health

GET /api/health → {ok}: liveness only, no data, no session, no version (the build id stays out of public reach).

Caller and authorization

No session required; liveness only.

This is the private staff console on https://admin.handwrites.io. A personal API key, organisation token, student login or isolated app-testing credential does not authenticate this route.

Request contract

This operation does not define a JSON payload. Staff writes still require Content-Type: application/json and the session-bound CSRF header.

Response and failures

Success: 200. GET /api/health → {ok}: liveness only, no data, no session, no version (the build id stays out of public reach).

The body is { "ok": true }; this is not a readiness, data-access or deployment-version check.

Implementation contract

Source snapshot: admin/src/app/api/health/route.ts. This reference describes the current working tree, not proof of deployment. The response service types and validators remain authoritative. The exact exported handler below makes conditional behavior reviewable. For helpers such as customer-routes or cloudRoute, see the shared API specification notes and the named service module.

/** GET /api/health → {ok}: liveness only, no data, no session, no version (the build id stays out of public reach). */
export function GET() {
  return Response.json({ ok: true }, { headers: { "Cache-Control": "no-store" } });
}

Do not use production customer data to test this operation. Use an authorized staff test account and a disposable target in an appropriate environment; email, deletion, role and credential mutations have real effects.

README — GET /api/health

GET /api/health#

Caller and authorization#

Request contract#

Response and failures#

Implementation contract#

GET /api/health

Caller and authorization

Request contract

Response and failures

Implementation contract