Gaubee · Oct 16, 2026 · Oct 16, 2026
diff --git a/.changeset/update-openspec-cli-1142.md b/.changeset/update-openspec-cli-1142.md
diff --git a/packages/app/CHANGELOG.md b/packages/app/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @openspecui/app
 
+## 14.0.2
+
 ## 14.0.1
 
 ## 14.0.0

diff --git a/packages/app/package.json b/packages/app/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openspecui/app",
-  "version": "14.0.1",
+  "version": "14.0.2",
   "private": true,
   "type": "module",
   "scripts": {

diff --git a/packages/browser-translator/CHANGELOG.md b/packages/browser-translator/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @openspecui/browser-translator
 
+## 14.0.2
+
+### Patch Changes
+
+- Updated dependencies [1447940]
+  - @openspecui/core@14.0.2
+
 ## 14.0.1
 
 ### Patch Changes

diff --git a/packages/browser-translator/package.json b/packages/browser-translator/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@openspecui/browser-translator",
   "private": true,
-  "version": "14.0.1",
+  "version": "14.0.2",
   "description": "Browser-side translator engine for OpenSpecUI",
   "type": "module",
   "main": "./dist/index.mjs",

diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md
@@ -1,5 +1,11 @@
 # openspecui
 
+## 14.0.2
+
+### Patch Changes
+
+- 1447940: Rotate the pinned OpenSpec CLI fixture to 1.14.2 inside the unchanged v14 window (`>=1.14.0 <1.15.0`): the `openspec-cli-114` npm alias, every pin guard constant, and the reference submodule gitlink move to `v1.14.2` (`f80d860f`). The 1.14.2 patch facts join the executable proof matrix as pinned fixtures — a well-formed `x-` extension key in `.openspec.yaml` (`x-tracker`) no longer reports as an unknown key in Status/Instructions while a malformed `X-Foo` key keeps the advisory, which now carries the `x-` prefix hint (the verbatim warning strings in the web projection tests are re-captured from the 1.14.2 executable so the captured-from-pinned-CLI claim stays true); a schema artifact pattern nesting brace expansions deeper than 16 levels is rejected through the typed `change_error` envelope before the pattern reaches the braces parser; and delta text outside requirement blocks emits the advisory unapplied-content WARNING (item stays valid) in `validate --report findings`. No production code changes: status warnings and validate findings decode and render as verbatim strings by design, and the brace-depth guard lives entirely in the CLI's expansion step.
+
 ## 14.0.1
 
 ### Patch Changes

diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "openspecui",
-  "version": "14.0.1",
+  "version": "14.0.2",
   "description": "OpenSpec UI - Visual interface for spec-driven development",
   "type": "module",
   "main": "dist/index.mjs",

diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @openspecui/core
 
+## 14.0.2
+
+### Patch Changes
+
+- 1447940: Rotate the pinned OpenSpec CLI fixture to 1.14.2 inside the unchanged v14 window (`>=1.14.0 <1.15.0`): the `openspec-cli-114` npm alias, every pin guard constant, and the reference submodule gitlink move to `v1.14.2` (`f80d860f`). The 1.14.2 patch facts join the executable proof matrix as pinned fixtures — a well-formed `x-` extension key in `.openspec.yaml` (`x-tracker`) no longer reports as an unknown key in Status/Instructions while a malformed `X-Foo` key keeps the advisory, which now carries the `x-` prefix hint (the verbatim warning strings in the web projection tests are re-captured from the 1.14.2 executable so the captured-from-pinned-CLI claim stays true); a schema artifact pattern nesting brace expansions deeper than 16 levels is rejected through the typed `change_error` envelope before the pattern reaches the braces parser; and delta text outside requirement blocks emits the advisory unapplied-content WARNING (item stays valid) in `validate --report findings`. No production code changes: status warnings and validate findings decode and render as verbatim strings by design, and the brace-depth guard lives entirely in the CLI's expansion step.
+
 ## 14.0.1
 
 ### Patch Changes

diff --git a/packages/core/package.json b/packages/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openspecui/core",
-  "version": "14.0.1",
+  "version": "14.0.2",
   "description": "Core OpenSpec adapter and parser",
   "files": [
     "dist"

diff --git a/packages/local-ct2-translator/CHANGELOG.md b/packages/local-ct2-translator/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @openspecui/local-ct2-translator
 
+## 14.0.2
+
+### Patch Changes
+
+- Updated dependencies [1447940]
+  - @openspecui/core@14.0.2
+
 ## 14.0.1
 
 ### Patch Changes

diff --git a/packages/local-ct2-translator/package.json b/packages/local-ct2-translator/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@openspecui/local-ct2-translator",
   "private": true,
-  "version": "14.0.1",
+  "version": "14.0.2",
   "description": "Server-side CTranslate2 translator engine for OpenSpecUI",
   "type": "module",
   "main": "./dist/index.mjs",

diff --git a/packages/local-llama-translator/CHANGELOG.md b/packages/local-llama-translator/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @openspecui/local-llama-translator
 
+## 14.0.2
+
+### Patch Changes
+
+- Updated dependencies [1447940]
+  - @openspecui/core@14.0.2
+
 ## 14.0.1
 
 ### Patch Changes

diff --git a/packages/local-llama-translator/package.json b/packages/local-llama-translator/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@openspecui/local-llama-translator",
   "private": true,
-  "version": "14.0.1",
+  "version": "14.0.2",
   "description": "Server-side llama.cpp translator engine for OpenSpecUI",
   "type": "module",
   "main": "./dist/index.mjs",

diff --git a/packages/local-translator/CHANGELOG.md b/packages/local-translator/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @openspecui/local-translator
 
+## 14.0.2
+
+### Patch Changes
+
+- Updated dependencies [1447940]
+  - @openspecui/core@14.0.2
+
 ## 14.0.1
 
 ### Patch Changes

diff --git a/packages/local-translator/package.json b/packages/local-translator/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@openspecui/local-translator",
   "private": true,
-  "version": "14.0.1",
+  "version": "14.0.2",
   "description": "Server-side local translator engine for OpenSpecUI",
   "type": "module",
   "main": "./dist/index.mjs",

diff --git a/packages/openai-completion-translator/CHANGELOG.md b/packages/openai-completion-translator/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @openspecui/openai-completion-translator
 
+## 14.0.2
+
+### Patch Changes
+
+- Updated dependencies [1447940]
+  - @openspecui/core@14.0.2
+
 ## 14.0.1
 
 ### Patch Changes

diff --git a/packages/openai-completion-translator/package.json b/packages/openai-completion-translator/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@openspecui/openai-completion-translator",
   "private": true,
-  "version": "14.0.1",
+  "version": "14.0.2",
   "description": "OpenAI completion translator engine for OpenSpecUI",
   "type": "module",
   "main": "./dist/index.mjs",

diff --git a/packages/search/CHANGELOG.md b/packages/search/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @openspecui/search
 
+## 14.0.2
+
 ## 14.0.1
 
 ## 14.0.0

diff --git a/packages/search/package.json b/packages/search/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openspecui/search",
-  "version": "14.0.1",
+  "version": "14.0.2",
   "description": "Shared search engine and worker providers for OpenSpecUI",
   "type": "module",
   "main": "./dist/index.mjs",

diff --git a/packages/server/CHANGELOG.md b/packages/server/CHANGELOG.md
@@ -1,5 +1,18 @@
 # @openspecui/server
 
+## 14.0.2
+
+### Patch Changes
+
+- 1447940: Rotate the pinned OpenSpec CLI fixture to 1.14.2 inside the unchanged v14 window (`>=1.14.0 <1.15.0`): the `openspec-cli-114` npm alias, every pin guard constant, and the reference submodule gitlink move to `v1.14.2` (`f80d860f`). The 1.14.2 patch facts join the executable proof matrix as pinned fixtures — a well-formed `x-` extension key in `.openspec.yaml` (`x-tracker`) no longer reports as an unknown key in Status/Instructions while a malformed `X-Foo` key keeps the advisory, which now carries the `x-` prefix hint (the verbatim warning strings in the web projection tests are re-captured from the 1.14.2 executable so the captured-from-pinned-CLI claim stays true); a schema artifact pattern nesting brace expansions deeper than 16 levels is rejected through the typed `change_error` envelope before the pattern reaches the braces parser; and delta text outside requirement blocks emits the advisory unapplied-content WARNING (item stays valid) in `validate --report findings`. No production code changes: status warnings and validate findings decode and render as verbatim strings by design, and the brace-depth guard lives entirely in the CLI's expansion step.
+- Updated dependencies [1447940]
+  - @openspecui/core@14.0.2
+  - @openspecui/local-ct2-translator@14.0.2
+  - @openspecui/local-llama-translator@14.0.2
+  - @openspecui/local-translator@14.0.2
+  - @openspecui/openai-completion-translator@14.0.2
+  - @openspecui/search@14.0.2
+
 ## 14.0.1
 
 ### Patch Changes

diff --git a/packages/server/package.json b/packages/server/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openspecui/server",
-  "version": "14.0.1",
+  "version": "14.0.2",
   "type": "module",
   "main": "dist/index.mjs",
   "exports": {

diff --git a/packages/web/CHANGELOG.md b/packages/web/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @openspecui/web
 
+## 14.0.2
+
+### Patch Changes
+
+- 1447940: Rotate the pinned OpenSpec CLI fixture to 1.14.2 inside the unchanged v14 window (`>=1.14.0 <1.15.0`): the `openspec-cli-114` npm alias, every pin guard constant, and the reference submodule gitlink move to `v1.14.2` (`f80d860f`). The 1.14.2 patch facts join the executable proof matrix as pinned fixtures — a well-formed `x-` extension key in `.openspec.yaml` (`x-tracker`) no longer reports as an unknown key in Status/Instructions while a malformed `X-Foo` key keeps the advisory, which now carries the `x-` prefix hint (the verbatim warning strings in the web projection tests are re-captured from the 1.14.2 executable so the captured-from-pinned-CLI claim stays true); a schema artifact pattern nesting brace expansions deeper than 16 levels is rejected through the typed `change_error` envelope before the pattern reaches the braces parser; and delta text outside requirement blocks emits the advisory unapplied-content WARNING (item stays valid) in `validate --report findings`. No production code changes: status warnings and validate findings decode and render as verbatim strings by design, and the brace-depth guard lives entirely in the CLI's expansion step.
+
 ## 14.0.1
 
 ### Patch Changes

diff --git a/packages/web/package.json b/packages/web/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openspecui/web",
-  "version": "14.0.1",
+  "version": "14.0.2",
   "type": "module",
   "bin": {
     "openspecui-ssg": "./dist-ssg/ssg-cli.mjs"

diff --git a/packages/website/CHANGELOG.md b/packages/website/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @openspecui/website
 
+## 14.0.2
+
 ## 14.0.1
 
 ## 14.0.0

diff --git a/packages/website/package.json b/packages/website/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openspecui/website",
-  "version": "14.0.1",
+  "version": "14.0.2",
   "private": true,
   "type": "module",
   "scripts": {