@company-semantics/contracts 27.8.0 → 27.9.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "27.8.0",
+  "version": "27.9.0",
   "private": false,
   "repository": {
     "type": "git",

package/src/api/generated-spec-hash.ts

@@ -1,3 +1,3 @@
 // AUTO-GENERATED — do not edit. Run pnpm generate:spec-hash to regenerate.
-export const SPEC_HASH = '1c5dcd23d461' as const;
-export const SPEC_HASH_FULL = '1c5dcd23d46109024a008dea6440892f9a1ccd0b725fc6e0ed0bb3abe28bf78d' as const;
+export const SPEC_HASH = '3974d23a4348' as const;
+export const SPEC_HASH_FULL = '3974d23a434834c5a1f81d93ef082b993014143e7b95e97dd775293045809af8' as const;

package/src/api/generated.ts

@@ -736,23 +736,6 @@ export interface paths {
         patch: operations["setMemberManager"];
         trace?: never;
     };
-    "/api/reporting/bulk-reparent": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /** Atomically re-point many members' solid manager to one new manager */
-        post: operations["bulkReparentReporting"];
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
     "/api/reporting/move/preview": {
         parameters: {
             query?: never;
@@ -3912,37 +3895,6 @@ export interface components {
                 openRoleId: string;
             };
         };
-        BulkReparentReportingResponse: {
-            /** @constant */
-            success: true;
-            movedCount: number;
-            toManager: {
-                /** @constant */
-                kind: "member";
-                /** Format: uuid */
-                userId: string;
-            } | {
-                /** @constant */
-                kind: "open-role";
-                /** Format: uuid */
-                openRoleId: string;
-            };
-        };
-        BulkReparentReportingRequest: {
-            memberIds: string[];
-            toManager: {
-                /** @constant */
-                kind: "member";
-                /** Format: uuid */
-                userId: string;
-            } | {
-                /** @constant */
-                kind: "open-role";
-                /** Format: uuid */
-                openRoleId: string;
-            };
-            idempotencyKey: string;
-        };
         MovePreviewRequest: {
             /** @constant */
             kind: "reporting.setManager";
@@ -7109,30 +7061,6 @@ export interface operations {
             };
         };
     };
-    bulkReparentReporting: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["BulkReparentReportingRequest"];
-            };
-        };
-        responses: {
-            /** @description Cluster reorg applied atomically */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["BulkReparentReportingResponse"];
-                };
-            };
-        };
-    };
     previewReportingMove: {
         parameters: {
             query?: never;

package/src/generated/openapi-routes.ts

@@ -125,7 +125,6 @@ export const openApiRoutes = {
   '/api/orgs/{orgId}/budget-config': ['GET', 'PUT'],
   '/api/orgs/{orgId}/level-config': ['GET', 'PUT'],
   '/api/rbac/roles': ['GET'],
-  '/api/reporting/bulk-reparent': ['POST'],
   '/api/reporting/move/apply': ['POST'],
   '/api/reporting/move/preview': ['POST'],
   '/api/scope/check': ['GET'],

package/src/permissions/share-api.ts

@@ -62,14 +62,29 @@ export const AclListResponseSchema = z.object({
   entity_type: z.string(),
   entity_id: z.string().uuid(),
   owner_user_id: z.string().uuid().nullable(),
+  /** General-access scope: WHO is eligible (the discoverability axis). */
   visibility: EntityVisibilitySchema,
+  /**
+   * The ROLE the general-access scope grants its audience: WHAT they may do (the
+   * capability axis, ADR-BE-375). Orthogonal to `visibility` — e.g. "Everyone in
+   * Product · Commenter". Defaults to `viewer` (the historical view-only band);
+   * ignored when `visibility` is `private` (no general grant).
+   */
+  general_access_role: GrantableAccessLevelSchema.default("viewer"),
   editors_can_share: z.boolean(),
   grants: z.array(AclGrantResponseSchema),
 });
 export type AclListResponse = z.infer<typeof AclListResponseSchema>;
 
 export const VisibilityPatchRequestSchema = z.object({
+  /** The general-access scope (WHO is eligible). */
   tier: EntityVisibilitySchema,
+  /**
+   * The role granted to that scope (WHAT they may do, ADR-BE-375). Optional and
+   * backward-compatible: omitted preserves the current role (or `viewer` on first
+   * set); ignored when `tier` is `private`.
+   */
+  role: GrantableAccessLevelSchema.optional(),
 });
 export type VisibilityPatchRequest = z.infer<
   typeof VisibilityPatchRequestSchema