slideforge-dev UI Upload API

openapi: 3.2.0
info:
  title: SlideForge UI Upload API
  description: 'Agent-first PowerPoint generation. Send structured slide intents (a `form` plus typed fields) or a brief; get back a real, editable `.pptx`. The draw path is deterministic — no model renders your slide, so supplied numbers and text come out verbatim. Every response carries `status`, `fidelity` and `warnings` so an automated caller can tell whether the output is usable. $0.05 per slide; an unusable slide is not billed. Authenticate with a SlideForge API key (`Authorization: Bearer sf_live_…` or `X-API-Key`) — new accounts include 60 free slides, no credit card: https://slideforge.dev/sign-up'
  version: 5.356.0
servers:
- url: https://api.slideforge.dev
security:
- bearerAuth: []
- apiKeyAuth: []
tags:
- name: ui-upload
paths:
  /v1/ui-upload/pptx:
    post:
      tags:
      - ui-upload
      summary: Upload Pptx For Translate
      description: 'Accept a PPTX from the MCP Apps iframe, kick off translation.


        Token is minted by `upload_asset(purpose="translate", target_language=...)`.

        Target language is carried in the token''s signed payload — the iframe

        doesn''t need to pass it on the upload. Reuses the existing

        `translate_upload` worker (same endpoint `/v1/translate` serves web form).


        Returns `{job_id, poll_url}` once the job is created; iframe polls

        `/v1/jobs/{id}` for completion. No server-side chain (translate is

        the final step).'
      operationId: upload_pptx_for_translate_v1_ui_upload_pptx_post
      parameters:
      - name: X-Upload-Token
        in: header
        required: true
        schema:
          type: string
          title: X-Upload-Token
      requestBody:
        required: true
        content:
          multipart/form-data:
            schema:
              $ref: '#/components/schemas/Body_upload_pptx_for_translate_v1_ui_upload_pptx_post'
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /v1/ui-upload/theme:
    post:
      tags:
      - ui-upload
      summary: Upload Theme Template
      description: 'Accept a brand template PPTX from the MCP Apps drop-zone, extract the theme.


        Token is minted by `upload_asset(purpose="theme")` with no inline data. Unlike pdf/translate

        there is NO job to poll — extraction is synchronous and the response carries `theme_id`; the

        result card renders a success panel (U4 ADR §7.4: renders on this theme are NATIVE by default,

        built on the uploaded file).'
      operationId: upload_theme_template_v1_ui_upload_theme_post
      parameters:
      - name: X-Upload-Token
        in: header
        required: true
        schema:
          type: string
          title: X-Upload-Token
      requestBody:
        required: true
        content:
          multipart/form-data:
            schema:
              $ref: '#/components/schemas/Body_upload_theme_template_v1_ui_upload_theme_post'
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /v1/ui-upload/pdf:
    post:
      tags:
      - ui-upload
      summary: Upload Pdf
      description: 'Accept a PDF from the MCP Apps iframe, kick off conversion.


        Returns `{job_id, status: "queued", poll_url}` immediately. The

        iframe polls the signed poll_url against `/v1/jobs/{job_id}` for

        completion, then transitions the result card to the populated state.


        Auth: `X-Upload-Token` header (minted by `upload_asset(purpose="pdf")`).

        No Bearer token; the upload token carries the user identity.'
      operationId: upload_pdf_v1_ui_upload_pdf_post
      parameters:
      - name: X-Upload-Token
        in: header
        required: true
        schema:
          type: string
          title: X-Upload-Token
      requestBody:
        required: true
        content:
          multipart/form-data:
            schema:
              $ref: '#/components/schemas/Body_upload_pdf_v1_ui_upload_pdf_post'
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /v1/ui-upload/recreate:
    post:
      tags:
      - ui-upload
      summary: Upload Recreate
      description: 'Accept a slide image from the MCP Apps iframe, recreate it as an

        editable slide (ADR 2026-08-05 recreate). Returns `{job_id, poll_url}`

        immediately; the pipeline runs as a background task and the iframe polls

        the signed route — the pdf async shape.'
      operationId: upload_recreate_v1_ui_upload_recreate_post
      parameters:
      - name: X-Upload-Token
        in: header
        required: true
        schema:
          type: string
          title: X-Upload-Token
      requestBody:
        required: true
        content:
          multipart/form-data:
            schema:
              $ref: '#/components/schemas/Body_upload_recreate_v1_ui_upload_recreate_post'
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
components:
  schemas:
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
            - type: string
            - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
      type: object
      required:
      - loc
      - msg
      - type
      title: ValidationError
    Body_upload_pdf_v1_ui_upload_pdf_post:
      properties:
        file:
          type: string
          format: binary
          title: File
          description: The .pdf file to convert
      type: object
      required:
      - file
      title: Body_upload_pdf_v1_ui_upload_pdf_post
    Body_upload_recreate_v1_ui_upload_recreate_post:
      properties:
        file:
          type: string
          format: binary
          title: File
          description: Slide image (PNG/JPEG/WebP) to recreate
      type: object
      required:
      - file
      title: Body_upload_recreate_v1_ui_upload_recreate_post
    Body_upload_pptx_for_translate_v1_ui_upload_pptx_post:
      properties:
        file:
          type: string
          format: binary
          title: File
          description: The .pptx file to translate
      type: object
      required:
      - file
      title: Body_upload_pptx_for_translate_v1_ui_upload_pptx_post
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
    Body_upload_theme_template_v1_ui_upload_theme_post:
      properties:
        file:
          type: string
          format: binary
          title: File
          description: The company .pptx template
      type: object
      required:
      - file
      title: Body_upload_theme_template_v1_ui_upload_theme_post
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: 'SlideForge API key: `Authorization: Bearer sf_live_…`. Create one at https://slideforge.dev/console/keys'
    apiKeyAuth:
      type: apiKey
      in: header
      name: X-API-Key
      description: Same key, header form — for clients that cannot set Authorization.