Changelog

Public release notes for the Mosaic Hub API. Breaking changes only ship under a new URL version.

v1.1.0 - 2026-06-03

• Numbers / Receivables. Three new batch-ingest endpoints:
  • POST /v1/numbers-receivables-invoices (scope numbers.receivables-invoices.write)
  • POST /v1/numbers-receivables-credit-notes (scope numbers.receivables-credit-notes.write)
  • POST /v1/numbers-receivables-quotes (scope numbers.receivables-quotes.write)
  Up to 500 items per batch. post_status per item lands as draft (d) or committed (c).
• Lifecycle endpoints. /{id}/commit and /{id}/void for invoices and credit notes; /{id}/commit, /{id}/accept, /{id}/void and /{id}/convert for quotes. All require Idempotency-Key; void honours vat_period_locked_date / numbers_date_locked_final / numbers_date_locked (API partners cannot bypass soft-locks).
• VAT line emitter. Server-side three-leg expander (trading / VAT bucket / counterparty control) ported from the portal for strict parity.

v1.0.0 - 2026-05-01

• Initial public release of the Mosaic Hub API.
• Authentication. HMAC-SHA256 request signing with timestamp window and nonce-based replay protection.
• Numbers / Spending Methods. POST /v1/numbers-spending-methods ingests a supplier bill (JSON + optional PDF) as a draft transaction.
• Liveness probe. GET /v1/healthz.
• Error model. RFC 7807 problem documents with stable type URIs under https://api.mosaic.co.za/problems/.
• Idempotency. Required Idempotency-Key header on all write endpoints with replay-safe semantics.
• OpenAPI 3.2.0. Machine-readable spec published at /mosaic-hub-open-api.json.