@company-semantics/contracts 0.104.1 → 0.106.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "0.104.1",
+  "version": "0.106.0",
   "private": false,
   "repository": {
     "type": "git",

package/src/api/generated.ts

@@ -1986,12 +1986,16 @@ export interface components {
         };
         UserOrgMembership: {
             /** Format: uuid */
-            id: string;
-            name: string;
-            slug: string;
+            userId: string;
+            /** Format: uuid */
+            orgId: string;
+            orgName: string;
+            orgSlug: string;
             role: components["schemas"]["WorkspaceRole"];
             /** Format: date-time */
             joinedAt: string;
+            isActive: boolean;
+            orgType: components["schemas"]["OrgType"];
         };
         SetActiveOrgRequest: {
             /**
@@ -2178,7 +2182,60 @@ export interface components {
         };
         /** @description AI usage summary for an organization */
         OrgExecutionSummary: {
-            [key: string]: unknown;
+            period: {
+                /** Format: date-time */
+                start: string;
+                /** Format: date-time */
+                end: string;
+            };
+            summary: components["schemas"]["UnifiedUsageSummary"];
+            daily: components["schemas"]["UnifiedDailyUsage"][];
+            byProfile: components["schemas"]["UnifiedProfileUsage"][];
+            byUser: components["schemas"]["UnifiedUserUsage"][];
+            byModel: components["schemas"]["UnifiedModelUsage"][];
+            byFeature: components["schemas"]["UnifiedFeatureUsage"][];
+        };
+        UnifiedUsageSummary: {
+            executions: number;
+            totalCostUsd: string;
+            totalTokens: number;
+            avgDurationMs: number;
+            failureRate: number;
+        };
+        UnifiedDailyUsage: {
+            date: string;
+            executions: number;
+            totalCostUsd: string;
+        };
+        UnifiedProfileUsage: {
+            profile: string;
+            executions: number;
+            percentOfTotal: number;
+            totalCostUsd: string;
+            avgDurationMs: number;
+            failureRate: number;
+        };
+        UnifiedUserUsage: {
+            /** Format: uuid */
+            userId: string;
+            email: string;
+            executions: number;
+            totalCostUsd: string;
+            totalTokens: number;
+            favoriteProfile: string;
+        };
+        UnifiedModelUsage: {
+            model: string;
+            provider: string;
+            totalTokens: number;
+            estimatedCostUsd: string;
+            requestCount: number;
+        };
+        UnifiedFeatureUsage: {
+            feature: string;
+            totalTokens: number;
+            estimatedCostUsd: string;
+            requestCount: number;
         };
         ErrorResponse: {
             error: string;
@@ -2504,6 +2561,8 @@ export interface components {
         OrgAuthPolicy: {
             requireSSO: boolean;
             allowedProviders: string[];
+            /** @description True when the requesting admin's own SSO session was revoked by this operation */
+            selfRevoked?: boolean;
         };
         CreateInviteRequest: {
             /**

package/src/impersonation.ts

@@ -32,7 +32,8 @@ export type RestrictedImpersonationAction =
   | 'rotate_credentials'
   | 'invite_remove_users'
   | 'accept_agreements'
-  | 'irreversible_write';
+  | 'irreversible_write'
+  | 'manage_auth';
 
 // All restricted actions as a const array for runtime checks
 export const RESTRICTED_IMPERSONATION_ACTIONS: readonly RestrictedImpersonationAction[] = [
@@ -43,6 +44,7 @@ export const RESTRICTED_IMPERSONATION_ACTIONS: readonly RestrictedImpersonationA
   'invite_remove_users',
   'accept_agreements',
   'irreversible_write',
+  'manage_auth',
 ] as const;
 
 // Impersonation-specific company capability

package/src/index.ts

@@ -554,3 +554,7 @@ export { openApiRoutes, type OpenApiRoute, type OpenApiMethod } from './generate
 // Secret wrapper (multi-surface redaction for sensitive values)
 export type { Secret } from './security/index'
 export { wrapSecret, unwrapSecret } from './security/index'
+
+// Analytics response metadata (shared vocabulary for OLTP/OLAP separation)
+// @see ADR-CTRL-053 for design rationale
+export type { AnalyticsBackend, AnalyticsResponseMeta } from './types/analytics'

package/src/types/analytics.ts

@@ -0,0 +1,22 @@
+/**
+ * Supported analytics backend identifiers.
+ * Used by TierResolution to indicate which analytics backend to route to.
+ *
+ * See ADR-CTRL-053 for the full analytics separation decision framework.
+ */
+export type AnalyticsBackend = 'clickhouse';
+
+/**
+ * Metadata included in every analytics-backed API response.
+ * Enables consumers to know data freshness and which backend served the query.
+ *
+ * See ADR-CTRL-053 D8: Data Freshness Contract.
+ */
+export interface AnalyticsResponseMeta {
+  /** Replication lag from OLTP in milliseconds. 0 when source is 'oltp'. */
+  readonly dataFreshnessMs: number;
+  /** Which backend served this response. */
+  readonly source: 'oltp' | 'olap';
+  /** ISO 8601 timestamp: when the data was current as of. */
+  readonly timestamp: string;
+}