@company-semantics/contracts 6.1.0 → 6.3.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "6.1.0",
+  "version": "6.3.0",
   "private": false,
   "repository": {
     "type": "git",

package/src/api/generated-spec-hash.ts

@@ -1,3 +1,3 @@
 // AUTO-GENERATED — do not edit. Run pnpm generate:spec-hash to regenerate.
-export const SPEC_HASH = '040afdc07507' as const;
-export const SPEC_HASH_FULL = '040afdc07507321af65f848b48a5843c9a80b13017fbf62d22e134703cb3d10a' as const;
+export const SPEC_HASH = '22781c2b738f' as const;
+export const SPEC_HASH_FULL = '22781c2b738fdbdb0833b50ceab729227eccb7c54176ee35a373cc903d536b6c' as const;

package/src/api/generated.ts

@@ -1198,6 +1198,23 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/capabilities": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Get the viewer resolved mutation capabilities */
+        get: operations["getMutationCapabilities"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/company-md/tree": {
         parameters: {
             query?: never;
@@ -3551,6 +3568,63 @@ export interface components {
             /** @constant */
             status: "cancelled";
         };
+        CapabilitiesResponse: {
+            profile?: {
+                fullName: {
+                    /** @enum {string} */
+                    state: "editable" | "locked";
+                    /** @enum {string} */
+                    reason?: "sso" | "rbac";
+                    requiredScope?: string;
+                };
+                preferredName: {
+                    /** @enum {string} */
+                    state: "editable" | "locked";
+                    /** @enum {string} */
+                    reason?: "sso" | "rbac";
+                    requiredScope?: string;
+                };
+            };
+            org?: {
+                name: {
+                    /** @enum {string} */
+                    state: "editable" | "locked";
+                    /** @enum {string} */
+                    reason?: "sso" | "rbac";
+                    requiredScope?: string;
+                };
+            };
+            orgUnit?: {
+                /** @enum {string} */
+                manage: "allowed" | "blocked";
+            };
+            actions?: {
+                members: {
+                    invite: {
+                        /** @enum {string} */
+                        state: "allowed" | "blocked";
+                        requiredScope?: string;
+                    };
+                    remove: {
+                        /** @enum {string} */
+                        state: "allowed" | "blocked";
+                        requiredScope?: string;
+                    };
+                    changeRole: {
+                        /** @enum {string} */
+                        state: "allowed" | "blocked";
+                        requiredScope?: string;
+                    };
+                };
+                orgAdmins: {
+                    manage: {
+                        /** @enum {string} */
+                        state: "allowed" | "blocked";
+                        requiredScope?: string;
+                    };
+                };
+            };
+        };
         CompanyMdListResponse: {
             items: {
                 id: string;
@@ -6497,6 +6571,26 @@ export interface operations {
             };
         };
     };
+    getMutationCapabilities: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Resolved mutation capabilities for the current viewer + org */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["CapabilitiesResponse"];
+                };
+            };
+        };
+    };
     getCompanyMdTree: {
         parameters: {
             query?: {

package/src/email/__tests__/registry.test.ts

@@ -22,6 +22,12 @@ describe('EMAIL_KINDS golden snapshot', () => {
         plainTextRequired: true,
         htmlSupported: true,
       },
+      'org.leadership_granted': {
+        kind: 'org.leadership_granted',
+        subject: "You've been added to a team",
+        plainTextRequired: true,
+        htmlSupported: true,
+      },
       'security.alert': {
         kind: 'security.alert',
         subject: 'Security alert for your account',
@@ -95,7 +101,7 @@ describe('getEmailKindDefinition', () => {
 })
 
 describe('isValidEmailKind', () => {
-  it('returns true for all 5 valid email kinds', () => {
+  it('returns true for all valid email kinds', () => {
     for (const kind of Object.keys(EMAIL_KINDS)) {
       expect(isValidEmailKind(kind)).toBe(true)
     }

package/src/email/registry.ts

@@ -76,6 +76,12 @@ export const EMAIL_KINDS = {
     plainTextRequired: true,
     htmlSupported: true,
   },
+  'org.leadership_granted': {
+    kind: 'org.leadership_granted',
+    subject: "You've been added to a team",
+    plainTextRequired: true,
+    htmlSupported: true,
+  },
   'security.alert': {
     kind: 'security.alert',
     subject: 'Security alert for your account',

package/src/email/types.ts

@@ -27,6 +27,7 @@ export type EmailKind =
   | 'auth.otp'
   | 'auth.magic_link' // future
   | 'org.invite' // future
+  | 'org.leadership_granted'
   | 'security.alert' // future
   | 'chat.shared'
 
@@ -58,6 +59,20 @@ export interface EmailPayloads {
     acceptUrl: string
     expiresInDays: number
   }
+  'org.leadership_granted': {
+    /** Display name of the person who granted access */
+    granterName: string
+    /** Display name of the recipient (optional; falls back to a neutral greeting) */
+    recipientName?: string
+    /** Name of the org unit / team the access applies to */
+    unitName: string
+    /** Human-readable role label the recipient was given */
+    roleLabel: 'Leader' | 'Delegate'
+    /** Full URL to view the org unit in the app */
+    ctaUrl: string
+    /** Optional message from the granter, shown in the email and recorded with the grant */
+    message?: string
+  }
   'security.alert': {
     /** Type of security alert */
     alertType: 'excessive_otp_requests' | 'unusual_login_location'

package/src/generated/openapi-routes.ts

@@ -10,6 +10,7 @@ export const openApiRoutes = {
   '/api/account/sessions': ['GET'],
   '/api/account/sessions/{sessionId}': ['DELETE'],
   '/api/auth/consent/grant': ['POST'],
+  '/api/capabilities': ['GET'],
   '/api/chats': ['GET', 'POST'],
   '/api/chats/by-interaction/{interactionId}': ['GET'],
   '/api/chats/events': ['GET'],

package/src/org/schemas.ts

@@ -912,6 +912,11 @@ export const CreateDelegationRequestSchema = z.object({
    * UI captures a date and sends end-of-day in the user's timezone.
    */
   expiresAt: z.string().datetime().nullable().optional(),
+  /**
+   * When true, the granted user is emailed a notification (carrying `note` as
+   * the message). Not persisted — it only gates the side-effect email.
+   */
+  notify: z.boolean().optional().default(false),
 });
 export type CreateDelegationRequest = z.infer<typeof CreateDelegationRequestSchema>;