feat(openapi): generate checked-in MCP/Python contract types (#37 phase 2)

Implements phase 2 of #37 / closes #46. Generated artifacts are a contract
reference; hand-written MCP/SDK public models are unchanged (no runtime or
package behavior change — backward compatible).

- MCP/TS: `openapi-typescript@7.4.4` (pinned devDep) -> checked-in
  packages/mcp/src/generated/openapi.d.ts; `npm run gen:openapi` regenerates.
- Python SDK: `datamodel-code-generator==0.26.3` (pinned dev extra) ->
  checked-in packages/python-sdk/qveris/generated/openapi_models.py
  (pydantic v2, py3.8 target) + package __init__ documenting regeneration.
- CI: .github/workflows/openapi-types.yml regenerates both with the pinned
  generators and fails on `git diff --exit-code`, path-scoped to
  docs/openapi/** + the generators (mirrors openapi-contract.yml from #44).

Verified: artifacts are byte-reproducible from the checked-in spec
(empty diff on regen), the .d.ts typechecks under tsc --strict, and the
Python models pass py_compile.

Author: linfangw

.github/workflows/openapi-types.yml

@@ -0,0 +1,69 @@
+name: OpenAPI generated types
+
+# Issue #37 phase 2: the checked-in generated artifacts must be reproducible
+# from docs/openapi/qveris-public-api.openapi.json. Regenerate with the pinned
+# generators and fail if the working tree differs (contract / generator drift).
+
+on:
+  pull_request:
+    paths:
+      - "docs/openapi/**"
+      - "packages/mcp/src/generated/**"
+      - "packages/python-sdk/qveris/generated/**"
+      - "packages/mcp/package.json"
+      - "packages/python-sdk/pyproject.toml"
+      - ".github/workflows/openapi-types.yml"
+  push:
+    branches:
+      - main
+    paths:
+      - "docs/openapi/**"
+      - "packages/mcp/src/generated/**"
+      - "packages/python-sdk/qveris/generated/**"
+      - "packages/mcp/package.json"
+      - "packages/python-sdk/pyproject.toml"
+      - ".github/workflows/openapi-types.yml"
+
+permissions:
+  contents: read
+
+jobs:
+  regen-and-diff:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Regenerate MCP TypeScript types
+        run: npx --yes openapi-typescript@7.4.4 docs/openapi/qveris-public-api.openapi.json -o packages/mcp/src/generated/openapi.d.ts
+
+      - name: Regenerate Python SDK models
+        run: |
+          python -m pip install --quiet "datamodel-code-generator==0.26.3"
+          python -m datamodel_code_generator \
+            --input docs/openapi/qveris-public-api.openapi.json \
+            --input-file-type openapi \
+            --output packages/python-sdk/qveris/generated/openapi_models.py \
+            --output-model-type pydantic_v2.BaseModel \
+            --target-python-version 3.8 \
+            --use-schema-description \
+            --disable-timestamp
+
+      - name: Fail on drift
+        run: |
+          if ! git diff --exit-code -- \
+              packages/mcp/src/generated/openapi.d.ts \
+              packages/python-sdk/qveris/generated/openapi_models.py; then
+            echo "::error::Generated OpenAPI artifacts are out of date. Run 'npm --prefix packages/mcp run gen:openapi' and regenerate the Python models, then commit."
+            exit 1
+          fi

packages/mcp/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@qverisai/mcp",
-  "version": "0.6.0",
-  "description": "QVeris MCP server for agent tool discovery, inspection, and calling",
+  "version": "0.6.0",
+  "description": "QVeris MCP server for agent tool discovery, inspection, and calling",
   "keywords": [
     "qveris",
     "mcp",
@@ -14,12 +14,12 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/QVerisAI/qveris-agent-toolkit",
+    "url": "https://github.com/QVerisAI/qveris-agent-toolkit",
     "directory": "packages/mcp"
   },
   "homepage": "https://qveris.ai",
   "bugs": {
-    "url": "https://github.com/QVerisAI/qveris-agent-toolkit/issues"
+    "url": "https://github.com/QVerisAI/qveris-agent-toolkit/issues"
   },
   "type": "module",
   "main": "dist/index.js",
@@ -38,7 +38,8 @@
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
     "prepublishOnly": "npm run build",
-    "typecheck": "tsc --noEmit"
+    "typecheck": "tsc --noEmit",
+    "gen:openapi": "openapi-typescript ../../docs/openapi/qveris-public-api.openapi.json -o src/generated/openapi.d.ts"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
@@ -47,6 +48,7 @@
   "devDependencies": {
     "@types/node": "^22.10.1",
     "@types/uuid": "^10.0.0",
+    "openapi-typescript": "7.4.4",
     "typescript": "^5.7.2",
     "vitest": "^2.1.0"
   },