Application boundary#
These paths belong to your YAADMIN installation. They are not callable product-website APIs. Authenticated mutations require a session-matched X-CSRF-Token unless the route is public. Handler-local error codes are not exhaustive downstream schemas.
Verified routes#
GET/api/health⌄
Health.
- Authentication
- public
- Permission
- no separate permission identifier in handler (admin/owner/runtime checks as above)
- Request body
- none
- Query parameters
- none explicitly read
- Headers
- none beyond shared session/CSRF
- Response structure
{status, web_version, authentication, authentication_providers, llm_configured, loaded_modules}- Important errors
- none literal; shared/helper errors apply
- Approval behavior
- no standalone approval behavior in this handler.
Verified route registration · handler api_health. Some definitions may be partially redacted; no missing fields are inferred.
Implementation reference: 2026-10-02. Labels distinguish verified behavior, partial implementation and architectural intent.
YAADMIN