Demo mode · in-memory fixtures · swap to Supabase before production
ADMIN · CHS
Configure: Continuant Healthcare Solutions
healthcare · America/New_York
Provider credentials
Per-org credentials, encrypted at rest (app-layer AES-256-GCM). Each binding generates a per-org webhook secret for HMAC-verified inbound webhooks.
Meta OAuth is wired (Block B start, 2026-06-18) — the round-trip is verifiable in DEMO mode and against the FB dialog once `META_APP_ID` is set. Token exchange + per-Page/IG discovery + write to org_credentials lands in the next Block B sub-block. The other providers (LinkedIn, TikTok, YouTube, Zernio, etc.) follow the same shape and ship after Meta lands end-to-end. HeyGen key for liberated-sobriety is already verified at .secrets/heygen.env.