@company-semantics/contracts 1.3.0 → 1.4.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "1.3.0",
+  "version": "1.4.1",
   "private": false,
   "repository": {
     "type": "git",

package/src/api/generated-spec-hash.ts

@@ -1,3 +1,3 @@
 // AUTO-GENERATED — do not edit. Run pnpm generate:spec-hash to regenerate.
-export const SPEC_HASH = '2378a6034349' as const;
-export const SPEC_HASH_FULL = '2378a6034349f4280d4f9aa3536002db130f8a1c03911b6f2513e14e036d85c4' as const;
+export const SPEC_HASH = '9740ec13f6ea' as const;
+export const SPEC_HASH_FULL = '9740ec13f6ea493d93a5b3cf1e8d7f6b0a1130a0e85846a446fe74aaa7a40fde' as const;

package/src/api/generated.ts

@@ -1571,6 +1571,23 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/org-units/{unitId}/permissions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** List effective managers of an org unit (direct + inherited) */
+        get: operations["listOrgUnitPermissions"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/org-units/{unitId}/memberships": {
         parameters: {
             query?: never;
@@ -3095,6 +3112,19 @@ export interface components {
                 updatedAt: string;
             }[];
         };
+        ListOrgUnitPermissionsResponse: {
+            /** Format: uuid */
+            unitId: string;
+            entries: {
+                /** Format: uuid */
+                userId: string;
+                /** @enum {string} */
+                membershipRole: "member" | "manager" | "owner";
+                /** Format: uuid */
+                inheritedFromUnitId: string;
+                inheritedFromUnitName: string;
+            }[];
+        };
         OrgUnitMembershipListResponse: {
             /** Format: uuid */
             unitId: string;
@@ -5729,6 +5759,28 @@ export interface operations {
             };
         };
     };
+    listOrgUnitPermissions: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                unitId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Effective managers inherited via ltree `path @>` */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ListOrgUnitPermissionsResponse"];
+                };
+            };
+        };
+    };
     listOrgUnitMemberships: {
         parameters: {
             query?: never;

package/src/org/__tests__/org-units.test.ts

@@ -12,6 +12,8 @@ import {
   OrgUnitClassificationSchema,
   OrgUnitRelationshipTypeSchema,
   OrgUnitMembershipSourceSchema,
+  OrgUnitPermissionsEntrySchema,
+  ListOrgUnitPermissionsResponseSchema,
 } from '../schemas.js';
 
 const UUID_A = '11111111-1111-4111-8111-111111111111';
@@ -200,3 +202,49 @@ describe('Enum exhaustiveness', () => {
     }
   });
 });
+
+describe('OrgUnitPermissionsEntrySchema', () => {
+  const entry = {
+    userId: UUID_A,
+    membershipRole: 'manager' as const,
+    inheritedFromUnitId: UUID_C,
+    inheritedFromUnitName: 'Engineering',
+  };
+
+  it('accepts a well-formed entry', () => {
+    expect(() => OrgUnitPermissionsEntrySchema.parse(entry)).not.toThrow();
+  });
+
+  it('rejects invalid membershipRole', () => {
+    expect(() =>
+      OrgUnitPermissionsEntrySchema.parse({ ...entry, membershipRole: 'member' })
+    ).not.toThrow();
+    expect(() =>
+      OrgUnitPermissionsEntrySchema.parse({ ...entry, membershipRole: 'bogus' })
+    ).toThrow();
+  });
+
+  it('requires UUIDs for user and inherited unit', () => {
+    expect(() =>
+      OrgUnitPermissionsEntrySchema.parse({ ...entry, userId: 'nope' })
+    ).toThrow();
+    expect(() =>
+      OrgUnitPermissionsEntrySchema.parse({ ...entry, inheritedFromUnitId: 'nope' })
+    ).toThrow();
+  });
+
+  it('rejects empty inheritedFromUnitName', () => {
+    expect(() =>
+      OrgUnitPermissionsEntrySchema.parse({ ...entry, inheritedFromUnitName: '' })
+    ).toThrow();
+  });
+
+  it('list response wraps entries with unitId', () => {
+    const parsed = ListOrgUnitPermissionsResponseSchema.parse({
+      unitId: UUID_B,
+      entries: [entry],
+    });
+    expect(parsed.entries).toHaveLength(1);
+    expect(parsed.unitId).toBe(UUID_B);
+  });
+});

package/src/org/index.ts

@@ -225,6 +225,8 @@ export {
   OrgLevelConfigResponseSchema,
   OrgUnitMembershipResponseSchema,
   OrgUnitMembershipListResponseSchema,
+  OrgUnitPermissionsEntrySchema,
+  ListOrgUnitPermissionsResponseSchema,
 } from './schemas';
 export type {
   OrgUnit,
@@ -241,4 +243,6 @@ export type {
   OrgLevelConfigResponse,
   OrgUnitMembershipResponse,
   OrgUnitMembershipListResponse,
+  OrgUnitPermissionsEntry,
+  ListOrgUnitPermissionsResponse,
 } from './schemas';

package/src/org/schemas.ts

@@ -756,6 +756,26 @@ export const OrgUnitMembershipListResponseSchema = z.object({
   memberships: z.array(OrgUnitMembershipSchema),
 });
 
+/**
+ * Effective manager of an org unit — a user whose membership (direct or
+ * inherited from an ancestor) grants the `orgUnit.{id}.manage` capability.
+ *
+ * Direct grants have `inheritedFromUnitId === unitId`. For inherited grants,
+ * `inheritedFromUnitId` identifies the ancestor whose membership propagates
+ * authority down the subtree (ltree `path @>` containment).
+ */
+export const OrgUnitPermissionsEntrySchema = z.object({
+  userId: z.string().uuid(),
+  membershipRole: OrgUnitMembershipRoleSchema,
+  inheritedFromUnitId: z.string().uuid(),
+  inheritedFromUnitName: z.string().min(1),
+});
+
+export const ListOrgUnitPermissionsResponseSchema = z.object({
+  unitId: z.string().uuid(),
+  entries: z.array(OrgUnitPermissionsEntrySchema),
+});
+
 // --- Inferred types ---
 
 export type OrgUnit = z.infer<typeof OrgUnitSchema>;
@@ -772,3 +792,5 @@ export type OrgUnitRelationshipsResponse = z.infer<typeof OrgUnitRelationshipsRe
 export type OrgLevelConfigResponse = z.infer<typeof OrgLevelConfigResponseSchema>;
 export type OrgUnitMembershipResponse = z.infer<typeof OrgUnitMembershipResponseSchema>;
 export type OrgUnitMembershipListResponse = z.infer<typeof OrgUnitMembershipListResponseSchema>;
+export type OrgUnitPermissionsEntry = z.infer<typeof OrgUnitPermissionsEntrySchema>;
+export type ListOrgUnitPermissionsResponse = z.infer<typeof ListOrgUnitPermissionsResponseSchema>;