SOMA / LAWRENCE
A clear path to opening.
Working local foundations and explicit launch gates. Boulevard read-only export connected; production writes remain locked.
Open production blockers
Refreshed by npm run readiness:blockers. Values and secrets are never rendered.
- Shopify Admin API not connected: auth-invalid
- Square credentials/location/webhook keys missing or incomplete
- Production app runtime not yet deployed inside AWS VPC with staging database secret
- Production identity/session secrets not connected
- Messaging provider not selected/connected
- Legal document/signature provider not selected/connected
- Counsel-approved waiver/consent/membership agreement final text not installed
- Native iOS/iPad wrapper/signing/physical-device acceptance not complete
- Boulevard customer/payment/appointment migration scope and cutover not approved
Boulevard export evidence: 47 services · 7 memberships · 42 products · 22 staff.
Shopify read-only probe: auth-invalid (401).
Shopify test site: test-theme-ready · Horizon · https://xzqrsc-8e.myshopify.com?preview_theme_id=190343053678. Live theme writes are blocked.
docs/production-blockers.md is the editable source doc.
Local API session
Exercise server role binding. Selecting a staff role does not authenticate a person.
Soma Assistant · Hermes bridge
Accountable team: Engineering
cheap-hermes-bridge
Assistant is live in the Mac app and routes manager requests through Soma proposal tools.
Reads: fixtures · writes: proposals
- Cheap intent classifier allowed only behind server boundary
- Hermes tool bridge remains read/dry-run/proposal-only
- Separate human approval for any proposed changes
PostgreSQL repository
Accountable team: Engineering
missing-url
No production DATABASE_URL is configured; current data is fixture/local only.
Reads: disabled · writes: disabled
- Provision managed Postgres
- Apply reviewed migrations/RLS
- Restore and rollback rehearsal
Identity & sessions
Accountable team: Engineering
mock
Reads: fixtures · writes: disabled
- Verified staff identity and phone provider
- Secure durable sessions, rate limits and revocation
- Private staging access gateway
Square · PC / Soma Theory LLC
Accountable team: Finance
credentials-present
Square production credentials are present for Soma Theory LLC; writes remain approval-gated.
1 configuredEntities · 0 webhookConfigured
Reads: read-only · writes: proposals
- Verify separate entity settlements
- Managed terminal and approved charge/refund orchestration
- Approve medical membership allocations
Shopify storefront
Accountable team: Commerce
auth-invalid
401 Unauthorized · refresh Admin API credentials through the approved secret store
Reads: disabled · writes: disabled
- Approved read-only scopes
- Reconciled product and order mapping
- Separate approval for storefront writes
Boulevard sunset/migration import
Accountable team: Operations
sunset-source-loaded
Boulevard catalog export is loaded for migration only; live scheduling now uses Soma OS scheduler
1 locations · 47 services · 7 memberships · 42 products · 22 staffNoContact · 1 addonMapEntries · 0 usableAddonMaps
Reads: local-export · writes: disabled
- Use local export only as a migration source
- Replace live schedule with Soma scheduler
- Final customer/payment/appointment migration sign-off
Legal docs · waivers & agreements
Accountable team: Operations
mock
Reads: fixtures · writes: proposals
- Approved agreement text and versions
- Identity-bound signatures and retention
- Guest document workflow
SMS / email / WhatsApp
Accountable team: Operations
locked-consent-gated
Hermes messaging environment reported present; provider validation, explicit approval and channel consent required for every live send
Reads: disabled · writes: proposals
- Channel-specific consent and opt-out
- Approved templates and delivery receipts
- Retry and deduplication policy
Clinical records
Accountable team: Clinical lead
locked
Reads: disabled · writes: disabled
- Licensed identity and approved protocols
- Separate encrypted clinical storage
- Compliance and retention review
Room iPads & equipment
Accountable team: Facilities
locked
Reads: disabled · writes: disabled
- Device inventory and room VLAN verification
- Physical operating and outage procedures
- On-device iPad acceptance test
Apple iPhone / iPad apps
Accountable team: Engineering
pwa-ready-native-deferred
PWA manifest, icons and offline shell ready; native packaging and physical-device acceptance deferred
Reads: fixtures · writes: disabled
- Install from Safari over approved HTTPS
- Verify iPhone/iPad on-device behavior
- Native signing, wrapper and distribution deferred
Environment requirements
Presence only; values are never rendered. Production configuration is not validated or used.
| Variable | Purpose | Required for | State |
|---|---|---|---|
SOMA_ADAPTER_MODE | Only mock is accepted by this build | local | Mock default accepted |
SOMA_ASSISTANT_MODE | Soma Assistant · Hermes bridge | production | Not configured |
SOMA_ASSISTANT_MODEL | Soma Assistant · Hermes bridge | production | Not configured |
SOMA_ASSISTANT_PROVIDER | Soma Assistant · Hermes bridge | production | Not configured |
SOMA_ASSISTANT_TIMEOUT_MS | Soma Assistant · Hermes bridge | production | Not configured |
HERMES_ASSISTANT_ENDPOINT | Soma Assistant · Hermes bridge | production | Not configured |
DATABASE_URL | PostgreSQL repository | production | Not configured |
IDENTITY_ISSUER | Identity & sessions | production | Not configured |
SESSION_SECRET | Identity & sessions | production | Not configured |
SQUARE_ENVIRONMENT | Square · PC / Soma Theory LLC | production | Present · unvalidated / unused |
SQUARE_PC_ACCESS_TOKEN | Square · PC / Soma Theory LLC | production | Not configured |
SQUARE_PC_LOCATION_ID | Square · PC / Soma Theory LLC | production | Not configured |
SQUARE_LLC_ACCESS_TOKEN | Square · PC / Soma Theory LLC | production | Present · unvalidated / unused |
SQUARE_LLC_LOCATION_ID | Square · PC / Soma Theory LLC | production | Present · unvalidated / unused |
SQUARE_WEBHOOK_SIGNATURE_KEY | Square · PC / Soma Theory LLC | production | Not configured |
SHOPIFY_STORE_DOMAIN | Shopify storefront | production | Not configured |
SHOPIFY_API_VERSION | Shopify storefront | production | Not configured |
SHOPIFY_ADMIN_API_TOKEN | Shopify storefront | production | Not configured |
BOULEVARD_BUSINESS_ID | Boulevard sunset/migration import | production | Not configured |
BOULEVARD_API_KEY | Boulevard sunset/migration import | production | Not configured |
BOULEVARD_SECRET_KEY | Boulevard sunset/migration import | production | Not configured |
BOULEVARD_PRODUCTION_BUSINESS_ID | Boulevard sunset/migration import | production | Not configured |
BOULEVARD_PRODUCTION_API_KEY | Boulevard sunset/migration import | production | Not configured |
BOULEVARD_PRODUCTION_SECRET_KEY | Boulevard sunset/migration import | production | Not configured |
DOCUMENTS_PROVIDER | Legal docs · waivers & agreements | production | Not configured |
MESSAGING_PROVIDER | SMS / email / WhatsApp | production | Not configured |
WHATSAPP_ACCESS_TOKEN | SMS / email / WhatsApp | production | Not configured |
WHATSAPP_PHONE_NUMBER_ID | SMS / email / WhatsApp | production | Not configured |
WHATSAPP_WEBHOOK_VERIFY_TOKEN | SMS / email / WhatsApp | production | Not configured |
SMS_PROVIDER_API_KEY | SMS / email / WhatsApp | production | Not configured |
SMS_SENDER_ID | SMS / email / WhatsApp | production | Not configured |
Catalog sign-off
Mapped booking prices and durations come from Boulevard; Soma benefits and activation require sign-off.
NAD and peptides are unbookable placeholders until provider workflow and compliance are approved.