@shipeasy/openapi 2.4.0 → 3.0.0

package/openapi.json

@@ -113,18 +113,23 @@
       "parent": "Ops",
       "description": "Comments on a queue item — the discussion thread that hangs off any bug,\nfeature request, or auto-filed error/alert ticket. Append a comment or read\nthe thread; one level of threaded replies via `parentId`.\n\n**Mentions.** `@teammate` in a body raises an in-app notification for that\nperson; `@shipeasy` asks Jarvis (the AI agent) to read the item and reply.\nComments authored by Jarvis carry `authorType: system`."
     },
+    {
+      "name": "Investigations",
+      "parent": "Ops",
+      "description": "Investigation records on a queue item — the structured, read-only write-ups\nan AI agent produces while working it (findings / a blocking question / QA\nnotes), plus the `working` run rows an ack or an AI hand-off opens. This is\nthe AI-write seam the cockpit's detail panel renders: `list` reads what a\nprevious run found, `create` appends a new record, and `update` fills in the\n`working` run record you were handed (findings, PR, confidence) as you work."
+    },
     {
       "name": "Projects",
       "description": "Projects: the account-level container every other resource is scoped to.\n\n**Account-level, not bound-project-level.** Both operations resolve from the caller's credential rather than the `.shipeasy`-bound project — `current` reads the project the auth header maps to, and `upsert` find-or-creates under the session's owner. Neither touches the local `.shipeasy` binding; recording the result there is a consumer side-effect layered on top.\n\n**Idempotent upsert.** A project is keyed by `(owner_email, domain)`. Calling `upsert` again with the same domain returns the existing project with `created: false`, so it is safe to run on every install."
     },
     {
       "name": "i18n",
-      "description": "String Manager (i18n): the worker-safe REST surface — locale profiles, the\ninsert-only key push, single-key overwrite, chunk publish, and the read-only\nkey/draft listings.\n\nThe fs/AST parts (scan, validate, install-loader, codemod) are NOT part of\nthis API — they stay in the fs-having CLI/MCP."
+      "description": "String Manager (i18n): the worker-safe REST surface — locale profiles, the\ninsert-only key push, single-key overwrite, profile publish, and the read-only\nkey/draft listings.\n\nThe fs/AST parts (scan, validate, install-loader, codemod) are NOT part of\nthis API — they stay in the fs-having CLI/MCP."
     },
     {
       "name": "Profiles",
       "parent": "i18n",
-      "description": "Locale profiles (e.g. `en:prod`) — create, list, and publish a profile's chunks to the CDN."
+      "description": "Locale profiles (e.g. `en:prod`) — create, list, and publish a profile to the CDN."
     },
     {
       "name": "Keys",
@@ -2544,7 +2549,7 @@
       "post": {
         "operationId": "createConfig",
         "summary": "Create a dynamic config",
-        "description": "Creates a new config with the given `schema`. The initial `value` (or an empty object) is published as version 1 on **every** env.\n\nReturns `409` if `name` already exists in the project, `400` if `value` doesn't validate against `schema`.\n\n**Use cases**\n\n- **Minimal create** — `name` + `schema`. Initial value defaults to `{}`.\n- **Seeded create** — supply a flat `value` to publish the same object on every env.\n- **Per-env seed** — supply a `{ env: value }` map for different per-env starting values.",
+        "description": "Creates a new config with the given `schema`. The initial `value` (or an empty object) is published as version 1 on **every** env.\n\nReturns `409` if `name` already exists in the project, `400` if `value` doesn't validate against `schema`.\n\n**Use cases**\n\n- **Minimal create** — `name` + `schema`. Initial value defaults to `{}`.\n- **Seeded create** — supply a flat `value` to publish the same object on every env.\n- **Per-env seed** — supply a `{ env: value }` map under `value`, or pass the env keys `dev`/`staging`/`prod` directly (each overrides `value` for that env and is published at version 1).",
         "tags": [
           "Configs"
         ],
@@ -2609,8 +2614,8 @@
                   }
                 },
                 "perEnvSeed": {
-                  "summary": "Per-env seed",
-                  "description": "Pass a `{ env: value }` map to seed different initial values per env.",
+                  "summary": "Per-env seed (env keys)",
+                  "description": "Pass the env keys directly to seed different initial values per env. Each overrides `value` for that env and is published at version 1.",
                   "value": {
                     "name": "pricing.tiers",
                     "schema": {
@@ -2624,40 +2629,28 @@
                         "tiers"
                       ]
                     },
-                    "value": {
-                      "dev": {
-                        "tiers": [
-                          {
-                            "name": "free"
-                          },
-                          {
-                            "name": "pro"
-                          },
-                          {
-                            "name": "enterprise"
-                          }
-                        ]
-                      },
-                      "stage": {
-                        "tiers": [
-                          {
-                            "name": "free"
-                          },
-                          {
-                            "name": "pro"
-                          }
-                        ]
-                      },
-                      "prod": {
-                        "tiers": [
-                          {
-                            "name": "free"
-                          },
-                          {
-                            "name": "pro"
-                          }
-                        ]
-                      }
+                    "dev": {
+                      "tiers": [
+                        {
+                          "name": "free"
+                        },
+                        {
+                          "name": "pro"
+                        },
+                        {
+                          "name": "enterprise"
+                        }
+                      ]
+                    },
+                    "prod": {
+                      "tiers": [
+                        {
+                          "name": "free"
+                        },
+                        {
+                          "name": "pro"
+                        }
+                      ]
                     }
                   }
                 }
@@ -2901,7 +2894,7 @@
       "patch": {
         "operationId": "updateConfig",
         "summary": "Update a dynamic config",
-        "description": "Partial update. When `value` is supplied it is **republished on every env** (new version per env). When `schema` is supplied it replaces the current schema; every existing value is re-validated.\n\nFor env-scoped edits, use the draft/publish flow (`PUT /{id}/drafts` then `POST /{id}/publish`) instead.\n\n**Use cases**\n\n- **Republish flat value** — `{ \"value\": {…} }` sets the same value on every env.\n- **Schema migration** — `{ \"schema\": {…} }` replaces the schema; existing values are re-validated.\n- **Env-scoped edits** — use `PUT /{id}/drafts` + `POST /{id}/publish` instead of PATCH.",
+        "description": "Partial update. When `value` is supplied it is **republished on every env** (new version per env). A per-env key (`dev`/`staging`/`prod`) publishes a new version to **only that env**, immediately, overriding `value` for it. When `schema` is supplied it replaces the current schema; every existing value is re-validated.\n\n**Use cases**\n\n- **Republish flat value** — `{ \"value\": {…} }` sets the same value on every env.\n- **Publish one env** — `{ \"prod\": {…} }` publishes a new version to prod only, instantly.\n- **Schema migration** — `{ \"schema\": {…} }` replaces the schema; existing values are re-validated.",
         "tags": [
           "Configs"
         ],
@@ -2943,6 +2936,25 @@
                     }
                   }
                 },
+                "prodOnly": {
+                  "summary": "Per-env — publish prod only",
+                  "description": "Publishes a new version to prod only, immediately. dev/staging untouched.",
+                  "value": {
+                    "prod": {
+                      "tiers": [
+                        {
+                          "name": "free"
+                        },
+                        {
+                          "name": "pro"
+                        },
+                        {
+                          "name": "enterprise"
+                        }
+                      ]
+                    }
+                  }
+                },
                 "schemaOnly": {
                   "summary": "Schema-only update",
                   "description": "Replaces the schema. Existing values must still validate or the update fails.",
@@ -3181,6 +3193,7 @@
         ],
         "x-cli": {
           "name": "draft",
+          "hidden": true,
           "positional": [
             "id"
           ]
@@ -3267,6 +3280,7 @@
         ],
         "x-cli": {
           "name": "discard-draft",
+          "hidden": true,
           "positional": [
             "id"
           ]
@@ -3366,6 +3380,7 @@
         ],
         "x-cli": {
           "name": "publish",
+          "hidden": true,
           "positional": [
             "id"
           ]
@@ -3457,6 +3472,7 @@
         ],
         "x-cli": {
           "name": "activity",
+          "hidden": true,
           "positional": [
             "id"
           ]
@@ -3663,6 +3679,7 @@
         ],
         "x-cli": {
           "name": "versions",
+          "hidden": true,
           "positional": [
             "id"
           ]
@@ -7545,7 +7562,7 @@
         "summary": "List an item's investigation records",
         "description": "The structured, read-only investigation records on a queue item — the\nfindings / blocking questions / QA notes an AI agent posted while working\nit, plus its `working` run rows. Returns `published` records only, newest\nfirst (max 50).\n\n**Use case:** Read what a previous agent run already found before starting\nyour own investigation of the item.",
         "tags": [
-          "Ops"
+          "Investigations"
         ],
         "parameters": [
           {
@@ -7593,14 +7610,20 @@
           "UNAUTHORIZED",
           "FORBIDDEN",
           "NOT_FOUND"
-        ]
+        ],
+        "x-cli": {
+          "name": "list",
+          "positional": [
+            "handle"
+          ]
+        }
       },
       "post": {
         "operationId": "createOpsInvestigation",
         "summary": "Record an investigation",
         "description": "Append one structured investigation record to a queue item — the AI-write\nseam the cockpit's detail panel renders read-only. Post your findings\n(`kind: investigated`), a blocking question for the team (`kind:\nquestion`), or how to verify the fix (`kind: ready_for_qa` with\n`qaNotes`). Append-only and create-only, so it is safe for restricted ops\nkeys.\n\n**Use case:** After working an item, leave a findings write-up (summary,\nmarkdown findings, sources inspected, confidence) so the team — and the\nnext agent run — sees what you learned.",
         "tags": [
-          "Ops"
+          "Investigations"
         ],
         "parameters": [
           {
@@ -7688,7 +7711,110 @@
           "FORBIDDEN",
           "NOT_FOUND",
           "VALIDATION"
-        ]
+        ],
+        "x-cli": {
+          "name": "create",
+          "positional": [
+            "handle"
+          ]
+        }
+      }
+    },
+    "/api/admin/ops/{handle}/investigation/{investigationId}": {
+      "patch": {
+        "operationId": "updateOpsInvestigation",
+        "summary": "Update an investigation record",
+        "description": "Update one existing investigation record in place — the write-back seam for\nthe `working` run record you were handed when a run was launched. Fill in\nthe `summary`/`findings`, attach the fixing PR, record your `confidence`\nand the `sources` you inspected, or flip its `kind` off `working` once the\ninvestigation is done. A partial patch: send only the fields you want to\nchange. Safe for restricted ops keys (it never reads or deletes).\n\n**Use case:** A run started with an empty `working` record; as you work,\nPATCH it with your findings so the cockpit's detail panel fills in live —\nno need to append a second record.",
+        "tags": [
+          "Investigations"
+        ],
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ProjectId"
+          },
+          {
+            "name": "handle",
+            "in": "path",
+            "required": true,
+            "description": "Per-project item number (e.g. `7`) or the full ops item id.",
+            "schema": {
+              "$ref": "#/components/schemas/ResourceId"
+            }
+          },
+          {
+            "name": "investigationId",
+            "in": "path",
+            "required": true,
+            "description": "The investigation record id (from `POST`/`GET .../investigation` or the `runId` an ack/launch returned).",
+            "schema": {
+              "$ref": "#/components/schemas/ResourceId"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UpdateOpsInvestigationRequest"
+              },
+              "examples": {
+                "findings": {
+                  "summary": "Fill in the run record's findings",
+                  "value": {
+                    "kind": "investigated",
+                    "summary": "Root cause is a stale KV read on the checkout flag.",
+                    "findings": "The `checkout.cta` gate is rebuilt without a CDN purge, so…",
+                    "confidence": "high",
+                    "prNumber": 4821,
+                    "prUrl": "https://github.com/acme/web/pull/4821"
+                  }
+                }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "The updated investigation record",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OpsInvestigation"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          },
+          "422": {
+            "$ref": "#/components/responses/UnprocessableEntity"
+          }
+        },
+        "x-error-codes": [
+          "BAD_REQUEST",
+          "UNAUTHORIZED",
+          "FORBIDDEN",
+          "NOT_FOUND",
+          "VALIDATION"
+        ],
+        "x-cli": {
+          "name": "update",
+          "positional": [
+            "handle",
+            "investigationId"
+          ]
+        }
       }
     },
     "/api/admin/agent-profiles": {
@@ -8973,7 +9099,7 @@
       "get": {
         "operationId": "listI18nProfiles",
         "summary": "List i18n profiles",
-        "description": "Returns every locale profile in the project (e.g. `en:prod`, `fr:prod`).\n\n**Use case:** Discover which locale profiles exist before pushing keys or publishing a chunk.",
+        "description": "Returns every locale profile in the project (e.g. `en:prod`, `fr:prod`).\n\n**Use case:** Discover which locale profiles exist before pushing keys or publishing.",
         "tags": [
           "Profiles"
         ],
@@ -9222,8 +9348,8 @@
       },
       "post": {
         "operationId": "pushI18nKeys",
-        "summary": "Push new i18n keys (insert-only)",
-        "description": "Add NEW keys to a profile. Insert-only — existing keys are left untouched (overwrite one with `updateI18nKey`).\n\n**Use case:** Seed newly-extracted keys without clobbering translations already in the profile.",
+        "summary": "Push i18n keys (insert-only, or `force` to overwrite)",
+        "description": "Add NEW keys to a profile. Insert-only by default — existing keys are left untouched and reported back as `skipped`.\n\nPass `force: true` to overwrite the existing ones in bulk with the submitted values: they come back as `updated` instead of `skipped`. Without `force` the only overwrite paths are `updateI18nKey` (one key) and the devtools-only `upsertI18nKeys`.\n\n**Use case:** Seed newly-extracted keys without clobbering translations already in the profile — or re-push a whole source-language file with `force` after the copy changed.",
         "tags": [
           "Keys"
         ],
@@ -9253,7 +9379,7 @@
         },
         "responses": {
           "201": {
-            "description": "Push new i18n keys (insert-only)",
+            "description": "Push i18n keys (insert-only, or `force` to overwrite)",
             "content": {
               "application/json": {
                 "schema": {
@@ -9264,8 +9390,10 @@
                     "checkout.cta"
                   ],
                   "skipped": [],
+                  "updated": [],
                   "pushed_count": 1,
-                  "skipped_count": 0
+                  "skipped_count": 0,
+                  "updated_count": 0
                 }
               }
             }
@@ -9340,8 +9468,7 @@
                   "$ref": "#/components/schemas/UpsertI18nKeysResponse"
                 },
                 "example": {
-                  "upserted": 1,
-                  "chunk": "default"
+                  "upserted": 1
                 }
               }
             }
@@ -10010,7 +10137,7 @@
       "post": {
         "operationId": "publishI18nProfile",
         "summary": "Publish a profile live",
-        "description": "Publish a profile to the CDN — rebuild its KV snapshot + purge the edge. Publishing is PROFILE-WIDE: the whole profile is snapshotted into one KV blob, so the optional `chunk` in the body is an audit label only (it does not scope what ships).\n\n**Use case:** Ship the latest translations live after pushing/updating keys.",
+        "description": "Publish a profile to the CDN — rebuild its KV snapshot + purge the edge. Publishing is PROFILE-WIDE: the whole profile is snapshotted into one KV blob, so the body takes no options.\n\n**Use case:** Ship the latest translations live after pushing/updating keys.",
         "tags": [
           "Profiles"
         ],
@@ -10029,21 +10156,19 @@
           }
         ],
         "requestBody": {
-          "required": true,
+          "required": false,
           "content": {
             "application/json": {
               "schema": {
                 "$ref": "#/components/schemas/PublishI18nProfileRequest"
               },
-              "example": {
-                "chunk": "default"
-              }
+              "example": {}
             }
           }
         },
         "responses": {
           "200": {
-            "description": "Publish a profile chunk",
+            "description": "Publish a profile",
             "content": {
               "application/json": {
                 "schema": {
@@ -12391,6 +12516,10 @@
                         "locked": {
                           "description": "If `true`, dashboard hides edit controls (e.g. the trailing public-floor entry).",
                           "type": "boolean"
+                        },
+                        "whitelist": {
+                          "description": "Cosmetic marker. When `true`, the dashboard renders this condition as the pinned, always-first \"whitelist\" allowlist block (a direct `email`/`user_id` `in […]` list) rather than a numbered targeting step. Purely presentational — ignored by evaluation, which treats the entry as an ordinary condition.",
+                          "type": "boolean"
                         }
                       },
                       "required": [
@@ -12926,6 +13055,10 @@
                         "locked": {
                           "description": "If `true`, dashboard hides edit controls (e.g. the trailing public-floor entry).",
                           "type": "boolean"
+                        },
+                        "whitelist": {
+                          "description": "Cosmetic marker. When `true`, the dashboard renders this condition as the pinned, always-first \"whitelist\" allowlist block (a direct `email`/`user_id` `in […]` list) rather than a numbered targeting step. Purely presentational — ignored by evaluation, which treats the entry as an ordinary condition.",
+                          "type": "boolean"
                         }
                       },
                       "required": [
@@ -13322,6 +13455,10 @@
                         "locked": {
                           "description": "If `true`, dashboard hides edit controls (e.g. the trailing public-floor entry).",
                           "type": "boolean"
+                        },
+                        "whitelist": {
+                          "description": "Cosmetic marker. When `true`, the dashboard renders this condition as the pinned, always-first \"whitelist\" allowlist block (a direct `email`/`user_id` `in […]` list) rather than a numbered targeting step. Purely presentational — ignored by evaluation, which treats the entry as an ordinary condition.",
+                          "type": "boolean"
                         }
                       },
                       "required": [
@@ -15588,7 +15725,24 @@
             "description": "JSON Schema (draft 2020-12) describing the shape of the config value. Top-level `type` must be `'object'`; every published value is validated against this schema."
           },
           "value": {
+            "type": "object",
+            "additionalProperties": {},
             "description": "Initial config value. Either a single JSON object applied to every env, or a `{ env: value }` map seeding per-env values. Must match `schema`. Defaults to `{}` on every env when omitted."
+          },
+          "dev": {
+            "type": "object",
+            "additionalProperties": {},
+            "description": "Seed the **dev** env's initial value (version 1), overriding `value` for dev. Published immediately. Must match `schema`."
+          },
+          "staging": {
+            "type": "object",
+            "additionalProperties": {},
+            "description": "Seed the **staging** env's initial value (version 1), overriding `value` for staging. Published immediately. Must match `schema`."
+          },
+          "prod": {
+            "type": "object",
+            "additionalProperties": {},
+            "description": "Seed the **prod** env's initial value (version 1), overriding `value` for prod. Published immediately. Must match `schema`."
           }
         },
         "required": [
@@ -15596,7 +15750,7 @@
           "schema"
         ],
         "additionalProperties": false,
-        "description": "Body for `POST /api/admin/configs`. `name` + `schema` required."
+        "description": "Body for `POST /api/admin/configs`. `name` + `schema` required. Per-env `dev`/`staging`/`prod` values are published to that env at version 1 (overriding `value`)."
       },
       "CreateConfigResponse": {
         "type": "object",
@@ -15784,14 +15938,31 @@
             "additionalProperties": {}
           },
           "value": {
-            "description": "Flat value applied to **every** env. Publishes a new version per env. To target one env, use `PUT /{id}/drafts` then `POST /{id}/publish`."
+            "type": "object",
+            "additionalProperties": {},
+            "description": "Flat value applied to **every** env. Publishes a new version per env. To publish one env only, pass that env's key (`dev`/`staging`/`prod`) instead."
+          },
+          "dev": {
+            "type": "object",
+            "additionalProperties": {},
+            "description": "Publish a new version to the **dev** env only, immediately (no draft). Overrides `value` for dev. Must match the effective schema."
+          },
+          "staging": {
+            "type": "object",
+            "additionalProperties": {},
+            "description": "Publish a new version to the **staging** env only, immediately (no draft). Overrides `value` for staging. Must match the effective schema."
+          },
+          "prod": {
+            "type": "object",
+            "additionalProperties": {},
+            "description": "Publish a new version to the **prod** env only, immediately (no draft). Overrides `value` for prod. Must match the effective schema."
           },
           "folder": {
             "$ref": "#/components/schemas/Folder"
           }
         },
         "additionalProperties": false,
-        "description": "Body for `PATCH /api/admin/configs/{id}`. Partial — only supplied fields change. `value` republishes on every env."
+        "description": "Body for `PATCH /api/admin/configs/{id}`. Partial — only supplied fields change. `value` republishes on every env; per-env `dev`/`staging`/`prod` publish a new version to just that env."
       },
       "UpdateConfigResponse": {
         "type": "object",
@@ -15822,6 +15993,8 @@
             "$ref": "#/components/schemas/Env"
           },
           "value": {
+            "type": "object",
+            "additionalProperties": {},
             "description": "Draft value to stage on `env`. Validated against the config's current schema."
           }
         },
@@ -18135,6 +18308,17 @@
         ],
         "description": "Desired direction of movement. `higher_better` (default), `lower_better`, or `neutral` (guardrail)."
       },
+      "MetricDisplayUnit": {
+        "description": "Display unit (e.g. `ms`, `%`, `$`), or `null` when unitless.",
+        "anyOf": [
+          {
+            "type": "string"
+          },
+          {
+            "type": "null"
+          }
+        ]
+      },
       "CreateMetricWithQuery": {
         "type": "object",
         "properties": {
@@ -18158,6 +18342,9 @@
           },
           "direction": {
             "$ref": "#/components/schemas/MetricDirection"
+          },
+          "unit": {
+            "$ref": "#/components/schemas/MetricDisplayUnit"
           }
         },
         "required": [
@@ -18191,6 +18378,9 @@
           },
           "direction": {
             "$ref": "#/components/schemas/MetricDirection"
+          },
+          "unit": {
+            "$ref": "#/components/schemas/MetricDisplayUnit"
           }
         },
         "required": [
@@ -18417,6 +18607,9 @@
           },
           "direction": {
             "$ref": "#/components/schemas/MetricDirection"
+          },
+          "unit": {
+            "$ref": "#/components/schemas/MetricDisplayUnit"
           }
         },
         "required": [
@@ -18445,6 +18638,9 @@
           },
           "direction": {
             "$ref": "#/components/schemas/MetricDirection"
+          },
+          "unit": {
+            "$ref": "#/components/schemas/MetricDisplayUnit"
           }
         },
         "required": [
@@ -18470,10 +18666,13 @@
           },
           "direction": {
             "$ref": "#/components/schemas/MetricDirection"
+          },
+          "unit": {
+            "$ref": "#/components/schemas/MetricDisplayUnit"
           }
         },
         "additionalProperties": false,
-        "description": "Update-metric variant that leaves the query untouched (metadata-only edit — folder, event, winsorisation, default minimum effect of interest, direction)."
+        "description": "Update-metric variant that leaves the query untouched (metadata-only edit — folder, event, winsorisation, default minimum effect of interest, direction, display unit)."
       },
       "UpdateMetricRequest": {
         "oneOf": [
@@ -19955,6 +20154,27 @@
         "additionalProperties": false,
         "description": "The fully-resolved owner of a queue item — a person and/or an AI agent. The two halves are independent: an item may have a person, an agent, both, or neither (both `null`)."
       },
+      "OpsRunAction": {
+        "type": "string",
+        "enum": [
+          "link_pr",
+          "notify",
+          "status",
+          "superseded"
+        ],
+        "description": "The final action that closed a run record — `link_pr`/`notify` are the agent's terminal ops actions, `status` a completion status flip (ready_for_qa/resolved), `superseded` a newer ack replacing an open run."
+      },
+      "OpsRunActionOrNull": {
+        "anyOf": [
+          {
+            "$ref": "#/components/schemas/OpsRunAction"
+          },
+          {
+            "type": "null"
+          }
+        ],
+        "description": "Which final action closed the run, or `null` while it is open (or a non-run record)."
+      },
       "OpsRun": {
         "type": "object",
         "properties": {
@@ -20006,11 +20226,7 @@
             ],
             "description": "The agent-run session id recorded on the ack (dashboard deep-links to the run page), or `null`."
           },
-          "startedAt": {
-            "type": "string",
-            "description": "ISO-8601 timestamp the run started (the ack time)."
-          },
-          "completedAt": {
+          "sessionUrl": {
             "anyOf": [
               {
                 "type": "string"
@@ -20019,24 +20235,25 @@
                 "type": "null"
               }
             ],
-            "description": "ISO-8601 timestamp the run closed, or `null` while still open."
+            "description": "The run's session-page deep link, or `null`. DERIVED (never stored): rebuilt from `sessionId` + the run's trigger connector — Claude's routine id (`?trigger=`), Copilot's repo (`/tasks/`), Cursor/Jules from the id alone."
           },
-          "completedAction": {
+          "startedAt": {
+            "type": "string",
+            "description": "ISO-8601 timestamp the run started (the ack time)."
+          },
+          "completedAt": {
             "anyOf": [
               {
-                "type": "string",
-                "enum": [
-                  "link_pr",
-                  "notify",
-                  "status",
-                  "superseded"
-                ]
+                "type": "string"
               },
               {
                 "type": "null"
               }
             ],
-            "description": "Which final action closed the run — `link_pr`/`notify` are the agent's terminal ops actions, `status` a completion status flip (ready_for_qa/resolved), `superseded` a newer ack replacing it. `null` while the run is open."
+            "description": "ISO-8601 timestamp the run closed, or `null` while still open."
+          },
+          "completedAction": {
+            "$ref": "#/components/schemas/OpsRunActionOrNull"
           },
           "prNumber": {
             "anyOf": [
@@ -20067,6 +20284,7 @@
           "connectorId",
           "ackedBy",
           "sessionId",
+          "sessionUrl",
           "startedAt",
           "completedAt",
           "completedAction",
@@ -20351,6 +20569,42 @@
             ],
             "description": "Initial triage priority, or `null`."
           },
+          "status": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/OpsItemStatus"
+              }
+            ],
+            "description": "Initial lifecycle status; defaults to `open` when omitted."
+          },
+          "assigneeId": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The `users.id` of the person to assign as owner at creation, or `null`."
+          },
+          "subscribers": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "format": "email"
+            },
+            "default": [],
+            "description": "Emails of teammates to subscribe to this item's Slack pings at creation."
+          },
+          "tags": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "default": [],
+            "description": "Tag names to attach at creation (get-or-created by name, deduped case-insensitively)."
+          },
           "reporterEmail": {
             "anyOf": [
               {
@@ -20470,6 +20724,42 @@
             ],
             "description": "Initial triage priority, or `null`."
           },
+          "status": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/OpsItemStatus"
+              }
+            ],
+            "description": "Initial lifecycle status; defaults to `open` when omitted."
+          },
+          "assigneeId": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The `users.id` of the person to assign as owner at creation, or `null`."
+          },
+          "subscribers": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "format": "email"
+            },
+            "default": [],
+            "description": "Emails of teammates to subscribe to this item's Slack pings at creation."
+          },
+          "tags": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "default": [],
+            "description": "Tag names to attach at creation (get-or-created by name, deduped case-insensitively)."
+          },
           "reporterEmail": {
             "anyOf": [
               {
@@ -21431,7 +21721,7 @@
             ],
             "description": "The agent-run session id, or `null`."
           },
-          "ackedBy": {
+          "sessionUrl": {
             "anyOf": [
               {
                 "type": "string"
@@ -21440,24 +21730,21 @@
                 "type": "null"
               }
             ],
-            "description": "Email of the human who acked (run records for a human ack), or `null`."
+            "description": "The run's session-page deep link, or `null`. DERIVED (never stored): rebuilt from `sessionId` + the run's trigger connector — Claude's routine id (`?trigger=`), Copilot's repo (`/tasks/`), Cursor/Jules from the id alone. Only `working` run records carry one."
           },
-          "completedAction": {
+          "ackedBy": {
             "anyOf": [
               {
-                "type": "string",
-                "enum": [
-                  "link_pr",
-                  "notify",
-                  "status",
-                  "superseded"
-                ]
+                "type": "string"
               },
               {
                 "type": "null"
               }
             ],
-            "description": "Which final action closed a `working` run record, or `null` (open run / non-run record)."
+            "description": "Email of the human who acked (run records for a human ack), or `null`."
+          },
+          "completedAction": {
+            "$ref": "#/components/schemas/OpsRunActionOrNull"
           },
           "createdAt": {
             "type": "string",
@@ -21489,6 +21776,7 @@
           "startedAt",
           "completedAt",
           "sessionId",
+          "sessionUrl",
           "ackedBy",
           "completedAction",
           "createdAt",
@@ -21639,6 +21927,119 @@
         "additionalProperties": false,
         "description": "Body for `POST /api/admin/ops/{handle}/investigation`. `kind` is required; include at least one content field (`summary`/`findings`/`question`/`qaNotes`) — the panel renders whatever it gets."
       },
+      "UpdateOpsInvestigationRequest": {
+        "type": "object",
+        "properties": {
+          "kind": {
+            "type": "string",
+            "enum": [
+              "investigated",
+              "detected",
+              "question",
+              "ready_for_qa",
+              "working",
+              "note"
+            ],
+            "description": "Reclassify the record's lifecycle stage (e.g. flip a `working` run into `investigated` once findings land)."
+          },
+          "summary": {
+            "type": "string",
+            "maxLength": 2000,
+            "description": "One-line summary of the record."
+          },
+          "findings": {
+            "type": "string",
+            "maxLength": 50000,
+            "description": "The full findings write-up (markdown)."
+          },
+          "question": {
+            "type": "string",
+            "maxLength": 10000,
+            "description": "A blocking question for the team (markdown)."
+          },
+          "qaNotes": {
+            "type": "string",
+            "maxLength": 50000,
+            "description": "How to verify the fix — QA notes (markdown)."
+          },
+          "model": {
+            "type": "string",
+            "maxLength": 200,
+            "description": "The model the agent ran on."
+          },
+          "prNumber": {
+            "type": "integer",
+            "description": "A PR the record references."
+          },
+          "prUrl": {
+            "type": "string",
+            "format": "uri",
+            "maxLength": 2000,
+            "description": "HTML URL of that PR."
+          },
+          "sources": {
+            "type": "array",
+            "maxItems": 200,
+            "items": {
+              "type": "object",
+              "properties": {
+                "path": {
+                  "type": "string",
+                  "description": "Repo-relative file path inspected."
+                },
+                "url": {
+                  "type": "string",
+                  "description": "External link consulted."
+                },
+                "label": {
+                  "type": "string",
+                  "description": "Human-readable label for the source."
+                }
+              },
+              "additionalProperties": false,
+              "description": "One file/link inspected while producing the record."
+            },
+            "description": "The files/links inspected."
+          },
+          "confidence": {
+            "type": "string",
+            "enum": [
+              "low",
+              "medium",
+              "high"
+            ],
+            "description": "Self-reported confidence in the record."
+          },
+          "tokensUsed": {
+            "type": "integer",
+            "description": "Tokens the run consumed."
+          },
+          "durationMs": {
+            "type": "integer",
+            "description": "Run duration in milliseconds."
+          },
+          "visibility": {
+            "type": "string",
+            "enum": [
+              "draft",
+              "published"
+            ],
+            "description": "Record visibility. `draft` keeps it out of the panel; `published` surfaces it."
+          },
+          "completedAt": {
+            "type": "string",
+            "description": "ISO-8601 timestamp the work finished. Set it (or flip `kind` off `working`) to mark a run record done."
+          },
+          "sessionId": {
+            "type": "string",
+            "maxLength": 300,
+            "description": "The agent-run session id, so the dashboard can deep-link to the run."
+          }
+        },
+        "additionalProperties": false,
+        "minProperties": 1,
+        "description": "Body for `PATCH /api/admin/ops/{handle}/investigation/{investigationId}` — a partial update of one existing investigation record (typically the `working` run record you were handed). Send only the fields you want to change; at least one is required."
+      },
       "OpsAgentProfile": {
         "type": "object",
         "properties": {
@@ -23209,21 +23610,6 @@
                     }
                   ]
                 },
-                "chunkId": {
-                  "description": "Owning chunk (authoring grouping) id.",
-                  "type": "string"
-                },
-                "chunkName": {
-                  "description": "Name of the owning chunk (authoring grouping), or `null` when it cannot be resolved.",
-                  "anyOf": [
-                    {
-                      "type": "string"
-                    },
-                    {
-                      "type": "null"
-                    }
-                  ]
-                },
                 "updatedAt": {
                   "description": "ISO-8601 timestamp of the last edit.",
                   "type": "string"
@@ -23241,8 +23627,6 @@
                 "variables",
                 "profileId",
                 "profileName",
-                "chunkId",
-                "chunkName",
                 "updatedAt",
                 "updatedBy"
               ],
@@ -23271,13 +23655,6 @@
             "format": "uuid",
             "description": "Target profile id to upsert keys into."
           },
-          "chunk": {
-            "description": "Logical grouping the keys are filed under. Defaults to `default`.",
-            "type": "string",
-            "minLength": 1,
-            "maxLength": 64,
-            "default": "default"
-          },
           "keys": {
             "type": "array",
             "minItems": 1,
@@ -23332,15 +23709,10 @@
           "upserted": {
             "type": "number",
             "description": "Number of keys written (inserted or overwritten)."
-          },
-          "chunk": {
-            "type": "string",
-            "description": "The chunk the keys were filed under."
           }
         },
         "required": [
-          "upserted",
-          "chunk"
+          "upserted"
         ],
         "additionalProperties": false,
         "description": "Result of a bulk key upsert. The affected profile's KV snapshot is rebuilt (and the CDN purged) before this returns."
@@ -23353,13 +23725,6 @@
             "format": "uuid",
             "description": "Target profile id to add keys to."
           },
-          "chunk": {
-            "description": "Logical grouping the new keys are filed under. Defaults to `default`.",
-            "type": "string",
-            "minLength": 1,
-            "maxLength": 64,
-            "default": "default"
-          },
           "keys": {
             "type": "array",
             "minItems": 1,
@@ -23398,7 +23763,12 @@
               ],
               "additionalProperties": false
             },
-            "description": "Keys to add. Insert-only — existing keys are reported back as `skipped`."
+            "description": "Keys to add. Insert-only by default — existing keys are reported back as `skipped` (set `force` to overwrite them instead)."
+          },
+          "force": {
+            "type": "boolean",
+            "default": false,
+            "description": "Overwrite keys that already exist with the submitted value instead of skipping them. Overwritten keys come back as `updated`. Off by default so a routine push can never clobber live translations."
           }
         },
         "required": [
@@ -23406,7 +23776,7 @@
           "keys"
         ],
         "additionalProperties": false,
-        "description": "Body for `POST /api/admin/i18n/keys`. Insert-only: keys that already exist are never overwritten — use `PUT /keys/{id}` to change a value."
+        "description": "Body for `POST /api/admin/i18n/keys`. Insert-only by default: keys that already exist are never overwritten — pass `force: true` to overwrite them in bulk, or use `PUT /keys/{id}` to change one value."
       },
       "PushI18nKeysResponse": {
         "type": "object",
@@ -23423,7 +23793,14 @@
             "items": {
               "type": "string"
             },
-            "description": "Key names that already existed and were left untouched."
+            "description": "Key names that already existed and were left untouched. Always empty when `force` was set — those key names come back under `updated` instead."
+          },
+          "updated": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Key names that already existed and were overwritten with the submitted value. Only ever non-empty when the push set `force`."
           },
           "pushed_count": {
             "type": "number",
@@ -23433,19 +23810,21 @@
             "type": "number",
             "description": "Number of keys skipped (== `skipped.length`)."
           },
-          "chunk": {
-            "description": "The chunk the keys were filed under.",
-            "type": "string"
+          "updated_count": {
+            "type": "number",
+            "description": "Number of existing keys overwritten (== `updated.length`)."
           }
         },
         "required": [
           "added",
           "skipped",
+          "updated",
           "pushed_count",
-          "skipped_count"
+          "skipped_count",
+          "updated_count"
         ],
         "additionalProperties": false,
-        "description": "Result of an insert-only key push."
+        "description": "Result of a key push — what was inserted, what was left alone, and (with `force`) what was overwritten."
       },
       "UpdateI18nKeyRequest": {
         "type": "object",
@@ -23719,14 +24098,9 @@
       },
       "PublishI18nProfileRequest": {
         "type": "object",
-        "properties": {
-          "chunk": {
-            "description": "Optional chunk label to stamp on the audit log. Publishing is profile-wide regardless — the whole profile is snapshotted into one KV blob.",
-            "type": "string"
-          }
-        },
+        "properties": {},
         "additionalProperties": false,
-        "description": "Body for `POST /api/admin/i18n/profiles/{profileId}/publish`. The `chunk` is an audit label only."
+        "description": "Body for `POST /api/admin/i18n/profiles/{profileId}/publish`. Publishing is profile-wide — the whole profile is snapshotted into one KV blob — so the body takes no options."
       },
       "PublishI18nProfileResponse": {
         "type": "object",
@@ -23740,17 +24114,6 @@
             "type": "string",
             "description": "Profile that was published."
           },
-          "chunk": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "Audit chunk label, or `null` when none was given."
-          },
           "published_at": {
             "type": "string",
             "description": "ISO-8601 timestamp of the publish."
@@ -23788,7 +24151,6 @@
         "required": [
           "ok",
           "profile_id",
-          "chunk",
           "published_at",
           "version",
           "key_count",