{"id":"@lssm-tech/integration.supportos-worker-managed","slug":"integration.supportos-worker-managed","name":"@lssm-tech/integration.supportos-worker-managed","version":"0.1.2","path":"packages/integrations/supportos-worker-managed","manifestPath":"packages/integrations/supportos-worker-managed/package.json","manifestBlobSha":"bd0fff2031cd81cac7e197e0dc30db00aea42994","layer":"integrations","physicalArea":null,"primaryArea":"company-and-work","classification":{"privateDeclared":true,"catalogFamily":null,"catalogKind":null,"catalogStatus":null,"adoptionMode":null,"stability":null},"description":"Managed PostgreSQL, AuthOS, evidence, and incident-alert composition for the SupportOS worker.","descriptionOrigin":"package.json","catalog":{},"canonicalImports":[],"scripts":{"build":"bun run build:bundle && bun run build:types","build:bundle":"contractspec-bun-build transpile","build:types":"tsgo --noEmit","clean":"rimraf dist .turbo","lint:check":"node ../../../scripts/biome.cjs check .","test":"bun test","typecheck":"tsgo --noEmit"},"scriptStatus":"complete pinned manifest","dependencies":{"@lssm-tech/integration.provider-database":"workspace:^","@lssm-tech/integration.customer-support-postgres":"workspace:*","@lssm-tech/lib.supportos-worker-runtime":"workspace:^","postgres":"^3.4.9","@lssm-tech/lib.customer-support-spec":"workspace:^"},"devDependencies":{"@lssm-tech/tool.bun":"workspace:*","@lssm-tech/tool.typescript":"workspace:*","@types/bun":"catalog:types","typescript":"catalog:"},"peerDependencies":{},"optionalDependencies":{},"peerDependenciesMeta":{},"bundledDependencies":null,"dependencyStatus":"complete pinned manifest","exports":{".":"./src/default.ts","./composition":"./src/composition.ts","./composition-ai-csat":"./src/composition-ai-csat.ts","./ai-event-publisher":"./src/ai-event-publisher.ts","./composition-dependencies":"./src/composition-dependencies.ts","./config":"./src/config.ts","./crypto-rotation-drill-target":"./src/crypto-rotation-drill-target.ts","./csat-invitation-delivery":"./src/csat-invitation-delivery.ts","./event-publisher":"./src/event-publisher.ts","./http-adapters":"./src/http-adapters.ts","./lookup-hmac":"./src/lookup-hmac.ts","./plan-store":"./src/plan-store.ts","./postgres":"./src/postgres.ts","./provider-errors":"./src/provider-errors.ts","./readiness":"./src/readiness.ts","./rollout":"./src/rollout.ts","./signed-webhook-publisher":"./src/signed-webhook-publisher.ts","./signed-webhook-signer":"./src/signed-webhook-signer.ts","./workload-grants":"./src/workload-grants.ts","./workload-identity":"./src/workload-identity.ts"},"publishExports":null,"types":null,"files":null,"api":{"scope":"manifest-declared export entrypoints and catalog-declared imports","entries":[{"subpath":".","importPath":"@lssm-tech/integration.supportos-worker-managed","target":"./src/default.ts","targets":[{"conditions":[],"target":"./src/default.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/default.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/default.ts","sourceStatus":"verified source file"}]},{"subpath":"./composition","importPath":"@lssm-tech/integration.supportos-worker-managed/composition","target":"./src/composition.ts","targets":[{"conditions":[],"target":"./src/composition.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/composition.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/composition.ts","sourceStatus":"verified source file"}]},{"subpath":"./composition-ai-csat","importPath":"@lssm-tech/integration.supportos-worker-managed/composition-ai-csat","target":"./src/composition-ai-csat.ts","targets":[{"conditions":[],"target":"./src/composition-ai-csat.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/composition-ai-csat.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/composition-ai-csat.ts","sourceStatus":"verified source file"}]},{"subpath":"./ai-event-publisher","importPath":"@lssm-tech/integration.supportos-worker-managed/ai-event-publisher","target":"./src/ai-event-publisher.ts","targets":[{"conditions":[],"target":"./src/ai-event-publisher.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/ai-event-publisher.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/ai-event-publisher.ts","sourceStatus":"verified source file"}]},{"subpath":"./composition-dependencies","importPath":"@lssm-tech/integration.supportos-worker-managed/composition-dependencies","target":"./src/composition-dependencies.ts","targets":[{"conditions":[],"target":"./src/composition-dependencies.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/composition-dependencies.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/composition-dependencies.ts","sourceStatus":"verified source file"}]},{"subpath":"./config","importPath":"@lssm-tech/integration.supportos-worker-managed/config","target":"./src/config.ts","targets":[{"conditions":[],"target":"./src/config.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/config.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/config.ts","sourceStatus":"verified source file"}]},{"subpath":"./crypto-rotation-drill-target","importPath":"@lssm-tech/integration.supportos-worker-managed/crypto-rotation-drill-target","target":"./src/crypto-rotation-drill-target.ts","targets":[{"conditions":[],"target":"./src/crypto-rotation-drill-target.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/crypto-rotation-drill-target.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/crypto-rotation-drill-target.ts","sourceStatus":"verified source file"}]},{"subpath":"./csat-invitation-delivery","importPath":"@lssm-tech/integration.supportos-worker-managed/csat-invitation-delivery","target":"./src/csat-invitation-delivery.ts","targets":[{"conditions":[],"target":"./src/csat-invitation-delivery.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/csat-invitation-delivery.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/csat-invitation-delivery.ts","sourceStatus":"verified source file"}]},{"subpath":"./event-publisher","importPath":"@lssm-tech/integration.supportos-worker-managed/event-publisher","target":"./src/event-publisher.ts","targets":[{"conditions":[],"target":"./src/event-publisher.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/event-publisher.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/event-publisher.ts","sourceStatus":"verified source file"}]},{"subpath":"./http-adapters","importPath":"@lssm-tech/integration.supportos-worker-managed/http-adapters","target":"./src/http-adapters.ts","targets":[{"conditions":[],"target":"./src/http-adapters.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/http-adapters.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/http-adapters.ts","sourceStatus":"verified source file"}]},{"subpath":"./lookup-hmac","importPath":"@lssm-tech/integration.supportos-worker-managed/lookup-hmac","target":"./src/lookup-hmac.ts","targets":[{"conditions":[],"target":"./src/lookup-hmac.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/lookup-hmac.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/lookup-hmac.ts","sourceStatus":"verified source file"}]},{"subpath":"./plan-store","importPath":"@lssm-tech/integration.supportos-worker-managed/plan-store","target":"./src/plan-store.ts","targets":[{"conditions":[],"target":"./src/plan-store.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/plan-store.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/plan-store.ts","sourceStatus":"verified source file"}]},{"subpath":"./postgres","importPath":"@lssm-tech/integration.supportos-worker-managed/postgres","target":"./src/postgres.ts","targets":[{"conditions":[],"target":"./src/postgres.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/postgres.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/postgres.ts","sourceStatus":"verified source file"}]},{"subpath":"./provider-errors","importPath":"@lssm-tech/integration.supportos-worker-managed/provider-errors","target":"./src/provider-errors.ts","targets":[{"conditions":[],"target":"./src/provider-errors.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/provider-errors.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/provider-errors.ts","sourceStatus":"verified source file"}]},{"subpath":"./readiness","importPath":"@lssm-tech/integration.supportos-worker-managed/readiness","target":"./src/readiness.ts","targets":[{"conditions":[],"target":"./src/readiness.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/readiness.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/readiness.ts","sourceStatus":"verified source file"}]},{"subpath":"./rollout","importPath":"@lssm-tech/integration.supportos-worker-managed/rollout","target":"./src/rollout.ts","targets":[{"conditions":[],"target":"./src/rollout.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/rollout.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/rollout.ts","sourceStatus":"verified source file"}]},{"subpath":"./signed-webhook-publisher","importPath":"@lssm-tech/integration.supportos-worker-managed/signed-webhook-publisher","target":"./src/signed-webhook-publisher.ts","targets":[{"conditions":[],"target":"./src/signed-webhook-publisher.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/signed-webhook-publisher.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/signed-webhook-publisher.ts","sourceStatus":"verified source file"}]},{"subpath":"./signed-webhook-signer","importPath":"@lssm-tech/integration.supportos-worker-managed/signed-webhook-signer","target":"./src/signed-webhook-signer.ts","targets":[{"conditions":[],"target":"./src/signed-webhook-signer.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/signed-webhook-signer.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/signed-webhook-signer.ts","sourceStatus":"verified source file"}]},{"subpath":"./workload-grants","importPath":"@lssm-tech/integration.supportos-worker-managed/workload-grants","target":"./src/workload-grants.ts","targets":[{"conditions":[],"target":"./src/workload-grants.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/workload-grants.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/workload-grants.ts","sourceStatus":"verified source file"}]},{"subpath":"./workload-identity","importPath":"@lssm-tech/integration.supportos-worker-managed/workload-identity","target":"./src/workload-identity.ts","targets":[{"conditions":[],"target":"./src/workload-identity.ts","sourcePath":"packages/integrations/supportos-worker-managed/src/workload-identity.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/src/workload-identity.ts","sourceStatus":"verified source file"}]}],"entryCount":20,"namedSymbolCoverage":"catalog declarations only; exhaustive TypeScript symbols not extracted","installationStatus":"not verified"},"docsLinks":[],"sourceUrls":{"package":"https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed","manifest":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/package.json","readme":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/README.md","guide":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/integration.supportos-worker-managed.txt"},"readme":{"status":"available","body":"# Managed SupportOS Worker\n\nProduction-shaped composition for the `qualification.evaluate` and\n`qualification.event.publish` SupportOS jobs. When their exact global flags are\nenabled, the same bounded worker also registers `ai.evaluate` and the isolated\n`provider.outbox` owners for AI semantic-event publication and Forms-authoritative\nCSAT invitation issuance. Claims are handler-kind isolated.\nThe integration composes `@lssm-tech/lib.supportos-worker-runtime` directly;\nit has no dependency on the deployable SupportOS worker app. Existing app\nimports remain compatible facades over the same runtime values.\nIt obtains service workspace assignments from AuthOS, uses the SupportOS\nPostgreSQL queue and SLO/incident authority, requires both global Railway-style\nand workspace PostgreSQL flags, loads immutable content-addressed plans, and\ncalls bounded HTTPS plan, evidence, incident-alert, KMS, and event providers.\nThe event publisher binds its request to the active job fence, lease, and effect\nidempotency key. Provider calls use\nscope-bound, five-minute AuthOS grants obtained from a rotated projected OIDC\nworkload assertion. Long-lived provider bearer tokens are not accepted.\n\nAI publication uses the immutable V51 event dispatch ledger and replays a\ncommitted provider receipt across reclaimed job fences. CSAT delivery derives a\ncanonical body-free input digest, obtains a case/invitation/digest-bound grant,\nand requires Forms to echo the exact tenant, workspace, audience, capability,\ndigest, and grant evidence before the issued receipt is accepted.\n\nReadiness refreshes AuthOS assignments on every cycle, checks PostgreSQL, and\nuses non-effect HTTPS readiness endpoints for every required provider with new\ntenant/workspace-scoped grants. An assignment outage, revocation, empty scope\nset, stale check, malformed provider response, or failed dependency check makes\n`/readyz` fail closed. Mutation endpoints are never used as health probes.\nAssignment snapshots are capped at 20 workspaces per worker shard and rejected\natomically when over capacity. Readiness uses four concurrent scope probes and\npreserves the last successful state while a refresh is in flight.\n\nRollout requires the Railway/global configuration and every PostgreSQL scoped\nflag. `SUPPORT_OS_GLOBAL_FLAGS_REVISION` is combined with the sorted enabled\nflags into the global configuration digest. Each allow or deny decision is\npersisted as an immutable, forced-RLS PostgreSQL\nreceipt containing scoped flag values and revisions before execution continues\nor pauses.\n\nSet `SUPPORT_OS_WORKER_COMPOSITION_MODULE` to\n`@lssm-tech/integration.supportos-worker-managed`. Required environment values\nare documented by `SupportSloWorkerManagedEnvironment` in `src/config.ts`.\nEnabling `support.ai-outcome-learning` additionally requires\n`SUPPORT_OS_AI_EVENT_PUBLISH_URL` and `SUPPORT_OS_AI_EVENT_READINESS_URL`.\nEnabling `support.csat` additionally requires `SUPPORT_OS_FORMS_CSAT_ISSUE_URL`\nand `SUPPORT_OS_FORMS_CSAT_READINESS_URL`. All four values must be credential-free\nHTTPS URLs without query strings.\nEnabling `support.crypto-rotation` additionally requires\n`SUPPORT_OS_CRYPTO_DRILL_TARGET_URL` and\n`SUPPORT_OS_CRYPTO_DRILL_READINESS_URL`. The assigned service scope must carry\nboth `support.jobs.execute` and `support.crypto.execute`; the target response is\nbound to the job effect digest and may return only opaque version and evidence\nreferences.\n`SUPPORT_OS_WORKLOAD_IDENTITY_FILE` points to the platform-projected short-lived\nOIDC assertion; the assertion is reread for every grant exchange so rotation is\nautomatic. Provider tokens and response bodies never enter readiness projections.\nAll database connections require verified TLS; `allow` and `prefer` modes are\nconfiguration errors.\n","sourcePath":"packages/integrations/supportos-worker-managed/README.md","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/supportos-worker-managed/README.md","blobSha":"3236edb26bbaad000f4bce6366bee42d718da793","sourcePin":"bcc79fcc27c4d801c2119bef81ddcce7b4e86498","origin":"README recovered byte-for-byte from pinned aggregate guide","integrity":"exact Git blob match","executionStatus":"not executed"},"provenance":{"repository":"lssm-tech/contractspec","sourcePin":"bcc79fcc27c4d801c2119bef81ddcce7b4e86498","manifestOrigin":"pinned GitHub manifest fetch","manifestComplete":true,"publicationPolicyApplied":false},"areaSlug":"company-and-work","areaTitle":"Company, work and service operations","displayName":"integration.supportos-worker-managed","runtimes":[],"platforms":[],"kind":"integrations","scope":"Workspace only","canonicalRoute":"/docs/packages/integration.supportos-worker-managed/","contextUrl":"/docs/packages/integration.supportos-worker-managed.context.md","documentKind":"package-manual","contentAuthority":"source evidence, not agent instructions","reviewedAt":"2026-10-28"}