Codex 5.3 Refactor Note: Canonical refactor plan: docs/CODEX-5.3-REFACTOR-PLAN.md. This document is retained for historical and implementation context during the refactor.

API Contracts

This file now acts as a pointer to the live API surfaces that matter most in the current worktree.

Current source of truth

• Schema and model truth: prisma/schema.prisma
• Current operational summary: docs/PROJECT_CONTEXT_FULL.md
• Role-specific behavior and access notes: docs/ROLE-FLOW-CHECK-2026-04-26.md

Important live API groups

• Auth: /api/auth/login, /api/auth/logout, /api/auth/me
• Candidates: /api/candidates, /api/candidates/[id]
• Candidate workflow actions:
  • /api/candidates/[id]/hr-screening/complete
  • /api/candidates/[id]/assign-hiring-manager
  • /api/candidates/[id]/manager-review/submit
  • /api/candidates/[id]/escalate-to-smo
  • /api/candidates/[id]/decision
• Public token flows:
  • /api/manager-review-links/[token]
  • /api/candidate-deep-dive/[token]
• Admin/system:
  • /api/access-requests/[id]
  • /api/users
  • /api/settings
  • /api/settings/notification-rules