POST /api/v1/internal/fulfilment/bookings/{bookingId}/lines/{lineId}/assign
Assign or transfer supplier work without retrying it
Internal staff surface. Client data is restricted to explicit server-owned customer assignments; inaccessible resources return 404. Product/channel entitlements also apply.
Requires a verified Supabase human web session and active, revocable database-owned staff membership. Customer operator permissions, request headers and delegated agents cannot grant staff access. The session endpoint returns access:false to nonstaff without staff or customer identifiers.
The request schema is generated from the runtime Zod input validator. Cross-field refinements and state-dependent constraints are additionally enforced by the API.
Request
HTTP
POST /api/v1/internal/fulfilment/bookings/{bookingId}/lines/{lineId}/assignUse the configured API origin. Private requests require a verified Bearer credential; an agent mutation can additionally require exact approval headers. Authentication guide →
| Parameter | Location | Required | Description |
|---|---|---|---|
bookingId | path | Yes | |
lineId | path | Yes |
Parameter schemas
JSON Schema
[
{
"name": "bookingId",
"in": "path",
"required": true,
"schema": {
"type": "string",
"minLength": 1
}
},
{
"name": "lineId",
"in": "path",
"required": true,
"schema": {
"type": "string",
"minLength": 1
}
}
]Request body contract
{
"required": true,
"content": {
"application/json": {
"schema": {
"type": "object",
"properties": {
"expectedVersion": {
"type": "integer",
"minimum": 0
},
"assignedToUserId": {
"anyOf": [
{
"type": "string",
"format": "uuid"
},
{
"type": "null"
}
]
},
"note": {
"type": "string",
"minLength": 10,
"maxLength": 20000
}
},
"required": [
"expectedVersion",
"assignedToUserId",
"note"
],
"additionalProperties": false
}
}
}
}Responses
Reference schemas resolve through the downloadable OpenAPI components. The specification marks unmodeled success payloads; an unrestricted payload is not a promise that arbitrary fields exist.
400Invalid request or unsupported fields
Response contract
{
"description": "Invalid request or unsupported fields",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
}401Missing or invalid authentication
Response contract
{
"description": "Missing or invalid authentication",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
}403Permission or product scope refused
Response contract
{
"description": "Permission or product scope refused",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
}404Route or tenant-scoped resource not found
Response contract
{
"description": "Route or tenant-scoped resource not found",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
}409State, revision, approval, funding or idempotency conflict
Response contract
{
"description": "State, revision, approval, funding or idempotency conflict",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
}422Supplier configuration, capability or upstream refusal
Response contract
{
"description": "Supplier configuration, capability or upstream refusal",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
}429Rate limit reached; wait before retrying
Response contract
{
"description": "Rate limit reached; wait before retrying",
"headers": {
"x-ratelimit-limit": {
"description": "Maximum requests permitted in the current rate-limit window.",
"schema": {
"type": "integer"
}
},
"x-ratelimit-remaining": {
"description": "Requests remaining in the current window.",
"schema": {
"type": "integer"
}
},
"x-ratelimit-reset": {
"description": "Seconds until the current rate-limit window resets.",
"schema": {
"type": "integer"
}
},
"retry-after": {
"description": "Minimum seconds to wait before retrying.",
"schema": {
"type": "integer"
}
}
},
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
}500Internal error; inspect state before retrying a mutation
Response contract
{
"description": "Internal error; inspect state before retrying a mutation",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
}503Dependency or authentication verifier unavailable
Response contract
{
"description": "Dependency or authentication verifier unavailable",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
}2XXSuccessful response.
Response contract
{
"description": "Successful response.",
"headers": {
"x-ratelimit-limit": {
"description": "Maximum requests permitted in the current rate-limit window.",
"schema": {
"type": "integer"
}
},
"x-ratelimit-remaining": {
"description": "Requests remaining in the current window.",
"schema": {
"type": "integer"
}
},
"x-ratelimit-reset": {
"description": "Seconds until the current rate-limit window resets.",
"schema": {
"type": "integer"
}
}
},
"content": {
"application/json": {
"schema": {
"type": "object",
"properties": {
"booking": {
"type": "object",
"properties": {
"id": {
"type": "string",
"minLength": 1
},
"advertiserId": {
"type": "string",
"minLength": 1
},
"campaignId": {
"type": "string",
"minLength": 1
},
"campaignName": {
"type": "string"
},
"client": {
"type": "object",
"properties": {
"id": {
"type": "string",
"minLength": 1
},
"name": {
"type": "string"
}
},
"required": [
"id",
"name"
],
"additionalProperties": false
},
"campaignStatus": {
"type": "string",
"minLength": 1
},
"closeoutPending": {
"type": "boolean"
},
"flightEnded": {
"type": "boolean"
},
"version": {
"type": "integer",
"minimum": 0
},
"status": {
"type": "string",
"enum": [
"queued",
"in-progress",
"confirmed",
"partially-confirmed",
"rejected",
"stopping",
"stopped"
]
},
"submittedAt": {
"type": "string",
"format": "date-time"
},
"confirmationDueAt": {
"type": "string",
"format": "date-time"
},
"overdue": {
"type": "boolean"
},
"startDate": {
"type": "string"
},
"endDate": {
"type": "string"
},
"executionMode": {
"type": "string",
"enum": [
"sandbox",
"live"
]
},
"mediaBudgetMinor": {
"type": "integer",
"minimum": 0
},
"maximumCommitmentMinor": {
"type": "integer",
"minimum": 0
},
"currency": {
"type": "string",
"const": "GBP"
},
"snapshotDigest": {
"type": "string",
"pattern": "^[a-f0-9]{64}$"
},
"approvedSnapshot": {},
"lines": {
"type": "array",
"items": {
"type": "object",
"properties": {
"id": {
"type": "string",
"minLength": 1
},
"channelCampaignId": {
"type": "string",
"minLength": 1
},
"channel": {
"type": "string",
"enum": [
"ctv",
"audio",
"tv",
"cinema",
"dooh",
"search",
"social"
]
},
"adapterKey": {
"type": "string",
"minLength": 1
},
"budgetMinor": {
"type": "integer",
"minimum": 0
},
"executionMode": {
"type": "string",
"enum": [
"sandbox",
"live"
]
},
"version": {
"type": "integer",
"minimum": 0
},
"status": {
"type": "string",
"enum": [
"queued",
"in-progress",
"confirmed",
"rejected",
"reconciliation-required",
"stop-requested",
"stopping",
"stopped"
]
},
"executionMethod": {
"anyOf": [
{
"type": "string",
"enum": [
"manual",
"computer-use"
]
},
{
"type": "null"
}
]
},
"providerReference": {
"type": [
"string",
"null"
]
},
"evidence": {
"type": [
"string",
"null"
]
},
"claimedBy": {
"type": [
"string",
"null"
]
},
"assignedToUserId": {
"anyOf": [
{
"type": "string",
"format": "uuid"
},
{
"type": "null"
}
]
},
"assignedAt": {
"anyOf": [
{
"type": "string",
"format": "date-time"
},
{
"type": "null"
}
]
},
"startedAt": {
"anyOf": [
{
"type": "string",
"format": "date-time"
},
{
"type": "null"
}
]
},
"confirmedAt": {
"anyOf": [
{
"type": "string",
"format": "date-time"
},
{
"type": "null"
}
]
},
"providerAttemptId": {
"anyOf": [
{
"type": "string",
"minLength": 1
},
{
"type": "null"
}
]
},
"creatives": {
"type": "array",
"items": {
"type": "object",
"properties": {
"id": {
"type": "string",
"minLength": 1
},
"name": {
"type": "string"
},
"format": {
"type": "string",
"minLength": 1
},
"assetUrl": {
"type": "string"
},
"assetFingerprint": {
"type": "string",
"pattern": "^sha256:[a-f0-9]{64}$"
}
},
"required": [
"id",
"name",
"format",
"assetUrl",
"assetFingerprint"
],
"additionalProperties": true
}
}
},
"required": [
"id",
"channelCampaignId",
"channel",
"adapterKey",
"budgetMinor",
"executionMode",
"version",
"status",
"executionMethod",
"providerReference",
"evidence",
"claimedBy",
"assignedToUserId",
"assignedAt",
"startedAt",
"confirmedAt",
"providerAttemptId",
"creatives"
],
"additionalProperties": true
}
},
"events": {
"type": "array",
"items": {
"type": "object",
"properties": {
"id": {
"type": "string",
"minLength": 1
},
"bookingId": {
"type": "string",
"minLength": 1
},
"lineId": {
"anyOf": [
{
"type": "string",
"minLength": 1
},
{
"type": "null"
}
]
},
"action": {
"type": "string",
"minLength": 1
},
"actorId": {
"type": "string",
"minLength": 1
},
"actor": {
"type": "string",
"enum": [
"human",
"agent",
"system"
]
},
"source": {
"type": "string",
"enum": [
"dev",
"web",
"mcp",
"system"
]
},
"detail": {},
"createdAt": {
"type": "string",
"format": "date-time"
}
},
"required": [
"id",
"bookingId",
"lineId",
"action",
"actorId",
"actor",
"source",
"createdAt"
],
"additionalProperties": true
}
}
},
"required": [
"id",
"advertiserId",
"campaignId",
"campaignName",
"client",
"campaignStatus",
"closeoutPending",
"flightEnded",
"version",
"status",
"submittedAt",
"confirmationDueAt",
"overdue",
"startDate",
"endDate",
"executionMode",
"mediaBudgetMinor",
"maximumCommitmentMinor",
"currency",
"snapshotDigest",
"lines",
"events"
],
"additionalProperties": true
}
},
"required": [
"booking"
],
"additionalProperties": false
}
}
}
}Operation constraints
Machine-readable metadata
{
"x-response-schema-completeness": "modeled",
"x-rate-limit": {
"requests": 300,
"windowMilliseconds": 60000,
"key": "request IP",
"headers": [
"x-ratelimit-limit",
"x-ratelimit-remaining",
"x-ratelimit-reset"
]
},
"x-idempotency": {
"policy": "not-generalized",
"note": "There is no universal Idempotency-Key middleware. Only the documented endpoint mechanisms protect retries."
},
"x-human-only": true,
"x-required-human-permissions": [],
"x-internal-staff-only": true,
"x-staff-authority": "server-owned revocable membership and explicit client assignments"
}Complete operation
OpenAPI
{
"operationId": "post_api_v1_internal_fulfilment_bookings_bookingId_lines_lineId_assign",
"summary": "Assign or transfer supplier work without retrying it",
"description": "Internal staff surface. Client data is restricted to explicit server-owned customer assignments; inaccessible resources return 404. Product/channel entitlements also apply.\n\nRequires a verified Supabase human web session and active, revocable database-owned staff membership. Customer operator permissions, request headers and delegated agents cannot grant staff access. The session endpoint returns access:false to nonstaff without staff or customer identifiers.\n\nThe request schema is generated from the runtime Zod input validator. Cross-field refinements and state-dependent constraints are additionally enforced by the API.",
"tags": [
"Internal"
],
"security": [
{
"bearerAuth": []
}
],
"parameters": [
{
"name": "bookingId",
"in": "path",
"required": true,
"schema": {
"type": "string",
"minLength": 1
}
},
{
"name": "lineId",
"in": "path",
"required": true,
"schema": {
"type": "string",
"minLength": 1
}
}
],
"requestBody": {
"required": true,
"content": {
"application/json": {
"schema": {
"type": "object",
"properties": {
"expectedVersion": {
"type": "integer",
"minimum": 0
},
"assignedToUserId": {
"anyOf": [
{
"type": "string",
"format": "uuid"
},
{
"type": "null"
}
]
},
"note": {
"type": "string",
"minLength": 10,
"maxLength": 20000
}
},
"required": [
"expectedVersion",
"assignedToUserId",
"note"
],
"additionalProperties": false
}
}
}
},
"responses": {
"400": {
"description": "Invalid request or unsupported fields",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
},
"401": {
"description": "Missing or invalid authentication",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
},
"403": {
"description": "Permission or product scope refused",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
},
"404": {
"description": "Route or tenant-scoped resource not found",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
},
"409": {
"description": "State, revision, approval, funding or idempotency conflict",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
},
"422": {
"description": "Supplier configuration, capability or upstream refusal",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
},
"429": {
"description": "Rate limit reached; wait before retrying",
"headers": {
"x-ratelimit-limit": {
"description": "Maximum requests permitted in the current rate-limit window.",
"schema": {
"type": "integer"
}
},
"x-ratelimit-remaining": {
"description": "Requests remaining in the current window.",
"schema": {
"type": "integer"
}
},
"x-ratelimit-reset": {
"description": "Seconds until the current rate-limit window resets.",
"schema": {
"type": "integer"
}
},
"retry-after": {
"description": "Minimum seconds to wait before retrying.",
"schema": {
"type": "integer"
}
}
},
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
},
"500": {
"description": "Internal error; inspect state before retrying a mutation",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
},
"503": {
"description": "Dependency or authentication verifier unavailable",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
},
"2XX": {
"description": "Successful response.",
"headers": {
"x-ratelimit-limit": {
"description": "Maximum requests permitted in the current rate-limit window.",
"schema": {
"type": "integer"
}
},
"x-ratelimit-remaining": {
"description": "Requests remaining in the current window.",
"schema": {
"type": "integer"
}
},
"x-ratelimit-reset": {
"description": "Seconds until the current rate-limit window resets.",
"schema": {
"type": "integer"
}
}
},
"content": {
"application/json": {
"schema": {
"type": "object",
"properties": {
"booking": {
"type": "object",
"properties": {
"id": {
"type": "string",
"minLength": 1
},
"advertiserId": {
"type": "string",
"minLength": 1
},
"campaignId": {
"type": "string",
"minLength": 1
},
"campaignName": {
"type": "string"
},
"client": {
"type": "object",
"properties": {
"id": {
"type": "string",
"minLength": 1
},
"name": {
"type": "string"
}
},
"required": [
"id",
"name"
],
"additionalProperties": false
},
"campaignStatus": {
"type": "string",
"minLength": 1
},
"closeoutPending": {
"type": "boolean"
},
"flightEnded": {
"type": "boolean"
},
"version": {
"type": "integer",
"minimum": 0
},
"status": {
"type": "string",
"enum": [
"queued",
"in-progress",
"confirmed",
"partially-confirmed",
"rejected",
"stopping",
"stopped"
]
},
"submittedAt": {
"type": "string",
"format": "date-time"
},
"confirmationDueAt": {
"type": "string",
"format": "date-time"
},
"overdue": {
"type": "boolean"
},
"startDate": {
"type": "string"
},
"endDate": {
"type": "string"
},
"executionMode": {
"type": "string",
"enum": [
"sandbox",
"live"
]
},
"mediaBudgetMinor": {
"type": "integer",
"minimum": 0
},
"maximumCommitmentMinor": {
"type": "integer",
"minimum": 0
},
"currency": {
"type": "string",
"const": "GBP"
},
"snapshotDigest": {
"type": "string",
"pattern": "^[a-f0-9]{64}$"
},
"approvedSnapshot": {},
"lines": {
"type": "array",
"items": {
"type": "object",
"properties": {
"id": {
"type": "string",
"minLength": 1
},
"channelCampaignId": {
"type": "string",
"minLength": 1
},
"channel": {
"type": "string",
"enum": [
"ctv",
"audio",
"tv",
"cinema",
"dooh",
"search",
"social"
]
},
"adapterKey": {
"type": "string",
"minLength": 1
},
"budgetMinor": {
"type": "integer",
"minimum": 0
},
"executionMode": {
"type": "string",
"enum": [
"sandbox",
"live"
]
},
"version": {
"type": "integer",
"minimum": 0
},
"status": {
"type": "string",
"enum": [
"queued",
"in-progress",
"confirmed",
"rejected",
"reconciliation-required",
"stop-requested",
"stopping",
"stopped"
]
},
"executionMethod": {
"anyOf": [
{
"type": "string",
"enum": [
"manual",
"computer-use"
]
},
{
"type": "null"
}
]
},
"providerReference": {
"type": [
"string",
"null"
]
},
"evidence": {
"type": [
"string",
"null"
]
},
"claimedBy": {
"type": [
"string",
"null"
]
},
"assignedToUserId": {
"anyOf": [
{
"type": "string",
"format": "uuid"
},
{
"type": "null"
}
]
},
"assignedAt": {
"anyOf": [
{
"type": "string",
"format": "date-time"
},
{
"type": "null"
}
]
},
"startedAt": {
"anyOf": [
{
"type": "string",
"format": "date-time"
},
{
"type": "null"
}
]
},
"confirmedAt": {
"anyOf": [
{
"type": "string",
"format": "date-time"
},
{
"type": "null"
}
]
},
"providerAttemptId": {
"anyOf": [
{
"type": "string",
"minLength": 1
},
{
"type": "null"
}
]
},
"creatives": {
"type": "array",
"items": {
"type": "object",
"properties": {
"id": {
"type": "string",
"minLength": 1
},
"name": {
"type": "string"
},
"format": {
"type": "string",
"minLength": 1
},
"assetUrl": {
"type": "string"
},
"assetFingerprint": {
"type": "string",
"pattern": "^sha256:[a-f0-9]{64}$"
}
},
"required": [
"id",
"name",
"format",
"assetUrl",
"assetFingerprint"
],
"additionalProperties": true
}
}
},
"required": [
"id",
"channelCampaignId",
"channel",
"adapterKey",
"budgetMinor",
"executionMode",
"version",
"status",
"executionMethod",
"providerReference",
"evidence",
"claimedBy",
"assignedToUserId",
"assignedAt",
"startedAt",
"confirmedAt",
"providerAttemptId",
"creatives"
],
"additionalProperties": true
}
},
"events": {
"type": "array",
"items": {
"type": "object",
"properties": {
"id": {
"type": "string",
"minLength": 1
},
"bookingId": {
"type": "string",
"minLength": 1
},
"lineId": {
"anyOf": [
{
"type": "string",
"minLength": 1
},
{
"type": "null"
}
]
},
"action": {
"type": "string",
"minLength": 1
},
"actorId": {
"type": "string",
"minLength": 1
},
"actor": {
"type": "string",
"enum": [
"human",
"agent",
"system"
]
},
"source": {
"type": "string",
"enum": [
"dev",
"web",
"mcp",
"system"
]
},
"detail": {},
"createdAt": {
"type": "string",
"format": "date-time"
}
},
"required": [
"id",
"bookingId",
"lineId",
"action",
"actorId",
"actor",
"source",
"createdAt"
],
"additionalProperties": true
}
}
},
"required": [
"id",
"advertiserId",
"campaignId",
"campaignName",
"client",
"campaignStatus",
"closeoutPending",
"flightEnded",
"version",
"status",
"submittedAt",
"confirmationDueAt",
"overdue",
"startDate",
"endDate",
"executionMode",
"mediaBudgetMinor",
"maximumCommitmentMinor",
"currency",
"snapshotDigest",
"lines",
"events"
],
"additionalProperties": true
}
},
"required": [
"booking"
],
"additionalProperties": false
}
}
}
}
},
"x-response-schema-completeness": "modeled",
"x-rate-limit": {
"requests": 300,
"windowMilliseconds": 60000,
"key": "request IP",
"headers": [
"x-ratelimit-limit",
"x-ratelimit-remaining",
"x-ratelimit-reset"
]
},
"x-idempotency": {
"policy": "not-generalized",
"note": "There is no universal Idempotency-Key middleware. Only the documented endpoint mechanisms protect retries."
},
"x-human-only": true,
"x-required-human-permissions": [],
"x-internal-staff-only": true,
"x-staff-authority": "server-owned revocable membership and explicit client assignments"
}