@thinkai/tai-api-contract 2.198.0 → 2.200.0

package/src/generated/openapi.ts

@@ -855,6 +855,46 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/workspaces/{workspaceId}/strict-insights-on-trust": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Enable or disable strict Insights gating on dataTrust
+         * @description Opt-in enterprise flag (default off). When enabled, Insights may hide card bodies for non-remediable unverified ingest `dataTrust` and notify ThinkAI ops. Requires workspace admin. On success writes activity `config.strict_insights_on_trust.changed`. Read back via `GET /workspaces/{workspaceId}/config` → `strictInsightsOnTrust`.
+         */
+        put: operations["putWorkspaceStrictInsightsOnTrust"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/workspaces/{workspaceId}/insights/strict-trust-hide-notify": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Notify ThinkAI ops of a non-remediable strict Insights hide
+         * @description Called by the SPA when strict Insights is on and a card body is hidden because a required ingest input has `dataTrust.status` ≠ `verified` and Data coverage offers no meaningful self-serve fix (reconnect / Fill / Retry / Sync). Emits a warn `@event:ingest.insights.strict_trust_hide` line with `workspaceId`, `pipeline`, `trustStatus`, `verificationMethod`, and `fix_request: true` (ThinkAI ops / Datadog — not Message Center). Debounced per workspace+pipeline transition into the same hide fingerprint. Returns `{ emitted: false }` without writing a line when the workspace flag is off, `trustStatus` is `verified`, or the fingerprint was already emitted. Member-level access (any Insights viewer may trigger ops notify).
+         */
+        post: operations["postInsightsStrictTrustHideNotify"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/workspaces/{workspaceId}/ai-model-policy": {
         parameters: {
             query?: never;
@@ -5176,7 +5216,7 @@ export interface paths {
         };
         /**
          * Ingest / backfill data coverage
-         * @description Read-only snapshot of historical ingest coverage for connected pipelines (productivity GitHub, AI usage/spend per provider, SDLC components, monitoring, HRIS). Aggregates existing watermarks and stored day/week evidence — does not trigger ingest or refresh. Every pipeline includes always-present `dataTrust` (`status` + `verificationMethod`) as a unified trust summary derived from existing coverage signals (stale, gaps, productivity `verificationStatus`, AI `spendReconciliationStatus`, pipeline `status`). It does not replace Source verified, Spend matched, or Backfill complete fields. Productivity detail may include `selfHeal` (latest depth scan and week reconcile) read from stored activity rows; this GET does not run a scan. `selfHeal` is null when neither event exists. AI usage detail includes spend reconciliation (`spendReconciliationStatus`, `spendDataQuality`, provider and stored cent totals, `spendReconcileCheckedAt`) read from the refresh-status snapshot. This GET does not call Cursor or Claude. Productivity, HR, monitoring, and SDLC pipelines omit those fields. `nextScheduledAt` is the scheduled poll instant for `ai_usage`, `hris`, and `monitoring`. It is null for productivity and SDLC, when that sync worker is disabled, or when there has been no attempt (`hris`/`monitoring` use last status `never`). For `hris` and `monitoring`, the value is the next PHASE2 daily UTC cron after now (`15 2` / `30 2`, not lastAttempt plus interval) and is therefore in the future when set. For `ai_usage`, it is the next weekly workspace slot and a past instant means that poll is overdue; it is not moved forward to now and is not an ETA. Monitoring `sync` copies stored `issueCount`, `deploymentCount`, and `eventCount` (null when unset). HRIS leaves those three null. Requires workspace membership. Disconnected sources are omitted. Insights / Measure / Engineering Health response DTOs do not include `dataTrust`.
+         * @description Read-only snapshot of historical ingest coverage for connected pipelines (productivity GitHub/Bitbucket, AI usage/spend per provider, SDLC components, monitoring, HRIS, Jira, PagerDuty). Aggregates existing watermarks and stored day/week evidence — does not trigger ingest or refresh. Every pipeline includes always-present `dataTrust` (`status` + `verificationMethod`) as a unified trust summary derived from existing coverage signals (stale, gaps, productivity `verificationStatus`, AI `spendReconciliationStatus`, optional pipeline `sourceReconcile`, pipeline `status`). It does not replace Source verified, Spend matched, or Backfill complete fields. Optional `sourceReconcile` generalizes Source verified (count/checksum vs provider) for L2 reconcilers; omit/null when no scheduled reconcile snapshot exists. Productivity detail may include `selfHeal` (latest depth scan and week reconcile) read from stored activity rows; this GET does not run a scan. `selfHeal` is null when neither event exists. AI usage detail includes spend reconciliation (`spendReconciliationStatus`, `spendDataQuality`, provider and stored cent totals, `spendReconcileCheckedAt`) read from the refresh-status snapshot. This GET does not call Cursor or Claude. Productivity, HR, monitoring, and SDLC pipelines omit those spend fields. `nextScheduledAt` is the scheduled poll instant for `ai_usage`, `hris`, and `monitoring`. It is null for productivity and SDLC, when that sync worker is disabled, or when there has been no attempt (`hris`/`monitoring` use last status `never`). For `hris` and `monitoring`, the value is the next PHASE2 daily UTC cron after now (`15 2` / `30 2`, not lastAttempt plus interval) and is therefore in the future when set. For `ai_usage`, it is the next weekly workspace slot and a past instant means that poll is overdue; it is not moved forward to now and is not an ETA. Monitoring `sync` copies stored `issueCount`, `deploymentCount`, and `eventCount` (null when unset). HRIS leaves those three null. Requires workspace membership. Disconnected sources are omitted. Insights / Measure / Engineering Health response DTOs do not include `dataTrust`.
          */
         get: operations["getWorkspaceIngestCoverage"];
         put?: never;
@@ -6381,6 +6421,8 @@ export interface components {
             deliveryTopology?: components["schemas"]["DeliveryTopologyDto"] | null;
             /** @description Deep Wiki documentation focus for this workspace (guidance notes + optional topic outline). Saved via `PUT /workspaces/{workspaceId}/code-intelligence` (`wikiGuidance`). */
             codeWikiGuidance?: components["schemas"]["CodeWikiGuidanceDto"];
+            /** @description When true (opt-in enterprise), Insights may hide card bodies whose required ingest inputs have `dataTrust.status` ≠ `verified` and no meaningful Data coverage self-serve fix (reconnect / Fill / Retry / Sync), and notify ThinkAI ops. Default false — never on for all workspaces. Missing/null treated as off. Change via `PUT /workspaces/{workspaceId}/strict-insights-on-trust`. */
+            strictInsightsOnTrust?: boolean;
         };
         DeliveryRoleConfigDto: {
             /** @description First connected workspace repo (`owner/repo`) that holds this kind of evidence. Kept so a saved single-repo role still reads. Same value as `providerSlugs[0]`. */
@@ -10073,7 +10115,7 @@ export interface components {
          * @description Type of workspace lifecycle event.
          * @enum {string}
          */
-        ActivityLogEventTypeDto: "repo.added" | "repo.removed" | "repo.readded" | "integration.github.added" | "integration.github.updated" | "integration.github.removed" | "integration.github.permissions_changed" | "integration.github.suspended" | "integration.github.unsuspended" | "integration.github.repo_added" | "integration.github.repo_removed" | "fix.requested" | "fix.generating" | "fix.pr_created" | "fix.merged" | "fix.failed" | "readiness.scan_started" | "readiness.scan_completed" | "readiness.scan_failed" | "readiness.scan_partial" | "code_insights.design_run_started" | "integrations.agent_execution.provider_changed" | "integrations.repo_eligibility.overrides_changed" | "integrations.repo_eligibility.languages_refresh_requested" | "rules_skills.soft_quality.override" | "integrations.cursor.platform_key_enabled" | "integrations.cursor.platform_key_disabled" | "member.invited" | "member.invite_accepted" | "member.invite_rejected" | "member.role_changed" | "member.removed" | "hris.personio.sync_started" | "hris.personio.sync_completed" | "hris.personio.sync_failed" | "hris.zenhr.sync_started" | "hris.zenhr.sync_completed" | "hris.zenhr.sync_failed" | "hris.zelt.sync_started" | "hris.zelt.sync_completed" | "hris.zelt.sync_failed" | "hris.hibob.sync_started" | "hris.hibob.sync_completed" | "hris.hibob.sync_failed" | "hris.sync_started" | "hris.sync_completed" | "hris.sync_failed" | "repo.sync_skipped" | "integrations.cursor.execution_key.added" | "integrations.cursor.execution_key.updated" | "integrations.cursor.execution_key.removed" | "integrations.cursor.execution_key.check_failed" | "integrations.cursor.admin_key.added" | "integrations.cursor.admin_key.updated" | "integrations.cursor.admin_key.removed" | "integrations.claude.execution_key.added" | "integrations.claude.execution_key.updated" | "integrations.claude.execution_key.removed" | "integrations.claude.execution_key.check_failed" | "integrations.claude.admin_key.added" | "integrations.claude.admin_key.updated" | "integrations.claude.admin_key.removed" | "integrations.claude.analytics_key.added" | "integrations.claude.analytics_key.updated" | "integrations.claude.analytics_key.removed" | "integrations.code_intelligence.settings_changed" | "integrations.code_intelligence.execution_key.added" | "integrations.code_intelligence.execution_key.updated" | "integrations.code_intelligence.execution_key.removed" | "integrations.code_intelligence.execution_key.check_failed" | "readiness.scan_precheck_failed" | "productivity.ingest.completed" | "productivity.ingest.failed" | "productivity.ingest.skipped" | "productivity.ingest.repo_skipped" | "productivity.ingest.coverage_gap_detected" | "integrations.newrelic.added" | "integrations.newrelic.removed" | "integrations.newrelic.sync_completed" | "integrations.newrelic.sync_failed" | "integrations.prometheus.added" | "integrations.prometheus.removed" | "integrations.prometheus.sync_completed" | "integrations.prometheus.sync_failed" | "integrations.grafana.added" | "integrations.grafana.removed" | "integrations.grafana.sync_completed" | "integrations.grafana.sync_failed" | "integrations.datadog.added" | "integrations.datadog.removed" | "integrations.datadog.sync_completed" | "integrations.datadog.sync_failed" | "integrations.sentry.added" | "integrations.sentry.removed" | "integrations.sentry.sync_completed" | "integrations.sentry.sync_failed" | "integrations.zelt.added" | "integrations.zelt.removed" | "report.exported" | "report.assessment_stored" | "report.assessment_link_sent" | "report.assessment_link_revoked" | "report.assessment_downloaded" | "report.assessment_hidden" | "report.assessment_restored" | "workspace.aggregate_use.changed" | "workspace.assessment_rollout.changed";
+        ActivityLogEventTypeDto: "repo.added" | "repo.removed" | "repo.readded" | "integration.github.added" | "integration.github.updated" | "integration.github.removed" | "integration.github.permissions_changed" | "integration.github.suspended" | "integration.github.unsuspended" | "integration.github.repo_added" | "integration.github.repo_removed" | "fix.requested" | "fix.generating" | "fix.pr_created" | "fix.merged" | "fix.failed" | "readiness.scan_started" | "readiness.scan_completed" | "readiness.scan_failed" | "readiness.scan_partial" | "code_insights.design_run_started" | "integrations.agent_execution.provider_changed" | "integrations.repo_eligibility.overrides_changed" | "integrations.repo_eligibility.languages_refresh_requested" | "rules_skills.soft_quality.override" | "integrations.cursor.platform_key_enabled" | "integrations.cursor.platform_key_disabled" | "member.invited" | "member.invite_accepted" | "member.invite_rejected" | "member.role_changed" | "member.removed" | "hris.personio.sync_started" | "hris.personio.sync_completed" | "hris.personio.sync_failed" | "hris.zenhr.sync_started" | "hris.zenhr.sync_completed" | "hris.zenhr.sync_failed" | "hris.zelt.sync_started" | "hris.zelt.sync_completed" | "hris.zelt.sync_failed" | "hris.hibob.sync_started" | "hris.hibob.sync_completed" | "hris.hibob.sync_failed" | "hris.sync_started" | "hris.sync_completed" | "hris.sync_failed" | "repo.sync_skipped" | "integrations.cursor.execution_key.added" | "integrations.cursor.execution_key.updated" | "integrations.cursor.execution_key.removed" | "integrations.cursor.execution_key.check_failed" | "integrations.cursor.admin_key.added" | "integrations.cursor.admin_key.updated" | "integrations.cursor.admin_key.removed" | "integrations.claude.execution_key.added" | "integrations.claude.execution_key.updated" | "integrations.claude.execution_key.removed" | "integrations.claude.execution_key.check_failed" | "integrations.claude.admin_key.added" | "integrations.claude.admin_key.updated" | "integrations.claude.admin_key.removed" | "integrations.claude.analytics_key.added" | "integrations.claude.analytics_key.updated" | "integrations.claude.analytics_key.removed" | "integrations.code_intelligence.settings_changed" | "integrations.code_intelligence.execution_key.added" | "integrations.code_intelligence.execution_key.updated" | "integrations.code_intelligence.execution_key.removed" | "integrations.code_intelligence.execution_key.check_failed" | "readiness.scan_precheck_failed" | "productivity.ingest.completed" | "productivity.ingest.failed" | "productivity.ingest.skipped" | "productivity.ingest.repo_skipped" | "productivity.ingest.coverage_gap_detected" | "integrations.newrelic.added" | "integrations.newrelic.removed" | "integrations.newrelic.sync_completed" | "integrations.newrelic.sync_failed" | "integrations.prometheus.added" | "integrations.prometheus.removed" | "integrations.prometheus.sync_completed" | "integrations.prometheus.sync_failed" | "integrations.grafana.added" | "integrations.grafana.removed" | "integrations.grafana.sync_completed" | "integrations.grafana.sync_failed" | "integrations.datadog.added" | "integrations.datadog.removed" | "integrations.datadog.sync_completed" | "integrations.datadog.sync_failed" | "integrations.sentry.added" | "integrations.sentry.removed" | "integrations.sentry.sync_completed" | "integrations.sentry.sync_failed" | "integrations.zelt.added" | "integrations.zelt.removed" | "report.exported" | "report.assessment_stored" | "report.assessment_link_sent" | "report.assessment_link_revoked" | "report.assessment_downloaded" | "report.assessment_hidden" | "report.assessment_restored" | "workspace.aggregate_use.changed" | "workspace.assessment_rollout.changed" | "config.strict_insights_on_trust.changed";
         /** @description Current legal-approved opt-in notice, or `unset` while opt-in is unavailable. */
         AggregateUseNoticeStatusDto: {
             /** @enum {string} */
@@ -10771,6 +10813,36 @@ export interface components {
             /** @description Monitoring meta event count. Null for HRIS and when the stored count is unset. */
             eventCount?: number | null;
         };
+        /**
+         * @description Pipeline-level source reconcile outcome (L2). Same values as productivity Source verified, plus `not_applicable` when the provider has no countable or checksum reconcile surface.
+         * @enum {string}
+         */
+        IngestCoverageSourceReconcileStatus: "unverified" | "verified" | "below_target" | "insufficient_sample" | "stale" | "not_applicable";
+        /**
+         * @description Which L2 reconcile check produced `sourceReconcile.verificationStatus`. Prefer `source_count` or `checksum` when mapping into `dataTrust.verificationMethod`.
+         * @enum {string}
+         */
+        IngestCoverageSourceReconcileMethod: "source_count" | "checksum" | "none";
+        /** @description Generalized Source verified / reconcile snapshot on a coverage pipeline. Optional until a scheduled reconciler writes a row. Does not replace nested productivity verify fields or AI spend reconcile. */
+        IngestCoverageSourceReconcileDto: {
+            verificationStatus: components["schemas"]["IngestCoverageSourceReconcileStatus"];
+            /** @description Minimum provider-vs-stored capture for a count reconcile (0–100, up to two decimals). Null when the check is checksum-only, thin, not applicable, or no sample exists. */
+            sourceCapturePercent: number | null;
+            verificationMethod: components["schemas"]["IngestCoverageSourceReconcileMethod"];
+            /**
+             * Format: date-time
+             * @description When the snapshot was written. Null when unverified with no row.
+             */
+            checkedAt: string | null;
+            /** @description Provider-side count for the reconcile window. Null when unset or N/A. */
+            providerCount: number | null;
+            /** @description Stored platform count for the reconcile window. Null when unset or N/A. */
+            storedCount: number | null;
+            /** @description Provider-side checksum (opaque). Null when method is not checksum. */
+            providerChecksum: string | null;
+            /** @description Stored platform checksum (opaque). Null when method is not checksum. */
+            storedChecksum: string | null;
+        };
         /**
          * @description Unified data-trust summary for one ingest-coverage pipeline. Derived from existing coverage signals; does not rename Source verified, Spend matched, or Backfill complete.
          * @enum {string}
@@ -10786,10 +10858,25 @@ export interface components {
             status: components["schemas"]["DataTrustStatus"];
             verificationMethod: components["schemas"]["DataTrustVerificationMethod"];
         };
+        PutStrictInsightsOnTrustDto: {
+            /** @description true to opt in to strict Insights gating on ingest dataTrust; false to opt out (default). Never default-on for all workspaces. */
+            enabled: boolean;
+        };
+        /** @description Payload when the SPA hides an Insights card body under strict mode for a non-remediable unverified dataTrust gap. */
+        InsightsStrictTrustHideNotifyDto: {
+            /** @description Ingest-coverage pipeline id or kind (e.g. `productivity_github`, `ai_usage`, `monitoring`, `hris`). */
+            pipeline: string;
+            trustStatus: components["schemas"]["DataTrustStatus"];
+            verificationMethod: components["schemas"]["DataTrustVerificationMethod"];
+        };
+        InsightsStrictTrustHideNotifyResultDto: {
+            /** @description true when a new `@event:ingest.insights.strict_trust_hide` warn line was written for this workspace+pipeline transition. */
+            emitted: boolean;
+        };
         IngestCoveragePipelineDto: {
             id: string;
             /** @enum {string} */
-            kind: "productivity_github" | "ai_usage" | "sdlc_github" | "monitoring" | "hris";
+            kind: "productivity_github" | "productivity_bitbucket" | "ai_usage" | "sdlc_github" | "monitoring" | "hris" | "jira" | "pagerduty";
             provider?: string | null;
             /** @enum {string} */
             status: "not_started" | "backfilling" | "incremental" | "complete" | "failed" | "in_progress";
@@ -10822,6 +10909,8 @@ export interface components {
             ai?: components["schemas"]["IngestCoverageAiDetailDto"];
             sdlc?: components["schemas"]["IngestCoverageSdlcDetailDto"];
             sync?: components["schemas"]["IngestCoverageSyncDetailDto"];
+            /** @description Optional L2 source-reconcile snapshot (count / checksum vs provider API). Null when no scheduled reconcile has written a row for this pipeline. Does not replace nested productivity verify fields or AI spend reconcile. */
+            sourceReconcile?: components["schemas"]["IngestCoverageSourceReconcileDto"] | null;
             dataTrust: components["schemas"]["DataTrustDto"];
         };
         IngestCoverageDto: {
@@ -10833,7 +10922,7 @@ export interface components {
             /** Format: uuid */
             runId: string;
             /** @enum {string} */
-            kind: "productivity_github" | "ai_usage" | "sdlc_github" | "monitoring" | "hris";
+            kind: "productivity_github" | "productivity_bitbucket" | "ai_usage" | "sdlc_github" | "monitoring" | "hris" | "jira" | "pagerduty";
             /** Format: date-time */
             startedAt: string;
             /** Format: date-time */
@@ -13587,9 +13676,15 @@ export type IngestCoverageAiDetailDto = components['schemas']['IngestCoverageAiD
 export type IngestCoverageSdlcComponentDto = components['schemas']['IngestCoverageSdlcComponentDto'];
 export type IngestCoverageSdlcDetailDto = components['schemas']['IngestCoverageSdlcDetailDto'];
 export type IngestCoverageSyncDetailDto = components['schemas']['IngestCoverageSyncDetailDto'];
+export type IngestCoverageSourceReconcileStatus = components['schemas']['IngestCoverageSourceReconcileStatus'];
+export type IngestCoverageSourceReconcileMethod = components['schemas']['IngestCoverageSourceReconcileMethod'];
+export type IngestCoverageSourceReconcileDto = components['schemas']['IngestCoverageSourceReconcileDto'];
 export type DataTrustStatus = components['schemas']['DataTrustStatus'];
 export type DataTrustVerificationMethod = components['schemas']['DataTrustVerificationMethod'];
 export type DataTrustDto = components['schemas']['DataTrustDto'];
+export type PutStrictInsightsOnTrustDto = components['schemas']['PutStrictInsightsOnTrustDto'];
+export type InsightsStrictTrustHideNotifyDto = components['schemas']['InsightsStrictTrustHideNotifyDto'];
+export type InsightsStrictTrustHideNotifyResultDto = components['schemas']['InsightsStrictTrustHideNotifyResultDto'];
 export type IngestCoveragePipelineDto = components['schemas']['IngestCoveragePipelineDto'];
 export type IngestCoverageDto = components['schemas']['IngestCoverageDto'];
 export type IngestRunDto = components['schemas']['IngestRunDto'];
@@ -16520,6 +16615,92 @@ export interface operations {
             };
         };
     };
+    putWorkspaceStrictInsightsOnTrust: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["PutStrictInsightsOnTrustDto"];
+            };
+        };
+        responses: {
+            /** @description Flag updated */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        ok: boolean;
+                        strictInsightsOnTrust: boolean;
+                    };
+                };
+            };
+            /** @description Invalid request body */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            /** @description Store does not support this setting */
+            501: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
+    postInsightsStrictTrustHideNotify: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["InsightsStrictTrustHideNotifyDto"];
+            };
+        };
+        responses: {
+            /** @description Notify attempt recorded (may or may not have emitted) */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["InsightsStrictTrustHideNotifyResultDto"];
+                };
+            };
+            /** @description Invalid request body */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+        };
+    };
     getWorkspaceAiModelPolicy: {
         parameters: {
             query?: never;
@@ -27958,7 +28139,7 @@ export interface operations {
         parameters: {
             query?: {
                 /** @description Coverage pipeline kind. Omit to list every kind stored for the workspace. */
-                kind?: "productivity_github" | "ai_usage" | "sdlc_github" | "monitoring" | "hris";
+                kind?: "productivity_github" | "productivity_bitbucket" | "ai_usage" | "sdlc_github" | "monitoring" | "hris" | "jira" | "pagerduty";
                 /** @description Page size. Default 20. Values above 100 are rejected. */
                 limit?: number;
             };

package/src/index.ts

@@ -1457,6 +1457,47 @@ export interface IngestCoverageProductivitySelfHealDto {
 export type IngestCoverageVerificationStatus =
   "unverified" | "verified" | "below_target" | "insufficient_sample" | "stale";
 
+/**
+ * Pipeline-level source reconcile outcome (L2).
+ * Reuses the productivity Source verified statuses and adds `not_applicable`
+ * when a connected provider exposes no countable/checksum reconcile surface.
+ */
+export type IngestCoverageSourceReconcileStatus =
+  IngestCoverageVerificationStatus | "not_applicable";
+
+/**
+ * Which L2 reconcile check produced `sourceReconcile.verificationStatus`.
+ * Maps into L1 `dataTrust.verificationMethod` (`source_count` / `checksum`).
+ */
+export type IngestCoverageSourceReconcileMethod = "source_count" | "checksum" | "none";
+
+/**
+ * Generalized Source verified / reconcile snapshot on a coverage pipeline.
+ * Optional until a scheduled reconciler has written a row. Productivity GitHub
+ * keeps nested `productivity.verificationStatus` / `sourceCapturePercent`;
+ * AI spend stays on `ai.spendReconciliationStatus`.
+ */
+export interface IngestCoverageSourceReconcileDto {
+  verificationStatus: IngestCoverageSourceReconcileStatus;
+  /**
+   * Minimum provider-vs-stored capture for a count reconcile (0–100, up to two
+   * decimals). Null when the check is checksum-only, thin, not applicable, or
+   * no sample exists.
+   */
+  sourceCapturePercent: number | null;
+  verificationMethod: IngestCoverageSourceReconcileMethod;
+  /** When the snapshot was written. Null when status is unverified with no row. */
+  checkedAt: string | null;
+  /** Provider-side count for the reconcile window. Null when unset or N/A. */
+  providerCount: number | null;
+  /** Stored platform count for the reconcile window. Null when unset or N/A. */
+  storedCount: number | null;
+  /** Provider-side checksum (opaque). Null when method is not checksum. */
+  providerChecksum: string | null;
+  /** Stored platform checksum (opaque). Null when method is not checksum. */
+  storedChecksum: string | null;
+}
+
 export interface IngestCoverageProductivityDetailDto {
   phase?: "recent" | "historical" | "complete" | null;
   historicalWeekStart?: string | null;
@@ -1564,7 +1605,14 @@ export interface IngestCoverageSyncDetailDto {
 }
 
 export type IngestCoveragePipelineKind =
-  "productivity_github" | "ai_usage" | "sdlc_github" | "monitoring" | "hris";
+  | "productivity_github"
+  | "productivity_bitbucket"
+  | "ai_usage"
+  | "sdlc_github"
+  | "monitoring"
+  | "hris"
+  | "jira"
+  | "pagerduty";
 
 export type IngestCoveragePipelineStatus =
   "not_started" | "backfilling" | "incremental" | "complete" | "failed" | "in_progress";
@@ -1628,6 +1676,12 @@ export interface IngestCoveragePipelineDto {
   ai?: IngestCoverageAiDetailDto;
   sdlc?: IngestCoverageSdlcDetailDto;
   sync?: IngestCoverageSyncDetailDto;
+  /**
+   * Optional L2 source-reconcile snapshot (count / checksum vs provider API).
+   * Null/omit when no scheduled reconcile has written a row for this pipeline.
+   * Does not replace nested productivity verify fields or AI spend reconcile.
+   */
+  sourceReconcile?: IngestCoverageSourceReconcileDto | null;
   /**
    * Always present. Unified Data trust summary for this pipeline.
    * Additive to Source verified / Spend matched / Backfill complete.