@company-semantics/contracts 0.117.0 → 0.119.0

package/src/chat/index.ts

@@ -38,6 +38,14 @@ export type {
   ChatInvalidationEvent,
   // SSE event unions
   ChatSseEvent,
+  // HTTP response types
+  ChatSuccessResponse,
+  ChatByInteractionResponse,
+  ChatListResponse,
+  CreateChatResponse,
+  CreateShareResponse,
+  ListSharesResponse,
+  UpdateShareResponse,
 } from './types'
 
 // =============================================================================
@@ -65,6 +73,14 @@ export {
   ChatDomainEventSchema,
   ChatInvalidationEventSchema,
   ChatSseEventSchema,
+  // HTTP response schemas
+  ChatSuccessResponseSchema,
+  ChatByInteractionResponseSchema,
+  ChatListResponseSchema,
+  CreateChatResponseSchema,
+  CreateShareResponseSchema,
+  ListSharesResponseSchema,
+  UpdateShareResponseSchema,
 } from './schemas'
 
 // Runtime profile types and constants

package/src/chat/schemas.ts

@@ -152,3 +152,43 @@ export const ChatSseEventSchema = z.discriminatedUnion('type', [
   InvalidateChatEventSchema,
   InvalidateChatListEventSchema,
 ])
+
+// =============================================================================
+// HTTP Response Schemas
+// =============================================================================
+
+/** Generic success confirmation for mutations that return no entity data. */
+export const ChatSuccessResponseSchema = z.object({
+  success: z.literal(true),
+})
+
+/** Response for GET /api/chats/by-interaction/:interactionId */
+export const ChatByInteractionResponseSchema = z.object({
+  chatId: z.string(),
+})
+
+/** Response for GET /api/chats */
+export const ChatListResponseSchema = z.object({
+  chats: z.array(ChatSummaryExtendedSchema),
+})
+
+/** Response for POST /api/chats */
+export const CreateChatResponseSchema = z.object({
+  chat: ChatSummaryExtendedSchema,
+})
+
+/** Response for POST /api/chats/:chatId/shares */
+export const CreateShareResponseSchema = z.object({
+  share: ChatShareInfoSchema,
+  shareUrl: z.string(),
+})
+
+/** Response for GET /api/chats/:chatId/shares */
+export const ListSharesResponseSchema = z.object({
+  shares: z.array(ChatShareInfoSchema),
+})
+
+/** Response for PATCH /api/shares/:shareId */
+export const UpdateShareResponseSchema = z.object({
+  share: ChatShareInfoSchema,
+})

package/src/chat/types.ts

@@ -27,6 +27,13 @@ import {
   ChatDomainEventSchema,
   ChatInvalidationEventSchema,
   ChatSseEventSchema,
+  ChatSuccessResponseSchema,
+  ChatByInteractionResponseSchema,
+  ChatListResponseSchema,
+  CreateChatResponseSchema,
+  CreateShareResponseSchema,
+  ListSharesResponseSchema,
+  UpdateShareResponseSchema,
 } from './schemas'
 
 // =============================================================================
@@ -227,3 +234,28 @@ export type ChatInvalidationEvent = z.infer<typeof ChatInvalidationEventSchema>
  * Client receives these via SSE and handles accordingly.
  */
 export type ChatSseEvent = z.infer<typeof ChatSseEventSchema>
+
+// =============================================================================
+// HTTP Response Types (derived from response schemas)
+// =============================================================================
+
+/** Generic mutation success confirmation. */
+export type ChatSuccessResponse = z.infer<typeof ChatSuccessResponseSchema>
+
+/** Response for GET /api/chats/by-interaction/:interactionId */
+export type ChatByInteractionResponse = z.infer<typeof ChatByInteractionResponseSchema>
+
+/** Response for GET /api/chats */
+export type ChatListResponse = z.infer<typeof ChatListResponseSchema>
+
+/** Response for POST /api/chats */
+export type CreateChatResponse = z.infer<typeof CreateChatResponseSchema>
+
+/** Response for POST /api/chats/:chatId/shares */
+export type CreateShareResponse = z.infer<typeof CreateShareResponseSchema>
+
+/** Response for GET /api/chats/:chatId/shares */
+export type ListSharesResponse = z.infer<typeof ListSharesResponseSchema>
+
+/** Response for PATCH /api/shares/:shareId */
+export type UpdateShareResponse = z.infer<typeof UpdateShareResponseSchema>

package/src/identity/index.ts

@@ -28,3 +28,7 @@ export type { AvatarSource, ResolvedAvatar } from './avatar';
 
 // Functions - Avatar
 export { generateInitials, resolveAvatar } from './avatar';
+
+// Response Schemas (Zod) - canonical location per ADR-CONT-044
+export { MeResponseSchema, AuthStartResponseSchema, AuthVerifyResponseSchema, SsoConfigResponseSchema, ProfileResponseSchema } from './schemas';
+export type { MeResponse, AuthStartResponse, AuthVerifyResponse, SsoConfigResponse, ProfileResponse } from './schemas';

package/src/identity/schemas.ts

@@ -0,0 +1,139 @@
+/**
+ * Identity Response Schemas
+ *
+ * Zod response schemas for auth and identity endpoints.
+ * Canonical location for runtime validation of identity API responses.
+ *
+ * Deviation note (AuthStartResponseSchema): The PRD reference suggested
+ * z.object({ sent: boolean }), but the actual POST /auth/start route returns
+ * a discriminated union on `mode` (otp | sso | hybrid). Schema matches reality.
+ */
+import { z } from 'zod';
+
+// ---------------------------------------------------------------------------
+// Shared sub-schemas
+// ---------------------------------------------------------------------------
+
+const ResolvedAvatarSchema = z.object({
+  source: z.enum(['slack', 'initials']),
+  url: z.string().optional(),
+  initials: z.string(),
+});
+
+// ---------------------------------------------------------------------------
+// GET /api/me
+// ---------------------------------------------------------------------------
+
+/**
+ * Full identity context returned by GET /api/me.
+ * Canonical location: moved from backend contract-surfaces.ts per ADR-CONT-044.
+ */
+export const MeResponseSchema = z.object({
+  userId: z.string().uuid(),
+  email: z.string(),
+  fullName: z.string(),
+  preferredName: z.string().nullable(),
+  displayName: z.string(),
+  nameSource: z.enum(['self', 'sso']),
+  nameEditable: z.boolean(),
+  primaryDepartmentId: z.string().nullable(),
+  slackUserId: z.string().nullable(),
+  avatar: ResolvedAvatarSchema,
+  orgId: z.string().uuid(),
+  orgName: z.string().nullable(),
+  orgSlug: z.string(),
+  plan: z.string(),
+  hasMultipleOrgs: z.boolean(),
+  isInternalAdmin: z.boolean(),
+});
+
+export type MeResponse = z.infer<typeof MeResponseSchema>;
+
+// ---------------------------------------------------------------------------
+// POST /auth/start
+// Discriminated union on mode: otp | sso | hybrid
+// ---------------------------------------------------------------------------
+
+export const AuthStartResponseSchema = z.discriminatedUnion('mode', [
+  z.object({
+    mode: z.literal('otp'),
+    devOtp: z.string().optional(),
+  }),
+  z.object({
+    mode: z.literal('sso'),
+    providers: z.array(z.string()),
+    redirectUrl: z.string(),
+  }),
+  z.object({
+    mode: z.literal('hybrid'),
+    providers: z.array(z.string()),
+    redirectUrl: z.string(),
+    otpAllowed: z.literal(true),
+    devOtp: z.string().optional(),
+  }),
+]);
+
+export type AuthStartResponse = z.infer<typeof AuthStartResponseSchema>;
+
+// ---------------------------------------------------------------------------
+// POST /auth/verify
+// Sets session cookie on success; body is minimal.
+// ---------------------------------------------------------------------------
+
+export const AuthVerifyResponseSchema = z.union([
+  z.object({
+    success: z.literal(true),
+    ok: z.literal(true),
+  }),
+  z.object({
+    success: z.literal(true),
+    ok: z.literal(true),
+    acceptedInvite: z.literal(true),
+    orgId: z.string(),
+    role: z.string(),
+  }),
+]);
+
+export type AuthVerifyResponse = z.infer<typeof AuthVerifyResponseSchema>;
+
+// ---------------------------------------------------------------------------
+// GET /api/workspace/auth  (SSO configuration)
+// Matches WorkspaceAuthConfig from org/types.ts
+// ---------------------------------------------------------------------------
+
+const AuthMethodConfigSchema = z.object({
+  enabled: z.boolean(),
+  provider: z.string().optional(),
+});
+
+export const SsoConfigResponseSchema = z.object({
+  emailOtp: AuthMethodConfigSchema,
+  googleSso: AuthMethodConfigSchema,
+  microsoftSso: AuthMethodConfigSchema,
+  okta: AuthMethodConfigSchema,
+  policy: z.object({
+    requireSSO: z.boolean(),
+    allowedProviders: z.array(z.string()),
+  }),
+});
+
+export type SsoConfigResponse = z.infer<typeof SsoConfigResponseSchema>;
+
+// ---------------------------------------------------------------------------
+// PATCH /api/user/profile
+// Profile shape returned after a successful profile update.
+// ---------------------------------------------------------------------------
+
+export const ProfileResponseSchema = z.object({
+  success: z.literal(true),
+  user: z.object({
+    id: z.string(),
+    fullName: z.string(),
+    preferredName: z.string().nullable(),
+    displayName: z.string(),
+    nameSource: z.enum(['self', 'sso']),
+    primaryDepartmentId: z.string().nullable(),
+  }),
+});
+
+export type ProfileResponse = z.infer<typeof ProfileResponseSchema>;

package/src/index.ts

@@ -120,6 +120,21 @@ export { extractFirstWord, resolveDisplayName, deriveFullName } from './identity
 export type { AvatarSource, ResolvedAvatar } from './identity/index'
 export { generateInitials, resolveAvatar } from './identity/index'
 
+// Identity response schemas (Zod) - canonical location per ADR-CONT-044
+export {
+  MeResponseSchema,
+  AuthStartResponseSchema,
+  AuthVerifyResponseSchema,
+  SsoConfigResponseSchema,
+  ProfileResponseSchema,
+} from './identity/index'
+export type {
+  MeResponse,
+  AuthVerifyResponse,
+  SsoConfigResponse,
+  ProfileResponse,
+} from './identity/index'
+
 // Auth domain types
 export type { AuthStartMode, AuthStartResponse } from './auth/index'
 export { OTPErrorCode } from './auth/index'