Every entry here is hand-written. No git log dumps. If it matters to owners, it gets a story.
Apr 25, 2026PLATFORMINFRA
Cloud Sync is live. Your family survives the laptop.
The family you built lives on your machine. That was fine until your laptop became a single point of failure for your entire operation. 0.7.1 closes that. Every workspace, family member, directive, and run now mirrors to the cloud in real time — and when you pick up a new machine, it's all waiting for you before the cockpit opens. The restore isn't a terminal dance. It's a progress screen. One command, one wait, done. Bidirectional sync keeps your devices in agreement within 30 seconds. Per-table conflict resolution handles simultaneous edits without data loss. If you downgrade, your data isn't purged — it's exported and held for 90 days. The cloud is the mirror. Your machine is still the boss.
0.7.1 · CLOUD SYNC ENGINE
✓ bossmode init --restore — new device, full workspace in minutes
✓ bidirectional sync — p95 lag ≤30s, journal-based, signed
✓ downgrade retention — 90-day hold + JSON export, no surprise purge
✓ data portability — one-click zip export, always available
Apr 25, 2026PLATFORM
Projects. Because not all work belongs in one pile.
You're running four client engagements at once. A campaign for McKinsey, a launch for a mentoring cohort, your own agency ops, and a trust pack rollout. They were all in one feed. That was the problem. 0.7.0 ships Projects — a container layer that sits between your workspace and your directives. Each project gets its own kanban. Each Crew member can be bound to a single project so the client work stays separate from the agency ops. Each project can carry a monthly budget cap so a runaway loop doesn't cost you $750 in an afternoon. Archive a project when the engagement closes. Refile a directive in two clicks. The work is still local, still fast, still yours.
0.7.0 · PROJECTS
✓ projects table — name, color, optional budget cap
The old homepage led with how it works — a three-step pack/rules/report walkthrough that only landed if you already knew what those words meant. Replaced with a five-moment day in the life: 7:30am brief, 10:14am reply, 2:45pm win, 6:02pm recap, Friday review. Plain language. Animated SVG glyphs. A sweeping timeline dot that ties the whole section together. The product is the same; the invitation into it is finally human.
Headless surface: CLI, MCP server, and REST API on one control plane.
BossMode ships three first-class surfaces together: @bossmode/cli, @bossmode/mcp-server, and /api/pro/*. The architecture Salesforce announced at TDX 2026 — shipped months earlier, without vendor lock-in. The /headless positioning page lays out the three surfaces, compares against Agentforce and Now Assist row by row, and links to docs.bossmode.ing for each surface. Your agent picks the surface; the control plane is the same.
Pack marketplace: 14 packs, each with its own page and schematic.
The packs page used to be an anchor on the homepage. Now it's a marketplace: 14 packs, each with its own detail page, unique blueprint-style schematic, full marketing copy, and interest capture. Four are live (sales, launch, content, ops). Ten are listed as coming soon with waitlist capture so demand steers what we ship next. Every pack page answers the same three questions: what it does, who it's for, and what the first day looks like.
New users now drop into a 5-email welcome sequence that teaches BossMode the same way operators learn it — one loop at a time. Newsletter capture ("The Boss's Log") is double opt-in with signed unsubscribe tokens. Every email ships with a plain-text footer, a working unsub link, and auditable send logs. No dark patterns, no pre-checked boxes, no "you'll hear from us soon" dead ends.
Apr 19, 2026INTELLIGENCEDESIGN
trust-gap path in the AI Employee Roadmap UX + honest ROI math.
The legacy trust-gap diagnostic was compressed and the Enter key didn't advance — quiz hints disappeared before the reader could read them. Fixed: full-page quiz mode that scrolls to the top on start, Enter advances, quiz hints hold 2.8–5.2 seconds. The ROI estimate floor was also too low (a weak trust tier was quoting $4,500/month — real costs are 10× that). The scoring model now floors at 4% lift for fortified sites and 30% for critical ones, and the score-reveal explains the math in a panel you can expand.
Security lockdown. Every Convex function either proves auth or admits it.
Too many public Convex mutations trusted caller-supplied userIds. Closed in eight waves: approvals, provider connections, workspace-adapter keys, the execution surface (work runs, directives, packets), legacy trust-gap abuse endpoints, the rate-limit layer (now fails closed on abuse-prone routes with an in-memory fallback), TypeScript build errors no longer suppressed, and markdown XSS eliminated. Every remaining public function carries a SECURITY: annotation or calls requireIdentity / requireWorkspaceMember inline — enforced by a drift test that parses every convex/**/*.ts file on each run. Two P0s closed in an earlier hotfix: markFly AIPaid and workspaceInvites.* were public mutations that let any browser flip a Fly AI application to paid or join any workspace as Boss. Both are now internal-only.
Apr 19, 2026INFRAMCP
Infrastructure lift shipped. Five phases, one spine.
The four surfaces — CLI, web, MCP, and AvatarCzar — now agree on one Convex source of truth. Cross-device sync: register on a second machine, hydrate the whole workspace in one round-trip, stay current every heartbeat. Pack purchase runs a five-step fanout: license granted, installation ready, skill files on every device, AvatarCzar target bound, MCP profile refreshed — every step timestamped. Eight new MCP tools under bossmode:packs:* and bossmode:devices:* give headless agents real lifecycle control. AvatarCzar tri-U return leg: outcome posts out, confidence updates come back, Co-pilot reads both. End-to-end smoke passed green against prod in 4 seconds.
RBAC closed. Four multi-team gaps sealed in one pass.
Multi-team owners were hitting trust gaps: KPI snapshots mixed cross-team data, roadmap queries weren't scoped, the assertTeamRole bootstrap could be skipped, and standing orders leaked teamId. All four closed. Two-team isolation now verified by a dedicated smoke test — create two teams, two members each, confirm zero cross-contamination.
The connectors page used to show everything green. That was a lie. Real implementation checks now run against Stripe, X, Webflow, GA4, GSC, HubSpot, and Resend — live API calls, not stub returns. Every connector we haven't wired yet is marked explicitly not-wired. You can trust the dashboard now because it stopped pretending.
Apr 13, 2026PLATFORM
Platform surfaces folded into one workspace view.
What started as nine dashboards (customer context, competitive intel, roadmap, KPIs, skills, workflow audit, teams, evals, connectors) collapsed into a single workspace view under /app/[workspace]. The data pipelines still run the same work — live KPIs, a 100× candidate scanner, team RBAC, connector health checks — but one screen replaces nine navigations. The Convex tables, API routes, and role enforcement stayed; only the surface changed.
Apr 13, 2026INFRA
Adapter registry + heartbeat. Five agents, one pulse.
Paperclip Wave 12: a registry that knows every adapter by name, version, and last heartbeat. OpenClaw, Hermes, Paperclip, Claude, and the base agent all registered at startup. The heartbeat service pings each one on a 90-second cycle and writes status back to the registry. Wave 13 stacked managed workspace lifecycle on top — execution runs now boot a workspace, do work, and tear down cleanly. Infrastructure that doesn't leak.
Apr 13, 2026INTELLIGENCE
Trust Intelligence Score is live. Three minutes, 7 dimensions.
Port complete from AvatarCzar. The Gemini-powered scoring engine evaluates 7 trust dimensions — credibility signals, social proof density, offer clarity, objection handling, scarcity logic, testimonial specificity, and conversion friction. Output: one composite score, one ranked gap list, one next-action. The /bottleneck-check?source=trust_score_legacy ads landing page is live with UTM attribution and Meta Pixel infrastructure wired for paid traffic.
Fly AI rewritten. Dream-seller voice, no refund language.
The old Fly AI page opened with a guarantee. That was the wrong frame — guarantees signal doubt, and we don't doubt the offer. Rewritten with dream-seller voice: the copy leads with what you wake up to, not what we promise to do. Refund language removed entirely, replaced with selection rigor language — you apply, we decide if it's a fit. The program is the same. The page finally matches it.
Daily Report. The cadence flipped from Monday to every morning.
Monday Report made sense when the product was a weekly review tool. BossMode is now a daily intelligence layer. The rename isn't cosmetic — every route, every Convex reference, every email subject line, every nav label updated globally. /daily-report sample page live. App-preview link wired. The Monday redirect stays in place so old links don't break.
docs.bossmode.ing live. 30 pages of operator reference.
Mintlify standing up docs at a separate subdomain was the right call. Public documentation now lives at docs.bossmode.ing with 30 pages covering platform concepts, API reference, Convex schema, adapter integration, and the Agent Deployer onboarding path. The /docs redirect from the main domain is live. Footer and nav updated. Mintlify deploy workflow added to CI — auto-deploys on push to main.
Public funnel shifted to local-first. The cloud is the mirror.
The product story changed. BossMode isn't a SaaS you subscribe to — it's a local command center where your agents ARE the company. Cloud sync is the backup, not the primary. Homepage, Fly AI, and all public copy updated to reflect the local-first architecture. The CLI lifecycle, local workspace adapter, and desktop-first positioning are now first-class in the funnel.
Service boundary refactor. Business logic out of routes.
Wave 11 extracted every piece of business logic that had been living inside API route handlers and moved it into lib/services/. Routes are now thin — they authenticate, call a service, return a response. The services own the logic. This makes the codebase testable without spinning up an HTTP server, and it means agents can call service functions directly without going through the network layer.
WHAT'S NEXT
Active build. Queued. On the horizon. No promises, just what's real.