Developers
The web app
otc-web renders every page on the server, signs members in, and proxies their reads; it keeps no copy of the spaces.
Pages and islands
Draft outline
Axum + minijinja templates; TypeScript islands built with Vite for the composer, cropper, players, push, and pickers. Works without script where it can.
OAuth and sessions
Draft outline
Confidential client (OTC_OAUTH_PRIVATE_KEYS), PAR, DPoP; sessions sealed under OTC_COOKIE_SECRET; the admin step-up; the community session. Deck: "seq-signin".
Writes
Draft outline
Straight to the member's PDS into the space; the PDS then notifies the AppView. Deck: "write-path" and "seq-write".
What it stores
Draft outline
Sessions, setup state, caches (link cards, oEmbed, covers), the community write log. No space records.