employee001 0.7.0 → 0.9.0

package/.env.example

@@ -37,11 +37,28 @@ COMPOSIO_API_KEY=
 # Optional. ElevenLabs for cloned twin voices.
 # Get from https://elevenlabs.io
 ELEVENLABS_API_KEY=
-# Use a restricted key: Text to Speech = Access, Voices = Read, everything else
-# No Access, with a credit limit (elevenlabs.io/app/developers/api-keys).
+# Use a restricted key: Text to Speech = Access, Speech to Text = Access,
+# Voices = Read, everything else No Access, with a monthly credit limit
+# (elevenlabs.io/app/developers/api-keys).
 # Twin voice model. Default eleven_v4 (most expressive, 90+ languages); set
 # eleven_flash_v2_5 for the lowest latency.
 # ELEVENLABS_TTS_MODEL=eleven_v4
+# Live voice on Ask (mic streams to Scribe v2 Realtime, answers spoken with
+# Eleven v4 Turbo sentence by sentence). The browser connects to ElevenLabs
+# with single-use tokens minted here; the key never leaves the server. Off in
+# EU mode. off: back to record-then-transcribe.
+# EMPLOYEE001_VOICE_LIVE=
+# ELEVENLABS_LIVE_TTS_MODEL=eleven_v4_turbo
+# 1: log where each twin run's time goes ([twin-timing] lines: tools,
+# memory, SDK start, first token). Diagnostics only.
+# E001_TIMING=
+
+# Optional. Some hosted MCP servers (e.g. ElevenLabs) sign apps in with an
+# OAuth Client ID Metadata Document instead of Dynamic Client Registration.
+# Set this to a public https:// URL serving that JSON document; its client_id
+# must equal the URL and its redirect_uris must include this install's
+# http://localhost:<port>/api/org/mcp/oauth/callback.
+# EMPLOYEE001_OAUTH_CLIENT_METADATA_URL=
 
 # Optional. Optimizes the twins' memory — more accurate recall of the most
 # relevant past context, so answers stay sharp over time. Works without it
@@ -57,10 +74,41 @@ EMPLOYEE001_BIND=127.0.0.1
 # e.g. `tailscale serve` (mac.tail1234.ts.net). Everything else is refused.
 # EMPLOYEE001_ALLOWED_HOSTS=
 
-# Shared-secret access token. Required when EMPLOYEE001_BIND is non-loopback;
-# ignored when bound to 127.0.0.1. `npx employee001 setup` generates one
-# automatically — only set this manually if you're skipping the wizard.
+# Bootstrap token. Required when EMPLOYEE001_BIND is non-loopback: open
+# http://<host>:<port>/?token=<this> once to create the first owner account
+# at /auth/setup; after that everyone signs in. Also the bearer for MCP
+# clients. `npx employee001 setup` generates one automatically.
 EMPLOYEE001_TOKEN=
 
+# ── Sign-in (optional) ────────────────────────────────────────────────────
+# Single sign-on with any OpenID Connect provider (Google Workspace, Entra
+# ID, Okta…). Redirect URI defaults to $APP_URL/api/auth/oidc/callback.
+# EMPLOYEE001_OIDC_ISSUER=
+# EMPLOYEE001_OIDC_CLIENT_ID=
+# EMPLOYEE001_OIDC_CLIENT_SECRET=
+# EMPLOYEE001_OIDC_REDIRECT_URI=
+# Unknown people with a verified email at these domains get a member account.
+# EMPLOYEE001_OIDC_ALLOWED_DOMAINS=
+# Separate bearer for MCP clients (defaults to EMPLOYEE001_TOKEN).
+# EMPLOYEE001_MCP_TOKEN=
+
+# ── Data residency and privacy (optional, see SECURITY.md) ─────────────────
+# eu: Claude only via Bedrock eu-*/Vertex europe-*/local, embeddings only to
+# EMBEDDINGS_BASE_URL, voice only via an EU ElevenLabs endpoint.
+# EMPLOYEE001_REGION=
+# OpenAI-compatible embeddings endpoint (EU or local), e.g. http://localhost:11434/v1
+# EMBEDDINGS_BASE_URL=
+# EMBEDDINGS_API_KEY=
+# EU voice: https://api.eu.residency.elevenlabs.io (ElevenLabs Enterprise)
+# ELEVENLABS_BASE_URL=
+# off: no voice at all (server or browser speech recognition)
+# EMPLOYEE001_VOICE=
+# Memory redaction of personal data: off | basic (default) | strict
+# EMPLOYEE001_MEMORY_REDACT=
+# Set to 1 once zero data retention is on for your Composio project
+# COMPOSIO_ZERO_DATA_RETENTION=
+# Post Slack replies as the org's bot instead of the employee's account
+# SLACK_BOT_TOKEN=
+
 # Local server port.
 PORT=3000

package/.next/standalone/.next/BUILD_ID

@@ -1 +1 @@
-Xgi_g_n9LTDlgX3524TKa
+EznAhYnUBWbpPitFK99k0

package/.next/standalone/.next/app-path-routes-manifest.json

@@ -1,7 +1,9 @@
 {
+  "/(auth)/auth/setup/page": "/auth/setup",
   "/(auth)/forgot-password/page": "/forgot-password",
   "/(auth)/login/page": "/login",
   "/(auth)/signup/page": "/signup",
+  "/(workspace)/account/page": "/account",
   "/(workspace)/ask/page": "/ask",
   "/(workspace)/audit/page": "/audit",
   "/(workspace)/brain/page": "/brain",
@@ -15,7 +17,7 @@
   "/(workspace)/focus/page": "/focus",
   "/(workspace)/generation/page": "/generation",
   "/(workspace)/goals/page": "/goals",
-  "/(workspace)/handover/live/page": "/handover/live",
+  "/(workspace)/handover/interview/page": "/handover/interview",
   "/(workspace)/handover/page": "/handover",
   "/(workspace)/inbox/page": "/inbox",
   "/(workspace)/learning/page": "/learning",
@@ -31,8 +33,22 @@
   "/api/active-runs/route": "/api/active-runs",
   "/api/active-runs/stream/route": "/api/active-runs/stream",
   "/api/approvals/pending/route": "/api/approvals/pending",
+  "/api/audit/export/route": "/api/audit/export",
   "/api/audit/route": "/api/audit",
   "/api/audit/verify/route": "/api/audit/verify",
+  "/api/auth/login/route": "/api/auth/login",
+  "/api/auth/logout/route": "/api/auth/logout",
+  "/api/auth/me/route": "/api/auth/me",
+  "/api/auth/mfa/confirm/route": "/api/auth/mfa/confirm",
+  "/api/auth/mfa/disable/route": "/api/auth/mfa/disable",
+  "/api/auth/mfa/enroll/route": "/api/auth/mfa/enroll",
+  "/api/auth/mfa/verify/route": "/api/auth/mfa/verify",
+  "/api/auth/oidc/callback/route": "/api/auth/oidc/callback",
+  "/api/auth/oidc/start/route": "/api/auth/oidc/start",
+  "/api/auth/password/route": "/api/auth/password",
+  "/api/auth/setup/route": "/api/auth/setup",
+  "/api/auth/users/[id]/route": "/api/auth/users/[id]",
+  "/api/auth/users/route": "/api/auth/users",
   "/api/budgets/[id]/route": "/api/budgets/[id]",
   "/api/budgets/route": "/api/budgets",
   "/api/connections/[id]/debug/route": "/api/connections/[id]/debug",
@@ -40,6 +56,7 @@
   "/api/connections/[id]/initiate/route": "/api/connections/[id]/initiate",
   "/api/connections/[id]/route": "/api/connections/[id]",
   "/api/connections/toolkits/route": "/api/connections/toolkits",
+  "/api/consent/required/route": "/api/consent/required",
   "/api/council/approve/route": "/api/council/approve",
   "/api/council/chat/route": "/api/council/chat",
   "/api/council/export/route": "/api/council/export",
@@ -95,17 +112,21 @@
   "/api/org/mcp/oauth/callback/route": "/api/org/mcp/oauth/callback",
   "/api/org/mcp/oauth/start/route": "/api/org/mcp/oauth/start",
   "/api/org/mcp/route": "/api/org/mcp",
+  "/api/org/read-allowlist/route": "/api/org/read-allowlist",
   "/api/org/router/route": "/api/org/router",
   "/api/org/skills/[id]/route": "/api/org/skills/[id]",
   "/api/org/skills/import/route": "/api/org/skills/import",
   "/api/org/skills/route": "/api/org/skills",
+  "/api/org/slack-autoreply/route": "/api/org/slack-autoreply",
   "/api/playbooks/[id]/route": "/api/playbooks/[id]",
   "/api/playbooks/[id]/run/route": "/api/playbooks/[id]/run",
   "/api/playbooks/route": "/api/playbooks",
+  "/api/relay/[employeeId]/consent/route": "/api/relay/[employeeId]/consent",
   "/api/relay/[employeeId]/interview/route": "/api/relay/[employeeId]/interview",
+  "/api/relay/[employeeId]/package/route": "/api/relay/[employeeId]/package",
   "/api/relay/[employeeId]/route": "/api/relay/[employeeId]",
-  "/api/relay/[employeeId]/stream/route": "/api/relay/[employeeId]/stream",
   "/api/relay/[employeeId]/synthesize/route": "/api/relay/[employeeId]/synthesize",
+  "/api/relay/route": "/api/relay",
   "/api/routines/[id]/route": "/api/routines/[id]",
   "/api/routines/[id]/run/route": "/api/routines/[id]/run",
   "/api/routines/route": "/api/routines",
@@ -113,6 +134,8 @@
   "/api/shifts/[runId]/route": "/api/shifts/[runId]",
   "/api/shifts/route": "/api/shifts",
   "/api/slack/composio/route": "/api/slack/composio",
+  "/api/stt/route": "/api/stt",
+  "/api/stt/token/route": "/api/stt/token",
   "/api/system/config/route": "/api/system/config",
   "/api/system/mode/route": "/api/system/mode",
   "/api/tasks/[id]/route": "/api/tasks/[id]",
@@ -123,6 +146,7 @@
   "/api/templates/route": "/api/templates",
   "/api/tts/route": "/api/tts",
   "/api/tts/stream/route": "/api/tts/stream",
+  "/api/tts/token/route": "/api/tts/token",
   "/api/tts/voices/route": "/api/tts/voices",
   "/api/twin-builder/[employeeId]/active/route": "/api/twin-builder/[employeeId]/active",
   "/api/twin-builder/[employeeId]/route": "/api/twin-builder/[employeeId]",

package/.next/standalone/.next/build-manifest.json

@@ -7,9 +7,9 @@
     "static/chunks/0cz1d0mv5g_q7.js"
   ],
   "lowPriorityFiles": [
-    "static/Xgi_g_n9LTDlgX3524TKa/_buildManifest.js",
-    "static/Xgi_g_n9LTDlgX3524TKa/_ssgManifest.js",
-    "static/Xgi_g_n9LTDlgX3524TKa/_clientMiddlewareManifest.js"
+    "static/EznAhYnUBWbpPitFK99k0/_buildManifest.js",
+    "static/EznAhYnUBWbpPitFK99k0/_ssgManifest.js",
+    "static/EznAhYnUBWbpPitFK99k0/_clientMiddlewareManifest.js"
   ],
   "rootMainFiles": [
     "static/chunks/28flaeabfo316.js",

package/.next/standalone/.next/prerender-manifest.json

@@ -86,11 +86,39 @@
         "x-next-revalidate-tag-token"
       ]
     },
+    "/account": {
+      "routeType": "page",
+      "response": "complete",
+      "compute": "static",
+      "htmlSize": 39505,
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/account",
+      "dataRoute": "/account.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
     "/ask": {
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 47650,
+      "htmlSize": 50358,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -118,7 +146,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 42061,
+      "htmlSize": 42313,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -142,11 +170,39 @@
         "x-next-revalidate-tag-token"
       ]
     },
+    "/auth/setup": {
+      "routeType": "page",
+      "response": "complete",
+      "compute": "static",
+      "htmlSize": 17304,
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/auth/setup",
+      "dataRoute": "/auth/setup.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
     "/brain": {
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 39037,
+      "htmlSize": 39289,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -174,7 +230,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 40219,
+      "htmlSize": 40471,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -202,7 +258,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 43418,
+      "htmlSize": 43670,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -230,7 +286,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 10852,
+      "htmlSize": 11213,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -258,7 +314,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 36889,
+      "htmlSize": 37141,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -286,7 +342,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 47431,
+      "htmlSize": 47919,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -346,7 +402,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 48222,
+      "htmlSize": 48400,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -374,7 +430,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 39628,
+      "htmlSize": 39880,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -402,7 +458,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 15987,
+      "htmlSize": 15249,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -430,7 +486,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 65124,
+      "htmlSize": 65376,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -458,7 +514,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 39791,
+      "htmlSize": 40043,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -486,7 +542,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 36183,
+      "htmlSize": 39606,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -510,11 +566,11 @@
         "x-next-revalidate-tag-token"
       ]
     },
-    "/handover/live": {
+    "/handover/interview": {
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 38823,
+      "htmlSize": 38816,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -527,8 +583,8 @@
         }
       ],
       "initialRevalidateSeconds": false,
-      "srcRoute": "/handover/live",
-      "dataRoute": "/handover/live.rsc",
+      "srcRoute": "/handover/interview",
+      "dataRoute": "/handover/interview.rsc",
       "allowHeader": [
         "host",
         "x-matched-path",
@@ -542,7 +598,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 42321,
+      "htmlSize": 42573,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -598,7 +654,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 15523,
+      "htmlSize": 15780,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -626,7 +682,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 59672,
+      "htmlSize": 59924,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -654,7 +710,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 18256,
+      "htmlSize": 14414,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -682,7 +738,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 45275,
+      "htmlSize": 45527,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -738,7 +794,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 36640,
+      "htmlSize": 36892,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -766,7 +822,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 40445,
+      "htmlSize": 40697,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -794,7 +850,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 54865,
+      "htmlSize": 55360,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -850,7 +906,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 18047,
+      "htmlSize": 15235,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -906,7 +962,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 44193,
+      "htmlSize": 44445,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -934,7 +990,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 40469,
+      "htmlSize": 40721,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -990,7 +1046,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 14321,
+      "htmlSize": 14413,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -1018,7 +1074,7 @@
       "routeType": "page",
       "response": "complete",
       "compute": "static",
-      "htmlSize": 44159,
+      "htmlSize": 44411,
       "experimentalBypassFor": [
         {
           "type": "header",
@@ -1046,8 +1102,8 @@
   "dynamicRoutes": {},
   "notFoundRoutes": [],
   "preview": {
-    "previewModeId": "5f2df41c917e5f0b748cd178b3cdfa51",
-    "previewModeSigningKey": "fc2086abe8e727484970005ec27402ff7ab9bc349f8579658346cfa27ced1b9c",
-    "previewModeEncryptionKey": "d73ea180d46954317d748d937b67c42f364394fa4f9581ac33c09d1fb7b86744"
+    "previewModeId": "41477e097c9cc1ef9fd4934812649d39",
+    "previewModeSigningKey": "81c77b5701df61c1e8a6377db9192415f860a52f71053dc1b5d0dc71169f3b51",
+    "previewModeEncryptionKey": "32f0933e9866b8168ae1f58a9aa6454693ec5899adea6d6d65e1b37a2c3b4a37"
   }
 }

package/.next/standalone/.next/required-server-files.json

@@ -2,7 +2,7 @@
   "version": 1,
   "config": {
     "env": {
-      "NEXT_PUBLIC_APP_VERSION": "0.7.0"
+      "NEXT_PUBLIC_APP_VERSION": "0.9.0"
     },
     "webpack": null,
     "typescript": {