ContractSpecContractSpec

Start with OSS

Back to changelog index

0.3.20

Jul 16, 2026 · 13 packages · 4 unique changes · 2 release entries

integrationslibs

This release affects the integrations, sharedLibs familyies.

Run contractspec connect adoption resolve --family integrations to see how it impacts your project.

Release summaries

  • provider-runtime-mode-taxonomy

    Keep Builder provider credential ownership modes distinct from runtime target modes.

    maintainer

    Provider-runtime resolvers now filter credential ownership tokens out of runtime target mode arrays and document the separate mode taxonomies.

    integrator

    Integrators can keep BYOK and ephemeral credential ownership metadata separate from managed/local/hybrid runtime target selection without accidental managed fallback.

  • release-provenance-metadata-fix

    Restore npm provenance-safe publishing for the public integration packages by declaring repository metadata and failing release discovery before publish when it is missing.

    maintainer

    Release discovery now blocks publishable manifests that omit repository metadata, and the affected integration packages declare the canonical GitHub repository URL and directory before npm provenance is requested.

    integrator

    Integrator release automation can republish the affected integration packages with npm provenance enabled without hitting the empty repository URL validation failure.

    customer

    This patch only corrects publish metadata for the affected integration packages; their runtime APIs and behavior are unchanged.

Upgrade steps

  • Keep credential ownership separate from runtime target modes

    auto

    Continue sending BYOK/local/ephemeral ownership through provider auth metadata, and send only managed/local/hybrid through runtime target mode fields.

    Packages: @lssm-tech/lib.provider-runtime

    1. Use `authMode` for credential ownership values such as `byok` or `ephemeral`.
    2. Use `supportedRuntimeModes`, runtime targets, and capability handshakes only for `managed`, `local`, or `hybrid` runtime target modes.

  • Republish the affected integration packages with provenance enabled

    manual

    Pull the patch releases for the affected integration packages or rerun the release job after the metadata fix lands.

    Packages: @lssm-tech/integration.builder-telegram, @lssm-tech/integration.builder-voice, @lssm-tech/integration.builder-whatsapp, @lssm-tech/integration.provider-claude-code, @lssm-tech/integration.provider-codex, @lssm-tech/integration.provider-copilot, @lssm-tech/integration.provider-gemini, @lssm-tech/integration.provider-local-model, @lssm-tech/integration.provider-stt, @lssm-tech/integration.runtime-hybrid, @lssm-tech/integration.runtime-local, @lssm-tech/integration.runtime-managed

    1. Upgrade the affected integration packages to the patched versions once they are published.
    2. Re-run the release workflow with npm provenance enabled and verify release discovery completes before the publish step starts.

Unique release changes

  • - Pull the patch releases for the affected integration packages or rerun the release job after the metadata fix lands.

    12 packages · 12 occurrences

  • - Restore npm provenance-safe publishing for the public integration packages by declaring repository metadata and failing release discovery before publish when it is missing.

    12 packages · 12 occurrences

  • - Continue sending BYOK/local/ephemeral ownership through provider auth metadata, and send only managed/local/hybrid through runtime target mode fields.

    1 packages · 1 occurrences

  • - Keep Builder provider credential ownership modes distinct from runtime target modes.

    1 packages · 1 occurrences

Impacted packages

  • @lssm-tech/integration.builder-telegram

    Layer: integrations · 2 changes

  • @lssm-tech/integration.builder-voice

    Layer: integrations · 2 changes

  • @lssm-tech/integration.builder-whatsapp

    Layer: integrations · 2 changes

  • @lssm-tech/integration.provider-claude-code

    Layer: integrations · 2 changes

  • @lssm-tech/integration.provider-codex

    Layer: integrations · 2 changes

  • @lssm-tech/integration.provider-copilot

    Layer: integrations · 2 changes

  • @lssm-tech/integration.provider-gemini

    Layer: integrations · 2 changes

  • @lssm-tech/integration.provider-local-model

    Layer: integrations · 2 changes

  • @lssm-tech/integration.provider-stt

    Layer: integrations · 2 changes

  • @lssm-tech/integration.runtime-hybrid

    Layer: integrations · 2 changes

  • @lssm-tech/integration.runtime-local

    Layer: integrations · 2 changes

  • @lssm-tech/integration.runtime-managed

    Layer: integrations · 2 changes

  • @lssm-tech/lib.provider-runtime

    Layer: libs · 2 changes