feat!: bump @gusto/embedded-api to v2026-02-01

[jeffredodd]

Summary

Upgrades the SDK from @gusto/embedded-api-v-2025-11-15 to @gusto/embedded-api-v-2026-02-01.

Every breaking change in v2026-02-01 is either:

• handled by existing client-side defenses (Zod schemas, typecheck) — verified by the typecheck CI step
• on an endpoint with no SDK consumer — typecheck is the contract
• a server-side validation tightening that flows through the SDK's existing error pipeline (normalizeToSDKError → errorHandling.error.fieldErrors[] → inline UI render)

Breaking changes & how this PR verifies them

Legend: 🔴 = SDK code change required · ⚠️ = verify-only / test fixture update · ✅ = no impact

Status	Change	Where verified
🔴	QueryParamSortBy removed from putv1companiescompanyidpayrollspayrollidprepare op (collapsed to string)	Fixed in this PR: src/components/Payroll/usePreparedPayrollData.ts — removed the import, typed sortBy?: string. Typecheck CI.
✅	SortBy removed from getv1companiescompanyidpayrollspayrollid op (collapsed to string)	Typecheck CI — no consumer in src/.
✅	GetV1CompanyFormsQueryParamSortBy removed from getv1companyforms op	Typecheck CI — no consumer in src/.
✅	PostV1CompaniesCompanyIdReportsEmployeesAnnualFicaWageResponseBody removed	Typecheck CI — no consumer in src/.
✅	VersionHeader component removed (replaced by per-op HeaderXGustoAPIVersion)	Typecheck CI — no consumer in src/.
✅	Brex enum value removed from Company.defaultFundingType; new values added (partner_disbursement, rtp, line_of_credit)	Typecheck CI — no consumer in src/ narrows on 'brex'.
✅	MigrationStatus enum ("success") removed from PartnerManagedCompanyMigrateResponse; replaced with new errors[] / warnings[] shape	Typecheck CI — no consumer in src/.
✅	PartnerManagedCompanyMigrateRequest body collapsed to {} (removed email, ipAddress, externalUserId; ToS signer now resolved server-side from authenticated payroll-admin user)	Typecheck CI — no consumer in src/.
✅	Errors / Warnings types on partnermanagedcompanymigrationreadinessresponse renamed to PartnerManagedCompanyMigrationReadinessResponseErrors / …Warnings	Typecheck CI — no consumer in src/.
✅	PayrollCreditBlockerUnblockOptionWaitForReverseWireMetadata collapsed to {} (lost reverseWireDetailId, bankAccountLastFourDigits)	Typecheck CI — no consumer in src/.
✅	PeopleBatch.PartialSuccess enum value removed	Typecheck CI — no consumer in src/.
✅	EmployeeBenefit.deductionReducesTaxableIncome required → optional (widening)	Typecheck CI — non-breaking widening.
✅	companiesAcceptTermsOfService / companiesRetrieveTermsOfService deprecated (use new partner_managed_companies/{uuid}/terms_of_service endpoints instead)	Typecheck CI — no consumer in src/. Flag in partner release notes.
✅	Self-onboarding email now required at the server	Trust the error pipeline — the SDK has a matching client-side Zod refinement in src/components/Employee/Profile/shared/useEmployeeDetailsForm/buildFormSchema.ts and existing unit tests at buildFormSchema.test.ts:382-412 and useEmployeeDetailsForm.test.tsx:106 already cover the gate. If the server rule were to disagree with the client refinement, the SDK's normalizeToSDKError → errorHandling.error.fieldErrors[] → inline UI render path surfaces the server message identically to the client gate.

What's in this PR

• package.json + package-lock.json: dep swap (@gusto/embedded-api-v-2025-11-15 → @gusto/embedded-api-v-2026-02-01@^0.0.1).
• 298 src/ files: import-path rename (covers source, tests, MSW mocks under src/test/mocks/apis/, and hand-written cache-key string literals — e.g. createSdkQueryClient.ts, ApiProvider.tsx, TimeOff/*, Company/Locations/LocationForm/LocationForm.tsx).
• 67 sdk-app/ files: import-path rename + cache-key flips in design/prototypes/contractor-management/*.
• Docs + instruction files (AGENTS.md, CLAUDE.md, src/CLAUDE.md, docs/hooks/*.md, docs/reference/index.md, docs/reference/utilities.md, docs/appendix/jobs-and-compensations.md, build/deriveEndpointInventory.ts, e2e/utils/validationErrorCollector.test.ts): version string updates.
• 🔴 The bare-date X-Gusto-API-Version constant flipped from '2025-11-15' → '2026-02-01' in src/contexts/ApiProvider/apiVersionHook.ts:3, plus matching assertions in apiVersionHook.test.ts (3 sites) and ApiProvider.test.tsx (1 site). Without this flip the upgrade would be a runtime no-op — types claim the new version but the SDK would still send the old one on every HTTP request.
• Real type fix: src/components/Payroll/usePreparedPayrollData.ts — removed QueryParamSortBy import (no longer exported); typed sortBy?: string.
• Drive-by: added language tags to 4 fenced code blocks in AGENTS.md and 2 in src/CLAUDE.md to satisfy markdownlint MD040 (pre-existing violations surfaced by the version-string sweep).

Deprecations to flag to partners

• companiesAcceptTermsOfService / companiesRetrieveTermsOfService are marked @deprecated in v2026-02-01. They continue to work but partners should migrate to POST/PUT/GET /v1/partner_managed_companies/{company_uuid}/terms_of_service. The SDK does not consume either hook.
• payrollCreditBlockerUnblockOptionWaitForReverseWire.reverseWireDetailId (the bare DB id) is deprecated in favor of reverseWireDetailUuid (when partners exist who use this; the SDK does not).

Test plan

• All CI green (unit + e2e + typecheck + lint + build)
• No remaining @gusto/embedded-api-v-2025-11-15 refs outside CHANGELOG.md / .reports/ (verified locally; grep returns empty)
• Cache-namespace flip verified end-to-end (mutation under new prefix invalidates queries under new prefix — createSdkQueryClient.ts)
• X-Gusto-API-Version HTTP header sends 2026-02-01 on every request (verified by apiVersionHook.test.ts and ApiProvider.test.tsx)

Acknowledgements

This PR was produced autonomously by the api-version-upgrade skill (#2243) as the canonical demonstration of the autonomous upgrade workflow.

🤖 Generated with Claude Code