Analyze pasted signal samples (wizard, no agent id)
LLM-assisted keyword bootstrap from a pasted channel corpus. Ephemeral — raw text is not stored.
Authorizations
User JWT access token issued by POST /api/auth/verify or POST /api/auth/social/verify. Routes that accept both auth modes declare api-key and bearer-jwt security schemes.
Headers
HMAC-SHA256 signature: HMAC-SHA256(secretKey, timestamp + METHOD + path + body). Optional -- when omitted, HMAC verification is skipped.
Request timestamp in epoch milliseconds. Required when x-signature is provided. Rejected if drift exceeds 5 minutes.
Body
Raw pasted channel messages (newline or blank-line separated).
telegram_export / discord_export merge desktop copy-selected paste; omit to auto-detect.
newline, blankline, telegram_export, discord_export Current rule on the form — used for diff context only in v1.