Back to changelog index

7.1.0

May 16, 2026 · 24 packages · 27 unique changes · 10 release entries

appsbundlesintegrationslibsmodules

This release affects the contracts, integrations, sharedLibs, solutions familyies.

Run contractspec connect adoption resolve --family contracts to see how it impacts your project.

Release summaries

  • adaptive-dataview-command-center

    Add adaptive DataView management-shell contracts and command-center proof metadata.

    maintainer

    DataView specs can now declare management-shell header, toolbar, selection, row-card, detail-panel, pagination, action placement/boundary, field-role, personalization, and RoleMorph references.

    integrator

    Host applications receive additive metadata for command-center DataView layouts while retaining ownership of CRUD side effects, modal state, validation, and destructive confirmations.

  • adaptive-dataview-management-contract

    Add optional DataView management-shell metadata for adaptive command-center layouts.

    maintainer

    DataView contracts now include additive management-shell metadata for semantic field roles, action placement, toolbar/header/selection/detail-panel, and adaptive binding hints.

    integrator

    Integrators can describe command-center layouts and action boundaries in metadata while keeping application behavior host-owned.

  • adoption-aware-release-pipeline

    Adoption-aware release pipeline with accumulating release index, per-version detail files, CLI changelog list/view commands, and web changelog version pages.

    maintainer

    Release build now syncs adoption catalogs, writes pending upgrades, and produces an accumulating release index with per-version detail files. CLI changelog commands (list/view) consume the generated index.

    integrator

    The `after-release-build` adoption hook is available in CI and local builds. Adoption catalog entries are now enriched from release index data.

    customer

    Web changelog now supports per-version detail pages with package breakdown, migration instructions, upgrade steps, and deprecation notices.

  • agentic-communication-command-inbox

    Add fail-closed agentic interaction and CommunicationOS command-inbox release evidence across contracts, runtime, module, examples, and agent-facing docs.

    maintainer

    Maintainers get a validation matrix for the subpath-only AIP safety surface, command-inbox runtime projection, module facade, focused CommunicationOS proof, and Operating Cockpit CompanyOS bridge proof.

    integrator

    Integrators can adopt message-originated command evidence without granting send, credential, shell, or high-impact CompanyOS execution authority.

    agent

    Agents must treat command-inbox items as non-executing evidence and keep blocked signals fail-closed until an external approval path acts.

  • contracts-spec-loop-d-operation-aliases

    Loop D D4 — `@lssm-tech/lib.contracts-spec` now supports `meta.aliases?: readonly string[]` on operations. `OperationSpecRegistry.get()` falls back to alias lookup when the canonical key misses. Future namespace migrations can ship as additive instead of BREAKING.

    maintainer

    Added `aliases?: readonly string[]` to `OperationSpecMeta`. Overrode `OperationSpecRegistry.get()` to fall back to alias lookup on canonical-key miss. Direct matches retain precedence — aliases never shadow registered operations. 6 new tests in `operations/operation-aliases.test.ts` cover the regression baseline, alias resolution, version filtering, and the precedence rule. Full pre-existing test sweep across 1715 tests is zero-regression.

    integrator

    To soften a future namespace migration, list the legacy keys in `meta.aliases` on the new contract. Registry lookups by the legacy key will resolve to the new operation, letting downstream consumers migrate at their own pace. No changes required for operations that don't migrate.

  • contractspec-i18n-runtime

    Add a ContractSpec-native production-grade translation runtime and optional i18next adapter.

    maintainer

    Translation specs now keep stable bundle identity separate from locale variants while the runtime owns formatter-backed ICU resolution, fallback chains, overrides, diagnostics, async loading, SSR snapshots, and optional downstream i18next projection.

    integrator

    Integrators should use the production translation runtime for server, React, React Native, and CLI resolution, and use the i18next subpath only as a downstream adapter with caller-owned ICU formatting configuration.

    customer

    Multilingual surfaces can now rely on BCP 47 locale variants, ICU formatting, deterministic SSR snapshots, and safer migration away from locale-suffixed translation bundle keys.

  • database-mutation-docs-llms

    Align database mutation docs, release-capsule guidance, and LLM-facing surfaces around governed domain-command writes.

    maintainer

    Release authors now have an explicit database mutation checklist covering contract/provider separation, domain-command authority, managed/BYOK posture, and LLM regeneration evidence.

    integrator

    Contracts-spec docs identify portable governed mutation descriptors while provider-database docs identify the adapter-owned SQL/Drizzle execution boundary.

    customer

    Database write guidance now emphasizes approved domain-command envelopes, idempotency, audit/replay evidence, and managed/BYOK production posture before adapters execute writes.

  • pioneer-ai-self-improvement

    Add vendor-neutral AI self-improvement contracts and a mock-first Pioneer adapter.

    maintainer

    Maintainers get a thin AI-improvement evidence/policy envelope, package-owned bridge helpers, Connect evidence, and a targeted Pioneer adapter boundary.

    integrator

    Integrators can connect AI-improvement routes, evidence, policy decisions, promotion gates, rollback, and Pioneer job receipts without taking a dependency on Pioneer-specific core types.

    customer

    AI improvement workflows are safer by default because vendor export, auto-apply, and learning are controlled by explicit gates and replay evidence.

  • rich-code-diff-surfaces

    Add governed rich code/diff surfaces with references, redaction, RoleMorph, and personalization support. Historical wave-0 entry; the legacy CodeBlock/DiffBlock/ObjectReferenceHandler surfaces are superseded by the rich-reference foundation (see `rich-reference-breaking-release`).

    maintainer

    Historical wave-0 introduction of `rich-content`, `CodeBlock`, `DiffBlock`, `surface-runtime/rolemorph`, and `personalization/rich-code-preferences`. Superseded by the rich-reference foundation (this is kept for release-history continuity).

  • rich-reference-foundation

    Canonical RichReference subpath + ReferenceRuntime (split) + canonical serializer + detector + reference.resolve/detail queries + REST/GraphQL/MCP adapter wirings + S-9 agent surface (markdown envelope, agent-export passthrough, MCP tool descriptors, delegated/agent subject modes).

    maintainer

    Schema-first `defineReferenceKind` API (required `sensitiveFields`), process-global `ReferenceKindRegistry`, HMAC-signed `DenialToken`, four governance ports, six built-in kinds, canonical serializer, server-side detector with idempotent SHA-256 cache, strict-passthrough `toAgentJson`, symmetric markdown envelope. No runtime side-effects on import.

    integrator

    Import `@lssm-tech/lib.contracts-spec/rich-reference` for the foundation, `@lssm-tech/integration.runtime/rich-reference/{wire-rest,wire-graphql,wire-mcp}` for composition roots, and `@lssm-tech/lib.authos-runtime/subject/{agent,delegated}` for subject modes.

Migration guide

  • Import agentic controls from the explicit subpath

    Required

    AIP mapping controls are opt-in safety contracts, not root-barrel exports.

    1. Import AIP controls from `@lssm-tech/lib.contracts-spec/agentic-interaction`.
    2. Do not add agentic-interaction to the contracts-spec root barrel.
    3. Treat production sends, credentials, arbitrary shell execution, and CompanyOS high-impact bypass signals as blocked or approval-required before any runtime executes work.
  • Route message-originated commands through the command inbox

    Required

    CommunicationOS commands persist as review evidence with `canExecute: false`.

    1. Use `createCommunicationCommandInboxItem` from `@lssm-tech/lib.communication-runtime/command-inbox` or the module compatibility subpath.
    2. Read `item.status`, `item.aipControlRefs`, and `item.companyOsBridge` as review evidence only.
    3. Keep outbound sends and CompanyOS high-impact execution behind explicit human/policy approval outside the command-inbox packet.
  • Add `aliases` to operation meta when renaming a key

    Aliases are opt-in. Add them only when you're renaming an operation's canonical key and want consumers to keep working without code changes.

    1. On the renamed operation, set `meta.aliases: ['old.key.name']`.
    2. Document the alias in your changeset so consumers can drop it on the next major after they've migrated their direct callers.
    3. Avoid alias→alias chains: aliases should always point at a current canonical key, not at another alias.
  • Separate stable bundle keys from locale variants

    Prefer `meta.key: "bundle.messages"` with `locale: "fr-FR"` over stable keys that encode locale suffixes.

    1. Move locale identity into `TranslationSpec.locale`.
    2. Keep fallback declarations on locale variants through `fallback` or `fallbacks`.
    3. Re-run translation validation after migration.
  • Configure ICU formatting when rendering through i18next

    The i18next adapter exports ContractSpec ICU messages intact and does not make i18next canonical.

    1. Import adapter helpers from `@lssm-tech/lib.translation-runtime/i18next`.
    2. Initialize a caller-owned i18next instance with generated resources and `keySeparator: false`.
    3. Configure an ICU-capable i18next format plugin before rendering ICU plural/select/selectordinal messages through i18next.
  • Keep database writes behind governed domain commands

    Treat portable mutation descriptors as domain-command envelopes and execute them only through provider adapters that enforce policy, idempotency, audit, replay, and expected write-set evidence.

    1. Define portable read/write descriptors in contracts-spec without importing Drizzle or provider runtimes.
    2. Bind `database.mutation.execute@2.0.0` descriptors to the owning domain command before provider execution.
    3. Execute SQL/Drizzle work through `@lssm-tech/integration.provider-database/governed-mutation` or another adapter with equivalent governance hooks.

Upgrade steps

  • Adopt adaptive DataView command-center metadata

    assisted

    Use the new additive DataView metadata to describe management-shell layouts and host-owned action boundaries.

    Packages: @lssm-tech/lib.contracts-spec, @lssm-tech/lib.design-system, @lssm-tech/lib.personalization, @lssm-tech/lib.surface-runtime, @lssm-tech/example.agent-workflow-command-center

    1. Review DataView management-shell metadata before enabling command-center layouts.
    2. Keep host-owned side effects, modal state, validation, and destructive confirmation flows outside the metadata layer.
  • Describe DataView management shells with additive metadata

    assisted

    Use optional DataView management-shell fields to document adaptive command-center layouts without changing existing DataView contracts.

    Packages: @lssm-tech/lib.contracts-spec

    1. Add management-shell metadata only where host UI needs command-center hints.
    2. Keep CRUD side effects and destructive confirmation flows in host applications.
  • Verify command-inbox release proof

    assisted

    Run the focused validation matrix before publishing packages or public docs.

    Packages: @lssm-tech/lib.contracts-spec, @lssm-tech/lib.communication-spec, @lssm-tech/lib.communication-runtime, @lssm-tech/module.communication-os, @lssm-tech/example.communication-os, @lssm-tech/example.companyos-communicationos-operating-cockpit, @lssm-tech/app.web-landing

    1. Run targeted lint on the modified contract/runtime/module/example/docs files.
    2. Run communication-spec and communication-runtime tests/typechecks.
    3. Run module.communication-os tests/typecheck.
    4. Run focused CommunicationOS and Operating Cockpit example tests/typechecks.
    5. Regenerate or verify `/llms*` guidance after README updates.
  • Adopt the ContractSpec translation runtime for production surfaces

    manual

    Use runtime instances or snapshots instead of legacy simple string interpolation for production i18n paths.

    Packages: @lssm-tech/lib.contracts-spec, @lssm-tech/lib.translation-runtime, @lssm-tech/lib.design-system, @lssm-tech/example.locale-jurisdiction-gate

    1. Build runtime instances from canonical `TranslationSpec[]` catalogs.
    2. Create one runtime per SSR request and hydrate clients from serialized snapshots.
    3. Keep React, React Native, and i18next integrations downstream from the runtime.
  • Regenerate docs and LLM guidance for database mutation changes

    manual

    When database mutation contracts or adapters change, update the README/docs/release capsule pair and regenerate `/llms*` before release.

    Packages: @lssm-tech/lib.contracts-spec, @lssm-tech/integration.provider-database, @lssm-tech/app.web-landing, contractspec

    1. Update `packages/libs/contracts-spec/README.md` for portable descriptor behavior.
    2. Update `packages/integrations/provider-database/README.md` for adapter execution behavior.
    3. Run `bun run --cwd packages/apps/web-landing llms:generate` and include the generated package guide changes.
  • Register the six built-in reference kinds in your composition root

    manual

    Call `registerBuiltInReferenceKinds()` once at boot; the registry is process-global.

    Packages: @lssm-tech/lib.contracts-spec, @lssm-tech/integration.runtime, @lssm-tech/lib.authos-runtime

    1. Pick a single composition root (e.g. server bootstrap or app entry).
    2. Call `registerBuiltInReferenceKinds()` before any handler resolves a reference.
  • Wire the REST/GraphQL/MCP adapters via composition roots

    assisted

    Each adapter binds the four ports into a shared `ReferenceDispatcher`.

    Packages: @lssm-tech/lib.contracts-spec, @lssm-tech/integration.runtime, @lssm-tech/lib.authos-runtime

    1. Import the appropriate wire-* module from `@lssm-tech/integration.runtime/rich-reference`.
    2. Provide concrete impls of `SubjectProvider`, `CoarsePreferencesProvider`, `KindPolicyProvider`, `AuditSink`.
    3. The MCP wiring exposes `rich_reference.resolve` and `rich_reference.detail` tool descriptors.
  • Adopt the neutral AI-improvement evidence envelope

    assisted

    Use `@lssm-tech/lib.contracts-spec/ai-improvement` for policy, risk, replay, and evidence IDs before wiring vendor adapters.

    Packages: @lssm-tech/lib.contracts-spec, @lssm-tech/lib.provider-spec, @lssm-tech/lib.provider-runtime, @lssm-tech/lib.ai-agent, @lssm-tech/lib.ai-providers, @lssm-tech/lib.metering, @lssm-tech/lib.observability, @lssm-tech/lib.evolution, @lssm-tech/lib.lifecycle, @lssm-tech/integration.provider-pioneer-ai, @lssm-tech/integration.providers-impls

    1. Keep provider routing, observability, metering, evolution, lifecycle, and memory semantics in their owning packages.
    2. Require rollback and human approval evidence before high-risk promotion.
    3. Keep `AI_IMPROVEMENT_VENDOR_EXPORT=off` unless a redacted export policy explicitly permits egress.
  • Configure Pioneer through the targeted adapter package

    manual

    Use `@lssm-tech/integration.provider-pioneer-ai` for Pioneer jobs and receipts; keep credentials outside serialized evidence.

    Packages: @lssm-tech/lib.contracts-spec, @lssm-tech/lib.provider-spec, @lssm-tech/lib.provider-runtime, @lssm-tech/lib.ai-agent, @lssm-tech/lib.ai-providers, @lssm-tech/lib.metering, @lssm-tech/lib.observability, @lssm-tech/lib.evolution, @lssm-tech/lib.lifecycle, @lssm-tech/integration.provider-pioneer-ai, @lssm-tech/integration.providers-impls

    1. Provide Pioneer credentials through the host secret/runtime layer.
    2. Use mock-mode receipts in tests and local dry runs.
    3. Keep `PIONEER_AI_ADAPTER=off` available as a kill switch.
  • Release build now accumulates an index and writes per-version details

    assisted

    After a release build, `generated/releases/index.json` contains the accumulating release index, and `generated/releases/versions/v{slug}.json` contains full per-version details. The full manifest is still overwritten.

    Packages: @lssm-tech/lib.contracts-spec, @lssm-tech/bundle.workspace, @lssm-tech/app.cli-contractspec, @lssm-tech/app.web-landing

    1. Existing `contractspec release build` workflow continues unchanged.
    2. CLI changelog consumers can now run `contractspec changelog list` and `contractspec changelog view <version>`.
    3. Web changelog consumers will see version detail pages automatically.
  • Add adoption after-release-build hook to CI workflows

    manual

    Both `publish-canary` and `publish-npm` workflows now run the adoption hook after release build to sync catalogs and write pending upgrades.

    Packages: @lssm-tech/lib.contracts-spec, @lssm-tech/bundle.workspace, @lssm-tech/app.cli-contractspec, @lssm-tech/app.web-landing

    1. If you maintain custom CI workflows, add a step: `bun packages/apps/cli-contractspec/src/cli.ts connect hook adoption after-release-build --json`
    2. This step must run after `bun run release:build` and before `contractspec release check --strict`.

Unique release changes

  • - Add vendor-neutral AI self-improvement contracts and a mock-first Pioneer adapter.

    11 packages · 11 occurrences

  • - Use `@lssm-tech/integration.provider-pioneer-ai` for Pioneer jobs and receipts; keep credentials outside serialized evidence.

    11 packages · 11 occurrences

  • - Use `@lssm-tech/lib.contracts-spec/ai-improvement` for policy, risk, replay, and evidence IDs before wiring vendor adapters.

    11 packages · 11 occurrences

  • - Add fail-closed agentic interaction and CommunicationOS command-inbox release evidence across contracts, runtime, module, examples, and agent-facing docs.

    5 packages · 5 occurrences

  • - AIP mapping controls are opt-in safety contracts, not root-barrel exports.

    5 packages · 5 occurrences

  • - CommunicationOS commands persist as review evidence with `canExecute: false`.

    5 packages · 5 occurrences

  • - Run the focused validation matrix before publishing packages or public docs.

    5 packages · 5 occurrences

  • - Add adaptive DataView management-shell contracts and command-center proof metadata.

    4 packages · 4 occurrences

  • - Add governed rich code/diff surfaces with references, redaction, RoleMorph, and personalization support. Historical wave-0 entry; the legacy CodeBlock/DiffBlock/ObjectReferenceHandler surfaces are superseded by the rich-reference foundation (see `rich-reference-breaking-release`).

    4 packages · 4 occurrences

  • - Adoption-aware release pipeline with accumulating release index, per-version detail files, CLI changelog list/view commands, and web changelog version pages.

    4 packages · 4 occurrences

  • - After a release build, `generated/releases/index.json` contains the accumulating release index, and `generated/releases/versions/v{slug}.json` contains full per-version details. The full manifest is still overwritten.

    4 packages · 4 occurrences

  • - Both `publish-canary` and `publish-npm` workflows now run the adoption hook after release build to sync catalogs and write pending upgrades.

    4 packages · 4 occurrences

  • - Use the new additive DataView metadata to describe management-shell layouts and host-owned action boundaries.

    4 packages · 4 occurrences

  • - Add a ContractSpec-native production-grade translation runtime and optional i18next adapter.

    3 packages · 3 occurrences

  • - Align database mutation docs, release-capsule guidance, and LLM-facing surfaces around governed domain-command writes.

    3 packages · 3 occurrences

  • - Call `registerBuiltInReferenceKinds()` once at boot; the registry is process-global.

    3 packages · 3 occurrences

  • - Canonical RichReference subpath + ReferenceRuntime (split) + canonical serializer + detector + reference.resolve/detail queries + REST/GraphQL/MCP adapter wirings + S-9 agent surface (markdown envelope, agent-export passthrough, MCP tool descriptors, delegated/agent subject modes).

    3 packages · 3 occurrences

  • - Each adapter binds the four ports into a shared `ReferenceDispatcher`.

    3 packages · 3 occurrences

  • - Prefer `meta.key: "bundle.messages"` with `locale: "fr-FR"` over stable keys that encode locale suffixes.

    3 packages · 3 occurrences

  • - The i18next adapter exports ContractSpec ICU messages intact and does not make i18next canonical.

    3 packages · 3 occurrences

  • - Treat portable mutation descriptors as domain-command envelopes and execute them only through provider adapters that enforce policy, idempotency, audit, replay, and expected write-set evidence.

    3 packages · 3 occurrences

  • - Use runtime instances or snapshots instead of legacy simple string interpolation for production i18n paths.

    3 packages · 3 occurrences

  • - When database mutation contracts or adapters change, update the README/docs/release capsule pair and regenerate `/llms*` before release.

    3 packages · 3 occurrences

  • - Add optional DataView management-shell metadata for adaptive command-center layouts.

    1 packages · 1 occurrences

  • - Aliases are opt-in. Add them only when you're renaming an operation's canonical key and want consumers to keep working without code changes.

    1 packages · 1 occurrences

  • - Loop D D4 — `@lssm-tech/lib.contracts-spec` now supports `meta.aliases?: readonly string[]` on operations. `OperationSpecRegistry.get()` falls back to alias lookup when the canonical key misses. Future namespace migrations can ship as additive instead of BREAKING.

    1 packages · 1 occurrences

  • - Use optional DataView management-shell fields to document adaptive command-center layouts without changing existing DataView contracts.

    1 packages · 1 occurrences

Impacted packages

  • @lssm-tech/app.cli-contractspec

    Layer: apps · 3 changes

  • @lssm-tech/app.web-landing

    Layer: apps · 3 changes

  • @lssm-tech/bundle.workspace

    Layer: bundles · 3 changes

  • @lssm-tech/integration.provider-database

    Layer: integrations · 3 changes

  • @lssm-tech/integration.provider-pioneer-ai

    Layer: integrations · 3 changes

  • @lssm-tech/integration.providers-impls

    Layer: integrations · 3 changes

  • @lssm-tech/integration.runtime

    Layer: integrations · 3 changes

  • @lssm-tech/lib.ai-agent

    Layer: libs · 3 changes

  • @lssm-tech/lib.ai-providers

    Layer: libs · 3 changes

  • @lssm-tech/lib.authos-runtime

    Layer: libs · 3 changes

  • @lssm-tech/lib.communication-runtime

    Layer: libs · 4 changes

  • @lssm-tech/lib.communication-spec

    Layer: libs · 4 changes

  • @lssm-tech/lib.contracts-spec

    Layer: libs · 3 changes

  • @lssm-tech/lib.design-system

    Layer: libs · 1 changes

  • @lssm-tech/lib.evolution

    Layer: libs · 3 changes

  • @lssm-tech/lib.lifecycle

    Layer: libs · 3 changes

  • @lssm-tech/lib.metering

    Layer: libs · 3 changes

  • @lssm-tech/lib.observability

    Layer: libs · 3 changes

  • @lssm-tech/lib.personalization

    Layer: libs · 1 changes

  • @lssm-tech/lib.provider-runtime

    Layer: libs · 3 changes

  • @lssm-tech/lib.provider-spec

    Layer: libs · 3 changes

  • @lssm-tech/lib.surface-runtime

    Layer: libs · 1 changes

  • @lssm-tech/lib.translation-runtime

    Layer: libs · 4 changes

  • @lssm-tech/module.communication-os

    Layer: modules · 4 changes