@company-semantics/contracts 27.7.0 → 27.9.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "27.7.0",
+  "version": "27.9.0",
   "private": false,
   "repository": {
     "type": "git",

package/src/api/generated-spec-hash.ts

@@ -1,3 +1,3 @@
 // AUTO-GENERATED — do not edit. Run pnpm generate:spec-hash to regenerate.
-export const SPEC_HASH = '628fe99ff916' as const;
-export const SPEC_HASH_FULL = '628fe99ff9166b9eb6c0b2bab2794f4e730ceabff0785b7b54b8015897e9551d' as const;
+export const SPEC_HASH = '3974d23a4348' as const;
+export const SPEC_HASH_FULL = '3974d23a434834c5a1f81d93ef082b993014143e7b95e97dd775293045809af8' as const;

package/src/api/generated.ts

@@ -736,23 +736,6 @@ export interface paths {
         patch: operations["setMemberManager"];
         trace?: never;
     };
-    "/api/reporting/bulk-reparent": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /** Atomically re-point many members' solid manager to one new manager */
-        post: operations["bulkReparentReporting"];
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
     "/api/reporting/move/preview": {
         parameters: {
             query?: never;
@@ -3912,37 +3895,6 @@ export interface components {
                 openRoleId: string;
             };
         };
-        BulkReparentReportingResponse: {
-            /** @constant */
-            success: true;
-            movedCount: number;
-            toManager: {
-                /** @constant */
-                kind: "member";
-                /** Format: uuid */
-                userId: string;
-            } | {
-                /** @constant */
-                kind: "open-role";
-                /** Format: uuid */
-                openRoleId: string;
-            };
-        };
-        BulkReparentReportingRequest: {
-            memberIds: string[];
-            toManager: {
-                /** @constant */
-                kind: "member";
-                /** Format: uuid */
-                userId: string;
-            } | {
-                /** @constant */
-                kind: "open-role";
-                /** Format: uuid */
-                openRoleId: string;
-            };
-            idempotencyKey: string;
-        };
         MovePreviewRequest: {
             /** @constant */
             kind: "reporting.setManager";
@@ -3962,6 +3914,12 @@ export interface components {
             /** Format: uuid */
             positionId: string;
             title: string;
+        } | {
+            /** @constant */
+            kind: "reporting.setManagerBulk";
+            reportPositionIds: string[];
+            /** Format: uuid */
+            managerPositionId: string;
         };
         MoveApplyRequest: {
             mutations: ({
@@ -7103,30 +7061,6 @@ export interface operations {
             };
         };
     };
-    bulkReparentReporting: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["BulkReparentReportingRequest"];
-            };
-        };
-        responses: {
-            /** @description Cluster reorg applied atomically */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["BulkReparentReportingResponse"];
-                };
-            };
-        };
-    };
     previewReportingMove: {
         parameters: {
             query?: never;

package/src/email/__tests__/registry.test.ts

@@ -62,6 +62,24 @@ describe("EMAIL_KINDS golden snapshot", () => {
         plainTextRequired: true,
         htmlSupported: true,
       },
+      "companyMd.access_requested": {
+        kind: "companyMd.access_requested",
+        subject: "Someone requested access to a document",
+        plainTextRequired: true,
+        htmlSupported: true,
+      },
+      "companyMd.access_request_approved": {
+        kind: "companyMd.access_request_approved",
+        subject: "Your access request was approved",
+        plainTextRequired: true,
+        htmlSupported: true,
+      },
+      "companyMd.access_request_denied": {
+        kind: "companyMd.access_request_denied",
+        subject: "Your access request was reviewed",
+        plainTextRequired: true,
+        htmlSupported: true,
+      },
     });
   });
 });

package/src/generated/openapi-routes.ts

@@ -125,7 +125,6 @@ export const openApiRoutes = {
   '/api/orgs/{orgId}/budget-config': ['GET', 'PUT'],
   '/api/orgs/{orgId}/level-config': ['GET', 'PUT'],
   '/api/rbac/roles': ['GET'],
-  '/api/reporting/bulk-reparent': ['POST'],
   '/api/reporting/move/apply': ['POST'],
   '/api/reporting/move/preview': ['POST'],
   '/api/scope/check': ['GET'],

package/src/org/__tests__/transformation.test.ts

@@ -106,6 +106,55 @@ describe("OrgIntentSchema", () => {
       }).success,
     ).toBe(false);
   });
+
+  it("accepts a reporting.setManagerBulk intent (N seats -> one manager)", () => {
+    const intent = {
+      kind: "reporting.setManagerBulk" as const,
+      reportPositionIds: [REPORT, POSITION],
+      managerPositionId: MANAGER,
+    };
+    expect(OrgIntentSchema.parse(intent)).toEqual(intent);
+  });
+
+  it("rejects an empty bulk reportPositionIds array", () => {
+    expect(
+      OrgIntentSchema.safeParse({
+        kind: "reporting.setManagerBulk",
+        reportPositionIds: [],
+        managerPositionId: MANAGER,
+      }).success,
+    ).toBe(false);
+  });
+
+  it("rejects a bulk array beyond the 500-seat transport cap", () => {
+    expect(
+      OrgIntentSchema.safeParse({
+        kind: "reporting.setManagerBulk",
+        reportPositionIds: Array.from({ length: 501 }, () => REPORT),
+        managerPositionId: MANAGER,
+      }).success,
+    ).toBe(false);
+  });
+
+  it("rejects a non-uuid entry in the bulk report set", () => {
+    expect(
+      OrgIntentSchema.safeParse({
+        kind: "reporting.setManagerBulk",
+        reportPositionIds: [REPORT, "x"],
+        managerPositionId: MANAGER,
+      }).success,
+    ).toBe(false);
+  });
+
+  it("rejects a null bulk managerPositionId (intents always set a manager)", () => {
+    expect(
+      OrgIntentSchema.safeParse({
+        kind: "reporting.setManagerBulk",
+        reportPositionIds: [REPORT],
+        managerPositionId: null,
+      }).success,
+    ).toBe(false);
+  });
 });
 
 describe("FactMutationSchema", () => {
@@ -436,4 +485,23 @@ describe("TransformationPreviewSchema", () => {
       false,
     );
   });
+
+  it("accepts a multi-headline preview carrying primaryMutations (bulk intent)", () => {
+    const second = { ...setManagerMutation, reportPositionId: POSITION };
+    expect(
+      TransformationPreviewSchema.safeParse({
+        ...preview,
+        primaryMutations: [setManagerMutation, second],
+      }).success,
+    ).toBe(true);
+  });
+
+  it("rejects a single-element primaryMutations (single moves omit the field)", () => {
+    expect(
+      TransformationPreviewSchema.safeParse({
+        ...preview,
+        primaryMutations: [setManagerMutation],
+      }).success,
+    ).toBe(false);
+  });
 });

package/src/org/transformation.ts

@@ -95,6 +95,25 @@ export const OrgIntentSchema = z.discriminatedUnion("kind", [
     /** The new human-facing title for the seat (non-empty, matching PositionSchema.title). */
     title: z.string().min(1),
   }),
+  // reporting.setManagerBulk — N reporting seats re-pointed at ONE manager as a
+  // single atomic intent (the org-chart cluster-pill drop). The engine expands
+  // it into N `reporting.setManager` FactMutations — the existing
+  // Intent-vs-Mutation asymmetry; no bulk mutation kind exists or is needed.
+  // Cross-field rules (manager ∉ reports, dedupe) are enforced at the route: a
+  // discriminatedUnion member cannot carry a ZodEffects refinement.
+  z.object({
+    kind: z.literal("reporting.setManagerBulk"),
+    /**
+     * The reporting seats being re-pointed together (e.g. a unit cluster's
+     * direct members; their subtrees follow implicitly). Order-insensitive;
+     * the engine treats the set as one atomic intent. The cap mirrors the
+     * bulk-reparent transport bound (ADR-BE-318).
+     */
+    reportPositionIds: z.array(z.string().uuid()).min(1).max(500),
+    /** The ONE manager seat every report re-points to. Non-null on an intent
+     * (un-setting is a mutation concern, exactly as on `reporting.setManager`). */
+    managerPositionId: z.string().uuid(),
+  }),
 ]);
 export type OrgIntent = z.infer<typeof OrgIntentSchema>;
 
@@ -336,6 +355,15 @@ export const TransformationPreviewSchema = z.object({
   intentLabel: z.string().min(1),
   /** The headline fact change the preview is centered on. */
   primary: FactMutationSchema,
+  /**
+   * Present only when the intent expands into MORE THAN ONE headline mutation
+   * (e.g. `reporting.setManagerBulk`): the full primary bundle, of which
+   * `primary` is the first element. Absent on single-mutation previews so
+   * existing consumers and goldens see byte-identical output. These are the
+   * INTENT's own edges — engine repair splices stay in the strategies'
+   * recommendations, never here.
+   */
+  primaryMutations: z.array(FactMutationSchema).min(2).optional(),
   /** The strategy the engine recommends by default. */
   defaultStrategy: TransformStrategySchema,
   /** Other viable strategies the operator may pick instead. */

package/src/permissions/share-api.ts

@@ -62,14 +62,29 @@ export const AclListResponseSchema = z.object({
   entity_type: z.string(),
   entity_id: z.string().uuid(),
   owner_user_id: z.string().uuid().nullable(),
+  /** General-access scope: WHO is eligible (the discoverability axis). */
   visibility: EntityVisibilitySchema,
+  /**
+   * The ROLE the general-access scope grants its audience: WHAT they may do (the
+   * capability axis, ADR-BE-375). Orthogonal to `visibility` — e.g. "Everyone in
+   * Product · Commenter". Defaults to `viewer` (the historical view-only band);
+   * ignored when `visibility` is `private` (no general grant).
+   */
+  general_access_role: GrantableAccessLevelSchema.default("viewer"),
   editors_can_share: z.boolean(),
   grants: z.array(AclGrantResponseSchema),
 });
 export type AclListResponse = z.infer<typeof AclListResponseSchema>;
 
 export const VisibilityPatchRequestSchema = z.object({
+  /** The general-access scope (WHO is eligible). */
   tier: EntityVisibilitySchema,
+  /**
+   * The role granted to that scope (WHAT they may do, ADR-BE-375). Optional and
+   * backward-compatible: omitted preserves the current role (or `viewer` on first
+   * set); ignored when `tier` is `private`.
+   */
+  role: GrantableAccessLevelSchema.optional(),
 });
 export type VisibilityPatchRequest = z.infer<
   typeof VisibilityPatchRequestSchema