@thinkai/tai-api-contract 2.6.0 → 2.7.1

package/openapi/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: ThinkAI API
-  version: 2.6.0
+  version: 2.7.1
   description: >
     Contract surface for the AI Driven SDLC backend used by ThinkAI.
     Workspace-scoped routes use `/workspaces/{workspaceId}/...`.
@@ -52,8 +52,69 @@ tags:
     description: Agentic Foundation pillars (epic #278); reads stored repository readiness snapshots
   - name: YourAiJourney
     description: Your AI Journey dashboard aggregators (epic #267); composes readiness, metrics, and AI-spend data for the /dashboard page
+  - name: PlatformAdmin
+    description: Platform-admin operations restricted to PLATFORM_ADMIN_EMAILS. Callers must present a valid JWT from an email on that allowlist; all other callers receive 403.
 
 paths:
+  /admin/users/{userId}:
+    delete:
+      tags: [PlatformAdmin]
+      summary: Delete user and all workspace data
+      operationId: adminDeleteUser
+      description: >
+        Hard-deletes a user account and all data they own in a single atomic transaction:
+        owned workspaces (and all workspace-level child tables via CASCADE), membership rows in
+        other workspaces, invitations where the user is `invited_by`, and the user row itself.
+        After the DB commit, removes the corresponding Supabase Auth user via the service-role key;
+        Auth deletion failure is logged but does not roll back the DB changes.
+
+        **Authorization:** Bearer JWT required. Caller email must appear in `PLATFORM_ADMIN_EMAILS`
+        (comma-separated env var). All other callers receive `403 Forbidden`.
+      parameters:
+        - name: userId
+          in: path
+          required: true
+          schema:
+            type: string
+            format: uuid
+          description: "`tai_users.id` of the account to delete."
+      responses:
+        "204":
+          description: User and all workspace data deleted.
+        "400":
+          description: Invalid UUID format.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+              example:
+                error: Invalid user ID format
+                code: invalid_user_id
+        "401":
+          description: Missing or invalid JWT.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+        "403":
+          description: Caller is not a platform admin.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+              example:
+                error: Forbidden
+                code: forbidden
+        "404":
+          description: User not found.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+              example:
+                error: User not found
+                code: user_not_found
+
   /me:
     get:
       tags: [Me]
@@ -1505,6 +1566,10 @@ paths:
           schema:
             type: boolean
             default: false
+        - $ref: "#/components/parameters/GithubRepoLimit"
+        - $ref: "#/components/parameters/GithubRepoOffset"
+        - $ref: "#/components/parameters/GithubRepoSort"
+        - $ref: "#/components/parameters/GithubRepoOrder"
       responses:
         "200":
           description: Installation status
@@ -2122,19 +2187,33 @@ paths:
   /workspaces/{workspaceId}/readiness/repos:
     get:
       tags: [RepositoryReadiness]
-      summary: List repo readiness scores
+      summary: List repo readiness scores (paginated)
       operationId: listReadinessRepos
+      description: >
+        Returns a page of repository readiness scorecards. Use `GET .../readiness/repos/{repoId}`
+        for a single repo. Summary aggregates on the Agentic Foundation dashboard use separate
+        aggregate queries over the full workspace (#403).
       parameters:
         - $ref: "#/components/parameters/WorkspaceId"
+        - $ref: "#/components/parameters/PaginationLimit"
+        - $ref: "#/components/parameters/PaginationOffset"
+        - $ref: "#/components/parameters/ReadinessRepoSort"
+        - $ref: "#/components/parameters/PaginationOrder"
+        - $ref: "#/components/parameters/ReadinessRepoSearch"
+        - $ref: "#/components/parameters/ReadinessRepoLanguage"
       responses:
         "200":
-          description: Repositories analyzed
+          description: Paginated repositories analyzed
           content:
             application/json:
               schema:
-                type: array
-                items:
-                  $ref: "#/components/schemas/RepoReadinessScoreDto"
+                $ref: "#/components/schemas/ReadinessRepoListDto"
+        "400":
+          description: Invalid pagination or sort query
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
         "401":
           $ref: "#/components/responses/Unauthorized"
         "403":
@@ -2269,18 +2348,19 @@ paths:
   /workspaces/{workspaceId}/agentic-foundation/dashboard:
     get:
       tags: [AgenticFoundation]
-      summary: Agentic Foundation dashboard
+      summary: Agentic Foundation dashboard summary
       description: >
-        Returns stored repository readiness scorecards plus a flattened issue queue for the
-        Agentic Foundation dashboard surfaces. This is read-only and does not run scoring on
-        the request path (issue #279). Field `generatedAt` is the server timestamp when this JSON
-        payload was assembled; it is not the same as per-repo `lastAnalyzed` on `RepoReadinessScoreDto`.
+        Returns workspace-level readiness summary, per-dimension aggregate bars, and fix status
+        counts for Agentic Foundation dashboard surfaces. Repository and issue lists are paginated
+        on `GET .../readiness/repos` and related segment routes (#403). Read-only; does not run
+        scoring on the request path (issue #279). Field `generatedAt` is the server timestamp when
+        this JSON payload was assembled.
       operationId: getAgenticFoundationDashboard
       parameters:
         - $ref: "#/components/parameters/WorkspaceId"
       responses:
         "200":
-          description: Dashboard scorecards and issue queue
+          description: Dashboard summary and aggregates
           content:
             application/json:
               schema:
@@ -2296,8 +2376,14 @@ paths:
                       averageOverallScore: 0
                       issueCount: 0
                       criticalIssueCount: 0
-                    repos: []
-                    issueQueue: []
+                    dimensionAggregates: []
+                    fixStatusSummary:
+                      queued: 0
+                      generating: 0
+                      prCreated: 0
+                      merged: 0
+                      failed: 0
+                      total: 0
         "401":
           $ref: "#/components/responses/Unauthorized"
         "403":
@@ -2319,39 +2405,53 @@ paths:
       operationId: getAgenticFoundationAgenticReadiness
       parameters:
         - $ref: "#/components/parameters/WorkspaceId"
+        - $ref: "#/components/parameters/PaginationLimit"
+        - $ref: "#/components/parameters/PaginationOffset"
+        - $ref: "#/components/parameters/ReadinessRepoSort"
+        - $ref: "#/components/parameters/PaginationOrder"
+        - $ref: "#/components/parameters/ReadinessRepoSearch"
+        - $ref: "#/components/parameters/ReadinessRepoLanguage"
       responses:
         "200":
-          description: Repositories with ai-agent-readiness slice
+          description: Paginated repositories with ai-agent-readiness slice
           content:
             application/json:
               schema:
-                type: array
-                items:
-                  $ref: "#/components/schemas/RepoReadinessScoreDto"
+                $ref: "#/components/schemas/ReadinessRepoListDto"
               examples:
                 singleRepoSlice:
                   summary: One repo, single pillar dimension
                   value:
-                    - repoId: 00000000-0000-0000-0000-000000000002
-                      repoName: api-gateway
-                      language: typescript
-                      overallScore: 67
-                      dimensions:
-                        - dimensionId: ai-agent-readiness
-                          score: 2
-                          maxScore: 3
-                          issues: []
-                      lastAnalyzed: "2026-05-12T12:00:00.000Z"
-                      teamId: null
-                      provider:
-                        kind: github
-                        slug: acme/api-gateway
-                        webUrl: https://github.com/acme/api-gateway
-                        defaultBranch: main
-                        externalId: null
-                        hostBaseUrl: null
-                      analysisStatus: idle
-                      activeRunId: null
+                    total: 1
+                    limit: 25
+                    offset: 0
+                    items:
+                      - repoId: 00000000-0000-0000-0000-000000000002
+                        repoName: api-gateway
+                        language: typescript
+                        overallScore: 67
+                        dimensions:
+                          - dimensionId: ai-agent-readiness
+                            score: 2
+                            maxScore: 3
+                            issues: []
+                        lastAnalyzed: "2026-05-12T12:00:00.000Z"
+                        teamId: null
+                        provider:
+                          kind: github
+                          slug: acme/api-gateway
+                          webUrl: https://github.com/acme/api-gateway
+                          defaultBranch: main
+                          externalId: null
+                          hostBaseUrl: null
+                        analysisStatus: idle
+                        activeRunId: null
+        "400":
+          description: Invalid pagination or sort query
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
         "401":
           $ref: "#/components/responses/Unauthorized"
         "403":
@@ -2371,15 +2471,25 @@ paths:
       operationId: getAgenticFoundationRepositoryHealth
       parameters:
         - $ref: "#/components/parameters/WorkspaceId"
+        - $ref: "#/components/parameters/PaginationLimit"
+        - $ref: "#/components/parameters/PaginationOffset"
+        - $ref: "#/components/parameters/ReadinessRepoSort"
+        - $ref: "#/components/parameters/PaginationOrder"
+        - $ref: "#/components/parameters/ReadinessRepoSearch"
+        - $ref: "#/components/parameters/ReadinessRepoLanguage"
       responses:
         "200":
-          description: Repositories with repo-hygiene slice
+          description: Paginated repositories with repo-hygiene slice
           content:
             application/json:
               schema:
-                type: array
-                items:
-                  $ref: "#/components/schemas/RepoReadinessScoreDto"
+                $ref: "#/components/schemas/ReadinessRepoListDto"
+        "400":
+          description: Invalid pagination or sort query
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
         "401":
           $ref: "#/components/responses/Unauthorized"
         "403":
@@ -2399,15 +2509,25 @@ paths:
       operationId: getAgenticFoundationCodebaseQuality
       parameters:
         - $ref: "#/components/parameters/WorkspaceId"
+        - $ref: "#/components/parameters/PaginationLimit"
+        - $ref: "#/components/parameters/PaginationOffset"
+        - $ref: "#/components/parameters/ReadinessRepoSort"
+        - $ref: "#/components/parameters/PaginationOrder"
+        - $ref: "#/components/parameters/ReadinessRepoSearch"
+        - $ref: "#/components/parameters/ReadinessRepoLanguage"
       responses:
         "200":
-          description: Repositories with stack-quality slice
+          description: Paginated repositories with stack-quality slice
           content:
             application/json:
               schema:
-                type: array
-                items:
-                  $ref: "#/components/schemas/RepoReadinessScoreDto"
+                $ref: "#/components/schemas/ReadinessRepoListDto"
+        "400":
+          description: Invalid pagination or sort query
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
         "401":
           $ref: "#/components/responses/Unauthorized"
         "403":
@@ -2427,15 +2547,25 @@ paths:
       operationId: getAgenticFoundationTestQa
       parameters:
         - $ref: "#/components/parameters/WorkspaceId"
+        - $ref: "#/components/parameters/PaginationLimit"
+        - $ref: "#/components/parameters/PaginationOffset"
+        - $ref: "#/components/parameters/ReadinessRepoSort"
+        - $ref: "#/components/parameters/PaginationOrder"
+        - $ref: "#/components/parameters/ReadinessRepoSearch"
+        - $ref: "#/components/parameters/ReadinessRepoLanguage"
       responses:
         "200":
-          description: Repositories with tests-qa slice
+          description: Paginated repositories with tests-qa slice
           content:
             application/json:
               schema:
-                type: array
-                items:
-                  $ref: "#/components/schemas/RepoReadinessScoreDto"
+                $ref: "#/components/schemas/ReadinessRepoListDto"
+        "400":
+          description: Invalid pagination or sort query
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
         "401":
           $ref: "#/components/responses/Unauthorized"
         "403":
@@ -2455,15 +2585,25 @@ paths:
       operationId: getAgenticFoundationObservability
       parameters:
         - $ref: "#/components/parameters/WorkspaceId"
+        - $ref: "#/components/parameters/PaginationLimit"
+        - $ref: "#/components/parameters/PaginationOffset"
+        - $ref: "#/components/parameters/ReadinessRepoSort"
+        - $ref: "#/components/parameters/PaginationOrder"
+        - $ref: "#/components/parameters/ReadinessRepoSearch"
+        - $ref: "#/components/parameters/ReadinessRepoLanguage"
       responses:
         "200":
-          description: Repositories with observability slice
+          description: Paginated repositories with observability slice
           content:
             application/json:
               schema:
-                type: array
-                items:
-                  $ref: "#/components/schemas/RepoReadinessScoreDto"
+                $ref: "#/components/schemas/ReadinessRepoListDto"
+        "400":
+          description: Invalid pagination or sort query
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
         "401":
           $ref: "#/components/responses/Unauthorized"
         "403":
@@ -2483,15 +2623,25 @@ paths:
       operationId: getAgenticFoundationApiContract
       parameters:
         - $ref: "#/components/parameters/WorkspaceId"
+        - $ref: "#/components/parameters/PaginationLimit"
+        - $ref: "#/components/parameters/PaginationOffset"
+        - $ref: "#/components/parameters/ReadinessRepoSort"
+        - $ref: "#/components/parameters/PaginationOrder"
+        - $ref: "#/components/parameters/ReadinessRepoSearch"
+        - $ref: "#/components/parameters/ReadinessRepoLanguage"
       responses:
         "200":
-          description: Repositories with api-contracts slice
+          description: Paginated repositories with api-contracts slice
           content:
             application/json:
               schema:
-                type: array
-                items:
-                  $ref: "#/components/schemas/RepoReadinessScoreDto"
+                $ref: "#/components/schemas/ReadinessRepoListDto"
+        "400":
+          description: Invalid pagination or sort query
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
         "401":
           $ref: "#/components/responses/Unauthorized"
         "403":
@@ -2511,15 +2661,25 @@ paths:
       operationId: getAgenticFoundationPlatformGovernance
       parameters:
         - $ref: "#/components/parameters/WorkspaceId"
+        - $ref: "#/components/parameters/PaginationLimit"
+        - $ref: "#/components/parameters/PaginationOffset"
+        - $ref: "#/components/parameters/ReadinessRepoSort"
+        - $ref: "#/components/parameters/PaginationOrder"
+        - $ref: "#/components/parameters/ReadinessRepoSearch"
+        - $ref: "#/components/parameters/ReadinessRepoLanguage"
       responses:
         "200":
-          description: Repositories with platform-governance slice
+          description: Paginated repositories with platform-governance slice
           content:
             application/json:
               schema:
-                type: array
-                items:
-                  $ref: "#/components/schemas/RepoReadinessScoreDto"
+                $ref: "#/components/schemas/ReadinessRepoListDto"
+        "400":
+          description: Invalid pagination or sort query
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
         "401":
           $ref: "#/components/responses/Unauthorized"
         "403":
@@ -2539,15 +2699,25 @@ paths:
       operationId: getAgenticFoundationDeliveryGovernance
       parameters:
         - $ref: "#/components/parameters/WorkspaceId"
+        - $ref: "#/components/parameters/PaginationLimit"
+        - $ref: "#/components/parameters/PaginationOffset"
+        - $ref: "#/components/parameters/ReadinessRepoSort"
+        - $ref: "#/components/parameters/PaginationOrder"
+        - $ref: "#/components/parameters/ReadinessRepoSearch"
+        - $ref: "#/components/parameters/ReadinessRepoLanguage"
       responses:
         "200":
-          description: Repositories with delivery slice
+          description: Paginated repositories with delivery slice
           content:
             application/json:
               schema:
-                type: array
-                items:
-                  $ref: "#/components/schemas/RepoReadinessScoreDto"
+                $ref: "#/components/schemas/ReadinessRepoListDto"
+        "400":
+          description: Invalid pagination or sort query
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
         "401":
           $ref: "#/components/responses/Unauthorized"
         "403":
@@ -2569,15 +2739,25 @@ paths:
       operationId: getAgenticFoundationAiResolutionHub
       parameters:
         - $ref: "#/components/parameters/WorkspaceId"
+        - $ref: "#/components/parameters/PaginationLimit"
+        - $ref: "#/components/parameters/PaginationOffset"
+        - $ref: "#/components/parameters/ReadinessRepoSort"
+        - $ref: "#/components/parameters/PaginationOrder"
+        - $ref: "#/components/parameters/ReadinessRepoSearch"
+        - $ref: "#/components/parameters/ReadinessRepoLanguage"
       responses:
         "200":
           description: Full repository readiness scorecards
           content:
             application/json:
               schema:
-                type: array
-                items:
-                  $ref: "#/components/schemas/RepoReadinessScoreDto"
+                $ref: "#/components/schemas/ReadinessRepoListDto"
+        "400":
+          description: Invalid pagination or sort query
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
         "401":
           $ref: "#/components/responses/Unauthorized"
         "403":
@@ -2622,21 +2802,32 @@ paths:
   /workspaces/{workspaceId}/readiness/fixes:
     get:
       tags: [RepositoryReadiness]
-      summary: List fix requests
+      summary: List fix requests (paginated)
       description: >
-        Returns persisted fix-queue rows for the workspace (newest first). Empty array when none exist.
+        Returns a page of persisted fix-queue rows for the workspace (default newest first).
       operationId: listReadinessFixes
       parameters:
         - $ref: "#/components/parameters/WorkspaceId"
+        - $ref: "#/components/parameters/PaginationLimit"
+        - $ref: "#/components/parameters/PaginationOffset"
+        - $ref: "#/components/parameters/ReadinessFixSort"
+        - $ref: "#/components/parameters/PaginationOrder"
+        - $ref: "#/components/parameters/ReadinessFixSearch"
+        - $ref: "#/components/parameters/ReadinessFixStatusFilter"
+        - $ref: "#/components/parameters/ReadinessFixRepoIdFilter"
       responses:
         "200":
-          description: Fix queue
+          description: Paginated fix queue
           content:
             application/json:
               schema:
-                type: array
-                items:
-                  $ref: "#/components/schemas/FixRequestDto"
+                $ref: "#/components/schemas/ReadinessFixListDto"
+        "400":
+          description: Invalid pagination or sort query
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
         "401":
           $ref: "#/components/responses/Unauthorized"
         "403":
@@ -3391,6 +3582,129 @@ components:
       schema:
         type: string
         default: All departments
+    PaginationLimit:
+      name: limit
+      in: query
+      required: false
+      description: Page size (default 25, max 100).
+      schema:
+        type: integer
+        minimum: 1
+        maximum: 100
+        default: 25
+    PaginationOffset:
+      name: offset
+      in: query
+      required: false
+      description: Zero-based row offset into the filtered, sorted result set.
+      schema:
+        type: integer
+        minimum: 0
+        default: 0
+    PaginationOrder:
+      name: order
+      in: query
+      required: false
+      description: Sort direction.
+      schema:
+        type: string
+        enum: [asc, desc]
+        default: desc
+    ReadinessRepoSort:
+      name: sort
+      in: query
+      required: false
+      description: Allowlisted repository sort field.
+      schema:
+        type: string
+        enum: [repoName, overallScore, lastAnalyzed, language]
+        default: overallScore
+    ReadinessRepoSearch:
+      name: search
+      in: query
+      required: false
+      description: Case-insensitive filter on repository name, language, or provider slug.
+      schema:
+        type: string
+        maxLength: 256
+    ReadinessRepoLanguage:
+      name: language
+      in: query
+      required: false
+      description: Exact language filter (e.g. `typescript`).
+      schema:
+        type: string
+        maxLength: 64
+    ReadinessFixSort:
+      name: sort
+      in: query
+      required: false
+      description: Allowlisted fix-queue sort field.
+      schema:
+        type: string
+        enum: [createdAt, repoName, severity, status]
+        default: createdAt
+    ReadinessFixStatusFilter:
+      name: status
+      in: query
+      required: false
+      description: Filter fixes by workflow status.
+      schema:
+        type: string
+        enum: [queued, generating, pr-created, merged, failed]
+    ReadinessFixRepoIdFilter:
+      name: repoId
+      in: query
+      required: false
+      description: Filter fixes to a single workspace repository id.
+      schema:
+        type: string
+        format: uuid
+    ReadinessFixSearch:
+      name: search
+      in: query
+      required: false
+      description: Case-insensitive filter on repo name, issue title, label, or description.
+      schema:
+        type: string
+        maxLength: 256
+    GithubRepoLimit:
+      name: repoLimit
+      in: query
+      required: false
+      description: Page size for the nested installation repo list (default 25, max 100).
+      schema:
+        type: integer
+        minimum: 1
+        maximum: 100
+        default: 25
+    GithubRepoOffset:
+      name: repoOffset
+      in: query
+      required: false
+      description: Zero-based offset into the merged installation repo list.
+      schema:
+        type: integer
+        minimum: 0
+        default: 0
+    GithubRepoSort:
+      name: repoSort
+      in: query
+      required: false
+      description: Allowlisted GitHub repo sort field.
+      schema:
+        type: string
+        enum: [name, updatedAt]
+        default: name
+    GithubRepoOrder:
+      name: repoOrder
+      in: query
+      required: false
+      description: Sort direction for the nested installation repo list.
+      schema:
+        type: string
+        enum: [asc, desc]
+        default: asc
 
   responses:
     Unauthorized:
@@ -4806,6 +5120,11 @@ components:
         private:
           type: boolean
           nullable: true
+        updatedAt:
+          type: string
+          format: date-time
+          nullable: true
+          description: Last push or metadata update from GitHub when available.
 
     GithubMissingPermissionDto:
       type: object
@@ -4834,9 +5153,9 @@ components:
           allOf:
             - $ref: "#/components/schemas/GithubAccountDto"
         repos:
-          type: array
-          items:
-            $ref: "#/components/schemas/GithubInstalledRepoDto"
+          allOf:
+            - $ref: "#/components/schemas/GithubInstalledRepoListDto"
+          description: Paginated repositories granted on this installation (same repoLimit/repoOffset as top-level repos).
         manageUrl:
           type: string
           format: uri
@@ -4880,10 +5199,10 @@ components:
           allOf:
             - $ref: "#/components/schemas/GithubAccountDto"
         repos:
-          type: array
-          items:
-            $ref: "#/components/schemas/GithubInstalledRepoDto"
           nullable: true
+          allOf:
+            - $ref: "#/components/schemas/GithubInstalledRepoListDto"
+          description: Paginated merged installation repositories when `installed` is true.
         manageUrl:
           type: string
           format: uri
@@ -5392,48 +5711,98 @@ components:
           type: integer
           minimum: 0
 
-    AgenticFoundationDashboardIssueDto:
+    PageMetaDto:
       type: object
-      required:
-        [id, repoId, repoName, provider, dimensionId, severity, title, description, filePath, fixStatus]
+      required: [total, limit, offset]
+      properties:
+        total:
+          type: integer
+          minimum: 0
+          description: Total rows matching filters (full workspace, not just this page).
+        limit:
+          type: integer
+          minimum: 1
+          maximum: 100
+        offset:
+          type: integer
+          minimum: 0
+
+    ReadinessRepoListDto:
+      allOf:
+        - $ref: "#/components/schemas/PageMetaDto"
+        - type: object
+          required: [items]
+          properties:
+            items:
+              type: array
+              items:
+                $ref: "#/components/schemas/RepoReadinessScoreDto"
+
+    ReadinessFixListDto:
+      allOf:
+        - $ref: "#/components/schemas/PageMetaDto"
+        - type: object
+          required: [items]
+          properties:
+            items:
+              type: array
+              items:
+                $ref: "#/components/schemas/FixRequestDto"
+
+    AgenticFoundationDimensionAggregateDto:
+      type: object
+      required: [dimensionId, averageScorePercent, repoCount]
       properties:
-        id:
-          type: string
-          format: uuid
-        repoId:
-          type: string
-          format: uuid
-        repoName:
-          type: string
-          maxLength: 256
-        provider:
-          $ref: "#/components/schemas/RepoProviderDto"
         dimensionId:
           $ref: "#/components/schemas/ReadinessDimensionId"
-        severity:
-          type: string
-          enum: [critical, high, medium, low]
-        title:
-          type: string
-          maxLength: 256
-        description:
-          type: string
-          maxLength: 2048
-        rubricId:
-          type: string
-          maxLength: 16
-          nullable: true
-        filePath:
-          type: string
-          maxLength: 512
-          nullable: true
-        fixStatus:
-          type: string
-          enum: [open, pr-pending, fixed]
+        averageScorePercent:
+          type: integer
+          minimum: 0
+          maximum: 100
+          description: Mean dimension score percent across repos with maxScore > 0.
+        repoCount:
+          type: integer
+          minimum: 0
+          description: Repositories with a scored row for this dimension.
+
+    ReadinessFixStatusSummaryDto:
+      type: object
+      required: [queued, generating, prCreated, merged, failed, total]
+      properties:
+        queued:
+          type: integer
+          minimum: 0
+        generating:
+          type: integer
+          minimum: 0
+        prCreated:
+          type: integer
+          minimum: 0
+          description: Count of fixes with status `pr-created`.
+        merged:
+          type: integer
+          minimum: 0
+        failed:
+          type: integer
+          minimum: 0
+        total:
+          type: integer
+          minimum: 0
+
+    GithubInstalledRepoListDto:
+      allOf:
+        - $ref: "#/components/schemas/PageMetaDto"
+        - type: object
+          required: [items]
+          properties:
+            items:
+              type: array
+              items:
+                $ref: "#/components/schemas/GithubInstalledRepoDto"
 
     AgenticFoundationDashboardDto:
       type: object
-      required: [workspaceId, generatedAt, summary, repos, issueQueue]
+      required: [workspaceId, generatedAt, summary, dimensionAggregates, fixStatusSummary]
       properties:
         workspaceId:
           type: string
@@ -5443,14 +5812,13 @@ components:
           format: date-time
         summary:
           $ref: "#/components/schemas/AgenticFoundationDashboardSummaryDto"
-        repos:
-          type: array
-          items:
-            $ref: "#/components/schemas/RepoReadinessScoreDto"
-        issueQueue:
+        dimensionAggregates:
           type: array
           items:
-            $ref: "#/components/schemas/AgenticFoundationDashboardIssueDto"
+            $ref: "#/components/schemas/AgenticFoundationDimensionAggregateDto"
+          description: Per-dimension average score bars for overview UI (full workspace aggregates).
+        fixStatusSummary:
+          $ref: "#/components/schemas/ReadinessFixStatusSummaryDto"
 
     FixRequestDto:
       type: object