-user)

### modules

- [GET /modules/{module}/http/{*path}](https://lenso.dev/docs/api/modules/service-module-http-proxy-get)
- [PUT /modules/{module}/http/{*path}](https://lenso.dev/docs/api/modules/service-module-http-proxy-put)
- [POST /modules/{module}/http/{*path}](https://lenso.dev/docs/api/modules/service-module-http-proxy-post)
- [DELETE /modules/{module}/http/{*path}](https://lenso.dev/docs/api/modules/service-module-http-proxy-delete)
- [PATCH /modules/{module}/http/{*path}](https://lenso.dev/docs/api/modules/service-module-http-proxy-patch)

## 简体中文

### Docs

- [从这里开始](https://lenso.dev/docs/zh): 组合 Lenso 应用、在本地运行、连接 Console，并读取精确的 System 状态。

### 构建应用

- [Host 快速开始](https://lenso.dev/docs/zh/quickstart): 组合 Support Desk、启动已连接的本地环境，并检查精确状态。
- [产品蓝图](https://lenso.dev/docs/zh/product-blueprints): 为本地开发生成精确且具备产品形态的应用组合。
- [CLI 参考](https://lenso.dev/docs/zh/cli-reference): 组合 Lenso 应用、启动已连接的本地环境与读取状态的当前公开命令。
- [Lenso Console](https://lenso.dev/docs/zh/runtime-console): 连接精确 System、加载 Module Surface，并检查直接运维状态。
- [故障排除](https://lenso.dev/docs/zh/troubleshooting): 诊断当前 Compose、Run locally、Connect 与 Status 生命周期。

#### 官方链接模块

- [官方链接模块](https://lenso.dev/docs/zh/built-in-modules): 选择并安装 Lenso CLI 已知的官方链接模块。
- [auth](https://lenso.dev/docs/zh/built-in-modules/auth): 安装负责用户、身份和会话的 Host 认证锚点。
- [auth-anonymous](https://lenso.dev/docs/zh/built-in-modules/auth-anonymous): 添加以后可以升级为正式身份的匿名访客会话。
- [auth-password](https://lenso.dev/docs/zh/built-in-modules/auth-password): 为 auth 认证锚点添加标识符和密码注册、登录能力。
- [auth-phone](https://lenso.dev/docs/zh/built-in-modules/auth-phone): 添加手机 OTP 和手机密码认证。
- [auth-oauth](https://lenso.dev/docs/zh/built-in-modules/auth-oauth): 安装第一方 OAuth 登录模块共用的基础能力。
- [auth-github](https://lenso.dev/docs/zh/built-in-modules/auth-github): 添加基于共享 auth 锚点的 GitHub OAuth 登录。
- [auth-google](https://lenso.dev/docs/zh/built-in-modules/auth-google): 添加基于共享 auth 锚点的 Google OAuth 和 OIDC 登录。
- [auth-oidc](https://lenso.dev/docs/zh/built-in-modules/auth-oidc): 让 Host 基于已有 auth 会话提供 OpenID Connect 身份服务。
- [auth-device](https://lenso.dev/docs/zh/built-in-modules/auth-device): 记录设备并把设备策略关联到认证会话。
- [organization](https://lenso.dev/docs/zh/built-in-modules/organization): 添加可复用的组织、角色、成员关系和邀请能力。
- [audit-log](https://lenso.dev/docs/zh/built-in-modules/audit-log): 添加仅追加、由业务模块写入的审计事件。

### 开发模块

- [Module 开发](https://lenso.dev/docs/zh/module-authoring): 使用明确 Manifest、Business API 与仓库本地检查加入业务能力。
- [Business API 与 Console Surface](https://lenso.dev/docs/zh/admin-surfaces): 设计强类型 Module Operation，并把 Console UI 绑定到精确生成客户端。
- [身份验证与能力](https://lenso.dev/docs/zh/auth-capabilities): 使用平台身份验证提取器和模块功能，无需导入身份验证内部结构。
- [Runtime 与生命周期](https://lenso.dev/docs/zh/runtime-lifecycle): 声明 Linked Module 运行时工作，并理解 Service Provider 的执行边界。
- [Module Console UI](https://lenso.dev/docs/zh/console-packages): 为精确 Module Release 发布回执绑定的 console_ui_esm 制品。
- [示例](https://lenso.dev/docs/zh/examples): 通过公开 Lenso 入口运行 Support Desk 产品级验收。

### 核心概念

- [平台概念](https://lenso.dev/docs/zh/platform-concepts): 理解 Lenso 公开生命周期背后的应用、Module、Service 与 System Plane 边界。
- [Service Capability Tiers](https://lenso.dev/docs/zh/autonomous-services): 准确选择当前 Provider 或 Autonomous Service 层级，不夸大语言支持。
- [Runtime Story](https://lenso.dev/docs/zh/runtime-stories): 通过回执绑定的 Story Module Surface 跟踪一条业务流程。
- [Service System Plane](https://lenso.dev/docs/zh/service-system-plane): 连接精确 lenso.system.v2 混合拓扑，同时避免把 Console 变成部署平面。
- [Manifest 参考](https://lenso.dev/docs/zh/manifest-reference): 理解每个 Lenso Module 公开的可序列化 ModuleManifest 合约。
- [合约与检查](https://lenso.dev/docs/zh/contracts-and-checks): 了解由源码管理的合约，以及保障 Lenso 团队与 Agent 安全协作的本地检查。

### Agent 开发

- [Agent 开发](https://lenso.dev/docs/zh/agent-development): 使用 Lenso Skill、Scaffold、Check 与 Lenso Console 状态，和 Coding Agent 协作开发。

### Api

- [Lenso API](https://lenso.dev/docs/zh/api)

#### auth

- [GET /.well-known/jwks.json](https://lenso.dev/docs/zh/api/auth/auth-oidc-jwks)
- [GET /.well-known/openid-configuration](https://lenso.dev/docs/zh/api/auth/auth-oidc-provider-metadata)
- [GET /oauth/authorize](https://lenso.dev/docs/zh/api/auth/auth-oidc-authorize)
- [POST /oauth/token](https://lenso.dev/docs/zh/api/auth/auth-oidc-token)
- [POST /v1/auth/anonymous/login](https://lenso.dev/docs/zh/api/auth/auth-anonymous-login)
- [POST /v1/auth/dev/sessions](https://lenso.dev/docs/zh/api/auth/auth-create-dev-session)
- [GET /v1/auth/github/callback](https://lenso.dev/docs/zh/api/auth/auth-github-callback)
- [GET /v1/auth/github/start](https://lenso.dev/docs/zh/api/auth/auth-github-start)
- [GET /v1/auth/google/callback](https://lenso.dev/docs/zh/api/auth/auth-google-callback)
- [GET /v1/auth/google/start](https://lenso.dev/docs/zh/api/auth/auth-google-start)
- [POST /v1/auth/password/login](https://lenso.dev/docs/zh/api/auth/auth-password-login)
- [POST /v1/auth/password/register](https://lenso.dev/docs/zh/api/auth/auth-password-register)
- [POST /v1/auth/phone/otp/start](https://lenso.dev/docs/zh/api/auth/auth-phone-otp-start)
- [POST /v1/auth/phone/otp/verify](https://lenso.dev/docs/zh/api/auth/auth-phone-otp-verify)
- [POST /v1/auth/phone/password/login](https://lenso.dev/docs/zh/api/auth/auth-phone-password-login)
- [POST /v1/auth/phone/password/set](https://lenso.dev/docs/zh/api/auth/auth-phone-password-set)
- [POST /v1/auth/sessions/revoke](https://lenso.dev/docs/zh/api/auth/auth-revoke-session)

#### auth-console

- [GET /v1/auth/console/artifact](https://lenso.dev/docs/zh/api/auth-console/auth-console-artifact)
- [GET /v1/auth/console/release](https://lenso.dev/docs/zh/api/auth-console/auth-console-release)
- [GET /v1/auth/console/sessions](https://lenso.dev/docs/zh/api/auth-console/auth-console-list-sessions)
- [POST /v1/auth/console/sessions/{session_id}/revoke](https://lenso.dev/docs/zh/api/auth-console/auth-console-revoke-session)
- [GET /v1/auth/console/users](https://lenso.dev/docs/zh/api/auth-console/auth-console-list-users)
- [POST /v1/auth/console/users/{user_id}/disable](https://lenso.dev/docs/zh/api/auth-console/auth-console-disable-user)
- [POST /v1/auth/console/users/{user_id}/enable](https://lenso.dev/docs/zh/api/auth-console/auth-console-enable-user)

#### modules

- [GET /modules/{module}/http/{*path}](https://lenso.dev/docs/zh/api/modules/service-module-http-proxy-get)
- [PUT /modules/{module}/http/{*path}](https://lenso.dev/docs/zh/api/modules/service-module-http-proxy-put)
- [POST /modules/{module}/http/{*path}](https://lenso.dev/docs/zh/api/modules/service-module-http-proxy-post)
- [DELETE /modules/{module}/http/{*path}](https://lenso.dev/docs/zh/api/modules/service-module-http-proxy-delete)
- [PATCH /modules/{module}/http/{*path}](https://lenso.dev/docs/zh/api/modules/service-module-http-proxy-patch)