Release summaries
company-intelligence-continuous-ingestion
Add durable multi-source Company Intelligence ingestion, replay-safe checkpoints, bounded retries and quotas, truthful credential failure, and deletion/ACL propagation.
maintainer
Upload, webhook, polling, and representative connector classes now share app-owned durable jobs, deterministic retry/checkpoint behavior, redacted receipts, and immutable propagation.
integrator
Existing 0022/0023 tables are reused without a migration. Bind provider-neutral adapters to their existing package owners and resolve credentials outside durable payloads.
company-intelligence-tenant-persistence
Add app-owned PostgreSQL persistence, FORCE RLS, durable work state, resumable backfill, and recovery qualification for canonical Company Intelligence records.
maintainer
The API monolith owns canonical Company Intelligence records, normalized references, append-only receipts/events, tombstone purge controls, jobs, outbox, DLQ, and checkpointed backfill state in PostgreSQL with FORCE RLS.
integrator
G002 public identities remain unchanged. Apply additive migrations 0022 and 0023, use a NOSUPERUSER NOBYPASSRLS runtime role, and qualify clean/upgrade/recovery paths on PostgreSQL 15 before admitting tenant data.
companyos-auth-opa-migration-ledger
Track Better Auth and OPA schema state transactionally, safely evolve partial Better Auth schemas, and preserve the supported idempotent first-admin server-API bootstrap.
maintainer
The first-admin command now requires an explicit canonical workspace identifier and derives its tenant exclusively from the Better Auth organization ID used by sessions. It creates credentials through Better Auth only when absent, reconciles enterprise-admin and owner authority, transactionally binds the Better Auth user and organization to exactly one Managed CompanyOS tenant/workspace/operator, and sends the normal verification email without marking email ownership verified.
companyos-managed-runtime-domain-migration
Move managed CompanyOS runtime, auth, CORS, cookie, profile, booking, and OAuth origins from the retired companyos.lssm.tech topology to www.companyos.run and api.companyos.run.
integrator
Configure the managed web origin as https://www.companyos.run, API/auth origin as https://api.companyos.run, and cookie parent as .companyos.run. Retired origins fail closed.
customer
Managed CompanyOS now uses the live www.companyos.run browser origin while gtm.companyos.run remains a separate public destination.
cross-platform-mobile-demo-f7
F7 — Final deliverable of the 37-task cross-platform plan. Add F3/F6 sections to AGENTS.md, create public/llms.txt, and add cross-platform ADR for the CompanyOS + CommunicationOS migration.
maintainer
AGENTS.md gains F3 (cross-platform analytics stitching) and F6 (performance budgets) sections documenting the FNV-1a hash contract, BSP constants parity, cold-start budget enforcement, and Maestro/view-model validation approach. public/llms.txt is a new AI-consumable reference file covering all v1 surfaces, personas, capability gating, PostHog schema, and privacy invariants. docs/adr/2026-05-19-cross-platform-companyos-communicationos-pillars.md records D1-D6 architectural decisions with rationale and alternatives considered.
integrator
Agents and LLMs working in this package should consult public/llms.txt as the primary orientation file. AGENTS.md is the full developer guide.
data-transmission-crdt-v0
Add protocol-neutral data transmission contracts, deterministic runtime proofs, and guarded WebSocket worker/demo evidence while holding CRDT/Loro promotion behind the baseline gate.
maintainer
Maintainers now have a contract-first package family for standard fetch/RPC, realtime guardrails, invalidation, presence, idempotency, collaboration seams, and worker/demo proof evidence; CRDT/Loro promotion remains disabled until the baseline gate is green.
integrator
Integrators can execute protocol-neutral operations through the standard fetch proof, test realtime semantics in memory, and use the private Bun worker as a deployment-shape reference; Loro CRDT adoption remains a deferred proof lane.
docs-example-runtime-preview
Wrap UI-backed docs example previews in the template runtime provider so public example pages prerender with the same runtime boundary as sandbox and template previews.
maintainer
The `/docs/examples/<key>` inline preview section now initializes `TemplateRuntimeProvider` for examples with inline runtime UI while preserving lightweight fallback previews for non-UI examples.
customer
Public docs pages for UI-backed examples, including `analytics-dashboard`, now prerender successfully instead of failing on missing template runtime context.
integration-hub-uplift-phase-1-app
Internal `force-dynamic` flip + session-resolved persona for `/companyos/integrations/**` carried into Phase 1.
integrator
All `/companyos/integrations/**` pages are now `force-dynamic` and resolve `RoleMorphProjection` per-request from the auth session; client-side persona switching is removed.
maintainer
New `runtime/role-morph-resolver.ts` + `role-morph-cache-key.ts` (with `hashRoleMorph` PII-exclusion guarantee) own per-request persona projection. SSR catalog uses `unstable_cache` keyed by the hash with `revalidateTag('integrations')` invalidation.
integration-hub-uplift-phase-2-app
Add new per-integration tab routes and update existing integration routes in web-application-monolith.
integrator
Seven new route pages under /companyos/integrations/[integrationId]/ (connections, syncs, credentials, secrets, config, audit, and the tab layout shell). All pages use force-dynamic with session-resolved RoleMorphProjection. No route removals or renames.
maintainer
Credentials and secrets pages are security-class (uncached, streaming via Suspense). All new pages emit surface_viewed + role_morph_resolved signals. No DEFAULT_ROLE / TENANT_ID / CORRELATION_ID hardcoding in any integration route — all session-derived.
managed-companyos-booking-reschedule-empty-state
Show a usable empty and retry state when public booking reschedule availability has no slots.
customer
Visitors rescheduling a booking can distinguish no current slots from a pending availability request and can retry without leaving the page.
maintainer
The reschedule state projection makes loading, failure, empty, and ready availability outcomes explicit and independently testable.
managed-companyos-four-context-product-canary
Add a read-only production canary for Personal, LSSM, CompanyOS, and ND Consulting profile, booking, and Google-derived availability.
integrator
A strict four-context matrix configures non-mutating production checks for published profiles, booking links, current availability, and public web routes.
maintainer
The operations workflow advances its migration inventory through 0033 and runs the product canary only for the reviewed canary-smoke action.
managed-companyos-google-calendar-topology-selection
Make protected Google Calendar topology selection usable without manual internal identifiers.
customer
Calendar administrators select an eligible owned-live booking event and start from valid scheduling defaults instead of copying opaque references.
managed-companyos-production-env-activation
Make the Managed CompanyOS production environment contract explicit for profile authority, booking, and Google Workspace Calendar activation.
integrator
Deployment templates and the runbook identify the exact server-only variables required before profile editing, Google Calendar OAuth, and Postgres-backed booking effects can be enabled.
maintainer
Inventory checks can distinguish required authority configuration from optional fail-closed booking notifications and approval-gated rollout posture.
managed-companyos-public-booking-json-datetime
Let JSON public-booking availability requests cross the DateTime contract boundary without weakening link scope or validation.
customer
Public booking pages can load link-scoped availability from their ISO date-time request window instead of failing before link resolution.
maintainer
The HTTP adapter converts only valid ISO date-time strings to the ContractSpec-native Date input while invalid values retain the existing fail-closed validation result.
managed-companyos-public-booking-runtime-truth
Make the public booking page honor request-time adapter readiness and fail closed without selectable slots for missing or sandbox-only posture.
integrator
Public booking now reflects MANAGED_COMPANYOS_PUBLIC_BOOKING_ADAPTER_STATUS at request time; only adapter_ready enables selectable lifecycle slots.
maintainer
The browser receives only the serializable adapter status, while provider operations and manage bearers remain behind existing server boundaries.
managed-companyos-public-profile-not-found-locale
Localize public profile not-found content and metadata through the shared request locale contract.
customer
Visitors reaching an unknown public profile see localized recovery copy and page metadata in the same language as the rest of the web app.
managed-companyos-smart-meeting-bff-locale
Localize authenticated Organization Planning readiness snapshots to the request locale.
customer
French and Spanish users receive localized smart-meeting readiness and setup copy from the authenticated planning API.
integrator
Organization Planning BFF consumers can rely on the resolved request locale instead of translating an English-only readiness payload.
managed-companyos-web-theme-hardening
Wire app-shell runtime (globals.css + cockpit tokens, providers, layout rewrite, global state routes) and add three enforcement tests for the managed-companyos web monolith.
maintainer
App shell now has a full CSS pipeline (tailwind + tw-animate-css + cockpit slate/cyan/amber tokens in globals.css), env-gated PostHogProvider (no-op when NEXT_PUBLIC_POSTHOG_KEY is unset, SSR-safe), ThemeProvider (dark-only S1 — defaultTheme="dark", no enableSystem, dark class applied by next-themes at hydration; :root tokens are already cockpit-dark to minimise flash), global state routes (error.tsx Client Component + loading.tsx + not-found.tsx using design-system primitives), and three enforcement tests. AGENTS.md and README.md updated with Theme & runtime wiring section. No public-surface change; bundle untouched.
integrator
No bundle or public-surface change. The app renders with full Tailwind CSS theme. PostHog instrumentation is active only when NEXT_PUBLIC_POSTHOG_KEY is set. S2/S3 follow-ups (design-system CSS token export, enableSystem re-enable, CSP, page-color rewrites) documented in AGENTS.md.
mobile-monolith-app-submission-readiness
Add App Store / Google Play submission-readiness metadata and evidence for the mobile monolith proof shell.
maintainer
The Expo mobile proof now records bundle identifiers, legal review links, iOS privacy manifest posture, Android permission boundaries, and credential-free EAS submit expectations in source-controlled readiness evidence.
integrator
Store submission metadata is read-first and deterministic; production App Store Connect / Google Play credentials remain external to the repository.
opa-v2-reset-evidence-repair
Harden OPA v2 reset and restore evidence validation without authorizing or executing a reset.
maintainer
Reset evidence now rejects reordered migration ledgers, invented or misaligned Connect artifacts, incomplete approval authority, incomplete passed rehearsals, and grants that do not match the shipped OPA migration sources.
reviewready-web-proof
Add the /companyos/app-submission-readiness web product proof rendering a runtime-driven readiness report.
customer
A new /companyos/app-submission-readiness route demonstrates the ReviewReady readiness report end-to-end. The rendered report (findings, score, decision, per-store checklists) is produced by the runReadinessAudit engine, not hardcoded.
maintainer
The route is a thin App Router shell composing @lssm-tech/module.app-submission-readiness with runtime-driven fixtures, statically rendered, emitting CompanyOS behavior signals for the new app_submission_readiness surface with no secret leakage.
special-ops-capability-db-schema
Add Special Ops capability graph and workspace DB tables (additive)
maintainer
Add Special Ops capability graph and workspace DB tables (additive)
integrator
Add Special Ops capability graph and workspace DB tables (additive)
special-ops-workspace-capability-repositories
Add WorkspaceCapabilityRepository interface + drizzle and in-memory adapters for workspace and capability graph tables
maintainer
Add WorkspaceCapabilityRepository interface + drizzle and in-memory adapters for workspace and capability graph tables
integrator
Add WorkspaceCapabilityRepository interface + drizzle and in-memory adapters for workspace and capability graph tables
web-landing-loop-d-e2e
Playwright E2E infrastructure + CommunicationOS draft-approve flow test (Loop D / D3).
maintainer
Web landing now has Playwright E2E infrastructure with a CommunicationOS draft-approve flow test.