@company-semantics/contracts 13.9.0 → 13.10.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "13.9.0",
+  "version": "13.10.0",
   "private": false,
   "repository": {
     "type": "git",

package/src/api/generated.ts

@@ -3636,6 +3636,8 @@ export interface components {
                 };
                 /** @enum {string} */
                 status: "pending" | "accepted" | "expired" | "revoked";
+                /** Format: uuid */
+                homeUnitId?: string;
                 createdAt: string;
                 expiresAt: string;
                 acceptedAt?: string;
@@ -3646,6 +3648,8 @@ export interface components {
             email: string;
             /** @enum {string} */
             role: "admin" | "member";
+            /** Format: uuid */
+            homeUnitId?: string;
         };
         InviteListResponse: {
             id: string;
@@ -3659,6 +3663,8 @@ export interface components {
             };
             /** @enum {string} */
             status: "pending" | "accepted" | "expired" | "revoked";
+            /** Format: uuid */
+            homeUnitId?: string;
             createdAt: string;
             expiresAt: string;
             acceptedAt?: string;

package/src/org/__tests__/view-scopes.test.ts

@@ -10,6 +10,7 @@ describe("VIEW_SCOPE_MAP golden snapshot", () => {
       "teamwork-member": "org.view_teamwork",
       "company-md": "org.view_company_md",
       "internal-admin": "internal.view_admin",
+      "execution-detail": "org.view_timeline",
       teams: null,
       chat: null,
       settings: null,
@@ -28,6 +29,7 @@ describe("getViewScope", () => {
     expect(getViewScope("teamwork")).toBe("org.view_teamwork");
     expect(getViewScope("company-md")).toBe("org.view_company_md");
     expect(getViewScope("internal-admin")).toBe("internal.view_admin");
+    expect(getViewScope("execution-detail")).toBe("org.view_timeline");
   });
 
   it("returns null for public views", () => {

package/src/org/view-scopes.ts

@@ -23,6 +23,11 @@ export const VIEW_SCOPE_MAP = {
   "teamwork-member": "org.view_teamwork",
   "company-md": "org.view_company_md",
   "internal-admin": "internal.view_admin",
+  // `execution-detail` (/@org/executions/{id}) is gated behind the same scope as
+  // its only entry point, the timeline. Per-execution visibility is additionally
+  // enforced at the data layer (GET /summary + /result return 404 when the
+  // execution is not visible). See ADR-APP-045.
+  "execution-detail": "org.view_timeline",
   // Public views (require only authentication)
   // `teams`: team/directory visibility is membership-derived (ADR-BE-241 tier 1),
   // not a scope. Repointed from the never-enforced `org.view_teams` to null when