@company-semantics/contracts 0.121.0 → 0.122.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "0.121.0",
+  "version": "0.122.0",
   "private": false,
   "repository": {
     "type": "git",

package/src/api/generated-spec-hash.ts

@@ -1,3 +1,3 @@
 // AUTO-GENERATED — do not edit. Run pnpm generate:spec-hash to regenerate.
-export const SPEC_HASH = 'd4f412a26098' as const;
-export const SPEC_HASH_FULL = 'd4f412a26098e42f4578da215bc71e3960ed6850e2482e8de7c1a38f785c2cf6' as const;
+export const SPEC_HASH = '785191c09824' as const;
+export const SPEC_HASH_FULL = '785191c09824d7a5a12b6a0a1f8b049487c2489bad21f66ca89d93a1e2f1e707' as const;

package/src/api/generated.ts

@@ -619,19 +619,9 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /**
-         * Initiate ownership transfer
-         * @description Initiates an ownership transfer to a new owner by email.
-         *     Sends an email with a transfer acceptance link to the new owner.
-         *     Only the org owner can initiate transfers.
-         *     Rate limited: 5/hour per user.
-         */
+        /** Initiate ownership transfer */
         post: operations["initiateOwnershipTransfer"];
-        /**
-         * Cancel ownership transfer
-         * @description Cancels a pending ownership transfer.
-         *     Only the user who initiated the transfer can cancel it.
-         */
+        /** Cancel ownership transfer */
         delete: operations["cancelOwnershipTransfer"];
         options?: never;
         head?: never;
@@ -645,11 +635,7 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /**
-         * Get ownership transfer status
-         * @description Returns the status of any pending ownership transfer.
-         *     Only the org owner can view transfer status.
-         */
+        /** Get ownership transfer status */
         get: operations["getOwnershipTransferStatus"];
         put?: never;
         post?: never;
@@ -668,13 +654,7 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /**
-         * Preview ownership transfer details
-         * @description Returns transfer details for the acceptance page.
-         *     This endpoint does NOT require session auth - the token is the credential.
-         *     Token is passed in POST body (not URL) to prevent logging exposure.
-         *     Rate limited: 10/hour per IP.
-         */
+        /** Preview ownership transfer details */
         post: operations["previewOwnershipTransfer"];
         delete?: never;
         options?: never;
@@ -691,12 +671,7 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /**
-         * Accept ownership transfer
-         * @description Accepts an ownership transfer using the token from email.
-         *     Requires authenticated session with login freshness (15 minutes).
-         *     Rate limited: 10/hour per IP.
-         */
+        /** Accept ownership transfer */
         post: operations["acceptOwnershipTransfer"];
         delete?: never;
         options?: never;
@@ -711,12 +686,7 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /**
-         * Get ITL-aware transfer eligibility
-         * @description Returns ITL-aware transfer eligibility for the org and all members.
-         *     Used by the transfer ownership dialog to show eligibility indicators.
-         *     Only org owners may call this endpoint.
-         */
+        /** Get ITL-aware transfer eligibility */
         get: operations["getTransferEligibility"];
         put?: never;
         post?: never;
@@ -733,12 +703,7 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /**
-         * Check org deletion eligibility
-         * @description Check whether the current org is eligible for deletion and return
-         *     member classification (suggested fates for each member).
-         *     Only org owners may call this endpoint.
-         */
+        /** Check org deletion eligibility */
         get: operations["orgDeletionEligibility"];
         put?: never;
         post?: never;
@@ -757,12 +722,7 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /**
-         * Request org deletion
-         * @description Request deletion of the current org. Requires explicit list of user IDs
-         *     to cascade-delete. Non-listed members will be removed from org only.
-         *     Only org owners may call this endpoint.
-         */
+        /** Request org deletion */
         post: operations["orgDelete"];
         delete?: never;
         options?: never;
@@ -779,13 +739,7 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /**
-         * Cancel pending org deletion
-         * @description Cancel a pending org deletion during the 30-day grace period.
-         *     Restores org to active, re-activates memberships, and cancels
-         *     cascade-deleted users (if still pending and no independent intent).
-         *     Only org owners may call this endpoint.
-         */
+        /** Cancel pending org deletion */
         post: operations["orgCancelDeletion"];
         delete?: never;
         options?: never;
@@ -1004,12 +958,7 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /**
-         * Validate an invite token
-         * @description Validate an invite token without accepting it.
-         *     Used by the frontend to preflight-check tokens on page load.
-         *     No authentication required.
-         */
+        /** Validate an invite token */
         get: operations["validateInviteToken"];
         put?: never;
         post?: never;
@@ -1026,19 +975,10 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /**
-         * List pending invites
-         * @description List pending invites for the current organization.
-         *     Requires org.view_workspace capability.
-         */
+        /** List pending invites */
         get: operations["listPendingInvites"];
         put?: never;
-        /**
-         * Create workspace invite
-         * @description Create a new organization invite.
-         *     Requires org.invite_member capability.
-         *     Invites expire after 7 days.
-         */
+        /** Create workspace invite */
         post: operations["createInvite"];
         delete?: never;
         options?: never;
@@ -1055,11 +995,7 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /**
-         * Accept workspace invite
-         * @description Accept an organization invite.
-         *     First invite acceptance triggers personal to shared transition.
-         */
+        /** Accept workspace invite */
         post: operations["acceptInvite"];
         delete?: never;
         options?: never;
@@ -1077,11 +1013,7 @@ export interface paths {
         get?: never;
         put?: never;
         post?: never;
-        /**
-         * Revoke pending invite
-         * @description Revoke a pending invite.
-         *     Requires org.invite_member capability.
-         */
+        /** Revoke pending invite */
         delete: operations["revokeInvite"];
         options?: never;
         head?: never;
@@ -1129,22 +1061,10 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /**
-         * List workspace domains
-         * @description List all domains claimed by the workspace.
-         *     Returns domains with their verification status.
-         *     Verification tokens are NOT included in response.
-         *     Requires org.view_workspace capability.
-         */
+        /** List workspace domains */
         get: operations["listDomains"];
         put?: never;
-        /**
-         * Claim a domain for verification
-         * @description Claim a domain for DNS verification.
-         *     Creates a pending domain claim with DNS TXT record instructions.
-         *     Only one org can have a verified claim on a domain (global uniqueness).
-         *     Requires org.claim_domain capability (owner-only).
-         */
+        /** Claim a domain for verification */
         post: operations["claimDomain"];
         delete?: never;
         options?: never;
@@ -1161,13 +1081,7 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /**
-         * Verify domain ownership
-         * @description Trigger DNS verification for a pending domain claim.
-         *     Checks DNS TXT record for the verification token.
-         *     On success, domain status changes to 'verified'.
-         *     Requires org.claim_domain capability (owner-only).
-         */
+        /** Trigger DNS verification for a domain */
         post: operations["verifyDomain"];
         delete?: never;
         options?: never;
@@ -1185,12 +1099,7 @@ export interface paths {
         get?: never;
         put?: never;
         post?: never;
-        /**
-         * Delete domain claim
-         * @description Delete a domain claim.
-         *     Removes the domain record, allowing other orgs to claim it.
-         *     Requires org.claim_domain capability (owner-only).
-         */
+        /** Delete a domain claim */
         delete: operations["deleteDomain"];
         options?: never;
         head?: never;
@@ -1325,11 +1234,7 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /**
-         * Get organization billing information
-         * @description Read-only billing information for organization owners.
-         *     Only org owners may view billing (BILL-ORG-1).
-         */
+        /** Get organization billing information */
         get: operations["getBilling"];
         put?: never;
         post?: never;
@@ -2799,16 +2704,12 @@ export interface components {
             RelayState: string;
         };
         InitiateTransferRequest: {
-            /**
-             * Format: email
-             * @description Email of the new owner
-             */
+            /** Format: email */
             newOwnerEmail: string;
+            note?: string;
         };
         InitiateTransferResponse: {
-            /** Format: uuid */
             transferId: string;
-            /** Format: date-time */
             expiresAt: string;
             message: string;
         };
@@ -3023,26 +2924,35 @@ export interface components {
             selfRevoked?: boolean;
         };
         CreateInviteRequest: {
-            /**
-             * Format: email
-             * @description Email address of the invitee
-             */
+            /** Format: email */
             email: string;
-            /**
-             * @description Role to assign
-             * @enum {string}
-             */
+            /** @enum {string} */
             role: "admin" | "member";
         };
         CreateInviteResponse: {
-            invite: components["schemas"]["OrgInvite"];
+            invite: {
+                id: string;
+                orgId: string;
+                email: string;
+                /** @enum {string} */
+                role: "owner" | "admin" | "member" | "auditor";
+                invitedBy: {
+                    id: string;
+                    name: string;
+                };
+                /** @enum {string} */
+                status: "pending" | "accepted" | "expired" | "revoked";
+                createdAt: string;
+                expiresAt: string;
+                acceptedAt?: string;
+            };
         };
         AcceptInviteRequest: {
-            /** @description The invite acceptance token */
             token: string;
         };
         AcceptInviteResponse: {
-            success: boolean;
+            /** @constant */
+            success: true;
             /** Format: uuid */
             orgId: string;
             role: string;
@@ -3108,7 +3018,6 @@ export interface components {
             createdAt: string;
         };
         ClaimDomainRequest: {
-            /** @description The domain to claim (e.g., "example.com") */
             domain: string;
         };
         DnsInstructions: {
@@ -3120,8 +3029,21 @@ export interface components {
             value: string;
         };
         ClaimDomainResponse: {
-            domain: components["schemas"]["OrgDomain"];
-            dnsInstructions: components["schemas"]["DnsInstructions"];
+            id: string;
+            orgId: string;
+            domain: string;
+            /** @enum {string} */
+            status: "pending" | "verified";
+            /** @enum {string} */
+            verificationMethod: "dns_txt" | "email" | "idp";
+            verificationToken?: string;
+            verifiedAt: string | null;
+            createdAt: string;
+            verifiedBy?: {
+                id: string;
+                name: string;
+                email: string;
+            };
         };
         RevokeDomainResponse: {
             /** @constant */
@@ -3306,9 +3228,7 @@ export interface components {
         };
         InviteValidationResult: {
             valid: boolean;
-            /** @description Invite status (e.g. pending, accepted, expired, revoked) */
             status: string;
-            /** @description Organization name (present when invite is valid) */
             orgName?: string;
         };
         LogoutResponse: {
@@ -3555,6 +3475,96 @@ export interface components {
             /** @enum {string} */
             errorCode?: "IDENTITY_CONFLICT" | "DOMAIN_MISMATCH" | "ISSUER_MISMATCH" | "CALLBACK_ERROR";
         };
+        InviteListResponse: {
+            id: string;
+            orgId: string;
+            email: string;
+            /** @enum {string} */
+            role: "owner" | "admin" | "member" | "auditor";
+            invitedBy: {
+                id: string;
+                name: string;
+            };
+            /** @enum {string} */
+            status: "pending" | "accepted" | "expired" | "revoked";
+            createdAt: string;
+            expiresAt: string;
+            acceptedAt?: string;
+        }[];
+        DomainListResponse: {
+            id: string;
+            orgId: string;
+            domain: string;
+            /** @enum {string} */
+            status: "pending" | "verified";
+            /** @enum {string} */
+            verificationMethod: "dns_txt" | "email" | "idp";
+            verificationToken?: string;
+            verifiedAt: string | null;
+            createdAt: string;
+            verifiedBy?: {
+                id: string;
+                name: string;
+                email: string;
+            };
+        }[];
+        VerifyDomainResponse: {
+            id: string;
+            orgId: string;
+            domain: string;
+            /** @enum {string} */
+            status: "pending" | "verified";
+            /** @enum {string} */
+            verificationMethod: "dns_txt" | "email" | "idp";
+            verificationToken?: string;
+            verifiedAt: string | null;
+            createdAt: string;
+            verifiedBy?: {
+                id: string;
+                name: string;
+                email: string;
+            };
+        };
+        OrgBillingResponse: {
+            planName: string;
+            /** @enum {string} */
+            planStatus: "active" | "trialing" | "past_due" | "canceled";
+            billingCadence: string;
+            seatCount: number;
+            seatLimit: number;
+            billingOwnerUserId: string;
+        };
+        OrgDeletionStatus: {
+            orgId: string;
+            eligible: boolean;
+            isPersonalOrg: boolean;
+            ownerStatus?: string;
+            deletionRequestedAt?: string;
+            classifications: {
+                userId: string;
+                email: string;
+                /** @enum {string} */
+                suggestedFate: "REMOVE_FROM_ORG" | "DELETE_ACCOUNT" | "BLOCKED";
+                reason: string;
+            }[];
+        };
+        OrgDeleteRequest: {
+            userIdsToDelete: string[];
+        };
+        AcceptTransferRequest: {
+            token: string;
+        };
+        OwnershipTransferPreview: {
+            workspaceName: string;
+            initiatorName: string;
+            initiatorEmail: string;
+            note?: string;
+            expiresAt: string;
+            token: string;
+        };
+        PreviewTransferRequest: {
+            token: string;
+        };
     };
     responses: never;
     parameters: never;
@@ -4703,42 +4713,6 @@ export interface operations {
                     "application/json": components["schemas"]["InitiateTransferResponse"];
                 };
             };
-            /** @description Validation error or self-transfer attempt */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Not the organization owner */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Transfer already pending or target ineligible */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Rate limit exceeded */
-            429: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
         };
     };
     cancelOwnershipTransfer: {
@@ -4755,27 +4729,7 @@ export interface operations {
                 headers: {
                     [name: string]: unknown;
                 };
-                content: {
-                    "application/json": components["schemas"]["OkResponse"];
-                };
-            };
-            /** @description Not the organization owner */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description No pending transfer found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
+                content?: never;
             };
         };
     };
@@ -4793,22 +4747,35 @@ export interface operations {
                 headers: {
                     [name: string]: unknown;
                 };
-                content: {
-                    "application/json": components["schemas"]["TransferStatusResponse"];
-                };
+                content?: never;
             };
-            /** @description Not the organization owner */
-            403: {
+        };
+    };
+    previewOwnershipTransfer: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["PreviewTransferRequest"];
+            };
+        };
+        responses: {
+            /** @description Transfer preview details */
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
+                    "application/json": components["schemas"]["OwnershipTransferPreview"];
                 };
             };
         };
     };
-    previewOwnershipTransfer: {
+    acceptOwnershipTransfer: {
         parameters: {
             query?: never;
             header?: never;
@@ -4817,40 +4784,58 @@ export interface operations {
         };
         requestBody: {
             content: {
-                "application/json": components["schemas"]["AcceptTransferBody"];
+                "application/json": components["schemas"]["AcceptTransferRequest"];
             };
         };
         responses: {
-            /** @description Transfer preview details */
+            /** @description Ownership transferred */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content: {
-                    "application/json": components["schemas"]["TransferAcceptanceView"];
-                };
+                content?: never;
             };
-            /** @description Transfer not found or token is invalid */
-            404: {
+        };
+    };
+    getTransferEligibility: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Transfer eligibility result with per-member eligibility */
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
+                content?: never;
             };
-            /** @description Rate limit exceeded */
-            429: {
+        };
+    };
+    orgDeletionEligibility: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Eligibility check result with member classifications */
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
+                    "application/json": components["schemas"]["OrgDeletionStatus"];
                 };
             };
         };
     };
-    acceptOwnershipTransfer: {
+    orgDelete: {
         parameters: {
             query?: never;
             header?: never;
@@ -4859,188 +4844,16 @@ export interface operations {
         };
         requestBody: {
             content: {
-                "application/json": components["schemas"]["AcceptTransferBody"];
+                "application/json": components["schemas"]["OrgDeleteRequest"];
             };
         };
         responses: {
-            /** @description Transfer accepted, ownership transferred */
+            /** @description Org deletion initiated, confirmation email sent */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content: {
-                    "application/json": components["schemas"]["AcceptTransferResponse"];
-                };
-            };
-            /** @description Invalid or missing token */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Session too old — re-authentication required */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Transfer not found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Transfer expired */
-            410: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Rate limit exceeded */
-            429: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-        };
-    };
-    getTransferEligibility: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description Transfer eligibility result with per-member eligibility */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": {
-                        eligibility: components["schemas"]["TransferEligibilityResult"];
-                        members: components["schemas"]["TransferMemberEligibility"][];
-                    };
-                };
-            };
-            /** @description Not an org owner */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-        };
-    };
-    orgDeletionEligibility: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description Eligibility check result with member classifications */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": {
-                        orgId: string;
-                        eligible: boolean;
-                        isPersonalOrg: boolean;
-                        ownerStatus?: string;
-                        classifications: Record<string, never>[];
-                    };
-                };
-            };
-            /** @description Not authenticated */
-            401: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Organization not found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-        };
-    };
-    orgDelete: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody: {
-            content: {
-                "application/json": {
-                    userIdsToDelete: string[];
-                };
-            };
-        };
-        responses: {
-            /** @description Org deletion initiated */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": {
-                        /** @constant */
-                        status: "pending_deletion";
-                        correlationId: string;
-                        deletionKind: string;
-                    };
-                };
-            };
-            /** @description Invalid request body */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Not authenticated */
-            401: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
+                content?: never;
             };
         };
     };
@@ -5058,21 +4871,7 @@ export interface operations {
                 headers: {
                     [name: string]: unknown;
                 };
-                content: {
-                    "application/json": {
-                        /** @constant */
-                        status: "active";
-                    };
-                };
-            };
-            /** @description Not authenticated */
-            401: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
+                content?: never;
             };
         };
     };
@@ -5371,7 +5170,6 @@ export interface operations {
     validateInviteToken: {
         parameters: {
             query: {
-                /** @description Invite acceptance token */
                 token: string;
             };
             header?: never;
@@ -5389,15 +5187,6 @@ export interface operations {
                     "application/json": components["schemas"]["InviteValidationResult"];
                 };
             };
-            /** @description Missing token parameter */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
         };
     };
     listPendingInvites: {
@@ -5415,16 +5204,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["OrgInvite"][];
-                };
-            };
-            /** @description No view capability */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
+                    "application/json": components["schemas"]["InviteListResponse"];
                 };
             };
         };
@@ -5451,33 +5231,6 @@ export interface operations {
                     "application/json": components["schemas"]["CreateInviteResponse"];
                 };
             };
-            /** @description Invalid input */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description No invite capability */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Duplicate invite or already member */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
         };
     };
     acceptInvite: {
@@ -5502,43 +5255,13 @@ export interface operations {
                     "application/json": components["schemas"]["AcceptInviteResponse"];
                 };
             };
-            /** @description Invite not found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Invite already processed */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Invite expired */
-            410: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
         };
     };
     revokeInvite: {
         parameters: {
             query?: never;
             header?: never;
-            path: {
-                /** @description Invite ID */
-                id: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody?: never;
@@ -5550,33 +5273,6 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description No invite capability */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Invite not found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Invite already processed */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
         };
     };
     removeMember: {
@@ -5638,16 +5334,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["OrgDomain"][];
-                };
-            };
-            /** @description No org.view_workspace capability */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
+                    "application/json": components["schemas"]["DomainListResponse"];
                 };
             };
         };
@@ -5665,7 +5352,7 @@ export interface operations {
             };
         };
         responses: {
-            /** @description Domain claimed, DNS instructions returned */
+            /** @description Domain claimed */
             201: {
                 headers: {
                     [name: string]: unknown;
@@ -5674,90 +5361,24 @@ export interface operations {
                     "application/json": components["schemas"]["ClaimDomainResponse"];
                 };
             };
-            /** @description Invalid domain format */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description No org.claim_domain capability */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Domain already claimed by this org or verified by another */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
         };
     };
     verifyDomain: {
         parameters: {
             query?: never;
             header?: never;
-            path: {
-                /** @description Domain claim ID */
-                id: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description Domain verified successfully */
+            /** @description Domain verification result */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["OrgDomain"];
-                };
-            };
-            /** @description Domain not pending, DNS lookup failed, or token mismatch */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description No org.claim_domain capability */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Domain not found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Another org verified this domain (race condition) */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
+                    "application/json": components["schemas"]["VerifyDomainResponse"];
                 };
             };
         };
@@ -5766,49 +5387,17 @@ export interface operations {
         parameters: {
             query?: never;
             header?: never;
-            path: {
-                /** @description Domain claim ID */
-                id: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description Domain claim revoked */
+            /** @description Domain deleted */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content: {
-                    "application/json": components["schemas"]["RevokeDomainResponse"];
-                };
-            };
-            /** @description Domain already revoked */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description No org.claim_domain capability */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Domain not found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
+                content?: never;
             };
         };
     };
@@ -6024,10 +5613,7 @@ export interface operations {
         parameters: {
             query?: never;
             header?: never;
-            path: {
-                /** @description Organization ID */
-                orgId: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody?: never;
@@ -6038,25 +5624,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": {
-                        planName: string;
-                        /** @enum {string} */
-                        planStatus: "active" | "trialing" | "past_due" | "canceled";
-                        billingCadence: string;
-                        seatCount: number;
-                        seatLimit: number;
-                        /** Format: uuid */
-                        billingOwnerUserId: string;
-                    };
-                };
-            };
-            /** @description Not an org owner */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
+                    "application/json": components["schemas"]["OrgBillingResponse"];
                 };
             };
         };

package/src/execution/index.ts

@@ -145,3 +145,25 @@ export type {
   TimelineIcon,
   TimelineUIEvent,
 } from './timeline-ui'
+
+// =============================================================================
+// HTTP Response Schemas (Zod)
+// =============================================================================
+
+export {
+  ExecutionSummarySchema,
+  ExecutionListResponseSchema,
+  TimelineEventSchema,
+  ExecutionTimelineResponseSchema,
+  ConfirmExecutionResponseSchema,
+  RejectExecutionResponseSchema,
+} from './schemas'
+
+export type {
+  ExecutionSummaryResponse,
+  ExecutionListResponse,
+  TimelineEvent,
+  ExecutionTimelineResponse,
+  ConfirmExecutionResponse,
+  RejectExecutionResponse,
+} from './schemas'

package/src/execution/schemas.ts

@@ -0,0 +1,95 @@
+/**
+ * Execution Response Schemas
+ *
+ * Zod schemas for execution HTTP endpoint responses.
+ * These schemas are used for runtime validation at API contract surfaces.
+ *
+ * @see ADR-CONT-029 for design rationale
+ */
+
+import { z } from 'zod'
+
+// =============================================================================
+// Execution Summary
+// =============================================================================
+
+export const ExecutionSummarySchema = z.object({
+  executionId: z.string().uuid(),
+  kind: z.string(),
+  status: z.enum(['pending', 'succeeded', 'failed']),
+  decidedAt: z.string().datetime({ offset: true }),
+  completedAt: z.string().datetime({ offset: true }).optional(),
+  target: z.object({ type: z.string() }),
+})
+
+export type ExecutionSummaryResponse = z.infer<typeof ExecutionSummarySchema>
+
+// =============================================================================
+// Execution List Response
+// =============================================================================
+
+export const ExecutionListResponseSchema = z.object({
+  executions: z.array(ExecutionSummarySchema),
+  nextCursor: z.string().nullable().optional(),
+  hasMore: z.boolean().optional(),
+})
+
+export type ExecutionListResponse = z.infer<typeof ExecutionListResponseSchema>
+
+// =============================================================================
+// Timeline Event
+// =============================================================================
+
+const TimelineRelatedIdsSchema = z.object({
+  decisionId: z.string().optional(),
+  artifactId: z.string().optional(),
+  rollbackId: z.string().optional(),
+  provenanceIds: z.array(z.string()).optional(),
+})
+
+export const TimelineEventSchema = z.object({
+  eventId: z.string(),
+  executionId: z.string().uuid(),
+  timestamp: z.string(),
+  createdAt: z.string(),
+  kind: z.string(),
+  summary: z.string(),
+  details: z.record(z.string(), z.unknown()).optional(),
+  relatedIds: TimelineRelatedIdsSchema.optional(),
+  visibilityLevel: z.enum(['system', 'oversight', 'org_admin', 'user']),
+})
+
+export type TimelineEvent = z.infer<typeof TimelineEventSchema>
+
+// =============================================================================
+// Execution Timeline Response
+// =============================================================================
+
+export const ExecutionTimelineResponseSchema = z.object({
+  events: z.array(TimelineEventSchema),
+})
+
+export type ExecutionTimelineResponse = z.infer<typeof ExecutionTimelineResponseSchema>
+
+// =============================================================================
+// Execution Lifecycle Responses
+// =============================================================================
+
+export const ConfirmExecutionResponseSchema = z.object({
+  status: z.enum([
+    'executing',
+    'blocked_pending_approval',
+    'already_confirmed',
+    'awaiting_approval',
+  ]),
+  code: z.string().optional(),
+  executionId: z.string().optional(),
+})
+
+export type ConfirmExecutionResponse = z.infer<typeof ConfirmExecutionResponseSchema>
+
+export const RejectExecutionResponseSchema = z.object({
+  status: z.literal('cancelled'),
+})
+
+export type RejectExecutionResponse = z.infer<typeof RejectExecutionResponseSchema>