feat(sharing): define recipient policy contracts

[kunickiaj]

Description

Define the contract boundary for the project-recipient sharing redesign tracked by codemem-hop0.1.

• records the approved Project → Identity/Team product model and eight-PR implementation plan
• decides that actors back Identities while policy Teams remain distinct from coordinator groups
• defines per-Project authority cutover, attributed actionable review, legacy invitation, and navigation compatibility rules
• adds dependency-free V1 TypeScript contracts separating intent, effective devices, and current scope enforcement
• adds pure contract fixtures without changing persistence, routes, migrations, or authorization behavior

This builds on the merged exact-project sharing stack; it does not revert or weaken its scope enforcement, provisioning, invitation binding, or replication behavior.

Type of Change

• 🚀 Feature (new functionality)
• 🐛 Bug fix (fixes an issue)
• 📚 Documentation (docs-only change)
• 🔧 Maintenance (refactor, chore, CI, etc.)
• 🧪 Testing (test-only changes)

Testing

• Relevant checks pass locally (pnpm run tsc, pnpm run lint, pnpm run test)
• Added/updated tests for changes
• Manually verified changes work as expected

Validation:

• pnpm run check — 150 files passed, 2,809 tests passed, 3 todo
• pnpm exec vitest run packages/core/src/recipient-policy-contract.test.ts — 10 passed
• git diff --check
• independent CodeReviewer and ADR review; no P0/P1 findings after corrections

Checklist

• Code follows project style (pnpm run lint passes for touched files)
• Self-review completed
• Documentation updated (if needed)
• No new warnings introduced

[kunickiaj]

• feat(sharing): promote Devices navigation and proof #1346
• feat(sharing): reconcile recipient policy access #1344
• fix(sharing): preserve inviter policy during acceptance #1345
• feat(sharing): add recipient onboarding journeys #1343
• feat(sharing): add bidirectional recipient management #1342
• feat(sharing): persist recipient policy intent #1341
• feat(sharing): add actionable migration review #1340
• feat(sharing): project legacy recipient policy #1339
• feat(sharing): define recipient policy contracts #1338 👈 (View in Graphite)
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[kunickiaj]

Merge activity

• Jul 22, 9:25 PM UTC: A user started a stack merge that includes this pull request via Graphite.
• Jul 22, 9:26 PM UTC: @kunickiaj merged this pull request with Graphite.