@company-semantics/contracts 0.51.0 → 0.53.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "0.51.0",
+  "version": "0.53.0",
   "private": false,
   "repository": {
     "type": "git",

package/src/index.ts

@@ -182,6 +182,12 @@ export type {
   // Authorization context types (Phase 5)
   // @see ADR-CTRL-010 for design rationale
   OrgScopedContext,
+  // Workspace Info/Settings surface types (PRD-00133)
+  WorkspaceSurface,
+  WorkspaceInfoOverview,
+  WorkspaceSettingsOverview,
+  IntegrationRequestStatus,
+  IntegrationRequest,
 } from './org/index'
 
 export { ROLE_DISPLAY_MAP, WORKSPACE_CAPABILITIES, ROLE_CAPABILITY_MAP, VIEW_SCOPE_MAP, getViewScope } from './org/index'

package/src/org/capabilities.ts

@@ -22,7 +22,7 @@
  *
  * Capability hierarchy (implicit):
  * - owner: all capabilities
- * - admin: invite_member, manage_members (limited)
+ * - admin: invite_member, manage_members (limited), manage_auth, demote_integration (own only)
  * - member: none (read-only)
  */
 export type WorkspaceCapability =
@@ -77,6 +77,7 @@ export const ROLE_CAPABILITY_MAP = {
   admin: [
     'org.invite_member',
     'org.manage_members', // Note: cannot remove/demote other admins
+    'org.manage_auth',
     'org.demote_integration', // Can demote own integrations only
   ],
   member: [],

package/src/org/index.ts

@@ -36,6 +36,12 @@ export type {
   UserOrgMembership,
   // Authorization context types (Phase 5 - ADR-CTRL-010)
   OrgScopedContext,
+  // Workspace Info/Settings surface types (PRD-00133)
+  WorkspaceSurface,
+  WorkspaceInfoOverview,
+  WorkspaceSettingsOverview,
+  IntegrationRequestStatus,
+  IntegrationRequest,
 } from './types';
 
 export { ROLE_DISPLAY_MAP } from './types';

package/src/org/types.ts

@@ -377,3 +377,78 @@ export interface OrgScopedContext {
    */
   readonly _orgValidated: true;
 }
+
+// =============================================================================
+// Workspace Info/Settings Surface Types (PRD-00133)
+// Capability naming invariant:
+//   Info surfaces use view-capabilities only (org.view_*)
+//   Settings surfaces use manage-capabilities only (org.manage_*)
+// Consumers MUST NOT cross-wire: Info routes must never require org.manage_*
+// capabilities, and Settings routes must never rely solely on org.view_*.
+// =============================================================================
+
+/**
+ * Discriminator for workspace surface routing.
+ * - 'info': Read-only surface, any member, org.view_* capabilities
+ * - 'settings': Admin surface, org.manage_* capabilities
+ */
+export type WorkspaceSurface = 'info' | 'settings';
+
+/**
+ * Read-only workspace overview for the Info surface.
+ * Visible to any workspace member with org.view_* capabilities.
+ *
+ * CAPABILITY INVARIANT: This type is served ONLY by Info routes
+ * which require org.view_* capabilities. Never use org.manage_*.
+ */
+export interface WorkspaceInfoOverview {
+  /** Organization name. */
+  name: string;
+  /** Workspace owners (display-only). */
+  owners: Array<{ id: string; name: string }>;
+  /** Total member count. */
+  memberCount: number;
+  /** Human-readable management line (e.g., "Managed by Alice"). */
+  managedByLine: string;
+}
+
+/**
+ * Full workspace overview for the Settings surface.
+ * Extends Info with mutation-relevant fields.
+ * Visible only to admins with org.manage_* capabilities.
+ *
+ * CAPABILITY INVARIANT: This type is served ONLY by Settings routes
+ * which require org.manage_* capabilities. Never use org.view_* alone.
+ */
+export interface WorkspaceSettingsOverview extends WorkspaceInfoOverview {
+  /** Organization slug (editable by admin). */
+  slug: string;
+  /** Metadata about who last edited settings and when. */
+  editMetadata: {
+    lastEditedBy: { id: string; name: string } | null;
+    lastEditedAt: string | null;
+  };
+}
+
+/**
+ * Status of an integration request from a member.
+ */
+export type IntegrationRequestStatus = 'pending' | 'approved' | 'denied';
+
+/**
+ * Advisory integration request created by a member.
+ * Members can request integration connections; admins see and action these.
+ * Creating a request does NOT guarantee approval.
+ */
+export interface IntegrationRequest {
+  /** Unique request identifier. */
+  id: string;
+  /** Integration provider name (e.g., 'slack', 'github'). */
+  provider: string;
+  /** User who made the request. */
+  requestedBy: { id: string; name: string };
+  /** Current status of the request. */
+  status: IntegrationRequestStatus;
+  /** ISO8601 timestamp when the request was created. */
+  createdAt: string;
+}

package/src/org/view-scopes.ts

@@ -22,6 +22,7 @@ export const VIEW_SCOPE_MAP = {
   dashboard: 'org.view_dashboard',
   'organization-strategy': 'org.view_strategy',
   'system-snapshot': 'org.view_system',
+  'company-admin': 'company.view_admin',
   // Public views (require only authentication)
   chat: null,
   settings: null,