@company-semantics/contracts 27.14.0 → 28.1.0

package/src/email/render/render-email.ts

@@ -1,39 +1,26 @@
 /**
  * Central email dispatcher. Given a kind + payload it returns
- * `{ subject, text, html? }`, pulling the subject from the registry (single
- * source of truth). This is the one entry point both the backend (real sends)
- * and the app (Ladle preview) call.
+ * `{ subject, text, html }`, pulling the subject from the registry (single
+ * source of truth) and deriving both surfaces from ONE composed block list
+ * (`htmlShell` + `textShell`). This is the one entry point both the backend
+ * (real sends) and the app (Ladle preview) call.
  */
 
 import { EMAIL_KINDS } from "../registry";
 import type { EmailKind, EmailPayloads } from "../types";
 
-import { renderAuthOtpBody, renderAuthOtpHtml } from "./auth-otp";
-import {
-  renderAccessApprovedBody,
-  renderAccessApprovedHtml,
-} from "./company-md-access-approved";
-import {
-  renderAccessDeniedBody,
-  renderAccessDeniedHtml,
-} from "./company-md-access-denied";
-import {
-  renderAccessRequestedBody,
-  renderAccessRequestedHtml,
-} from "./company-md-access-requested";
-import { renderChatSharedBody, renderChatSharedHtml } from "./chat-shared";
-import { renderOrgInviteBody, renderOrgInviteHtml } from "./org-invite";
-import { renderOwnershipTransferBody } from "./ownership-transfer";
-import { renderOwnershipTransferCompletedBody } from "./ownership-transfer-completed";
-import { renderSecurityAlertBody } from "./security-alert";
-import {
-  renderShareGrantedBody,
-  renderShareGrantedHtml,
-} from "./share-granted";
-import {
-  renderUnitOwnerGrantedBody,
-  renderUnitOwnerGrantedHtml,
-} from "./unit-owner-granted";
+import { renderAuthOtp } from "./auth-otp";
+import { type Block, htmlShell, textShell } from "./blocks";
+import { renderAccessApproved } from "./company-md-access-approved";
+import { renderAccessDenied } from "./company-md-access-denied";
+import { renderAccessRequested } from "./company-md-access-requested";
+import { renderChatShared } from "./chat-shared";
+import { renderOrgInvite } from "./org-invite";
+import { renderOwnershipTransfer } from "./ownership-transfer";
+import { renderOwnershipTransferCompleted } from "./ownership-transfer-completed";
+import { renderSecurityAlert } from "./security-alert";
+import { renderShareGranted } from "./share-granted";
+import { renderUnitOwnerGranted } from "./unit-owner-granted";
 
 /** Rendered email output. */
 export interface RenderedEmail {
@@ -41,8 +28,8 @@ export interface RenderedEmail {
   subject: string;
   /** Plain-text body. */
   text: string;
-  /** HTML body (present only for html-supported kinds). */
-  html?: string;
+  /** HTML body (every kind is dual-output). */
+  html: string;
 }
 
 /** Caller-supplied render options. */
@@ -73,11 +60,15 @@ type PayloadFor<K extends EmailKind> = K extends keyof EmailPayloads
   ? EmailPayloads[K]
   : never;
 
+function toEmail(subject: string, blocks: Block[]): RenderedEmail {
+  return { subject, text: textShell(blocks), html: htmlShell(blocks) };
+}
+
 /**
- * Render an email by kind. Subject comes from `EMAIL_KINDS`; `html` is present
- * only when the template emits an HTML variant. Accepts the full `EmailKind`
- * union so callers with a generic kind (e.g. the backend `EmailService`) type
- * cleanly; unimplemented kinds throw at runtime.
+ * Render an email by kind. Subject comes from `EMAIL_KINDS`; both surfaces
+ * derive from one composed block list. Accepts the full `EmailKind` union so
+ * callers with a generic kind (e.g. the backend `EmailService`) type cleanly;
+ * unimplemented kinds throw at runtime.
  *
  * @throws if the kind has no implementation.
  */
@@ -89,82 +80,73 @@ export function renderEmail<K extends EmailKind>(
   const subject = EMAIL_KINDS[kind].subject;
 
   switch (kind) {
-    case "auth.otp": {
-      const p = payload as EmailPayloads["auth.otp"];
-      return {
+    case "auth.otp":
+      return toEmail(
         subject,
-        text: renderAuthOtpBody(p, options),
-        html: renderAuthOtpHtml(p),
-      };
-    }
-    case "org.invite": {
-      const p = payload as EmailPayloads["org.invite"];
-      return {
+        renderAuthOtp(payload as EmailPayloads["auth.otp"], options),
+      );
+    case "org.invite":
+      return toEmail(
         subject,
-        text: renderOrgInviteBody(p),
-        html: renderOrgInviteHtml(p),
-      };
-    }
-    case "org.unit_owner_granted": {
-      const p = payload as EmailPayloads["org.unit_owner_granted"];
-      return {
+        renderOrgInvite(payload as EmailPayloads["org.invite"]),
+      );
+    case "org.unit_owner_granted":
+      return toEmail(
         subject,
-        text: renderUnitOwnerGrantedBody(p),
-        html: renderUnitOwnerGrantedHtml(p),
-      };
-    }
-    case "org.ownership_transfer": {
-      const p = payload as EmailPayloads["org.ownership_transfer"];
-      return { subject, text: renderOwnershipTransferBody(p) };
-    }
-    case "org.ownership_transfer_completed": {
-      const p = payload as EmailPayloads["org.ownership_transfer_completed"];
-      return { subject, text: renderOwnershipTransferCompletedBody(p) };
-    }
-    case "security.alert": {
-      const p = payload as EmailPayloads["security.alert"];
-      return { subject, text: renderSecurityAlertBody(p) };
-    }
-    case "chat.shared": {
-      const p = payload as EmailPayloads["chat.shared"];
-      return {
+        renderUnitOwnerGranted(
+          payload as EmailPayloads["org.unit_owner_granted"],
+        ),
+      );
+    case "org.ownership_transfer":
+      return toEmail(
         subject,
-        text: renderChatSharedBody(p),
-        html: renderChatSharedHtml(p),
-      };
-    }
-    case "share.granted": {
-      const p = payload as EmailPayloads["share.granted"];
-      return {
+        renderOwnershipTransfer(
+          payload as EmailPayloads["org.ownership_transfer"],
+        ),
+      );
+    case "org.ownership_transfer_completed":
+      return toEmail(
         subject,
-        text: renderShareGrantedBody(p),
-        html: renderShareGrantedHtml(p),
-      };
-    }
-    case "companyMd.access_requested": {
-      const p = payload as EmailPayloads["companyMd.access_requested"];
-      return {
+        renderOwnershipTransferCompleted(
+          payload as EmailPayloads["org.ownership_transfer_completed"],
+        ),
+      );
+    case "security.alert":
+      return toEmail(
         subject,
-        text: renderAccessRequestedBody(p),
-        html: renderAccessRequestedHtml(p),
-      };
-    }
-    case "companyMd.access_request_approved": {
-      const p = payload as EmailPayloads["companyMd.access_request_approved"];
-      return {
+        renderSecurityAlert(payload as EmailPayloads["security.alert"]),
+      );
+    case "chat.shared":
+      return toEmail(
         subject,
-        text: renderAccessApprovedBody(p),
-        html: renderAccessApprovedHtml(p),
-      };
-    }
-    case "companyMd.access_request_denied": {
-      const p = payload as EmailPayloads["companyMd.access_request_denied"];
-      return {
+        renderChatShared(payload as EmailPayloads["chat.shared"]),
+      );
+    case "share.granted":
+      return toEmail(
         subject,
-        text: renderAccessDeniedBody(p),
-        html: renderAccessDeniedHtml(p),
-      };
-    }
+        renderShareGranted(payload as EmailPayloads["share.granted"]),
+      );
+    case "companyMd.access_requested":
+      return toEmail(
+        subject,
+        renderAccessRequested(
+          payload as EmailPayloads["companyMd.access_requested"],
+        ),
+      );
+    case "companyMd.access_request_approved":
+      return toEmail(
+        subject,
+        renderAccessApproved(
+          payload as EmailPayloads["companyMd.access_request_approved"],
+        ),
+      );
+    case "companyMd.access_request_denied":
+      return toEmail(
+        subject,
+        renderAccessDenied(
+          payload as EmailPayloads["companyMd.access_request_denied"],
+        ),
+      );
     default: {
       // Reachable for registered-but-unimplemented kinds (e.g. auth.magic_link).
       const unimplemented: string = kind;

package/src/email/render/security-alert.ts

@@ -1,13 +1,10 @@
 /**
- * Security alert email (plain text only).
- *
- * Uses a single shared footer via `baseTextLayout` with a "Security" signer —
- * the previous copy hand-rolled a second footer, printing two.
+ * Security alert email (plain text only). Signs off with a "Security" signer.
  */
 
 import type { EmailPayloads } from "../types";
 
-import { baseTextLayout } from "./base-text";
+import { type Block, keyValue, paragraph, signature } from "./blocks";
 import { COMPANY_NAME } from "./constants";
 
 export type SecurityAlertPayload = EmailPayloads["security.alert"];
@@ -18,34 +15,35 @@ export const SECURITY_ALERT_TYPES = [
   "unusual_login_location",
 ] as const;
 
-export function renderSecurityAlertBody(payload: SecurityAlertPayload): string {
+export function renderSecurityAlert(payload: SecurityAlertPayload): Block[] {
   const { alertType, details, timestamp } = payload;
 
-  const sections: string[] = [];
+  const blocks: Block[] = [];
 
   switch (alertType) {
     case "excessive_otp_requests":
-      sections.push(
-        "We detected an unusual number of login code requests for your account.",
+      blocks.push(
+        paragraph(
+          "We detected an unusual number of login code requests for your account.",
+        ),
+        keyValue("Details", details, "normal"),
+        paragraph("If this was you, no action is needed.", "tight"),
+        paragraph(
+          "If you didn't request these codes, someone may be trying to access your account.",
+          "tight",
+        ),
+        paragraph("We recommend reviewing your account security."),
       );
-      sections.push("");
-      sections.push(`Details: ${details}`);
-      sections.push("");
-      sections.push("If this was you, no action is needed.");
-      sections.push(
-        "If you didn't request these codes, someone may be trying to access your account.",
-      );
-      sections.push("We recommend reviewing your account security.");
       break;
 
     case "unusual_login_location":
-      sections.push("We detected a login attempt from an unusual location.");
-      sections.push("");
-      sections.push(`Details: ${details}`);
-      sections.push("");
-      sections.push("If this was you, no action is needed.");
-      sections.push(
-        "If you didn't attempt to log in, please secure your account immediately.",
+      blocks.push(
+        paragraph("We detected a login attempt from an unusual location."),
+        keyValue("Details", details, "normal"),
+        paragraph("If this was you, no action is needed.", "tight"),
+        paragraph(
+          "If you didn't attempt to log in, please secure your account immediately.",
+        ),
       );
       break;
 
@@ -55,8 +53,10 @@ export function renderSecurityAlertBody(payload: SecurityAlertPayload): string {
     }
   }
 
-  sections.push("");
-  sections.push(`Time: ${new Date(timestamp).toUTCString()}`);
+  blocks.push(
+    keyValue("Time", new Date(timestamp).toUTCString(), "normal"),
+    signature(`${COMPANY_NAME} Security`),
+  );
 
-  return baseTextLayout(sections.join("\n"), `${COMPANY_NAME} Security`);
+  return blocks;
 }

package/src/email/render/share-granted.ts

@@ -1,62 +1,27 @@
 /**
- * Share-granted email (an entity was shared with the recipient). Text + HTML.
+ * Share-granted email (an entity was shared with the recipient).
  */
 
 import type { EmailPayloads } from "../types";
 
-import { baseTextLayout } from "./base-text";
 import {
   ACCESS_PHRASE,
-  asciiCtaBox,
-  paragraph,
+  type Block,
+  bold,
+  chatUser,
   ctaBox,
   footer,
   greeting,
-  htmlShell,
+  type Inline,
   NOTICE,
-  chatUserBubble,
-  chatUserBoxText,
+  paragraph,
   signature,
 } from "./blocks";
 import { COMPANY_NAME } from "./constants";
-import { escapeHtml } from "./escape-html";
 
 export type ShareGrantedPayload = EmailPayloads["share.granted"];
 
-/** `the document "Roadmap"` — or `a document` when there is no title. */
-function describeEntity(payload: ShareGrantedPayload): string {
-  return payload.entityTitle
-    ? `the ${payload.entityLabel} "${payload.entityTitle}"`
-    : `a ${payload.entityLabel}`;
-}
-
-export function renderShareGrantedBody(payload: ShareGrantedPayload): string {
-  const { granterName, recipientName, accessLevel, ctaUrl, message } = payload;
-
-  const sections: string[] = [];
-  sections.push(recipientName ? `Hi ${recipientName},` : "Hi,");
-  sections.push("");
-  sections.push(
-    `${granterName} shared ${describeEntity(payload)} with you — you ${ACCESS_PHRASE[accessLevel]}.`,
-  );
-
-  if (message) {
-    sections.push("");
-    sections.push(chatUserBoxText(message, `Message from ${granterName}`));
-  }
-
-  sections.push("");
-  sections.push(asciiCtaBox("OPEN"));
-  sections.push("");
-  sections.push(ctaUrl);
-  sections.push("");
-  sections.push(`This notification was sent via ${COMPANY_NAME}.`);
-  sections.push(NOTICE);
-
-  return baseTextLayout(sections.join("\n"));
-}
-
-export function renderShareGrantedHtml(payload: ShareGrantedPayload): string {
+export function renderShareGranted(payload: ShareGrantedPayload): Block[] {
   const {
     granterName,
     recipientName,
@@ -67,16 +32,23 @@ export function renderShareGrantedHtml(payload: ShareGrantedPayload): string {
     message,
   } = payload;
 
-  const entityHtml = entityTitle
-    ? `the ${escapeHtml(entityLabel)} <b>"${escapeHtml(entityTitle)}"</b>`
-    : `a ${escapeHtml(entityLabel)}`;
+  const entity: Array<string | Inline> = entityTitle
+    ? [`the ${entityLabel} `, bold(`"${entityTitle}"`)]
+    : [`a ${entityLabel}`];
 
-  return htmlShell([
+  const blocks: Block[] = [
     greeting(recipientName),
-    paragraph(
-      `<b>${escapeHtml(granterName)}</b> shared ${entityHtml} with you &mdash; you ${ACCESS_PHRASE[accessLevel]}.`,
-    ),
-    message ? chatUserBubble(message, `Message from ${granterName}`) : "",
+    paragraph([
+      bold(granterName),
+      " shared ",
+      ...entity,
+      ` with you — you ${ACCESS_PHRASE[accessLevel]}.`,
+    ]),
+  ];
+
+  if (message) blocks.push(chatUser(message, `Message from ${granterName}`));
+
+  blocks.push(
     ctaBox({
       label: "OPEN",
       href: ctaUrl,
@@ -86,5 +58,7 @@ export function renderShareGrantedHtml(payload: ShareGrantedPayload): string {
     }),
     footer(`This notification was sent via ${COMPANY_NAME}.`, NOTICE),
     signature(),
-  ]);
+  );
+
+  return blocks;
 }

package/src/email/render/unit-owner-granted.ts

@@ -1,66 +1,45 @@
 /**
- * Unit-owner-granted email (added to a team's unit ownership). Text + HTML.
+ * Unit-owner-granted email (added to a team's unit ownership).
  */
 
 import type { EmailPayloads } from "../types";
 
-import { baseTextLayout } from "./base-text";
 import {
-  asciiCtaBox,
-  paragraph,
+  type Block,
+  bold,
+  chatUser,
   ctaBox,
   footer,
   greeting,
-  htmlShell,
   NOTICE,
-  chatUserBubble,
-  chatUserBoxText,
+  paragraph,
   signature,
 } from "./blocks";
 import { COMPANY_NAME } from "./constants";
-import { escapeHtml } from "./escape-html";
 
 export type UnitOwnerGrantedPayload = EmailPayloads["org.unit_owner_granted"];
 
-export function renderUnitOwnerGrantedBody(
-  payload: UnitOwnerGrantedPayload,
-): string {
-  const { granterName, recipientName, unitName, roleLabel, ctaUrl, message } =
-    payload;
-
-  const sections: string[] = [];
-  sections.push(recipientName ? `Hi ${recipientName},` : "Hi,");
-  sections.push("");
-  sections.push(`${granterName} added you as a ${roleLabel} of "${unitName}".`);
-
-  if (message) {
-    sections.push("");
-    sections.push(chatUserBoxText(message, `Message from ${granterName}`));
-  }
-
-  sections.push("");
-  sections.push(asciiCtaBox("VIEW TEAM"));
-  sections.push("");
-  sections.push(ctaUrl);
-  sections.push("");
-  sections.push(`This notification was sent via ${COMPANY_NAME}.`);
-  sections.push(NOTICE);
-
-  return baseTextLayout(sections.join("\n"));
-}
-
-export function renderUnitOwnerGrantedHtml(
+export function renderUnitOwnerGranted(
   payload: UnitOwnerGrantedPayload,
-): string {
+): Block[] {
   const { granterName, recipientName, unitName, roleLabel, ctaUrl, message } =
     payload;
 
-  return htmlShell([
+  const blocks: Block[] = [
     greeting(recipientName),
-    paragraph(
-      `<b>${escapeHtml(granterName)}</b> added you as a <b>${escapeHtml(roleLabel)}</b> of <b>${escapeHtml(unitName)}</b>.`,
-    ),
-    message ? chatUserBubble(message, `Message from ${granterName}`) : "",
+    paragraph([
+      bold(granterName),
+      " added you as a ",
+      bold(roleLabel),
+      " of ",
+      bold(unitName),
+      ".",
+    ]),
+  ];
+
+  if (message) blocks.push(chatUser(message, `Message from ${granterName}`));
+
+  blocks.push(
     ctaBox({
       label: "VIEW TEAM",
       href: ctaUrl,
@@ -70,5 +49,7 @@ export function renderUnitOwnerGrantedHtml(
     }),
     footer(`This notification was sent via ${COMPANY_NAME}.`, NOTICE),
     signature(),
-  ]);
+  );
+
+  return blocks;
 }

package/src/permissions/access-source.ts

@@ -12,6 +12,10 @@
  *   - `ownership`    — entity.owner_user_id column projection
  *   - `visibility`   — entity.visibility tier compiled to viewer rows
  *   - `inheritance`  — org-chart-membership-based unit walk
+ *   - `authority`    — org-admin / account-owner / unit-editor / sharing-policy
+ *                      bands as synthetic live-resolved principals (ADR-BE-185)
+ *   - `context_association` — a company.md context-bank doc inherits viewer access
+ *                      from every associated parent (the governed union, ADR-BE-392)
  *   - `migration`    — one-shot backfill from legacy systems (AUTH-004)
  */
 import { z } from "zod";
@@ -21,6 +25,8 @@ export const ACCESS_SOURCES = [
   "ownership",
   "visibility",
   "inheritance",
+  "authority",
+  "context_association",
   "migration",
 ] as const;
 export type AccessSource = (typeof ACCESS_SOURCES)[number];

package/src/email/render/base-text.ts

@@ -1,26 +0,0 @@
-/**
- * Plain-text email layout.
- */
-
-import { COMPANY_NAME, SUPPORT_EMAIL } from "./constants";
-
-/**
- * Wrap plain-text email content in the shared footer
- * (`--- / <signer> / Questions? Contact <support>`).
- *
- * @param content - Body content (without footer); trimmed.
- * @param signer - Footer signer name; defaults to the company name.
- *   (`security.alert` passes "Company Semantics Security".)
- */
-export function baseTextLayout(
-  content: string,
-  signer: string = COMPANY_NAME,
-): string {
-  const footer = `
----
-${signer}
-Questions? Contact ${SUPPORT_EMAIL}
-`;
-
-  return content.trim() + "\n" + footer.trim() + "\n";
-}