@thinkai/tai-api-contract 2.28.0 → 3.1.0-pr.731.1

package/dist/generated/openapi.d.ts

@@ -855,6 +855,50 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/workspaces/{workspaceId}/integrations/github-actions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * GitHub Actions CI integration status for workspace
+         * @description Returns whether the workspace has explicitly enabled GitHub Actions CI metrics. Requires GitHub App (source control) to be connected; does not use workspace `sources` PATs. When GitHub is not connected, returns 200 with `githubConnected: false` and `enabled: false`.
+         */
+        get: operations["getWorkspaceGithubActionsIntegrationStatus"];
+        put?: never;
+        post?: never;
+        /**
+         * Disable GitHub Actions CI integration
+         * @description Disables GitHub Actions CI opt-in for the workspace. Does not disconnect GitHub source control. Idempotent: returns 204 when already disabled.
+         */
+        delete: operations["deleteWorkspaceGithubActionsIntegration"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/workspaces/{workspaceId}/integrations/github-actions/enable": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Enable GitHub Actions CI integration
+         * @description Opts the workspace into GitHub Actions CI metrics using the existing GitHub App installation (no separate OAuth or PAT). Returns `outcome: needs_github` when source control is not connected, or `outcome: permissions_missing` when the installation lacks Actions read permission.
+         */
+        post: operations["postWorkspaceGithubActionsIntegrationEnable"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/integrations/github/webhook": {
         parameters: {
             query?: never;
@@ -1485,6 +1529,30 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/workspaces/{workspaceId}/repo-eligibility": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get repo-sync eligibility gate (defaults + per-workspace overrides)
+         * @description Returns the effective repo-sync eligibility gate (archived / fork / size / count) for the workspace: the global `defaults`, any per-workspace `overrides`, the merged `effective` values, and whether the caller can edit without platform-admin (`canEditUnrestricted`). Member-level read access.
+         */
+        get: operations["getWorkspaceRepoEligibility"];
+        /**
+         * Set per-workspace repo-sync eligibility overrides
+         * @description Set (or clear, with an empty `overrides`) the per-workspace repo-sync eligibility overrides. **Platform admins** may set any value (raise caps, `0` = unlimited, include archived/forks). **Workspace admins** may only make the gate *more restrictive* than the platform defaults (lower caps, exclude archived/forks) — exceeding a platform limit returns `403` (`repo_eligibility_bound_exceeded`). Requires workspace admin or platform admin.
+         */
+        put: operations["putWorkspaceRepoEligibility"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/workspaces/{workspaceId}/readiness/cursor-key-usage": {
         parameters: {
             query?: never;
@@ -2687,6 +2755,56 @@ export interface components {
              * @description Last push or metadata update from GitHub when available.
              */
             updatedAt?: string | null;
+            /** @description True when the repository is archived (read-only on GitHub). */
+            archived?: boolean | null;
+            /** @description True when the repository is a fork of another repository. */
+            fork?: boolean | null;
+            /** @description True when the repository is disabled on GitHub. */
+            disabled?: boolean | null;
+            /** @description Repository size in KB as reported by GitHub. */
+            size?: number | null;
+            /** @description True when the GitHub App installation lacks push access to this repo (read-only). Read-only repos are rejected during sync because readiness fixes require write access. */
+            readOnly?: boolean | null;
+            /** @description Set when this repo was skipped during sync due to an eligibility check. The frontend should display this as an inline explanation (e.g. "This repo is archived"). */
+            ineligibleReason?: string | null;
+            /**
+             * @description Language-based eligibility for Agentic-Foundation readiness analysis (issue #44). `ineligible` repos (no supported stack) render read-only/orange in the AF list with no analyze/score/fix actions. Mixed monorepos with a supported secondary stack are `eligible`. Distinct from `ineligibleReason`, which reflects the structural sync gate.
+             * @enum {string|null}
+             */
+            eligibilityStatus?: "eligible" | "ineligible" | null;
+            /** @description Human-readable explanation when `eligibilityStatus` is `ineligible` (e.g. "This repository's primary language (Python) is not supported in v1"). */
+            eligibilityReason?: string | null;
+            /** @description Dominant supported stack (by GitHub language bytes), one of backend_jvm | ios_app | web_spa | backend_go. Null for ineligible repos. */
+            primaryStack?: string | null;
+            /** @description Second supported stack for a multi-stack repo, or null. */
+            secondaryStack?: string | null;
+            /** @description All supported stacks detected for the repo (ordered, primary first). Empty/null when no supported stack is present. Drives multi-stack scanning and the orange mixed-monorepo box in the AF UI. */
+            supportedStacks?: string[] | null;
+        };
+        /** @description Resolved repo-sync eligibility gate (defaults or effective). All fields present. */
+        RepoEligibilityConfigDto: {
+            /** @description Skip archived repos during GitHub repo sync. */
+            excludeArchived: boolean;
+            /** @description Skip forked repos. Forks are included by default. */
+            excludeForks: boolean;
+            /** @description Max repo size in KB (GitHub-reported). 0 = no limit. */
+            maxRepoSizeKb: number;
+            /** @description Max repos materialized per workspace per sync. 0 = no limit. */
+            maxReposPerWorkspace: number;
+        };
+        /** @description Per-workspace overrides for the repo-sync eligibility gate. Any field present wins over the global default; omit a field to inherit the default. An empty object clears all overrides. */
+        RepoEligibilityOverridesDto: {
+            excludeArchived?: boolean | null;
+            excludeForks?: boolean | null;
+            maxRepoSizeKb?: number | null;
+            maxReposPerWorkspace?: number | null;
+        };
+        WorkspaceRepoEligibilityDto: {
+            defaults: components["schemas"]["RepoEligibilityConfigDto"];
+            overrides: components["schemas"]["RepoEligibilityOverridesDto"];
+            effective: components["schemas"]["RepoEligibilityConfigDto"];
+            /** @description True when the caller is a platform admin (may set any value, incl. raising caps). */
+            canEditUnrestricted: boolean;
         };
         GithubMissingPermissionDto: {
             /** @description GitHub App permission key (e.g. contents, pull_requests). */
@@ -2728,6 +2846,42 @@ export interface components {
              */
             pendingSince: string;
         };
+        GithubActionsWorkflowPreviewDto: {
+            /** @description Approximate workflow count from recent API sample (best effort). */
+            workflows?: number;
+            /** @description Workflow runs in the trailing 7 days from sample repo (best effort). */
+            runsThisWeek?: number;
+        };
+        GithubActionsIntegrationStatusDto: {
+            /** @description True when the workspace admin explicitly enabled GitHub Actions CI. */
+            enabled: boolean;
+            /** @description True when at least one GitHub App VCS installation is linked. */
+            githubConnected: boolean;
+            /** @description False when GitHub App installation lacks Actions read permission. */
+            permissionsOk: boolean;
+            /** @description Alias for `!permissionsOk` when GitHub is connected. */
+            permissionsUpgradeRequired?: boolean;
+            missingPermissions?: components["schemas"]["GithubMissingPermissionDto"][];
+            /**
+             * Format: uri
+             * @description GitHub installation settings URL for permission approval.
+             */
+            manageUrl?: string | null;
+            /**
+             * Format: date-time
+             * @description Last productivity ingest timestamp when CI is enabled.
+             */
+            lastSyncAt?: string | null;
+            workflowPreview?: components["schemas"]["GithubActionsWorkflowPreviewDto"] | null;
+            /** @description Last enable or status error message when applicable. */
+            error?: string | null;
+        };
+        GithubActionsEnableResponseDto: {
+            /** @enum {string} */
+            outcome: "enabled" | "needs_github" | "permissions_missing" | "error";
+            status?: components["schemas"]["GithubActionsIntegrationStatusDto"] | null;
+            error?: string | null;
+        };
         GithubInstallationStatusDto: {
             installed: boolean;
             installations: components["schemas"]["GithubInstallationSummaryDto"][];
@@ -2984,6 +3138,8 @@ export interface components {
              * @enum {string}
              */
             severity: "high" | "medium" | "low";
+            /** @description Plain-language explanation of what this check means (from rubric, not LLM) */
+            summary?: string | null;
             /** @description LLM scan notes explaining why this status was assigned */
             notes?: string | null;
             /** @description Suggested fix for gap/partial criteria */
@@ -3141,6 +3297,19 @@ export interface components {
              * @enum {string|null}
              */
             archivedReason?: "github_removed" | "installation_disconnected" | "installation_replaced" | "superseded" | null;
+            /**
+             * @description Language-based eligibility for Agentic-Foundation analysis (#44). `ineligible` repos (no v1-supported stack) render read-only/orange in the AF list with no analyze/score/fix actions; the server also rejects analyze requests for them. Null until the first sync/scan computes it.
+             * @enum {string|null}
+             */
+            eligibilityStatus?: "eligible" | "ineligible" | null;
+            /** @description Human-readable explanation when `eligibilityStatus` is `ineligible`. */
+            eligibilityReason?: string | null;
+            /** @description Dominant supported stack — backend_jvm | ios_app | web_spa | backend_go. Null when ineligible/uncomputed. */
+            primaryStack?: string | null;
+            /** @description Second supported stack for a multi-stack repo, or null. */
+            secondaryStack?: string | null;
+            /** @description All supported stacks detected (ordered, primary first). Empty/null when none. */
+            supportedStacks?: string[] | null;
         };
         /** @description Single-repo detail response. Identical to RepoReadinessScoreDto except dimensions use DimensionScoreDetailDto (criteriaDetails required per dimension). */
         RepoReadinessScoreDetailDto: {
@@ -3602,7 +3771,7 @@ export interface components {
          * @description Type of workspace lifecycle event.
          * @enum {string}
          */
-        ActivityLogEventTypeDto: "repo.added" | "repo.removed" | "repo.readded" | "integration.github.added" | "integration.github.updated" | "integration.github.removed" | "integration.github.permissions_changed" | "integration.github.repo_added" | "integration.github.repo_removed" | "fix.requested" | "fix.generating" | "fix.pr_created" | "fix.merged" | "fix.failed" | "readiness.scan_started" | "readiness.scan_completed" | "readiness.scan_failed" | "readiness.scan_partial" | "config.cursor.added" | "config.cursor.updated" | "config.cursor.removed" | "config.cursor.platform_key_enabled" | "config.cursor.platform_key_disabled" | "config.claude.added" | "config.claude.updated" | "config.claude.removed" | "config.agent_execution.provider_changed" | "member.invited" | "member.role_changed" | "member.removed";
+        ActivityLogEventTypeDto: "repo.added" | "repo.removed" | "repo.readded" | "integration.github.added" | "integration.github.updated" | "integration.github.removed" | "integration.github.permissions_changed" | "integration.github.repo_added" | "integration.github.repo_removed" | "fix.requested" | "fix.generating" | "fix.pr_created" | "fix.merged" | "fix.failed" | "readiness.scan_started" | "readiness.scan_completed" | "readiness.scan_failed" | "readiness.scan_partial" | "integrations.agent_execution.provider_changed" | "integrations.repo_eligibility.overrides_changed" | "integrations.cursor.platform_key_enabled" | "integrations.cursor.platform_key_disabled" | "member.invited" | "member.role_changed" | "member.removed" | "repo.sync_skipped" | "integrations.cursor.execution_key.added" | "integrations.cursor.execution_key.updated" | "integrations.cursor.execution_key.removed" | "integrations.cursor.execution_key.check_failed" | "integrations.cursor.admin_key.added" | "integrations.cursor.admin_key.updated" | "integrations.cursor.admin_key.removed" | "integrations.claude.execution_key.added" | "integrations.claude.execution_key.updated" | "integrations.claude.execution_key.removed" | "integrations.claude.execution_key.check_failed" | "integrations.claude.admin_key.added" | "integrations.claude.admin_key.updated" | "integrations.claude.admin_key.removed" | "readiness.scan_precheck_failed";
         ActivityLogActorDto: {
             /** Format: uuid */
             userId: string;
@@ -3687,18 +3856,30 @@ export interface components {
         };
         HrisTriggerSyncResultDto: {
             /** @enum {string} */
-            status: "ok" | "skipped" | "error";
-            /** @description Stable machine-readable code (e.g. 'no_personio_source', 'hris_sync_failed'). */
+            status: "ok" | "skipped" | "error" | "partial";
+            /** @description Stable machine-readable code (e.g. 'no_hris_source', 'hris_sync_failed'). */
             code?: string;
-            /** @description Number of employees synced (present when status = 'ok'). */
+            /** @description Employees synced across successful providers (when status = ok or partial). */
             employeeCount?: number;
-            /** @description Number of absence records synced (present when status = 'ok'). */
+            /** @description Absence rows synced across successful providers. */
             absenceCount?: number;
-            /** @description Wall-clock duration of the sync in milliseconds (present when status = 'ok'). */
+            /** @description Wall-clock duration of the sync in milliseconds. */
             durationMs?: number;
-            /** @description Machine-readable reason for a skipped sync (e.g. 'no_personio_source'). */
+            /** @description Machine-readable reason for a skipped sync (e.g. 'no_hris_source'). */
             reason?: string;
-            /** @description Error message when status = 'error'. */
+            /** @description Error message when status = error, or first provider failure when partial. */
+            error?: string;
+            /** @description Per-provider sync outcomes when one or more HRIS sources are configured. */
+            providers?: components["schemas"]["HrisProviderSyncResultDto"][];
+        };
+        HrisProviderSyncResultDto: {
+            /** @description HRIS provider identifier (personio, zenhr, …). */
+            provider: string;
+            /** @enum {string} */
+            status: "ok" | "error";
+            employeeCount?: number;
+            absenceCount?: number;
+            durationMs?: number;
             error?: string;
         };
         ActivityLogPageDto: components["schemas"]["PageMetaDto"] & {
@@ -3961,9 +4142,15 @@ export type CreateWorkspaceBodyDto = components['schemas']['CreateWorkspaceBodyD
 export type CompanyProfileDto = components['schemas']['CompanyProfileDto'];
 export type GithubAccountDto = components['schemas']['GithubAccountDto'];
 export type GithubInstalledRepoDto = components['schemas']['GithubInstalledRepoDto'];
+export type RepoEligibilityConfigDto = components['schemas']['RepoEligibilityConfigDto'];
+export type RepoEligibilityOverridesDto = components['schemas']['RepoEligibilityOverridesDto'];
+export type WorkspaceRepoEligibilityDto = components['schemas']['WorkspaceRepoEligibilityDto'];
 export type GithubMissingPermissionDto = components['schemas']['GithubMissingPermissionDto'];
 export type GithubInstallationSummaryDto = components['schemas']['GithubInstallationSummaryDto'];
 export type GithubPendingApprovalDto = components['schemas']['GithubPendingApprovalDto'];
+export type GithubActionsWorkflowPreviewDto = components['schemas']['GithubActionsWorkflowPreviewDto'];
+export type GithubActionsIntegrationStatusDto = components['schemas']['GithubActionsIntegrationStatusDto'];
+export type GithubActionsEnableResponseDto = components['schemas']['GithubActionsEnableResponseDto'];
 export type GithubInstallationStatusDto = components['schemas']['GithubInstallationStatusDto'];
 export type GithubInstallUrlRequestDto = components['schemas']['GithubInstallUrlRequestDto'];
 export type GithubInstallUrlResponseDto = components['schemas']['GithubInstallUrlResponseDto'];
@@ -4066,6 +4253,7 @@ export type WorkspaceAbsenceListDto = components['schemas']['WorkspaceAbsenceLis
 export type HrisSyncStatusDto = components['schemas']['HrisSyncStatusDto'];
 export type HrisSyncStatusListDto = components['schemas']['HrisSyncStatusListDto'];
 export type HrisTriggerSyncResultDto = components['schemas']['HrisTriggerSyncResultDto'];
+export type HrisProviderSyncResultDto = components['schemas']['HrisProviderSyncResultDto'];
 export type ActivityLogPageDto = components['schemas']['ActivityLogPageDto'];
 export type ReadinessTokenUsageRowDto = components['schemas']['ReadinessTokenUsageRowDto'];
 export type ReadinessTokenUsageByDimensionRowDto = components['schemas']['ReadinessTokenUsageByDimensionRowDto'];
@@ -6313,6 +6501,112 @@ export interface operations {
             };
         };
     };
+    getWorkspaceGithubActionsIntegrationStatus: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description GitHub Actions integration status */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GithubActionsIntegrationStatusDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            /** @description Workspace does not exist or malformed workspaceId */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
+    deleteWorkspaceGithubActionsIntegration: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description GitHub Actions integration disabled or was already absent */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            /** @description Workspace does not exist or malformed workspaceId */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
+    postWorkspaceGithubActionsIntegrationEnable: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Enable result */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GithubActionsEnableResponseDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            /** @description Workspace does not exist or malformed workspaceId */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description GitHub App not configured or smoke test failed */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
     postGithubWebhook: {
         parameters: {
             query?: never;
@@ -7036,6 +7330,10 @@ export interface operations {
                 offset?: components["parameters"]["PaginationOffset"];
                 /** @description Sort direction. */
                 order?: components["parameters"]["PaginationOrder"];
+                /** @description Server-side sort column (the activity "5 W's"). Combined with `order` (asc/desc). Defaults to `when` (occurredAt). `occurredAt`/`id` is always the tiebreaker. */
+                sort?: "when" | "who" | "what" | "why" | "where";
+                /** @description Coarse product-area grouping filter (#156). `integration` = GitHub + AI-tool key events; `agentic_foundation` = repos, readiness scans, fixes; `workspace_team` = members + HRIS. Omit (or pass `all`) for every area. */
+                productArea?: "integration" | "agentic_foundation" | "workspace_team" | "all";
                 /** @description Filter to a specific event type. */
                 eventType?: components["schemas"]["ActivityLogEventTypeDto"];
                 /** @description Filter to events performed by a specific user (UUID). */
@@ -7924,6 +8222,80 @@ export interface operations {
             403: components["responses"]["Forbidden"];
         };
     };
+    getWorkspaceRepoEligibility: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Effective repo-eligibility configuration */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["WorkspaceRepoEligibilityDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+        };
+    };
+    putWorkspaceRepoEligibility: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    overrides: components["schemas"]["RepoEligibilityOverridesDto"];
+                };
+            };
+        };
+        responses: {
+            /** @description Overrides saved */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        overrides: components["schemas"]["RepoEligibilityOverridesDto"];
+                        effective: components["schemas"]["RepoEligibilityConfigDto"];
+                    };
+                };
+            };
+            /** @description Invalid request body */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            /** @description Forbidden, or a workspace-admin value exceeds a platform limit (`repo_eligibility_bound_exceeded`) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
     getCursorKeyUsage: {
         parameters: {
             query?: never;
@@ -8764,7 +9136,7 @@ export interface operations {
         };
         requestBody?: never;
         responses: {
-            /** @description Sync completed successfully */
+            /** @description Sync completed successfully for all configured HRIS providers */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -8775,7 +9147,16 @@ export interface operations {
                      *       "status": "ok",
                      *       "employeeCount": 42,
                      *       "absenceCount": 7,
-                     *       "durationMs": 1234
+                     *       "durationMs": 1234,
+                     *       "providers": [
+                     *         {
+                     *           "provider": "personio",
+                     *           "status": "ok",
+                     *           "employeeCount": 42,
+                     *           "absenceCount": 7,
+                     *           "durationMs": 1234
+                     *         }
+                     *       ]
                      *     }
                      */
                     "application/json": components["schemas"]["HrisTriggerSyncResultDto"];
@@ -8792,14 +9173,14 @@ export interface operations {
                     /**
                      * @example {
                      *       "status": "skipped",
-                     *       "code": "no_personio_source",
-                     *       "reason": "no_personio_source"
+                     *       "code": "no_hris_source",
+                     *       "reason": "no_hris_source"
                      *     }
                      */
                     "application/json": components["schemas"]["HrisTriggerSyncResultDto"];
                 };
             };
-            /** @description Sync failed (Personio API error, decryption failure, etc.) */
+            /** @description Sync failed for one or more HRIS providers */
             500: {
                 headers: {
                     [name: string]: unknown;
@@ -8809,7 +9190,7 @@ export interface operations {
                      * @example {
                      *       "status": "error",
                      *       "code": "hris_sync_failed",
-                     *       "error": "Personio employees API 401"
+                     *       "error": "ZenHR token refresh failed (401)"
                      *     }
                      */
                     "application/json": components["schemas"]["HrisTriggerSyncResultDto"];