@thinkai/tai-api-contract 2.60.0 → 2.61.0-pr.901.b553abc8

package/src/generated/openapi.ts

@@ -1039,7 +1039,7 @@ export interface paths {
         put?: never;
         /**
          * Create GitHub App installation URL
-         * @description Creates a GitHub App installation URL scoped to the workspace and caller. Body is optional; when omitted, defaults to `/onboarding/integrations` return path. Optional `pickerSession` (from user OAuth org picker) recovers `returnPath` from the server-side picker snapshot when the multi-hop authorize→install flow should return to the page where OAuth started.
+         * @description Creates a GitHub App installation URL scoped to the workspace and caller. Default intent `connect` installs ThinkAI Platform Insights (read). Intent `enable_fixes` installs ThinkAI Platform Automations (write) for the Insights installation identified by `installationId`. Body is optional; when omitted, defaults to `/onboarding/integrations` return path. Optional `pickerSession` (from user OAuth org picker) recovers `returnPath` from the server-side picker snapshot when the multi-hop authorize→install flow should return to the page where OAuth started.
          */
         post: operations["postGithubInstallUrl"];
         delete?: never;
@@ -1048,6 +1048,46 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/workspaces/{workspaceId}/integrations/github/installations/{installationId}/automated-fixes/enable": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Enable automated fixes for a GitHub installation
+         * @description Workspace-level enable for automated fixes on an Insights (read) installation. If an Automations (write) installation is already linked, flips `automatedFixesEnabled` without reinstalling. Otherwise returns `outcome: needs_install` so the client can call install-url with intent=enable_fixes.
+         */
+        post: operations["postGithubAutomatedFixesEnable"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/workspaces/{workspaceId}/integrations/github/installations/{installationId}/automated-fixes": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Disable automated fixes for a GitHub installation
+         * @description Workspace-level disable. Clears `automatedFixesEnabled` but keeps the linked Automations write installation id so re-enable does not require reinstall. Does not uninstall the Automations app from GitHub.
+         */
+        delete: operations["deleteGithubAutomatedFixes"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/workspaces/{workspaceId}/integrations/github/user-authorize-url": {
         parameters: {
             query?: never;
@@ -2641,7 +2681,7 @@ export interface paths {
         put?: never;
         /**
          * Attempt silent ZenHR reconnect
-         * @description Attempts a silent token refresh and branch ping using stored ZenHR OAuth credentials. Returns `{ ok: true }` when the connection is restored without user interaction. Returns `{ ok: false, oauthRequired: true }` when stored credentials exist but refresh failed with an OAuth re-authorization error (e.g. `invalid_grant`); the SPA should start ZenHR OAuth next. Returns `502` for other upstream failures (same semantics as `GET .../integrations/zenhr/branches`).
+         * @description Attempts a silent token refresh and branch ping using stored ZenHR OAuth credentials. Returns `{ ok: true }` when the connection is restored without user interaction. Returns `{ ok: false, oauthRequired: true }` when stored credentials exist but refresh failed with an OAuth re-authorization error (e.g. `invalid_grant`); the SPA should start ZenHR OAuth next. Returns `502` for other upstream failures (same semantics as `GET .../integrations/zenhr/branches`). Returns `503` with `zenhr_sync_in_progress` when an HRIS sync or OAuth refresh is already in progress for this workspace (retry shortly).
          */
         post: operations["reconnectWorkspaceZenHr"];
         delete?: never;
@@ -2650,6 +2690,46 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/workspaces/{workspaceId}/integrations/zenhr/branches": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List ZenHR branches
+         * @description Lists ZenHR branches for the connected OAuth app so a workspace admin can pick one. Requires workspace admin role. Returns `503` with `zenhr_sync_in_progress` when an HRIS sync or OAuth refresh is already in progress (retry shortly).
+         */
+        get: operations["listWorkspaceZenHrBranches"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/workspaces/{workspaceId}/integrations/zenhr/branch": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        /**
+         * Save selected ZenHR branch
+         * @description Validates and persists the admin-selected ZenHR branch id on the workspace source. Requires workspace admin role. Returns `503` with `zenhr_sync_in_progress` when an HRIS sync or OAuth refresh is already in progress (retry shortly).
+         */
+        patch: operations["patchWorkspaceZenHrBranch"];
+        trace?: never;
+    };
     "/workspaces/{workspaceId}/hris/status": {
         parameters: {
             query?: never;
@@ -3058,6 +3138,7 @@ export interface components {
         };
         TestConnectionResponseDto: {
             success: boolean;
+            /** @description Machine-readable failure code when success=false (e.g. invalid_token, zenhr_sync_in_progress when ZenHR OAuth refresh is contended). */
             error?: string;
             /** @description Present when `executionToken` was included in the test request. `true` = key passed save-time validation (format + not-admin-key check). `false` = key failed validation (see `executionKeyError` for detail). `null` = `executionToken` was not provided. */
             executionKeyValid?: boolean | null;
@@ -4448,6 +4529,22 @@ export interface components {
              */
             granted?: "read" | "write" | "admin" | null;
         };
+        GithubWritePermissionsRequiredErrorDto: {
+            /** @enum {string} */
+            error: "github_write_permissions_required";
+            missingPermissions: components["schemas"]["GithubMissingPermissionDto"][];
+            /** @description GitHub installation settings URL to approve write permissions. */
+            manageUrl?: string | null;
+            /** @description Human-readable summary of the write permission upgrade. */
+            writeUpgradeMessage?: string | null;
+        };
+        GithubPermissionsCheckFailedErrorDto: {
+            /**
+             * @description GitHub installation permissions could not be verified (transient upstream failure).
+             * @enum {string}
+             */
+            error: "github_permissions_check_failed";
+        };
         GithubInstallationSummaryDto: {
             installationId: string;
             account: components["schemas"]["GithubAccountDto"];
@@ -4457,11 +4554,35 @@ export interface components {
             manageUrl?: string | null;
             /** Format: date-time */
             lastSyncedAt?: string | null;
-            /** @description True when this installation's granted permissions are below what the ThinkAI GitHub App currently requests. */
+            /** @description True when this installation lacks core read permissions required for connect and analysis. Alias for `!corePermissionsOk`. */
             permissionsUpgradeRequired: boolean;
+            /** @description True when installation grants read permissions for repository analysis (contents, metadata, pull requests, and members for org installs). */
+            corePermissionsOk: boolean;
+            /** @description True when automated fixes are enabled and the linked Automations (write) installation grants write permissions required for fix PRs. */
+            writePermissionsOk: boolean;
+            /** @description Alias for `!writePermissionsOk`. */
+            writePermissionsUpgradeRequired: boolean;
+            /** @description Core read permissions still needed for connect and analysis. */
             missingPermissions?: components["schemas"]["GithubMissingPermissionDto"][];
-            /** @description Human-readable summary for UI when permissionsUpgradeRequired is true. */
+            /** @description Write permissions still needed for automated fix PRs. */
+            missingWritePermissions?: components["schemas"]["GithubMissingPermissionDto"][];
+            /** @description Human-readable summary for UI when core permissions are missing. */
             upgradeMessage?: string | null;
+            /** @description Human-readable summary for UI when write permissions are missing. */
+            writeUpgradeMessage?: string | null;
+            /** @description True when this workspace has enabled automated fixes for this Insights (read) installation and linked a ThinkAI Platform Automations (write) installation. */
+            automatedFixesEnabled: boolean;
+            /** @description True when an Automations (write) GitHub App installation is linked. */
+            writeAppInstalled: boolean;
+            /** @description GitHub installation id for the Automations (write) app, when linked. */
+            writeInstallationId?: string | null;
+            /**
+             * Format: uri
+             * @description GitHub settings URL for the Automations (write) installation.
+             */
+            writeManageUrl?: string | null;
+            /** @description True when the Automations app is configured and automated fixes are not yet enabled for this installation (UI may show Enable automated fixes). */
+            canEnableAutomatedFixes: boolean;
         };
         GithubPendingApprovalDto: {
             /**
@@ -4617,8 +4738,18 @@ export interface components {
         GithubInstallationStatusDto: {
             installed: boolean;
             installations: components["schemas"]["GithubInstallationSummaryDto"][];
-            /** @description True if any connected installation is under-permissioned. */
+            /** @description True if any connected installation lacks core read permissions. Alias for `!corePermissionsOk`. */
             permissionsUpgradeRequired: boolean;
+            /** @description True when every connected installation grants core read permissions. */
+            corePermissionsOk: boolean;
+            /** @description True when every connected installation grants write permissions for automated fixes. */
+            writePermissionsOk: boolean;
+            /** @description True when any connected installation lacks write permissions for automated fixes. */
+            writePermissionsUpgradeRequired: boolean;
+            /** @description Aggregated write permissions missing on installations that lack write access. */
+            missingWritePermissions?: components["schemas"]["GithubMissingPermissionDto"][];
+            /** @description Human-readable summary when write permissions are missing. */
+            writeUpgradeMessage?: string | null;
             /** @description Present when an org admin must approve the GitHub App install request. */
             pendingApproval?: components["schemas"]["GithubPendingApprovalDto"] | null;
             /** @description Present when GitHub connect was started but not completed (install OAuth state or account-picker session still active). Omitted when pendingApproval is set. */
@@ -4658,12 +4789,28 @@ export interface components {
              * @description SPA origin to redirect back to after OAuth; must match server spaOrigins allowlist.
              */
             spaOrigin?: string;
+            /**
+             * @description connect installs ThinkAI Platform Insights (read). enable_fixes installs ThinkAI Platform Automations (write) for the Insights installation identified by installationId.
+             * @enum {string}
+             */
+            intent?: "connect" | "enable_fixes";
+            /** @description Insights (read) installation id required when intent is enable_fixes. */
+            installationId?: string;
         };
         GithubInstallUrlResponseDto: {
             /** Format: uri */
             url: string;
             state: string;
         };
+        GithubAutomatedFixesEnableResponseDto: {
+            /**
+             * @description enabled — write app already linked and flag flipped; needs_install — client should call install-url with intent=enable_fixes.
+             * @enum {string}
+             */
+            outcome: "enabled" | "needs_install";
+            /** @description Present when outcome is enabled. */
+            status?: components["schemas"]["GithubInstallationStatusDto"];
+        };
         GithubUserAuthorizeUrlRequestDto: {
             returnPath?: string;
             /**
@@ -5782,6 +5929,19 @@ export interface components {
              */
             error?: "zenhr_oauth_required";
         };
+        ZenHrBranchDto: {
+            id: string;
+            name: string;
+        };
+        ZenHrBranchesListDto: {
+            branches: components["schemas"]["ZenHrBranchDto"][];
+        };
+        ZenHrBranchSelectionDto: {
+            branchId: string;
+        };
+        ZenHrBranchSelectionResultDto: {
+            branchId: string;
+        };
         HrisTriggerSyncResultDto: {
             /** @enum {string} */
             status: "ok" | "skipped" | "error" | "partial";
@@ -5945,6 +6105,20 @@ export interface components {
                 "application/json": components["schemas"]["ErrorMessageDto"];
             };
         };
+        /** @description HRIS sync or ZenHR OAuth refresh already in progress for this workspace */
+        ZenHrSyncInProgress: {
+            headers: {
+                [name: string]: unknown;
+            };
+            content: {
+                /**
+                 * @example {
+                 *       "error": "zenhr_sync_in_progress"
+                 *     }
+                 */
+                "application/json": components["schemas"]["ErrorMessageDto"];
+            };
+        };
     };
     parameters: {
         WorkspaceId: string;
@@ -6146,6 +6320,8 @@ export type RepoEligibilityOverridesDto = components['schemas']['RepoEligibility
 export type WorkspaceRepoEligibilityDto = components['schemas']['WorkspaceRepoEligibilityDto'];
 export type RepoEligibilityLimitsDto = components['schemas']['RepoEligibilityLimitsDto'];
 export type GithubMissingPermissionDto = components['schemas']['GithubMissingPermissionDto'];
+export type GithubWritePermissionsRequiredErrorDto = components['schemas']['GithubWritePermissionsRequiredErrorDto'];
+export type GithubPermissionsCheckFailedErrorDto = components['schemas']['GithubPermissionsCheckFailedErrorDto'];
 export type GithubInstallationSummaryDto = components['schemas']['GithubInstallationSummaryDto'];
 export type GithubPendingApprovalDto = components['schemas']['GithubPendingApprovalDto'];
 export type GithubSetupInProgressDto = components['schemas']['GithubSetupInProgressDto'];
@@ -6161,6 +6337,7 @@ export type GithubActionsEnableResponseDto = components['schemas']['GithubAction
 export type GithubInstallationStatusDto = components['schemas']['GithubInstallationStatusDto'];
 export type GithubInstallUrlRequestDto = components['schemas']['GithubInstallUrlRequestDto'];
 export type GithubInstallUrlResponseDto = components['schemas']['GithubInstallUrlResponseDto'];
+export type GithubAutomatedFixesEnableResponseDto = components['schemas']['GithubAutomatedFixesEnableResponseDto'];
 export type GithubUserAuthorizeUrlRequestDto = components['schemas']['GithubUserAuthorizeUrlRequestDto'];
 export type GithubUserAuthorizeUrlResponseDto = components['schemas']['GithubUserAuthorizeUrlResponseDto'];
 export type GithubConnectableAccountDto = components['schemas']['GithubConnectableAccountDto'];
@@ -6277,6 +6454,10 @@ export type WorkspaceAbsenceListDto = components['schemas']['WorkspaceAbsenceLis
 export type HrisSyncStatusDto = components['schemas']['HrisSyncStatusDto'];
 export type HrisSyncStatusListDto = components['schemas']['HrisSyncStatusListDto'];
 export type ZenHrReconnectResultDto = components['schemas']['ZenHrReconnectResultDto'];
+export type ZenHrBranchDto = components['schemas']['ZenHrBranchDto'];
+export type ZenHrBranchesListDto = components['schemas']['ZenHrBranchesListDto'];
+export type ZenHrBranchSelectionDto = components['schemas']['ZenHrBranchSelectionDto'];
+export type ZenHrBranchSelectionResultDto = components['schemas']['ZenHrBranchSelectionResultDto'];
 export type HrisTriggerSyncResultDto = components['schemas']['HrisTriggerSyncResultDto'];
 export type HrisProviderSyncResultDto = components['schemas']['HrisProviderSyncResultDto'];
 export type ActivityLogPageDto = components['schemas']['ActivityLogPageDto'];
@@ -6284,6 +6465,7 @@ export type ReadinessTokenUsageRowDto = components['schemas']['ReadinessTokenUsa
 export type ReadinessTokenUsageByDimensionRowDto = components['schemas']['ReadinessTokenUsageByDimensionRowDto'];
 export type ResponseUnauthorized = components['responses']['Unauthorized'];
 export type ResponseForbidden = components['responses']['Forbidden'];
+export type ResponseZenHrSyncInProgress = components['responses']['ZenHrSyncInProgress'];
 export type ParameterWorkspaceId = components['parameters']['WorkspaceId'];
 export type ParameterRepoId = components['parameters']['RepoId'];
 export type ParameterProviderSlug = components['parameters']['ProviderSlug'];
@@ -9259,6 +9441,90 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorMessageDto"];
                 };
             };
+            /** @description Requested GitHub App is not configured */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
+    postGithubAutomatedFixesEnable: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+                installationId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Enable result */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GithubAutomatedFixesEnableResponseDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            /** @description Workspace or installation not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Automations GitHub App not configured */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
+    deleteGithubAutomatedFixes: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+                installationId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Automated fixes disabled (or already disabled) */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            /** @description Workspace or installation not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
         };
     };
     postGithubUserAuthorizeUrl: {
@@ -11915,6 +12181,24 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorMessageDto"];
                 };
             };
+            /** @description GitHub installation lacks write permissions required for automated fix PRs */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GithubWritePermissionsRequiredErrorDto"];
+                };
+            };
+            /** @description GitHub installation permissions could not be verified */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GithubPermissionsCheckFailedErrorDto"];
+                };
+            };
         };
     };
     postReadinessFixRetrigger: {
@@ -11958,6 +12242,24 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorMessageDto"];
                 };
             };
+            /** @description GitHub installation lacks write permissions required for automated fix PRs */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GithubWritePermissionsRequiredErrorDto"];
+                };
+            };
+            /** @description GitHub installation permissions could not be verified */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GithubPermissionsCheckFailedErrorDto"];
+                };
+            };
         };
     };
     putCursorPlatformKeyConsent: {
@@ -13092,6 +13394,126 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorMessageDto"];
                 };
             };
+            503: components["responses"]["ZenHrSyncInProgress"];
+        };
+    };
+    listWorkspaceZenHrBranches: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Branch list */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ZenHrBranchesListDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            /** @description ZenHR is not connected for this workspace */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "zenhr_not_connected"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description ZenHR branch list unavailable */
+            502: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "zenhr_branches_unavailable"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            503: components["responses"]["ZenHrSyncInProgress"];
+        };
+    };
+    patchWorkspaceZenHrBranch: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ZenHrBranchSelectionDto"];
+            };
+        };
+        responses: {
+            /** @description Branch saved */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ZenHrBranchSelectionResultDto"];
+                };
+            };
+            /** @description Invalid body or unknown branch id */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            /** @description ZenHR is not connected for this workspace */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "zenhr_not_connected"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description ZenHR branch validation unavailable */
+            502: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "zenhr_branches_unavailable"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            503: components["responses"]["ZenHrSyncInProgress"];
         };
     };
     getHrisSyncStatus: {