Publish a local plugin source version
Called by the daemon to register a new version of a locally-developed plugin. Validates the manifest, creates or updates the plugin record in the registry, and links the tarball URL if provided. Only `local-path` source-class mounts are accepted. Auth: `Bearer rsk_*` via `getCliOrSessionAuth`. The mount's `scopeOwnerId` must match the caller's `orgId`.
Authorization
rsk_Bearer Rensei API key presented as Authorization: Bearer rsk_live_. Required API-key scopes are recorded per operation in x-rensei-required-scopes.
In: header
Path Parameters
Plugin source mount ID.
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
application/json
application/json
application/json
application/json
curl -X POST "https://example.com/api/daemon/plugin-sources/string/publish" \ -H "Content-Type: application/json" \ -d '{ "manifest": {} }'{
"ok": true,
"pluginId": "string",
"version": "string",
"mountId": "string"
}{
"error": "Session not found"
}{
"error": "Session not found"
}{
"error": "Session not found"
}{
"error": "Session not found"
}Upsert plugin verb option snapshots
Called by the daemon to push option metadata (e.g. autocomplete choices) for installed plugin verbs back to the platform so users see up-to-date option lists in the workflow editor. Accepts a batch of snapshots for one `(orgId, projectId)` scope. Each entry is upserted by `(orgId, projectId, pluginId, verbId)`. Auth: `Bearer rsk_*` via `getCliOrSessionAuth` OR runtime JWT. Cross-tenant guard on `body.orgId`. Additional project-boundary guard on `body.projectId`.
Acknowledge Donmai's durable privileged-verification claim
Runtime-JWT-only, receiver-bound CAS for `rensei.verify.run`. The strict JSON body is limited to 4096 bytes. This is the only transition from reservation (`delivered`) to durable local claim (`claimed`); replays return retained duplicate receipt bytes and changed authority conflicts.