@company-semantics/contracts 0.23.0 → 0.24.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "0.23.0",
+  "version": "0.24.0",
   "private": false,
   "repository": {
     "type": "git",
@@ -55,7 +55,7 @@
     "guard:version-tag:json": "npx tsx scripts/ci/version-tag-guard.ts --json",
     "guard:test": "vitest run scripts/ci/__tests__",
     "release": "npx tsx scripts/release.ts",
-    "prepublishOnly": "pnpm guard:version-tag",
+    "prepublishOnly": "echo 'ERROR: Publishing is CI-only via tag push. Use pnpm release instead.' && exit 1",
     "test": "vitest run scripts/ci/__tests__"
   },
   "packageManager": "pnpm@10.25.0",

package/src/guards/config.ts

@@ -207,6 +207,18 @@ export interface VulnerabilitiesBaseline {
   }>;
 }
 
+/**
+ * Contracts consumer guard configuration.
+ * Enforces: consumers never advance ahead of npm.
+ *
+ * Verifies that the @company-semantics/contracts version specified
+ * in package.json exists on npm before allowing consumer updates.
+ */
+export interface ContractsConsumerBaseline {
+  /** Path to package.json relative to repo root */
+  packageJsonPath: string;
+}
+
 /**
  * Structural guard baselines.
  * Product repos provide DATA only; CI orchestrator owns guard implementations.
@@ -226,6 +238,13 @@ export interface StructuralBaselines {
    * CI injects checkVulnerabilities based on this config.
    */
   vulnerabilities?: VulnerabilitiesBaseline;
+
+  /**
+   * Contracts consumer check configuration.
+   * CI injects checkContractsConsumer based on this config.
+   * Enforces: consumers never advance ahead of npm.
+   */
+  contractsConsumer?: ContractsConsumerBaseline;
 }
 
 /**
@@ -328,15 +347,15 @@ export interface CoverageBaseline {
  */
 export interface FileClusterBaseline {
   /** Minimum files to form a cluster */
-  minClusterSize: number;
+  minClusterSize?: number;
   /** Minimum stragglers to suggest reorganization */
-  minStragglers: number;
+  minStragglers?: number;
   /** Suffixes to strip when detecting clusters (e.g., '.test', '.spec') */
-  stripSuffixes: string[];
+  stripSuffixes?: string[];
   /** Role words to strip (e.g., 'Service', 'Handler') */
-  stripRoleWords: string[];
+  stripRoleWords?: string[];
   /** Directories to ignore */
-  ignoredDirectories: string[];
+  ignoredDirectories?: string[];
 }
 
 /**
@@ -346,15 +365,15 @@ export interface FileClusterBaseline {
  */
 export interface SubdirectoryAffinityBaseline {
   /** Minimum importers required */
-  minImporters: number;
+  minImporters?: number;
   /** Maximum non-subdirectory imports allowed */
-  maxNonSubdirImports: number;
+  maxNonSubdirImports?: number;
   /** Patterns to exclude from analysis */
-  excludePatterns: RegExp[];
+  excludePatterns?: RegExp[];
   /** Importer patterns to ignore */
-  ignoredImporterPatterns: RegExp[];
+  ignoredImporterPatterns?: RegExp[];
   /** Directories to ignore */
-  ignoredDirectories: string[];
+  ignoredDirectories?: string[];
 }
 
 /**

package/src/guards/index.ts

@@ -47,6 +47,7 @@ export type {
   StructuralBaselines,
   ScriptsDepsBaseline,
   VulnerabilitiesBaseline,
+  ContractsConsumerBaseline,
   EvolutionBaselines,
   ContractsFreshnessBaseline,
   CoverageBaseline,

package/src/system/capabilities.ts

@@ -15,7 +15,7 @@
  * @see ADR-CONTRACTS-NNN in DECISIONS.md
  */
 
-import type { DiagramNode, FlowStage, FeatureStatus } from './index.js'
+import type { DiagramNode, FlowStage } from './index.js'
 
 // =============================================================================
 // Types
@@ -132,8 +132,3 @@ export interface AggregatedCapabilities {
   aggregatedAt: string
 }
 
-// =============================================================================
-// Re-exports for convenience
-// =============================================================================
-
-export type { FeatureStatus, FlowStage }