@thinkai/tai-api-contract 2.65.0 → 2.67.0-pr.934.5215788b

package/dist/generated/openapi.d.ts

@@ -962,6 +962,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/workspaces/{workspaceId}/insights/recommendations-page/bundle": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Insights recommendations — full page bundle
+         * @description Single HTTP round-trip for `/insights-recommendations`. Returns the same section payloads as the seven per-resource GETs (`verdict-summary` through `recommendations`) nested under one response with a shared `_meta` envelope. Section objects omit per-resource `_meta`; use the top-level `_meta.syncedAt` for the page.
+         */
+        get: operations["getInsightsRecommendationsPageBundle"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/workspaces/{workspaceId}/insights/recommendations-page/verdict-summary": {
         parameters: {
             query?: never;
@@ -4744,6 +4764,15 @@ export interface components {
              */
             error: "github_permissions_check_failed";
         };
+        /**
+         * @description Whether a GitHub Code security product is enabled and readable for sampled repos. `partial` means mixed enablement across the sample; `unknown` when not probed or grants missing.
+         * @enum {string}
+         */
+        GithubProductSettingStatus: "ok" | "not_enabled" | "partial" | "forbidden" | "unknown";
+        GithubProductSettingsDto: {
+            dependabotAlerts: components["schemas"]["GithubProductSettingStatus"];
+            secretScanning: components["schemas"]["GithubProductSettingStatus"];
+        };
         GithubInstallationSummaryDto: {
             installationId: string;
             account: components["schemas"]["GithubAccountDto"];
@@ -4757,6 +4786,20 @@ export interface components {
             permissionsUpgradeRequired: boolean;
             /** @description True when installation grants read permissions for repository analysis (contents, metadata, pull requests, and members for org installs). */
             corePermissionsOk: boolean;
+            /** @description True when installation grants Vulnerability alerts and Secret scanning alerts read for SDLC security metrics. */
+            securityPermissionsOk: boolean;
+            /** @description True when installation grants financial/operational SDLC metric permissions (Actions, Deployments, and org Administration / Copilot seat reads for organization installs). */
+            financialPermissionsOk: boolean;
+            /** @description Security alert permissions still needed for SDLC security metrics. */
+            missingSecurityPermissions?: components["schemas"]["GithubMissingPermissionDto"][];
+            /** @description Financial/operational permissions still needed for SDLC financial metrics. */
+            missingFinancialPermissions?: components["schemas"]["GithubMissingPermissionDto"][];
+            /** @description Human-readable summary when security App permissions are missing. */
+            securityUpgradeMessage?: string | null;
+            /** @description Human-readable summary when financial App permissions are missing. */
+            financialUpgradeMessage?: string | null;
+            /** @description Dependabot alerts and secret scanning enablement on sampled repos (throttled probe). Omitted when security App grants are missing or the probe has not run. */
+            githubProductSettings?: components["schemas"]["GithubProductSettingsDto"] | null;
             /** @description True when automated fixes are enabled and the linked Automations (write) installation grants write permissions required for fix PRs. */
             writePermissionsOk: boolean;
             /** @description Alias for `!writePermissionsOk`. */
@@ -4941,6 +4984,20 @@ export interface components {
             permissionsUpgradeRequired: boolean;
             /** @description True when every connected installation grants core read permissions. */
             corePermissionsOk: boolean;
+            /** @description True when every connected installation grants security alert read permissions. */
+            securityPermissionsOk: boolean;
+            /** @description True when every connected installation grants financial/operational read permissions. */
+            financialPermissionsOk: boolean;
+            /** @description Aggregated security permissions missing on installations with security gaps. */
+            missingSecurityPermissions?: components["schemas"]["GithubMissingPermissionDto"][];
+            /** @description Aggregated financial permissions missing on installations with financial gaps. */
+            missingFinancialPermissions?: components["schemas"]["GithubMissingPermissionDto"][];
+            /** @description Human-readable summary when security App permissions are missing. */
+            securityUpgradeMessage?: string | null;
+            /** @description Human-readable summary when financial App permissions are missing. */
+            financialUpgradeMessage?: string | null;
+            /** @description Workspace-wide Code security product status reduced from installations. */
+            githubProductSettings?: components["schemas"]["GithubProductSettingsDto"] | null;
             /** @description True when every connected installation grants write permissions for automated fixes. */
             writePermissionsOk: boolean;
             /** @description True when any connected installation lacks write permissions for automated fixes. */
@@ -6524,6 +6581,19 @@ export interface components {
             items: components["schemas"]["InsightsRecommendationDto"][];
             _meta: components["schemas"]["InsightsResponseMeta"];
         };
+        InsightsRecommendationsPageBundleRecommendations: {
+            items: components["schemas"]["InsightsRecommendationDto"][];
+        };
+        InsightsRecommendationsPageBundleResponse: {
+            verdictSummary: components["schemas"]["InsightsRecommendationsVerdictSummary"];
+            roiQuadrant: components["schemas"]["InsightsRecommendationsRoiQuadrant"];
+            velocityQuality: components["schemas"]["InsightsRecommendationsVelocityQuality"];
+            reviewPipeline: components["schemas"]["InsightsRecommendationsReviewPipeline"];
+            costPerPr: components["schemas"]["InsightsRecommendationsCostPerPr"];
+            adoptionGap: components["schemas"]["InsightsRecommendationsAdoptionGap"];
+            recommendations: components["schemas"]["InsightsRecommendationsPageBundleRecommendations"];
+            _meta: components["schemas"]["InsightsResponseMeta"];
+        };
     };
     responses: {
         /** @description Missing or invalid bearer token */
@@ -6777,6 +6847,8 @@ export type RepoEligibilityLimitsDto = components['schemas']['RepoEligibilityLim
 export type GithubMissingPermissionDto = components['schemas']['GithubMissingPermissionDto'];
 export type GithubWritePermissionsRequiredErrorDto = components['schemas']['GithubWritePermissionsRequiredErrorDto'];
 export type GithubPermissionsCheckFailedErrorDto = components['schemas']['GithubPermissionsCheckFailedErrorDto'];
+export type GithubProductSettingStatus = components['schemas']['GithubProductSettingStatus'];
+export type GithubProductSettingsDto = components['schemas']['GithubProductSettingsDto'];
 export type GithubInstallationSummaryDto = components['schemas']['GithubInstallationSummaryDto'];
 export type GithubPendingApprovalDto = components['schemas']['GithubPendingApprovalDto'];
 export type GithubSetupInProgressDto = components['schemas']['GithubSetupInProgressDto'];
@@ -6960,6 +7032,8 @@ export type InsightsEvidenceChip = components['schemas']['InsightsEvidenceChip']
 export type InsightsRecommendationEvidenceGroup = components['schemas']['InsightsRecommendationEvidenceGroup'];
 export type InsightsRecommendationDto = components['schemas']['InsightsRecommendationDto'];
 export type InsightsRecommendationsListResponse = components['schemas']['InsightsRecommendationsListResponse'];
+export type InsightsRecommendationsPageBundleRecommendations = components['schemas']['InsightsRecommendationsPageBundleRecommendations'];
+export type InsightsRecommendationsPageBundleResponse = components['schemas']['InsightsRecommendationsPageBundleResponse'];
 export type ResponseUnauthorized = components['responses']['Unauthorized'];
 export type ResponseForbidden = components['responses']['Forbidden'];
 export type ResponseZenHrSyncInProgress = components['responses']['ZenHrSyncInProgress'];
@@ -9680,6 +9754,64 @@ export interface operations {
             };
         };
     };
+    getInsightsRecommendationsPageBundle: {
+        parameters: {
+            query: {
+                /** @description Org-chart department ids (repeat param or comma-separated). Empty/omitted = all departments. */
+                departments?: components["parameters"]["InsightsRecommendationsDepartments"];
+                /** @description Org-chart team ids (repeat param or comma-separated). Empty/omitted = all teams in department scope. */
+                teams?: components["parameters"]["InsightsRecommendationsTeams"];
+                /** @description Inclusive window start (`YYYY-MM-DD`). Required with `dateTo`. Maps to Measure day-mode custom range (`from`/`to`). Max span 180 days. */
+                dateFrom: components["parameters"]["InsightsRecommendationsDateFrom"];
+                /** @description Inclusive window end (`YYYY-MM-DD`). Required with `dateFrom`. */
+                dateTo: components["parameters"]["InsightsRecommendationsDateTo"];
+                /** @description AI provider ids (e.g. `cursor`, `copilot`). Empty/omitted = all configured providers. */
+                provider?: components["parameters"]["InsightsRecommendationsProvider"];
+                /** @description Include contributors / AI rows not mapped to a team. */
+                includeUnmapped?: components["parameters"]["InsightsRecommendationsIncludeUnmapped"];
+                /** @description Include bot accounts in PR/CI stats. */
+                includeBots?: components["parameters"]["InsightsRecommendationsIncludeBots"];
+            };
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description All recommendations-page sections with shared `_meta.isMock=false` */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["InsightsRecommendationsPageBundleResponse"];
+                };
+            };
+            /** @description Invalid filter or date range */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** @example invalid_query */
+                        error: string;
+                    };
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            /** @description Workspace does not exist or malformed workspaceId */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     getInsightsRecommendationsVerdictSummary: {
         parameters: {
             query: {
@@ -10337,8 +10469,10 @@ export interface operations {
             query?: {
                 /** @description When true, bypass `tai_workspace_vcs_repos_cache` and re-fetch from GitHub. When productivity backfill phase is `complete`, also triggers inline `on_demand` ingest for the current UTC week (gap-fill only when metrics are missing). Response includes `productivityRefreshInProgress` while the workspace advisory lock is held. */
                 refresh?: boolean;
-                /** @description When true, re-fetch GitHub App and installation permission metadata (used by the login permission gate after the user approves on GitHub). */
+                /** @description When true, re-fetch GitHub App and installation permission metadata (used by the login permission gate after the user approves on GitHub). Clears App-permission and product-settings caches so the next `productSettingsRefresh` re-probes. Does not itself call alert-list APIs; use `productSettingsRefresh` for that. */
                 permissionsRefresh?: boolean;
+                /** @description When true, probe Dependabot alerts and secret scanning enablement on a small sample of connected repositories (only when security App grants are present). Without this flag, status returns previously cached `githubProductSettings` only (no live probe). Results are cached server-side for several minutes. */
+                productSettingsRefresh?: boolean;
                 /** @description Page size for the nested installation repo list (default 25, max 100). */
                 repoLimit?: components["parameters"]["GithubRepoLimit"];
                 /** @description Zero-based offset into the merged installation repo list. */