@thinkai/tai-api-contract 2.57.0 → 2.58.0-pr.901.7f05b4b4

package/openapi/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: ThinkAI API
-  version: 2.57.0
+  version: 2.58.0
   description: >
     Contract surface for the AI Driven SDLC backend used by ThinkAI.
     Workspace-scoped routes use `/workspaces/{workspaceId}/...`.
@@ -5391,6 +5391,31 @@ paths:
             application/json:
               schema:
                 $ref: "#/components/schemas/ErrorMessageDto"
+        "422":
+          description: GitHub installation lacks write permissions required for automated fix PRs
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/GithubWritePermissionsRequiredErrorDto"
+              examples:
+                write_required:
+                  value:
+                    error: github_write_permissions_required
+                    missingPermissions:
+                      - name: contents
+                        required: write
+                        granted: read
+                      - name: pull_requests
+                        required: write
+                        granted: read
+                    manageUrl: https://github.com/settings/installations/12345
+                    writeUpgradeMessage: Automated fixes need write access to your repositories. Approve on GitHub to enable fix PRs.
+        "503":
+          description: GitHub installation permissions could not be verified
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/GithubPermissionsCheckFailedErrorDto"
 
   /workspaces/{workspaceId}/readiness/fixes/{fixId}/retrigger:
     post:
@@ -5434,6 +5459,18 @@ paths:
                   value:
                     error: Fix is currently generating and cannot be superseded
                     code: fix_generating
+        "422":
+          description: GitHub installation lacks write permissions required for automated fix PRs
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/GithubWritePermissionsRequiredErrorDto"
+        "503":
+          description: GitHub installation permissions could not be verified
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/GithubPermissionsCheckFailedErrorDto"
 
   /workspaces/{workspaceId}/cursor/platform-key-consent:
     put:
@@ -10214,9 +10251,47 @@ components:
           nullable: true
           description: Null when the installation has not granted this permission.
 
+    GithubWritePermissionsRequiredErrorDto:
+      type: object
+      additionalProperties: false
+      required: [error, missingPermissions]
+      properties:
+        error:
+          type: string
+          enum: [github_write_permissions_required]
+        missingPermissions:
+          type: array
+          items:
+            $ref: "#/components/schemas/GithubMissingPermissionDto"
+        manageUrl:
+          type: string
+          nullable: true
+          description: GitHub installation settings URL to approve write permissions.
+        writeUpgradeMessage:
+          type: string
+          nullable: true
+          description: Human-readable summary of the write permission upgrade.
+
+    GithubPermissionsCheckFailedErrorDto:
+      type: object
+      additionalProperties: false
+      required: [error]
+      properties:
+        error:
+          type: string
+          enum: [github_permissions_check_failed]
+          description: GitHub installation permissions could not be verified (transient upstream failure).
+
     GithubInstallationSummaryDto:
       type: object
-      required: [installationId, account, repos, permissionsUpgradeRequired]
+      required:
+        - installationId
+        - account
+        - repos
+        - permissionsUpgradeRequired
+        - corePermissionsOk
+        - writePermissionsOk
+        - writePermissionsUpgradeRequired
       properties:
         installationId:
           type: string
@@ -10238,16 +10313,38 @@ components:
         permissionsUpgradeRequired:
           type: boolean
           description: >
-            True when this installation's granted permissions are below what the ThinkAI GitHub App
-            currently requests.
+            True when this installation lacks core read permissions required for connect and analysis.
+            Alias for `!corePermissionsOk`.
+        corePermissionsOk:
+          type: boolean
+          description: >
+            True when installation grants read permissions for repository analysis (contents, metadata,
+            pull requests, and members for org installs).
+        writePermissionsOk:
+          type: boolean
+          description: >
+            True when installation grants write permissions required for automated fix PRs.
+        writePermissionsUpgradeRequired:
+          type: boolean
+          description: Alias for `!writePermissionsOk`.
         missingPermissions:
           type: array
           items:
             $ref: "#/components/schemas/GithubMissingPermissionDto"
+          description: Core read permissions still needed for connect and analysis.
+        missingWritePermissions:
+          type: array
+          items:
+            $ref: "#/components/schemas/GithubMissingPermissionDto"
+          description: Write permissions still needed for automated fix PRs.
         upgradeMessage:
           type: string
           nullable: true
-          description: Human-readable summary for UI when permissionsUpgradeRequired is true.
+          description: Human-readable summary for UI when core permissions are missing.
+        writeUpgradeMessage:
+          type: string
+          nullable: true
+          description: Human-readable summary for UI when write permissions are missing.
 
     GithubPendingApprovalDto:
       type: object
@@ -10361,7 +10458,13 @@ components:
 
     GithubInstallationStatusDto:
       type: object
-      required: [installed, installations, permissionsUpgradeRequired]
+      required:
+        - installed
+        - installations
+        - permissionsUpgradeRequired
+        - corePermissionsOk
+        - writePermissionsOk
+        - writePermissionsUpgradeRequired
       properties:
         installed:
           type: boolean
@@ -10371,7 +10474,25 @@ components:
             $ref: "#/components/schemas/GithubInstallationSummaryDto"
         permissionsUpgradeRequired:
           type: boolean
-          description: True if any connected installation is under-permissioned.
+          description: True if any connected installation lacks core read permissions. Alias for `!corePermissionsOk`.
+        corePermissionsOk:
+          type: boolean
+          description: True when every connected installation grants core read permissions.
+        writePermissionsOk:
+          type: boolean
+          description: True when every connected installation grants write permissions for automated fixes.
+        writePermissionsUpgradeRequired:
+          type: boolean
+          description: True when any connected installation lacks write permissions for automated fixes.
+        missingWritePermissions:
+          type: array
+          items:
+            $ref: "#/components/schemas/GithubMissingPermissionDto"
+          description: Aggregated write permissions missing on installations that lack write access.
+        writeUpgradeMessage:
+          type: string
+          nullable: true
+          description: Human-readable summary when write permissions are missing.
         pendingApproval:
           nullable: true
           allOf:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thinkai/tai-api-contract",
-  "version": "2.57.0",
+  "version": "2.58.0-pr.901.7f05b4b4",
   "private": false,
   "type": "module",
   "main": "dist/index.js",

package/src/generated/openapi.ts

@@ -4231,6 +4231,22 @@ export interface components {
              */
             granted?: "read" | "write" | "admin" | null;
         };
+        GithubWritePermissionsRequiredErrorDto: {
+            /** @enum {string} */
+            error: "github_write_permissions_required";
+            missingPermissions: components["schemas"]["GithubMissingPermissionDto"][];
+            /** @description GitHub installation settings URL to approve write permissions. */
+            manageUrl?: string | null;
+            /** @description Human-readable summary of the write permission upgrade. */
+            writeUpgradeMessage?: string | null;
+        };
+        GithubPermissionsCheckFailedErrorDto: {
+            /**
+             * @description GitHub installation permissions could not be verified (transient upstream failure).
+             * @enum {string}
+             */
+            error: "github_permissions_check_failed";
+        };
         GithubInstallationSummaryDto: {
             installationId: string;
             account: components["schemas"]["GithubAccountDto"];
@@ -4240,11 +4256,22 @@ export interface components {
             manageUrl?: string | null;
             /** Format: date-time */
             lastSyncedAt?: string | null;
-            /** @description True when this installation's granted permissions are below what the ThinkAI GitHub App currently requests. */
+            /** @description True when this installation lacks core read permissions required for connect and analysis. Alias for `!corePermissionsOk`. */
             permissionsUpgradeRequired: boolean;
+            /** @description True when installation grants read permissions for repository analysis (contents, metadata, pull requests, and members for org installs). */
+            corePermissionsOk: boolean;
+            /** @description True when installation grants write permissions required for automated fix PRs. */
+            writePermissionsOk: boolean;
+            /** @description Alias for `!writePermissionsOk`. */
+            writePermissionsUpgradeRequired: boolean;
+            /** @description Core read permissions still needed for connect and analysis. */
             missingPermissions?: components["schemas"]["GithubMissingPermissionDto"][];
-            /** @description Human-readable summary for UI when permissionsUpgradeRequired is true. */
+            /** @description Write permissions still needed for automated fix PRs. */
+            missingWritePermissions?: components["schemas"]["GithubMissingPermissionDto"][];
+            /** @description Human-readable summary for UI when core permissions are missing. */
             upgradeMessage?: string | null;
+            /** @description Human-readable summary for UI when write permissions are missing. */
+            writeUpgradeMessage?: string | null;
         };
         GithubPendingApprovalDto: {
             /**
@@ -4312,8 +4339,18 @@ export interface components {
         GithubInstallationStatusDto: {
             installed: boolean;
             installations: components["schemas"]["GithubInstallationSummaryDto"][];
-            /** @description True if any connected installation is under-permissioned. */
+            /** @description True if any connected installation lacks core read permissions. Alias for `!corePermissionsOk`. */
             permissionsUpgradeRequired: boolean;
+            /** @description True when every connected installation grants core read permissions. */
+            corePermissionsOk: boolean;
+            /** @description True when every connected installation grants write permissions for automated fixes. */
+            writePermissionsOk: boolean;
+            /** @description True when any connected installation lacks write permissions for automated fixes. */
+            writePermissionsUpgradeRequired: boolean;
+            /** @description Aggregated write permissions missing on installations that lack write access. */
+            missingWritePermissions?: components["schemas"]["GithubMissingPermissionDto"][];
+            /** @description Human-readable summary when write permissions are missing. */
+            writeUpgradeMessage?: string | null;
             /** @description Present when an org admin must approve the GitHub App install request. */
             pendingApproval?: components["schemas"]["GithubPendingApprovalDto"] | null;
             /** @description Present when GitHub connect was started but not completed (install OAuth state or account-picker session still active). Omitted when pendingApproval is set. */
@@ -5835,6 +5872,8 @@ export type RepoEligibilityOverridesDto = components['schemas']['RepoEligibility
 export type WorkspaceRepoEligibilityDto = components['schemas']['WorkspaceRepoEligibilityDto'];
 export type RepoEligibilityLimitsDto = components['schemas']['RepoEligibilityLimitsDto'];
 export type GithubMissingPermissionDto = components['schemas']['GithubMissingPermissionDto'];
+export type GithubWritePermissionsRequiredErrorDto = components['schemas']['GithubWritePermissionsRequiredErrorDto'];
+export type GithubPermissionsCheckFailedErrorDto = components['schemas']['GithubPermissionsCheckFailedErrorDto'];
 export type GithubInstallationSummaryDto = components['schemas']['GithubInstallationSummaryDto'];
 export type GithubPendingApprovalDto = components['schemas']['GithubPendingApprovalDto'];
 export type GithubSetupInProgressDto = components['schemas']['GithubSetupInProgressDto'];
@@ -11346,6 +11385,24 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorMessageDto"];
                 };
             };
+            /** @description GitHub installation lacks write permissions required for automated fix PRs */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GithubWritePermissionsRequiredErrorDto"];
+                };
+            };
+            /** @description GitHub installation permissions could not be verified */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GithubPermissionsCheckFailedErrorDto"];
+                };
+            };
         };
     };
     postReadinessFixRetrigger: {
@@ -11389,6 +11446,24 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorMessageDto"];
                 };
             };
+            /** @description GitHub installation lacks write permissions required for automated fix PRs */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GithubWritePermissionsRequiredErrorDto"];
+                };
+            };
+            /** @description GitHub installation permissions could not be verified */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GithubPermissionsCheckFailedErrorDto"];
+                };
+            };
         };
     };
     putCursorPlatformKeyConsent: {