docs: architecture, configuration, development and features describe Scribe as it is today

Milestone 544, step 6217 (follow-up to #1778, which rewrote features.md and
api-reference.md in July but left architecture.md and configuration.md alone).

- architecture.md, configuration.md, development.md: rewritten against the
  code. They still described Ollama, chat, SSE generation, voice, project
  summaries, image caching, Docker secrets that the compose files don't use,
  a raw-SQL migration convention the migrations no longer follow, a 27-entry
  migration list, CalVer YY.MM.DD.N tags and the removed infra/ files.
- features.md: adds what shipped since July (spikes, claims, moments, rule
  versions and verification, lessons, reply shapes, snippets and the shape
  ledger, forge integration, family canon, design systems, retrieval tuning)
  and corrects the Settings tabs and keyboard shortcuts (g g is the graph).
- api-reference.md: adds the endpoints for snippets, lessons, design
  systems, family canon, platforms, shared areas, retrieval, rule versions,
  relations and verification, forge connections, webhooks, scheduled
  backups and the newer plugin hooks.
- api-keys-and-mcp.md: Settings tab is "MCP Access"; a plugin install
  section; the tool-family table matches the tools that exist.
- design-system.md: the dated "decisions in progress" changelog (April
  PR log, chat/journal/calendar surfaces) becomes a short present-tense
  section; the stored design system is named as the authority.
- sso-oauth.md: the app is Scribe, not "Fabled Assistant".
- README: feature summary and doc table brought current.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

docs/api-reference.md

@@ -52,6 +52,9 @@ endpoint at `/mcp`, not these REST routes.
 | POST | `/api/notes/:id/versions/:vid/pin` | Pin a version |
 | GET / PUT / DELETE | `/api/notes/:id/draft` | Unsaved-edit draft (restore across page loads) |
 | GET | `/api/notes/graph` | Knowledge-graph nodes/edges |
+| GET | `/api/notes/duplicates` | Near-duplicate notes or tasks, grouped |
+| GET | `/api/notes/due-for-verification` | Notes that carry a check, oldest verification first |
+| POST | `/api/notes/:id/verify` | Record that a note's check was run `{still_true}` |
 
 ## Tasks
 
@@ -86,7 +89,55 @@ endpoint at `/mcp`, not these REST routes.
 | GET / POST | `/api/projects/:id/systems` | List / create systems |
 | GET / PATCH / DELETE | `/api/projects/:id/systems/:sid` | Read / update / delete |
 | GET | `/api/projects/:id/systems/:sid/records` | Records linked to a system |
+| PUT | `/api/systems/:sid/canonical` | Map a system to a shared area `{canonical_id}` (`null` unmaps) |
+| GET / POST | `/api/canonical-systems` | List / create shared areas |
+| PATCH | `/api/canonical-systems/:id` | Update a shared area |
 | GET | `/api/projects/:id/issues` | Project issues |
+| PUT | `/api/projects/:id/design-system` | Point the project at a design system `{design_system_id}` (`null` clears) |
+| GET / PUT | `/api/projects/:id/platforms` | The project's platforms `{platforms: {slug: "declared" \| "rejected" \| null}}` |
+| PUT | `/api/projects/:id/forge` | Pin the project to one forge connection, or clear it |
+| GET / POST | `/api/platforms` | Platform catalogue / add a platform |
+| PATCH | `/api/platforms/:id` | Update a platform |
+
+## Snippets and lessons
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET / POST | `/api/snippets` | List / create snippets |
+| GET / PATCH / DELETE | `/api/snippets/:id` | Read / update / delete |
+| POST | `/api/snippets/:id/verify` | Record a drift-check verdict `{status, detail, path}` |
+| GET | `/api/snippets/duplicates` | Near-duplicate snippets, grouped into merge candidates |
+| POST | `/api/snippets/:id/merge` | Merge source snippets into this one |
+| POST | `/api/snippets/:id/unmerge` | Pull one source back out `{source_id}` |
+| GET / POST | `/api/lessons` | List / create lessons |
+| GET / PATCH / DELETE | `/api/lessons/:id` | Read / update / delete (to the trash) |
+| GET | `/api/lessons/rule-candidates` | Rules a draft lesson resembles, before it is saved |
+| GET | `/api/lessons/taught-by/:record_id` | Lessons drawn from one record |
+| PUT | `/api/lessons/:id/rules/:rule_id` | Confirm or reject a lesson → rule link |
+
+## Design systems
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET / POST | `/api/design-systems` | List / create |
+| GET | `/api/design-systems/starter-roles` | Starter token roles for the creation form |
+| GET / PATCH / DELETE | `/api/design-systems/:id` | Read / update / delete |
+| GET | `/api/design-systems/:id/resolved` | The effective token set, inheritance applied |
+| GET | `/api/design-systems/:id/stylesheet` | The generated stylesheet |
+| GET | `/api/design-systems/:id/snippet-check` | Snippets that disagree with the system's sheet |
+| GET / POST | `/api/design-systems/:id/tokens` | This system's own tokens / add one |
+| PATCH / DELETE | `/api/design-tokens/:id` | Update / delete a token |
+
+## Family canon
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/family/ideas` | Family ideas |
+| GET | `/api/family/ideas/:id` | One idea with its references |
+| POST | `/api/family/ideas/:id/propose` · `/promote` · `/retire` | Move an idea through its lifecycle |
+| GET | `/api/family/matrix` | Projects × canon ideas, with each project's answer |
+| GET | `/api/family/decisions` | Promotion and retirement decisions |
+| POST | `/api/family/decisions/:id/undo` | Undo a decision |
 
 ## Knowledge browse
 
@@ -118,6 +169,27 @@ endpoint at `/mcp`, not these REST routes.
 | POST | `/api/rules/:id/move` | Move a rule: `{topic_id}` makes it global, `{project_id}` makes it that project's |
 | GET | `/api/projects/:id/rules` | A project's own rules, and the global rules tagged to its areas |
 | POST | `/api/projects/:id/rules` | Create a project-scoped rule |
+| GET | `/api/rules/:id/versions` | A rule's edit history, newest first |
+| GET | `/api/rules/:id/versions/:vid` | One earlier version in full |
+| POST | `/api/rules/:id/versions/:vid/restore` | Put a preference back to an earlier version (preferences only) |
+| GET | `/api/rules/drift` | Preferences that have been rewritten, most recent first |
+| POST | `/api/rules/:id/relations` | Relate this rule to another (`co_surfaces`, `overrides`, `elaborates`) |
+| DELETE | `/api/rule-relations/:id` | Remove a relation |
+| GET | `/api/rules-due-for-verification` | Rules that carry a check, oldest verification first |
+| POST | `/api/rules/:id/verify` | Record that a rule's check was run `{still_true}` |
+
+## Retrieval
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/retrieval/surfaces` | Every tunable surface with its threshold and budget |
+| PUT | `/api/retrieval/surfaces/:surface` | Change one surface's setting, recorded with its reason |
+| GET | `/api/retrieval/tuning-history` | Changes to retrieval on this install, newest first |
+| GET | `/api/retrieval/moments` | The moments of work rules mount on, and the actions that reach each |
+| POST / DELETE | `/api/retrieval/moments/mappings` | Map / unmap an action to a moment |
+| GET | `/api/retrieval/moments/proposals` | Proposed rule → moment mounts awaiting a judgment |
+| POST | `/api/retrieval/moments/proposals/judge` | Confirm or reject proposals |
+| GET | `/api/retrieval/reply-shapes` | The default reply shapes and the moment each arrives at |
 
 ## Sharing
 
@@ -154,6 +226,9 @@ endpoint at `/mcp`, not these REST routes.
 | GET / PUT | `/api/profile` | Read / update the per-user profile |
 | GET / PUT | `/api/settings` | Read / update key-value settings |
 | GET | `/api/settings/search` | SearXNG configuration status |
+| GET / POST | `/api/settings/forge-connections` | Your git forge connections / add one |
+| PUT / DELETE | `/api/settings/forge-connections/:id` | Update / remove a connection |
+| POST | `/api/settings/forge-connections/:id/test` | Check that the forge is reachable and accepts the token |
 
 ## API keys
 
@@ -164,10 +239,19 @@ endpoint at `/mcp`, not these REST routes.
 
 ## Plugin (Claude Code)
 
+These serve the plugin's hooks.
+
 | Method | Path | Description |
 |--------|------|-------------|
-| GET | `/api/plugin/context` | SessionStart context payload (rules + active-project) |
-| GET | `/api/plugin/retrieve` | Title-first knowledge-injection candidates |
+| GET | `/api/plugin/context` | Session-start context: the active project and its state |
+| GET | `/api/plugin/retrieve` | Records and rules matching the operator's prompt |
+| GET | `/api/plugin/tool-rules` | Rules matching a tool call about to run |
+| GET | `/api/plugin/moment-tools` | The tools whose calls can reach a moment |
+| POST | `/api/plugin/moment` | The rules mounted on the moments a tool call reaches |
+| POST | `/api/plugin/reply-rules` | Whether the reply ending a turn is held for one read |
+| POST | `/api/plugin/rule-opened` | Records that a session opened a rule it was shown |
+| GET | `/api/plugin/shape-check` | The end-of-turn question about what this turn wrote |
+| GET | `/api/plugin/claim-session` · `/release-session` | Bind a session to its task claims / release them at session end |
 | GET | `/api/plugin/processes` | Stored Processes for skill-stub sync |
 | GET | `/api/plugin/prior-art` | Write-path hint for the plugin hooks (params: `path`, `code`, `repo`, `shapes`, `exclude_ids`, `exclude_sync_ids`, `exclude_derive`); returns `context`, `note_ids`, `sync_note_ids`, `stamped`, `divergence`, `derive`, `derive_keys` |
 | GET / POST | `/api/projects/<id>/coverage`, `…/coverage/refresh` | Shape-ledger accounting (`pattern_coverage` line, counts, `derive_groups` — css groups carry `consumers`, `derive_new`, `unused_css`, `divergence`, `recheck`) |
@@ -197,6 +281,16 @@ endpoint at `/mcp`, not these REST routes.
 | GET / PUT | `/api/admin/base-url` | Get / set the public base URL |
 | GET / PUT | `/api/admin/db-maintenance` (+ `/health`, POST `/run`) | VACUUM schedule, health, manual run |
 | POST / GET / DELETE | `/api/admin/invitations` (+ `/:id`) | Create / list / revoke invite links |
+| GET / PUT | `/api/admin/backups` | Scheduled backups: destination, schedule and recent runs |
+| POST | `/api/admin/backups/check` | Ask the destination whether it would accept a backup |
+| POST | `/api/admin/backups/run` | Start a backup now |
+| GET / PUT | `/api/admin/forge-webhook` | The forge push-webhook settings |
+
+## Webhooks
+
+| Method | Path | Description |
+|--------|------|-------------|
+| POST | `/api/webhooks/forge` | Push events from a git forge, verified with `FORGE_WEBHOOK_SECRET` **(public)** |
 
 ## Scribe MCP