@company-semantics/contracts 13.8.0 → 13.10.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "13.8.0",
+  "version": "13.10.0",
   "private": false,
   "repository": {
     "type": "git",

package/src/api/generated.ts

@@ -3636,6 +3636,8 @@ export interface components {
                 };
                 /** @enum {string} */
                 status: "pending" | "accepted" | "expired" | "revoked";
+                /** Format: uuid */
+                homeUnitId?: string;
                 createdAt: string;
                 expiresAt: string;
                 acceptedAt?: string;
@@ -3646,6 +3648,8 @@ export interface components {
             email: string;
             /** @enum {string} */
             role: "admin" | "member";
+            /** Format: uuid */
+            homeUnitId?: string;
         };
         InviteListResponse: {
             id: string;
@@ -3659,6 +3663,8 @@ export interface components {
             };
             /** @enum {string} */
             status: "pending" | "accepted" | "expired" | "revoked";
+            /** Format: uuid */
+            homeUnitId?: string;
             createdAt: string;
             expiresAt: string;
             acceptedAt?: string;

package/src/org/__tests__/view-scopes.test.ts

@@ -10,6 +10,7 @@ describe("VIEW_SCOPE_MAP golden snapshot", () => {
       "teamwork-member": "org.view_teamwork",
       "company-md": "org.view_company_md",
       "internal-admin": "internal.view_admin",
+      "execution-detail": "org.view_timeline",
       teams: null,
       chat: null,
       settings: null,
@@ -28,6 +29,7 @@ describe("getViewScope", () => {
     expect(getViewScope("teamwork")).toBe("org.view_teamwork");
     expect(getViewScope("company-md")).toBe("org.view_company_md");
     expect(getViewScope("internal-admin")).toBe("internal.view_admin");
+    expect(getViewScope("execution-detail")).toBe("org.view_timeline");
   });
 
   it("returns null for public views", () => {

package/src/org/schemas.ts

@@ -553,6 +553,9 @@ const OrgInviteSchema = z.object({
   role: z.enum(["admin", "member"]),
   invitedBy: z.object({ id: z.string(), name: z.string() }),
   status: z.enum(["pending", "accepted", "expired", "revoked"]),
+  // Home unit the invitee is placed in on acceptance (users.primary_unit_id).
+  // Optional/nullable: legacy invites predate this field.
+  homeUnitId: z.string().uuid().optional(),
   createdAt: z.string(),
   expiresAt: z.string(),
   acceptedAt: z.string().optional(),

package/src/org/types.ts

@@ -398,6 +398,12 @@ export interface OrgInvite {
     name: string;
   };
   status: OrgInviteStatus;
+  /**
+   * Org unit the invitee is placed in on acceptance (their home unit /
+   * `users.primary_unit_id`). Chosen at invite time. Optional/nullable: legacy
+   * invites created before this field have none.
+   */
+  homeUnitId?: string;
   createdAt: string;
   expiresAt: string;
   acceptedAt?: string;
@@ -409,6 +415,12 @@ export interface OrgInvite {
 export interface CreateInviteRequest {
   email: string;
   role: "admin" | "member";
+  /**
+   * Org unit (depth ≥ 2; not the org root) the invitee will be placed in on
+   * acceptance. Required by the UI, but optional in the contract so the field
+   * can roll out without breaking older callers.
+   */
+  homeUnitId?: string;
 }
 
 /**

package/src/org/view-scopes.ts

@@ -23,6 +23,11 @@ export const VIEW_SCOPE_MAP = {
   "teamwork-member": "org.view_teamwork",
   "company-md": "org.view_company_md",
   "internal-admin": "internal.view_admin",
+  // `execution-detail` (/@org/executions/{id}) is gated behind the same scope as
+  // its only entry point, the timeline. Per-execution visibility is additionally
+  // enforced at the data layer (GET /summary + /result return 404 when the
+  // execution is not visible). See ADR-APP-045.
+  "execution-detail": "org.view_timeline",
   // Public views (require only authentication)
   // `teams`: team/directory visibility is membership-derived (ADR-BE-241 tier 1),
   // not a scope. Repointed from the never-enforced `org.view_teams` to null when