@thinkai/tai-api-contract 2.48.0-pr.865.c7804f40 → 2.49.0

package/src/generated/openapi.ts

@@ -67,6 +67,156 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/privacy-requests": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Submit a privacy rights request (public)
+         * @description Public, unauthenticated intake for data subject access, erasure, portability, rectification, restriction, and objection requests (#611). No bearer token required.
+         *     **Abuse controls:** requests are rate limited per client IP (`429` with `Retry-After` when exceeded). A hidden honeypot field (`companyWebsite`) silently absorbs bot submissions. The response shape is identical whether or not the email matches an existing account, so the endpoint cannot be used to enumerate users. Duplicate open requests for the same email and request type within 24h are rejected with `409`.
+         *     **Identity is not proven** by this route; privacy ops must verify identity before any export or erasure is fulfilled.
+         */
+        post: operations["submitPublicPrivacyRequest"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/me/privacy-requests": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List the caller's privacy requests
+         * @description Returns privacy requests whose subject is the authenticated caller (matched by user id or email), limited to a reference code and status so callers can track progress.
+         */
+        get: operations["listMyPrivacyRequests"];
+        put?: never;
+        /**
+         * Submit a privacy request as the authenticated user
+         * @description Authenticated intake. The subject is always the caller's own profile; the request is auto-marked identity-verified because the JWT proves identity. Supplying an `email` that does not match the caller is rejected with `400`.
+         */
+        post: operations["submitMyPrivacyRequest"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/workspaces/{workspaceId}/privacy-requests": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Submit a privacy request on behalf of a workspace member (B2B controller)
+         * @description Workspace-admin route for B2B controllers to raise a privacy request on behalf of an employee (`subjectEmail`). The request is bound to the workspace and requires manual identity verification by privacy ops before fulfillment. Non-admin members receive `403`.
+         */
+        post: operations["submitWorkspacePrivacyRequest"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/admin/privacy-requests": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List privacy requests (privacy-ops queue)
+         * @description Platform-admin queue of privacy requests, newest first, with SLA due dates for triage.
+         *     **Authorization:** Bearer JWT required. Caller email must appear in `PLATFORM_ADMIN_EMAILS`.
+         */
+        get: operations["adminListPrivacyRequests"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/admin/privacy-requests/{requestId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Get a privacy request with its event timeline */
+        get: operations["adminGetPrivacyRequest"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        /**
+         * Update a privacy request (status, assignee, notes, identity verification)
+         * @description Update workflow fields. Setting `markIdentityVerified: true` records the verifying admin and unlocks export and erasure fulfillment. Transitioning `status` to `completed` requires both `fulfillmentAction` and `fulfillmentRef`.
+         */
+        patch: operations["adminUpdatePrivacyRequest"];
+        trace?: never;
+    };
+    "/admin/privacy-requests/{requestId}/export": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Generate a DSAR export bundle for a privacy request
+         * @description Assembles the subject's personal data across workspaces into a single JSON bundle for an access or portability request, per the PII inventory scope. The subject is resolved by user id or email. Blocked until identity is verified (`403 identity_not_verified`). Bundles larger than the size cap return `413 export_too_large`; scope by workspace in that case. The bundle is generated on demand and not persisted server-side.
+         *     **Authorization:** Bearer JWT required. Caller email must appear in `PLATFORM_ADMIN_EMAILS`.
+         */
+        post: operations["adminExportPrivacyRequest"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/admin/privacy-requests/{requestId}/fulfill/person-erasure": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Fulfill an erasure request by erasing workspace person-level data
+         * @description Thin wrapper around workspace person-level insights erasure (#706) for privacy-request fulfillment. Erases or anonymizes the subject's org-chart, AI-tool, dashboard, absence, and readiness data in one workspace. Blocked until identity is verified. Records an audit event on the privacy request with the categories erased.
+         *     **Authorization:** Bearer JWT required. Caller email must appear in `PLATFORM_ADMIN_EMAILS`.
+         */
+        post: operations["adminFulfillPrivacyRequestPersonErasure"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/me": {
         parameters: {
             query?: never;
@@ -2631,6 +2781,21 @@ export interface components {
             /** @description Applied team name filter from the Measure UI. */
             team: string;
         };
+        /**
+         * @description Echo of the resolved time bucket for this response. `day` when the request used an `Nd`/`cr:`/`from`+`to` window; `week` for legacy weekly rangeIds or `year` heatmap mode.
+         * @enum {string}
+         */
+        ProductivityInsightsGranularity: "day" | "week";
+        ProductivityInsightsDailyBucketDto: {
+            /**
+             * Format: date
+             * @description UTC calendar day (`YYYY-MM-DD`).
+             */
+            date: string;
+            mergedPrCount: number;
+            /** @description GitHub Actions CI build failures on this day from `ciFailureRuns` ledger when CI ingest is enabled. */
+            ciFailuresCount?: number;
+        };
         ProductivityInsightsAggregatedTeamWeekDto: {
             /** Format: date-time */
             bucketStart: string;
@@ -2663,17 +2828,27 @@ export interface components {
             managerLabel?: string;
             /** @description True when the team aggregates GitHub logins not mapped in the org chart (`teamId` `__other`). */
             notInOrgChart?: boolean;
-            weeks: components["schemas"]["ProductivityInsightsAggregatedTeamWeekDto"][];
+            /** @description Present in day-mode responses — daily merged PR and CI failure counts. */
+            days?: components["schemas"]["ProductivityInsightsDailyBucketDto"][];
+            weeks?: components["schemas"]["ProductivityInsightsAggregatedTeamWeekDto"][];
         };
-        /**
-         * @description Weekly bucket count (`4w`=4, `8w`=8, `12w`=12, `16w`=16). Legacy `q` aliases 12 weeks.
-         * @enum {string}
-         */
-        ProductivityInsightsRangeId: "4w" | "8w" | "q" | "12w" | "16w";
+        /** @description Daily windows: `7d`, `30d`, `90d`, `180d`, or custom `cr:YYYY-MM-DD:YYYY-MM-DD`. Weekly legacy: `4w`, `8w`, `q` (12 weeks), `12w`, `16w`. */
+        ProductivityInsightsRangeId: string;
         ProductivityInsightsAggregatedTeamsDto: {
             /** Format: uuid */
             workspaceId: string;
             range: components["schemas"]["ProductivityInsightsRangeId"];
+            granularity?: components["schemas"]["ProductivityInsightsGranularity"];
+            /**
+             * Format: date
+             * @description Inclusive start day when `granularity` is `day`.
+             */
+            from?: string;
+            /**
+             * Format: date
+             * @description Inclusive end day when `granularity` is `day`.
+             */
+            to?: string;
             scope: components["schemas"]["ProductivityInsightsAggregatedTeamsScopeDto"];
             /** Format: date-time */
             generatedAt: string;
@@ -2701,17 +2876,32 @@ export interface components {
             notInOrgChart?: boolean;
             /** @description GitHub login for unattributed contributors (when notInOrgChart is true). */
             githubLogin?: string;
-            weeks: components["schemas"]["ProductivityInsightsMergedPrTrendWeekDto"][];
+            /** @description Present in day-mode responses — daily merged PR counts per contributor. */
+            days?: components["schemas"]["ProductivityInsightsDailyBucketDto"][];
+            weeks?: components["schemas"]["ProductivityInsightsMergedPrTrendWeekDto"][];
         };
         ProductivityInsightsMergedPrTrendsDto: {
             /** Format: uuid */
             workspaceId: string;
             range: components["schemas"]["ProductivityInsightsRangeId"];
+            granularity?: components["schemas"]["ProductivityInsightsGranularity"];
+            /**
+             * Format: date
+             * @description Inclusive start day when `granularity` is `day`.
+             */
+            from?: string;
+            /**
+             * Format: date
+             * @description Inclusive end day when `granularity` is `day`.
+             */
+            to?: string;
             scope: components["schemas"]["ProductivityInsightsAggregatedTeamsScopeDto"];
             /** Format: date-time */
             generatedAt: string;
-            /** @description Sum of contributor weekly merged PR counts (matches the contributors table). Not deduplicated org-wide unique PRs when the same PR appears on multiple rows. */
-            weeks: components["schemas"]["ProductivityInsightsMergedPrTrendWeekDto"][];
+            /** @description Portfolio daily merged PR series in day mode (max of contributor sum and org ledger). */
+            days?: components["schemas"]["ProductivityInsightsDailyBucketDto"][];
+            /** @description Sum of contributor weekly merged PR counts (matches the contributors table). Not deduplicated org-wide unique PRs when the same PR appears on multiple rows. Present in week-mode responses. */
+            weeks?: components["schemas"]["ProductivityInsightsMergedPrTrendWeekDto"][];
             contributors: components["schemas"]["ProductivityInsightsMergedPrContributorRowDto"][];
         };
         ProductivityInsightsTeamLeaderItemDto: {
@@ -2746,18 +2936,31 @@ export interface components {
             notInOrgChart?: boolean;
             /** @description Present when the request included `year` — calendar-year heatmap mode. */
             year?: number;
+            /** @description Daily merged PR and CI failure counts for the selected period when `granularity` is `day` (not present in `year` heatmap mode). */
+            days?: components["schemas"]["ProductivityInsightsDailyBucketDto"][];
             /** @description Daily buckets aggregated from ingested person-level merged PR events for the selected period range or calendar year (same source as memberContributors). */
             heatmapWeeks?: components["schemas"]["ProductivityInsightsContributorActivityWeekDto"][];
             heatmapSummary?: components["schemas"]["ProductivityInsightsContributorActivitySummaryDto"];
             /** @description Per-member merged PR weekly series for the selected period or year — person-level source aligned with heatmapWeeks and the team roster table. */
             memberContributors?: components["schemas"]["ProductivityInsightsMergedPrContributorRowDto"][];
-            weeks: components["schemas"]["ProductivityInsightsAggregatedTeamWeekDto"][];
+            weeks?: components["schemas"]["ProductivityInsightsAggregatedTeamWeekDto"][];
             summary: components["schemas"]["ProductivityInsightsTeamSummaryDto"];
         };
         ProductivityInsightsTeamsResponseDto: {
             /** Format: uuid */
             workspaceId: string;
             range: components["schemas"]["ProductivityInsightsRangeId"];
+            granularity?: components["schemas"]["ProductivityInsightsGranularity"];
+            /**
+             * Format: date
+             * @description Inclusive start day when `granularity` is `day`.
+             */
+            from?: string;
+            /**
+             * Format: date
+             * @description Inclusive end day when `granularity` is `day`.
+             */
+            to?: string;
             /** @description Present when the request included `year` — calendar-year heatmap mode. */
             year?: number;
             scope: components["schemas"]["ProductivityInsightsAggregatedTeamsScopeDto"];
@@ -2841,6 +3044,17 @@ export interface components {
             workspaceId: string;
             contributorId: string;
             range: components["schemas"]["ProductivityInsightsRangeId"];
+            granularity?: components["schemas"]["ProductivityInsightsGranularity"];
+            /**
+             * Format: date
+             * @description Inclusive start day when `granularity` is `day`.
+             */
+            from?: string;
+            /**
+             * Format: date
+             * @description Inclusive end day when `granularity` is `day`.
+             */
+            to?: string;
             /** @description Present when the request included `year` — calendar-year heatmap mode. */
             year?: number;
             scope: components["schemas"]["ProductivityInsightsAggregatedTeamsScopeDto"];
@@ -2849,7 +3063,9 @@ export interface components {
             /** @description True when the workspace has opted in to GitHub Actions CI ingest. */
             githubActionsCiEnabled?: boolean;
             contributor: components["schemas"]["ProductivityInsightsContributorProfileDto"];
-            weeks: components["schemas"]["ProductivityInsightsContributorActivityWeekDto"][];
+            /** @description Daily merged PR and CI failure counts for the selected period when `granularity` is `day` (not present in `year` heatmap mode). */
+            days?: components["schemas"]["ProductivityInsightsDailyBucketDto"][];
+            weeks?: components["schemas"]["ProductivityInsightsContributorActivityWeekDto"][];
             summary: components["schemas"]["ProductivityInsightsContributorActivitySummaryDto"];
         };
         ProductivityInsightsNeedsAttentionItemDto: {
@@ -2873,6 +3089,17 @@ export interface components {
             /** Format: uuid */
             workspaceId: string;
             range: components["schemas"]["ProductivityInsightsRangeId"];
+            granularity?: components["schemas"]["ProductivityInsightsGranularity"];
+            /**
+             * Format: date
+             * @description Inclusive start day when `granularity` is `day`.
+             */
+            from?: string;
+            /**
+             * Format: date
+             * @description Inclusive end day when `granularity` is `day`.
+             */
+            to?: string;
             scope: components["schemas"]["ProductivityInsightsAggregatedTeamsScopeDto"];
             /** @enum {string} */
             entityType: "teams" | "contributors";
@@ -3182,6 +3409,8 @@ export interface components {
             name: string;
             roles: string[];
             defaultWorkspaceId?: string | null;
+            /** @description True when the caller's email is on the `PLATFORM_ADMIN_EMAILS` allowlist. Lets the frontend gate platform-admin surfaces (e.g. the privacy-request queue) without duplicating the allowlist client-side. */
+            isPlatformAdmin?: boolean;
         };
         UpdateMeBodyDto: {
             name?: string;
@@ -3195,6 +3424,190 @@ export interface components {
              */
             email: string;
         };
+        /**
+         * @description Data subject right being exercised (GDPR Arts. 15–21 / UAE PDPL).
+         * @enum {string}
+         */
+        PrivacyRequestType: "access" | "erasure" | "portability" | "rectification" | "restriction" | "objection";
+        /**
+         * @description Workflow status of a privacy request.
+         * @enum {string}
+         */
+        PrivacyRequestStatus: "pending" | "in_progress" | "completed" | "rejected";
+        /**
+         * @description How the request was submitted.
+         * @enum {string}
+         */
+        PrivacyRequestIntakeChannel: "public" | "authenticated" | "workspace_admin";
+        CreatePrivacyRequestBodyDto: {
+            /**
+             * Format: email
+             * @description Subject's email address.
+             */
+            email: string;
+            requestType: components["schemas"]["PrivacyRequestType"];
+            /** @description Optional free-text description of the request (max 4000 chars). */
+            details?: string;
+            /** @description Optional free-text hint (e.g. company or workspace name) to help privacy ops locate the subject. Never bound to a workspace id on the public channel. */
+            workspaceHint?: string;
+            /** @description Honeypot field. Must be left empty by real clients; non-empty submissions are silently accepted but not persisted. Rendered hidden in the UI. */
+            companyWebsite?: string;
+        };
+        CreateMyPrivacyRequestBodyDto: {
+            requestType: components["schemas"]["PrivacyRequestType"];
+            details?: string;
+            /**
+             * Format: email
+             * @description Optional. If provided it must match the caller's own email; a differing value is rejected with `400 email_override_rejected`.
+             */
+            email?: string;
+        };
+        CreateWorkspacePrivacyRequestBodyDto: {
+            /**
+             * Format: email
+             * @description Email of the workspace member the request is raised on behalf of.
+             */
+            subjectEmail: string;
+            requestType: components["schemas"]["PrivacyRequestType"];
+            details?: string;
+        };
+        CreatePrivacyRequestResultDto: {
+            /** @description Human-friendly tracking code (e.g. `PR-2026-00042`). */
+            referenceCode: string;
+            requestType: components["schemas"]["PrivacyRequestType"];
+            status: components["schemas"]["PrivacyRequestStatus"];
+            /**
+             * Format: date-time
+             * @description When the request should be resolved by (default 30 days from submission).
+             */
+            slaDueAt: string;
+        };
+        MyPrivacyRequestSummaryDto: {
+            referenceCode: string;
+            requestType: components["schemas"]["PrivacyRequestType"];
+            status: components["schemas"]["PrivacyRequestStatus"];
+            /** Format: date-time */
+            createdAt: string;
+            /** Format: date-time */
+            slaDueAt: string;
+            /** Format: date-time */
+            completedAt?: string | null;
+        };
+        MyPrivacyRequestListDto: {
+            requests: components["schemas"]["MyPrivacyRequestSummaryDto"][];
+        };
+        PrivacyRequestDto: {
+            /** Format: uuid */
+            id: string;
+            referenceCode: string;
+            requestType: components["schemas"]["PrivacyRequestType"];
+            status: components["schemas"]["PrivacyRequestStatus"];
+            intakeChannel: components["schemas"]["PrivacyRequestIntakeChannel"];
+            subjectEmail: string;
+            /** Format: uuid */
+            subjectUserId?: string | null;
+            /**
+             * Format: uuid
+             * @description Set only for workspace-admin (B2B) submissions.
+             */
+            workspaceId?: string | null;
+            subjectWorkspaceHint?: string | null;
+            /** Format: uuid */
+            requestedByUserId?: string | null;
+            details?: string | null;
+            internalNotes?: string | null;
+            assignedTo?: string | null;
+            /** Format: date-time */
+            identityVerifiedAt?: string | null;
+            verifiedBy?: string | null;
+            fulfillmentAction?: string | null;
+            fulfillmentRef?: string | null;
+            /** Format: date-time */
+            slaDueAt: string;
+            /** Format: date-time */
+            completedAt?: string | null;
+            /** Format: date-time */
+            createdAt: string;
+            /** Format: date-time */
+            updatedAt: string;
+            /** @description True when the SLA due date has passed and the request is not completed/rejected. */
+            overdue?: boolean;
+        };
+        PrivacyRequestEventDto: {
+            /** Format: uuid */
+            id: string;
+            /** @enum {string} */
+            eventType: "submitted" | "identity_verified" | "status_changed" | "assigned" | "export_generated" | "fulfillment_noted" | "duplicate_rejected";
+            actorEmail?: string | null;
+            payload?: {
+                [key: string]: unknown;
+            } | null;
+            /** Format: date-time */
+            createdAt: string;
+        };
+        PrivacyRequestDetailDto: {
+            request: components["schemas"]["PrivacyRequestDto"];
+            events: components["schemas"]["PrivacyRequestEventDto"][];
+        };
+        PrivacyRequestListDto: {
+            requests: components["schemas"]["PrivacyRequestDto"][];
+        };
+        UpdatePrivacyRequestBodyDto: {
+            status?: components["schemas"]["PrivacyRequestStatus"];
+            assignedTo?: string | null;
+            internalNotes?: string | null;
+            /** @description When true, records the caller as the verifier and unlocks export/erasure. */
+            markIdentityVerified?: boolean;
+            /** @description Short label for how the request was fulfilled (required when completing). */
+            fulfillmentAction?: string;
+            /** @description Reference to the fulfillment artifact (e.g. deletion job id; required when completing). */
+            fulfillmentRef?: string;
+        };
+        FulfillPersonErasureBodyDto: {
+            /** Format: uuid */
+            workspaceId: string;
+            /** @description Org-chart person id (usually the subject's email) within the workspace. */
+            personId: string;
+            orgChart?: boolean;
+            dashboardMetrics?: boolean;
+            aiToolData?: boolean;
+            absences?: boolean;
+            readinessAnonymize?: boolean;
+        };
+        PrivacyRequestPersonErasureResultDto: {
+            deleted: boolean;
+            aiToolRowsDeleted?: number;
+            absencesDeleted?: number;
+            readinessRunsAnonymized?: number;
+            auditEntriesAnonymized?: number;
+        };
+        /** @description DSAR export bundle assembled on demand for an access/portability request. `sections` holds the subject's data grouped by source; shapes vary by section, so values are opaque objects. */
+        PrivacyRequestExportDto: {
+            metadata: {
+                referenceCode: string;
+                /** Format: date-time */
+                generatedAt: string;
+                subjectEmail: string;
+                subjectUserId?: string | null;
+                workspaceCount?: number;
+                /** @description Data categories intentionally excluded from the bundle. */
+                excluded?: string[];
+                /** @description Redaction policy applied to readiness runs (e.g. `requester_runs_only`). */
+                readinessRedaction?: string;
+            };
+            /** @description Profile and consent records for the subject. */
+            subject: {
+                [key: string]: unknown;
+            };
+            /** @description Per-source personal data (memberships, AI-tool, dashboard, absences, org chart, activity). */
+            sections?: {
+                [key: string]: unknown;
+            };
+            /** @description Workspaces where person-keyed rows exist but the subject has no membership (#269). */
+            residualPersonData?: {
+                [key: string]: unknown;
+            }[];
+        };
         WorkspaceSummaryDto: {
             id: string;
             slug: string;
@@ -4682,9 +5095,15 @@ export interface components {
         NotificationId: string;
         /** @description Workspace member user id (`tai_users.id`). */
         WorkspaceMemberId: string;
+        /** @description Privacy request id (`tai_privacy_requests.id`). */
+        PrivacyRequestId: string;
         FixId: string;
-        /** @description Productivity insights time range in weeks (`4w`=4, `8w`=8, `12w`=12, `16w`=16). Legacy `q` is an alias for 12 weeks. */
-        InsightsProductivityRangeId: "4w" | "8w" | "q" | "12w" | "16w";
+        /** @description Productivity insights time range. Daily windows: `7d`, `30d`, `90d`, `180d`, or custom `cr:YYYY-MM-DD:YYYY-MM-DD`. Weekly legacy: `4w`, `8w`, `q` (12 weeks), `12w`, `16w`. Omit when using explicit `from`/`to` day bounds. */
+        InsightsProductivityRangeId: string;
+        /** @description Inclusive start of a daily window (`YYYY-MM-DD`). When set with `to`, overrides `rangeId` for day-mode responses (max 180 days). */
+        InsightsProductivityFrom: string;
+        /** @description Inclusive end of a daily window (`YYYY-MM-DD`). When set with `from`, overrides `rangeId` for day-mode responses (max 180 days). */
+        InsightsProductivityTo: string;
         /** @description Department filter; send `All departments` to include every department. Scoped using imported `thinkai_org_structure` members when present, otherwise SPA org chart `department` nodes and their descendant teams. When neither source defines the requested department, insights return no scoped teams or contributors (not org-wide data). */
         InsightsDepartmentFilter: string;
         /** @description Page size (default 25, max 100). */
@@ -4759,6 +5178,8 @@ export type DashboardProductivityMetricsDto = components['schemas']['DashboardPr
 export type DashboardProductivityDto = components['schemas']['DashboardProductivityDto'];
 export type DashboardProductivityHistoryDto = components['schemas']['DashboardProductivityHistoryDto'];
 export type ProductivityInsightsAggregatedTeamsScopeDto = components['schemas']['ProductivityInsightsAggregatedTeamsScopeDto'];
+export type ProductivityInsightsGranularity = components['schemas']['ProductivityInsightsGranularity'];
+export type ProductivityInsightsDailyBucketDto = components['schemas']['ProductivityInsightsDailyBucketDto'];
 export type ProductivityInsightsAggregatedTeamWeekDto = components['schemas']['ProductivityInsightsAggregatedTeamWeekDto'];
 export type ProductivityInsightsAggregatedTeamRowDto = components['schemas']['ProductivityInsightsAggregatedTeamRowDto'];
 export type ProductivityInsightsRangeId = components['schemas']['ProductivityInsightsRangeId'];
@@ -4812,6 +5233,23 @@ export type AiToolMemberDetailDto = components['schemas']['AiToolMemberDetailDto
 export type MeProfileDto = components['schemas']['MeProfileDto'];
 export type UpdateMeBodyDto = components['schemas']['UpdateMeBodyDto'];
 export type DeleteMeBodyDto = components['schemas']['DeleteMeBodyDto'];
+export type PrivacyRequestType = components['schemas']['PrivacyRequestType'];
+export type PrivacyRequestStatus = components['schemas']['PrivacyRequestStatus'];
+export type PrivacyRequestIntakeChannel = components['schemas']['PrivacyRequestIntakeChannel'];
+export type CreatePrivacyRequestBodyDto = components['schemas']['CreatePrivacyRequestBodyDto'];
+export type CreateMyPrivacyRequestBodyDto = components['schemas']['CreateMyPrivacyRequestBodyDto'];
+export type CreateWorkspacePrivacyRequestBodyDto = components['schemas']['CreateWorkspacePrivacyRequestBodyDto'];
+export type CreatePrivacyRequestResultDto = components['schemas']['CreatePrivacyRequestResultDto'];
+export type MyPrivacyRequestSummaryDto = components['schemas']['MyPrivacyRequestSummaryDto'];
+export type MyPrivacyRequestListDto = components['schemas']['MyPrivacyRequestListDto'];
+export type PrivacyRequestDto = components['schemas']['PrivacyRequestDto'];
+export type PrivacyRequestEventDto = components['schemas']['PrivacyRequestEventDto'];
+export type PrivacyRequestDetailDto = components['schemas']['PrivacyRequestDetailDto'];
+export type PrivacyRequestListDto = components['schemas']['PrivacyRequestListDto'];
+export type UpdatePrivacyRequestBodyDto = components['schemas']['UpdatePrivacyRequestBodyDto'];
+export type FulfillPersonErasureBodyDto = components['schemas']['FulfillPersonErasureBodyDto'];
+export type PrivacyRequestPersonErasureResultDto = components['schemas']['PrivacyRequestPersonErasureResultDto'];
+export type PrivacyRequestExportDto = components['schemas']['PrivacyRequestExportDto'];
 export type WorkspaceSummaryDto = components['schemas']['WorkspaceSummaryDto'];
 export type WorkspacesForUserDto = components['schemas']['WorkspacesForUserDto'];
 export type CreateWorkspaceBodyDto = components['schemas']['CreateWorkspaceBodyDto'];
@@ -4951,8 +5389,11 @@ export type ParameterProviderSlug = components['parameters']['ProviderSlug'];
 export type ParameterProjectId = components['parameters']['ProjectId'];
 export type ParameterNotificationId = components['parameters']['NotificationId'];
 export type ParameterWorkspaceMemberId = components['parameters']['WorkspaceMemberId'];
+export type ParameterPrivacyRequestId = components['parameters']['PrivacyRequestId'];
 export type ParameterFixId = components['parameters']['FixId'];
 export type ParameterInsightsProductivityRangeId = components['parameters']['InsightsProductivityRangeId'];
+export type ParameterInsightsProductivityFrom = components['parameters']['InsightsProductivityFrom'];
+export type ParameterInsightsProductivityTo = components['parameters']['InsightsProductivityTo'];
 export type ParameterInsightsDepartmentFilter = components['parameters']['InsightsDepartmentFilter'];
 export type ParameterPaginationLimit = components['parameters']['PaginationLimit'];
 export type ParameterPaginationOffset = components['parameters']['PaginationOffset'];
@@ -5165,6 +5606,477 @@ export interface operations {
             };
         };
     };
+    submitPublicPrivacyRequest: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreatePrivacyRequestBodyDto"];
+            };
+        };
+        responses: {
+            /** @description Request accepted and queued for privacy ops. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["CreatePrivacyRequestResultDto"];
+                };
+            };
+            /** @description Missing or invalid email, unknown request type, or details too long. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "A valid email is required",
+                     *       "code": "invalid_email"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description An open request for this email and type already exists. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "An open request for this email already exists",
+                     *       "code": "duplicate_open_request"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Too many submissions from this client; retry later. */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "Too many requests",
+                     *       "code": "too_many_requests"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
+    listMyPrivacyRequests: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Caller's privacy requests, newest first. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["MyPrivacyRequestListDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+        };
+    };
+    submitMyPrivacyRequest: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreateMyPrivacyRequestBodyDto"];
+            };
+        };
+        responses: {
+            /** @description Request accepted and queued. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["CreatePrivacyRequestResultDto"];
+                };
+            };
+            /** @description Unknown request type, details too long, or email override attempted. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "Email cannot be overridden on an authenticated request",
+                     *       "code": "email_override_rejected"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            /** @description An open request for this subject and type already exists. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
+    submitWorkspacePrivacyRequest: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreateWorkspacePrivacyRequestBodyDto"];
+            };
+        };
+        responses: {
+            /** @description Request accepted and queued. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["CreatePrivacyRequestResultDto"];
+                };
+            };
+            /** @description Invalid subject email, unknown request type, or details too long. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            /** @description Caller is not a workspace admin. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "Forbidden",
+                     *       "code": "workspace_admin_required"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Workspace not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
+    adminListPrivacyRequests: {
+        parameters: {
+            query?: {
+                /** @description Filter by workflow status. */
+                status?: components["schemas"]["PrivacyRequestStatus"];
+                /** @description Filter by request type. */
+                requestType?: components["schemas"]["PrivacyRequestType"];
+                /** @description When true, return only requests past their SLA due date and not yet completed. */
+                overdue?: boolean;
+                /** @description Maximum number of rows to return (default 100, max 200). */
+                limit?: number;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Privacy request queue. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PrivacyRequestListDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            /** @description Caller is not a platform admin. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "Forbidden",
+                     *       "code": "forbidden"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
+    adminGetPrivacyRequest: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Privacy request id (`tai_privacy_requests.id`). */
+                requestId: components["parameters"]["PrivacyRequestId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Privacy request detail with audit timeline. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PrivacyRequestDetailDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            /** @description Caller is not a platform admin. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Request not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
+    adminUpdatePrivacyRequest: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Privacy request id (`tai_privacy_requests.id`). */
+                requestId: components["parameters"]["PrivacyRequestId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["UpdatePrivacyRequestBodyDto"];
+            };
+        };
+        responses: {
+            /** @description Updated privacy request detail. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PrivacyRequestDetailDto"];
+                };
+            };
+            /** @description Invalid field value or missing fulfillment metadata for completion. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "Completing a request requires a fulfillment action and reference",
+                     *       "code": "fulfillment_metadata_required"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            /** @description Caller is not a platform admin. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Request not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
+    adminExportPrivacyRequest: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Privacy request id (`tai_privacy_requests.id`). */
+                requestId: components["parameters"]["PrivacyRequestId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description DSAR export bundle (also offered as a file download via Content-Disposition). */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PrivacyRequestExportDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            /** @description Caller is not a platform admin, or identity has not been verified. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "Identity must be verified before export",
+                     *       "code": "identity_not_verified"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Request not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Export exceeds the size cap; scope the request by workspace. */
+            413: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "Export bundle is too large; scope by workspace",
+                     *       "code": "export_too_large"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
+    adminFulfillPrivacyRequestPersonErasure: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Privacy request id (`tai_privacy_requests.id`). */
+                requestId: components["parameters"]["PrivacyRequestId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["FulfillPersonErasureBodyDto"];
+            };
+        };
+        responses: {
+            /** @description Erasure result. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PrivacyRequestPersonErasureResultDto"];
+                };
+            };
+            /** @description Missing workspaceId/personId or invalid options. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            /** @description Caller is not a platform admin, or identity has not been verified. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "Identity must be verified before erasure",
+                     *       "code": "identity_not_verified"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Request not found, or person not found in the workspace org chart. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
     getMe: {
         parameters: {
             query?: never;
@@ -5995,8 +6907,12 @@ export interface operations {
     getProductivityInsightsAggregatedTeams: {
         parameters: {
             query?: {
-                /** @description Productivity insights time range in weeks (`4w`=4, `8w`=8, `12w`=12, `16w`=16). Legacy `q` is an alias for 12 weeks. */
+                /** @description Productivity insights time range. Daily windows: `7d`, `30d`, `90d`, `180d`, or custom `cr:YYYY-MM-DD:YYYY-MM-DD`. Weekly legacy: `4w`, `8w`, `q` (12 weeks), `12w`, `16w`. Omit when using explicit `from`/`to` day bounds. */
                 rangeId?: components["parameters"]["InsightsProductivityRangeId"];
+                /** @description Inclusive start of a daily window (`YYYY-MM-DD`). When set with `to`, overrides `rangeId` for day-mode responses (max 180 days). */
+                from?: components["parameters"]["InsightsProductivityFrom"];
+                /** @description Inclusive end of a daily window (`YYYY-MM-DD`). When set with `from`, overrides `rangeId` for day-mode responses (max 180 days). */
+                to?: components["parameters"]["InsightsProductivityTo"];
                 /** @description Department filter; send `All departments` to include every department. Scoped using imported `thinkai_org_structure` members when present, otherwise SPA org chart `department` nodes and their descendant teams. When neither source defines the requested department, insights return no scoped teams or contributors (not org-wide data). */
                 department?: components["parameters"]["InsightsDepartmentFilter"];
                 /** @description Team name filter; send `All teams` to include every team. */
@@ -6047,8 +6963,12 @@ export interface operations {
     getProductivityInsightsMergedPrTrends: {
         parameters: {
             query?: {
-                /** @description Productivity insights time range in weeks (`4w`=4, `8w`=8, `12w`=12, `16w`=16). Legacy `q` is an alias for 12 weeks. */
+                /** @description Productivity insights time range. Daily windows: `7d`, `30d`, `90d`, `180d`, or custom `cr:YYYY-MM-DD:YYYY-MM-DD`. Weekly legacy: `4w`, `8w`, `q` (12 weeks), `12w`, `16w`. Omit when using explicit `from`/`to` day bounds. */
                 rangeId?: components["parameters"]["InsightsProductivityRangeId"];
+                /** @description Inclusive start of a daily window (`YYYY-MM-DD`). When set with `to`, overrides `rangeId` for day-mode responses (max 180 days). */
+                from?: components["parameters"]["InsightsProductivityFrom"];
+                /** @description Inclusive end of a daily window (`YYYY-MM-DD`). When set with `from`, overrides `rangeId` for day-mode responses (max 180 days). */
+                to?: components["parameters"]["InsightsProductivityTo"];
                 /** @description Department filter; send `All departments` to include every department. Scoped using imported `thinkai_org_structure` members when present, otherwise SPA org chart `department` nodes and their descendant teams. When neither source defines the requested department, insights return no scoped teams or contributors (not org-wide data). */
                 department?: components["parameters"]["InsightsDepartmentFilter"];
                 /** @description Team name filter; send `All teams` to include every team. */
@@ -6103,8 +7023,12 @@ export interface operations {
                 teamId?: string;
                 /** @description Maximum top-team rows when `teamId` is omitted (UI default 3). */
                 limit?: number;
-                /** @description Productivity insights time range in weeks (`4w`=4, `8w`=8, `12w`=12, `16w`=16). Legacy `q` is an alias for 12 weeks. */
+                /** @description Productivity insights time range. Daily windows: `7d`, `30d`, `90d`, `180d`, or custom `cr:YYYY-MM-DD:YYYY-MM-DD`. Weekly legacy: `4w`, `8w`, `q` (12 weeks), `12w`, `16w`. Omit when using explicit `from`/`to` day bounds. */
                 rangeId?: components["parameters"]["InsightsProductivityRangeId"];
+                /** @description Inclusive start of a daily window (`YYYY-MM-DD`). When set with `to`, overrides `rangeId` for day-mode responses (max 180 days). */
+                from?: components["parameters"]["InsightsProductivityFrom"];
+                /** @description Inclusive end of a daily window (`YYYY-MM-DD`). When set with `from`, overrides `rangeId` for day-mode responses (max 180 days). */
+                to?: components["parameters"]["InsightsProductivityTo"];
                 /** @description Department filter; send `All departments` to include every department. Scoped using imported `thinkai_org_structure` members when present, otherwise SPA org chart `department` nodes and their descendant teams. When neither source defines the requested department, insights return no scoped teams or contributors (not org-wide data). */
                 department?: components["parameters"]["InsightsDepartmentFilter"];
                 /** @description Team name filter; send `All teams` to include every team. */
@@ -6157,8 +7081,12 @@ export interface operations {
     getProductivityInsightsContributor: {
         parameters: {
             query?: {
-                /** @description Productivity insights time range in weeks (`4w`=4, `8w`=8, `12w`=12, `16w`=16). Legacy `q` is an alias for 12 weeks. */
+                /** @description Productivity insights time range. Daily windows: `7d`, `30d`, `90d`, `180d`, or custom `cr:YYYY-MM-DD:YYYY-MM-DD`. Weekly legacy: `4w`, `8w`, `q` (12 weeks), `12w`, `16w`. Omit when using explicit `from`/`to` day bounds. */
                 rangeId?: components["parameters"]["InsightsProductivityRangeId"];
+                /** @description Inclusive start of a daily window (`YYYY-MM-DD`). When set with `to`, overrides `rangeId` for day-mode responses (max 180 days). */
+                from?: components["parameters"]["InsightsProductivityFrom"];
+                /** @description Inclusive end of a daily window (`YYYY-MM-DD`). When set with `from`, overrides `rangeId` for day-mode responses (max 180 days). */
+                to?: components["parameters"]["InsightsProductivityTo"];
                 /** @description Department filter; send `All departments` to include every department. Scoped using imported `thinkai_org_structure` members when present, otherwise SPA org chart `department` nodes and their descendant teams. When neither source defines the requested department, insights return no scoped teams or contributors (not org-wide data). */
                 department?: components["parameters"]["InsightsDepartmentFilter"];
                 /** @description Team name filter; send `All teams` to include every team. */
@@ -6217,8 +7145,12 @@ export interface operations {
                 entityType?: "teams" | "contributors";
                 /** @description Maximum number of laggard rows to return (UI default 3). */
                 limit?: number;
-                /** @description Productivity insights time range in weeks (`4w`=4, `8w`=8, `12w`=12, `16w`=16). Legacy `q` is an alias for 12 weeks. */
+                /** @description Productivity insights time range. Daily windows: `7d`, `30d`, `90d`, `180d`, or custom `cr:YYYY-MM-DD:YYYY-MM-DD`. Weekly legacy: `4w`, `8w`, `q` (12 weeks), `12w`, `16w`. Omit when using explicit `from`/`to` day bounds. */
                 rangeId?: components["parameters"]["InsightsProductivityRangeId"];
+                /** @description Inclusive start of a daily window (`YYYY-MM-DD`). When set with `to`, overrides `rangeId` for day-mode responses (max 180 days). */
+                from?: components["parameters"]["InsightsProductivityFrom"];
+                /** @description Inclusive end of a daily window (`YYYY-MM-DD`). When set with `from`, overrides `rangeId` for day-mode responses (max 180 days). */
+                to?: components["parameters"]["InsightsProductivityTo"];
                 /** @description Department filter; send `All departments` to include every department. Scoped using imported `thinkai_org_structure` members when present, otherwise SPA org chart `department` nodes and their descendant teams. When neither source defines the requested department, insights return no scoped teams or contributors (not org-wide data). */
                 department?: components["parameters"]["InsightsDepartmentFilter"];
                 /** @description Team name filter; send `All teams` to include every team. */