Back to changelog index

0.0.0

Jun 07, 2026 · 4 packages · 14 unique changes · 10 release entries

apps

This release affects the solutions family.

Run contractspec connect adoption resolve --family solutions to see how it impacts your project.

Release summaries

  • cross-platform-mobile-demo-f7

    F7 — Final deliverable of the 37-task cross-platform plan. Add F3/F6 sections to AGENTS.md, create public/llms.txt, and add cross-platform ADR for the CompanyOS + CommunicationOS migration.

    maintainer

    AGENTS.md gains F3 (cross-platform analytics stitching) and F6 (performance budgets) sections documenting the FNV-1a hash contract, BSP constants parity, cold-start budget enforcement, and Maestro/view-model validation approach. public/llms.txt is a new AI-consumable reference file covering all v1 surfaces, personas, capability gating, PostHog schema, and privacy invariants. docs/adr/2026-05-19-cross-platform-companyos-communicationos-pillars.md records D1-D6 architectural decisions with rationale and alternatives considered.

    integrator

    Agents and LLMs working in this package should consult public/llms.txt as the primary orientation file. AGENTS.md is the full developer guide.

  • docs-example-runtime-preview

    Wrap UI-backed docs example previews in the template runtime provider so public example pages prerender with the same runtime boundary as sandbox and template previews.

    maintainer

    The `/docs/examples/<key>` inline preview section now initializes `TemplateRuntimeProvider` for examples with inline runtime UI while preserving lightweight fallback previews for non-UI examples.

    customer

    Public docs pages for UI-backed examples, including `analytics-dashboard`, now prerender successfully instead of failing on missing template runtime context.

  • integration-hub-uplift-phase-1-app

    Internal `force-dynamic` flip + session-resolved persona for `/companyos/integrations/**` carried into Phase 1.

    integrator

    All `/companyos/integrations/**` pages are now `force-dynamic` and resolve `RoleMorphProjection` per-request from the auth session; client-side persona switching is removed.

    maintainer

    New `runtime/role-morph-resolver.ts` + `role-morph-cache-key.ts` (with `hashRoleMorph` PII-exclusion guarantee) own per-request persona projection. SSR catalog uses `unstable_cache` keyed by the hash with `revalidateTag('integrations')` invalidation.

  • integration-hub-uplift-phase-2-app

    Add new per-integration tab routes and update existing integration routes in web-application-monolith.

    integrator

    Seven new route pages under /companyos/integrations/[integrationId]/ (connections, syncs, credentials, secrets, config, audit, and the tab layout shell). All pages use force-dynamic with session-resolved RoleMorphProjection. No route removals or renames.

    maintainer

    Credentials and secrets pages are security-class (uncached, streaming via Suspense). All new pages emit surface_viewed + role_morph_resolved signals. No DEFAULT_ROLE / TENANT_ID / CORRELATION_ID hardcoding in any integration route — all session-derived.

  • managed-companyos-web-theme-hardening

    Wire app-shell runtime (globals.css + cockpit tokens, providers, layout rewrite, global state routes) and add three enforcement tests for the managed-companyos web monolith.

    maintainer

    App shell now has a full CSS pipeline (tailwind + tw-animate-css + cockpit slate/cyan/amber tokens in globals.css), env-gated PostHogProvider (no-op when NEXT_PUBLIC_POSTHOG_KEY is unset, SSR-safe), ThemeProvider (dark-only S1 — defaultTheme="dark", no enableSystem, dark class applied by next-themes at hydration; :root tokens are already cockpit-dark to minimise flash), global state routes (error.tsx Client Component + loading.tsx + not-found.tsx using design-system primitives), and three enforcement tests. AGENTS.md and README.md updated with Theme & runtime wiring section. No public-surface change; bundle untouched.

    integrator

    No bundle or public-surface change. The app renders with full Tailwind CSS theme. PostHog instrumentation is active only when NEXT_PUBLIC_POSTHOG_KEY is set. S2/S3 follow-ups (design-system CSS token export, enableSystem re-enable, CSP, page-color rewrites) documented in AGENTS.md.

  • mobile-monolith-app-submission-readiness

    Add App Store / Google Play submission-readiness metadata and evidence for the mobile monolith proof shell.

    maintainer

    The Expo mobile proof now records bundle identifiers, legal review links, iOS privacy manifest posture, Android permission boundaries, and credential-free EAS submit expectations in source-controlled readiness evidence.

    integrator

    Store submission metadata is read-first and deterministic; production App Store Connect / Google Play credentials remain external to the repository.

  • reviewready-web-proof

    Add the /companyos/app-submission-readiness web product proof rendering a runtime-driven readiness report.

    customer

    A new /companyos/app-submission-readiness route demonstrates the ReviewReady readiness report end-to-end. The rendered report (findings, score, decision, per-store checklists) is produced by the runReadinessAudit engine, not hardcoded.

    maintainer

    The route is a thin App Router shell composing @lssm-tech/module.app-submission-readiness with runtime-driven fixtures, statically rendered, emitting CompanyOS behavior signals for the new app_submission_readiness surface with no secret leakage.

  • special-ops-capability-db-schema

    Add Special Ops capability graph and workspace DB tables (additive)

    maintainer

    Add Special Ops capability graph and workspace DB tables (additive)

    integrator

    Add Special Ops capability graph and workspace DB tables (additive)

  • special-ops-workspace-capability-repositories

    Add WorkspaceCapabilityRepository interface + drizzle and in-memory adapters for workspace and capability graph tables

    maintainer

    Add WorkspaceCapabilityRepository interface + drizzle and in-memory adapters for workspace and capability graph tables

    integrator

    Add WorkspaceCapabilityRepository interface + drizzle and in-memory adapters for workspace and capability graph tables

  • web-landing-loop-d-e2e

    Playwright E2E infrastructure + CommunicationOS draft-approve flow test (Loop D / D3).

    maintainer

    Web landing now has Playwright E2E infrastructure with a CommunicationOS draft-approve flow test.

Upgrade steps

  • Review mobile proof submission metadata before uploading builds

    manual

    Confirm the legal pages are live, inspect generated PrivacyInfo.xcprivacy after prebuild/EAS, and keep submission credentials in EAS or CI secret stores.

    Packages: @lssm-tech/app.mobile-monolith

    1. Confirm https://contractspec.io/privacy, /terms, and /support are live.
    2. Run an Expo prebuild or EAS build and inspect the generated iOS privacy manifest.
    3. Add any App Store Connect-reported third-party SDK required-reason APIs before upload promotion.
    4. Keep App Store Connect and Google Play credentials out of source.
  • View the app-submission-readiness product proof

    manual

    Open /companyos/app-submission-readiness to see the runtime-driven readiness report.

    Packages: @lssm-tech/app.web-application-monolith

    1. Navigate to /companyos/app-submission-readiness in the web monolith.
    2. Confirm the report findings, score, decision, and per-store checklists render.
  • Confirm no `/companyos/integrations` route declares `force-static`

    manual

    CI guard in Phase 3 asserts all routes under `/companyos/integrations/**` are `force-dynamic`.

    Packages: @lssm-tech/app.web-application-monolith

  • Review Special Ops Capability Db Schema adoption

    manual

    Add Special Ops capability graph and workspace DB tables (additive)

    Packages: @lssm-tech/app.api-application-monolith

    1. Review the paired changeset summary and update consumers only if they use the affected package surface.
  • Review Special Ops Workspace Capability Repositories adoption

    manual

    Add WorkspaceCapabilityRepository interface + drizzle and in-memory adapters for workspace and capability graph tables

    Packages: @lssm-tech/app.api-application-monolith

    1. Review the paired changeset summary and update consumers only if they use the affected package surface.
  • Set NEXT_PUBLIC_POSTHOG_KEY to enable PostHog

    auto

    PostHog initialisation is env-gated and produces no side effects when the key is absent.

    Packages: @lssm-tech/app.web-application-monolith

    1. Add NEXT_PUBLIC_POSTHOG_KEY=<your-key> to the deployment environment to enable PostHog session tracking.
    2. When enabled, add "connect-src https://eu.i.posthog.com" to your Content-Security-Policy header (S2 concern — see AGENTS.md).
    3. No action required to disable PostHog — simply omit the env var.

Unique release changes

  • - Add Special Ops capability graph and workspace DB tables (additive)

    1 packages · 2 occurrences

  • - Add WorkspaceCapabilityRepository interface + drizzle and in-memory adapters for workspace and capability graph tables

    1 packages · 2 occurrences

  • - Add App Store / Google Play submission-readiness metadata and evidence for the mobile monolith proof shell.

    1 packages · 1 occurrences

  • - Add new per-integration tab routes and update existing integration routes in web-application-monolith.

    1 packages · 1 occurrences

  • - Add the /companyos/app-submission-readiness web product proof rendering a runtime-driven readiness report.

    1 packages · 1 occurrences

  • - CI guard in Phase 3 asserts all routes under `/companyos/integrations/**` are `force-dynamic`.

    1 packages · 1 occurrences

  • - Confirm the legal pages are live, inspect generated PrivacyInfo.xcprivacy after prebuild/EAS, and keep submission credentials in EAS or CI secret stores.

    1 packages · 1 occurrences

  • - F7 — Final deliverable of the 37-task cross-platform plan. Add F3/F6 sections to AGENTS.md, create public/llms.txt, and add cross-platform ADR for the CompanyOS + CommunicationOS migration.

    1 packages · 1 occurrences

  • - Internal `force-dynamic` flip + session-resolved persona for `/companyos/integrations/**` carried into Phase 1.

    1 packages · 1 occurrences

  • - Open /companyos/app-submission-readiness to see the runtime-driven readiness report.

    1 packages · 1 occurrences

  • - Playwright E2E infrastructure + CommunicationOS draft-approve flow test (Loop D / D3).

    1 packages · 1 occurrences

  • - PostHog initialisation is env-gated and produces no side effects when the key is absent.

    1 packages · 1 occurrences

  • - Wire app-shell runtime (globals.css + cockpit tokens, providers, layout rewrite, global state routes) and add three enforcement tests for the managed-companyos web monolith.

    1 packages · 1 occurrences

  • - Wrap UI-backed docs example previews in the template runtime provider so public example pages prerender with the same runtime boundary as sandbox and template previews.

    1 packages · 1 occurrences

Impacted packages

  • @lssm-tech/app.api-application-monolith

    Layer: apps · 2 changes

  • @lssm-tech/app.mobile-monolith

    Layer: apps · 1 changes

  • @lssm-tech/app.web-application-monolith

    Layer: apps · 2 changes

  • @lssm-tech/app.web-landing

    Layer: apps · 1 changes