@company-semantics/contracts 78.1.0 → 79.0.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "78.1.0",
+  "version": "79.0.0",
   "private": false,
   "repository": {
     "type": "git",

package/src/action-items/__tests__/vocabulary.test.ts

@@ -31,6 +31,7 @@ function makeItem(over: Partial<Record<string, unknown>> = {}) {
     title: "Maya Chen wants access",
     detail: "Reviewing the cross-team roadmap",
     contextLabel: "Sales.md",
+    provider: null,
     href: "/@acme/md/doc-1?share=1&request=req-1",
     createdAt: "2026-07-27T00:00:00.000Z",
     ...over,
@@ -139,6 +140,15 @@ describe("ActionItemSchema", () => {
     expect(parsed.unitPath).toBeNull();
   });
 
+  it("requires a provider — null when the item is about the product", () => {
+    const { provider: _omitted, ...withoutProvider } = makeItem();
+    expect(ActionItemSchema.safeParse(withoutProvider).success).toBe(false);
+    expect(
+      ActionItemSchema.safeParse(makeItem({ provider: "google_drive" }))
+        .success,
+    ).toBe(true);
+  });
+
   it("rejects a kind outside the vocabulary", () => {
     expect(() =>
       ActionItemSchema.parse(makeItem({ kind: "org.invite" })),

package/src/action-items/schemas.ts

@@ -69,6 +69,16 @@ export const ActionItemSchema = z.object({
   detail: z.string().nullable(),
   /** The thing it is about, as the user names it, e.g. "Sales.md". */
   contextLabel: z.string(),
+  /**
+   * The external system this row is ABOUT, when it is about one — the open
+   * provider id the identity-link vocabulary uses system-wide ('bamboohr',
+   * 'google_drive', 'slack'). A surface shows that system's own mark.
+   *
+   * Set by the producer, because only it knows: an org's structure findings
+   * come from whichever HRIS it connected, which the kind cannot say.
+   * `null` when the row is about the product itself (a doc, a chat, billing).
+   */
+  provider: z.string().min(1).nullable(),
   /**
    * Where to go to RESOLVE it — a RELATIVE app path, e.g.
    * `/@acme/md/{docId}?share=1&request={id}`.

package/src/api/generated-spec-hash.ts

@@ -1,3 +1,3 @@
 // AUTO-GENERATED — do not edit. Run pnpm generate:spec-hash to regenerate.
-export const SPEC_HASH = '5fb16e310c8b' as const;
-export const SPEC_HASH_FULL = '5fb16e310c8baf449866b5b84ae859bd3933c7835ba47b6758452fe4dfcceba5' as const;
+export const SPEC_HASH = '554ba5a13882' as const;
+export const SPEC_HASH_FULL = '554ba5a138827be4f4959d0a9d0199be36e129c9caacce47370121ffede938bf' as const;

package/src/api/generated.ts

@@ -7470,6 +7470,7 @@ export interface components {
                 title: string;
                 detail: string | null;
                 contextLabel: string;
+                provider: string | null;
                 href: string;
                 createdAt: string;
             }[];
@@ -7491,6 +7492,7 @@ export interface components {
                     title: string;
                     detail: string | null;
                     contextLabel: string;
+                    provider: string | null;
                     href: string;
                     createdAt: string;
                 };
@@ -7510,6 +7512,7 @@ export interface components {
                     title: string;
                     detail: string | null;
                     contextLabel: string;
+                    provider: string | null;
                     href: string | null;
                     createdAt: string;
                     readAt: string | null;

package/src/user-notifications/__tests__/vocabulary.test.ts

@@ -22,6 +22,7 @@ function makeNotification(over: Record<string, unknown> = {}) {
     title: "Dev Patel approved your request",
     detail: null,
     contextLabel: "Q3 OKRs",
+    provider: null,
     href: "/@acme/md/doc-1",
     createdAt: "2026-07-30T12:00:00.000Z",
     readAt: null,
@@ -138,6 +139,30 @@ describe("UserNotificationSchema", () => {
   });
 });
 
+describe("provider — the external system a row is about", () => {
+  it("carries a provider id when the row is about one", () => {
+    expect(
+      UserNotificationSchema.safeParse(
+        makeNotification({ provider: "bamboohr" }),
+      ).success,
+    ).toBe(true);
+  });
+
+  it("is REQUIRED — null says 'about the product', absence says nothing", () => {
+    const { provider: _omitted, ...withoutProvider } = makeNotification();
+    expect(UserNotificationSchema.safeParse(withoutProvider).success).toBe(
+      false,
+    );
+  });
+
+  it("rejects an empty id — a mark nobody can look up", () => {
+    expect(
+      UserNotificationSchema.safeParse(makeNotification({ provider: "" }))
+        .success,
+    ).toBe(false);
+  });
+});
+
 describe("FeedItem discriminates on `row`", () => {
   it("accepts an informational row", () => {
     const parsed = FeedItemSchema.safeParse({
@@ -158,6 +183,7 @@ describe("FeedItem discriminates on `row`", () => {
         title: "Maya Chen wants access",
         detail: null,
         contextLabel: "Q3 OKRs",
+        provider: null,
         href: "/@acme/md/doc-1?share=1&request=req-1",
         createdAt: "2026-07-30T12:00:00.000Z",
       },

package/src/user-notifications/schemas.ts

@@ -49,6 +49,16 @@ export const UserNotificationSchema = z.object({
   detail: z.string().nullable(),
   /** The thing it is about, as the user names it, e.g. "Sales.md". */
   contextLabel: z.string(),
+  /**
+   * The external system this row is ABOUT, when it is about one — the open
+   * provider id the identity-link vocabulary uses system-wide ('bamboohr',
+   * 'google_drive', 'slack'). A surface shows that system's own mark.
+   *
+   * Set by the producer, because only it knows: an org's structure findings
+   * come from whichever HRIS it connected, which the kind cannot say.
+   * `null` when the row is about the product itself (a doc, a chat, billing).
+   */
+  provider: z.string().min(1).nullable(),
   /**
    * Where to go to SEE it — a RELATIVE app path.
    *