dcramer Peated API Client
Run the authenticated client from the repository root.
Supported Boundary
| Surface | Target |
|---|---|
pnpm cli auth |
OAuth credentials |
pnpm cli api |
OAuth-backed HTTP API; production by default |
Do not add, recommend, or use direct database-backed command groups for
operations. Those commands are legacy. If an operation is not available over
HTTP, add a permission-checked API route and call it through pnpm cli api.
Workflow
- Resolve IDs and state through read-only API requests.
- Check the current OpenAPI spec or owning route before building API writes.
- Prefer preview routes, explicit IDs, and small limits.
- Obtain authorization for the exact mutation scope.
- Re-fetch after writes; stop on stale state, conflicts, or changed identity.
Never expose tokens, OAuth codes, authorization headers, or private user data. Never infer write permission from a request to inspect, diagnose, or review.
Read only the relevant reference:
- OAuth or generic API: authenticated-api.md
- Price-match review or resolution: moderation.md
Report target environment, read/write status, affected IDs or bounded counts, verification, and skipped ambiguous items.