@company-semantics/contracts 9.2.0 → 11.0.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "9.2.0",
+  "version": "11.0.0",
   "private": false,
   "repository": {
     "type": "git",
@@ -115,7 +115,7 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@types/node": "^22.19.19",
+    "@types/node": "^25.9.2",
     "husky": "^9.1.7",
     "lint-staged": "^17.0.7",
     "markdownlint-cli2": "^0.22.1",

package/src/content/schemas.ts

@@ -74,6 +74,12 @@ export const CompanyMdDocResponseSchema = z.object({
   title: z.string(),
   level: z.enum(["root", "department", "team", "context"]),
   content: z.string(),
+  /**
+   * When `true`, `content` is the redacted empty body (`''`) returned to a
+   * metadata-only (meta-tier) viewer who administers the doc but may not read
+   * its body (ADR-BE-245). Omitted/`false` on the normal full-content path.
+   */
+  contentRedacted: z.boolean().optional(),
   visibility: z.enum(["private", "unit", "org"]),
   parentId: z.string().nullable(),
   owningUnitId: z.string().nullable(),

package/src/index.ts

@@ -644,7 +644,6 @@ export {
   resolveScope,
   toQueryKey,
   fromQueryKey,
-  resourceRelationships,
   matchesResourceKey,
 } from "./resource-keys";
 

package/src/org/company-md.ts

@@ -119,6 +119,12 @@ export interface CompanyMdTreeNode extends CompanyMdNodeIdentity {
 
 export interface CompanyMdDocCore extends CompanyMdNodeIdentity {
   readonly content: string;
+  /**
+   * When `true`, `content` is the redacted empty body (`''`) returned to a
+   * metadata-only (meta-tier) viewer who administers the doc but may not read
+   * its body (ADR-BE-245). Omitted/`false` on the normal full-content path.
+   */
+  readonly contentRedacted?: boolean;
 }
 
 export interface CompanyMdDocCollaborators {

package/src/permissions/access-levels.ts

@@ -1,18 +1,25 @@
 /**
  * Permission Access Levels
  *
- * Canonical four-level access vocabulary for object permissions across
- * Company Semantics, modeled on the Google-Docs four-level scheme.
+ * Canonical access vocabulary for object permissions across
+ * Company Semantics, modeled on the Google-Docs four-level scheme plus a
+ * weakest `meta` tier below `viewer`.
  *
  * Authority: ADR-CTRL-085 (Rights Table). See ADR-CTRL-084 for how these
  * levels are materialized into `effective_acl_grants`, and ADR-CTRL-086 for
  * the aggregation rule (most-permissive across sources).
  *
  * The commenter level is currently a stub — see ADR-CTRL-087.
+ *
+ * `meta` is the metadata-only tier used for org-admin lifecycle access
+ * (ADR-BE-245). It is materialized/derived only — never an explicit
+ * `acl_grants` value — and sits strictly below `viewer`, so
+ * `isAtLeast('meta', 'viewer') === false`.
  */
 import { z } from "zod";
 
 export const ACCESS_LEVELS = [
+  "meta",
   "owner",
   "editor",
   "commenter",
@@ -27,10 +34,11 @@ export const AccessLevelSchema = z.enum(ACCESS_LEVELS);
  * Used by `highestGrant()` in AUTH-006 (PRD-00674) to aggregate across sources.
  */
 export const ACCESS_LEVEL_ORDER: Record<AccessLevel, number> = {
-  viewer: 0,
-  commenter: 1,
-  editor: 2,
-  owner: 3,
+  meta: 0,
+  viewer: 1,
+  commenter: 2,
+  editor: 3,
+  owner: 4,
 };
 
 /**

package/src/resource-keys.ts

@@ -251,34 +251,6 @@ export function fromQueryKey(queryKey: readonly string[]): ResourceKey {
   throw new Error(`Unknown resource type in query key: '${type}'`);
 }
 
-/**
- * Bidirectional resource relationships.
- * TanStack does NOT support prefix matching across different key shapes.
- * When invalidating a collection, we must also invalidate related identity entries (and vice versa).
- */
-export const resourceRelationships: Record<string, string[]> = {
-  members: ["member"],
-  member: ["members"],
-  departments: ["department"],
-  department: ["departments"],
-  chats: ["chat"],
-  chat: ["chats"],
-  teams: ["team"],
-  team: ["teams"],
-  companyMdDocs: ["companyMdDoc"],
-  companyMdDoc: ["companyMdDocs"],
-  // OrgUnit: reparent/create/archive invalidates the tree view of the whole org;
-  // membership mutations invalidate the unit + its memberships list.
-  orgTree: ["orgUnit", "orgUnitChildren", "orgUnitAncestors"],
-  orgUnit: ["orgTree"],
-  orgUnitChildren: ["orgTree"],
-  orgUnitAncestors: ["orgTree"],
-  // Subtree manage is driven by memberships (ADR-BE-151); mutating memberships
-  // invalidates both the direct roster and the effective-managers read.
-  orgUnitMemberships: ["orgUnit", "orgUnitPermissions"],
-  orgUnitPermissions: ["orgUnitMemberships"],
-};
-
 /**
  * Strict predicate for matching resource keys.
  * Compares type + scope fields exactly. No partial matching. No loose comparisons.