API Overview

Reoclo uses a dual API architecture from a shared backend codebase. The internal API serves dashboard and tenant operations and is reachable only through server-side proxying in the Astro web app. The gateway API is the externally exposed surface used for GitHub webhooks and public integration entry points.

This separation is a deliberate security boundary. Internal CRUD and tenant-scoped actions stay off the public internet, while webhook handling and runner communication remain isolated in gateway routers with verification and rate limiting controls.

Detailed endpoint reference pages will be added in upcoming documentation updates. For now, use this section as the architectural map for where API responsibilities live and which surface should own new routes.