Repository navigation
feat(api): add analytics, report forwarding, and sandbox contracts - #7
Merged
Merged
Conversation
bjornftw
previously approved these changes
Sep 30, 2026
bjarn
changed the title
bjarn
changed the title
bjornftw
approved these changes
Oct 1, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Review sending-openapi.json and team-openapi.json from the current documentation source.
Source fingerprints:
The source specifications remain outside this repository and are not changed.
Changes
Add POST /analytics and its request and response types. Add project report-forwarding retrieve, update, delete, verify, and resend-code methods. Handle the empty HTTP 204 delete response.
Update project, route, webhook, RBAC, and suppression contracts. Keep project creation API tokens and both successful suppression deletion results. Keep existing public type names, scheduling helpers, builders, and cursor types. Check all 55 object component field sets against the current source. No public model type names are removed.
Keep string-valued header maps for single-message and batch sending. Both current source schemas define headers as an object with string-valued additional properties.
Keep both the current message-page metadata and legacy flat cursor fields. Keep the existing project creation response name.
Validation
13 external generator and contract tests, formatting, compilation with warnings denied, 154 ExUnit tests, documentation generation, a Hex package build, and mix hex.audit passed locally.
Require Mint ~> 1.10.2 in the package and lock Mint 1.10.2. Add a test that rejects vulnerable Mint versions in the package requirements. Other locked dependencies remain unchanged. Mint 1.10.2 is the patched release for CVE-2026-94194, CVE-2026-91043, and CVE-2026-92103:
CI passed on Elixir 1.15.8 / OTP 26.2 and Elixir 1.20.4 / OTP 29.0. The modern CI job also passed mix hex.audit, documentation generation, and the package build.