Pure resolver — suppress/lock, additive, specific, restrictive, goals
Usage metering columns, routing preferences and budget alert ledger
Charter item entities for roles, departments, job titles and members; operating briefs
Item DTO, value type and section validation
Validation returns what the columns will hold (ruling SP03-T5): role refs as UUID.toString(), member/note/market ids as plain longs, at most 4 decimal places fo...
RRULE subset for scheduled responsibilities
The normal form has one spelling per rule (plain decimal numbers, lists without spaces, empty or repeated values), since the stored text feeds the charter stamp...
AI workstation profile, token and take-over columns
HostedComputerProfile {STANDARD, AI_WORKSTATION} (STRING, lenient parse to STANDARD); HostedComputer gains profile, ai_primary, the MCP token triple (cipher @Js...
Arive's loan_create_failed — the Create Loan Zap now reports a refusal
Arive fires no new_loan for a loan created through its API, so the Create Loan Zap's post-back is the only thing that can link the lead, and a refusal inside th...
Send Arive the language CODE, not its name — every Create Loan was refused
Arive's Zapier field shows language names but its API takes ISO 639-2 codes (chi, eng, kor, spa, tgl, vie; zxx for Other). Kamo sent "English", so Arive answere...
An AI member is never promoted to organization owner
**************** refuses isOrganizationOwner=true for an ARTIFICIAL target. The owner flag grants every platform right in the top-level organization and opens o...
Retire TASK_CHANGED — lead tasks are tasks and refresh on the checklists channel
The 29 header layouts as Handlebars templates, held to the legacy goldens
Mention rows
MediaObjMsgMention maps media_obj_msg_mentions (composite key obj_id + member_id). deleteByObjId is a derived delete, not a JPQL bulk DELETE, so an edit that ke...
The 29 signature layouts as Handlebars templates, held to the legacy goldens
Grant-all session rights honour member NUKEs and model FORCE rules
An ARTIFICIAL member is refused with the same IllegalStateException, so a caller's fallback applies the supervisor ceiling and never-grantable floor.
Compose template engine, view models, helpers, partials and wrapper
Empty ineligible members on every write path and notify rights-change listeners
A chunk notifies its AI members before its humans, so a supervisor cascade's fresher recalculation of an AI is that AI's last notification.
Capability and provider-type catalogs, typed attribute codec
The codec also refuses, as invalid_attribute, a null list item (a bare NullPointerException before), a list or object where text belongs (stored as the text "[e...
Compose manifest, JavaScript text semantics and icon URIs
ComposeText also ports logoVariants.ts (PNG logo rungs, SizedLogo) and badges.ts (uploaded-badge ?h= scaling), and follows JavaScript exactly where Java differs...
Bound AI members by their supervisor's applied rights and the never-grantable floor
Compose manifest, fixtures and 232 goldens from the legacy renderers
The fixtures carry the logo ladders (full: header rung with ?v=, a laddered logo badge; company: header and signature rungs without a revision) and the uploaded...
Registry entities, capability/value/price/opt-out rows, repositories
AiProvider and AiModel gain the registry columns (scope, hosting, auth, facts, platform key, lifecycle, origin); provider type and cost tier map through the dig...
ARTIFICIAL template resolution and the rights-change listener seam
Task columns, links, comments, Inbox kind, note links and authorship
Never-grantable AI rights, ARTIFICIAL template type, AI access-log events
Recurrence bound, reminder coder and EXDATE entity; UTC zone default
STRING registry enums, 24 provider types, digit-tolerant converters
AI member state, org pause and kill-switch columns (read-only in JPA)
Task status, priority, record-link kinds, Inbox and master-note sections
Keep kamo-shared-library at 1.6.1, the one version every consumer can resolve
db737a54 moved the library to 1.6.2, and only emailservice and initializerservice moved with it. About thirty other services pin 1.6.1. Their CI clones this rep...
Add org_alias_domains, the per-org form of the platform mail domain
Generalizes the single hardcoded platform.mail.domain (kamouniverse.com, and only for the platform org) into a table any org can hold any number of rows in. Ema...
A private inbox prefix for new services, and the LOS webhook worker is opt-in
Services log in to Redis with a username and password when given one
One seat rule for the console and every service that enforces it
The resolver reads the member with its organization fetched and opens no transaction of its own, so a seat is decided correctly on a thread with no persistence ...
AI platform services and kill switch rights, and the switch's column
Like what you see shipping?
All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.