Release v0.2.1

Added

• Source documentation (TSDoc): every exported symbol on the public API surface now carries a doc comment — parameter/return/throws contracts, the RBAC hierarchy (mayActOn/mayGrant), typed error codes, and the service-role vs user-scoped (RLS) Supabase client split. Comments only — no behavior, signature, or formatting change; all 75 tests still pass.
• Generated public API reference: docs/api/ — a TypeDoc-generated reference for the full src/lib/server surface (rbac, audit, services, billing, supabase/client). Ships with the kit; regenerated from source so it cannot drift.
• Docs gate (CI + release pipeline): npm run docs:api:check in CI and a gen-api-docs check in the release pipeline now fail if any exported symbol goes undocumented or if docs/api falls out of sync with the source.

Full change history: CHANGELOG.md

Release v0.2.0

Fixed

• Seat limits now enforced at invite acceptance — acceptInvite previously documented seat enforcement ("join time") but never called the billing adapter. It now counts the org's memberships and runs billing.assertSeatAvailable(orgId, count) before the single-use claim, so a full org never burns an invite it cannot honor.
• createBillingAdapter guards invalid MOCK_PLAN_SEATS — a non-numeric value previously produced a NaN seat limit that silently allowed unlimited joins; it now falls back to the default (3).

Added

• Service-level test suite — 51 new tests across tests/orgs-members.test.ts, tests/invites-seats.test.ts, tests/billing.test.ts, tests/audit.test.ts, backed by an in-memory fake Supabase client (tests/helpers/fake-supabase.ts). No database or network needed; suite 24 → 75 tests.
• Documentation: docs/architecture.md, docs/rbac.md, docs/billing.md, docs/testing.md

Changed

• README/AGENTS/CLAUDE testing sections updated to the real suite layout and count

Full change history: CHANGELOG.md