@thinkai/tai-api-contract 2.197.0 → 2.199.0

package/openapi/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: ThinkAI API
-  version: 2.197.0
+  version: 2.199.0
   description: >
     Contract surface for the AI Driven SDLC backend used by ThinkAI.
     Workspace-scoped routes use `/workspaces/{workspaceId}/...`.
@@ -2673,6 +2673,96 @@ paths:
               schema:
                 $ref: "#/components/schemas/ErrorMessageDto"
 
+  /workspaces/{workspaceId}/strict-insights-on-trust:
+    put:
+      tags: [Workspace]
+      summary: Enable or disable strict Insights gating on dataTrust
+      description: >
+        Opt-in enterprise flag (default off). When enabled, Insights may hide card bodies
+        for non-remediable unverified ingest `dataTrust` and notify ThinkAI ops. Requires
+        workspace admin. On success writes activity `config.strict_insights_on_trust.changed`.
+        Read back via `GET /workspaces/{workspaceId}/config` → `strictInsightsOnTrust`.
+      operationId: putWorkspaceStrictInsightsOnTrust
+      parameters:
+        - $ref: "#/components/parameters/WorkspaceId"
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/PutStrictInsightsOnTrustDto"
+      responses:
+        "200":
+          description: Flag updated
+          content:
+            application/json:
+              schema:
+                type: object
+                required: [ok, strictInsightsOnTrust]
+                additionalProperties: false
+                properties:
+                  ok:
+                    type: boolean
+                  strictInsightsOnTrust:
+                    type: boolean
+        "400":
+          description: Invalid request body
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+        "401":
+          $ref: "#/components/responses/Unauthorized"
+        "403":
+          $ref: "#/components/responses/Forbidden"
+        "501":
+          description: Store does not support this setting
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+
+  /workspaces/{workspaceId}/insights/strict-trust-hide-notify:
+    post:
+      tags: [Workspace]
+      summary: Notify ThinkAI ops of a non-remediable strict Insights hide
+      description: >
+        Called by the SPA when strict Insights is on and a card body is hidden because a
+        required ingest input has `dataTrust.status` ≠ `verified` and Data coverage offers
+        no meaningful self-serve fix (reconnect / Fill / Retry / Sync). Emits a warn
+        `@event:ingest.insights.strict_trust_hide` line with `workspaceId`, `pipeline`,
+        `trustStatus`, `verificationMethod`, and `fix_request: true` (ThinkAI ops /
+        Datadog — not Message Center). Debounced per workspace+pipeline transition into
+        the same hide fingerprint. Returns `{ emitted: false }` without writing a line when
+        the workspace flag is off, `trustStatus` is `verified`, or the fingerprint was
+        already emitted. Member-level access (any Insights viewer may trigger ops notify).
+      operationId: postInsightsStrictTrustHideNotify
+      parameters:
+        - $ref: "#/components/parameters/WorkspaceId"
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/InsightsStrictTrustHideNotifyDto"
+      responses:
+        "200":
+          description: Notify attempt recorded (may or may not have emitted)
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/InsightsStrictTrustHideNotifyResultDto"
+        "400":
+          description: Invalid request body
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+        "401":
+          $ref: "#/components/responses/Unauthorized"
+        "403":
+          $ref: "#/components/responses/Forbidden"
+
   /workspaces/{workspaceId}/ai-model-policy:
     get:
       tags: [Workspace]
@@ -5015,7 +5105,8 @@ paths:
         middle ~20% integration+contract+acceptance/BDD, top ~10% E2E) and returns
         `insufficient_data` when total classified test files < 10. Also returns
         maturity trend, coverage overlay, confidence, applicability, E2E-cross/hotspot
-        risk, and workspace-only `ciQuality` from the latest org dashboard snapshot.
+        risk, workspace-only `ciQuality`, and Actions/check-name `suiteExecution`
+        (unit/e2e suite pass/flake) from the latest org dashboard snapshot.
         Does not change Agentic Foundation `/readiness/test-pyramid*` responses.
       parameters:
         - $ref: "#/components/parameters/WorkspaceId"
@@ -16488,6 +16579,14 @@ components:
           description: >
             Deep Wiki documentation focus for this workspace (guidance notes + optional topic outline).
             Saved via `PUT /workspaces/{workspaceId}/code-intelligence` (`wikiGuidance`).
+        strictInsightsOnTrust:
+          type: boolean
+          description: >
+            When true (opt-in enterprise), Insights may hide card bodies whose required ingest
+            inputs have `dataTrust.status` ≠ `verified` and no meaningful Data coverage self-serve
+            fix (reconnect / Fill / Retry / Sync), and notify ThinkAI ops. Default false — never
+            on for all workspaces. Missing/null treated as off. Change via
+            `PUT /workspaces/{workspaceId}/strict-insights-on-trust`.
 
     DeliveryRoleConfigDto:
       type: object
@@ -24558,6 +24657,7 @@ components:
         - report.assessment_restored
         - workspace.aggregate_use.changed
         - workspace.assessment_rollout.changed
+        - config.strict_insights_on_trust.changed
 
     AggregateUseNoticeStatusDto:
       type: object
@@ -26147,6 +26247,47 @@ components:
         verificationMethod:
           $ref: "#/components/schemas/DataTrustVerificationMethod"
 
+    PutStrictInsightsOnTrustDto:
+      type: object
+      required: [enabled]
+      additionalProperties: false
+      properties:
+        enabled:
+          type: boolean
+          description: >
+            true to opt in to strict Insights gating on ingest dataTrust; false to opt out
+            (default). Never default-on for all workspaces.
+
+    InsightsStrictTrustHideNotifyDto:
+      type: object
+      required: [pipeline, trustStatus, verificationMethod]
+      additionalProperties: false
+      description: >
+        Payload when the SPA hides an Insights card body under strict mode for a
+        non-remediable unverified dataTrust gap.
+      properties:
+        pipeline:
+          type: string
+          minLength: 1
+          description: >
+            Ingest-coverage pipeline id or kind (e.g. `productivity_github`, `ai_usage`,
+            `monitoring`, `hris`).
+        trustStatus:
+          $ref: "#/components/schemas/DataTrustStatus"
+        verificationMethod:
+          $ref: "#/components/schemas/DataTrustVerificationMethod"
+
+    InsightsStrictTrustHideNotifyResultDto:
+      type: object
+      required: [emitted]
+      additionalProperties: false
+      properties:
+        emitted:
+          type: boolean
+          description: >
+            true when a new `@event:ingest.insights.strict_trust_hide` warn line was written
+            for this workspace+pipeline transition.
+
     IngestCoveragePipelineDto:
       type: object
       required: [id, kind, status, targetWindowDays, isStale, dataTrust]
@@ -29616,6 +29757,54 @@ components:
           type: string
           description: Dashboard metrics bucket end for the org snapshot.
 
+    InsightsTestPyramidSuiteLayerOutcomeDto:
+      type: object
+      required: [passRatePercent, failRatePercent, runsTotal, sampleBucketEnd]
+      properties:
+        passRatePercent:
+          type: number
+          minimum: 0
+          maximum: 100
+        failRatePercent:
+          type: number
+          minimum: 0
+          maximum: 100
+        runsTotal:
+          type: integer
+          minimum: 1
+        sampleBucketEnd:
+          type: string
+          description: Latest mapped check-run `occurred_at` in the sample.
+        flakePercent:
+          type: number
+          minimum: 0
+          maximum: 100
+          description: >
+            Included only when `runsTotal` is at least 5. Failure then success on
+            the same `head_sha` + check name counts as a flake observation.
+
+    InsightsTestPyramidSuiteExecutionDto:
+      type: object
+      nullable: true
+      description: >
+        Suite-level pass/flake from GitHub Actions / Checks job names classified
+        onto pyramid layers. Null when no mapped unit/e2e (or optional integration)
+        check names exist in the org dashboard quality snapshot.
+      properties:
+        unit:
+          allOf:
+            - $ref: "#/components/schemas/InsightsTestPyramidSuiteLayerOutcomeDto"
+          nullable: true
+        e2e:
+          allOf:
+            - $ref: "#/components/schemas/InsightsTestPyramidSuiteLayerOutcomeDto"
+          nullable: true
+        integration:
+          allOf:
+            - $ref: "#/components/schemas/InsightsTestPyramidSuiteLayerOutcomeDto"
+          nullable: true
+          description: Optional bonus layer; not required for #234 acceptance.
+
     InsightsTestPyramidSummaryDto:
       type: object
       required:
@@ -29636,6 +29825,7 @@ components:
         - e2eCrossRepoCandidateCount
         - reposWithHotspots
         - ciQuality
+        - suiteExecution
       properties:
         workspaceId: { type: string, format: uuid }
         generatedAt: { type: string, format: date-time }
@@ -29687,6 +29877,8 @@ components:
           description: Repos whose latest Code Insights snapshot has `hotspotCount` > 0.
         ciQuality:
           $ref: "#/components/schemas/InsightsTestPyramidCiQualityDto"
+        suiteExecution:
+          $ref: "#/components/schemas/InsightsTestPyramidSuiteExecutionDto"
 
     InsightsTestPyramidRepoItemDto:
       type: object
@@ -29711,6 +29903,7 @@ components:
         - layerApplicable
         - e2eCrossRepoCandidate
         - hotspotCount
+        - suiteExecution
       properties:
         repoId: { type: string, format: uuid }
         repoName: { type: string }
@@ -29772,6 +29965,8 @@ components:
           description: >
             Row count in `tai_workspace_repo_code_hotspots` for the repo's latest
             Code Insights metrics snapshot. Null when the repo has no metrics snapshot.
+        suiteExecution:
+          $ref: "#/components/schemas/InsightsTestPyramidSuiteExecutionDto"
 
     InsightsTestPyramidRepoListDto:
       type: object