API Evangelist enhancements for the Red Energy CDR Energy Energy Account Billing API

overlay: 1.0.0
info:
  title: API Evangelist enhancements for the Red Energy CDR Energy Energy Account Billing API
  version: 1.0.0
extends: openapi/red-energy-energy-account-billing-api-openapi.yml
x-generated: '2026-10-21'
x-method: generated
x-source: >-
  Generated from the refined OpenAPI in openapi/ plus live GET checks on 2026-10-21 of public.cdr.redenergy.com.au/cds-au/v1/discovery/status
  and /outages (200) and cdr.energymadeeasy.gov.au/red-energy/cds-au/v1/energy/plans (200). The original
  is never mutated.
actions:
- target: $.info
  update:
    x-apievangelist-provider: Red Energy
    x-apievangelist-provider-id: red-energy
    x-apievangelist-spec-provenance: >-
      Split from the DSB Consumer Data Standards contract harvested verbatim into openapi/_original/.
      The shared CDR standard, not a Red-Energy-proprietary specification.
    x-cdr-abn: '60107479372'
    x-cdr-register: https://api.cdr.gov.au/cdr-register/v1/energy/data-holders/brands/summary
- target: $.servers
  update:
  - url: https://mtls.dh.example.com/cds-au/v1
    description: >-
      Placeholder from the DSB Consumer Data Standards. Red Energy's real mutual-TLS resource base URI
      is published only through the authenticated CDR Register and is not publicly discoverable; not called
      by this review.
    x-access: accredited-only
- target: $.paths['/energy/accounts/billing'].get
  update:
    x-access: accredited-only
    x-access-note: >-
      Consumer-authorised. Reachable only by an accredited CDR data recipient over mutual TLS with FAPI
      OAuth2/OIDC after the customer consents. Not called by this review.
- target: $.paths['/energy/accounts/billing'].post
  update:
    x-access: accredited-only
    x-access-note: >-
      Consumer-authorised. Reachable only by an accredited CDR data recipient over mutual TLS with FAPI
      OAuth2/OIDC after the customer consents. Not called by this review.
    x-idempotent: true
    x-post-as-query: POST carries a list of ids in the body and creates nothing.
- target: $.paths['/energy/accounts/invoices'].get
  update:
    x-access: accredited-only
    x-access-note: >-
      Consumer-authorised. Reachable only by an accredited CDR data recipient over mutual TLS with FAPI
      OAuth2/OIDC after the customer consents. Not called by this review.
- target: $.paths['/energy/accounts/invoices'].post
  update:
    x-access: accredited-only
    x-access-note: >-
      Consumer-authorised. Reachable only by an accredited CDR data recipient over mutual TLS with FAPI
      OAuth2/OIDC after the customer consents. Not called by this review.
    x-idempotent: true
    x-post-as-query: POST carries a list of ids in the body and creates nothing.
- target: $.paths['/energy/accounts/{accountId}/billing'].get
  update:
    x-access: accredited-only
    x-access-note: >-
      Consumer-authorised. Reachable only by an accredited CDR data recipient over mutual TLS with FAPI
      OAuth2/OIDC after the customer consents. Not called by this review.
- target: $.paths['/energy/accounts/{accountId}/invoices'].get
  update:
    x-access: accredited-only
    x-access-note: >-
      Consumer-authorised. Reachable only by an accredited CDR data recipient over mutual TLS with FAPI
      OAuth2/OIDC after the customer consents. Not called by this review.