@company-semantics/contracts 2.10.0 → 2.12.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "2.10.0",
+  "version": "2.12.0",
   "private": false,
   "repository": {
     "type": "git",
@@ -81,8 +81,6 @@
     "lint:md": "markdownlint-cli2 '**/*.md' '#node_modules'",
     "lint:json": "node -e \"JSON.parse(require('fs').readFileSync('package.json'))\"",
     "prepare": "husky",
-    "guard:decision": "npx tsx scripts/ci/decision-guard.ts",
-    "guard:decision:json": "npx tsx scripts/ci/decision-guard.ts --json",
     "guard:export": "npx tsx scripts/ci/export-guard.ts",
     "guard:export:json": "npx tsx scripts/ci/export-guard.ts --json",
     "guard:vocabulary": "npx tsx scripts/ci/vocabulary-guard.ts",

package/src/api/generated-spec-hash.ts

@@ -1,3 +1,3 @@
 // AUTO-GENERATED — do not edit. Run pnpm generate:spec-hash to regenerate.
-export const SPEC_HASH = 'b33671a6612a' as const;
-export const SPEC_HASH_FULL = 'b33671a6612a405a566dcdcc0f0bd2fc4017f84c43a46177e4db59fcb9f21709' as const;
+export const SPEC_HASH = 'ed5f74bd901b' as const;
+export const SPEC_HASH_FULL = 'ed5f74bd901b8b8cf6bfd08165b7f885e0493ca1d1f83db11ddb8df8c65d5732' as const;

package/src/api/generated.ts

@@ -1402,6 +1402,23 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/company-md/search": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Search Company.md knowledge across opted-in sources */
+        post: operations["searchCompanyMd"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/company-md/docs/{slug}/sharing": {
         parameters: {
             query?: never;
@@ -3417,6 +3434,32 @@ export interface components {
         AssociateContextDocRequest: {
             contextDocSlug: string;
         };
+        /** @description Ranked retrieval hits plus the source kinds actually searched. */
+        CompanyMdSearchResponse: {
+            hits: {
+                /** @enum {string} */
+                sourceKind: "docs" | "slack" | "meetings";
+                documentId: string;
+                recordingId: string | null;
+                title: string | null;
+                snippet: string;
+                score: number;
+                /** @enum {string} */
+                matchedVia: "fts" | "vector";
+            }[];
+            searchedSources: ("docs" | "slack" | "meetings")[];
+        };
+        /** @description A Company.md retrieval query with optional per-source opt-in. */
+        CompanyMdSearchRequest: {
+            query: string;
+            limit?: number;
+            /** @description Per-source opt-in. Server defaults: docs/slack ON, meetings OFF (INV-MTG-23) — applied even when this object or the meetings field is omitted. */
+            includeSources?: {
+                docs?: boolean;
+                slack?: boolean;
+                meetings?: boolean;
+            };
+        };
         CompanyMdShareResponse: {
             /** @enum {string} */
             sharingPolicy: "restricted" | "org_read" | "org_comment" | "org_edit";
@@ -6442,6 +6485,44 @@ export interface operations {
             };
         };
     };
+    searchCompanyMd: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CompanyMdSearchRequest"];
+            };
+        };
+        responses: {
+            /** @description Ranked retrieval hits plus the source kinds searched */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["CompanyMdSearchResponse"];
+                };
+            };
+            /** @description Invalid query body */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Requires org.view_company_md scope */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     getCompanyMdDocSharing: {
         parameters: {
             query?: never;

package/src/org/company-md.ts

@@ -6,7 +6,22 @@
  * @see PRD-00173 for design rationale
  */
 
-export type CompanyMdVisibility = "public" | "private";
+/**
+ * Visibility band for a Company.md document — the canonical AUTH
+ * `entity_visibility` vocabulary (ADR-CONT-049, backend ADR-BE-178).
+ *
+ * - `private`: owner, co-owners, and explicit ACL grantees only.
+ * - `unit`: the doc's owning `org_unit` (members + delegated authorities).
+ *   This is the default for tree-nav docs, so availability shrinks toward the
+ *   root (the root doc's owning unit is leadership ⇒ CEO/leadership-only).
+ * - `org`: every member of the org (the former `public`).
+ *
+ * Widened from the legacy `'public' | 'private'` model: `public` is replaced by
+ * `org` and the intermediate `unit` band is added. Enforcement of the narrowed
+ * bands is the AUTH-005 evaluator; the backend tags docs with the correct band
+ * in AUTH-004.
+ */
+export type CompanyMdVisibility = "private" | "unit" | "org";
 
 /**
  * @deprecated Since 1.12.0. `CompanyMdDocLevel` is superseded by `CompanyMdDocKind` + `depth`.