Sign up
POST /v1/auth/signup — public. Creates a user account and workspace.
A session token (JWT), valid for the workspace’s configured TTL.
The created user.
400 if the email already exists or input is invalid.
Log in
POST /v1/auth/login — public.
401 on invalid credentials.
Current user
GET /v1/auth/me — requires Authorization: Bearer <JWT>.
401 if the token is missing, invalid, or expired.