@bongos/core 1.19.1062 → 1.19.1064

package/clients/bongos-client/index.d.ts

@@ -23,6 +23,7 @@ export interface DeleteSpecialitiesIdDocumentsDocIdResponse { ok: boolean }
 export interface DeleteTasksIdCriteriaCriterionIdResponse { ok: boolean; removed: unknown }
 export interface DeleteTasksIdDependenciesDepIdResponse { ok: boolean; removed: unknown }
 export interface DeleteTasksIdVisualResponse { ok: boolean; visual_url: unknown }
+export interface DeleteTasksIdVisualsSlotResponse { ok: boolean; slot: unknown; visual_url: unknown }
 export interface ErrorEnvelope { error: ApiErrorObject }
 export interface GetAccessRequestsInvitesResponse { invites: unknown }
 export interface GetAccessRequestsResponse { requests: unknown }
@@ -170,6 +171,7 @@ export interface GetTasksClaimableResponse { claimable: unknown; claimable_total
 export interface GetTasksIdCriteriaResponse { criteria: unknown }
 export interface GetTasksIdDependenciesResponse { dependencies: unknown; dependents: unknown }
 export interface GetTasksIdRecommendationsResponse { recommendations: unknown; count: unknown }
+export interface GetTasksIdVisualsResponse { ok: boolean; task_id: unknown; slots: unknown }
 export interface GetTasksNewcomerFloorResponse { disciplines: unknown }
 export interface GetTasksPeerVotesFeedResponse { tasks: unknown; can_vote: unknown }
 export interface GetTasksResponse { tasks: unknown }
@@ -471,6 +473,8 @@ export interface PostTasksIdPublishBranchRequest { branch: string; head_sha: str
 export interface PostTasksIdShipResponse { ok: boolean; task: unknown }
 export interface PostTasksIdVisualRequest { image_b64: string; content_type: string; alt?: string }
 export interface PostTasksIdVisualResponse { ok: boolean; visual_url: unknown; visual_alt: unknown; bytes: unknown }
+export interface PostTasksIdVisualsSlotRequest { image_b64: string; content_type: string; alt?: string }
+export interface PostTasksIdVisualsSlotResponse { ok: boolean; slot: unknown; visual_url: unknown; visual_alt: unknown; bytes: unknown }
 export interface PostTasksIdVoteRequest { vote: -1 | 0 | 1 }
 export interface PostTasksIdVoteResponse { ok: boolean; task_id: unknown; my_vote: unknown; net_votes: unknown; total_votes: unknown }
 export interface PostTasksNewcomerRestockResponse { ok: boolean; stamped: unknown; results: unknown }
@@ -773,6 +777,8 @@ export interface BongosClient {
     postCopyDeskPagesPageIdAsks(args: RequestArgs & { body: PostCopyDeskPagesPageIdAsksRequest }): Promise<ApiResponse>;
     /** POST /copy-desk/pages/{pageId}/claim — rank: any-builder */
     postCopyDeskPagesPageIdClaim(args?: RequestArgs): Promise<ApiResponse>;
+    /** GET /copy-desk/pages/{pageId}/draft — rank: any-builder */
+    getCopyDeskPagesPageIdDraft(args?: RequestArgs): Promise<ApiResponse>;
     /** PUT /copy-desk/pages/{pageId}/draft — rank: any-builder */
     putCopyDeskPagesPageIdDraft(args: RequestArgs & { body: PutCopyDeskPagesPageIdDraftRequest }): Promise<PutCopyDeskPagesPageIdDraftResponse>;
     /** GET /copy-desk/pages/{pageId}/draft.docx — rank: any-builder */
@@ -1505,6 +1511,12 @@ export interface BongosClient {
     deleteTasksIdVisual(args?: RequestArgs): Promise<DeleteTasksIdVisualResponse>;
     /** POST /tasks/{id}/visual — rank: any-builder */
     postTasksIdVisual(args: RequestArgs & { body: PostTasksIdVisualRequest }): Promise<PostTasksIdVisualResponse>;
+    /** GET /tasks/{id}/visuals — rank: any-builder */
+    getTasksIdVisuals(args?: RequestArgs): Promise<GetTasksIdVisualsResponse>;
+    /** DELETE /tasks/{id}/visuals/{slot} — rank: any-builder */
+    deleteTasksIdVisualsSlot(args?: RequestArgs): Promise<DeleteTasksIdVisualsSlotResponse>;
+    /** POST /tasks/{id}/visuals/{slot} — rank: any-builder */
+    postTasksIdVisualsSlot(args: RequestArgs & { body: PostTasksIdVisualsSlotRequest }): Promise<PostTasksIdVisualsSlotResponse>;
     /** POST /tasks/{id}/vote — rank: metic+archon */
     postTasksIdVote(args: RequestArgs & { body: PostTasksIdVoteRequest }): Promise<PostTasksIdVoteResponse>;
     /** POST /tasks/{id}/water — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -349,6 +349,8 @@ export function createClient(opts = {}) {
       postCopyDeskPagesPageIdAsks: (args) => request("POST", "/copy-desk/pages/{pageId}/asks", { hasBody: true }, args),
       // POST /copy-desk/pages/{pageId}/claim — rank: any-builder — POST /copy-desk/pages/:pageId/claim
       postCopyDeskPagesPageIdClaim: (args) => request("POST", "/copy-desk/pages/{pageId}/claim", { hasBody: true }, args),
+      // GET /copy-desk/pages/{pageId}/draft — rank: any-builder — GET /copy-desk/pages/:pageId/draft
+      getCopyDeskPagesPageIdDraft: (args) => request("GET", "/copy-desk/pages/{pageId}/draft", { hasBody: false }, args),
       // PUT /copy-desk/pages/{pageId}/draft — rank: any-builder — PUT /copy-desk/pages/:pageId/draft
       putCopyDeskPagesPageIdDraft: (args) => request("PUT", "/copy-desk/pages/{pageId}/draft", { hasBody: true }, args),
       // GET /copy-desk/pages/{pageId}/draft.docx — rank: any-builder — GET /copy-desk/pages/:pageId/draft.docx
@@ -1081,6 +1083,12 @@ export function createClient(opts = {}) {
       deleteTasksIdVisual: (args) => request("DELETE", "/tasks/{id}/visual", { hasBody: false }, args),
       // POST /tasks/{id}/visual — rank: any-builder — POST /tasks/:id/visual
       postTasksIdVisual: (args) => request("POST", "/tasks/{id}/visual", { hasBody: true }, args),
+      // GET /tasks/{id}/visuals — rank: any-builder — GET /tasks/:id/visuals
+      getTasksIdVisuals: (args) => request("GET", "/tasks/{id}/visuals", { hasBody: false }, args),
+      // DELETE /tasks/{id}/visuals/{slot} — rank: any-builder — DELETE /tasks/:id/visuals/:slot
+      deleteTasksIdVisualsSlot: (args) => request("DELETE", "/tasks/{id}/visuals/{slot}", { hasBody: false }, args),
+      // POST /tasks/{id}/visuals/{slot} — rank: any-builder — POST /tasks/:id/visuals/:slot
+      postTasksIdVisualsSlot: (args) => request("POST", "/tasks/{id}/visuals/{slot}", { hasBody: true }, args),
       // POST /tasks/{id}/vote — rank: metic+archon — POST /tasks/:id/vote
       postTasksIdVote: (args) => request("POST", "/tasks/{id}/vote", { hasBody: true }, args),
       // POST /tasks/{id}/water — rank: any-builder — POST /tasks/:id/water

package/docs/api/openapi.json

@@ -5312,6 +5312,49 @@
       }
     },
     "/copy-desk/pages/{pageId}/draft": {
+      "get": {
+        "operationId": "get_copy_desk_pages_pageId_draft",
+        "tags": [
+          "copy-desk"
+        ],
+        "summary": "GET /copy-desk/pages/:pageId/draft",
+        "description": "------------------------------------------------------------------------- GET /copy-desk/pages/:pageId/draft — what the tweak editor opens on (task 1004321 / BV2.TW10, ADR 0341 D4): every line of the page reading in page order with its margin note, the open round and whether the caller holds it, and the saved draft (only on the current reading). The read the PUT below saves over, and the .docx download's own data as JSON. rank: any signed-in builder, as the download: the words are the page's own and the draft sits on a task every builder can read. -------------------------------------------------------------------------\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/copy-desk/routes/copy-desk.js",
+        "parameters": [
+          {
+            "name": "pageId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `pageId`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
       "put": {
         "operationId": "put_copy_desk_pages_pageId_draft",
         "tags": [
@@ -20412,6 +20455,189 @@
         ]
       }
     },
+    "/tasks/{id}/visuals": {
+      "get": {
+        "operationId": "get_tasks_id_visuals",
+        "tags": [
+          "tasks"
+        ],
+        "summary": "GET /tasks/:id/visuals",
+        "description": "GET /tasks/:id/visuals — the task's named visuals. Any signed-in builder: it lists URLs only, and each image is still served under its own task's audience.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/visuals.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetTasksIdVisualsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/tasks/{id}/visuals/{slot}": {
+      "post": {
+        "operationId": "post_tasks_id_visuals_slot",
+        "tags": [
+          "tasks"
+        ],
+        "summary": "POST /tasks/:id/visuals/:slot",
+        "description": "POST /tasks/:id/visuals/:slot — attach (or replace) one named visual.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/visuals.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          },
+          {
+            "name": "slot",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `slot`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostTasksIdVisualsSlotRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostTasksIdVisualsSlotResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "delete": {
+        "operationId": "delete_tasks_id_visuals_slot",
+        "tags": [
+          "tasks"
+        ],
+        "summary": "DELETE /tasks/:id/visuals/:slot",
+        "description": "DELETE /tasks/:id/visuals/:slot — remove one named visual. Idempotent.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/visuals.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          },
+          {
+            "name": "slot",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `slot`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/DeleteTasksIdVisualsSlotResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/tasks/{id}/vote": {
       "post": {
         "operationId": "post_tasks_id_vote",
@@ -21239,6 +21465,21 @@
           "visual_url"
         ]
       },
+      "DeleteTasksIdVisualsSlotResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "slot": {},
+          "visual_url": {}
+        },
+        "required": [
+          "ok",
+          "slot",
+          "visual_url"
+        ]
+      },
       "ErrorEnvelope": {
         "type": "object",
         "required": [
@@ -23160,6 +23401,21 @@
           "count"
         ]
       },
+      "GetTasksIdVisualsResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "task_id": {},
+          "slots": {}
+        },
+        "required": [
+          "ok",
+          "task_id",
+          "slots"
+        ]
+      },
       "GetTasksNewcomerFloorResponse": {
         "type": "object",
         "properties": {
@@ -28136,6 +28392,48 @@
           "bytes"
         ]
       },
+      "PostTasksIdVisualsSlotRequest": {
+        "type": "object",
+        "properties": {
+          "image_b64": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 7340032
+          },
+          "content_type": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 100
+          },
+          "alt": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "image_b64",
+          "content_type"
+        ],
+        "additionalProperties": false
+      },
+      "PostTasksIdVisualsSlotResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "slot": {},
+          "visual_url": {},
+          "visual_alt": {},
+          "bytes": {}
+        },
+        "required": [
+          "ok",
+          "slot",
+          "visual_url",
+          "visual_alt",
+          "bytes"
+        ]
+      },
       "PostTasksIdVoteRequest": {
         "type": "object",
         "properties": {
@@ -28675,9 +28973,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 453,
-  "x-schema-count": 487,
+  "x-endpoint-count": 457,
+  "x-schema-count": 491,
   "x-undocumented-bodies": 10,
-  "x-response-schemas": 333,
+  "x-response-schemas": 336,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 453 endpoints across 76 route files.
+> **Generated from the live route files** — the route file is authoritative. 457 endpoints across 76 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -210,7 +210,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/connections/requests` | `any-builder` | — | MY pending requests, both directions (own data). |
 | GET | `/api/bongos/connections/suggestions` | `any-builder` | — | "builders you may know" (R21, task 1002297; ADR 0202 D5). |
 
-## `copy-desk` (15)
+## `copy-desk` (16)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -221,6 +221,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/copy-desk/pages/:pageId` | `any-builder` | — | ------------------------------------------------------------------------- GET /copy-desk/pages/:pageId — one page: status, changelog, the… |
 | POST | `/api/bongos/copy-desk/pages/:pageId/asks` | `any-builder` | `reason` | ------------------------------------------------------------------------- POST /copy-desk/pages/:pageId/asks — ask for a page (task 10043… |
 | POST | `/api/bongos/copy-desk/pages/:pageId/claim` | `any-builder` | validated | ------------------------------------------------------------------------- POST /copy-desk/pages/:pageId/claim — claim a page's tweak (tas… |
+| GET | `/api/bongos/copy-desk/pages/:pageId/draft` | `any-builder` | — | ------------------------------------------------------------------------- GET /copy-desk/pages/:pageId/draft — what the tweak editor open… |
 | PUT | `/api/bongos/copy-desk/pages/:pageId/draft` | `any-builder` | `reading_hash`, `lines` | ------------------------------------------------------------------------- PUT /copy-desk/pages/:pageId/draft — autosave the artist's draf… |
 | GET | `/api/bongos/copy-desk/pages/:pageId/draft.docx` | `any-builder` | — | ------------------------------------------------------------------------- GET /copy-desk/pages/:pageId/draft.docx — download the page's w… |
 | POST | `/api/bongos/copy-desk/pages/:pageId/draft.docx` | `any-builder` | _undocumented_ | ------------------------------------------------------------------------- POST /copy-desk/pages/:pageId/draft.docx — upload the Word file… |
@@ -742,7 +743,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 |---|---|---|---|---|
 | GET | `/api/bongos/task-visuals/:name` | `public` | — | the WIDEST path this route can take, declared honestly. |
 
-## `tasks` (32)
+## `tasks` (35)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -771,6 +772,9 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | POST | `/api/bongos/tasks/:id/ship` | `any-builder` | validated | confirmed → shipped. |
 | POST | `/api/bongos/tasks/:id/visual` | `any-builder` | `image_b64`, `content_type`, `alt` | POST /tasks/:id/visual — attach (or replace) this task's ship-time visual. |
 | DELETE | `/api/bongos/tasks/:id/visual` | `any-builder` | — | DELETE /tasks/:id/visual — remove it again. |
+| GET | `/api/bongos/tasks/:id/visuals` | `any-builder` | — | GET /tasks/:id/visuals — the task's named visuals. |
+| POST | `/api/bongos/tasks/:id/visuals/:slot` | `any-builder` | `image_b64`, `content_type`, `alt` | POST /tasks/:id/visuals/:slot — attach (or replace) one named visual. |
+| DELETE | `/api/bongos/tasks/:id/visuals/:slot` | `any-builder` | — | DELETE /tasks/:id/visuals/:slot — remove one named visual. |
 | POST | `/api/bongos/tasks/:id/vote` | `metic+archon` | `vote` | POST /tasks/:id/vote { vote: 1 \| -1 \| 0 } — cast/change/clear a peer vote on a confirmed/shipped task. |
 | POST | `/api/bongos/tasks/:id/water` | `any-builder` | — | POST /tasks/:id/water — reset a rotting task's clock. |
 | GET | `/api/bongos/tasks/claimable` | `any-builder` | — | NOTE: /tasks/claimable must come BEFORE /tasks/:id or Express will route 'claimable' to the :id param. |