Yumi gitea/yumi/yumi ↗

Yumi — your work, remembered.

The secure AI workspace. This is the live portal: every link below works, every document downloads as Markdown, the admin console is reachable.

8
subsystems
13
docs
4
live apps
1
leak closed

Live apps — click to open

Admin portal
Users · organizations · Hindsight banks · subscriptions · connectors · audit.
Open
Product showcase
The unified letterbox product page — pillars, surfaces, architecture.
Open
Brand
Logo mark + wordmark on light and dark.
Openlogo.svgicon.svg
Design tokens
The single letterbox source every surface consumes.
tokens.cssREADME.md

Documents — view or download (.md)

Master doc
Everything: design, naming, CUA, gaps, the 7-phase TEE plan, roadmap.
ViewDownload
Security
Leak closure: what was fixed, the hub broker, remaining live steps.
ViewDownload
Architecture
How the consolidated pieces fit + running-locally path.
ViewDownload
Roadmap
P0 done → P1 identity → P2 complete → P3 monetize → P4 confidential.
ViewDownload
Workspace map
One-page index of every artifact + status.
ViewDownload
Approvals
Pending permissions/credentials/decisions.
ViewDownload
Provenance
Source path + commit + dirty-state per subsystem.
ViewDownload
Agent guide
CLAUDE.md — how to work in this workspace.
ViewDownload
Overview README
Workspace overview.
ViewDownload
SSO runbook
Google · Apple · Microsoft registration steps.
ViewDownload
@yumi/hub
The unified backend — identity + per-user memory broker.
ViewDownload
Admin deploy
SSO-secured console deploy manifest + runbook.
ViewDownload
Design system
The letterbox contract + adoption status.
ViewDownload

Components (consolidated stack)

Desktop
Electron, macOS/Windows · apps/open-cowork-mmd
README
Web / PWA
Shared API host · apps/mmd-cowork-mobile
README
Core engine
@mmd/cowork-core
READMEArch
Config
@mmd/cowork-config
README
M365
M365 manifests · mmd-cowork-m365
README
Office add-in
Outlook/Teams · mmd-cowork-office
README
LLM router
LiteLLM · mmd-llm-gateway → llm.baobab-ts.com
README
Memory
Hindsight (MIT) · services/hindsight
README

Status — real, current

Done
  • ✓
    Cross-user Hindsight leak closed — mobile + office fail-closed; hub broker 4/4 tests, live 401/403/200
  • ✓
    @yumi/hub unified backend — per-user memory broker, the single chokepoint
  • ✓
    Brand + showcase + admin + tokens
  • ✓
    Gitea yumi/yumi + Shad Owner access
Next / blocked
  • →
    Go live at yumi.flow-master.ai — needs Tailscale up (logged out); DNS + box already answer (404)
  • →
    Desktop per-user PAT exchange
  • →
    Hub SSO middleware + admin backend (P1)
  • ⚙
    yumi Hindsight bank + deploy — kube, from tailnet

Architecture

surfaces  desktop · web/PWA · office · admin        (iOS / Android : P2)
              │  @yumi/hub · @mmd/cowork-core · @mmd/cowork-config  ·  one session every surface
              ▼
   ┌──────────────────┬─────────────────────────┬──────────────────────────┐
   LLM router        Hindsight memory        MCP connectors
   LiteLLM            per-user banks (broker)   M365 · Google · Apple · SAP · storage
   per-user keys      fail-closed isolation   per-user delegated tokens (BFF)
        │                  │                         │
        ▼                  ▼                         ▼
   Z.ai GLM-5.2       banks: personal · org · yumi   SSO: yumi.flow-master.ai (Google/Apple/MS)

Roadmap

P0 · Done
Consolidate
Stack + docs + brand + hub + leak closed
P1
Identity
SSO Google+Apple · yumi bank · live deploy · Windows sign
P2
Complete
iOS · Android · admin backend · connectors · files
P3
Monetize
Billing · subscriptions · lifecycle
P4
Confidential
TEE · GPU-as-a-service · voice · SideQuest
Yumi · FlowMaster · portal · gitea/yumi/yumi