Engineering
Runtime
Follow Filmclusive’s edge/origin/data-plane split and the constraints behind it.
Drag to move · Hover to trace. Select to read more. Keyboard: Alt + arrow keys to move.
Drag a card to rearrange it. Select it to learn more.
Connections in words
- Firestore supplies scoped source data for Response projection.
- Domain Service returns an authorized Response projection.
- Web Client requests application access through Cloudflare Edge.
- Cloudflare Edge forwards admitted requests to Next.js Origin.
- Next.js Origin runs Domain Service.
- Domain Service persists canonical records in Firestore.
- Domain Service checks identity using Firebase Auth.
Cloudflare owns edge and control-plane responsibilities. The Node-capable origin runs application work. Firebase / Google Cloud owns identity and canonical application data.
The edge
Cloudflare handles ingress, public assets and selected control-plane coordination. Edge placement does not make it the owner of private application records.
The application origin
Next.js runs in a Node-capable Google Cloud Run origin. Domain work and privileged integrations retain runtime capabilities that the edge does not replace.
The data plane
Firebase / Google Cloud supplies application identity, Firestore records, Storage and selected workloads. Moving ingress does not imply migrating the canonical data plane.
The tradeoff
This split preserves runtime compatibility and explicit ownership, while adding cross-provider boundaries and release coordination. A local build is not proof of a hosted release.
Go deeper
Conceptual architecture. Implementation and release status are assessed separately.
Client
Web Client
The React and Next.js product experience.
See this concept connect visually →
Why it exists
The operational application needs interaction and authenticated domain access.
Example
The web crew directory and production workspaces share server contracts.
Connects to
- Web Client requests application access through Cloudflare Edge
- Desktop Client hosts the experience of Web Client
- Web Client calls explicit API Transport
Implementation notes
This engineering site is a separate static project and does not use the application runtime.
Public evidence: Clients share domain contracts while retaining distinct interfaces.
Related workflows
No curated journey in this edition.
Related decisions
Technical details
This engineering site is a separate static project and does not use the application runtime.
Conceptual explanation; private implementation details are omitted.
Infrastructure
Cloudflare Edge
The edge and control plane surrounding application workloads.
See this concept connect visually →
Why it exists
Ingress, static delivery and coordination have different responsibilities from canonical domain data.
Example
The edge delivers assets and forwards admitted application requests.
Connects to
- Publication is delivered through Cloudflare Edge
- Web Client requests application access through Cloudflare Edge
- iOS Client requests application access through Cloudflare Edge
- MCP Client accesses public APIs through Cloudflare Edge
- Cloudflare Edge forwards admitted requests to Next.js Origin
Implementation notes
Public disclosure is limited to provider roles, not private gateways or recovery mechanisms.
Public evidence: Cloudflare edge and Google Cloud application workloads have separate roles.
Related workflows
Related decisions
Technical details
Public disclosure is limited to provider roles, not private gateways or recovery mechanisms.
Conceptual explanation; private implementation details are omitted.
Infrastructure
Next.js Origin
The Node-capable web runtime hosted on Google Cloud Run.
See this concept connect visually →
Why it exists
Server-side application and provider workloads need a suitable runtime behind the edge.
Example
The origin executes authorized domain commands and queries.
Connects to
- Cloudflare Edge forwards admitted requests to Next.js Origin
- Next.js Origin runs Domain Service
Implementation notes
Cloudflare owns ingress; Google Cloud Run hosts the Next.js runtime.
Public evidence: Cloudflare edge and Google Cloud application workloads have separate roles.
Related workflows
No curated journey in this edition.
Related decisions
Technical details
Cloudflare owns ingress; Google Cloud Run hosts the Next.js runtime.
Conceptual explanation; private implementation details are omitted.
Service
Domain Service
Server-owned commands and queries for a bounded domain.
See this concept connect visually →
Why it exists
UI state should not decide privileged transitions or storage authority.
Example
A production command validates context before committing work.
Connects to
- Domain Service returns an authorized Response projection
- Next.js Origin runs Domain Service
- Domain Service persists canonical records in Firestore
- Domain Service accesses admitted files in Storage
- Domain Service checks identity using Firebase Auth
- Domain Service admits background work to Functions / Jobs
- Domain Service uses scoped adapters for External Provider
- Permission / Capability admits scoped commands to Domain Service
Implementation notes
Commands own transitions; queries return bounded authorized projections.
Public evidence: Cloudflare edge and Google Cloud application workloads have separate roles.
Related workflows
No curated journey in this edition.
Related decisions
See the system-wide decisions.
Technical details
Commands own transitions; queries return bounded authorized projections.
Conceptual explanation; private implementation details are omitted.
Provider
Firebase Auth
The application identity provider.
See this concept connect visually →
Why it exists
Identity verification needs a dedicated provider, separate from domain permission decisions.
Example
Sign-in identifies a user before production access is evaluated.
Connects to
- Domain Service checks identity using Firebase Auth
- Request Boundary establishes identity through Firebase Auth
- Firebase Auth precedes evaluation of Permission / Capability
Implementation notes
Authentication is not authorization.
Public evidence: Cloudflare edge and Google Cloud application workloads have separate roles.
Related workflows
No curated journey in this edition.
Related decisions
Technical details
Authentication is not authorization.
Conceptual explanation; private implementation details are omitted.
Provider
Firestore
Canonical application records and scoped persistence.
See this concept connect visually →
Why it exists
Durable records need transactional ownership rather than being reconstructed from the UI.
Example
Membership and production work records retain their own owners.
Connects to
- Firestore supplies scoped source data for Response projection
- Domain Service persists canonical records in Firestore
- Firestore supplies authorized source records for Today
Implementation notes
Public diagrams do not expose collection inventories or production identifiers.
Public evidence: Cloudflare edge and Google Cloud application workloads have separate roles.
Related workflows
No curated journey in this edition.
Related decisions
Technical details
Public diagrams do not expose collection inventories or production identifiers.
Conceptual explanation; private implementation details are omitted.
Projection
Response projection
The minimum authorized output returned by a domain query or command.
See this concept connect visually →
Why it exists
Clients need useful presentation data without receiving private canonical records wholesale.
Example
A response describes the permitted work fields for the current actor.
Connects to
- Firestore supplies scoped source data for Response projection
- Domain Service returns an authorized Response projection
Implementation notes
A response projection does not become permission truth or replace canonical source ownership.
Related workflows
No curated journey in this edition.
Related decisions
See the system-wide decisions.
Technical details
A response projection does not become permission truth or replace canonical source ownership.
Conceptual explanation; private implementation details are omitted.