overlay: 1.0.0
info:
  title: API Evangelist enhancements for the Habiteo Site Content API
  version: 1.0.0
extends: openapi/habiteo-posts-api-openapi.yml
x-extends-all:
- openapi/habiteo-posts-api-openapi.yml
- openapi/habiteo-pages-api-openapi.yml
- openapi/habiteo-media-api-openapi.yml
- openapi/habiteo-portfolio-api-openapi.yml
- openapi/habiteo-blocks-api-openapi.yml
- openapi/habiteo-taxonomy-api-openapi.yml
- openapi/habiteo-discovery-api-openapi.yml
- openapi/habiteo-users-api-openapi.yml
- openapi/habiteo-comments-api-openapi.yml
- openapi/habiteo-settings-api-openapi.yml
- openapi/habiteo-contact-forms-api-openapi.yml
- openapi/habiteo-oembed-api-openapi.yml
- openapi/habiteo-site-tools-api-openapi.yml
x-generated: '2026-08-17'
x-method: generated
x-source: >-
  API Evangelist enrichment pipeline. Captures our annotations on top of the DERIVED OpenAPI
  documents so those documents stay a faithful projection of https://www.habiteo.com/wp-json/ and
  our editorial layer stays separable from them.
actions:
- target: $.info
  update:
    x-apievangelist-profile: https://apis.io/providers/habiteo/
    x-apievangelist-artifacts:
      authentication: authentication/habiteo-authentication.yml
      conventions: conventions/habiteo-conventions.yml
      errors: errors/habiteo-problem-types.yml
      data_model: data-model/habiteo-data-model.yml
      lifecycle: lifecycle/habiteo-lifecycle.yml
      conformance: conformance/habiteo-conformance.yml
      rate_limits: rate-limits/habiteo-rate-limits.yml
      components: components/habiteo-components.yml
      well_known: well-known/habiteo-well-known.yml
      skills: skills/_index.yml
    x-provider-published: false
    x-derivation-note: >-
      Habiteo publishes no OpenAPI, no developer portal and no API documentation. These documents
      were derived mechanically from the live WordPress REST route-discovery document at
      https://www.habiteo.com/wp-json/ and describe the CMS content API behind the marketing site,
      NOT a Habiteo product API. Habiteo's actual products — myHabiteo, the Configurateur and the
      MegaWidget — have no published contract of any kind.
- target: $.info
  update:
    x-rate-limit-note: >-
      No rate-limit headers are advertised or observed. The origin is Apache with no CDN or WAF in
      front of it, so any limit would be origin-side and unsignalled.
    x-caching-note: >-
      No Cache-Control, ETag or Last-Modified header was returned on the observed wp/v2 collection
      response, so conditional requests are not available. Responses carry x-robots-tag: noindex.
    x-localization-note: >-
      Error `message` text is returned in French. Integrators must branch on the `code` field.
- target: $.servers[0]
  update:
    x-observed-tls: TLSv1.3
    x-observed-server: Apache
    x-observed-x-powered-by: PHP/7.0.6
    x-observed-cdn: none
    x-observed-hsts: false
- target: $.paths['/wp/v2/users']
  update:
    x-pii-note: >-
      This route returns the names, slugs and author-archive links of Habiteo marketing staff.
      API Evangelist does not mirror those values into this profile. Anyone consuming this route is
      processing personal data under GDPR.
- target: $.paths['/wp/v2/settings']
  update:
    x-observed-anonymous-status: 403
    x-observed-anonymous-code: rest_forbidden
    x-note: >-
      Declared in the route index but not readable anonymously. Present in the contract, gated at
      runtime.