# API Contract (MVP)

All endpoints are JSON. Player identity comes from HttpOnly cookie `player`.

## State
GET /api/state

## Player
GET /api/me
POST /api/me/name

## Suggestions
GET /api/suggestions/mine
POST /api/suggestions
GET /api/suggestions/all

## Votes
GET /api/votes/mine
POST /api/votes

## Results
GET /api/results

## Admin
POST /api/admin/phase
POST /api/admin/reset
POST /api/admin/factory-reset