THE BUREAU

WE ARE

TheBureau

WE WORK WHERE YOU DON'T HAVE TO.

LoginScroll for the full feature inventory

FEATURE INVENTORY

What The Bureau has and can do.

This is a product capability list, not a sales pitch. Some items are active surfaces now; some are capability paths the architecture is built to support through setup, adapters, policy, and Sign-off.

Work intake and Cases

Turns loose work into durable operating objects instead of another chat thread.

  • Open a Case from messy natural language, pasted notes, files, links, screenshots, browser context, or an extension capture.
  • Convert unclear intent into a Decision Package with assumptions, confidence, grouped questions, and a good-enough override path.
  • Create Case Files with owners, goals, Directives, Work Orders, Dossiers, Sign-offs, Deliverables, setup needs, and current state.
  • Keep My Desk focused on the next decision, blocked ask, Sign-off, missing input, or prepared packet that needs attention.
  • Attach Cases to Offices so company/client/product context can be shared without leaking every Case memory everywhere.
  • Represent related Cases, Office members, departments, codebase bindings, invited collaborators, and role-scoped visibility.

Teams, Offices, and collaboration

Lets people work together around shared Office context while keeping Case authority and visibility scoped.

  • Create Offices for teams, clients, products, companies, or long-running work areas with shared stable context.
  • Invite teammates or external collaborators into an Office or a specific Case with role-scoped visibility and contribution rights.
  • Route decisions, Sign-offs, missing inputs, handoffs, owner requests, and review packets to the right person instead of a generic inbox.
  • Coordinate related Cases inside one Office so status, risks, blockers, Dossiers, and next actions can be seen together.
  • Prepare team status updates, client updates, internal handoff notes, meeting follow-ups, and owner-specific action lists from shared Office context.
  • Separate team shared truth from private Case memory so useful context can be promoted deliberately instead of copied everywhere.
  • Support invited-user orientation so a collaborator sees why they are there, what they can access, and the first useful contribution they can make.

Multi-agent work and batching

Breaks large work into bounded execution units and coordinates workers around evidence.

  • Split a large Case into Work Orders with scope, dependencies, expected proof, validation commands, and stop conditions.
  • Batch coherent Work Orders for unattended execution when they can safely move together.
  • Run multiple temporary workers in parallel with write-scope leases, budgets, max-parallel limits, and Dossier handoff requirements.
  • Assign durable Specialists or short-lived run workers without turning the product into an unmanaged agent swarm.
  • Track worker states such as planned, queued, running, blocked, partial, failed, repaired, completed, and ready for review.
  • Integrate agent results back into a Case Manager path so the next architecture, merge, release, or owner decision is explicit.

Actual work it can prepare or do

The Bureau is intended to move work forward, not only summarize it.

  • Draft client updates, internal notes, replies, follow-ups, briefs, checklists, status packets, plans, and review packages.
  • Create or modify software when a Case needs a tool, parser, dashboard, script, workflow, test, automation, or internal app to reach the next step.
  • Generate Work Orders, acceptance criteria, validation commands, implementation plans, migration notes, release notes, and Dossier evidence.
  • Prepare spreadsheets, documents, reports, structured artifacts, decision records, and reusable Protocol candidates.
  • Inspect codebases, propose changes, run checks, package diffs, summarize risks, and surface the next safe engineering decision.
  • Use action previews so send, submit, merge, deploy, spend, delete, credential, or production-affecting actions wait for authority.

Runtimes, PA, local, cloud, and virtual machines

Runtime power is modeled as governed capability with explicit authority, not hidden automation.

  • Run through local development workspaces, daemon-backed local services, browser surfaces, CLI flows, and hosted/cloud execution paths where configured.
  • Represent PA capabilities for browser, desktop, internal, legacy, no-API, local-machine, cloud-machine, and hosted virtual-machine work under scoped grants.
  • Host PA workstations in virtual machines that can be preinstalled with approved apps, browsers, terminals, IDEs, office tools, CRM/admin tools, or legacy desktop software.
  • Let a PA use a computer like a trained human operator would: open apps, read screens, fill forms, click through workflows, collect evidence, and stop at Sign-off boundaries.
  • Use VM/app profiles so each PA can have a known toolbelt, login/setup state, sandbox boundary, recovery path, and audit trail instead of a generic browser session.
  • Support local PC operation where appropriate, so a PA can work through an approved machine, local app, browser, filesystem, or development environment with explicit grants.
  • Gate runtime actions through read, prepare, act, revoke, pause, recover, retry, rollback, and receipt states.
  • Use setup-needed, provider-blocked, permission-blocked, policy-blocked, stale-state, and recovery states instead of pretending execution is ready.
  • Bind Cases to local directories, codebases, paths, project queues, sandbox adapters, VM images, PA host profiles, or hosted targets when a Case needs execution context.
  • Keep runtime authority separate from user authority: prepared work can exist before permission to run it exists.

Extension, capture, and channels

Work can enter from the places it already appears, then be routed into governed Bureau objects.

  • Browser extension capture for page context, selected text, screenshots, DOM-derived context, triage, and quick Case creation.
  • Web app surfaces for My Desk, Cases, Offices, Admin Desk, support, onboarding, provider recovery, and design/proof routes.
  • CLI and daemon paths for local workspace readiness, project state, local execution, and developer proof loops.
  • Email channel model for reading approved threads, preparing replies, drafting follow-ups, packaging client updates, and waiting for send Sign-off.
  • Calendar channel model for meeting context, deadlines, follow-up reminders, scheduling evidence, and recurring operating rhythms.
  • Chat channel model for Slack, Microsoft Teams, Telegram-style, or internal-message surfaces where requests, decisions, and handoffs appear.
  • Task/ticket channel model for Linear/Jira/GitHub Issues-style work queues, support tickets, status changes, blockers, and owner routing.
  • File/docs channel model for Drive/SharePoint/Notion/wiki/document repositories, source coverage, missing proof, and Dossier citations.
  • Git and developer-tool channels for repo context, issues, diffs, tests, pull requests, releases, and agent run evidence.
  • CRM, finance, billing, forms, and custom internal-system channels can be represented through approved adapters or PA/runtime capability where safe.
  • Channel-routing model for incoming messages, replies, notifications, and future email/chat/task-system handoffs under reply authority rules.
  • Treats channel content as untrusted context until provenance, permissions, policy, and Case relevance make it safe to use.

Context, memory, and knowledge

Memory is scoped, inspectable, and promoted deliberately.

  • Compile Context Packs for a Case from approved sources, with omitted, ignored, stale, or missing-proof material visible.
  • Separate Principal/user memory, tenant/workspace memory, Office shared truth, Case memory, Specialist memory, PA memory, and run-worker memory.
  • Promote useful learnings into Office, Registry, Protocol, or managed pack memory only through review and Sign-off where needed.
  • Track source confidence, source freshness, provenance, assumptions, gaps, contradictions, and why a piece of context mattered.
  • Preserve Dossier citations, evidence edges, receipts, screenshots, test proof, diffs, and findings with the decisions they support.
  • Block cross-Case, cross-Office, cross-tenant, prompt-injection, or poisoned-context contamination as product states rather than invisible failures.

Providers and model intelligence

Provider-backed judgment sits inside rails for context, validation, redaction, and recovery.

  • Use configured model/provider paths for Bureau judgment, Case intake, planning, analysis, drafting, review, and explanation.
  • Supports an adapter-shaped provider model for OpenAI/Codex-style, Anthropic/Claude-style, Google/Gemini-style, local, hosted, or future providers where adapters are configured or added.
  • Integrate Claude-style agents, Codex-style coding agents, browser/desktop PA workers, and other specialist runtimes as governed workers inside a Case rather than standalone chats.
  • Route the same Case context, Dossier evidence, Work Orders, and Sign-off boundaries to whichever provider or agent runtime is appropriate for the job.
  • Let model agents ask the PA/runtime to inspect screens, operate apps, gather proof, or prepare next-step software when direct API integration is unavailable or insufficient.
  • Keep provider metadata, blocked states, retries, fallbacks, and setup repair visible when a provider cannot produce trusted Case-specific work.
  • Redact or label sensitive context before provider use according to Case, tenant, policy, source, and Dossier rules.
  • Allow model output to become evidence, draft, plan, or recommendation before it becomes an authorized action.
  • Avoid hardcoding current model limitations into product primitives so stronger providers can use the same Cases, Dossiers, Work Orders, and Sign-offs later.

Governance, evidence, and safety

Every meaningful action keeps proof, authority, consequence, and recovery visible.

  • Dossiers attach evidence, source coverage, assumptions, confidence, remaining risk, verdicts, redaction status, and client-safe excerpts.
  • Sign-offs gate external, sensitive, destructive, expensive, production, merge, send, submit, support, and authority-changing actions.
  • Policy checks evaluate actor, resource, action, environment, tenant posture, capability grants, budget, runtime, provider, and setup state.
  • Action previews show expected world changes, required authority, rollback or recovery path, Dossier refs, and receipt shape before execution.
  • Ledger and audit paths record decisions, receipts, events, provider states, setup changes, support access, and recovery steps.
  • Emergency controls include pause, revoke, cancel, rollback, support lease, break-glass boundary, kill switch, and incident/recovery packages.

Setup, admin, and platform operation

The Bureau can set itself up and expose platform state without making users read backend machinery.

  • Create Setup Packages for source access, credential grants, provider setup, PA readiness, Case defaults, Office defaults, and runtime tests.
  • Admin Desk surfaces tenant posture, members, credentials, integrations, policy, trust, standards, setup health, support access, and improvement packages.
  • Manage tenant lifecycle concepts such as placement, residency, backup/export/delete, isolation, trust packs, and audit exports as architecture-backed surfaces.
  • Track component health, incidents, dependency state, error budgets, issue clusters, root-cause hypotheses, and structural improvement opportunities.
  • Support release rings, feature flags, kill switches, managed catalog packs, install/pin/fork/repair state, and compatibility/version metadata.
  • Provide local-dev/test-mode paths with synthetic users, sandbox adapters, fake credentials, and Dossier proof without contacting real outside services.

Oracle, mapping, and process intelligence

The Oracle maps and proposes; The Bureau decides, authorizes, routes, and executes.

  • Map sources, workflows, repeated steps, handoffs, blockers, missing proof, automation candidates, and company operating patterns.
  • Turn Oracle output into candidate Briefs, Context Packs, Dossier inputs, Case suggestions, or handoff proposals without granting action authority.
  • Inventory approved sources and support status for files, docs, chats, tickets, codebases, systems, legacy apps, and custom data surfaces.
  • Use process intelligence to choose relevant context for the active Case rather than reading everything by default.
  • Find gaps such as stale decisions, missing owners, repeated approval loops, unsupported files, and unclear action boundaries.
  • Keep Oracle/Bureau separation visible so discovery and mapping do not silently become execution.

HOW WORK CHANGES

How The Bureau changes the way work gets done.

The Bureau does not replace the tools people use. It operates across them with Cases, skills, PAs, agents, software, evidence, and Sign-off boundaries.

Working across human tools

Now

People copy context between email, chat, files, tickets, CRMs, browsers, admin panels, spreadsheets, docs, Git, and internal tools.

With The Bureau

The Bureau can work through approved channels, APIs, browser or desktop PA workstations, and VM-hosted app profiles that use the same tools humans use.

Using skills instead of generic prompts

Now

Each person remembers process, tone, standards, handoff rules, and tool quirks manually.

With The Bureau

Specialists and workers can use skills, role packs, Protocols, examples, memory rules, and quality rubrics scoped to the Case or Office.

Writing software when needed

Now

People make spreadsheets, scripts, dashboards, automations, parsers, or internal tools by hand when existing apps do not fit.

With The Bureau

The Bureau can create purpose-built software, workflows, scripts, parsers, mini-apps, dashboards, and test or validation tools to move a Case forward.

Team and Office work

Now

Work is split across people and channels, ownership gets lost, and updates are manually assembled.

With The Bureau

Offices, Cases, owners, blockers, Dossiers, Sign-offs, and prepared updates keep team work coordinated.

Agent and PA execution

Now

Humans split prompts, supervise agents, click through tools, and reconcile results.

With The Bureau

Case Managers, Specialists, batched Work Orders, run workers, and PA or VM runtimes operate inside one governed Case.

Evidence and authority

Now

Approvals rely on memory, screenshots, chat trust, or an informal sense that something is ready.

With The Bureau

Prepared work carries Dossier proof, action previews, Sign-offs, receipts, and rollback or recovery paths.

Channels becoming work

Now

Email, chat, tickets, files, and Git contain fragments of work that someone has to interpret and route.

With The Bureau

Channel content becomes scoped Case context, next actions, missing-proof requests, and owner-routed decisions.

Provider and model use

Now

Claude, Codex, Gemini, and chat sessions are usually separate from the work system.

With The Bureau

Model providers, coding agents, PA workers, and future adapters can operate from the same Case context and boundaries where configured.

ARCHITECTURE OVERVIEW

How the Bureau stack fits together.

The Bureau is not one chat box. It is a set of apps, packages, data stores, runtimes, channels, and hosting patterns that turn intent into governed work.

User surfaces

Where people, teams, and channels enter or review Bureau work.

  • apps/web — Web app

    The Next.js and React app hosts the public landing, login, My Desk, Cases, Offices, admin surfaces, provider operations, approvals, and review screens.

  • apps/landing — Landing package

    The reusable landing app keeps the Prime page, archived story route, shared landing styles, and public front-door copy separate from the product shell.

  • apps/extension — Browser extension

    The Vite and React extension can capture page context, browser evidence, quick asks, and channel fragments into scoped Bureau work where installed.

  • apps/cli — CLI

    The command-line surface gives developer and workstation flows a direct way to participate in auth, local workspace, and execution loops where configured.

  • apps/proofkit — Proofkit

    Proof-focused tooling supports evidence, harnesses, and repeatable proof checks around work that needs to be shown, tested, or reviewed.

Control plane

The governed API layer that turns intent into Case state, policy checks, and records.

  • apps/api — Firebase Functions API

    The API app uses Firebase Functions v2, Hono, Firebase Admin, and TypeScript for tenant APIs, Case intake, provider status, approvals, and operating records.

  • apps/web API routes

    Web app routes handle public landing flows, local-dev helpers, capture endpoints, dashboard context, and app-specific server actions close to the UI.

  • Auth and session boundary

    Firebase Auth and app authorization decide whether a person lands on login, onboarding, the dashboard, or a governed app route.

  • Policy and Sign-off gates

    Sensitive, external, destructive, production, cost, credential, and authority-changing actions are represented as explicit preview and approval boundaries.

Execution plane

Where Work Orders, PAs, agents, and adapters actually move a Case forward.

  • apps/daemon — Local runtime

    The local Node and Express daemon watches workspace and Firestore state, exposes approved local capabilities, syncs tasks, and records runtime progress.

  • Run workers

    Queued or batched workers can lease Work Orders, run them, block on missing input, retry, repair, and return receipts or Dossier evidence.

  • PA workstations

    Browser, desktop, local-machine, or VM-hosted PA profiles can use approved apps and tools like a human operator while staying inside Case grants.

  • Adapter mesh

    Provider, browser, desktop, file, API, channel, and custom-system adapters become capability surfaces instead of one-off scripts hidden from governance.

Data and proof

The records that make Bureau work durable, reviewable, and recoverable.

  • Firestore — Operational database

    The current primary operational store for Cases, Work Orders, Dossiers, Sign-offs, queues, tenant state, daemon logs, provider health, and ledger-style records.

  • Firebase Auth — Identity

    Identity and sign-in state sit beside app authorization so user, tenant, setup, and support access can be checked before work routes forward.

  • Queue and lease records

    Worker queues, leases, blocked states, retries, budgets, and completion receipts are represented as records instead of invisible background activity.

  • Firebase Storage — Artifact store

    Artifacts, deliverables, source payloads, exports, and large evidence can live behind storage references instead of being copied into every Dossier.

  • Local filesystem — Workspace state

    Codebases, generated files, test output, desktop artifacts, and local app state can be used through explicit daemon or PA grants where appropriate.

  • Dossier and ledger records

    Important decisions, receipts, citations, costs, assumptions, action previews, recovery paths, and Sign-offs stay attached to the Case instead of chat memory.

Shared system layer

The packages that keep the apps speaking the same operating language.

  • packages/shared — Contracts

    Shared TypeScript contracts, Bureau foundation records, invariants, validators, and testable operating models keep web, API, daemon, and tools aligned.

  • packages/bureau-style — Design tokens

    Shared design tokens and CSS primitives keep Bureau Suit visual language consistent across public, login, and app surfaces.

  • Scripts and gates

    Local workspace scripts, browser-proof checks, architecture locks, standards gates, and release checks make the system testable outside the happy path.

Providers and channels

External intelligence and human tools become governed inputs or execution paths.

  • Model providers

    OpenAI, Claude, Gemini, Codex-style coding agents, and future model adapters can be routed as Specialist or worker capability where configured.

  • Human channels

    Email, chat, tickets, Git, docs, files, CRMs, forms, admin panels, and internal systems can feed Case context or become PA/API work surfaces.

  • Custom tools

    When no existing integration fits, The Bureau can create task-specific scripts, parsers, dashboards, mini-apps, or validation tools under the same Case boundary.

WORK PATH

How the pieces work together.

  1. Capture

    A person, extension, channel, API, CLI, or PA surface brings in intent, files, links, screenshots, or operating context.

  2. Shape

    The control plane turns loose input into a Case, Directives, Context Packs, owners, setup needs, and Dossier proof requirements.

  3. Plan

    Case Managers and Specialists break work into Work Orders, choose skills, select providers or PA runtimes, and expose cost or authority gates.

  4. Run

    Workers, agents, adapters, daemon capabilities, browser sessions, local tools, or VM-hosted PA workstations execute only inside approved boundaries.

  5. Prove

    Outputs come back with receipts, citations, logs, previews, files, tests, rollback paths, and Dossier records instead of only a chat answer.

  6. Decide

    Humans or authorized roles review Sign-offs, unblock decisions, route updates to Offices or channels, and keep the Case state durable.

HOSTING OPTIONS

Different ways to host The Bureau.

Hosting is a deployment decision: keep the control plane, data, workers, PAs, and adapters together or split them across cloud, local, office, and customer-run boundaries.

Local workstation

Fit
Development, founder dogfood, private machine work, and PA tasks that need local apps or files.
Shape
Next.js web, daemon, local workspace scripts, browser extension, Firebase emulators or configured Firebase project, and explicit filesystem/app grants.
Boundary
Best when the machine owner controls the environment and wants local execution close to codebases, browsers, desktop apps, or test data.

Managed cloud control plane

Fit
Standard SaaS-style use where login, Case state, APIs, storage, and review surfaces live in a managed cloud project.
Shape
Hosted web app, Firebase Functions API, Firebase Auth, Firestore, Firebase Storage, and cloud-managed policy, Dossier, and Sign-off records.
Boundary
Execution can stay cloud-side for API/model work, while PA or local-machine capabilities are attached only when a Case needs them.

Hybrid office deployment

Fit
Teams with internal tools, private networks, local files, office systems, or desktop apps that cloud APIs cannot safely reach directly.
Shape
Cloud control plane plus office/local daemons, approved browser profiles, PA workstations, channel adapters, and VM or machine pools near the tools.
Boundary
Keeps the Case, Dossier, and Sign-off record centralized while execution happens where the real work systems live.

Hosted PA and VM pool

Fit
Repeatable PA work that needs known app images, browsers, terminals, IDEs, office tools, CRMs, admin portals, or legacy desktop software.
Shape
Preinstalled VM images or app profiles, leased PA sessions, credential/setup packages, runtime health checks, screenshots, receipts, and recovery paths.
Boundary
Useful when the team wants reproducible PA environments instead of fragile ad-hoc browser sessions on someone’s laptop.

Dedicated tenant or VPC

Fit
Higher-control customers that need stronger isolation, residency choices, private adapters, custom policy, and tenant-specific operational boundaries.
Shape
Separate cloud project or network boundary, isolated Auth/Firestore/Storage resources, private queues, controlled support access, and customer-managed credentials.
Boundary
Treat as a deployment pattern to validate per customer requirements, compliance posture, provider availability, and operational cost.

Customer-run adapters

Fit
Organizations that want The Bureau control plane but need credentials, PA machines, private APIs, or sensitive tools to stay inside their environment.
Shape
Bureau web/API state connects to customer-operated daemons, workers, PA machines, adapters, or queues through scoped grants and auditable callbacks.
Boundary
Good for keeping sensitive execution close to the customer while still returning Case proof, receipts, and decisions to the Bureau record.