About

Built for the way Wyrd Tech does outreach.

Cold OS is an in-house CRM that gives Wyrd Tech operators a system they own end to end — schema, workflow, audit trail, and operator UX. Instead of stitching together someone else's tools, we run the pipeline on infrastructure we control and on a surface shaped to how the team actually works.

Principles

Self-hosted, sudo-gated.

Every secret read or write is sudo-gated. Decryption never crosses the wire. The data stays on infrastructure we own.

Outbox-first by design.

Every external write goes through outbox_actions — Apollo, Twilio, Meta, Gmail. No surprise side-effects, no leaked partial state.

Federation, not duplication.

WyrdOS UIDs let Cold OS fit alongside other Wyrd Tech apps without duplicating identity or audit logs.

API-first, even internally.

The 17-resource public REST API and OpenAPI 3.1 schema are the same surface our internal pages use. No private back doors.

What's behind the curtain

Stack

Next.js 16, self-hosted Supabase (Postgres 15), TypeScript end to end, Inter + Inter Tight + Geist Mono.

Async

60-second sequence tick. 30-second outbox drainer. Sub-minute exit latency on replies, bounces, and meetings.

Channels

Gmail send + Pub/Sub reply ingest. Twilio agent-first calls. Meta + Twilio WhatsApp. Google Calendar write flow.

Audit

Every action recorded. WyrdOS audit forwarder pushes events upstream every 30 seconds.

Schema

47 public tables, RLS on every one. Migrations only. Custom fields on contacts and lists.

Security

AES-256-GCM encryption at rest. HMAC-signed tracking tokens. RFC 8058 unsubscribe.