TFD Tools and Service Relationships

External tools are mediated by backend-owned adapters, durable inboxes, snapshots, and worker processes

TFD Tools and Service Relationships External tools are mediated by backend-owned adapters, durable inboxes, snapshots, and worker processes AWS Cognito · Hosted UI · JWT · staff provisioning · Architecture component AWS Cognito Hosted UI · JWT · staff provisioning Stripe · subscription snapshots · Architecture component Stripe subscription snapshots ActiveCampaign · contact snapshots · Architecture component ActiveCampaign contact snapshots Google Sheets · onboarding · notes · breaks · Architecture component Google Sheets onboarding · notes · breaks Backoffice API + Cron Workers · provider adapters · inboxes · snapshots · public APIs · Architecture component · Integration boundary Backoffice API + Cron Workers provider adapters · inboxes · snapshots · public APIs Integration boundary YouTube + Outline · resource lookup · markdown · Architecture component YouTube + Outline resource lookup · markdown Slack · notification webhook · Architecture component Slack notification webhook Zoom · webhooks · OAuth · Meeting SDK · Architecture component Zoom webhooks · OAuth · Meeting SDK AddPipe + Trainerize · video inbox · staged program import · Architecture component AddPipe + Trainerize video inbox · staged program import Recorder + Finalizer · C++ capture · Node remux/upload · Architecture component · No media through API Recorder + Finalizer C++ capture · Node remux/upload No media through API Private AWS Storage · S3 media · presigned playback · Architecture component Private AWS Storage S3 media · presigned playback Redis + PostgreSQL · streams/state + durable metadata · Architecture component Redis + PostgreSQL streams/state + durable metadata Legend Security External Backend Cloud Database

Adapter rule

  • • Frontend code never exposes provider credentials
  • • Raw provider payloads stay inside integration inboxes
  • • Domain modules receive normalized internal contracts

Import rule

  • • Stripe and ActiveCampaign first become reviewable snapshots
  • • Google Sheets access is read-only
  • • Trainerize imports stage source data before Delivery mapping

Media rule

  • • Capture runs only in the recorder
  • • Finalizer uploads directly to private S3
  • • Redis and the API carry control data and metadata only