@company-semantics/contracts 2.11.0 → 2.13.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "2.11.0",
+  "version": "2.13.0",
   "private": false,
   "repository": {
     "type": "git",
@@ -81,8 +81,6 @@
     "lint:md": "markdownlint-cli2 '**/*.md' '#node_modules'",
     "lint:json": "node -e \"JSON.parse(require('fs').readFileSync('package.json'))\"",
     "prepare": "husky",
-    "guard:decision": "npx tsx scripts/ci/decision-guard.ts",
-    "guard:decision:json": "npx tsx scripts/ci/decision-guard.ts --json",
     "guard:export": "npx tsx scripts/ci/export-guard.ts",
     "guard:export:json": "npx tsx scripts/ci/export-guard.ts --json",
     "guard:vocabulary": "npx tsx scripts/ci/vocabulary-guard.ts",

package/src/content/schemas.ts

@@ -38,7 +38,7 @@ const CompanyMdTreeNodeSchema = z.object({
   title: z.string(),
   level: z.enum(['root', 'department', 'team', 'context']),
   parentId: z.string().nullable(),
-  visibility: z.enum(['public', 'private']),
+  visibility: z.enum(['private', 'unit', 'org']),
   owningUnitId: z.string().nullable(),
   type: z.enum(['company', 'department', 'team', 'cross_team', 'doc', 'goal', 'source', 'map', 'context_bank']),
   canEdit: z.boolean(),
@@ -62,7 +62,7 @@ export const CompanyMdDocResponseSchema = z.object({
   title: z.string(),
   level: z.enum(['root', 'department', 'team', 'context']),
   content: z.string(),
-  visibility: z.enum(['public', 'private']),
+  visibility: z.enum(['private', 'unit', 'org']),
   parentId: z.string().nullable(),
   owningUnitId: z.string().nullable(),
   owner: CompanyMdPersonSchema.nullable(),
@@ -131,7 +131,7 @@ const CompanyMdContextBankItemSchema = z.object({
   id: z.string(),
   slug: z.string(),
   title: z.string(),
-  visibility: z.enum(['public', 'private']),
+  visibility: z.enum(['private', 'unit', 'org']),
   updatedAt: z.string(),
 });
 

package/src/org/company-md.ts

@@ -6,7 +6,22 @@
  * @see PRD-00173 for design rationale
  */
 
-export type CompanyMdVisibility = "public" | "private";
+/**
+ * Visibility band for a Company.md document — the canonical AUTH
+ * `entity_visibility` vocabulary (ADR-CONT-049, backend ADR-BE-178).
+ *
+ * - `private`: owner, co-owners, and explicit ACL grantees only.
+ * - `unit`: the doc's owning `org_unit` (members + delegated authorities).
+ *   This is the default for tree-nav docs, so availability shrinks toward the
+ *   root (the root doc's owning unit is leadership ⇒ CEO/leadership-only).
+ * - `org`: every member of the org (the former `public`).
+ *
+ * Widened from the legacy `'public' | 'private'` model: `public` is replaced by
+ * `org` and the intermediate `unit` band is added. Enforcement of the narrowed
+ * bands is the AUTH-005 evaluator; the backend tags docs with the correct band
+ * in AUTH-004.
+ */
+export type CompanyMdVisibility = "private" | "unit" | "org";
 
 /**
  * @deprecated Since 1.12.0. `CompanyMdDocLevel` is superseded by `CompanyMdDocKind` + `depth`.