Ship Slack-native Mumbl beta

[lladawn]

Summary

This PR ships the current dev branch to main based on the actual remote comparison: origin/main..origin/dev.

The release is focused on production hardening for private data, the private pattern graph, private-room invite-key flows, and Slack App Home/team-read fixes.

What Changed

Production Privacy And Encryption Gate

• Adds server-side content encryption support for user-entered and user-derived content.
• Adds the content-encryption backfill script and documentation for key handling.
• Updates backend routes and serializers to decrypt/encrypt content consistently.
• Squashes the Supabase migration history into the updated initial schema and removes the older incremental migration files.
• Adds table grants and fixes missing encrypted payload coverage for saved room access.
• Updates env, release, backend, and free-tier docs for the production privacy posture.

Private Room Access And Invite Keys

• Adds saved room access so logged-in users can reopen private rooms without re-pasting invite links.
• Adds an access-token endpoint for saved room access.
• Supports publishing field notes to private rooms by manual invite link.
• Fixes invite-key handling in Slack links and room-share flows so private room links include the key when Mumbl has it and degrade cleanly when it does not.
• Tightens private-room access checks for posts, publishing, saved rooms, and Slack-created rooms.

Pattern Graph

• Adds v0 private pattern graph support for logged-in private dumps.
• Adds signal extraction, insight generation, pattern review endpoints, and the pattern map route.
• Adds the Patterns page and client UI.
• Removes the old Supermemory path and replaces it with Mumbl-owned pattern graph infrastructure.
• Gates pattern features behind environment configuration and documents the staging/production setup.

Slack App Home And Room Pinning Fixes

• Adds self-serve room pinning from Slack with invite-key verification.
• Fixes the App Home pin-room flow so it is not duplicated and gives clearer feedback when a room is already pinned.
• Defensively de-dupes pinned spaces in Slack views.
• Removes optional Slack team-read setup side effects from pinned-space management so pinning cannot fail because an unrelated setup link could not be created.
• Fixes Slack room-read buttons, including the open team reads button after publishing a draft, to use invite-key-aware URLs.

Team-Read Ownership

• Prevents room creators from deleting someone else published team reads.
• Allows the person who published a field note to remove their own team read.
• Fixes the stale state where deleting a team-read post could leave the backing field note marked as published without a published post.
• Clears public-profile linkage when a team read is removed, preserving the rule that public notes must come from published team reads.

Product And Docs

• Updates the README intro and product/how-it-works framing.
• Refreshes the Open Graph preview image.
• Adds/updates docs for pattern graph, encryption key safety, environments, release checklist, backend plan, free-tier constraints, and Slack setup.

Verification

• Ran npm run build successfully after the latest Slack invite-key and team-read ownership fixes.

Release Notes

• This PR includes Supabase schema changes. Confirm the linked Supabase project before applying migrations.
• Production requires the documented encryption, Supabase, Slack, cron, and optional AI provider environment variables.
• Pattern graph work should remain gated unless the production environment is intentionally configured for it.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
mumbl-app	Ready	Preview, Comment	Jun 26, 2026 1:43pm