Matrix-core repair messenger
USMender starts with the message.
Matrix becomes the local room engine. USMender becomes the client, the workflow, and the safety layer around it: private drafts, mediated previews, approved shared messages, and mobile-first rooms.
I can talk tonight. I want this to feel fair, not like we are keeping score.
Raw draft saved privately in USMender.
Rewrite ready: I need more notice before plans change, and I want us to choose a simple way to check in before decisions are final.
Approval previewSend the mediated version to Matrix
ReviewMessage pipeline
Every shared message is a deliberate local Matrix event.
1
Private draft
Raw text stays in USMender, outside the Matrix room.
2
Safety and retrieval
Room history, agreements, and boundaries shape the rewrite.
3
Approval preview
The sender approves the exact shared wording.
4
Matrix event
Only the approved message enters the local room.
Rebuilt app plan
Matrix stays updateable. USMender stays the experience.
Phase 0
Harden the current local bridge: inbox, thread, drafts, approvals, and event ledger.
Phase 1
Move posting, reads, delivery, and presence behind a Matrix-ready provider interface.
Phase 2
Add local Synapse and a USMender appservice as the core messaging engine.
Phase 3
Polish the PWA and native mobile clients around the thread-first workflow.
Safety contract
Raw drafts stay private. Matrix rooms stay intentional.
USMender owns the composer so the mediator can pause unsafe drafts, retrieve the right context, and ask for approval before anything reaches the local Matrix room.