@thinkai/tai-api-contract 2.94.0 → 2.96.0

package/src/generated/openapi.ts

@@ -596,7 +596,7 @@ export interface paths {
         /**
          * Test one source connection (does not persist)
          * @description Verify a source's credentials without persisting them. Always returns 200 — upstream auth, rate-limit, and network failures surface as `{ success: false, error }` so the SPA can render an inline error.
-         *     Registered AI tools are verified end-to-end: `cursor` (Admin API key in `token` and/or execution key in `executionToken`; at least one must be present). Execution-only tests validate the key against the Cloud Agents API (`GET /v1/me`, with `GET /v1/models` fallback for service accounts) and return `executionKeyValid` / `executionKeyError` without calling the Admin API on `token`. Malformed cursor entries return `400` with `code: invalid_source_entry`. `claude` (Anthropic Admin API at `https://api.anthropic.com`, `X-Api-Key` with an organization Admin API key `sk-ant-admin...`). `sonarqube` (`baseUrl`, `token`, `projectKey` required; optional `branch`) calls `GET {baseUrl}/api/measures/component` with a Bearer token. Other types report `{ success: false, error: "unsupported_type" }`. Documented `error` codes for AI tool verifiers: `invalid_token`, `rate_limited`, `network_error`.
+         *     Registered AI tools are verified end-to-end: `cursor` (Admin API key in `token` and/or execution key in `executionToken`; at least one must be present). Execution-only tests validate the key against the Cloud Agents API (`GET /v1/me`, with `GET /v1/models` fallback for service accounts) and return `executionKeyValid` / `executionKeyError` without calling the Admin API on `token`. Malformed cursor entries return `400` with `code: invalid_source_entry`. `claude` (Anthropic Admin API at `https://api.anthropic.com`, `X-Api-Key` with an organization Admin API key `sk-ant-admin...`). `sonarqube` (`baseUrl`, `token`, `projectKey` required; optional `branch`) calls `GET {baseUrl}/api/measures/component` with a Bearer token. Other types report `{ success: false, error: "unsupported_type" }`. Documented `error` codes for AI tool verifiers: `invalid_token`, `rate_limited`, `network_error`. `jira` (`baseUrl`, `email`, `apiToken` or legacy `api_key`) calls `GET {baseUrl}/rest/api/3/myself` with Basic auth.
          *     **Typical outcomes:** Malformed body, missing `type`, invalid `type`, or missing required fields for the declared type → `400` with `{ error: "..." }`. Well-formed body with bad credentials or unreachable service → `200` with `{ success: false, error: "..." }`.
          */
         post: operations["postTenantSourceTest"];
@@ -606,6 +606,44 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/workspaces/{workspaceId}/integrations/sonarqube/repo-mappings": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** List SonarQube repo to project key mappings */
+        get: operations["listSonarQubeRepoMappings"];
+        /**
+         * Replace SonarQube repo mappings (full list)
+         * @description Replaces all SonarQube repo→projectKey rows for the workspace. Validate rows in the UI before save; optional `POST .../validate` probes keys with the workspace token.
+         */
+        put: operations["putSonarQubeRepoMappings"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/workspaces/{workspaceId}/integrations/sonarqube/repo-mappings/validate": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Validate SonarQube mapping rows against the workspace token */
+        post: operations["validateSonarQubeRepoMappings"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/workspaces/{workspaceId}/sources/{type}": {
         parameters: {
             query?: never;
@@ -2133,8 +2171,8 @@ export interface paths {
         /**
          * Export repository readiness issues as Markdown
          * @description Download outstanding readiness issues for one repository as a Markdown (`.md`) attachment for local IDE workflows. Reuses the same scorecard as `GET .../readiness/repos/{repoId}` (issues plus optional remediation from `criteriaDetails`).
-         *     The Markdown is grouped **by readiness dimension** (catalog order). Each dimension section lists matching issues sorted by severity. Issue sections include severity in the heading and do not emit per-issue `Fix status` / `Fix tier` lines. Default filter is outstanding issues (`open` + `pr-pending`). Optional query params narrow the set. When `includeCriteria` is true (default), each issue includes a Remediation section from the matching criterion when available. Timestamps use the optional `timeZone` query (IANA; default `UTC`).
-         *     The response sets `Content-Disposition: attachment` with filename `readiness-issues-{providerSlug}-{date}.md`.
+         *     The Markdown is grouped **by readiness dimension** (catalog order). Each dimension section lists matching issues sorted by severity. Issue sections include severity in the heading, export format version, issue/rubric metadata, agent workflow, and agent instructions from the rubric when available. Default filter is outstanding issues (`open` + `pr-pending`). Optional query params narrow the set. When `includeCriteria` is true (default), each issue also includes criterion summary/status in metadata and remediation from `criteriaDetails` when it differs from agent instructions. Agent workflow and rubric agent instructions are emitted regardless of `includeCriteria`. Timestamps use the optional `timeZone` query (IANA; default `UTC`).
+         *     The response sets `Content-Disposition: attachment` with filename `readiness-remediations-{providerSlug}-{date}.md`.
          */
         get: operations["exportReadinessRepoIssuesMarkdown"];
         put?: never;
@@ -3991,17 +4029,17 @@ export interface components {
             orgId?: string;
             orgName?: string;
         };
-        /** @description SonarQube source for workspace sources PUT and connection test. Every field is re-submitted on each save; `token` is never round-tripped from `GET` workspace config. */
+        /** @description SonarQube source for workspace sources PUT and connection test. Credentials only — per-repository Sonar project keys are configured via repo mappings. Every field is re-submitted on each save; `token` is never round-tripped from `GET` workspace config. */
         SonarQubeSourceDto: {
             /** @enum {string} */
             type: "sonarqube";
-            /** @description SonarQube server URL, e.g. https://sonarqube.example.com. */
+            /** @description SonarQube server URL, e.g. https://sonarcloud.io or https://sonarqube.example.com. */
             baseUrl: string;
-            /** @description User or project analysis token (write-only on PUT). Literal tokens are encrypted at rest. Operator-managed secrets may use an `env:VAR` reference (resolved at runtime / batch poll), matching other non-AI-tool sources. */
+            /** @description User or project analysis token (write-only on PUT). Literal tokens are encrypted at rest. Operator-managed secrets may use an `env:VAR` reference (resolved at runtime), matching other non-AI-tool sources. */
             token: string;
-            /** @description SonarQube project key (component key). */
-            projectKey: string;
-            /** @description Optional branch name for branch-scoped measures. */
+            /** @description SonarCloud organization key (required for project search on SonarCloud). */
+            organization?: string;
+            /** @description Optional workspace default branch fallback for per-repo Sonar probes. */
             branch?: string;
         };
         /** @description Redacted SonarQube source returned by GET workspace config. */
@@ -4010,8 +4048,37 @@ export interface components {
             type: "sonarqube";
             hasToken: boolean;
             baseUrl: string;
+            organization?: string;
+            branch?: string;
+        };
+        SonarQubeRepoMappingDto: {
+            /** @description Repository slug (`owner/repo`) in the workspace catalog. */
+            providerSlug: string;
+            projectKey: string;
+            /** @description Optional branch override for Sonar API calls for this repo. */
+            branch?: string;
+        };
+        SonarQubeRepoMappingRowDto: components["schemas"]["SonarQubeRepoMappingDto"] & {
+            /** Format: uuid */
+            repoId: string;
+            /** Format: date-time */
+            updatedAt: string;
+        };
+        SonarQubeRepoMappingsPutDto: {
+            mappings: components["schemas"]["SonarQubeRepoMappingDto"][];
+        };
+        SonarQubeRepoMappingsListDto: {
+            mappings: components["schemas"]["SonarQubeRepoMappingRowDto"][];
+        };
+        SonarQubeRepoMappingValidateRowDto: {
+            providerSlug: string;
             projectKey: string;
             branch?: string;
+            ok: boolean;
+            error?: string;
+        };
+        SonarQubeRepoMappingsValidateResponseDto: {
+            results: components["schemas"]["SonarQubeRepoMappingValidateRowDto"][];
         };
         /** @description PagerDuty incident monitoring source for `PUT /workspaces/{workspaceId}/sources` and `POST /workspaces/{workspaceId}/sources/test`. Requires a REST API v2 token (an "API Access Key" from PagerDuty → **Integrations → API Access Keys**). */
         PagerDutySourceDto: {
@@ -4039,6 +4106,38 @@ export interface components {
             /** @description PagerDuty user email when known from the last successful verify. */
             userEmail?: string;
         };
+        /** @description Jira Cloud source for `PUT /workspaces/{workspaceId}/sources` and `POST /workspaces/{workspaceId}/sources/test`. Uses Atlassian Cloud email + API token (Basic auth). Provide `apiToken` (preferred) or legacy write-only `api_key`; the server normalizes `api_key` to `apiToken` on write. */
+        JiraSourceDto: {
+            /** @enum {string} */
+            type: "jira";
+            /** @description Jira Cloud site URL (e.g. `https://your-domain.atlassian.net`). */
+            baseUrl: string;
+            /** @description Atlassian account email used with the API token. */
+            email: string;
+            /** @description Atlassian API token (write-only on PUT; preferred). */
+            apiToken?: string;
+            /** @description Deprecated write-only alias for `apiToken`. Accepted for backward compatibility; normalized to `apiToken` and never returned on GET `/config`. */
+            api_key?: string;
+            /** @description Optional display name from a successful connection test (echo-after-test). */
+            userName?: string;
+            /** @description Optional Atlassian account id from a successful connection test. */
+            accountId?: string;
+        };
+        /** @description Redacted Jira source returned by `GET /workspaces/{workspaceId}/config`. Raw API token is never returned. */
+        JiraSourceConfigDto: {
+            /** @enum {string} */
+            type: "jira";
+            /** @description Whether an API token is stored for this workspace. */
+            hasToken: boolean;
+            /** @description Configured Jira Cloud site URL. */
+            baseUrl: string;
+            /** @description Atlassian account email associated with the stored token. */
+            email: string;
+            /** @description Display name when known from the last successful verify. */
+            userName?: string;
+            /** @description Atlassian account id when known from the last successful verify. */
+            accountId?: string;
+        };
         /**
          * @description The agent execution account used for Agentic Foundation runs (readiness scanner + fix queue). Exactly one is active per workspace.
          *       - `thinkai_platform_cursor`: ThinkAI platform Cursor key (Cursor Agent CLI) — opt-in, never default.
@@ -4057,7 +4156,7 @@ export interface components {
             claudeModel?: string | null;
         };
         WorkspaceConfigDto: {
-            sources: (components["schemas"]["CursorSourceConfigDto"] | components["schemas"]["ClaudeSourceConfigDto"] | components["schemas"]["CodeIntelligenceSourceConfigDto"] | components["schemas"]["NewRelicSourceConfigDto"] | components["schemas"]["PrometheusSourceConfigDto"] | components["schemas"]["GrafanaSourceConfigDto"] | components["schemas"]["SonarQubeSourceConfigDto"] | components["schemas"]["PagerDutySourceConfigDto"] | components["schemas"]["TenantSourceEntryDto"])[];
+            sources: (components["schemas"]["CursorSourceConfigDto"] | components["schemas"]["ClaudeSourceConfigDto"] | components["schemas"]["CodeIntelligenceSourceConfigDto"] | components["schemas"]["NewRelicSourceConfigDto"] | components["schemas"]["PrometheusSourceConfigDto"] | components["schemas"]["GrafanaSourceConfigDto"] | components["schemas"]["SonarQubeSourceConfigDto"] | components["schemas"]["PagerDutySourceConfigDto"] | components["schemas"]["JiraSourceConfigDto"] | components["schemas"]["TenantSourceEntryDto"])[];
             orgChart?: components["schemas"]["ScoringOrgChartDto"] | null;
             /** @enum {string|null} */
             region?: "us" | "eu" | "me" | null;
@@ -4092,11 +4191,11 @@ export interface components {
             executionKeyValid?: boolean | null;
             /** @description Error detail when `executionKeyValid` is false. */
             executionKeyError?: string | null;
-            /** @description Present for New Relic or Grafana verify success — authenticated user name. */
+            /** @description Present for New Relic, Grafana, PagerDuty, or Jira verify success — authenticated user name. */
             userName?: string;
             /** @description Present for New Relic verify success — resolved account display name. */
             accountName?: string;
-            /** @description Present for New Relic verify success — resolved account ID. */
+            /** @description Present for New Relic or Jira verify success — resolved account ID. */
             accountId?: string;
             /** @description Present for Grafana verify success — resolved organization name. */
             orgName?: string;
@@ -8179,8 +8278,16 @@ export type GrafanaSourceDto = components['schemas']['GrafanaSourceDto'];
 export type GrafanaSourceConfigDto = components['schemas']['GrafanaSourceConfigDto'];
 export type SonarQubeSourceDto = components['schemas']['SonarQubeSourceDto'];
 export type SonarQubeSourceConfigDto = components['schemas']['SonarQubeSourceConfigDto'];
+export type SonarQubeRepoMappingDto = components['schemas']['SonarQubeRepoMappingDto'];
+export type SonarQubeRepoMappingRowDto = components['schemas']['SonarQubeRepoMappingRowDto'];
+export type SonarQubeRepoMappingsPutDto = components['schemas']['SonarQubeRepoMappingsPutDto'];
+export type SonarQubeRepoMappingsListDto = components['schemas']['SonarQubeRepoMappingsListDto'];
+export type SonarQubeRepoMappingValidateRowDto = components['schemas']['SonarQubeRepoMappingValidateRowDto'];
+export type SonarQubeRepoMappingsValidateResponseDto = components['schemas']['SonarQubeRepoMappingsValidateResponseDto'];
 export type PagerDutySourceDto = components['schemas']['PagerDutySourceDto'];
 export type PagerDutySourceConfigDto = components['schemas']['PagerDutySourceConfigDto'];
+export type JiraSourceDto = components['schemas']['JiraSourceDto'];
+export type JiraSourceConfigDto = components['schemas']['JiraSourceConfigDto'];
 export type AgentExecutionProviderDto = components['schemas']['AgentExecutionProviderDto'];
 export type PutCodeIntelligenceSettingsDto = components['schemas']['PutCodeIntelligenceSettingsDto'];
 export type WorkspaceConfigDto = components['schemas']['WorkspaceConfigDto'];
@@ -10147,7 +10254,7 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
-                    sources: (components["schemas"]["CursorSourcePatchDto"] | components["schemas"]["CursorSourceDto"] | components["schemas"]["ClaudeSourcePatchDto"] | components["schemas"]["ClaudeSourceDto"] | components["schemas"]["CodeIntelligenceSourcePatchDto"] | components["schemas"]["NewRelicSourceDto"] | components["schemas"]["PrometheusSourceDto"] | components["schemas"]["GrafanaSourceDto"] | components["schemas"]["SonarQubeSourceDto"] | components["schemas"]["PagerDutySourceDto"] | components["schemas"]["TenantSourceEntryDto"])[];
+                    sources: (components["schemas"]["CursorSourcePatchDto"] | components["schemas"]["CursorSourceDto"] | components["schemas"]["ClaudeSourcePatchDto"] | components["schemas"]["ClaudeSourceDto"] | components["schemas"]["CodeIntelligenceSourcePatchDto"] | components["schemas"]["NewRelicSourceDto"] | components["schemas"]["PrometheusSourceDto"] | components["schemas"]["GrafanaSourceDto"] | components["schemas"]["SonarQubeSourceDto"] | components["schemas"]["PagerDutySourceDto"] | components["schemas"]["JiraSourceDto"] | components["schemas"]["TenantSourceEntryDto"])[];
                 };
             };
         };
@@ -10201,7 +10308,7 @@ export interface operations {
         };
         requestBody: {
             content: {
-                "application/json": components["schemas"]["CursorSourcePatchDto"] | components["schemas"]["CursorSourceDto"] | components["schemas"]["ClaudeSourcePatchDto"] | components["schemas"]["ClaudeSourceDto"] | components["schemas"]["CodeIntelligenceSourcePatchDto"] | components["schemas"]["NewRelicSourceDto"] | components["schemas"]["PrometheusSourceDto"] | components["schemas"]["GrafanaSourceDto"] | components["schemas"]["SonarQubeSourceDto"] | components["schemas"]["PagerDutySourceDto"] | components["schemas"]["TenantSourceEntryDto"];
+                "application/json": components["schemas"]["CursorSourcePatchDto"] | components["schemas"]["CursorSourceDto"] | components["schemas"]["ClaudeSourcePatchDto"] | components["schemas"]["ClaudeSourceDto"] | components["schemas"]["CodeIntelligenceSourcePatchDto"] | components["schemas"]["NewRelicSourceDto"] | components["schemas"]["PrometheusSourceDto"] | components["schemas"]["GrafanaSourceDto"] | components["schemas"]["SonarQubeSourceDto"] | components["schemas"]["PagerDutySourceDto"] | components["schemas"]["JiraSourceDto"] | components["schemas"]["TenantSourceEntryDto"];
             };
         };
         responses: {
@@ -10239,6 +10346,100 @@ export interface operations {
             };
         };
     };
+    listSonarQubeRepoMappings: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Mappings for repos in this workspace */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SonarQubeRepoMappingsListDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+        };
+    };
+    putSonarQubeRepoMappings: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["SonarQubeRepoMappingsPutDto"];
+            };
+        };
+        responses: {
+            /** @description Mappings saved */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SonarQubeRepoMappingsListDto"];
+                };
+            };
+            /** @description Unknown repo slug or invalid body */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+        };
+    };
+    validateSonarQubeRepoMappings: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["SonarQubeRepoMappingsPutDto"];
+            };
+        };
+        responses: {
+            /** @description Per-row probe results */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SonarQubeRepoMappingsValidateResponseDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            /** @description SonarQube source not configured */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     deleteSourceByType: {
         parameters: {
             query?: never;
@@ -14126,7 +14327,7 @@ export interface operations {
                 fixStatus?: "open" | "pr-pending" | "fixed";
                 dimensionId?: components["schemas"]["ReadinessDimensionId"];
                 severity?: "critical" | "high" | "medium" | "low";
-                /** @description Include remediation from criteriaDetails (default true). */
+                /** @description When true (default), include criterion summary/status in issue metadata and remediation from `criteriaDetails` (plus inline scan remediation paragraphs). Agent workflow and rubric agent instructions are always included. When false, omit criterion-derived metadata and criterion remediation only. */
                 includeCriteria?: boolean;
                 /** @description IANA time zone for human-readable `Last analyzed` / `Exported` timestamps and the calendar date in the attachment filename (e.g. `Europe/Berlin`). Defaults to `UTC`. */
                 timeZone?: string;