@thinkai/tai-api-contract 2.32.1-pr.731.2 → 2.33.0

package/openapi/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: ThinkAI API
-  version: 2.32.1
+  version: 2.33.0
   description: >
     Contract surface for the AI Driven SDLC backend used by ThinkAI.
     Workspace-scoped routes use `/workspaces/{workspaceId}/...`.
@@ -46,6 +46,8 @@ tags:
     description: Authenticated user profile (§11)
   - name: Preferences
     description: Per-user per-workspace preferences (§12)
+  - name: Consent
+    description: Per-user cookie and browser-storage consent records (GDPR Art. 7 / UAE PDPL)
   - name: OrgChartImport
     description: Org chart import via storage path (§14)
   - name: AgenticFoundation
@@ -3213,25 +3215,6 @@ paths:
         - $ref: "#/components/parameters/PaginationLimit"
         - $ref: "#/components/parameters/PaginationOffset"
         - $ref: "#/components/parameters/PaginationOrder"
-        - name: sort
-          in: query
-          required: false
-          description: >
-            Server-side sort column (the activity "5 W's"). Combined with `order` (asc/desc).
-            Defaults to `when` (occurredAt). `occurredAt`/`id` is always the tiebreaker.
-          schema:
-            type: string
-            enum: [when, who, what, why, where]
-        - name: productArea
-          in: query
-          required: false
-          description: >
-            Coarse product-area grouping filter (#156). `integration` = GitHub + AI-tool key events;
-            `agentic_foundation` = repos, readiness scans, fixes; `workspace_team` = members + HRIS.
-            Omit (or pass `all`) for every area.
-          schema:
-            type: string
-            enum: [integration, agentic_foundation, workspace_team, all]
         - name: eventType
           in: query
           description: Filter to a specific event type.
@@ -4062,79 +4045,6 @@ paths:
         "403":
           $ref: "#/components/responses/Forbidden"
 
-  /workspaces/{workspaceId}/repo-eligibility:
-    get:
-      tags: [RepositoryReadiness]
-      summary: Get repo-sync eligibility gate (defaults + per-workspace overrides)
-      description: >
-        Returns the effective repo-sync eligibility gate (archived / fork / size / count) for the
-        workspace: the global `defaults`, any per-workspace `overrides`, the merged `effective`
-        values, and whether the caller can edit without platform-admin (`canEditUnrestricted`).
-        Member-level read access.
-      operationId: getWorkspaceRepoEligibility
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-      responses:
-        "200":
-          description: Effective repo-eligibility configuration
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/WorkspaceRepoEligibilityDto"
-        "401":
-          $ref: "#/components/responses/Unauthorized"
-        "403":
-          $ref: "#/components/responses/Forbidden"
-    put:
-      tags: [RepositoryReadiness]
-      summary: Set per-workspace repo-sync eligibility overrides
-      description: >
-        Set (or clear, with an empty `overrides`) the per-workspace repo-sync eligibility overrides.
-        **Platform admins** may set any value (raise caps, `0` = unlimited, include archived/forks).
-        **Workspace admins** may only make the gate *more restrictive* than the platform defaults
-        (lower caps, exclude archived/forks) — exceeding a platform limit returns `403`
-        (`repo_eligibility_bound_exceeded`). Requires workspace admin or platform admin.
-      operationId: putWorkspaceRepoEligibility
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-      requestBody:
-        required: true
-        content:
-          application/json:
-            schema:
-              type: object
-              required: [overrides]
-              properties:
-                overrides:
-                  $ref: "#/components/schemas/RepoEligibilityOverridesDto"
-      responses:
-        "200":
-          description: Overrides saved
-          content:
-            application/json:
-              schema:
-                type: object
-                required: [overrides, effective]
-                properties:
-                  overrides:
-                    $ref: "#/components/schemas/RepoEligibilityOverridesDto"
-                  effective:
-                    $ref: "#/components/schemas/RepoEligibilityConfigDto"
-        "400":
-          description: Invalid request body
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/ErrorMessageDto"
-        "401":
-          $ref: "#/components/responses/Unauthorized"
-        "403":
-          description: Forbidden, or a workspace-admin value exceeds a platform limit (`repo_eligibility_bound_exceeded`)
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/ErrorMessageDto"
-
   /workspaces/{workspaceId}/readiness/cursor-key-usage:
     get:
       tags: [RepositoryReadiness]
@@ -4437,6 +4347,52 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
+  /me/consent:
+    get:
+      tags: [Consent]
+      summary: Get cookie/storage consent for current user
+      operationId: getMyConsent
+      responses:
+        "200":
+          description: Consent record
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ConsentRecordDto"
+        "401":
+          $ref: "#/components/responses/Unauthorized"
+        "404":
+          description: No consent record stored yet
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+    put:
+      tags: [Consent]
+      summary: Upsert cookie/storage consent
+      operationId: putMyConsent
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/PutConsentBodyDto"
+      responses:
+        "200":
+          description: Saved consent record
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ConsentRecordDto"
+        "400":
+          description: Validation failed
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ConsentValidationErrorDto"
+        "401":
+          $ref: "#/components/responses/Unauthorized"
+
   /workspaces/{workspaceId}/org-chart/import:
     post:
       tags: [OrgChartImport]
@@ -6848,123 +6804,6 @@ components:
           format: date-time
           nullable: true
           description: Last push or metadata update from GitHub when available.
-        archived:
-          type: boolean
-          nullable: true
-          description: True when the repository is archived (read-only on GitHub).
-        fork:
-          type: boolean
-          nullable: true
-          description: True when the repository is a fork of another repository.
-        disabled:
-          type: boolean
-          nullable: true
-          description: True when the repository is disabled on GitHub.
-        size:
-          type: integer
-          nullable: true
-          description: Repository size in KB as reported by GitHub.
-        readOnly:
-          type: boolean
-          nullable: true
-          description: >
-            True when the GitHub App installation lacks push access to this repo
-            (read-only). Read-only repos are rejected during sync because readiness
-            fixes require write access.
-        ineligibleReason:
-          type: string
-          nullable: true
-          description: >
-            Set when this repo was skipped during sync due to an eligibility check.
-            The frontend should display this as an inline explanation (e.g. "This repo is archived").
-        eligibilityStatus:
-          type: string
-          enum: [eligible, ineligible]
-          nullable: true
-          description: >
-            Language-based eligibility for Agentic-Foundation readiness analysis (issue #44).
-            `ineligible` repos (no supported stack) render read-only/orange in the AF list with
-            no analyze/score/fix actions. Mixed monorepos with a supported secondary stack are
-            `eligible`. Distinct from `ineligibleReason`, which reflects the structural sync gate.
-        eligibilityReason:
-          type: string
-          nullable: true
-          description: >
-            Human-readable explanation when `eligibilityStatus` is `ineligible`
-            (e.g. "This repository's primary language (Python) is not supported in v1").
-        primaryStack:
-          type: string
-          nullable: true
-          description: >
-            Dominant supported stack (by GitHub language bytes), one of
-            backend_jvm | ios_app | web_spa | backend_go | backend_python. Null for ineligible repos.
-        secondaryStack:
-          type: string
-          nullable: true
-          description: Second supported stack for a multi-stack repo, or null.
-        supportedStacks:
-          type: array
-          nullable: true
-          items:
-            type: string
-          description: >
-            All supported stacks detected for the repo (ordered, primary first). Empty/null
-            when no supported stack is present. Drives multi-stack scanning and the orange
-            mixed-monorepo box in the AF UI.
-
-    RepoEligibilityConfigDto:
-      type: object
-      description: Resolved repo-sync eligibility gate (defaults or effective). All fields present.
-      required: [excludeArchived, excludeForks, maxRepoSizeKb, maxReposPerWorkspace]
-      properties:
-        excludeArchived:
-          type: boolean
-          description: Skip archived repos during GitHub repo sync.
-        excludeForks:
-          type: boolean
-          description: Skip forked repos. Forks are included by default.
-        maxRepoSizeKb:
-          type: integer
-          description: Max repo size in KB (GitHub-reported). 0 = no limit.
-        maxReposPerWorkspace:
-          type: integer
-          description: Max repos materialized per workspace per sync. 0 = no limit.
-
-    RepoEligibilityOverridesDto:
-      type: object
-      additionalProperties: false
-      description: >
-        Per-workspace overrides for the repo-sync eligibility gate. Any field present wins over the
-        global default; omit a field to inherit the default. An empty object clears all overrides.
-      properties:
-        excludeArchived:
-          type: boolean
-          nullable: true
-        excludeForks:
-          type: boolean
-          nullable: true
-        maxRepoSizeKb:
-          type: integer
-          minimum: 0
-          nullable: true
-        maxReposPerWorkspace:
-          type: integer
-          minimum: 0
-          nullable: true
-
-    WorkspaceRepoEligibilityDto:
-      type: object
-      required: [defaults, overrides, effective, canEditUnrestricted]
-      properties:
-        defaults:
-          $ref: "#/components/schemas/RepoEligibilityConfigDto"
-        overrides:
-          $ref: "#/components/schemas/RepoEligibilityOverridesDto"
-        effective:
-          $ref: "#/components/schemas/RepoEligibilityConfigDto"
-        canEditUnrestricted:
-          type: boolean
-          description: True when the caller is a platform admin (may set any value, incl. raising caps).
 
     GithubMissingPermissionDto:
       type: object
@@ -7807,8 +7646,10 @@ components:
           type: array
           description: >
             Individual rubric criterion outcomes from the latest successful scan.
-            Always present on the single-repo detail endpoint; empty array when no
-            scan has completed yet for this dimension.
+            Always present on the single-repo detail endpoint. When the repo has a
+            succeeded scan but a dimension was not evaluated (e.g. Section I on older
+            runs), the API returns full rubric placeholders with status `blocked`.
+            Empty array only when the repo has no succeeded scan yet.
           items:
             $ref: "#/components/schemas/CriterionDetailDto"
         issues:
@@ -7993,33 +7834,6 @@ components:
           nullable: true
           enum: [github_removed, installation_disconnected, installation_replaced, superseded]
           description: Why the repo was archived. Only present when `archivedAt` is set.
-        eligibilityStatus:
-          type: string
-          enum: [eligible, ineligible]
-          nullable: true
-          description: >
-            Language-based eligibility for Agentic-Foundation analysis (#44). `ineligible` repos
-            (no v1-supported stack) render read-only/orange in the AF list with no analyze/score/fix
-            actions; the server also rejects analyze requests for them. Null until the first
-            sync/scan computes it.
-        eligibilityReason:
-          type: string
-          nullable: true
-          description: Human-readable explanation when `eligibilityStatus` is `ineligible`.
-        primaryStack:
-          type: string
-          nullable: true
-          description: Dominant supported stack — backend_jvm | ios_app | web_spa | backend_go | backend_python. Null when ineligible/uncomputed.
-        secondaryStack:
-          type: string
-          nullable: true
-          description: Second supported stack for a multi-stack repo, or null.
-        supportedStacks:
-          type: array
-          nullable: true
-          items:
-            type: string
-          description: All supported stacks detected (ordered, primary first). Empty/null when none.
 
     RepoReadinessScoreDetailDto:
       type: object
@@ -8820,6 +8634,62 @@ components:
           nullable: true
           description: Temporary backward-compatibility alias (e.g. "Invalid timezone").
 
+    ConsentCategoriesDto:
+      type: object
+      additionalProperties: false
+      required: [functional, analytics, marketing]
+      properties:
+        functional:
+          type: boolean
+          description: Functional storage (preferences, onboarding, UI state).
+        analytics:
+          type: boolean
+          description: Analytics and product telemetry in the browser.
+        marketing:
+          type: boolean
+          description: Advertising and remarketing tags.
+
+    PutConsentBodyDto:
+      type: object
+      additionalProperties: false
+      required: [policyVersion, categories]
+      properties:
+        policyVersion:
+          type: string
+          description: Cookie policy version the user consented to.
+          maxLength: 64
+        categories:
+          $ref: "#/components/schemas/ConsentCategoriesDto"
+
+    ConsentRecordDto:
+      type: object
+      additionalProperties: false
+      required: [policyVersion, categories, recordedAt]
+      properties:
+        policyVersion:
+          type: string
+        categories:
+          $ref: "#/components/schemas/ConsentCategoriesDto"
+        recordedAt:
+          type: string
+          format: date-time
+          description: When consent was last recorded (UTC).
+
+    ConsentValidationErrorDto:
+      type: object
+      required: [error, issues]
+      properties:
+        error:
+          type: string
+          enum: [ValidationError]
+        issues:
+          type: array
+          items:
+            $ref: "#/components/schemas/ValidationIssueDto"
+        legacyError:
+          type: string
+          nullable: true
+
     OrgChartImportBodyDto:
       type: object
       additionalProperties: false
@@ -9094,29 +8964,18 @@ components:
         - readiness.scan_completed
         - readiness.scan_failed
         - readiness.scan_partial
-        - integrations.agent_execution.provider_changed
-        - integrations.repo_eligibility.overrides_changed
-        - integrations.cursor.platform_key_enabled
-        - integrations.cursor.platform_key_disabled
+        - config.cursor.added
+        - config.cursor.updated
+        - config.cursor.removed
+        - config.cursor.platform_key_enabled
+        - config.cursor.platform_key_disabled
+        - config.claude.added
+        - config.claude.updated
+        - config.claude.removed
+        - config.agent_execution.provider_changed
         - member.invited
         - member.role_changed
         - member.removed
-        - repo.sync_skipped
-        - integrations.cursor.execution_key.added
-        - integrations.cursor.execution_key.updated
-        - integrations.cursor.execution_key.removed
-        - integrations.cursor.execution_key.check_failed
-        - integrations.cursor.admin_key.added
-        - integrations.cursor.admin_key.updated
-        - integrations.cursor.admin_key.removed
-        - integrations.claude.execution_key.added
-        - integrations.claude.execution_key.updated
-        - integrations.claude.execution_key.removed
-        - integrations.claude.execution_key.check_failed
-        - integrations.claude.admin_key.added
-        - integrations.claude.admin_key.updated
-        - integrations.claude.admin_key.removed
-        - readiness.scan_precheck_failed
 
     ActivityLogActorDto:
       type: object

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thinkai/tai-api-contract",
-  "version": "2.32.1-pr.731.2",
+  "version": "2.33.0",
   "private": false,
   "type": "module",
   "main": "dist/index.js",