@company-semantics/contracts 0.120.0 → 0.121.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "0.120.0",
+  "version": "0.121.0",
   "private": false,
   "repository": {
     "type": "git",

package/src/api/generated.ts

@@ -191,12 +191,7 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /**
-         * List user's org memberships
-         * @description Returns all organizations the current user is a member of.
-         *     Used by the org switcher UI for multi-org support.
-         *     Only returns active memberships.
-         */
+        /** List user's org memberships */
         get: operations["listUserOrgs"];
         put?: never;
         post?: never;
@@ -215,12 +210,7 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /**
-         * Set active org context
-         * @description Set the active organization context for the current user.
-         *     Validates that the user is a member of the target org.
-         *     Does NOT re-authenticate or elevate permissions.
-         */
+        /** Set active org context */
         post: operations["setActiveOrg"];
         delete?: never;
         options?: never;
@@ -844,11 +834,7 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /**
-         * Check workspace access
-         * @description Lightweight authorization probe for the workspace control plane.
-         *     Returns whether the current user has access to workspace features.
-         */
+        /** Check workspace access */
         get: operations["getWorkspaceAccess"];
         put?: never;
         post?: never;
@@ -865,11 +851,7 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /**
-         * Get workspace overview
-         * @description Returns workspace overview including org details, owner info, and member count.
-         *     Requires org.view_workspace capability.
-         */
+        /** Get workspace overview */
         get: operations["getWorkspaceOverview"];
         put?: never;
         post?: never;
@@ -892,10 +874,7 @@ export interface paths {
         delete?: never;
         options?: never;
         head?: never;
-        /**
-         * Rename the workspace
-         * @description PATCH the workspace name. Requires org.manage_users capability (owner or admin).
-         */
+        /** Rename the workspace */
         patch: operations["renameWorkspace"];
         trace?: never;
     };
@@ -906,12 +885,7 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /**
-         * Get workspace members
-         * @description Returns list of workspace members with their roles.
-         *     Human users only (no agent actors).
-         *     Requires org.view_workspace capability.
-         */
+        /** Get workspace members */
         get: operations["getWorkspaceMembers"];
         put?: never;
         post?: never;
@@ -928,12 +902,7 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /**
-         * Get workspace auth config
-         * @description Returns workspace authentication configuration.
-         *     Shows which auth methods are enabled.
-         *     Requires org.view_workspace capability.
-         */
+        /** Get workspace auth config */
         get: operations["getWorkspaceAuth"];
         put?: never;
         post?: never;
@@ -950,13 +919,7 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /**
-         * Get workspace audit log
-         * @description Returns workspace audit events.
-         *     Only returns spec-defined events (server-side filtering).
-         *     Supports pagination with limit (max 100) and offset (max 1000).
-         *     Requires org.view_workspace capability.
-         */
+        /** Get workspace audit log */
         get: operations["getWorkspaceAudit"];
         put?: never;
         post?: never;
@@ -979,12 +942,7 @@ export interface paths {
         delete?: never;
         options?: never;
         head?: never;
-        /**
-         * Update workspace auth policy
-         * @description Updates the workspace authentication policy.
-         *     Owner-only endpoint (requires org.manage_auth capability).
-         *     Auth policy changes do NOT affect existing sessions.
-         */
+        /** Update workspace auth policy */
         patch: operations["updateWorkspaceAuthPolicy"];
         trace?: never;
     };
@@ -997,12 +955,7 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /**
-         * Validate OIDC discovery URL
-         * @description Validates an OIDC discovery URL before saving SSO credentials.
-         *     Checks HTTPS requirement, SSRF protection, and required OIDC fields.
-         *     Admin-only endpoint (requires org.manage_auth capability).
-         */
+        /** Validate OIDC discovery URL */
         post: operations["validateOidcDiscovery"];
         delete?: never;
         options?: never;
@@ -1019,13 +972,7 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /**
-         * Initiate test SSO login attempt
-         * @description Creates a pending SSO test attempt, generates an OAuth state token
-         *     with isTest=true, builds the IdP authorization URL, and returns
-         *     the URL and attempt ID for polling.
-         *     Requires org.manage_auth capability.
-         */
+        /** Initiate a test SSO login */
         post: operations["initiateTestSso"];
         delete?: never;
         options?: never;
@@ -1040,12 +987,7 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /**
-         * Poll test SSO attempt status
-         * @description Returns the current status of a test SSO login attempt.
-         *     Pending attempts older than 5 minutes are lazily reported as expired.
-         *     Requires org.manage_auth capability.
-         */
+        /** Poll test SSO login status */
         get: operations["pollTestSso"];
         put?: never;
         post?: never;
@@ -1156,12 +1098,7 @@ export interface paths {
         get?: never;
         put?: never;
         post?: never;
-        /**
-         * Remove workspace member
-         * @description Remove a member from the workspace.
-         *     Cannot remove the owner (must transfer ownership first).
-         *     Admin floor enforced (at least one admin must remain).
-         */
+        /** Remove workspace member */
         delete: operations["removeMember"];
         options?: never;
         head?: never;
@@ -1181,12 +1118,7 @@ export interface paths {
         delete?: never;
         options?: never;
         head?: never;
-        /**
-         * Change member role
-         * @description Change a member's role.
-         *     Cannot change the owner's role (must transfer ownership first).
-         *     Admin floor enforced (cannot demote last admin).
-         */
+        /** Change member role */
         patch: operations["changeMemberRole"];
         trace?: never;
     };
@@ -1274,11 +1206,7 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /**
-         * Resync workspace logo from Slack
-         * @description Manually resync the workspace logo from the connected Slack workspace icon.
-         *     Requires org.view_workspace capability and an active Slack connection.
-         */
+        /** Resync workspace logo from Slack */
         post: operations["resyncSlackLogo"];
         delete?: never;
         options?: never;
@@ -1295,13 +1223,7 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /**
-         * Resolve a tokenized URL path to hydrated navigation layers
-         * @description Resolves a tokenized workspace URL path to hydrated entity data.
-         *     Used by the frontend for cold-start deep linking and browser back/forward.
-         *     Path segments follow a [type, slug] pair grammar: "dept" before "team",
-         *     "team" requires preceding "dept", and "members" must be terminal.
-         */
+        /** Resolve a tokenized URL path to hydrated navigation layers */
         post: operations["resolveWorkspacePath"];
         delete?: never;
         options?: never;
@@ -2087,11 +2009,7 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /**
-         * Leave an organization
-         * @description Voluntarily leave a shared organization. Cannot leave personal orgs
-         *     or if the user is the sole owner.
-         */
+        /** Leave an organization */
         post: operations["leaveOrg"];
         delete?: never;
         options?: never;
@@ -2184,10 +2102,7 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /**
-         * Batch check authorization scopes for current user
-         * @description Checks whether the current user has access to each of the given scopes. Scope strings are implementation-defined and not part of the public API vocabulary. Accepts 1-20 scope strings per request.
-         */
+        /** Batch check authorization scopes for current user */
         post: operations["checkScopeBatch"];
         delete?: never;
         options?: never;
@@ -2321,7 +2236,18 @@ export interface components {
             memberCount: number;
         };
         UserOrgsResponse: {
-            orgs: components["schemas"]["UserOrgMembership"][];
+            orgs: {
+                userId: string;
+                orgId: string;
+                orgName: string;
+                orgSlug: string;
+                /** @enum {string} */
+                role: "owner" | "admin" | "member" | "auditor";
+                joinedAt: string;
+                isActive: boolean;
+                /** @enum {string} */
+                orgType: "personal" | "shared";
+            }[];
         };
         UserOrgMembership: {
             /** Format: uuid */
@@ -2337,16 +2263,12 @@ export interface components {
             orgType: components["schemas"]["OrgType"];
         };
         SetActiveOrgRequest: {
-            /**
-             * Format: uuid
-             * @description The ID of the organization to switch to
-             */
+            /** Format: uuid */
             orgId: string;
         };
         SetActiveOrgResponse: {
             /** @constant */
             success: true;
-            /** Format: uuid */
             activeOrgId: string;
         };
         /** @enum {string} */
@@ -2955,19 +2877,16 @@ export interface components {
             name: string;
         };
         WorkspaceOverview: {
-            /** Format: uuid */
             id: string;
             name: string;
-            type: components["schemas"]["OrgType"];
+            /** @enum {string} */
+            type: "personal" | "shared";
             logoUrl: string | null;
             owner: {
-                /** Format: uuid */
                 id: string;
                 name: string;
-                /** Format: email */
                 email: string;
             };
-            /** Format: date-time */
             createdAt: string;
             memberCount: number;
             claimable: boolean;
@@ -2983,10 +2902,15 @@ export interface components {
             joinedAt: string;
         };
         WorkspaceMembersResponse: {
-            items: components["schemas"]["WorkspaceMember"][];
-            /** @description Cursor for next page, null if no more results */
-            nextCursor?: string | null;
-            /** @description Whether more results are available */
+            items: {
+                id: string;
+                name: string;
+                email: string;
+                /** @enum {string} */
+                role: "owner" | "admin" | "member" | "auditor";
+                joinedAt: string;
+            }[];
+            nextCursor: string | null;
             hasMore: boolean;
         };
         AuthMethodConfig: {
@@ -2994,10 +2918,82 @@ export interface components {
             provider?: string;
         };
         WorkspaceAuthConfig: {
-            emailOtp: components["schemas"]["AuthMethodConfig"];
-            googleSso: components["schemas"]["AuthMethodConfig"];
-            microsoftSso: components["schemas"]["AuthMethodConfig"];
-            okta: components["schemas"]["AuthMethodConfig"];
+            emailOtp: {
+                enabled: boolean;
+                provider?: string;
+            };
+            googleSso: {
+                enabled: boolean;
+                provider?: string;
+            };
+            microsoftSso: {
+                enabled: boolean;
+                provider?: string;
+            };
+            okta: {
+                enabled: boolean;
+                provider?: string;
+            };
+            policy: {
+                requireSSO: boolean;
+                allowedProviders: string[];
+            };
+            ssoSetup?: {
+                redirectUri: string;
+                requiredScopes: string[];
+                isOidcConfigured: boolean;
+                oidcDiscoveryUrl: string | null;
+                hasClientId: boolean;
+                hasClientSecret: boolean;
+                /** @enum {string} */
+                providerStatus: "NOT_CONFIGURED" | "CONFIG_SAVED" | "CONFIG_VALID" | "TEST_SUCCESS" | "ENABLED";
+                /** @enum {string} */
+                currentStep: "configure" | "test" | "enable" | "enforce";
+                stepCompleted: boolean;
+                activeProvider: string | null;
+                oidcValidation?: {
+                    valid: boolean;
+                    issuer?: string;
+                    authorizationEndpoint?: string;
+                    error?: string;
+                    /** @enum {string} */
+                    errorCode?: "UNREACHABLE" | "INVALID_DOCUMENT" | "MISSING_FIELDS" | "SSRF_BLOCKED";
+                };
+                credentialsSavedAt?: string;
+                lastTestSuccessAt?: string;
+                lastTestSuccessProvider?: string;
+            };
+            ssoReadiness?: {
+                ready: boolean;
+                checks: {
+                    code: string;
+                    label: string;
+                    passed: boolean;
+                    message: string;
+                }[];
+            };
+            ssoEnforcement?: {
+                enforced: boolean;
+                enforcedDomains: string[];
+                enforcedSince: string | null;
+            };
+            /** @enum {string} */
+            workspaceSsoState?: "SSO_DISABLED" | "SSO_ENABLED" | "SSO_ENFORCED";
+            ownerIdentities?: {
+                userId: string;
+                name: string;
+                email: string;
+                hasSsoIdentity: boolean;
+                linkedProvider: string | null;
+                lastSsoLoginAt: string | null;
+            }[];
+            providerSuggestion?: {
+                suggestedProvider: ("google" | "microsoft") | null;
+                /** @enum {string} */
+                confidence: "high" | "low";
+                reason: string;
+                detectedDomain?: string;
+            };
         };
         WorkspaceAuditEvent: {
             /** Format: uuid */
@@ -3015,21 +3011,15 @@ export interface components {
             summary: string;
         };
         UpdateAuthPolicyRequest: {
-            /** @description Whether SSO is required for all members */
             requireSSO?: boolean;
-            /** @description List of allowed auth providers */
             allowedProviders?: string[];
-            /** @description OIDC discovery URL for SSO configuration */
             oidcDiscoveryUrl?: string | null;
-            /** @description OIDC client ID credential */
             oidcClientId?: string | null;
-            /** @description OIDC client secret credential */
             oidcClientSecret?: string | null;
         };
         OrgAuthPolicy: {
             requireSSO: boolean;
             allowedProviders: string[];
-            /** @description True when the requesting admin's own SSO session was revoked by this operation */
             selfRevoked?: boolean;
         };
         CreateInviteRequest: {
@@ -3078,24 +3068,17 @@ export interface components {
         };
         RemoveMemberResponse: {
             success: boolean;
-            /** Format: uuid */
             memberId: string;
-            /** Format: email */
             memberEmail: string;
             message: string;
         };
         ChangeMemberRoleRequest: {
-            /**
-             * @description New role for the member
-             * @enum {string}
-             */
+            /** @enum {string} */
             newRole: "admin" | "member";
         };
         ChangeMemberRoleResponse: {
             success: boolean;
-            /** Format: uuid */
             memberId: string;
-            /** Format: email */
             memberEmail: string;
             previousRole: string;
             newRole: string;
@@ -3502,6 +3485,76 @@ export interface components {
             id?: string;
             runtimeProfile?: string;
         };
+        WorkspaceNameRequest: {
+            name: string;
+        };
+        WorkspaceAuditResponse: {
+            id: string;
+            timestamp: string;
+            actor: {
+                id: string;
+                name: string;
+                /** @enum {string} */
+                type: "user" | "system";
+            };
+            action: string;
+            summary: string;
+        }[];
+        ValidateOidcRequest: {
+            discoveryUrl: string;
+        };
+        WorkspaceResyncSlackLogoResponse: {
+            /** @constant */
+            success: true;
+            logoUrl: string | null;
+        };
+        WorkspaceResolvePathResponse: {
+            layers: ({
+                /** @constant */
+                type: "dept";
+                entity: {
+                    id: string;
+                    name: string;
+                    slug: string;
+                    memberCount: number;
+                };
+            } | {
+                /** @constant */
+                type: "team";
+                entity: {
+                    id: string;
+                    name: string;
+                    slug: string;
+                    memberCount: number;
+                };
+            } | {
+                /** @constant */
+                type: "members";
+                /** @enum {string} */
+                scope: "org" | "dept" | "team";
+            })[];
+        };
+        ResolvePathRequest: {
+            path: string[];
+        };
+        TestSsoInitiation: {
+            authorizationUrl: string;
+            attemptId: string;
+        };
+        TestSsoResult: {
+            /** @enum {string} */
+            status: "pending" | "success" | "failed" | "expired";
+            claims?: {
+                sub: string;
+                email?: string;
+                name?: string;
+                issuer: string;
+            };
+            identityLinked?: boolean;
+            error?: string;
+            /** @enum {string} */
+            errorCode?: "IDENTITY_CONFLICT" | "DOMAIN_MISMATCH" | "ISSUER_MISMATCH" | "CALLBACK_ERROR";
+        };
     };
     responses: never;
     parameters: never;
@@ -3764,15 +3817,6 @@ export interface operations {
                     "application/json": components["schemas"]["UserOrgsResponse"];
                 };
             };
-            /** @description Not authenticated */
-            401: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
         };
     };
     setActiveOrg: {
@@ -3797,33 +3841,6 @@ export interface operations {
                     "application/json": components["schemas"]["SetActiveOrgResponse"];
                 };
             };
-            /** @description Invalid orgId format */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Not authenticated */
-            401: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description User is not a member of the target organization */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
         };
     };
     getDismissedBanners: {
@@ -5142,7 +5159,7 @@ export interface operations {
         };
         requestBody?: never;
         responses: {
-            /** @description Access check result */
+            /** @description Workspace access status */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -5151,15 +5168,6 @@ export interface operations {
                     "application/json": components["schemas"]["WorkspaceAccessResponse"];
                 };
             };
-            /** @description Not authenticated */
-            401: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
         };
     };
     getWorkspaceOverview: {
@@ -5180,24 +5188,6 @@ export interface operations {
                     "application/json": components["schemas"]["WorkspaceOverview"];
                 };
             };
-            /** @description No org.view_workspace capability */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Workspace not found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
         };
     };
     renameWorkspace: {
@@ -5209,7 +5199,7 @@ export interface operations {
         };
         requestBody: {
             content: {
-                "application/json": components["schemas"]["RenameWorkspaceRequest"];
+                "application/json": components["schemas"]["WorkspaceNameRequest"];
             };
         };
         responses: {
@@ -5222,41 +5212,12 @@ export interface operations {
                     "application/json": components["schemas"]["WorkspaceOverview"];
                 };
             };
-            /** @description Invalid name */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Missing org.manage_users capability */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Workspace not found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
         };
     };
     getWorkspaceMembers: {
         parameters: {
             query?: {
-                /** @description Cursor for pagination */
                 cursor?: string;
-                /** @description Max results per page (default 100, max 200) */
                 limit?: number;
             };
             header?: never;
@@ -5274,15 +5235,6 @@ export interface operations {
                     "application/json": components["schemas"]["WorkspaceMembersResponse"];
                 };
             };
-            /** @description No org.view_workspace capability */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
         };
     };
     getWorkspaceAuth: {
@@ -5294,7 +5246,7 @@ export interface operations {
         };
         requestBody?: never;
         responses: {
-            /** @description Workspace auth configuration */
+            /** @description Workspace authentication configuration */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -5303,23 +5255,12 @@ export interface operations {
                     "application/json": components["schemas"]["WorkspaceAuthConfig"];
                 };
             };
-            /** @description No org.view_workspace capability */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
         };
     };
     getWorkspaceAudit: {
         parameters: {
             query?: {
-                /** @description Number of events to return (default 50, max 100) */
                 limit?: number;
-                /** @description Pagination offset (default 0, max 1000) */
                 offset?: number;
             };
             header?: never;
@@ -5328,31 +5269,13 @@ export interface operations {
         };
         requestBody?: never;
         responses: {
-            /** @description List of audit events */
+            /** @description Workspace audit events */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["WorkspaceAuditEvent"][];
-                };
-            };
-            /** @description Offset exceeds maximum pagination depth */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description No org.view_workspace capability */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
+                    "application/json": components["schemas"]["WorkspaceAuditResponse"];
                 };
             };
         };
@@ -5379,24 +5302,6 @@ export interface operations {
                     "application/json": components["schemas"]["OrgAuthPolicy"];
                 };
             };
-            /** @description Actor lacks org.manage_auth capability */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Would lock out all authority principals */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
         };
     };
     validateOidcDiscovery: {
@@ -5408,14 +5313,11 @@ export interface operations {
         };
         requestBody: {
             content: {
-                "application/json": {
-                    /** @description The OIDC discovery URL to validate */
-                    discoveryUrl: string;
-                };
+                "application/json": components["schemas"]["ValidateOidcRequest"];
             };
         };
         responses: {
-            /** @description Validation result */
+            /** @description OIDC validation result */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -5424,24 +5326,6 @@ export interface operations {
                     "application/json": components["schemas"]["OidcValidationResult"];
                 };
             };
-            /** @description Invalid request body */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Missing org.manage_auth capability */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
         };
     };
     initiateTestSso: {
@@ -5453,45 +5337,13 @@ export interface operations {
         };
         requestBody?: never;
         responses: {
-            /** @description Test SSO initiation with authorization URL */
+            /** @description Test SSO initiation result with authorization URL */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": {
-                        /** @description IdP authorization URL to redirect user to */
-                        authorizationUrl: string;
-                        /** @description ID of the created test attempt for polling */
-                        attemptId: string;
-                    };
-                };
-            };
-            /** @description No SSO provider configured or OIDC credentials missing */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Missing org.manage_auth capability */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description A test is already in progress (debounce) */
-            429: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
+                    "application/json": components["schemas"]["TestSsoInitiation"];
                 };
             };
         };
@@ -5500,50 +5352,18 @@ export interface operations {
         parameters: {
             query?: never;
             header?: never;
-            path: {
-                /** @description The test attempt ID to poll */
-                attemptId: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description Test SSO result */
+            /** @description Test SSO attempt status */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": {
-                        /** @enum {string} */
-                        status: "pending" | "success" | "failed" | "expired";
-                        claims?: {
-                            sub?: string;
-                            email?: string;
-                            issuer?: string;
-                        };
-                        identityLinked?: boolean;
-                        error?: string;
-                        errorCode?: string;
-                    };
-                };
-            };
-            /** @description Missing org.manage_auth capability */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Attempt not found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
+                    "application/json": components["schemas"]["TestSsoResult"];
                 };
             };
         };
@@ -5763,10 +5583,7 @@ export interface operations {
         parameters: {
             query?: never;
             header?: never;
-            path: {
-                /** @description Member ID */
-                id: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody?: never;
@@ -5780,43 +5597,13 @@ export interface operations {
                     "application/json": components["schemas"]["RemoveMemberResponse"];
                 };
             };
-            /** @description Forbidden (owner protection, missing capability) */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Member not found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Conflict (admin floor violation) */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
         };
     };
     changeMemberRole: {
         parameters: {
             query?: never;
             header?: never;
-            path: {
-                /** @description Member ID */
-                id: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody: {
@@ -5834,42 +5621,6 @@ export interface operations {
                     "application/json": components["schemas"]["ChangeMemberRoleResponse"];
                 };
             };
-            /** @description Invalid request body */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Forbidden (owner demotion, missing capability) */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Member not found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Conflict (admin floor violation) */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
         };
     };
     listDomains: {
@@ -6070,49 +5821,13 @@ export interface operations {
         };
         requestBody?: never;
         responses: {
-            /** @description Logo resynced */
+            /** @description Resync result with new logo URL */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["ResyncSlackLogoResponse"];
-                };
-            };
-            /** @description Slack not connected */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Not authenticated */
-            401: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description No org.view_workspace capability */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Rate limit exceeded */
-            429: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
+                    "application/json": components["schemas"]["WorkspaceResyncSlackLogoResponse"];
                 };
             };
         };
@@ -6126,58 +5841,17 @@ export interface operations {
         };
         requestBody: {
             content: {
-                "application/json": {
-                    /** @description Flat tokenized segments, e.g. ["dept", "engineering", "team", "front-end"] */
-                    path: string[];
-                };
+                "application/json": components["schemas"]["ResolvePathRequest"];
             };
         };
         responses: {
-            /** @description Resolved layers */
+            /** @description Resolved navigation layers */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": {
-                        layers: components["schemas"]["ResolvedLayer"][];
-                    };
-                };
-            };
-            /** @description Invalid segment grammar */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Not authenticated */
-            401: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description No org.view_workspace capability */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Entity slug not found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
+                    "application/json": components["schemas"]["WorkspaceResolvePathResponse"];
                 };
             };
         };
@@ -7970,9 +7644,7 @@ export interface operations {
         parameters: {
             query?: never;
             header?: never;
-            path: {
-                orgId: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody?: never;
@@ -7982,32 +7654,7 @@ export interface operations {
                 headers: {
                     [name: string]: unknown;
                 };
-                content: {
-                    "application/json": {
-                        /** @constant */
-                        success?: true;
-                        /** Format: uuid */
-                        nextOrgId?: string | null;
-                    };
-                };
-            };
-            /** @description Cannot leave personal org or sole owner */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Not a member of this organization */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
+                content?: never;
             };
         };
     };
@@ -8396,24 +8043,6 @@ export interface operations {
                     "application/json": components["schemas"]["ScopeCheckBatchResponse"];
                 };
             };
-            /** @description Invalid input (empty array, >20 items, invalid scope format) */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Not authenticated */
-            401: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
         };
     };
 }

package/src/org/index.ts

@@ -179,3 +179,25 @@ export type {
   ScopeCheckResponse,
   ScopeCheckBatchResponse,
 } from './schemas';
+
+// Org lifecycle response schemas (PRD-00446)
+export {
+  InviteResponseSchema,
+  InviteListResponseSchema,
+  DomainResponseSchema,
+  DomainListResponseSchema,
+  OrgBillingResponseSchema,
+  OrgDeletionStatusSchema,
+  OwnershipTransferResponseSchema,
+  OwnershipTransferPreviewSchema,
+} from './schemas';
+export type {
+  InviteResponse,
+  InviteListResponse,
+  DomainResponse,
+  DomainListResponse,
+  OrgBillingResponse,
+  OrgDeletionStatus,
+  OwnershipTransferResponse,
+  OwnershipTransferPreview,
+} from './schemas';

package/src/org/schemas.ts

@@ -371,3 +371,134 @@ export const ScopeCheckBatchResponseSchema = z.object({
 });
 
 export type ScopeCheckBatchResponse = z.infer<typeof ScopeCheckBatchResponseSchema>;
+
+// ---------------------------------------------------------------------------
+// Invite sub-schema
+// ---------------------------------------------------------------------------
+
+const OrgInviteSchema = z.object({
+  id: z.string(),
+  orgId: z.string(),
+  email: z.string(),
+  role: z.enum(['owner', 'admin', 'member', 'auditor']),
+  invitedBy: z.object({ id: z.string(), name: z.string() }),
+  status: z.enum(['pending', 'accepted', 'expired', 'revoked']),
+  createdAt: z.string(),
+  expiresAt: z.string(),
+  acceptedAt: z.string().optional(),
+});
+
+// ---------------------------------------------------------------------------
+// POST /api/workspace/invites
+// ---------------------------------------------------------------------------
+
+export const InviteResponseSchema = z.object({
+  invite: OrgInviteSchema,
+});
+
+export type InviteResponse = z.infer<typeof InviteResponseSchema>;
+
+// ---------------------------------------------------------------------------
+// GET /api/workspace/invites
+// ---------------------------------------------------------------------------
+
+export const InviteListResponseSchema = z.array(OrgInviteSchema);
+
+export type InviteListResponse = z.infer<typeof InviteListResponseSchema>;
+
+// ---------------------------------------------------------------------------
+// OrgDomain sub-schema
+// ---------------------------------------------------------------------------
+
+const OrgDomainSchema = z.object({
+  id: z.string(),
+  orgId: z.string(),
+  domain: z.string(),
+  status: z.enum(['pending', 'verified']),
+  verificationMethod: z.enum(['dns_txt', 'email', 'idp']),
+  verificationToken: z.string().optional(),
+  verifiedAt: z.string().nullable(),
+  createdAt: z.string(),
+  verifiedBy: z.object({ id: z.string(), name: z.string(), email: z.string() }).optional(),
+});
+
+// ---------------------------------------------------------------------------
+// GET /api/workspace/domains/:id/verify (single domain)
+// POST /api/workspace/domains/:id/verify (returns verified OrgDomain)
+// ---------------------------------------------------------------------------
+
+export const DomainResponseSchema = OrgDomainSchema;
+
+export type DomainResponse = z.infer<typeof DomainResponseSchema>;
+
+// ---------------------------------------------------------------------------
+// GET /api/workspace/domains
+// ---------------------------------------------------------------------------
+
+export const DomainListResponseSchema = z.array(OrgDomainSchema);
+
+export type DomainListResponse = z.infer<typeof DomainListResponseSchema>;
+
+// ---------------------------------------------------------------------------
+// GET /api/orgs/:orgId/billing
+// ---------------------------------------------------------------------------
+
+export const OrgBillingResponseSchema = z.object({
+  planName: z.string(),
+  planStatus: z.enum(['active', 'trialing', 'past_due', 'canceled']),
+  billingCadence: z.string(),
+  seatCount: z.number(),
+  seatLimit: z.number(),
+  billingOwnerUserId: z.string(),
+});
+
+export type OrgBillingResponse = z.infer<typeof OrgBillingResponseSchema>;
+
+// ---------------------------------------------------------------------------
+// GET /api/org/deletion-eligibility
+// ---------------------------------------------------------------------------
+
+const MemberClassificationSchema = z.object({
+  userId: z.string(),
+  email: z.string(),
+  suggestedFate: z.enum(['REMOVE_FROM_ORG', 'DELETE_ACCOUNT', 'BLOCKED']),
+  reason: z.string(),
+});
+
+export const OrgDeletionStatusSchema = z.object({
+  orgId: z.string(),
+  eligible: z.boolean(),
+  isPersonalOrg: z.boolean(),
+  ownerStatus: z.string().optional(),
+  deletionRequestedAt: z.string().optional(),
+  classifications: z.array(MemberClassificationSchema),
+});
+
+export type OrgDeletionStatus = z.infer<typeof OrgDeletionStatusSchema>;
+
+// ---------------------------------------------------------------------------
+// POST /api/org/transfer-ownership (initiate)
+// ---------------------------------------------------------------------------
+
+export const OwnershipTransferResponseSchema = z.object({
+  transferId: z.string(),
+  expiresAt: z.string(),
+  message: z.string(),
+});
+
+export type OwnershipTransferResponse = z.infer<typeof OwnershipTransferResponseSchema>;
+
+// ---------------------------------------------------------------------------
+// POST /api/org/transfer-ownership/preview
+// ---------------------------------------------------------------------------
+
+export const OwnershipTransferPreviewSchema = z.object({
+  workspaceName: z.string(),
+  initiatorName: z.string(),
+  initiatorEmail: z.string(),
+  note: z.string().optional(),
+  expiresAt: z.string(),
+  token: z.string(),
+});
+
+export type OwnershipTransferPreview = z.infer<typeof OwnershipTransferPreviewSchema>;