@company-semantics/contracts 0.38.0 → 0.39.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "0.38.0",
+  "version": "0.39.0",
   "private": false,
   "repository": {
     "type": "git",

package/src/index.ts

@@ -152,9 +152,15 @@ export type {
   OrgDomain,
   Phase4AuditAction,
   UserOrgMembership,
+  // Authorization context types (Phase 5)
+  // @see ADR-CTRL-010 for design rationale
+  OrgScopedContext,
 } from './org/index'
 
-export { ROLE_DISPLAY_MAP, WORKSPACE_CAPABILITIES, ROLE_CAPABILITY_MAP } from './org/index'
+export { ROLE_DISPLAY_MAP, WORKSPACE_CAPABILITIES, ROLE_CAPABILITY_MAP, VIEW_SCOPE_MAP, getViewScope } from './org/index'
+
+// View authorization types (Phase 5 - ADR-APP-013)
+export type { AuthorizableView } from './org/index'
 
 // MCP tool discovery types
 // @see company-semantics-backend/src/interfaces/mcp/ for implementation

package/src/org/index.ts

@@ -34,6 +34,8 @@ export type {
   Phase3AuditAction,
   // Multi-org membership types (Phase 4)
   UserOrgMembership,
+  // Authorization context types (Phase 5 - ADR-CTRL-010)
+  OrgScopedContext,
 } from './types';
 
 export { ROLE_DISPLAY_MAP } from './types';
@@ -49,3 +51,7 @@ export type {
   OrgDomain,
   Phase4AuditAction,
 } from './domain';
+
+// View authorization scopes (Phase 5 - ADR-APP-013)
+export type { AuthorizableView } from './view-scopes';
+export { VIEW_SCOPE_MAP, getViewScope } from './view-scopes';

package/src/org/types.ts

@@ -329,3 +329,49 @@ export interface UserOrgMembership {
   /** Whether this membership is currently active. */
   isActive: boolean;
 }
+
+// ─────────────────────────────────────────────────────────────────────────────
+// Authorization Context Types (Phase 5 - ADR-CTRL-010)
+// ─────────────────────────────────────────────────────────────────────────────
+
+/**
+ * Validated organization-scoped context for policy implementations.
+ *
+ * This type provides compile-time proof that org membership was validated
+ * upstream. Policy implementations MUST accept this type instead of raw
+ * `orgId: string` to prevent user-controlled org bypass attacks.
+ *
+ * @invariant orgId comes from validated session, never user input
+ * @invariant userId is the authenticated user from session
+ * @invariant _orgValidated is a type-level marker (not runtime)
+ *
+ * @see ADR-CTRL-010 Org-Scoped Context Type requirement
+ * @see ADR-BE-060 Policy Delegation Pattern
+ *
+ * @example
+ * ```typescript
+ * // Policy implementation - accepts context, not raw orgId
+ * export const DomainViewPolicyImpl = {
+ *   async getDomainById(
+ *     db: Db,
+ *     ctx: OrgScopedContext,
+ *     domainId: string
+ *   ): Promise<OrgDomain | null> {
+ *     return db.select().from(orgDomains)
+ *       .where(and(eq(orgDomains.orgId, ctx.orgId), eq(orgDomains.id, domainId)));
+ *   }
+ * };
+ * ```
+ */
+export interface OrgScopedContext {
+  /** Organization ID from validated session. */
+  readonly orgId: string;
+  /** Authenticated user ID from session. */
+  readonly userId: string;
+  /**
+   * Type-level marker proving org validation occurred.
+   * This is a compile-time constraint, not a runtime value.
+   * Set to `true as const` when constructing from validated session.
+   */
+  readonly _orgValidated: true;
+}

package/src/org/view-scopes.ts

@@ -0,0 +1,42 @@
+/**
+ * View Authorization Scope Mapping
+ *
+ * Maps frontend views to required RBAC scopes.
+ * Used by useViewAuthorization hook for centralized view access control.
+ *
+ * See: ADR-APP-013
+ *
+ * INVARIANT: VIEW_SCOPE_MAP must stay in sync with AppView type in app-state.ts
+ */
+
+/**
+ * View-to-scope mapping for frontend authorization.
+ *
+ * - Views with string values require that scope for access
+ * - Views with null values are public (require only authentication)
+ */
+export const VIEW_SCOPE_MAP = {
+  // Protected views (require specific scope)
+  workspace: 'org.view_workspace',
+  timeline: 'org.view_timeline',
+  dashboard: 'org.view_dashboard',
+  'organization-strategy': 'org.view_strategy',
+  'system-snapshot': 'org.view_system',
+  // Public views (require only authentication)
+  chat: null,
+  settings: null,
+  chats: null,
+  upgrade: null,
+} as const;
+
+/**
+ * Type for views that can be checked against VIEW_SCOPE_MAP.
+ */
+export type AuthorizableView = keyof typeof VIEW_SCOPE_MAP;
+
+/**
+ * Get the required scope for a view, or null if public.
+ */
+export function getViewScope(view: string): string | null {
+  return VIEW_SCOPE_MAP[view as AuthorizableView] ?? null;
+}