6 commits

Author	SHA1	Message	Date
glass beadian	3117e1c18e	ops: OIDC issuer deployment wiring — key volume, CORS for files, Drive authMode flip	2026-10-13 18:46:28 +00:00
glass beadian	189cb41a09	ops: pin shared Temporal publishing queue; pass MATRIX_SSO_AS_TOKEN/HS_TOKEN to api ... W1's governance sim found approved publishes never executing: the api starts workflows on tmbh-publishing while the 3-day-old scheduler image consumed the old superposter-publishing default. Pin TEMPORAL_TASK_QUEUE on both services.	2026-10-13 15:35:49 +00:00
glass beadian	fe5f2403d6	feat: in-app Chat (Matrix JWT SSO) + Drive (embedded oCIS) ... - api: matrix-sso module (tuwunel jwt -> login/get_token), POST /matrix/session, GET /matrix/identity, drive controller - web: /chat full-height Element view, /files Library+Drive tabs, embedded-app frame component - edge: /hub-sso.html handshake route (origin-pinned CSP), X-Frame-Options strip on files - oCIS: csp.yaml frame-ancestors app.occupymedia.cc - server config still required: tuwunel [global.jwt], MATRIX_SSO_JWT_SECRET, oCIS restart	2026-10-13 14:57:07 +00:00
glass beadian	6161ac4740	Manual: full participation guide (media/accounts/decisions/safety) + Enter-to-door + provisioner env passthrough	2026-10-12 15:49:25 +00:00
glass beadian	b1b2a07b3d	Pass FILES_OCID_* WebDAV credentials into the api container	2026-10-11 16:25:48 +00:00
glass beadian	aa5e262f3a	Tactical Media Broadcast Hub — initial release ... Self-hosted multi-platform broadcast newsroom for activist collectives: publishing pipeline with group approval and DST-proof scheduling, TweetDeck-style column wall with hostile-content-safe rendering, live control room with Auto Director, bridged chat governance with polls and quorum, distributed sandboxed transcode workers, encrypted content-addressed archive, monthly analytics. MIT licensed. See README.md and docs/.	2026-10-10 11:56:42 +00:00