Ai-Sns.io Kitting API リファレンス
← トップへ

Ai-Sns.io Kitting — REST API

キッティングセンター管制SaaS の全 REST エンドポイント。応答は原則 JSON。

Base URL: https://kit-agent.ai-sns.io ｜ 発行: Freeborn Inc.

285エンドポイント
115GET
162POST
8PUT
41ドメイン

規約・認証

成功は {ok:true,...}、失敗は {ok:false,error}。認証区分: 公開 admin subadmin token 

POST /api/admin/login      { "password": "..." }            -> { ok, token }
POST /api/subadmin/login   { "email": "...", "password": "..." } -> { ok, token }
# 以降のリクエスト: Authorization: Bearer <token>
# 顧客ポータル (GET /api/portal/view, POST /api/portal/inquiry) はセッションではなく
# POST /api/portal/issue が発行するポータルトークンで認証します: /api/portal/view?t=<token>
# 無効・期限切れ・失効したトークンは 401 {ok:false,code:"portal_link_invalid"}

ヘルスチェック

Health / mount check.

GET/api/ping公開live 200
Health/mount check returning ok flag, current epoch ms as pong, and mounted:true to verify the routes/ auto-mount works.
レスポンス例
{"ok":true,"pong":1784675483941,"mounted":true}
GET/api/health公開
Operational truth about persistence: durable flag, storage mode, a warning string when the process has no durable backend, plus store / tenant-cache / account counters and the caller's resolved tenantId.
レスポンス例
{"ok":true,"durable":true,"storage":"disk","warning":null,"store":{"mode":"disk","durable":true,"dbPathSet":true,"diskError":null,"hubConfigured":false,"pending":0,"writes":1,"flushes":1,"errors":0,"lastFlush":"2026-08-27T20:51:07.071Z","lastError":null},"tenants":{"cached":10,"dirty":0,"max":500},"accounts":{"accounts":0,"loaded":true},"tenantId":"t-…"}

メトリクス (Metrics/Alerts)

ダッシュボード指標・アラート。

GET/api/metrics/overview公開live 200
Headline KPI cards computed from this workspace’s own records. A figure that cannot be computed is returned with computed:false, a reason and display:"—" — never a substituted or sample number; deltaPct is null when there is no prior month to compare against.
レスポンス例
{"ok":true,"month":"2026-08","revenueForecast":{"display":"¥0.00","unit":"M","total":0,"oneTime":0,"recurring":0,"deltaPct":null,"computed":true},"mrr":{"display":"¥0","unit":"K","amount":0,"invoiceRecurring":0,"projected":null,"computed":true},"pipeline":{"display":"—","unit":"M","amount":null,"deals":0,"computed":false,"reason":"商談金額のレコードがありません"}}
GET/api/revenue/mix公開live 200
12-month revenue-mix series (months labels, recurring, onetime 万円 arrays) for #revChart; optional ?months=N trims to last N points.
パラメータ位置型必須説明
monthsqueryintegerReturn only the last N points. Must be 1..120 or a 400 is returned. Default = full 12-point series.
レスポンス例
{"ok":true,"months":["25/8","25/9","25/10","25/11","25/12","26/1","26/2","26/3","26/4","26/5","26/6","26/7"],"recurring":[38,40,42,46,46,48,50,50,93,93,140,140],"onetime":[22,65,18,120,34,52,88,93,318,282,60,72]}
GET/api/ops/today公開live 200
Today's operation rows (#todayList): id/time/chip/chipLabel/title/detail/status/statusColor, clipped to length limits.
レスポンス例
{"ok":true,"ops":[{"id":"op-001","time":"09:30","chip":"c-cyan","chipLabel":"作業","title":"北斗商事 交換12台 再キッティング（Intune再登録）","detail":"担当：一条 ｜ Zone A ｜ チェックリスト 8/12 完了","status":"進行中","statusColor":"var(--cyan)"}]}
GET/api/alerts公開live 200
Alert list (#alertList) with per-alert action (label/danger/toast) plus lateCount = number of unacked late alerts.
レスポンス例
{"ok":true,"alerts":[{"id":"alert-001","label":"出荷漏れ","late":true,"ack":false,"chip":"c-red","chipLabel":"重大","what":"北斗商事 交換2台 — 予定 07/10 を超過","detail":"...","action":{"label":"対応","danger":true,"toast":"出荷漏れアラートを対応済みとして記録しました"}}],"lateCount":1}
POST/api/alert/:id/ack公開
Mark one alert acknowledged (sets ack=true, acked=timestamp) and returns the updated alert.
パラメータ位置型必須説明
idpathstring○Alert id from metrics-alerts seed, e.g. 'alert-001'. 404 {ok:false,error:'alert not found'} if unknown.
レスポンス例
{"ok":true,"alert":{"id":"alert-001","label":"出荷漏れ","ack":true,"acked":1710000000000,...}}

端末台帳 (Devices)

IMEI単位の端末台帳 CRUD・検索・一括操作。

GET/api/devices公開live 200
List all devices in the ledger collection (seeded with 178 mulberry(42)-generated records keyed by imei).
レスポンス例
{"ok":true,"devices":[{"imei":"356247446539346","serial":"F2LXD73EB4","asset":"HK-26-1001","model":"iPhone 15","maker":"Apple","cust":"北斗商事","mdm":"Intune","status":"保管中","chip":"c-blue",...}],"count":178}
POST/api/device公開
Create one device from partial input; generates a fresh unique imei if absent, fills defaults via makeDevice.
パラメータ位置型必須説明
imeibodystringDevice IMEI (max 40 chars). If omitted, a fresh 35+13-digit imei is generated.
modelbodystringDevice model (max 60), default 'iPhone 16'. iPad-* switches OS defaults.
custbodystringCustomer (max 60), default '社内検証機'.
statusbodystringStatus (max 20), default '入荷待ち'; sets chip color via chipFor.
mdmbodystringMDM platform (max 40), default 'Intune'.
serialbodystringSerial (max 40); defaulted from model prefix + padded index.
assetbodystringAsset tag (max 40), default 'HK-26-<n>'.
batbodynumberBattery %, default 100 (passed through, not clipped).
notebodystringFree note (max 300).
リクエスト
{"imei?":"str","model?":"str","cust?":"str","status?":"str","mdm?":"str","serial?":"str","asset?":"str","bat?":100,"...other device fields":"str"}
レスポンス例
{"ok":true,"device":{"imei":"35...","model":"iPhone 16","cust":"社内検証機","status":"入荷待ち","chip":"c-gray",...}}
POST/api/devices/bulk公開
Create N devices from {model,cust,mdm,status,qty}; returns the created[] array.
パラメータ位置型必須説明
qtybodynumber○Count to create; clamped to 1..1000. Missing/0 -> 400.
modelbodystringModel applied to all created devices.
custbodystringCustomer applied to all created devices.
mdmbodystringMDM applied to all created devices.
statusbodystringStatus applied to all created devices.
リクエスト
{"qty":5,"model?":"iPhone 16","cust?":"北斗商事","mdm?":"Intune","status?":"保管中"}
レスポンス例
{"ok":true,"created":[{"imei":"35...","model":"iPhone 16",...}],"count":5}
POST/api/device/:imei公開
Update fields of an existing device by imei; imei key is immutable, bat passed raw, other fields clipped, chip recomputed when status changes.
パラメータ位置型必須説明
imeipathstring○IMEI of the device to update (e.g. seed value 356247446539346).
statusbodystringNew status; triggers chip color recompute via chipFor.
batbodynumberBattery %, assigned raw (not clipped).
notebodystringNote (clipped to 300); all other string fields clipped to 120.
リクエスト
{"status?":"作業中","loc?":"B-05","user?":"藤宮 健","bat?":88,"note?":"str"}
レスポンス例
{"ok":true,"device":{"imei":"356247446539346","status":"作業中","chip":"c-cyan",...}}
POST/api/device/:imei/delete公開
Remove one device by imei from the collection.
パラメータ位置型必須説明
imeipathstring○IMEI of the device to delete (e.g. seed value 356247446539346).
レスポンス例
{"ok":true,"imei":"356247446539346"}

案件管理 (Jobs)

8段階の案件カード（キッティング工程）。

GET/api/jobs公開live 200
List all job (kanban) cards from the in-memory jobs collection.
レスポンス例
{"ok":true,"jobs":[{"id":"job-001","c":"東成建設","t":"PoC 20台（iPhone 16e・Intune新規）","s":0,"due":"07/22","ch":"c-blue","tag":"新規"}, ...9 cards]}
POST/api/job公開
Create a job card; server assigns id (job-…) and defaults stage to 0.
パラメータ位置型必須説明
cbodystringCustomer/company name (clipped to 120 chars)
tbodystringTask/title text (clipped to 300 chars)
sbodynumberStage index, clamped 0-7; defaults to 0 if not finite
duebodystringDue date label e.g. '07/22' (clipped to 40)
chbodystringColor/chip class; defaults 'c-blue' (clipped to 40)
tagbodystringTag label (clipped to 40)
リクエスト
{"c":"string","t":"string","s":0,"due":"string","ch":"c-blue","tag":"string"}
レスポンス例
{"ok":true,"job":{"id":"job-<generated>","c":"...","t":"...","s":0,"due":"...","ch":"c-blue","tag":"..."}}
POST/api/job/:id公開
Update stage/fields of an existing job card; only provided (non-null) fields are changed.
パラメータ位置型必須説明
idpathstring○Job id e.g. 'job-001'
cbodystringCustomer name (clip 120); updated only if non-null
tbodystringTitle (clip 300); updated only if non-null
sbodynumberStage, clamped 0-7; updated only if non-null
duebodystringDue label (clip 40); updated only if non-null
chbodystringColor class (clip 40); updated only if non-null
tagbodystringTag (clip 40); updated only if non-null
リクエスト
{"c":"string","t":"string","s":3,"due":"string","ch":"c-cyan","tag":"string"} (all optional)
レスポンス例
{"ok":true,"job":{"id":"job-001","c":"...","t":"...","s":3,"due":"...","ch":"...","tag":"..."}}
POST/api/job/:id/delete公開
Delete a job card by id.
パラメータ位置型必須説明
idpathstring○Job id to delete e.g. 'job-005'
レスポンス例
{"ok":true,"id":"job-005"}
GET/api/inquiries公開
List every helpdesk inquiry in this workspace, oldest 問合せID first.
レスポンス例
{"ok":true,"inquiries":[]}
POST/api/inquiry公開
Create an inquiry; the server assigns the next sequential 問合せID and uses it as the record id.
リクエスト
{"cust":"北斗商事","title":"MDM設定"}
レスポンス例
{"ok":true,"inquiry":{"status":"オープン","type":"故障","inquirerName":"","department":"","summary":"","faultyDeviceId":"","sentDeviceId":"","remarks":"","inquiryDate":"","returnDeadline":"","shipDate":"","arrivalDate":"","returnDate":"","returnReceivedDate":"","inquiryId":"00001","id":"00001"}}
POST/api/inquiry/:id公開
Update fields/status on one inquiry; inquiryId and id are preserved.
パラメータ位置型必須説明
idpathstring○問合せID, e.g. '00001'.
リクエスト
{"status":"クローズ"}
レスポンス例
{"ok":true,"inquiry":{"status":"クローズ","type":"故障","inquirerName":"","department":"","summary":"","faultyDeviceId":"","sentDeviceId":"","remarks":"","inquiryDate":"","returnDeadline":"","shipDate":"","arrivalDate":"","returnDate":"","returnReceivedDate":"","inquiryId":"00001","id":"00001"}}
POST/api/inquiry/:id/delete公開
Delete one inquiry.
パラメータ位置型必須説明
idpathstring○問合せID, e.g. '00001'.
レスポンス例
{"ok":true,"id":"00001"}

入出荷 (Shipments)

入荷・出荷・在庫ロケーション。

GET/api/shipments公開live 200
List all in/out shipments (入出荷) on the IN/OUT board.
レスポンス例
{"ok":true,"shipments":[{"id":"SHP-0001","late":true,"created":1784673357631,"updated":1784673357631,"date":"07/10","kind":"out","customer":"北斗商事","detail":"交換端末 2台 → 仙台支店…","carrier":"","status":"超過"}]}
POST/api/shipment公開
Create a shipment; server assigns SHP-#### id.
パラメータ位置型必須説明
kindbodystring'in' or 'out'; defaults to 'in' if omitted/invalid
customerbodystring○Customer name, clipped to 120 chars; required (400 if empty)
datebodystringDisplay date e.g. '07/13', clipped 40 chars
detailbodystringFree-text detail, clipped 400 chars
carrierbodystringCarrier info, clipped 120 chars
statusbodystringOne of 予定/手配中/出荷済/入荷済/超過/完了; defaults 予定
latebodybooleanOverdue flag; coerced to boolean
リクエスト
{"kind":"out","customer":"三峰精機","date":"07/20","detail":"8台 → 大阪支店","carrier":"ソラチ配送","status":"予定","late":false}
レスポンス例
{"ok":true,"shipment":{"id":"SHP-0007","date":"07/20","kind":"out","customer":"三峰精機","detail":"…","carrier":"ソラチ配送","status":"予定","late":false,"created":1784...,"updated":1784...}}
POST/api/shipment/:id公開
Advance status / update fields of an existing shipment.
パラメータ位置型必須説明
idpathstring○Shipment id e.g. SHP-0001
datebodystringNew display date, clipped 40
kindbodystring'in'/'out'; ignored if invalid
customerbodystringNew customer, clipped 120
detailbodystringNew detail, clipped 400
carrierbodystringNew carrier, clipped 120
statusbodystringMust be valid status (else 400); done statuses clear late flag
latebodybooleanOverdue flag; coerced to boolean
リクエスト
{"status":"出荷済"}
レスポンス例
{"ok":true,"shipment":{"id":"SHP-0001","status":"出荷済","late":false,"updated":1784...}}
POST/api/shipment/:id/delete公開
Delete a shipment by id.
パラメータ位置型必須説明
idpathstring○Shipment id e.g. SHP-0001
レスポンス例
{"ok":true}

ヘルプデスク (Tickets)

サポートチケットと対応履歴。

GET/api/tickets公開live 200
List all support tickets from the tickets collection (seeded with 6 demo tickets TK-0667..TK-0672).
レスポンス例
{"ok":true,"tickets":[{"id":"TK-0672","cust":"北斗商事","kind":"紛失","subject":"営業車内で紛失 → 位置特定＆リモートワイプ要請","owner":"一条","sla":"1h 12m","status":"対応中"}]}
POST/api/ticket公開
Create a new ticket; auto-assigns id TK-0<next num> (starts at 673) and created timestamp, clips input fields.
パラメータ位置型必須説明
custbodystringCustomer name (alias: customer); default '—', clipped to 120.
kindbodystringTicket type; default '問合せ', clipped to 60.
subjectbodystringSubject text; default '', clipped to 300.
ownerbodystringAssigned owner; default '—', clipped to 60.
slabodystringSLA label; default '4h 00m', clipped to 60.
statusbodystringStatus; default '受付', clipped to 40.
prioritybodystringPriority; default '', clipped to 40.
リクエスト
{"cust":"string","kind":"string","subject":"string","owner":"string","sla":"string","status":"string","priority":"string"}
レスポンス例
{"ok":true,"ticket":{"id":"TK-0673","cust":"—","kind":"問合せ","subject":"","owner":"—","sla":"4h 00m","status":"受付","priority":"","created":1700000000000}}
POST/api/ticket/:id公開
Update an existing ticket's status/owner/sla/subject/cust/kind/priority (only provided non-null fields).
パラメータ位置型必須説明
idpathstring○Ticket id, e.g. TK-0672.
statusbodystringNew status, clipped to 40.
ownerbodystringNew owner, clipped to 60.
slabodystringNew SLA label, clipped to 60.
subjectbodystringNew subject, clipped to 300.
custbodystringNew customer, clipped to 120.
kindbodystringNew kind, clipped to 60.
prioritybodystringNew priority, clipped to 40.
リクエスト
{"status":"string","owner":"string","sla":"string","subject":"string","cust":"string","kind":"string","priority":"string"}
レスポンス例
{"ok":true,"ticket":{"id":"TK-0672","status":"解決",...}}
POST/api/ticket/:id/delete公開
Delete a ticket and its associated messages.
パラメータ位置型必須説明
idpathstring○Ticket id to delete, e.g. TK-0672.
レスポンス例
{"ok":true}
GET/api/ticket/:id/messages公開live 200
List all messages for a given ticket (empty array if none recorded).
パラメータ位置型必須説明
idpathstring○Ticket id, e.g. TK-0672.
レスポンス例
{"ok":true,"messages":[]}
POST/api/ticket/:id/message公開
Append a message {from,text} to a ticket's message list; assigns msg id and timestamp.
パラメータ位置型必須説明
idpathstring○Ticket id, e.g. TK-0672.
frombodystringSender label; default '—', clipped to 60.
textbodystring○Message body, clipped to 2000; required (400 if empty).
リクエスト
{"from":"string","text":"string (required)"}
レスポンス例
{"ok":true,"message":{"id":"msg-xxxx","from":"綾瀬","text":"...","ts":1700000000000}}

顧客管理 (Customers)

顧客アカウント・更新・商談。

GET/api/customers公開live 200
List all customer accounts (id, name, industry, mdm, monthly, devices, since, status, note, renew).
レスポンス例
{"ok":true,"customers":[{"id":"cust-mrv8frxlg","key":"hokuto","name":"北斗商事","industry":"大手商社 ｜ 500台（iPhone）","mdm":"Intune（Clomo→移行済）","monthly":"¥380,000","devices":"500 台","since":"2025/04","status":"運用中","statusChip":"c-green","note":"豊島倉庫 専用エリア ¥45K/月","renew":{"date":"2027-03-31",...}}]}
POST/api/customer公開
Create a new customer account; requires name; returns generated id and full record.
パラメータ位置型必須説明
namebodystring○Account name (required; 400 if missing)
industrybodystringIndustry / device summary line
mdmbodystringMDM platform
monthlybodystringMonthly fee (default '—')
devicesbodystringDevice count (default '—')
sincebodystringStart month (default '—')
statusbodystringStatus label
statusChipbodystringStatus chip class (default 'c-gray')
notebodystringFree-text note
keybodystringShort account key
renewbodyobjectRenewal/deal object {date,dateLabel,year,kind,kindChip,what,detail,confidence,confColor} or null
リクエスト
{"name":"...","industry":"...","mdm":"...","monthly":"...","devices":"...","since":"...","status":"...","statusChip":"...","note":"...","key":"...","renew":{...}|null}
レスポンス例
{"ok":true,"id":"cust-xxxx","customer":{"id":"cust-xxxx","name":"...","industry":"","mdm":"","monthly":"—","devices":"—","since":"—","status":"","statusChip":"c-gray","note":"","renew":null}}
POST/api/customer/:id公開
Update fields of an existing customer by id; 404 if id not found.
パラメータ位置型必須説明
idpathstring○Customer id (e.g. cust-mrv8frxlg)
namebodystringAny of the shape() string fields to update
renewbodyobjectRenewal object or null to overwrite renew
リクエスト
{"name":"...","industry":"...","note":"...","renew":{...}|null, ...any shape fields}
レスポンス例
{"ok":true,"customer":{"id":"cust-mrv8frxlg","name":"...",...}}
POST/api/customer/:id/delete公開
Delete a customer by id; 404 if not present.
パラメータ位置型必須説明
idpathstring○Customer id to delete
レスポンス例
{"ok":true,"id":"cust-mrv8frxlg"}
GET/api/renewals公開live 200
Renewal/deal calendar derived from customers with a renew.date; sorted ascending by date.
レスポンス例
{"ok":true,"renewals":[{"id":"ren-cust-mrv8frxli","customerId":"cust-mrv8frxli","customer":"天城製薬","date":"2026-08-31","dateLabel":"08/31","year":"2026","kind":"商談","kindChip":"c-orange","what":"最終見積回答期限","detail":"...","confidence":"確度 80%","confColor":"orange"}]}

見積 (Quote)

見積の作成・改訂・PDF元データ。

GET/api/quote/catalog公開live 200
Returns the constant INITIAL/RUNNING line-item catalog master (mirrors app.html).
レスポンス例
{"ok":true,"catalog":{"initial":[{"n":"プロジェクト管理費","q":1,"p":300000,"d":"..."}, ...],"running":[{"n":"サービス管理・月次報告","q":1,"p":125000,"d":"..."}, ...]}}
GET/api/quote/new公開
Builds an UNSAVED quote for ONE named customer from the catalog master. The device quantity comes from that customer's own record and the volume discount is RECOMPUTED from it — so it is simply absent below the 1,000台 tier. 404 customer_not_found for an unknown custId; 400 customer_required when neither custId nor cust is given.
パラメータ位置型必須説明
custIdquerystringCustomer id owned by this workspace (e.g. 'cust-mtg57z057'). Its device count drives 数量 and the volume discount. 404 when unknown.
custquerystringCustomer NAME, when the quote is for a party not yet in the roster. Ignored if custId is given; one of the two is required.
devicesqueryintegerOverride the device quantity (floored at 0). Default: the customer record's own count.
patternquerystringRunning-cost pattern; anything other than 'B' is read as 'A'.
レスポンス例
{"ok":true,"quote":{"id":null,"custId":"cust-mtg57z057","cust":"三峰精機 御中","pattern":"A","costRate":45,"ini":[{"n":"プロジェクト管理費","q":1,"p":300000,"d":"..."},...,{"n":"iPhone初期キッティング（台）","q":50,"p":1500,"d":"..."}],"run":[...],"totals":{"ini":2425000,"iniTax":242500,"iniTotal":2667500,"run":470000,"runTax":47000,"runTotal":517000,"arr":5640000,"y1":8065000,"costRate":45,"gp":4435750,"gpRate":55,"deviceQty":50,"perDevice":1500,"volumeApplied":false,"volumeQty":0,"volumeMinQty":1000,"taxRate":0.1}}}
エラー
400 — {"ok":false,"error":"customer_required","message":"対象顧客を指定してください。"} — 対象顧客が指定されていません
404 — {"ok":false,"error":"customer_not_found"} — custId に該当する顧客がありません
GET/api/quotes公開live 200
Lists all saved quotes, each augmented with a computed totals snapshot.
レスポンス例
{"ok":true,"quotes":[{"id":"Q-AMAGI-001","cust":"天城製薬 御中","pattern":"A","costRate":45,"ini":[...],"run":[...],"signId":null,"totals":{"ini":...,"iniTax":...,"iniTotal":...,"run":...,"arr":...,"y1":...}}]}
GET/api/quote/draft公開
Returns the in-progress quote-builder draft for this workspace with computed totals, or draft:null when nothing is in progress. One draft per workspace (key 'current'); it survives navigation.
レスポンス例
{"ok":true,"draft":{"cust":"北斗商事","custId":null,"pattern":"A","costRate":45,"ini":[{"n":"キッティング","q":100,"p":1500,"d":""}],"run":[],"updatedAt":1788114480640,"totals":{"ini":150000,"iniTax":15000,"iniTotal":165000,"run":0,"runTax":0,"runTotal":0,"arr":0,"y1":150000,"costRate":45,"gp":82500,"gpRate":55,"deviceQty":0,"perDevice":null,"volumeApplied":false,"volumeQty":0,"volumeMinQty":1000,"taxRate":0.1}}} — 未作成なら {"ok":true,"draft":null}
POST/api/quote/draft公開
Saves the in-progress quote-builder draft (overwrites the single 'current' draft). Line items are normalized and the volume discount is recomputed. If the caller also sends its own `totals`, they are checked against the recompute and a disagreeing figure is REFUSED by name with 400 quote_inconsistent — nothing is stored.
リクエスト
{"cust":"北斗商事","custId":null,"pattern":"A","costRate":45,"ini":[{"n":"キッティング","q":100,"p":1500,"d":""}],"run":[],"totals":{"ini":150000,...}} — totals は任意。付ければ再計算と照合されます
レスポンス例
{"ok":true,"draft":{"cust":"北斗商事","custId":null,"pattern":"A","costRate":45,"ini":[{"n":"キッティング","q":100,"p":1500,"d":""}],"run":[],"updatedAt":1788114480640,"totals":{"ini":150000,"iniTax":15000,"iniTotal":165000,"run":0,"runTax":0,"runTotal":0,"arr":0,"y1":150000,"costRate":45,"gp":82500,"gpRate":55,"deviceQty":0,"perDevice":null,"volumeApplied":false,"volumeQty":0,"volumeMinQty":1000,"taxRate":0.1}}}
エラー
400 — {"ok":false,"error":"quote_inconsistent","message":"イニシャル小計が一致しません：画面 999 ／ 明細からの再計算 150,000。","errors":[{"code":"figure_mismatch","field":"ini","message":"イニシャル小計が一致しません：画面 999 ／ 明細からの再計算 150,000。"}]} — 画面の数字と再計算が食い違う場合。保存されません
POST/api/quote/draft/clear公開
Discards the in-progress quote-builder draft for this workspace. Idempotent — answers {ok:true} whether or not a draft existed. Saved quotes are untouched.
レスポンス例
{"ok":true}
POST/api/quote/preview公開
PRE-ISSUE VALIDATION of an UNSAVED quote. Nothing is stored. On success it returns the quote with computed totals PLUS the customer-facing CSV text and the PDF source document, so screen / CSV / PDF are literally the same computation. It REFUSES with 400 quote_inconsistent — naming the offending figure — when the caller's own totals disagree with the recompute, or when the quote names a custId that does not exist in this workspace.
リクエスト
{"id":null,"cust":"北斗商事","custId":"cust-…","pattern":"A","costRate":45,"ini":[{"n":"キッティング","q":100,"p":1500,"d":""}],"run":[{"n":"管理","q":1,"p":125000,"d":""}],"totals":{...}} — totals は任意（付ければ照合されます）
レスポンス例
{"ok":true,"quote":{"cust":"北斗商事","custId":null,"pattern":"A","costRate":45,"ini":[{"n":"キッティング","q":100,"p":1500,"d":""}],"run":[{"n":"管理","q":1,"p":125000,"d":""}],"id":null,"createdAt":1788114480661,"totals":{"ini":150000,"iniTax":15000,"iniTotal":165000,"run":125000,"runTax":12500,"runTotal":137500,"arr":1500000,"y1":1650000,"costRate":45,"gp":907500,"gpRate":55,"deviceQty":0,"perDevice":null,"volumeApplied":false,"volumeQty":0,"volumeMinQty":1000,"taxRate":0.1}},"csv":"\"見積番号\",\"(未保存)\"\r\n\"顧客名\",\"北斗商事\"\r\n...","document":{"meta":{...},"sections":[...],"summary":[...],"totals":{...}}}
エラー
400 — {"ok":false,"error":"quote_inconsistent","message":"イニシャル小計が一致しません：画面 1 ／ 明細からの再計算 150,000。","errors":[{"code":"figure_mismatch","field":"ini",...}]} — 数字の不一致。顧客不明なら {"code":"customer_unknown","field":"custId","message":"見積の顧客ID（nope）に該当する顧客が存在しません。"}
GET/api/quote/:id公開live 200
Returns one saved quote by id with computed totals, or 404 if not found.
パラメータ位置型必須説明
idpathstring○Quote id, e.g. 'Q-AMAGI-001'
レスポンス例
{"ok":true,"quote":{"id":"Q-AMAGI-001","cust":"天城製薬 御中","pattern":"A","costRate":45,"ini":[...],"run":[...],"signId":null,"totals":{...}}}
GET/api/quote/:id/csv公開
Customer-facing CSV for one saved quote (text/csv; charset=utf-8, BOM-prefixed, Content-Disposition attachment). Header block 見積番号・顧客名・発行日・パターン・数量・ボリューム値引き, then the line items, then the summary block — the same figures as the PDF. VALIDATED FIRST: a quote whose custId no longer resolves, or whose figures disagree, is REFUSED with 400 quote_inconsistent (JSON) instead of being exported.
パラメータ位置型必須説明
idpathstring○Saved quote id, e.g. 'Q-AMAGI-001'
レスポンス例
"見積番号","Q-mtg57yza6"
"顧客名","北斗商事 御中"
"発行日","2026-08-31"
"パターン","A"
"数量（台）","100"
"ボリューム値引き","非適用（1,000台未満）"

"区分","項目","数量","単価","金額"
"イニシャル","iPhone初期キッティング（台）","100","1500","150000"
...
"区分","サマリー","金額"
"イニシャル","小計（税抜）","250000"
..."合計","粗利率（%）","55"
エラー
400 — {"ok":false,"error":"quote_inconsistent","message":"見積の顧客ID（cust-…）に該当する顧客が存在しません。","errors":[{"code":"customer_unknown","field":"custId",...}]}
404 — {"ok":false,"error":"not_found"}
GET/api/quote/:id/document公開
The PDF's SOURCE DATA for one saved quote — meta (見積番号/顧客名/発行日/パターン/発行済みフラグ), the イニシャル and ランニング sections with per-row amounts and subtotal lines, the summary and the totals snapshot. The client renders it; it never recomputes it. VALIDATED FIRST, exactly like the CSV: an inconsistent quote is REFUSED with 400 quote_inconsistent naming the offending figure.
パラメータ位置型必須説明
idpathstring○Saved quote id, e.g. 'Q-AMAGI-001'
レスポンス例
{"ok":true,"document":{"meta":{"quoteNo":"Q-mtg57yza6","cust":"北斗商事 御中","custId":"cust-mtg57yz50","issueDate":"2026-08-31","pattern":"A","issued":true},"sections":[{"key":"ini","title":"イニシャル（構築・初期キッティング）","rows":[{"n":"iPhone初期キッティング（台）","q":100,"p":1500,"amt":150000},...],"lines":[{"label":"イニシャル小計（税抜）","amount":250000},{"label":"消費税（10%）","amount":25000},{"label":"イニシャル合計（税込）","amount":275000}]},{"key":"run","title":"ランニング（月額 LCM運用）","rows":[...],"lines":[...,{"label":"年間継続収益（ARR）","amount":1500000}]}],"summary":[{"label":"初年度合計（税抜）","amount":1750000},{"label":"想定粗利","amount":962500}],"totals":{...}}}
エラー
400 — {"ok":false,"error":"quote_inconsistent","message":"見積の顧客ID（cust-…）に該当する顧客が存在しません。","errors":[{"code":"customer_unknown","field":"custId",...}]}
404 — {"ok":false,"error":"not_found"}
POST/api/quote公開
Saves a new quote with a generated id (Q-...), normalizing line items and totals.
パラメータ位置型必須説明
custbodystringCustomer name (clipped 200 chars, defaults '御中')
patternbodystring'A' or 'B' (defaults 'A')
costRatebodynumberCost rate percent (defaults 45)
inibodyarrayInitial line items [{n,q,p,d}]
runbodyarrayRunning line items [{n,q,p,d}]
signIdbodystringOptional linked sign id (clipped 120 chars)
リクエスト
{"cust":"...","pattern":"A","costRate":45,"ini":[{"n":"...","q":1,"p":100,"d":"..."}],"run":[...],"signId":null}
レスポンス例
{"ok":true,"quote":{"id":"Q-...","cust":"...",...,"totals":{...}}}
POST/api/quote/:id公開
Updates an existing quote in place (patch semantics), or 404 if not found.
パラメータ位置型必須説明
idpathstring○Quote id to update
custbodystringUpdated customer name
patternbodystring'A' or 'B'
costRatebodynumberCost rate; falls back to current if 0/invalid
inibodyarrayInitial line items to replace
runbodyarrayRunning line items to replace
signIdbodystringSign id to link (or null to clear)
リクエスト
{"signId":"S-123"} (any subset of: cust,pattern,costRate,ini,run,signId)
レスポンス例
{"ok":true,"quote":{"id":"Q-AMAGI-001",...,"updatedAt":...,"totals":{...}}}

請求 (Invoices/Billing)

請求書・売上サマリ。

POST/api/quote/:id/issue公開
THE PRE-ISSUE GATE. Nothing reaches a customer until 数量・単価・値引き・税・合計 agree AND the quote names a customer that exists in this workspace (a customer is REQUIRED here, unlike CSV/document). On success 発行日 is stamped ONCE (issuedAt; a re-issue keeps the first stamp) so CSV and PDF can never print different dates, and the vetted quote, document and CSV are returned together. Otherwise 400 quote_inconsistent naming the offending figure — and nothing is stamped.
パラメータ位置型必須説明
idpathstring○Saved quote id to issue, e.g. 'Q-AMAGI-001'
レスポンス例
{"ok":true,"quote":{"id":"Q-mtg57yza6","cust":"北斗商事 御中","custId":"cust-mtg57yz50","pattern":"A","costRate":45,"ini":[...],"run":[...],"signId":null,"issuedAt":1788114526682,"createdAt":1788114526678,"updatedAt":1788114526682,"totals":{"ini":250000,"iniTax":25000,"iniTotal":275000,"run":125000,"runTax":12500,"runTotal":137500,"arr":1500000,"y1":1750000,"costRate":45,"gp":962500,"gpRate":55,"deviceQty":100,"perDevice":1500,"volumeApplied":false,"volumeQty":0,"volumeMinQty":1000,"taxRate":0.1}},"document":{"meta":{...,"issued":true},"sections":[...],"summary":[...],"totals":{...}},"csv":"\"見積番号\",\"Q-mtg57yza6\"\r\n..."}
エラー
400 — 発行拒否。顧客未選択: {"ok":false,"error":"quote_inconsistent","message":"対象顧客が選択されていません。顧客を選択してから発行してください。","errors":[{"code":"customer_required","field":"custId",...}]} ｜ 顧客不明: {"code":"customer_unknown","field":"custId"} ｜ 数字の不一致: {"code":"figure_mismatch","field":"ini",...}
404 — {"ok":false,"error":"not_found"}
GET/api/invoices公開live 200
List all invoices sorted newest-id first (descending localeCompare on id).
レスポンス例
{"ok":true,"invoices":[{"id":"INV-2607-004","cust":"三峰精機","month":"2607","desc":"新入社員向けキッティング 8台＋送料","amount":19800,"due":"08/15","status":"draft","recurring":false}],"count":5}
POST/api/invoice公開
Create an invoice; auto-generates sequential id (INV-YYMM-NNN) unless a fresh INV- id is supplied.
パラメータ位置型必須説明
custbodystring○Customer name, trimmed, clipped to 120 chars; 400 if empty.
amountbodynumber○Invoice amount; must be finite and >= 0, rounded; 400 if invalid.
statusbodystringOne of draft|issued|paid|overdue; defaults to draft if omitted/invalid.
monthbodystringBilling month, YYMM exactly (e.g. 2607). Rejected with 400 if malformed — it used to be clipped to 8 chars and stored as-is, producing an invoice that belonged to no month and silently never matched the month-scoped MRR figure. Omitted = current YYMM.
descbodystringLine-item description, clip 300.
duebodystringDue date string, clip 20.
idbodystringOptional custom id; used only if matches /^INV-/ and not already present, else auto-assigned.
recurringbodybooleanRecurring flag (coerced to bool).
リクエスト
{"cust":"string(req)","amount":number(req),"status":"draft|issued|paid|overdue","month":"YYMM","desc":"string","due":"string","id":"INV-...","recurring":bool}
レスポンス例
{"ok":true,"invoice":{"id":"INV-2607-005","cust":"北斗商事","month":"2607","desc":"","amount":10000,"due":"","status":"draft","recurring":false}}
POST/api/invoice/:id公開
Update status and/or fields on one existing invoice; validates status enum and amount.
パラメータ位置型必須説明
idpathstring○Invoice id to update, e.g. INV-2607-004; 404 if not found.
statusbodystringNew status; must be in draft|issued|paid|overdue else 400.
custbodystringCustomer name, clip 120.
descbodystringDescription, clip 300.
monthbodystringBilling month, YYMM exactly. Rejected with 400 if malformed; omitted leaves the invoice’s existing month unchanged.
duebodystringDue date, clip 20.
amountbodynumberAmount; must be finite and >= 0 else 400.
recurringbodybooleanRecurring flag (coerced to bool).
リクエスト
{"status":"...","cust":"string","desc":"string","month":"YYMM","due":"string","amount":number,"recurring":bool} (all optional)
レスポンス例
{"ok":true,"invoice":{"id":"INV-2607-004","cust":"三峰精機","month":"2607","desc":"新入社員向けキッティング 8台＋送料","amount":19800,"due":"08/15","status":"issued","recurring":false}}
POST/api/invoices/issue公開
Bulk-issue: flips all draft invoices in a given (or current) month to issued, returns count.
パラメータ位置型必須説明
monthbodystringTarget YYMM month, clip 8; defaults to current month (e.g. 2607).
リクエスト
{"month":"YYMM"} (optional; defaults to current month)
レスポンス例
{"ok":true,"count":1}
GET/api/billing/summary公開live 200
Compute billing summary: MRR/ARR, billed/paid/unpaid/overdue/draft totals, recurring:oneshot ratio and paid ratio.
レスポンス例
{"ok":true,"summary":{"mrr":550000,"arr":6600000,"billed":632500,"paid":550000,"unpaid":82500,"overdue":49500,"draft":19800,"recurring":550000,"oneshot":82500,"ratio":"87:13","recurringPct":87,"paidRatio":87,"month":"2607","count":5}}

シフト (Shift)

現場スタッフのシフト計画。

GET/api/shifts公開live 200
Returns the weekly roster grid and today's timeclock state.
レスポンス例
{"ok":true,"grid":{"s1":["day","day","day","day","day","off","off"],...},"clock":{"s1":{"in":"09:00","out":null,"status":"in","units":76},...}}
GET/api/staff公開live 200
Returns the roster staff list (own + agency staff).
レスポンス例
{"ok":true,"staff":[{"id":"s1","name":"一条","type":"own"},{"id":"a1","name":"派遣A","type":"agency"}]}
POST/api/shifts公開
Saves the roster grid, and optionally the timeclock, to the store.
パラメータ位置型必須説明
gridbodyobject○Roster grid keyed by staffId → array of 7 day-status strings (e.g. 'day','late','off','disp').
clockbodyobjectOptional timeclock object keyed by staffId → {in,out,status,units}.
リクエスト
{"grid":{"s1":["day",...]},"clock":{"s1":{"in":"09:00",...}}}
レスポンス例
{"ok":true,"grid":{...},"clock":{...}}
POST/api/shifts/draft公開
Stages an UNCONFIRMED shift proposal (typically the AI suggestion) in a per-workspace in-memory slot. IT IS NOT PERSISTED and the roster is NOT changed: GET /api/shifts keeps returning the confirmed grid and reports the proposal separately as `draft`, so a reload never lets a suggestion overwrite the roster. One draft per workspace (a new one replaces the old); it expires by itself after 12 hours. Only POST /api/shifts/draft/apply writes.
リクエスト
{"grid":{"s1":["off","day","day","day","day","off","off"],"s2":[...]}} — 値は day|late|night|disp|off などの勤務区分。未知の値は off に丸められます
レスポンス例
{"ok":true,"draft":{"grid":{"s1":["off","day","day","day","day","off","off"]},"diff":[{"staffId":"s1","day":0,"from":"day","to":"off"},{"staffId":"s2","day":0,"from":"late","to":"off"},...],"ts":1788114480682,"status":"unconfirmed"}}
エラー
400 — {"ok":false,"error":"grid required"} — grid が無い、またはどの行も 7 日分の配列として読めない
POST/api/shifts/draft/apply公開
CONFIRMS the staged proposal — the only call in this group that writes. The roster BEFORE the change is pushed onto the restore history first (reason 適用前のシフト, id returned as applied.restoreId), then the draft grid becomes the live grid and the draft is cleared. 404 no draft when nothing is staged (or the 12-hour draft TTL has passed).
レスポンス例
{"ok":true,"grid":{"s1":["off","day","day","day","day","off","off"]},"applied":{"ts":1788114480690,"diff":[{"staffId":"s1","day":0,"from":"day","to":"off"},...],"restoreId":"SHmtg56zhu0"},"history":[{"id":"SHmtg56zhu0","ts":1788114480690,"reason":"適用前のシフト","grid":{...}}]}
エラー
404 — {"ok":false,"error":"no draft"} — 未確定提案がありません
POST/api/shifts/draft/discard公開
Throws the staged proposal away. Since a draft was never persisted, nothing is rolled back: `discarded` simply says whether a draft was actually present, and `grid` is the unchanged confirmed roster. Idempotent.
レスポンス例
{"ok":true,"discarded":true,"grid":{"s1":["day","day","day","day","day","off","off"],"s2":["late","late","late","late","late","off","off"],...}} — 未確定提案が無ければ discarded:false
GET/api/shifts/history公開
Lists the pre-change roster snapshots taken by apply and restore (newest first, capped at 20) — each { id, ts, reason, grid }. These ids are the restore targets. Empty until the first 確定 operation.
レスポンス例
{"ok":true,"history":[{"id":"SHmtg56zhu0","ts":1788114480690,"reason":"適用前のシフト","grid":{"s1":["day","day","day","day","day","off","off"],"s2":["late","late","late","late","late","off","off"],"s3":["off","day","day","day","off","off","off"],"a1":["off","off","disp","disp","off","off","off"],"a2":["off","off","off","off","off","off","off"]}}]} — 未確定操作がなければ history:[]
POST/api/shifts/restore/:hid公開
Restores the roster from a history snapshot. A restore is itself a 確定 operation, so the CURRENT roster is pushed onto the history first (reason 復元前のシフト) and any staged draft is invalidated. 404 unknown snapshot for an id not in the history.
パラメータ位置型必須説明
hidpathstring○History snapshot id from GET /api/shifts/history, e.g. 'SHmtg56zhu0'
レスポンス例
{"ok":true,"grid":{"s1":["day","day","day","day","day","off","off"],...},"restored":"SHmtg57z0n8","history":[{"id":"SHmtg57z0q9","ts":1788114526730,"reason":"復元前のシフト","grid":{...}},{"id":"SHmtg57z0n8","ts":1788114526727,"reason":"適用前のシフト","grid":{...}}]}
エラー
404 — {"ok":false,"error":"unknown snapshot"}
POST/api/timeclock/:staffId/punch公開
Punches a staff member in or out, updating and returning their timeclock row.
パラメータ位置型必須説明
staffIdpathstring○Staff id (clipped to 40 chars); must exist in staff roster (e.g. 's1','a1').
dirbodystring'in' or 'out' (clipped to 8 chars); if omitted/invalid, toggles based on current status.
リクエスト
{"dir":"in"}
レスポンス例
{"ok":true,"staffId":"s1","row":{"in":"09:00","out":null,"status":"in","units":76}}
POST/api/staff公開
Create a staff member (type 'own' or 'agency') and return the updated staff list.
リクエスト
{"name":"山田 太郎","type":"own"}
レスポンス例
{"ok":true,"staff":{"id":"smtc01egx1","name":"山田 太郎","type":"own"},"staffList":[{"id":"smtc01egx1","name":"山田 太郎","type":"own"}]}
POST/api/staff/:id公開
Update one staff member’s name and/or type.
パラメータ位置型必須説明
idpathstring○Staff id, e.g. 'smtc03hjxd'.
リクエスト
{"name":"山田 花子","type":"agency"}
レスポンス例
{"ok":true,"staff":{"id":"smtc03hjxd","name":"山田 花子","type":"agency"}}
POST/api/staff/:id/delete公開
Delete one staff member and drop that person’s roster and timeclock rows.
パラメータ位置型必須説明
idpathstring○Staff id, e.g. 'smtc03hjxd'.
レスポンス例
{"ok":true,"id":"smtc03hjxd","staffList":[]}

入出荷ドック (Dock)

バース予約・受入スケジュール。

GET/api/dock/reservations公開live 200
List all dock/berth reservations (横づけ枠 weekly schedule data).
レスポンス例
{"ok":true,"reservations":[{"id":"RV-0001","created":1784673357614,"updated":1784673357614,"date":"2026-07-13","start":"10:00","dur":90,"size":"2t車","dir":"入荷","cust":"北斗商事","note":"返却45台","berth":"A","road":"否","roadStatus":"","permit":"済"}]}
POST/api/dock/reservation公開
Upsert a reservation by id (create if id missing/unknown, else update existing).
パラメータ位置型必須説明
idbodystringReservation id; if present and known -> update, else create with this id (or auto RV-#### if omitted).
datebodystringReservation date, clipped to 40 chars (e.g. 2026-07-13).
startbodystringStart time HH:MM, clipped to 10 chars.
durbodyintegerDuration minutes, min 15, default 60.
sizebodystringVehicle size; validated against 2t車/4t車/4tロング/大型車 else clipped.
dirbodystringDirection 入荷|出荷; invalid falls back to 入荷.
custbodystring○Customer name (required on create), clipped to 120 chars.
notebodystringFree note, clipped to 300 chars.
berthbodystringBerth A/B/路上待機; invalid falls back to A.
roadbodystringRoad-standby flag 要|否; anything not 要 becomes 否.
roadStatusbodystringRoad-permit status text, clipped to 20 chars (e.g. pending/done).
permitbodystringPermit status text, clipped to 20 chars (e.g. 済/要).
リクエスト
{"id":"RV-0001","date":"2026-07-13","start":"10:00","dur":90,"size":"2t車","dir":"入荷","cust":"北斗商事","note":"返却45台","berth":"A","road":"否","roadStatus":"","permit":"済"}
レスポンス例
{"ok":true,"reservation":{"id":"RV-0001","date":"2026-07-13",..."updated":1784673357614}}
POST/api/dock/reservation/:id/delete公開
Delete a reservation by id.
パラメータ位置型必須説明
idpathstring○Reservation id to delete, e.g. RV-0001.
レスポンス例
{"ok":true}

データ消去証明 (Erasure)

ワイプ実績と消去証明書。

GET/api/certs公開live 200
List all erasure certificates, newest-first.
レスポンス例
{"ok":true,"certs":[{"no":"KIT-ERZ-2026-1003","date":"2026-07-09","cust":"天城製薬（検証）","count":6,"methodKey":"clear","method":"論理消去","nist":"Clear","devices":[...]}]}
GET/api/erasure/certs公開live 200
Alias of /api/certs — list all erasure certificates newest-first.
レスポンス例
{"ok":true,"certs":[{"no":"KIT-ERZ-2026-1003",...}]}
GET/api/cert/:no公開live 200
Fetch a single certificate by its cert number for reprint.
パラメータ位置型必須説明
nopathstring○Certificate number, e.g. KIT-ERZ-2026-1001
レスポンス例
{"ok":true,"cert":{"no":"KIT-ERZ-2026-1001","date":"2026-07-03","cust":"北斗商事","count":45,"methodKey":"purge","method":"暗号化消去","nist":"Purge","devices":[...]}}
POST/api/cert公開
Issue a new certificate; server auto-numbers via persisted counter.
パラメータ位置型必須説明
custbodystring○Customer name (clip 120, trimmed); 400 if empty
methodKeybodystring○One of purge|clear|destroy; 400 if invalid
datebodystringYYYY-MM-DD (clip 10); defaults to today
countbodyintegerDevice count 1-500 when devices[] omitted; defaults 1
devicesbodyarrayOptional device objects {model,id,storage,dt,verify,log,al}; sliced to 500, normalized
リクエスト
{"cust":"string","methodKey":"purge|clear|destroy","date":"YYYY-MM-DD","count":1,"devices":[{"model":"iPhone 16","id":"...","storage":"256GB"}]}
レスポンス例
{"ok":true,"cert":{"no":"KIT-ERZ-2026-1004","date":"2026-07-22","cust":"...","count":1,"methodKey":"purge","method":"暗号化消去","nist":"Purge","devices":[...]}}

リプレース提案 (Replace)

バッテリー劣化・更新提案。

GET/api/replace/proposals公開live 200
Returns the per-customer 'proposed' (提案済み) map for device-refresh bundles as { customer: ISO-timestamp }.
レスポンス例
{"ok":true,"proposals":{}}
POST/api/replace/proposal公開
Marks a customer's device-refresh bundle as proposed (upserts { cust, at:now }) and returns the updated proposals map.
パラメータ位置型必須説明
custbodystring○Customer key/name to mark as proposed; clipped to 120 chars. Empty/missing -> 400.
リクエスト
{ "cust": "<customer>" }
レスポンス例
{"ok":true,"cust":"ACME株式会社","at":"2026-07-22T00:00:00.000Z","proposals":{"ACME株式会社":"2026-07-22T00:00:00.000Z"}}

ネットワーク (Network)

拠点回線・機器監視。

GET/api/network/deals公開live 200
Return the capacity-network deal board (provide/accept/request deals), newest-first.
レスポンス例
{"ok":true,"deals":[{"id":"dmrv8fry22c","dir":"provide","partner":"ネットワーク公開","kind":"キッティング枠","units":40,"period":"7/15–7/22","rate":1200,"status":"募集中"}]}
POST/api/network/deal公開
Add a deal to the board (list surplus capacity or request capacity); prepends to deals array.
パラメータ位置型必須説明
unitsbodyinteger○Number of units/slots; parsed as int, must be > 0 else 400.
dirbodystringDirection: provide|accept|request; anything else coerced to 'provide' (clipped 16).
partnerbodystringPartner/counterparty name (clipped 120); defaults 'ネットワーク公開'.
kindbodystringCapacity kind (clipped 40); defaults 'キッティング枠'.
periodbodystringDate range label (clipped 40); defaults '—'.
ratebodyintegerUnit rate; parsed int, defaults 0.
statusbodystringStatus label (clipped 24); defaults by dir (承認待ち/対応中/募集中).
リクエスト
{"dir":"provide","partner":"ネットワーク公開","kind":"キッティング枠","units":40,"period":"7/15–7/22","rate":1200,"status":"募集中"}
レスポンス例
{"ok":true,"deal":{"id":"d...","dir":"provide","partner":"...","kind":"キッティング枠","units":40,"period":"—","rate":0,"status":"募集中"},"deals":[...]}
GET/api/network/centers公開live 200
Return the certified kitting-center directory / marketplace (5 seeded centers).
レスポンス例
{"ok":true,"centers":[{"id":"c-tsm","name":"豊島 近接センター","region":"東京","mdm":["Intune","Workspace ONE"],"slots":80,"shelf":40,"rate":1100,"certs":["ISMS","Pマーク"]}]}
GET/api/network/oem公開live 200
Return the white-label / OEM tenant config (brand, logo, domain, plan).
レスポンス例
{"ok":true,"oem":{"brand":"","logo":"","domain":"","plan":"seat"}}
POST/api/network/oem公開
Save the OEM tenant config; overwrites the single 'oem' doc.
パラメータ位置型必須説明
brandbodystringBrand name (clipped 24).
logobodystringLogo (clipped 2 chars — likely an emoji/initial).
domainbodystringCustom domain (clipped 48).
planbodystringBilling plan: seat|rev; anything else coerced to 'seat' (clipped 8).
リクエスト
{"brand":"Acme","logo":"A","domain":"acme.example","plan":"seat"}
レスポンス例
{"ok":true,"oem":{"brand":"Acme","logo":"A","domain":"acme.example","plan":"seat"}}
POST/api/network/center公開
Create or update a certified partner center (update when a known id is supplied) and return the full centers list.
リクエスト
{"name":"板橋センター"}
レスポンス例
{"ok":true,"center":{"id":"c-mtc01ei95","name":"板橋センター","region":"—","mdm":[],"slots":0,"shelf":0,"rate":0,"certs":[]},"centers":[{"id":"c-mtc01ei95","name":"板橋センター","region":"—","mdm":[],"slots":0,"shelf":0,"rate":0,"certs":[]}]}
POST/api/network/center/:id/delete公開
Delete one certified center and return the remaining list.
パラメータ位置型必須説明
idpathstring○Center id, e.g. 'c-mtc01ei95'.
レスポンス例
{"ok":true,"id":"c-mtc01ei95","centers":[]}

需要予測 (Forecast)

16週の需要・要員シミュレーション。

GET/api/forecast公開live 200
Returns 16-week demand series, transparent demand/staffing model constants, and persisted user prefs (horizon, sim).
レスポンス例
{"ok":true,"weekly":[620,600,540,470,560,690,810,940,980,900,700,600,560,540,600,640],"constants":{"PER_PERSON":80,"BASE_STAFF":2,"WORKDAYS":5,"CEIL_DAY":192,"COST_PER_STAFF":310000,"COST_MONTHS":2,"DEAL_REV":3850000,"DEAL_GROSS":1900000},"prefs":{"horizon":12,"sim":2}}
POST/api/forecast/prefs公開
Persists user prefs; validates horizon in {8,12,16} and sim in {0,1,2}, returns saved prefs.
パラメータ位置型必須説明
horizonbodynumberForecast horizon in weeks; must be 8, 12 or 16 else 400
simbodynumberSimulation/scenario index; must be 0, 1 or 2 else 400
リクエスト
{"horizon":12,"sim":2}
レスポンス例
{"ok":true,"prefs":{"horizon":12,"sim":2}}

ラベル・QR (Labels)

管理番号・IMEI・資産QR印刷。

GET/api/labels/templates公開live 200
List all saved label templates.
レスポンス例
{"ok":true,"templates":[]}
POST/api/labels/template公開
Create a new label template with a server-issued id.
パラメータ位置型必須説明
namebodystring○Template name; clipped to 80 chars, defaults to 'テンプレート' if blank after sanitize but request is rejected 400 if missing/whitespace-only.
sizebodystringLabel size, one of s|m|l; defaults to 'm' if invalid.
fieldsbodyobjectBooleans for keys mgmt,imei,cust,model,qr,barcode; coerced to !!value.
tsbodynumberTimestamp; defaults to Date.now().
リクエスト
{"name":"string","size":"s|m|l","fields":{"mgmt":bool,"imei":bool,"cust":bool,"model":bool,"qr":bool,"barcode":bool},"ts":number}
レスポンス例
{"ok":true,"template":{"id":"tpl-xxxx","name":"...","fields":{...},"size":"m","ts":1700000000000}}
POST/api/labels/template/:id/delete公開
Delete a template by id.
パラメータ位置型必須説明
idpathstring○Template id (clipped to 40 chars). Must exist in tplCol.
レスポンス例
{"ok":true,"id":"tpl-xxxx"}
GET/api/labels/log公開live 200
List all print-batch log entries.
レスポンス例
{"ok":true,"log":[]}
POST/api/labels/log公開
Append a print-batch record to the log.
パラメータ位置型必須説明
sizebodystringLabel size s|m|l; defaults to 'm' if invalid.
countbodynumberNumber of labels printed; clamped to 0..100000, defaults 0.
datebodystringDate string clipped to 10 chars; defaults to today's ISO date (YYYY-MM-DD).
tsbodynumberTimestamp; defaults to Date.now().
リクエスト
{"size":"s|m|l","count":number,"date":"YYYY-MM-DD","ts":number}
レスポンス例
{"ok":true,"entry":{"id":"lg-xxxx","ts":1700000000000,"date":"2026-07-22","count":0,"size":"m"}}

アンケート (Survey)

CSAT / NPS 回収。

GET/api/survey公開live 200
Return persisted survey state: arrived responses, churn-save followups keyed by response id, and the running sent counter.
レスポンス例
{"ok":true,"responses":[],"followups":{},"sent":152}
POST/api/survey/send公開
Increment the survey-sent counter by {batch} (defaults to 1 if missing/invalid) and return the new total.
パラメータ位置型必須説明
batchbodynumberHow many surveys were sent; must be >0 or it defaults to 1.
リクエスト
{"batch": 10}
レスポンス例
{"ok":true,"sent":162}
POST/api/survey/response公開
Append/upsert an arrived survey response (id,date,cust,src,k,nps,csat,comment) into the responses collection.
パラメータ位置型必須説明
idbodystringResponse id (clip 60); auto-generated as SR-<id> if absent.
datebodystringResponse date (clip 20), default ''.
custbodystringCustomer name (clip 120), default '—'.
srcbodystringSource channel (clip 20), default 'ticket'.
kbodystringKind/metric type (clip 10), default 'CSAT'.
npsbodynumberNPS score; null if omitted, else coerced with +.
csatbodynumberCSAT score; null if omitted, else coerced with +.
commentbodystringFree-text comment (clip 400), default ''.
リクエスト
{"id":"SR-1001","date":"2026-07-22","cust":"Acme","src":"ticket","k":"CSAT","nps":9,"csat":5,"comment":"Great"}
レスポンス例
{"ok":true,"response":{"id":"SR-1001","date":"2026-07-22","cust":"Acme","src":"ticket","k":"CSAT","nps":9,"csat":5,"comment":"Great"}}
POST/api/survey/followup/:id公開
Record or replace a churn-save follow-up {action,note,date} for the response identified by :id.
パラメータ位置型必須説明
idpathstring○Response id the follow-up is attached to (clip 60).
actionbodystringFollow-up action taken (clip 120), default ''.
notebodystringFollow-up note (clip 600), default ''.
datebodystringFollow-up date (clip 20), default ''.
リクエスト
{"action":"Called customer","note":"Resolved billing issue","date":"2026-07-22"}
レスポンス例
{"ok":true,"followup":{"action":"Called customer","note":"Resolved billing issue","date":"2026-07-22"}}

オンボーディング (Onboarding)

導入チェックリスト。

GET/api/onboarding/projects公開live 200
Returns the current onboarding projects state {sel,tab,projects} (7-step MDM/ABM flow per customer), self-seeding demo data if missing.
レスポンス例
{"ok":true,"state":{"sel":"北斗商事","tab":"cust","projects":{"北斗商事":{"mdm":"Intune","steps":{"kickoff":"done","abm":"done","apns":"done","design":"done","pilot":"done","rollout":"done","handover":"wip"},"start":"2026-06-27"},"三峰精機":{...},"天城製薬":{...}}}}
PUT/api/onboarding/projects公開
Replaces the projects state; requires a projects object, sanitizes sel (clip 120) and tab (emp|cust).
パラメータ位置型必須説明
selbodystringselected customer key, clipped to 120 chars
tabbodystringactive tab; coerced to 'emp' if === 'emp' else 'cust'
projectsbodyobject○map of customer -> {mdm,steps,start}; missing/non-object -> 400
リクエスト
{"sel":"北斗商事","tab":"cust","projects":{"北斗商事":{"mdm":"Intune","steps":{...},"start":"2026-06-27"}}}
レスポンス例
{"ok":true,"state":{"sel":"...","tab":"cust","projects":{...}}}
GET/api/onboarding/requests公開live 200
Lists all employee device requests, sorted ascending by ts. Seed is empty (mirrors client).
レスポンス例
{"ok":true,"requests":[]}
POST/api/onboarding/request公開
Creates a pending device request; honors a client-provided id so ids stay in sync. Requires name and dept.
パラメータ位置型必須説明
idbodystringoptional client id, clipped 60; defaults to generated id('REQ')
namebodystring○employee name, clip 120; empty -> 400
deptbodystring○department, clip 120; empty -> 400
modelbodystringdevice model, clip 120
mdmbodystringMDM platform, clip 60, default 'Intune'
usebodystringusage/purpose, clip 60
ticketbodystringticket ref, clip 60
tsbodynumbertimestamp; defaults to Date.now() if not a number
リクエスト
{"name":"桐生太郎","dept":"営業部","model":"iPhone 15","mdm":"Intune","use":"field","ticket":"T-100"}
レスポンス例
{"ok":true,"request":{"id":"REQ-...","name":"桐生太郎","dept":"営業部","model":"iPhone 15","mdm":"Intune","use":"field","ticket":"T-100","status":"pending","ts":1700000000000}}
POST/api/onboarding/request/:id公開
Approve/reject/reset an existing request by id via {status}; on 'approved' sets a lead-time (optional lead days else random 0.8-2.4).
パラメータ位置型必須説明
idpathstring○request id; unknown -> 404 {error:'request not found'}
statusbodystring○one of approved|rejected|pending; else 400 {error:'invalid status'}
leadbodynumberlead days when approving; if not a number, random 0.8-2.4 rounded to 1dp
リクエスト
{"status":"approved","lead":1.5}
レスポンス例
{"ok":true,"request":{"id":"REQ-...","status":"approved","lead":1.5,...}}

チーム (Team)

メンバー・権限・稼働。

GET/api/team/members公開live 200
Return the full list of team members from the team-members collection.
レスポンス例
{"ok":true,"members":[{"id":"t1","name":"藤宮 美咲","ini":"MS","role":"owner","dept":"経営","email":"misaki.fujimiya@ai-sns.io"}, ...]}
POST/api/team/member公開
Create/invite a new member; server issues the id, requires a name.
パラメータ位置型必須説明
namebodystring○Display name; 400 if missing/blank; clipped to 80 chars.
inibodystringInitials, first 2 chars uppercased; defaults 'NA'.
rolebodystringOne of owner|admin|exec|member|viewer; defaults 'member'.
deptbodystringDepartment, clipped to 60; defaults '—'.
emailbodystringEmail, clipped to 120.
scopesbodyobjectPer-area perms {mgmt,ops,sales,support,settings} each none|view|edit.
リクエスト
{"name":"string","ini":"string?","role":"owner|admin|exec|member|viewer?","dept":"string?","email":"string?","scopes":{...}?}
レスポンス例
{"ok":true,"member":{"id":"t<generated>","name":"...","ini":"NA","role":"member","dept":"—","email":""}}
POST/api/team/member/:id公開
Update an existing member's role/scopes/fields; blocks demoting the last owner.
パラメータ位置型必須説明
idpathstring○Member id to update (e.g. 't5'); clipped to 40 chars.
rolebodystringNew role; blocked with 409 if demoting the last owner.
namebodystringUpdated name.
inibodystringUpdated initials.
deptbodystringUpdated department.
emailbodystringUpdated email.
scopesbodyobjectUpdated per-area scopes.
リクエスト
{"role":"...?","name":"...?","ini":"...?","dept":"...?","email":"...?","scopes":{...}?}
レスポンス例
{"ok":true,"member":{"id":"t5","name":"御堂 由美","role":"member", ...}}
POST/api/team/member/:id/delete公開
Delete a member by id; refuses to remove the last remaining owner.
パラメータ位置型必須説明
idpathstring○Member id to delete (e.g. 't6'); clipped to 40 chars.
レスポンス例
{"ok":true,"id":"t6"}
GET/api/team/plan要サインインlive 200
Return the current billing plan key (starter|pro|ent), defaulting to 'pro'.
レスポンス例
{"ok":true,"planKey":"pro"}
POST/api/team/plan要サインイン
Set the current billing plan; validates against starter|pro|ent.
パラメータ位置型必須説明
planKeybodystring○Target plan; must be one of starter|pro|ent, else 400; clipped to 20 chars.
リクエスト
{"planKey":"starter|pro|ent"}
レスポンス例
{"ok":true,"planKey":"pro"}
POST/api/team/invite要サインイン
Invite a teammate into THIS workspace (owner/admin only). Issues a signed, expiring invite token, stores a pending "invited" member row and returns the invite URL. A pending invite consumes a seat against the plan member limit.
リクエスト
{"email":"teammate@example.com","role":"member","name":"佐藤 花子"}
レスポンス例
{"ok":true,"inviteUrl":"https://kit-agent.ai-sns.io/signup?invite=<token>","token":"<body>.<sig>","member":{"id":"tmtc03zwxf","name":"佐藤 花子","ini":"NA","role":"member","dept":"—","email":"teammate@example.com","status":"invited"}}
POST/api/team/accept公開
Redeem an invite token: creates an account bound to the invited address that JOINS the invite’s workspace (not the caller’s anonymous one), sets the signed kit_tid cookie and returns a session token.
リクエスト
{"inviteToken":"<invite token>","email":"teammate@example.com","password":"Str0ng-Passw0rd-2026","name":"佐藤 花子"}
レスポンス例
{"ok":true,"token":"<body>.<sig>","account":{"email":"invitee2@example.com","company":"","name":"佐藤 花子","tenantId":"t-…","created":"2026-08-27T20:54:48.597Z","lastLogin":null},"joinedTenant":"t-…"}

設定 (Settings)

テナント設定・機能フラグ。

GET/api/settings/company公開live 200
Return the issuer/company profile stamped onto quote/invoice/certificate PDFs.
レスポンス例
{"ok":true,"company":{"name":"Freeborn Inc.","brand":"Ai-Sns.io Kitting","addr":"東京都板橋区・板橋キッティングセンター","tel":"","email":"","regno":"","rep":"","web":"","bank":"","logo":""}}
PUT/api/settings/company公開
Merge-update the issuer/company profile (text fields + base64 logo dataURL).
パラメータ位置型必須説明
namebodystringCompany legal name (clipped to 300 chars)
brandbodystringBrand/product name (clip 300)
addrbodystringAddress (clip 300)
telbodystringPhone (clip 300)
emailbodystringContact email (clip 300)
regnobodystringRegistration/invoice number (clip 300)
repbodystringRepresentative name (clip 300)
webbodystringWebsite URL (clip 300)
bankbodystringBank details (clip 300)
logobodystringLogo base64 dataURL (clipped to 6MB)
リクエスト
{"name":"...","brand":"...","addr":"...","tel":"...","email":"...","regno":"...","rep":"...","web":"...","bank":"...","logo":"data:image/png;base64,..."}
レスポンス例
{"ok":true,"company":{...merged record...}}
GET/api/settings/prefs公開live 200
Return notification preferences (emailNotify / slaAlert toggles).
レスポンス例
{"ok":true,"prefs":{"emailNotify":true,"slaAlert":true}}
PUT/api/settings/prefs公開
Merge-update notification toggles (emailNotify / slaAlert).
パラメータ位置型必須説明
emailNotifybodybooleanEmail notification toggle; coerced with !! (default true)
slaAlertbodybooleanSLA breach alert toggle; coerced with !! (default true)
リクエスト
{"emailNotify":true,"slaAlert":false}
レスポンス例
{"ok":true,"prefs":{"emailNotify":true,"slaAlert":false}}
GET/api/config公開
Public, read-only view of the admin-controlled site config (no secrets) — announcement banner, maintenance state and front-end feature toggles. Sent with Cache-Control: no-store. The demo workspace additionally gets demoEnabled:true and demoTenant:true.
レスポンス例
{"ok":true,"config":{"maintenanceMode":false,"maintenanceMessage":"ただいまメンテナンス中です。しばらくしてから再度お試しください。","registrationOpen":true,"announcementEnabled":false,"announcementText":"","announcementLevel":"info","demoEnabled":true,"signinEnabled":true,"chatBubbleEnabled":true,"primaryCtaLabel":""}}
GET/api/settings/ui公開
Return this workspace’s server-side UI state blob (opaque string map), so a view/filter choice survives a cache-clear or a new device.
レスポンス例
{"ok":true,"state":{}}
PUT/api/settings/ui公開
Merge-update the UI state blob: only string values are stored, an explicit null deletes a key, and the whole document is capped at 512KB.
リクエスト
{"state":{"theme":"dark"}}
レスポンス例
{"ok":true,"keys":1,"size":16}

連携 (Integrations)

Teams / Slack / LINE WORKS 等。

GET/api/integrations/rules公開live 200
Returns the automation rule toggles (trigger->action) plus any user-added extra rules.
レスポンス例
{"ok":true,"rules":{"r-ship":true,"r-inv":true,"r-lost":true,"r-ade":true,"r-sla":true,"r-pay":false},"extraRules":[]}
PUT/api/integrations/rules公開
Persists the whole rules state; replaces rules map (id->bool) and/or the extraRules array.
パラメータ位置型必須説明
rulesbodyobjectMap of ruleId->boolean; keys clipped to 60 chars, values coerced to bool. Must be an object (else 400).
extraRulesbodyarrayArray of rule objects {id,trig,act,ic,on}; normalized/clipped per-field. Must be an array (else 400).
リクエスト
{"rules":{"r-ship":true,"r-pay":true},"extraRules":[{"id":"r-x1","trig":"...","act":"...","ic":"⚙️","on":true}]}
レスポンス例
{"ok":true,"rules":{...},"extraRules":[...]}
GET/api/integrations/log公開live 200
Returns the recent sync log entries, newest first (sorted by time desc).
レスポンス例
{"ok":true,"log":[{"id":"LOG-0001","service":"intune","kind":"インベントリ取得","result":"ok","time":"2026-07-21T22:06:57.616Z"}]}
POST/api/integrations/log公開
Appends a new sync-log entry and returns it plus the full (bounded to 60) log.
パラメータ位置型必須説明
servicebodystring○Service name, clipped to 60 chars and trimmed; required (else 400).
kindbodystringDescription of the sync action, clipped to 200 chars.
resultbodystringOne of ok|warn|err; anything else defaults to 'ok'.
timebodystringISO timestamp clipped to 40 chars; defaults to now.
リクエスト
{"service":"sorachi","kind":"送り状 発行","result":"ok","time":"2026-07-22T00:00:00.000Z"}
レスポンス例
{"ok":true,"entry":{"id":"LOG-0008","service":"sorachi","kind":"送り状 発行","result":"ok","time":"..."},"log":[...]}

コンプライアンス (Compliance)

ISMS/Pマーク/SOC2/APPI・監査ログ・CAPA。

GET/api/compliance公開live 200
Returns control checklists per standard (isms/pmark/soc2/appi) plus the full CAPA corrective-action list.
レスポンス例
{"ok":true,"controls":{"isms":[true,true,true,true,false,true],"pmark":[...],"soc2":[...],"appi":[...]},"capa":[{"id":"CAPA-2026-014","src":"SOC 2","finding":"変更管理の承認記録に一部欠落","due":"2026-07-25","owner":"一条 玲","state":"対応中"}]}
POST/api/compliance/capa/:id公開
Updates the state of a single corrective action (CAPA) identified by id.
パラメータ位置型必須説明
idpathstring○CAPA id, e.g. CAPA-2026-014
statebodystring○New state string, clipped to 20 chars; must be non-empty after trim
リクエスト
{"state":"是正待ち"}
レスポンス例
{"ok":true,"capa":{"id":"CAPA-2026-014","src":"SOC 2","finding":"...","due":"2026-07-25","owner":"一条 玲","state":"是正待ち"}}
PUT/api/compliance/controls/:key公開
Replaces a standard's control checklist with a new boolean array.
パラメータ位置型必須説明
keypathstring○Control set key: isms | pmark | soc2 | appi
controlsbodyboolean[]○Array of booleans (coerced via !!), first 100 kept
リクエスト
{"controls":[true,true,false,true,false,true]}
レスポンス例
{"ok":true,"key":"isms","controls":[true,true,false,true,false,true]}
GET/api/audit-log公開live 200
Returns the tamper-evident audit trail as newest-first rows, each [ts,user,action,target,result,cat].
レスポンス例
{"ok":true,"logs":[["2026-07-11 09:02","一条 玲","ログイン（多要素認証）","管制コンソール","成功","login"],["2026-07-11 09:14","綾瀬 涼","端末台帳 更新（ステータス変更）","IMEI 356821…4471","成功","ledger"]]}
POST/api/audit-log公開
Appends a new audit entry; auto-fills ts/user/target/result/cat defaults when omitted.
パラメータ位置型必須説明
actionbodystring○Action description, clipped 200, must be non-empty after trim
tsbodystringTimestamp, clipped 25; defaults to server now() 'YYYY-MM-DD HH:mm'
userbodystringActor, clipped 60; defaults to 'システム'
targetbodystringTarget, clipped 200; defaults to '—'
resultbodystringResult, clipped 20; defaults to '成功'
catbodystringCategory, clipped 20; defaults to 'audit'
リクエスト
{"action":"消去実行","user":"早瀬 佳奈","target":"北斗商事 45台","result":"成功","cat":"erase"}
レスポンス例
{"ok":true,"entry":["2026-07-22 10:15","早瀬 佳奈","消去実行","北斗商事 45台","成功","erase"]}

ワークデスク (Workdesk)

社内ナレッジ・依頼。

POST/api/compliance/report公開
PRE-ISSUE CHECK for the internal audit report. The month, the record count, the CAPA list and the issuer block are RECOMPUTED from this workspace's own audit log and settings. Returns 422 with the offending figure named — never a printed document — when the month is malformed or in the future, a log timestamp is not a real datetime, a CAPA due date is invalid, the issuer/Pマーク registration is missing or malformed, or a caller-supplied claim.count disagrees with the records for that month. With no month the current month is used, falling back to the newest month that actually has records so the figure and its label describe the same period.
リクエスト
{"month":"2026-07","claim":{"count":15}} — どちらも任意。claim.count を付けると記録件数と照合されます
レスポンス例
{"ok":true,"doc":{"month":"2026-07","count":15,"byCat":{"login":3,"ledger":2,"erase":3,"ship":2,"perm":2,"mdm":2,"audit":1},"capa":[{"id":"CAPA-2026-014","src":"SOC 2","finding":"...","due":"2026-07-25","owner":"一条 玲","state":"対応中","dueValid":true,"overdue":true,"daysLeft":-37},...],"overdue":3,"org":{"name":"Freeborn Inc.","brand":"Ai-Sns.io Kitting","addr":"...","email":"contact@ai-sns.io","officerTitle":"情報セキュリティ管理責任者","officer":"一条 玲","center":"板橋キッティングセンター","pmark":"第20002676号","isms":"ISO/IEC 27001:2022"},"issuedAt":"2026-08-31 03:28"}}
エラー
422 — 整合しないので発行しない。{"ok":false,"issues":["監査ログ件数 99件 が 2026-07 の記録 15件 と一致しません"],"month":"2026-07"} ／ {"ok":false,"issues":["監査対象月「2026-13」が YYYY-MM 形式ではありません"],"month":"2026-07"}
POST/api/compliance/custody公開
PRE-ISSUE CHECK for a 授受記録 (chain of custody). A record that says who held a device and when may not be issued with an unsigned or unfinished step, an impossible timestamp, steps out of chronological order, or no issuer. Returns 422 with the offending step named, splitting the faults: `invalid` = hard faults (the record cannot be printed at all), `incomplete` = the handover simply has not finished yet. `draftable` is true exactly when invalid is empty — that record may be printed only as a clearly-marked 進行中 draft, never as the trail. Up to 50 steps.
リクエスト
{"imei":"356938035643809","model":"iPhone 16","cust":"北斗商事","steps":[{"label":"受領","role":"センター","who":"一条","dt":"2026-08-01 09:00","state":"完了","sign":"一条"},{"label":"出荷","who":"綾瀬","dt":"2026-08-02 10:00","state":"完了","sign":"綾瀬"}]} — state は 完了 で確定。sign が空／—／（未署名）は未署名扱い
レスポンス例
{"ok":true,"record":{"imei":"356938035643809","model":"iPhone 16","cust":"北斗商事","steps":[{"label":"受領","role":"","who":"一条","dt":"2026-08-01 09:00","state":"完了","sign":"一条"},{"label":"出荷","role":"","who":"綾瀬","dt":"2026-08-02 10:00","state":"完了","sign":"綾瀬"}],"org":{"name":"Freeborn Inc.","brand":"Ai-Sns.io Kitting","addr":"...","email":"contact@ai-sns.io","officerTitle":"情報セキュリティ管理責任者","officer":"一条 玲","center":"板橋キッティングセンター","pmark":"第20002676号","isms":"ISO/IEC 27001:2022"},"issuedAt":"2026-08-31 03:28"}}
エラー
422 — 発行不可。ハード欠陥: {"ok":false,"issues":["対象端末（IMEI／シリアル）が指定されていません","授受工程が1件もありません"],"invalid":[同左],"incomplete":[],"draftable":false} ／ 進行中のみ: {"ok":false,"issues":["工程「出荷」が未完了です（状態：予定）","工程「出荷」が未署名です","工程「出荷」の担当者が未確定です"],"invalid":[],"incomplete":[同左],"draftable":true}
GET/api/workdesk/docs公開live 200
List source-library documents, newest user-added first then seed docs in original order.
レスポンス例
{"ok":true,"docs":[{"id":"sop","name":"キッティング手順書","type":"SOP","size":184320,"status":"索引済","date":"2026/07/21","created":0,"seedIdx":0}]}
POST/api/workdesk/doc公開
Create/upsert a document; all body fields optional, defaults applied.
パラメータ位置型必須説明
idbodystringDoc id (clip 60); auto-generated 'doc-...' if omitted
namebodystringDoc name (clip 200); defaults '資料-<timestamp>'
typebodystringDoc type (clip 40); defaults 'FILE'
sizebodynumberByte size; defaults 0
statusbodystringIndex status (clip 40); defaults '索引済'
datebodystringDisplay date (clip 40); defaults today() JA date
リクエスト
{"name":"...","type":"...","size":123,"status":"...","date":"...","id":"..."}
レスポンス例
{"ok":true,"doc":{"id":"doc-...","name":"...","type":"FILE","size":0,"status":"索引済","date":"2026/07/22","created":1700000000000}}
POST/api/workdesk/doc/:id/delete公開
Delete a document by id; 404 if not found.
パラメータ位置型必須説明
idpathstring○Doc id to delete (e.g. 'sop')
レスポンス例
{"ok":true}
GET/api/workdesk/threads公開live 200
List AI chat threads, newest first (created desc); seed is empty.
レスポンス例
{"ok":true,"threads":[]}
POST/api/workdesk/thread公開
Create/upsert a full chat thread; body optional, sanitizes msgs.
パラメータ位置型必須説明
idbodystringThread id (clip 60); auto-generated 'thr-...' if omitted
titlebodystringTitle (clip 120); defaults '新しいチャット'
tsbodystringTimestamp label (clip 40)
msgsbodyarrayMessages [{role,text?,html?,srcs?,typing?}], each sanitized via cleanMsg
リクエスト
{"id":"...","title":"...","ts":"...","msgs":[{"role":"user","text":"..."}]}
レスポンス例
{"ok":true,"thread":{"id":"thr-...","title":"新しいチャット","ts":"","msgs":[],"created":1700000000000}}
POST/api/workdesk/thread/:id公開
Append/replace msgs or rename a thread; creates thread on-append if missing.
パラメータ位置型必須説明
idpathstring○Thread id
titlebodystringRename thread (clip 120)
tsbodystringTimestamp label (clip 40)
msgsbodyarrayReplace whole msgs list
appendbodyarrayAppend msgs to existing list
リクエスト
{"title":"...","ts":"...","msgs":[...],"append":[{"role":"ai","text":"..."}]}
レスポンス例
{"ok":true,"thread":{"id":"...","title":"...","ts":"...","msgs":[...],"created":1700000000000}}
POST/api/workdesk/conn公開
Persist connector on/off map {id:bool,...}, coerced to booleans.
パラメータ位置型必須説明
mapbodyobject{id:bool} map; body itself used as map if no .map key. Keys clip 40, values coerced !!
リクエスト
{"slack":true,"teams":false}  OR  {"map":{"slack":true}}
レスポンス例
{"ok":true,"conn":{"slack":true,"teams":false}}
GET/api/workdesk/conn公開live 200
Read persisted connector on/off map (hydration convenience).
レスポンス例
{"ok":true,"conn":{}}
POST/api/workdesk/search公開
Real retrieval over THIS workspace's indexed documents. No match returns no hits — never a plausible source for an unsupported answer.
リクエスト
{"q":"キッティング"}
レスポンス例
{"ok":true,"q":"キッティング","hits":[],"indexed":0}

ESG

リユース・CO2・サステナビリティ指標。

GET/api/esg/settings公開live 200
Return the auditable ESG coefficients (co2e kg-CO2e/unit, ewaste kg/unit).
レスポンス例
{"ok":true,"settings":{"co2e":55,"ewaste":0.42}}
PUT/api/esg/settings公開
Merge-update the ESG coefficients; accepts positive finite co2e and/or ewaste, else keeps prior value.
パラメータ位置型必須説明
co2ebodynumberkg-CO2e per unit; only applied when a positive finite number, otherwise previous value kept
ewastebodynumberkg per unit; only applied when a positive finite number, otherwise previous value kept
リクエスト
{"co2e": 55, "ewaste": 0.42}
レスポンス例
{"ok":true,"settings":{"co2e":60,"ewaste":0.5}}
GET/api/esg/metrics公開live 200
Return FY, monthly reuse volumes, per-customer reuse/return figures, and aggregate totals (reuse, ret, circularity %).
レスポンス例
{"ok":true,"fy":"2026年度","months":["4","5",...],"monthly":[78,85,...],"customers":[{"name":"北斗商事","reuse":420,"ret":470},...],"totals":{"reuse":1240,"ret":1420,"circularity":87.3}}

顧客ポータル (Portal)

顧客共有ビュー。

POST/api/esg/report公開
PRE-ISSUE CHECK for the ESG report. Every figure is recomputed from this workspace's reuse records and the saved CO2e/e-waste factors. Returns 422 with the offending figure named when 顧客別合計 disagrees with 月次実績合計, a customer's 再利用 exceeds its 返却, the CO2e factor is not a positive number, or a caller-supplied claim (units / actualUnits / forecastUnits / co2e / factor) disagrees with the computation. 実績 and 予測 are reported as two separate, labelled figures and are never summed together. `warnings` (e.g. a factor outside the published source range) do NOT block issuance and are returned on the 200 too.
リクエスト
{"scope":"center","claim":{"units":1240,"actualUnits":351,"forecastUnits":889,"co2e":68.2,"factor":55}} — すべて任意。scope は 'center'／'センター全体'（既定）または集計対象の顧客名。claim を付けた項目だけが照合されます
レスポンス例
{"ok":true,"warnings":[],"doc":{"scope":"センター全体","fy":"2026年度","actualThrough":"2026-07","forecastFrom":"2026-08","units":1240,"ret":1420,"co2e":68.2,"ewasteKg":520.8,"circularity":87.3,"actualUnits":351,"forecastUnits":889,"actualCo2e":19.3,"forecastCo2e":48.9,"settings":{"co2e":55,"ewaste":0.42},"basis":{"co2e":{"unit":"kg-CO2e/台","lo":55,"hi":66,"perModel":false,"method":"...","source":"...","scope":"..."},"ewaste":{"unit":"kg/台","lo":0.19,"hi":1.5,...}}}}
エラー
422 — 整合しないので発行しない。{"ok":false,"issues":["対象台数 1台 が集計値 1240台 と一致しません"],"warnings":[]} ／ {"ok":false,"issues":["CO2e 削減量 1 t が 1240台 × 55 kg-CO2e/台 ÷ 1000 ＝ 68.2 t と一致しません"],"warnings":[]}
GET/api/portals公開live 200
Returns the full customer portal state: per-customer {published,suffix,last,name,slug} plus global counters _tickets (MTD) and _dls (avg monthly downloads).
レスポンス例
{"ok":true,"state":{"hokuto":{"published":true,"suffix":"blk3","last":"3分前","name":"北斗商事","slug":"hokuto"},"tosei":{"published":false,"suffix":"1jip","last":"—",...},"_tickets":4,"_dls":63}}
GET/api/portal/viewtoken
The entire read-only customer view for ONE client, addressed by a PORTAL TOKEN — not by a session. The workspace and the client both come from the signed token, so a visitor never sees the operator's customer roster. An unpublished portal returns only { client, published:false, last } and nothing else. When published it adds the client's own device figures with the IMEI masked to its last 6 (max 200 rows) and their 20 most recent tickets. Cache-Control: no-store.
パラメータ位置型必須説明
tquerystring○Portal token from POST /api/portal/issue. Binds the client AND the workspace, expires and can be revoked. Required in production; outside production a legacy ?c=<顧客名> form is still accepted so the demo Space keeps working.
cquerystringLEGACY, non-production only: the customer name, resolved against the CALLER's workspace. Refused outright when the app runs in production — use ?t= instead.
レスポンス例
{"ok":true,"client":{"name":"北斗商事","slug":"hokuto"},"published":true,"last":"たった今","devices":{"total":124,"active":124,"computed":true,"list":[{"imei":"****539346","model":"iPhone 15","status":"保管中","chip":"c-blue","loc":"A-10"},...],"shown":124},"tickets":[{"id":"TK-PG56ZJ90F05","kind":"故障","subject":"端末が起動しません","status":"受付","created":1788114480741,"viaPortal":true}]} — 未公開なら {"ok":true,"client":{...},"published":false,"last":"たった今"} のみ
エラー
401 — {"ok":false,"code":"portal_link_invalid","error":"このリンクは無効または期限切れです"} — トークンが無い・改竄・期限切れ・失効
404 — {"ok":false,"code":"portal_not_found","error":"ポータルが見つかりません"}
500 — {"ok":false,"error":"ポータルを読み込めませんでした"}
POST/api/portal/inquirytoken
A portal client's enquiry becomes a REAL helpdesk ticket in the workspace the link belongs to — the same `tickets` collection GET /api/tickets reads — and answers with the 受付番号 (TK-P…, unique by construction, marking it as portal-raised) and the epoch-ms time it was accepted. The 「ポータル経由の問い合わせ（今月）」 counter is bumped by the same action, once. Authenticated by the PORTAL TOKEN, not a session. A failure is reported as a failure (502) rather than claimed as sent, and an unknown or unpublished portal never creates a ticket. Cache-Control: no-store.
パラメータ位置型必須説明
tquerystringPortal token — may be sent as ?t= or as body.t. Required (in production) either way.
リクエスト
{"t":"<portal token>","kind":"故障","message":"端末が起動しません","name":"山田","email":"y@example.com"} — kind は 問合せ|故障|交換|紛失|返却|その他（既定 問合せ）。message は必須・2000字まで
レスポンス例
{"ok":true,"ref":"TK-PG56ZJ90F05","ticket":{"id":"TK-PG56ZJ90F05","status":"受付","kind":"故障","cust":"北斗商事"},"created":1788114480741}
エラー
400 — {"ok":false,"code":"message_required","error":"ご用件を入力してください。"}
401 — {"ok":false,"code":"portal_link_invalid","error":"このリンクは無効または期限切れです"}
404 — {"ok":false,"code":"portal_not_found","error":"ポータルが見つかりません"}
409 — {"ok":false,"code":"portal_unpublished","error":"このポータルは現在ご利用いただけません。"} — 未公開ポータルにはチケットを作りません
502 — {"ok":false,"code":"ticket_not_created","error":"送信できませんでした。お手数ですが時間をおいて再度お試しください。"} — 送信できなかったときは、できなかったと答えます
POST/api/portal/:custId公開
Mutates one customer portal. body.action: 'toggle' (default; flip or set published, sets last='たった今' when publishing) | 'ticket' (bump global tickets, set last) | 'dl' (bump global downloads) | 'touch' (set last from body.last). Returns updated portal + counters.
パラメータ位置型必須説明
custIdpathstring○Customer id: one of hokuto|mitsumine|amagi|tosei|mizuki. 404 if unknown.
actionbodystringOne of toggle|ticket|dl|touch (default toggle, clipped to 20 chars). Unknown value -> 400.
publishedbodybooleanFor action=toggle: explicit publish state; if omitted, flips current value.
lastbodystringFor action=touch: last-access label, clipped to 40 chars (default 'たった今').
リクエスト
{"action":"toggle","published":true,"last":"たった今"}
レスポンス例
{"ok":true,"portal":{"id":"tosei","name":"東成建設","slug":"tosei","published":true,"suffix":"1jip","last":"たった今"},"tickets":4,"dls":63}
POST/api/portal/issue公開
Issues (publishes) a portal for a customer identified by body.custId/id, sets published=true and last='たった今', and returns the public portal URL '/portal.html?t=<name>'.
パラメータ位置型必須説明
custIdbodystring○Customer id (alias 'id' also accepted), clipped to 40 chars; must map to a known customer else 400.
リクエスト
{"custId":"tosei"}
レスポンス例
{"ok":true,"url":"/portal.html?t=%E6%9D%B1%E6%88%90%E5%BB%BA%E8%A8%AD","portal":{"id":"tosei","name":"東成建設","slug":"tosei","published":true,"suffix":"1jip","last":"たった今"}}

QBR

四半期ビジネスレビュー。

GET/api/qbr/history公開live 200
List generated-QBR history entries (newest-first, capped at 20).
レスポンス例
{"ok":true,"history":[]}
POST/api/qbr/check公開
PRE-ISSUE CHECK for a QBR deck. Writes nothing. Returns 422 with the offending figure named when a required field (顧客ID/顧客名/対象四半期ID/対象四半期) is empty, an アップセル subtotal does not equal its breakdown, the annual figure is not 12× the monthly, a count field is not a non-negative integer, or the SLA percentage is outside 0–100. POST /api/qbr runs exactly the same check before recording, so a deck that passes here will record.
リクエスト
{"custId":"c1","cust":"北斗商事","qId":"2026Q2","q":"2026 Q2","date":"2026-07-22T00:00:00.000Z","figures":{"managed":100,"kit":0,"inbound":0,"outbound":0,"storage":0,"tickets":0,"incidents":0,"hours":0,"sla":99.4,"upsellMonthly":0,"upsellAnnual":0,"storeUplift":0,"addValue":0,"upDelta":0,"help":0}} — figures は任意。渡した項目だけが検算されます
レスポンス例
{"ok":true,"issues":[]}
エラー
422 — {"ok":false,"issues":["必須項目「顧客ID」が空です","必須項目「顧客名」が空です","必須項目「対象四半期ID」が空です","必須項目「対象四半期」が空です"]} ／ {"ok":false,"issues":["アップセル合計（月額） ¥100,000 が内訳合計 ¥4 と一致しません"]}
POST/api/qbr公開
Record a generated QBR into history; returns the new record plus updated capped history.
パラメータ位置型必須説明
custIdbodystring○Customer id (clipped to 60 chars); required, 400 if missing.
qIdbodystring○Quarter id (clipped to 40 chars); required, 400 if missing.
custbodystringCustomer display name (clipped to 120 chars).
qbodystringQuarter label (clipped to 60 chars).
datebodystringISO date string (clipped to 40 chars); defaults to current ISO timestamp if omitted.
リクエスト
{"custId":"c1","cust":"Acme","qId":"2026Q2","q":"2026 Q2","date":"2026-07-22T00:00:00.000Z"}
レスポンス例
{"ok":true,"record":{"custId":"c1","cust":"Acme","qId":"2026Q2","q":"2026 Q2","date":"2026-07-22T00:00:00.000Z"},"history":[{...}]}

ナーチャリング (Nurture)

リード育成・シーケンス。

GET/api/nurture公開live 200
Return the single nurture config+history doc (per-step edits, custom drip sequences, send-history flags, auto-remind toggle).
レスポンス例
{"ok":true,"doc":{"edits":{},"custom":[],"sent":{},"autoRemind":true}}
POST/api/nurture公開
Persist (replace) the nurture config+history doc after shaping/clipping to bounded sizes.
パラメータ位置型必須説明
editsbodyobjectPer-step overrides map keyed 'seqId:idx' -> {subject(<=300), body(<=8000)}; capped 500 keys.
custombodyarrayUser drip sequences [{id,name,target,tone,desc,steps:[{day,subject,body}]}]; capped 100 seqs, 40 steps each.
sentbodyobjectSend-history flags map 'leadId:seqId:idx' -> true; capped 5000 keys.
autoRemindbodybooleanAuto renewal-reminder toggle; defaults true when null/omitted.
リクエスト
{ "edits": { "seqId:0": {"subject":"...","body":"..."} }, "custom": [ {"id":"...","name":"...","target":"...","tone":"...","desc":"...","steps":[{"day":0,"subject":"...","body":"..."}]} ], "sent": {"leadId:seqId:0":true}, "autoRemind": true }
レスポンス例
{"ok":true,"doc":{"edits":{},"custom":[],"sent":{},"autoRemind":true}}

アカウント・サインイン (Account/Auth)

メール/パスワード・Google・電話番号でのサインアップとサインイン。

POST/api/account/signup公開
Create an account that ADOPTS the anonymous workspace this browser is already using; sets the signed kit_tid cookie and returns a session token. Refused when registrationOpen is off; rate/velocity capped per IP.
リクエスト
{"email":"demo.user@example.com","password":"Str0ng-Passw0rd-2026","company":"北斗商事","name":"山田 太郎"}
レスポンス例
{"ok":true,"token":"<body>.<sig>","account":{"email":"demo.user@example.com","company":"北斗商事","name":"山田 太郎","tenantId":"t-…","created":"2026-08-27T20:52:56.379Z","lastLogin":null},"adoptedTenant":"t-…"}
POST/api/account/login公開
Password sign-in. Returns the session token and sets the signed kit_tid cookie for the account’s workspace. When 2FA (sec2FA) is on it instead returns mfaRequired:true plus a challenge id to complete at /api/account/login/verify.
リクエスト
{"email":"demo.user@example.com","password":"Str0ng-Passw0rd-2026"}
レスポンス例
{"ok":true,"token":"<body>.<sig>","account":{"email":"demo.user@example.com","company":"北斗商事","name":"山田 太郎","tenantId":"t-…","created":"2026-08-27T20:52:56.379Z","lastLogin":"2026-08-27T20:52:56.416Z"}}
POST/api/account/login/verify公開
Complete a 2FA login started at /api/account/login by submitting the emailed one-time code with its challenge id.
リクエスト
{"email":"demo.user@example.com","challenge":"<challenge id>","code":"123456"}
POST/api/account/logout公開
Clear the kit_tid cookie so a shared machine does not leak the workspace dataset.
レスポンス例
{"ok":true}
GET/api/account/me公開
Report whether the caller is signed in. Without a session token it answers signedIn:false plus the anonymous tenantId; with a valid Bearer token it answers signedIn:true and the account profile.
レスポンス例
{"ok":true,"signedIn":false,"tenantId":"t-…"} | {"ok":true,"signedIn":true,"account":{"email":"owner.demo@example.com","company":"北斗商事","name":"山田 太郎","tenantId":"t-…","created":"2026-08-27T20:54:38.468Z","lastLogin":null}}
POST/api/account/password要サインイン
Change the signed-in account’s password after verifying the current one; every previously issued session token is invalidated and a fresh one is returned.
リクエスト
{"current":"<current password>","next":"<new password>"}
レスポンス例
{"ok":true,"token":"<body>.<sig>"}
GET/api/auth/methods公開
Which sign-in methods this deployment has configured: password is always true, google and phone reflect whether their provider credentials are set.
レスポンス例
{"ok":true,"password":true,"google":false,"phone":false}
GET/api/auth/google/start公開
Begin Google OAuth: 302-redirects to Google’s consent screen with a signed, 10-minute state that carries the current tenant. 503 when Google login is not configured.
GET/api/auth/google/callback公開
Google OAuth callback: verifies state, exchanges the code, finds or creates the account, sets the kit_tid cookie and 302-redirects to /login.html with the session token in the URL fragment (#gt=…). Failures redirect to /login.html?err=…
パラメータ位置型必須説明
codequerystring—Authorization code returned by Google.
statequerystring—Signed state issued by /api/auth/google/start. An invalid state redirects to /login.html?err=state.
POST/api/auth/phone/start公開
Send a one-time SMS code to the given phone number. 503 when phone login is not configured.
リクエスト
{"phone":"+819012345678"}
レスポンス例
{"ok":true}
POST/api/auth/phone/verify公開
Verify the SMS code, find or create the phone-keyed account (tel:+81…), set the kit_tid cookie and return a session token.
リクエスト
{"phone":"+819012345678","code":"123456"}

課金 (Billing/Stripe)

プランカタログ・Stripe Checkout・Webhook。

GET/api/billing/plans公開
Public plan catalog (key, name, priceJpy, limits, features) plus whether Stripe is configured on this deployment. No secrets.
レスポンス例
{"ok":true,"plans":[{"key":"starter","name":"Starter","priceJpy":128000,"limits":{"devices":100,"members":3,"customers":10},"features":["デバイス最大100台 / メンバー3名","キッティング台帳・出荷管理","MDM連携・基本レポート","メールサポート"]},{"key":"business","name":"Business","priceJpy":388000,"limits":{"devices":300,"members":10,"customers":30},"features":[…]},{"key":"enterprise","name":"Enterprise","priceJpy":908000,"limits":{"devices":null,"members":null,"customers":null},"features":[…]}],"stripeConfigured":false}
GET/api/billing/subscription公開
The calling workspace’s current plan key and subscription status (status "none" when it has never been set).
レスポンス例
{"ok":true,"planKey":"starter","status":"none","stripeConfigured":false}
POST/api/billing/checkout公開
Start a Stripe Checkout Session for the requested plan, carrying the tenant id as client_reference_id + metadata so the webhook can apply the result to the right workspace.
リクエスト
{"planKey":"business"}
レスポンス例（captured on a deployment without Stripe keys; with Stripe configured the 200 body carries the Checkout Session URL）
{"ok":false,"error":"billing not configured"}
POST/api/billing/webhook公開
Stripe webhook. The raw body is HMAC-verified against STRIPE_WEBHOOK_SECRET before parsing, event ids are de-duplicated (replay-safe), and checkout/subscription events set the tenant plan.
パラメータ位置型必須説明
stripe-signatureheaderstring○Stripe's signature header (t=…,v1=…). A body that fails verification is rejected with 400 and never parsed.

キャパシティ (Capacity)

キッティング能力・保管枠と計画負荷。

GET/api/capacity公開
Full capacity state for this workspace: the saved config, every planned-load entry sorted by date, the derived week view and a summary.
レスポンス例
{"ok":true,"config":{"kittingDaily":192,"storageMax":240,"storageUsed":178,"palletMax":8,"palletUsed":5,"warehouseMax":240,"warehouseUsed":116,"staffCount":2,"perStaff":80,"updated":1787863913818},"load":[{"id":"CAP-0001","date":"2026-08-28","created":1787863913818,"cust":"北斗商事","qty":62,"kind":"kitting","note":"LCM 交換・再キッティング"},…],"week":[…],"summary":{…}}
POST/api/capacity/config公開
Save/patch this workspace’s capacity config; every numeric field falls back to its current value when omitted, and updated is stamped server-side.
リクエスト
{"kittingDaily":200,"staffCount":3}
レスポンス例
{"ok":true,"config":{"kittingDaily":200,"storageMax":0,"storageUsed":0,"palletMax":0,"palletUsed":0,"warehouseMax":0,"warehouseUsed":0,"staffCount":3,"perStaff":80,"updated":1787863957335}}
POST/api/capacity/load公開
Add a planned-load entry; the server assigns the next CAP-#### id.
リクエスト
{"date":"2026-09-10","cust":"北斗商事","qty":40,"kind":"kitting","note":"新規"}
レスポンス例
{"ok":true,"entry":{"id":"CAP-0001","date":"2026-09-10","cust":"北斗商事","qty":40,"kind":"kitting","note":"新規","created":1787863957344}}
POST/api/capacity/load/:id公開
Update date / cust / qty / kind / note on one load entry; omitted fields are left alone.
パラメータ位置型必須説明
idpathstring○Load entry id, e.g. 'CAP-0001'. 404 {ok:false,error:'load entry not found'} if unknown.
リクエスト
{"qty":55}
レスポンス例
{"ok":true,"entry":{"id":"CAP-0001","date":"2026-09-10","cust":"北斗商事","qty":55,"kind":"kitting","note":"新規","created":1787863957344}}
POST/api/capacity/load/:id/delete公開
Remove one planned-load entry.
パラメータ位置型必須説明
idpathstring○Load entry id, e.g. 'CAP-0001'.
レスポンス例
{"ok":true,"id":"CAP-0001"}

DaaS (Device as a Service)

DaaS 見積ポートフォリオ・シミュレータ・提案送付履歴。

GET/api/daas公開
DaaS state for this workspace: the quote/contract portfolio, saved simulator preferences (null when never saved) and the proposal send history.
レスポンス例
{"ok":true,"quotes":[{"id":"DQ-DEMO1","cust":"天城製薬","model":"iPhone 16","qty":1800,"term":36,"res":20,"lcm":620,"war":"full","monthly":5120,"mrr":9216000,"ts":1},…],"sim":null,"sends":[]}
POST/api/daas/quote公開
Create or update a DaaS quote/contract. The portfolio is capped and the oldest entries are dropped first.
リクエスト
{"cust":"北斗商事","model":"iPhone 16","qty":100,"term":36,"res":20,"lcm":600,"war":"full"}
レスポンス例
{"ok":true,"quote":{"id":"DQmtc01egb0","cust":"北斗商事","model":"iPhone 16","qty":100,"term":36,"res":20,"lcm":600,"war":"full","monthly":0,"mrr":0,"ts":1787863957355}}
POST/api/daas/quote/:id/status公開
Moves one DaaS quote along 下書き(draft) → 提案中(proposed) → 承認(approved) → 契約中(contracted). FORWARD MOVES ARE ONE STAGE AT A TIME — skipping is refused with 400 stage skipped, which names the only stage that is allowed next. 承認 and 契約中 additionally REQUIRE a customer and an unexpired 有効期限: a quote missing either is refused with 400 and the missing fields listed, and an expiry earlier than today is refused with 400 quote expired. Rolling BACK to any earlier stage is always allowed and clears 契約日. Only 契約中 quotes count towards totals.mrr / totals.units; earlier stages sit in pipeline*.
パラメータ位置型必須説明
idpathstring○DaaS quote id, e.g. 'DQ-DEMO1'.
リクエスト
{"status":"approved"} — draft|proposed|approved|contracted のいずれか
レスポンス例
{"ok":true,"quote":{"id":"DQmtg56zikh","cust":"北斗商事","model":"iPhone 16","qty":100,"term":36,"res":20,"lcm":600,"war":"full","monthly":5000,"mrr":500000,"expires":"2027-03-31","ts":1788114480716,"status":"approved","statusTs":1788114480721,"statusLabel":"承認"},"from":"proposed","totals":{"units":3950,"mrr":18013000,"arr":216156000,"contracts":4,"pipelineUnits":100,"pipelineMrr":500000,"byStatus":{"draft":0,"proposed":0,"approved":1,"contracted":4}}}
エラー
400 — 段跳ばし: {"ok":false,"error":"stage skipped","from":"proposed","to":"contracted","next":"approved"} ｜ 未知の状態: {"ok":false,"error":"unknown status","statuses":["draft","proposed","approved","contracted"]} ｜ 条件未充足: {"ok":false,"error":"customer and expiry required","missing":["cust","expires"],"needs":["顧客","有効期限"]} ｜ 期限切れ: {"ok":false,"error":"quote expired","expires":"2026-03-31"}
404 — {"ok":false,"error":"quote not found"}
POST/api/daas/quote/:id/delete公開
Remove one quote from the portfolio.
パラメータ位置型必須説明
idpathstring○Quote id, e.g. 'DQ-DEMO1'.
レスポンス例
{"ok":true,"id":"DQmtc03hi5b"}
POST/api/daas/sim公開
Save the simulator preferences (model, qty, term, residual, LCM, warranty, customer) for this workspace.
リクエスト
{"qty":100,"term":36}
レスポンス例
{"ok":true,"sim":{"model":"","qty":100,"term":36,"res":0,"lcm":0,"war":"none","cust":""}}
POST/api/daas/send公開
Append one proposal send-history entry (newest first, capped at 50).
リクエスト
{"cust":"北斗商事","doc":"提案書"}
レスポンス例
{"ok":true,"send":{"ts":1787863957369,"cust":"北斗商事","channel":"","to":"","model":"","qty":0,"mrr":0}}

付帯品受注 (Store)

付帯品カタログと受注。

GET/api/store/catalog公開
Accessory catalog: the built-in reference master concatenated with this workspace’s custom products, plus the category list.
レスポンス例
{"ok":true,"catalog":[{"id":"p-rug","name":"耐衝撃ケース（現場用）","cat":"ケース","ic":"🛡","price":2800,"cost":1180,"note":"現場向け"},{"id":"p-case","name":"TPUクリアケース","cat":"ケース","ic":"📱","price":1200,"cost":420},…],"cats":[…]}
GET/api/store/orders公開
This workspace’s accessory order history with its count.
レスポンス例
{"ok":true,"orders":[{"id":"AO-202608-8220","date":"2026-08-27T20:53:36.583Z","dateStr":"2026/8/28","cust":"北斗商事","job":"KIT-2026-311","dest":"本社 情シス部","count":40,"total":48000,"gp":34400,"lines":[{"id":"p-glass","name":"保護ガラス（9H）","price":1200,"cost":340,"qty":40}],"status":"確定"}],"count":1}
POST/api/store/order公開
Create an accessory order. count, total and gp are computed server-side from the line items.
リクエスト
{"cust":"北斗商事","job":"KIT-2026-311","dest":"本社 情シス部","lines":[{"id":"p-glass","name":"保護ガラス（9H）","price":1200,"cost":340,"qty":40}]}
レスポンス例
{"ok":true,"order":{"id":"AO-202608-8220","date":"2026-08-27T20:53:36.583Z","dateStr":"2026/8/28","cust":"北斗商事","job":"KIT-2026-311","dest":"本社 情シス部","count":40,"total":48000,"gp":34400,"lines":[{"id":"p-glass","name":"保護ガラス（9H）","price":1200,"cost":340,"qty":40}],"status":"確定"}}
POST/api/store/order/:id公開
Update status / cust / job / dest on one order. Line items and the computed totals are not changed here.
パラメータ位置型必須説明
idpathstring○Order id, e.g. 'AO-202608-8220'.
リクエスト
{"status":"出荷済"}
レスポンス例
{"ok":true,"order":{"id":"AO-202608-8220","date":"2026-08-27T20:53:36.583Z","dateStr":"2026/8/28","cust":"北斗商事","job":"KIT-2026-311","dest":"本社 情シス部","count":40,"total":48000,"gp":34400,"lines":[{"id":"p-glass","name":"保護ガラス（9H）","price":1200,"cost":340,"qty":40}],"status":"出荷済"}}
POST/api/store/order/:id/delete公開
Delete one accessory order.
パラメータ位置型必須説明
idpathstring○Order id, e.g. 'AO-202608-8220'.
レスポンス例
{"ok":true,"id":"AO-202608-8220"}
POST/api/store/product公開
Add a workspace-custom catalog product (custom:true), which then appears in GET /api/store/catalog after the reference master.
リクエスト
{"name":"USB-Cハブ","cat":"電源","price":3800,"cost":1500}
レスポンス例
{"ok":true,"product":{"id":"p-mtc01eh52","name":"USB-Cハブ","cat":"電源","ic":"📦","price":3800,"cost":1500,"custom":true}}

買取・リファービッシュ (Trade-in)

買取査定・リファービッシュ在庫・買取証書。

GET/api/tradein公開
Trade-in state for this workspace: the buyback ledger, refurbished-stock inventory and buyback receipts.
レスポンス例
{"ok":true,"buybacks":[{"id":"BB-DEMO01","date":"2026-07-04","model":"iPhone 15","cust":"北斗商事","grade":"A","bat":92,"offer":56400,"resell":76100,"margin":17200,"residual":0.5},…],"inventory":[…],"receipts":[…]}
POST/api/tradein/buyback公開
Create or update a buyback record (margin and residual are computed server-side).
リクエスト
{"model":"iPhone 15","cust":"北斗商事","grade":"A","bat":92,"offer":56400,"resell":76100}
レスポンス例
{"ok":true,"buyback":{"id":"BB-mtc01ehu4","date":"2026-08-27","model":"iPhone 15","cust":"北斗商事","grade":"A","bat":92,"offer":56400,"resell":76100,"margin":0,"residual":0}}
POST/api/tradein/buyback/:id/delete公開
Delete one buyback record.
パラメータ位置型必須説明
idpathstring○Buyback id, e.g. 'BB-DEMO01'.
レスポンス例
{"ok":true,"id":"BB-mtc03hed8"}
POST/api/tradein/inventory公開
Create or update one refurbished stock item.
リクエスト
{"model":"iPhone 14","grade":"B"}
レスポンス例
{"ok":true,"stock":{"id":"RF-mtc02o5r7","model":"iPhone 14","grade":"B","cost":0,"ask":0,"margin":0}}
POST/api/tradein/inventory/:id/delete公開
Delete one refurbished stock item.
パラメータ位置型必須説明
idpathstring○Stock id, e.g. 'RF-mtc02o5r7'.
レスポンス例
{"ok":true,"id":"RF-mtc03hf99"}
POST/api/tradein/receipt公開
Create or update a buyback receipt, keyed by its receipt number (no).
リクエスト
{"cust":"北斗商事"}
レスポンス例
{"ok":true,"receipt":{"no":"KIT-BUY-2026-0001","date":"2026-08-27","dateJa":"2026/8/28","cust":"北斗商事","person":"","items":[],"total":0,"ts":1787864016602}}
POST/api/tradein/receipt/:id/delete公開
Delete one buyback receipt by its receipt number.
パラメータ位置型必須説明
idpathstring○Receipt number, e.g. 'KIT-BUY-2026-0001'.
レスポンス例
{"ok":true,"id":"KIT-BUY-2026-0001"}

サポート送付・ウィジェット (Support)

資料送付履歴とサポートウィジェット設定。

GET/api/support/widget公開
Support-widget configuration for this workspace, with the built-in defaults merged in.
レスポンス例
{"ok":true,"widget":{"primaryColor":"#2cc5e8","title":"サポート","launcherText":"お困りですか？","position":"bottom-right","allowAttach":true,"allowVoice":true}}
POST/api/support/widget公開
Merge-update the support-widget configuration; the client sends only the keys it changed.
リクエスト
{"title":"サポート窓口"}
レスポンス例
{"ok":true,"widget":{"primaryColor":"#2cc5e8","title":"サポート窓口","launcherText":"お困りですか？","position":"bottom-right","allowAttach":true,"allowVoice":true}}
GET/api/support/sends公開
Document send history, oldest first (matching the client log order).
レスポンス例
{"ok":true,"sends":[]}
POST/api/support/send公開
Record one document send (doc + recipient required; channel defaults to メール).
リクエスト
{"doc":"見積書","to":"info@example.com"}
レスポンス例
{"ok":true,"send":{"id":"snd-mtc01ehe3","doc":"見積書","to":"info@example.com","channel":"メール","msg":"","at":1787863957394}}
POST/api/support/send/:id/delete公開
Delete one send-history record.
パラメータ位置型必須説明
idpathstring○Send record id, e.g. 'snd-mtc01ehe3'.
レスポンス例
{"ok":true}

月次レポート (Report)

顧客別・月次のレポート生成と保存。

GET/api/reports公開
List saved reports for this workspace, newest first, with the count.
レスポンス例
{"ok":true,"reports":[],"count":0}
GET/api/report/generate公開
Compute a report preview from this workspace’s own records WITHOUT persisting it. hasData is false when nothing in the period could be computed.
パラメータ位置型必須説明
custquerystring—Customer name to scope the report to. Omit for 全顧客.
monthquerystring—Target month as YYMM, e.g. '2608'. Defaults to the current month.
レスポンス例
{"ok":true,"report":{"id":"RPT-2608-all","cust":"","custLabel":"全顧客","month":"2608","monthLabel":"2026年8月度","hasData":false,"figures":{"dev":178,"kit":0,"swap":0,"tk":0,"slaPct":null,"sla":"—","lost":0,"wipe":0,"inb":0,"out":0,"store":178,"revenue":0,"wipeCerts":27},"scope":{"kit":"month","swap":"month","tk":"month","slaPct":"month","sla":"month","lost":"month","wipe":"month","inb":"month","out":"month","revenue":"month","dev":"current","store":"current","wipeCerts":"current"},"asOf":1787863913867,"undated":{"jobs":0,"tickets":0,"shipments":0},"generatedAt":1787863913867},"hasData":false}
POST/api/report/generate公開
Compute AND persist a report; the saved record is keyed RPT-<YYMM>-<cust|all> so regenerating the same period overwrites it.
リクエスト
{"cust":"北斗商事","month":"2608"}
レスポンス例
{"ok":true,"report":{"id":"RPT-2608-all","cust":"","custLabel":"全顧客","month":"2608","monthLabel":"2026年8月度","hasData":false,"figures":{…},"scope":{…},"asOf":1787863942144,"undated":{"jobs":0,"tickets":0,"shipments":0},"generatedAt":1787863942144},"hasData":false}
GET/api/report/:id公開
Fetch one saved report by id.
パラメータ位置型必須説明
idpathstring○Report id, e.g. 'RPT-2608-all'. 404 {ok:false,error:'report not found'} if unknown.
レスポンス例
{"ok":true,"report":{"id":"RPT-2608-all","cust":"","custLabel":"全顧客","month":"2608","monthLabel":"2026年8月度","hasData":false,"figures":{…},"scope":{…},"asOf":1787863942144,"undated":{"jobs":0,"tickets":0,"shipments":0},"generatedAt":1787863942144}}

受入AI (Intake/Vision)

端末受入の画像認識・訂正記録・実測精度・AI利用量。

POST/api/intake/recognize公開
Recognize a device from a photo against an optional catalogue. Answers HTTP 200 with {ok:false,reason,manualEntryRequired:true} when it cannot — never a guessed model. Capped per IP (VISION_MAX / VISION_WINDOW_MS); a capped request is not metered.
リクエスト
{"image":"<base64>","mediaType":"image/png","catalogue":["iPhone 15","iPhone 15 Pro"]}
レスポンス例（captured without ANTHROPIC_API_KEY set）
{"ok":false,"reason":"no_key","manualEntryRequired":true}
POST/api/intake/correction公開
Record what the AI said versus what the operator committed, so recognition accuracy is measured rather than claimed.
リクエスト
{"recognized":"iPhone 15","corrected":"iPhone 15 Pro","confidence":0.82,"imei":"356247446539346"}
レスポンス例
{"ok":true,"correction":{"id":"cor-mtc01t7c6","recognized":"iPhone 15","corrected":"iPhone 15 Pro","wrong":true,"confidence":0.82,"imei":"356247446539346","at":1787863976472}}
GET/api/intake/accuracy公開
Measured recognition accuracy computed from the correction records: sample count, wrong count, accuracy (null with no samples), the average confidence the model reported when it was wrong, and manual-entry count.
レスポンス例
{"ok":true,"samples":0,"wrong":0,"accuracy":null,"avgConfidenceWhenWrong":null,"manualEntries":0}
GET/api/ai/usage公開
AI usage counters (vision / search calls and their success rate) that the AI add-ons are billed from.
レスポンス例
{"ok":true,"usage":{}}

為替レート (FX)

外部ソースから取得した USD/JPY レート。

GET/api/fx公開
Current USD/JPY rate with its source, fetch time, next scheduled refresh and a stale flag. Cached for 5 minutes.
レスポンス例
{"ok":true,"base":"JPY","quote":"USD","rate":0.006274549173641874,"usdJpy":159.37,"updatedAt":"2026-08-27T20:51:03.268Z","nextUpdateAt":"2026-08-27T21:00:00.000Z","refreshesPerDay":4,"source":"yahoo (USDJPY=X, intraday)","stale":false}
POST/api/fx/refresh公開
Force a re-fetch from the upstream rate source and return the same payload as GET /api/fx. A failed fetch is swallowed and the previous rate is returned with stale reflected.
レスポンス例
{"ok":true,"base":"JPY","quote":"USD","rate":0.006274431065963093,"usdJpy":159.38,"updatedAt":"2026-08-27T20:52:37.557Z","nextUpdateAt":"2026-08-27T21:00:00.000Z","refreshesPerDay":4,"source":"yahoo (USDJPY=X, intraday)","stale":false}

管理者 (Admin)

主管理者認証・テナント管理・サブ管理者CRUD。要adminトークン

POST/api/admin/login公開
Master-admin login; returns an 8h HMAC-signed bearer token when the password matches ADMIN_PASSWORD.
パラメータ位置型必須説明
passwordbodystring○Master admin password (env ADMIN_PASSWORD, default 'kitting-admin')
リクエスト
{"password":"kitting-admin"}
レスポンス例
{"ok":true,"token":"<body>.<sig>"} | 401 {"ok":false,"error":"パスワードが違います"}
GET/api/admin/tenantsadminlive 401
List all tenants plus aggregate stats (totals, active/trial/suspended counts, MRR, devices, seats, sites, clients).
パラメータ位置型必須説明
tokenquerystringAdmin token (alternative to Authorization: Bearer header)
レスポンス例
{"ok":true,"tenants":[{"id":"t-itabashi","name":"板橋キッティングセンター","plan":"Business","seats":180,"used":120,"status":"active","mrr":582000,"devices":1204,"clients":[...],"features":{...}}],"stats":{"total":5,"active":3,"trial":1,"suspended":1,"mrr":2487000,...},"origin":"https://..."}
GET/api/admin/tenant/:idadminlive 401
Get one tenant with derived client dashboard URLs and published-site URLs.
パラメータ位置型必須説明
idpathstring○Tenant id, e.g. t-itabashi
tokenquerystringAdmin token (alt to Bearer header)
レスポンス例
{"ok":true,"tenant":{...},"dashboards":[{"client":"北斗商事","url":".../portal.html?t=..."}],"published":[{"slug":"itabashi-kitting","url":".../site/itabashi-kitting","live":true}],"origin":"https://..."}
POST/api/admin/tenant/:idadmin
Update an existing tenant's editable fields (name, plan, seats, used, status, email, devices, mrr, features, clients).
パラメータ位置型必須説明
idpathstring○Tenant id to update
namebodystringTenant display name
planbodystringStarter|Business|Enterprise
seatsbodynumberLicensed seats
usedbodynumberSeats used
statusbodystringactive|trial|suspended
emailbodystringContact email
devicesbodynumberManaged device count
mrrbodynumberMonthly recurring revenue
featuresbodyobjectFeature-flag object merged into existing
clientsbodyarrayClient name array (capped at 200)
リクエスト
{"plan":"Enterprise","seats":300,"status":"active","features":{"daas":true}}
レスポンス例
{"ok":true,"tenant":{...updated...}}
POST/api/admin/tenantadmin
Create a new tenant (auto-generated id 't-<slug>-<hex>'), defaults to Starter/trial with base feature flags.
パラメータ位置型必須説明
namebodystringTenant name (default '新規テナント', 80-char cap)
planbodystringPlan (default Starter)
seatsbodynumberSeats (default 3)
emailbodystringContact email
リクエスト
{"name":"新規センター","plan":"Business","seats":50,"email":"x@example.jp"}
レスポンス例
{"ok":true,"tenant":{"id":"t-...-a1b2","status":"trial","used":0,"mrr":0,"features":{...}}}
POST/api/admin/tenant/:id/deleteadmin
Delete a tenant from the store and persist.
パラメータ位置型必須説明
idpathstring○Tenant id to delete
レスポンス例
{"ok":true}
POST/api/admin/tenant/:id/clientadmin
Add a client name to a tenant and return that client's portal dashboard URL.
パラメータ位置型必須説明
idpathstring○Tenant id
clientbodystring○Client name (80-char cap; 400 if empty)
リクエスト
{"client":"新規クライアント"}
レスポンス例
{"ok":true,"url":".../portal.html?t=%E6%96%B0%E8%A6%8F..."}
POST/api/admin/tenant/:id/client/revokeadmin
顧客ポータルのアクセストークンを失効させる。以後、その顧客に発行済みの /portal.html?t=… は全て無効になり、再発行が必要。
パラメータ位置型必須説明
idpathstring○テナントID
リクエスト
{"client":"北斗商事"}
レスポンス例
{"ok":true,"client":"北斗商事","revocations":1}
エラー
400 — {"ok":false,"error":"client name required"} — client が未指定
401 — {"ok":false,"error":"unauthorized"} — 管理者トークンがありません
404 — {"ok":false,"error":"not found"} — テナントが存在しない
POST/api/admin/impersonate/:idadmin
Return an assist-mode ('admin_as') app URL for the given tenant (app shows a disclaimer banner).
パラメータ位置型必須説明
idpathstring○Tenant id to impersonate
レスポンス例
{"ok":true,"url":".../app?admin_as=%E6%9D%BF%E6%A9%8B..."}
GET/api/admin/subadminsadminlive 401
List all sub-admins (public-safe fields, no passwords) plus a compact {id,name} tenant list for assignment.
パラメータ位置型必須説明
tokenquerystringAdmin token (alt to Bearer header)
レスポンス例
{"ok":true,"subadmins":[{"id":"sa-demo","name":"サポート担当 桐生","email":"kiryu@ai-sns.io","tenants":["t-itabashi","t-nagoya"],"perms":{"canDelete":true},"active":true,"created":"2026-06-01"}],"tenants":[{"id":"t-itabashi","name":"板橋キッティングセンター"}]}
POST/api/admin/subadminadmin
Create a sub-admin; validates required name/email and unique email, auto-generates a password if none supplied.
パラメータ位置型必須説明
namebodystring○Sub-admin name (80-char cap)
emailbodystring○Unique email
passwordbodystringLogin password (random hex if omitted)
tenantsbodyarrayAssigned tenant ids (cap 200)
canDeletebodybooleanGrant delete permission
リクエスト
{"name":"新担当","email":"new@ai-sns.io","tenants":["t-osaka"],"canDelete":false}
レスポンス例
{"ok":true,"subadmin":{...},"password":"<pass>"}
POST/api/admin/subadmin/:idadmin
Update a sub-admin's name, email, password, assigned tenants, canDelete perm, or active flag.
パラメータ位置型必須説明
idpathstring○Sub-admin id
namebodystringNew name
emailbodystringNew email
passwordbodystringNew password
tenantsbodyarrayReassign tenant ids
canDeletebodybooleanToggle delete perm
activebodybooleanEnable/disable account
リクエスト
{"active":false,"canDelete":true}
レスポンス例
{"ok":true,"subadmin":{...updated...}}
POST/api/admin/subadmin/:id/deleteadmin
Delete a sub-admin and persist.
パラメータ位置型必須説明
idpathstring○Sub-admin id to delete
レスポンス例
{"ok":true}
GET/api/admin/backupsadminlive 401
Return the global backup log (up to 120 newest snapshots across all tenants) plus daily-backup status.
パラメータ位置型必須説明
tokenquerystringAdmin token (alt to Bearer header)
レスポンス例
{"ok":true,"log":[{"tenantId":"t-itabashi","tenantName":"板橋キッティングセンター","id":"bk-...","ts":1699999999999,"by":"system","reason":"日次自動バックアップ","sites":1}],"daily":{"last":1699999999999,"tenants":5}}
GET/api/admin/activityadminlive 401
Return the audit/activity log (newest first, up to 200 entries).
パラメータ位置型必須説明
tokenquerystringAdmin token (alt to Bearer header)
レスポンス例
{"ok":true,"activity":[{"ts":1699999999999,"by":"サポート担当 桐生","role":"subadmin","action":"パスワードを変更","tenantId":"","tenantName":"","detail":""}]}
GET/api/admin/workspacesadmin
The real customer list: every signed-up account with the plan actually enforced (planKey/planStatus/planSource + limits), the plan catalog, and the OPERATOR_TENANT configuration state.
レスポンス例
{"ok":true,"workspaces":[{"email":"demo.user@example.com","company":"北斗商事","name":"山田 太郎","tenantId":"t-…","created":"2026-08-27T20:52:56.379Z","lastLogin":"2026-08-27T20:53:22.052Z","planKey":"starter","planStatus":"none","planSource":"default","limits":{"devices":100,"members":3,"customers":10}}],"plans":[{"key":"starter","name":"Starter","priceJpy":128000,"limits":{"devices":100,"members":3,"customers":10}},{"key":"business","name":"Business","priceJpy":388000,"limits":{"devices":300,"members":10,"customers":30}},{"key":"enterprise","name":"Enterprise","priceJpy":908000,"limits":{"devices":null,"members":null,"customers":null}}],"operatorTenant":{"configured":false,"value":null,"resolves":false,"affects":["/d/<slug>-<suffix>/<last6> の端末ステータスページ","公開フォームからのリード/予約の帰属先"],"note":"OPERATOR_TENANT が未設定です。…"}}
POST/api/admin/workspace/:tid/planadmin
Grant/change the plan a workspace actually gets — the override for customers billed by invoice rather than Stripe self-serve. Writes an activity-log entry and returns the before/after plan.
パラメータ位置型必須説明
tidpathstring○Workspace (tenant) id from GET /api/admin/workspaces. 400 for a malformed id, 404 {ok:false,error:'no such workspace'} when no account owns it.
リクエスト
{"planKey":"business","status":"active","reason":"invoice-billed"}
レスポンス例
{"ok":true,"tenantId":"t-…","planKey":"business","status":"active","previous":"starter","limits":{"devices":300,"members":10,"customers":30}}
POST/api/admin/workspace/:tid/impersonateadmin
Assist mode: mint a SHORT-LIVED session for the account that owns the workspace and return a /app?admin_as=… link. It grants exactly the customer’s own permissions (never more, never another tenant) and ends as soon as that customer changes their password. Logged as assist-start.
パラメータ位置型必須説明
tidpathstring○Workspace (tenant) id from GET /api/admin/workspaces.
レスポンス例
{"ok":true,"url":"https://kit-agent.ai-sns.io/app?admin_as=%E5%8C%97%E6%96%97%E5%95%86%E4%BA%8B&assist=<token>","expiresAt":1787865802201}
GET/api/admin/accountsadmin
List every end-user account (email, company, name, tenantId, created, lastLogin). No password material is returned.
レスポンス例
{"ok":true,"accounts":[]}
POST/api/admin/account/:email/deleteadmin
Delete one end-user account. The workspace data blob itself is left intact (recoverable); the tenant stops being gated only when no other account still owns it.
パラメータ位置型必須説明
emailpathstring○URL-encoded account email, e.g. 'demo.user%40example.com'.
レスポンス例（404 case captured; the 200 body is {ok:true,removed:{email,tenantId}}）
{"ok":false,"error":"account not found"}
GET/api/admin/configadmin
Full global site config including the security toggles, plus meta (updatedAt/updatedBy) and the shipped defaults.
レスポンス例
{"ok":true,"config":{"maintenanceMode":false,"maintenanceMessage":"ただいまメンテナンス中です。しばらくしてから再度お試しください。","registrationOpen":true,"announcementEnabled":false,"announcementText":"","announcementLevel":"info","demoEnabled":true,"signinEnabled":true,"chatBubbleEnabled":true,"primaryCtaLabel":"","secEnabled":true,"secIpGuard":true,"secIpBlocklist":"","secLoginThrottle":true,"secMaxAttempts":8,"secGenericErrors":true,"secValidityCap":30,"secRequirePII":false,"sec2FA":false,"secLoginNotify":false,"secDeviceCheck":false,"secBehavioral":false,"sec3DS":false,"secNoLogin":false},"meta":{"updatedAt":null,"updatedBy":null},"defaults":{…}}
PUT/api/admin/configadmin
Patch the global site config. Accepts either {config:{…}} or a bare patch object; only known keys are applied and meta records the change as 'admin'.
リクエスト
{"config":{"announcementEnabled":true,"announcementText":"9/1 メンテナンス"}}
レスポンス例
{"ok":true,"config":{"maintenanceMode":false,"registrationOpen":true,"announcementEnabled":true,"announcementText":"9/1 メンテナンス","announcementLevel":"info","demoEnabled":true,"signinEnabled":true,"chatBubbleEnabled":true,"primaryCtaLabel":"","secEnabled":true,…},"meta":{"updatedAt":null,"updatedBy":null}}
GET/api/admin/delete-requestsadmin
Pending sub-admin delete approvals with their access codes — the out-of-band channel that makes a destructive delete need a second human. Expired requests are dropped on read.
レスポンス例
{"ok":true,"requests":[]}
GET/api/admin/security/eventsadmin
The 200 most recent security countermeasure events (sign-up, auth failures, blocks, MFA challenges).
レスポンス例
{"ok":true,"events":[]}

サブ管理者 (Sub-Admin)

担当クライアント限定の運用（メモ・ファイル・削除）。要subadminトークン

POST/api/subadmin/login公開
Sub-admin login; matches email+password against the subadmins map and issues an 8h HMAC token.
パラメータ位置型必須説明
emailbodystring○Sub-admin email, lowercased/trimmed before match (seed: kiryu@ai-sns.io)
passwordbodystring○Plaintext password; seed default 'kitting-sub' (or SUBADMIN_PASSWORD env)
リクエスト
{"email":"kiryu@ai-sns.io","password":"kitting-sub"}
レスポンス例
{"ok":true,"token":"<b64>.<sig>","sub":{"id":"sa-demo","name":"サポート担当 桐生","email":"kiryu@ai-sns.io","tenants":["t-itabashi","t-nagoya"],"perms":{"canDelete":true},"active":true,"created":"2026-06-01"}}
GET/api/subadmin/mesubadminlive 401
Returns the authenticated sub-admin profile, their in-scope tenants, and aggregate stats.
パラメータ位置型必須説明
tokenquerystringAlternative to Authorization: Bearer header
レスポンス例
{"ok":true,"sub":{...},"tenants":[{"id":"t-itabashi",...}],"stats":{"tenants":2,"devices":1414,"clients":5,"sites":1},"origin":"https://kit-agent.ai-sns.io"}
GET/api/subadmin/tenant/:idsubadminlive 401
Scoped read of one tenant plus derived dashboards, published sites, backups, and the sub-admin's perms.
パラメータ位置型必須説明
idpathstring○Tenant id, must be in sub-admin scope (seed: t-itabashi, t-nagoya)
tokenquerystringAlternative to Bearer header
レスポンス例
{"ok":true,"tenant":{"id":"t-itabashi","clients":["北斗商事",...],"sites":["itabashi-kitting"]},"dashboards":[{"client":"北斗商事","url":".../portal.html?t=..."}],"published":[{"slug":"itabashi-kitting","url":".../site/itabashi-kitting","live":true}],"backups":[],"perms":{"canDelete":true},"origin":"..."}
POST/api/subadmin/tenant/:idsubadmin
Scoped non-core tenant edit; only the contact email can be changed, main settings are blocked.
パラメータ位置型必須説明
idpathstring○Tenant id, must be in scope
emailbodystringNew contact email (max 120 chars)
plan/seats/mrr/status/featuresbodyanyIf any present -> 403; sub-admins may not change core settings
リクエスト
{"email":"new@example.co.jp"}
レスポンス例
{"ok":true,"tenant":{"id":"t-itabashi","email":"new@example.co.jp",...}}
POST/api/subadmin/tenant/:id/clientsubadmin
Adds a client name to a scoped tenant and returns its portal URL.
パラメータ位置型必須説明
idpathstring○Tenant id, must be in scope
clientbodystring○Client name (max 80 chars); 400 if empty
リクエスト
{"client":"新規クライアント"}
レスポンス例
{"ok":true,"url":"https://kit-agent.ai-sns.io/portal.html?t=%E6%96%B0%E8%A6%8F..."}
POST/api/subadmin/impersonate/:idsubadmin
Generates an assisted-login URL into the client app for a scoped tenant (support impersonation).
パラメータ位置型必須説明
idpathstring○Tenant id, must be in scope
レスポンス例
{"ok":true,"url":"https://kit-agent.ai-sns.io/app?admin_as=%E6%9D%BF%E6%A9%8B...&by=subadmin"}
POST/api/subadmin/delete-requestsubadmin
Requests deletion of a client/site/tenant; generates a 6-digit access code (10-min expiry) gated by canDelete perm.
パラメータ位置型必須説明
tenantIdbodystring○Tenant id, must be in scope
targetTypebodystring'client'|'site'|'tenant', defaults to 'client'
targetIdbodystringId/name of the thing to delete (max 120)
リクエスト
{"tenantId":"t-itabashi","targetType":"client","targetId":"北斗商事"}
レスポンス例
{"ok":true,"requestId":"dr-<hex>","sentTo":["itabashi@example.co.jp","マスター管理者"],"expiresInMin":10,"demoCode":"123456"}
POST/api/subadmin/delete-confirmsubadmin
Confirms a delete request with the emailed access code and performs the scoped delete after auto-backup.
パラメータ位置型必須説明
requestIdbodystring○Id from delete-request; must belong to this sub-admin
codebodystring○6-digit access code
リクエスト
{"requestId":"dr-<hex>","code":"123456"}
レスポンス例
{"ok":true,"targetType":"client"}
GET/api/subadmin/activitysubadminlive 401
Returns up to 150 recent activity-log entries filtered to the sub-admin's own actions or in-scope tenants.
パラメータ位置型必須説明
tokenquerystringAlternative to Bearer header
レスポンス例
{"ok":true,"activity":[{"ts":1700000000000,"by":"サポート担当 桐生","role":"subadmin","action":"サポートメモを追加","tenantId":"t-itabashi","tenantName":"板橋キッティングセンター","detail":"..."}]}
GET/api/subadmin/backups-allsubadminlive 401
Aggregated backup log across all of the sub-admin's tenants, newest first, capped at 120 rows.
パラメータ位置型必須説明
tokenquerystringAlternative to Bearer header
レスポンス例
{"ok":true,"log":[{"tenantId":"t-itabashi","tenantName":"板橋キッティングセンター","id":"bk-...","ts":1700000000000,"reason":"...","by":"..."}]}
POST/api/subadmin/passwordsubadmin
Self-service password change for the authenticated sub-admin.
パラメータ位置型必須説明
currentbodystring○Current password; 401 if wrong (plaintext compare)
nextbodystring○New password, min 6 chars else 400
リクエスト
{"current":"kitting-sub","next":"newpass123"}
レスポンス例
{"ok":true}
GET/api/notes/:tenantIdsubadminlive 401
Lists support notes for a tenant (admin any tenant, sub-admin scoped).
パラメータ位置型必須説明
tenantIdpathstring○Tenant id; sub-admin must have it in scope (seed: t-itabashi)
tokenquerystringAlternative to Bearer header
レスポンス例
{"ok":true,"notes":[{"id":"nt-...","ts":1700000000000,"by":"サポート担当 桐生","text":"...","done":false}]}
POST/api/notes/:tenantIdsubadmin
Adds a support note (max 600 chars) to a tenant's note list.
パラメータ位置型必須説明
tenantIdpathstring○Tenant id, scoped for sub-admin
textbodystring○Note text, trimmed, max 600; 400 if empty
リクエスト
{"text":"クライアントへ連絡済み"}
レスポンス例
{"ok":true,"note":{"id":"nt-...","ts":1700000000000,"by":"サポート担当 桐生","text":"...","done":false}}
POST/api/notes/:tenantId/:noteIdsubadmin
Updates (text/done) or deletes a specific support note.
パラメータ位置型必須説明
tenantIdpathstring○Tenant id, scoped
noteIdpathstring○Note id (nt-...)
delbodybooleanIf truthy, delete the note and return {ok:true}
donebodybooleanToggle done flag
textbodystringNew text (max 600)
リクエスト
{"done":true}
レスポンス例
{"ok":true,"note":{"id":"nt-...","done":true,"text":"..."}}
GET/api/files/:tenantIdsubadminlive 401
Lists uploaded file metadata (no data blob) for a tenant.
パラメータ位置型必須説明
tenantIdpathstring○Tenant id, scoped (seed: t-itabashi)
tokenquerystringAlternative to Bearer header
レスポンス例
{"ok":true,"files":[{"id":"fl-...","ts":1700000000000,"by":"サポート担当 桐生","name":"手順書.pdf","type":"application/pdf","size":10240}]}
POST/api/files/:tenantIdsubadmin
Uploads a base64 file/document (up to ~2MB) attached to a tenant.
パラメータ位置型必須説明
tenantIdpathstring○Tenant id, scoped
namebodystringFile name (max 160), defaults 'file'
typebodystringMIME type (max 80)
databodystring○Base64/data payload; 400 if empty, 413 if >2,800,000 chars
sizebodynumberReported size; defaults to data.length
リクエスト
{"name":"doc.pdf","type":"application/pdf","data":"<base64>"}
レスポンス例
{"ok":true,"file":{"id":"fl-...","ts":1700000000000,"by":"...","name":"doc.pdf","type":"application/pdf","size":12345}}
GET/api/files/:tenantId/:fileId/downloadsubadminlive 401
Returns a single file's full base64 data for download.
パラメータ位置型必須説明
tenantIdpathstring○Tenant id, scoped
fileIdpathstring○File id (fl-...); 404 if not found
tokenquerystringAlternative to Bearer header
レスポンス例
{"ok":true,"name":"doc.pdf","type":"application/pdf","data":"<base64>"}
POST/api/files/:tenantId/:fileId/deletesubadmin
Deletes an uploaded file from a tenant's file list.
パラメータ位置型必須説明
tenantIdpathstring○Tenant id, scoped
fileIdpathstring○File id to remove
レスポンス例
{"ok":true}
POST/api/subadmin/workspace/:tid/impersonatesubadmin
Assist mode for a sub-admin, restricted to the tenants assigned to them. It grants the customer’s own permissions only — plan/seats/mrr/status/features stay out of reach. Logged as assist-start.
パラメータ位置型必須説明
tidpathstring○Workspace (tenant) id that must be in this sub-admin’s assigned scope.

バックアップ (Backup/Export)

日次バックアップ・状態エクスポート。要BACKUP_TOKEN

GET/api/admin/backupsadminlive 401
Master-admin global backup log (last 120 snapshot rows across all tenants) plus daily auto-backup status.
パラメータ位置型必須説明
tokenquerystringAdmin JWT; alternatively sent as Authorization: Bearer <token>. Required.
レスポンス例
{"ok":true,"log":[{"tenantId":"t-itabashi","tenantName":"板橋キッティングセンター","id":"bk-...","ts":1784600000000,"by":"system","reason":"日次自動バックアップ","sites":1}],"daily":{"last":1784600000000,"tenants":5}}
GET/api/backups/:tenantIdadminlive 401
List backup snapshot metadata for one tenant (newest first), for admin or the scoped sub-admin.
パラメータ位置型必須説明
tenantIdpathstring○Tenant id, e.g. t-itabashi (seed tenants: t-itabashi, t-osaka, t-nagoya, t-fukuoka, t-sapporo).
tokenquerystringAdmin or sub-admin JWT; also accepted as Authorization: Bearer. Required.
レスポンス例
{"ok":true,"backups":[{"id":"bk-lz...","ts":1784600000000,"by":"system","reason":"日次自動バックアップ","sites":1}]}
GET/api/subadmin/backups-allsubadminlive 401
Scope-wide backup log for the logged-in sub-admin: last 120 snapshot rows across only their assigned tenants.
パラメータ位置型必須説明
tokenquerystringSub-admin JWT (role==='subadmin'); also accepted as Authorization: Bearer. Required.
レスポンス例
{"ok":true,"log":[{"tenantId":"t-nagoya","tenantName":"名古屋モバイル管理","id":"bk-...","ts":1784600000000,"by":"system","reason":"日次自動バックアップ","sites":0}]}
GET/api/export/statetokenlive 200
Full runtime-data dump (all tenants/sites/subadmins/backups/leads/signs/bookings/etc. + counts) for automated off-site backups.
パラメータ位置型必須説明
tokenquerystringBackup token; must equal env BACKUP_TOKEN (default 'kitting-backup-token'). Alternatively header x-backup-token. Required (one of the two).
レスポンス例
{"ok":true,"exportedAt":1784675572317,"space":"Aisnsio/kitting","tenants":{"t-itabashi":{...}},"sites":{...},"backups":{...},"counts":{"tenants":5,"backups":5,...}}
POST/api/backup/:tenantIdadmin
Create an on-demand snapshot of one tenant (deep-copies tenant record + its sites) with an optional reason label.
パラメータ位置型必須説明
tenantIdpathstring○Tenant id to snapshot, e.g. t-itabashi.
tokenquerystringAdmin or scoped sub-admin JWT (or Authorization: Bearer). Required.
reasonbodystringBackup reason/label, sliced to 120 chars; defaults to '手動バックアップ'.
リクエスト
{"reason":"設定変更前の手動バックアップ"}
レスポンス例
{"ok":true,"backup":{"id":"bk-lz9x...","ts":1784675000000,"by":"マスター管理者","reason":"手動バックアップ","sites":1}}
POST/api/restore/:tenantId/:backupIdadmin
Rollback: restore a tenant (and its sites) from a stored snapshot; auto-snapshots current state first for recoverability.
パラメータ位置型必須説明
tenantIdpathstring○Tenant id to roll back, e.g. t-itabashi.
backupIdpathstring○Snapshot id to restore, e.g. bk-lz9x2a (obtained from GET /api/backups/:tenantId).
tokenquerystringAdmin or scoped sub-admin JWT (or Authorization: Bearer). Required.
レスポンス例
{"ok":true,"tenant":{"id":"t-itabashi","name":"板橋キッティングセンター","plan":"Business","sites":["itabashi-kitting"],...}}

公開フォーム・OAuth・その他 (Misc)

申込/パートナー/予約/署名/CRM・OAuth連携。

POST/api/synthia公開
Synthia AI chat proxy: forwards message+history to Anthropic Claude if ANTHROPIC_API_KEY is set, else returns a fallback flag so the client uses its built-in mock.
パラメータ位置型必須説明
messagebodystring○User message (sliced to 4000 chars)
historybodyarrayPrior turns [{role:'user'|'assistant',content}], last 8 used
リクエスト
{"message":"string","history":[{"role":"user","content":"..."}]}
レスポンス例
{"ok":false,"fallback":true,"reason":"no_key"} | {"ok":true,"text":"...","model":"claude-opus-4-8"}
GET/api/marketprice公開live 200
Live used-device market-price lookup for trade-in/buyback via SerpAPI / Yahoo Shopping / Google CSE; returns reference note if no key configured.
パラメータ位置型必須説明
modelquerystring○Device model keyword (<=80 chars); 400 if missing
condquerystringCondition keyword (<=24 chars)
レスポンス例
{"ok":true,"live":false,"model":"iPhone 13","note":"ライブ相場APIキーが未設定です…"}
GET/api/connect/status要サインインlive 200
Lists all 13 integration providers (MDM/Apple/shipping/accounting/chat) with connected state, configured flag, redirectUri and go-live guide.
レスポンス例
{"ok":true,"origin":"https://kit-agent.ai-sns.io","providers":[{"key":"intune","name":"Microsoft Intune","group":"MDM","authType":"oauth","connected":false,"configured":false,"guide":{...}}]}
GET/api/connect/:provider要サインインlive 200
Starts OAuth: redirects (302) to the provider authorize URL for oauth providers, or returns an HTML popup for credential providers / unset creds.
パラメータ位置型必須説明
providerpathstring○Provider key e.g. intune, freee, moneyforward, lineworks
レスポンス例
HTTP 200 text/html popup, OR 302 redirect to authorize URL, OR 404 text 'unknown provider'
GET/api/connect/:provider/callback公開live 200
OAuth redirect callback: validates state, exchanges the code for tokens against the provider, stores them, and returns an HTML popup that postMessages the opener.
パラメータ位置型必須説明
providerpathstring○Provider key
codequerystringOAuth authorization code
statequerystringCSRF state from the authorize step
errorquerystringProvider error code
レスポンス例
HTTP 200 text/html popup ('接続に失敗しました' on state mismatch / '接続が完了しました' on success)
POST/api/connect/:provider/credentials要サインイン
Saves API-key/token/webhook credentials for a credential-type provider; for webhook providers sends a real test POST to validate.
パラメータ位置型必須説明
providerpathstring○Credential provider key e.g. jamf, teams, sorachi
fieldsbodyobject○Map of field key->value; all provider fields required
リクエスト
{"fields":{"webhook":"https://..."}}
レスポンス例
{"ok":true,"tested":true} | {"ok":false,"error":"...が未入力です"}
POST/api/connect/:provider/disconnect要サインイン
Removes stored tokens/credentials for a provider.
パラメータ位置型必須説明
providerpathstring○Provider key
レスポンス例
{"ok":true}
POST/api/site/publish公開
Publishes a white-label tenant marketing site (slug+HTML) served at /site/<slug>.
パラメータ位置型必須説明
slugbodystring○a-z0-9- slug (<=40); 400 if empty after sanitize
htmlbodystring○Site HTML (<=800000 chars)
namebodystringDisplay name (<=120)
リクエスト
{"slug":"acme","html":"<html>..","name":"Acme"}
レスポンス例
{"ok":true,"slug":"acme","url":"https://.../site/acme"}
GET/api/site/list公開live 200
Lists all published white-label sites with slug, name, updated timestamp and public URL.
レスポンス例
{"ok":true,"sites":[{"slug":"acme","name":"Acme","updated":1780000000000,"url":"https://.../site/acme"}]}
POST/api/site/:slug/unpublish公開
Deletes a published site by slug.
パラメータ位置型必須説明
slugpathstring○Site slug to remove
レスポンス例
{"ok":true}
GET/site/:slug公開
Serves the published tenant site's raw HTML (not an /api path); 404 HTML page if slug unknown.
パラメータ位置型必須説明
slugpathstring○Published site slug
レスポンス例
<!doctype html>...stored site HTML... (or 404 HTML)
POST/api/lead公開
Public lead capture: stores a CRM lead from site widgets/forms.
パラメータ位置型必須説明
namebodystringContact name (<=120)
emailbodystringEmail (<=160)
companybodystringCompany (<=160); at least one of name/email/company required
phonebodystringPhone (<=40)
messagebodystringMessage (<=1500)
sourcebodystringSource tag (<=60), default 'web'
tenantbodystringOwning tenant (<=80)
リクエスト
{"name":"..","email":"..","company":"..","message":".."}
レスポンス例
{"ok":true,"id":"L-xxxx"}
GET/api/leads公開live 200
Returns all CRM leads (newest first).
レスポンス例
{"ok":true,"leads":[{"id":"L-..","name":"QA Test","email":"qa@example.com","source":"signup","status":"new","created":1784675609773}]}
POST/api/lead/:id公開
Updates a lead's status/notes/contact fields.
パラメータ位置型必須説明
idpathstring○Lead id
statusbodystringLead status
notesbodystringNotes (<=3000)
name/company/email/phonebodystringContact fields (<=200)
リクエスト
{"status":"contacted","notes":".."}
レスポンス例
{"ok":true,"lead":{...}} | 404 {"ok":false}
POST/api/lead/:id/delete公開
Deletes a lead by id.
パラメータ位置型必須説明
idpathstring○Lead id
レスポンス例
{"ok":true}
POST/api/sign/create公開
Creates a signable e-signature document (quote/contract) and returns its signing URL.
パラメータ位置型必須説明
titlebodystringDoc title (<=160), default '御見積書'
clientbodystringClient name (<=120)
emailbodystringSigner email (<=160)
amountbodystringAmount label (<=40)
bodyHtmlbodystringDocument body HTML (<=200000)
リクエスト
{"title":"..","client":"..","amount":"..","bodyHtml":".."}
レスポンス例
{"ok":true,"id":"SG-xxxx","url":"https://.../sign.html?id=SG-xxxx"}
GET/api/sign/:id公開live 404
Fetches a signable document (public signing page reads this).
パラメータ位置型必須説明
idpathstring○Document id SG-xxxx
レスポンス例
{"ok":true,"doc":{"id":"SG-..","title":"..","status":"pending",...}} | 404 {"ok":false,"error":"not found"}
POST/api/sign/:id/submit公開
Signs a document: records signer name/signature/timestamp/IP and marks status 'signed'.
パラメータ位置型必須説明
idpathstring○Document id
namebodystring○Signer name (<=120)
agreedbodyboolean○Consent flag; 400 if false/missing
signaturebodystringSignature image data (<=200000)
リクエスト
{"name":"..","agreed":true,"signature":"data:.."}
レスポンス例
{"ok":true,"status":"signed","signedAt":1780000000000}
GET/api/sign/:id/status公開live 404
Returns just the signing status of a document.
パラメータ位置型必須説明
idpathstring○Document id
レスポンス例
{"ok":true,"status":"pending","signedName":"","signedAt":0} | 404 {"ok":false}
GET/api/signs公開live 200
Lists all e-signature documents (metadata, newest first).
レスポンス例
{"ok":true,"signs":[{"id":"SG-..","title":"..","client":"..","status":"pending","created":..}]}
POST/api/booking公開
Public consultation booking; also creates a linked CRM lead with status 'meeting'.
パラメータ位置型必須説明
namebodystringName (<=120)
emailbodystringEmail (<=160); at least one of name/email required
companybodystringCompany (<=160)
phonebodystringPhone (<=40)
whenbodystringRequested time (<=60)
topicbodystringTopic (<=400)
リクエスト
{"name":"..","email":"..","when":"..","topic":".."}
レスポンス例
{"ok":true,"id":"B-xxxx"}
GET/api/bookings公開live 200
Lists all consultation bookings (newest first).
レスポンス例
{"ok":true,"bookings":[{"id":"B-..","name":"..","email":"..","status":"requested","created":..}]}
POST/api/booking/:id公開
Updates a booking's status.
パラメータ位置型必須説明
idpathstring○Booking id
statusbodystringNew status (<=30)
リクエスト
{"status":"confirmed"}
レスポンス例
{"ok":true,"booking":{...}} | 404 {"ok":false}
POST/api/referral公開
Creates or updates a referral code for a referrer and returns the shareable ?ref= URL.
パラメータ位置型必須説明
referrerbodystringReferrer name (<=120), default '紹介者'
codebodystringDesired code (<=24); auto-generated if omitted
リクエスト
{"referrer":"..","code":".."}
レスポンス例
{"ok":true,"code":"abc12","url":"https://.../?ref=abc12"}
GET/api/referrals公開live 200
Lists all referral codes with click/lead counts.
レスポンス例
{"ok":true,"referrals":[{"code":"abc12","referrer":"..","clicks":0,"leads":0,"created":..}]}
POST/api/referral/:code/track公開
Increments the click counter for a referral code.
パラメータ位置型必須説明
codepathstring○Referral code (case-insensitive)
レスポンス例
{"ok":true}
POST/api/signup公開
Self-service trial signup: creates a trial (Starter) tenant and a linked CRM lead, returns the prospect app URL.
パラメータ位置型必須説明
emailbodystring○Email (<=160); 400 if empty
companybodystringCompany (<=80), used as tenant name
namebodystringContact name (<=80)
planbodystringRequested plan label (stored in lead message)
リクエスト
{"email":"..","company":"..","name":".."}
レスポンス例
{"ok":true,"tenant":{"id":"t-..","name":".."},"url":"https://.../app?prospect=.."}
POST/api/partner公開
Partner/agency program application; creates a partner record + referral code + linked lead.
パラメータ位置型必須説明
companybodystring○Company (<=120); 400 if empty
emailbodystring○Email (<=160); 400 if empty
contactbodystringContact name (<=120)
regionbodystringRegion (<=60)
notebodystringNote (<=800)
リクエスト
{"company":"..","email":"..","contact":"..","region":".."}
レスポンス例
{"ok":true,"id":"P-xxxx","code":"acme12","referralUrl":"https://.../?ref=acme12"}
GET/api/partners公開live 200
Lists all partner applications (newest first).
レスポンス例
{"ok":true,"partners":[{"id":"P-..","company":"..","email":"..","tier":"Silver","status":"applied","code":".."}]}
POST/api/partner/:id公開
Updates a partner's status/tier/deals/revenue/note.
パラメータ位置型必須説明
idpathstring○Partner id
status/tier/notebodystringText fields (<=800)
deals/revenuebodynumberNumeric metrics (coerced with +)
リクエスト
{"status":"active","tier":"Gold","deals":3,"revenue":500000}
レスポンス例
{"ok":true,"partner":{...}} | 404 {"ok":false}
POST/api/review公開
Public review/NPS submission (stored unapproved pending moderation).
パラメータ位置型必須説明
commentbodystring○Review text (<=800); 400 if empty
ratingbodynumber1-5 (clamped)
namebodystringName (<=80), default '匿名'
companybodystringCompany (<=120)
npsbodynumber0-10 (clamped), default rating*2
リクエスト
{"rating":5,"comment":"..","name":"..","nps":9}
レスポンス例
{"ok":true}
GET/api/reviews公開live 200
Lists approved reviews with computed average rating, count and NPS score.
レスポンス例
{"ok":true,"reviews":[{"id":"RV-965da4","name":"情シス部長","company":"北斗商事","rating":5,"nps":9,...}],"avg":4.7,"count":3,"nps":..}
GET/api/events公開live 200
Returns the static list of 3 upcoming webinars/events.
レスポンス例
{"ok":true,"events":[{"id":"ev-mdm","title":"30分でわかる：Intune × キッティング自動化","date":"2026-08-05 15:00","seats":100}]}
POST/api/event/:id/register公開
Registers for a webinar; creates a linked CRM lead (source 'webinar').
パラメータ位置型必須説明
idpathstring○Event id (ev-mdm|ev-lcm|ev-ai)
emailbodystring○Email (<=160); 400 if empty
namebodystringName (<=120)
companybodystringCompany (<=160)
リクエスト
{"email":"..","name":"..","company":".."}
レスポンス例
{"ok":true} | 404 {"ok":false} for unknown event
POST/api/ab公開
Records an A/B landing test event (view or convert) for variant a or b.
パラメータ位置型必須説明
variantbodystring'a' or 'b' (default 'a')
eventbodystring'view' or 'convert' (default 'view')
リクエスト
{"variant":"b","event":"convert"}
レスポンス例
{"ok":true}
GET/api/ab公開live 200
Returns current A/B test counters for variants a and b.
レスポンス例
{"ok":true,"stats":{"a":{"view":0,"convert":0},"b":{"view":1,"convert":0}}}
GET/api/export/statetokenlive 401
Full runtime-data dump (all in-memory collections + counts) for automated backups; requires the backup token.
パラメータ位置型必須説明
tokenquerystring○Backup token; alternatively X-Backup-Token header. Must equal BACKUP_TOKEN
レスポンス例
{"ok":false,"error":"unauthorized"} (no token) | {"ok":true,"exportedAt":..,"tenants":{..},"leads":{..},"counts":{..}}
GET/healthz公開live 200
Health check.
レスポンス例
{"status":"ok"}
GET/api/public/status公開
Data source for the embeddable status widget: a published portal’s state, last-touch string and a COUNT of that customer’s devices. Anonymous, CORS-enabled and rate-limited; when the fleet cannot be counted it says so (computed:false + reason) instead of showing a number.
パラメータ位置型必須説明
sitequerystring○Portal slug, e.g. 'hokuto'. 400 {ok:false,error:'site が不正です'} when malformed, 404 when no published portal matches.
レスポンス例
{"ok":true,"site":"hokuto","published":true,"status":"operational","label":"稼働中","devices":{"total":124,"active":124,"computed":true},"lastTouch":"3分前","generated":1787863942136,"total":124,"active":124}
該当するエンドポイントがありません。

機械可読仕様: /openapi.json（OpenAPI 3.0）