An initiative of Owlink.ai — Stealth Intelligence for Gov and People Built by Alexsai · Live at redroom.live

Redroom is a full-stack OSINT (Open-Source Intelligence) platform built for geopolitical analysts, researchers, and intelligence professionals. It aggregates, classifies, and visualises open-source news and signals data across global regions — providing a structured, real-time intelligence picture without requiring access to classified systems.

1. Overview
2. Key Features
3. Tech Stack
4. Architecture Overview
5. Quick Start
6. Environment Variables
7. Project Structure
8. Data Models
9. API Reference
10. Crawler & Mission System
11. CMS & Administration
12. Deployment
13. Contributing
14. Security
15. License

Redroom provides a command-and-control style intelligence dashboard that aggregates open-source news from hundreds of media agencies worldwide, enriches articles with AI-assisted classification, and presents the resulting intelligence picture through a suite of analytical tools.

The platform is designed around the OSINT tradecraft workflow:

1. Collection — automated RSS crawlers harvest articles from curated news agencies across all global regions.
2. Processing — articles are parsed, deduplicated, sentiment-scored, and linked to facilities, countries, and threat categories.
3. Analysis — analysts access live feeds, trend dashboards, narrative trackers, satellite orbit data, and SIGINT signal maps.
4. Dissemination — intelligence is surfaced through a structured UI with region-level threat assessments, escalation indicators, and exportable reports.

┌─────────────────────────────────────────────────────────────────┐
│                        CLIENT (React 19)                        │
│  ┌──────────────┐  ┌──────────────┐  ┌───────────────────────┐ │
│  │  Globe View  │  │  Intel Feed  │  │  Analysis Dashboards  │ │
│  │  (Three.js)  │  │  (Live tRPC) │  │  Orbit / SIGINT / CMS │ │
│  └──────┬───────┘  └──────┬───────┘  └──────────┬────────────┘ │
│         └─────────────────┴──────────────────────┘             │
│                        tRPC Client                              │
└─────────────────────────────┬───────────────────────────────────┘
                              │ HTTPS / tRPC over JSON
┌─────────────────────────────▼───────────────────────────────────┐
│                      SERVER (Express + tRPC)                    │
│  ┌──────────────┐  ┌──────────────┐  ┌───────────────────────┐ │
│  │  appRouter   │  │  cmsRouter   │  │  Crawler / Scheduler  │ │
│  │  (public +   │  │  (admin-only │  │  missionScheduler.ts  │ │
│  │   protected) │  │   procedures)│  │  crawler.ts           │ │
│  └──────┬───────┘  └──────┬───────┘  └──────────┬────────────┘ │
│         └─────────────────┴──────────────────────┘             │
│                       server/db.ts                              │
└─────────────────────────────┬───────────────────────────────────┘
                              │ Drizzle ORM
┌─────────────────────────────▼───────────────────────────────────┐
│                    MySQL / TiDB Database                        │
│  news_agencies · articles · facilities · crawl_missions         │
│  mission_runs · investigations · sigint_signals · orbit_data    │
└─────────────────────────────────────────────────────────────────┘

For the full architecture document, see ARCHITECTURE.md.

• Node.js ≥ 22
• pnpm ≥ 9
• MySQL 8 or TiDB (serverless tier works)

git clone https://github.com/Owlinkai/redroom.git
cd redroom

pnpm install

Copy the example file and fill in your values:

cp .env.example .env

See the Environment Variables section for a full description of each variable.

pnpm db:push

This runs drizzle-kit generate followed by drizzle-kit migrate to apply all schema migrations to your database.

pnpm dev

The application will be available at http://localhost:3000.

All secrets and configuration values must be provided via environment variables. Never commit a populated .env file.

Security note: Variables prefixed with VITE_ are bundled into the client-side JavaScript and are visible to end users. Never place private API keys or secrets in VITE_ variables.

redroom/
├── client/                     # React frontend
│   ├── public/                 # Static assets (favicon, robots.txt)
│   ├── src/
│   │   ├── components/         # Reusable UI components
│   │   │   ├── GlobeRegionSelector.tsx   # 3-D globe with Three.js
│   │   │   ├── DashboardLayout.tsx       # Sidebar dashboard shell
│   │   │   ├── AIChatBox.tsx             # AI chat interface
│   │   │   └── Map.tsx                   # Map integration component
│   │   ├── pages/              # Page-level route components
│   │   │   ├── Home.tsx                  # Landing / entry page
│   │   │   ├── IntelPlatform.tsx         # Main intelligence dashboard
│   │   │   ├── AdminCMS.tsx              # CMS admin panel
│   │   │   ├── Orbit.tsx                 # Satellite orbit tracker
│   │   │   └── tabs/                     # Dashboard tab components
│   │   ├── contexts/           # React contexts (auth, theme)
│   │   ├── hooks/              # Custom React hooks
│   │   ├── lib/trpc.ts         # tRPC client binding
│   │   ├── App.tsx             # Route definitions
│   │   └── index.css           # Global styles and design tokens
│
├── server/                     # Express + tRPC backend
│   ├── routers/                # Feature-specific tRPC routers
│   │   ├── cms.ts              # CMS admin procedures
│   │   ├── orbit.ts            # Satellite orbit data
│   │   ├── sigint.ts           # SIGINT signal procedures
│   │   ├── missions.ts         # Surveillance mission procedures
│   │   ├── narratives.ts       # Narrative engine procedures
│   │   ├── reference.ts        # Reference checker procedures
│   │   └── waitingList.ts      # Access request management
│   ├── routers.ts              # Root router (assembles all sub-routers)
│   ├── db.ts                   # Drizzle query helpers
│   ├── crawler.ts              # RSS crawl engine
│   ├── missionScheduler.ts     # Cron-based crawl mission scheduler
│   ├── narrativeEngine.ts      # AI narrative detection engine
│   ├── referenceChecker.ts     # Cross-source reference verification
│   ├── quotaEnforcement.ts     # Per-user API quota management
│   ├── rateLimiter.ts          # Request rate limiting
│   ├── auth.ts                 # Authentication helpers
│   └── storage.ts              # S3 file storage helpers
│
├── drizzle/                    # Database schema and migrations
│   ├── schema.ts               # Drizzle table definitions
│   ├── relations.ts            # Drizzle relation definitions
│   └── *.sql                   # Migration files
│
├── shared/                     # Shared types and constants
│   └── const.ts                # Cross-stack constants
│
├── ARCHITECTURE.md             # Detailed system architecture
├── CONTRIBUTING.md             # Contribution guidelines
├── SECURITY.md                 # Security policy and disclosure
├── CODE_OF_CONDUCT.md          # Community standards
├── LICENSE                     # MIT License
└── README.md                   # This file

The core data models are defined in drizzle/schema.ts. Below is a summary of the primary tables.

For the full schema with column definitions, see drizzle/schema.ts.

Redroom uses tRPC for all client-server communication. There are no traditional REST endpoints — all procedures are defined in server/routers.ts and its sub-routers.

• Public — no authentication required
• Analyst — requires a valid session cookie (authenticated user)
• Admin — requires role: "admin" on the user record
• Super-Admin — requires a valid x-sa-token header (CMS only)

The crawler system consists of two components:

server/crawler.ts — the core RSS crawl engine. It fetches RSS feeds from a given news agency, parses articles, deduplicates against the database, scores sentiment, and inserts new records. It emits events on the crawlEventBus so the frontend can receive live updates via tRPC subscriptions.

server/missionScheduler.ts — the mission scheduling layer. Missions are stored in the crawl_missions table and define:

• A cron schedule (e.g., */30 * * * * for every 30 minutes)
• Target regions, countries, topics, and source types
• Priority and classification level
• Creator information (which admin created the mission)

When a mission fires, the scheduler creates a mission_runs record, selects matching agencies, runs the crawler for each, and updates the run record with the result (articles found, new articles, duration, any errors). Manual triggers record the triggeredBy: "manual" flag and the admin username.

The CMS requires super-admin authentication via a secret key. The route is not published in this documentation. It provides:

• News Agencies — add, edit, delete, and manually crawl agencies
• Articles — browse, search, and manage the article database
• Facilities — manage tracked facilities and their intelligence sources
• Crawler Missions — create, edit, pause, trigger, and monitor scheduled crawl missions with full run history and creator attribution
• Webhooks — configure outbound webhooks triggered by pipeline events
• Waiting List — review and approve/reject access requests

The CMS uses a dual-authentication model: the super-admin session is established via a secret key (not tied to any user account), providing an additional layer of separation between the public user system and the administrative backend.

Redroom is a single Node.js process that serves both the API and the built frontend assets. It is designed to run on any Node.js-compatible hosting platform.

pnpm build
pnpm start

FROM node:22-alpine
WORKDIR /app
COPY . .
RUN npm install -g pnpm && pnpm install --frozen-lockfile
RUN pnpm build
EXPOSE 3000
CMD ["pnpm", "start"]

• Runtime: Node.js 22+
• Memory: 512 MiB minimum recommended
• Port: Reads from PORT environment variable, defaults to 3000
• Database: Requires an external MySQL 8 or TiDB instance (connection via DATABASE_URL)

Contributions are welcome. Please read CONTRIBUTING.md before opening a pull request.

Please do not open public GitHub issues for security vulnerabilities. Read SECURITY.md for the responsible disclosure process.

This project is licensed under the MIT License — see the LICENSE file for details.

Redroom V2.4 is an initiative of Owlink.ai — Stealth Intelligence for Gov and People

Built by Alexsai · © 2024–2026 Alexsai · Owlink.ai · Live at redroom.live