Release summaries
agent-workflow-command-center-readiness-evidence
Document the production-readiness evidence gates for the Managed CompanyOS Agent/Workflow Command Center slice.
maintainer
Maintainers get a release-facing checklist for command-center promotion gates, verification commands, known authority gates, and evidence packet shape.
integrator
Integrators get explicit guidance that examples and app hosts remain deterministic consumers while module/bundle surfaces own command-center behavior.
b2-operating-cockpit-bundle-promotion
Promote OperatingCockpitPreview and all operating-cockpit screens into bundle.managed-companyos.
maintainer
OperatingCockpitPreview, OriginChip, COCKPIT_ORIGIN_KINDS, all ten screen components (AuditTrailScreen, CommunicationInboxScreen, DashboardScreen, DryRunConsoleScreen, EvidenceMapScreen, HomeScreen, PolicyGateScreen, StarterKitScreen, ThreadDetailScreen, WorkGraphScreen), OperatingCockpitScreen enum, state helpers (createInitialOperatingCockpitState, createInMemoryOperatingCockpitPersistence, parseOperatingCockpitState, reduceOperatingCockpitState, serializeOperatingCockpitState), EMPTY_COMMUNICATION_DATA sentinel, and navigation/href preview data are now exported from the canonical bundle.managed-companyos surface under ui/cockpit/templates/operating-cockpit.
integrator
Import OperatingCockpitPreview and related types from @lssm-tech/bundle.managed-companyos/ui/cockpit/templates/operating-cockpit instead of the deprecated example package shim.
commos-bundle-provider-props
Add personalization + rolemorph props to CommOS bundle templates (G006/G007 wiring)
maintainer
InboxTemplate, ThreadsTemplate, HandoffsTemplate, and ThreadDetailTemplate now accept optional `personalization?: ResolvedPreferenceProfile` and `rolemorph?: RoleMorphProjection` props. Both default to fail-closed values (empty profile, EMPTY_ROLEMORPH) when omitted. Templates converted to 'use client' to mount React context providers at the template boundary.
customer
CommOS screens in CompanyOS applications now respect persona preferences (density, guidance) and role-based capability gating automatically when the parent page passes the resolved personalization and rolemorph values.
cross-platform-managed-companyos-bundle
Promote operating-cockpit view-model adapters as pure synchronous exports safe for both Next.js RSC and Expo React Native consumers.
maintainer
Four new view-model builders exported: buildMobileCockpitViewModel, buildMobileWorkGraphViewModel, buildMobileAuditLogViewModel, buildMobileInboxViewModel. All are pure synchronous functions with no server-only imports.
integrator
Mobile consumers (Expo / React Native) can now import mobile view-model builders directly from @lssm-tech/bundle.managed-companyos without bundler errors. Web RSC consumers are unaffected.
customer
CompanyOS surfaces (cockpit, work-graph, audit-log, inbox) are now available on native iOS and Android via the mobile-monolith superapp shell.
g006-profile-ui
Add persisted multilingual public-profile administration and arbitrary public profile routes with fail-closed booking readiness, non-enumerating absence, and real-route visual regression evidence.
maintainer
Maintainers gain provider-neutral profile DTOs, en/fr/es catalogs, reducer and validation helpers, request-time routes, and dedicated real-route Playwright baselines.
integrator
Integrators can administer persisted profiles through the same-origin authenticated BFF and serve arbitrary published handles without exposing private topology references.
customer
Published profiles render localized links and available, unavailable, or degraded booking states while unknown, draft, and revoked handles remain non-enumerating.
i18n-readiness-companyos-catalogs
Extend Managed CompanyOS view-model display copy to full en/fr/es parity, resolved through the bundle translation catalogs with machine identifiers kept canonical.
maintainer
CompanyOS view-model product copy (autonomy, governance, lifecycle, integration hub, analytics, syncs, knowledge, quote-to-cash, command center, role-label helper) is sourced from the bundle managed-companyos.messages catalogs at en/fr/es parity; machine identifiers stay canonical.
integrator
App shells resolve localized CompanyOS view-model copy for fr/es instead of falling back to en; pass a negotiated locale into the bundle helpers rather than forking copy app-locally.
customer
CompanyOS operator surfaces render French and Spanish display copy across the view-model surfaces, with brand/product-feature names kept consistent across locales by design.
integration-hub-uplift-phase-1-bundle
Additive bump for the Lane 0 integration atoms + capability projection landed in `bundle.managed-companyos`.
integrator
New capability atoms (`CapabilityButton`, `CapabilityLens`, `CapabilityFallback`) plus the `IntegrationCapability` enum + `useIntegrationCapabilities` hook are now consumable from the bundle for Phase 2 screen lanes.
maintainer
Lane 0 atoms + `integration-rolemorph.ts` carry `@frozen-until: integration-hub-uplift-phase-3 (Lane 0 owner)` markers and are CODEOWNERS-pinned for Phase 2; non-Lane-0 commits are rejected on those paths.
integration-hub-uplift-phase-2-screens
Add first-class bundle-owned Integration Hub management screens and normalized catalog seams to bundle.managed-companyos.
integrator
Four new tab templates are now available: CredentialsTabTemplate, SecretsTabTemplate, ConfigTabTemplate, IntegrationAuditTabTemplate. Existing IntegrationHubTemplate and IntegrationDetailTemplate are updated with capability-gated actions, persona-adaptive layouts, bundle-owned health/details and Info affordances, and read-only configure states for inspect-only personas. Consumers can feed normalized records through buildIntegrationHubViewModelFromCatalog instead of rebuilding catalog behavior in apps or examples.
maintainer
New organisms (IntegrationAuditFeed, IntegrationConfigForm, CredentialsScreen, SecretsScreen, ConnectionsTableView, SyncConfigsTableView) and 8 view-model families landed. The reusable catalog seam now exports normalized catalog/connection records, filter state, health summary, and action descriptor contracts from the bundle. Keep future Integration Hub list/detail behavior routed through these bundle-owned VM/UI surfaces.
managed-companyos-app-runtime
Add executable managed CompanyOS app-layer foundations with Next.js web/API monoliths and a VPS worker/WebSocket runtime.
maintainer
Managed CompanyOS now has test-backed app-layer runtime surfaces instead of PRD-only scaffolding.
integrator
Integrators can evaluate provider-neutral managed and BYOK flows through deterministic web, API, worker, and WebSocket surfaces while production provider choices remain approval-gated.
managed-companyos-bundle
Add the provider-neutral Managed CompanyOS product-composition bundle.
maintainer
Maintainers get a provider-neutral bundle boundary for the managed CompanyOS app ecosystem without importing app, example, or provider SDK code.
integrator
Integrators can compose web/API/worker app layers from deterministic tenant, integration, approval, replay, evidence, and health readiness fixtures before selecting live providers.
agent
Agents can validate managed/BYOK parity, redacted credential refs, fail-closed approval gates, evidence receipts, and forbidden imports through focused tests.
managed-companyos-capability-graph
Add canonical capability graph + special-ops/ops-sprint/work-graph view-models to @lssm-tech/bundle.managed-companyos.
maintainer
Introduces src/capability-graph/ as the production-owned shape source-of-truth for the Special Ops capability graph. Adds CapabilityNodeKind, CapabilityStatus (incl. disabled), CapabilityNode, CapabilityEdge, CapabilityGraph, pure builders (createSpecialOpsCapabilityGraph, createSpecialOpsWorkspaceProfile, createSpecialOpsSeedRunReceipt, attachSpecialOpsCapabilityGraph), read helpers, and projection selectors (selectCockpitProjection, selectOpsSprintProjection, selectWorkGraphProjection). Disabled or restricted nodes surface a [redacted-capability] label and a disabled effective status with no raw secret material. View-models for special-ops/ai-ops-sprint/work-graph carry a deterministic locale (default en) and an optional displayCopy map keyed by ManagedCompanyOsI18nKey for T7/T9 localization. Legacy Managed* type aliases remain exported for one migration cycle.
integrator
Import the new capability graph and projections from @lssm-tech/bundle.managed-companyos to power the Special Ops cockpit, AI Ops Sprint, and Work Graph surfaces. View-model builders accept an optional locale and displayCopy map so API/worker/web layers can hydrate localized strings without forking the builders. No new runtime dependencies; no imports from packages/apps/* or packages/examples/*.
managed-companyos-cockpit-ui-export
Expose the managed CompanyOS cockpit UI subpath used by promoted operating-cockpit shims.
integrator
Consumers can import the promoted operating cockpit template from the managed-companyos bundle export map instead of failing package subpath resolution.
maintainer
The source and publish export maps now include the canonical UI barrel and nested UI subpaths needed by the B2 shim-delete path.
managed-companyos-composition
Document the provider-neutral Managed CompanyOS composition bundle and managed/BYOK ownership parity surface.
maintainer
Maintainers get a release capsule for the composition bundle boundary, redacted-secret guardrails, and provider-neutral app-facing seams.
integrator
Integrators can evaluate managed and BYOK ownership modes through deterministic DTO/view-model helpers before provider approval.
agent
Agents can trace managed/BYOK parity and provider-neutral smoke expectations to focused bundle tests and docs.
managed-companyos-ecosystem
Release the provider-neutral Managed CompanyOS ecosystem slice across web, API, worker, integration, workflow, replay, evidence, and operator readiness surfaces.
maintainer
Maintainers get a single release capsule for the Managed CompanyOS PRD implementation and its remaining provider/compliance caveats.
integrator
Integrators can exercise deterministic managed/BYOK setup, workflow, replay/evidence, health/degraded, and WebSocket proof surfaces without production provider defaults.
agent
Agents can follow PRD evidence through the ecosystem handoff packet, runbook, release readiness matrix, and focused tests.
managed-companyos-opa-public-booking-readiness
Add Managed CompanyOS OPA public booking readiness/runbook guidance and release evidence metadata for the dry-run, sandbox, hybrid, live-canary, and live-capable taxonomy, vault/outbox safety, route policy, smoke, rollback, and public-safe copy.
maintainer
Maintainers get a focused OPA public booking runbook and evidence checklist covering runtime adapter readiness, explicit rollout posture, route policy, vault/outbox safety, replay, protected operator repair, smoke, degraded states, rollback, and Connect artifacts.
integrator
Integrators can keep public booking in fail-closed dry-run mode, move to sandbox-only proof, retain an external-booking hybrid, run a bounded live canary, or mark live-capable only after approved app/integration adapter, vault, idempotency, outbox, route-policy, and evidence packets are attached. Live-capable readiness alone does not claim live execution or cutover.
agent
Agents must cite docs/runbooks/opa-public-booking.md before changing public booking routes, adapter status, provider/vault handling, or release-facing copy.
managed-companyos-product-surface-i18n
Add locale-aware Managed CompanyOS product-surface copy owned by the bundle translation catalogs.
maintainer
Managed CompanyOS product-surface route and degraded-state display copy now resolves through bundle-owned i18n catalogs instead of app-local business dictionaries.
integrator
App shells can request localized product-surface snapshots by passing locale preferences into bundle helpers while keeping ids, paths, evidence refs, and safety reasons stable.
agent
I18n work should keep Managed CompanyOS business copy in the bundle catalog and verify no app-local duplicate dictionaries are introduced for shared product surfaces.
managed-companyos-production-hardening
Close Managed CompanyOS production-readiness gaps with persistence, provider wiring, deployment artifacts, live WebSocket proof, and production E2E evidence.
maintainer
Production-hardening artifacts now cover deployment, durable state, provider-neutral reference dispatch harness, live WebSocket proof, and E2E verification.
integrator
Integrators can run the production E2E proof with env-backed credentials and mounted durable state while raw secrets remain out of git.
managed-companyos-profile-authoritative-preview
Render the profile admin preview from the authenticated persisted revision instead of a locally fabricated published projection.
customer
Profile administrators see the exact saved candidate and truthful server-derived booking readiness before publishing.
maintainer
The no-store preview BFF preserves session-derived tenant authority and removes private profile and calendar topology refs before browser delivery.
managed-companyos-profile-context-isolation
Bind profile editor state, previews, and mutations to the current opaque CompanyOS authority fingerprint so stale tabs cannot cross context switches.
customer
Switching between Personal, LSSM, CompanyOS, ND Consulting, or another authorized context cannot carry an unsaved profile draft into the new context.
integrator
The provider-neutral profile admin DTO accepts an optional opaque contextFingerprint used to remount local state and bind mutations.
maintainer
The web BFF verifies a server-secret HMAC bound to the current session and authority before any destination-context profile read or write and returns a no-store profile_context_changed conflict on mismatch.
managed-companyos-provider-approval-gate
Add an executable provider approval gate for Managed CompanyOS G006 live-source pilot decisions while keeping concrete provider selection approval-gated.
maintainer
Maintainers can validate a filled G006 provider approval JSON artifact with a package command before allowing adapter smoke work to begin.
integrator
Integrators can use the root-exported parser/evaluator/assert/smoke-plan helpers to keep provider choices approval-blocked until every mandatory live-source category has explicit approval, then derive the required per-category adapter smoke checks.
agent
Agents get a machine-checkable blocker list instead of prose-only approval status for the Managed CompanyOS AI Ops Sprint live-source gate.
managed-companyos-provider-strategy-readiness
Document the Managed CompanyOS provider-strategy closure and release-readiness gates for broad managed/BYOK provider catalog support.
maintainer
Maintainers get an explicit provider matrix and release gate for catalog-ready versus live-dispatch-ready Managed CompanyOS providers.
integrator
Integrators can rely on managed/BYOK parity by default while treating BYOK-only, regulated, unofficial, and live-session providers as documented exceptions until dispatch evidence exists.
managed-companyos-s6-release-readiness
Add Managed CompanyOS S6 release-readiness evidence helpers, docs, operator runbook, and provider-catalog parity handoff covering T1–T3 app surfaces.
maintainer
Maintainers get an executable S6 acceptance matrix, provider-catalog parity gate, final-evidence packet shape, and a consolidated operator runbook covering web/worker/API app surfaces.
integrator
Integrators get provider-neutral smoke harness guidance, managed/BYOK provider-catalog parity requirements, environment validation runbook requirements, and /llms.txt guidance without committing provider secrets.
agent
Agents can run release-readiness tests and docs guardrails that reject compliance, credential-custody, production-provider, and autonomous reserved-action overclaims. The /llms.txt surface provides full route inventory, role roster, redaction policy, and AI-dispatch rules.
managed-companyos-tenant-aware-shell
Brand the authenticated Managed CompanyOS shell from server-authoritative tenant identity while preserving RoleMorph and fixture boundaries.
customer
LSSM, CompanyOS, and ND Consulting members see their own workspace brand; personal and other tenants see a neutral CompanyOS workspace.
integrator
Apps can pass a provider-neutral visible identity to the workspace-shell projection without changing fixture ids or authority contracts.
maintainer
Missing presentation personas now preserve the authenticated RoleMorph role, and shell-entry signals no longer use shared demo attribution.
managed-companyos-verification-guardrails
Tighten Managed CompanyOS verification guardrails for explicit ownership gating and provider-neutral raw-secret scans.
maintainer
Maintainers get passing managed-companyos package tests/typecheck plus provider-neutral safety scan evidence for explicit managed/BYOK ownership and redacted defaults.
integrator
Integrators keep deterministic fail-closed provider dispatch and raw-secret scanning without false positives from Markdown paths or design-token labels.
next-app-tsgo-prebuild
Move Next.js app production type validation out of `next build` and into explicit package-local `tsgo` prebuild checks, while preserving Next app build success with `typescript.ignoreBuildErrors`.
maintainer
Next app builds now run `bun x tsgo --project tsconfig.build.json --noEmit` before `next build`, and Next itself skips its slower built-in TypeScript validation step.
integrator
App package builds keep type safety through an explicit tsgo prebuild script. Consumers should continue using each app's `build` or `typecheck` script instead of invoking Next's internal type validation directly.
customer
Production app output is unchanged; this release only makes the build pipeline faster and more explicit about where TypeScript validation runs.
real-organizations-documentation-operations
Align Managed CompanyOS public and operator documentation with the three-organization authority, canary, observation, compatibility, and non-destructive rollback contract.
integrator
Better Auth membership and verified active-organization state are the identity authority. A persisted binding resolves the existing physical tenant; tenantId fields and browser selectors remain assertion-only compatibility aliases.
maintainer
Operators gain one G006 runbook for three-organization rollout, a named bounded canary, stop triggers, 24-hour observation, ND closure, and rollback to the immutable dual-compatible build without deleting additive authority or audit rows.
special-ops-monolith-production-docs
Document the database-first Special Ops monolith production cutover, seed contract, capability graph gates, and verification evidence path.
maintainer
Maintainers now have an explicit Special Ops production runbook separating deterministic proof paths from approval-gated DB seed, capability graph, AI Ops Sprint, work-graph, and provider cutover work.
integrator
Integrators can follow the documented API, worker, and web surface map while preserving no-example-runtime-import, redaction, tenant isolation, and degraded-state honesty boundaries.
customer
The Special Ops production path is documented as fictive, redacted, and approval-gated before real customer data or live provider dispatch is admitted.
t6-i18n-managed-companyos-catalog-expansion
expand en/fr/es catalogs to cover PRD domains (additive)
maintainer
expand en/fr/es catalogs to cover PRD domains (additive)
integrator
expand en/fr/es catalogs to cover PRD domains (additive)