apiVersion: naftiko.io/v1
kind: SharedCapabilities
metadata:
  name: zoho-people
  provider: Zoho
  product: Zoho People
  description: >-
    Shared per-API capabilities for the Zoho People HRMS REST API, scoped
    to the seven OAuth scope buckets the provider exposes.
spec:
  source:
    openapi: ../../openapi/zoho-people-openapi.yml
  authentication:
    type: oauth2
    flow: authorizationCode
    authorizationUrl: https://accounts.zoho.com/oauth/v2/auth
    tokenUrl: https://accounts.zoho.com/oauth/v2/token
    scopeNamespace: ZohoPeople
  capabilities:
    - name: list-employees
      summary: Read the Zoho People employee directory.
      operation: listEmployees
      scopes: [ZohoPeople.employee.ALL]
      governance:
        pii: high
        rateBudget: 1/sec
    - name: create-employee
      summary: Create a new employee record in Zoho People.
      operation: createEmployee
      scopes: [ZohoPeople.employee.ALL]
      governance:
        pii: high
        approvalRequired: true
    - name: update-employee
      summary: Update an existing Zoho People employee record.
      operation: updateEmployee
      scopes: [ZohoPeople.employee.ALL]
    - name: list-form-records
      summary: Read records from any Zoho People form (standard or custom).
      operation: listFormRecords
      scopes: [ZohoPeople.forms.READ, ZohoPeople.forms.ALL]
    - name: insert-form-record
      summary: Insert a record into a Zoho People form.
      operation: insertFormRecord
      scopes: [ZohoPeople.forms.CREATE, ZohoPeople.forms.ALL]
    - name: update-form-record
      summary: Update a Zoho People form record by id.
      operation: updateFormRecord
      scopes: [ZohoPeople.forms.UPDATE, ZohoPeople.forms.ALL]
    - name: list-leave-types
      summary: Read configured leave types and balances for a user.
      operation: listLeaveTypes
      scopes: [ZohoPeople.leave.READ, ZohoPeople.leave.ALL]
    - name: list-holidays
      summary: Read holiday calendar entries.
      operation: listHolidays
      scopes: [ZohoPeople.leave.READ, ZohoPeople.leave.ALL]
    - name: apply-for-leave
      summary: Submit a leave request on behalf of an employee.
      operation: applyForLeave
      scopes: [ZohoPeople.leave.CREATE, ZohoPeople.leave.ALL]
      governance:
        approvalRequired: true
    - name: list-leave-requests
      summary: Read leave requests.
      operation: listLeaveRequests
      scopes: [ZohoPeople.leave.READ, ZohoPeople.leave.ALL]
    - name: check-in-out
      summary: Mark check-in / check-out attendance.
      operation: checkInOut
      scopes: [ZohoPeople.attendance.ALL]
    - name: get-user-attendance-report
      summary: Read an employee's attendance report for a date range.
      operation: getUserAttendanceReport
      scopes: [ZohoPeople.attendance.ALL]
    - name: bulk-import-attendance
      summary: Bulk import attendance data from a file.
      operation: bulkImportAttendance
      scopes: [ZohoPeople.attendance.ALL]
      governance:
        approvalRequired: true
    - name: list-jobs
      summary: Read Time Tracker jobs.
      operation: listJobs
      scopes: [ZohoPeople.timetracker.ALL]
    - name: create-job
      summary: Create a Time Tracker job.
      operation: createJob
      scopes: [ZohoPeople.timetracker.ALL]
    - name: list-time-logs
      summary: Read time-log entries.
      operation: listTimeLogs
      scopes: [ZohoPeople.timetracker.ALL]
    - name: create-time-log
      summary: Log a time entry against a job.
      operation: createTimeLog
      scopes: [ZohoPeople.timetracker.ALL]
    - name: list-announcements
      summary: Read dashboard announcements.
      operation: listAnnouncements
      scopes: [ZohoPeople.dashboard.ALL]
    - name: list-birthdays
      summary: Read upcoming employee birthdays from the dashboard.
      operation: listBirthdays
      scopes: [ZohoPeople.dashboard.ALL]
    - name: trigger-workflow
      summary: Trigger a configured Zoho People automation workflow.
      operation: triggerWorkflow
      scopes: [ZohoPeople.automation.ALL]
      governance:
        approvalRequired: true