@thinkai/tai-api-contract 2.67.0 → 2.68.0-pr.945.8ba31b6f

package/dist/generated/openapi.d.ts

@@ -2889,6 +2889,86 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/workspaces/{workspaceId}/integrations/zelt/authorize-url": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Start Zelt OAuth authorize
+         * @description Mints OAuth state with pending Client ID/Secret and returns the Zelt authorize URL. Workspace **admin** only. No branch selection (company-scoped partner API).
+         */
+        post: operations["postWorkspaceZeltAuthorizeUrl"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/workspaces/{workspaceId}/integrations/zelt/reauthorize-url": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Start Zelt OAuth reauthorize from stored credentials
+         * @description Starts Zelt OAuth using credentials already stored on the workspace source (no Client Secret in the request body). Workspace **admin** only.
+         */
+        post: operations["postWorkspaceZeltReauthorizeUrl"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/workspaces/{workspaceId}/integrations/zelt/reconnect": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Attempt silent Zelt reconnect
+         * @description Attempts a silent token refresh and users ping using stored Zelt OAuth credentials. Returns `{ ok: true }` when the connection is restored without user interaction. Returns `{ ok: false, oauthRequired: true }` when stored credentials exist but refresh failed with an OAuth re-authorization error; the SPA should start Zelt OAuth next. Returns `503` with `zelt_sync_in_progress` when an HRIS sync or OAuth refresh is already in progress for this workspace (retry shortly).
+         */
+        post: operations["reconnectWorkspaceZelt"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/integrations/zelt/oauth/callback": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Zelt OAuth callback
+         * @description Public browser redirect target after Zelt authorization. Exchanges the code, stores the encrypted `zelt` workspace source, emits `integrations.zelt.added` on first connect, and redirects the SPA with `?zelt=connected|error`.
+         */
+        get: operations["getZeltOauthCallback"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/workspaces/{workspaceId}/integrations/zenhr/reconnect": {
         parameters: {
             query?: never;
@@ -6111,7 +6191,7 @@ export interface components {
          * @description Type of workspace lifecycle event.
          * @enum {string}
          */
-        ActivityLogEventTypeDto: "repo.added" | "repo.removed" | "repo.readded" | "integration.github.added" | "integration.github.updated" | "integration.github.removed" | "integration.github.permissions_changed" | "integration.github.repo_added" | "integration.github.repo_removed" | "fix.requested" | "fix.generating" | "fix.pr_created" | "fix.merged" | "fix.failed" | "readiness.scan_started" | "readiness.scan_completed" | "readiness.scan_failed" | "readiness.scan_partial" | "integrations.agent_execution.provider_changed" | "integrations.repo_eligibility.overrides_changed" | "integrations.repo_eligibility.languages_refresh_requested" | "integrations.cursor.platform_key_enabled" | "integrations.cursor.platform_key_disabled" | "member.invited" | "member.role_changed" | "member.removed" | "hris.personio.sync_started" | "hris.personio.sync_completed" | "hris.personio.sync_failed" | "hris.zenhr.sync_started" | "hris.zenhr.sync_completed" | "hris.zenhr.sync_failed" | "hris.sync_started" | "hris.sync_completed" | "hris.sync_failed" | "repo.sync_skipped" | "integrations.cursor.execution_key.added" | "integrations.cursor.execution_key.updated" | "integrations.cursor.execution_key.removed" | "integrations.cursor.execution_key.check_failed" | "integrations.cursor.admin_key.added" | "integrations.cursor.admin_key.updated" | "integrations.cursor.admin_key.removed" | "integrations.claude.execution_key.added" | "integrations.claude.execution_key.updated" | "integrations.claude.execution_key.removed" | "integrations.claude.execution_key.check_failed" | "integrations.claude.admin_key.added" | "integrations.claude.admin_key.updated" | "integrations.claude.admin_key.removed" | "integrations.claude.analytics_key.added" | "integrations.claude.analytics_key.updated" | "integrations.claude.analytics_key.removed" | "readiness.scan_precheck_failed" | "productivity.ingest.completed" | "productivity.ingest.failed" | "productivity.ingest.skipped" | "productivity.ingest.repo_skipped" | "productivity.ingest.coverage_gap_detected" | "integrations.newrelic.added" | "integrations.newrelic.removed" | "integrations.newrelic.sync_completed" | "integrations.newrelic.sync_failed" | "integrations.prometheus.added" | "integrations.prometheus.removed" | "integrations.prometheus.sync_completed" | "integrations.prometheus.sync_failed" | "integrations.grafana.added" | "integrations.grafana.removed" | "integrations.grafana.sync_completed" | "integrations.grafana.sync_failed";
+        ActivityLogEventTypeDto: "repo.added" | "repo.removed" | "repo.readded" | "integration.github.added" | "integration.github.updated" | "integration.github.removed" | "integration.github.permissions_changed" | "integration.github.repo_added" | "integration.github.repo_removed" | "fix.requested" | "fix.generating" | "fix.pr_created" | "fix.merged" | "fix.failed" | "readiness.scan_started" | "readiness.scan_completed" | "readiness.scan_failed" | "readiness.scan_partial" | "integrations.agent_execution.provider_changed" | "integrations.repo_eligibility.overrides_changed" | "integrations.repo_eligibility.languages_refresh_requested" | "integrations.cursor.platform_key_enabled" | "integrations.cursor.platform_key_disabled" | "member.invited" | "member.role_changed" | "member.removed" | "hris.personio.sync_started" | "hris.personio.sync_completed" | "hris.personio.sync_failed" | "hris.zenhr.sync_started" | "hris.zenhr.sync_completed" | "hris.zenhr.sync_failed" | "hris.zelt.sync_started" | "hris.zelt.sync_completed" | "hris.zelt.sync_failed" | "hris.sync_started" | "hris.sync_completed" | "hris.sync_failed" | "repo.sync_skipped" | "integrations.cursor.execution_key.added" | "integrations.cursor.execution_key.updated" | "integrations.cursor.execution_key.removed" | "integrations.cursor.execution_key.check_failed" | "integrations.cursor.admin_key.added" | "integrations.cursor.admin_key.updated" | "integrations.cursor.admin_key.removed" | "integrations.claude.execution_key.added" | "integrations.claude.execution_key.updated" | "integrations.claude.execution_key.removed" | "integrations.claude.execution_key.check_failed" | "integrations.claude.admin_key.added" | "integrations.claude.admin_key.updated" | "integrations.claude.admin_key.removed" | "integrations.claude.analytics_key.added" | "integrations.claude.analytics_key.updated" | "integrations.claude.analytics_key.removed" | "readiness.scan_precheck_failed" | "productivity.ingest.completed" | "productivity.ingest.failed" | "productivity.ingest.skipped" | "productivity.ingest.repo_skipped" | "productivity.ingest.coverage_gap_detected" | "integrations.newrelic.added" | "integrations.newrelic.removed" | "integrations.newrelic.sync_completed" | "integrations.newrelic.sync_failed" | "integrations.prometheus.added" | "integrations.prometheus.removed" | "integrations.prometheus.sync_completed" | "integrations.prometheus.sync_failed" | "integrations.grafana.added" | "integrations.grafana.removed" | "integrations.grafana.sync_completed" | "integrations.grafana.sync_failed" | "integrations.zelt.added" | "integrations.zelt.removed";
         ActivityLogActorDto: {
             /** Format: uuid */
             userId: string;
@@ -6204,6 +6284,34 @@ export interface components {
              */
             error?: "zenhr_oauth_required";
         };
+        ZeltAuthorizeUrlRequestDto: {
+            clientId: string;
+            clientSecret: string;
+            /** @description Defaults to `https://go.zelt.app` when omitted. */
+            baseUrl?: string;
+            /** @description Optional OAuth `app` query param when required by the tenant. */
+            appName?: string;
+            /** @description SPA path to return to after OAuth (must start with `/`). */
+            returnPath?: string;
+        };
+        ZeltReauthorizeUrlRequestDto: {
+            returnPath?: string;
+        };
+        ZeltAuthorizeUrlResponseDto: {
+            /** Format: uri */
+            url: string;
+            state: string;
+        };
+        ZeltReconnectResultDto: {
+            ok: boolean;
+            /** @description When true with ok=false, stored credentials exist but refresh failed with an OAuth re-authorization error; the SPA should start Zelt OAuth next. */
+            oauthRequired?: boolean;
+            /**
+             * @description Machine-readable code when ok=false and oauthRequired=true.
+             * @enum {string}
+             */
+            error?: "zelt_oauth_required";
+        };
         ZenHrBranchDto: {
             id: string;
             name: string;
@@ -6982,6 +7090,10 @@ export type WorkspaceAbsenceListDto = components['schemas']['WorkspaceAbsenceLis
 export type HrisSyncStatusDto = components['schemas']['HrisSyncStatusDto'];
 export type HrisSyncStatusListDto = components['schemas']['HrisSyncStatusListDto'];
 export type ZenHrReconnectResultDto = components['schemas']['ZenHrReconnectResultDto'];
+export type ZeltAuthorizeUrlRequestDto = components['schemas']['ZeltAuthorizeUrlRequestDto'];
+export type ZeltReauthorizeUrlRequestDto = components['schemas']['ZeltReauthorizeUrlRequestDto'];
+export type ZeltAuthorizeUrlResponseDto = components['schemas']['ZeltAuthorizeUrlResponseDto'];
+export type ZeltReconnectResultDto = components['schemas']['ZeltReconnectResultDto'];
 export type ZenHrBranchDto = components['schemas']['ZenHrBranchDto'];
 export type ZenHrBranchesListDto = components['schemas']['ZenHrBranchesListDto'];
 export type ZenHrBranchSelectionDto = components['schemas']['ZenHrBranchSelectionDto'];
@@ -14528,6 +14640,216 @@ export interface operations {
             403: components["responses"]["Forbidden"];
         };
     };
+    postWorkspaceZeltAuthorizeUrl: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ZeltAuthorizeUrlRequestDto"];
+            };
+        };
+        responses: {
+            /** @description Authorize URL and opaque state */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "url": "https://go.zelt.app/oauth/authorize?client_id=example&redirect_uri=https%3A%2F%2Fapi.example.com%2Fintegrations%2Fzelt%2Foauth%2Fcallback&response_type=code&state=example-state&scope=user.basicInfo%3Aread",
+                     *       "state": "example-state"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ZeltAuthorizeUrlResponseDto"];
+                };
+            };
+            /** @description Invalid request body or return path */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            /** @description API public origin is not configured */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "api_public_origin_not_configured"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
+    postWorkspaceZeltReauthorizeUrl: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["ZeltReauthorizeUrlRequestDto"];
+            };
+        };
+        responses: {
+            /** @description Authorize URL and opaque state */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ZeltAuthorizeUrlResponseDto"];
+                };
+            };
+            /** @description Invalid return path */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            /** @description Zelt is not connected for this workspace */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "zelt_not_connected"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description API public origin is not configured */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "api_public_origin_not_configured"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
+    reconnectWorkspaceZelt: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Silent reconnect succeeded or OAuth is required */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ZeltReconnectResultDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            /** @description Zelt is not connected for this workspace */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "zelt_not_connected"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Zelt refresh or users ping failed for a non-OAuth reason */
+            502: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "zelt_reconnect_failed"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description HRIS sync/OAuth refresh already in progress */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "zelt_sync_in_progress"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
+    getZeltOauthCallback: {
+        parameters: {
+            query: {
+                code?: string;
+                state: string;
+                error?: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Redirect to SPA return path with zelt status query params */
+            302: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     reconnectWorkspaceZenHr: {
         parameters: {
             query?: never;