Confirmed public endpoint
Add an API route
- Read
docs/codebase-map.json. - Search for existing API route handlers.
- Reuse validation, auth, rate limit, and response helpers.
- Preserve
org_idscoping. - Return stable JSON shapes.
- Update API docs and examples.
Contract rules
- Do not remove existing fields from responses.
- Do not rename accepted request fields without a migration path.
- Keep error status codes stable.
- Document new errors.