@company-semantics/contracts 1.4.0 → 1.5.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "private": false,
   "repository": {
     "type": "git",

package/src/api/generated-spec-hash.ts

@@ -1,3 +1,3 @@
 // AUTO-GENERATED — do not edit. Run pnpm generate:spec-hash to regenerate.
-export const SPEC_HASH = '2378a6034349' as const;
-export const SPEC_HASH_FULL = '2378a6034349f4280d4f9aa3536002db130f8a1c03911b6f2513e14e036d85c4' as const;
+export const SPEC_HASH = '9740ec13f6ea' as const;
+export const SPEC_HASH_FULL = '9740ec13f6ea493d93a5b3cf1e8d7f6b0a1130a0e85846a446fe74aaa7a40fde' as const;

package/src/api/generated.ts

@@ -1571,6 +1571,23 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/org-units/{unitId}/permissions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** List effective managers of an org unit (direct + inherited) */
+        get: operations["listOrgUnitPermissions"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/org-units/{unitId}/memberships": {
         parameters: {
             query?: never;
@@ -3095,6 +3112,19 @@ export interface components {
                 updatedAt: string;
             }[];
         };
+        ListOrgUnitPermissionsResponse: {
+            /** Format: uuid */
+            unitId: string;
+            entries: {
+                /** Format: uuid */
+                userId: string;
+                /** @enum {string} */
+                membershipRole: "member" | "manager" | "owner";
+                /** Format: uuid */
+                inheritedFromUnitId: string;
+                inheritedFromUnitName: string;
+            }[];
+        };
         OrgUnitMembershipListResponse: {
             /** Format: uuid */
             unitId: string;
@@ -5729,6 +5759,28 @@ export interface operations {
             };
         };
     };
+    listOrgUnitPermissions: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                unitId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Effective managers inherited via ltree `path @>` */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ListOrgUnitPermissionsResponse"];
+                };
+            };
+        };
+    };
     listOrgUnitMemberships: {
         parameters: {
             query?: never;

package/src/resource-keys.ts

@@ -35,6 +35,7 @@ export type ResourceKey =
   | { type: 'orgUnitChildren'; orgId: string; unitId: string }
   | { type: 'orgUnitAncestors'; orgId: string; unitId: string }
   | { type: 'orgUnitMemberships'; orgId: string; unitId: string }
+  | { type: 'orgUnitPermissions'; orgId: string; unitId: string }
   // User-scoped
   | { type: 'dismissedBanners'; userId: string }
   | { type: 'userOrgs'; userId: string }
@@ -95,6 +96,7 @@ export function toQueryKey(key: ResourceKey): readonly string[] {
     case 'orgUnitChildren':
     case 'orgUnitAncestors':
     case 'orgUnitMemberships':
+    case 'orgUnitPermissions':
       return [key.type, key.orgId, key.unitId] as const;
 
     // User-scoped
@@ -155,6 +157,7 @@ export function fromQueryKey(queryKey: readonly string[]): ResourceKey {
     orgUnitChildren: 'unitId',
     orgUnitAncestors: 'unitId',
     orgUnitMemberships: 'unitId',
+    orgUnitPermissions: 'unitId',
   };
 
   if (type in identityFields) {
@@ -199,7 +202,10 @@ export const resourceRelationships: Record<string, string[]> = {
   orgUnit: ['orgTree'],
   orgUnitChildren: ['orgTree'],
   orgUnitAncestors: ['orgTree'],
-  orgUnitMemberships: ['orgUnit'],
+  // Subtree manage is driven by memberships (ADR-BE-151); mutating memberships
+  // invalidates both the direct roster and the effective-managers read.
+  orgUnitMemberships: ['orgUnit', 'orgUnitPermissions'],
+  orgUnitPermissions: ['orgUnitMemberships'],
 };
 
 /**