@company-semantics/contracts 6.4.0 → 6.6.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "6.4.0",
+  "version": "6.6.0",
   "private": false,
   "repository": {
     "type": "git",

package/src/org/schemas.ts

@@ -826,6 +826,14 @@ export const OwnerAuthoritySchema = z.object({
   mutability: AuthorityMutabilitySchema,
   derivedFromUnitId: z.string().uuid(),
   derivedFromUnitName: z.string().min(1).optional(),
+  /**
+   * True when this authority derives from the org ROOT unit — i.e. the holder
+   * is a CEO (a structural leader of the org root, observed locally on the root
+   * or as inherited authority on a descendant). Lets consumers classify CEO
+   * without a separate org-tree lookup, the same way `mechanism === 'rbac'`
+   * identifies an org admin. Omitted (falsy) for non-root derivations.
+   */
+  derivedFromRoot: z.boolean().optional(),
   derivedFromUserId: z.string().uuid().nullable().optional(),
   /**
    * Human-readable reason this authority applies, built at serialize time from

package/src/org/types.ts

@@ -104,6 +104,16 @@ export interface WorkspaceMember {
   id: string;
   name: string;
   email: string;
+  /**
+   * Resolved avatar photo URL for the member, or `null`/absent when none is
+   * stored. SOURCE-AGNOSTIC: today the backend resolves this from the Slack
+   * profile photo cached on the user record, but the field name deliberately
+   * does not encode the origin so future sources (in-app upload, etc.) slot in
+   * behind the backend avatar resolver without a contract change. UI MUST fall
+   * back to initials when this is absent. Optional because it is an additive
+   * display-only enrichment (see ADR-CONTRACTS-055).
+   */
+  avatarUrl?: string | null;
   /** Free-text job title (`users.job_title`). Null when unset. */
   jobTitle: string | null;
   /**