@thinkai/tai-api-contract 2.187.0 → 2.189.0

package/openapi/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: ThinkAI API
-  version: 2.187.0
+  version: 2.189.0
   description: >
     Contract surface for the AI Driven SDLC backend used by ThinkAI.
     Workspace-scoped routes use `/workspaces/{workspaceId}/...`.
@@ -2755,6 +2755,7 @@ paths:
                       - $ref: "#/components/schemas/GrafanaSourceDto"
                       - $ref: "#/components/schemas/SonarQubeSourceDto"
                       - $ref: "#/components/schemas/PagerDutySourceDto"
+                      - $ref: "#/components/schemas/SentrySourceDto"
                       - $ref: "#/components/schemas/JiraSourceDto"
                       - $ref: "#/components/schemas/TenantSourceEntryDto"
             examples:
@@ -2877,6 +2878,7 @@ paths:
                 - $ref: "#/components/schemas/GrafanaSourceDto"
                 - $ref: "#/components/schemas/SonarQubeSourceDto"
                 - $ref: "#/components/schemas/PagerDutySourceDto"
+                - $ref: "#/components/schemas/SentrySourceDto"
                 - $ref: "#/components/schemas/JiraSourceDto"
                 - $ref: "#/components/schemas/TenantSourceEntryDto"
             examples:
@@ -9326,6 +9328,143 @@ paths:
               schema:
                 $ref: "#/components/schemas/GithubPermissionsCheckFailedErrorDto"
 
+  /workspaces/{workspaceId}/rules-skills/validate:
+    post:
+      tags: [AgenticFoundation]
+      summary: Validate agent rules and skills for a repository
+      description: >
+        Clones the connected GitHub repository via the workspace GitHub App installation
+        and runs the shared Rules & Skills validate engine (structural + soft quality).
+        Assessed tools come from the latest **succeeded** readiness scan
+        (`agent_tool_assessed`: `cursor` | `claude-code` | `both`). Returns draft
+        `proposedFiles` for review (not committed). Workspace member auth; write
+        permissions are not required for validate-only.
+      operationId: postRulesSkillsValidate
+      parameters:
+        - $ref: "#/components/parameters/WorkspaceId"
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/RulesSkillsValidateRequestDto"
+            examples:
+              validate:
+                value:
+                  repoId: "11111111-1111-4111-8111-111111111111"
+                  pathPrefixes:
+                    - ".cursor"
+      responses:
+        "200":
+          description: Validation result with findings and draft proposed files
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/RulesSkillsValidateResponseDto"
+        "400":
+          description: Invalid body (e.g. malformed repoId)
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+        "401":
+          $ref: "#/components/responses/Unauthorized"
+        "403":
+          $ref: "#/components/responses/Forbidden"
+        "404":
+          description: Workspace or repository not found / not connected
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+        "422":
+          description: >
+            No succeeded readiness scan for the repo (`code: readiness_scan_required`),
+            or repository is not a GitHub-connected readiness repo.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+              examples:
+                readiness_scan_required:
+                  value:
+                    error: Run an Agentic Foundation readiness scan before validating rules and skills
+                    code: readiness_scan_required
+        "503":
+          description: Clone or GitHub App configuration failed
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+
+  /workspaces/{workspaceId}/rules-skills/pull-requests:
+    post:
+      tags: [AgenticFoundation]
+      summary: Open a Rules & Skills remediation pull request
+      description: >
+        Applies `proposedFiles` (or a future create-mode session) onto a non-default
+        branch via the Automations GitHub App installation and opens a pull request.
+        Never pushes to the default branch. PR title/body identify the change as
+        platform-generated and link back to `/agentic-foundation/rules-skills`.
+        Requires workspace editor or admin. Same write-permission gate as readiness fixes.
+      operationId: postRulesSkillsPullRequest
+      parameters:
+        - $ref: "#/components/parameters/WorkspaceId"
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/RulesSkillsOpenPullRequestRequestDto"
+            examples:
+              validateMode:
+                value:
+                  repoId: "11111111-1111-4111-8111-111111111111"
+                  mode: validate
+                  proposedFiles:
+                    - path: ".cursor/rules/foo.mdc"
+                      action: rename
+                      previousPath: ".cursor/rules/foo.md"
+                      content: "---\ndescription: example\nglobs: \"**/*\"\n---\n"
+      responses:
+        "200":
+          description: Pull request created
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/RulesSkillsOpenPullRequestResponseDto"
+        "400":
+          description: >
+            Missing proposed files or invalid body (`code: proposed_files_required`).
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+        "401":
+          $ref: "#/components/responses/Unauthorized"
+        "403":
+          $ref: "#/components/responses/Forbidden"
+        "404":
+          description: Workspace or repository not found
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+        "422":
+          description: GitHub installation lacks write permissions required for automated PRs
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/GithubWritePermissionsRequiredErrorDto"
+        "503":
+          description: GitHub installation permissions could not be verified, or PR create failed
+          content:
+            application/json:
+              schema:
+                oneOf:
+                  - $ref: "#/components/schemas/GithubPermissionsCheckFailedErrorDto"
+                  - $ref: "#/components/schemas/ErrorMessageDto"
+
   /workspaces/{workspaceId}/readiness/issues/{issueId}/fix-guide:
     get:
       tags: [RepositoryReadiness]
@@ -15693,6 +15832,66 @@ components:
           type: string
           description: PagerDuty user email when known from the last successful verify.
 
+    SentrySourceDto:
+      type: object
+      description: >
+        Sentry incident and release source for `PUT /workspaces/{workspaceId}/sources` and
+        `POST /workspaces/{workspaceId}/sources/test`. Requires an organization slug and an auth
+        token with `org:read`, `event:read`, and `project:read`. Issues map to incident events and
+        releases with a commit or environment map to deployment events.
+      required: [type, orgSlug, token]
+      additionalProperties: false
+      properties:
+        type:
+          type: string
+          enum: [sentry]
+        orgSlug:
+          type: string
+          minLength: 1
+          maxLength: 128
+          description: Sentry organization slug (the `{slug}` in `sentry.io/organizations/{slug}/`).
+        token:
+          type: string
+          minLength: 1
+          maxLength: 512
+          description: Sentry auth token (organization or internal integration token, write-only on PUT).
+        baseUrl:
+          type: string
+          description: Optional API base URL for self-hosted Sentry. Default `https://sentry.io/api/0`.
+        projectSlug:
+          type: string
+          description: Optional project slug. When set, only that project's issues and releases are ingested.
+        orgName:
+          type: string
+          description: Optional organization display name from a successful connection test (echo-after-test).
+
+    SentrySourceConfigDto:
+      type: object
+      description: >
+        Redacted Sentry source returned by `GET /workspaces/{workspaceId}/config`.
+        Raw token is never returned.
+      required: [type, hasToken, orgSlug]
+      additionalProperties: false
+      properties:
+        type:
+          type: string
+          enum: [sentry]
+        hasToken:
+          type: boolean
+          description: Whether an auth token is stored for this workspace.
+        orgSlug:
+          type: string
+          description: Configured Sentry organization slug.
+        baseUrl:
+          type: string
+          description: Configured API base URL override, when set.
+        projectSlug:
+          type: string
+          description: Configured project filter, when set.
+        orgName:
+          type: string
+          description: Sentry organization name when known from the last successful verify.
+
     JiraSourceDto:
       type: object
       description: >
@@ -15973,6 +16172,7 @@ components:
               - $ref: "#/components/schemas/GrafanaSourceConfigDto"
               - $ref: "#/components/schemas/SonarQubeSourceConfigDto"
               - $ref: "#/components/schemas/PagerDutySourceConfigDto"
+              - $ref: "#/components/schemas/SentrySourceConfigDto"
               - $ref: "#/components/schemas/JiraSourceConfigDto"
               - $ref: "#/components/schemas/TenantSourceEntryDto"
         orgChart:
@@ -16229,7 +16429,7 @@ components:
           description: Present for New Relic or Jira verify success — resolved account ID.
         orgName:
           type: string
-          description: Present for Grafana or Datadog verify success — resolved organization name.
+          description: Present for Grafana, Datadog, or Sentry verify success — resolved organization name.
         clusterName:
           type: string
           description: Present for Prometheus verify success — Alertmanager cluster name.
@@ -22542,6 +22742,170 @@ components:
             Required when the issue has unresolvedChoices. Must be one of those labels.
             Stored on the fix row and stated in the worker prompt.
 
+    RulesSkillsAssessedTools:
+      type: string
+      enum: [cursor, claude-code, both]
+      description: >
+        From the latest succeeded readiness scan (`agent_tool_assessed`). Never invent
+        `both` without scan evidence.
+
+    RulesSkillsValidateRequestDto:
+      type: object
+      additionalProperties: false
+      required: [repoId]
+      properties:
+        repoId:
+          type: string
+          format: uuid
+        pathPrefixes:
+          type: array
+          maxItems: 32
+          items:
+            type: string
+            maxLength: 512
+          description: Optional relative path prefixes limiting the validate walk.
+
+    RulesSkillsFindingDto:
+      type: object
+      additionalProperties: false
+      required: [id, kind, severity, code, path, message, criterionIds]
+      properties:
+        id:
+          type: string
+        kind:
+          type: string
+          enum: [structural, soft]
+        severity:
+          type: string
+          enum: [fail, warn]
+        code:
+          type: string
+        path:
+          type: string
+        message:
+          type: string
+        criterionIds:
+          type: array
+          items:
+            type: string
+            enum: [A1, A2, A3, A3a, A3b, A3c, A11]
+          description: Empty when unmapped structural noise.
+
+    RulesSkillsSoftQualityCheckDto:
+      type: object
+      additionalProperties: false
+      required: [code, status]
+      properties:
+        code:
+          type: string
+        status:
+          type: string
+          enum: [pass, fail, warn, skip]
+        message:
+          type: string
+        path:
+          type: string
+
+    RulesSkillsSoftQualitySummaryDto:
+      type: object
+      additionalProperties: false
+      required: [passed, failCount, warnCount, checks]
+      properties:
+        passed:
+          type: boolean
+          description: True when there are no soft-quality fail findings (warns allowed).
+        failCount:
+          type: integer
+          minimum: 0
+        warnCount:
+          type: integer
+          minimum: 0
+        checks:
+          type: array
+          items:
+            $ref: "#/components/schemas/RulesSkillsSoftQualityCheckDto"
+
+    RulesSkillsProposedFileDto:
+      type: object
+      additionalProperties: false
+      required: [path, action]
+      properties:
+        path:
+          type: string
+          maxLength: 1024
+        action:
+          type: string
+          enum: [create, update, delete, rename]
+        content:
+          type: string
+          description: Full file contents for create/update/rename target.
+        previousPath:
+          type: string
+          maxLength: 1024
+          description: Source path when action is rename.
+
+    RulesSkillsValidateResponseDto:
+      type: object
+      additionalProperties: false
+      required: [assessedTools, findings, softQualitySummary, proposedFiles]
+      properties:
+        assessedTools:
+          $ref: "#/components/schemas/RulesSkillsAssessedTools"
+        findings:
+          type: array
+          items:
+            $ref: "#/components/schemas/RulesSkillsFindingDto"
+        softQualitySummary:
+          $ref: "#/components/schemas/RulesSkillsSoftQualitySummaryDto"
+        proposedFiles:
+          type: array
+          items:
+            $ref: "#/components/schemas/RulesSkillsProposedFileDto"
+        note:
+          type: string
+          description: Quiet-case note (e.g. empty tree under pathPrefixes).
+
+    RulesSkillsOpenPullRequestRequestDto:
+      type: object
+      additionalProperties: false
+      required: [repoId, mode]
+      properties:
+        repoId:
+          type: string
+          format: uuid
+        mode:
+          type: string
+          enum: [validate, create]
+        sessionId:
+          type: string
+          format: uuid
+          description: Reserved for Create-mode sessions; validate mode uses proposedFiles.
+        proposedFiles:
+          type: array
+          minItems: 1
+          maxItems: 200
+          items:
+            $ref: "#/components/schemas/RulesSkillsProposedFileDto"
+        title:
+          type: string
+          maxLength: 200
+        body:
+          type: string
+          maxLength: 8000
+
+    RulesSkillsOpenPullRequestResponseDto:
+      type: object
+      additionalProperties: false
+      required: [prUrl, prNumber, branchName]
+      properties:
+        prUrl:
+          type: string
+          format: uri
+        prNumber:
+          type: integer
+        branchName:
+          type: string
+
     PhaseRoleDto:
       type: object
       required: [phase, assignment]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thinkai/tai-api-contract",
-  "version": "2.187.0",
+  "version": "2.189.0",
   "private": false,
   "type": "module",
   "main": "dist/index.js",