Added
- Source documentation (TSDoc): every exported symbol on the public API surface now carries a doc comment — parameter/return/throws contracts, the RBAC hierarchy (
mayActOn/mayGrant), typed error codes, and the service-role vs user-scoped (RLS) Supabase client split. Comments only — no behavior, signature, or formatting change; all 75 tests still pass. - Generated public API reference:
docs/api/— a TypeDoc-generated reference for the fullsrc/lib/serversurface (rbac, audit, services, billing, supabase/client). Ships with the kit; regenerated from source so it cannot drift. - Docs gate (CI + release pipeline):
npm run docs:api:checkin CI and agen-api-docscheck in the release pipeline now fail if any exported symbol goes undocumented or ifdocs/apifalls out of sync with the source.
Full change history: CHANGELOG.md