@company-semantics/contracts 0.56.0 → 0.58.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "0.56.0",
+  "version": "0.58.0",
   "private": false,
   "repository": {
     "type": "git",

package/src/index.ts

@@ -154,8 +154,6 @@ export type {
   WorkspaceMember,
   AuthMethodConfig,
   WorkspaceAuthConfig,
-  IntegrationStatus,
-  WorkspaceIntegration,
   WorkspaceAuditEvent,
   // Workspace expansion DTOs (Phase 3)
   // @see ADR-CONT-031 for design rationale
@@ -167,8 +165,6 @@ export type {
   ChangeMemberRoleRequest,
   OrgAuthPolicy,
   UpdateAuthPolicyRequest,
-  PromoteIntegrationRequest,
-  DemoteIntegrationRequest,
   Phase3AuditAction,
   // Workspace capability types (Phase 3)
   WorkspaceCapability,

package/src/org/index.ts

@@ -17,8 +17,6 @@ export type {
   WorkspaceMember,
   AuthMethodConfig,
   WorkspaceAuthConfig,
-  IntegrationStatus,
-  WorkspaceIntegration,
   WorkspaceAuditEvent,
   // Workspace expansion DTOs (Phase 3)
   OrgInviteStatus,
@@ -29,8 +27,6 @@ export type {
   ChangeMemberRoleRequest,
   OrgAuthPolicy,
   UpdateAuthPolicyRequest,
-  PromoteIntegrationRequest,
-  DemoteIntegrationRequest,
   Phase3AuditAction,
   // Multi-org membership types (Phase 4)
   UserOrgMembership,

package/src/org/types.ts

@@ -57,7 +57,7 @@ export interface OwnershipTransferStatus {
  * Display role for workspace members.
  * Presentation-layer simplification of the internal RBAC roles.
  */
-export type WorkspaceRole = 'owner' | 'admin' | 'member';
+export type WorkspaceRole = 'owner' | 'admin' | 'member' | 'auditor';
 
 /**
  * RBAC → UI role mapping (presentation only).
@@ -66,6 +66,7 @@ export type WorkspaceRole = 'owner' | 'admin' | 'member';
 export const ROLE_DISPLAY_MAP = {
   org_owner: 'owner',
   org_admin: 'admin',
+  org_auditor: 'auditor',
   // All other roles → 'member'
 } as const satisfies Partial<Record<string, WorkspaceRole>>;
 
@@ -77,6 +78,8 @@ export interface WorkspaceOverview {
   id: string;
   name: string;
   type: OrgType;
+  /** Square logo URL for the workspace. Null if no logo has been set. */
+  logoUrl: string | null;
   owner: {
     id: string;
     name: string;
@@ -131,34 +134,6 @@ export interface WorkspaceAuthConfig {
   };
 }
 
-/**
- * Integration connection status.
- */
-export type IntegrationStatus = 'active' | 'expired' | 'revoked';
-
-/**
- * Workspace integration for the integrations list.
- * Shows connections visible to workspace admins.
- *
- * SECURITY: connectedBy.id should be empty string (not exposed for security).
- * lastActivity is aggregated to reduce precision for timing attack mitigation.
- * @see security-safety-reviewer finding: Excessive Information Disclosure
- */
-export interface WorkspaceIntegration {
-  id: string;
-  provider: string;
-  status: IntegrationStatus;
-  connectedBy: {
-    /** Always empty string for security (user IDs not exposed) */
-    id: string;
-    /** Name of the user who connected this integration, or 'A team member' if unknown */
-    name: string;
-  };
-  executionScope: ExecutionScope;
-  /** Aggregated last activity (e.g., 'within the last day', 'within the last week') */
-  lastActivity: string | null;
-}
-
 /**
  * Audit event for the workspace audit log.
  * Filtered to spec events only (server-side).
@@ -257,25 +232,6 @@ export interface UpdateAuthPolicyRequest {
   allowedProviders?: string[];
 }
 
-/**
- * Request payload for promoting an integration to org scope.
- *
- * INVARIANT: acknowledgedRisk must be true to prove explicit intent.
- * @see Phase 3 Invariant #15: Blast radius acknowledgment
- */
-export interface PromoteIntegrationRequest {
-  /** User must acknowledge the blast radius of org-wide access */
-  acknowledgedRisk: boolean;
-}
-
-/**
- * Request payload for demoting an integration to self scope.
- */
-export interface DemoteIntegrationRequest {
-  /** Optional reason for demotion */
-  reason?: string;
-}
-
 // =============================================================================
 // Phase 3 Audit Action Types
 // @see ADR-CONT-031 for design rationale