001-api-design.md markdown
39 lines 1.6 KB
Raw
sha256:c2dbf04d56308f3bbf2d06e6d2eb022b8948b1e827195fe525a44e5e18d5f9c0 feat(auth): Phase B Connect cloud agent (RFC 8628) + Hermes… Human minor ⚠ breaking 12 days ago

title: "ADR 001: Public API design — versioning and error model" project: engineering-team-template tags:

  • adr
  • api
  • design date: 2026-04-07

ADR 001: Public API design — versioning and error model

Status

Accepted (template example)

Context

We are exposing a customer-facing HTTP API for integrations. Mobile and server clients need predictable breaking-change policy, structured errors for programmatic handling, and observability-friendly request identifiers.

Constraints

  • Must support monthly releases; some customers upgrade slowly.
  • Error payloads must avoid PII and internal stack traces.
  • Rate limits and idempotency headers required for payment-adjacent endpoints.

Alternatives considered

  1. URL path versioning only (/v1/...) — simple; some clients cache aggressively and miss headers.
  2. Header-based negotiation only — flexible; poor ergonomics for curl and beginner integrators.
  3. Combined path major + header minor — more complex operations story.

Decision

Use /v1 path prefix for major breaking versions. Include X-Request-Id on all responses (echoed if provided). Errors use a stable JSON envelope: code, message, details (optional, non-sensitive), request_id.

Outcome & consequences

Clients pin major in the URL; we add fields in minors. Support traces request_id without leaking internals. Tradeoff: we must honor deprecation windows and ship real changelogs. Link OpenAPI from the repo; see runbooks/deploy-production.md for capacity under 503 load.

File History 1 commit
sha256:93bcf8f9bd56d8c5b9339f4ec73b9ebd66571398d56262d38eedc2cfa9db9882 fix(test): align Band B landing assertion with desktop MCP … Human 12 days ago