From 48a1f39588e0e91ac8483804fea135347827647e Mon Sep 17 00:00:00 2001
From: Nick Meinhold <nick@enspyr.co>
Date: Fri, 27 Feb 2026 08:12:02 +1100
Subject: [PATCH] fix(api): add missing openapi meta to checklist.update (#417)

The checklist.update procedure was inheriting the default
protectedProcedure meta (GET /protected) instead of declaring
its own OpenAPI route, making it unreachable via the REST API.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
---
 packages/api/src/routers/checklist.ts | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/packages/api/src/routers/checklist.ts b/packages/api/src/routers/checklist.ts
index 0da7676a..2c783c3b 100644
--- a/packages/api/src/routers/checklist.ts
+++ b/packages/api/src/routers/checklist.ts
@@ -81,6 +81,16 @@ export const checklistRouter = createTRPCRouter({
       return newChecklist;
     }),
   update: protectedProcedure
+    .meta({
+      openapi: {
+        summary: "Update a checklist",
+        method: "PUT",
+        path: "/checklists/{checklistPublicId}",
+        description: "Updates a checklist by its public ID",
+        tags: ["Cards"],
+        protect: true,
+      },
+    })
     .input(
       z.object({
         checklistPublicId: z.string().length(12),