{"id":"@lssm-tech/app.managed-companyos-mcp","slug":"app.managed-companyos-mcp","name":"@lssm-tech/app.managed-companyos-mcp","version":"2.0.4","path":"packages/apps/managed-companyos-mcp","manifestPath":"packages/apps/managed-companyos-mcp/package.json","manifestBlobSha":"67e69a91fd4093cd91c0e30adec60aa024e57984","layer":"apps","physicalArea":null,"primaryArea":"app-composition","classification":{"privateDeclared":null,"catalogFamily":"solutions","catalogKind":"app","catalogStatus":"active","adoptionMode":"operator-only","stability":"experimental"},"description":"Managed MCP server for CompanyOS operations and governed agent access.","descriptionOrigin":"package.json","catalog":{"family":"solutions","kind":"app","status":"active","adoptionMode":"operator-only","stability":"experimental","platforms":["server"],"runtimes":["node"],"entrypoints":[".","./blueprint","./contract-editions","./handlers","./prompts","./read-projection-resources","./resources","./server","./tenant-context","./tools","./*"],"documentation":[{"title":"App Managed Companyos Mcp documentation","url":"https://www.npmjs.com/package/%40lssm-tech%2Fapp.managed-companyos-mcp","kind":"readme"}],"examples":[],"replacements":[],"nonAdoptableRationale":"This app is published for execution by operators, not as a reusable library dependency."},"canonicalImports":[],"scripts":{"clean":"rm -rf dist","lint":"bun run lint:fix","lint:fix":"node ../../../scripts/biome.cjs check --write --unsafe --only=nursery/useSortedClasses . && node ../../../scripts/biome.cjs check --write .","lint:check":"node ../../../scripts/biome.cjs check .","build":"bun ../../../scripts/tsdown.mjs","dev":"bun ../../../scripts/tsdown.mjs --watch","start":"node dist/server.js","typecheck":"tsgo --noEmit","test":"bun test","companyos:builder:mcp-smoke":"bun test src/smoke"},"scriptStatus":"complete pinned manifest","dependencies":{"@lssm-tech/bundle.managed-companyos":"workspace:^","@lssm-tech/lib.contracts-runtime-server-mcp":"workspace:^","@lssm-tech/lib.contracts-spec":"workspace:^","@lssm-tech/lib.logger":"workspace:^","@modelcontextprotocol/sdk":"catalog:ai","zod":"catalog:"},"devDependencies":{"@lssm-tech/tool.tsdown":"workspace:*","@lssm-tech/tool.typescript":"workspace:*","@types/node":"catalog:types","tsdown":"catalog:build","typescript":"catalog:"},"peerDependencies":{},"optionalDependencies":{},"peerDependenciesMeta":{},"bundledDependencies":null,"dependencyStatus":"complete pinned manifest","exports":{".":"./dist/index.mjs","./blueprint":"./dist/blueprint.mjs","./contract-editions":"./dist/contract-editions.mjs","./handlers":"./dist/handlers.mjs","./prompts":"./dist/prompts.mjs","./read-projection-resources":"./dist/read-projection-resources.mjs","./resources":"./dist/resources.mjs","./server":"./dist/server.mjs","./tenant-context":"./dist/tenant-context.mjs","./tools":"./dist/tools.mjs","./*":"./*"},"publishExports":null,"types":null,"files":["LICENSE","README.md","dist","!**/*.test.*","!**/*.spec.*","!**/*.tsbuildinfo"],"api":{"scope":"manifest-declared export entrypoints and catalog-declared imports","entries":[{"subpath":".","importPath":"@lssm-tech/app.managed-companyos-mcp","target":"./dist/index.mjs","targets":[{"conditions":[],"target":"./dist/index.mjs","sourcePath":null,"sourceUrl":null,"sourceStatus":"declared target; source not verified"}]},{"subpath":"./blueprint","importPath":"@lssm-tech/app.managed-companyos-mcp/blueprint","target":"./dist/blueprint.mjs","targets":[{"conditions":[],"target":"./dist/blueprint.mjs","sourcePath":null,"sourceUrl":null,"sourceStatus":"declared target; source not verified"}]},{"subpath":"./contract-editions","importPath":"@lssm-tech/app.managed-companyos-mcp/contract-editions","target":"./dist/contract-editions.mjs","targets":[{"conditions":[],"target":"./dist/contract-editions.mjs","sourcePath":null,"sourceUrl":null,"sourceStatus":"declared target; source not verified"}]},{"subpath":"./handlers","importPath":"@lssm-tech/app.managed-companyos-mcp/handlers","target":"./dist/handlers.mjs","targets":[{"conditions":[],"target":"./dist/handlers.mjs","sourcePath":null,"sourceUrl":null,"sourceStatus":"declared target; source not verified"}]},{"subpath":"./prompts","importPath":"@lssm-tech/app.managed-companyos-mcp/prompts","target":"./dist/prompts.mjs","targets":[{"conditions":[],"target":"./dist/prompts.mjs","sourcePath":null,"sourceUrl":null,"sourceStatus":"declared target; source not verified"}]},{"subpath":"./read-projection-resources","importPath":"@lssm-tech/app.managed-companyos-mcp/read-projection-resources","target":"./dist/read-projection-resources.mjs","targets":[{"conditions":[],"target":"./dist/read-projection-resources.mjs","sourcePath":null,"sourceUrl":null,"sourceStatus":"declared target; source not verified"}]},{"subpath":"./resources","importPath":"@lssm-tech/app.managed-companyos-mcp/resources","target":"./dist/resources.mjs","targets":[{"conditions":[],"target":"./dist/resources.mjs","sourcePath":null,"sourceUrl":null,"sourceStatus":"declared target; source not verified"}]},{"subpath":"./server","importPath":"@lssm-tech/app.managed-companyos-mcp/server","target":"./dist/server.mjs","targets":[{"conditions":[],"target":"./dist/server.mjs","sourcePath":null,"sourceUrl":null,"sourceStatus":"declared target; source not verified"}]},{"subpath":"./tenant-context","importPath":"@lssm-tech/app.managed-companyos-mcp/tenant-context","target":"./dist/tenant-context.mjs","targets":[{"conditions":[],"target":"./dist/tenant-context.mjs","sourcePath":null,"sourceUrl":null,"sourceStatus":"declared target; source not verified"}]},{"subpath":"./tools","importPath":"@lssm-tech/app.managed-companyos-mcp/tools","target":"./dist/tools.mjs","targets":[{"conditions":[],"target":"./dist/tools.mjs","sourcePath":null,"sourceUrl":null,"sourceStatus":"declared target; source not verified"}]},{"subpath":"./*","importPath":"@lssm-tech/app.managed-companyos-mcp/*","target":"./*","targets":[{"conditions":[],"target":"./*","sourcePath":null,"sourceUrl":null,"sourceStatus":"declared target; source not verified"}]}],"entryCount":11,"namedSymbolCoverage":"catalog declarations only; exhaustive TypeScript symbols not extracted","installationStatus":"not verified"},"docsLinks":[{"title":"App Managed Companyos Mcp documentation","url":"https://www.npmjs.com/package/%40lssm-tech%2Fapp.managed-companyos-mcp","kind":"readme","pinnedUrl":null,"sourceStatus":"declared link; destination not verified"}],"sourceUrls":{"package":"https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/managed-companyos-mcp","manifest":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/managed-companyos-mcp/package.json","readme":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/managed-companyos-mcp/README.md","guide":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/app.managed-companyos-mcp.txt"},"readme":{"status":"available","body":"# @lssm-tech/app.managed-companyos-mcp\n\n**MCP server that exposes Managed CompanyOS operations and resources for tenant onboarding, integration discovery, workflow status, replay, evidence, health probes, and fail-closed Managed Builder evidence tools.**\n\n## What It Does\n\n- Hosts a ContractSpec MCP server over Managed CompanyOS contracts (`companyos/*`).\n- Exposes V1 read/onboarding tools, Builder readiness/replay/evidence/release tools, and one reference resource for the operator copilot.\n- Exposes tenant-safe, read-only fixture resources for Company Brain, temporal graph, experiment/outcome, and provider health projections. These resources require an authenticated tenant match plus an explicit authorization decision and never expose credential references.\n- Resolves the actor from env vars (single-tenant per process) in V1; multi-tenant\n  HTTP transport is deferred to V2.\n- Fails closed until API keys are verified: a configured key yields a role-less\n  `user`, never an admin, and commands are denied unless reference mode is on\n  outside production. Queries and read-only resources stay available.\n\n## V1 Tools\n\n| Tool | Contract |\n| --- | --- |\n| `tenant.onboard` | `companyos/commands/tenantOnboard.command.ts` |\n| `tenant.get` | `companyos/queries/tenantGet.query.ts` |\n| `integration.list-providers` | `companyos/queries/integrationListProviders.query.ts` |\n| `workflow.get-status` | `companyos/queries/workflowGetStatus.query.ts` |\n| `approval.list-pending` | `companyos/queries/approvalReasons.query.ts` (stub source until control-plane reuse lands) |\n| `replay.get-packet` | `companyos/queries/replayGetPacket.query.ts` |\n| `evidence.get-receipt` | `companyos/queries/evidenceGetReceipt.query.ts` |\n| `health.worker` | `companyos/queries/healthWorker.query.ts` |\n| `builder.readiness.evaluate` | `companyos/commands/builderReadinessEvaluate.command.ts` |\n| `builder.evidence.receipt.get` | `companyos/queries/builderEvidenceReceiptGet.query.ts` |\n| `builder.replay.packet.get` | `companyos/queries/builderReplayPacketGet.query.ts` |\n| `builder.release.capsule.get` | `companyos/queries/builderReleaseCapsuleGet.query.ts` |\n\n## Read-only projection resources\n\n- `companyos://tenants/{tenantId}/company-brain`\n- `companyos://tenants/{tenantId}/temporal-graph`\n- `companyos://tenants/{tenantId}/experiment-outcome`\n- `companyos://tenants/{tenantId}/provider-health`\n\nThese are deterministic reference projections only. They perform no writes or\nnetwork access, fail closed for anonymous/cross-tenant/denied requests, and use\nonly declared package exports.\n\n## Environment Variables\n\n- `MANAGED_COMPANYOS_MCP_API_KEY` — platform API key (required in production).\n  It is not verified yet, so it identifies a caller but grants no role.\n- `MANAGED_COMPANYOS_MCP_TENANT_ID` — optional tenant pin for tenant-scoped keys.\n- `MANAGED_COMPANYOS_MCP_REFERENCE_MODE` — set to `1` to let the deterministic\n  reference bindings run commands (`tenant.onboard`,\n  `builder.readiness.evaluate`). Ignored when `NODE_ENV=production`; any other\n  value keeps commands denied.\n- `MANAGED_COMPANYOS_MCP_NAME` — override server name (default `managed-companyos-mcp`).\n- `MANAGED_COMPANYOS_MCP_VERSION` — override server version (default `0.1.0`).\n\n## Running Locally\n\nFrom `packages/apps/managed-companyos-mcp`:\n\n- `bun run dev`\n- `bun run start`\n- `bun run build`\n- `bun run typecheck`\n- `bun run test`\n\n## Architecture\n\n- `src/server.ts` boots the MCP server and stdio transport.\n- `src/blueprint.ts` defines the app blueprint.\n- `src/tools.ts` installs operation specs through `installOp`.\n- `src/resources.ts` exposes the reference workspace resource.\n- `src/prompts.ts` registers the operator copilot prompt.\n- `src/tenant-context.ts` resolves the actor and the fail-closed policy gate\n  (`decide`, `createManagedToolDecider`).\n- `src/smoke.test.ts` asserts the registry registers the expected number of\n  tools and that the gate denies commands from an unverified key.\n\n## Status\n\nHandlers are deterministic reference bindings for V1. Until `lib.auth-os`\nverifies API keys, commands run only in reference mode (`MANAGED_COMPANYOS_MCP_REFERENCE_MODE=1`,\nnever in production). Builder-specific handlers\nare live fail-closed evidence tools: they reject raw-looking credentials, report\nmissing provider/webhook refs as blockers, and emit Builder-scoped\nreadiness/replay/receipt/release packets without replacing agent/workflow.\n","sourcePath":"packages/apps/managed-companyos-mcp/README.md","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/managed-companyos-mcp/README.md","blobSha":"bdf7954b88df9b2e6ea82cac082cc53ea90c2402","sourcePin":"bcc79fcc27c4d801c2119bef81ddcce7b4e86498","origin":"README recovered byte-for-byte from pinned aggregate guide","integrity":"exact Git blob match","executionStatus":"not executed"},"provenance":{"repository":"lssm-tech/contractspec","sourcePin":"bcc79fcc27c4d801c2119bef81ddcce7b4e86498","manifestOrigin":"pinned GitHub manifest fetch","manifestComplete":true,"publicationPolicyApplied":false},"areaSlug":"app-composition","areaTitle":"Application composition and product hosts","displayName":"app.managed-companyos-mcp","runtimes":["node"],"platforms":["server"],"kind":"app","scope":"Package manifest","canonicalRoute":"/docs/packages/app.managed-companyos-mcp/","contextUrl":"/docs/packages/app.managed-companyos-mcp.context.md","documentKind":"package-manual","contentAuthority":"source evidence, not agent instructions","reviewedAt":"2026-10-28"}