@company-semantics/contracts 0.67.0 → 0.68.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "0.67.0",
+  "version": "0.68.0",
   "private": false,
   "repository": {
     "type": "git",

package/src/impersonation-events.ts

@@ -0,0 +1,54 @@
+/**
+ * Impersonation SSE Event Types
+ *
+ * Real-time push events for impersonation session state changes.
+ * Replaces 30-second polling mechanism.
+ * Follows the same BaseEvent envelope pattern as chat SSE events.
+ */
+
+import type { BaseEvent } from './chat/types'
+import type { ImpersonationSession } from './impersonation'
+
+/**
+ * Sent as the first frame on SSE connection.
+ * Carries the current active session (or null if none).
+ * Eliminates need for a separate GET /session request.
+ */
+export interface ImpersonationSessionSnapshotEvent extends BaseEvent {
+  type: 'impersonation.session.snapshot'
+  data: {
+    session: ImpersonationSession | null
+  }
+}
+
+/** Emitted when a new impersonation session starts (enables multi-tab sync). */
+export interface ImpersonationSessionStartedEvent extends BaseEvent {
+  type: 'impersonation.session.started'
+  data: {
+    session: ImpersonationSession
+  }
+}
+
+/** Emitted when an admin manually ends an impersonation session. */
+export interface ImpersonationSessionEndedEvent extends BaseEvent {
+  type: 'impersonation.session.ended'
+  data: {
+    sessionId: string
+    endedAt: string
+  }
+}
+
+/** Emitted when enforceExpiry() auto-expires a session. */
+export interface ImpersonationSessionExpiredEvent extends BaseEvent {
+  type: 'impersonation.session.expired'
+  data: {
+    sessionId: string
+    expiredAt: string
+  }
+}
+
+export type ImpersonationSseEvent =
+  | ImpersonationSessionSnapshotEvent
+  | ImpersonationSessionStartedEvent
+  | ImpersonationSessionEndedEvent
+  | ImpersonationSessionExpiredEvent

package/src/index.ts

@@ -437,6 +437,16 @@ export type {
 
 export { RESTRICTED_IMPERSONATION_ACTIONS } from './impersonation'
 
+// Impersonation SSE event types (real-time push)
+// @see PRD-00176 for design rationale
+export type {
+  ImpersonationSessionSnapshotEvent,
+  ImpersonationSessionStartedEvent,
+  ImpersonationSessionEndedEvent,
+  ImpersonationSessionExpiredEvent,
+  ImpersonationSseEvent,
+} from './impersonation-events'
+
 // Usage tracking types (internal admin)
 // @see PRD-00166 for design rationale
 export type {

package/src/org/domain.ts

@@ -9,11 +9,11 @@
  * Status of a domain claim within an organization.
  * - 'pending': Domain claimed but not yet verified
  * - 'verified': Domain ownership confirmed via DNS TXT record
- * - 'revoked': Domain claim revoked by org owner
  *
  * INVARIANT: Only ONE org may have status='verified' for any domain globally.
+ * @see ADR-BE-070 (revoked status removed — domains are hard-deleted instead)
  */
-export type DomainStatus = 'pending' | 'verified' | 'revoked';
+export type DomainStatus = 'pending' | 'verified';
 
 /**
  * Method used to verify domain ownership.
@@ -38,7 +38,7 @@ export interface OrgDomain {
   verificationMethod: DomainVerificationMethod;
   /** Verification token - only visible to org owner. */
   verificationToken?: string;
-  /** ISO8601 timestamp when domain was verified, null if pending/revoked. */
+  /** ISO8601 timestamp when domain was verified, null if pending. */
   verifiedAt: string | null;
   /** ISO8601 timestamp when claim was created. */
   createdAt: string;
@@ -58,7 +58,7 @@ export type Phase4AuditAction =
   // Domain lifecycle
   | 'org.domain.claimed'
   | 'org.domain.verified'
-  | 'org.domain.revoked'
+  | 'org.domain.deleted'
   // Auth policy enforcement
   | 'org.auth_policy.enforced'
   | 'org.auth_policy.override_used' // Emergency SSO bypass succeeded

package/src/org/view-scopes.ts

@@ -19,8 +19,8 @@ export const VIEW_SCOPE_MAP = {
   // Protected views (require specific scope)
   workspace: 'org.view_workspace',
   timeline: 'org.view_timeline',
-  dashboard: 'org.view_dashboard',
-  'organization-strategy': 'org.view_strategy',
+  activity: 'org.view_activity',
+  strategy: 'org.view_strategy',
   'internal-admin': 'internal.view_admin',
   // Public views (require only authentication)
   chat: null,