@company-semantics/contracts 38.0.0 → 39.0.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "38.0.0",
+  "version": "39.0.0",
   "private": false,
   "repository": {
     "type": "git",
@@ -102,8 +102,8 @@
     "guard:test": "vitest run scripts/ci/__tests__",
     "release": "npx tsx scripts/release.ts",
     "prepublishOnly": "echo 'ERROR: Publishing is CI-only via tag push. Use pnpm release instead.' && exit 1",
-    "test": "vitest run",
-    "test:run": "vitest run",
+    "test": "bash scripts/vitest-run.sh run",
+    "test:run": "bash scripts/vitest-run.sh run",
     "color": "tsx scripts/color.ts",
     "generate:spec-hash": "tsx scripts/generate-spec-hash.ts",
     "generate:spec-hash:check": "tsx scripts/generate-spec-hash.ts --check",
@@ -132,10 +132,10 @@
     "amphtml-validator": "^1.0.38",
     "culori": "^4.0.2",
     "husky": "^9.1.7",
-    "lint-staged": "^17.0.8",
-    "markdownlint-cli2": "^0.23.0",
+    "lint-staged": "^17.1.0",
+    "markdownlint-cli2": "^0.23.1",
     "openapi-typescript": "^7.13.0",
-    "prettier": "^3.9.5",
+    "prettier": "^3.9.6",
     "tsx": "^4.23.1",
     "typescript": "^5.8.3",
     "vitest": "^4.1.10",

package/src/api/generated-spec-hash.ts

@@ -1,3 +1,3 @@
 // AUTO-GENERATED — do not edit. Run pnpm generate:spec-hash to regenerate.
-export const SPEC_HASH = 'e5d6dea0b94a' as const;
-export const SPEC_HASH_FULL = 'e5d6dea0b94a349899118cd662dae5f352b808061a2bf430c5ff284534a5b770' as const;
+export const SPEC_HASH = '35fcb4a5f2ca' as const;
+export const SPEC_HASH_FULL = '35fcb4a5f2ca6f167a3b18024de026f143681623fea3442c2587b2ab64c9d34a' as const;

package/src/api/generated.ts

@@ -5624,6 +5624,8 @@ export interface components {
             tier: "private" | "unit" | "org";
             /** @enum {string} */
             role?: "editor" | "commenter" | "viewer";
+            /** @enum {string} */
+            discoverability?: "org" | "owners";
         };
         OwnerTransferRequest: {
             /** Format: uuid */
@@ -8675,13 +8677,6 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description Requires org.view_company_md scope */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
         };
     };
     getCompanyMdDocSharing: {

package/src/permissions/share-api.ts

@@ -8,6 +8,17 @@
  *
  * Authority: ADR-CTRL-085 (Rights Table), ADR-CTRL-086 (most-permissive
  * aggregation), ADR-BE-181 (AUTH-006 compose model).
+ *
+ * DECODER RING — the label/identifier map, stated once.
+ *
+ *   UI "General access"  = wire `visibility` / EntityVisibility
+ *                          (access scope: WHO may read)
+ *   UI "Discoverability" = wire `discoverability` / EntityDiscoverability
+ *                          (WHO knows it exists)
+ *
+ * They are SIBLINGS, not modifiers. A doc can be readable by two named people
+ * and still be globally hidden: access changes without discoverability
+ * changing (ADR-CONTRACTS-093).
  */
 import { z } from "zod";
 import { AccessLevelSchema } from "./access-levels";
@@ -41,6 +52,9 @@ export type GrantableAccessLevel = z.infer<typeof GrantableAccessLevelSchema>;
 export const EntityVisibilitySchema = z.enum(["private", "unit", "org"]);
 export type EntityVisibility = z.infer<typeof EntityVisibilitySchema>;
 
+export const EntityDiscoverabilitySchema = z.enum(["org", "owners"]);
+export type EntityDiscoverability = z.infer<typeof EntityDiscoverabilitySchema>;
+
 export const AclGrantRequestSchema = z.object({
   access_level: GrantableAccessLevelSchema,
   /**
@@ -83,7 +97,10 @@ export const AclListResponseSchema = z.object({
   owner_user_ids: z
     .array(z.string().uuid())
     .refine(uniqueValues, { message: "duplicate id in owner_user_ids" }),
-  /** General-access scope: WHO is eligible (the discoverability axis). */
+  /**
+   * General-access scope: WHO may read. NOT discoverability — see
+   * `discoverability`.
+   */
   visibility: EntityVisibilitySchema,
   /**
    * The ROLE the general-access scope grants its audience: WHAT they may do (the
@@ -92,7 +109,20 @@ export const AclListResponseSchema = z.object({
    * ignored when `visibility` is `private` (no general grant).
    */
   general_access_role: GrantableAccessLevelSchema.default("viewer"),
-  editors_can_share: z.boolean(),
+  /**
+   * Who knows this entity EXISTS — a SIBLING of `visibility`, not a modifier
+   * on it (ADR-CONTRACTS-093).
+   *
+   * ABSENT => this entity type has no discoverability axis (work_item,
+   * meeting_recording). Deliberately not defaulted: `org|owners` has no honest
+   * cross-entity value, unlike `general_access_role`'s `viewer`.
+   *
+   * The policy's domain is NON-READERS only. When `visibility` is `org` every
+   * member is a reader, so the stored value affects no one — it is not erased,
+   * it simply has no subjects (ADR-CTRL-194 invariant 4). A UI therefore
+   * disables the control rather than rewriting the value.
+   */
+  discoverability: EntityDiscoverabilitySchema.optional(),
   grants: z.array(AclGrantResponseSchema),
 });
 export type AclListResponse = z.infer<typeof AclListResponseSchema>;
@@ -106,6 +136,14 @@ export const VisibilityPatchRequestSchema = z.object({
    * set); ignored when `tier` is `private`.
    */
   role: GrantableAccessLevelSchema.optional(),
+  /**
+   * New discoverability. OMITTED => preserve the stored value.
+   *
+   * NOTE the asymmetry with the response field: there `undefined` means "not
+   * applicable to this entity type"; here it means "leave unchanged"
+   * (ADR-CONTRACTS-093).
+   */
+  discoverability: EntityDiscoverabilitySchema.optional(),
 });
 export type VisibilityPatchRequest = z.infer<
   typeof VisibilityPatchRequestSchema