Add separated spec files and full mirror content

Ships the bundled spec (openapi.yaml/json), the separated public files under
spec/, the typed src re-exports, README, and LICENSE. Mirrors what
sync-mirrors.yml pushes from frontend/packages/openapi in the monorepo.

Author: SferaDev

.gitignore

@@ -2,11 +2,12 @@
 
 The public OpenAPI specification for the [PgBeam](https://pgbeam.com) API, a globally distributed PostgreSQL proxy platform for safe Postgres access by AI agents.
 
-This repository is a read-only mirror. The specification is generated from the PgBeam source contract and synced here automatically on every change, so it never drifts from what actually drives the API server, the TypeScript and Go SDKs, the Terraform, Crossplane, and Pulumi providers, the CLI, and the docs. Do not open pull requests that edit the spec by hand; they cannot be merged back.
+The [`sferarc/pgbeam-openapi`](https://github.com/sferarc/pgbeam-openapi) repository is a read-only mirror. The specification is generated from the PgBeam source contract and synced there automatically on every change, so it never drifts from what actually drives the API server, the TypeScript and Go SDKs, the Terraform, Crossplane, and Pulumi providers, the CLI, and the docs. Do not open pull requests that edit the spec by hand; they cannot be merged back.
 
 ## Contents
 
-- `openapi.yaml`, `openapi.json` — the OpenAPI document in both formats.
+- `openapi.yaml`, `openapi.json` — the full bundled OpenAPI document in both formats.
+- `spec/` — the same public contract split into separated files (`spec/openapi.yaml` root plus `paths/` and `components/`), for consumers who prefer the modular layout. Split from the public bundle, so internal-only operations never appear.
 - `src/` — a typed TypeScript module that re-exports the parsed document.
 
 ## Install
@@ -27,7 +28,7 @@ You can also read the raw documents without installing anything:
 import spec from "pgbeam-openapi/openapi.json";
 ```
 
-Or point any OpenAPI tool at the files directly to generate your own clients, validate requests, or render an API reference.
+Or point any OpenAPI tool at the bundled file (`openapi.yaml`) or the separated root (`spec/openapi.yaml`) to generate your own clients, validate requests, or render an API reference.
 
 ## License
 

README.md

@@ -16,7 +16,8 @@
       }
     },
     "./openapi.json": "./openapi.json",
-    "./openapi.yaml": "./openapi.yaml"
+    "./openapi.yaml": "./openapi.yaml",
+    "./spec/openapi.yaml": "./spec/openapi.yaml"
   },
   "main": "./dist/index.cjs",
   "module": "./dist/index.mjs",
@@ -27,7 +28,8 @@
   "files": [
     "dist",
     "openapi.json",
-    "openapi.yaml"
+    "openapi.yaml",
+    "spec"
   ],
   "keywords": [
     "pgbeam",

package.json

@@ -0,0 +1,7 @@
+name: agent_id
+in: path
+required: true
+description: Unique agent credential identifier (prefixed, e.g. agt_xxx).
+schema:
+  type: string
+  pattern: ^[a-zA-Z0-9_.-]+$

spec/components/parameters/AgentId.yaml

@@ -0,0 +1,7 @@
+name: anomaly_id
+in: path
+required: true
+description: Unique anomaly alert identifier (prefixed, e.g. ano_xxx).
+schema:
+  type: string
+  pattern: ^[a-zA-Z0-9_.-]+$

spec/components/parameters/AnomalyId.yaml

@@ -0,0 +1,7 @@
+name: approval_id
+in: path
+required: true
+description: Unique approval request identifier (prefixed, e.g. apr_xxx).
+schema:
+  type: string
+  pattern: ^[a-zA-Z0-9_.-]+$

spec/components/parameters/ApprovalId.yaml

@@ -0,0 +1,7 @@
+name: credential_id
+in: query
+required: false
+description: Filter to a single agent credential.
+schema:
+  type: string
+  pattern: ^[a-zA-Z0-9_.-]+$

spec/components/parameters/AuditCredentialId.yaml

@@ -0,0 +1,9 @@
+name: decision
+in: query
+required: false
+description: >-
+  Coarse outcome filter that groups events. `allow` = query; `block` = blocked,
+  budget_exhausted, auth_failed, credential_expired; `mask` = masked; `truncate`
+  = truncated.
+schema:
+  $ref: ../schemas/AuditDecision.yaml

spec/components/parameters/AuditDecision.yaml

@@ -0,0 +1,7 @@
+name: end
+in: query
+required: false
+description: Return entries strictly older than this timestamp (cursor / upper bound).
+schema:
+  type: string
+  format: date-time

spec/components/parameters/AuditEnd.yaml

@@ -0,0 +1,7 @@
+name: event
+in: query
+required: false
+description: Filter to a single event type (e.g. blocked, masked, query).
+schema:
+  type: string
+  pattern: ^[a-z_]+$