Changelog

10 packages impacted · 17 unique changes · 3 release entries

• - Add the report-only missing_translation static diagnostic to contracts-spec and an optional locale-override argument to the design-system useI18n hook for the en/fr/es readiness program.
• - Unified ContractSpec database runtime: createDatabaseRuntime() preset (pooling, zero-config observability, RLS tenant scoping, AuthOS principal carriage, governed resolvers) plus a typed N+1-safe relational read path, a spec-first generated Drizzle schema, and an SSR prefetch→hydrate bridge. Fully additive.
• - Add factory-stack SSR snapshot/hydration, loader shard scoping, RouteShardManifest, and parity diagnostics extensions for translation catalog sharding + SSR.

3 packages impacted · 4 unique changes · 2 release entries

• - Refresh the AuthOS domain docs to document the production-ready auth architecture (single session authority, identity-rbac authority, MFA, native mobile, multi-surface enforcement) and the explicitly deferred capabilities.
• - Align public i18n docs (translation-runtime library page, i18n setup guide, marketing docs registry) with the createI18nFactory stack; remove examples teaching the deleted createTranslationRuntime engine.

1 packages impacted · 4 unique changes · 2 release entries

• - Extend Managed CompanyOS view-model display copy to full en/fr/es parity, resolved through the bundle translation catalogs with machine identifiers kept canonical.
• - Add an executable provider approval gate for Managed CompanyOS G006 live-source pilot decisions while keeping concrete provider selection approval-gated.

15 packages impacted · 8 unique changes · 2 release entries

• - Ship the BillingOS France invoice-issuance MVP — additive issue/submit/creditNote contracts, persistence ports and redaction-aware observability, a France legal engine (TVA/rounding/gapless numbering/NF203), and a new EN16931/Factur-X provider integration with a fail-closed production PDP.
• - Close the CommunicationOS hexagon and make it EU-sovereign and installable — additive sovereignty + three-state GDPR-erasure contracts, governed persistence with actor-aware RLS, four official channel adapters behind a frozen ChannelAdapter port, a fail-closed governed agent (no auto-send) on Mistral, a one-call runtime factory with self-host install and two verticals, and a governed MCP gateway.

10 packages impacted · 10 unique changes · 3 release entries

• - Make BillingOS money/number formatting locale-correct at every call site by removing the silent en-US fallback from formatCurrency and requiring a locale on PaymentCard.
• - Make usage, cost, budget, replay, and projection evidence first-class across cost tracking, contract operations, AI provider/model/agent/chat runs, Builder workflow replay packets, and safe observability sinks.
• - Envelope-shape the three BillingOS query contract outputs (billing.customers.search, billing.sellable-items.search, billing.tax.compute-breakdown) as QueryResultEnvelope ({ data, versionToken? }) so they are accepted by the canonical data-fetching read path (executeResult) instead of 422-ing on the previous inner-row shape.

5 packages impacted · 4 unique changes · 1 release entry

• - Consolidate observability, tracing, logs, and cost/usage evidence onto one Instrumentation-facade spine; add the evidence-ledger read port, default-on agent telemetry, the managed-companyos ./observability subpath, and operator docs.

6 packages impacted · 4 unique changes · 1 release entry

• - Harden AuthOS for production across api/web/mobile — single session authority, identity-rbac live role/permission authority, native mobile auth, and REST/MCP enforcement parity.

4 packages impacted · 4 unique changes · 2 release entries

• - Implement real live App Store Connect and Google Play read transports plus the under-declared disclosure state.
• - Add the ReviewReady app-submission-readiness module with runtime-driven report, rejection, and admin-rule surfaces.

6 packages impacted · 9 unique changes · 4 release entries

• - Form-like marketing/BillingOS UI renders through ContractSpec FormSpec/OperationSpec bindings as the primary path; bespoke design-system form/pricing control APIs are removed.
• - Introduce ContractSpec-first semantic marketing presentation primitives, serializable runtime descriptors, a design-system renderer registry, and Managed CompanyOS proof adoption.
• - Add the ReviewReady app-submission-readiness contract and event surface to contracts-spec.

1 packages impacted · 2 unique changes · 1 release entry

• - Add prop-driven marketing components (pricing calculator, pricing table, FAQ, testimonial, lead-capture, feature tabs, timeline, trust badges, video, announcement bar) with documented marketing subpath exports.

2 packages impacted · 2 unique changes · 1 release entry

• - Add the `can-help` offline capability-discovery surface (CLI command + workspace service) over a two-tier capability corpus.

2 packages impacted · 2 unique changes · 1 release entry

• - Preserve active marketing locale across web monolith navigation and page content rendering.

0 packages impacted · 0 unique changes · 0 release entries

4 packages impacted · 14 unique changes · 10 release entries

• - Add App Store / Google Play submission-readiness metadata and evidence for the mobile monolith proof shell.
• - Add the /companyos/app-submission-readiness web product proof rendering a runtime-driven readiness report.
• - Internal `force-dynamic` flip + session-resolved persona for `/companyos/integrations/**` carried into Phase 1.

1 packages impacted · 2 unique changes · 1 release entry

• - Add two additive Managed CompanyOS Special Ops operation contracts — specialOps.reviewCard.decide and specialOps.weeklyReport.approve — on the canonical production contracts surface to retroactively govern the already-shipped decideReviewCard and publishWeeklyReport handlers in api-application-monolith. The example special-ops-cockpit package stays a pure fixture demo.

3 packages impacted · 9 unique changes · 5 release entries

• - Add design-system-owned marketing CTA, hero, prose, icon-grid, proof, CTA-band, and landing-page section sequence components; keep bundle.marketing section subpaths as compatibility shims.
• - Add design-system-owned full-page marketing sections and route CompanyOS landing composition through bundle compatibility shims.
• - Add a design-system-owned full-page marketing component foundation and keep bundle.marketing CompanyOS section imports compatible through thin adapters.

3 packages impacted · 8 unique changes · 1 release entry

• - Converge api-library builder/channel/control-plane/webhook/schema hosting into the api-application-monolith Elysia host (AuthOS service principals + Drizzle/RLS); api-library reduced to markdown + webhooks.
• - api-library no longer hosts builder/channel/control-plane/schema or the in-process schedulers; those are served by the monolith.
• - The CONTROL_PLANE_API_CAPABILITY_GRANTS env string is retired; capabilities are projected from the machine principal (identity-rbac).

3 packages impacted · 4 unique changes · 1 release entry

• - Decommission the hosted ContractSpec MCP (api-library /mcp/* and /api/mcp/* docs/cli/ internal/contracts endpoints) and ship two local offline-first stdio MCP servers in the CLI: `contractspec mcp` (knowledge + author tools, fully offline, with a new contracts.create scaffold) and `contractspec mcp --runtime` (fail-closed projection of the consumer's own contracts). bundle.library's MCP builders become transport-agnostic.
• - Hosted MCP endpoints `/mcp/{docs,cli,internal,contracts}` and `/api/mcp/*` on api.contractspec.io are removed with no backward-compatible shim. Use the local CLI stdio servers `contractspec mcp` and `contractspec mcp --runtime`.

17 packages impacted · 3 unique changes · 1 release entry

• - Make the monorepo i18n-ready. Each in-scope package now ships a public `./i18n` subpath with `createI18nFactory`-backed en/fr/es catalogs (real translations), consumed in React via `@lssm-tech/lib.design-system`'s `useI18n`/`LocaleProvider`. No public API removals; every change is additive. Blocking CI gates (hardcoded-string scan, en/fr/es parity, JSX-text/attribute Grit rules, no module-scope translation calls) enforce the contract repo-wide via a shrinking `unmigratedPackages` allowlist.
• - `@lssm-tech/lib.translation-runtime` is retained only for ICU plurals/overrides/SSR edge cases. Prefer `createI18nFactory` from `@lssm-tech/lib.contracts-spec/translations` for all new code; consumers reaching for the runtime should justify the ICU/override/SSR need in the PR.

1 packages impacted · 2 unique changes · 1 release entry

• - Add the BillingOS pre-engine admission gate (submitBillingMutation) — the single safe caller of the data-fetching engine's mutate(), fail-closed for every approval-gated and unknown BillingActionKind — and make InvoiceWorkspace QueryState-aware via the design-system DataViewList plus a pending-approval affordance.