u

docs/api/README.md

@@ -207,6 +207,7 @@ Generated from `@openapi` annotations in [`src/api/routes/`](../../src/api/route
 | [`routes/shipping/_id.md`](routes/shipping/_id.md) | `DELETE /shipping/{id}` |
 | [`routes/shipping/_id/package.get.md`](routes/shipping/_id/package.get.md) | `GET /shipping/{id}/package` |
 | [`routes/shipping/_id/package.post.md`](routes/shipping/_id/package.post.md) | `POST /shipping/{id}/package` |
+| [`routes/smallthumb/get.md`](routes/smallthumb/get.md) | `GET /smallthumb/{fullHash}` |
 | [`routes/stock/adjust.md`](routes/stock/adjust.md) | `POST /stock/adjust` |
 | [`routes/supplier/list.md`](routes/supplier/list.md) | `GET /supplier` |
 | [`routes/supplier/create.md`](routes/supplier/create.md) | `POST /supplier` |

docs/api/routes-all.md

@@ -1,6 +1,6 @@
 # Dash API Routes Overview (All)
 
-Overview of all 205 API endpoints across all modules.
+Overview of all 206 API endpoints across all modules.
 
 ### Notation
 
@@ -613,6 +613,9 @@ _none_
 #### Create package for a shipping — `POST /shipping/{id}/package`
 - Params: `id: int, body: { entityaddressId: int, type: str, state: str, details?: str }`
 - Returns: `201 { package: { id: int, shippingId: int, entityaddressId: int, number: str, type: str, state: str, details?: str|null } }`
+#### Small thumb image by hash — `GET /smallthumb/{fullHash}`
+- Params: `fullHash: str`
+- Returns: `200 avif`
 #### Adjust stock manually — `POST /stock/adjust`
 - Params: `body: { sku?: str, warehouseId?: int, amount?: num, text?: str|null, lines?: { sku: str, amount: num, warehouseId?: int, text?: str }[] }`
 - Returns: `201 { manifest: { id: int, number: str, type: str, date: str, createdAt: str }, lines: { manifestarticle_id: int, sku: str, name: str, warehouse_id: int, amount: num, text: str }[], ledger: T15[] }`

docs/api/routes.md

@@ -1,6 +1,6 @@
 # Dash API Routes Overview
 
-Overview of all 159 API endpoints across all modules.
+Overview of all 160 API endpoints across all modules.
 
 ### Notation
 
@@ -478,6 +478,9 @@ _none_
 #### Create package for a shipping — `POST /shipping/{id}/package`
 - Params: `id: int, body: { entityaddressId: int, type: str, state: str, details?: str }`
 - Returns: `201 { package: { id: int, shippingId: int, entityaddressId: int, number: str, type: str, state: str, details?: str|null } }`
+#### Small thumb image by hash — `GET /smallthumb/{fullHash}`
+- Params: `fullHash: str`
+- Returns: `200 avif`
 #### Adjust stock manually — `POST /stock/adjust`
 - Params: `body: { sku?: str, warehouseId?: int, amount?: num, text?: str|null, lines?: { sku: str, amount: num, warehouseId?: int, text?: str }[] }`
 - Returns: `201 { manifest: { id: int, number: str, type: str, date: str, createdAt: str }, lines: { manifestarticle_id: int, sku: str, name: str, warehouse_id: int, amount: num, text: str }[], ledger: T14[] }`

docs/api/routes/smallthumb/get.md

@@ -0,0 +1,33 @@
+# `GET /smallthumb/{fullHash}`
+
+Protected. Requires a valid session cookie (`credentials: 'include'`).
+
+Small thumb image by hash
+
+Returns the small thumb AVIF (40px max edge) for `pic.hash` (fullHash — not thumbhash).
+Auth via article category access. Browser-cacheable (`private`, `immutable`, `ETag`).
+
+
+## Path parameters
+
+| Param | Required | Type | Description |
+|-------|----------|------|-------------|
+| `fullHash` | yes | string | 8-char alphanumeric hash of the full image bytes |
+
+## Response `200`
+
+AVIF small thumb bytes
+
+## Errors
+
+| Status | Description |
+|--------|-------------|
+| 304 | Not modified (If-None-Match matched ETag) |
+| 400 | Invalid hash — `{"error":"…"}` |
+| 401 | Unauthorized — `{"error":"…"}` |
+| 403 | Not authorized — `{"error":"…"}` |
+| 404 | Image not found — `{"error":"…"}` |
+
+---
+
+_Generated from `@openapi` JSDoc. Do not edit by hand — run `npm run docs:api`._