System context

MUZE operates within a bounded set of external systems. Understanding these boundaries is essential for maintenance and integration work.

System context diagram

The full service map, including limits and known gaps for each integration, is in External services.

These are documented as future work, not current integrations:

Boundary	Notes
Browser ↔ Backend	HTTPS only. Session cookie is `SameSite=None; Secure` in production. CORS restricted to `FRONTEND_ORIGIN`.
Backend ↔ Database	Prisma connects to Neon over TLS. Connection string in `DATABASE_URL`. No IP allowlist configured.
Backend ↔ R2	Standard S3 API with access key/secret. Credentials in `R2_*` environment variables.
Backend ↔ Email	Brevo API key or SMTP credentials. No email content is logged.
Session storage	Sessions stored in PostgreSQL via better-auth. No Redis.