@thinkai/tai-api-contract 2.2.8 → 2.3.0

package/src/generated/openapi.ts

@@ -159,7 +159,7 @@ export interface paths {
         get?: never;
         /**
          * Replace workspace data sources
-         * @description Replace the workspace's `sources` array. Cursor entries are validated strictly (`token` 1-256 chars, no whitespace, no `env:` prefix; optional `https:` `baseUrl`); other types pass through with only a non-empty `type` requirement so existing github / jira / sonarqube / bitbucket callers are not regressed.
+         * @description Replace the workspace's `sources` array. Cursor entries are validated strictly (`token` 1-256 chars, no whitespace, no `env:` prefix; optional deprecated `baseUrl` is accepted for backwards compatibility and ignored at runtime; verification and future refresh use the fixed Cursor Admin API host. Other types pass through with only a non-empty `type` requirement so existing github / jira / sonarqube / bitbucket callers are not regressed.
          *     Every secret-keyed top-level string field (`token`, `password`, `api_key`, `secret`, `private_key`, `client_secret`) is encrypted at rest with AES-256-GCM under `SOURCES_TOKEN_ENC_KEY` before persistence; `env:`-prefixed values pass through unchanged. `GET /workspaces/{workspaceId}/config` continues to redact every secret-keyed field to `***` regardless of whether the stored value is encrypted, plaintext, or `env:` ref.
          *     Requires editor or admin workspace role.
          *     **Typical outcomes:** Valid typed sources → `200` with `{ ok: true, workspaceId }`. Missing required fields for a given `type` (e.g. GitHub without `repo` or `token`) → `400` with `error` text. Unknown `type` strings (non-cursor) currently pass through to storage (lenient compatibility); only `cursor` entries get strict field validation. Cursor sources enforce strict token shape (no whitespace, no `env:` prefix).
@@ -184,7 +184,7 @@ export interface paths {
         /**
          * Test one source connection (does not persist)
          * @description Verify a source's credentials without persisting them. Always returns 200 — upstream auth, rate-limit, and network failures surface as `{ success: false, error }` so the SPA can render an inline error.
-         *     Currently only `type: cursor` is verified end-to-end (calls `GET ${baseUrl}/v0/me`); other types report `{ success: false, error: "unsupported_type" }`. Documented `error` codes for cursor: `invalid_token`, `rate_limited`, `network_error`.
+         *     Currently only `type: cursor` is verified end-to-end (Cursor Admin API, HTTP Basic against `https://api.cursor.com`; optional `baseUrl` in the body is deprecated and ignored). Other types report `{ success: false, error: "unsupported_type" }`. Documented `error` codes for cursor: `invalid_token`, `rate_limited`, `network_error`.
          *     **Typical outcomes:** Malformed body, missing `type`, invalid `type`, or missing required fields for the declared type → `400` with `{ error: "..." }`. Well-formed body with bad credentials or unreachable service → `200` with `{ success: false, error: "..." }` (Cursor verifier and non-cursor paths as documented above).
          */
         post: operations["postTenantSourceTest"];
@@ -293,6 +293,94 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/workspaces/{workspaceId}/integrations/ai-tool/{provider}/refresh": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Refresh AI tool integration snapshots
+         * @description Provider-agnostic refresh. Returns 409 when an advisory-lock refresh is already in progress. On upstream auth/rate/network failures, returns `200` with `{ ok:false, error }` so the SPA can render inline error.
+         */
+        post: operations["refreshWorkspaceAiTool"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/workspaces/{workspaceId}/integrations/ai-tool/{provider}/seats": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** List latest AI-tool seats */
+        get: operations["getWorkspaceAiToolSeats"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/workspaces/{workspaceId}/integrations/ai-tool/{provider}/daily-usage": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** List AI-tool daily usage */
+        get: operations["getWorkspaceAiToolDailyUsage"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/workspaces/{workspaceId}/integrations/ai-tool/{provider}/spend": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** List AI-tool spend */
+        get: operations["getWorkspaceAiToolSpend"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/workspaces/{workspaceId}/integrations/ai-tool/{provider}/status": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Get last refresh status */
+        get: operations["getWorkspaceAiToolRefreshStatus"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/integrations/github/callback": {
         parameters: {
             query?: never;
@@ -750,15 +838,15 @@ export interface components {
         } & {
             [key: string]: unknown;
         };
-        /** @description Cursor (AI Tools) source entry for `PUT /workspaces/{workspaceId}/sources` and `POST /workspaces/{workspaceId}/sources/test`. The `token` field carries a literal Cursor API key on writes; reads from `GET /workspaces/{workspaceId}/config` redact it to `***`. */
+        /** @description Cursor (AI Tools) source entry for `PUT /workspaces/{workspaceId}/sources` and `POST /workspaces/{workspaceId}/sources/test`. The `token` field carries a literal Cursor API key on writes; reads from `GET /workspaces/{workspaceId}/config` redact it to `***`. Runtime calls use the Cursor Admin API at `https://api.cursor.com` (HTTP Basic); do not rely on `baseUrl`. */
         CursorSourceDto: {
             /** @enum {string} */
             type: "cursor";
             /** @description Cursor API key (literal). Whitespace and `env:` prefix are rejected. */
             token: string;
             /**
-             * Format: uri
-             * @description Override Cursor API base URL. Must use `https:`.
+             * @deprecated
+             * @description Deprecated. Historically suggested an API base URL; the server ignores this field and always uses the Cursor Admin API host. Kept so older clients can submit payloads unchanged.
              * @default https://api.cursor.com
              */
             baseUrl: string;
@@ -773,6 +861,55 @@ export interface components {
             success: boolean;
             error?: string;
         };
+        AiToolSeatDto: {
+            externalId: string;
+            email: string;
+            displayName?: string | null;
+            role?: string | null;
+            isRemoved: boolean;
+            payload?: {
+                [key: string]: unknown;
+            };
+        };
+        AiToolDailyUsageRowDto: {
+            /** Format: date */
+            day: string;
+            externalId: string;
+            email?: string | null;
+            isActive: boolean;
+            mostUsedModel?: string | null;
+            payload?: {
+                [key: string]: unknown;
+            };
+        };
+        AiToolSpendRowDto: {
+            /** Format: int64 */
+            billingCycleStartMs: number;
+            externalId: string;
+            email?: string | null;
+            /** Format: int64 */
+            spendCents: number;
+            payload?: {
+                [key: string]: unknown;
+            };
+        };
+        AiToolRefreshStatusDto: {
+            /** Format: date-time */
+            lastAttemptAt: string;
+            /** Format: date-time */
+            lastSuccessAt?: string | null;
+            lastErrorKind?: string | null;
+            lastErrorMessage?: string | null;
+            /** Format: int64 */
+            durationMs?: number | null;
+            counts: {
+                [key: string]: unknown;
+            };
+        };
+        AiToolRefreshResponseDto: {
+            ok: boolean;
+            error?: string | null;
+        };
         /** @description Nested metric groups; see TypeScript `DashboardProductivityMetricsDto` in @thinkai/tai-api-contract. */
         DashboardProductivityMetricsDto: {
             [key: string]: unknown;
@@ -1245,6 +1382,11 @@ export type TenantSourceEntryDto = components['schemas']['TenantSourceEntryDto']
 export type CursorSourceDto = components['schemas']['CursorSourceDto'];
 export type WorkspaceConfigDto = components['schemas']['WorkspaceConfigDto'];
 export type TestConnectionResponseDto = components['schemas']['TestConnectionResponseDto'];
+export type AiToolSeatDto = components['schemas']['AiToolSeatDto'];
+export type AiToolDailyUsageRowDto = components['schemas']['AiToolDailyUsageRowDto'];
+export type AiToolSpendRowDto = components['schemas']['AiToolSpendRowDto'];
+export type AiToolRefreshStatusDto = components['schemas']['AiToolRefreshStatusDto'];
+export type AiToolRefreshResponseDto = components['schemas']['AiToolRefreshResponseDto'];
 export type DashboardProductivityMetricsDto = components['schemas']['DashboardProductivityMetricsDto'];
 export type DashboardProductivityDto = components['schemas']['DashboardProductivityDto'];
 export type DashboardProductivityHistoryDto = components['schemas']['DashboardProductivityHistoryDto'];
@@ -2027,6 +2169,190 @@ export interface operations {
             };
         };
     };
+    refreshWorkspaceAiTool: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+                provider: "cursor";
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Refresh result */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AiToolRefreshResponseDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            /** @description Provider source missing for this workspace */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "ok": false,
+                     *       "error": "no_source"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["AiToolRefreshResponseDto"];
+                };
+            };
+            /** @description Refresh already in progress */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "ok": false,
+                     *       "error": "already_in_progress"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["AiToolRefreshResponseDto"];
+                };
+            };
+        };
+    };
+    getWorkspaceAiToolSeats: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+                provider: "cursor";
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Seats */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        seats: components["schemas"]["AiToolSeatDto"][];
+                    };
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+        };
+    };
+    getWorkspaceAiToolDailyUsage: {
+        parameters: {
+            query?: {
+                from?: string;
+                to?: string;
+                externalId?: string;
+            };
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+                provider: "cursor";
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Usage rows */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        rows: components["schemas"]["AiToolDailyUsageRowDto"][];
+                    };
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+        };
+    };
+    getWorkspaceAiToolSpend: {
+        parameters: {
+            query?: {
+                cycleStartMs?: number;
+            };
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+                provider: "cursor";
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Spend rows */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        rows: components["schemas"]["AiToolSpendRowDto"][];
+                    };
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+        };
+    };
+    getWorkspaceAiToolRefreshStatus: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+                provider: "cursor";
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Refresh status */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        status: components["schemas"]["AiToolRefreshStatusDto"];
+                    };
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            /** @description No refresh status yet (or provider source missing) */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "ok": false,
+                     *       "error": "no_source"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["AiToolRefreshResponseDto"];
+                };
+            };
+        };
+    };
     getGithubInstallCallback: {
         parameters: {
             query: {