# Changelog

> What changed in the Panlytics API and its docs, newest first.

Markdown twin of https://panlytics.net/developers/changelog (last updated 2026-10-25). Every page of the Panlytics developer docs is listed at https://panlytics.net/developers/llms.txt, and all of them are in one file at https://panlytics.net/developers/llms-full.txt. The site guide is https://panlytics.net/llms.txt.

## 2026-10-25: Developer API, first release

The first release of the Panlytics developer API. It opened in steps, and every step is now live.


- **Keys.** A person whose role holds "Make keys for programs and AI agents" can make a key on their Developer page. A key acts as its maker, inside their role and behind the fence, and ends 1 to 5 hours after it is made.
- **Developer mode.** The CEO switches keys on for the company and sets how long they last. Switching it off revokes every key at once.
- **The agent prompt.** Every new key comes with a prompt to paste into an AI agent, with the key, its reach, its end and the rules.
- **`GET /v1/me`.** Who the key acts as, what it reaches, what it may do and when it ends.
- **These docs**, with a markdown twin of every page, `/developers/llms.txt`, `/developers/llms-full.txt` and `/developers/openapi.json`.

- **The v1 endpoints.** Your company, shops, categories and their settings, report uploads, reorder points (the level that triggers a new order), the order list and the stop-stocking list with CSV export, recompute, suppliers, and chat with its runs, under `/v1`. Twenty-two endpoints in all, the AI sign-in link below included, each with its page in the [API reference](https://panlytics.net/developers/api).
- **Pages and retries.** Every list answers `{ data, nextCursor, total }`, and every creating `POST` takes an `Idempotency-Key` header.
- **Proposals stay with a person.** Anything the assistant proposes in a run a key started waits for a person to approve it in the app.
- **Retries after a fault.** A `500` is kept on its `Idempotency-Key` for 24 hours, so the same key answers the same `500`. Check what exists, then send a new key.
- **Three live streams per key.** A fourth `GET /v1/runs/{id}/stream` answers `429 net.rate_limited` until one closes.
- **A role that loses the key ability revokes its keys.** The keys of a person whose role no longer holds "Make keys for programs and AI agents" are revoked at once, and their runs and streams stop.
- **AI sign-in.** When the CEO switches it on, an AI with a live key asks `POST /v1/agent-sign-in-links` for a one-time link and pastes it into its own browser's address bar, to use the app as the key's maker behind the fence. [Letting an AI sign in to the app](https://panlytics.net/developers/security/ai-sign-in) has the rules.

## How this page works

Each entry is dated and lists what changed for a caller of the API. A change that could break a working program is marked as one, with what to do about it. The markdown twin of this page, `/developers/changelog.md`, is the easiest way for a program or an agent to check for changes.