@thinkai/tai-api-contract 2.166.0 → 2.167.0

package/openapi/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: ThinkAI API
-  version: 2.166.0
+  version: 2.167.0
   description: >
     Contract surface for the AI Driven SDLC backend used by ThinkAI.
     Workspace-scoped routes use `/workspaces/{workspaceId}/...`.
@@ -153,6 +153,88 @@ paths:
                 error: User not found
                 code: user_not_found
 
+  /admin/users/{userId}/assessment-order:
+    put:
+      tags: [PlatformAdmin]
+      summary: Authorize one extra assessment workspace
+      operationId: adminSetAssessmentOrder
+      description: >
+        Sets `tai_users.assessment_order_authorized`. When true, that account may
+        create one workspace beyond the default single-workspace limit. The flag
+        stays set until an operator clears it. Buyers cannot set it on
+        `POST /workspaces`.
+
+        **Authorization:** Bearer JWT required. Caller email must appear in `PLATFORM_ADMIN_EMAILS`.
+        All other callers receive `403 Forbidden`.
+      parameters:
+        - name: userId
+          in: path
+          required: true
+          schema:
+            type: string
+            format: uuid
+          description: "`tai_users.id` of the account to authorize."
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required: [authorized]
+              properties:
+                authorized:
+                  type: boolean
+      responses:
+        "204":
+          description: Authorization flag stored.
+        "400":
+          description: Invalid UUID or `authorized` is not a boolean.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+              examples:
+                invalid_user_id:
+                  value:
+                    error: Invalid user ID format
+                    code: invalid_user_id
+                invalid_body:
+                  value:
+                    error: authorized must be boolean
+                    code: invalid_body
+        "401":
+          description: Missing or invalid JWT.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+        "403":
+          description: Caller is not a platform admin.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+              example:
+                error: Forbidden
+                code: forbidden
+        "404":
+          description: User not found.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+              example:
+                error: User not found
+                code: user_not_found
+        "503":
+          description: Workspace store cannot persist the flag.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+              example:
+                error: Service unavailable
+
   /admin/readiness/token-usage:
     get:
       tags: [PlatformAdmin]
@@ -953,7 +1035,12 @@ paths:
               schema:
                 $ref: "#/components/schemas/ErrorMessageDto"
         "409":
-          description: Conflict creating workspace (verified-email identity conflict or duplicate workspace name/slug)
+          description: >
+            Conflict creating workspace. Stable cases: verified-email identity conflict,
+            duplicate workspace name/slug, or `workspace_limit_reached` when the caller
+            already has a workspace. An operator-authorized account (`PUT /admin/users/{userId}/assessment-order`)
+            may create exactly one extra workspace; a third workspace still returns
+            `workspace_limit_reached`. A buyer body field cannot grant that exception.
           content:
             application/json:
               schema:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thinkai/tai-api-contract",
-  "version": "2.166.0",
+  "version": "2.167.0",
   "private": false,
   "type": "module",
   "main": "dist/index.js",

package/src/generated/openapi.ts

@@ -25,6 +25,27 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/admin/users/{userId}/assessment-order": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Authorize one extra assessment workspace
+         * @description Sets `tai_users.assessment_order_authorized`. When true, that account may create one workspace beyond the default single-workspace limit. The flag stays set until an operator clears it. Buyers cannot set it on `POST /workspaces`.
+         *     **Authorization:** Bearer JWT required. Caller email must appear in `PLATFORM_ADMIN_EMAILS`. All other callers receive `403 Forbidden`.
+         */
+        put: operations["adminSetAssessmentOrder"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/admin/readiness/token-usage": {
         parameters: {
             query?: never;
@@ -11723,6 +11744,95 @@ export interface operations {
             };
         };
     };
+    adminSetAssessmentOrder: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description `tai_users.id` of the account to authorize. */
+                userId: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    authorized: boolean;
+                };
+            };
+        };
+        responses: {
+            /** @description Authorization flag stored. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Invalid UUID or `authorized` is not a boolean. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Missing or invalid JWT. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Caller is not a platform admin. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "Forbidden",
+                     *       "code": "forbidden"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description User not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "User not found",
+                     *       "code": "user_not_found"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Workspace store cannot persist the flag. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "Service unavailable"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
     adminListReadinessTokenUsage: {
         parameters: {
             query?: {
@@ -12587,7 +12697,7 @@ export interface operations {
                 };
             };
             401: components["responses"]["Unauthorized"];
-            /** @description Conflict creating workspace (verified-email identity conflict or duplicate workspace name/slug) */
+            /** @description Conflict creating workspace. Stable cases: verified-email identity conflict, duplicate workspace name/slug, or `workspace_limit_reached` when the caller already has a workspace. An operator-authorized account (`PUT /admin/users/{userId}/assessment-order`) may create exactly one extra workspace; a third workspace still returns `workspace_limit_reached`. A buyer body field cannot grant that exception. */
             409: {
                 headers: {
                     [name: string]: unknown;