Settings
Configure workspace defaults, approval rules, rendering settings, storage and secure environment requirements.
Approval rules
- Require approval for every generated video
- Block auto-upload unless enabled per account and channel/platform pair
- Create audit logs for edits and token actions
Go-live controls
- Health endpoint available at /api/health
- Channel permissions must be clear before publishing
- Auto-Publish stays disabled by default
Rendering defaults
- 9:16 MP4 exports
- Text-over-video and subtitles enabled
- Store renders in Supabase Storage
Environment
- OPENAI_API_KEY server-only
- SUPABASE_SERVICE_ROLE_KEY server-only
- OAuth secrets never exposed to client bundles
Data retention
Account deletion should enqueue token revocation, storage cleanup, metric deletion and an audit event. Use RLS and server-side service-role jobs.