docs: generate an HTTP API listing for the hub and the node control API

docs/MESHBAY_HTTP_API.md lists every route of the hub (by domain, with the
authentication each requires) and of the node's loopback control API. It is
written by docs/generate_http_api.py from the routes and their docstrings;
test_http_api_doc.py fails when the file drifts from the code or when a
route has no docstring, so a new route must say what it does.

79 routes had no docstring and get a one-line description; a few whose first
line did not describe the route get a summary line.

The login page's developer docs gain an API link next to Design and
Protocol, in every language. README, MESHBAY_DESIGN.md (§0.1, §6.7, §7) and
CLAUDE.md point to the listing; README also points to examples/.

The examples scripts with a shebang become executable.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 files changed, 5 insertions, 0 deletions

diff --git a/packages/meshbay-hub/src/meshbay_hub/api/moderation.py b/packages/meshbay-hub/src/meshbay_hub/api/moderation.py
index 038f310..ecca4df 100644
--- a/packages/meshbay-hub/src/meshbay_hub/api/moderation.py
+++ b/packages/meshbay-hub/src/meshbay_hub/api/moderation.py
@@ -244,6 +244,7 @@ async def admin_list_blocklist(
     db: AsyncSession = Depends(get_db),
     limit: int = 500,
 ):
+    """The content blocklist."""
     result = await db.execute(
         select(ContentBlocklist)
         .order_by(ContentBlocklist.added_at.desc())
@@ -269,6 +270,7 @@ async def admin_add_blocklist(
     current_user: User = Depends(require_admin),
     db: AsyncSession = Depends(get_db),
 ):
+    """Add a content hash (BLAKE3) to the blocklist."""
     if not _is_hash(body.content_hash):
         raise HTTPException(status_code=422, detail="content_hash must be 64 hex chars (blake3)")
     existing = await db.get(ContentBlocklist, body.content_hash)
@@ -291,6 +293,7 @@ async def admin_remove_blocklist(
     current_user: User = Depends(require_admin),
     db: AsyncSession = Depends(get_db),
 ):
+    """Remove a content hash from the blocklist."""
     entry = await db.get(ContentBlocklist, content_hash)
     if not entry:
         raise HTTPException(status_code=404, detail="Hash not in blocklist")
@@ -344,6 +347,7 @@ async def admin_block_reported(
     current_user: User = Depends(require_admin),
     db: AsyncSession = Depends(get_db),
 ):
+    """Block reported content and close its reports."""
     await _decide(db, content_hash, "blocked", current_user.username)
     reasons = Counter((await db.execute(select(ContentReport.reason).where(
         ContentReport.content_hash == content_hash))).scalars().all())
@@ -363,6 +367,7 @@ async def admin_dismiss_reported(
     current_user: User = Depends(require_admin),
     db: AsyncSession = Depends(get_db),
 ):
+    """Dismiss the reports on a piece of content."""
     await _decide(db, content_hash, "dismissed", current_user.username)
     await db.commit()
     return {"status": "dismissed", "hash": content_hash}