@company-semantics/contracts 0.108.0 → 0.110.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@company-semantics/contracts",
-  "version": "0.108.0",
+  "version": "0.110.0",
   "private": false,
   "repository": {
     "type": "git",
@@ -82,6 +82,7 @@
     "release": "npx tsx scripts/release.ts",
     "prepublishOnly": "echo 'ERROR: Publishing is CI-only via tag push. Use pnpm release instead.' && exit 1",
     "test": "vitest run",
+    "generate:api": "pnpm generate:api-types",
     "generate:api-types": "openapi-typescript openapi/backend.yaml -o src/api/generated.ts",
     "generate:openapi-routes": "tsx scripts/generate-openapi-routes.ts",
     "generate:api-types:check": "openapi-typescript openapi/backend.yaml -o /tmp/cs-api-types-check.ts && diff -q src/api/generated.ts /tmp/cs-api-types-check.ts"

package/src/api/generated.ts

@@ -503,6 +503,70 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/executions/{executionId}/undo": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Undo a completed execution
+         * @description Undoes a completed execution within its undo window.
+         *     The caller must be the same user who initiated the execution.
+         *     Idempotent: if undo was already performed, returns the existing result.
+         */
+        post: operations["undoExecution"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/executions/{executionId}/confirm": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Confirm a pending execution
+         * @description Confirms a pending execution. Serialized via advisory lock.
+         *     The caller must be the same user who initiated the execution.
+         */
+        post: operations["confirmExecution"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/executions/{executionId}/reject": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Reject a pending execution
+         * @description Rejects a pending execution. Serialized via advisory lock.
+         *     The caller must be the same user who initiated the execution.
+         */
+        post: operations["rejectExecution"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/timeline": {
         parameters: {
             query?: never;
@@ -871,6 +935,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/workspace/name": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        /**
+         * Rename the workspace
+         * @description PATCH the workspace name. Requires org.manage_users capability (owner or admin).
+         */
+        patch: operations["renameWorkspace"];
+        trace?: never;
+    };
     "/api/workspace/members": {
         parameters: {
             query?: never;
@@ -2017,6 +2101,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/scope/check-batch": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Batch check authorization scopes for current user
+         * @description Checks whether the current user has access to each of the given scopes. Scope strings are implementation-defined and not part of the public API vocabulary. Accepts 1-20 scope strings per request.
+         */
+        post: operations["checkScopeBatch"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
 }
 export type webhooks = Record<string, never>;
 export interface components {
@@ -2391,6 +2495,16 @@ export interface components {
             estimatedCostUsd: string;
             requestCount: number;
         };
+        ScopeCheckBatchRequest: {
+            scopes: string[];
+        };
+        ScopeCheckBatchResponse: {
+            results: {
+                [key: string]: {
+                    hasAccess: boolean;
+                };
+            };
+        };
         ErrorResponse: {
             error: string;
             message: string;
@@ -2411,6 +2525,46 @@ export interface components {
                 message: string;
             }[];
         };
+        ExecutionLifecycleError: {
+            /** @enum {string} */
+            code: "EXECUTION_CONFLICT";
+            executionId: string;
+            currentState: string;
+        } | {
+            /** @enum {string} */
+            code: "EXECUTION_EXPIRED";
+            executionId: string;
+            /** Format: date-time */
+            expiredAt: string;
+        } | {
+            /** @enum {string} */
+            code: "EXECUTION_FORBIDDEN";
+            executionId: string;
+            requiredRole: string;
+        };
+        UndoResultData: {
+            /** @description Links back to original action */
+            actionId: string;
+            /** @description Original execution row ID */
+            executionId: string;
+            /** @description New undo audit row ID (append-only) */
+            undoExecutionId: string;
+            /** @enum {string} */
+            status: "success" | "failed";
+            error?: string;
+        };
+        ConfirmExecutionResponse: {
+            /** @enum {string} */
+            status: "executing" | "blocked_pending_approval" | "already_confirmed" | "awaiting_approval";
+            code?: string;
+            executionId?: string;
+            /** @description ExecutionResultData when execution completes inline */
+            result?: Record<string, never>;
+        };
+        RejectExecutionResponse: {
+            /** @enum {string} */
+            status: "cancelled";
+        };
         ExecutionSummary: {
             /** Format: uuid */
             executionId: string;
@@ -2654,6 +2808,9 @@ export interface components {
         OrgType: "personal" | "shared";
         /** @enum {string} */
         WorkspaceRole: "owner" | "admin" | "member";
+        RenameWorkspaceRequest: {
+            name: string;
+        };
         WorkspaceOverview: {
             /** Format: uuid */
             id: string;
@@ -3904,6 +4061,192 @@ export interface operations {
             };
         };
     };
+    undoExecution: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Execution ID (UUID v4) */
+                executionId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Undo result */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["UndoResultData"];
+                };
+            };
+            /** @description Invalid execution ID format or execution not in undoable state */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Insufficient permissions (not the initiating user) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ExecutionLifecycleError"];
+                };
+            };
+            /** @description Execution not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Execution in wrong state (e.g. undo window expired) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ExecutionLifecycleError"];
+                };
+            };
+        };
+    };
+    confirmExecution: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Execution ID (UUID v4) */
+                executionId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Confirmation result */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ConfirmExecutionResponse"];
+                };
+            };
+            /** @description Invalid execution ID format */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Insufficient permissions (not the initiating user) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ExecutionLifecycleError"];
+                };
+            };
+            /** @description Execution not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Execution not in pending_confirmation state */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ExecutionLifecycleError"];
+                };
+            };
+            /** @description Confirmation has expired */
+            410: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ExecutionLifecycleError"];
+                };
+            };
+        };
+    };
+    rejectExecution: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Execution ID (UUID v4) */
+                executionId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Rejection result */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["RejectExecutionResponse"];
+                };
+            };
+            /** @description Invalid execution ID format */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Insufficient permissions (not the initiating user) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ExecutionLifecycleError"];
+                };
+            };
+            /** @description Execution not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Execution not in pending_confirmation state */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ExecutionLifecycleError"];
+                };
+            };
+        };
+    };
     getTimelineUI: {
         parameters: {
             query?: {
@@ -4695,6 +5038,57 @@ export interface operations {
             };
         };
     };
+    renameWorkspace: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["RenameWorkspaceRequest"];
+            };
+        };
+        responses: {
+            /** @description Updated workspace overview */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["WorkspaceOverview"];
+                };
+            };
+            /** @description Invalid name */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Missing org.manage_users capability */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Workspace not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
     getWorkspaceMembers: {
         parameters: {
             query?: never;
@@ -5876,6 +6270,8 @@ export interface operations {
             query?: {
                 /** @description Time period for usage aggregation */
                 period?: "current_month" | "last_30_days" | "last_7_days";
+                /** @description IANA timezone identifier for date bucketing */
+                tz?: string;
             };
             header?: never;
             path: {
@@ -5908,7 +6304,12 @@ export interface operations {
     };
     listChats: {
         parameters: {
-            query?: never;
+            query?: {
+                search?: string;
+                limit?: number;
+                offset?: number;
+                includePinned?: boolean;
+            };
             header?: never;
             path?: never;
             cookie?: never;
@@ -7748,4 +8149,46 @@ export interface operations {
             };
         };
     };
+    checkScopeBatch: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ScopeCheckBatchRequest"];
+            };
+        };
+        responses: {
+            /** @description Authorization results for each scope */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ScopeCheckBatchResponse"];
+                };
+            };
+            /** @description Invalid input (empty array, >20 items, invalid scope format) */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Not authenticated */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
 }

package/src/generated/openapi-routes.ts

@@ -23,9 +23,12 @@ export const openApiRoutes = {
   '/api/drive/files/recent': ['GET'],
   '/api/drive/files/{fileId}/content': ['GET'],
   '/api/executions': ['GET', 'POST'],
+  '/api/executions/{executionId}/confirm': ['POST'],
   '/api/executions/{executionId}/explanation': ['GET'],
+  '/api/executions/{executionId}/reject': ['POST'],
   '/api/executions/{executionId}/summary': ['GET'],
   '/api/executions/{executionId}/timeline': ['GET'],
+  '/api/executions/{executionId}/undo': ['POST'],
   '/api/goals/docs/{slug}': ['GET'],
   '/api/goals/docs/{slug}/content': ['PUT'],
   '/api/goals/docs/{slug}/sharing': ['GET'],
@@ -50,6 +53,7 @@ export const openApiRoutes = {
   '/api/orgs/{orgId}/ai-usage': ['GET'],
   '/api/orgs/{orgId}/billing': ['GET'],
   '/api/orgs/{orgId}/budget-config': ['GET', 'PUT'],
+  '/api/scope/check-batch': ['POST'],
   '/api/shared/{token}': ['GET'],
   '/api/shares/{shareId}': ['DELETE', 'PATCH'],
   '/api/teams': ['GET', 'POST'],
@@ -82,6 +86,7 @@ export const openApiRoutes = {
   '/api/workspace/members': ['GET'],
   '/api/workspace/members/{id}': ['DELETE'],
   '/api/workspace/members/{id}/role': ['PATCH'],
+  '/api/workspace/name': ['PATCH'],
   '/api/workspace/resolve-path': ['POST'],
   '/api/workspace/resync-slack-logo': ['POST'],
   '/auth/logout': ['POST'],