From 98a505dc3e82afa48d46b572a251c5c50bd4e93c Mon Sep 17 00:00:00 2001
From: "Aaron K. Clark" <akclark@thenetwerk.net>
Date: Tue, 19 May 2026 10:28:36 -0500
Subject: [PATCH] docs(openapi): declare Idempotency-Replay on POST
 /v1/purchaseordervendor 201
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Part of #245 — single-create POST OpenAPI Idempotency-Replay sweep.

Adds Idempotency-Replay response-header declaration to the 201
response on POST /v1/purchaseordervendor. Same pattern as the prior
12 entities.

No behavior change — pure spec metadata. 760 tests still pass.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 app/config/openapi.js | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/app/config/openapi.js b/app/config/openapi.js
index 4ef404c..73ce94d 100644
--- a/app/config/openapi.js
+++ b/app/config/openapi.js
@@ -1125,7 +1125,14 @@ const spec = {
                 security: [{ authKey: [] }],
                 parameters: [idempotencyKeyHeader],
                 requestBody: { required: true, content: { 'application/json': { schema: { $ref: '#/components/schemas/PurchaseOrderVendor' } } } },
-                responses: { 201: { description: 'Created' }, 400: { description: 'Bad request' }, 403: { description: 'Auth failure' } },
+                responses: {
+                    201: {
+                        description: 'Created',
+                        headers: idempotencyReplayResponseHeader,
+                    },
+                    400: { description: 'Bad request' },
+                    403: { description: 'Auth failure' },
+                },
             },
         },
         '/v1/purchaseordervendor/{id}': {