Personal OS

Private owner operating system

Owner login
Public-safe entry

Personal OS

A private operating surface for work projects, research context, AI source workflows, owner settings, and launch governance.

Protected dashboard routes are guarded before the app shell renders.
Owner settings and admin readiness surfaces already exist behind login.
Client access stays private-token only until DB-backed filtering is complete.

Launch boundary map

What this public page can safely expose.

Loop 8
Public
Login
Private

Root entry

Identity and safe boundaries

Supabase magic link

Existing users only

Owner surfaces

AI Input, Work, settings, admin

Public exposure boundary

Owner cockpit
protected

AI Input, Work, settings, and admin routes require login before the private shell renders.

Client portal
token-only

Client pages are only reachable from private tokenized URLs; no sample token is exposed here.

Public root
safe

This page is static and does not render projects, notes, deliverables, source data, or env values.

Launch readiness

Protected app shell

ready for smoke

Unauthenticated owner routes preserve their requested path through /login?next=...

Settings and admin

read-only ready

Owner settings and operator readiness exist behind the dashboard auth boundary.

Next blocker

client containment

Public Client Portal mock data must be gated before a private online launch.