Appearance
API Endpoints
Complete inventory of routes registered in dps-code-api/app.py. Auth legend: 🔑 API key · 👤 browser session · either. Full detail (bodies, responses, errors, side effects) is in the API reference.
Auth & session
| Method | Path | Auth | Purpose |
|---|---|---|---|
| GET | / | — | Liveness probe |
| GET | /auth/discord/login | — | Begin Discord OAuth |
| GET | /auth/discord/callback | — | OAuth callback |
| GET | /auth/me | 👤 | Current agent + permissions |
| POST | /auth/logout | 👤 | End session |
| POST | /demo/reset | 👤 (demo) | Re-seed demo dataset |
Generators & utilities
| Method | Path | Auth | Purpose |
|---|---|---|---|
| GET | /generate/agreement | 🔑 | AGM-##### |
| GET | /generate/agent | 🔑 | DPS-AG-##### |
| GET | /generate/join | 🔑 | SC-###X# |
| GET | /generate/case | 🔑 | DPS-CASE-##### |
| GET | /generate/investigation | 🔑 | INV-##### |
| GET | /generate/clearance | 🔑 | CL-### |
| POST | /util/timestamp | 🔑 | JS date → Discord Unix timestamp |
Reports / dockets
| Method | Path | Auth | Purpose |
|---|---|---|---|
| POST | /reports/create | either | Create report (atomic, + event + queue) |
| GET | /reports | either | List (legacy or paginated rpc_list_reports) |
| GET | /reports/<report_id> | either | Full report |
| PATCH | /reports/<report_id>/update | either | Whitelisted update (status/assignment/…) |
| DELETE | /reports/<report_id> | either | Hard delete (reason + forensic audit) |
| POST | /reports/<report_id>/action | either | validate / invalidate / investigate / contact_reporter / claim |
| POST | /reports/<report_id>/investigation/begin | either | Begin investigation (legacy adapter) |
| POST | /reports/<report_id>/investigation/end | either | Conclude investigation → Pending |
| POST | /reports/<report_id>/viewed | either | No-op (compat) |
| POST | /reports/<report_id>/evidence/opened | either | No-op (compat) |
| POST | /reports/<report_id>/notes | either | Add note |
| POST | /reports/<report_id>/evidence | either | Add evidence |
| POST | /reports/<report_id>/timeline | either | Add timeline entry |
| POST | /reports/<report_id>/discord-profiles | 🔑 | Store bot-captured profile snapshots |
Contact threads
| Method | Path | Auth | Purpose |
|---|---|---|---|
| GET | /reports/<report_id>/contact | either | Thread + closed state |
| POST | /reports/<report_id>/contact/reply | either | Agent message (queues bot DM) |
| POST | /reports/<report_id>/contact/close | either | End conversation |
| POST | /reports/<report_id>/contact/respond | 🔑 | Bot relays reporter reply |
Evidence & audit
| Method | Path | Auth | Purpose |
|---|---|---|---|
| GET | /evidence | either | Global evidence list (enriched) |
| GET | /audit | either | Paginated audit log (rpc_audit_log_v2) |
Action queues
| Method | Path | Auth | Purpose |
|---|---|---|---|
| GET | /actions/pending | 🔑 | Pending/processing actions |
| GET | /actions/next | 🔑 | Atomic single pickup (204 when empty) |
| GET | /actions/next/operator | 🔑 | Operator-queue pickup |
| GET | /actions/next/supervisor | 🔑 | Supervisor-queue pickup |
| GET | /actions/pending/operator | either | Operator queue list |
| GET | /actions/pending/supervisor | either | Supervisor queue list (Senior Agent+) |
| POST | /actions/<action_id>/complete | 🔑 | Record bot outcome (atomic + event) |
| POST | /actions/<action_id>/requeue | either | Failed → pending |
Agents
| Method | Path | Auth | Purpose |
|---|---|---|---|
| GET | /agents | either | List agents |
| GET | /agents/<discord_id> | either | One agent |
| POST | /agents/create | either | Start onboarding record |
| PATCH | /agents/<discord_id>/update | either | Bot onboarding fields, or audited admin update (Director for rank/clearance) |
Punishments & discipline
| Method | Path | Auth | Purpose |
|---|---|---|---|
| POST | /punishments | 👤 | Issue punishment (atomic + audit + delivery) |
| GET | /punishments | 👤 | List (filters + pagination) |
| GET | /punishments/<punishment_id> | 👤 | One punishment |
| PATCH | /punishments/<punishment_id> | 👤 | Whitelisted edit (reason required) |
| POST | /punishments/<punishment_id>/revoke | 👤 | Revoke (reason required) |
| GET | /punishments/users/<discord_id>/profile | 👤 | Stored Discord profile snapshot |
| GET | /discipline/next | 🔑 | Atomic delivery pickup (204 when empty) |
| GET | /discipline/pending | either | Delivery list |
| POST | /discipline/user-lookup | 👤 | Enqueue profile lookup |
| POST | /discipline/<item_id>/complete | 🔑 | Record delivery outcome |
| POST | /discipline/user-lookup/<item_id>/profile | 🔑 | Deliver captured profile + complete |
| POST | /discipline/<item_id>/requeue | either | Failed → pending |
System Administration
| Method | Path | Auth | Purpose |
|---|---|---|---|
| GET | /admin/health | 👤 | 10-section health + incident history |
| GET | /admin/queue | 👤 | All queue actions |
| POST | /admin/queue/<action_id>/requeue | 👤 | Requeue failed (audited) |
| POST | /admin/queue/<action_id>/cancel | 👤 | Cancel (audited) |
| POST | /admin/queue/sweep | 👤 | Manual stale sweep (audited) |
| GET | /admin/audit | 👤 | Admin audit trail |
| GET | /admin/agents | 👤 | Full agent list |
| PATCH | /admin/agents/<discord_id> | 👤 | Audited agent correction |
| GET | /admin/access | 👤 | Allowlist (Director) |
| POST | /admin/access/grant | 👤 | Grant access (Director) |
| POST | /admin/access/revoke | 👤 | Soft revoke (Director) |
| POST | /admin/access/remove | 👤 | Hard remove (Director) |
| GET | /admin/reports | 👤 | Report search (Director) |
| POST | /admin/reports/<report_id>/correct | 👤 | Record correction (Director) |
| GET | /admin/schema | 👤 | Migrations + RPC inventory (Director) |
| POST | /admin/schema/reload | 👤 | PostgREST reload (Director) |
Training Center
| Method | Path | Auth | Purpose |
|---|---|---|---|
| GET | /training/me | 👤 | Role discovery |
| GET | /training/realtime-config | 👤 | Supabase URL + anon key + token path |
| GET | /training/realtime-token | 👤 | Short-lived Realtime JWT |
| GET | /training/scenarios | 👤 (trainer) | Scenario catalog |
| GET | /training/trainees | 👤 (trainer) | Onboarding agents |
| GET | /training/sessions | 👤 | Role-scoped session list |
| POST | /training/sessions | 👤 (trainer) | Create session |
| GET | /training/sessions/<session_id> | 👤 | Full session payload |
| POST | /training/sessions/<session_id>/start | 👤 (owner trainer) | pending → active |
| POST | /training/sessions/<session_id>/pause | 👤 (owner trainer) | active → paused |
| POST | /training/sessions/<session_id>/resume | 👤 (owner trainer) | paused → active |
| POST | /training/sessions/<session_id>/restart | 👤 (owner trainer) | fresh active run |
| POST | /training/sessions/<session_id>/reset | 👤 (owner trainer) | back to pending |
| POST | /training/sessions/<session_id>/end | 👤 (owner trainer) | → completed |
| POST | /training/sessions/<session_id>/abort | 👤 (owner trainer) | → aborted |
| POST | /training/sessions/<session_id>/events | 👤 (participant) | Record trainee action (+ engine) |
| POST | /training/sessions/<session_id>/scenarios/<scenario_id>/activate | 👤 (owner trainer) | Introduce scenario |
| POST | /training/sessions/<session_id>/evidence/<key>/release | 👤 (owner trainer) | Evidence override |
| POST | /training/sessions/<session_id>/evidence/<key>/lock | 👤 (owner trainer) | Evidence override |
| POST | /training/sessions/<session_id>/objectives/<id>/complete | 👤 (owner trainer) | Objective override |
| POST | /training/sessions/<session_id>/objectives/<id>/reset | 👤 (owner trainer) | Objective override |
| POST | /training/sessions/<session_id>/inject | 👤 (owner trainer) | Information injection |
| POST | /training/sessions/<session_id>/notes | 👤 (participant) | Trainer/trainee note |
| POST | /training/sessions/<session_id>/notes/<note_id>/release | 👤 (owner trainer) | Release private note |
| POST | /training/sessions/<session_id>/evaluate | 👤 (owner trainer) | Grade + complete |
ER:LC
| Method | Path | Auth | Purpose |
|---|---|---|---|
| GET | /erlc/player/<roblox_id> | 🔑 | ER:LC player lookup via relay |