@bongos/core 1.19.249 → 1.19.251

package/docs/api/openapi.json

@@ -73,6 +73,10 @@
       "name": "claims",
       "description": "Endpoints under `/api/bongos/claims`."
     },
+    {
+      "name": "copy-desk",
+      "description": "Endpoints under `/api/bongos/copy-desk`."
+    },
     {
       "name": "cost",
       "description": "Endpoints under `/api/bongos/cost`."
@@ -3179,6 +3183,180 @@
         ]
       }
     },
+    "/copy-desk/flags": {
+      "post": {
+        "operationId": "post_copy_desk_flags",
+        "tags": [
+          "copy-desk"
+        ],
+        "summary": "POST /copy-desk/flags",
+        "description": "------------------------------------------------------------------------- POST /copy-desk/flags — file a flag. Body: { scope, surface, string_id?, reason, kind? } rank: any signed-in builder (see the header). -------------------------------------------------------------------------\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/copy-desk/routes/copy-desk.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostCopyDeskFlagsRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostCopyDeskFlagsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/copy-desk/flags/{id}/close": {
+      "post": {
+        "operationId": "post_copy_desk_flags_id_close",
+        "tags": [
+          "copy-desk"
+        ],
+        "summary": "POST /copy-desk/flags/:id/close",
+        "description": "------------------------------------------------------------------------- POST /copy-desk/flags/:id/close — resolve or dismiss. Body: { status: 'resolved'|'dismissed', resolution_note, resolved_task_id? } rank: metic+archon, OR the flag's author (see the header). -------------------------------------------------------------------------\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/copy-desk/routes/copy-desk.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostCopyDeskFlagsIdCloseRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostCopyDeskFlagsIdCloseResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/copy-desk/queue": {
+      "get": {
+        "operationId": "get_copy_desk_queue",
+        "tags": [
+          "copy-desk"
+        ],
+        "summary": "GET /copy-desk/queue",
+        "description": "------------------------------------------------------------------------- GET /copy-desk/queue — the artist's working list. ?status=open (default) | resolved | dismissed | all ?surface=<registry surface id> rank: any signed-in builder. The queue is a work list, not a privilege — and an artist is a craft, not a rank (builders.preferred_disciplines), so gating this by rank would hide the artist's own queue from the artist. -------------------------------------------------------------------------\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/copy-desk/routes/copy-desk.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/copy-desk/strings": {
+      "get": {
+        "operationId": "get_copy_desk_strings",
+        "tags": [
+          "copy-desk"
+        ],
+        "summary": "GET /copy-desk/strings",
+        "description": "------------------------------------------------------------------------- GET /copy-desk/strings — search the inventory, to find something to flag. ?q= substring over text or file path · ?surface= · ?limit= (max 200) Read-only over the committed registry — no DB, no tree walk. rank: any signed-in builder, same reasoning as the queue. -------------------------------------------------------------------------\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/copy-desk/routes/copy-desk.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/cost": {
       "post": {
         "operationId": "post_cost",
@@ -15494,6 +15672,82 @@
           "reward"
         ]
       },
+      "PostCopyDeskFlagsIdCloseRequest": {
+        "type": "object",
+        "properties": {
+          "status": {
+            "type": "string"
+          },
+          "resolution_note": {
+            "type": "string",
+            "minLength": 1
+          },
+          "resolved_task_id": {
+            "type": "integer",
+            "minimum": 1
+          }
+        },
+        "required": [
+          "status",
+          "resolution_note"
+        ],
+        "additionalProperties": false
+      },
+      "PostCopyDeskFlagsIdCloseResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "flag": {}
+        },
+        "required": [
+          "ok",
+          "flag"
+        ]
+      },
+      "PostCopyDeskFlagsRequest": {
+        "type": "object",
+        "properties": {
+          "scope": {
+            "type": "string"
+          },
+          "surface": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 128
+          },
+          "string_id": {
+            "type": "string",
+            "maxLength": 64
+          },
+          "reason": {
+            "type": "string",
+            "minLength": 1
+          },
+          "kind": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "surface",
+          "reason"
+        ],
+        "additionalProperties": false
+      },
+      "PostCopyDeskFlagsResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "flag": {}
+        },
+        "required": [
+          "ok",
+          "flag"
+        ]
+      },
       "PostCostRequest": {
         "type": "object",
         "properties": {
@@ -18039,9 +18293,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 285,
-  "x-schema-count": 321,
+  "x-endpoint-count": 289,
+  "x-schema-count": 325,
   "x-undocumented-bodies": 8,
-  "x-response-schemas": 215,
+  "x-response-schemas": 217,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 285 endpoints across 46 route files.
+> **Generated from the live route files** — the route file is authoritative. 289 endpoints across 47 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -143,6 +143,15 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | POST | `/api/bongos/claims/batch/release` | `any-builder` | `claim_ids`, `force` | Bulk release (task 1758) — the batch twin of resolve(outcome='abandoned'). |
 | POST | `/api/bongos/claims/batch/validate` | `any-builder` | `task_ids` | Dry-run validate (task 1758) — read-only twin of claimTasksBatch's pre-flight checks. |
 
+## `copy-desk` (4)
+
+| Method | Path | Rank | Body | Description |
+|---|---|---|---|---|
+| POST | `/api/bongos/copy-desk/flags` | `any-builder` | `scope`, `surface`, `string_id`, `reason`, `kind` | ------------------------------------------------------------------------- POST /copy-desk/flags — file a flag. |
+| POST | `/api/bongos/copy-desk/flags/:id/close` | `any-builder` | `status`, `resolution_note`, `resolved_task_id` | ------------------------------------------------------------------------- POST /copy-desk/flags/:id/close — resolve or dismiss. |
+| GET | `/api/bongos/copy-desk/queue` | `any-builder` | — | ------------------------------------------------------------------------- GET /copy-desk/queue — the artist's working list. |
+| GET | `/api/bongos/copy-desk/strings` | `any-builder` | — | ------------------------------------------------------------------------- GET /copy-desk/strings — search the inventory, to find somethin… |
+
 ## `cost` (1)
 
 | Method | Path | Rank | Body | Description |