Nick SzaunigandClaude Opus 5.5
ede86c062a
GET /api/v1/shop-sync returns exactly the data ApiCore releases to the shop: harvest facts, article master data and bottlings with their harvest ids. Every query uses an explicit select, so notes, colonies, treatments and fields added to the models later never leave ApiCore unless deliberately added to the allowlist. - New permission shop-sync:read (granted to ADMIN automatically, to no other role): the shop's service account needs nothing else, in particular no access to harvest or extraction records with notes. - contractVersion 1; only breaking changes bump it. - Always the full set: small volume, and a full comparison heals missed runs by itself. Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>