@thinkai/tai-api-contract 2.154.0 → 2.157.0

package/openapi/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: ThinkAI API
-  version: 2.154.0
+  version: 2.157.0
   description: >
     Contract surface for the AI Driven SDLC backend used by ThinkAI.
     Workspace-scoped routes use `/workspaces/{workspaceId}/...`.
@@ -6957,6 +6957,8 @@ paths:
                         open: 0
                         prPending: 0
                         fixed: 0
+                      verificationGapCount: 0
+                      verificationGaps: []
                     dimensionAggregates: []
                     fixStatusSummary:
                       queued: 0
@@ -7492,7 +7494,9 @@ paths:
               schema:
                 $ref: "#/components/schemas/FixRequestDto"
         "400":
-          description: Invalid body or malformed `repoId` (not a UUID)
+          description: >
+            Invalid body, malformed `repoId`, or a missing/unknown `patternChoice` when the issue
+            has `unresolvedChoices` (`pattern_choice_required`, `pattern_choice_invalid`).
           content:
             application/json:
               schema:
@@ -9339,10 +9343,11 @@ paths:
       summary: Slack install URL for Message Center
       operationId: getSlackInstallUrl
       description: >
-        Workspace admin only. Returns the Slack OAuth authorize URL. State is stored
-        server-side and names this workspace and the signed-in admin. Editor or viewer
-        is `403` with `code` `workspace_admin_required`. Missing Slack app settings are
-        `503` with `code` `slack_not_configured`.
+        Workspace admin only. Returns the Slack OAuth authorize URL with
+        `incoming-webhook` scope. State is stored server-side and names this workspace
+        and the signed-in admin. Editor or viewer is `403` with `code`
+        `workspace_admin_required`. Missing Slack app settings are `503` with `code`
+        `slack_not_configured`.
       security:
         - bearerAuth: []
       parameters:
@@ -9389,10 +9394,11 @@ paths:
       description: >
         Browser return from Slack. The provider redirect does not include the API
         bearer token. `state` was issued by `getSlackInstallUrl` to a signed-in admin
-        and is single-use. The bot token is stored encrypted only when that user is
-        still a workspace admin. Success redirects to
+        and is single-use. Install requests `incoming-webhook` only. The encrypted
+        incoming-webhook URL and the channel Slack returns are stored only when that
+        user is still a workspace admin. Success redirects to
         `{spa}/workspace/preferences?chat=slack`. Failures redirect to the same
-        page with `slack=error`. The token is never in the redirect.
+        page with `slack=error`. The webhook URL is never in the redirect.
       parameters:
         - name: code
           in: query
@@ -9427,8 +9433,10 @@ paths:
       summary: Slack connection status
       operationId: getSlackIntegration
       description: >
-        Any workspace member. `{ connected, channelName }`. `channelName` is null
-        until an admin saves a channel. The bot token is never returned.
+        Any workspace member. `{ connected, channelName }`. `connected` is true only
+        when a decryptable install webhook is stored. `channelName` is the channel
+        chosen on Slack's install screen (null when not connected). Secrets are
+        never returned.
       security:
         - bearerAuth: []
       parameters:
@@ -9455,8 +9463,8 @@ paths:
       summary: Disconnect Slack
       operationId: deleteSlackIntegration
       description: >
-        Workspace admin only. Removes the bot token and saved channel. Later
-        Message Center delivery does not post to Slack.
+        Workspace admin only. Removes the install webhook, optional bot token, and
+        saved channel. Later Message Center delivery does not post to Slack.
       security:
         - bearerAuth: []
       parameters:
@@ -9485,13 +9493,15 @@ paths:
   /workspaces/{workspaceId}/integrations/slack/channel:
     put:
       tags: [Integrations]
-      summary: Save the Slack channel for Message Center
+      summary: Change Slack channel (requires reinstall)
       operationId: putSlackChannel
       description: >
-        Workspace admin only. Body `{ channelId }`. Slack must already be connected.
-        The response is the same status object as `getSlackIntegration`, with the
-        channel name Slack returned. Unknown or malformed `channelId` is `400`
-        `invalid_slack_channel`. Not connected is `409` `slack_not_connected`.
+        Workspace admin only. Body `{ channelId }`. The notification channel is
+        chosen on Slack's install screen with the incoming webhook; this route does
+        not rewrite channel metadata. When Slack is connected, the API returns `409`
+        with `code` `slack_channel_reinstall_required` — reconnect via
+        `getSlackInstallUrl` to pick a different channel. Malformed `channelId` is
+        `400` `invalid_slack_channel`. Not connected is `409` `slack_not_connected`.
       security:
         - bearerAuth: []
       parameters:
@@ -9504,19 +9514,21 @@ paths:
               $ref: "#/components/schemas/SlackChannelBodyDto"
       responses:
         "200":
-          description: Channel saved
+          description: >
+            Not returned. The channel is chosen on Slack's install screen; when
+            connected the API responds with `409` `slack_channel_reinstall_required`.
           content:
             application/json:
               schema:
                 $ref: "#/components/schemas/SlackIntegrationStatusDto"
         "400":
-          description: channelId is missing, malformed, or unknown to Slack
+          description: channelId is missing or malformed
           content:
             application/json:
               schema:
                 $ref: "#/components/schemas/ErrorMessageDto"
               example:
-                error: Slack channel was not found
+                error: channelId is required
                 code: invalid_slack_channel
         "401":
           $ref: "#/components/responses/Unauthorized"
@@ -9536,23 +9548,22 @@ paths:
               schema:
                 $ref: "#/components/schemas/ErrorMessageDto"
         "409":
-          description: Slack is not connected
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/ErrorMessageDto"
-              example:
-                error: Slack is not connected
-                code: slack_not_connected
-        "502":
-          description: Slack rejected the lookup
+          description: >
+            Slack is not connected (`slack_not_connected`), or the channel cannot be
+            changed without a new install (`slack_channel_reinstall_required`).
           content:
             application/json:
               schema:
                 $ref: "#/components/schemas/ErrorMessageDto"
-              example:
-                error: Slack did not accept the channel
-                code: slack_request_failed
+              examples:
+                notConnected:
+                  value:
+                    error: Slack is not connected
+                    code: slack_not_connected
+                reinstallRequired:
+                  value:
+                    error: Reconnect Slack to change the notification channel
+                    code: slack_channel_reinstall_required
 
   /workspaces/{workspaceId}/notification-preferences:
     get:
@@ -17638,6 +17649,15 @@ components:
             True when the platform does not yet have an auto-fix skill for this
             issue's dimension. The UI should render these items as disabled with
             a "Coming Soon" tooltip.
+        unresolvedChoices:
+          type: array
+          maxItems: 2
+          description: >
+            Short labels when the instruction file names two alternatives and does not pick one.
+            Fix it stays disabled until the request includes one of these as patternChoice.
+          items:
+            type: string
+            maxLength: 64
         fixTier:
           type: string
           enum: [auto, decisions-first, guidance]
@@ -18668,6 +18688,33 @@ components:
               type: integer
               minimum: 0
               description: Issues whose fix has been applied (fix_status = fixed).
+        verificationGapCount:
+          type: integer
+          minimum: 0
+          description: >-
+            Distinct non-archived repos whose latest succeeded scan has an A1 gap
+            (no instruction file) or a B5 gap (CI never runs tests). A gap whose
+            matching issue is already fixed is excluded. Omitted when the server
+            cannot see per-criterion status.
+        verificationGaps:
+          type: array
+          maxItems: 12
+          description: >-
+            Up to 12 repo and reason pairs for verificationGapCount. A repo with
+            both gaps appears twice. Does not change averageOverallScore.
+          items:
+            $ref: "#/components/schemas/AgenticFoundationVerificationGapDto"
+
+    AgenticFoundationVerificationGapDto:
+      type: object
+      additionalProperties: false
+      required: [repoName, reason]
+      properties:
+        repoName:
+          type: string
+        reason:
+          type: string
+          enum: ["no instruction file", "CI never runs tests"]
 
     PageMetaDto:
       type: object
@@ -19075,6 +19122,12 @@ components:
           type: string
           format: uuid
           description: Workspace repository id that owns the issue
+        patternChoice:
+          type: string
+          maxLength: 64
+          description: >
+            Required when the issue has unresolvedChoices. Must be one of those labels.
+            Stored on the fix row and stated in the worker prompt.
 
     PhaseRoleDto:
       type: object
@@ -19600,7 +19653,8 @@ components:
       properties:
         url:
           type: string
-          description: Slack OAuth authorize URL. The bot token is not included.
+          description: >
+            Slack OAuth authorize URL (`incoming-webhook` scope). Secrets are not included.
 
     SlackIntegrationStatusDto:
       type: object
@@ -19609,10 +19663,13 @@ components:
       properties:
         connected:
           type: boolean
+          description: >
+            True only when a decryptable install webhook URL is stored for this workspace.
         channelName:
           type: string
           nullable: true
-          description: Saved channel name. Null until an admin saves a channel, and when disconnected.
+          description: >
+            Channel name returned by Slack at install time. Null when not connected.
 
     SlackChannelBodyDto:
       type: object

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thinkai/tai-api-contract",
-  "version": "2.154.0",
+  "version": "2.157.0",
   "private": false,
   "type": "module",
   "main": "dist/index.js",

package/src/generated/openapi.ts

@@ -3774,7 +3774,7 @@ export interface paths {
         };
         /**
          * Slack install URL for Message Center
-         * @description Workspace admin only. Returns the Slack OAuth authorize URL. State is stored server-side and names this workspace and the signed-in admin. Editor or viewer is `403` with `code` `workspace_admin_required`. Missing Slack app settings are `503` with `code` `slack_not_configured`.
+         * @description Workspace admin only. Returns the Slack OAuth authorize URL with `incoming-webhook` scope. State is stored server-side and names this workspace and the signed-in admin. Editor or viewer is `403` with `code` `workspace_admin_required`. Missing Slack app settings are `503` with `code` `slack_not_configured`.
          */
         get: operations["getSlackInstallUrl"];
         put?: never;
@@ -3794,7 +3794,7 @@ export interface paths {
         };
         /**
          * Slack OAuth callback
-         * @description Browser return from Slack. The provider redirect does not include the API bearer token. `state` was issued by `getSlackInstallUrl` to a signed-in admin and is single-use. The bot token is stored encrypted only when that user is still a workspace admin. Success redirects to `{spa}/workspace/preferences?chat=slack`. Failures redirect to the same page with `slack=error`. The token is never in the redirect.
+         * @description Browser return from Slack. The provider redirect does not include the API bearer token. `state` was issued by `getSlackInstallUrl` to a signed-in admin and is single-use. Install requests `incoming-webhook` only. The encrypted incoming-webhook URL and the channel Slack returns are stored only when that user is still a workspace admin. Success redirects to `{spa}/workspace/preferences?chat=slack`. Failures redirect to the same page with `slack=error`. The webhook URL is never in the redirect.
          */
         get: operations["getSlackOauthCallback"];
         put?: never;
@@ -3814,14 +3814,14 @@ export interface paths {
         };
         /**
          * Slack connection status
-         * @description Any workspace member. `{ connected, channelName }`. `channelName` is null until an admin saves a channel. The bot token is never returned.
+         * @description Any workspace member. `{ connected, channelName }`. `connected` is true only when a decryptable install webhook is stored. `channelName` is the channel chosen on Slack's install screen (null when not connected). Secrets are never returned.
          */
         get: operations["getSlackIntegration"];
         put?: never;
         post?: never;
         /**
          * Disconnect Slack
-         * @description Workspace admin only. Removes the bot token and saved channel. Later Message Center delivery does not post to Slack.
+         * @description Workspace admin only. Removes the install webhook, optional bot token, and saved channel. Later Message Center delivery does not post to Slack.
          */
         delete: operations["deleteSlackIntegration"];
         options?: never;
@@ -3838,8 +3838,8 @@ export interface paths {
         };
         get?: never;
         /**
-         * Save the Slack channel for Message Center
-         * @description Workspace admin only. Body `{ channelId }`. Slack must already be connected. The response is the same status object as `getSlackIntegration`, with the channel name Slack returned. Unknown or malformed `channelId` is `400` `invalid_slack_channel`. Not connected is `409` `slack_not_connected`.
+         * Change Slack channel (requires reinstall)
+         * @description Workspace admin only. Body `{ channelId }`. The notification channel is chosen on Slack's install screen with the incoming webhook; this route does not rewrite channel metadata. When Slack is connected, the API returns `409` with `code` `slack_channel_reinstall_required` — reconnect via `getSlackInstallUrl` to pick a different channel. Malformed `channelId` is `400` `invalid_slack_channel`. Not connected is `409` `slack_not_connected`.
          */
         put: operations["putSlackChannel"];
         post?: never;
@@ -7490,6 +7490,8 @@ export interface components {
             fixStatus: "open" | "pr-pending" | "fixed";
             /** @description True when the platform does not yet have an auto-fix skill for this issue's dimension. The UI should render these items as disabled with a "Coming Soon" tooltip. */
             comingSoon?: boolean;
+            /** @description Short labels when the instruction file names two alternatives and does not pick one. Fix it stays disabled until the request includes one of these as patternChoice. */
+            unresolvedChoices?: string[];
             /**
              * @description How automated fixing is supported for this criterion. `auto` — agent edits files directly; no human input needed. `decisions-first` — agent requires docs/ai-readiness-decisions.md to be filled first. `guidance` — admin-level action; agent creates an instructions doc PR.
              * @enum {string}
@@ -7930,6 +7932,15 @@ export interface components {
                 /** @description Issues whose fix has been applied (fix_status = fixed). */
                 fixed: number;
             };
+            /** @description Distinct non-archived repos whose latest succeeded scan has an A1 gap (no instruction file) or a B5 gap (CI never runs tests). A gap whose matching issue is already fixed is excluded. Omitted when the server cannot see per-criterion status. */
+            verificationGapCount?: number;
+            /** @description Up to 12 repo and reason pairs for verificationGapCount. A repo with both gaps appears twice. Does not change averageOverallScore. */
+            verificationGaps?: components["schemas"]["AgenticFoundationVerificationGapDto"][];
+        };
+        AgenticFoundationVerificationGapDto: {
+            repoName: string;
+            /** @enum {string} */
+            reason: "no instruction file" | "CI never runs tests";
         };
         PageMetaDto: {
             /** @description Total rows matching filters (full workspace, not just this page). */
@@ -8098,6 +8109,8 @@ export interface components {
              * @description Workspace repository id that owns the issue
              */
             repoId: string;
+            /** @description Required when the issue has unresolvedChoices. Must be one of those labels. Stored on the fix row and stated in the worker prompt. */
+            patternChoice?: string;
         };
         PhaseRoleDto: {
             phase: string;
@@ -8341,12 +8354,13 @@ export interface components {
             teams: components["schemas"]["NotificationChatChannelsDto"];
         };
         SlackInstallUrlDto: {
-            /** @description Slack OAuth authorize URL. The bot token is not included. */
+            /** @description Slack OAuth authorize URL (`incoming-webhook` scope). Secrets are not included. */
             url: string;
         };
         SlackIntegrationStatusDto: {
+            /** @description True only when a decryptable install webhook URL is stored for this workspace. */
             connected: boolean;
-            /** @description Saved channel name. Null until an admin saves a channel, and when disconnected. */
+            /** @description Channel name returned by Slack at install time. Null when not connected. */
             channelName: string | null;
         };
         SlackChannelBodyDto: {
@@ -11098,6 +11112,7 @@ export type LinkedRolePendingDto = components['schemas']['LinkedRolePendingDto']
 export type LinkedRoleAssessmentDto = components['schemas']['LinkedRoleAssessmentDto'];
 export type RepoReadinessScoreDetailDto = components['schemas']['RepoReadinessScoreDetailDto'];
 export type AgenticFoundationDashboardSummaryDto = components['schemas']['AgenticFoundationDashboardSummaryDto'];
+export type AgenticFoundationVerificationGapDto = components['schemas']['AgenticFoundationVerificationGapDto'];
 export type PageMetaDto = components['schemas']['PageMetaDto'];
 export type ReadinessEligibilityLimitsDto = components['schemas']['ReadinessEligibilityLimitsDto'];
 export type ReadinessRepoListDto = components['schemas']['ReadinessRepoListDto'];
@@ -18982,7 +18997,7 @@ export interface operations {
                     "application/json": components["schemas"]["FixRequestDto"];
                 };
             };
-            /** @description Invalid body or malformed `repoId` (not a UUID) */
+            /** @description Invalid body, malformed `repoId`, or a missing/unknown `patternChoice` when the issue has `unresolvedChoices` (`pattern_choice_required`, `pattern_choice_invalid`). */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -21383,7 +21398,7 @@ export interface operations {
             };
         };
         responses: {
-            /** @description Channel saved */
+            /** @description Not returned. The channel is chosen on Slack's install screen; when connected the API responds with `409` `slack_channel_reinstall_required`. */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -21392,7 +21407,7 @@ export interface operations {
                     "application/json": components["schemas"]["SlackIntegrationStatusDto"];
                 };
             };
-            /** @description channelId is missing, malformed, or unknown to Slack */
+            /** @description channelId is missing or malformed */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -21400,7 +21415,7 @@ export interface operations {
                 content: {
                     /**
                      * @example {
-                     *       "error": "Slack channel was not found",
+                     *       "error": "channelId is required",
                      *       "code": "invalid_slack_channel"
                      *     }
                      */
@@ -21432,33 +21447,12 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorMessageDto"];
                 };
             };
-            /** @description Slack is not connected */
+            /** @description Slack is not connected (`slack_not_connected`), or the channel cannot be changed without a new install (`slack_channel_reinstall_required`). */
             409: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    /**
-                     * @example {
-                     *       "error": "Slack is not connected",
-                     *       "code": "slack_not_connected"
-                     *     }
-                     */
-                    "application/json": components["schemas"]["ErrorMessageDto"];
-                };
-            };
-            /** @description Slack rejected the lookup */
-            502: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    /**
-                     * @example {
-                     *       "error": "Slack did not accept the channel",
-                     *       "code": "slack_request_failed"
-                     *     }
-                     */
                     "application/json": components["schemas"]["ErrorMessageDto"];
                 };
             };