@thinkai/tai-api-contract 2.198.0 → 2.199.0

package/openapi/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: ThinkAI API
-  version: 2.198.0
+  version: 2.199.0
   description: >
     Contract surface for the AI Driven SDLC backend used by ThinkAI.
     Workspace-scoped routes use `/workspaces/{workspaceId}/...`.
@@ -2673,6 +2673,96 @@ paths:
               schema:
                 $ref: "#/components/schemas/ErrorMessageDto"
 
+  /workspaces/{workspaceId}/strict-insights-on-trust:
+    put:
+      tags: [Workspace]
+      summary: Enable or disable strict Insights gating on dataTrust
+      description: >
+        Opt-in enterprise flag (default off). When enabled, Insights may hide card bodies
+        for non-remediable unverified ingest `dataTrust` and notify ThinkAI ops. Requires
+        workspace admin. On success writes activity `config.strict_insights_on_trust.changed`.
+        Read back via `GET /workspaces/{workspaceId}/config` → `strictInsightsOnTrust`.
+      operationId: putWorkspaceStrictInsightsOnTrust
+      parameters:
+        - $ref: "#/components/parameters/WorkspaceId"
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/PutStrictInsightsOnTrustDto"
+      responses:
+        "200":
+          description: Flag updated
+          content:
+            application/json:
+              schema:
+                type: object
+                required: [ok, strictInsightsOnTrust]
+                additionalProperties: false
+                properties:
+                  ok:
+                    type: boolean
+                  strictInsightsOnTrust:
+                    type: boolean
+        "400":
+          description: Invalid request body
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+        "401":
+          $ref: "#/components/responses/Unauthorized"
+        "403":
+          $ref: "#/components/responses/Forbidden"
+        "501":
+          description: Store does not support this setting
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+
+  /workspaces/{workspaceId}/insights/strict-trust-hide-notify:
+    post:
+      tags: [Workspace]
+      summary: Notify ThinkAI ops of a non-remediable strict Insights hide
+      description: >
+        Called by the SPA when strict Insights is on and a card body is hidden because a
+        required ingest input has `dataTrust.status` ≠ `verified` and Data coverage offers
+        no meaningful self-serve fix (reconnect / Fill / Retry / Sync). Emits a warn
+        `@event:ingest.insights.strict_trust_hide` line with `workspaceId`, `pipeline`,
+        `trustStatus`, `verificationMethod`, and `fix_request: true` (ThinkAI ops /
+        Datadog — not Message Center). Debounced per workspace+pipeline transition into
+        the same hide fingerprint. Returns `{ emitted: false }` without writing a line when
+        the workspace flag is off, `trustStatus` is `verified`, or the fingerprint was
+        already emitted. Member-level access (any Insights viewer may trigger ops notify).
+      operationId: postInsightsStrictTrustHideNotify
+      parameters:
+        - $ref: "#/components/parameters/WorkspaceId"
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/InsightsStrictTrustHideNotifyDto"
+      responses:
+        "200":
+          description: Notify attempt recorded (may or may not have emitted)
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/InsightsStrictTrustHideNotifyResultDto"
+        "400":
+          description: Invalid request body
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+        "401":
+          $ref: "#/components/responses/Unauthorized"
+        "403":
+          $ref: "#/components/responses/Forbidden"
+
   /workspaces/{workspaceId}/ai-model-policy:
     get:
       tags: [Workspace]
@@ -16489,6 +16579,14 @@ components:
           description: >
             Deep Wiki documentation focus for this workspace (guidance notes + optional topic outline).
             Saved via `PUT /workspaces/{workspaceId}/code-intelligence` (`wikiGuidance`).
+        strictInsightsOnTrust:
+          type: boolean
+          description: >
+            When true (opt-in enterprise), Insights may hide card bodies whose required ingest
+            inputs have `dataTrust.status` ≠ `verified` and no meaningful Data coverage self-serve
+            fix (reconnect / Fill / Retry / Sync), and notify ThinkAI ops. Default false — never
+            on for all workspaces. Missing/null treated as off. Change via
+            `PUT /workspaces/{workspaceId}/strict-insights-on-trust`.
 
     DeliveryRoleConfigDto:
       type: object
@@ -24559,6 +24657,7 @@ components:
         - report.assessment_restored
         - workspace.aggregate_use.changed
         - workspace.assessment_rollout.changed
+        - config.strict_insights_on_trust.changed
 
     AggregateUseNoticeStatusDto:
       type: object
@@ -26148,6 +26247,47 @@ components:
         verificationMethod:
           $ref: "#/components/schemas/DataTrustVerificationMethod"
 
+    PutStrictInsightsOnTrustDto:
+      type: object
+      required: [enabled]
+      additionalProperties: false
+      properties:
+        enabled:
+          type: boolean
+          description: >
+            true to opt in to strict Insights gating on ingest dataTrust; false to opt out
+            (default). Never default-on for all workspaces.
+
+    InsightsStrictTrustHideNotifyDto:
+      type: object
+      required: [pipeline, trustStatus, verificationMethod]
+      additionalProperties: false
+      description: >
+        Payload when the SPA hides an Insights card body under strict mode for a
+        non-remediable unverified dataTrust gap.
+      properties:
+        pipeline:
+          type: string
+          minLength: 1
+          description: >
+            Ingest-coverage pipeline id or kind (e.g. `productivity_github`, `ai_usage`,
+            `monitoring`, `hris`).
+        trustStatus:
+          $ref: "#/components/schemas/DataTrustStatus"
+        verificationMethod:
+          $ref: "#/components/schemas/DataTrustVerificationMethod"
+
+    InsightsStrictTrustHideNotifyResultDto:
+      type: object
+      required: [emitted]
+      additionalProperties: false
+      properties:
+        emitted:
+          type: boolean
+          description: >
+            true when a new `@event:ingest.insights.strict_trust_hide` warn line was written
+            for this workspace+pipeline transition.
+
     IngestCoveragePipelineDto:
       type: object
       required: [id, kind, status, targetWindowDays, isStale, dataTrust]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thinkai/tai-api-contract",
-  "version": "2.198.0",
+  "version": "2.199.0",
   "private": false,
   "type": "module",
   "main": "dist/index.js",

package/src/generated/openapi.ts

@@ -855,6 +855,46 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/workspaces/{workspaceId}/strict-insights-on-trust": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Enable or disable strict Insights gating on dataTrust
+         * @description Opt-in enterprise flag (default off). When enabled, Insights may hide card bodies for non-remediable unverified ingest `dataTrust` and notify ThinkAI ops. Requires workspace admin. On success writes activity `config.strict_insights_on_trust.changed`. Read back via `GET /workspaces/{workspaceId}/config` → `strictInsightsOnTrust`.
+         */
+        put: operations["putWorkspaceStrictInsightsOnTrust"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/workspaces/{workspaceId}/insights/strict-trust-hide-notify": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Notify ThinkAI ops of a non-remediable strict Insights hide
+         * @description Called by the SPA when strict Insights is on and a card body is hidden because a required ingest input has `dataTrust.status` ≠ `verified` and Data coverage offers no meaningful self-serve fix (reconnect / Fill / Retry / Sync). Emits a warn `@event:ingest.insights.strict_trust_hide` line with `workspaceId`, `pipeline`, `trustStatus`, `verificationMethod`, and `fix_request: true` (ThinkAI ops / Datadog — not Message Center). Debounced per workspace+pipeline transition into the same hide fingerprint. Returns `{ emitted: false }` without writing a line when the workspace flag is off, `trustStatus` is `verified`, or the fingerprint was already emitted. Member-level access (any Insights viewer may trigger ops notify).
+         */
+        post: operations["postInsightsStrictTrustHideNotify"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/workspaces/{workspaceId}/ai-model-policy": {
         parameters: {
             query?: never;
@@ -6381,6 +6421,8 @@ export interface components {
             deliveryTopology?: components["schemas"]["DeliveryTopologyDto"] | null;
             /** @description Deep Wiki documentation focus for this workspace (guidance notes + optional topic outline). Saved via `PUT /workspaces/{workspaceId}/code-intelligence` (`wikiGuidance`). */
             codeWikiGuidance?: components["schemas"]["CodeWikiGuidanceDto"];
+            /** @description When true (opt-in enterprise), Insights may hide card bodies whose required ingest inputs have `dataTrust.status` ≠ `verified` and no meaningful Data coverage self-serve fix (reconnect / Fill / Retry / Sync), and notify ThinkAI ops. Default false — never on for all workspaces. Missing/null treated as off. Change via `PUT /workspaces/{workspaceId}/strict-insights-on-trust`. */
+            strictInsightsOnTrust?: boolean;
         };
         DeliveryRoleConfigDto: {
             /** @description First connected workspace repo (`owner/repo`) that holds this kind of evidence. Kept so a saved single-repo role still reads. Same value as `providerSlugs[0]`. */
@@ -10073,7 +10115,7 @@ export interface components {
          * @description Type of workspace lifecycle event.
          * @enum {string}
          */
-        ActivityLogEventTypeDto: "repo.added" | "repo.removed" | "repo.readded" | "integration.github.added" | "integration.github.updated" | "integration.github.removed" | "integration.github.permissions_changed" | "integration.github.suspended" | "integration.github.unsuspended" | "integration.github.repo_added" | "integration.github.repo_removed" | "fix.requested" | "fix.generating" | "fix.pr_created" | "fix.merged" | "fix.failed" | "readiness.scan_started" | "readiness.scan_completed" | "readiness.scan_failed" | "readiness.scan_partial" | "code_insights.design_run_started" | "integrations.agent_execution.provider_changed" | "integrations.repo_eligibility.overrides_changed" | "integrations.repo_eligibility.languages_refresh_requested" | "rules_skills.soft_quality.override" | "integrations.cursor.platform_key_enabled" | "integrations.cursor.platform_key_disabled" | "member.invited" | "member.invite_accepted" | "member.invite_rejected" | "member.role_changed" | "member.removed" | "hris.personio.sync_started" | "hris.personio.sync_completed" | "hris.personio.sync_failed" | "hris.zenhr.sync_started" | "hris.zenhr.sync_completed" | "hris.zenhr.sync_failed" | "hris.zelt.sync_started" | "hris.zelt.sync_completed" | "hris.zelt.sync_failed" | "hris.hibob.sync_started" | "hris.hibob.sync_completed" | "hris.hibob.sync_failed" | "hris.sync_started" | "hris.sync_completed" | "hris.sync_failed" | "repo.sync_skipped" | "integrations.cursor.execution_key.added" | "integrations.cursor.execution_key.updated" | "integrations.cursor.execution_key.removed" | "integrations.cursor.execution_key.check_failed" | "integrations.cursor.admin_key.added" | "integrations.cursor.admin_key.updated" | "integrations.cursor.admin_key.removed" | "integrations.claude.execution_key.added" | "integrations.claude.execution_key.updated" | "integrations.claude.execution_key.removed" | "integrations.claude.execution_key.check_failed" | "integrations.claude.admin_key.added" | "integrations.claude.admin_key.updated" | "integrations.claude.admin_key.removed" | "integrations.claude.analytics_key.added" | "integrations.claude.analytics_key.updated" | "integrations.claude.analytics_key.removed" | "integrations.code_intelligence.settings_changed" | "integrations.code_intelligence.execution_key.added" | "integrations.code_intelligence.execution_key.updated" | "integrations.code_intelligence.execution_key.removed" | "integrations.code_intelligence.execution_key.check_failed" | "readiness.scan_precheck_failed" | "productivity.ingest.completed" | "productivity.ingest.failed" | "productivity.ingest.skipped" | "productivity.ingest.repo_skipped" | "productivity.ingest.coverage_gap_detected" | "integrations.newrelic.added" | "integrations.newrelic.removed" | "integrations.newrelic.sync_completed" | "integrations.newrelic.sync_failed" | "integrations.prometheus.added" | "integrations.prometheus.removed" | "integrations.prometheus.sync_completed" | "integrations.prometheus.sync_failed" | "integrations.grafana.added" | "integrations.grafana.removed" | "integrations.grafana.sync_completed" | "integrations.grafana.sync_failed" | "integrations.datadog.added" | "integrations.datadog.removed" | "integrations.datadog.sync_completed" | "integrations.datadog.sync_failed" | "integrations.sentry.added" | "integrations.sentry.removed" | "integrations.sentry.sync_completed" | "integrations.sentry.sync_failed" | "integrations.zelt.added" | "integrations.zelt.removed" | "report.exported" | "report.assessment_stored" | "report.assessment_link_sent" | "report.assessment_link_revoked" | "report.assessment_downloaded" | "report.assessment_hidden" | "report.assessment_restored" | "workspace.aggregate_use.changed" | "workspace.assessment_rollout.changed";
+        ActivityLogEventTypeDto: "repo.added" | "repo.removed" | "repo.readded" | "integration.github.added" | "integration.github.updated" | "integration.github.removed" | "integration.github.permissions_changed" | "integration.github.suspended" | "integration.github.unsuspended" | "integration.github.repo_added" | "integration.github.repo_removed" | "fix.requested" | "fix.generating" | "fix.pr_created" | "fix.merged" | "fix.failed" | "readiness.scan_started" | "readiness.scan_completed" | "readiness.scan_failed" | "readiness.scan_partial" | "code_insights.design_run_started" | "integrations.agent_execution.provider_changed" | "integrations.repo_eligibility.overrides_changed" | "integrations.repo_eligibility.languages_refresh_requested" | "rules_skills.soft_quality.override" | "integrations.cursor.platform_key_enabled" | "integrations.cursor.platform_key_disabled" | "member.invited" | "member.invite_accepted" | "member.invite_rejected" | "member.role_changed" | "member.removed" | "hris.personio.sync_started" | "hris.personio.sync_completed" | "hris.personio.sync_failed" | "hris.zenhr.sync_started" | "hris.zenhr.sync_completed" | "hris.zenhr.sync_failed" | "hris.zelt.sync_started" | "hris.zelt.sync_completed" | "hris.zelt.sync_failed" | "hris.hibob.sync_started" | "hris.hibob.sync_completed" | "hris.hibob.sync_failed" | "hris.sync_started" | "hris.sync_completed" | "hris.sync_failed" | "repo.sync_skipped" | "integrations.cursor.execution_key.added" | "integrations.cursor.execution_key.updated" | "integrations.cursor.execution_key.removed" | "integrations.cursor.execution_key.check_failed" | "integrations.cursor.admin_key.added" | "integrations.cursor.admin_key.updated" | "integrations.cursor.admin_key.removed" | "integrations.claude.execution_key.added" | "integrations.claude.execution_key.updated" | "integrations.claude.execution_key.removed" | "integrations.claude.execution_key.check_failed" | "integrations.claude.admin_key.added" | "integrations.claude.admin_key.updated" | "integrations.claude.admin_key.removed" | "integrations.claude.analytics_key.added" | "integrations.claude.analytics_key.updated" | "integrations.claude.analytics_key.removed" | "integrations.code_intelligence.settings_changed" | "integrations.code_intelligence.execution_key.added" | "integrations.code_intelligence.execution_key.updated" | "integrations.code_intelligence.execution_key.removed" | "integrations.code_intelligence.execution_key.check_failed" | "readiness.scan_precheck_failed" | "productivity.ingest.completed" | "productivity.ingest.failed" | "productivity.ingest.skipped" | "productivity.ingest.repo_skipped" | "productivity.ingest.coverage_gap_detected" | "integrations.newrelic.added" | "integrations.newrelic.removed" | "integrations.newrelic.sync_completed" | "integrations.newrelic.sync_failed" | "integrations.prometheus.added" | "integrations.prometheus.removed" | "integrations.prometheus.sync_completed" | "integrations.prometheus.sync_failed" | "integrations.grafana.added" | "integrations.grafana.removed" | "integrations.grafana.sync_completed" | "integrations.grafana.sync_failed" | "integrations.datadog.added" | "integrations.datadog.removed" | "integrations.datadog.sync_completed" | "integrations.datadog.sync_failed" | "integrations.sentry.added" | "integrations.sentry.removed" | "integrations.sentry.sync_completed" | "integrations.sentry.sync_failed" | "integrations.zelt.added" | "integrations.zelt.removed" | "report.exported" | "report.assessment_stored" | "report.assessment_link_sent" | "report.assessment_link_revoked" | "report.assessment_downloaded" | "report.assessment_hidden" | "report.assessment_restored" | "workspace.aggregate_use.changed" | "workspace.assessment_rollout.changed" | "config.strict_insights_on_trust.changed";
         /** @description Current legal-approved opt-in notice, or `unset` while opt-in is unavailable. */
         AggregateUseNoticeStatusDto: {
             /** @enum {string} */
@@ -10786,6 +10828,21 @@ export interface components {
             status: components["schemas"]["DataTrustStatus"];
             verificationMethod: components["schemas"]["DataTrustVerificationMethod"];
         };
+        PutStrictInsightsOnTrustDto: {
+            /** @description true to opt in to strict Insights gating on ingest dataTrust; false to opt out (default). Never default-on for all workspaces. */
+            enabled: boolean;
+        };
+        /** @description Payload when the SPA hides an Insights card body under strict mode for a non-remediable unverified dataTrust gap. */
+        InsightsStrictTrustHideNotifyDto: {
+            /** @description Ingest-coverage pipeline id or kind (e.g. `productivity_github`, `ai_usage`, `monitoring`, `hris`). */
+            pipeline: string;
+            trustStatus: components["schemas"]["DataTrustStatus"];
+            verificationMethod: components["schemas"]["DataTrustVerificationMethod"];
+        };
+        InsightsStrictTrustHideNotifyResultDto: {
+            /** @description true when a new `@event:ingest.insights.strict_trust_hide` warn line was written for this workspace+pipeline transition. */
+            emitted: boolean;
+        };
         IngestCoveragePipelineDto: {
             id: string;
             /** @enum {string} */
@@ -13590,6 +13647,9 @@ export type IngestCoverageSyncDetailDto = components['schemas']['IngestCoverageS
 export type DataTrustStatus = components['schemas']['DataTrustStatus'];
 export type DataTrustVerificationMethod = components['schemas']['DataTrustVerificationMethod'];
 export type DataTrustDto = components['schemas']['DataTrustDto'];
+export type PutStrictInsightsOnTrustDto = components['schemas']['PutStrictInsightsOnTrustDto'];
+export type InsightsStrictTrustHideNotifyDto = components['schemas']['InsightsStrictTrustHideNotifyDto'];
+export type InsightsStrictTrustHideNotifyResultDto = components['schemas']['InsightsStrictTrustHideNotifyResultDto'];
 export type IngestCoveragePipelineDto = components['schemas']['IngestCoveragePipelineDto'];
 export type IngestCoverageDto = components['schemas']['IngestCoverageDto'];
 export type IngestRunDto = components['schemas']['IngestRunDto'];
@@ -16520,6 +16580,92 @@ export interface operations {
             };
         };
     };
+    putWorkspaceStrictInsightsOnTrust: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["PutStrictInsightsOnTrustDto"];
+            };
+        };
+        responses: {
+            /** @description Flag updated */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        ok: boolean;
+                        strictInsightsOnTrust: boolean;
+                    };
+                };
+            };
+            /** @description Invalid request body */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            /** @description Store does not support this setting */
+            501: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
+    postInsightsStrictTrustHideNotify: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["InsightsStrictTrustHideNotifyDto"];
+            };
+        };
+        responses: {
+            /** @description Notify attempt recorded (may or may not have emitted) */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["InsightsStrictTrustHideNotifyResultDto"];
+                };
+            };
+            /** @description Invalid request body */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+        };
+    };
     getWorkspaceAiModelPolicy: {
         parameters: {
             query?: never;