@thinkai/tai-api-contract 2.33.1-pr.731.7 → 2.34.0-pr.810.1

package/openapi/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: ThinkAI API
-  version: 2.33.1
+  version: 2.34.0
   description: >
     Contract surface for the AI Driven SDLC backend used by ThinkAI.
     Workspace-scoped routes use `/workspaces/{workspaceId}/...`.
@@ -46,6 +46,8 @@ tags:
     description: Authenticated user profile (§11)
   - name: Preferences
     description: Per-user per-workspace preferences (§12)
+  - name: Consent
+    description: Per-user cookie and browser-storage consent records (GDPR Art. 7 / UAE PDPL)
   - name: OrgChartImport
     description: Org chart import via storage path (§14)
   - name: AgenticFoundation
@@ -3213,25 +3215,6 @@ paths:
         - $ref: "#/components/parameters/PaginationLimit"
         - $ref: "#/components/parameters/PaginationOffset"
         - $ref: "#/components/parameters/PaginationOrder"
-        - name: sort
-          in: query
-          required: false
-          description: >
-            Server-side sort column (the activity "5 W's"). Combined with `order` (asc/desc).
-            Defaults to `when` (occurredAt). `occurredAt`/`id` is always the tiebreaker.
-          schema:
-            type: string
-            enum: [when, who, what, why, where]
-        - name: productArea
-          in: query
-          required: false
-          description: >
-            Coarse product-area grouping filter (#156). `integration` = GitHub + AI-tool key events;
-            `agentic_foundation` = repos, readiness scans, fixes; `workspace_team` = members + HRIS;
-            `productivity` = productivity ingest lifecycle events. Omit (or pass `all`) for every area.
-          schema:
-            type: string
-            enum: [integration, agentic_foundation, workspace_team, productivity, all]
         - name: eventType
           in: query
           description: Filter to a specific event type.
@@ -4062,79 +4045,6 @@ paths:
         "403":
           $ref: "#/components/responses/Forbidden"
 
-  /workspaces/{workspaceId}/repo-eligibility:
-    get:
-      tags: [RepositoryReadiness]
-      summary: Get repo-sync eligibility gate (defaults + per-workspace overrides)
-      description: >
-        Returns the effective repo-sync eligibility gate (archived / fork / size / count) for the
-        workspace: the global `defaults`, any per-workspace `overrides`, the merged `effective`
-        values, and whether the caller can edit without platform-admin (`canEditUnrestricted`).
-        Member-level read access.
-      operationId: getWorkspaceRepoEligibility
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-      responses:
-        "200":
-          description: Effective repo-eligibility configuration
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/WorkspaceRepoEligibilityDto"
-        "401":
-          $ref: "#/components/responses/Unauthorized"
-        "403":
-          $ref: "#/components/responses/Forbidden"
-    put:
-      tags: [RepositoryReadiness]
-      summary: Set per-workspace repo-sync eligibility overrides
-      description: >
-        Set (or clear, with an empty `overrides`) the per-workspace repo-sync eligibility overrides.
-        **Platform admins** may set any value (raise caps, `0` = unlimited, include archived/forks).
-        **Workspace admins** may only make the gate *more restrictive* than the platform defaults
-        (lower caps, exclude archived/forks) — exceeding a platform limit returns `403`
-        (`repo_eligibility_bound_exceeded`). Requires workspace admin or platform admin.
-      operationId: putWorkspaceRepoEligibility
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-      requestBody:
-        required: true
-        content:
-          application/json:
-            schema:
-              type: object
-              required: [overrides]
-              properties:
-                overrides:
-                  $ref: "#/components/schemas/RepoEligibilityOverridesDto"
-      responses:
-        "200":
-          description: Overrides saved
-          content:
-            application/json:
-              schema:
-                type: object
-                required: [overrides, effective]
-                properties:
-                  overrides:
-                    $ref: "#/components/schemas/RepoEligibilityOverridesDto"
-                  effective:
-                    $ref: "#/components/schemas/RepoEligibilityConfigDto"
-        "400":
-          description: Invalid request body
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/ErrorMessageDto"
-        "401":
-          $ref: "#/components/responses/Unauthorized"
-        "403":
-          description: Forbidden, or a workspace-admin value exceeds a platform limit (`repo_eligibility_bound_exceeded`)
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/ErrorMessageDto"
-
   /workspaces/{workspaceId}/readiness/cursor-key-usage:
     get:
       tags: [RepositoryReadiness]
@@ -4437,6 +4347,52 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
+  /me/consent:
+    get:
+      tags: [Consent]
+      summary: Get cookie/storage consent for current user
+      operationId: getMyConsent
+      responses:
+        "200":
+          description: Consent record
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ConsentRecordDto"
+        "401":
+          $ref: "#/components/responses/Unauthorized"
+        "404":
+          description: No consent record stored yet
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+    put:
+      tags: [Consent]
+      summary: Upsert cookie/storage consent
+      operationId: putMyConsent
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/PutConsentBodyDto"
+      responses:
+        "200":
+          description: Saved consent record
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ConsentRecordDto"
+        "400":
+          description: Validation failed
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ConsentValidationErrorDto"
+        "401":
+          $ref: "#/components/responses/Unauthorized"
+
   /workspaces/{workspaceId}/org-chart/import:
     post:
       tags: [OrgChartImport]
@@ -5776,6 +5732,16 @@ components:
           type: number
         failRatePercent:
           type: number
+          description: DORA change failure rate (deployments/incidents), not CI build failures.
+        ciFailRatePercent:
+          type: number
+          description: >
+            GitHub Actions / Checks CI build failure rate for the week bucket
+            (failed runs / (failed + passed) * 100). Zero when GitHub Actions CI is disabled.
+        ciBuildFailuresCount:
+          type: integer
+          minimum: 0
+          description: Count of build.failed events in the week bucket when CI ingest is enabled.
         avgReviewWaitHours:
           type: number
           description: Mean hours from PR creation to first review in this week bucket.
@@ -5835,6 +5801,9 @@ components:
         generatedAt:
           type: string
           format: date-time
+        githubActionsCiEnabled:
+          type: boolean
+          description: True when the workspace has opted in to GitHub Actions CI ingest.
         teams:
           type: array
           items:
@@ -5928,6 +5897,9 @@ components:
         avgFailRatePercent:
           type: number
           description: Average change failure rate over the range when available.
+        avgCiFailRatePercent:
+          type: number
+          description: Average GitHub Actions CI build failure rate over the range when CI ingest is enabled.
 
     ProductivityInsightsTeamSummaryDto:
       type: object
@@ -5940,6 +5912,10 @@ components:
           type: number
         avgFailRatePercent:
           type: number
+          description: Average DORA change failure rate over the range when available.
+        avgCiFailRatePercent:
+          type: number
+          description: Average GitHub Actions CI build failure rate over the range when CI ingest is enabled.
         headcount:
           type: integer
           minimum: 0
@@ -6000,6 +5976,9 @@ components:
         generatedAt:
           type: string
           format: date-time
+        githubActionsCiEnabled:
+          type: boolean
+          description: True when the workspace has opted in to GitHub Actions CI ingest.
         items:
           type: array
           description: Present when `teamId` query is omitted — top-ranked teams.
@@ -6121,6 +6100,10 @@ components:
           minimum: 0
         avgFailRate:
           type: number
+          description: Average DORA change failure rate over the range when available.
+        avgCiFailRate:
+          type: number
+          description: Average GitHub Actions CI build failure rate over the range when CI ingest is enabled.
         mergedPrDelta:
           type: number
         avgMergedPrsPerWeekDelta:
@@ -6129,6 +6112,9 @@ components:
           type: number
         avgFailRateDelta:
           type: number
+        avgCiFailRateDelta:
+          type: number
+          description: Change in average CI build failure rate vs the prior comparison window.
 
     ProductivityInsightsContributorDetailDto:
       type: object
@@ -6160,6 +6146,9 @@ components:
         generatedAt:
           type: string
           format: date-time
+        githubActionsCiEnabled:
+          type: boolean
+          description: True when the workspace has opted in to GitHub Actions CI ingest.
         contributor:
           $ref: "#/components/schemas/ProductivityInsightsContributorProfileDto"
         weeks:
@@ -6196,6 +6185,9 @@ components:
         avgFailRatePercent:
           type: number
           description: Mean weekly change-failure rate when available.
+        avgCiFailRatePercent:
+          type: number
+          description: Mean weekly GitHub Actions CI build failure rate when CI ingest is enabled.
 
     ProductivityInsightsNeedsAttentionDto:
       type: object
@@ -6215,6 +6207,9 @@ components:
         generatedAt:
           type: string
           format: date-time
+        githubActionsCiEnabled:
+          type: boolean
+          description: True when GitHub Actions CI ingest is enabled for this workspace.
         items:
           type: array
           items:
@@ -6848,119 +6843,6 @@ components:
           format: date-time
           nullable: true
           description: Last push or metadata update from GitHub when available.
-        archived:
-          type: boolean
-          nullable: true
-          description: True when the repository is archived (read-only on GitHub).
-        fork:
-          type: boolean
-          nullable: true
-          description: True when the repository is a fork of another repository.
-        disabled:
-          type: boolean
-          nullable: true
-          description: True when the repository is disabled on GitHub.
-        size:
-          type: integer
-          nullable: true
-          description: Repository size in KB as reported by GitHub.
-        ineligibleReasons:
-          type: array
-          nullable: true
-          items:
-            type: string
-          description: >
-            All reasons this repo was skipped during sync or is ineligible for analysis.
-            Each entry is a human-readable explanation (e.g. "This repo is archived").
-            Empty or absent means the repo passed all checks.
-        eligibilityStatus:
-          type: string
-          enum: [eligible, ineligible]
-          nullable: true
-          description: >
-            Language-based eligibility for Agentic-Foundation readiness analysis (issue #44).
-            `ineligible` repos (no supported stack) render read-only/orange in the AF list with
-            no analyze/score/fix actions. Mixed monorepos with a supported secondary stack are
-            `eligible`. Distinct from `ineligibleReasons`, which reflects structural sync gates.
-        eligibilityReason:
-          type: string
-          nullable: true
-          description: >
-            Human-readable explanation when `eligibilityStatus` is `ineligible`
-            (e.g. "This repository's primary language (Python) is not supported in v1").
-        primaryStack:
-          type: string
-          nullable: true
-          description: >
-            Dominant supported stack (by GitHub language bytes), one of
-            backend_jvm | ios_app | web_spa | backend_go | backend_python. Null for ineligible repos.
-        secondaryStack:
-          type: string
-          nullable: true
-          description: Second supported stack for a multi-stack repo, or null.
-        supportedStacks:
-          type: array
-          nullable: true
-          items:
-            type: string
-          description: >
-            All supported stacks detected for the repo (ordered, primary first). Empty/null
-            when no supported stack is present. Drives multi-stack scanning and the orange
-            mixed-monorepo box in the AF UI.
-
-    RepoEligibilityConfigDto:
-      type: object
-      description: Resolved repo-sync eligibility gate (defaults or effective). All fields present.
-      required: [excludeArchived, excludeForks, maxRepoSizeKb, maxReposPerWorkspace]
-      properties:
-        excludeArchived:
-          type: boolean
-          description: Skip archived repos during GitHub repo sync.
-        excludeForks:
-          type: boolean
-          description: Skip forked repos. Forks are included by default.
-        maxRepoSizeKb:
-          type: integer
-          description: Max repo size in KB (GitHub-reported). 0 = no limit.
-        maxReposPerWorkspace:
-          type: integer
-          description: Max repos materialized per workspace per sync. 0 = no limit.
-
-    RepoEligibilityOverridesDto:
-      type: object
-      additionalProperties: false
-      description: >
-        Per-workspace overrides for the repo-sync eligibility gate. Any field present wins over the
-        global default; omit a field to inherit the default. An empty object clears all overrides.
-      properties:
-        excludeArchived:
-          type: boolean
-          nullable: true
-        excludeForks:
-          type: boolean
-          nullable: true
-        maxRepoSizeKb:
-          type: integer
-          minimum: 0
-          nullable: true
-        maxReposPerWorkspace:
-          type: integer
-          minimum: 0
-          nullable: true
-
-    WorkspaceRepoEligibilityDto:
-      type: object
-      required: [defaults, overrides, effective, canEditUnrestricted]
-      properties:
-        defaults:
-          $ref: "#/components/schemas/RepoEligibilityConfigDto"
-        overrides:
-          $ref: "#/components/schemas/RepoEligibilityOverridesDto"
-        effective:
-          $ref: "#/components/schemas/RepoEligibilityConfigDto"
-        canEditUnrestricted:
-          type: boolean
-          description: True when the caller is a platform admin (may set any value, incl. raising caps).
 
     GithubMissingPermissionDto:
       type: object
@@ -7803,8 +7685,10 @@ components:
           type: array
           description: >
             Individual rubric criterion outcomes from the latest successful scan.
-            Always present on the single-repo detail endpoint; empty array when no
-            scan has completed yet for this dimension.
+            Always present on the single-repo detail endpoint. When the repo has a
+            succeeded scan but a dimension was not evaluated (e.g. Section I on older
+            runs), the API returns full rubric placeholders with status `blocked`.
+            Empty array only when the repo has no succeeded scan yet.
           items:
             $ref: "#/components/schemas/CriterionDetailDto"
         issues:
@@ -7989,33 +7873,6 @@ components:
           nullable: true
           enum: [github_removed, installation_disconnected, installation_replaced, superseded]
           description: Why the repo was archived. Only present when `archivedAt` is set.
-        eligibilityStatus:
-          type: string
-          enum: [eligible, ineligible]
-          nullable: true
-          description: >
-            Language-based eligibility for Agentic-Foundation analysis (#44). `ineligible` repos
-            (no v1-supported stack) render read-only/orange in the AF list with no analyze/score/fix
-            actions; the server also rejects analyze requests for them. Null until the first
-            sync/scan computes it.
-        eligibilityReason:
-          type: string
-          nullable: true
-          description: Human-readable explanation when `eligibilityStatus` is `ineligible`.
-        primaryStack:
-          type: string
-          nullable: true
-          description: Dominant supported stack — backend_jvm | ios_app | web_spa | backend_go | backend_python. Null when ineligible/uncomputed.
-        secondaryStack:
-          type: string
-          nullable: true
-          description: Second supported stack for a multi-stack repo, or null.
-        supportedStacks:
-          type: array
-          nullable: true
-          items:
-            type: string
-          description: All supported stacks detected (ordered, primary first). Empty/null when none.
 
     RepoReadinessScoreDetailDto:
       type: object
@@ -8816,6 +8673,62 @@ components:
           nullable: true
           description: Temporary backward-compatibility alias (e.g. "Invalid timezone").
 
+    ConsentCategoriesDto:
+      type: object
+      additionalProperties: false
+      required: [functional, analytics, marketing]
+      properties:
+        functional:
+          type: boolean
+          description: Functional storage (preferences, onboarding, UI state).
+        analytics:
+          type: boolean
+          description: Analytics and product telemetry in the browser.
+        marketing:
+          type: boolean
+          description: Advertising and remarketing tags.
+
+    PutConsentBodyDto:
+      type: object
+      additionalProperties: false
+      required: [policyVersion, categories]
+      properties:
+        policyVersion:
+          type: string
+          description: Cookie policy version the user consented to.
+          maxLength: 64
+        categories:
+          $ref: "#/components/schemas/ConsentCategoriesDto"
+
+    ConsentRecordDto:
+      type: object
+      additionalProperties: false
+      required: [policyVersion, categories, recordedAt]
+      properties:
+        policyVersion:
+          type: string
+        categories:
+          $ref: "#/components/schemas/ConsentCategoriesDto"
+        recordedAt:
+          type: string
+          format: date-time
+          description: When consent was last recorded (UTC).
+
+    ConsentValidationErrorDto:
+      type: object
+      required: [error, issues]
+      properties:
+        error:
+          type: string
+          enum: [ValidationError]
+        issues:
+          type: array
+          items:
+            $ref: "#/components/schemas/ValidationIssueDto"
+        legacyError:
+          type: string
+          nullable: true
+
     OrgChartImportBodyDto:
       type: object
       additionalProperties: false
@@ -9090,32 +9003,18 @@ components:
         - readiness.scan_completed
         - readiness.scan_failed
         - readiness.scan_partial
-        - integrations.agent_execution.provider_changed
-        - integrations.repo_eligibility.overrides_changed
-        - integrations.cursor.platform_key_enabled
-        - integrations.cursor.platform_key_disabled
+        - config.cursor.added
+        - config.cursor.updated
+        - config.cursor.removed
+        - config.cursor.platform_key_enabled
+        - config.cursor.platform_key_disabled
+        - config.claude.added
+        - config.claude.updated
+        - config.claude.removed
+        - config.agent_execution.provider_changed
         - member.invited
         - member.role_changed
         - member.removed
-        - repo.sync_skipped
-        - integrations.cursor.execution_key.added
-        - integrations.cursor.execution_key.updated
-        - integrations.cursor.execution_key.removed
-        - integrations.cursor.execution_key.check_failed
-        - integrations.cursor.admin_key.added
-        - integrations.cursor.admin_key.updated
-        - integrations.cursor.admin_key.removed
-        - integrations.claude.execution_key.added
-        - integrations.claude.execution_key.updated
-        - integrations.claude.execution_key.removed
-        - integrations.claude.execution_key.check_failed
-        - integrations.claude.admin_key.added
-        - integrations.claude.admin_key.updated
-        - integrations.claude.admin_key.removed
-        - readiness.scan_precheck_failed
-        - productivity.ingest.completed
-        - productivity.ingest.failed
-        - productivity.ingest.skipped
 
     ActivityLogActorDto:
       type: object

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thinkai/tai-api-contract",
-  "version": "2.33.1-pr.731.7",
+  "version": "2.34.0-pr.810.1",
   "private": false,
   "type": "module",
   "main": "dist/index.js",