Runtime
Follow Filmclusive’s edge/origin/data-plane split and the constraints behind it.
Engineering
Follow the boundaries.
Clients, edge, origin, and canonical data each have a distinct job.
Drag to move · Hover to trace. Select to read more. Keyboard: Alt + arrow keys to move.
Follow a request through the system
Drag a card to rearrange it. Select it to learn more.
Connections in words
- Firestore supplies scoped source data for Response projection.
- Domain Service returns an authorized Response projection.
- Web Client requests application access through Cloudflare Edge.
- Cloudflare Edge forwards admitted requests to Next.js Origin.
- Next.js Origin runs Domain Service.
- Domain Service persists canonical records in Firestore.
- Domain Service checks identity using Firebase Auth.
Explore the engineering.
Request
Client transport reaches the guarded dispatcher, then scoped domain work and an authorized response.
Security
Separate verified identity, scoped access, recipient targeting and public disclosure.
Data
Identity, participation, work and projections have distinct responsibilities.
Clients
Web, native iOS, desktop and MCP retain distinct interaction and authentication boundaries.
Decisions, tradeoffs, and evidence
Architecture direction, local implementation, scoped verification, and production release are separate claims.
This public site is an independently authored static explanation. It has no login, database, production API connection or live Filmclusive records. Provider names describe Filmclusive’s application architecture.
Client
Web Client
The React and Next.js product experience.
CanonicalImplemented locally
See this concept connect visually →
Why it exists
The operational application needs interaction and authenticated domain access.
Example
The web crew directory and production workspaces share server contracts.
Connects to
- Web Client requests application access through Cloudflare Edge
- Desktop Client hosts the experience of Web Client
- Web Client calls explicit API Transport
Implementation notes
This engineering site is a separate static project and does not use the application runtime.
Public evidence: Clients share domain contracts while retaining distinct interfaces.
Related workflows
No curated journey in this edition.
Related decisions
Technical details
This engineering site is a separate static project and does not use the application runtime.
Conceptual explanation; private implementation details are omitted.
Infrastructure
Cloudflare Edge
The edge and control plane surrounding application workloads.
CanonicalImplemented locally
See this concept connect visually →
Why it exists
Ingress, static delivery and coordination have different responsibilities from canonical domain data.
Example
The edge delivers assets and forwards admitted application requests.
Connects to
- Publication is delivered through Cloudflare Edge
- Web Client requests application access through Cloudflare Edge
- iOS Client requests application access through Cloudflare Edge
- MCP Client accesses public APIs through Cloudflare Edge
- Cloudflare Edge forwards admitted requests to Next.js Origin
Implementation notes
Public disclosure is limited to provider roles, not private gateways or recovery mechanisms.
Public evidence: Cloudflare edge and Google Cloud application workloads have separate roles.
Related workflows
Related decisions
Technical details
Public disclosure is limited to provider roles, not private gateways or recovery mechanisms.
Conceptual explanation; private implementation details are omitted.
Infrastructure
Next.js Origin
The Node-capable web runtime hosted on Google Cloud Run.
CanonicalImplemented locally
See this concept connect visually →
Why it exists
Server-side application and provider workloads need a suitable runtime behind the edge.
Example
The origin executes authorized domain commands and queries.
Connects to
- Cloudflare Edge forwards admitted requests to Next.js Origin
- Next.js Origin runs Domain Service
Implementation notes
Cloudflare owns ingress; Google Cloud Run hosts the Next.js runtime.
Public evidence: Cloudflare edge and Google Cloud application workloads have separate roles.
Related workflows
No curated journey in this edition.
Related decisions
Technical details
Cloudflare owns ingress; Google Cloud Run hosts the Next.js runtime.
Conceptual explanation; private implementation details are omitted.
Service
Domain Service
Server-owned commands and queries for a bounded domain.
CanonicalImplemented locally
See this concept connect visually →
Why it exists
UI state should not decide privileged transitions or storage authority.
Example
A production command validates context before committing work.
Connects to
- Domain Service returns an authorized Response projection
- Next.js Origin runs Domain Service
- Domain Service persists canonical records in Firestore
- Domain Service accesses admitted files in Storage
- Domain Service checks identity using Firebase Auth
- Domain Service admits background work to Functions / Jobs
- Domain Service uses scoped adapters for External Provider
- Permission / Capability admits scoped commands to Domain Service
Implementation notes
Commands own transitions; queries return bounded authorized projections.
Public evidence: Cloudflare edge and Google Cloud application workloads have separate roles.
Related workflows
No curated journey in this edition.
Related decisions
See the system-wide decisions.
Technical details
Commands own transitions; queries return bounded authorized projections.
Conceptual explanation; private implementation details are omitted.
Provider
Firebase Auth
The application identity provider.
CanonicalImplemented locally
See this concept connect visually →
Why it exists
Identity verification needs a dedicated provider, separate from domain permission decisions.
Example
Sign-in identifies a user before production access is evaluated.
Connects to
- Domain Service checks identity using Firebase Auth
- Request Boundary establishes identity through Firebase Auth
- Firebase Auth precedes evaluation of Permission / Capability
Implementation notes
Authentication is not authorization.
Public evidence: Cloudflare edge and Google Cloud application workloads have separate roles.
Related workflows
No curated journey in this edition.
Related decisions
Technical details
Authentication is not authorization.
Conceptual explanation; private implementation details are omitted.
Provider
Firestore
Canonical application records and scoped persistence.
CanonicalImplemented locally
See this concept connect visually →
Why it exists
Durable records need transactional ownership rather than being reconstructed from the UI.
Example
Membership and production work records retain their own owners.
Connects to
- Firestore supplies scoped source data for Response projection
- Domain Service persists canonical records in Firestore
- Firestore supplies authorized source records for Today
Implementation notes
Public diagrams do not expose collection inventories or production identifiers.
Public evidence: Cloudflare edge and Google Cloud application workloads have separate roles.
Related workflows
No curated journey in this edition.
Related decisions
Technical details
Public diagrams do not expose collection inventories or production identifiers.
Conceptual explanation; private implementation details are omitted.
Projection
Response projection
The minimum authorized output returned by a domain query or command.
CanonicalImplemented locally
See this concept connect visually →
Why it exists
Clients need useful presentation data without receiving private canonical records wholesale.
Example
A response describes the permitted work fields for the current actor.
Connects to
- Firestore supplies scoped source data for Response projection
- Domain Service returns an authorized Response projection
Implementation notes
A response projection does not become permission truth or replace canonical source ownership.
Related workflows
No curated journey in this edition.
Related decisions
See the system-wide decisions.
Technical details
A response projection does not become permission truth or replace canonical source ownership.
Conceptual explanation; private implementation details are omitted.