afterhours-shift-manager/.redocly.yaml

# Same Redocly recommended ruleset as internal-portal (DEV-223 / DEV-289).
# Recommended operation-2xx-response does not count 302. Login-style redirects
# succeed with 302, so that rule is replaced by operation-2xx-or-3xx-response
# at error. operation-4xx-response is promoted to error so missing 4xx fails CI.
extends:
  - recommended

rules:
  operation-2xx-response: off
  operation-4xx-response: error
  rule/operation-2xx-or-3xx-response:
    subject:
      type: Responses
    message: Operation must define a 2XX or 3XX response.
    severity: error
    assertions:
      requireAny:
        - "200"
        - "201"
        - "202"
        - "204"
        - "301"
        - "302"
        - "303"
        - "307"
        - "308"
        - "2XX"
        - "3XX"

apis:
  afterhours@v1:
    root: openapi.yaml
feat(api): add OpenAPI Redocly contract and VPC outputs (DEV-289) (#268) * feat(infra): export vpc_id and public subnet outputs (DEV-289) Portal Fargate and meals already attach to this VPC. These outputs are the HCP existing_vpc_id / existing_public_subnet_ids values. Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com> * feat(api): add OpenAPI 3.1 and Redocly lint in CI (DEV-289) Same extends: recommended ruleset and @redocly/cli 2.52.1 as internal-portal. Covers health, roster, and portal /api/shifts. Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com> * fix(api): document 4xx and treat 302 as success in Redocly (DEV-289) Health and CORS preflight document 400. Recommended only counted 2XX, so login-style 302s use a shared 2XX-or-3XX rule. Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com> * fix(api): fail Redocly on missing 4xx and 2xx/3xx (DEV-289) Promote operation-4xx-response and the 2xx-or-3xx success rule to error. Drop unused 400s on health and CORS OPTIONS. Health documents 403 like the portal. CORS stays in Flask and is not part of the employee contract. Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com> 2026-09-22 00:34:15 +00:00			`# Same Redocly recommended ruleset as internal-portal (DEV-223 / DEV-289).`
			`# Recommended operation-2xx-response does not count 302. Login-style redirects`
			`# succeed with 302, so that rule is replaced by operation-2xx-or-3xx-response`
			`# at error. operation-4xx-response is promoted to error so missing 4xx fails CI.`
			`extends:`
			`- recommended`

			`rules:`
			`operation-2xx-response: off`
			`operation-4xx-response: error`
			`rule/operation-2xx-or-3xx-response:`
			`subject:`
			`type: Responses`
			`message: Operation must define a 2XX or 3XX response.`
			`severity: error`
			`assertions:`
			`requireAny:`
			`- "200"`
			`- "201"`
			`- "202"`
			`- "204"`
			`- "301"`
			`- "302"`
			`- "303"`
			`- "307"`
			`- "308"`
			`- "2XX"`
			`- "3XX"`

			`apis:`
			`afterhours@v1:`
			`root: openapi.yaml`