npm - @company-semantics/contracts - Versions diffs - 28.0.0 → 28.1.0 - Mend

@company-semantics/contracts 28.0.0 → 28.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (4) hide show

package/package.json +1 -1
package/src/email/render/__tests__/__snapshots__/render-snapshot.test.ts.snap +75 -0
package/src/email/render/render-email.ts +5 -33
package/src/permissions/access-source.ts +6 -0

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "28.0.0",
+  "version": "28.1.0",
   "private": false,
   "repository": {
     "type": "git",

package/src/email/render/__tests__/__snapshots__/render-snapshot.test.ts.snap CHANGED Viewed

@@ -745,6 +745,21 @@ Questions? Contact support@companysemantics.ai
 exports[`email render > org.ownership_transfer · No note 1`] = `
 {
+  "html": "<!DOCTYPE html>
+<html lang="en">
+<head><meta charset="UTF-8"></head>
+<body style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; color: #1a1a1a; margin: 0; padding: 0;">
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 20px 0;">You have been invited to become the owner of <b>&quot;Acme Corp&quot;</b>.</p>
+<table cellpadding="0" cellspacing="0" border="0" style="border: 2px solid #1a1a1a; margin: 0 0 20px 0; max-width: 220px;">
+  <tr><td style="padding: 16px 24px; text-align: center; font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 16px;">
+    <a href="https://app.companysemantics.ai/owner-transfer/accept/tok456" style="color: #0047FF; text-decoration: underline;"><b>&gt;&gt; ACCEPT &lt;&lt;</b></a>
+  </td></tr>
+</table>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 20px 0;">Expires in: <b>14 days</b></p>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 20px 0;">If you did not expect this invitation, you can safely ignore this email.</p>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0;">Company Semantics<br><span style="color: #888;">Questions? Contact <a href="mailto:support@companysemantics.ai" style="color: #888;">support@companysemantics.ai</a></span></p>
+</body>
+</html>",
   "subject": "You've been invited to become a workspace owner",
   "text": "You have been invited to become the owner of "Acme Corp".
@@ -767,6 +782,31 @@ Questions? Contact support@companysemantics.ai
 exports[`email render > org.ownership_transfer · With note 1`] = `
 {
+  "html": "<!DOCTYPE html>
+<html lang="en">
+<head><meta charset="UTF-8"></head>
+<body style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; color: #1a1a1a; margin: 0; padding: 0;">
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 20px 0;">You have been invited to become the owner of <b>&quot;Acme Corp&quot;</b>.</p>
+<table cellpadding="0" cellspacing="0" border="0" style="margin: 0 0 16px 0;">
+  <tr>
+    <td style="border: 1px solid #1a1a1a; border-radius: 12px 12px 0 12px; padding: 10px 14px; min-width: 280px; text-align: right; font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 13px; background: #f5f5f5;">Handing this over as I move to an advisory role.</td>
+    <td style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; padding-left: 8px; vertical-align: bottom;">(•̀_ರ╮)</td>
+  </tr>
+  <tr>
+    <td style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 11px; color: #888; text-align: right; padding-top: 4px;">Message from the current owner</td>
+    <td></td>
+  </tr>
+</table>
+<table cellpadding="0" cellspacing="0" border="0" style="border: 2px solid #1a1a1a; margin: 0 0 20px 0; max-width: 220px;">
+  <tr><td style="padding: 16px 24px; text-align: center; font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 16px;">
+    <a href="https://app.companysemantics.ai/owner-transfer/accept/tok123" style="color: #0047FF; text-decoration: underline;"><b>&gt;&gt; ACCEPT &lt;&lt;</b></a>
+  </td></tr>
+</table>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 20px 0;">Expires in: <b>14 days</b></p>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 20px 0;">If you did not expect this invitation, you can safely ignore this email.</p>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0;">Company Semantics<br><span style="color: #888;">Questions? Contact <a href="mailto:support@companysemantics.ai" style="color: #888;">support@companysemantics.ai</a></span></p>
+</body>
+</html>",
   "subject": "You've been invited to become a workspace owner",
   "text": "You have been invited to become the owner of "Acme Corp".
@@ -795,6 +835,16 @@ Questions? Contact support@companysemantics.ai
 exports[`email render > org.ownership_transfer_completed · Default 1`] = `
 {
+  "html": "<!DOCTYPE html>
+<html lang="en">
+<head><meta charset="UTF-8"></head>
+<body style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; color: #1a1a1a; margin: 0; padding: 0;">
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 20px 0;">The ownership of <b>&quot;Acme Corp&quot;</b> has been transferred to <b>new.owner@acme.com</b>.</p>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 20px 0;">You are no longer the owner of this workspace, but you remain an admin.</p>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 20px 0;">If you did not authorize this transfer, please contact support immediately.</p>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0;">Company Semantics<br><span style="color: #888;">Questions? Contact <a href="mailto:support@companysemantics.ai" style="color: #888;">support@companysemantics.ai</a></span></p>
+</body>
+</html>",
   "subject": "Workspace ownership has been transferred",
   "text": "The ownership of "Acme Corp" has been transferred to new.owner@acme.com.
@@ -903,6 +953,19 @@ Questions? Contact support@companysemantics.ai
 exports[`email render > security.alert · Excessive OTP requests 1`] = `
 {
+  "html": "<!DOCTYPE html>
+<html lang="en">
+<head><meta charset="UTF-8"></head>
+<body style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; color: #1a1a1a; margin: 0; padding: 0;">
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 20px 0;">We detected an unusual number of login code requests for your account.</p>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 20px 0;">Details: <b>12 login codes requested in 5 minutes</b></p>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 4px 0;">If this was you, no action is needed.</p>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 4px 0;">If you didn&#39;t request these codes, someone may be trying to access your account.</p>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 20px 0;">We recommend reviewing your account security.</p>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 20px 0;">Time: <b>Sun, 12 Jul 2026 14:30:00 GMT</b></p>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0;">Company Semantics Security<br><span style="color: #888;">Questions? Contact <a href="mailto:support@companysemantics.ai" style="color: #888;">support@companysemantics.ai</a></span></p>
+</body>
+</html>",
   "subject": "Security alert for your account",
   "text": "We detected an unusual number of login code requests for your account.
@@ -923,6 +986,18 @@ Questions? Contact support@companysemantics.ai
 exports[`email render > security.alert · Unusual login location 1`] = `
 {
+  "html": "<!DOCTYPE html>
+<html lang="en">
+<head><meta charset="UTF-8"></head>
+<body style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; color: #1a1a1a; margin: 0; padding: 0;">
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 20px 0;">We detected a login attempt from an unusual location.</p>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 20px 0;">Details: <b>Login from Berlin, DE</b></p>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 4px 0;">If this was you, no action is needed.</p>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 20px 0;">If you didn&#39;t attempt to log in, please secure your account immediately.</p>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0 0 20px 0;">Time: <b>Sun, 12 Jul 2026 14:30:00 GMT</b></p>
+<p style="font-family: 'SF Mono', SFMono-Regular, Consolas, 'Liberation Mono', Menlo, monospace; font-size: 14px; margin: 0;">Company Semantics Security<br><span style="color: #888;">Questions? Contact <a href="mailto:support@companysemantics.ai" style="color: #888;">support@companysemantics.ai</a></span></p>
+</body>
+</html>",
   "subject": "Security alert for your account",
   "text": "We detected a login attempt from an unusual location.

package/src/email/render/render-email.ts CHANGED Viewed

@@ -1,6 +1,6 @@
 /**
  * Central email dispatcher. Given a kind + payload it returns
- * `{ subject, text, html? }`, pulling the subject from the registry (single
+ * `{ subject, text, html }`, pulling the subject from the registry (single
  * source of truth) and deriving both surfaces from ONE composed block list
  * (`htmlShell` + `textShell`). This is the one entry point both the backend
  * (real sends) and the app (Ladle preview) call.
@@ -28,8 +28,8 @@ export interface RenderedEmail {
   subject: string;
   /** Plain-text body. */
   text: string;
-  /** HTML body (present only for html-supported kinds). */
-  html?: string;
+  /** HTML body (every kind is dual-output). */
+  html: string;
 }
 /** Caller-supplied render options. */
@@ -55,30 +55,13 @@ export const IMPLEMENTED_EMAIL_KINDS = [
 export type ImplementedEmailKind = (typeof IMPLEMENTED_EMAIL_KINDS)[number];
-/**
- * Kinds delivered as plain text only. The unified block model renders HTML for
- * every template, but these keep their historical text-only surface — the
- * dispatcher omits `html` for them. (Enabling HTML later is deleting the entry.)
- */
-const TEXT_ONLY_KINDS = new Set<EmailKind>([
-  "security.alert",
-  "org.ownership_transfer",
-  "org.ownership_transfer_completed",
-]);
 /** Payload type for a kind (or `never` for kinds without a payload). */
 type PayloadFor<K extends EmailKind> = K extends keyof EmailPayloads
   ? EmailPayloads[K]
   : never;
-function toEmail(
-  subject: string,
-  kind: EmailKind,
-  blocks: Block[],
-): RenderedEmail {
-  const email: RenderedEmail = { subject, text: textShell(blocks) };
-  if (!TEXT_ONLY_KINDS.has(kind)) email.html = htmlShell(blocks);
-  return email;
+function toEmail(subject: string, blocks: Block[]): RenderedEmail {
+  return { subject, text: textShell(blocks), html: htmlShell(blocks) };
 }
 /**
@@ -100,19 +83,16 @@ export function renderEmail<K extends EmailKind>(
     case "auth.otp":
       return toEmail(
         subject,
-        kind,
         renderAuthOtp(payload as EmailPayloads["auth.otp"], options),
       );
     case "org.invite":
       return toEmail(
         subject,
-        kind,
         renderOrgInvite(payload as EmailPayloads["org.invite"]),
       );
     case "org.unit_owner_granted":
       return toEmail(
         subject,
-        kind,
         renderUnitOwnerGranted(
           payload as EmailPayloads["org.unit_owner_granted"],
         ),
@@ -120,7 +100,6 @@ export function renderEmail<K extends EmailKind>(
     case "org.ownership_transfer":
       return toEmail(
         subject,
-        kind,
         renderOwnershipTransfer(
           payload as EmailPayloads["org.ownership_transfer"],
         ),
@@ -128,7 +107,6 @@ export function renderEmail<K extends EmailKind>(
     case "org.ownership_transfer_completed":
       return toEmail(
         subject,
-        kind,
         renderOwnershipTransferCompleted(
           payload as EmailPayloads["org.ownership_transfer_completed"],
         ),
@@ -136,25 +114,21 @@ export function renderEmail<K extends EmailKind>(
     case "security.alert":
       return toEmail(
         subject,
-        kind,
         renderSecurityAlert(payload as EmailPayloads["security.alert"]),
       );
     case "chat.shared":
       return toEmail(
         subject,
-        kind,
         renderChatShared(payload as EmailPayloads["chat.shared"]),
       );
     case "share.granted":
       return toEmail(
         subject,
-        kind,
         renderShareGranted(payload as EmailPayloads["share.granted"]),
       );
     case "companyMd.access_requested":
       return toEmail(
         subject,
-        kind,
         renderAccessRequested(
           payload as EmailPayloads["companyMd.access_requested"],
         ),
@@ -162,7 +136,6 @@ export function renderEmail<K extends EmailKind>(
     case "companyMd.access_request_approved":
       return toEmail(
         subject,
-        kind,
         renderAccessApproved(
           payload as EmailPayloads["companyMd.access_request_approved"],
         ),
@@ -170,7 +143,6 @@ export function renderEmail<K extends EmailKind>(
     case "companyMd.access_request_denied":
       return toEmail(
         subject,
-        kind,
         renderAccessDenied(
           payload as EmailPayloads["companyMd.access_request_denied"],
         ),

package/src/permissions/access-source.ts CHANGED Viewed

@@ -12,6 +12,10 @@
  *   - `ownership`    — entity.owner_user_id column projection
  *   - `visibility`   — entity.visibility tier compiled to viewer rows
  *   - `inheritance`  — org-chart-membership-based unit walk
+ *   - `authority`    — org-admin / account-owner / unit-editor / sharing-policy
+ *                      bands as synthetic live-resolved principals (ADR-BE-185)
+ *   - `context_association` — a company.md context-bank doc inherits viewer access
+ *                      from every associated parent (the governed union, ADR-BE-392)
  *   - `migration`    — one-shot backfill from legacy systems (AUTH-004)
  */
 import { z } from "zod";
@@ -21,6 +25,8 @@ export const ACCESS_SOURCES = [
   "ownership",
   "visibility",
   "inheritance",
+  "authority",
+  "context_association",
   "migration",
 ] as const;
 export type AccessSource = (typeof ACCESS_SOURCES)[number];