@company-semantics/contracts 0.67.1 → 0.68.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@company-semantics/contracts",
3
- "version": "0.67.1",
3
+ "version": "0.68.0",
4
4
  "private": false,
5
5
  "repository": {
6
6
  "type": "git",
package/src/org/domain.ts CHANGED
@@ -9,11 +9,11 @@
9
9
  * Status of a domain claim within an organization.
10
10
  * - 'pending': Domain claimed but not yet verified
11
11
  * - 'verified': Domain ownership confirmed via DNS TXT record
12
- * - 'revoked': Domain claim revoked by org owner
13
12
  *
14
13
  * INVARIANT: Only ONE org may have status='verified' for any domain globally.
14
+ * @see ADR-BE-070 (revoked status removed — domains are hard-deleted instead)
15
15
  */
16
- export type DomainStatus = 'pending' | 'verified' | 'revoked';
16
+ export type DomainStatus = 'pending' | 'verified';
17
17
 
18
18
  /**
19
19
  * Method used to verify domain ownership.
@@ -38,7 +38,7 @@ export interface OrgDomain {
38
38
  verificationMethod: DomainVerificationMethod;
39
39
  /** Verification token - only visible to org owner. */
40
40
  verificationToken?: string;
41
- /** ISO8601 timestamp when domain was verified, null if pending/revoked. */
41
+ /** ISO8601 timestamp when domain was verified, null if pending. */
42
42
  verifiedAt: string | null;
43
43
  /** ISO8601 timestamp when claim was created. */
44
44
  createdAt: string;
@@ -58,7 +58,7 @@ export type Phase4AuditAction =
58
58
  // Domain lifecycle
59
59
  | 'org.domain.claimed'
60
60
  | 'org.domain.verified'
61
- | 'org.domain.revoked'
61
+ | 'org.domain.deleted'
62
62
  // Auth policy enforcement
63
63
  | 'org.auth_policy.enforced'
64
64
  | 'org.auth_policy.override_used' // Emergency SSO bypass succeeded
@@ -19,8 +19,8 @@ export const VIEW_SCOPE_MAP = {
19
19
  // Protected views (require specific scope)
20
20
  workspace: 'org.view_workspace',
21
21
  timeline: 'org.view_timeline',
22
- dashboard: 'org.view_dashboard',
23
- 'organization-strategy': 'org.view_strategy',
22
+ activity: 'org.view_activity',
23
+ strategy: 'org.view_strategy',
24
24
  'internal-admin': 'internal.view_admin',
25
25
  // Public views (require only authentication)
26
26
  chat: null,