Platform updates

New

• Webhook signature verification — all webhook payloads now include a Ventryx-Signature header for HMAC-SHA256 validation.
• Workflow run history endpoint: GET /workflows/:id/runs returns a paginated log of all executions.
• Event filtering — GET /events now supports type, from, and to query parameters.

Improved

• API key creation now returns the full key object including all assigned scopes.
• Rate limit headers are now returned on all 429 responses with a Retry-After value.

New

• Approval flows — workflows now support a require_approval step type with configurable approvers and timeout.
• Multi-step workflows — workflows can now define sequential and parallel step chains.
• Organization-level usage analytics endpoint: GET /analytics/usage.

Fixed

• Resolved an issue where PATCH /workflows/:id did not correctly merge nested step configurations.
• Event timestamps now consistently return ISO 8601 format with millisecond precision.

New

• Scoped API keys — keys can now be issued with granular resource:action scopes.
• Test environment — all accounts now have a sandboxed test environment accessible via vtx_test_* keys.

Improved

• Error responses now include a machine-readable code field alongside the human-readable message.
• Pagination meta object now includes total, page, and per_page on all list endpoints.

Initial release

• Ventryx REST API v1 publicly available.
• Workflows: create, retrieve, update, delete.
• Events: emit and retrieve.
• API key management: create and revoke.
• Organization model with role-based access.
• Official Node.js and Python SDKs.