API changelog

All /api/v1/* responses now carry X-Request-Id and X-API-Version headers. Quote X-Request-Id in support tickets for faster diagnosis.

Bearer-key requests get a stricter, plan-aware two-tier rate limit (per-key bucket + workspace ceiling). Cookie-session requests are unchanged. See Rate limits.

X-RateLimit-Limit and X-RateLimit-Remaining headers now ship alongside the existing X-RateLimit-Reset and Retry-After. Use Limit and Remaining to throttle pre-emptively instead of waiting for a 429.

GET /api/v1/whoami returns rate-limit headers on 200 and 429 responses. The body shape is unchanged.

— (none)

— (none)