Secure Collaboration & @Mentions

Secure Collaboration & @Mentions

B
bryant

Secure Collaboration & @Mentions

Last week, Cinematic Canvas delivered structured entity creation, canvas performance optimization, and floating panel UX. The workspace was now a professional authoring environment scaled for ambitious narratives.

This week, the focus shifts to the foundation of collaborative storytelling: security and connection. A generative workspace is inherently multi-tenant—team members co-author worlds, build characters together, and iterate on scenes in real-time. Without strict authorization boundaries, collaboration becomes chaos. Without intelligent linking, narratives become disconnected.

The result is a workspace that knows who you are, what team you’re on, and which entities belong together. Every route now validates team context. Every character and location links intelligently via @mentions. The workspace is secure by default, connected by design.

Generative video workspace with intelligent entity linking—where secure collaboration meets cinematic storytelling. Generative video workspace with intelligent entity linking—where secure collaboration meets cinematic storytelling.

What is Cinematic Canvas?

Cinematic Canvas is the generative AI workspace for storytelling. It treats story elements—characters, locations, scenes, and style references—as structured primitives, giving creators total control over building cinematic worlds with strict visual and narrative continuity.

Technology Stack: React (Vite) · Zustand · Tailwind CSS · @xyflow/react · Node.js · LangGraph · PostgreSQL · IndexedDB

What’s New

1. Team Authorization Middleware

Cinematic Canvas now enforces strict team-scoped authorization across every API route. Users can only access resources—projects, worlds, entities, pipelines—belonging to their active team context. This ensures workspace isolation in multi-tenant environments where multiple teams share the infrastructure.

  • Cached Authorization: Team authorization is cached per request to avoid redundant database queries. High-traffic routes check authorization once and short-circuit subsequent checks.
  • Cross-Team Isolation: Project-scoped routes now validate that the requesting user belongs to the owning team. Unauthorized requests are rejected before touching any workflow state.
  • Secure Route Guards: All protected routes—entity CRUD, pipeline execution, asset access—now validate team membership via the middleware stack.

Authorization flow diagram showing user, team context, route guards, and resource isolation Team context flows from authentication through middleware to resource access—isolation enforced at every layer. Each request validates team membership before allowing data access.

The Result: Cinematic Canvas is now truly multi-tenant. Teams can collaborate on shared worlds without fearing cross-team data leakage. The security model matches the collaborative ambition.

2. Intelligent @Mentions

The @mention system has been completely rebuilt with a native contentEditable implementation—eliminating the Tiptap editor dependency entirely. Characters, locations, and scenes now link intelligently across the workspace using the same @mention pattern found in modern collaborative tools.

  • Native DOM Extraction: Mentions now extract via DOM traversal instead of Tiptap AST parsing. This removes the fragile dependency on editor internals and makes the mention system portable across any editable surface.
  • Auto-Fill Integration: Characters and locations auto-populate when typing @mentions in scene description fields. Start typing @ and the autocomplete dropdown suggests entities from your world.
  • Dialog Integration: @Mentions are integrated into all editable dialogs—scene editors, entity detail panels, pipeline configuration—providing consistent cross-entity linking.
  • Auto-Register Handles: Mention handles are auto-registered on entity creation. New characters and locations are immediately searchable via @mentions without manual registration.

Mention system diagram showing autocomplete, DOM extraction, entity linking, and dialog integration Mentions flow from autocomplete selection through DOM extraction to entity linking—native implementation without editor dependencies. Characters, locations, and scenes link seamlessly across the workspace.

The Result: The workspace feels like a modern collaboration tool. Writers can weave characters and locations into scenes by typing @mentions, with full autocomplete and persistent linking. Narratives stay connected.

3. Canvas Persistence & UI Foundation

Several foundational improvements shipped this week, completing the canvas UX modernization:

  • Immersive Scene Editor: Full-screen scene editing surface with cinematic workspace-inspired UI for scene name, description, mood, and continuity notes.
  • Floating Panels Refinements: Sidebar offset system and centralized layout calculations ensure panels position correctly regardless of viewport size.
  • Node Graph Performance: Comprehensive memoization optimizations enable smooth rendering for thousands of nodes.
  • Permanent Deletion: Cross-store entity deletion with confirmation dialogs and async-safe lifecycle handling.

The tools of creators should be as ambitious as the stories they tell. Every update to Cinematic Canvas exists to enable greater storytelling by keeping the creator’s focus exactly where it belongs: on the narrative.

This week’s updates deliver the security and connectivity foundations for collaborative world-building—a reflection on how trust in the tools unlocks deeper creative exploration. By hardening team-scoped authorization and reimagining @mentions with native DOM extraction, we’ve strengthened Cinematic Canvas’s mission to enable structured, narrative-driven storytelling where creators have control over their creative vision in the long-form. Technically, this means cached middleware validates team context on every request, while intelligent entity linking through @mentions now flows seamlessly from autocomplete to cross-entity resolution. The result is a workspace where teams can build together with confidence—data is isolated, the workspace is intelligent, and entities link seamlessly—enabling stories to grow more ambitious with each release. 🎬✨

What’s Shipping Next

  • Narrative-Aware Video Generation: Expanded structured context tools that preserve character arcs, location consistency, and plot threads across scene sequences.
  • Agentic Storytelling System: Expanded agentic storytelling system for collaborative world-building.
  • Live Workspace Demos: Interactive showcases of Cinematic Canvas in action—world-building, entity creation, pipeline execution.

Read the full changelog: github.com/digitalcreationsco/cinematic-canvas/blob/main/CHANGELOG.md

Thank you for building with us. Steady progress and a great week ahead!

#GenerativeAI #GenerativeVideo #TeamCollaboration #Authorization #Mentions #CreativeTools