122 unmodified lines
123plugin currently uses:
124- GET /v1/spaces/:slug/items/:id/versions — list version history (anonymous for public items, token required for private)
125
126public items work without an API token. 
127
128the middleware in `src/shared/auth/authorize.ts` grants anonymous callers `{ read: true }` when folder visibility is public.
129
130## submission
131
14 unmodified lines