Dispatch 274
Week ↗

Cross-client inbox, SSO, brokered tokens, and a frontend that finally looks like software

The cross-client CPA work inbox shipped across accounting-ops. I built the API endpoint that pulls every pending item from every client into a single view, lowered the approval-decide floor from admin to acc…

Commits
39
Systems
7
Read
2min
Product capture

Email-Ops — approval queue.

The cross-client CPA work inbox shipped across accounting-ops. I built the API endpoint that pulls every pending item from every client into a single view, lowered the approval-decide floor from admin to accountant so CPAs can attest without needing a sledgehammer, and wired up the web UI with inline approve and reject. That's a 10x throughput unlock for the bookkeeping workflow. I also added the AI agreement rate KPI to the dashboard so we can measure whether the model's recategorizations actually match what humans do.

The frontend on customer-ops got a serious makeover. I redesigned the cockpit with a new design system, migrated all the screens, added a 3D knowledge graph explorer, and built the command palette for entity search. It's the kind of interface polish that makes the product feel like it belongs in the world. I also got the dogfood deploy running on the customerops.magicunicorn.dev alias and fixed the Prisma openssl issue on Alpine so the container actually starts.

Email-ops did some heavy plumbing. I replaced the connected accounts system with broker tokens, which is cleaner and more secure. The old OAuth connect flow is still there as a seam for the cleaner engine, but the broker token path is the one that matters. It touched 25 files because auth touches everything, which is how you know it's important.

I redesigned the cockpit with a new design system, migrated all the screens, added a 3D knowledge graph explorer, and built the command palette for entity search.

Meeting-ops had a busy day too. I fixed the always-on heartbeat so a killed tab clears the presence flag, added a self-destruct service worker to kill zombie PWA registrations, switched to recording locally then uploading the whole file at stop time, and made sure one meeting equals one session instead of fragmenting across utterances. I also bumped up the session features with bulk delete, bulk export, and auto-titles for short and always-on sessions. The suite identity convergence work merged workspace identity across the board and wired up the MeetingOps port.

majiks.online got its freemium preview with Keycloak SSO login-to-listen, plus I fixed the funnel slug and dual-fired the purchase event so analytics actually track.

The control plane got tightened up with Keycloak attribute sync from uc-entitlements and control-plane ports bound to localhost by default in the compose setup. And the unicorn-ecosystem docs got sorted out with tiering boundaries, free tier per-product recommendations, and an e2e validation scaffold.

39 commits across seven repos and the product feels like it's pulling together.

Also in the frame

Real product captures — click any to enlarge.

ops center
ops center
majiks