@thinkai/tai-api-contract 2.96.0 → 2.97.0

package/openapi/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: ThinkAI API
-  version: 2.96.0
+  version: 2.97.0
   description: >
     Contract surface for the AI Driven SDLC backend used by ThinkAI.
     Workspace-scoped routes use `/workspaces/{workspaceId}/...`.
@@ -1492,6 +1492,51 @@ paths:
               schema:
                 $ref: "#/components/schemas/ErrorMessageDto"
 
+  /workspaces/{workspaceId}/delivery-topology:
+    put:
+      tags: [Workspace]
+      summary: Set workspace delivery topology
+      description: >
+        Persist the workspace delivery topology used by federated readiness assessment:
+        which connected repos hold terraform / gitops / ci_templates / api_contracts
+        artifacts, plus optional per-service overrides. Role and override `providerSlug`
+        values must reference repos connected to this workspace, otherwise the request is
+        rejected with `400 invalid_delivery_topology`. Send `null` (or
+        `{ "deliveryTopology": null }`) to clear the topology.
+
+        Requires editor or admin workspace role.
+      operationId: putWorkspaceDeliveryTopology
+      parameters:
+        - $ref: "#/components/parameters/WorkspaceId"
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              nullable: true
+              allOf:
+                - $ref: "#/components/schemas/DeliveryTopologyDto"
+      responses:
+        "204":
+          description: Topology persisted (or cleared).
+        "400":
+          description: Invalid topology payload or unconnected repo referenced.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+        "401":
+          $ref: "#/components/responses/Unauthorized"
+        "403":
+          $ref: "#/components/responses/Forbidden"
+        "404":
+          description: Workspace does not exist or malformed workspaceId
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+
   /workspaces/{workspaceId}/sources:
     put:
       tags: [Workspace]
@@ -10375,6 +10420,79 @@ components:
         hasCodeIntelligenceExecutionToken:
           type: boolean
           description: True when a dedicated `code_intelligence` source has a stored executionToken.
+        deliveryTopology:
+          type: object
+          nullable: true
+          allOf:
+            - $ref: "#/components/schemas/DeliveryTopologyDto"
+          description: >
+            Federated-readiness delivery topology: which connected repos hold terraform /
+            gitops / ci_templates / api_contracts truth for this workspace. Null when not
+            configured. Change via `PUT /workspaces/{workspaceId}/delivery-topology`.
+
+    DeliveryRoleConfigDto:
+      type: object
+      required: [providerSlug]
+      properties:
+        providerSlug:
+          type: string
+          description: Connected workspace repo (`owner/repo`) that holds this role's artifacts.
+        engine:
+          type: string
+          enum: [terraform, pulumi, cdk]
+          description: IaC engine hint (terraform role only).
+        type:
+          type: string
+          enum: [reusable_workflows]
+          description: CI templates flavor (ci_templates role only).
+        custom:
+          type: boolean
+          description: Set true for extension roles outside the known role keys.
+    RepoDeliveryOverrideDto:
+      type: object
+      properties:
+        deliveryModel:
+          type: string
+          enum: [auto, k8s_microservices, mobile_store, web_hosting, data_pipelines, monorepo, library, hybrid]
+        roles:
+          type: object
+          additionalProperties:
+            type: string
+          description: Per-service role → providerSlug overrides (merged over workspace roles).
+        targetPathHint:
+          type: string
+          description: Path prefix inside platform repos where this service's artifacts live.
+    DeliveryTopologyDto:
+      type: object
+      required: [deliveryModel, ciProvider, splitInfra, roles, repoOverrides]
+      properties:
+        deliveryModel:
+          type: string
+          enum: [auto, k8s_microservices, mobile_store, web_hosting, data_pipelines, monorepo, library, hybrid]
+        ciProvider:
+          type: string
+          enum: [github_actions, jenkins, gitlab, bitbucket, hybrid, external_documented]
+        splitInfra:
+          type: boolean
+          description: True when infra/delivery artifacts live outside service repos.
+        roles:
+          type: object
+          additionalProperties:
+            $ref: "#/components/schemas/DeliveryRoleConfigDto"
+          description: >
+            Role → platform repo mapping. Known keys: terraform, gitops, ci_templates,
+            jenkins_shared, mobile_release, hosting, data_platform, api_contracts, sonar_config.
+        servicePathConvention:
+          type: string
+          nullable: true
+          description: >
+            Optional path template inside platform repos, e.g. `services/{repo_name}/`
+            (`{repo_name}` and `{provider_slug}` placeholders supported).
+        repoOverrides:
+          type: object
+          additionalProperties:
+            $ref: "#/components/schemas/RepoDeliveryOverrideDto"
+          description: Per-service-repo overrides keyed by provider slug.
 
     TestConnectionResponseDto:
       type: object
@@ -14901,6 +15019,58 @@ components:
             per-repo "size / limit". When the size exceeds the limit the latest scan is recorded as
             `partial_failed` with `lastRunErrorCode = exceeded_repo_size_limit` and the repo is marked
             `ineligible`. Null until a scan has populated it.
+        platformArchetype:
+          type: string
+          nullable: true
+          enum: [terraform_platform, gitops_platform, ci_templates, api_contracts_platform]
+          description: >
+            Federated readiness: set when the repo was classified as a platform repository and
+            scored with the reduced platform rubric profile. Null for service repos. The UI shows
+            a "Platform repository" badge instead of comparing its score against service repos.
+        linkedRoleAssessment:
+          type: object
+          nullable: true
+          allOf:
+            - $ref: "#/components/schemas/LinkedRoleAssessmentDto"
+          description: >
+            Federated readiness completeness for service repos: which linked platform roles
+            (terraform/gitops/ci_templates/api_contracts, from the workspace delivery topology)
+            are still missing scan evidence. Absent/null when no topology is configured or every
+            declared role has fresh metadata (`complete: true`).
+
+    LinkedRolePendingDto:
+      type: object
+      required: [role, providerSlug, reason]
+      properties:
+        role:
+          type: string
+          description: Topology role key, e.g. terraform | gitops | ci_templates | api_contracts.
+        providerSlug:
+          type: string
+          description: Platform repo (`owner/repo`) that must be scanned to satisfy this role.
+        reason:
+          type: string
+          enum: [no_scan, no_metadata_emitted, stale]
+          description: >
+            `no_scan` — the platform repo has no successful readiness run yet;
+            `no_metadata_emitted` — it was scanned but emitted no linkage for this service
+            (wrong archetype or scan predates federated readiness); `stale` — metadata is older
+            than the hard TTL (30 days) and must be refreshed by re-scanning the platform repo.
+        lastRunAt:
+          type: string
+          format: date-time
+          nullable: true
+          description: Latest succeeded scan of the platform repo, when one exists.
+    LinkedRoleAssessmentDto:
+      type: object
+      required: [complete, pending]
+      properties:
+        complete:
+          type: boolean
+        pending:
+          type: array
+          items:
+            $ref: "#/components/schemas/LinkedRolePendingDto"
 
     RepoReadinessScoreDetailDto:
       type: object
@@ -15020,6 +15190,17 @@ components:
           nullable: true
           minimum: 0
           description: GitHub-reported repository size in KB, refreshed on each scan. See RepoReadinessScoreDto.sizeKb.
+        platformArchetype:
+          type: string
+          nullable: true
+          enum: [terraform_platform, gitops_platform, ci_templates, api_contracts_platform]
+          description: See RepoReadinessScoreDto.platformArchetype.
+        linkedRoleAssessment:
+          type: object
+          nullable: true
+          allOf:
+            - $ref: "#/components/schemas/LinkedRoleAssessmentDto"
+          description: See RepoReadinessScoreDto.linkedRoleAssessment.
 
     AgenticFoundationDashboardSummaryDto:
       type: object

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thinkai/tai-api-contract",
-  "version": "2.96.0",
+  "version": "2.97.0",
   "private": false,
   "type": "module",
   "main": "dist/index.js",

package/src/generated/openapi.ts

@@ -561,6 +561,27 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/workspaces/{workspaceId}/delivery-topology": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Set workspace delivery topology
+         * @description Persist the workspace delivery topology used by federated readiness assessment: which connected repos hold terraform / gitops / ci_templates / api_contracts artifacts, plus optional per-service overrides. Role and override `providerSlug` values must reference repos connected to this workspace, otherwise the request is rejected with `400 invalid_delivery_topology`. Send `null` (or `{ "deliveryTopology": null }`) to clear the topology.
+         *     Requires editor or admin workspace role.
+         */
+        put: operations["putWorkspaceDeliveryTopology"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/workspaces/{workspaceId}/sources": {
         parameters: {
             query?: never;
@@ -4182,6 +4203,52 @@ export interface components {
             codeIntelligenceClaudeModel?: string | null;
             /** @description True when a dedicated `code_intelligence` source has a stored executionToken. */
             hasCodeIntelligenceExecutionToken?: boolean;
+            /** @description Federated-readiness delivery topology: which connected repos hold terraform / gitops / ci_templates / api_contracts truth for this workspace. Null when not configured. Change via `PUT /workspaces/{workspaceId}/delivery-topology`. */
+            deliveryTopology?: components["schemas"]["DeliveryTopologyDto"] | null;
+        };
+        DeliveryRoleConfigDto: {
+            /** @description Connected workspace repo (`owner/repo`) that holds this role's artifacts. */
+            providerSlug: string;
+            /**
+             * @description IaC engine hint (terraform role only).
+             * @enum {string}
+             */
+            engine?: "terraform" | "pulumi" | "cdk";
+            /**
+             * @description CI templates flavor (ci_templates role only).
+             * @enum {string}
+             */
+            type?: "reusable_workflows";
+            /** @description Set true for extension roles outside the known role keys. */
+            custom?: boolean;
+        };
+        RepoDeliveryOverrideDto: {
+            /** @enum {string} */
+            deliveryModel?: "auto" | "k8s_microservices" | "mobile_store" | "web_hosting" | "data_pipelines" | "monorepo" | "library" | "hybrid";
+            /** @description Per-service role → providerSlug overrides (merged over workspace roles). */
+            roles?: {
+                [key: string]: string;
+            };
+            /** @description Path prefix inside platform repos where this service's artifacts live. */
+            targetPathHint?: string;
+        };
+        DeliveryTopologyDto: {
+            /** @enum {string} */
+            deliveryModel: "auto" | "k8s_microservices" | "mobile_store" | "web_hosting" | "data_pipelines" | "monorepo" | "library" | "hybrid";
+            /** @enum {string} */
+            ciProvider: "github_actions" | "jenkins" | "gitlab" | "bitbucket" | "hybrid" | "external_documented";
+            /** @description True when infra/delivery artifacts live outside service repos. */
+            splitInfra: boolean;
+            /** @description Role → platform repo mapping. Known keys: terraform, gitops, ci_templates, jenkins_shared, mobile_release, hosting, data_platform, api_contracts, sonar_config. */
+            roles: {
+                [key: string]: components["schemas"]["DeliveryRoleConfigDto"];
+            };
+            /** @description Optional path template inside platform repos, e.g. `services/{repo_name}/` (`{repo_name}` and `{provider_slug}` placeholders supported). */
+            servicePathConvention?: string | null;
+            /** @description Per-service-repo overrides keyed by provider slug. */
+            repoOverrides: {
+                [key: string]: components["schemas"]["RepoDeliveryOverrideDto"];
+            };
         };
         TestConnectionResponseDto: {
             success: boolean;
@@ -6369,6 +6436,33 @@ export interface components {
             }[] | null;
             /** @description GitHub-reported repository size in KB (includes git history), refreshed on each readiness scan (#729). Compare against `eligibilityLimits.maxRepoSizeKb` on the list response to show per-repo "size / limit". When the size exceeds the limit the latest scan is recorded as `partial_failed` with `lastRunErrorCode = exceeded_repo_size_limit` and the repo is marked `ineligible`. Null until a scan has populated it. */
             sizeKb?: number | null;
+            /**
+             * @description Federated readiness: set when the repo was classified as a platform repository and scored with the reduced platform rubric profile. Null for service repos. The UI shows a "Platform repository" badge instead of comparing its score against service repos.
+             * @enum {string|null}
+             */
+            platformArchetype?: "terraform_platform" | "gitops_platform" | "ci_templates" | "api_contracts_platform" | null;
+            /** @description Federated readiness completeness for service repos: which linked platform roles (terraform/gitops/ci_templates/api_contracts, from the workspace delivery topology) are still missing scan evidence. Absent/null when no topology is configured or every declared role has fresh metadata (`complete: true`). */
+            linkedRoleAssessment?: components["schemas"]["LinkedRoleAssessmentDto"] | null;
+        };
+        LinkedRolePendingDto: {
+            /** @description Topology role key, e.g. terraform | gitops | ci_templates | api_contracts. */
+            role: string;
+            /** @description Platform repo (`owner/repo`) that must be scanned to satisfy this role. */
+            providerSlug: string;
+            /**
+             * @description `no_scan` — the platform repo has no successful readiness run yet; `no_metadata_emitted` — it was scanned but emitted no linkage for this service (wrong archetype or scan predates federated readiness); `stale` — metadata is older than the hard TTL (30 days) and must be refreshed by re-scanning the platform repo.
+             * @enum {string}
+             */
+            reason: "no_scan" | "no_metadata_emitted" | "stale";
+            /**
+             * Format: date-time
+             * @description Latest succeeded scan of the platform repo, when one exists.
+             */
+            lastRunAt?: string | null;
+        };
+        LinkedRoleAssessmentDto: {
+            complete: boolean;
+            pending: components["schemas"]["LinkedRolePendingDto"][];
         };
         /** @description Single-repo detail response. Identical to RepoReadinessScoreDto except dimensions use DimensionScoreDetailDto (criteriaDetails required per dimension). */
         RepoReadinessScoreDetailDto: {
@@ -6420,6 +6514,13 @@ export interface components {
             }[] | null;
             /** @description GitHub-reported repository size in KB, refreshed on each scan. See RepoReadinessScoreDto.sizeKb. */
             sizeKb?: number | null;
+            /**
+             * @description See RepoReadinessScoreDto.platformArchetype.
+             * @enum {string|null}
+             */
+            platformArchetype?: "terraform_platform" | "gitops_platform" | "ci_templates" | "api_contracts_platform" | null;
+            /** @description See RepoReadinessScoreDto.linkedRoleAssessment. */
+            linkedRoleAssessment?: components["schemas"]["LinkedRoleAssessmentDto"] | null;
         };
         AgenticFoundationDashboardSummaryDto: {
             repoCount: number;
@@ -8291,6 +8392,9 @@ export type JiraSourceConfigDto = components['schemas']['JiraSourceConfigDto'];
 export type AgentExecutionProviderDto = components['schemas']['AgentExecutionProviderDto'];
 export type PutCodeIntelligenceSettingsDto = components['schemas']['PutCodeIntelligenceSettingsDto'];
 export type WorkspaceConfigDto = components['schemas']['WorkspaceConfigDto'];
+export type DeliveryRoleConfigDto = components['schemas']['DeliveryRoleConfigDto'];
+export type RepoDeliveryOverrideDto = components['schemas']['RepoDeliveryOverrideDto'];
+export type DeliveryTopologyDto = components['schemas']['DeliveryTopologyDto'];
 export type TestConnectionResponseDto = components['schemas']['TestConnectionResponseDto'];
 export type CursorKeyUsageDto = components['schemas']['CursorKeyUsageDto'];
 export type AiToolSeatDto = components['schemas']['AiToolSeatDto'];
@@ -8464,6 +8568,8 @@ export type ReadinessScoreHistoryPointDto = components['schemas']['ReadinessScor
 export type ReadinessRepoScoreHistoryDto = components['schemas']['ReadinessRepoScoreHistoryDto'];
 export type WorkspaceReadinessScoreHistoryDto = components['schemas']['WorkspaceReadinessScoreHistoryDto'];
 export type RepoReadinessScoreDto = components['schemas']['RepoReadinessScoreDto'];
+export type LinkedRolePendingDto = components['schemas']['LinkedRolePendingDto'];
+export type LinkedRoleAssessmentDto = components['schemas']['LinkedRoleAssessmentDto'];
 export type RepoReadinessScoreDetailDto = components['schemas']['RepoReadinessScoreDetailDto'];
 export type AgenticFoundationDashboardSummaryDto = components['schemas']['AgenticFoundationDashboardSummaryDto'];
 export type PageMetaDto = components['schemas']['PageMetaDto'];
@@ -10242,6 +10348,50 @@ export interface operations {
             };
         };
     };
+    putWorkspaceDeliveryTopology: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workspaceId: components["parameters"]["WorkspaceId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["DeliveryTopologyDto"] | null;
+            };
+        };
+        responses: {
+            /** @description Topology persisted (or cleared). */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Invalid topology payload or unconnected repo referenced. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            /** @description Workspace does not exist or malformed workspaceId */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
     putTenantSources: {
         parameters: {
             query?: never;