Git.Top Admin API

openapi: 3.2.0
info:
  title: Git.Top Agent Admin API
  version: 0.1.0
  description: Agent-native GitHub project knowledge API for search, project lookup, alternatives, comparison, graph reasoning, quality, and schema discovery. High-confidence clients should inspect metadata.source, metadata.reason, trust fields, classification evidence, quality_signal_confidence, verification signals, and migration validation steps, and use require_d1=true when seed fallback should fail closed.
servers:
- url: https://git.top
  description: Production
- url: http://localhost:8787
  description: Local Worker
tags:
- name: Admin
paths:
  /api/admin/alternatives:
    post:
      summary: Refresh generated alternatives for the full corpus or a bounded batch
      security:
      - syncSecret: []
      parameters:
      - name: offset
        in: query
        required: false
        description: Zero-based project offset for a bounded refresh
        schema:
          type: string
      - name: limit
        in: query
        required: false
        description: Batch size from 1 to 25; omit only for small-corpus full refreshes
        schema:
          type: string
      - name: record_run
        in: query
        required: false
        description: Whether to record the derived:alternatives governance run
        schema:
          type: string
      responses:
        '200':
          description: Alternatives refresh result and optional governance run
        '400':
          description: Invalid offset, limit, or record_run parameter
        '401':
          description: Missing or invalid admin authorization
        '405':
          description: Alternatives refresh requires POST
      tags:
      - Admin
      operationId: postApiAdminAlternatives
      x-operation-id-source: derived
  /api/admin/alternatives/progress:
    post:
      summary: Advance the persisted alternatives refresh cursor by one bounded batch
      security:
      - syncSecret: []
      parameters:
      - name: limit
        in: query
        required: false
        description: Batch size from 1 to 25
        schema:
          type: string
      responses:
        '200':
          description: Incremental alternatives refresh result and persisted cursor progress
        '400':
          description: Invalid limit parameter
        '401':
          description: Missing or invalid admin authorization
        '405':
          description: Alternatives progress requires POST
      tags:
      - Admin
      operationId: postApiAdminAlternativesProgress
      x-operation-id-source: derived
  /api/admin/discovery:
    post:
      summary: Discover and sync new candidate repositories from GitHub search
      security:
      - syncSecret: []
      requestBody:
        required: false
        content:
          application/json:
            schema:
              type: object
              properties:
                max_candidates:
                  type: integer
                  minimum: 1
                  maximum: 5
                  description: Maximum number of new candidates to sync in this run.
                search_index:
                  type: integer
                  description: Optional deterministic index for the rotating discovery query.
      responses:
        '200':
          description: Candidate discovery result and recorded governance run
        '401':
          description: Missing or invalid admin authorization
        '405':
          description: Candidate discovery requires POST
      tags:
      - Admin
      operationId: postApiAdminDiscovery
      x-operation-id-source: derived
  /api/admin/classification-overrides:
    get:
      summary: List reviewed classification overrides
      security:
      - syncSecret: []
      parameters:
      - name: limit
        in: query
        required: false
        description: Maximum override count
        schema:
          type: string
      responses:
        '200':
          description: Reviewed classification override ledger
        '401':
          description: Missing or invalid admin authorization
      tags:
      - Admin
      operationId: getApiAdminClassificationOverrides
      x-operation-id-source: derived
    post:
      summary: Create or update a reviewed classification override
      security:
      - syncSecret: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ClassificationOverrideInput'
      responses:
        '200':
          description: Persisted classification override
        '400':
          description: Invalid classification override payload
        '401':
          description: Missing or invalid admin authorization
      tags:
      - Admin
      operationId: postApiAdminClassificationOverrides
      x-operation-id-source: derived
  /api/admin/governance/runs:
    post:
      summary: Record an automated governance run result
      security:
      - syncSecret: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/GovernanceRunInput'
      responses:
        '200':
          description: Persisted governance run
        '400':
          description: Invalid governance run payload
        '401':
          description: Missing or invalid admin authorization
      tags:
      - Admin
      operationId: postApiAdminGovernanceRuns
      x-operation-id-source: derived
components:
  schemas:
    GovernanceRunInput:
      type: object
      required:
      - task
      - status
      properties:
        id:
          type: string
        task:
          type: string
          description: Short governance task identifier.
        status:
          type: string
          enum:
          - success
          - failed
          - running
          - skipped
        trigger:
          type: string
          enum:
          - github_actions
          - cron
          - admin
          - manual
        started_at:
          type: string
          format: date-time
        finished_at:
          type: string
          format: date-time
        duration_ms:
          type: integer
        summary:
          type: object
        report_url:
          type: string
        error:
          type: string
    ClassificationOverrideInput:
      type: object
      required:
      - project_id
      properties:
        project_id:
          type: string
          description: GitHub owner/repo identifier.
        category:
          type: string
          enum:
          - agent_framework
          - coding_agent
          - browser_agent
          - rag_framework
          - vector_database
          - llm_gateway
          - llm_eval
          - prompt_tooling
          - workflow_automation
          - local_llm_runtime
          - ai_app_template
          - mcp_server
          - ai_observability
          - other
        difficulty:
          type: string
          enum:
          - beginner
          - intermediate
          - advanced
        deployment:
          type: array
          items:
            type: string
        cloudflare_ready:
          type: boolean
        classification:
          type: object
          description: Optional classification evidence override.
        notes:
          type: string
        reviewed_by:
          type: string
        reviewed_at:
          type: string
          format: date-time
  securitySchemes:
    syncSecret:
      type: http
      scheme: bearer
      description: Admin endpoints require the SYNC_SECRET bearer token.
    feedbackSecret:
      type: http
      scheme: bearer
      description: Optional FEEDBACK_SECRET. Without it, proposals are validated and fingerprinted but not persisted.