submissions

Operations of the Xema Store API. Paths are relative to your deployment's API host.

POST /api/xema-store-api/listings/{id}/versions

Submit a new version of a listing.

Validates the manifest with BiomeManifestSchema, computes the permission digest, and writes the row with lifecycle=store-submitted. Gated on store:biome.submit@1.

Authentication: bearer token (Authorization: Bearer <token>)

Request body: application/json SubmitListingVersionDto

POST /api/xema-store-api/listings/{id}/versions/staging

Mint a short-lived upload slot for a version bundle.

Returns a presigned PUT and an opaque uploadId. Upload the .tgz, then submit with stagedUploadId + bundleSha. Gated on store:biome.submit@1 — the same ref as submitting.

Authentication: bearer token (Authorization: Bearer <token>)

POST /api/xema-store-api/listings/{id}/versions/{version}/archive

Archive a specific version.

Authentication: bearer token (Authorization: Bearer <token>)

POST /api/xema-store-api/listings/{id}/versions/{version}/comment

Append a reviewer comment to the review log.

Authentication: bearer token (Authorization: Bearer <token>)

Request body: application/json CommentListingVersionDto

GET /api/xema-store-api/listings/{id}/versions/{version}/review-log

Return the full review history of a version.

Authentication: bearer token (Authorization: Bearer <token>)