falcata.io

Returns the user the active Bearer token resolves to (or "service" for the platform key).

Consolidated view of your own account: identity (id, email, name), display profile (name + avatar), marketing email consent, notification preferences, and per-app subscriptions (`subscriptions`; the singular `subscription` field is the deprecated legacy-app view).

Update your own display name and/or avatar URL.

Your in-app notification preferences.

Enable or disable one suppressible notification type for yourself (e.g.

Your generative-AI feature preferences.

Turn one catalogued generative-AI feature on or off for yourself (`assistant` or `narration`).

Whether each generative-AI feature is usable by you right now, and why not when it is not: `not_entitled` (your plan), `preference_off` (your own setting), or `budget_exhausted` (allowance spent — includes the binding window and how much is left).

Your marketing email consent for every app that sends updates, one row per app with its display name and subscriber status.

Grant or withdraw your own marketing email consent.

Your own RBAC bundle (roles + permissions) in the given app namespace.

Your own auth sessions (creation and expiry times), newest first.

Compatibility alias for caller-owned Kvark tasks.

Fetch a canonical Kvark task aggregate.

Updates a task to todo, in_progress, or done.

Creates a server-readable Kvark task.

Patch a task.

Marks a task archived.

Un-archive a task and place it at the end of the chosen status column (todo/in_progress/done).

Permanently deletes the Kvark task aggregate.

List caller-owned Kvark Boards, including the default task Board.

Create a new board you own.

Rename a board you own.

Archive a caller-owned Kvark Board while preserving its items and structural records.

Board sharing is not available through the Task List compatibility API because Kvark and Task List Board IDs are not interchangeable.

Board sharing is not available through the Task List compatibility API because Kvark and Task List Board IDs are not interchangeable.

Board sharing is not available through the Task List compatibility API because Kvark and Task List Board IDs are not interchangeable.

Board sharing is not available through the Task List compatibility API because Kvark and Task List Board IDs are not interchangeable.

List caller-owned Kvark tasks.

Get one caller-owned task.

Create a task with canonical Action and Placement records.

Patch task identity, Action, or server-readable body fields.

Move a task through canonical Board Placement state.

Complete through Action and Placement state; recurrence advances and returns the task to the entry column.

Archive one caller-owned Kvark task.

Restore one caller-owned Kvark task.

Permanently delete the task aggregate.

Scan one bounded page of active task projections for tags.

Process one bounded, idempotent projection batch.

List caller-owned Kvark Boards in stored order.

Create a caller-owned Board with To do, In progress, and Done columns.

Update caller-owned Board name or description.

Archive a caller-owned Board while preserving its structural records.

List active and archived structural columns for one caller-owned Board in stored order.

List canonical task placement and ordering records for one caller-owned Board.

Capture one entry with a Journal or Canvas part, a legacy Journal plus Canvas pair, or a Journal plus ordered inline Canvases, using duplicate-safe delivery.

Create one untitled sealed deposit from caller-sealed ciphertext and sealedDek.

Return the caller's sealed-deposit public bundle, or null until the vault owner unlocks Kvark once.

List content (pages, articles) in a namespace such as "marozzo", "docs", "ilkka-outo-website".

Returns a content page or namespace tree.

Create new content in a namespace.

Patch content.

Paginated, kind-filterable, access-aware listing for media feeds.

Marks the current draft as published.

Reverts a page to draft-only state.

Sets a future publishedAt timestamp (epoch ms).

Clones a page and its body as a new draft sibling, with title "<original> (Copy)".

Permanently delete a page.

Re-parent a page.

Change the URL slug for a page.

Pin a page after another sibling (`afterId`) or before one (`beforeId`).

Change the visibility gate for a page: `inherit` (defer to parent), `public`, `auth` (signed-in), or `membership` (paid).

Configure visibility flags on a page node.

Point a page at a layout by id: a code layout the app ships, or a named layout from `content_layout_list`.

Store a layout document that belongs to this page alone, as a JSON string.

Turn the page's one-off layout document into a reusable named layout and repoint the page at it, in one mutation.

Returns the saved versions for a page (newest first), each with its body, savedAt, savedBy.

Fetch a saved version body by index.

Snapshot the current draft as a new version (newest at index 0).

Replaces the current draft with the body from a saved version (the prior draft is rotated into history).

Aggregate emoji-reaction counts plus `page_view` rollup (views, unique sessions/users, first/last view) for one content item.

Returns the aggregate reaction map (reactionId → userIds) for one content item, gated by content access.

Paginated root comments with replies and reaction maps for one content item, gated by content access.

Moderator view: every non-deleted comment in the namespace, newest first, optionally filtered by moderation `status`.

Manual moderation override — set a comment to `approved`, `flagged`, or `rejected` with an optional reason.

Replace a comment body, lock it, and implicitly approve.

Returns the namespace nav tree as a nested structure, each node carrying its resolved `path`, `depth`, and `children`.

Cross-namespace audit counting legacy schedule shapes per namespace (legacyScheduled, legacyExpiresAt, publishedMissingStartsAt).

Access-filtered KV listing for a namespace (optionally prefix-scoped).

Returns the sorted unique tag list for a namespace.

List every named layout in a namespace, slug-ordered, with its full SDL document.

Fetch a single named layout by slug, including its SDL document and authoring metadata.

How many content documents in the namespace name this layout as their `template`.

Create a reusable layout that pages can select by slug through `content_set_template`.

Patch a named layout in place.

Remove a named layout.

Paginated subscriber list for a namespace.

All unique tags in use across subscribers in a namespace.

Counts of subscribers by status in a namespace.

Add or re-subscribe an email address in a namespace.

Unsubscribe an email address in a namespace.

Replace the tag list on a subscriber.

Paginated campaign list for a namespace.

Fetch one email campaign by id.

Delivery, open, click, bounce, and complaint stats for a sent campaign.

Count subscribed recipients matching optional audience tags in a namespace.

Create a new draft email campaign in a namespace.

Patch a draft campaign (only fields you pass).

Permanently delete a campaign.

Move a failed or partially-sent campaign back to draft status.

Create a new draft copy of an existing campaign.

Start batch sending a draft campaign to its audience.

Send a one-off test render of a campaign to a specific address.

List reusable markdown templates in a namespace.

Create a reusable markdown template in a namespace.

Permanently delete a template.

CAN-SPAM footer fields for a namespace.

Update CAN-SPAM footer fields for a namespace.

From address and sender name for a namespace.

Update from address and sender name (synced with Resend).

List content namespaces where the communication center is enabled.

Replace the list of namespaces where the communication center is enabled.

Read VAT, fiscal-year, EU VAT, and opening-balance config.

List journal entries for a month, optionally filtered by bank account or attachment status.

Read one journal entry by KV key.

List permanent audit records for one journal entry, newest first.

List canonical Ledger KV changes, newest first.

Search recent journal entries by counterparty, description, reference, or sequence.

List counterparties seen in recent entries.

List recent entries touching account 2999.

Count recent entries touching account 2999.

List unattached Ledger scans, newest first.

Read one Ledger scan by id.

List Ledger customers.

Read one customer by id.

List Ledger work types.

List rate overrides for one customer.

List every customer rate override.

List time entries for a month, optionally filtered by customer and status.

Read one time entry by id.

List draft time entries for one customer across months.

Aggregate draft time entries across months.

List invoices with optional fiscal year, customer, and status filters.

Read one invoice by id.

Compute Finnish VAT rows for a quarter.

Compute OSS EU sales report rows for a quarter.

Build the OSS EU-sales CSV string for a quarter.

Compute annual tilinpaatos data for a fiscal year.

Read saved annual-report company, notes, approval, records, and signature config.

List saved VAT, OSS, and annual reports.

Read one saved report payload, its metadata, and any payload validation problem.

Read Ledger dashboard balance and performance summary.

Create or update the opening-balance journal entry.

Create a complete manual journal entry; omitted optional fields use create defaults.

Replace a journal entry by key, preserving omitted optional fields and clearing nullable metadata.

Save AI extraction data on a scan.

Move one or more scans onto a journal entry as attachments.

Create a Ledger customer.

Replace a Ledger customer.

Set a customer archived flag.

Delete a customer and rate overrides.

Create a Ledger work type.

Replace a Ledger work type.

Set a work type archived flag.

Delete a work type and related rate overrides.

Set one customer/work-type rate override.

Delete one customer/work-type rate override.

Create a draft time entry.

Replace a draft time entry.

Delete a draft time entry.

Create a draft invoice.

Replace a draft invoice.

Delete a draft invoice.

Issue a draft invoice and book receivables.

Mark an issued invoice paid and book the payment.

Create a credit note for an issued or paid invoice.

Save annual-report config sections.

Persist computed VAT, OSS, or annual report data.

Delete a journal entry by key.

Delete an unattached scan and its stored file.

Delete saved report data and PDF metadata.

Mint a one-hour signed URL for a Ledger attachment.

Check Ledger attachment references and return any whose stored blobs are missing.

Run AI extraction on inline base64 files or stored scan ids.

Read recent Stripe balance transactions with Ledger import status.

Read recent Revolut transactions with Ledger import status.

Generate and upload an invoice PDF, returning a signed URL.

Mint a signed URL for an already-generated report PDF.

Fetch the ibericode EU VAT-rate dataset, diff it against the hardcoded rates, and create an alert/send email on drift.

Upload a base64 JPEG, PNG, WebP, or PDF attachment to a journal entry.

Upload a base64 JPEG, PNG, WebP, or PDF as an unattached Ledger scan.

Delete a stored attachment and remove it from a journal entry.

Import Stripe balance transactions into Ledger for an optional date range.

Import Revolut transactions into Ledger for an optional date range.

Create a Revolut OAuth state and return the consent URL.

Generate and upload a saved VAT, OSS, or annual report PDF.

Returns the period summary (pageViews, sessions, users, events) with a trend percentage vs the prior period of equal length.

Returns bucketed event counts grouped by `period` (`hour` or `day`).

Ranks paths by event count for a time window, with `sessions`, `users`, `anonymous` (sessions with no auth event), and `eventsPerSession`.

Ranks cross-origin referrer hostnames by `sessions`, with `users` and `anonymous` (sessions with no auth event).

Returns every distinct event `name` observed in the time window with its total `count`, sorted descending.

Returns raw analytics event rows (newest first), optionally filtered by `eventName` and a `since`/`until` window (ms timestamp or ISO 8601 string) or `days`.

Ranks `palette_search` queries by frequency, with `sessions`, `avgResultCount`, and `zeroResultRate` (percent of runs with no results).

Aggregates `feedback_submitted` events: total, trend vs the prior window, a daily time series, and attachment rate.

Returns the sorted list of app namespaces where the caller holds `read:analytics` (service tokens see every namespace).

Per-user activity for the calling PAT's user: total page views, sessions, a daily page-view sparkline, and top visited pages over the trailing `days` (default 30).

Run a flexible Analytics Studio query spec and get the computed result.

List the calling user's saved Studio dashboards, most-recently-updated first.

Fetch one of the calling user's saved dashboards by id — its name, description, and chart specs — or null if none exists with that id.

Create (omit id) or update (pass id) one of the calling user's saved dashboards.

Delete one of the calling user's saved dashboards by id.

Send a message to the Marozzo research assistant and get a complete, cited reply.

Fetch the full message history of a Marozzo assistant thread the calling user owns.

Search the historical Italian dictionaries Florio (A Worlde of Wordes, 1611) and Crusca (Vocabolario degli Accademici della Crusca, 1612).

Semantic + keyword search across the three Bolognese-school fencing treatises: Manciolino (Opera Nova, 1531), Marozzo (Opera Nova, 1550), and dall'Agocchie (Dell'Arte di Scrimia, 1572).

List every chapter entry in one book (Libro) of a Bolognese treatise.

Fetch a single chapter entry by `book` + `chapter` from a Bolognese treatise (`source` = manciolino, opera_nova, or dall_agocchie).

List all hero promos in a namespace, in display order.

Create a new hero promo in a namespace and append it to the end of the display order.

Replace all fields on an existing hero promo.

Remove a hero promo by id.

Set the display order from a list of ids.

List image, file, and audio assets.

Fetch a single asset by id.

Fetch up to 100 assets by id at once.

Total asset count, total bytes, and breakdowns by type / visibility / processing status.

Flat list of every tag in use across image, file, and audio assets, sorted alphabetically.

Returns the public CDN base URL.

Resolve a CDN URL for an asset.

Resolve CDN URLs for up to 100 (assetId, transformClass) pairs in one round-trip.

Generate a time-limited signed URL for a protected image, file, or audio asset.

Update displayName, description, tags, or visibility.

Legacy compatibility tool.

Admin-only.

Delete an asset and schedule its CDN bytes for removal.

Delete every asset listed and schedule their CDN bytes for removal.

Union-merge: existing tags are preserved, new tags are added.

Strip the listed tags from every asset; other tags are kept.

Upload a JPEG / PNG / WebP / GIF image.

Upload an arbitrary file.

Upload an audio clip as base64, up to 10 MB.

Re-upload bytes for an existing image asset id.

Re-fetch image bytes from storage, run Sonnet description/tagging, and store the result in `aiSuggestion` without overwriting live displayName/description/tags.

Copy selected fields from `aiSuggestion` into the live asset record.

Generate signed poster/preview URLs for a video by Bunny id or Convex video id.

List videos.

Fetch a single video by id.

Look up a video by its Bunny Stream id.

Generate a time-limited Bunny Stream embed URL.

Flat list of every tag in use across video assets, sorted alphabetically.

Total ready video count and breakdown by visibility.

Update title, description, tags, visibility, or other fields.

Legacy compatibility tool.

Admin-only.

Delete the video, cascade transcripts / segments / embeddings, and remove it from Bunny Stream.

Delete each video and its derived data; remove them from Bunny Stream.

Union-merge tags onto each video.

Strip the listed tags from each video.

Mint a Bunny Stream upload session.

After the TUS upload completes, call this to backfill duration / thumbnail.

Delete the Bunny entry and the videoAssets row when the TUS upload fails or is aborted.

Paginated list of albums in a namespace.

Fetch one album by id (visibility-filtered items for render).

Create an empty album in a content namespace.

Replace the full ordered item array.

Fetch the serialized app definition (entities, fields, permissions) for a schema-defined platform app.

List every row of `entityName` in app `appSlug`.

List an authorized, bounded window of `entityName` in app `appSlug`.

Fetch a single row by id from `entityName` in app `appSlug`.

Create a row in `entityName` (app `appSlug`) from `values`.

Patch a row by id in `entityName` (app `appSlug`).

Delete a row by id from `entityName` (app `appSlug`).

List tombstones (trashed rows) for a trash-enabled entity, newest deletion first.

Move a tombstone back into live storage by `tombstoneId`.

Permanently remove a tombstone by `tombstoneId`.

List every database table with its fields (name/type/optional), indexes, and search indexes.

List the platform-level RBAC namespaces (e.g.

Create a schema-defined platform app (slug + displayName).

Register a new app namespace with bootstrapped RBAC and app:info metadata in a single transaction.

Governed write for an app root, SDL page (`page`), or stored function (`fn`) artifact.

Authoring read of the stored artifact at the app root, an SDL page via `page`, or a stored function via `fn`, including version and origin provenance.

Authoring list of the live SDL page rows under `app_schema:<appSlug>:page:*` — page id, version, and origin provenance, never document payloads.

Authoring list of live stored function rows — fn target, version, and origin provenance, never source payloads.

Authoring list of retained version snapshots for `:current` (or a page row via `page`), newest first — version, kind, and origin provenance, never payloads.

Authoring read of one retained version snapshot (full envelope) for `:current` or a page row.

Write one `app:*` KV setting for an app (color, description, tags, etc.).

List the caller's active (non-archived) notes, sorted by boost then frecency then recency.

Fetch one note by id.

Lightweight list of {id, title} for active notes — useful for wiki-link resolution without fetching bodies.

List the caller's archived notes, most recently updated first.

Create a note.

Patch a note.

Shallow-merge the given key/value pairs into the note's existing metadata (color, icon, …).

Record an open/view: bumps lastOpenedAt and the decayed frecency score so the note ranks higher.

Pin a note above the frecency tier for `durationMs` milliseconds from now.

Clear the boost so the note returns to its frecency-ranked position.

Move a note to the archive (also clears any boost).

Un-archive a note.

Permanently delete a note.

List all role definitions for an app namespace.

Fetch a single role definition.

List users assigned the given role.

Get a user’s role assignments in a namespace.

Get permissions granted directly (no role).

Get the denormalized permission bundle for a user.

List app namespaces the caller can access (filtered by access:app, like the source query).

Cross-app role summary for a user.

Cross-app role overview.

Create/update a role definition.

Delete a role and strip it from all members.

Assign a role.

Remove a role from a user.

Grant a one-off permission (no role).

Revoke a directly-granted permission.

Recent authentication events.

Auth event counts by action.

Per-user auth event drill-down.

List security alerts by status.

Alert counts by severity / status.

Acknowledge / resolve / mark false-positive.

Issue a ban + resolve the alert in one step.

Issue an enforcement action against a user.

Lift an active ban / suspension / warning.

All bans for a user, newest first.

All currently active bans across users.

Search users for the security dashboard.

Resolve subjects → email/name.

List the calling user’s own PATs (metadata only, no raw tokens).

List all subscribers with user info.

Active / paid / complimentary counts.

Search users + their subscription status.

Returns the test/live Stripe dashboard prefix.

Create a $0 Stripe subscription for a user.

Cancel a complimentary Stripe subscription.

Member counts + MRR with trends.

Daily member / MRR series.

Active members by subscription tier.

Recent subscription events feed.

Request a data export for the calling user (Article 15).

Status of the calling user’s most recent data export.

List every feature flag, entitlement, and config.

Fetch the full definition (rules, experiment, targeting) of one flag by its `key`.

Create a flag/entitlement/config (starts as draft).

Patch a flag by `key`.

Move a draft flag to active.

Move an active flag back to draft.

Archive a flag.

Create a draft copy of `sourceKey` under `newKey`.

List accountable platform-operation history for a namespace (RBAC changes, user lifecycle, billing).

Search indexed KV entries within a namespace.

Stats about indexed vs total KV entries, orphaned entries, and last-indexed time for a namespace.

Privileged paginated KV search within a namespace.

Global KV search; results are filtered to namespaces where the caller holds `read:data` (service callers see all).

Aggregated API-call telemetry (daily trend, top tools, outcome breakdown) for the trailing `days` window.

List all alerts (platform-wide + namespace-targeted), newest first.

Read one alert by id.

Recent durable background jobs (user-deletion, GDPR export, …), newest first.

A bounded per-type batch of `running` recoverable jobs with each age and the verdict the recovery sweeper would reach now (`skip` | `resume` | `fail`).

List runtime-managed UTC cron schedules that materialize durable tasks, including next/last run linkage.

List the code-owned task-type allowlist accepted by dynamic cron schedules.

Create an alert.

Full-replace an alert (send all editable fields).

Immediately activate an alert, cancelling any pending schedule.

Immediately deactivate an alert, cancelling any pending schedule.

Delete an alert and cancel any pending schedule.

Manually re-dispatch one recoverable durable job by id: resets its recovery budget and, for a `failed` job, flips it back to `running` so the idempotent orchestrator resumes from its last checkpoint.

Create or replace a named five-field UTC schedule for an allowlisted durable task type.

Set a cron enabled or disabled.

Delete a user-managed cron.

Materialize and dispatch one durable task immediately without changing the cron’s next occurrence.

List all notification broadcasts, newest first.

Fetch one notification broadcast by id.

Search users by email or name (max 10).

Resolve a list of user subjects to {subject,email,name}.

Create a new draft broadcast.

Patch a draft broadcast (only fields you pass).

Permanently delete a draft broadcast.

Fan a draft broadcast out to every recipient and mark it sent.

Embedded vs pending docs, stale count, total chunks, model, and estimated cost to embed pending docs.

List embeddable docs in a namespace split into indexed (with model/staleness) and unindexed.

Inspect the per-chunk text + model for one KV document.

Returns the in-flight (pending/running) embedding task for a namespace, or null.

Vector-search a namespace.

Transcript prose/SRT, smart-action suggestions, and pipeline status for a video or audio asset.

Start (or report the already-running) embedding job for a namespace.

Clear any stuck task and force a fresh STT transcription run for a video asset.

Regenerate chapters/moments/title/description from the existing transcript (no re-STT).

Persist corrected caption segments for a video transcript and best-effort push SRT to Bunny Stream.

Member/editor semantic search across timestamped video segments with deep links to published content.

Search the public web.

Extract one to ten HTTPS pages.

List immutable workflow definition summaries in a namespace.

Get one immutable workflow revision by its positive integer revision number.

Compile and publish a new immutable revision.

List runs in a namespace, optionally filtered by workflow key and lifecycle status.

Start an asynchronous run pinned to an immutable workflow revision.

Get current state for one workflow run.

List the durable event timeline for a run in sequence order.

List artifact metadata for a workflow run in creation order.

Cancel a non-terminal run.

Restart a failed run from a parallel node declared by its pinned revision.

Resume a declared wait node with an immutable text artifact.

Get artifact metadata and text.

Archive one caller-owned Kvark task without deleting its Action, body, or Placements.

Archive a caller-owned Kvark Board while preserving its stable structural records.

Archive a Collection after atomically refiling its active Items to an explicit destination.

Rebuild caller-owned task projections and remove stale rows in bounded batches.

Build the caller-owned chronological feed index in bounded, resumable, idempotent batches.

Complete a task through its Action and Placement; recurring tasks advance and return to the entry column.

Complete an Item Action, advancing recurrence independently of its Item kind or column label.

Create a caller-owned Kvark task.

Append or insert one block into a caller-owned Kvark Nukleon.

Create one caller-owned Kvark Board and its ordered columns atomically.

Create one caller-owned flat Kvark Collection.

Create one Kvark Nukleon identity and an optional first content quark atomically; zero-knowledge content remains encrypted and opaque.

Permanently delete one caller-owned Kvark task aggregate.

Move one caller-owned Kvark Nukleon to recoverable Trash for 30 days.

Get one caller-owned Kvark task.

Read one caller-owned notebook block: encrypted ciphertext for zero-knowledge items, plaintext only for server-readable items.

Read up to 200 caller-owned block content rows by notebook and block reference; zero-knowledge ciphertext stays opaque.

Read one caller-owned body-free Kvark Nukleon identity; encrypted content remains available only through content-quark operations.

List caller-owned Item Action facets.

List attachment metadata for one caller-owned available Kvark item.

List tags from one bounded projection scan.

List caller-owned Kvark task projections with bounded keyset paging, tag and due filters.

List every block content row in one caller-owned Nukleon: encrypted ciphertext or explicitly server-readable plaintext.

List the ordered blocks one caller-owned Kvark Nukleon is composed of.

List one caller-owned Kvark Board’s columns in stored order.

List caller-owned placements for one Kvark Board.

List caller-owned Kvark Boards in stored order.

List caller-owned flat Kvark Collections in stored order.

List the caller-owned Kvark stream newest-first from immutable creation timestamps.

List every caller-owned placement for one Item, across Boards.

List caller-owned body-free Kvark Nukleon identities; encrypted content remains available only through content-quark operations.

List caller-owned Kvark Nukleons in recoverable Trash, ordered by deletion time.

List every caller-owned block representation for client search: encrypted ciphertext stays opaque and server-readable plaintext is explicit.

List every caller-owned Kvark block in one vault scan, for desk badges and composition previews.

List caller-owned block content metadata without returning ciphertext or plaintext bodies.

Move a Kvark task through canonical Board Placement state.

Reorder one caller-owned Kvark block among its siblings without touching its encrypted content.

Move one Board placement to an active same-Board column using fractional order.

Place one caller-owned Item into a Board’s entry column without copying the Item.

Permanently purge one caller-owned Kvark Nukleon already in Trash.

Create or compare-and-replace one notebook block body in the representation selected by its owner: encrypted ciphertext or server-readable plaintext.

Reorder, rename, add, archive populated, or delete empty Board columns.

Remove one block from a caller-owned Kvark Nukleon, destroying its encrypted content but never its referenced child notebook.

Remove one placement while preserving the Item and every placement on other Boards.

Restore one caller-owned archived Kvark task.

Restore one caller-owned Kvark Nukleon from Trash before its retention deadline.

Create or update one Item’s due date and reminder through the Action facet.

Patch task metadata and Action fields.

Switch one caller-owned List block between its checklist and board render styles.

Update caller-owned Kvark Board metadata without changing stable column identities.

Rename or reorder one caller-owned Kvark Collection.

Patch caller-owned plaintext Nukleon identity metadata without reading or rewriting encrypted content quarks.

Distinct, locale-sorted counterparties across the last 24 months of journal entries.

Import Stripe balance transactions as journal entries (payments, fees, adjustments, refunds, payouts).

Archive a task.

Create a board owned by the caller.

Create a task at the end of a column on a board (defaults to the default board).

Delete a board and cascade its tasks + shares (owner only).

Delete a task permanently; schedules attachment cleanup.

Leave a board shared with you (removes only your own share).

List a board’s grantees (owner only).

Boards the caller owns or has been shared, plus the default board, each with the caller’s role.

Active (non-archived) tasks on a board, ordered for the kanban board (defaults to the default board).

Move a task across or within columns; maintains fractional order and hill progress.

Rename a board (owner only).

Restore an archived task to the end of a column.

Share a board with a registered email as viewer or editor (owner only).

Revoke a grantee from a board (owner only).

Merge metadata onto a task; hillProgress boundaries derive status changes.