{
    "name": "Books REST API",
    "version": "4.0.0 (security hardening)",
    "endpoints": {
        "public": [
            "POST \/auth\/register",
            "POST \/auth\/login",
            "GET  \/api\/books",
            "GET  \/api\/books\/{id}"
        ],
        "protected": [
            "GET    \/auth\/me",
            "POST   \/api\/books",
            "PUT    \/api\/books\/{id}   (owner or admin)",
            "DELETE \/api\/books\/{id}   (admin only)"
        ]
    }
}