# appcore-api
[English](../../docs/en/crates/appcore-api.md) |
[Português](../../docs/pt/crates/appcore-api.md) |
[Français](../../docs/fr/crates/appcore-api.md)
Runtime HTTP command/query/status DTOs, router and host.
Stable routes include health, status, command and query V1 endpoints. Business
behavior is registered through command/query contracts; product REST resources
do not belong in this crate.
`HttpApiConfig::max_payload_bytes` bounds the complete command/query HTTP body
before JSON deserialization. Protected routes reject missing, malformed or
duplicate `Authorization` headers.
```bash
cargo test -p appcore-api
```