> ## Documentation Index
> Fetch the complete documentation index at: https://docs.fetchski-attract.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Submit an image for review

> Submits the draft for review by someone who may publish it.

```ts TypeScript wrap theme={"dark"}
import { createSiteClient } from '@fetchski/attract-cms-sdk';

const site = createSiteClient();
const draftSubmission = await site.media().submitImage({ id: 'ckitdo5oq004pu69kr6oxo6fr:en:published' });
```

```json 200 wrap theme={"dark"}
{
  "by": "Example by",
  "byId": "clx8m2k4p0000a1b2c3d4e5f6",
  "at": "2026-10-24T09:30:00.000Z"
}
```

## In your app

A function makes the call on the client it is given, so your code passes the real one and a test passes a fake.

**1. Add the function**

```ts src/attract/submit-image.ts theme={"dark"}
import type { SiteClient } from '@fetchski/attract-cms-sdk';

export async function submitImage(site: SiteClient, id: string) {
  return site.media().submitImage({ id });
}
```

**2. Call it**

A script makes the client once and calls the function:

```ts scripts/submit-image.ts theme={"dark"}
import { createSiteClient } from '@fetchski/attract-cms-sdk';
import { submitImage } from '../src/attract/submit-image.ts';

const site = createSiteClient();
console.log(await submitImage(site, 'ckitdo5oq004pu69kr6oxo6fr:en:published'));
```

```bash Terminal theme={"dark"}
node --env-file=.env scripts/submit-image.ts
```

A route handler, a job or a queue worker calls it the same way.

## Find the id

`id` is the document’s `_id`, from a list. Ask the list for only the fields you need: each row is a document’s `id` and those fields.

```ts TypeScript wrap theme={"dark"}
import { createSiteClient } from '@fetchski/attract-cms-sdk';

const site = createSiteClient();
const row = (await site.media().listImagesPick(['title', 'slug'])).find((each) => each.slug === 'getting-started'); // { id, title, slug }, or undefined
```

Pass `row.id` as `id`. Drafts: list with `{ aposMode: 'draft' }` to get the draft’s id ([Find an id](https://docs.fetchski-attract.com/find-an-id.md)).

> [accordion] Required parameters
>
> One object, e.g. `submitImage({ id })`; leave out the optional fields.
>
> **id** `string` *required*
>
> **Required.** Computed document ID (can optionally include mode and locale, e.g., id:en:published) Matches `^\S+$`.

> [accordion] Returns
>
> A `DraftSubmission`. Who submitted the draft for review, and when. Read its properties (`draftSubmission.byId`): each says whether the site always sends it.
>
> **byId** `string`
>
> **Always sent.** The submitter’s user `_id`.
>
> **at** `Date`
>
> **Always sent.** Format: an ISO 8601 date and time.
>
> **by** `string`
>
> **Sometimes sent:** `undefined` when the site leaves it out. The submitter’s name.

> [accordion] Errors
>
> Nothing to catch: the SDK retries what is safe, and throws the rest as the classes below; catch only what you want to react to (see [Errors and testing](https://docs.fetchski-attract.com/typescript/errors.md)).
>
> **ValidationFailed** `400`
>
> The site refused what was sent: `errors` lists each field’s problem, `siteMessage` the first.
>
> **Retried first:** No. **Read:** `errors` (field → messages), `siteMessage`.
>
> **AuthenticationFailed** `401`
>
> The API key is missing or refused (malformed, revoked, expired), or a signature its signing mode needs is missing or stale.
>
> **Retried first:** No. **Read:** `siteMessage`, `errorName`, `data`.
>
> **Forbidden** `403`
>
> The key may not do this: a scope it lacks, or an address outside its allowlist. `siteMessage` names it.
>
> **Retried first:** No. **Read:** `siteMessage`, `errorName`, `data`.
>
> **NotFound** `404`
>
> Nothing matches, or the caller may not see it.
>
> **Retried first:** No. **Read:** `siteMessage`, `errorName`, `data`.
>
> **SiteError** `500`
>
> The site failed. Its logs say why.
>
> **Retried first:** No: a write may have landed. **Read:** `siteMessage`, `errorName`, `data`.
>
> **SiteUnreachable** `no answer`
>
> No answer: DNS, a refused connection, TLS, or the timeout (15 s per attempt by default).
>
> **Retried first:** Only when nothing reached the site (`neverConnected()`); never after a timeout, when it may have landed. **Read:** `reason`, `neverConnected`.
>
> **RequestNotSent** `not sent`
>
> The client refused to send it (e.g. a path segment of `..`); the site never saw it.
>
> **Retried first:** No. **Read:** `reason` (what to change).
>
> **SiteRequestFailed** `any other`
>
> Any other status, or a success whose JSON doesn’t match this SDK version’s types (update the SDK).
>
> **Retried first:** No. **Read:** `reason`, `status`.
>
> **UnknownSite** `setup`
>
> `sites.forSite('acme')` named a slug your sites (`createSiteClients()`) don’t have.
>
> **Retried first:** No: nothing was sent. **Read:** `message`, `slug`.
>
> **SiteConfigurationError** `setup`
>
> The client’s settings are wrong: no `FETCHSKI_ATTRACT_URL` (or `baseUrl`), or a malformed API key.
>
> **Retried first:** No: nothing was sent. **Read:** `message` (what to fix).

## Behavior

* **Access:** an API key with `content:images:write` (or a master above it: `content:images:all`, `content:all`, `admin:all`). A signed-in person may call it as far as their own permissions allow; anyone else gets 403.
* **Rate limit:** the key’s own writes-per-minute limit, set when the key is created (default 120); over it, 429 with `Retry-After`. The client waits and retries for you; you see `RateLimited` only if that runs out.
* **Retries:** a write is sent again only after a 429 (refused before it acted) or when it never reached the site. After a timeout or a 5xx it may have landed: check before you send it again.
* **Timeout:** 15 s per attempt by default; raise `timeout` (milliseconds) on the client for longer.

## Test it

It calls the function above with a fake client: the fake answers every call with a valid example, so nothing leaves your machine and no settings or key are needed. Run it with `node --test`.

```ts tests/media-submitImage.test.ts theme={"dark"}
import { test } from 'node:test';
import { fakeSite } from '@fetchski/attract-cms-sdk/testing';
import { submitImage } from '../src/attract/submit-image.ts';

test('media.submitImage', async () => {
  const site = fakeSite();
  await submitImage(site, 'ckitdo5oq004pu69kr6oxo6fr:en:published');
  site.assertCalled('media.submitImage', (args) => args.id === 'ckitdo5oq004pu69kr6oxo6fr:en:published');
});
```

**Answer with your own values:** fake `media.submitImage` with `factories.DraftSubmission({...})`, the fields you give over a valid example.

```ts tests/media-submitImage-answer.test.ts theme={"dark"}
import assert from 'node:assert/strict';
import { test } from 'node:test';
import { factories, fakeSite } from '@fetchski/attract-cms-sdk/testing';

test('media.submitImage answers your values', async () => {
  const site = fakeSite({
    'media.submitImage': factories.DraftSubmission({ byId: 'Your value' })
  });
  const draftSubmission = await site.media().submitImage({ id: 'ckitdo5oq004pu69kr6oxo6fr:en:published' });
  assert.equal(draftSubmission.byId, 'Your value');
});
```

## Related

> [card] [List images](https://docs.fetchski-attract.com/typescript/reference/media/list-images.md)
>
> `site.media().listImages()`

> [card] [Create an image](https://docs.fetchski-attract.com/typescript/reference/media/create-image.md)
>
> `site.media().createImage()`

> [card] [Archive images](https://docs.fetchski-attract.com/typescript/reference/media/archive-images.md)
>
> `site.media().archiveImages()`

> [card] [Crop images to a widget’s aspect ratio](https://docs.fetchski-attract.com/typescript/reference/media/autocrop-images.md)
>
> `site.media().autocropImages()`

> [card] [Copy images to another locale](https://docs.fetchski-attract.com/typescript/reference/media/localize-images.md)
>
> `site.media().localizeImages()`

> [card] [Publish images](https://docs.fetchski-attract.com/typescript/reference/media/publish-images.md)
>
> `site.media().publishImages()`

> [card] [POST /@apostrophecms/image/\{\_id}/submit](https://docs.fetchski-attract.com/api-reference/media/submit-an-image-for-review.md)
>
> The endpoint this calls, in the API reference: the HTTP request and answer, and every rule the site checks.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.