@thinkai/tai-api-contract 2.170.0 → 2.171.0

package/openapi/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: ThinkAI API
-  version: 2.170.0
+  version: 2.171.0
   description: >
     Contract surface for the AI Driven SDLC backend used by ThinkAI.
     Workspace-scoped routes use `/workspaces/{workspaceId}/...`.
@@ -412,6 +412,162 @@ paths:
                 error: Forbidden
                 code: forbidden
 
+  /admin/assessment-manifest-validation:
+    post:
+      tags: [PlatformAdmin]
+      summary: Validate an assessment manifest before export
+      operationId: runAssessmentManifestValidation
+      description: >
+        Runs the fail-closed manifest check for one sold assessment. The server
+        ignores `manifest.validation` and `manifest.watermark` from the client.
+        `buyerDeliverable` is true only when the result is validated and
+        `shareMode` is internal. An external share-safe result can be validated
+        and is never the buyer file. Unset or exceeded tolerances fail. No
+        numeric tolerance is assumed. GitLab and Bitbucket fixtures are not part
+        of this operation.
+
+        **Authorization:** Bearer JWT required. Caller email must appear in `PLATFORM_ADMIN_EMAILS`.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required:
+                - manifest
+                - workspaceId
+                - expectedWorkspaceId
+                - expectedRepositoryIds
+                - soldWindowComplete
+                - premiumAiAssessable
+                - namedPersonSectionIds
+                - tolerances
+              properties:
+                manifest:
+                  type: object
+                  required:
+                    - offerId
+                    - dictionaryVersion
+                    - validation
+                    - shareMode
+                    - watermark
+                    - scope
+                    - windows
+                    - sources
+                    - consent
+                    - sections
+                  properties:
+                    offerId:
+                      type: string
+                      enum: [engineering_readiness_baseline, agentic_ai_roi]
+                    dictionaryVersion:
+                      type: string
+                    validation:
+                      type: string
+                      enum: [validated, not_validated]
+                    shareMode:
+                      type: string
+                      enum: [internal, external]
+                    watermark:
+                      type: string
+                      nullable: true
+                      enum: ["NOT VALIDATED", "SAMPLE · SYNTHETIC DATA"]
+                    scope:
+                      type: object
+                    windows:
+                      type: object
+                    sources:
+                      type: array
+                      items:
+                        type: object
+                    consent:
+                      type: object
+                    sections:
+                      type: array
+                      items:
+                        type: object
+                workspaceId:
+                  type: string
+                expectedWorkspaceId:
+                  type: string
+                expectedRepositoryIds:
+                  type: array
+                  items:
+                    type: string
+                soldWindowComplete:
+                  type: boolean
+                premiumAiAssessable:
+                  type: boolean
+                namedPersonSectionIds:
+                  type: array
+                  items:
+                    type: string
+                tolerances:
+                  type: array
+                  items:
+                    type: object
+                    required: [id, status]
+                    properties:
+                      id:
+                        type: string
+                      status:
+                        type: string
+                        enum: [unset, exceeded, within]
+      responses:
+        "200":
+          description: Validation result. Client validation and watermark inputs are ignored.
+          content:
+            application/json:
+              schema:
+                type: object
+                required: [buyerDeliverable, validation, watermark, reasons, contentHash]
+                properties:
+                  buyerDeliverable:
+                    type: boolean
+                  validation:
+                    type: string
+                    enum: [validated, not_validated]
+                  watermark:
+                    type: string
+                    nullable: true
+                    enum: ["NOT VALIDATED"]
+                  reasons:
+                    type: array
+                    items:
+                      type: object
+                      required: [code, message]
+                      properties:
+                        code:
+                          type: string
+                        message:
+                          type: string
+                  contentHash:
+                    type: string
+        "400":
+          description: Body failed validation.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+              example:
+                error: manifest.offerId is not a known assessment offer
+                code: invalid_body
+        "401":
+          description: Missing or invalid JWT.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+        "403":
+          description: Caller is not a platform admin.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
+              example:
+                error: Forbidden
+                code: forbidden
+
   /admin/readiness/token-usage:
     get:
       tags: [PlatformAdmin]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thinkai/tai-api-contract",
-  "version": "2.170.0",
+  "version": "2.171.0",
   "private": false,
   "type": "module",
   "main": "dist/index.js",

package/src/generated/openapi.ts

@@ -67,6 +67,27 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/admin/assessment-manifest-validation": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Validate an assessment manifest before export
+         * @description Runs the fail-closed manifest check for one sold assessment. The server ignores `manifest.validation` and `manifest.watermark` from the client. `buyerDeliverable` is true only when the result is validated and `shareMode` is internal. An external share-safe result can be validated and is never the buyer file. Unset or exceeded tolerances fail. No numeric tolerance is assumed. GitLab and Bitbucket fixtures are not part of this operation.
+         *     **Authorization:** Bearer JWT required. Caller email must appear in `PLATFORM_ADMIN_EMAILS`.
+         */
+        post: operations["runAssessmentManifestValidation"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/admin/readiness/token-usage": {
         parameters: {
             query?: never;
@@ -12014,6 +12035,108 @@ export interface operations {
             };
         };
     };
+    runAssessmentManifestValidation: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    manifest: {
+                        /** @enum {string} */
+                        offerId: "engineering_readiness_baseline" | "agentic_ai_roi";
+                        dictionaryVersion: string;
+                        /** @enum {string} */
+                        validation: "validated" | "not_validated";
+                        /** @enum {string} */
+                        shareMode: "internal" | "external";
+                        /** @enum {string|null} */
+                        watermark: "NOT VALIDATED" | "SAMPLE · SYNTHETIC DATA" | null;
+                        scope: Record<string, never>;
+                        windows: Record<string, never>;
+                        sources: Record<string, never>[];
+                        consent: Record<string, never>;
+                        sections: Record<string, never>[];
+                    };
+                    workspaceId: string;
+                    expectedWorkspaceId: string;
+                    expectedRepositoryIds: string[];
+                    soldWindowComplete: boolean;
+                    premiumAiAssessable: boolean;
+                    namedPersonSectionIds: string[];
+                    tolerances: {
+                        id: string;
+                        /** @enum {string} */
+                        status: "unset" | "exceeded" | "within";
+                    }[];
+                };
+            };
+        };
+        responses: {
+            /** @description Validation result. Client validation and watermark inputs are ignored. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        buyerDeliverable: boolean;
+                        /** @enum {string} */
+                        validation: "validated" | "not_validated";
+                        /** @enum {string|null} */
+                        watermark: "NOT VALIDATED" | null;
+                        reasons: {
+                            code: string;
+                            message: string;
+                        }[];
+                        contentHash: string;
+                    };
+                };
+            };
+            /** @description Body failed validation. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "manifest.offerId is not a known assessment offer",
+                     *       "code": "invalid_body"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Missing or invalid JWT. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+            /** @description Caller is not a platform admin. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "error": "Forbidden",
+                     *       "code": "forbidden"
+                     *     }
+                     */
+                    "application/json": components["schemas"]["ErrorMessageDto"];
+                };
+            };
+        };
+    };
     adminListReadinessTokenUsage: {
         parameters: {
             query?: {