# Events API

Live invalidation feed. 1 operation under /api/v1. Errors are RFC 9457 problem+json with a stable `code` field. The complete schemas are in https://nebulactrl.com/api/v1/openapi.json.

## GET /events

Server-sent invalidation feed

Each message is `data: {"type","projectId","environmentId","resourceId"}`. A comment line is sent every 15 seconds as a heartbeat. Clients refetch the named resources.

Authentication: session cookie or `Authorization: Bearer nct_…` token.

Response 200: Event stream (string)
Errors: 401 Unauthorized; 403 Forbidden; 500 Internal Server Error