Changelog

2026-06-01vv1.0.0Non-breaking

Huli Public API v1.0 — General Availability

Breaking: no. This is the initial public release.

FHIR R4 resources

Patient — read, search, create, update. Identifiers: CURP, RFC, NSS, INE. Two-surname support via the segundo-apellido extension. Gender mapping: FHIR male/female/other → Huli M/F/I.
Appointment — read, search, create, update. Status transitions: booked, cancelled, fulfilled.
Encounter — read, search, create, update. Class: ambulatory, emergency, inpatient.
Observation — read, search, create, update. Categories: vital-signs, laboratory, exam. LOINC required on write. UCUM validated.
Practitioner — read, search (read-only).
Organization — read, search (read-only).

Authentication

Rate limiting and audit

Per-key and per-organization request ceilings. 429 with Retry-After on limit exceeded.
Every authenticated request writes an audit record with 7-year retention (NOM-024 compliance requirement).

huli CLI v1.0

huli auth login (interactive OAuth PKCE), huli auth setup (bearer), huli auth status, huli auth token.
huli fhir patient|appointment|encounter|observation|practitioner|organization subcommands.
huli api get|post|put for raw HTTP access.
huli config get|set|list.

Scope system

system/<Resource>.<perms> format. Permissions: r (read), s (search), c (create), u (update).
Scopes: system/Patient.rs, system/Patient.cru, system/Appointment.rs, system/Appointment.cru, system/Encounter.rs, system/Encounter.cru, system/Observation.rs, system/Observation.cru, system/Practitioner.rs, system/Organization.rs.