Every change to the API, dated.

1. 1 SepFixed

   Errors

   • /v1/usage

     A 402 raised by a plan wall now carries a message naming the plan and the capability it wants, instead of the framework default of "Http Exception". The status and the error envelope are unchanged.

1. 25 AugChanged

   Keys

   • /v1/keys/{id}/rotate

     Seat count, retention window and the per-key request rate are now enforced from the plan on the organisation rather than from a single shared default, so a limit means what the plan says it means.

2. 17 AugChanged

   Analytics

   • /v1/analytics/daily

     A worked hour has one definition across analytics, timesheets and billing, and rest is no longer scored as though it were idle work. Existing fields keep their names and types; the numbers behind them are more defensible.

   • /v1/time-entries

     Time entries reconcile against the same definition, so an hour read here and an hour read from analytics agree.

1. 15 JulChanged

   Keys

   • /v1/sandbox/keys

     The public API and key creation are gated on the public_api entitlement. Organisations on Free receive 402 with the plan named, rather than a key that fails later at the route.

2. 13 JulAdded

   Deliverables

   • /v1/deliverables

     Shipped work arrives from Jira, Linear, Asana and GitHub over signed webhooks and is readable as the outcome half of a verified record — what moved, beside the hours it cost.

3. 13 JulAdded

   Tenants

   • /v1/tenants

     Provision an organisation from the API. Write routes are idempotent: repeat a request with the same idempotency key and you get the first response back rather than a second tenant.

   • /v1/tenants/{id}/suspend

     Suspend and resume a tenant you provisioned, for partners running WorkMonitor inside their own product.

   • /v1/sandbox

     A vk_test_ sandbox with its own keys, so an integration can be built and tested before it touches a live organisation.

4. 13 JulAdded

   Docs

   • /v1/whoami

     The OpenAPI document is generated from the same Zod contracts the routes validate against, so a published shape cannot drift from the wire. Call whoami to see exactly which scopes a key carries.

5. 12 JulFixed

   Keys

   • /v1/keys/{id}/rotate

     A malformed CIDR prefix in a key IP allowlist now fails closed. It previously widened the allowlist rather than rejecting the entry.

6. 12 JulFixed

   Projects

   • /v1/projects

     Projects and tasks carry a real updatedAt, so polling with updatedSince re-delivers an edited row instead of silently skipping it.

   • /v1/projects/{id}/tasks

     Same fix on the task collection, which shares the cursor.

7. 12 JulFixed

   Errors

   • /v1/members

     The per-key rate limit is one shared bucket across every /v1 route rather than a separate allowance per route, which is what the documented rate always described.

8. 11 JulAdded

   Docs

   • /v1/members

     The first published /v1 surface: cursor-paginated collections, updatedSince polling, scoped keys and one shared error envelope, documented in OpenAPI 3.1.

9. 11 JulAdded

   Timesheets

   • /v1/timesheets

     Timesheets readable over the API, filtered by member, project and period.

   • /v1/timesheets/{id}/submit

     Submit a timesheet for approval as its own scoped operation, so a key that may read hours cannot also submit them.

   • /v1/timesheets/{id}/decide

     Approve or reject one timesheet, with the approver and the decision recorded on the audit trail.

Start of the log, 11 Jul 2026