@company-semantics/contracts 7.1.0 → 8.0.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "7.1.0",
+  "version": "8.0.0",
   "private": false,
   "repository": {
     "type": "git",

package/src/api/generated-spec-hash.ts

@@ -1,3 +1,3 @@
 // AUTO-GENERATED — do not edit. Run pnpm generate:spec-hash to regenerate.
-export const SPEC_HASH = '937aecbfe6e6' as const;
-export const SPEC_HASH_FULL = '937aecbfe6e6533edabb1b83d66be83f63100e519ecf9e4531af3e8a627e122a' as const;
+export const SPEC_HASH = 'd5c4d68c1410' as const;
+export const SPEC_HASH_FULL = 'd5c4d68c1410e999a926f5083aea803e110c951dfd10e43de7e8f629a332742b' as const;

package/src/api/generated.ts

@@ -3119,6 +3119,7 @@ export interface components {
                 id: string;
                 name: string;
                 email: string;
+                avatarUrl?: string | null;
                 jobTitle: string | null;
                 role: ("ceo" | "leader" | "delegate" | "admin") | null;
                 roleNames: string[];
@@ -3132,6 +3133,12 @@ export interface components {
                     /** @enum {string} */
                     role: "owner" | "manager" | "member";
                 }[];
+                manages: {
+                    unitId: string;
+                    unitName: string;
+                    /** @enum {string} */
+                    designation: "whole_org" | "admin" | "leader" | "delegate" | "member";
+                }[];
                 unitMembershipsTruncated: boolean;
                 inviteStatus: ("active" | "pending" | "expired") | null;
             }[];
@@ -3307,6 +3314,7 @@ export interface components {
             id: string;
             name: string;
             email: string;
+            avatarUrl?: string | null;
             jobTitle: string | null;
             role: ("ceo" | "leader" | "delegate" | "admin") | null;
             roleNames: string[];
@@ -3320,6 +3328,12 @@ export interface components {
                 /** @enum {string} */
                 role: "owner" | "manager" | "member";
             }[];
+            manages: {
+                unitId: string;
+                unitName: string;
+                /** @enum {string} */
+                designation: "whole_org" | "admin" | "leader" | "delegate" | "member";
+            }[];
             unitMembershipsTruncated: boolean;
             inviteStatus: ("active" | "pending" | "expired") | null;
             effectiveScopes: string[];
@@ -3638,10 +3652,6 @@ export interface components {
                     requiredScope?: string;
                 };
             };
-            orgUnit?: {
-                /** @enum {string} */
-                manage: "allowed" | "blocked";
-            };
             actions?: {
                 members: {
                     invite: {
@@ -3667,6 +3677,13 @@ export interface components {
                         requiredScope?: string;
                     };
                 };
+                orgUnit: {
+                    manage: {
+                        /** @enum {string} */
+                        state: "allowed" | "blocked";
+                        requiredScope?: string;
+                    };
+                };
             };
         };
         CompanyMdListResponse: {

package/src/org/schemas.ts

@@ -54,15 +54,45 @@ const WorkspaceMemberSchema = z.object({
   id: z.string(),
   name: z.string(),
   email: z.string(),
+  /**
+   * Resolved avatar photo URL for the member, or `null`/absent when none is
+   * stored. SOURCE-AGNOSTIC: today the backend resolves this from the Slack
+   * profile photo cached on the user record, but the field name deliberately
+   * does not encode the origin so future sources (in-app upload, etc.) slot in
+   * behind the backend avatar resolver without a contract change. UI MUST fall
+   * back to initials when this is absent. Optional because it is an additive
+   * display-only enrichment (see ADR-CONTRACTS-055).
+   */
+  avatarUrl: z.string().nullable().optional(),
+  /** Free-text job title (`users.job_title`). Null when unset. */
   jobTitle: z.string().nullable(),
+  /**
+   * Display role — the member's highest org-chart standing, or `null` for a
+   * plain member with no org-chart authority. Render via `orgChartRoleLabel`.
+   */
   role: OrgChartRoleSchema.nullable(),
+  /** Raw RBAC role names (e.g. 'ceo', 'admin', 'delegate'). Superset of `role`. */
   roleNames: z.array(z.string()),
   joinedAt: z.string(),
+  /** ISO timestamp of last activity; null if never recorded. */
   lastActiveAt: z.string().nullable(),
+  /**
+   * Home org-unit (`users.primary_unit_id`). Null for org-scoped users
+   * (no level-2 home assignment). Used by the unit-detail Members table to
+   * roll up "people in this org-unit" across the subtree.
+   */
   primaryUnitId: z.string().uuid().nullable(),
+  /** OrgUnit memberships for this member, capped at a small number server-side. */
   unitMemberships: z.array(WorkspaceMemberUnitSummarySchema),
+  /**
+   * Per-unit org-chart designations the member holds where they manage
+   * (ADR-CTRL-112). Display-only summary of management reach; never an
+   * authorization input. Empty array when the member manages nothing.
+   */
   manages: z.array(WorkspaceMemberManagesEntrySchema),
+  /** True when server truncated `unitMemberships`; detail endpoint returns the full list. */
   unitMembershipsTruncated: z.boolean(),
+  /** Invite lifecycle status. `null` for members without an invite record. */
   inviteStatus: z.enum(['active', 'pending', 'expired']).nullable(),
 });
 
@@ -78,6 +108,19 @@ export const WorkspaceMemberDetailSchema = WorkspaceMemberSchema.extend({
   recentActions: z.array(MemberRecentActionSchema),
 });
 
+/**
+ * Workspace member for the members list. Human users only (no agent actors).
+ * Canonical type — inferred from {@link WorkspaceMemberSchema} so the runtime
+ * schema is the single source of truth (no parallel hand-written interface).
+ */
+export type WorkspaceMember = z.infer<typeof WorkspaceMemberSchema>;
+
+/**
+ * Full member detail (GET /api/workspace/members/:userId and /api/me self-view).
+ * Inferred from {@link WorkspaceMemberDetailSchema}.
+ */
+export type WorkspaceMemberDetail = z.infer<typeof WorkspaceMemberDetailSchema>;
+
 export const RoleCatalogEntrySchema = z.object({
   name: z.string(),
   type: z.enum(['system', 'custom']),

package/src/org/types.ts

@@ -97,48 +97,13 @@ export interface WorkspaceMemberUnitSummary {
 export type WorkspaceMemberInviteStatus = 'active' | 'pending' | 'expired';
 
 /**
- * Workspace member for the members list.
- * Human users only (no agent actors).
+ * Workspace member types. Inferred from their Zod schemas in `./schemas`
+ * (the single source of truth) and re-exported here so existing import paths
+ * (`from '@company-semantics/contracts/org'`) stay stable. The schema carries
+ * the field-level documentation; do not reintroduce a parallel interface (it
+ * was the cause of the `manages`/`avatarUrl` drift — see ADR-CTRL-112).
  */
-export interface WorkspaceMember {
-  id: string;
-  name: string;
-  email: string;
-  /**
-   * Resolved avatar photo URL for the member, or `null`/absent when none is
-   * stored. SOURCE-AGNOSTIC: today the backend resolves this from the Slack
-   * profile photo cached on the user record, but the field name deliberately
-   * does not encode the origin so future sources (in-app upload, etc.) slot in
-   * behind the backend avatar resolver without a contract change. UI MUST fall
-   * back to initials when this is absent. Optional because it is an additive
-   * display-only enrichment (see ADR-CONTRACTS-055).
-   */
-  avatarUrl?: string | null;
-  /** Free-text job title (`users.job_title`). Null when unset. */
-  jobTitle: string | null;
-  /**
-   * Display role — the member's highest org-chart standing, or `null` for a
-   * plain member with no org-chart authority. Render via `orgChartRoleLabel`.
-   */
-  role: OrgChartRole | null;
-  /** Raw RBAC role names (e.g. 'ceo', 'admin', 'delegate'). Superset of `role`. */
-  roleNames: string[];
-  joinedAt: string;
-  /** ISO timestamp of last activity; null if never recorded. */
-  lastActiveAt: string | null;
-  /**
-   * Home org-unit (`users.primary_unit_id`). Null for org-scoped users
-   * (no level-2 home assignment). Used by the unit-detail Members table to
-   * roll up "people in this org-unit" across the subtree.
-   */
-  primaryUnitId: string | null;
-  /** OrgUnit memberships for this member, capped at a small number server-side. */
-  unitMemberships: WorkspaceMemberUnitSummary[];
-  /** True when server truncated `unitMemberships`; detail endpoint returns the full list. */
-  unitMembershipsTruncated: boolean;
-  /** Invite lifecycle status. `null` for members without an invite record. */
-  inviteStatus: WorkspaceMemberInviteStatus | null;
-}
+export type { WorkspaceMember, WorkspaceMemberDetail } from './schemas';
 
 /**
  * Recent audit action attached to a member-detail response.
@@ -151,16 +116,6 @@ export interface MemberRecentAction {
   summary: string;
 }
 
-/**
- * Full member detail, returned by GET /api/workspace/members/:userId and also
- * the shape projected from /api/me for self-view.
- */
-export interface WorkspaceMemberDetail extends WorkspaceMember {
-  /** Full resolved scope patterns — union of grants from all assigned roles. */
-  effectiveScopes: string[];
-  /** Up to N most recent audit actions attributed to this member. */
-  recentActions: MemberRecentAction[];
-}
 
 /**
  * Entry in the RBAC roles catalog (GET /api/rbac/roles).