@company-semantics/contracts 2.15.0 → 2.17.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "2.15.0",
+  "version": "2.17.0",
   "private": false,
   "repository": {
     "type": "git",

package/src/api/generated-spec-hash.ts

@@ -1,3 +1,3 @@
 // AUTO-GENERATED — do not edit. Run pnpm generate:spec-hash to regenerate.
-export const SPEC_HASH = '7e7e7989604b' as const;
-export const SPEC_HASH_FULL = '7e7e7989604b04f9af766c8ebcfe875445c12cec0fa4c4a071680454b635ea2c' as const;
+export const SPEC_HASH = '3d5da96bdeb1' as const;
+export const SPEC_HASH_FULL = '3d5da96bdeb12a1223f19d67956bfa0a481abc37813c181c0897a10c7e8f9b80' as const;

package/src/api/generated.ts

@@ -1815,6 +1815,23 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/org-units/{unitId}/my-authority": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Get the calling actor's OrgChart role + action booleans on a unit */
+        get: operations["getMyOrgUnitAuthority"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/org-units/{unitId}/memberships": {
         parameters: {
             query?: never;
@@ -2467,6 +2484,92 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/{entityType}/{id}/acl": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** List active ACL grants + visibility + owner for an entity */
+        get: operations["getEntityAcl"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/{entityType}/{id}/acl/{principalType}/{principalId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /** Grant (or update) a principal access to an entity */
+        put: operations["upsertEntityAclGrant"];
+        post?: never;
+        /** Revoke a principal’s access to an entity */
+        delete: operations["revokeEntityAclGrant"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/{entityType}/{id}/visibility": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        /** Change the visibility tier of an entity (owner-only) */
+        patch: operations["patchEntityVisibility"];
+        trace?: never;
+    };
+    "/api/{entityType}/{id}/transfer-ownership": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Transfer ownership of an entity to another user (owner-only) */
+        post: operations["transferEntityOwnership"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/{entityType}/{id}/effective-access": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Resolve a principal’s effective access on an entity */
+        post: operations["getEntityEffectiveAccess"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/internal-admin/impersonate/start": {
         parameters: {
             query?: never;
@@ -3925,6 +4028,16 @@ export interface components {
             revokedAt: string | null;
             reason: string | null;
         };
+        OrgUnitMyAuthorityResponse: {
+            /** Format: uuid */
+            unitId: string;
+            role: ("ceo" | "leader" | "delegate" | "admin") | null;
+            canManageMembers: boolean;
+            canAssignDelegate: boolean;
+            canAssignAdmin: boolean;
+            canCreateSubUnit: boolean;
+            canArchiveSubUnit: boolean;
+        };
         OrgUnitMembershipListResponse: {
             /** Format: uuid */
             unitId: string;
@@ -4401,6 +4514,26 @@ export interface components {
             /** @enum {string} */
             accessLevel: "viewer" | "commenter" | "editor";
         };
+        AclGrantRequest: {
+            /** @enum {string} */
+            access_level: "editor" | "commenter" | "viewer";
+        };
+        VisibilityPatchRequest: {
+            /** @enum {string} */
+            tier: "private" | "unit" | "org";
+        };
+        OwnerTransferRequest: {
+            /** Format: uuid */
+            new_owner_user_id: string;
+        };
+        EffectiveAccessRequest: {
+            principal: {
+                /** @enum {string} */
+                type: "user" | "unit" | "org";
+                /** Format: uuid */
+                id: string;
+            };
+        };
         ImpersonationSessionResponse: {
             session: {
                 impersonationSessionId: string;
@@ -7342,6 +7475,28 @@ export interface operations {
             };
         };
     };
+    getMyOrgUnitAuthority: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                unitId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Resolved OrgChartRole + the five action booleans for the calling actor on the unit */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["OrgUnitMyAuthorityResponse"];
+                };
+            };
+        };
+    };
     listOrgUnitMemberships: {
         parameters: {
             query?: never;
@@ -8444,6 +8599,208 @@ export interface operations {
             };
         };
     };
+    getEntityAcl: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                entityType: string;
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Owner, visibility, and active ACL grants for the entity */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Entity not found or not visible to this caller */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    upsertEntityAclGrant: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                entityType: string;
+                id: string;
+                principalType: string;
+                principalId: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["AclGrantRequest"];
+            };
+        };
+        responses: {
+            /** @description Grant upserted */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Entity not found or not visible to this caller */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    revokeEntityAclGrant: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                entityType: string;
+                id: string;
+                principalType: string;
+                principalId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Grant revoked */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Entity not found or not visible to this caller */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    patchEntityVisibility: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                entityType: string;
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["VisibilityPatchRequest"];
+            };
+        };
+        responses: {
+            /** @description Visibility updated */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Invalid tier for this entity type (e.g. unit on meetings) */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Entity not found or not visible to this caller */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    transferEntityOwnership: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                entityType: string;
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["OwnerTransferRequest"];
+            };
+        };
+        responses: {
+            /** @description Ownership transferred */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Transfer not permitted for this entity type (e.g. meetings) */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Entity not found or not visible to this caller */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    getEntityEffectiveAccess: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                entityType: string;
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["EffectiveAccessRequest"];
+            };
+        };
+        responses: {
+            /** @description Most-permissive access level + source chain */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Entity not found or not visible to this caller */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     startImpersonation: {
         parameters: {
             query?: never;

package/src/generated/openapi-routes.ts

@@ -140,6 +140,11 @@ export const openApiRoutes = {
   '/api/workspace/resolve-path': ['POST'],
   '/api/workspace/resync-slack-logo': ['POST'],
   '/api/workspace/work-item-counts': ['GET'],
+  '/api/{entityType}/{id}/acl': ['GET'],
+  '/api/{entityType}/{id}/acl/{principalType}/{principalId}': ['DELETE', 'PUT'],
+  '/api/{entityType}/{id}/effective-access': ['POST'],
+  '/api/{entityType}/{id}/transfer-ownership': ['POST'],
+  '/api/{entityType}/{id}/visibility': ['PATCH'],
   '/auth/logout': ['POST'],
   '/auth/me': ['GET'],
   '/auth/sso/callback': ['GET', 'POST'],