@company-semantics/contracts 10.0.0 → 11.0.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "10.0.0",
+  "version": "11.0.0",
   "private": false,
   "repository": {
     "type": "git",
@@ -115,7 +115,7 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@types/node": "^22.19.19",
+    "@types/node": "^25.9.2",
     "husky": "^9.1.7",
     "lint-staged": "^17.0.7",
     "markdownlint-cli2": "^0.22.1",

package/src/content/schemas.ts

@@ -74,6 +74,12 @@ export const CompanyMdDocResponseSchema = z.object({
   title: z.string(),
   level: z.enum(["root", "department", "team", "context"]),
   content: z.string(),
+  /**
+   * When `true`, `content` is the redacted empty body (`''`) returned to a
+   * metadata-only (meta-tier) viewer who administers the doc but may not read
+   * its body (ADR-BE-245). Omitted/`false` on the normal full-content path.
+   */
+  contentRedacted: z.boolean().optional(),
   visibility: z.enum(["private", "unit", "org"]),
   parentId: z.string().nullable(),
   owningUnitId: z.string().nullable(),

package/src/org/company-md.ts

@@ -119,6 +119,12 @@ export interface CompanyMdTreeNode extends CompanyMdNodeIdentity {
 
 export interface CompanyMdDocCore extends CompanyMdNodeIdentity {
   readonly content: string;
+  /**
+   * When `true`, `content` is the redacted empty body (`''`) returned to a
+   * metadata-only (meta-tier) viewer who administers the doc but may not read
+   * its body (ADR-BE-245). Omitted/`false` on the normal full-content path.
+   */
+  readonly contentRedacted?: boolean;
 }
 
 export interface CompanyMdDocCollaborators {

package/src/permissions/access-levels.ts

@@ -1,18 +1,25 @@
 /**
  * Permission Access Levels
  *
- * Canonical four-level access vocabulary for object permissions across
- * Company Semantics, modeled on the Google-Docs four-level scheme.
+ * Canonical access vocabulary for object permissions across
+ * Company Semantics, modeled on the Google-Docs four-level scheme plus a
+ * weakest `meta` tier below `viewer`.
  *
  * Authority: ADR-CTRL-085 (Rights Table). See ADR-CTRL-084 for how these
  * levels are materialized into `effective_acl_grants`, and ADR-CTRL-086 for
  * the aggregation rule (most-permissive across sources).
  *
  * The commenter level is currently a stub — see ADR-CTRL-087.
+ *
+ * `meta` is the metadata-only tier used for org-admin lifecycle access
+ * (ADR-BE-245). It is materialized/derived only — never an explicit
+ * `acl_grants` value — and sits strictly below `viewer`, so
+ * `isAtLeast('meta', 'viewer') === false`.
  */
 import { z } from "zod";
 
 export const ACCESS_LEVELS = [
+  "meta",
   "owner",
   "editor",
   "commenter",
@@ -27,10 +34,11 @@ export const AccessLevelSchema = z.enum(ACCESS_LEVELS);
  * Used by `highestGrant()` in AUTH-006 (PRD-00674) to aggregate across sources.
  */
 export const ACCESS_LEVEL_ORDER: Record<AccessLevel, number> = {
-  viewer: 0,
-  commenter: 1,
-  editor: 2,
-  owner: 3,
+  meta: 0,
+  viewer: 1,
+  commenter: 2,
+  editor: 3,
+  owner: 4,
 };
 
 /**