API और integration contracts

The API story is built for future integrations while keeping the current product honest: contracts, mock adapters and local validation before production credentials.

PostgreSQL production path

Prisma, migrations, Docker Compose और SQLite dev/test separation documented.

Scoped API keys

Scopes unsafe mutation और webhook replay बिना permission deny करते हैं.

OpenAPI inventory

209 validated routes operations, finance, workers, privacy, mobile sync और SaaS cover करते हैं.