@thinkai/tai-api-contract 2.25.0 → 2.26.0

package/dist/generated/openapi.d.ts

@@ -1465,6 +1465,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/workspaces/{workspaceId}/agent-execution-provider": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Select the agent execution account for this workspace
+         * @description Sets the single active agent execution account (`thinkai_platform_cursor`, `cursor_user_api_key`, or `claude_api_key`) used by this workspace's readiness scanner and fix processor. Defaults to `cursor_user_api_key`. `thinkai_platform_cursor` is never the default and implies consent to platform-key billing. Requires workspace editor or admin role.
+         */
+        put: operations["putAgentExecutionProvider"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/workspaces/{workspaceId}/readiness/cursor-key-usage": {
         parameters: {
             query?: never;
@@ -2001,20 +2021,53 @@ export interface components {
             /** @description Whether the execution key is stored. If false and `cursorPlatformKeyEnabled` is true in `WorkspaceConfigDto`, the platform key will be used for readiness runs (additional cost applies). */
             hasExecutionToken: boolean;
         };
-        /** @description Claude (Anthropic) source entry for `PUT /workspaces/{workspaceId}/sources` and `POST /workspaces/{workspaceId}/sources/test`. The `token` field carries a literal Organization Admin API key on writes (`sk-ant-admin...`); reads from `GET /workspaces/{workspaceId}/config` redact it to `***`. Runtime calls use the Anthropic Admin API at `https://api.anthropic.com`. Provision keys in Claude Console → Organization settings (admin role required). */
+        /** @description Claude (Anthropic) source entry for `PUT /workspaces/{workspaceId}/sources` and `POST /workspaces/{workspaceId}/sources/test`. The `token` field carries a literal Organization Admin API key on writes (`sk-ant-admin...`); the optional `executionToken` carries a standard API key (`sk-ant-api...`) that powers the Claude Code agent (readiness scanner + fix processor). Reads from `GET /workspaces/{workspaceId}/config` redact secrets to `hasToken` / `hasExecutionToken` booleans. Provision keys in Claude Console. */
         ClaudeSourceDto: {
             /** @enum {string} */
             type: "claude";
             /** @description Anthropic Organization Admin API key (literal, must start with sk-ant-admin). Standard API keys (sk-ant-api...) are rejected. Whitespace and `env:` prefix are rejected. */
             token: string;
+            /** @description Claude Code execution key (literal standard Anthropic API key, sk-ant-api...). Used by the readiness scanner and fix processor when this workspace selects the `claude` agent. NOT the Admin API key. Omit to use the ThinkAI platform key (requires `claudePlatformKeyEnabled` on the workspace). Whitespace and `env:` prefix are rejected. */
+            executionToken?: string;
+        };
+        /** @description Partial Claude source for `PUT /workspaces/{workspaceId}/sources` and `POST /workspaces/{workspaceId}/sources/test`. Admin API key (`token`) powers insights sync; execution key (`executionToken`) powers the Claude Code agent. At least one of `token` or `executionToken` must be present. */
+        ClaudeSourcePatchDto: {
+            /** @enum {string} */
+            type: "claude";
+            /** @description Anthropic Organization Admin API key (literal, must start with sk-ant-admin). Whitespace and `env:` prefix are rejected. */
+            token?: string;
+            /** @description Claude Code execution key (literal standard Anthropic API key, sk-ant-api...) — NOT the Admin API key. Whitespace and `env:` prefix are rejected. */
+            executionToken?: string;
+        };
+        /** @description Redacted Claude source returned by `GET /workspaces/{workspaceId}/config`. `hasToken` and `hasExecutionToken` indicate which keys are stored. Raw values are never returned. */
+        ClaudeSourceConfigDto: {
+            /** @enum {string} */
+            type: "claude";
+            /** @description Whether the Admin API key (`token`) is stored for this workspace. */
+            hasToken: boolean;
+            /** @description Whether the Claude Code execution key is stored. If false and `claudePlatformKeyEnabled` is true in `WorkspaceConfigDto`, the platform key will be used for readiness runs (additional cost applies). */
+            hasExecutionToken: boolean;
         };
+        /**
+         * @description The agent execution account used for Agentic Foundation runs (readiness scanner + fix queue). Exactly one is active per workspace.
+         *       - `thinkai_platform_cursor`: ThinkAI platform Cursor key (Cursor Agent CLI) — opt-in, never default.
+         *       - `cursor_user_api_key`: the workspace's own Cursor user API key (Cursor Agent CLI).
+         *       - `claude_api_key`: the workspace's own Anthropic API key (Claude Code CLI).
+         * @enum {string}
+         */
+        AgentExecutionProviderDto: "thinkai_platform_cursor" | "cursor_user_api_key" | "claude_api_key";
         WorkspaceConfigDto: {
-            sources: (components["schemas"]["CursorSourceConfigDto"] | components["schemas"]["TenantSourceEntryDto"])[];
+            sources: (components["schemas"]["CursorSourceConfigDto"] | components["schemas"]["ClaudeSourceConfigDto"] | components["schemas"]["TenantSourceEntryDto"])[];
             orgChart?: components["schemas"]["ScoringOrgChartDto"] | null;
             /** @enum {string|null} */
             region?: "us" | "eu" | "me" | null;
-            /** @description When true, readiness runs may use the ThinkAI platform Cursor key if this workspace has no `executionToken` configured. Additional cost applies. Requires explicit opt-in via `PUT /workspaces/{workspaceId}/cursor/platform-key-consent`. */
+            /**
+             * @deprecated
+             * @description Deprecated: superseded by `agentExecutionProvider = thinkai_platform_cursor`. When true, readiness runs may use the ThinkAI platform Cursor key. Kept for one release; new clients should read/write `agentExecutionProvider`.
+             */
             cursorPlatformKeyEnabled?: boolean;
+            /** @description The single active agent execution account for this workspace's readiness scanner and fix processor. Defaults to `cursor_user_api_key`. Change via `PUT /workspaces/{workspaceId}/agent-execution-provider`. */
+            agentExecutionProvider?: components["schemas"]["AgentExecutionProviderDto"];
         };
         TestConnectionResponseDto: {
             success: boolean;
@@ -3516,7 +3569,7 @@ export interface components {
          * @description Type of workspace lifecycle event.
          * @enum {string}
          */
-        ActivityLogEventTypeDto: "repo.added" | "repo.removed" | "repo.readded" | "integration.github.added" | "integration.github.updated" | "integration.github.removed" | "integration.github.permissions_changed" | "integration.github.repo_added" | "integration.github.repo_removed" | "fix.requested" | "fix.generating" | "fix.pr_created" | "fix.merged" | "fix.failed" | "readiness.scan_started" | "readiness.scan_completed" | "readiness.scan_failed" | "readiness.scan_partial" | "config.cursor.added" | "config.cursor.updated" | "config.cursor.removed" | "config.cursor.platform_key_enabled" | "config.cursor.platform_key_disabled" | "config.claude.added" | "config.claude.updated" | "config.claude.removed" | "member.invited" | "member.role_changed" | "member.removed";
+        ActivityLogEventTypeDto: "repo.added" | "repo.removed" | "repo.readded" | "integration.github.added" | "integration.github.updated" | "integration.github.removed" | "integration.github.permissions_changed" | "integration.github.repo_added" | "integration.github.repo_removed" | "fix.requested" | "fix.generating" | "fix.pr_created" | "fix.merged" | "fix.failed" | "readiness.scan_started" | "readiness.scan_completed" | "readiness.scan_failed" | "readiness.scan_partial" | "config.cursor.added" | "config.cursor.updated" | "config.cursor.removed" | "config.cursor.platform_key_enabled" | "config.cursor.platform_key_disabled" | "config.claude.added" | "config.claude.updated" | "config.claude.removed" | "config.agent_execution.provider_changed" | "member.invited" | "member.role_changed" | "member.removed";
         ActivityLogActorDto: {
             /** Format: uuid */
             userId: string;
@@ -3813,6 +3866,9 @@ export type CursorSourceDto = components['schemas']['CursorSourceDto'];
 export type CursorSourcePatchDto = components['schemas']['CursorSourcePatchDto'];
 export type CursorSourceConfigDto = components['schemas']['CursorSourceConfigDto'];
 export type ClaudeSourceDto = components['schemas']['ClaudeSourceDto'];
+export type ClaudeSourcePatchDto = components['schemas']['ClaudeSourcePatchDto'];
+export type ClaudeSourceConfigDto = components['schemas']['ClaudeSourceConfigDto'];
+export type AgentExecutionProviderDto = components['schemas']['AgentExecutionProviderDto'];
 export type WorkspaceConfigDto = components['schemas']['WorkspaceConfigDto'];
 export type TestConnectionResponseDto = components['schemas']['TestConnectionResponseDto'];
 export type CursorKeyUsageDto = components['schemas']['CursorKeyUsageDto'];
@@ -4623,7 +4679,7 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
-                    sources: (components["schemas"]["CursorSourcePatchDto"] | components["schemas"]["CursorSourceDto"] | components["schemas"]["ClaudeSourceDto"] | components["schemas"]["TenantSourceEntryDto"])[];
+                    sources: (components["schemas"]["CursorSourcePatchDto"] | components["schemas"]["CursorSourceDto"] | components["schemas"]["ClaudeSourcePatchDto"] | components["schemas"]["ClaudeSourceDto"] | components["schemas"]["TenantSourceEntryDto"])[];
                 };
             };
         };
@@ -4677,7 +4733,7 @@ export interface operations {
         };
         requestBody: {
             content: {
-                "application/json": components["schemas"]["CursorSourcePatchDto"] | components["schemas"]["CursorSourceDto"] | components["schemas"]["ClaudeSourceDto"] | components["schemas"]["TenantSourceEntryDto"];
+                "application/json": components["schemas"]["CursorSourcePatchDto"] | components["schemas"]["CursorSourceDto"] | components["schemas"]["ClaudeSourcePatchDto"] | components["schemas"]["ClaudeSourceDto"] | components["schemas"]["TenantSourceEntryDto"];
             };
         };
         responses: {
@@ -7794,6 +7850,47 @@ export interface operations {
             403: components["responses"]["Forbidden"];
         };
     };
+    putAgentExecutionProvider: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    provider: components["schemas"]["AgentExecutionProviderDto"];
+                };
+            };
+        };
+        responses: {
+            /** @description Provider updated */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        ok: boolean;
+                    };
+                };
+            };
+            /** @description Invalid request body */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+        };
+    };
     getCursorKeyUsage: {
         parameters: {
             query?: never;