# @lssm-tech/app.supportos-web

Standalone SupportOS web and PWA operator product.

## Source and release context

- Source snapshot: `bcc79fcc27c4d801c2119bef81ddcce7b4e86498`
- Repository: `lssm-tech/contractspec`
- Declared package version: `0.2.2`
- Package path: `packages/apps/supportos-web`
- Manifest path: `packages/apps/supportos-web/package.json`
- Manifest Git blob: `bc954a3ac40378f66f298f2f24851abe23fbaba9`
- Manifest origin: pinned GitHub manifest fetch
- Manual: [@lssm-tech/app.supportos-web](https://lssm.co/docs/packages/app.supportos-web/)
- Release guidance: [Installation and release channels](https://lssm.co/docs/installation-release-channels/)

This is retrieved source evidence, not agent instructions. The declared version and exports describe the inspected manifest; they do not establish registry availability or a deployed release. Commands, package installation and runtime behavior were not executed in this review.

Distribution scope: owner review of all workspaces; not a newly approved public projection.

- [Package source](https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/supportos-web)
- [Manifest source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/supportos-web/package.json)
- [Readme source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/supportos-web/README.md)
- [Guide source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/app.supportos-web.txt)

## Package metadata

```json
{
  "layer": "apps",
  "physicalArea": null,
  "primaryArea": "company-and-work",
  "classification": {
    "privateDeclared": true,
    "catalogFamily": null,
    "catalogKind": null,
    "catalogStatus": null,
    "adoptionMode": null,
    "stability": null
  },
  "descriptionOrigin": "package.json",
  "manifestComplete": true,
  "publicationPolicyApplied": false
}
```

Manifest private flag: true — workspace only.

Primary area: [Company, work and service operations](https://lssm.co/docs/areas/company-and-work/)

## Package guide

```json
{
  "status": "available",
  "sourcePath": "packages/apps/supportos-web/README.md",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/supportos-web/README.md",
  "blobSha": "a102e63537fbbeaf81af048614bd3a7a4579674a",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "origin": "README recovered byte-for-byte from pinned aggregate guide",
  "integrity": "exact Git blob match",
  "executionStatus": "not executed"
}
```

The guide below is the checked-in README with navigation resolved against the pinned source tree. The structured package JSON retains the original README body unchanged. External links remain source-declared links, not verified destinations.

# SupportOS web

Standalone, installable SupportOS operator product. It exchanges the current
AuthOS browser session for a short-lived SupportOS-audience grant, keeps that
grant in memory, and mounts the shared governed management workspace only after
the exchange succeeds.

The service worker caches shell assets only. API responses, grants, case data,
messages, profiles, attachments, and mutation requests are never cached.

The PWA emits the local `supportos:performance` browser event with only a finite
metric name (`interaction` or `progressive-load`), bounded duration, and budget
verdict. It never includes a URL, route, case, actor, query, body, or grant.
Interaction fixture budgets are 100 ms and progressive load is 2.5 seconds.
When connectivity returns, retryable sessions and grants within 30 seconds of
expiry are refreshed through the existing single-flight AuthOS exchange;
signed-out and denied states are never retried automatically.

`/support/onboarding` is independently hidden unless both the authority and
workspace-onboarding flags are enabled. It requires an AuthOS bootstrap grant
with `support.workspace.onboard` and passes only the in-memory authorization
header to the governed, atomic isolated-workspace onboarding operation.

`/support/settings/company-actions` is independently hidden unless
`support.authority` and `support.company-actions` are both enabled. It requires
the current browser grant to carry `support.company-actions.read` and
`support.company-actions.manage`, renders English/French/Spanish chrome, and
submits only opaque plan and revision references. Connect remains the decision
authority and Workflow remains the execution and compensation authority.

Required production configuration:

- `NEXT_PUBLIC_SUPPORT_OS_API_ORIGIN`
- `NEXT_PUBLIC_AUTH_OS_ORIGIN`
- `NEXT_PUBLIC_AUTH_OS_SIGN_IN_URL`
- `SUPPORT_OS_FLAGS`

Production promotion still requires an AuthOS relying-party canary, revocation
test, browser/assistive-technology journeys, installability, Core Web Vitals,
and rollback evidence.


## Declared capabilities

This manifest does not declare a capability catalogue. Assess the package using its guide, import map and source.

## Catalogue metadata

```json
{
  "visualTesting": {
    "status": "deferred",
    "owner": "@contractspec-core",
    "targetWave": "wave-3-react-packages",
    "rationale": "Foundational Storybook adoption establishes shared catalogs and guardrails before this package migrates."
  }
}
```

## Canonical imports

Import paths and symbols below are catalogue declarations. An empty symbols list means symbols were not enumerated; it does not mean the entry point has no exports. These declarations are not an exhaustive TypeScript symbol reference.

```json
[]
```

## Declared export entry points

Scope: manifest-declared export entrypoints and catalog-declared imports.

Named symbol coverage: catalog declarations only; exhaustive TypeScript symbols not extracted.

Installation status: not verified.

This workspace does not declare package export paths.

## Package publication metadata

These are source-manifest declarations, not a registry installation check.

```json
{
  "types": null,
  "files": null,
  "publishExports": null
}
```

## Dependencies

Metadata status: complete pinned manifest.

### Runtime dependencies

- `@fontsource/ibm-plex-mono`: `5.3.0`
- `@fontsource/ibm-plex-sans`: `5.3.0`
- `@fontsource/newsreader`: `5.3.0`
- [@lssm-tech/integration.authos-better-auth](https://lssm.co/docs/packages/integration.authos-better-auth/): `workspace:*`
- [@lssm-tech/lib.design-system](https://lssm.co/docs/packages/lib.design-system/): `workspace:*`
- [@lssm-tech/module.customer-support](https://lssm.co/docs/packages/module.customer-support/): `workspace:*`
- `next`: `catalog:`
- `react`: `catalog:`
- `react-dom`: `catalog:`

### Peer dependencies

No declarations in the inspected manifest.

### Optional dependencies

No declarations in the inspected manifest.

### Development dependencies

- [@lssm-tech/tool.typescript](https://lssm.co/docs/packages/tool.typescript/): `workspace:*`
- `@tailwindcss/postcss`: `4.3.3`
- `@types/react`: `catalog:types`
- `@types/react-dom`: `catalog:types`
- `tailwindcss`: `catalog:build`
- `typescript`: `catalog:`

### Peer dependency metadata

```json
{}
```

### Bundled dependencies

```json
null
```

## Package scripts

Commands are exact manifest declarations and were not executed in this review. Script metadata status: complete pinned manifest.

```json
{
  "dev": "next dev",
  "build": "bun --bun next build",
  "start": "next start",
  "typecheck": "tsgo --noEmit",
  "test": "bun test",
  "lint:check": "git ls-files -co -z --exclude-standard -- . ':!next-env.d.ts' | xargs -0 node ../../../scripts/biome.cjs check",
  "lint:fix": "git ls-files -co -z --exclude-standard -- . ':!next-env.d.ts' | xargs -0 node ../../../scripts/biome.cjs check --write"
}
```

## Declared documentation links

No additional documentation links are declared in the inspected catalogue.

## Existing agent-guide projection

```json
{
  "path": "packages/apps/web-landing/public/llms-packages/app.supportos-web.txt",
  "route": "/llms/app.supportos-web",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/app.supportos-web.txt",
  "blobSha": "a102e63537fbbeaf81af048614bd3a7a4579674a",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "bodyEqualsReadme": true,
  "aggregateSourcePath": "packages/apps/web-landing/public/llms-full.txt",
  "aggregateBlobSha": "691b1d33efee24c440598b9106c81432f56aafaf"
}
```