-
+
diff --git a/frontend/services/puzzleDraftService.js b/frontend/services/puzzleDraftService.js
new file mode 100644
index 00000000..7e94995f
--- /dev/null
+++ b/frontend/services/puzzleDraftService.js
@@ -0,0 +1,110 @@
+import { apiClient, ApiError } from "@/lib/api";
+
+/**
+ * Service for the backend puzzle-draft lifecycle (`backend/src/puzzle-draft/`).
+ *
+ * All routes are admin-only on the server (JwtAuthGuard + RolesGuard with
+ * `AdminRole.ADMIN`); this module intentionally performs no authorization
+ * logic of its own — the client-side check is advisory, the backend is the
+ * source of truth (issue #511).
+ *
+ * Endpoints (mounted under the versioned API prefix, see `lib/api.js`):
+ * - POST /drafts → create a draft
+ * - PATCH /drafts/:id → update a draft (rejected for published drafts)
+ * - POST /drafts/:id/publish → publish a draft
+ */
+
+/** Creates a draft from a `CreateDraftDto`-shaped payload. */
+export async function createDraft(payload) {
+ const response = await apiClient.post("/drafts", payload);
+ return response.data;
+}
+
+/** Updates an existing draft from an `UpdateDraftDto`-shaped payload. */
+export async function updateDraft(draftId, payload) {
+ const response = await apiClient.patch(`/drafts/${draftId}`, payload);
+ return response.data;
+}
+
+/** Publishes a draft through the backend publish endpoint. */
+export async function publishDraft(draftId) {
+ const response = await apiClient.post(`/drafts/${draftId}/publish`);
+ return response.data;
+}
+
+/**
+ * Maps a backend validation rejection onto per-field errors.
+ *
+ * The global ValidationPipe returns class-validator messages as an array on
+ * `response.data.message` (e.g. `["title must be a string", ...]`). Each
+ * message is attributed to the first form field it mentions so the form can
+ * render the error next to the offending input; messages that name no known
+ * field are returned under `form`.
+ *
+ * @param {Error} error - an `ApiError` thrown by `apiClient` (or any error)
+ * @returns {Record