API Reference

Cue. Express API. All endpoints return JSON. Protected routes require an x-operator-token header — get one from POST /api/auth/token.

GET

POST

PATCH / PUT

DELETE

Requires operator token

Orders

Create and manage advertising orders. All state is persisted to DynamoDB cue-orders.

S3 presigned URL generation for direct client-to-S3 uploads. Bucket: cue-creatives-dev.

NLSE H264 spec validation for uploaded creatives. Spec values are configurable via /api/config.

Configurable platform settings stored in DynamoDB cue-config. NLSE H264 spec values + platform lead times.

Workflow notification email configuration. Stored in DynamoDB cue-roles. Roles: michelle | mastercontrol | admin.

Bedrock-powered AI endpoints. Copilot uses Sonnet with live DDB context. Draft rejection uses Haiku.

Broadcast slot availability grid. Deterministic seed — same date/hour always returns same availability.

Live schedule data from DynamoDB. Filters orders by status to show active campaigns.

Operator authentication. Session cookie gate for /admin UI. HMAC token for API route protection.