@company-semantics/contracts 39.4.0 → 39.6.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "39.4.0",
+  "version": "39.6.0",
   "private": false,
   "repository": {
     "type": "git",
@@ -162,5 +162,5 @@
     "*.md": "markdownlint-cli2",
     "package.json": "node -e \"JSON.parse(require('fs').readFileSync('package.json'))\""
   },
-  "securityRequirementsVersion": "888e8f888ed3bee8311fd39dee4b24b4f23a6638f1df183e3e6b4e0455704ae2"
+  "securityRequirementsVersion": "9ffb1b974fa033f13a73539f8338cad319b62bb95695aa4ac7b5215a50493513"
 }

package/src/action-items/schemas.ts

@@ -70,8 +70,15 @@ export const ActionItemSchema = z.object({
   /** The thing it is about, as the user names it, e.g. "Sales.md". */
   contextLabel: z.string(),
   /**
-   * Where to go to RESOLVE it. An action item whose href only *shows* the thing
-   * is a notification, not an action item — see `./kinds`.
+   * Where to go to RESOLVE it — a RELATIVE app path, e.g.
+   * `/@acme/md/{docId}?share=1&request={id}`.
+   *
+   * Relative because the consumer is an in-app link and an absolute URL would
+   * drop the SPA on click. The equivalent notification builds the absolute form
+   * itself, because that one is leaving the building.
+   *
+   * An href that only *shows* the thing makes this a notification rather than
+   * an action item — see `./kinds`.
    */
   href: z.string(),
   createdAt: z.string(),

package/src/api/generated-spec-hash.ts

@@ -1,3 +1,3 @@
 // AUTO-GENERATED — do not edit. Run pnpm generate:spec-hash to regenerate.
-export const SPEC_HASH = '578211b8b148' as const;
-export const SPEC_HASH_FULL = '578211b8b1489b1d26938629c14b09a94ee3bf636085a5f058f1b573747f8fce' as const;
+export const SPEC_HASH = 'b02ad24e598a' as const;
+export const SPEC_HASH_FULL = 'b02ad24e598abefeaaa58e146e9784fea88bc3abbd1af8b24a7d9c5d947db757' as const;

package/src/api/generated.ts

@@ -2876,6 +2876,23 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/me/action-items": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Everything awaiting my decision, across every domain */
+        get: operations["listMyActionItems"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/me/meetings/recordings/start": {
         parameters: {
             query?: never;
@@ -5488,6 +5505,24 @@ export interface components {
         UpdateWorkItemTitleRequest: {
             title: string;
         };
+        ActionItemListResponse: {
+            items: {
+                id: string;
+                /** @enum {string} */
+                kind: "companyMd.access_request_pending" | "execution.confirmation_pending";
+                target: {
+                    /** @enum {string} */
+                    type: "company_md" | "org_unit" | "org" | "execution";
+                    id: string;
+                };
+                unitPath: string | null;
+                title: string;
+                detail: string | null;
+                contextLabel: string;
+                href: string;
+                createdAt: string;
+            }[];
+        };
         /** @description Recording + work_item ids and the transcription session grant. */
         StartMeetingRecordingResponse: {
             /** @description ULID; unified trace key for the recording (INV-MTG-7). */
@@ -10745,6 +10780,26 @@ export interface operations {
             };
         };
     };
+    listMyActionItems: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Outstanding decisions for the current user, newest first */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ActionItemListResponse"];
+                };
+            };
+        };
+    };
     startMeetingRecording: {
         parameters: {
             query?: never;

package/src/generated/openapi-routes.ts

@@ -75,6 +75,7 @@ export const openApiRoutes = {
   '/api/internal-admin/impersonate/start': ['POST'],
   '/api/me': ['GET'],
   '/api/me/access-list': ['GET'],
+  '/api/me/action-items': ['GET'],
   '/api/me/meetings/recordings/start': ['POST'],
   '/api/me/meetings/recordings/{id}': ['DELETE'],
   '/api/me/meetings/recordings/{id}/complete': ['POST'],

package/src/org/README.md

@@ -40,6 +40,8 @@ Shared type vocabulary for organization ownership, type classification, and tran
 - `COMPANY_MD_COLLAB_MAX_DOC_TEXT_BYTES` — Cap on the MATERIALIZED document text, in UTF-8 bytes of the expanded result.
 - `COMPANY_MD_COLLAB_MAX_PRESENCE_POSITION_CHARS` — Cap on ONE presence position blob (`anchor` or `head`), in base64 chars.
 - `COMPANY_MD_COLLAB_MAX_UPDATE_B64_CHARS` — Cap on ONE encoded update, measured on the base64 payload as it is sent.
+- `COMPANY_MD_COLLAB_PRESENCE_HEARTBEAT_MS` — The cadence clients must re-POST presence at.
+- `COMPANY_MD_COLLAB_PRESENCE_TTL_MS` — How long the server keeps a presence entry alive with no fresh signal.
 - `COMPANY_MD_COLLAB_TEXT_KEY` — The Y.Doc root key holding the document body — a CONTRACT, not a detail.
 - `CanonicalFacts` _(type)_
 - `CanonicalFactsSchema` — The full normalized batch an external-source adapter emits in one pass: every person, org unit, position…

package/src/org/company-md-collab.ts

@@ -74,6 +74,30 @@ export const COMPANY_MD_COLLAB_MAX_DOC_TEXT_BYTES = 1_000_000 as const;
  */
 export const COMPANY_MD_COLLAB_MAX_PRESENCE_POSITION_CHARS = 512 as const;
 
+/**
+ * How long the server keeps a presence entry alive with no fresh signal.
+ *
+ * A protocol promise, not a knob: it is how long a crashed editor haunts the
+ * roster, and BOTH sides have to reason about it. The server expires on it and
+ * broadcasts a synthetic departure; a client's own expiry net has to sit beyond
+ * it, because a client clock that could fire first would race the authority and
+ * evict peers whose heartbeat merely landed late.
+ *
+ * Lives here rather than in either implementation because the app cannot import
+ * from the backend, and a hand-copy in each repo is a silent-drift bug waiting
+ * to happen. See ADR-BE-439 and ADR-APP-089.
+ */
+export const COMPANY_MD_COLLAB_PRESENCE_TTL_MS = 30_000 as const;
+
+/**
+ * The cadence clients must re-POST presence at.
+ *
+ * Half {@link COMPANY_MD_COLLAB_PRESENCE_TTL_MS}, so one lost heartbeat never
+ * expires a live editor. Published so the client contract and the server bound
+ * are one number in one place.
+ */
+export const COMPANY_MD_COLLAB_PRESENCE_HEARTBEAT_MS = 15_000 as const;
+
 // ---------------------------------------------------------------------------
 // Sequences
 // ---------------------------------------------------------------------------

package/src/org/index.ts

@@ -235,6 +235,8 @@ export {
   COMPANY_MD_COLLAB_MAX_UPDATE_B64_CHARS,
   COMPANY_MD_COLLAB_MAX_DOC_TEXT_BYTES,
   COMPANY_MD_COLLAB_MAX_PRESENCE_POSITION_CHARS,
+  COMPANY_MD_COLLAB_PRESENCE_TTL_MS,
+  COMPANY_MD_COLLAB_PRESENCE_HEARTBEAT_MS,
   CompanyMdCollabSyncLimitsSchema,
   CompanyMdCollabSyncResponseSchema,
   CompanyMdCollabUpdateAcceptedSchema,