Add identity access controls

AgentCompany-New/src/shared/commands.ts

@@ -3,10 +3,13 @@ import type {
   ComplianceExportType,
   ComplianceSubjectType,
   LegalHoldEntityType,
+  IdentitySource,
+  PrincipalType,
   ProviderDataPolicy,
   ProviderExecutionMode,
   RetentionFreezeScopeType,
   RiskLevel,
+  RoleKey,
   SearchEntityType,
   SocialPlatform,
   TaskPriority,
@@ -86,6 +89,24 @@ export interface DecideApprovalInput {
   decidedByEmployeeId: string;
 }
 
+export interface SyncEmployeeIdentityInput {
+  orgId: string;
+  employeeId: string;
+  source: IdentitySource;
+  externalSubject: string;
+  email: string | null;
+}
+
+export interface GrantRoleInput {
+  orgId: string;
+  principalType: PrincipalType;
+  principalId: string;
+  roleKey: RoleKey;
+  scopeType: "organization" | "workspace" | "project" | "department";
+  scopeId: string;
+  grantedByEmployeeId: string;
+}
+
 export interface SendMessageInput {
   orgId: string;
   spaceId: string;