@thinkai/tai-api-contract 2.169.0 → 2.171.0

package/openapi/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: ThinkAI API
-  version: 2.169.0
+  version: 2.171.0
   description: >
     Contract surface for the AI Driven SDLC backend used by ThinkAI.
     Workspace-scoped routes use `/workspaces/{workspaceId}/...`.
@@ -235,6 +235,339 @@ paths:
               example:
                 error: Service unavailable
 
+  /admin/assessment-preflight:
+    post:
+      tags: [PlatformAdmin]
+      summary: Evaluate assessment preflight
+      operationId: runAssessmentPreflight
+      description: >
+        Returns whether one paid assessment may start the five-business-day clock.
+        Pending approval does not count as connected. Optional Jira and incident
+        gaps are chapters, not preflight failures. Premium stays false while
+        currency, confounder rules, the active-engineer rule, or the working-day
+        calendar is unset.
+
+        **Authorization:** Bearer JWT required. Caller email must appear in `PLATFORM_ADMIN_EMAILS`.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required:
+                - offerId
+                - sourceControl
+                - platformExecutionReady
+                - scans
+                - windows
+                - premiumAi
+                - jiraSelected
+                - incidentSelected
+                - incidentAvailable
+              properties:
+                offerId:
+                  type: string
+                  enum: [engineering_readiness_baseline, agentic_ai_roi]
+                sourceControl:
+                  type: string
+                  enum: [connected, pending_approval, setup_in_progress, revoked, stale, missing]
+                platformExecutionReady:
+                  type: boolean
+                repositoryCount:
+                  type: integer
+                  nullable: true
+                activeEngineerCount:
+                  type: integer
+                  nullable: true
+                scans:
+                  type: object
+                  required: [status]
+                  properties:
+                    status:
+                      type: string
+                      enum: [unknown, known]
+                    fresh:
+                      type: boolean
+                windows:
+                  type: object
+                  required: [status]
+                  properties:
+                    status:
+                      type: string
+                      enum: [unknown, known]
+                    currentComplete:
+                      type: boolean
+                    preComplete:
+                      type: boolean
+                    postComplete:
+                      type: boolean
+                premiumAi:
+                  type: object
+                  required: [cursor, claude, copilot]
+                  properties:
+                    cursor:
+                      type: boolean
+                    claude:
+                      type: boolean
+                    copilot:
+                      type: boolean
+                jiraSelected:
+                  type: boolean
+                incidentSelected:
+                  type: boolean
+                incidentAvailable:
+                  type: boolean
+                owner:
+                  type: string
+                  nullable: true
+      responses:
+        "200":
+          description: Preflight result. `dueDate` is set only when `ready` is true.
+          content:
+            application/json:
+              schema:
+                type: object
+                required:
+                  [ready, clockStarted, dueDate, owner, blocker, nextAction, failures, chapters]
+                properties:
+                  ready:
+                    type: boolean
+                  clockStarted:
+                    type: boolean
+                  dueDate:
+                    type: string
+                    nullable: true
+                    format: date
+                  owner:
+                    type: string
+                    nullable: true
+                  blocker:
+                    type: string
+                    nullable: true
+                  nextAction:
+                    type: object
+                    nullable: true
+                    required: [label, href]
+                    properties:
+                      label:
+                        type: string
+                      href:
+                        type: string
+                        nullable: true
+                  failures:
+                    type: array
+                    items:
+                      type: object
+                      required: [code, blocker, nextAction]
+                      properties:
+                        code:
+                          type: string
+                        blocker:
+                          type: string
+                        nextAction:
+                          type: object
+                          required: [label, href]
+                          properties:
+                            label:
+                              type: string
+                            href:
+                              type: string
+                              nullable: true
+                  chapters:
+                    type: array
+                    items:
+                      type: object
+                      required: [id, status, reason]
+                      properties:
+                        id:
+                          type: string
+                          enum: [jira, incidents]
+                        status:
+                          type: string
+                          enum: [unavailable]
+                        reason:
+                          type: string
+        "400":
+          description: Body failed validation.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+              example:
+                error: offerId is not a known assessment offer
+                code: invalid_body
+        "401":
+          description: Missing or invalid JWT.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+        "403":
+          description: Caller is not a platform admin.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+              example:
+                error: Forbidden
+                code: forbidden
+
+  /admin/assessment-manifest-validation:
+    post:
+      tags: [PlatformAdmin]
+      summary: Validate an assessment manifest before export
+      operationId: runAssessmentManifestValidation
+      description: >
+        Runs the fail-closed manifest check for one sold assessment. The server
+        ignores `manifest.validation` and `manifest.watermark` from the client.
+        `buyerDeliverable` is true only when the result is validated and
+        `shareMode` is internal. An external share-safe result can be validated
+        and is never the buyer file. Unset or exceeded tolerances fail. No
+        numeric tolerance is assumed. GitLab and Bitbucket fixtures are not part
+        of this operation.
+
+        **Authorization:** Bearer JWT required. Caller email must appear in `PLATFORM_ADMIN_EMAILS`.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required:
+                - manifest
+                - workspaceId
+                - expectedWorkspaceId
+                - expectedRepositoryIds
+                - soldWindowComplete
+                - premiumAiAssessable
+                - namedPersonSectionIds
+                - tolerances
+              properties:
+                manifest:
+                  type: object
+                  required:
+                    - offerId
+                    - dictionaryVersion
+                    - validation
+                    - shareMode
+                    - watermark
+                    - scope
+                    - windows
+                    - sources
+                    - consent
+                    - sections
+                  properties:
+                    offerId:
+                      type: string
+                      enum: [engineering_readiness_baseline, agentic_ai_roi]
+                    dictionaryVersion:
+                      type: string
+                    validation:
+                      type: string
+                      enum: [validated, not_validated]
+                    shareMode:
+                      type: string
+                      enum: [internal, external]
+                    watermark:
+                      type: string
+                      nullable: true
+                      enum: ["NOT VALIDATED", "SAMPLE · SYNTHETIC DATA"]
+                    scope:
+                      type: object
+                    windows:
+                      type: object
+                    sources:
+                      type: array
+                      items:
+                        type: object
+                    consent:
+                      type: object
+                    sections:
+                      type: array
+                      items:
+                        type: object
+                workspaceId:
+                  type: string
+                expectedWorkspaceId:
+                  type: string
+                expectedRepositoryIds:
+                  type: array
+                  items:
+                    type: string
+                soldWindowComplete:
+                  type: boolean
+                premiumAiAssessable:
+                  type: boolean
+                namedPersonSectionIds:
+                  type: array
+                  items:
+                    type: string
+                tolerances:
+                  type: array
+                  items:
+                    type: object
+                    required: [id, status]
+                    properties:
+                      id:
+                        type: string
+                      status:
+                        type: string
+                        enum: [unset, exceeded, within]
+      responses:
+        "200":
+          description: Validation result. Client validation and watermark inputs are ignored.
+          content:
+            application/json:
+              schema:
+                type: object
+                required: [buyerDeliverable, validation, watermark, reasons, contentHash]
+                properties:
+                  buyerDeliverable:
+                    type: boolean
+                  validation:
+                    type: string
+                    enum: [validated, not_validated]
+                  watermark:
+                    type: string
+                    nullable: true
+                    enum: ["NOT VALIDATED"]
+                  reasons:
+                    type: array
+                    items:
+                      type: object
+                      required: [code, message]
+                      properties:
+                        code:
+                          type: string
+                        message:
+                          type: string
+                  contentHash:
+                    type: string
+        "400":
+          description: Body failed validation.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+              example:
+                error: manifest.offerId is not a known assessment offer
+                code: invalid_body
+        "401":
+          description: Missing or invalid JWT.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+        "403":
+          description: Caller is not a platform admin.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+              example:
+                error: Forbidden
+                code: forbidden
+
   /admin/readiness/token-usage:
     get:
       tags: [PlatformAdmin]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thinkai/tai-api-contract",
-  "version": "2.169.0",
+  "version": "2.171.0",
   "private": false,
   "type": "module",
   "main": "dist/index.js",

package/src/generated/openapi.ts

@@ -46,6 +46,48 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/admin/assessment-preflight": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Evaluate assessment preflight
+         * @description Returns whether one paid assessment may start the five-business-day clock. Pending approval does not count as connected. Optional Jira and incident gaps are chapters, not preflight failures. Premium stays false while currency, confounder rules, the active-engineer rule, or the working-day calendar is unset.
+         *     **Authorization:** Bearer JWT required. Caller email must appear in `PLATFORM_ADMIN_EMAILS`.
+         */
+        post: operations["runAssessmentPreflight"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/admin/assessment-manifest-validation": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Validate an assessment manifest before export
+         * @description Runs the fail-closed manifest check for one sold assessment. The server ignores `manifest.validation` and `manifest.watermark` from the client. `buyerDeliverable` is true only when the result is validated and `shareMode` is internal. An external share-safe result can be validated and is never the buyer file. Unset or exceeded tolerances fail. No numeric tolerance is assumed. GitLab and Bitbucket fixtures are not part of this operation.
+         *     **Authorization:** Bearer JWT required. Caller email must appear in `PLATFORM_ADMIN_EMAILS`.
+         */
+        post: operations["runAssessmentManifestValidation"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/admin/readiness/token-usage": {
         parameters: {
             query?: never;
@@ -11875,6 +11917,226 @@ export interface operations {
             };
         };
     };
+    runAssessmentPreflight: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @enum {string} */
+                    offerId: "engineering_readiness_baseline" | "agentic_ai_roi";
+                    /** @enum {string} */
+                    sourceControl: "connected" | "pending_approval" | "setup_in_progress" | "revoked" | "stale" | "missing";
+                    platformExecutionReady: boolean;
+                    repositoryCount?: number | null;
+                    activeEngineerCount?: number | null;
+                    scans: {
+                        /** @enum {string} */
+                        status: "unknown" | "known";
+                        fresh?: boolean;
+                    };
+                    windows: {
+                        /** @enum {string} */
+                        status: "unknown" | "known";
+                        currentComplete?: boolean;
+                        preComplete?: boolean;
+                        postComplete?: boolean;
+                    };
+                    premiumAi: {
+                        cursor: boolean;
+                        claude: boolean;
+                        copilot: boolean;
+                    };
+                    jiraSelected: boolean;
+                    incidentSelected: boolean;
+                    incidentAvailable: boolean;
+                    owner?: string | null;
+                };
+            };
+        };
+        responses: {
+            /** @description Preflight result. `dueDate` is set only when `ready` is true. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        ready: boolean;
+                        clockStarted: boolean;
+                        /** Format: date */
+                        dueDate: string | null;
+                        owner: string | null;
+                        blocker: string | null;
+                        nextAction: {
+                            label: string;
+                            href: string | null;
+                        } | null;
+                        failures: {
+                            code: string;
+                            blocker: string;
+                            nextAction: {
+                                label: string;
+                                href: string | null;
+                            };
+                        }[];
+                        chapters: {
+                            /** @enum {string} */
+                            id: "jira" | "incidents";
+                            /** @enum {string} */
+                            status: "unavailable";
+                            reason: string;
+                        }[];
+                    };
+                };
+            };
+            /** @description Body failed validation. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "offerId is not a known assessment offer",
+                     *       "code": "invalid_body"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Missing or invalid JWT. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Caller is not a platform admin. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "Forbidden",
+                     *       "code": "forbidden"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
+    runAssessmentManifestValidation: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    manifest: {
+                        /** @enum {string} */
+                        offerId: "engineering_readiness_baseline" | "agentic_ai_roi";
+                        dictionaryVersion: string;
+                        /** @enum {string} */
+                        validation: "validated" | "not_validated";
+                        /** @enum {string} */
+                        shareMode: "internal" | "external";
+                        /** @enum {string|null} */
+                        watermark: "NOT VALIDATED" | "SAMPLE · SYNTHETIC DATA" | null;
+                        scope: Record<string, never>;
+                        windows: Record<string, never>;
+                        sources: Record<string, never>[];
+                        consent: Record<string, never>;
+                        sections: Record<string, never>[];
+                    };
+                    workspaceId: string;
+                    expectedWorkspaceId: string;
+                    expectedRepositoryIds: string[];
+                    soldWindowComplete: boolean;
+                    premiumAiAssessable: boolean;
+                    namedPersonSectionIds: string[];
+                    tolerances: {
+                        id: string;
+                        /** @enum {string} */
+                        status: "unset" | "exceeded" | "within";
+                    }[];
+                };
+            };
+        };
+        responses: {
+            /** @description Validation result. Client validation and watermark inputs are ignored. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        buyerDeliverable: boolean;
+                        /** @enum {string} */
+                        validation: "validated" | "not_validated";
+                        /** @enum {string|null} */
+                        watermark: "NOT VALIDATED" | null;
+                        reasons: {
+                            code: string;
+                            message: string;
+                        }[];
+                        contentHash: string;
+                    };
+                };
+            };
+            /** @description Body failed validation. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "manifest.offerId is not a known assessment offer",
+                     *       "code": "invalid_body"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Missing or invalid JWT. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Caller is not a platform admin. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "Forbidden",
+                     *       "code": "forbidden"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
     adminListReadinessTokenUsage: {
         parameters: {
             query?: {