@bongos/core 1.19.1063 → 1.19.1065

package/docs/api/openapi.json

@@ -4979,6 +4979,37 @@
         ]
       }
     },
+    "/copy-desk/approvals": {
+      "get": {
+        "operationId": "get_copy_desk_approvals",
+        "tags": [
+          "copy-desk"
+        ],
+        "summary": "GET /copy-desk/approvals",
+        "description": "GET /copy-desk/approvals — every round waiting for its artist, oldest applied first, with its position (\"1 of 2\"), the lines it rewrote (and the ones the applier refused), and where its renders are. Any signed-in builder; `can_decide` says whether the caller may approve or send back.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/copy-desk/routes/copy-desk.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/copy-desk/flags": {
       "post": {
         "operationId": "post_copy_desk_flags",
@@ -5198,6 +5229,69 @@
         ]
       }
     },
+    "/copy-desk/pages/{pageId}/approve": {
+      "post": {
+        "operationId": "post_copy_desk_pages_pageId_approve",
+        "tags": [
+          "copy-desk"
+        ],
+        "summary": "POST /copy-desk/pages/:pageId/approve",
+        "description": "------------------------------------------------------------------------- POST /copy-desk/pages/:pageId/approve — the held pass goes on to land. Body: { task_id? } (the round the artist looked at). The port promotes completed -> confirmed with the rewards the hold skipped and nudges the merge; the reconciler lands it otherwise. The count goes up when it ships. 200 approved · 409 not_waiting · 409 round_moved · 403 not_an_artist -------------------------------------------------------------------------\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/copy-desk/routes/copy-desk.js",
+        "parameters": [
+          {
+            "name": "pageId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `pageId`."
+          }
+        ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostCopyDeskPagesPageIdApproveRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostCopyDeskPagesPageIdApproveResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/copy-desk/pages/{pageId}/asks": {
       "post": {
         "operationId": "post_copy_desk_pages_pageId_asks",
@@ -5525,6 +5619,69 @@
         ]
       }
     },
+    "/copy-desk/pages/{pageId}/send-back": {
+      "post": {
+        "operationId": "post_copy_desk_pages_pageId_send_back",
+        "tags": [
+          "copy-desk"
+        ],
+        "summary": "POST /copy-desk/pages/:pageId/send-back",
+        "description": "------------------------------------------------------------------------- POST /copy-desk/pages/:pageId/send-back — back to the /tweak queue with a note (ADR 0341 D7). Body: { note, task_id? }. The note is one line of at least 10 characters (pages.normalizeSentBackNote). The port appends a page-tweak-sent-back block { at, by, note }, releases any open claim, drops the round's grade row, returns the task to ready and closes the unmerged PR, so the round reads `submitted` again. 200 sent_back · 400 note_too_short / note_too_long · 409 not_waiting · 409 round_moved · 403 not_an_artist -------------------------------------------------------------------------\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/copy-desk/routes/copy-desk.js",
+        "parameters": [
+          {
+            "name": "pageId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `pageId`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostCopyDeskPagesPageIdSendBackRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostCopyDeskPagesPageIdSendBackResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/copy-desk/pages/{pageId}/submit": {
       "post": {
         "operationId": "post_copy_desk_pages_pageId_submit",
@@ -20455,6 +20612,189 @@
         ]
       }
     },
+    "/tasks/{id}/visuals": {
+      "get": {
+        "operationId": "get_tasks_id_visuals",
+        "tags": [
+          "tasks"
+        ],
+        "summary": "GET /tasks/:id/visuals",
+        "description": "GET /tasks/:id/visuals — the task's named visuals. Any signed-in builder: it lists URLs only, and each image is still served under its own task's audience.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/visuals.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetTasksIdVisualsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/tasks/{id}/visuals/{slot}": {
+      "post": {
+        "operationId": "post_tasks_id_visuals_slot",
+        "tags": [
+          "tasks"
+        ],
+        "summary": "POST /tasks/:id/visuals/:slot",
+        "description": "POST /tasks/:id/visuals/:slot — attach (or replace) one named visual.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/visuals.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          },
+          {
+            "name": "slot",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `slot`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostTasksIdVisualsSlotRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostTasksIdVisualsSlotResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "delete": {
+        "operationId": "delete_tasks_id_visuals_slot",
+        "tags": [
+          "tasks"
+        ],
+        "summary": "DELETE /tasks/:id/visuals/:slot",
+        "description": "DELETE /tasks/:id/visuals/:slot — remove one named visual. Idempotent.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/visuals.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          },
+          {
+            "name": "slot",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `slot`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/DeleteTasksIdVisualsSlotResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/tasks/{id}/vote": {
       "post": {
         "operationId": "post_tasks_id_vote",
@@ -21282,6 +21622,21 @@
           "visual_url"
         ]
       },
+      "DeleteTasksIdVisualsSlotResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "slot": {},
+          "visual_url": {}
+        },
+        "required": [
+          "ok",
+          "slot",
+          "visual_url"
+        ]
+      },
       "ErrorEnvelope": {
         "type": "object",
         "required": [
@@ -23203,6 +23558,21 @@
           "count"
         ]
       },
+      "GetTasksIdVisualsResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "task_id": {},
+          "slots": {}
+        },
+        "required": [
+          "ok",
+          "task_id",
+          "slots"
+        ]
+      },
       "GetTasksNewcomerFloorResponse": {
         "type": "object",
         "properties": {
@@ -25141,6 +25511,40 @@
           "flag"
         ]
       },
+      "PostCopyDeskPagesPageIdApproveRequest": {
+        "type": "object",
+        "properties": {
+          "task_id": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 20
+          }
+        },
+        "additionalProperties": false
+      },
+      "PostCopyDeskPagesPageIdApproveResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "outcome": {},
+          "page_id": {},
+          "round": {},
+          "status_after": {},
+          "land": {},
+          "next": {}
+        },
+        "required": [
+          "ok",
+          "outcome",
+          "page_id",
+          "round",
+          "status_after",
+          "land",
+          "next"
+        ]
+      },
       "PostCopyDeskPagesPageIdAsksRequest": {
         "type": "object",
         "properties": {
@@ -25177,6 +25581,47 @@
           "merge"
         ]
       },
+      "PostCopyDeskPagesPageIdSendBackRequest": {
+        "type": "object",
+        "properties": {
+          "note": {
+            "type": "string",
+            "minLength": 1
+          },
+          "task_id": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 20
+          }
+        },
+        "required": [
+          "note"
+        ],
+        "additionalProperties": false
+      },
+      "PostCopyDeskPagesPageIdSendBackResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "outcome": {},
+          "page_id": {},
+          "round": {},
+          "sent_back": {},
+          "pr": {},
+          "next": {}
+        },
+        "required": [
+          "ok",
+          "outcome",
+          "page_id",
+          "round",
+          "sent_back",
+          "pr",
+          "next"
+        ]
+      },
       "PostCopyDeskProposalsRequest": {
         "type": "object",
         "properties": {
@@ -25376,7 +25821,8 @@
           "status_set": {
             "type": "boolean"
           },
-          "recheck": {}
+          "recheck": {},
+          "held_for_artist": {}
         },
         "required": [
           "ok",
@@ -28179,6 +28625,48 @@
           "bytes"
         ]
       },
+      "PostTasksIdVisualsSlotRequest": {
+        "type": "object",
+        "properties": {
+          "image_b64": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 7340032
+          },
+          "content_type": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 100
+          },
+          "alt": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "image_b64",
+          "content_type"
+        ],
+        "additionalProperties": false
+      },
+      "PostTasksIdVisualsSlotResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "slot": {},
+          "visual_url": {},
+          "visual_alt": {},
+          "bytes": {}
+        },
+        "required": [
+          "ok",
+          "slot",
+          "visual_url",
+          "visual_alt",
+          "bytes"
+        ]
+      },
       "PostTasksIdVoteRequest": {
         "type": "object",
         "properties": {
@@ -28718,9 +29206,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 454,
-  "x-schema-count": 487,
+  "x-endpoint-count": 460,
+  "x-schema-count": 495,
   "x-undocumented-bodies": 10,
-  "x-response-schemas": 333,
+  "x-response-schemas": 338,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 454 endpoints across 76 route files.
+> **Generated from the live route files** — the route file is authoritative. 460 endpoints across 76 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -210,21 +210,24 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/connections/requests` | `any-builder` | — | MY pending requests, both directions (own data). |
 | GET | `/api/bongos/connections/suggestions` | `any-builder` | — | "builders you may know" (R21, task 1002297; ADR 0202 D5). |
 
-## `copy-desk` (16)
+## `copy-desk` (19)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
+| GET | `/api/bongos/copy-desk/approvals` | `any-builder` | — | GET /copy-desk/approvals — every round waiting for its artist, oldest applied first, with its position ("1 of 2"), the lines it rewrote (… |
 | POST | `/api/bongos/copy-desk/flags` | `any-builder` | `scope`, `surface`, `string_id`, `reason`, `kind` | ------------------------------------------------------------------------- POST /copy-desk/flags — file a flag. |
 | POST | `/api/bongos/copy-desk/flags/:id/close` | `any-builder` | `status`, `resolution_note`, `resolved_task_id` | ------------------------------------------------------------------------- POST /copy-desk/flags/:id/close — resolve or dismiss. |
 | GET | `/api/bongos/copy-desk/next` | `any-builder` | — | ------------------------------------------------------------------------- GET /copy-desk/next — the Tweak/CopyWrite Flow's recommendation… |
 | GET | `/api/bongos/copy-desk/pages` | `any-builder` | — | ------------------------------------------------------------------------- GET /copy-desk/pages — every page's status, count and drift, pl… |
 | GET | `/api/bongos/copy-desk/pages/:pageId` | `any-builder` | — | ------------------------------------------------------------------------- GET /copy-desk/pages/:pageId — one page: status, changelog, the… |
+| POST | `/api/bongos/copy-desk/pages/:pageId/approve` | `any-builder` | `task_id` | ------------------------------------------------------------------------- POST /copy-desk/pages/:pageId/approve — the held pass goes on t… |
 | POST | `/api/bongos/copy-desk/pages/:pageId/asks` | `any-builder` | `reason` | ------------------------------------------------------------------------- POST /copy-desk/pages/:pageId/asks — ask for a page (task 10043… |
 | POST | `/api/bongos/copy-desk/pages/:pageId/claim` | `any-builder` | validated | ------------------------------------------------------------------------- POST /copy-desk/pages/:pageId/claim — claim a page's tweak (tas… |
 | GET | `/api/bongos/copy-desk/pages/:pageId/draft` | `any-builder` | — | ------------------------------------------------------------------------- GET /copy-desk/pages/:pageId/draft — what the tweak editor open… |
 | PUT | `/api/bongos/copy-desk/pages/:pageId/draft` | `any-builder` | `reading_hash`, `lines` | ------------------------------------------------------------------------- PUT /copy-desk/pages/:pageId/draft — autosave the artist's draf… |
 | GET | `/api/bongos/copy-desk/pages/:pageId/draft.docx` | `any-builder` | — | ------------------------------------------------------------------------- GET /copy-desk/pages/:pageId/draft.docx — download the page's w… |
 | POST | `/api/bongos/copy-desk/pages/:pageId/draft.docx` | `any-builder` | _undocumented_ | ------------------------------------------------------------------------- POST /copy-desk/pages/:pageId/draft.docx — upload the Word file… |
+| POST | `/api/bongos/copy-desk/pages/:pageId/send-back` | `any-builder` | `note`, `task_id` | ------------------------------------------------------------------------- POST /copy-desk/pages/:pageId/send-back — back to the /tweak qu… |
 | POST | `/api/bongos/copy-desk/pages/:pageId/submit` | `any-builder` | validated | ------------------------------------------------------------------------- POST /copy-desk/pages/:pageId/submit — freeze the draft and que… |
 | POST | `/api/bongos/copy-desk/proposals` | `any-builder` | `string_id`, `proposed_text`, `why`, `file`, `line`, `flag_id` | ------------------------------------------------------------------------- POST /copy-desk/proposals — an artist proposes new wording, and… |
 | GET | `/api/bongos/copy-desk/queue` | `any-builder` | — | ------------------------------------------------------------------------- GET /copy-desk/queue — the artist's working list. |
@@ -743,7 +746,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 |---|---|---|---|---|
 | GET | `/api/bongos/task-visuals/:name` | `public` | — | the WIDEST path this route can take, declared honestly. |
 
-## `tasks` (32)
+## `tasks` (35)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -772,6 +775,9 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | POST | `/api/bongos/tasks/:id/ship` | `any-builder` | validated | confirmed → shipped. |
 | POST | `/api/bongos/tasks/:id/visual` | `any-builder` | `image_b64`, `content_type`, `alt` | POST /tasks/:id/visual — attach (or replace) this task's ship-time visual. |
 | DELETE | `/api/bongos/tasks/:id/visual` | `any-builder` | — | DELETE /tasks/:id/visual — remove it again. |
+| GET | `/api/bongos/tasks/:id/visuals` | `any-builder` | — | GET /tasks/:id/visuals — the task's named visuals. |
+| POST | `/api/bongos/tasks/:id/visuals/:slot` | `any-builder` | `image_b64`, `content_type`, `alt` | POST /tasks/:id/visuals/:slot — attach (or replace) one named visual. |
+| DELETE | `/api/bongos/tasks/:id/visuals/:slot` | `any-builder` | — | DELETE /tasks/:id/visuals/:slot — remove one named visual. |
 | POST | `/api/bongos/tasks/:id/vote` | `metic+archon` | `vote` | POST /tasks/:id/vote { vote: 1 \| -1 \| 0 } — cast/change/clear a peer vote on a confirmed/shipped task. |
 | POST | `/api/bongos/tasks/:id/water` | `any-builder` | — | POST /tasks/:id/water — reset a rotting task's clock. |
 | GET | `/api/bongos/tasks/claimable` | `any-builder` | — | NOTE: /tasks/claimable must come BEFORE /tasks/:id or Express will route 'claimable' to the :id param. |