Merge branch 'docs/mediacenter-videos-app': Videos group app

Poster grid / flat list browsing, TMDB metadata enrichment, thumbnail
generation and caching, season-specific overviews, manual match
correction, and the create-group wizard's app-selection step.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LAmyXtc6dAADsH23ydXQpY

1 files changed, 15 insertions, 0 deletions

diff --git a/packages/meshbay-common/src/meshbay_common/adminop.py b/packages/meshbay-common/src/meshbay_common/adminop.py
index c48f011..51396c7 100644
--- a/packages/meshbay-common/src/meshbay_common/adminop.py
+++ b/packages/meshbay-common/src/meshbay_common/adminop.py
@@ -61,6 +61,21 @@ OP_APPS_ENABLED = "apps_enabled"
 # security property in itself, but the pattern (every operator setting is
 # signed) is what keeps the authorization model simple to reason about.
 OP_SET_SCAN_SETTINGS = "set_scan_settings"
+# Whether the node calls TMDB at all, and whether it uses the operator's own
+# API token instead of the shipped default. Signed like the rest: it turns
+# on outbound third-party network traffic that did not exist before the
+# Videos app (docs/mediacenter.md §5.5, §8) — an unsigned toggle would let
+# any member turn on egress the operator never agreed to.
+OP_TMDB_CONFIG = "tmdb_config"
+# Which folder (possibly a subfolder of a shared root) is the Videos app's
+# entry point for this group — per-group, unlike tmdb_config. Signed like
+# the rest: it decides what every member's Videos tab shows.
+OP_VIDEO_ROOT = "video_root"
+# Correcting a wrong automatic TMDB match — signed for the same reason as
+# tmdb_config: it changes what every member sees for a show/movie, node-wide
+# (media_cache is shared, not per-viewer), so an unsigned override would let
+# any member vandalize another show's metadata.
+OP_TMDB_OVERRIDE = "tmdb_override"
 OP_ROOT_ADD = "root_add"
 OP_ROOT_REMOVE = "root_remove"
 OP_GROUP_ATTACH = "group_attach"