npm - @nasebanal/cli - Versions diffs - 0.1.0 → 0.3.0 - Mend

@nasebanal/cli 0.1.0 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (18) hide show

package/README.md +123 -4
package/dist/apis.js +1 -0
package/dist/index.js +9 -1
package/dist/loginPage.js +112 -0
package/dist/logo.js +7 -0
package/dist/oauth.js +13 -5
package/dist/reports/ci.js +59 -0
package/dist/reports/csv.js +56 -0
package/dist/reports/junit.js +119 -0
package/dist/reports/locust.js +68 -0
package/dist/reports/specmatic.js +69 -0
package/dist/reports/upload.js +335 -0
package/package.json +1 -1
package/specs/account.yaml +484 -298
package/specs/app-template.yaml +64 -62
package/specs/assurance.yaml +1730 -0
package/specs/recorder.yaml +375 -422
package/specs/target.yaml +355 -363

package/specs/recorder.yaml CHANGED Viewed

@@ -1,88 +1,53 @@
 openapi: 3.0.3
 info:
   title: NASEBANAL Recorder API
-  description: >-
+  description: |-
     Time-series data recorder API built with Cloudflare Workers and D1.
     ## Authentication
-    Create a Personal Access Token (PAT) in **Profile Settings > API Tokens** (requires Pro plan or above), then include
-    it in the `Authorization` header.
+    Create a Personal Access Token (PAT) in **Profile Settings > API Tokens** (requires Pro plan or above), then include it in the `Authorization` header.
     Tokens use the format `nbpat_` followed by 40 random characters.
     **Usage:**
     ```
     Authorization: Bearer nbpat_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
     ```
     **curl example:**
     ```bash
     curl -H "Authorization: Bearer nbpat_xxxxx..." https://api.example.com/api/v1/records
     ```
     **Plan limits:**
     - Free: API tokens not available
     - Pro: up to 5 tokens
     - Family: up to 20 tokens
     - Enterprise: unlimited tokens
     ## SNS Shared Graph Embed
+    Publicly shared graphs can be embedded in external sites (blogs, portfolios, etc.) via iframe without authentication.
-    Publicly shared graphs can be embedded in external sites (blogs, portfolios, etc.) via iframe without
-    authentication.
-    **Endpoint:** `GET /shared/{lang}/{id}/embed`
+    **Endpoint:** `GET https://growth.nasebanal.com/{lang}/recorder/shared/{id}/embed` (served by NASEBANAL Growth, not by this API)
     | Parameter | Type | Required | Description |
     |-----------|------|----------|-------------|
     | `lang` | path | Yes | Language: `ja` or `en` |
     | `id` | path | Yes | Shared graph ID |
-    **Features:** Line chart with auto-scale, goal lines, statistics. No navigation header or footer — designed for
-    iframe embedding.
+    **Features:** Line chart with auto-scale, goal lines, statistics. No navigation header or footer — designed for iframe embedding.
     **Auth:** Not required (public access).
     **iframe example:**
     ```html
-    <iframe src=\"https://recorder.nasebanal.com/shared/ja/{id}/embed\" width=\"100%\" height=\"500\"
-    frameborder=\"0\"></iframe>
+    <iframe src=\"https://growth.nasebanal.com/ja/recorder/shared/{id}/embed\" width=\"100%\" height=\"500\" frameborder=\"0\"></iframe>
     ```
-    **Note:** The embed displays a snapshot of the data at the time the SNS share was created. To update the data,
-    recreate the SNS share.
-  version: 1.5.0
+    **Note:** The embed displays a snapshot of the data at the time the SNS share was created. To update the data, recreate the SNS share.
+  version: 1.7.0
   license:
     name: MIT
 servers:
@@ -100,11 +65,9 @@ paths:
       operationId: getHealth
       tags:
         - Health
-      # Public — the health check is unauthenticated in the implementation.
-      # Override the global BearerAuth requirement so it stays open.
       security: []
       responses:
-        '200':
+        "200":
           description: API is healthy
           content:
             application/json:
@@ -133,7 +96,7 @@ paths:
       tags:
         - User
       responses:
-        '200':
+        "200":
           description: Current user profile
           content:
             application/json:
@@ -146,11 +109,11 @@ paths:
                       - true
                     example: true
                   data:
-                    $ref: '#/components/schemas/User'
-        '401':
-          $ref: '#/components/responses/Unauthorized'
-        '500':
-          $ref: '#/components/responses/InternalError'
+                    $ref: "#/components/schemas/User"
+        "401":
+          $ref: "#/components/responses/Unauthorized"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /records:
     get:
       summary: Get all records
@@ -161,9 +124,19 @@ paths:
       parameters:
         - name: name
           in: query
-          description: Filter by record name
+          description: "Filter by record name. A name is unique only per owner: a tag shared with you can have the same name as one of your own, and this then matches both. Use `tag_id` to pick exactly one tag."
           schema:
             type: string
+        - name: tag_id
+          in: query
+          description: Filter by tag id; repeat the parameter for several tags. An id names exactly one tag, so unlike `name` it cannot mix in a same-named tag of another owner. When `tag_id` is given, `name` is ignored. An id of a tag you cannot read (neither yours nor shared with you) matches nothing.
+          style: form
+          explode: true
+          schema:
+            type: array
+            items:
+              type: integer
+              minimum: 1
         - name: start_date
           in: query
           description: Filter by start date (ISO 8601)
@@ -178,7 +151,7 @@ paths:
             format: date-time
         - name: limit
           in: query
-          description: 'Maximum number of records to return for unbounded queries (max: 1000). When start_date or end_date is supplied, all records in the range are returned — the date filter itself bounds the payload.'
+          description: "Maximum number of records to return for unbounded queries (max: 1000). When start_date or end_date is supplied, all records in the range are returned — the date filter itself bounds the payload."
           schema:
             type: integer
             default: 100
@@ -190,14 +163,14 @@ paths:
             type: integer
             default: 0
       responses:
-        '200':
+        "200":
           description: List of records
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/RecordListResponse'
-        '500':
-          $ref: '#/components/responses/InternalError'
+                $ref: "#/components/schemas/RecordListResponse"
+        "500":
+          $ref: "#/components/responses/InternalError"
     post:
       summary: Create a new record
       description: Create a new time-series record
@@ -209,18 +182,18 @@ paths:
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/CreateRecordInput'
+              $ref: "#/components/schemas/CreateRecordInput"
       responses:
-        '201':
+        "201":
           description: Record created successfully
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/RecordResponse'
-        '400':
-          $ref: '#/components/responses/ValidationError'
-        '500':
-          $ref: '#/components/responses/InternalError'
+                $ref: "#/components/schemas/RecordResponse"
+        "400":
+          $ref: "#/components/responses/ValidationError"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /records/{id}:
     get:
       summary: Get a single record
@@ -229,18 +202,18 @@ paths:
       tags:
         - Records
       parameters:
-        - $ref: '#/components/parameters/RecordId'
+        - $ref: "#/components/parameters/RecordId"
       responses:
-        '200':
+        "200":
           description: Record details
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/RecordResponse'
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+                $ref: "#/components/schemas/RecordResponse"
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
     put:
       summary: Update a record
       description: Update an existing record by ID
@@ -248,26 +221,26 @@ paths:
       tags:
         - Records
       parameters:
-        - $ref: '#/components/parameters/RecordId'
+        - $ref: "#/components/parameters/RecordId"
       requestBody:
         required: true
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/UpdateRecordInput'
+              $ref: "#/components/schemas/UpdateRecordInput"
       responses:
-        '200':
+        "200":
           description: Record updated successfully
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/RecordResponse'
-        '400':
-          $ref: '#/components/responses/ValidationError'
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+                $ref: "#/components/schemas/RecordResponse"
+        "400":
+          $ref: "#/components/responses/ValidationError"
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
     delete:
       summary: Delete a record
       description: Delete a record by ID
@@ -275,9 +248,9 @@ paths:
       tags:
         - Records
       parameters:
-        - $ref: '#/components/parameters/RecordId'
+        - $ref: "#/components/parameters/RecordId"
       responses:
-        '200':
+        "200":
           description: Record deleted successfully
           content:
             application/json:
@@ -297,10 +270,10 @@ paths:
                         enum:
                           - true
                         example: true
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /records/{id}/visibility:
     patch:
       summary: Toggle record visibility
@@ -309,7 +282,7 @@ paths:
       tags:
         - Records
       parameters:
-        - $ref: '#/components/parameters/RecordId'
+        - $ref: "#/components/parameters/RecordId"
       requestBody:
         required: true
         content:
@@ -322,7 +295,7 @@ paths:
               required:
                 - hide
       responses:
-        '200':
+        "200":
           description: Visibility updated
           content:
             application/json:
@@ -342,10 +315,10 @@ paths:
                       is_hidden:
                         type: integer
                         description: 0 = visible, 1 = hidden
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /records/bulk-delete:
     post:
       summary: Bulk delete records
@@ -372,7 +345,7 @@ paths:
               required:
                 - ids
       responses:
-        '200':
+        "200":
           description: Records deleted successfully
           content:
             application/json:
@@ -390,10 +363,10 @@ paths:
                       deleted:
                         type: integer
                         description: Number of records deleted
-        '400':
-          $ref: '#/components/responses/ValidationError'
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "400":
+          $ref: "#/components/responses/ValidationError"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /tags:
     get:
       summary: Get all tags
@@ -402,7 +375,7 @@ paths:
       tags:
         - Tags
       responses:
-        '200':
+        "200":
           description: List of tags
           content:
             application/json:
@@ -420,11 +393,11 @@ paths:
                       data:
                         type: array
                         items:
-                          $ref: '#/components/schemas/Tag'
+                          $ref: "#/components/schemas/Tag"
                       total:
                         type: integer
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "500":
+          $ref: "#/components/responses/InternalError"
   /tags/{id}:
     put:
       summary: Update a tag
@@ -451,10 +424,7 @@ paths:
                 unit:
                   type: string
                   nullable: true
-                  description: >-
-                    Unit of measurement. For a `time`-typed tag, must be
-                    `hour`, `minute`, or `second`, controlling whether the
-                    value formats as H:MM:SS, MM:SS, or decimal seconds.
+                  description: Unit of measurement. For a `time`-typed tag, must be `hour`, `minute`, or `second`, controlling whether the value formats as H:MM:SS, MM:SS, or decimal seconds.
                 chart_type:
                   type: string
                   enum:
@@ -463,24 +433,14 @@ paths:
                     - step
                 data_type:
                   type: string
-                  description: >-
-                    The scale every stored value is written against (a `time` tag's 90 means 90
-                    minutes). Changing it does NOT convert existing values, so it is
-                    accepted only when no stored value would change meaning: widening
-                    (`integer` → `decimal`) is always allowed, narrowing only while every
-                    stored value is representable in the new type, and moving into or out of
-                    `time` never is once the tag holds data. Otherwise the request is refused
-                    with 409 `TAG_HAS_DATA`, whose `error.details.reason` carries the same
-                    code as `Tag.data_type_options[].reason`. Read `data_type_options` off
-                    `GET /tags` rather than re-deriving this. Sending the tag's current value
-                    is not a change and is always accepted.
+                  description: "The scale every stored value is written against (a `time` tag's 90 means 90 minutes). Changing it does NOT convert existing values, so it is accepted only when no stored value would change meaning: widening (`integer` → `decimal`) is always allowed, narrowing only while every stored value is representable in the new type, and moving into or out of `time` never is once the tag holds data. Otherwise the request is refused with 409 `TAG_HAS_DATA`, whose `error.details.reason` carries the same code as `Tag.data_type_options[].reason`. Read `data_type_options` off `GET /tags` rather than re-deriving this. Sending the tag's current value is not a change and is always accepted."
                   enum:
                     - binary
                     - decimal
                     - integer
                     - time
       responses:
-        '200':
+        "200":
           description: Tag updated successfully
           content:
             application/json:
@@ -493,27 +453,22 @@ paths:
                       - true
                     example: true
                   data:
-                    $ref: '#/components/schemas/Tag'
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '409':
-          description: >-
-            Refused: the requested `data_type` would change the meaning of values
-            already stored. `error.details.reason` is one of `SCALE_CHANGE`,
-            `NON_INTEGER_VALUES`, `NON_BINARY_VALUES`.
+                    $ref: "#/components/schemas/Tag"
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "409":
+          description: "Refused: the requested `data_type` would change the meaning of values already stored. `error.details.reason` is one of `SCALE_CHANGE`, `NON_INTEGER_VALUES`, `NON_BINARY_VALUES`."
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/ErrorResponse'
+                $ref: "#/components/schemas/ErrorResponse"
               example:
                 success: false
                 error:
                   code: TAG_HAS_DATA
-                  message: >-
-                    Cannot change data_type: this tag already has records or
-                    goals written against its current scale.
-        '500':
-          $ref: '#/components/responses/InternalError'
+                  message: "Cannot change data_type: this tag already has records or goals written against its current scale."
+        "500":
+          $ref: "#/components/responses/InternalError"
     delete:
       summary: Delete a tag
       description: Delete a tag and all associated records by ID
@@ -528,7 +483,7 @@ paths:
             type: integer
             minimum: 1
       responses:
-        '200':
+        "200":
           description: Tag deleted successfully
           content:
             application/json:
@@ -548,10 +503,10 @@ paths:
                         enum:
                           - true
                         example: true
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /tags/{id}/visibility:
     patch:
       summary: Toggle tag visibility
@@ -578,7 +533,7 @@ paths:
               required:
                 - hide
       responses:
-        '200':
+        "200":
           description: Visibility updated
           content:
             application/json:
@@ -591,11 +546,11 @@ paths:
                       - true
                     example: true
                   data:
-                    $ref: '#/components/schemas/Tag'
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+                    $ref: "#/components/schemas/Tag"
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /tags/bulk-delete:
     post:
       summary: Bulk delete tags
@@ -622,7 +577,7 @@ paths:
               required:
                 - ids
       responses:
-        '200':
+        "200":
           description: Tags deleted successfully
           content:
             application/json:
@@ -640,10 +595,10 @@ paths:
                       deleted:
                         type: integer
                         description: Number of tags deleted
-        '400':
-          $ref: '#/components/responses/ValidationError'
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "400":
+          $ref: "#/components/responses/ValidationError"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /shares:
     get:
       summary: Get my shares
@@ -652,7 +607,7 @@ paths:
       tags:
         - Shares
       responses:
-        '200':
+        "200":
           description: List of shares
           content:
             application/json:
@@ -670,18 +625,14 @@ paths:
                       data:
                         type: array
                         items:
-                          $ref: '#/components/schemas/Share'
+                          $ref: "#/components/schemas/Share"
                       total:
                         type: integer
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "500":
+          $ref: "#/components/responses/InternalError"
     post:
       summary: Create a share (sends approval email)
-      description: >-
-        Create a tag share addressed to another user by email. The share is created in status `pending` and does NOT
-        grant data access until the recipient clicks the approval link in the invitation email delivered via the Account
-        API (Resend). Invitations expire after 7 days; after expiry the recipient must be re-invited. The raw invitation
-        token is never stored — only a SHA-256 hash — so even database access does not expose reusable accept links.
+      description: Create a tag share addressed to another user by email. The share is created in status `pending` and does NOT grant data access until the recipient clicks the approval link in the invitation email delivered via the Account API (Resend). Invitations expire after 7 days; after expiry the recipient must be re-invited. The raw invitation token is never stored — only a SHA-256 hash — so even database access does not expose reusable accept links.
       operationId: createShare
       tags:
         - Shares
@@ -707,7 +658,7 @@ paths:
                 - shared_with_email
                 - permission
       responses:
-        '201':
+        "201":
           description: Share created successfully
           content:
             application/json:
@@ -720,18 +671,15 @@ paths:
                       - true
                     example: true
                   data:
-                    $ref: '#/components/schemas/Share'
-        '400':
-          $ref: '#/components/responses/ValidationError'
-        '500':
-          $ref: '#/components/responses/InternalError'
+                    $ref: "#/components/schemas/Share"
+        "400":
+          $ref: "#/components/responses/ValidationError"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /shares/with-me:
     get:
       summary: Get shares shared with me
-      description: >-
-        Retrieve shares that other users have shared with the authenticated user. Returns only `accepted` shares by
-        default. Pass `?status=pending` to list invitations awaiting approval, `?status=rejected` for declined
-        invitations, or `?status=all` for every row.
+      description: Retrieve shares that other users have shared with the authenticated user. Returns only `accepted` shares by default. Pass `?status=pending` to list invitations awaiting approval, `?status=rejected` for declined invitations, or `?status=all` for every row.
       operationId: getSharedWithMe
       tags:
         - Shares
@@ -749,7 +697,7 @@ paths:
             default: accepted
           description: Filter by approval status.
       responses:
-        '200':
+        "200":
           description: List of shares shared with the user
           content:
             application/json:
@@ -767,11 +715,11 @@ paths:
                       data:
                         type: array
                         items:
-                          $ref: '#/components/schemas/Share'
+                          $ref: "#/components/schemas/Share"
                       total:
                         type: integer
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "500":
+          $ref: "#/components/responses/InternalError"
   /shares/{id}:
     put:
       summary: Update a share
@@ -804,7 +752,7 @@ paths:
                 - tag_id
                 - permission
       responses:
-        '200':
+        "200":
           description: Share updated
           content:
             application/json:
@@ -817,11 +765,11 @@ paths:
                       - true
                     example: true
                   data:
-                    $ref: '#/components/schemas/Share'
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+                    $ref: "#/components/schemas/Share"
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
     delete:
       summary: Delete a share
       description: Delete a share by ID
@@ -836,7 +784,7 @@ paths:
             type: integer
             minimum: 1
       responses:
-        '200':
+        "200":
           description: Share deleted
           content:
             application/json:
@@ -856,10 +804,10 @@ paths:
                         enum:
                           - true
                         example: true
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /shares/{id}/visibility:
     patch:
       summary: Toggle share visibility
@@ -886,7 +834,7 @@ paths:
               required:
                 - is_hidden
       responses:
-        '200':
+        "200":
           description: Visibility updated
           content:
             application/json:
@@ -899,11 +847,11 @@ paths:
                       - true
                     example: true
                   data:
-                    $ref: '#/components/schemas/Share'
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+                    $ref: "#/components/schemas/Share"
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /shares/{id}/pause:
     patch:
       summary: Toggle share paused status
@@ -930,7 +878,7 @@ paths:
               required:
                 - is_paused
       responses:
-        '200':
+        "200":
           description: Paused status updated
           content:
             application/json:
@@ -943,11 +891,11 @@ paths:
                       - true
                     example: true
                   data:
-                    $ref: '#/components/schemas/Share'
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+                    $ref: "#/components/schemas/Share"
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /shares/{id}/transfer:
     post:
       summary: Transfer tag ownership
@@ -963,7 +911,7 @@ paths:
             type: integer
             minimum: 1
       responses:
-        '200':
+        "200":
           description: Ownership transferred successfully
           content:
             application/json:
@@ -983,10 +931,10 @@ paths:
                         enum:
                           - true
                         example: true
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /shares/bulk-delete:
     post:
       summary: Bulk delete shares
@@ -1013,7 +961,7 @@ paths:
               required:
                 - ids
       responses:
-        '200':
+        "200":
           description: Shares deleted successfully
           content:
             application/json:
@@ -1030,17 +978,14 @@ paths:
                     properties:
                       deleted:
                         type: integer
-        '400':
-          $ref: '#/components/responses/ValidationError'
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "400":
+          $ref: "#/components/responses/ValidationError"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /shares/accept:
     post:
       summary: Accept a pending share invitation
-      description: >-
-        Called from the /share/accept frontend page after the recipient clicks the link in their invitation email.
-        Requires the authenticated user to be the invited recipient (`shared_with_user_id`). On success the share
-        transitions from `pending` to `accepted` and data access is enabled.
+      description: Called from the /share/accept frontend page after the recipient clicks the link in their invitation email. Requires the authenticated user to be the invited recipient (`shared_with_user_id`). On success the share transitions from `pending` to `accepted` and data access is enabled.
       operationId: acceptShare
       tags:
         - Shares
@@ -1057,7 +1002,7 @@ paths:
               required:
                 - token
       responses:
-        '200':
+        "200":
           description: Share accepted
           content:
             application/json:
@@ -1080,18 +1025,14 @@ paths:
                       already:
                         type: boolean
                         description: True if the share was already accepted.
-        '400':
-          $ref: '#/components/responses/ValidationError'
-        '404':
-          $ref: '#/components/responses/NotFound'
+        "400":
+          $ref: "#/components/responses/ValidationError"
+        "404":
+          $ref: "#/components/responses/NotFound"
   /shares/reject:
     post:
       summary: Decline a pending share invitation via emailed token
-      description: >-
-        Called from the /share/reject frontend page after the recipient clicks the decline link in their invitation
-        email. Same token and auth model as /shares/accept (requires the authenticated user to be the invited
-        recipient); on success the share transitions from `pending` to `rejected`. Cannot be used on already-accepted
-        shares (delete instead, via DELETE /shares/{id}).
+      description: Called from the /share/reject frontend page after the recipient clicks the decline link in their invitation email. Same token and auth model as /shares/accept (requires the authenticated user to be the invited recipient); on success the share transitions from `pending` to `rejected`. Cannot be used on already-accepted shares (delete instead, via DELETE /shares/{id}).
       operationId: rejectShareByToken
       tags:
         - Shares
@@ -1108,7 +1049,7 @@ paths:
               required:
                 - token
       responses:
-        '200':
+        "200":
           description: Share rejected
           content:
             application/json:
@@ -1131,16 +1072,14 @@ paths:
                       already:
                         type: boolean
                         description: True if the share was already rejected.
-        '400':
-          $ref: '#/components/responses/ValidationError'
-        '404':
-          $ref: '#/components/responses/NotFound'
+        "400":
+          $ref: "#/components/responses/ValidationError"
+        "404":
+          $ref: "#/components/responses/NotFound"
   /shares/{id}/reject:
     post:
       summary: Reject a pending share invitation
-      description: >-
-        Called from the recipient's SharingManager UI. Marks the share as `rejected`; cannot be used on already-accepted
-        shares (delete instead).
+      description: Called from the recipient's SharingManager UI. Marks the share as `rejected`; cannot be used on already-accepted shares (delete instead).
       operationId: rejectShare
       tags:
         - Shares
@@ -1151,7 +1090,7 @@ paths:
           schema:
             type: integer
       responses:
-        '200':
+        "200":
           description: Share rejected
           content:
             application/json:
@@ -1171,10 +1110,10 @@ paths:
                         type: string
                         enum:
                           - rejected
-        '400':
-          $ref: '#/components/responses/ValidationError'
-        '404':
-          $ref: '#/components/responses/NotFound'
+        "400":
+          $ref: "#/components/responses/ValidationError"
+        "404":
+          $ref: "#/components/responses/NotFound"
   /shared-graphs:
     get:
       summary: Get my shared graphs
@@ -1183,7 +1122,7 @@ paths:
       tags:
         - Shared Graphs
       responses:
-        '200':
+        "200":
           description: List of shared graphs
           content:
             application/json:
@@ -1198,9 +1137,9 @@ paths:
                   data:
                     type: array
                     items:
-                      $ref: '#/components/schemas/SharedGraph'
-        '500':
-          $ref: '#/components/responses/InternalError'
+                      $ref: "#/components/schemas/SharedGraph"
+        "500":
+          $ref: "#/components/responses/InternalError"
     post:
       summary: Create a shared graph
       description: Create a publicly shareable graph snapshot for SNS sharing
@@ -1212,9 +1151,9 @@ paths:
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/CreateSharedGraphInput'
+              $ref: "#/components/schemas/CreateSharedGraphInput"
       responses:
-        '201':
+        "201":
           description: Shared graph created
           content:
             application/json:
@@ -1227,11 +1166,11 @@ paths:
                       - true
                     example: true
                   data:
-                    $ref: '#/components/schemas/SharedGraph'
-        '400':
-          $ref: '#/components/responses/ValidationError'
-        '500':
-          $ref: '#/components/responses/InternalError'
+                    $ref: "#/components/schemas/SharedGraph"
+        "400":
+          $ref: "#/components/responses/ValidationError"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /shared-graphs/{id}:
     put:
       summary: Update a shared graph
@@ -1257,7 +1196,7 @@ paths:
                 description:
                   type: string
       responses:
-        '200':
+        "200":
           description: Shared graph updated
           content:
             application/json:
@@ -1270,11 +1209,11 @@ paths:
                       - true
                     example: true
                   data:
-                    $ref: '#/components/schemas/SharedGraph'
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+                    $ref: "#/components/schemas/SharedGraph"
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
     delete:
       summary: Delete a shared graph
       description: Delete a shared graph by ID
@@ -1288,7 +1227,7 @@ paths:
           schema:
             type: string
       responses:
-        '200':
+        "200":
           description: Shared graph deleted
           content:
             application/json:
@@ -1308,10 +1247,10 @@ paths:
                         enum:
                           - true
                         example: true
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /shared-graphs/{id}/toggle:
     patch:
       summary: Toggle shared graph active status
@@ -1326,7 +1265,7 @@ paths:
           schema:
             type: string
       responses:
-        '200':
+        "200":
           description: Status toggled
           content:
             application/json:
@@ -1344,10 +1283,10 @@ paths:
                       is_active:
                         type: integer
                         description: 1 for active, 0 for inactive
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /shared-graphs/bulk-delete:
     post:
       summary: Bulk delete shared graphs
@@ -1373,7 +1312,7 @@ paths:
               required:
                 - ids
       responses:
-        '200':
+        "200":
           description: Shared graphs deleted
           content:
             application/json:
@@ -1390,10 +1329,10 @@ paths:
                     properties:
                       deleted:
                         type: integer
-        '400':
-          $ref: '#/components/responses/ValidationError'
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "400":
+          $ref: "#/components/responses/ValidationError"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /public/shared-graphs/{id}:
     get:
       summary: Get public shared graph
@@ -1409,7 +1348,7 @@ paths:
           schema:
             type: string
       responses:
-        '200':
+        "200":
           description: Shared graph public data
           content:
             application/json:
@@ -1422,9 +1361,9 @@ paths:
                       - true
                     example: true
                   data:
-                    $ref: '#/components/schemas/SharedGraphPublic'
-        '404':
-          $ref: '#/components/responses/NotFound'
+                    $ref: "#/components/schemas/SharedGraphPublic"
+        "404":
+          $ref: "#/components/responses/NotFound"
   /public/shared-graphs/{id}/og-image:
     get:
       summary: Generate OG image for shared graph
@@ -1440,15 +1379,15 @@ paths:
           schema:
             type: string
       responses:
-        '200':
+        "200":
           description: OG image
           content:
             image/png:
               schema:
                 type: string
                 format: binary
-        '404':
-          $ref: '#/components/responses/NotFound'
+        "404":
+          $ref: "#/components/responses/NotFound"
   /records/export:
     get:
       summary: Export records as CSV
@@ -1475,7 +1414,7 @@ paths:
             type: string
             format: date-time
       responses:
-        '200':
+        "200":
           description: CSV file containing records
           content:
             text/csv:
@@ -1485,8 +1424,8 @@ paths:
                 example: |-
                   Tag,Value,Unit,Recorded At
                   "temperature",25.5,"°C","2024-01-01T10:00:00Z"
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "500":
+          $ref: "#/components/responses/InternalError"
   /records/import:
     post:
       summary: Import records from CSV
@@ -1504,47 +1443,52 @@ paths:
                 file:
                   type: string
                   format: binary
-                  description: 'CSV file to import (columns: Tag, Value, Unit, Recorded At)'
+                  description: "CSV file to import (columns: Tag, Value, Unit, Recorded At)"
               required:
                 - file
       responses:
-        '200':
+        "200":
           description: Import completed successfully
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/ImportResponse'
-        '400':
-          $ref: '#/components/responses/ValidationError'
-        '500':
-          $ref: '#/components/responses/InternalError'
+                $ref: "#/components/schemas/ImportResponse"
+        "400":
+          $ref: "#/components/responses/ValidationError"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /records/stats:
     get:
       summary: Get record statistics
-      description: Get aggregated statistics for records with a specific name
+      description: Get aggregated statistics for the records of one tag, picked by `name` or, unambiguously, by `tag_id`. Send one of the two.
       operationId: getRecordStats
       tags:
         - Statistics
       parameters:
         - name: name
           in: query
-          required: true
-          description: Record name to get statistics for
+          description: Record name to get statistics for. A name is unique only per owner, so a tag shared with you can share it with one of your own; prefer `tag_id`.
           schema:
             type: string
+        - name: tag_id
+          in: query
+          description: Id of the tag to get statistics for. When given, `name` is ignored. An id of a tag you cannot read matches nothing.
+          schema:
+            type: integer
+            minimum: 1
       responses:
-        '200':
+        "200":
           description: Statistics for the specified record name
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/StatsResponse'
-        '400':
-          $ref: '#/components/responses/ValidationError'
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+                $ref: "#/components/schemas/StatsResponse"
+        "400":
+          $ref: "#/components/responses/ValidationError"
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /media/upload:
     post:
       summary: Upload media file
@@ -1566,7 +1510,7 @@ paths:
               required:
                 - file
       responses:
-        '200':
+        "200":
           description: File uploaded successfully
           content:
             application/json:
@@ -1603,10 +1547,10 @@ paths:
                       contentType:
                         type: string
                         description: MIME content type
-        '400':
-          $ref: '#/components/responses/ValidationError'
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "400":
+          $ref: "#/components/responses/ValidationError"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /media/upload-url:
     post:
       summary: Get upload URL info
@@ -1635,7 +1579,7 @@ paths:
                 - contentType
                 - size
       responses:
-        '200':
+        "200":
           description: Upload URL info
           content:
             application/json:
@@ -1660,10 +1604,10 @@ paths:
                         type: string
                         example: direct
                         description: Upload method
-        '400':
-          $ref: '#/components/responses/ValidationError'
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "400":
+          $ref: "#/components/responses/ValidationError"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /media/signed-url/{key}:
     get:
       summary: Get signed URL for media access
@@ -1679,7 +1623,7 @@ paths:
           schema:
             type: string
       responses:
-        '200':
+        "200":
           description: Signed URL
           content:
             application/json:
@@ -1697,10 +1641,10 @@ paths:
                       signedUrl:
                         type: string
                         description: Signed URL for accessing the media file
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /media/delete/{key}:
     delete:
       summary: Delete media file
@@ -1716,7 +1660,7 @@ paths:
           schema:
             type: string
       responses:
-        '200':
+        "200":
           description: Media file deleted
           content:
             application/json:
@@ -1736,10 +1680,10 @@ paths:
                         enum:
                           - true
                         example: true
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /goals:
     get:
       summary: List all goals
@@ -1748,7 +1692,7 @@ paths:
       tags:
         - Goals
       responses:
-        '200':
+        "200":
           description: List of goals
           content:
             application/json:
@@ -1766,11 +1710,11 @@ paths:
                       data:
                         type: array
                         items:
-                          $ref: '#/components/schemas/Goal'
+                          $ref: "#/components/schemas/Goal"
                       total:
                         type: integer
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "500":
+          $ref: "#/components/responses/InternalError"
     post:
       summary: Create a new goal
       description: Create a new goal for the authenticated user
@@ -1782,9 +1726,9 @@ paths:
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/CreateGoalInput'
+              $ref: "#/components/schemas/CreateGoalInput"
       responses:
-        '201':
+        "201":
           description: Goal created successfully
           content:
             application/json:
@@ -1797,11 +1741,11 @@ paths:
                       - true
                     example: true
                   data:
-                    $ref: '#/components/schemas/Goal'
-        '400':
-          $ref: '#/components/responses/ValidationError'
-        '500':
-          $ref: '#/components/responses/InternalError'
+                    $ref: "#/components/schemas/Goal"
+        "400":
+          $ref: "#/components/responses/ValidationError"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /goals/{id}:
     put:
       summary: Update a goal
@@ -1821,9 +1765,9 @@ paths:
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/UpdateGoalInput'
+              $ref: "#/components/schemas/UpdateGoalInput"
       responses:
-        '200':
+        "200":
           description: Goal updated successfully
           content:
             application/json:
@@ -1836,13 +1780,13 @@ paths:
                       - true
                     example: true
                   data:
-                    $ref: '#/components/schemas/Goal'
-        '400':
-          $ref: '#/components/responses/ValidationError'
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+                    $ref: "#/components/schemas/Goal"
+        "400":
+          $ref: "#/components/responses/ValidationError"
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
     delete:
       summary: Delete a goal
       description: Delete a goal by ID
@@ -1857,7 +1801,7 @@ paths:
             type: integer
             minimum: 1
       responses:
-        '200':
+        "200":
           description: Goal deleted successfully
           content:
             application/json:
@@ -1877,10 +1821,10 @@ paths:
                         enum:
                           - true
                         example: true
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /goals/bulk-delete:
     post:
       summary: Bulk delete goals
@@ -1907,7 +1851,7 @@ paths:
               required:
                 - ids
       responses:
-        '200':
+        "200":
           description: Goals deleted successfully
           content:
             application/json:
@@ -1925,21 +1869,19 @@ paths:
                       deleted:
                         type: integer
                         description: Number of goals deleted
-        '400':
-          $ref: '#/components/responses/ValidationError'
-        '500':
-          $ref: '#/components/responses/InternalError'
+        "400":
+          $ref: "#/components/responses/ValidationError"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /goals/progress:
     get:
       summary: Get goal progress
-      description: >-
-        Retrieve progress for all visible goals of the authenticated user. Computes current values from latest records,
-        including virtual tags (e.g. BMI). Used by NASEBANAL Target for cross-app goal tracking.
+      description: Retrieve progress for all visible goals of the authenticated user. Computes current values from latest records, including virtual tags (e.g. BMI). Used by NASEBANAL Target for cross-app goal tracking.
       operationId: getGoalProgress
       tags:
         - Goals
       responses:
-        '200':
+        "200":
           description: Goal progress list
           content:
             application/json:
@@ -1957,9 +1899,9 @@ paths:
                       data:
                         type: array
                         items:
-                          $ref: '#/components/schemas/GoalProgress'
-        '500':
-          $ref: '#/components/responses/InternalError'
+                          $ref: "#/components/schemas/GoalProgress"
+        "500":
+          $ref: "#/components/responses/InternalError"
   /goals/{id}/visibility:
     patch:
       summary: Toggle goal visibility
@@ -1986,7 +1928,7 @@ paths:
               required:
                 - hide
       responses:
-        '200':
+        "200":
           description: Visibility updated
           content:
             application/json:
@@ -1999,11 +1941,11 @@ paths:
                       - true
                     example: true
                   data:
-                    $ref: '#/components/schemas/Goal'
-        '404':
-          $ref: '#/components/responses/NotFound'
-        '500':
-          $ref: '#/components/responses/InternalError'
+                    $ref: "#/components/schemas/Goal"
+        "404":
+          $ref: "#/components/responses/NotFound"
+        "500":
+          $ref: "#/components/responses/InternalError"
 components:
   securitySchemes:
     BearerAuth:
@@ -2075,10 +2017,7 @@ components:
         unit:
           type: string
           nullable: true
-          description: >-
-            Unit of measurement. For a `time`-typed tag, `hour`, `minute`, or
-            `second`, controlling whether the value formats as H:MM:SS,
-            MM:SS, or decimal seconds.
+          description: Unit of measurement. For a `time`-typed tag, `hour`, `minute`, or `second`, controlling whether the value formats as H:MM:SS, MM:SS, or decimal seconds.
         recorded_at:
           type: string
           format: date-time
@@ -2093,15 +2032,10 @@ components:
           description: Timestamp when the record was last updated
         owner_email:
           type: string
-          description: >-
-            Email of the tag's owner. Set on the caller's own rows too (it then
-            holds the caller's own address), so compare it with the caller's to
-            tell shared-in data apart.
+          description: Email of the tag's owner. Set on the caller's own rows too (it then holds the caller's own address), so compare it with the caller's to tell shared-in data apart.
         owner_name:
           type: string
-          description: >-
-            Display name the owner set in their profile. Absent when they set
-            none. Clients name the owner by this, falling back to a masked email.
+          description: Display name the owner set in their profile. Absent when they set none. Clients name the owner by this, falling back to a masked email.
       required:
         - id
         - name
@@ -2122,10 +2056,7 @@ components:
           example: 25.5
         unit:
           type: string
-          description: >-
-            Unit of measurement. For a `time`-typed tag, must be `hour`,
-            `minute`, or `second`, controlling whether the value formats as
-            H:MM:SS, MM:SS, or decimal seconds.
+          description: Unit of measurement. For a `time`-typed tag, must be `hour`, `minute`, or `second`, controlling whether the value formats as H:MM:SS, MM:SS, or decimal seconds.
           example: °C
         recorded_at:
           type: string
@@ -2145,10 +2076,7 @@ components:
           description: Numeric value
         unit:
           type: string
-          description: >-
-            Unit of measurement. For a `time`-typed tag, must be `hour`,
-            `minute`, or `second`, controlling whether the value formats as
-            H:MM:SS, MM:SS, or decimal seconds.
+          description: Unit of measurement. For a `time`-typed tag, must be `hour`, `minute`, or `second`, controlling whether the value formats as H:MM:SS, MM:SS, or decimal seconds.
         recorded_at:
           type: string
           format: date-time
@@ -2187,7 +2115,7 @@ components:
         latest:
           description: Latest record
           oneOf:
-            - $ref: '#/components/schemas/Record'
+            - $ref: "#/components/schemas/Record"
             - type: object
               nullable: true
       required:
@@ -2209,7 +2137,7 @@ components:
             - true
           example: true
         data:
-          $ref: '#/components/schemas/Record'
+          $ref: "#/components/schemas/Record"
     RecordListResponse:
       type: object
       properties:
@@ -2224,7 +2152,7 @@ components:
             data:
               type: array
               items:
-                $ref: '#/components/schemas/Record'
+                $ref: "#/components/schemas/Record"
             total:
               type: integer
               description: Total number of records matching the filter
@@ -2243,7 +2171,7 @@ components:
             - true
           example: true
         data:
-          $ref: '#/components/schemas/RecordStats'
+          $ref: "#/components/schemas/RecordStats"
     ImportResponse:
       type: object
       properties:
@@ -2271,6 +2199,45 @@ components:
             - imported
             - created
             - updated
+    SeriesKind:
+      type: string
+      enum:
+        - raw
+        - diff
+        - diff_pct
+        - sum
+        - bmi
+        - annual_income
+      description: "Stable code of a derived series — not the display suffix (`/Diff` etc.). `diff` difference from the previous record, `diff_pct` percent change from the previous record, `sum` running total, `bmi` BMI (body-weight category), `annual_income` annual income (currency category). The raw tag is `raw`: it is the default on the referencing side and never appears in a `derived_series` list."
+    DerivedSeries:
+      type: object
+      description: "A series derived from a tag. No row of its own: it is derived from the tag's settings (`derived_config`, `category`). Identified by the source tag's `id` plus `kind` — no name in it, so a rename cannot break a reference."
+      properties:
+        kind:
+          $ref: "#/components/schemas/SeriesKind"
+        label:
+          type: string
+          description: Display name (e.g. `Body Weight/BMI`). Not an identifier.
+        unit:
+          type: string
+          nullable: true
+        data_type:
+          type: string
+          enum:
+            - decimal
+            - integer
+            - time
+        chart_type:
+          type: string
+          enum:
+            - line
+            - smooth
+            - step
+      required:
+        - kind
+        - label
+        - data_type
+        - chart_type
     Tag:
       type: object
       properties:
@@ -2283,10 +2250,7 @@ components:
         unit:
           type: string
           nullable: true
-          description: >-
-            Unit of measurement. For a `time`-typed tag, must be `hour`,
-            `minute`, or `second`, controlling whether the value formats as
-            H:MM:SS, MM:SS, or decimal seconds.
+          description: Unit of measurement. For a `time`-typed tag, must be `hour`, `minute`, or `second`, controlling whether the value formats as H:MM:SS, MM:SS, or decimal seconds.
         data_type:
           type: string
           enum:
@@ -2303,16 +2267,14 @@ components:
         is_hidden:
           type: integer
           description: 0 = visible, 1 = hidden
+        derived_series:
+          type: array
+          description: Derived series this tag can produce. Excludes the raw series (`raw`).
+          items:
+            $ref: "#/components/schemas/DerivedSeries"
         data_type_options:
           type: array
-          description: >-
-            Which `data_type` this tag may be changed to, and why not for the
-            rest. A change is safe exactly when no stored value changes meaning,
-            which depends on the direction and on what is already stored — so
-            this is server-computed rather than re-derived per client, and it
-            carries a reason per option because the reason differs per option.
-            A tag shared in from another user lists only its current type, not
-            selectable: the recipient does not own the master data.
+          description: "Which `data_type` this tag may be changed to, and why not for the rest. A change is safe exactly when no stored value changes meaning, which depends on the direction and on what is already stored — so this is server-computed rather than re-derived per client, and it carries a reason per option because the reason differs per option. A tag shared in from another user lists only its current type, not selectable: the recipient does not own the master data."
           items:
             type: object
             properties:
@@ -2327,14 +2289,7 @@ components:
                 type: boolean
               reason:
                 type: string
-                description: >-
-                  Why this type is unavailable; absent when selectable.
-                  `SCALE_CHANGE` — into or out of `time`, whose stored minutes
-                  would be re-read rather than converted (90 becomes 1:30).
-                  `NON_INTEGER_VALUES` — a stored value is not a whole number,
-                  so it would display rounded while the stored value stays
-                  fractional. `NON_BINARY_VALUES` — a stored value is neither 0
-                  nor 1.
+                description: Why this type is unavailable; absent when selectable. `SCALE_CHANGE` — into or out of `time`, whose stored minutes would be re-read rather than converted (90 becomes 1:30). `NON_INTEGER_VALUES` — a stored value is not a whole number, so it would display rounded while the stored value stays fractional. `NON_BINARY_VALUES` — a stored value is neither 0 nor 1.
                 enum:
                   - SCALE_CHANGE
                   - NON_INTEGER_VALUES
@@ -2350,15 +2305,10 @@ components:
           format: date-time
         owner_email:
           type: string
-          description: >-
-            Email of the tag's owner. Set on the caller's own tags too (it then
-            holds the caller's own address), so compare it with the caller's to
-            tell shared-in tags apart.
+          description: Email of the tag's owner. Set on the caller's own tags too (it then holds the caller's own address), so compare it with the caller's to tell shared-in tags apart.
         owner_name:
           type: string
-          description: >-
-            Display name the owner set in their profile. Absent when they set
-            none. Clients name the owner by this, falling back to a masked email.
+          description: Display name the owner set in their profile. Absent when they set none. Clients name the owner by this, falling back to a masked email.
       required:
         - id
         - user_id
@@ -2392,9 +2342,7 @@ components:
             - pending
             - accepted
             - rejected
-          description: >-
-            Approval status. New shares are created in 'pending' and require the recipient to click the accept link
-            delivered via email. Only 'accepted' shares grant data access.
+          description: Approval status. New shares are created in 'pending' and require the recipient to click the accept link delivered via email. Only 'accepted' shares grant data access.
         expires_at:
           type: string
           format: date-time
@@ -2411,18 +2359,13 @@ components:
           description: Email of the sharing owner. Set on shares addressed to the caller.
         owner_name:
           type: string
-          description: >-
-            Display name the sharing owner set in their profile. Absent when
-            they set none.
+          description: Display name the sharing owner set in their profile. Absent when they set none.
         shared_with_email:
           type: string
           description: Email of the recipient. Set on shares the caller owns.
         shared_with_name:
           type: string
-          description: >-
-            Display name the recipient set in their profile. Set on shares the
-            caller owns, and only once the share is `accepted`, so an invitation
-            does not reveal the profile of someone who has not accepted it.
+          description: Display name the recipient set in their profile. Set on shares the caller owns, and only once the share is `accepted`, so an invitation does not reveal the profile of someone who has not accepted it.
       required:
         - id
         - owner_user_id
@@ -2560,9 +2503,7 @@ components:
           description: Preferred language
         plan:
           type: string
-          description: >-
-            Plan for this service, derived from the account's subscriptions.
-            `free` when the account holds no active subscription for Recorder.
+          description: Plan for this service, derived from the account's subscriptions. `free` when the account holds no active subscription for Recorder.
         subscription_status:
           type: string
           nullable: true
@@ -2605,6 +2546,10 @@ components:
         virtual_tag_key:
           type: string
           nullable: true
+        tag_kind:
+          allOf:
+            - $ref: "#/components/schemas/SeriesKind"
+          description: Which series of the `tag_id` tag the goal targets. Absent or `raw` means the raw tag. Successor to `virtual_tag_key`, with no name in it.
         is_hidden:
           type: integer
           description: 0 = visible, 1 = hidden
@@ -2660,6 +2605,10 @@ components:
         virtual_tag_key:
           type: string
           description: Virtual tag key
+        tag_kind:
+          allOf:
+            - $ref: "#/components/schemas/SeriesKind"
+          description: Which series of the `tag_id` tag the goal targets. Absent or `raw` means the raw tag. Successor to `virtual_tag_key`, with no name in it.
       required:
         - tag_id
         - goal_type
@@ -2687,6 +2636,10 @@ components:
           type: string
         virtual_tag_key:
           type: string
+        tag_kind:
+          allOf:
+            - $ref: "#/components/schemas/SeriesKind"
+          description: Which series of the `tag_id` tag the goal targets. Absent or `raw` means the raw tag. Successor to `virtual_tag_key`, with no name in it.
     ErrorResponse:
       type: object
       properties:
@@ -2714,7 +2667,7 @@ components:
       content:
         application/json:
           schema:
-            $ref: '#/components/schemas/ErrorResponse'
+            $ref: "#/components/schemas/ErrorResponse"
           example:
             success: false
             error:
@@ -2725,7 +2678,7 @@ components:
       content:
         application/json:
           schema:
-            $ref: '#/components/schemas/ErrorResponse'
+            $ref: "#/components/schemas/ErrorResponse"
           example:
             success: false
             error:
@@ -2736,7 +2689,7 @@ components:
       content:
         application/json:
           schema:
-            $ref: '#/components/schemas/ErrorResponse'
+            $ref: "#/components/schemas/ErrorResponse"
           example:
             success: false
             error:
@@ -2747,7 +2700,7 @@ components:
       content:
         application/json:
           schema:
-            $ref: '#/components/schemas/ErrorResponse'
+            $ref: "#/components/schemas/ErrorResponse"
           example:
             success: false
             error: