@culprit/api-schema changelog

All API surface changes get an entry here. Semver-ish: a breaking change to the API surface requires a /v2/ URL prefix, not a major version bump in this package.

v0.1.1 — 2026-05-14

• Added per-endpoint operation registrations so openapi.json now ships full paths (23 paths × 42 operations across 13 resources). The Zod schemas in src/resources/*.ts are now reachable as both components.schemas AND as per-operation request/response bodies — single source of truth for both the TS surface and the docs portal (SP2) and Terraform provider (SP3).
• Added bearerAuth security scheme. Operations that require a token reference it via security: [{ bearerAuth: [] }]; GET /v1/health is unauthenticated (security: []).
• No wire-format changes; this is a doc-surface enrichment only.

v0.1.0 — 2026-05-14

Initial release. Locks the v1 surface:

• 13 resources (services, service_secret_rotations, notification_rules, pii_patterns, dispatch_targets, incidents [read-only], audit_events [read-only], api_tokens, tenant_members, tenant_invitations, tenant, usage, health).
• Cursor pagination, Stripe-style errors, idempotency-key support on POST/PATCH/DELETE.
• Bearer token auth with read_only / read_write scoping.
• 1000 req/min/token rate limit.