@thinkai/tai-api-contract 2.165.0 → 2.167.0

package/openapi/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: ThinkAI API
-  version: 2.165.0
+  version: 2.167.0
   description: >
     Contract surface for the AI Driven SDLC backend used by ThinkAI.
     Workspace-scoped routes use `/workspaces/{workspaceId}/...`.
@@ -153,6 +153,88 @@ paths:
                 error: User not found
                 code: user_not_found
 
+  /admin/users/{userId}/assessment-order:
+    put:
+      tags: [PlatformAdmin]
+      summary: Authorize one extra assessment workspace
+      operationId: adminSetAssessmentOrder
+      description: >
+        Sets `tai_users.assessment_order_authorized`. When true, that account may
+        create one workspace beyond the default single-workspace limit. The flag
+        stays set until an operator clears it. Buyers cannot set it on
+        `POST /workspaces`.
+
+        **Authorization:** Bearer JWT required. Caller email must appear in `PLATFORM_ADMIN_EMAILS`.
+        All other callers receive `403 Forbidden`.
+      parameters:
+        - name: userId
+          in: path
+          required: true
+          schema:
+            type: string
+            format: uuid
+          description: "`tai_users.id` of the account to authorize."
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required: [authorized]
+              properties:
+                authorized:
+                  type: boolean
+      responses:
+        "204":
+          description: Authorization flag stored.
+        "400":
+          description: Invalid UUID or `authorized` is not a boolean.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+              examples:
+                invalid_user_id:
+                  value:
+                    error: Invalid user ID format
+                    code: invalid_user_id
+                invalid_body:
+                  value:
+                    error: authorized must be boolean
+                    code: invalid_body
+        "401":
+          description: Missing or invalid JWT.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+        "403":
+          description: Caller is not a platform admin.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+              example:
+                error: Forbidden
+                code: forbidden
+        "404":
+          description: User not found.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+              example:
+                error: User not found
+                code: user_not_found
+        "503":
+          description: Workspace store cannot persist the flag.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+              example:
+                error: Service unavailable
+
   /admin/readiness/token-usage:
     get:
       tags: [PlatformAdmin]
@@ -953,7 +1035,12 @@ paths:
               schema:
                 $ref: "#/components/schemas/ErrorMessageDto"
         "409":
-          description: Conflict creating workspace (verified-email identity conflict or duplicate workspace name/slug)
+          description: >
+            Conflict creating workspace. Stable cases: verified-email identity conflict,
+            duplicate workspace name/slug, or `workspace_limit_reached` when the caller
+            already has a workspace. An operator-authorized account (`PUT /admin/users/{userId}/assessment-order`)
+            may create exactly one extra workspace; a third workspace still returns
+            `workspace_limit_reached`. A buyer body field cannot grant that exception.
           content:
             application/json:
               schema:
@@ -4775,6 +4862,17 @@ paths:
           schema:
             type: string
             format: date
+        - name: rollout
+          in: query
+          required: false
+          description: >
+            Assessment rollout day (`YYYY-MM-DD`). Queues matched pre and post
+            Data Coverage windows as separate provider chunks. Mutually exclusive
+            with `full` and with `from`/`to`. The inclusive span of each window
+            must stay within 180 days.
+          schema:
+            type: string
+            format: date
       responses:
         "200":
           description: >
@@ -4791,8 +4889,10 @@ paths:
           description: >
             Invalid request. Stable `error` codes: `invalid_day_range` (missing pair,
             bad calendar date, or from > to), `full_and_day_range_conflict` (`full`
-            combined with `from`/`to`), and `invalid_provider` (path provider is not
-            a supported AI-tool integration id).
+            combined with `from`/`to`/`rollout`), `range_exceeds_cap` (a requested
+            window is longer than 180 days), `assessment_rollout_conflict`
+            (`rollout` combined with `from`/`to`), and `invalid_provider` (path
+            provider is not a supported AI-tool integration id).
           content:
             application/json:
               schema:
@@ -4802,6 +4902,10 @@ paths:
                   value: { ok: false, error: "invalid_day_range" }
                 full_and_day_range_conflict:
                   value: { ok: false, error: "full_and_day_range_conflict" }
+                range_exceeds_cap:
+                  value: { ok: false, error: "range_exceeds_cap" }
+                assessment_rollout_conflict:
+                  value: { ok: false, error: "assessment_rollout_conflict" }
                 invalid_provider:
                   value: { ok: false, error: "invalid_provider" }
         "401":

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thinkai/tai-api-contract",
-  "version": "2.165.0",
+  "version": "2.167.0",
   "private": false,
   "type": "module",
   "main": "dist/index.js",

package/src/generated/openapi.ts

@@ -25,6 +25,27 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/admin/users/{userId}/assessment-order": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Authorize one extra assessment workspace
+         * @description Sets `tai_users.assessment_order_authorized`. When true, that account may create one workspace beyond the default single-workspace limit. The flag stays set until an operator clears it. Buyers cannot set it on `POST /workspaces`.
+         *     **Authorization:** Bearer JWT required. Caller email must appear in `PLATFORM_ADMIN_EMAILS`. All other callers receive `403 Forbidden`.
+         */
+        put: operations["adminSetAssessmentOrder"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/admin/readiness/token-usage": {
         parameters: {
             query?: never;
@@ -11723,6 +11744,95 @@ export interface operations {
             };
         };
     };
+    adminSetAssessmentOrder: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description `tai_users.id` of the account to authorize. */
+                userId: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    authorized: boolean;
+                };
+            };
+        };
+        responses: {
+            /** @description Authorization flag stored. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Invalid UUID or `authorized` is not a boolean. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Missing or invalid JWT. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Caller is not a platform admin. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "Forbidden",
+                     *       "code": "forbidden"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description User not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "User not found",
+                     *       "code": "user_not_found"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Workspace store cannot persist the flag. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "Service unavailable"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
     adminListReadinessTokenUsage: {
         parameters: {
             query?: {
@@ -12587,7 +12697,7 @@ export interface operations {
                 };
             };
             401: components["responses"]["Unauthorized"];
-            /** @description Conflict creating workspace (verified-email identity conflict or duplicate workspace name/slug) */
+            /** @description Conflict creating workspace. Stable cases: verified-email identity conflict, duplicate workspace name/slug, or `workspace_limit_reached` when the caller already has a workspace. An operator-authorized account (`PUT /admin/users/{userId}/assessment-order`) may create exactly one extra workspace; a third workspace still returns `workspace_limit_reached`. A buyer body field cannot grant that exception. */
             409: {
                 headers: {
                     [name: string]: unknown;
@@ -16439,6 +16549,8 @@ export interface operations {
                 from?: string;
                 /** @description Inclusive UTC end day (`YYYY-MM-DD`) for a targeted re-ingest window. Must be paired with `from`. Mutually exclusive with `full`. */
                 to?: string;
+                /** @description Assessment rollout day (`YYYY-MM-DD`). Queues matched pre and post Data Coverage windows as separate provider chunks. Mutually exclusive with `full` and with `from`/`to`. The inclusive span of each window must stay within 180 days. */
+                rollout?: string;
             };
             header?: never;
             path: {
@@ -16458,7 +16570,7 @@ export interface operations {
                     "application/json": components["schemas"]["AiToolRefreshResponseDto"];
                 };
             };
-            /** @description Invalid request. Stable `error` codes: `invalid_day_range` (missing pair, bad calendar date, or from > to), `full_and_day_range_conflict` (`full` combined with `from`/`to`), and `invalid_provider` (path provider is not a supported AI-tool integration id). */
+            /** @description Invalid request. Stable `error` codes: `invalid_day_range` (missing pair, bad calendar date, or from > to), `full_and_day_range_conflict` (`full` combined with `from`/`to`/`rollout`), `range_exceeds_cap` (a requested window is longer than 180 days), `assessment_rollout_conflict` (`rollout` combined with `from`/`to`), and `invalid_provider` (path provider is not a supported AI-tool integration id). */
             400: {
                 headers: {
                     [name: string]: unknown;