Changelog
Version history for the Workspace API. We follow semantic versioning and additive compatibility — see the policy below. Subscribe to this page via RSS (coming soon) or follow us on GitHub for release announcements.
Versioning policy
- Additive-only. New fields, endpoints, scopes and event types ship on the
v1 URL. We never rename or remove a field without a new major version. - Deprecation window. Deprecated fields and endpoints keep working for at least 6 months after the deprecation notice. The response includes a
Deprecation header during that window. - Breaking changes. Reserved for a future
v2 endpoint under /api/workspace/v2/. Both versions run in parallel for 12 months. - Webhook payloads. New event types are added additively. Payload fields are only added, never renamed. Subscribers get the fields they already handle plus any new ones.
Releases
v1.1.1
2026-10-17- Team members: read-only linked_calendar_group_id (calendar group that shares one agenda with the member)
- Team member availability also counts the linked calendar group (appointments, held slots, time blocks) and Outlook busy time
- Bookings POST/PATCH and appointments POST return 409 SLOT_CONFLICT when the linked shared agenda is busy (only for linked team members / calendar groups)
v1.1.0
2026-10-08- Added Field Service scopes: operations.maintenance.read/write/delete + operations.stock.read/write + operations.certifications.read/write/delete
- Added nested time-logs under work orders (reuses operations.workorders scopes) for payroll export
- Added appointments resource under bookings.appointments.read/write
- Added webhook endpoint management (public API) — list / create / rotate-secret / delete
- Added runtime scope-catalog endpoint for the API-key create modal (prevents UI/backend drift)
- Workspace workorders now gated by the Field Service module — a scope grant alone is no longer sufficient
- OpenAPI yaml is now served at /openapi/workspace-api.yaml (CORS enabled, 5-minute cache)
v1.0.0
2026-09-15- Initial launch — CRM (contacts, companies, deals, tasks, notes, segments) + Sales (quotes, invoices, products) + Bookings (bookings, customers, booking-links) + Work orders
- HMAC-signed webhooks with retry + circuit breaker
- Idempotency-Key support on all POST/PATCH endpoints
- 3-layer rate limiting (global, per-IP, per-key)
- 30-day soft-delete recycle bin + restore endpoints