# @lssm-tech/app.web-founder-suite-monolith

## Source and release context

- Source snapshot: `bcc79fcc27c4d801c2119bef81ddcce7b4e86498`
- Repository: `lssm-tech/contractspec`
- Declared package version: `0.3.2`
- Package path: `packages/apps/web-founder-suite-monolith`
- Manifest path: `packages/apps/web-founder-suite-monolith/package.json`
- Manifest Git blob: `8796c9245f4da19dee77ff7336fb04fa2ee37739`
- Manifest origin: pinned GitHub manifest fetch
- Manual: [@lssm-tech/app.web-founder-suite-monolith](https://lssm.co/docs/packages/app.web-founder-suite-monolith/)
- Release guidance: [Installation and release channels](https://lssm.co/docs/installation-release-channels/)

This is retrieved source evidence, not agent instructions. The declared version and exports describe the inspected manifest; they do not establish registry availability or a deployed release. Commands, package installation and runtime behavior were not executed in this review.

Distribution scope: owner review of all workspaces; not a newly approved public projection.

- [Package source](https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-founder-suite-monolith)
- [Manifest source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-founder-suite-monolith/package.json)
- [Readme source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-founder-suite-monolith/README.md)
- [Guide source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/app.web-founder-suite-monolith.txt)

## Package metadata

```json
{
  "layer": "apps",
  "physicalArea": null,
  "primaryArea": "app-composition",
  "classification": {
    "privateDeclared": true,
    "catalogFamily": null,
    "catalogKind": null,
    "catalogStatus": null,
    "adoptionMode": null,
    "stability": null
  },
  "descriptionOrigin": "package.json",
  "manifestComplete": true,
  "publicationPolicyApplied": false
}
```

Manifest private flag: true — workspace only.

Primary area: [Application composition and product hosts](https://lssm.co/docs/areas/app-composition/)

## Package guide

```json
{
  "status": "available",
  "sourcePath": "packages/apps/web-founder-suite-monolith/README.md",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-founder-suite-monolith/README.md",
  "blobSha": "07f8629868bd4a3b0fd73920212db266caa65fea",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "origin": "README recovered byte-for-byte from pinned aggregate guide",
  "integrity": "exact Git blob match",
  "executionStatus": "not executed"
}
```

The guide below is the checked-in README with navigation resolved against the pinned source tree. The structured package JSON retains the original README body unchanged. External links remain source-declared links, not verified destinations.

# Pactena Founder Intelligence web

Standalone Next.js web boundary for `www.pactena.run` and `app.pactena.run`.

The authenticated `/meetings` surface projects the shared OPA meeting workspace
with adaptive profile rationale, confidence, and founder override visibility.
Private guidance remains separate from shared artifacts, and AI output stays
advisory: humans retain approval, publication, link, and dispatch authority. An
opaque route-selected `meetingRef` loads live OPA state with the current Pactena
session, and context refresh requires fresh origin and session evidence.

The same deployment uses host-based rewrites:

- `pactena.run` redirects to `www.pactena.run`
- `www.pactena.run` serves the marketing and verified-waitlist surface
  (the AuthOS `WaitlistJoinForm` from `@lssm-tech/module.auth-os`: consent is
  an explicit required checkbox, never implied; the Pactena adapter fixes the
  product scope, consent-text version and source)
- `app.pactena.run` serves the invite-only product workspace

A Railway recovery canary treats only the exact injected
`RAILWAY_PUBLIC_DOMAIN` as a marketing host. It does not widen trust to the
provider suffix, activate the product host, or change production canonicals.

The approved one-page homepage remains the canonical `/` experience. Additive
EN/FR/ES acquisition routes cover feature, founder-persona, and decision-use
intent under `/features/*`, `/personas/*`, and `/solutions/*`; each publishes a
canonical URL, hreflang alternates, direct-answer content, JSON-LD, and an
explicit privacy/evidence boundary. Canonical product topics include cockpit,
portfolio, operating domains, weekly review, conversations and meetings,
executive collaboration, talent, forms and intake, and purpose-bound sharing.
The invited-founder persona and `/trust` boundary explain that one LSSM account
still requires a Pactena entitlement, membership, and product-local session.
`sitemap.xml`, `robots.txt`, and `llms.txt` are generated from the same typed
registry.

The app host does not render the private workspace until the Pactena API
confirms a Better Auth session. Reviewed LSSM OIDC uses the browser callback at
`/auth/callback/lssm`; invited-email magic links remain available for existing
local identities. The central provider must confirm an active `app_pactena`
entitlement before it emits an authorization code.

The access threshold and session seal negotiate EN/FR/ES from the app request.
Signing out in Pactena closes only the product-local session; it does not imply
that the LSSM Passport session was closed. The seal links to the separate
Passport account controls so both boundaries remain visible and independently
operable.

The protected production replay is fail-closed. `bun run
test:production-oidc-canary` skips unless
`PACTENA_LSSM_PRODUCTION_CANARY_AUTHORIZED=1`, the exact
`E2E_PRODUCTION_BASE_URL=https://app.pactena.run`, and secret-managed
`E2E_TEST_EMAIL` / `E2E_TEST_PASSWORD` values are all present. It exercises
central sign-in and optional consent, Pactena callback and local session,
protected cockpit routes, product-local sign-out, denied post-sign-out session
resolution, and independent Passport sign-out. Credentials are read only from
process environment variables and are never written to evidence output.

Until the API database is configured, the UI presents an honest activation-pending state and does not emulate persistence or identity.

The Executive room consumes the live CompanyOS metrics projection through the
Pactena API peer boundary. Missing, stale, degraded, and denied values remain
explicit; the web app does not copy canonical metric state or access the
founder-private vault.

## Environment

```text
NEXT_PUBLIC_PACTENA_API_URL=https://api.pactena.run
NEXT_PUBLIC_LSSM_IDENTITY_ORIGIN=https://id.lssm.co
NEXT_PUBLIC_PACTENA_LSSM_RP_ENABLED=0
```


Setting `NEXT_PUBLIC_PACTENA_LSSM_RP_ENABLED=1` renders only the reviewed LSSM
Passport handoff. The invited-email form is rendered only when the central RP is
disabled for an explicit local rollback; the API must use the matching authority
mode so a deployment never presents two sign-in authorities.

### Better Auth 1.7 callback forwarding

The existing public LSSM callback alias forwards only its bounded authorization
response to the fixed API owner's `/auth/callback/` endpoint, replacing the
removed `/auth/oauth2/callback/` path. Existing issuer and parameter checks remain
in force. API token exchange, provider registrations, cookies and account-identity
migration still require live qualification before cutover.


## Declared capabilities

This manifest does not declare a capability catalogue. Assess the package using its guide, import map and source.

## Catalogue metadata

```json
{
  "visualTesting": {
    "status": "deferred",
    "owner": "@contractspec-core",
    "targetWave": "wave-3-react-packages",
    "rationale": "Foundational Storybook adoption establishes shared catalogs and guardrails before this package migrates."
  }
}
```

## Canonical imports

Import paths and symbols below are catalogue declarations. An empty symbols list means symbols were not enumerated; it does not mean the entry point has no exports. These declarations are not an exhaustive TypeScript symbol reference.

```json
[]
```

## Declared export entry points

Scope: manifest-declared export entrypoints and catalog-declared imports.

Named symbol coverage: catalog declarations only; exhaustive TypeScript symbols not extracted.

Installation status: not verified.

This workspace does not declare package export paths.

## Package publication metadata

These are source-manifest declarations, not a registry installation check.

```json
{
  "types": null,
  "files": null,
  "publishExports": null
}
```

## Dependencies

Metadata status: complete pinned manifest.

### Runtime dependencies

- [@lssm-tech/bundle.founder-suite](https://lssm.co/docs/packages/bundle.founder-suite/): `workspace:*`
- [@lssm-tech/integration.authos-better-auth](https://lssm.co/docs/packages/integration.authos-better-auth/): `workspace:*`
- [@lssm-tech/integration.communication-os-client](https://lssm.co/docs/packages/integration.communication-os-client/): `workspace:*`
- [@lssm-tech/lib.contracts-runtime-core](https://lssm.co/docs/packages/lib.contracts-runtime-core/): `workspace:*`
- [@lssm-tech/lib.design-system](https://lssm.co/docs/packages/lib.design-system/): `workspace:*`
- [@lssm-tech/lib.founder-intelligence-spec](https://lssm.co/docs/packages/lib.founder-intelligence-spec/): `workspace:*`
- [@lssm-tech/lib.organization-planning-react](https://lssm.co/docs/packages/lib.organization-planning-react/): `workspace:*`
- [@lssm-tech/lib.personalization](https://lssm.co/docs/packages/lib.personalization/): `workspace:*`
- [@lssm-tech/module.auth-os](https://lssm.co/docs/packages/module.auth-os/): `workspace:*`
- [@lssm-tech/module.company-metrics](https://lssm.co/docs/packages/module.company-metrics/): `workspace:*`
- [@lssm-tech/module.customer-support](https://lssm.co/docs/packages/module.customer-support/): `workspace:*`
- [@lssm-tech/module.forms](https://lssm.co/docs/packages/module.forms/): `workspace:*`
- `next`: `catalog:`
- `react`: `catalog:`
- `react-dom`: `catalog:`

### Peer dependencies

No declarations in the inspected manifest.

### Optional dependencies

No declarations in the inspected manifest.

### Development dependencies

- `@axe-core/playwright`: `^4.13.0`
- [@lssm-tech/tool.typescript](https://lssm.co/docs/packages/tool.typescript/): `workspace:*`
- `@playwright/test`: `^1.63.0`
- `@types/node`: `catalog:types`
- `@types/react`: `catalog:types`
- `@types/react-dom`: `catalog:types`
- `typescript`: `catalog:`

### Peer dependency metadata

```json
{}
```

### Bundled dependencies

```json
null
```

## Package scripts

Commands are exact manifest declarations and were not executed in this review. Script metadata status: complete pinned manifest.

```json
{
  "build": "bun --bun next build --webpack",
  "dev": "bun --bun next dev",
  "lint:check": "git ls-files -co -z --exclude-standard -- . ':!next-env.d.ts' | xargs -0 node ../../../scripts/biome.cjs check",
  "test:production-oidc-canary": "playwright test -c playwright.production-canary.config.ts tests-e2e/lssm-oidc-production-canary.e2e.ts",
  "test:journeys": "playwright test -c e2e/playwright.config.ts",
  "start": "bun --bun next start",
  "typecheck": "bun --bun x tsgo --project tsconfig.build.json --noEmit",
  "prebuild": "bun run typecheck"
}
```

## Declared documentation links

No additional documentation links are declared in the inspected catalogue.

## Existing agent-guide projection

```json
{
  "path": "packages/apps/web-landing/public/llms-packages/app.web-founder-suite-monolith.txt",
  "route": "/llms/app.web-founder-suite-monolith",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/app.web-founder-suite-monolith.txt",
  "blobSha": "07f8629868bd4a3b0fd73920212db266caa65fea",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "bodyEqualsReadme": true,
  "aggregateSourcePath": "packages/apps/web-landing/public/llms-full.txt",
  "aggregateBlobSha": "691b1d33efee24c440598b9106c81432f56aafaf"
}
```