@thinkai/tai-api-contract 2.46.0 → 2.48.0-pr.865.c7804f40

package/openapi/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: ThinkAI API
-  version: 2.46.0
+  version: 2.48.0
   description: >
     Contract surface for the AI Driven SDLC backend used by ThinkAI.
     Workspace-scoped routes use `/workspaces/{workspaceId}/...`.
@@ -327,6 +327,56 @@ paths:
           description: Updated
         "401":
           $ref: "#/components/responses/Unauthorized"
+    delete:
+      tags: [Me]
+      summary: Delete current user account and all owned data
+      operationId: deleteMe
+      description: >
+        Self-service account deletion. Hard-deletes the authenticated user in a single
+        atomic transaction with the same semantics as admin `deleteUserAndData` (#428):
+        owned workspaces (and all workspace-level child tables via CASCADE), membership
+        rows in other workspaces, invitations where the user is `invited_by`, and the
+        user row itself. After the DB commit, removes the corresponding Supabase Auth
+        user via the service-role key; Auth deletion failure is logged but does not
+        roll back the DB changes.
+
+        **Irreversible.** Owned workspaces in the #440 soft-delete grace period are
+        also hard-deleted immediately; there is no restore window after account delete.
+
+        **Authorization:** Bearer JWT required. Body must include the caller's email
+        exactly (case-insensitive) as a type-to-confirm guard.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/DeleteMeBodyDto"
+      responses:
+        "204":
+          description: Account and all owned data deleted.
+        "400":
+          description: Missing or mismatched confirmation email.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+              example:
+                error: Confirmation email does not match account email
+                code: email_mismatch
+        "401":
+          $ref: "#/components/responses/Unauthorized"
+        "409":
+          description: Identity conflict resolving the current user.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+        "503":
+          description: Account deletion not supported by the configured store.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
 
   /me/workspaces:
     get:
@@ -548,6 +598,59 @@ paths:
                     error: Cannot remove the workspace owner
                     code: workspace_owner
 
+  /workspaces/{workspaceId}/org-chart/status:
+    get:
+      tags: [Workspace]
+      summary: Effective org chart status (structure + identity)
+      operationId: getWorkspaceOrgChartStatus
+      parameters:
+        - $ref: "#/components/parameters/WorkspaceId"
+      responses:
+        "200":
+          description: Structure source, identity mappings, and effective chart summary
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/OrgChartStatusDto"
+        "401":
+          $ref: "#/components/responses/Unauthorized"
+        "403":
+          $ref: "#/components/responses/Forbidden"
+
+  /workspaces/{workspaceId}/org-chart/structure-source:
+    put:
+      tags: [Workspace]
+      summary: Switch org structure base between HRIS and uploaded file
+      description: >
+        Advanced override when both HRIS and uploaded structure caches exist.
+        Re-materializes the effective org chart and may queue productivity re-ingest.
+      operationId: putWorkspaceOrgStructureSource
+      parameters:
+        - $ref: "#/components/parameters/WorkspaceId"
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/OrgStructureSourceBodyDto"
+      responses:
+        "200":
+          description: Updated status after re-materialization
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/OrgChartStatusDto"
+        "400":
+          description: Both structure caches are not available
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+        "401":
+          $ref: "#/components/responses/Unauthorized"
+        "403":
+          $ref: "#/components/responses/Forbidden"
+
   /workspaces/{workspaceId}/org-chart:
     get:
       tags: [Workspace]
@@ -5980,6 +6083,11 @@ components:
           type: array
           items:
             type: string
+        unmatchedPreview:
+          type: array
+          description: Parse-only preview of identity rows that would not match HRIS persons
+          items:
+            $ref: "#/components/schemas/OrgChartUnmatchedIdentitySampleDto"
 
     OrgChartSaveResultDto:
       type: object
@@ -5991,6 +6099,103 @@ components:
         tenantId:
           type: string
           format: uuid
+        unmatchedCount:
+          type: integer
+          minimum: 0
+          description: Identity rows that did not match HRIS persons (non-blocking)
+
+    OrgStructureSourceBodyDto:
+      type: object
+      additionalProperties: false
+      required: [source]
+      properties:
+        source:
+          type: string
+          enum: [hris, upload]
+
+    OrgChartStructureAvailabilityDto:
+      type: object
+      additionalProperties: false
+      required: [personCount, teamCount]
+      properties:
+        personCount:
+          type: integer
+          minimum: 0
+        teamCount:
+          type: integer
+          minimum: 0
+        provider:
+          type: string
+          description: HRIS provider when structure is from HRIS sync
+
+    OrgChartUnmatchedIdentitySampleDto:
+      type: object
+      additionalProperties: false
+      required: [email]
+      properties:
+        email:
+          type: string
+        employeeId:
+          type: string
+        githubUsername:
+          type: string
+
+    OrgChartStatusDto:
+      type: object
+      additionalProperties: false
+      required: [structure, identity, effective]
+      properties:
+        structure:
+          type: object
+          additionalProperties: false
+          required: [source, hris, uploadOverride]
+          properties:
+            source:
+              type: string
+              enum: [hris, upload]
+            hris:
+              allOf:
+                - $ref: "#/components/schemas/OrgChartStructureAvailabilityDto"
+                - type: object
+                  properties:
+                    lastSyncAt:
+                      type: string
+                      format: date-time
+              nullable: true
+            uploadOverride:
+              allOf:
+                - $ref: "#/components/schemas/OrgChartStructureAvailabilityDto"
+              nullable: true
+        identity:
+          type: object
+          additionalProperties: false
+          required: [mappingCount, updatedAt, unmatchedCount, unmatchedSample]
+          properties:
+            mappingCount:
+              type: integer
+              minimum: 0
+            updatedAt:
+              type: string
+              format: date-time
+              nullable: true
+            unmatchedCount:
+              type: integer
+              minimum: 0
+            unmatchedSample:
+              type: array
+              items:
+                $ref: "#/components/schemas/OrgChartUnmatchedIdentitySampleDto"
+        effective:
+          type: object
+          additionalProperties: false
+          required: [personCount, githubMappedCount]
+          properties:
+            personCount:
+              type: integer
+              minimum: 0
+            githubMappedCount:
+              type: integer
+              minimum: 0
 
     TenantSourceEntryDto:
       type: object
@@ -7784,6 +7989,17 @@ components:
           type: string
           nullable: true
 
+    DeleteMeBodyDto:
+      type: object
+      required: [email]
+      properties:
+        email:
+          type: string
+          format: email
+          description: >
+            Must match the authenticated user's email (case-insensitive). Acts as
+            a type-to-confirm guard against accidental deletion.
+
     WorkspaceSummaryDto:
       type: object
       required: [id, slug, name, status, role]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thinkai/tai-api-contract",
-  "version": "2.46.0",
+  "version": "2.48.0-pr.865.c7804f40",
   "private": false,
   "type": "module",
   "main": "dist/index.js",

package/src/generated/openapi.ts

@@ -82,7 +82,13 @@ export interface paths {
         /** Update current user profile */
         put: operations["updateMe"];
         post?: never;
-        delete?: never;
+        /**
+         * Delete current user account and all owned data
+         * @description Self-service account deletion. Hard-deletes the authenticated user in a single atomic transaction with the same semantics as admin `deleteUserAndData` (#428): owned workspaces (and all workspace-level child tables via CASCADE), membership rows in other workspaces, invitations where the user is `invited_by`, and the user row itself. After the DB commit, removes the corresponding Supabase Auth user via the service-role key; Auth deletion failure is logged but does not roll back the DB changes.
+         *     **Irreversible.** Owned workspaces in the #440 soft-delete grace period are also hard-deleted immediately; there is no restore window after account delete.
+         *     **Authorization:** Bearer JWT required. Body must include the caller's email exactly (case-insensitive) as a type-to-confirm guard.
+         */
+        delete: operations["deleteMe"];
         options?: never;
         head?: never;
         patch?: never;
@@ -189,6 +195,43 @@ export interface paths {
         patch: operations["updateTenantMemberRole"];
         trace?: never;
     };
+    "/workspaces/{workspaceId}/org-chart/status": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Effective org chart status (structure + identity) */
+        get: operations["getWorkspaceOrgChartStatus"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/workspaces/{workspaceId}/org-chart/structure-source": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Switch org structure base between HRIS and uploaded file
+         * @description Advanced override when both HRIS and uploaded structure caches exist. Re-materializes the effective org chart and may queue productivity re-ingest.
+         */
+        put: operations["putWorkspaceOrgStructureSource"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/workspaces/{workspaceId}/org-chart": {
         parameters: {
             query?: never;
@@ -2300,11 +2343,52 @@ export interface components {
         OrgChartImportResultDto: {
             persons: components["schemas"]["OrgChartPersonDto"][];
             errors: string[];
+            /** @description Parse-only preview of identity rows that would not match HRIS persons */
+            unmatchedPreview?: components["schemas"]["OrgChartUnmatchedIdentitySampleDto"][];
         };
         OrgChartSaveResultDto: {
             ok: boolean;
             /** Format: uuid */
             tenantId: string;
+            /** @description Identity rows that did not match HRIS persons (non-blocking) */
+            unmatchedCount?: number;
+        };
+        OrgStructureSourceBodyDto: {
+            /** @enum {string} */
+            source: "hris" | "upload";
+        };
+        OrgChartStructureAvailabilityDto: {
+            personCount: number;
+            teamCount: number;
+            /** @description HRIS provider when structure is from HRIS sync */
+            provider?: string;
+        };
+        OrgChartUnmatchedIdentitySampleDto: {
+            email: string;
+            employeeId?: string;
+            githubUsername?: string;
+        };
+        OrgChartStatusDto: {
+            structure: {
+                /** @enum {string} */
+                source: "hris" | "upload";
+                hris: (components["schemas"]["OrgChartStructureAvailabilityDto"] & {
+                    /** Format: date-time */
+                    lastSyncAt?: string;
+                }) | null;
+                uploadOverride: components["schemas"]["OrgChartStructureAvailabilityDto"] | null;
+            };
+            identity: {
+                mappingCount: number;
+                /** Format: date-time */
+                updatedAt: string | null;
+                unmatchedCount: number;
+                unmatchedSample: components["schemas"]["OrgChartUnmatchedIdentitySampleDto"][];
+            };
+            effective: {
+                personCount: number;
+                githubMappedCount: number;
+            };
         };
         TenantSourceEntryDto: {
             type: string;
@@ -3104,6 +3188,13 @@ export interface components {
             email?: string;
             defaultWorkspaceId?: string | null;
         };
+        DeleteMeBodyDto: {
+            /**
+             * Format: email
+             * @description Must match the authenticated user's email (case-insensitive). Acts as a type-to-confirm guard against accidental deletion.
+             */
+            email: string;
+        };
         WorkspaceSummaryDto: {
             id: string;
             slug: string;
@@ -4643,6 +4734,10 @@ export type OrgChartDto = components['schemas']['OrgChartDto'];
 export type OrgChartPersonDto = components['schemas']['OrgChartPersonDto'];
 export type OrgChartImportResultDto = components['schemas']['OrgChartImportResultDto'];
 export type OrgChartSaveResultDto = components['schemas']['OrgChartSaveResultDto'];
+export type OrgStructureSourceBodyDto = components['schemas']['OrgStructureSourceBodyDto'];
+export type OrgChartStructureAvailabilityDto = components['schemas']['OrgChartStructureAvailabilityDto'];
+export type OrgChartUnmatchedIdentitySampleDto = components['schemas']['OrgChartUnmatchedIdentitySampleDto'];
+export type OrgChartStatusDto = components['schemas']['OrgChartStatusDto'];
 export type TenantSourceEntryDto = components['schemas']['TenantSourceEntryDto'];
 export type CursorSourceDto = components['schemas']['CursorSourceDto'];
 export type CursorSourcePatchDto = components['schemas']['CursorSourcePatchDto'];
@@ -4716,6 +4811,7 @@ export type AiToolMemberHeatmapDayDto = components['schemas']['AiToolMemberHeatm
 export type AiToolMemberDetailDto = components['schemas']['AiToolMemberDetailDto'];
 export type MeProfileDto = components['schemas']['MeProfileDto'];
 export type UpdateMeBodyDto = components['schemas']['UpdateMeBodyDto'];
+export type DeleteMeBodyDto = components['schemas']['DeleteMeBodyDto'];
 export type WorkspaceSummaryDto = components['schemas']['WorkspaceSummaryDto'];
 export type WorkspacesForUserDto = components['schemas']['WorkspacesForUserDto'];
 export type CreateWorkspaceBodyDto = components['schemas']['CreateWorkspaceBodyDto'];
@@ -5113,6 +5209,62 @@ export interface operations {
             401: components["responses"]["Unauthorized"];
         };
     };
+    deleteMe: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["DeleteMeBodyDto"];
+            };
+        };
+        responses: {
+            /** @description Account and all owned data deleted. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing or mismatched confirmation email. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "Confirmation email does not match account email",
+                     *       "code": "email_mismatch"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            /** @description Identity conflict resolving the current user. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Account deletion not supported by the configured store. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
     listMyWorkspaces: {
         parameters: {
             query?: never;
@@ -5378,6 +5530,67 @@ export interface operations {
             };
         };
     };
+    getWorkspaceOrgChartStatus: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Structure source, identity mappings, and effective chart summary */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["OrgChartStatusDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+        };
+    };
+    putWorkspaceOrgStructureSource: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["OrgStructureSourceBodyDto"];
+            };
+        };
+        responses: {
+            /** @description Updated status after re-materialization */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["OrgChartStatusDto"];
+                };
+            };
+            /** @description Both structure caches are not available */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+        };
+    };
     getTenantOrgChart: {
         parameters: {
             query?: never;