@noodleseed/one 0.173.0 → 0.175.0

package/node_modules/@noodle-borg/wire-contracts/dist/application-draft-validation.d.ts

@@ -0,0 +1,59 @@
+import { z } from 'zod';
+export declare const ApplicationDraftValidationResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        validation: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            status: z.ZodLiteral<"valid">;
+            compilerDigest: z.ZodString;
+            artifactDigest: z.ZodString;
+            issues: z.ZodArray<z.ZodNever>;
+            draftId: z.ZodString;
+            revision: z.ZodNumber;
+            sourceDigest: z.ZodString;
+            check: z.ZodLiteral<"source-and-manifest">;
+            published: z.ZodLiteral<false>;
+        }, z.core.$strict>, z.ZodObject<{
+            status: z.ZodLiteral<"invalid">;
+            issues: z.ZodArray<z.ZodObject<{
+                code: z.ZodString;
+                message: z.ZodString;
+                path: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            draftId: z.ZodString;
+            revision: z.ZodNumber;
+            sourceDigest: z.ZodString;
+            check: z.ZodLiteral<"source-and-manifest">;
+            published: z.ZodLiteral<false>;
+        }, z.core.$strict>], "status">;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const ApplicationDraftValidationClientResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        validation: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            status: z.ZodLiteral<"valid">;
+            compilerDigest: z.ZodString;
+            artifactDigest: z.ZodString;
+            issues: z.ZodArray<z.ZodNever>;
+            draftId: z.ZodString;
+            revision: z.ZodNumber;
+            sourceDigest: z.ZodString;
+            check: z.ZodLiteral<"source-and-manifest">;
+            published: z.ZodLiteral<false>;
+        }, z.core.$strict>, z.ZodObject<{
+            status: z.ZodLiteral<"invalid">;
+            issues: z.ZodArray<z.ZodObject<{
+                code: z.ZodString;
+                message: z.ZodString;
+                path: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            draftId: z.ZodString;
+            revision: z.ZodNumber;
+            sourceDigest: z.ZodString;
+            check: z.ZodLiteral<"source-and-manifest">;
+            published: z.ZodLiteral<false>;
+        }, z.core.$strict>], "status">;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type ApplicationDraftValidation = z.infer<typeof ApplicationDraftValidationResponseSchema>['data']['validation'];
+//# sourceMappingURL=application-draft-validation.d.ts.map

package/node_modules/@noodle-borg/wire-contracts/dist/application-draft-validation.js

@@ -0,0 +1,38 @@
+import { z } from 'zod';
+import { ApplicationDraftIdSchema } from './application-drafts.js';
+/** A source check is transient evidence, never a stored publication/activation receipt. */
+function response(additive) {
+    const object = additive ? z.object : z.strictObject;
+    const common = {
+        draftId: ApplicationDraftIdSchema,
+        revision: z.number().int().min(1).max(2147483647),
+        sourceDigest: z.string().regex(/^[a-f0-9]{64}$/),
+        check: z.literal('source-and-manifest'),
+        published: z.literal(false),
+    };
+    const validation = z.discriminatedUnion('status', [
+        object({
+            ...common,
+            status: z.literal('valid'),
+            compilerDigest: z.string().regex(/^sha256:[a-f0-9]{64}$/),
+            artifactDigest: z.string().regex(/^[a-f0-9]{64}$/),
+            issues: z.array(z.never()).max(0),
+        }),
+        object({
+            ...common,
+            status: z.literal('invalid'),
+            issues: z
+                .array(object({
+                code: z.string().regex(/^[a-z][a-z0-9_]{0,79}$/),
+                message: z.string().max(500),
+                path: z.string().max(240).optional(),
+            }))
+                .min(1)
+                .max(20),
+        }),
+    ]);
+    return object({ ok: z.literal(true), data: object({ validation }) });
+}
+export const ApplicationDraftValidationResponseSchema = response(false);
+export const ApplicationDraftValidationClientResponseSchema = response(true);
+//# sourceMappingURL=application-draft-validation.js.map

package/node_modules/@noodle-borg/wire-contracts/dist/business-information.d.ts

@@ -41,12 +41,14 @@ export declare const BusinessGrantRoleSchema: z.ZodEnum<{
     manager: "manager";
 }>;
 export type BusinessGrantRole = z.infer<typeof BusinessGrantRoleSchema>;
-export declare const MANAGED_RECORD_ORIGIN_SURFACES: readonly ["public", "portal", "mcp", "api"];
+/** `messaging` marks trusted channel provenance (ADR 0240), never a client-claimed origin. */
+export declare const MANAGED_RECORD_ORIGIN_SURFACES: readonly ["public", "portal", "mcp", "api", "messaging"];
 export declare const ManagedRecordOriginSurfaceSchema: z.ZodEnum<{
     public: "public";
     mcp: "mcp";
     portal: "portal";
     api: "api";
+    messaging: "messaging";
 }>;
 export type ManagedRecordOriginSurface = z.infer<typeof ManagedRecordOriginSurfaceSchema>;
 export declare const COLLECTION_SOURCE_HEALTH_STATES: readonly ["pending", "healthy", "degraded", "unavailable", "authorization_required", "paused"];
@@ -439,6 +441,22 @@ export declare const SolutionInstallationActivationSchema: z.ZodDiscriminatedUni
     canRetry: z.ZodLiteral<false>;
 }, z.core.$strict>], "state">;
 export type SolutionInstallationActivation = z.infer<typeof SolutionInstallationActivationSchema>;
+/** Selected authority version determines the role vocabulary; never infer or merge versions. */
+export declare const BusinessInstallationAccessSchema: z.ZodObject<{
+    currentRole: z.ZodUnion<readonly [z.ZodEnum<{
+        operator: "operator";
+        viewer: "viewer";
+        administrator: "administrator";
+        manager: "manager";
+    }>, z.ZodEnum<{
+        operator: "operator";
+        owner: "owner";
+        viewer: "viewer";
+        administrator: "administrator";
+        builder: "builder";
+    }>]>;
+    authorityVersion: z.ZodOptional<z.ZodLiteral<1>>;
+}, z.core.$strip>;
 export declare const ResolvedManagedSolutionDefinitionSchema: z.ZodObject<{
     kind: z.ZodLiteral<"managed">;
     definitionId: z.ZodEnum<{
@@ -586,6 +604,23 @@ export declare const SolutionInstallationSchema: z.ZodObject<{
     profileId: z.ZodOptional<z.ZodEnum<{
         b2b_saas: "b2b_saas";
     }>>;
+    revision: z.ZodNumber;
+    createdAt: z.ZodISODateTime;
+    updatedAt: z.ZodISODateTime;
+    createdBySubject: z.ZodString;
+    currentRole: z.ZodUnion<readonly [z.ZodEnum<{
+        operator: "operator";
+        viewer: "viewer";
+        administrator: "administrator";
+        manager: "manager";
+    }>, z.ZodEnum<{
+        operator: "operator";
+        owner: "owner";
+        viewer: "viewer";
+        administrator: "administrator";
+        builder: "builder";
+    }>]>;
+    authorityVersion: z.ZodOptional<z.ZodLiteral<1>>;
     activation: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
         state: z.ZodLiteral<"pending">;
         canRetry: z.ZodBoolean;
@@ -603,16 +638,6 @@ export declare const SolutionInstallationSchema: z.ZodObject<{
     retentionDays: z.ZodUnion<readonly [z.ZodLiteral<7>, z.ZodLiteral<30>, z.ZodLiteral<90>]>;
     publicId: z.ZodString;
     active: z.ZodBoolean;
-    currentRole: z.ZodEnum<{
-        operator: "operator";
-        viewer: "viewer";
-        administrator: "administrator";
-        manager: "manager";
-    }>;
-    revision: z.ZodNumber;
-    createdAt: z.ZodISODateTime;
-    updatedAt: z.ZodISODateTime;
-    createdBySubject: z.ZodString;
 }, z.core.$strict>;
 export type SolutionInstallation = z.infer<typeof SolutionInstallationSchema>;
 export declare const SolutionInstallationResponseSchema: z.ZodObject<{
@@ -712,6 +737,23 @@ export declare const SolutionInstallationResponseSchema: z.ZodObject<{
             profileId: z.ZodOptional<z.ZodEnum<{
                 b2b_saas: "b2b_saas";
             }>>;
+            revision: z.ZodNumber;
+            createdAt: z.ZodISODateTime;
+            updatedAt: z.ZodISODateTime;
+            createdBySubject: z.ZodString;
+            currentRole: z.ZodUnion<readonly [z.ZodEnum<{
+                operator: "operator";
+                viewer: "viewer";
+                administrator: "administrator";
+                manager: "manager";
+            }>, z.ZodEnum<{
+                operator: "operator";
+                owner: "owner";
+                viewer: "viewer";
+                administrator: "administrator";
+                builder: "builder";
+            }>]>;
+            authorityVersion: z.ZodOptional<z.ZodLiteral<1>>;
             activation: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
                 state: z.ZodLiteral<"pending">;
                 canRetry: z.ZodBoolean;
@@ -729,16 +771,6 @@ export declare const SolutionInstallationResponseSchema: z.ZodObject<{
             retentionDays: z.ZodUnion<readonly [z.ZodLiteral<7>, z.ZodLiteral<30>, z.ZodLiteral<90>]>;
             publicId: z.ZodString;
             active: z.ZodBoolean;
-            currentRole: z.ZodEnum<{
-                operator: "operator";
-                viewer: "viewer";
-                administrator: "administrator";
-                manager: "manager";
-            }>;
-            revision: z.ZodNumber;
-            createdAt: z.ZodISODateTime;
-            updatedAt: z.ZodISODateTime;
-            createdBySubject: z.ZodString;
         }, z.core.$strict>;
     }, z.core.$strict>;
 }, z.core.$strict>;
@@ -840,6 +872,23 @@ export declare const SolutionInstallationListResponseSchema: z.ZodObject<{
             profileId: z.ZodOptional<z.ZodEnum<{
                 b2b_saas: "b2b_saas";
             }>>;
+            revision: z.ZodNumber;
+            createdAt: z.ZodISODateTime;
+            updatedAt: z.ZodISODateTime;
+            createdBySubject: z.ZodString;
+            currentRole: z.ZodUnion<readonly [z.ZodEnum<{
+                operator: "operator";
+                viewer: "viewer";
+                administrator: "administrator";
+                manager: "manager";
+            }>, z.ZodEnum<{
+                operator: "operator";
+                owner: "owner";
+                viewer: "viewer";
+                administrator: "administrator";
+                builder: "builder";
+            }>]>;
+            authorityVersion: z.ZodOptional<z.ZodLiteral<1>>;
             activation: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
                 state: z.ZodLiteral<"pending">;
                 canRetry: z.ZodBoolean;
@@ -857,16 +906,6 @@ export declare const SolutionInstallationListResponseSchema: z.ZodObject<{
             retentionDays: z.ZodUnion<readonly [z.ZodLiteral<7>, z.ZodLiteral<30>, z.ZodLiteral<90>]>;
             publicId: z.ZodString;
             active: z.ZodBoolean;
-            currentRole: z.ZodEnum<{
-                operator: "operator";
-                viewer: "viewer";
-                administrator: "administrator";
-                manager: "manager";
-            }>;
-            revision: z.ZodNumber;
-            createdAt: z.ZodISODateTime;
-            updatedAt: z.ZodISODateTime;
-            createdBySubject: z.ZodString;
         }, z.core.$strict>>;
         nextCursor: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>;
@@ -1178,6 +1217,23 @@ export declare const BusinessInvitationAcceptResponseSchema: z.ZodObject<{
             profileId: z.ZodOptional<z.ZodEnum<{
                 b2b_saas: "b2b_saas";
             }>>;
+            revision: z.ZodNumber;
+            createdAt: z.ZodISODateTime;
+            updatedAt: z.ZodISODateTime;
+            createdBySubject: z.ZodString;
+            currentRole: z.ZodUnion<readonly [z.ZodEnum<{
+                operator: "operator";
+                viewer: "viewer";
+                administrator: "administrator";
+                manager: "manager";
+            }>, z.ZodEnum<{
+                operator: "operator";
+                owner: "owner";
+                viewer: "viewer";
+                administrator: "administrator";
+                builder: "builder";
+            }>]>;
+            authorityVersion: z.ZodOptional<z.ZodLiteral<1>>;
             activation: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
                 state: z.ZodLiteral<"pending">;
                 canRetry: z.ZodBoolean;
@@ -1195,16 +1251,6 @@ export declare const BusinessInvitationAcceptResponseSchema: z.ZodObject<{
             retentionDays: z.ZodUnion<readonly [z.ZodLiteral<7>, z.ZodLiteral<30>, z.ZodLiteral<90>]>;
             publicId: z.ZodString;
             active: z.ZodBoolean;
-            currentRole: z.ZodEnum<{
-                operator: "operator";
-                viewer: "viewer";
-                administrator: "administrator";
-                manager: "manager";
-            }>;
-            revision: z.ZodNumber;
-            createdAt: z.ZodISODateTime;
-            updatedAt: z.ZodISODateTime;
-            createdBySubject: z.ZodString;
         }, z.core.$strict>;
         grant: z.ZodObject<{
             installationId: z.ZodString;
@@ -1224,7 +1270,7 @@ export declare const BusinessInvitationAcceptResponseSchema: z.ZodObject<{
     }, z.core.$strict>;
 }, z.core.$strict>;
 export type BusinessInvitationAcceptResponse = z.infer<typeof BusinessInvitationAcceptResponseSchema>;
-export declare const EligibleBusinessAssigneeSchema: z.ZodObject<{
+export declare const EligibleBusinessAssigneeSchema: z.ZodUnion<readonly [z.ZodObject<{
     subject: z.ZodString;
     email: z.ZodEmail;
     role: z.ZodEnum<{
@@ -1232,12 +1278,21 @@ export declare const EligibleBusinessAssigneeSchema: z.ZodObject<{
         administrator: "administrator";
         manager: "manager";
     }>;
-}, z.core.$strict>;
+}, z.core.$strict>, z.ZodObject<{
+    subject: z.ZodString;
+    email: z.ZodOptional<z.ZodEmail>;
+    role: z.ZodEnum<{
+        operator: "operator";
+        owner: "owner";
+        administrator: "administrator";
+    }>;
+    authorityVersion: z.ZodLiteral<1>;
+}, z.core.$strict>]>;
 export type EligibleBusinessAssignee = z.infer<typeof EligibleBusinessAssigneeSchema>;
 export declare const EligibleBusinessAssigneeListResponseSchema: z.ZodObject<{
     ok: z.ZodLiteral<true>;
     data: z.ZodObject<{
-        assignees: z.ZodArray<z.ZodObject<{
+        assignees: z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
             subject: z.ZodString;
             email: z.ZodEmail;
             role: z.ZodEnum<{
@@ -1245,9 +1300,42 @@ export declare const EligibleBusinessAssigneeListResponseSchema: z.ZodObject<{
                 administrator: "administrator";
                 manager: "manager";
             }>;
-        }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+            subject: z.ZodString;
+            email: z.ZodOptional<z.ZodEmail>;
+            role: z.ZodEnum<{
+                operator: "operator";
+                owner: "owner";
+                administrator: "administrator";
+            }>;
+            authorityVersion: z.ZodLiteral<1>;
+        }, z.core.$strict>]>>;
     }, z.core.$strict>;
 }, z.core.$strict>;
+export declare const EligibleBusinessAssigneeListClientResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        assignees: z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
+            subject: z.ZodString;
+            email: z.ZodOptional<z.ZodEmail>;
+            role: z.ZodEnum<{
+                operator: "operator";
+                owner: "owner";
+                administrator: "administrator";
+            }>;
+            authorityVersion: z.ZodLiteral<1>;
+        }, z.core.$strip>, z.ZodObject<{
+            subject: z.ZodString;
+            email: z.ZodEmail;
+            role: z.ZodEnum<{
+                operator: "operator";
+                administrator: "administrator";
+                manager: "manager";
+            }>;
+            authorityVersion: z.ZodOptional<z.ZodNever>;
+        }, z.core.$strip>]>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
 export type EligibleBusinessAssigneeListResponse = z.infer<typeof EligibleBusinessAssigneeListResponseSchema>;
 export declare const ManagedRecordCreateRequestSchema: z.ZodObject<{
     payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
@@ -1259,6 +1347,7 @@ export declare const ManagedRecordOriginSchema: z.ZodObject<{
         mcp: "mcp";
         portal: "portal";
         api: "api";
+        messaging: "messaging";
     }>;
     subject: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
@@ -1274,12 +1363,14 @@ export declare const ManagedRecordRequestStateSchema: z.ZodObject<{
 }, z.core.$strict>;
 export type ManagedRecordRequestState = z.infer<typeof ManagedRecordRequestStateSchema>;
 export declare const NativeManagedRecordSchema: z.ZodObject<{
+    retentionExpiresAt: z.ZodNullable<z.ZodISODateTime>;
     origin: z.ZodObject<{
         surface: z.ZodEnum<{
             public: "public";
             mcp: "mcp";
             portal: "portal";
             api: "api";
+            messaging: "messaging";
         }>;
         subject: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>;
@@ -1305,7 +1396,6 @@ export declare const NativeManagedRecordSchema: z.ZodObject<{
     revision: z.ZodNumber;
     createdAt: z.ZodISODateTime;
     updatedAt: z.ZodISODateTime;
-    retentionExpiresAt: z.ZodISODateTime;
     authority: z.ZodLiteral<"native">;
 }, z.core.$strict>;
 export type NativeManagedRecord = z.infer<typeof NativeManagedRecordSchema>;
@@ -1371,12 +1461,14 @@ export declare const ExternalManagedRecordSchema: z.ZodObject<{
 }, z.core.$strict>;
 export type ExternalManagedRecord = z.infer<typeof ExternalManagedRecordSchema>;
 export declare const ManagedRecordSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    retentionExpiresAt: z.ZodNullable<z.ZodISODateTime>;
     origin: z.ZodObject<{
         surface: z.ZodEnum<{
             public: "public";
             mcp: "mcp";
             portal: "portal";
             api: "api";
+            messaging: "messaging";
         }>;
         subject: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>;
@@ -1402,7 +1494,6 @@ export declare const ManagedRecordSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     revision: z.ZodNumber;
     createdAt: z.ZodISODateTime;
     updatedAt: z.ZodISODateTime;
-    retentionExpiresAt: z.ZodISODateTime;
     authority: z.ZodLiteral<"native">;
 }, z.core.$strict>, z.ZodObject<{
     source: z.ZodObject<{
@@ -1511,12 +1602,14 @@ export declare const ManagedRecordResponseSchema: z.ZodObject<{
     ok: z.ZodLiteral<true>;
     data: z.ZodObject<{
         record: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            retentionExpiresAt: z.ZodNullable<z.ZodISODateTime>;
             origin: z.ZodObject<{
                 surface: z.ZodEnum<{
                     public: "public";
                     mcp: "mcp";
                     portal: "portal";
                     api: "api";
+                    messaging: "messaging";
                 }>;
                 subject: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>;
@@ -1542,7 +1635,6 @@ export declare const ManagedRecordResponseSchema: z.ZodObject<{
             revision: z.ZodNumber;
             createdAt: z.ZodISODateTime;
             updatedAt: z.ZodISODateTime;
-            retentionExpiresAt: z.ZodISODateTime;
             authority: z.ZodLiteral<"native">;
         }, z.core.$strict>, z.ZodObject<{
             source: z.ZodObject<{
@@ -1654,12 +1746,14 @@ export declare const ManagedRecordListResponseSchema: z.ZodObject<{
     ok: z.ZodLiteral<true>;
     data: z.ZodObject<{
         records: z.ZodArray<z.ZodUnion<readonly [z.ZodDiscriminatedUnion<[z.ZodObject<{
+            retentionExpiresAt: z.ZodNullable<z.ZodISODateTime>;
             origin: z.ZodObject<{
                 surface: z.ZodEnum<{
                     public: "public";
                     mcp: "mcp";
                     portal: "portal";
                     api: "api";
+                    messaging: "messaging";
                 }>;
                 subject: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>;
@@ -1685,7 +1779,6 @@ export declare const ManagedRecordListResponseSchema: z.ZodObject<{
             revision: z.ZodNumber;
             createdAt: z.ZodISODateTime;
             updatedAt: z.ZodISODateTime;
-            retentionExpiresAt: z.ZodISODateTime;
             authority: z.ZodLiteral<"native">;
         }, z.core.$strict>, z.ZodObject<{
             source: z.ZodObject<{
@@ -1901,12 +1994,14 @@ export declare const ManagedRecordExportResponseSchema: z.ZodObject<{
     ok: z.ZodLiteral<true>;
     data: z.ZodObject<{
         records: z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
+            retentionExpiresAt: z.ZodNullable<z.ZodISODateTime>;
             origin: z.ZodObject<{
                 surface: z.ZodEnum<{
                     public: "public";
                     mcp: "mcp";
                     portal: "portal";
                     api: "api";
+                    messaging: "messaging";
                 }>;
                 subject: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>;
@@ -1932,7 +2027,6 @@ export declare const ManagedRecordExportResponseSchema: z.ZodObject<{
             revision: z.ZodNumber;
             createdAt: z.ZodISODateTime;
             updatedAt: z.ZodISODateTime;
-            retentionExpiresAt: z.ZodISODateTime;
             authority: z.ZodLiteral<"native">;
             notes: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;

package/node_modules/@noodle-borg/wire-contracts/dist/business-information.js

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+import { BusinessWorkspaceRoleSchema } from './business-workspaces.js';
 import { BusinessNoticeSchema } from './solution-onboarding.js';
 /** Public Noodle-authored profiles. B2B SaaS uses the private-definition path. */
 export const MANAGED_SOLUTION_PROFILE_IDS = ['travel', 'ecommerce', 'restaurant'];
@@ -22,7 +23,14 @@ export const MANAGED_RECORD_STATUSES = ['new', 'in_progress', 'resolved', 'close
 export const ManagedRecordStatusSchema = z.enum(MANAGED_RECORD_STATUSES);
 export const BUSINESS_GRANT_ROLES = ['administrator', 'manager', 'operator', 'viewer'];
 export const BusinessGrantRoleSchema = z.enum(BUSINESS_GRANT_ROLES);
-export const MANAGED_RECORD_ORIGIN_SURFACES = ['public', 'portal', 'mcp', 'api'];
+/** `messaging` marks trusted channel provenance (ADR 0240), never a client-claimed origin. */
+export const MANAGED_RECORD_ORIGIN_SURFACES = [
+    'public',
+    'portal',
+    'mcp',
+    'api',
+    'messaging',
+];
 export const ManagedRecordOriginSurfaceSchema = z.enum(MANAGED_RECORD_ORIGIN_SURFACES);
 export const COLLECTION_SOURCE_HEALTH_STATES = [
     'pending',
@@ -158,6 +166,15 @@ export const SolutionInstallationActivationSchema = z.discriminatedUnion('state'
     z.strictObject({ state: z.literal('pending'), canRetry: z.boolean() }),
     z.strictObject({ state: z.enum(['ready', 'unavailable']), canRetry: z.literal(false) }),
 ]);
+/** Selected authority version determines the role vocabulary; never infer or merge versions. */
+export const BusinessInstallationAccessSchema = z
+    .object({
+    currentRole: z.union([BusinessGrantRoleSchema, BusinessWorkspaceRoleSchema]),
+    authorityVersion: z.literal(1).optional(),
+})
+    .refine((value) => (value.authorityVersion === 1
+    ? BusinessWorkspaceRoleSchema
+    : BusinessGrantRoleSchema).safeParse(value.currentRole).success, { message: 'Role does not match the selected authority version' });
 const installationShape = {
     activation: SolutionInstallationActivationSchema.optional(),
     id,
@@ -167,7 +184,7 @@ const installationShape = {
     retentionDays: ManagedRecordRetentionDaysSchema,
     publicId: id,
     active: z.boolean(),
-    currentRole: BusinessGrantRoleSchema,
+    ...BusinessInstallationAccessSchema.shape,
     revision: positiveRevision,
     createdAt: instant,
     updatedAt: instant,
@@ -199,12 +216,16 @@ export const ResolvedSolutionDefinitionSchema = z.discriminatedUnion('kind', [
     ResolvedPrivateSolutionDefinitionSchema,
     ResolvedLegacySolutionDefinitionSchema,
 ]);
-export const SolutionInstallationSchema = z.strictObject({
+export const SolutionInstallationSchema = z
+    .strictObject({
     ...installationShape,
     definition: ResolvedSolutionDefinitionSchema,
     collections: z.array(ManagedCollectionProfileSchema).max(16),
     /** Historical persisted key retained only while legacy installations are backfilled. */
     profileId: LegacySolutionProfileIdSchema.optional(),
+})
+    .refine((value) => BusinessInstallationAccessSchema.safeParse(value).success, {
+    message: 'Invalid installation access projection',
 });
 export const SolutionInstallationResponseSchema = z.strictObject({
     ok: z.literal(true),
@@ -290,15 +311,33 @@ export const BusinessInvitationAcceptResponseSchema = z.strictObject({
         grant: BusinessGrantSchema,
     }),
 });
-export const EligibleBusinessAssigneeSchema = z.strictObject({
+const legacyAssignee = z.strictObject({
     subject: id,
     email: z.email().max(254),
     role: z.enum(['administrator', 'manager', 'operator']),
 });
+const workspaceAssignee = z.strictObject({
+    subject: z.string().min(1).max(500),
+    email: z.email().max(254).optional(),
+    role: z.enum(['owner', 'administrator', 'operator']),
+    authorityVersion: z.literal(1),
+});
+export const EligibleBusinessAssigneeSchema = z.union([legacyAssignee, workspaceAssignee]);
 export const EligibleBusinessAssigneeListResponseSchema = z.strictObject({
     ok: z.literal(true),
     data: z.strictObject({ assignees: z.array(EligibleBusinessAssigneeSchema).max(100) }),
 });
+export const EligibleBusinessAssigneeListClientResponseSchema = z.object({
+    ok: z.literal(true),
+    data: z.object({
+        assignees: z
+            .array(z.union([
+            workspaceAssignee.strip(),
+            legacyAssignee.extend({ authorityVersion: z.never().optional() }).strip(),
+        ]))
+            .max(100),
+    }),
+});
 export const ManagedRecordCreateRequestSchema = z.strictObject({ payload: jsonObject });
 export const ManagedRecordOriginSchema = z.strictObject({
     surface: ManagedRecordOriginSurfaceSchema,
@@ -326,6 +365,7 @@ const recordShape = {
 export const NativeManagedRecordSchema = z.strictObject({
     authority: z.literal('native'),
     ...recordShape,
+    retentionExpiresAt: instant.nullable(),
     origin: ManagedRecordOriginSchema,
     assigneeSubject: id.optional(),
     request: ManagedRecordRequestStateSchema.optional(),