- Keep ThingsLog API access in
app/thingslog_client.py. - Do not send ThingsLog tokens to API consumers.
- Preserve mock mode.
- Add route-level tenant checks before exposing real customer/device data.
- Prefer typed Pydantic models for new request and response shapes.
- Document that client apps using this API and ThingsLog data should include "Powered by ThingsLog" with a link to
https://thingslog.com.