RSX · API · Reference

registry v1

Software distribution for RSX-built packages: npm and Cargo packages, platform binaries, and OCI images.

openapi.json

Current

Base URL: https://api.rsx.group/registry/v1
Self-grantable scopes: None. Every endpoint here needs a key issued by a platform admin.
Machine readable: openapi.json

admin

28 operations under /registry/v1/admin.

GET/registry/v1/admin/native/releases/list

List native releases, newest first, optionally by review state

Scope: registry:admin:native:releases:list Admin-issued keys only.

Query parameters

Query parameters of adminListNativeReleases
Parameter	Type	Description
reviewState	string	The release's review state.one of "invalid", "pending", "approved", "rejected", "revoked"
package	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
offset	integer, or null	at least 0 · default 0
limit	integer	1 to 100 · default 50

reviewState
Type
string
Description
The release's review state.one of "invalid", "pending", "approved", "rejected", "revoked"
package
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
offset
Type
integer, or null
Description
at least 0 · default 0
limit
Type
integer
Description
1 to 100 · default 50

Response 200Releases

Response of adminListNativeReleases
Field	Type	Description
datarequired	array of RegistryNativeAdminRelease
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
architecturerequired	string	The archive's declared architecture, as its manifest spells it.one of "x86_64", "any"
digestrequired	string
sizerequired	integer
statusrequired	string	one of "staging", "published"
reviewStaterequired	string, or null	The release's review state.one of "invalid", "pending", "approved", "rejected", "revoked"
findingsrequired	array of RegistryNativeFinding
manifestrequired	RegistryNativeManifest
supersedesrequired	array of string
isDefaultrequired	boolean
reviewReasonrequired	string, or null
reviewedAtrequired	string, date-time, or null
revokeCoderequired	string, or null	Why a release was withdrawn from new installs.one of "security", "broken", "withdrawn"
revokeReasonrequired	string, or null
revokedAtrequired	string, date-time, or null
firstGenerationrequired	integer, or null
reviewedByrequired	string, or null
revokedByrequired	string, or null

datarequired
Type
array of RegistryNativeAdminRelease
Description
packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
architecturerequired
Type
string
Description
The archive's declared architecture, as its manifest spells it.one of "x86_64", "any"
digestrequired
Type
string
Description
sizerequired
Type
integer
Description
statusrequired
Type
string
Description
one of "staging", "published"
reviewStaterequired
Type
string, or null
Description
The release's review state.one of "invalid", "pending", "approved", "rejected", "revoked"
findingsrequired
Type
array of RegistryNativeFinding
Description
manifestrequired
Type
RegistryNativeManifest
Description
supersedesrequired
Type
array of string
Description
isDefaultrequired
Type
boolean
Description
reviewReasonrequired
Type
string, or null
Description
reviewedAtrequired
Type
string, date-time, or null
Description
revokeCoderequired
Type
string, or null
Description
Why a release was withdrawn from new installs.one of "security", "broken", "withdrawn"
revokeReasonrequired
Type
string, or null
Description
revokedAtrequired
Type
string, date-time, or null
Description
firstGenerationrequired
Type
integer, or null
Description
reviewedByrequired
Type
string, or null
Description
revokedByrequired
Type
string, or null
Description

Example

curl

curl "https://api.rsx.group/registry/v1/admin/native/releases/list" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": [
    {
      "package": "@rsx/metal",
      "version": "0.6.0",
      "architecture": "x86_64",
      "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
      "size": 10240,
      "status": "staging",
      "reviewState": "pending",
      "findings": [
        {
          "check": "manifest.identity",
          "message": "The manifest names 'goodbye', but the release was declared as 'hello'."
        }
      ],
      "manifest": {
        "format": 3,
        "description": "Says hello.",
        "requires": [
          {
            "name": null,
            "version": null
          }
        ]
      },
      "supersedes": [
        "string"
      ],
      "isDefault": true,
      "reviewReason": "string",
      "reviewedAt": "2026-10-10T12:00:00.000Z",
      "revokeCode": "broken",
      "revokeReason": "string",
      "revokedAt": "2026-10-10T12:00:00.000Z",
      "firstGeneration": 1,
      "reviewedBy": "string",
      "revokedBy": "string"
    }
  ]
}

GET/registry/v1/admin/native/releases/get

Read one native release, with its findings and review history

Scope: registry:admin:native:releases:get Admin-issued keys only.

Query parameters

Query parameters of adminGetNativeRelease
Parameter	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters

Response 200The release

Response of adminGetNativeRelease
Field	Type	Description
datarequired	RegistryNativeAdminRelease
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
architecturerequired	string	The archive's declared architecture, as its manifest spells it.one of "x86_64", "any"
digestrequired	string
sizerequired	integer
statusrequired	string	one of "staging", "published"
reviewStaterequired	string, or null	The release's review state.one of "invalid", "pending", "approved", "rejected", "revoked"
findingsrequired	array of RegistryNativeFinding
manifestrequired	RegistryNativeManifest
supersedesrequired	array of string
isDefaultrequired	boolean
reviewReasonrequired	string, or null
reviewedAtrequired	string, date-time, or null
revokeCoderequired	string, or null	Why a release was withdrawn from new installs.one of "security", "broken", "withdrawn"
revokeReasonrequired	string, or null
revokedAtrequired	string, date-time, or null
firstGenerationrequired	integer, or null
reviewedByrequired	string, or null
revokedByrequired	string, or null

datarequired
Type
RegistryNativeAdminRelease
Description
packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
architecturerequired
Type
string
Description
The archive's declared architecture, as its manifest spells it.one of "x86_64", "any"
digestrequired
Type
string
Description
sizerequired
Type
integer
Description
statusrequired
Type
string
Description
one of "staging", "published"
reviewStaterequired
Type
string, or null
Description
The release's review state.one of "invalid", "pending", "approved", "rejected", "revoked"
findingsrequired
Type
array of RegistryNativeFinding
Description
manifestrequired
Type
RegistryNativeManifest
Description
supersedesrequired
Type
array of string
Description
isDefaultrequired
Type
boolean
Description
reviewReasonrequired
Type
string, or null
Description
reviewedAtrequired
Type
string, date-time, or null
Description
revokeCoderequired
Type
string, or null
Description
Why a release was withdrawn from new installs.one of "security", "broken", "withdrawn"
revokeReasonrequired
Type
string, or null
Description
revokedAtrequired
Type
string, date-time, or null
Description
firstGenerationrequired
Type
integer, or null
Description
reviewedByrequired
Type
string, or null
Description
revokedByrequired
Type
string, or null
Description

Example

curl

curl "https://api.rsx.group/registry/v1/admin/native/releases/get?package=%40rsx%2Fmetal&version=0.6.0" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": {
    "package": "@rsx/metal",
    "version": "0.6.0",
    "architecture": "x86_64",
    "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
    "size": 10240,
    "status": "staging",
    "reviewState": "pending",
    "findings": [
      {
        "check": "manifest.identity",
        "message": "The manifest names 'goodbye', but the release was declared as 'hello'."
      }
    ],
    "manifest": {
      "format": 3,
      "description": "Says hello.",
      "requires": [
        {
          "name": "libfoo",
          "version": "*"
        }
      ]
    },
    "supersedes": [
      "string"
    ],
    "isDefault": true,
    "reviewReason": "string",
    "reviewedAt": "2026-10-10T12:00:00.000Z",
    "revokeCode": "broken",
    "revokeReason": "string",
    "revokedAt": "2026-10-10T12:00:00.000Z",
    "firstGeneration": 1,
    "reviewedBy": "string",
    "revokedBy": "string"
  }
}

POST/registry/v1/admin/native/releases/update

Approve, reject or revoke a native release

Scope: registry:admin:native:releases:update Admin-issued keys only.

Request bodyapplication/json

Request body of adminUpdateNativeRelease
Field	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
reviewStaterequired	string	one of "approved", "rejected", "revoked"
reasonrequired	string	1 to 160 characters · matches ^[\x20-\x7e]+$
supersedes	array of string	up to 32 items
revokeCode	string	Why a release was withdrawn from new installs.one of "security", "broken", "withdrawn"

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
reviewStaterequired
Type
string
Description
one of "approved", "rejected", "revoked"
reasonrequired
Type
string
Description
1 to 160 characters · matches ^[\x20-\x7e]+$
supersedes
Type
array of string
Description
up to 32 items
revokeCode
Type
string
Description
Why a release was withdrawn from new installs.one of "security", "broken", "withdrawn"

Response 200The release after the decision

Response of adminUpdateNativeRelease
Field	Type	Description
datarequired	RegistryNativeAdminRelease
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
architecturerequired	string	The archive's declared architecture, as its manifest spells it.one of "x86_64", "any"
digestrequired	string
sizerequired	integer
statusrequired	string	one of "staging", "published"
reviewStaterequired	string, or null	The release's review state.one of "invalid", "pending", "approved", "rejected", "revoked"
findingsrequired	array of RegistryNativeFinding
manifestrequired	RegistryNativeManifest
supersedesrequired	array of string
isDefaultrequired	boolean
reviewReasonrequired	string, or null
reviewedAtrequired	string, date-time, or null
revokeCoderequired	string, or null	Why a release was withdrawn from new installs.one of "security", "broken", "withdrawn"
revokeReasonrequired	string, or null
revokedAtrequired	string, date-time, or null
firstGenerationrequired	integer, or null
reviewedByrequired	string, or null
revokedByrequired	string, or null

datarequired
Type
RegistryNativeAdminRelease
Description
packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
architecturerequired
Type
string
Description
The archive's declared architecture, as its manifest spells it.one of "x86_64", "any"
digestrequired
Type
string
Description
sizerequired
Type
integer
Description
statusrequired
Type
string
Description
one of "staging", "published"
reviewStaterequired
Type
string, or null
Description
The release's review state.one of "invalid", "pending", "approved", "rejected", "revoked"
findingsrequired
Type
array of RegistryNativeFinding
Description
manifestrequired
Type
RegistryNativeManifest
Description
supersedesrequired
Type
array of string
Description
isDefaultrequired
Type
boolean
Description
reviewReasonrequired
Type
string, or null
Description
reviewedAtrequired
Type
string, date-time, or null
Description
revokeCoderequired
Type
string, or null
Description
Why a release was withdrawn from new installs.one of "security", "broken", "withdrawn"
revokeReasonrequired
Type
string, or null
Description
revokedAtrequired
Type
string, date-time, or null
Description
firstGenerationrequired
Type
integer, or null
Description
reviewedByrequired
Type
string, or null
Description
revokedByrequired
Type
string, or null
Description

Example

curl

curl -X POST https://api.rsx.group/registry/v1/admin/native/releases/update \
  -H "Authorization: Bearer rsx_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "package": "@rsx/metal",
  "version": "0.6.0",
  "reviewState": "approved",
  "reason": "Fixes a crash on start when /etc/hello.conf is missing.",
  "supersedes": [
    "0.6.0"
  ],
  "revokeCode": "broken"
}'

200 response

{
  "data": {
    "package": "@rsx/metal",
    "version": "0.6.0",
    "architecture": "x86_64",
    "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
    "size": 10240,
    "status": "staging",
    "reviewState": "pending",
    "findings": [
      {
        "check": "manifest.identity",
        "message": "The manifest names 'goodbye', but the release was declared as 'hello'."
      }
    ],
    "manifest": {
      "format": 3,
      "description": "Says hello.",
      "requires": [
        {
          "name": "libfoo",
          "version": "*"
        }
      ]
    },
    "supersedes": [
      "string"
    ],
    "isDefault": true,
    "reviewReason": "string",
    "reviewedAt": "2026-10-10T12:00:00.000Z",
    "revokeCode": "broken",
    "revokeReason": "string",
    "revokedAt": "2026-10-10T12:00:00.000Z",
    "firstGeneration": 1,
    "reviewedBy": "string",
    "revokedBy": "string"
  }
}

POST/registry/v1/admin/native/packages/update

Set or clear a native package's default release

Scope: registry:admin:native:packages:update Admin-issued keys only.

Request bodyapplication/json

Request body of adminUpdateNativePackage
Field	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
defaultVersionrequired	string, or null	Package version, or an OCI tag.1 to 128 characters

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
defaultVersionrequired
Type
string, or null
Description
Package version, or an OCI tag.1 to 128 characters

Response 200The package's default after the change

Response of adminUpdateNativePackage
Field	Type	Description
datarequired	object
packagerequired	string
defaultVersionrequired	string, or null

datarequired
Type
object
Description
packagerequired
Type
string
Description
defaultVersionrequired
Type
string, or null
Description

Example

curl

curl -X POST https://api.rsx.group/registry/v1/admin/native/packages/update \
  -H "Authorization: Bearer rsx_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "package": "@rsx/metal",
  "defaultVersion": "0.6.0"
}'

200 response

{
  "data": {
    "package": "string",
    "defaultVersion": "string"
  }
}

GET/registry/v1/admin/native/snapshots/list

List signed generations, newest first

Scope: registry:admin:native:snapshots:list Admin-issued keys only.

Query parameters

Query parameters of adminListNativeSnapshots
Parameter	Type	Description
offset	integer, or null	at least 0 · default 0
limit	integer	1 to 100 · default 50

offset
Type
integer, or null
Description
at least 0 · default 0
limit
Type
integer
Description
1 to 100 · default 50

Response 200Generations

Response of adminListNativeSnapshots
Field	Type	Description
datarequired	array of RegistryNativeSnapshot
generationrequired	integer
staterequired	string	one of "writing", "current", "superseded", "abandoned"
kindrequired	string	one of "publish", "refresh"
keysVersionrequired	integer
keyIdrequired	string
signedAtrequired	string, date-time
expiresAtrequired	string, date-time
payloadSha256required	string, or null
sizerequired	integer, or null
releaseCountrequired	integer
publishedByrequired	string

datarequired
Type
array of RegistryNativeSnapshot
Description
generationrequired
Type
integer
Description
staterequired
Type
string
Description
one of "writing", "current", "superseded", "abandoned"
kindrequired
Type
string
Description
one of "publish", "refresh"
keysVersionrequired
Type
integer
Description
keyIdrequired
Type
string
Description
signedAtrequired
Type
string, date-time
Description
expiresAtrequired
Type
string, date-time
Description
payloadSha256required
Type
string, or null
Description
sizerequired
Type
integer, or null
Description
releaseCountrequired
Type
integer
Description
publishedByrequired
Type
string
Description

Example

curl

curl "https://api.rsx.group/registry/v1/admin/native/snapshots/list" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": [
    {
      "generation": 1,
      "state": "writing",
      "kind": "publish",
      "keysVersion": 1,
      "keyId": "string",
      "signedAt": "2026-10-10T12:00:00.000Z",
      "expiresAt": "2026-10-10T12:00:00.000Z",
      "payloadSha256": "string",
      "size": 1,
      "releaseCount": 1,
      "publishedBy": "string"
    }
  ]
}

GET/registry/v1/admin/native/snapshots/preview

What a publication would change against the current generation

Scope: registry:admin:native:snapshots:preview Admin-issued keys only.

Response 200The difference a publish would sign

Response of adminPreviewNativeSnapshot
Field	Type	Description
datarequired	RegistryNativeSnapshotPreview
currentGenerationrequired	integer, or null
addedrequired	array of object
packagerequired	string
versionrequired	string
architecturerequired	string
removedrequired	array of object
packagerequired	string
versionrequired	string
architecturerequired	string
revokedrequired	array of object
packagerequired	string
versionrequired	string
defaultsChangedrequired	array of object
packagerequired	string
fromrequired	string, or null
torequired	string, or null
releaseCountrequired	integer
unchangedrequired	boolean

datarequired
Type
RegistryNativeSnapshotPreview
Description
currentGenerationrequired
Type
integer, or null
Description
addedrequired
Type
array of object
Description
packagerequired
Type
string
Description
versionrequired
Type
string
Description
architecturerequired
Type
string
Description
removedrequired
Type
array of object
Description
packagerequired
Type
string
Description
versionrequired
Type
string
Description
architecturerequired
Type
string
Description
revokedrequired
Type
array of object
Description
packagerequired
Type
string
Description
versionrequired
Type
string
Description
defaultsChangedrequired
Type
array of object
Description
packagerequired
Type
string
Description
fromrequired
Type
string, or null
Description
torequired
Type
string, or null
Description
releaseCountrequired
Type
integer
Description
unchangedrequired
Type
boolean
Description

Example

curl

curl "https://api.rsx.group/registry/v1/admin/native/snapshots/preview" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": {
    "currentGeneration": 1,
    "added": [
      {
        "package": "string",
        "version": "string",
        "architecture": "string"
      }
    ],
    "removed": [
      {
        "package": "string",
        "version": "string",
        "architecture": "string"
      }
    ],
    "revoked": [
      {
        "package": "string",
        "version": "string"
      }
    ],
    "defaultsChanged": [
      {
        "package": "string",
        "from": "string",
        "to": "string"
      }
    ],
    "releaseCount": 1,
    "unchanged": true
  }
}

POST/registry/v1/admin/native/snapshots/publish

Sign and publish the next generation of the repository

Scope: registry:admin:native:snapshots:publish Admin-issued keys only.

Request bodyapplication/json

Request body of adminPublishNativeSnapshot
Field	Type	Description
expectGenerationrequired	integer, or null

expectGenerationrequired
Type
integer, or null
Description

Response 200The new current generation

Response of adminPublishNativeSnapshot
Field	Type	Description
datarequired	RegistryNativeSnapshot
generationrequired	integer
staterequired	string	one of "writing", "current", "superseded", "abandoned"
kindrequired	string	one of "publish", "refresh"
keysVersionrequired	integer
keyIdrequired	string
signedAtrequired	string, date-time
expiresAtrequired	string, date-time
payloadSha256required	string, or null
sizerequired	integer, or null
releaseCountrequired	integer
publishedByrequired	string

datarequired
Type
RegistryNativeSnapshot
Description
generationrequired
Type
integer
Description
staterequired
Type
string
Description
one of "writing", "current", "superseded", "abandoned"
kindrequired
Type
string
Description
one of "publish", "refresh"
keysVersionrequired
Type
integer
Description
keyIdrequired
Type
string
Description
signedAtrequired
Type
string, date-time
Description
expiresAtrequired
Type
string, date-time
Description
payloadSha256required
Type
string, or null
Description
sizerequired
Type
integer, or null
Description
releaseCountrequired
Type
integer
Description
publishedByrequired
Type
string
Description

Example

curl

curl -X POST https://api.rsx.group/registry/v1/admin/native/snapshots/publish \
  -H "Authorization: Bearer rsx_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "expectGeneration": 1
}'

200 response

{
  "data": {
    "generation": 1,
    "state": "writing",
    "kind": "publish",
    "keysVersion": 1,
    "keyId": "string",
    "signedAt": "2026-10-10T12:00:00.000Z",
    "expiresAt": "2026-10-10T12:00:00.000Z",
    "payloadSha256": "string",
    "size": 1,
    "releaseCount": 1,
    "publishedBy": "string"
  }
}

GET/registry/v1/admin/native/keys/get

The repository's root keys, keys document and signing key status

Scope: registry:admin:native:keys:get Admin-issued keys only.

Response 200Key status. Never any private key material.

Response of adminGetNativeKeys
Field	Type	Description
datarequired	RegistryNativeKeysStatus
repositoryrequired	string
rootKeyIdsrequired	array of string
keysVersionrequired	integer, or null
expiresAtrequired	string, date-time, or null
onlineKeyIdsrequired	array of string
signingKeyIdrequired	string, or null
signingKeyListedrequired	boolean

datarequired
Type
RegistryNativeKeysStatus
Description
repositoryrequired
Type
string
Description
rootKeyIdsrequired
Type
array of string
Description
keysVersionrequired
Type
integer, or null
Description
expiresAtrequired
Type
string, date-time, or null
Description
onlineKeyIdsrequired
Type
array of string
Description
signingKeyIdrequired
Type
string, or null
Description
signingKeyListedrequired
Type
boolean
Description

Example

curl

curl "https://api.rsx.group/registry/v1/admin/native/keys/get" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": {
    "repository": "string",
    "rootKeyIds": [
      "string"
    ],
    "keysVersion": 1,
    "expiresAt": "2026-10-10T12:00:00.000Z",
    "onlineKeyIds": [
      "string"
    ],
    "signingKeyId": "string",
    "signingKeyListed": true
  }
}

POST/registry/v1/admin/native/keys/update

Upload a keys document signed offline with a root key

Scope: registry:admin:native:keys:update Admin-issued keys only.

Request bodyapplication/json

Request body of adminUpdateNativeKeys
Field	Type	Description
enveloperequired	string	1 to 65536 characters

enveloperequired
Type
string
Description
1 to 65536 characters

Response 200Key status after the upload

Response of adminUpdateNativeKeys
Field	Type	Description
datarequired	RegistryNativeKeysStatus
repositoryrequired	string
rootKeyIdsrequired	array of string
keysVersionrequired	integer, or null
expiresAtrequired	string, date-time, or null
onlineKeyIdsrequired	array of string
signingKeyIdrequired	string, or null
signingKeyListedrequired	boolean

datarequired
Type
RegistryNativeKeysStatus
Description
repositoryrequired
Type
string
Description
rootKeyIdsrequired
Type
array of string
Description
keysVersionrequired
Type
integer, or null
Description
expiresAtrequired
Type
string, date-time, or null
Description
onlineKeyIdsrequired
Type
array of string
Description
signingKeyIdrequired
Type
string, or null
Description
signingKeyListedrequired
Type
boolean
Description

Example

curl

curl -X POST https://api.rsx.group/registry/v1/admin/native/keys/update \
  -H "Authorization: Bearer rsx_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "envelope": "string"
}'

200 response

{
  "data": {
    "repository": "string",
    "rootKeyIds": [
      "string"
    ],
    "keysVersion": 1,
    "expiresAt": "2026-10-10T12:00:00.000Z",
    "onlineKeyIds": [
      "string"
    ],
    "signingKeyId": "string",
    "signingKeyListed": true
  }
}

GET/registry/v1/admin/app/applications/list

List applications with visibility, channels and pending reviews

Scope: registry:admin:app:applications:list Admin-issued keys only.

Response 200Applications

Response of adminListApplications
Field	Type	Description
datarequired	array of RegistryAppApplication
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
visibilityrequired	string	`internal` (staff tooling, key-only repository) or `public` (the public repository).one of "internal", "public"
appIdrequired	string, or null
displayNamerequired	string, or null
summaryrequired	string, or null
homepageUrlrequired	string, or null
docsUrlrequired	string, or null
channelsrequired	map of string
{key}	string
releaseCountrequired	integer
pendingCountrequired	integer
identitiesrequired	array of object
platformrequired	string	Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
identityrequired	string
pinnedVersionrequired	string
pinnedAtrequired	string, date-time
updatedByrequired	string, or null
updatedAtrequired	string, date-time, or null

datarequired
Type
array of RegistryAppApplication
Description
packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
visibilityrequired
Type
string
Description
internal (staff tooling, key-only repository) or public (the public repository).one of "internal", "public"
appIdrequired
Type
string, or null
Description
displayNamerequired
Type
string, or null
Description
summaryrequired
Type
string, or null
Description
homepageUrlrequired
Type
string, or null
Description
docsUrlrequired
Type
string, or null
Description
channelsrequired
Type
map of string
Description
{key}
Type
string
Description
releaseCountrequired
Type
integer
Description
pendingCountrequired
Type
integer
Description
identitiesrequired
Type
array of object
Description
platformrequired
Type
string
Description
Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
identityrequired
Type
string
Description
pinnedVersionrequired
Type
string
Description
pinnedAtrequired
Type
string, date-time
Description
updatedByrequired
Type
string, or null
Description
updatedAtrequired
Type
string, date-time, or null
Description

Example

curl

curl "https://api.rsx.group/registry/v1/admin/app/applications/list" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": [
    {
      "package": "@rsx/metal",
      "visibility": "public",
      "appId": "string",
      "displayName": "string",
      "summary": "string",
      "homepageUrl": "string",
      "docsUrl": "string",
      "channels": {
        "key": "string"
      },
      "releaseCount": 1,
      "pendingCount": 1,
      "identities": [
        {
          "platform": "windows-x86_64-msix",
          "identity": "string",
          "pinnedVersion": "string",
          "pinnedAt": "2026-10-10T12:00:00.000Z"
        }
      ],
      "updatedBy": "string",
      "updatedAt": "2026-10-10T12:00:00.000Z"
    }
  ]
}

GET/registry/v1/admin/app/applications/get

Read one application

Scope: registry:admin:app:applications:get Admin-issued keys only.

Query parameters

Query parameters of adminGetApplication
Parameter	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters

Response 200The application

Response of adminGetApplication
Field	Type	Description
datarequired	RegistryAppApplication
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
visibilityrequired	string	`internal` (staff tooling, key-only repository) or `public` (the public repository).one of "internal", "public"
appIdrequired	string, or null
displayNamerequired	string, or null
summaryrequired	string, or null
homepageUrlrequired	string, or null
docsUrlrequired	string, or null
channelsrequired	map of string
{key}	string
releaseCountrequired	integer
pendingCountrequired	integer
identitiesrequired	array of object
platformrequired	string	Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
identityrequired	string
pinnedVersionrequired	string
pinnedAtrequired	string, date-time
updatedByrequired	string, or null
updatedAtrequired	string, date-time, or null

datarequired
Type
RegistryAppApplication
Description
packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
visibilityrequired
Type
string
Description
internal (staff tooling, key-only repository) or public (the public repository).one of "internal", "public"
appIdrequired
Type
string, or null
Description
displayNamerequired
Type
string, or null
Description
summaryrequired
Type
string, or null
Description
homepageUrlrequired
Type
string, or null
Description
docsUrlrequired
Type
string, or null
Description
channelsrequired
Type
map of string
Description
{key}
Type
string
Description
releaseCountrequired
Type
integer
Description
pendingCountrequired
Type
integer
Description
identitiesrequired
Type
array of object
Description
platformrequired
Type
string
Description
Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
identityrequired
Type
string
Description
pinnedVersionrequired
Type
string
Description
pinnedAtrequired
Type
string, date-time
Description
updatedByrequired
Type
string, or null
Description
updatedAtrequired
Type
string, date-time, or null
Description

Example

curl

curl "https://api.rsx.group/registry/v1/admin/app/applications/get?package=%40rsx%2Fmetal" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": {
    "package": "@rsx/metal",
    "visibility": "public",
    "appId": "string",
    "displayName": "string",
    "summary": "string",
    "homepageUrl": "string",
    "docsUrl": "string",
    "channels": {
      "key": "string"
    },
    "releaseCount": 1,
    "pendingCount": 1,
    "identities": [
      {
        "platform": "windows-x86_64-msix",
        "identity": "string",
        "pinnedVersion": "string",
        "pinnedAt": "2026-10-10T12:00:00.000Z"
      }
    ],
    "updatedBy": "string",
    "updatedAt": "2026-10-10T12:00:00.000Z"
  }
}

POST/registry/v1/admin/app/applications/update

Change an application's visibility, app id or catalogue metadata

Scope: registry:admin:app:applications:update Admin-issued keys only.

Request bodyapplication/json

Request body of adminUpdateApplication
Field	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
visibility	string	`internal` (staff tooling, key-only repository) or `public` (the public repository).one of "internal", "public"
appId	string	up to 128 characters · matches ^[a-z][a-z0-9-](?:\.[a-z][a-z0-9-])+$
displayName	string, or null	1 to 80 characters
summary	string, or null	1 to 280 characters
homepageUrl	string, uri, or null	up to 512 characters
docsUrl	string, uri, or null	up to 512 characters

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
visibility
Type
string
Description
internal (staff tooling, key-only repository) or public (the public repository).one of "internal", "public"
appId
Type
string
Description
up to 128 characters · matches ^[a-z][a-z0-9-]*(?:\.[a-z][a-z0-9-]*)+$
displayName
Type
string, or null
Description
1 to 80 characters
summary
Type
string, or null
Description
1 to 280 characters
homepageUrl
Type
string, uri, or null
Description
up to 512 characters
docsUrl
Type
string, uri, or null
Description
up to 512 characters

Response 200The application after the change

Response of adminUpdateApplication
Field	Type	Description
datarequired	RegistryAppApplication
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
visibilityrequired	string	`internal` (staff tooling, key-only repository) or `public` (the public repository).one of "internal", "public"
appIdrequired	string, or null
displayNamerequired	string, or null
summaryrequired	string, or null
homepageUrlrequired	string, or null
docsUrlrequired	string, or null
channelsrequired	map of string
{key}	string
releaseCountrequired	integer
pendingCountrequired	integer
identitiesrequired	array of object
platformrequired	string	Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
identityrequired	string
pinnedVersionrequired	string
pinnedAtrequired	string, date-time
updatedByrequired	string, or null
updatedAtrequired	string, date-time, or null

datarequired
Type
RegistryAppApplication
Description
packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
visibilityrequired
Type
string
Description
internal (staff tooling, key-only repository) or public (the public repository).one of "internal", "public"
appIdrequired
Type
string, or null
Description
displayNamerequired
Type
string, or null
Description
summaryrequired
Type
string, or null
Description
homepageUrlrequired
Type
string, or null
Description
docsUrlrequired
Type
string, or null
Description
channelsrequired
Type
map of string
Description
{key}
Type
string
Description
releaseCountrequired
Type
integer
Description
pendingCountrequired
Type
integer
Description
identitiesrequired
Type
array of object
Description
platformrequired
Type
string
Description
Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
identityrequired
Type
string
Description
pinnedVersionrequired
Type
string
Description
pinnedAtrequired
Type
string, date-time
Description
updatedByrequired
Type
string, or null
Description
updatedAtrequired
Type
string, date-time, or null
Description

Example

curl

curl -X POST https://api.rsx.group/registry/v1/admin/app/applications/update \
  -H "Authorization: Bearer rsx_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "package": "@rsx/metal",
  "visibility": "public",
  "appId": "group.rsx.link",
  "displayName": "string",
  "summary": "string",
  "homepageUrl": "https://example.com/",
  "docsUrl": "https://example.com/"
}'

200 response

{
  "data": {
    "package": "@rsx/metal",
    "visibility": "public",
    "appId": "string",
    "displayName": "string",
    "summary": "string",
    "homepageUrl": "string",
    "docsUrl": "string",
    "channels": {
      "key": "string"
    },
    "releaseCount": 1,
    "pendingCount": 1,
    "identities": [
      {
        "platform": "windows-x86_64-msix",
        "identity": "string",
        "pinnedVersion": "string",
        "pinnedAt": "2026-10-10T12:00:00.000Z"
      }
    ],
    "updatedBy": "string",
    "updatedAt": "2026-10-10T12:00:00.000Z"
  }
}

GET/registry/v1/admin/app/releases/list

List application releases, newest first, optionally by review state

Scope: registry:admin:app:releases:list Admin-issued keys only.

Query parameters

Query parameters of adminListAppReleases
Parameter	Type	Description
reviewState	string	one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
package	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
offset	integer, or null	at least 0 · default 0
limit	integer	1 to 100 · default 50

reviewState
Type
string
Description
one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
package
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
offset
Type
integer, or null
Description
at least 0 · default 0
limit
Type
integer
Description
1 to 100 · default 50

Response 200Releases

Response of adminListAppReleases
Field	Type	Description
datarequired	array of RegistryAppAdminRelease
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
statusrequired	string	one of "staging", "published"
reviewStaterequired	string	one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
assetsrequired	array of RegistryAppAsset
notesrequired	string, or null
requirementsrequired	map of RegistryAppRequirement
{key}	RegistryAppRequirement
channelsrequired	array of string
reviewReasonrequired	string, or null
reviewedAtrequired	string, date-time, or null
revokeCoderequired	string, or null	Why a release was withdrawn.one of "security", "broken", "withdrawn"
revokeReasonrequired	string, or null
revokedAtrequired	string, date-time, or null
firstGenerationrequired	integer, or null
visibilityrequired	string	`internal` (staff tooling, key-only repository) or `public` (the public repository).one of "internal", "public"
reviewedByrequired	string, or null
revokedByrequired	string, or null
createdAtrequired	string, date-time

datarequired
Type
array of RegistryAppAdminRelease
Description
packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
statusrequired
Type
string
Description
one of "staging", "published"
reviewStaterequired
Type
string
Description
one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
assetsrequired
Type
array of RegistryAppAsset
Description
notesrequired
Type
string, or null
Description
requirementsrequired
Type
map of RegistryAppRequirement
Description
{key}
Type
RegistryAppRequirement
Description
channelsrequired
Type
array of string
Description
reviewReasonrequired
Type
string, or null
Description
reviewedAtrequired
Type
string, date-time, or null
Description
revokeCoderequired
Type
string, or null
Description
Why a release was withdrawn.one of "security", "broken", "withdrawn"
revokeReasonrequired
Type
string, or null
Description
revokedAtrequired
Type
string, date-time, or null
Description
firstGenerationrequired
Type
integer, or null
Description
visibilityrequired
Type
string
Description
internal (staff tooling, key-only repository) or public (the public repository).one of "internal", "public"
reviewedByrequired
Type
string, or null
Description
revokedByrequired
Type
string, or null
Description
createdAtrequired
Type
string, date-time
Description

Example

curl

curl "https://api.rsx.group/registry/v1/admin/app/releases/list" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": [
    {
      "package": "@rsx/metal",
      "version": "0.6.0",
      "status": "staging",
      "reviewState": "pending",
      "assets": [
        {
          "platform": "windows-x86_64-msix",
          "os": "string",
          "arch": "string",
          "format": "string",
          "mediaType": "string",
          "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
          "size": 1,
          "uploaded": true,
          "outcome": "valid",
          "findings": [
            null
          ],
          "notes": [
            null
          ],
          "identity": "string",
          "facts": {
            "key": null
          }
        }
      ],
      "notes": "string",
      "requirements": {
        "key": {
          "minOsVersion": "10.0.22621.0",
          "notes": "string"
        }
      },
      "channels": [
        "stable"
      ],
      "reviewReason": "string",
      "reviewedAt": "2026-10-10T12:00:00.000Z",
      "revokeCode": "security",
      "revokeReason": "string",
      "revokedAt": "2026-10-10T12:00:00.000Z",
      "firstGeneration": 1,
      "visibility": "public",
      "reviewedBy": "string",
      "revokedBy": "string",
      "createdAt": "2026-10-10T12:00:00.000Z"
    }
  ]
}

GET/registry/v1/admin/app/releases/get

Read one application release with its assets, findings and review history

Scope: registry:admin:app:releases:get Admin-issued keys only.

Query parameters

Query parameters of adminGetAppRelease
Parameter	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters

Response 200The release

Response of adminGetAppRelease
Field	Type	Description
datarequired	RegistryAppAdminRelease
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
statusrequired	string	one of "staging", "published"
reviewStaterequired	string	one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
assetsrequired	array of RegistryAppAsset
notesrequired	string, or null
requirementsrequired	map of RegistryAppRequirement
{key}	RegistryAppRequirement
channelsrequired	array of string
reviewReasonrequired	string, or null
reviewedAtrequired	string, date-time, or null
revokeCoderequired	string, or null	Why a release was withdrawn.one of "security", "broken", "withdrawn"
revokeReasonrequired	string, or null
revokedAtrequired	string, date-time, or null
firstGenerationrequired	integer, or null
visibilityrequired	string	`internal` (staff tooling, key-only repository) or `public` (the public repository).one of "internal", "public"
reviewedByrequired	string, or null
revokedByrequired	string, or null
createdAtrequired	string, date-time

datarequired
Type
RegistryAppAdminRelease
Description
packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
statusrequired
Type
string
Description
one of "staging", "published"
reviewStaterequired
Type
string
Description
one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
assetsrequired
Type
array of RegistryAppAsset
Description
notesrequired
Type
string, or null
Description
requirementsrequired
Type
map of RegistryAppRequirement
Description
{key}
Type
RegistryAppRequirement
Description
channelsrequired
Type
array of string
Description
reviewReasonrequired
Type
string, or null
Description
reviewedAtrequired
Type
string, date-time, or null
Description
revokeCoderequired
Type
string, or null
Description
Why a release was withdrawn.one of "security", "broken", "withdrawn"
revokeReasonrequired
Type
string, or null
Description
revokedAtrequired
Type
string, date-time, or null
Description
firstGenerationrequired
Type
integer, or null
Description
visibilityrequired
Type
string
Description
internal (staff tooling, key-only repository) or public (the public repository).one of "internal", "public"
reviewedByrequired
Type
string, or null
Description
revokedByrequired
Type
string, or null
Description
createdAtrequired
Type
string, date-time
Description

Example

curl

curl "https://api.rsx.group/registry/v1/admin/app/releases/get?package=%40rsx%2Fmetal&version=0.6.0" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": {
    "package": "@rsx/metal",
    "version": "0.6.0",
    "status": "staging",
    "reviewState": "pending",
    "assets": [
      {
        "platform": "windows-x86_64-msix",
        "os": "string",
        "arch": "string",
        "format": "string",
        "mediaType": "string",
        "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
        "size": 1,
        "uploaded": true,
        "outcome": "valid",
        "findings": [
          null
        ],
        "notes": [
          null
        ],
        "identity": "string",
        "facts": {
          "key": null
        }
      }
    ],
    "notes": "string",
    "requirements": {
      "key": {
        "minOsVersion": "10.0.22621.0",
        "notes": "string"
      }
    },
    "channels": [
      "stable"
    ],
    "reviewReason": "string",
    "reviewedAt": "2026-10-10T12:00:00.000Z",
    "revokeCode": "security",
    "revokeReason": "string",
    "revokedAt": "2026-10-10T12:00:00.000Z",
    "firstGeneration": 1,
    "visibility": "public",
    "reviewedBy": "string",
    "revokedBy": "string",
    "createdAt": "2026-10-10T12:00:00.000Z"
  }
}

POST/registry/v1/admin/app/releases/update

Approve, reject or revoke an application release

Scope: registry:admin:app:releases:update Admin-issued keys only.

Request bodyapplication/json

Request body of adminUpdateAppRelease
Field	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
reviewStaterequired	string	one of "approved", "rejected", "revoked"
reasonrequired	string	1 to 160 characters · matches ^[\x20-\x7e]+$
revokeCode	string	Why a release was withdrawn.one of "security", "broken", "withdrawn"

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
reviewStaterequired
Type
string
Description
one of "approved", "rejected", "revoked"
reasonrequired
Type
string
Description
1 to 160 characters · matches ^[\x20-\x7e]+$
revokeCode
Type
string
Description
Why a release was withdrawn.one of "security", "broken", "withdrawn"

Response 200The release after the decision, and for a revocation the publication

Response of adminUpdateAppRelease
Field	Type	Description
datarequired	RegistryAppReleaseDecision
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
statusrequired	string	one of "staging", "published"
reviewStaterequired	string	one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
assetsrequired	array of RegistryAppAsset
notesrequired	string, or null
requirementsrequired	map of RegistryAppRequirement
{key}	RegistryAppRequirement
channelsrequired	array of string
reviewReasonrequired	string, or null
reviewedAtrequired	string, date-time, or null
revokeCoderequired	string, or null	Why a release was withdrawn.one of "security", "broken", "withdrawn"
revokeReasonrequired	string, or null
revokedAtrequired	string, date-time, or null
firstGenerationrequired	integer, or null
visibilityrequired	string	`internal` (staff tooling, key-only repository) or `public` (the public repository).one of "internal", "public"
reviewedByrequired	string, or null
revokedByrequired	string, or null
createdAtrequired	string, date-time
publicationrequired	one of object, object, any, or null

datarequired
Type
RegistryAppReleaseDecision
Description
packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
statusrequired
Type
string
Description
one of "staging", "published"
reviewStaterequired
Type
string
Description
one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
assetsrequired
Type
array of RegistryAppAsset
Description
notesrequired
Type
string, or null
Description
requirementsrequired
Type
map of RegistryAppRequirement
Description
{key}
Type
RegistryAppRequirement
Description
channelsrequired
Type
array of string
Description
reviewReasonrequired
Type
string, or null
Description
reviewedAtrequired
Type
string, date-time, or null
Description
revokeCoderequired
Type
string, or null
Description
Why a release was withdrawn.one of "security", "broken", "withdrawn"
revokeReasonrequired
Type
string, or null
Description
revokedAtrequired
Type
string, date-time, or null
Description
firstGenerationrequired
Type
integer, or null
Description
visibilityrequired
Type
string
Description
internal (staff tooling, key-only repository) or public (the public repository).one of "internal", "public"
reviewedByrequired
Type
string, or null
Description
revokedByrequired
Type
string, or null
Description
createdAtrequired
Type
string, date-time
Description
publicationrequired
Type
one of object, object, any, or null
Description

Example

curl

curl -X POST https://api.rsx.group/registry/v1/admin/app/releases/update \
  -H "Authorization: Bearer rsx_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "package": "@rsx/metal",
  "version": "0.6.0",
  "reviewState": "approved",
  "reason": "Fixes a crash on start when /etc/hello.conf is missing.",
  "revokeCode": "security"
}'

200 response

{
  "data": {
    "package": "@rsx/metal",
    "version": "0.6.0",
    "status": "staging",
    "reviewState": "pending",
    "assets": [
      {
        "platform": "windows-x86_64-msix",
        "os": "string",
        "arch": "string",
        "format": "string",
        "mediaType": "string",
        "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
        "size": 1,
        "uploaded": true,
        "outcome": "valid",
        "findings": [
          null
        ],
        "notes": [
          null
        ],
        "identity": "string",
        "facts": {
          "key": null
        }
      }
    ],
    "notes": "string",
    "requirements": {
      "key": {
        "minOsVersion": "10.0.22621.0",
        "notes": "string"
      }
    },
    "channels": [
      "stable"
    ],
    "reviewReason": "string",
    "reviewedAt": "2026-10-10T12:00:00.000Z",
    "revokeCode": "security",
    "revokeReason": "string",
    "revokedAt": "2026-10-10T12:00:00.000Z",
    "firstGeneration": 1,
    "visibility": "public",
    "reviewedBy": "string",
    "revokedBy": "string",
    "createdAt": "2026-10-10T12:00:00.000Z",
    "publication": {
      "repository": "public",
      "generation": 1
    }
  }
}

POST/registry/v1/admin/app/channels/update

Point a channel at an approved release, or clear it

Scope: registry:admin:app:channels:update Admin-issued keys only.

Request bodyapplication/json

Request body of adminUpdateAppChannel
Field	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
channelrequired	string	one of "stable", "beta", "canary"
versionrequired	string, or null	Package version, or an OCI tag.1 to 128 characters
reasonrequired	string	1 to 160 characters · matches ^[\x20-\x7e]+$
allowDowngrade	boolean

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
channelrequired
Type
string
Description
one of "stable", "beta", "canary"
versionrequired
Type
string, or null
Description
Package version, or an OCI tag.1 to 128 characters
reasonrequired
Type
string
Description
1 to 160 characters · matches ^[\x20-\x7e]+$
allowDowngrade
Type
boolean
Description

Response 200The application after the change

Response of adminUpdateAppChannel
Field	Type	Description
datarequired	RegistryAppApplication
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
visibilityrequired	string	`internal` (staff tooling, key-only repository) or `public` (the public repository).one of "internal", "public"
appIdrequired	string, or null
displayNamerequired	string, or null
summaryrequired	string, or null
homepageUrlrequired	string, or null
docsUrlrequired	string, or null
channelsrequired	map of string
{key}	string
releaseCountrequired	integer
pendingCountrequired	integer
identitiesrequired	array of object
platformrequired	string	Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
identityrequired	string
pinnedVersionrequired	string
pinnedAtrequired	string, date-time
updatedByrequired	string, or null
updatedAtrequired	string, date-time, or null

datarequired
Type
RegistryAppApplication
Description
packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
visibilityrequired
Type
string
Description
internal (staff tooling, key-only repository) or public (the public repository).one of "internal", "public"
appIdrequired
Type
string, or null
Description
displayNamerequired
Type
string, or null
Description
summaryrequired
Type
string, or null
Description
homepageUrlrequired
Type
string, or null
Description
docsUrlrequired
Type
string, or null
Description
channelsrequired
Type
map of string
Description
{key}
Type
string
Description
releaseCountrequired
Type
integer
Description
pendingCountrequired
Type
integer
Description
identitiesrequired
Type
array of object
Description
platformrequired
Type
string
Description
Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
identityrequired
Type
string
Description
pinnedVersionrequired
Type
string
Description
pinnedAtrequired
Type
string, date-time
Description
updatedByrequired
Type
string, or null
Description
updatedAtrequired
Type
string, date-time, or null
Description

Example

curl

curl -X POST https://api.rsx.group/registry/v1/admin/app/channels/update \
  -H "Authorization: Bearer rsx_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "package": "@rsx/metal",
  "channel": "stable",
  "version": "0.6.0",
  "reason": "Fixes a crash on start when /etc/hello.conf is missing.",
  "allowDowngrade": true
}'

200 response

{
  "data": {
    "package": "@rsx/metal",
    "visibility": "public",
    "appId": "string",
    "displayName": "string",
    "summary": "string",
    "homepageUrl": "string",
    "docsUrl": "string",
    "channels": {
      "key": "string"
    },
    "releaseCount": 1,
    "pendingCount": 1,
    "identities": [
      {
        "platform": "windows-x86_64-msix",
        "identity": "string",
        "pinnedVersion": "string",
        "pinnedAt": "2026-10-10T12:00:00.000Z"
      }
    ],
    "updatedBy": "string",
    "updatedAt": "2026-10-10T12:00:00.000Z"
  }
}

GET/registry/v1/admin/app/snapshots/list

List one repository's signed generations, newest first

Scope: registry:admin:app:snapshots:list Admin-issued keys only.

Query parameters

Query parameters of adminListAppSnapshots
Parameter	Type	Description
repositoryrequired	string	one of "public", "internal"
offset	integer, or null	at least 0 · default 0
limit	integer	1 to 100 · default 30

repositoryrequired
Type
string
Description
one of "public", "internal"
offset
Type
integer, or null
Description
at least 0 · default 0
limit
Type
integer
Description
1 to 100 · default 30

Response 200Generations

Response of adminListAppSnapshots
Field	Type	Description
datarequired	array of RegistryAppSnapshot
repositoryrequired	string	one of "public", "internal"
generationrequired	integer
staterequired	string	one of "writing", "current", "superseded", "abandoned"
kindrequired	string	one of "publish", "refresh"
keysVersionrequired	integer
keyIdrequired	string
signedAtrequired	string, date-time
expiresAtrequired	string, date-time
payloadSha256required	string, or null
sizerequired	integer, or null
releaseCountrequired	integer
publishedByrequired	string

datarequired
Type
array of RegistryAppSnapshot
Description
repositoryrequired
Type
string
Description
one of "public", "internal"
generationrequired
Type
integer
Description
staterequired
Type
string
Description
one of "writing", "current", "superseded", "abandoned"
kindrequired
Type
string
Description
one of "publish", "refresh"
keysVersionrequired
Type
integer
Description
keyIdrequired
Type
string
Description
signedAtrequired
Type
string, date-time
Description
expiresAtrequired
Type
string, date-time
Description
payloadSha256required
Type
string, or null
Description
sizerequired
Type
integer, or null
Description
releaseCountrequired
Type
integer
Description
publishedByrequired
Type
string
Description

Example

curl

curl "https://api.rsx.group/registry/v1/admin/app/snapshots/list?repository=public" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": [
    {
      "repository": "public",
      "generation": 1,
      "state": "writing",
      "kind": "publish",
      "keysVersion": 1,
      "keyId": "string",
      "signedAt": "2026-10-10T12:00:00.000Z",
      "expiresAt": "2026-10-10T12:00:00.000Z",
      "payloadSha256": "string",
      "size": 1,
      "releaseCount": 1,
      "publishedBy": "string"
    }
  ]
}

GET/registry/v1/admin/app/snapshots/preview

What a publication of one repository would change

Scope: registry:admin:app:snapshots:preview Admin-issued keys only.

Query parameters

Query parameters of adminPreviewAppSnapshot
Parameter	Type	Description
repositoryrequired	string	one of "public", "internal"

repositoryrequired
Type
string
Description
one of "public", "internal"

Response 200The difference a publish would sign

Response of adminPreviewAppSnapshot
Field	Type	Description
datarequired	RegistryAppSnapshotPreview
repositoryrequired	string	one of "public", "internal"
currentGenerationrequired	integer, or null
addedrequired	array of object
packagerequired	string
versionrequired	string
removedrequired	array of object
packagerequired	string
versionrequired	string
revokedrequired	array of object
packagerequired	string
versionrequired	string
channelsChangedrequired	array of object
packagerequired	string
channelrequired	string
fromrequired	string, or null
torequired	string, or null
applicationCountrequired	integer
releaseCountrequired	integer
unchangedrequired	boolean

datarequired
Type
RegistryAppSnapshotPreview
Description
repositoryrequired
Type
string
Description
one of "public", "internal"
currentGenerationrequired
Type
integer, or null
Description
addedrequired
Type
array of object
Description
packagerequired
Type
string
Description
versionrequired
Type
string
Description
removedrequired
Type
array of object
Description
packagerequired
Type
string
Description
versionrequired
Type
string
Description
revokedrequired
Type
array of object
Description
packagerequired
Type
string
Description
versionrequired
Type
string
Description
channelsChangedrequired
Type
array of object
Description
packagerequired
Type
string
Description
channelrequired
Type
string
Description
fromrequired
Type
string, or null
Description
torequired
Type
string, or null
Description
applicationCountrequired
Type
integer
Description
releaseCountrequired
Type
integer
Description
unchangedrequired
Type
boolean
Description

Example

curl

curl "https://api.rsx.group/registry/v1/admin/app/snapshots/preview?repository=public" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": {
    "repository": "public",
    "currentGeneration": 1,
    "added": [
      {
        "package": "string",
        "version": "string"
      }
    ],
    "removed": [
      {
        "package": "string",
        "version": "string"
      }
    ],
    "revoked": [
      {
        "package": "string",
        "version": "string"
      }
    ],
    "channelsChanged": [
      {
        "package": "string",
        "channel": "string",
        "from": "string",
        "to": "string"
      }
    ],
    "applicationCount": 1,
    "releaseCount": 1,
    "unchanged": true
  }
}

POST/registry/v1/admin/app/snapshots/publish

Sign and publish the next generation of one repository

Scope: registry:admin:app:snapshots:publish Admin-issued keys only.

Request bodyapplication/json

Request body of adminPublishAppSnapshot
Field	Type	Description
repositoryrequired	string	one of "public", "internal"
expectGenerationrequired	integer, or null	at least 1

repositoryrequired
Type
string
Description
one of "public", "internal"
expectGenerationrequired
Type
integer, or null
Description
at least 1

Response 200The new current generation

Response of adminPublishAppSnapshot
Field	Type	Description
datarequired	RegistryAppSnapshot
repositoryrequired	string	one of "public", "internal"
generationrequired	integer
staterequired	string	one of "writing", "current", "superseded", "abandoned"
kindrequired	string	one of "publish", "refresh"
keysVersionrequired	integer
keyIdrequired	string
signedAtrequired	string, date-time
expiresAtrequired	string, date-time
payloadSha256required	string, or null
sizerequired	integer, or null
releaseCountrequired	integer
publishedByrequired	string

datarequired
Type
RegistryAppSnapshot
Description
repositoryrequired
Type
string
Description
one of "public", "internal"
generationrequired
Type
integer
Description
staterequired
Type
string
Description
one of "writing", "current", "superseded", "abandoned"
kindrequired
Type
string
Description
one of "publish", "refresh"
keysVersionrequired
Type
integer
Description
keyIdrequired
Type
string
Description
signedAtrequired
Type
string, date-time
Description
expiresAtrequired
Type
string, date-time
Description
payloadSha256required
Type
string, or null
Description
sizerequired
Type
integer, or null
Description
releaseCountrequired
Type
integer
Description
publishedByrequired
Type
string
Description

Example

curl

curl -X POST https://api.rsx.group/registry/v1/admin/app/snapshots/publish \
  -H "Authorization: Bearer rsx_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "repository": "public",
  "expectGeneration": 1
}'

200 response

{
  "data": {
    "repository": "public",
    "generation": 1,
    "state": "writing",
    "kind": "publish",
    "keysVersion": 1,
    "keyId": "string",
    "signedAt": "2026-10-10T12:00:00.000Z",
    "expiresAt": "2026-10-10T12:00:00.000Z",
    "payloadSha256": "string",
    "size": 1,
    "releaseCount": 1,
    "publishedBy": "string"
  }
}

GET/registry/v1/admin/app/keys/get

The application repositories' root keys, keys document and signing key status

Scope: registry:admin:app:keys:get Admin-issued keys only.

Response 200Key status. Never any private key material.

Response of adminGetAppKeys
Field	Type	Description
datarequired	RegistryAppKeysStatus
rootKeyIdsrequired	array of string
keysVersionrequired	integer, or null
expiresAtrequired	string, date-time, or null
onlineKeyIdsrequired	array of string
signingKeyIdrequired	string, or null
signingKeyListedrequired	boolean

datarequired
Type
RegistryAppKeysStatus
Description
rootKeyIdsrequired
Type
array of string
Description
keysVersionrequired
Type
integer, or null
Description
expiresAtrequired
Type
string, date-time, or null
Description
onlineKeyIdsrequired
Type
array of string
Description
signingKeyIdrequired
Type
string, or null
Description
signingKeyListedrequired
Type
boolean
Description

Example

curl

curl "https://api.rsx.group/registry/v1/admin/app/keys/get" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": {
    "rootKeyIds": [
      "string"
    ],
    "keysVersion": 1,
    "expiresAt": "2026-10-10T12:00:00.000Z",
    "onlineKeyIds": [
      "string"
    ],
    "signingKeyId": "string",
    "signingKeyListed": true
  }
}

POST/registry/v1/admin/app/keys/update

Upload a keys document signed offline with a root key

Scope: registry:admin:app:keys:update Admin-issued keys only.

Request bodyapplication/json

Request body of adminUpdateAppKeys
Field	Type	Description
enveloperequired	string	1 to 65536 characters

enveloperequired
Type
string
Description
1 to 65536 characters

Response 200Key status after the upload

Response of adminUpdateAppKeys
Field	Type	Description
datarequired	RegistryAppKeysStatus
rootKeyIdsrequired	array of string
keysVersionrequired	integer, or null
expiresAtrequired	string, date-time, or null
onlineKeyIdsrequired	array of string
signingKeyIdrequired	string, or null
signingKeyListedrequired	boolean

datarequired
Type
RegistryAppKeysStatus
Description
rootKeyIdsrequired
Type
array of string
Description
keysVersionrequired
Type
integer, or null
Description
expiresAtrequired
Type
string, date-time, or null
Description
onlineKeyIdsrequired
Type
array of string
Description
signingKeyIdrequired
Type
string, or null
Description
signingKeyListedrequired
Type
boolean
Description

Example

curl

curl -X POST https://api.rsx.group/registry/v1/admin/app/keys/update \
  -H "Authorization: Bearer rsx_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "envelope": "string"
}'

200 response

{
  "data": {
    "rootKeyIds": [
      "string"
    ],
    "keysVersion": 1,
    "expiresAt": "2026-10-10T12:00:00.000Z",
    "onlineKeyIds": [
      "string"
    ],
    "signingKeyId": "string",
    "signingKeyListed": true
  }
}

GET/registry/v1/admin/app/assets/download

Download one stored installer, of any visibility or review state

Scope: registry:admin:app:assets:download Admin-issued keys only.

Query parameters

Query parameters of adminDownloadAppAsset
Parameter	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
platformrequired	string	Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
platformrequired
Type
string
Description
Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"

Response 200The installer bytes

The bytes, with their content type.

Example

curl

curl "https://api.rsx.group/registry/v1/admin/app/assets/download?package=%40rsx%2Fmetal&version=0.6.0&platform=windows-x86_64-msix" \
  -H "Authorization: Bearer rsx_live_..."

GET/registry/v1/admin/packages/list

A package's versions, newest first

Scope: registry:admin:versions:list Admin-issued keys only.

Query parameters

Query parameters of adminListRegistryVersions
Parameter	Type	Description
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
cursor	string
limit	integer	1 to 100 · default 20

protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
cursor
Type
string
Description
limit
Type
integer
Description
1 to 100 · default 20

Response 200Versions

Response of adminListRegistryVersions
Field	Type	Description
datarequired	array of RegistryVersion
idrequired	string
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
statusrequired	string	Whether every declared artefact has arrived and been verified.one of "staging", "published"
digestrequired	string, or null	Digest of the release's primary artefact.
sizerequired	integer, or null	Total size of the release's artefacts in bytes.
artefactsrequired	array of RegistryArtefact
createdAtrequired	string, date-time
publishedAtrequired	string, date-time, or null	When the last declared artefact arrived. Null while publication is incomplete.
metarequired	object
cursorrequired	string, or null

datarequired
Type
array of RegistryVersion
Description
idrequired
Type
string
Description
protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
statusrequired
Type
string
Description
Whether every declared artefact has arrived and been verified.one of "staging", "published"
digestrequired
Type
string, or null
Description
Digest of the release's primary artefact.
sizerequired
Type
integer, or null
Description
Total size of the release's artefacts in bytes.
artefactsrequired
Type
array of RegistryArtefact
Description
createdAtrequired
Type
string, date-time
Description
publishedAtrequired
Type
string, date-time, or null
Description
When the last declared artefact arrived. Null while publication is incomplete.
metarequired
Type
object
Description
cursorrequired
Type
string, or null
Description

Example

curl

curl "https://api.rsx.group/registry/v1/admin/versions/list?protocol=npm&name=%40rsx%2Fmetal" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": [
    {
      "id": "018f3b1c-9a2e-7c31-8f4d-2a6b5c7e9d11",
      "protocol": "npm",
      "name": "@rsx/metal",
      "version": "0.6.0",
      "status": "published",
      "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
      "size": 8419372,
      "artefacts": [
        {
          "id": "018f3b1c-9a2e-7c31-8f4d-2a6b5c7e9d10",
          "platform": "linux-x86_64",
          "mediaType": "application/vnd.npm.install-v1+tgz",
          "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
          "size": 8419372,
          "stored": true,
          "createdAt": "2026-09-04T10:15:00.000Z"
        }
      ],
      "createdAt": "2026-09-04T10:15:00.000Z",
      "publishedAt": "2026-09-04T10:16:30.000Z"
    }
  ],
  "meta": {
    "cursor": "string"
  }
}

GET/registry/v1/admin/oci/resolve

Turn a tag into the digest a node is given

The one route here that is not a listing. A deployment is pinned to a digest, never a tag, so something has to do this lookup — and doing it once, centrally, at the moment an operator chooses, is what stops a digest being copied by hand out of a CI run summary.

Scope: registry:admin:oci:resolve Admin-issued keys only.

Query parameters

Query parameters of adminResolveRegistryManifest
Parameter	Type	Description
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
referencerequired	string	1 to 255 characters

namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
referencerequired
Type
string
Description
1 to 255 characters

Response 200The manifest the reference names

Response of adminResolveRegistryManifest
Field	Type	Description
datarequired	RegistryResolvedManifest
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
referencerequired	string
digestrequired	string
mediaTyperequired	string	Media type of the stored bytes.1 to 255 characters
sizerequired	integer
imagerequired	string

datarequired
Type
RegistryResolvedManifest
Description
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
referencerequired
Type
string
Description
digestrequired
Type
string
Description
mediaTyperequired
Type
string
Description
Media type of the stored bytes.1 to 255 characters
sizerequired
Type
integer
Description
imagerequired
Type
string
Description

Example

curl

curl "https://api.rsx.group/registry/v1/admin/oci/resolve?name=%40rsx%2Fmetal&reference=2.1.0" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": {
    "name": "@rsx/metal",
    "reference": "2.1.0",
    "digest": "sha256:435afee8e09be01ef873f7a72438f5d43f8589a20019803941357dcd7d482a95",
    "mediaType": "application/vnd.npm.install-v1+tgz",
    "size": 1022,
    "image": "registry.rsx.group/rsx/roxy@sha256:435afee8e09be01ef873f7a72438f5d43f8589a20019803941357dcd7d482a95"
  }
}

GET/registry/v1/admin/binary/list

Builds of a binary package

Scope: registry:admin:binary:list Admin-issued keys only.

Query parameters

Query parameters of adminListRegistryBinaries
Parameter	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
version	string	Restrict to one release. Omitted, every published release is listed.1 to 128 characters

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
version
Type
string
Description
Restrict to one release. Omitted, every published release is listed.1 to 128 characters

Response 200Every platform artefact of every published release

Response of adminListRegistryBinaries
Field	Type	Description
datarequired	array of RegistryBinaryArtefact
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
platformrequired	string, or null	Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired	string	Media type of the stored bytes.1 to 255 characters
digestrequired	string
sizerequired	integer
downloadrequired	string	Path to fetch the bytes from, using the same API key.

datarequired
Type
array of RegistryBinaryArtefact
Description
packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
platformrequired
Type
string, or null
Description
Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired
Type
string
Description
Media type of the stored bytes.1 to 255 characters
digestrequired
Type
string
Description
sizerequired
Type
integer
Description
downloadrequired
Type
string
Description
Path to fetch the bytes from, using the same API key.

Example

curl

curl "https://api.rsx.group/registry/v1/admin/binary/list?package=%40rsx%2Fmetal" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": [
    {
      "package": "@rsx/metal",
      "version": "0.6.0",
      "platform": "linux-x86_64",
      "mediaType": "application/vnd.npm.install-v1+tgz",
      "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
      "size": 41983122,
      "download": "/registry/v1/binary/download?package=rsx-node&version=0.8.0&platform=linux-x86_64"
    }
  ]
}

GET/registry/v1/admin/binary/get

One platform artefact, with its digest

What node/v1 turns into an update command. The version, the digest and the path to the bytes come back together or not at all, which is the whole reason this beats three fields pasted from a run summary.

Scope: registry:admin:binary:get Admin-issued keys only.

Query parameters

Query parameters of adminGetRegistryBinary
Parameter	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
platform	string	Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
platform
Type
string
Description
Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$

Response 200The artefact, and where to fetch its bytes

Response of adminGetRegistryBinary
Field	Type	Description
datarequired	RegistryBinaryArtefact
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
platformrequired	string, or null	Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired	string	Media type of the stored bytes.1 to 255 characters
digestrequired	string
sizerequired	integer
downloadrequired	string	Path to fetch the bytes from, using the same API key.

datarequired
Type
RegistryBinaryArtefact
Description
packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
platformrequired
Type
string, or null
Description
Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired
Type
string
Description
Media type of the stored bytes.1 to 255 characters
digestrequired
Type
string
Description
sizerequired
Type
integer
Description
downloadrequired
Type
string
Description
Path to fetch the bytes from, using the same API key.

Example

curl

curl "https://api.rsx.group/registry/v1/admin/binary/get?package=%40rsx%2Fmetal&version=0.6.0" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": {
    "package": "@rsx/metal",
    "version": "0.6.0",
    "platform": "linux-x86_64",
    "mediaType": "application/vnd.npm.install-v1+tgz",
    "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
    "size": 41983122,
    "download": "/registry/v1/binary/download?package=rsx-node&version=0.8.0&platform=linux-x86_64"
  }
}

GET/registry/v1/admin/audit/list

What has been published, withdrawn and transferred

Newest first. Publication is the one write on this service a non-operator key can reach, so actor is usually an API key id rather than a person.

Scope: registry:admin:audit:list Admin-issued keys only.

Query parameters

Query parameters of adminListRegistryAudit
Parameter	Type	Description
protocol	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
targetType	string	What the event was about.one of "package", "version", "snapshot", "keys"
targetId	string	up to 128 characters
actor	string	up to 128 characters
action	string	Dotted and past tense, matching the platform's other trails.1 to 64 characters
offset	integer, or null	at least 0 · default 0
limit	integer	1 to 100 · default 50

protocol
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
targetType
Type
string
Description
What the event was about.one of "package", "version", "snapshot", "keys"
targetId
Type
string
Description
up to 128 characters
actor
Type
string
Description
up to 128 characters
action
Type
string
Description
Dotted and past tense, matching the platform's other trails.1 to 64 characters
offset
Type
integer, or null
Description
at least 0 · default 0
limit
Type
integer
Description
1 to 100 · default 50

Response 200Audit events

Response of adminListRegistryAudit
Field	Type	Description
datarequired	array of RegistryAuditEvent
idrequired	string
actorrequired	string
actionrequired	string	Dotted and past tense, matching the platform's other trails.1 to 64 characters
targetTyperequired	string	What the event was about.one of "package", "version", "snapshot", "keys"
targetIdrequired	string
targetLabelrequired	string, or null
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
atrequired	string, date-time
detailrequired	string, or null
metarequired	object
offsetrequired	integer
limitrequired	integer
morerequired	boolean

datarequired
Type
array of RegistryAuditEvent
Description
idrequired
Type
string
Description
actorrequired
Type
string
Description
actionrequired
Type
string
Description
Dotted and past tense, matching the platform's other trails.1 to 64 characters
targetTyperequired
Type
string
Description
What the event was about.one of "package", "version", "snapshot", "keys"
targetIdrequired
Type
string
Description
targetLabelrequired
Type
string, or null
Description
protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
atrequired
Type
string, date-time
Description
detailrequired
Type
string, or null
Description
metarequired
Type
object
Description
offsetrequired
Type
integer
Description
limitrequired
Type
integer
Description
morerequired
Type
boolean
Description

Example

curl

curl "https://api.rsx.group/registry/v1/admin/audit/list" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": [
    {
      "id": "018f3b1c-9a2e-7c31-8f4d-2a6b5c7e9d12",
      "actor": "018f3b1c-9a2e-7c31-8f4d-2a6b5c7e9d13",
      "action": "version.published",
      "targetType": "version",
      "targetId": "018f3b1c-9a2e-7c31-8f4d-2a6b5c7e9d10",
      "targetLabel": "@rsx/metal 1.4.0",
      "protocol": "npm",
      "at": "2026-09-04T10:16:30.000Z",
      "detail": "3 artefacts, 41.9 MB"
    }
  ],
  "meta": {
    "offset": 1,
    "limit": 1,
    "more": true
  }
}

catalogue

4 operations under /registry/v1/catalogue.

GET/registry/v1/catalogue/applications/list

Public applications in the current signed repository

Scope: registry:catalogue:applications:list Admin-issued keys only.

Response 200Applications with at least one eligible release

Response of catalogueListApplications
Field	Type	Description
datarequired	array of RegistryCatalogueApplication
namerequired	string
appIdrequired	string, or null
displayNamerequired	string
summaryrequired	string, or null
homepageUrlrequired	string, or null
docsUrlrequired	string, or null
channelsrequired	map of string
{key}	string
platformsrequired	array of object
platformrequired	string	Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired	string
archrequired	string
formatrequired	string
labelrequired	string

datarequired
Type
array of RegistryCatalogueApplication
Description
namerequired
Type
string
Description
appIdrequired
Type
string, or null
Description
displayNamerequired
Type
string
Description
summaryrequired
Type
string, or null
Description
homepageUrlrequired
Type
string, or null
Description
docsUrlrequired
Type
string, or null
Description
channelsrequired
Type
map of string
Description
{key}
Type
string
Description
platformsrequired
Type
array of object
Description
platformrequired
Type
string
Description
Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired
Type
string
Description
archrequired
Type
string
Description
formatrequired
Type
string
Description
labelrequired
Type
string
Description

Example

curl

curl "https://api.rsx.group/registry/v1/catalogue/applications/list" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": [
    {
      "name": "link",
      "appId": "string",
      "displayName": "string",
      "summary": "string",
      "homepageUrl": "string",
      "docsUrl": "string",
      "channels": {
        "key": "string"
      },
      "platforms": [
        {
          "platform": "windows-x86_64-msix",
          "os": "string",
          "arch": "string",
          "format": "string",
          "label": "string"
        }
      ]
    }
  ]
}

GET/registry/v1/catalogue/applications/get

One public application

Scope: registry:catalogue:applications:get Admin-issued keys only.

Query parameters

Query parameters of catalogueGetApplication
Parameter	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters

Response 200The application

Response of catalogueGetApplication
Field	Type	Description
datarequired	RegistryCatalogueApplication
namerequired	string
appIdrequired	string, or null
displayNamerequired	string
summaryrequired	string, or null
homepageUrlrequired	string, or null
docsUrlrequired	string, or null
channelsrequired	map of string
{key}	string
platformsrequired	array of object
platformrequired	string	Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired	string
archrequired	string
formatrequired	string
labelrequired	string

datarequired
Type
RegistryCatalogueApplication
Description
namerequired
Type
string
Description
appIdrequired
Type
string, or null
Description
displayNamerequired
Type
string
Description
summaryrequired
Type
string, or null
Description
homepageUrlrequired
Type
string, or null
Description
docsUrlrequired
Type
string, or null
Description
channelsrequired
Type
map of string
Description
{key}
Type
string
Description
platformsrequired
Type
array of object
Description
platformrequired
Type
string
Description
Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired
Type
string
Description
archrequired
Type
string
Description
formatrequired
Type
string
Description
labelrequired
Type
string
Description

Example

curl

curl "https://api.rsx.group/registry/v1/catalogue/applications/get?package=%40rsx%2Fmetal" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": {
    "name": "link",
    "appId": "string",
    "displayName": "string",
    "summary": "string",
    "homepageUrl": "string",
    "docsUrl": "string",
    "channels": {
      "key": "string"
    },
    "platforms": [
      {
        "platform": "windows-x86_64-msix",
        "os": "string",
        "arch": "string",
        "format": "string",
        "label": "string"
      }
    ]
  }
}

GET/registry/v1/catalogue/releases/list

A public application's signed releases, newest first, revoked ones marked

Scope: registry:catalogue:releases:list Admin-issued keys only.

Query parameters

Query parameters of catalogueListReleases
Parameter	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters

Response 200Releases

Response of catalogueListReleases
Field	Type	Description
datarequired	array of RegistryCatalogueRelease
versionrequired	string
publishedAtrequired	string, date-time, or null
notesrequired	string, or null
channelsrequired	array of string
revokedrequired	object, or null
coderequired	string	Why a release was withdrawn.one of "security", "broken", "withdrawn"
reasonrequired	string
revokedAtrequired	string, date-time
assetsrequired	array of object
platformrequired	string	Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired	string
archrequired	string
formatrequired	string
labelrequired	string
sizerequired	integer
sha256required	string
minOsVersionrequired	string, or null
requirementNotesrequired	string, or null
identityrequired	string, or null
filenamerequired	string
downloadUrlrequired	string, or null
signedInrequired	object, or null
generationrequired	integer
snapshotUrlrequired	string

datarequired
Type
array of RegistryCatalogueRelease
Description
versionrequired
Type
string
Description
publishedAtrequired
Type
string, date-time, or null
Description
notesrequired
Type
string, or null
Description
channelsrequired
Type
array of string
Description
revokedrequired
Type
object, or null
Description
coderequired
Type
string
Description
Why a release was withdrawn.one of "security", "broken", "withdrawn"
reasonrequired
Type
string
Description
revokedAtrequired
Type
string, date-time
Description
assetsrequired
Type
array of object
Description
platformrequired
Type
string
Description
Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired
Type
string
Description
archrequired
Type
string
Description
formatrequired
Type
string
Description
labelrequired
Type
string
Description
sizerequired
Type
integer
Description
sha256required
Type
string
Description
minOsVersionrequired
Type
string, or null
Description
requirementNotesrequired
Type
string, or null
Description
identityrequired
Type
string, or null
Description
filenamerequired
Type
string
Description
downloadUrlrequired
Type
string, or null
Description
signedInrequired
Type
object, or null
Description
generationrequired
Type
integer
Description
snapshotUrlrequired
Type
string
Description

Example

curl

curl "https://api.rsx.group/registry/v1/catalogue/releases/list?package=%40rsx%2Fmetal" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": [
    {
      "version": "string",
      "publishedAt": "2026-10-10T12:00:00.000Z",
      "notes": "string",
      "channels": [
        "stable"
      ],
      "revoked": {
        "code": "security",
        "reason": "string",
        "revokedAt": "2026-10-10T12:00:00.000Z"
      },
      "assets": [
        {
          "platform": "windows-x86_64-msix",
          "os": "string",
          "arch": "string",
          "format": "string",
          "label": "string",
          "size": 1,
          "sha256": "string",
          "minOsVersion": "string",
          "requirementNotes": "string",
          "identity": "string",
          "filename": "string",
          "downloadUrl": "string"
        }
      ],
      "signedIn": {
        "generation": 1,
        "snapshotUrl": "string"
      }
    }
  ]
}

GET/registry/v1/catalogue/releases/get

One signed release of a public application, with its downloads

Scope: registry:catalogue:releases:get Admin-issued keys only.

Query parameters

Query parameters of catalogueGetRelease
Parameter	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters

Response 200The release

Response of catalogueGetRelease
Field	Type	Description
datarequired	RegistryCatalogueRelease
versionrequired	string
publishedAtrequired	string, date-time, or null
notesrequired	string, or null
channelsrequired	array of string
revokedrequired	object, or null
coderequired	string	Why a release was withdrawn.one of "security", "broken", "withdrawn"
reasonrequired	string
revokedAtrequired	string, date-time
assetsrequired	array of object
platformrequired	string	Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired	string
archrequired	string
formatrequired	string
labelrequired	string
sizerequired	integer
sha256required	string
minOsVersionrequired	string, or null
requirementNotesrequired	string, or null
identityrequired	string, or null
filenamerequired	string
downloadUrlrequired	string, or null
signedInrequired	object, or null
generationrequired	integer
snapshotUrlrequired	string

datarequired
Type
RegistryCatalogueRelease
Description
versionrequired
Type
string
Description
publishedAtrequired
Type
string, date-time, or null
Description
notesrequired
Type
string, or null
Description
channelsrequired
Type
array of string
Description
revokedrequired
Type
object, or null
Description
coderequired
Type
string
Description
Why a release was withdrawn.one of "security", "broken", "withdrawn"
reasonrequired
Type
string
Description
revokedAtrequired
Type
string, date-time
Description
assetsrequired
Type
array of object
Description
platformrequired
Type
string
Description
Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired
Type
string
Description
archrequired
Type
string
Description
formatrequired
Type
string
Description
labelrequired
Type
string
Description
sizerequired
Type
integer
Description
sha256required
Type
string
Description
minOsVersionrequired
Type
string, or null
Description
requirementNotesrequired
Type
string, or null
Description
identityrequired
Type
string, or null
Description
filenamerequired
Type
string
Description
downloadUrlrequired
Type
string, or null
Description
signedInrequired
Type
object, or null
Description
generationrequired
Type
integer
Description
snapshotUrlrequired
Type
string
Description

Example

curl

curl "https://api.rsx.group/registry/v1/catalogue/releases/get?package=%40rsx%2Fmetal&version=0.6.0" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": {
    "version": "string",
    "publishedAt": "2026-10-10T12:00:00.000Z",
    "notes": "string",
    "channels": [
      "stable"
    ],
    "revoked": {
      "code": "security",
      "reason": "string",
      "revokedAt": "2026-10-10T12:00:00.000Z"
    },
    "assets": [
      {
        "platform": "windows-x86_64-msix",
        "os": "string",
        "arch": "string",
        "format": "string",
        "label": "string",
        "size": 1,
        "sha256": "string",
        "minOsVersion": "string",
        "requirementNotes": "string",
        "identity": "string",
        "filename": "string",
        "downloadUrl": "string"
      }
    ],
    "signedIn": {
      "generation": 1,
      "snapshotUrl": "string"
    }
  }
}

binary

4 operations under /registry/v1/binary.

GET/registry/v1/binary/list

List a binary package's platform artefacts

Scope: registry:binary:list Admin-issued keys only.

Query parameters

Query parameters of listRegistryBinaries
Parameter	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
version	string	Restrict to one release. Omitted, every published release is listed.1 to 128 characters

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
version
Type
string
Description
Restrict to one release. Omitted, every published release is listed.1 to 128 characters

Response 200Artefacts across the requested releases

Response of listRegistryBinaries
Field	Type	Description
datarequired	array of RegistryBinaryArtefact
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
platformrequired	string, or null	Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired	string	Media type of the stored bytes.1 to 255 characters
digestrequired	string
sizerequired	integer
downloadrequired	string	Path to fetch the bytes from, using the same API key.

datarequired
Type
array of RegistryBinaryArtefact
Description
packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
platformrequired
Type
string, or null
Description
Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired
Type
string
Description
Media type of the stored bytes.1 to 255 characters
digestrequired
Type
string
Description
sizerequired
Type
integer
Description
downloadrequired
Type
string
Description
Path to fetch the bytes from, using the same API key.

Example

curl

curl "https://api.rsx.group/registry/v1/binary/list?package=%40rsx%2Fmetal" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": [
    {
      "package": "@rsx/metal",
      "version": "0.6.0",
      "platform": "linux-x86_64",
      "mediaType": "application/vnd.npm.install-v1+tgz",
      "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
      "size": 41983122,
      "download": "/registry/v1/binary/download?package=rsx-node&version=0.8.0&platform=linux-x86_64"
    }
  ]
}

GET/registry/v1/binary/get

Read one platform artefact's metadata

Scope: registry:binary:get Admin-issued keys only.

Query parameters

Query parameters of getRegistryBinary
Parameter	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
platform	string	Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
platform
Type
string
Description
Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$

Response 200The artefact, and where to fetch its bytes

Response of getRegistryBinary
Field	Type	Description
datarequired	RegistryBinaryArtefact
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
platformrequired	string, or null	Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired	string	Media type of the stored bytes.1 to 255 characters
digestrequired	string
sizerequired	integer
downloadrequired	string	Path to fetch the bytes from, using the same API key.

datarequired
Type
RegistryBinaryArtefact
Description
packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
platformrequired
Type
string, or null
Description
Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired
Type
string
Description
Media type of the stored bytes.1 to 255 characters
digestrequired
Type
string
Description
sizerequired
Type
integer
Description
downloadrequired
Type
string
Description
Path to fetch the bytes from, using the same API key.

Example

curl

curl "https://api.rsx.group/registry/v1/binary/get?package=%40rsx%2Fmetal&version=0.6.0" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": {
    "package": "@rsx/metal",
    "version": "0.6.0",
    "platform": "linux-x86_64",
    "mediaType": "application/vnd.npm.install-v1+tgz",
    "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
    "size": 41983122,
    "download": "/registry/v1/binary/download?package=rsx-node&version=0.8.0&platform=linux-x86_64"
  }
}

GET/registry/v1/binary/download

Fetch a platform artefact's bytes

Scope: registry:binary:download Admin-issued keys only.

Query parameters

Query parameters of downloadRegistryBinary
Parameter	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
platform	string	Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
platform
Type
string
Description
Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$

Response 200The artefact bytes, with their verified digest in Docker-Content-Digest

The bytes, with their content type.

Example

curl

curl "https://api.rsx.group/registry/v1/binary/download?package=%40rsx%2Fmetal&version=0.6.0" \
  -H "Authorization: Bearer rsx_live_..."

PUT/registry/v1/binary/upload

Send a declared artefact's bytes

Scope: registry:binary:upload Admin-issued keys only.

Query parameters

Query parameters of uploadRegistryBinary
Parameter	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
digestrequired	string	SHA-256 content digest of the artefact bytes.

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
digestrequired
Type
string
Description
SHA-256 content digest of the artefact bytes.

Request bodyapplication/octet-stream

The artefact bytes. Must declare a Content-Length, and must hash to the digest the release declared.

The raw bytes, as the body.

Response 200The release, published once this was the last outstanding artefact

Response of uploadRegistryBinary
Field	Type	Description
datarequired	RegistryVersion
idrequired	string
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
statusrequired	string	Whether every declared artefact has arrived and been verified.one of "staging", "published"
digestrequired	string, or null	Digest of the release's primary artefact.
sizerequired	integer, or null	Total size of the release's artefacts in bytes.
artefactsrequired	array of RegistryArtefact
createdAtrequired	string, date-time
publishedAtrequired	string, date-time, or null	When the last declared artefact arrived. Null while publication is incomplete.

datarequired
Type
RegistryVersion
Description
idrequired
Type
string
Description
protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
statusrequired
Type
string
Description
Whether every declared artefact has arrived and been verified.one of "staging", "published"
digestrequired
Type
string, or null
Description
Digest of the release's primary artefact.
sizerequired
Type
integer, or null
Description
Total size of the release's artefacts in bytes.
artefactsrequired
Type
array of RegistryArtefact
Description
createdAtrequired
Type
string, date-time
Description
publishedAtrequired
Type
string, date-time, or null
Description
When the last declared artefact arrived. Null while publication is incomplete.

Example

curl

curl -X PUT https://api.rsx.group/registry/v1/binary/upload \
  -H "Authorization: Bearer rsx_live_..." \
  -H "Content-Type: application/octet-stream" \
  --data-binary @file

200 response

{
  "data": {
    "id": "018f3b1c-9a2e-7c31-8f4d-2a6b5c7e9d11",
    "protocol": "npm",
    "name": "@rsx/metal",
    "version": "0.6.0",
    "status": "published",
    "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
    "size": 8419372,
    "artefacts": [
      {
        "id": "018f3b1c-9a2e-7c31-8f4d-2a6b5c7e9d10",
        "platform": "linux-x86_64",
        "mediaType": "application/vnd.npm.install-v1+tgz",
        "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
        "size": 8419372,
        "stored": true,
        "createdAt": "2026-09-04T10:15:00.000Z"
      }
    ],
    "createdAt": "2026-09-04T10:15:00.000Z",
    "publishedAt": "2026-09-04T10:16:30.000Z"
  }
}

native

2 operations under /registry/v1/native.

GET/registry/v1/native/get

Read a native release's validation and review state

Scope: registry:native:get Admin-issued keys only.

Query parameters

Query parameters of getRegistryNativeRelease
Parameter	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters

Response 200The release: whether it validated, how it was reviewed, and whether it is in the repository

Response of getRegistryNativeRelease
Field	Type	Description
datarequired	RegistryNativeRelease
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
architecturerequired	string	The archive's declared architecture, as its manifest spells it.one of "x86_64", "any"
digestrequired	string
sizerequired	integer
statusrequired	string	one of "staging", "published"
reviewStaterequired	string, or null	The release's review state.one of "invalid", "pending", "approved", "rejected", "revoked"
findingsrequired	array of RegistryNativeFinding
manifestrequired	RegistryNativeManifest
supersedesrequired	array of string
isDefaultrequired	boolean
reviewReasonrequired	string, or null
reviewedAtrequired	string, date-time, or null
revokeCoderequired	string, or null	Why a release was withdrawn from new installs.one of "security", "broken", "withdrawn"
revokeReasonrequired	string, or null
revokedAtrequired	string, date-time, or null
firstGenerationrequired	integer, or null

datarequired
Type
RegistryNativeRelease
Description
packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
architecturerequired
Type
string
Description
The archive's declared architecture, as its manifest spells it.one of "x86_64", "any"
digestrequired
Type
string
Description
sizerequired
Type
integer
Description
statusrequired
Type
string
Description
one of "staging", "published"
reviewStaterequired
Type
string, or null
Description
The release's review state.one of "invalid", "pending", "approved", "rejected", "revoked"
findingsrequired
Type
array of RegistryNativeFinding
Description
manifestrequired
Type
RegistryNativeManifest
Description
supersedesrequired
Type
array of string
Description
isDefaultrequired
Type
boolean
Description
reviewReasonrequired
Type
string, or null
Description
reviewedAtrequired
Type
string, date-time, or null
Description
revokeCoderequired
Type
string, or null
Description
Why a release was withdrawn from new installs.one of "security", "broken", "withdrawn"
revokeReasonrequired
Type
string, or null
Description
revokedAtrequired
Type
string, date-time, or null
Description
firstGenerationrequired
Type
integer, or null
Description

Example

curl

curl "https://api.rsx.group/registry/v1/native/get?package=%40rsx%2Fmetal&version=0.6.0" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": {
    "package": "@rsx/metal",
    "version": "0.6.0",
    "architecture": "x86_64",
    "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
    "size": 10240,
    "status": "staging",
    "reviewState": "pending",
    "findings": [
      {
        "check": "manifest.identity",
        "message": "The manifest names 'goodbye', but the release was declared as 'hello'."
      }
    ],
    "manifest": {
      "format": 3,
      "description": "Says hello.",
      "requires": [
        {
          "name": "libfoo",
          "version": "*"
        }
      ]
    },
    "supersedes": [
      "string"
    ],
    "isDefault": true,
    "reviewReason": "string",
    "reviewedAt": "2026-10-10T12:00:00.000Z",
    "revokeCode": "broken",
    "revokeReason": "string",
    "revokedAt": "2026-10-10T12:00:00.000Z",
    "firstGeneration": 1
  }
}

PUT/registry/v1/native/upload

Send a declared native release's archive

Scope: registry:native:upload Admin-issued keys only.

Query parameters

Query parameters of uploadRegistryNativeArchive
Parameter	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
digestrequired	string	SHA-256 content digest of the artefact bytes.

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
digestrequired
Type
string
Description
SHA-256 content digest of the artefact bytes.

Request bodyapplication/octet-stream

The .native archive. Must declare a Content-Length, hash to the declared digest, pass Native's archive validation, and be the release that was declared.

The raw bytes, as the body.

Response 200The release, published and pending review

Response of uploadRegistryNativeArchive
Field	Type	Description
datarequired	RegistryNativeRelease
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
architecturerequired	string	The archive's declared architecture, as its manifest spells it.one of "x86_64", "any"
digestrequired	string
sizerequired	integer
statusrequired	string	one of "staging", "published"
reviewStaterequired	string, or null	The release's review state.one of "invalid", "pending", "approved", "rejected", "revoked"
findingsrequired	array of RegistryNativeFinding
manifestrequired	RegistryNativeManifest
supersedesrequired	array of string
isDefaultrequired	boolean
reviewReasonrequired	string, or null
reviewedAtrequired	string, date-time, or null
revokeCoderequired	string, or null	Why a release was withdrawn from new installs.one of "security", "broken", "withdrawn"
revokeReasonrequired	string, or null
revokedAtrequired	string, date-time, or null
firstGenerationrequired	integer, or null

datarequired
Type
RegistryNativeRelease
Description
packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
architecturerequired
Type
string
Description
The archive's declared architecture, as its manifest spells it.one of "x86_64", "any"
digestrequired
Type
string
Description
sizerequired
Type
integer
Description
statusrequired
Type
string
Description
one of "staging", "published"
reviewStaterequired
Type
string, or null
Description
The release's review state.one of "invalid", "pending", "approved", "rejected", "revoked"
findingsrequired
Type
array of RegistryNativeFinding
Description
manifestrequired
Type
RegistryNativeManifest
Description
supersedesrequired
Type
array of string
Description
isDefaultrequired
Type
boolean
Description
reviewReasonrequired
Type
string, or null
Description
reviewedAtrequired
Type
string, date-time, or null
Description
revokeCoderequired
Type
string, or null
Description
Why a release was withdrawn from new installs.one of "security", "broken", "withdrawn"
revokeReasonrequired
Type
string, or null
Description
revokedAtrequired
Type
string, date-time, or null
Description
firstGenerationrequired
Type
integer, or null
Description

Example

curl

curl -X PUT https://api.rsx.group/registry/v1/native/upload \
  -H "Authorization: Bearer rsx_live_..." \
  -H "Content-Type: application/octet-stream" \
  --data-binary @file

200 response

{
  "data": {
    "package": "@rsx/metal",
    "version": "0.6.0",
    "architecture": "x86_64",
    "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
    "size": 10240,
    "status": "staging",
    "reviewState": "pending",
    "findings": [
      {
        "check": "manifest.identity",
        "message": "The manifest names 'goodbye', but the release was declared as 'hello'."
      }
    ],
    "manifest": {
      "format": 3,
      "description": "Says hello.",
      "requires": [
        {
          "name": "libfoo",
          "version": "*"
        }
      ]
    },
    "supersedes": [
      "string"
    ],
    "isDefault": true,
    "reviewReason": "string",
    "reviewedAt": "2026-10-10T12:00:00.000Z",
    "revokeCode": "broken",
    "revokeReason": "string",
    "revokedAt": "2026-10-10T12:00:00.000Z",
    "firstGeneration": 1
  }
}

app

3 operations under /registry/v1/app.

GET/registry/v1/app/get

Read an application release's validation and review state

Scope: registry:app:get Admin-issued keys only.

Query parameters

Query parameters of getRegistryAppRelease
Parameter	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters

Response 200The release: each asset's validation, the review, channels and revocation

Response of getRegistryAppRelease
Field	Type	Description
datarequired	RegistryAppRelease
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
statusrequired	string	one of "staging", "published"
reviewStaterequired	string	one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
assetsrequired	array of RegistryAppAsset
notesrequired	string, or null
requirementsrequired	map of RegistryAppRequirement
{key}	RegistryAppRequirement
channelsrequired	array of string
reviewReasonrequired	string, or null
reviewedAtrequired	string, date-time, or null
revokeCoderequired	string, or null	Why a release was withdrawn.one of "security", "broken", "withdrawn"
revokeReasonrequired	string, or null
revokedAtrequired	string, date-time, or null
firstGenerationrequired	integer, or null

datarequired
Type
RegistryAppRelease
Description
packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
statusrequired
Type
string
Description
one of "staging", "published"
reviewStaterequired
Type
string
Description
one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
assetsrequired
Type
array of RegistryAppAsset
Description
notesrequired
Type
string, or null
Description
requirementsrequired
Type
map of RegistryAppRequirement
Description
{key}
Type
RegistryAppRequirement
Description
channelsrequired
Type
array of string
Description
reviewReasonrequired
Type
string, or null
Description
reviewedAtrequired
Type
string, date-time, or null
Description
revokeCoderequired
Type
string, or null
Description
Why a release was withdrawn.one of "security", "broken", "withdrawn"
revokeReasonrequired
Type
string, or null
Description
revokedAtrequired
Type
string, date-time, or null
Description
firstGenerationrequired
Type
integer, or null
Description

Example

curl

curl "https://api.rsx.group/registry/v1/app/get?package=%40rsx%2Fmetal&version=0.6.0" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": {
    "package": "@rsx/metal",
    "version": "0.6.0",
    "status": "staging",
    "reviewState": "pending",
    "assets": [
      {
        "platform": "windows-x86_64-msix",
        "os": "string",
        "arch": "string",
        "format": "string",
        "mediaType": "string",
        "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
        "size": 1,
        "uploaded": true,
        "outcome": "valid",
        "findings": [
          {
            "check": null,
            "message": null
          }
        ],
        "notes": [
          {
            "check": null,
            "message": null
          }
        ],
        "identity": "string",
        "facts": {
          "key": "string"
        }
      }
    ],
    "notes": "string",
    "requirements": {
      "key": {
        "minOsVersion": "10.0.22621.0",
        "notes": "string"
      }
    },
    "channels": [
      "stable"
    ],
    "reviewReason": "string",
    "reviewedAt": "2026-10-10T12:00:00.000Z",
    "revokeCode": "security",
    "revokeReason": "string",
    "revokedAt": "2026-10-10T12:00:00.000Z",
    "firstGeneration": 1
  }
}

POST/registry/v1/app/update

Set a release's notes and per-platform requirements before it is reviewed

Scope: registry:app:update Admin-issued keys only.

Request bodyapplication/json

Request body of updateRegistryAppRelease
Field	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
notes	string, or null	up to 20000 characters
requirements	object
windows-x86_64-msix	RegistryAppRequirement
windows-x86_64-exe	RegistryAppRequirement
debian-amd64-deb	RegistryAppRequirement
android-arm64-v8a-apk	RegistryAppRequirement

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
notes
Type
string, or null
Description
up to 20000 characters
requirements
Type
object
Description
windows-x86_64-msix
Type
RegistryAppRequirement
Description
windows-x86_64-exe
Type
RegistryAppRequirement
Description
debian-amd64-deb
Type
RegistryAppRequirement
Description
android-arm64-v8a-apk
Type
RegistryAppRequirement
Description

Response 200The release with its details

Response of updateRegistryAppRelease
Field	Type	Description
datarequired	RegistryAppRelease
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
statusrequired	string	one of "staging", "published"
reviewStaterequired	string	one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
assetsrequired	array of RegistryAppAsset
notesrequired	string, or null
requirementsrequired	map of RegistryAppRequirement
{key}	RegistryAppRequirement
channelsrequired	array of string
reviewReasonrequired	string, or null
reviewedAtrequired	string, date-time, or null
revokeCoderequired	string, or null	Why a release was withdrawn.one of "security", "broken", "withdrawn"
revokeReasonrequired	string, or null
revokedAtrequired	string, date-time, or null
firstGenerationrequired	integer, or null

datarequired
Type
RegistryAppRelease
Description
packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
statusrequired
Type
string
Description
one of "staging", "published"
reviewStaterequired
Type
string
Description
one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
assetsrequired
Type
array of RegistryAppAsset
Description
notesrequired
Type
string, or null
Description
requirementsrequired
Type
map of RegistryAppRequirement
Description
{key}
Type
RegistryAppRequirement
Description
channelsrequired
Type
array of string
Description
reviewReasonrequired
Type
string, or null
Description
reviewedAtrequired
Type
string, date-time, or null
Description
revokeCoderequired
Type
string, or null
Description
Why a release was withdrawn.one of "security", "broken", "withdrawn"
revokeReasonrequired
Type
string, or null
Description
revokedAtrequired
Type
string, date-time, or null
Description
firstGenerationrequired
Type
integer, or null
Description

Example

curl

curl -X POST https://api.rsx.group/registry/v1/app/update \
  -H "Authorization: Bearer rsx_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "package": "@rsx/metal",
  "version": "0.6.0",
  "notes": "string",
  "requirements": {
    "windows-x86_64-msix": {
      "minOsVersion": "10.0.22621.0",
      "notes": "string"
    },
    "windows-x86_64-exe": {
      "minOsVersion": "10.0.22621.0",
      "notes": "string"
    },
    "debian-amd64-deb": {
      "minOsVersion": "10.0.22621.0",
      "notes": "string"
    },
    "android-arm64-v8a-apk": {
      "minOsVersion": "10.0.22621.0",
      "notes": "string"
    }
  }
}'

200 response

{
  "data": {
    "package": "@rsx/metal",
    "version": "0.6.0",
    "status": "staging",
    "reviewState": "pending",
    "assets": [
      {
        "platform": "windows-x86_64-msix",
        "os": "string",
        "arch": "string",
        "format": "string",
        "mediaType": "string",
        "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
        "size": 1,
        "uploaded": true,
        "outcome": "valid",
        "findings": [
          {
            "check": null,
            "message": null
          }
        ],
        "notes": [
          {
            "check": null,
            "message": null
          }
        ],
        "identity": "string",
        "facts": {
          "key": "string"
        }
      }
    ],
    "notes": "string",
    "requirements": {
      "key": {
        "minOsVersion": "10.0.22621.0",
        "notes": "string"
      }
    },
    "channels": [
      "stable"
    ],
    "reviewReason": "string",
    "reviewedAt": "2026-10-10T12:00:00.000Z",
    "revokeCode": "security",
    "revokeReason": "string",
    "revokedAt": "2026-10-10T12:00:00.000Z",
    "firstGeneration": 1
  }
}

PUT/registry/v1/app/upload

Send one declared installer of an application release

Scope: registry:app:upload Admin-issued keys only.

Query parameters

Query parameters of uploadRegistryAppAsset
Parameter	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
digestrequired	string	SHA-256 content digest of the artefact bytes.

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
digestrequired
Type
string
Description
SHA-256 content digest of the artefact bytes.

Request bodyapplication/octet-stream

The installer. Must declare a Content-Length, hash to a declared digest, and pass validation for its platform.

The raw bytes, as the body.

Response 200The release; pending review once its last asset has validated

Response of uploadRegistryAppAsset
Field	Type	Description
datarequired	RegistryAppRelease
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
statusrequired	string	one of "staging", "published"
reviewStaterequired	string	one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
assetsrequired	array of RegistryAppAsset
notesrequired	string, or null
requirementsrequired	map of RegistryAppRequirement
{key}	RegistryAppRequirement
channelsrequired	array of string
reviewReasonrequired	string, or null
reviewedAtrequired	string, date-time, or null
revokeCoderequired	string, or null	Why a release was withdrawn.one of "security", "broken", "withdrawn"
revokeReasonrequired	string, or null
revokedAtrequired	string, date-time, or null
firstGenerationrequired	integer, or null

datarequired
Type
RegistryAppRelease
Description
packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
statusrequired
Type
string
Description
one of "staging", "published"
reviewStaterequired
Type
string
Description
one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
assetsrequired
Type
array of RegistryAppAsset
Description
notesrequired
Type
string, or null
Description
requirementsrequired
Type
map of RegistryAppRequirement
Description
{key}
Type
RegistryAppRequirement
Description
channelsrequired
Type
array of string
Description
reviewReasonrequired
Type
string, or null
Description
reviewedAtrequired
Type
string, date-time, or null
Description
revokeCoderequired
Type
string, or null
Description
Why a release was withdrawn.one of "security", "broken", "withdrawn"
revokeReasonrequired
Type
string, or null
Description
revokedAtrequired
Type
string, date-time, or null
Description
firstGenerationrequired
Type
integer, or null
Description

Example

curl

curl -X PUT https://api.rsx.group/registry/v1/app/upload \
  -H "Authorization: Bearer rsx_live_..." \
  -H "Content-Type: application/octet-stream" \
  --data-binary @file

200 response

{
  "data": {
    "package": "@rsx/metal",
    "version": "0.6.0",
    "status": "staging",
    "reviewState": "pending",
    "assets": [
      {
        "platform": "windows-x86_64-msix",
        "os": "string",
        "arch": "string",
        "format": "string",
        "mediaType": "string",
        "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
        "size": 1,
        "uploaded": true,
        "outcome": "valid",
        "findings": [
          {
            "check": null,
            "message": null
          }
        ],
        "notes": [
          {
            "check": null,
            "message": null
          }
        ],
        "identity": "string",
        "facts": {
          "key": "string"
        }
      }
    ],
    "notes": "string",
    "requirements": {
      "key": {
        "minOsVersion": "10.0.22621.0",
        "notes": "string"
      }
    },
    "channels": [
      "stable"
    ],
    "reviewReason": "string",
    "reviewedAt": "2026-10-10T12:00:00.000Z",
    "revokeCode": "security",
    "revokeReason": "string",
    "revokedAt": "2026-10-10T12:00:00.000Z",
    "firstGeneration": 1
  }
}

packages

5 operations under /registry/v1/packages.

GET/registry/v1/packages/list

List packages

Scope: registry:packages:list Admin-issued keys only.

Query parameters

Query parameters of listRegistryPackages
Parameter	Type	Description
protocol	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
scope	string	up to 128 characters
owner	string	up to 128 characters
cursor	string
limit	integer	1 to 100 · default 20

protocol
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
scope
Type
string
Description
up to 128 characters
owner
Type
string
Description
up to 128 characters
cursor
Type
string
Description
limit
Type
integer
Description
1 to 100 · default 20

Response 200Packages, ordered by protocol and name

Response of listRegistryPackages
Field	Type	Description
datarequired	array of RegistryPackage
idrequired	string
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
scoperequired	string, or null	npm scope the package belongs to, where it has one.
visibilityrequired	string	Who may consume the package. Every v1 package is internal.one of "internal"
ownerrequired	string	The RSX principal that owns the package.1 to 128 characters
descriptionrequired	string, or null	What the package is, shown wherever the registry is browsed.
latestrequired	string, or null	Highest published version, or null when nothing is published yet.
versionCountrequired	integer
createdAtrequired	string, date-time
updatedAtrequired	string, date-time
metarequired	object
cursorrequired	string, or null

datarequired
Type
array of RegistryPackage
Description
idrequired
Type
string
Description
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
scoperequired
Type
string, or null
Description
npm scope the package belongs to, where it has one.
visibilityrequired
Type
string
Description
Who may consume the package. Every v1 package is internal.one of "internal"
ownerrequired
Type
string
Description
The RSX principal that owns the package.1 to 128 characters
descriptionrequired
Type
string, or null
Description
What the package is, shown wherever the registry is browsed.
latestrequired
Type
string, or null
Description
Highest published version, or null when nothing is published yet.
versionCountrequired
Type
integer
Description
createdAtrequired
Type
string, date-time
Description
updatedAtrequired
Type
string, date-time
Description
metarequired
Type
object
Description
cursorrequired
Type
string, or null
Description

Example

curl

curl "https://api.rsx.group/registry/v1/packages/list" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": [
    {
      "id": "018f3b1c-9a2e-7c31-8f4d-2a6b5c7e9d10",
      "name": "@rsx/metal",
      "protocol": "npm",
      "scope": "@rsx",
      "visibility": "internal",
      "owner": "3f1c9b02-7a54-4a0e-9c1f-2b8d4e6a1c77",
      "description": "Roblox place and asset build tooling.",
      "latest": "0.6.0",
      "versionCount": 12,
      "createdAt": "2026-09-04T10:15:00.000Z",
      "updatedAt": "2026-09-04T10:15:00.000Z"
    }
  ],
  "meta": {
    "cursor": "string"
  }
}

GET/registry/v1/packages/get

Read package metadata

Scope: registry:packages:get Admin-issued keys only.

Query parameters

Query parameters of getRegistryPackage
Parameter	Type	Description
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters

protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters

Response 200The package

Response of getRegistryPackage
Field	Type	Description
datarequired	RegistryPackage
idrequired	string
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
scoperequired	string, or null	npm scope the package belongs to, where it has one.
visibilityrequired	string	Who may consume the package. Every v1 package is internal.one of "internal"
ownerrequired	string	The RSX principal that owns the package.1 to 128 characters
descriptionrequired	string, or null	What the package is, shown wherever the registry is browsed.
latestrequired	string, or null	Highest published version, or null when nothing is published yet.
versionCountrequired	integer
createdAtrequired	string, date-time
updatedAtrequired	string, date-time

datarequired
Type
RegistryPackage
Description
idrequired
Type
string
Description
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
scoperequired
Type
string, or null
Description
npm scope the package belongs to, where it has one.
visibilityrequired
Type
string
Description
Who may consume the package. Every v1 package is internal.one of "internal"
ownerrequired
Type
string
Description
The RSX principal that owns the package.1 to 128 characters
descriptionrequired
Type
string, or null
Description
What the package is, shown wherever the registry is browsed.
latestrequired
Type
string, or null
Description
Highest published version, or null when nothing is published yet.
versionCountrequired
Type
integer
Description
createdAtrequired
Type
string, date-time
Description
updatedAtrequired
Type
string, date-time
Description

Example

curl

curl "https://api.rsx.group/registry/v1/packages/get?protocol=npm&name=%40rsx%2Fmetal" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": {
    "id": "018f3b1c-9a2e-7c31-8f4d-2a6b5c7e9d10",
    "name": "@rsx/metal",
    "protocol": "npm",
    "scope": "@rsx",
    "visibility": "internal",
    "owner": "3f1c9b02-7a54-4a0e-9c1f-2b8d4e6a1c77",
    "description": "Roblox place and asset build tooling.",
    "latest": "0.6.0",
    "versionCount": 12,
    "createdAt": "2026-09-04T10:15:00.000Z",
    "updatedAt": "2026-09-04T10:15:00.000Z"
  }
}

POST/registry/v1/packages/add

Create a package identity

Scope: registry:packages:add Admin-issued keys only.
Idempotency: Requires an Idempotency-Key header. Reusing the key within 24 hours returns the original response instead of creating a second record.

Request bodyapplication/json

Request body of addRegistryPackage
Field	Type	Description
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
description	string	up to 512 characters

protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
description
Type
string
Description
up to 512 characters

Response 200The package

Response of addRegistryPackage
Field	Type	Description
datarequired	RegistryPackage
idrequired	string
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
scoperequired	string, or null	npm scope the package belongs to, where it has one.
visibilityrequired	string	Who may consume the package. Every v1 package is internal.one of "internal"
ownerrequired	string	The RSX principal that owns the package.1 to 128 characters
descriptionrequired	string, or null	What the package is, shown wherever the registry is browsed.
latestrequired	string, or null	Highest published version, or null when nothing is published yet.
versionCountrequired	integer
createdAtrequired	string, date-time
updatedAtrequired	string, date-time

datarequired
Type
RegistryPackage
Description
idrequired
Type
string
Description
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
scoperequired
Type
string, or null
Description
npm scope the package belongs to, where it has one.
visibilityrequired
Type
string
Description
Who may consume the package. Every v1 package is internal.one of "internal"
ownerrequired
Type
string
Description
The RSX principal that owns the package.1 to 128 characters
descriptionrequired
Type
string, or null
Description
What the package is, shown wherever the registry is browsed.
latestrequired
Type
string, or null
Description
Highest published version, or null when nothing is published yet.
versionCountrequired
Type
integer
Description
createdAtrequired
Type
string, date-time
Description
updatedAtrequired
Type
string, date-time
Description

Example

curl

curl -X POST https://api.rsx.group/registry/v1/packages/add \
  -H "Authorization: Bearer rsx_live_..." \
  -H "Idempotency-Key: 5b8f2d1a-0c7e-4b1f-9a6d-3e2f1c0b9a8d" \
  -H "Content-Type: application/json" \
  -d '{
  "protocol": "npm",
  "name": "@rsx/metal",
  "description": "string"
}'

200 response

{
  "data": {
    "id": "018f3b1c-9a2e-7c31-8f4d-2a6b5c7e9d10",
    "name": "@rsx/metal",
    "protocol": "npm",
    "scope": "@rsx",
    "visibility": "internal",
    "owner": "3f1c9b02-7a54-4a0e-9c1f-2b8d4e6a1c77",
    "description": "Roblox place and asset build tooling.",
    "latest": "0.6.0",
    "versionCount": 12,
    "createdAt": "2026-09-04T10:15:00.000Z",
    "updatedAt": "2026-09-04T10:15:00.000Z"
  }
}

POST/registry/v1/packages/update

Amend package metadata

Scope: registry:packages:update Admin-issued keys only.

Request bodyapplication/json

Request body of updateRegistryPackage
Field	Type	Description
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
description	string, or null	up to 512 characters
owner	string	Transfer ownership. The current owner only.1 to 128 characters

protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
description
Type
string, or null
Description
up to 512 characters
owner
Type
string
Description
Transfer ownership. The current owner only.1 to 128 characters

Response 200The package

Response of updateRegistryPackage
Field	Type	Description
datarequired	RegistryPackage
idrequired	string
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
scoperequired	string, or null	npm scope the package belongs to, where it has one.
visibilityrequired	string	Who may consume the package. Every v1 package is internal.one of "internal"
ownerrequired	string	The RSX principal that owns the package.1 to 128 characters
descriptionrequired	string, or null	What the package is, shown wherever the registry is browsed.
latestrequired	string, or null	Highest published version, or null when nothing is published yet.
versionCountrequired	integer
createdAtrequired	string, date-time
updatedAtrequired	string, date-time

datarequired
Type
RegistryPackage
Description
idrequired
Type
string
Description
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
scoperequired
Type
string, or null
Description
npm scope the package belongs to, where it has one.
visibilityrequired
Type
string
Description
Who may consume the package. Every v1 package is internal.one of "internal"
ownerrequired
Type
string
Description
The RSX principal that owns the package.1 to 128 characters
descriptionrequired
Type
string, or null
Description
What the package is, shown wherever the registry is browsed.
latestrequired
Type
string, or null
Description
Highest published version, or null when nothing is published yet.
versionCountrequired
Type
integer
Description
createdAtrequired
Type
string, date-time
Description
updatedAtrequired
Type
string, date-time
Description

Example

curl

curl -X POST https://api.rsx.group/registry/v1/packages/update \
  -H "Authorization: Bearer rsx_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "protocol": "npm",
  "name": "@rsx/metal",
  "description": "string",
  "owner": "3f1c9b02-7a54-4a0e-9c1f-2b8d4e6a1c77"
}'

200 response

{
  "data": {
    "id": "018f3b1c-9a2e-7c31-8f4d-2a6b5c7e9d10",
    "name": "@rsx/metal",
    "protocol": "npm",
    "scope": "@rsx",
    "visibility": "internal",
    "owner": "3f1c9b02-7a54-4a0e-9c1f-2b8d4e6a1c77",
    "description": "Roblox place and asset build tooling.",
    "latest": "0.6.0",
    "versionCount": 12,
    "createdAt": "2026-09-04T10:15:00.000Z",
    "updatedAt": "2026-09-04T10:15:00.000Z"
  }
}

POST/registry/v1/packages/remove

Withdraw a package from discovery

Scope: registry:packages:remove Admin-issued keys only.

Request bodyapplication/json

Request body of removeRegistryPackage
Field	Type	Description
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters

protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters

Response 200The package was withdrawn

Response of removeRegistryPackage
Field	Type	Description
datarequired	object
protocolrequired	string
namerequired	string
removedrequired	boolean	one of true

datarequired
Type
object
Description
protocolrequired
Type
string
Description
namerequired
Type
string
Description
removedrequired
Type
boolean
Description
one of true

Example

curl

curl -X POST https://api.rsx.group/registry/v1/packages/remove \
  -H "Authorization: Bearer rsx_live_..." \
  -H "Content-Type: application/json" \
  -d '{
  "protocol": "npm",
  "name": "@rsx/metal"
}'

200 response

{
  "data": {
    "protocol": "string",
    "name": "string",
    "removed": true
  }
}

versions

3 operations under /registry/v1/versions.

GET/registry/v1/versions/list

List a package's versions

Scope: registry:versions:list Admin-issued keys only.

Query parameters

Query parameters of listRegistryVersions
Parameter	Type	Description
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
cursor	string
limit	integer	1 to 100 · default 20

protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
cursor
Type
string
Description
limit
Type
integer
Description
1 to 100 · default 20

Response 200Versions

Response of listRegistryVersions
Field	Type	Description
datarequired	array of RegistryVersion
idrequired	string
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
statusrequired	string	Whether every declared artefact has arrived and been verified.one of "staging", "published"
digestrequired	string, or null	Digest of the release's primary artefact.
sizerequired	integer, or null	Total size of the release's artefacts in bytes.
artefactsrequired	array of RegistryArtefact
createdAtrequired	string, date-time
publishedAtrequired	string, date-time, or null	When the last declared artefact arrived. Null while publication is incomplete.
metarequired	object
cursorrequired	string, or null

datarequired
Type
array of RegistryVersion
Description
idrequired
Type
string
Description
protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
statusrequired
Type
string
Description
Whether every declared artefact has arrived and been verified.one of "staging", "published"
digestrequired
Type
string, or null
Description
Digest of the release's primary artefact.
sizerequired
Type
integer, or null
Description
Total size of the release's artefacts in bytes.
artefactsrequired
Type
array of RegistryArtefact
Description
createdAtrequired
Type
string, date-time
Description
publishedAtrequired
Type
string, date-time, or null
Description
When the last declared artefact arrived. Null while publication is incomplete.
metarequired
Type
object
Description
cursorrequired
Type
string, or null
Description

Example

curl

curl "https://api.rsx.group/registry/v1/versions/list?protocol=npm&name=%40rsx%2Fmetal" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": [
    {
      "id": "018f3b1c-9a2e-7c31-8f4d-2a6b5c7e9d11",
      "protocol": "npm",
      "name": "@rsx/metal",
      "version": "0.6.0",
      "status": "published",
      "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
      "size": 8419372,
      "artefacts": [
        {
          "id": "018f3b1c-9a2e-7c31-8f4d-2a6b5c7e9d10",
          "platform": "linux-x86_64",
          "mediaType": "application/vnd.npm.install-v1+tgz",
          "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
          "size": 8419372,
          "stored": true,
          "createdAt": "2026-09-04T10:15:00.000Z"
        }
      ],
      "createdAt": "2026-09-04T10:15:00.000Z",
      "publishedAt": "2026-09-04T10:16:30.000Z"
    }
  ],
  "meta": {
    "cursor": "string"
  }
}

GET/registry/v1/versions/get

Read one version

Scope: registry:versions:get Admin-issued keys only.

Query parameters

Query parameters of getRegistryVersion
Parameter	Type	Description
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters

protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters

Response 200The version

Response of getRegistryVersion
Field	Type	Description
datarequired	RegistryVersion
idrequired	string
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
statusrequired	string	Whether every declared artefact has arrived and been verified.one of "staging", "published"
digestrequired	string, or null	Digest of the release's primary artefact.
sizerequired	integer, or null	Total size of the release's artefacts in bytes.
artefactsrequired	array of RegistryArtefact
createdAtrequired	string, date-time
publishedAtrequired	string, date-time, or null	When the last declared artefact arrived. Null while publication is incomplete.

datarequired
Type
RegistryVersion
Description
idrequired
Type
string
Description
protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
statusrequired
Type
string
Description
Whether every declared artefact has arrived and been verified.one of "staging", "published"
digestrequired
Type
string, or null
Description
Digest of the release's primary artefact.
sizerequired
Type
integer, or null
Description
Total size of the release's artefacts in bytes.
artefactsrequired
Type
array of RegistryArtefact
Description
createdAtrequired
Type
string, date-time
Description
publishedAtrequired
Type
string, date-time, or null
Description
When the last declared artefact arrived. Null while publication is incomplete.

Example

curl

curl "https://api.rsx.group/registry/v1/versions/get?protocol=npm&name=%40rsx%2Fmetal&version=0.6.0" \
  -H "Authorization: Bearer rsx_live_..."

200 response

{
  "data": {
    "id": "018f3b1c-9a2e-7c31-8f4d-2a6b5c7e9d11",
    "protocol": "npm",
    "name": "@rsx/metal",
    "version": "0.6.0",
    "status": "published",
    "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
    "size": 8419372,
    "artefacts": [
      {
        "id": "018f3b1c-9a2e-7c31-8f4d-2a6b5c7e9d10",
        "platform": "linux-x86_64",
        "mediaType": "application/vnd.npm.install-v1+tgz",
        "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
        "size": 8419372,
        "stored": true,
        "createdAt": "2026-09-04T10:15:00.000Z"
      }
    ],
    "createdAt": "2026-09-04T10:15:00.000Z",
    "publishedAt": "2026-09-04T10:16:30.000Z"
  }
}

POST/registry/v1/versions/add

Declare a version and the artefacts it consists of

Scope: registry:versions:add Admin-issued keys only.
Idempotency: Requires an Idempotency-Key header. Reusing the key within 24 hours returns the original response instead of creating a second record.

Request bodyapplication/json

Request body of addRegistryVersion
Field	Type	Description
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
artefactsrequired	array of RegistryArtefactDeclaration	1 to 64 items
platform	string	Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired	string	Media type of the stored bytes.1 to 255 characters
digestrequired	string	SHA-256 content digest of the artefact bytes.
sizerequired	integer	Size of the artefact in bytes.at least 0

protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
artefactsrequired
Type
array of RegistryArtefactDeclaration
Description
1 to 64 items
platform
Type
string
Description
Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired
Type
string
Description
Media type of the stored bytes.1 to 255 characters
digestrequired
Type
string
Description
SHA-256 content digest of the artefact bytes.
sizerequired
Type
integer
Description
Size of the artefact in bytes.at least 0

Response 200The declared version, staging until every artefact has arrived

Response of addRegistryVersion
Field	Type	Description
datarequired	RegistryVersion
idrequired	string
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
statusrequired	string	Whether every declared artefact has arrived and been verified.one of "staging", "published"
digestrequired	string, or null	Digest of the release's primary artefact.
sizerequired	integer, or null	Total size of the release's artefacts in bytes.
artefactsrequired	array of RegistryArtefact
createdAtrequired	string, date-time
publishedAtrequired	string, date-time, or null	When the last declared artefact arrived. Null while publication is incomplete.

datarequired
Type
RegistryVersion
Description
idrequired
Type
string
Description
protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
statusrequired
Type
string
Description
Whether every declared artefact has arrived and been verified.one of "staging", "published"
digestrequired
Type
string, or null
Description
Digest of the release's primary artefact.
sizerequired
Type
integer, or null
Description
Total size of the release's artefacts in bytes.
artefactsrequired
Type
array of RegistryArtefact
Description
createdAtrequired
Type
string, date-time
Description
publishedAtrequired
Type
string, date-time, or null
Description
When the last declared artefact arrived. Null while publication is incomplete.

Example

curl

curl -X POST https://api.rsx.group/registry/v1/versions/add \
  -H "Authorization: Bearer rsx_live_..." \
  -H "Idempotency-Key: 5b8f2d1a-0c7e-4b1f-9a6d-3e2f1c0b9a8d" \
  -H "Content-Type: application/json" \
  -d '{
  "protocol": "npm",
  "name": "@rsx/metal",
  "version": "0.6.0",
  "artefacts": [
    {
      "platform": "linux-x86_64",
      "mediaType": "application/vnd.npm.install-v1+tgz",
      "digest": "sha256:9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
      "size": 8419372
    }
  ]
}'

200 response

{
  "data": {
    "id": "018f3b1c-9a2e-7c31-8f4d-2a6b5c7e9d11",
    "protocol": "npm",
    "name": "@rsx/metal",
    "version": "0.6.0",
    "status": "published",
    "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
    "size": 8419372,
    "artefacts": [
      {
        "id": "018f3b1c-9a2e-7c31-8f4d-2a6b5c7e9d10",
        "platform": "linux-x86_64",
        "mediaType": "application/vnd.npm.install-v1+tgz",
        "digest": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
        "size": 8419372,
        "stored": true,
        "createdAt": "2026-09-04T10:15:00.000Z"
      }
    ],
    "createdAt": "2026-09-04T10:15:00.000Z",
    "publishedAt": "2026-09-04T10:16:30.000Z"
  }
}

Schemas

Every named shape in this reference, as the operations above refer to it.

RegistryNativeFinding

RegistryNativeFinding
Field	Type	Description
checkrequired	string
messagerequired	string

checkrequired
Type
string
Description
messagerequired
Type
string
Description

RegistryNativeManifest

RegistryNativeManifest
Field	Type	Description
formatrequired	integer	1 to 3
descriptionrequired	string
requiresrequired	array of object
namerequired	string
versionrequired	string	`*` for any installed version, or `=VERSION` for exactly one.

formatrequired
Type
integer
Description
1 to 3
descriptionrequired
Type
string
Description
requiresrequired
Type
array of object
Description
namerequired
Type
string
Description
versionrequired
Type
string
Description
* for any installed version, or =VERSION for exactly one.

RegistryNativeRelease

RegistryNativeRelease
Field	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
architecturerequired	string	The archive's declared architecture, as its manifest spells it.one of "x86_64", "any"
digestrequired	string
sizerequired	integer
statusrequired	string	one of "staging", "published"
reviewStaterequired	string, or null	The release's review state.one of "invalid", "pending", "approved", "rejected", "revoked"
findingsrequired	array of RegistryNativeFinding
checkrequired	string
messagerequired	string
manifestrequired	RegistryNativeManifest
formatrequired	integer	1 to 3
descriptionrequired	string
requiresrequired	array of object
namerequired	string
versionrequired	string	`*` for any installed version, or `=VERSION` for exactly one.
supersedesrequired	array of string
isDefaultrequired	boolean
reviewReasonrequired	string, or null
reviewedAtrequired	string, date-time, or null
revokeCoderequired	string, or null	Why a release was withdrawn from new installs.one of "security", "broken", "withdrawn"
revokeReasonrequired	string, or null
revokedAtrequired	string, date-time, or null
firstGenerationrequired	integer, or null

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
architecturerequired
Type
string
Description
The archive's declared architecture, as its manifest spells it.one of "x86_64", "any"
digestrequired
Type
string
Description
sizerequired
Type
integer
Description
statusrequired
Type
string
Description
one of "staging", "published"
reviewStaterequired
Type
string, or null
Description
The release's review state.one of "invalid", "pending", "approved", "rejected", "revoked"
findingsrequired
Type
array of RegistryNativeFinding
Description
checkrequired
Type
string
Description
messagerequired
Type
string
Description
manifestrequired
Type
RegistryNativeManifest
Description
formatrequired
Type
integer
Description
1 to 3
descriptionrequired
Type
string
Description
requiresrequired
Type
array of object
Description
namerequired
Type
string
Description
versionrequired
Type
string
Description
* for any installed version, or =VERSION for exactly one.
supersedesrequired
Type
array of string
Description
isDefaultrequired
Type
boolean
Description
reviewReasonrequired
Type
string, or null
Description
reviewedAtrequired
Type
string, date-time, or null
Description
revokeCoderequired
Type
string, or null
Description
Why a release was withdrawn from new installs.one of "security", "broken", "withdrawn"
revokeReasonrequired
Type
string, or null
Description
revokedAtrequired
Type
string, date-time, or null
Description
firstGenerationrequired
Type
integer, or null
Description

RegistryNativeAdminRelease

RegistryNativeAdminRelease
Field	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
architecturerequired	string	The archive's declared architecture, as its manifest spells it.one of "x86_64", "any"
digestrequired	string
sizerequired	integer
statusrequired	string	one of "staging", "published"
reviewStaterequired	string, or null	The release's review state.one of "invalid", "pending", "approved", "rejected", "revoked"
findingsrequired	array of RegistryNativeFinding
checkrequired	string
messagerequired	string
manifestrequired	RegistryNativeManifest
formatrequired	integer	1 to 3
descriptionrequired	string
requiresrequired	array of object
namerequired	string
versionrequired	string	`*` for any installed version, or `=VERSION` for exactly one.
supersedesrequired	array of string
isDefaultrequired	boolean
reviewReasonrequired	string, or null
reviewedAtrequired	string, date-time, or null
revokeCoderequired	string, or null	Why a release was withdrawn from new installs.one of "security", "broken", "withdrawn"
revokeReasonrequired	string, or null
revokedAtrequired	string, date-time, or null
firstGenerationrequired	integer, or null
reviewedByrequired	string, or null
revokedByrequired	string, or null

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
architecturerequired
Type
string
Description
The archive's declared architecture, as its manifest spells it.one of "x86_64", "any"
digestrequired
Type
string
Description
sizerequired
Type
integer
Description
statusrequired
Type
string
Description
one of "staging", "published"
reviewStaterequired
Type
string, or null
Description
The release's review state.one of "invalid", "pending", "approved", "rejected", "revoked"
findingsrequired
Type
array of RegistryNativeFinding
Description
checkrequired
Type
string
Description
messagerequired
Type
string
Description
manifestrequired
Type
RegistryNativeManifest
Description
formatrequired
Type
integer
Description
1 to 3
descriptionrequired
Type
string
Description
requiresrequired
Type
array of object
Description
namerequired
Type
string
Description
versionrequired
Type
string
Description
* for any installed version, or =VERSION for exactly one.
supersedesrequired
Type
array of string
Description
isDefaultrequired
Type
boolean
Description
reviewReasonrequired
Type
string, or null
Description
reviewedAtrequired
Type
string, date-time, or null
Description
revokeCoderequired
Type
string, or null
Description
Why a release was withdrawn from new installs.one of "security", "broken", "withdrawn"
revokeReasonrequired
Type
string, or null
Description
revokedAtrequired
Type
string, date-time, or null
Description
firstGenerationrequired
Type
integer, or null
Description
reviewedByrequired
Type
string, or null
Description
revokedByrequired
Type
string, or null
Description

RegistryNativeReleaseUpdate

RegistryNativeReleaseUpdate
Field	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
reviewStaterequired	string	one of "approved", "rejected", "revoked"
reasonrequired	string	1 to 160 characters · matches ^[\x20-\x7e]+$
supersedes	array of string	up to 32 items
revokeCode	string	Why a release was withdrawn from new installs.one of "security", "broken", "withdrawn"

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
reviewStaterequired
Type
string
Description
one of "approved", "rejected", "revoked"
reasonrequired
Type
string
Description
1 to 160 characters · matches ^[\x20-\x7e]+$
supersedes
Type
array of string
Description
up to 32 items
revokeCode
Type
string
Description
Why a release was withdrawn from new installs.one of "security", "broken", "withdrawn"

RegistryNativePackageUpdate

RegistryNativePackageUpdate
Field	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
defaultVersionrequired	string, or null	Package version, or an OCI tag.1 to 128 characters

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
defaultVersionrequired
Type
string, or null
Description
Package version, or an OCI tag.1 to 128 characters

RegistryNativeSnapshot

RegistryNativeSnapshot
Field	Type	Description
generationrequired	integer
staterequired	string	one of "writing", "current", "superseded", "abandoned"
kindrequired	string	one of "publish", "refresh"
keysVersionrequired	integer
keyIdrequired	string
signedAtrequired	string, date-time
expiresAtrequired	string, date-time
payloadSha256required	string, or null
sizerequired	integer, or null
releaseCountrequired	integer
publishedByrequired	string

generationrequired
Type
integer
Description
staterequired
Type
string
Description
one of "writing", "current", "superseded", "abandoned"
kindrequired
Type
string
Description
one of "publish", "refresh"
keysVersionrequired
Type
integer
Description
keyIdrequired
Type
string
Description
signedAtrequired
Type
string, date-time
Description
expiresAtrequired
Type
string, date-time
Description
payloadSha256required
Type
string, or null
Description
sizerequired
Type
integer, or null
Description
releaseCountrequired
Type
integer
Description
publishedByrequired
Type
string
Description

RegistryNativeSnapshotPreview

RegistryNativeSnapshotPreview
Field	Type	Description
currentGenerationrequired	integer, or null
addedrequired	array of object
packagerequired	string
versionrequired	string
architecturerequired	string
removedrequired	array of object
packagerequired	string
versionrequired	string
architecturerequired	string
revokedrequired	array of object
packagerequired	string
versionrequired	string
defaultsChangedrequired	array of object
packagerequired	string
fromrequired	string, or null
torequired	string, or null
releaseCountrequired	integer
unchangedrequired	boolean

currentGenerationrequired
Type
integer, or null
Description
addedrequired
Type
array of object
Description
packagerequired
Type
string
Description
versionrequired
Type
string
Description
architecturerequired
Type
string
Description
removedrequired
Type
array of object
Description
packagerequired
Type
string
Description
versionrequired
Type
string
Description
architecturerequired
Type
string
Description
revokedrequired
Type
array of object
Description
packagerequired
Type
string
Description
versionrequired
Type
string
Description
defaultsChangedrequired
Type
array of object
Description
packagerequired
Type
string
Description
fromrequired
Type
string, or null
Description
torequired
Type
string, or null
Description
releaseCountrequired
Type
integer
Description
unchangedrequired
Type
boolean
Description

RegistryNativeSnapshotPublish

RegistryNativeSnapshotPublish
Field	Type	Description
expectGenerationrequired	integer, or null

expectGenerationrequired
Type
integer, or null
Description

RegistryNativeKeysStatus

RegistryNativeKeysStatus
Field	Type	Description
repositoryrequired	string
rootKeyIdsrequired	array of string
keysVersionrequired	integer, or null
expiresAtrequired	string, date-time, or null
onlineKeyIdsrequired	array of string
signingKeyIdrequired	string, or null
signingKeyListedrequired	boolean

repositoryrequired
Type
string
Description
rootKeyIdsrequired
Type
array of string
Description
keysVersionrequired
Type
integer, or null
Description
expiresAtrequired
Type
string, date-time, or null
Description
onlineKeyIdsrequired
Type
array of string
Description
signingKeyIdrequired
Type
string, or null
Description
signingKeyListedrequired
Type
boolean
Description

RegistryNativeKeysUpdate

RegistryNativeKeysUpdate
Field	Type	Description
enveloperequired	string	1 to 65536 characters

enveloperequired
Type
string
Description
1 to 65536 characters

RegistryAppApplication

RegistryAppApplication
Field	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
visibilityrequired	string	`internal` (staff tooling, key-only repository) or `public` (the public repository).one of "internal", "public"
appIdrequired	string, or null
displayNamerequired	string, or null
summaryrequired	string, or null
homepageUrlrequired	string, or null
docsUrlrequired	string, or null
channelsrequired	map of string
{key}	string
releaseCountrequired	integer
pendingCountrequired	integer
identitiesrequired	array of object
platformrequired	string	Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
identityrequired	string
pinnedVersionrequired	string
pinnedAtrequired	string, date-time
updatedByrequired	string, or null
updatedAtrequired	string, date-time, or null

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
visibilityrequired
Type
string
Description
internal (staff tooling, key-only repository) or public (the public repository).one of "internal", "public"
appIdrequired
Type
string, or null
Description
displayNamerequired
Type
string, or null
Description
summaryrequired
Type
string, or null
Description
homepageUrlrequired
Type
string, or null
Description
docsUrlrequired
Type
string, or null
Description
channelsrequired
Type
map of string
Description
{key}
Type
string
Description
releaseCountrequired
Type
integer
Description
pendingCountrequired
Type
integer
Description
identitiesrequired
Type
array of object
Description
platformrequired
Type
string
Description
Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
identityrequired
Type
string
Description
pinnedVersionrequired
Type
string
Description
pinnedAtrequired
Type
string, date-time
Description
updatedByrequired
Type
string, or null
Description
updatedAtrequired
Type
string, date-time, or null
Description

RegistryAppApplicationUpdate

RegistryAppApplicationUpdate
Field	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
visibility	string	`internal` (staff tooling, key-only repository) or `public` (the public repository).one of "internal", "public"
appId	string	up to 128 characters · matches ^[a-z][a-z0-9-](?:\.[a-z][a-z0-9-])+$
displayName	string, or null	1 to 80 characters
summary	string, or null	1 to 280 characters
homepageUrl	string, uri, or null	up to 512 characters
docsUrl	string, uri, or null	up to 512 characters

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
visibility
Type
string
Description
internal (staff tooling, key-only repository) or public (the public repository).one of "internal", "public"
appId
Type
string
Description
up to 128 characters · matches ^[a-z][a-z0-9-]*(?:\.[a-z][a-z0-9-]*)+$
displayName
Type
string, or null
Description
1 to 80 characters
summary
Type
string, or null
Description
1 to 280 characters
homepageUrl
Type
string, uri, or null
Description
up to 512 characters
docsUrl
Type
string, uri, or null
Description
up to 512 characters

RegistryAppFinding

RegistryAppFinding
Field	Type	Description
checkrequired	string
messagerequired	string

checkrequired
Type
string
Description
messagerequired
Type
string
Description

RegistryAppAsset

RegistryAppAsset
Field	Type	Description
platformrequired	string	Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired	string
archrequired	string
formatrequired	string
mediaTyperequired	string
digestrequired	string
sizerequired	integer
uploadedrequired	boolean
outcomerequired	string, or null	one of "valid", "invalid"
findingsrequired	array of RegistryAppFinding
checkrequired	string
messagerequired	string
notesrequired	array of RegistryAppFinding
checkrequired	string
messagerequired	string
identityrequired	string, or null
factsrequired	map of one of string, number, boolean, any, or null, any, or null
{key}	one of string, number, boolean, any, or null, any, or null

platformrequired
Type
string
Description
Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired
Type
string
Description
archrequired
Type
string
Description
formatrequired
Type
string
Description
mediaTyperequired
Type
string
Description
digestrequired
Type
string
Description
sizerequired
Type
integer
Description
uploadedrequired
Type
boolean
Description
outcomerequired
Type
string, or null
Description
one of "valid", "invalid"
findingsrequired
Type
array of RegistryAppFinding
Description
checkrequired
Type
string
Description
messagerequired
Type
string
Description
notesrequired
Type
array of RegistryAppFinding
Description
checkrequired
Type
string
Description
messagerequired
Type
string
Description
identityrequired
Type
string, or null
Description
factsrequired
Type
map of one of string, number, boolean, any, or null, any, or null
Description
{key}
Type
one of string, number, boolean, any, or null, any, or null
Description

RegistryAppRequirement

RegistryAppRequirement
Field	Type	Description
minOsVersion	string, or null	1 to 64 characters · matches ^[0-9A-Za-z][0-9A-Za-z._-]*$
notes	string, or null	up to 500 characters

minOsVersion
Type
string, or null
Description
1 to 64 characters · matches ^[0-9A-Za-z][0-9A-Za-z._-]*$
notes
Type
string, or null
Description
up to 500 characters

RegistryAppRelease

RegistryAppRelease
Field	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
statusrequired	string	one of "staging", "published"
reviewStaterequired	string	one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
assetsrequired	array of RegistryAppAsset
platformrequired	string	Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired	string
archrequired	string
formatrequired	string
mediaTyperequired	string
digestrequired	string
sizerequired	integer
uploadedrequired	boolean
outcomerequired	string, or null	one of "valid", "invalid"
findingsrequired	array of RegistryAppFinding
notesrequired	array of RegistryAppFinding
identityrequired	string, or null
factsrequired	map of one of string, number, boolean, any, or null, any, or null
{key}	one of string, number, boolean, any, or null, any, or null
notesrequired	string, or null
requirementsrequired	map of RegistryAppRequirement
{key}	RegistryAppRequirement
channelsrequired	array of string
reviewReasonrequired	string, or null
reviewedAtrequired	string, date-time, or null
revokeCoderequired	string, or null	Why a release was withdrawn.one of "security", "broken", "withdrawn"
revokeReasonrequired	string, or null
revokedAtrequired	string, date-time, or null
firstGenerationrequired	integer, or null

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
statusrequired
Type
string
Description
one of "staging", "published"
reviewStaterequired
Type
string
Description
one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
assetsrequired
Type
array of RegistryAppAsset
Description
platformrequired
Type
string
Description
Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired
Type
string
Description
archrequired
Type
string
Description
formatrequired
Type
string
Description
mediaTyperequired
Type
string
Description
digestrequired
Type
string
Description
sizerequired
Type
integer
Description
uploadedrequired
Type
boolean
Description
outcomerequired
Type
string, or null
Description
one of "valid", "invalid"
findingsrequired
Type
array of RegistryAppFinding
Description
notesrequired
Type
array of RegistryAppFinding
Description
identityrequired
Type
string, or null
Description
factsrequired
Type
map of one of string, number, boolean, any, or null, any, or null
Description
{key}
Type
one of string, number, boolean, any, or null, any, or null
Description
notesrequired
Type
string, or null
Description
requirementsrequired
Type
map of RegistryAppRequirement
Description
{key}
Type
RegistryAppRequirement
Description
channelsrequired
Type
array of string
Description
reviewReasonrequired
Type
string, or null
Description
reviewedAtrequired
Type
string, date-time, or null
Description
revokeCoderequired
Type
string, or null
Description
Why a release was withdrawn.one of "security", "broken", "withdrawn"
revokeReasonrequired
Type
string, or null
Description
revokedAtrequired
Type
string, date-time, or null
Description
firstGenerationrequired
Type
integer, or null
Description

RegistryAppAdminRelease

RegistryAppAdminRelease
Field	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
statusrequired	string	one of "staging", "published"
reviewStaterequired	string	one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
assetsrequired	array of RegistryAppAsset
platformrequired	string	Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired	string
archrequired	string
formatrequired	string
mediaTyperequired	string
digestrequired	string
sizerequired	integer
uploadedrequired	boolean
outcomerequired	string, or null	one of "valid", "invalid"
findingsrequired	array of RegistryAppFinding
notesrequired	array of RegistryAppFinding
identityrequired	string, or null
factsrequired	map of one of string, number, boolean, any, or null, any, or null
{key}	one of string, number, boolean, any, or null, any, or null
notesrequired	string, or null
requirementsrequired	map of RegistryAppRequirement
{key}	RegistryAppRequirement
channelsrequired	array of string
reviewReasonrequired	string, or null
reviewedAtrequired	string, date-time, or null
revokeCoderequired	string, or null	Why a release was withdrawn.one of "security", "broken", "withdrawn"
revokeReasonrequired	string, or null
revokedAtrequired	string, date-time, or null
firstGenerationrequired	integer, or null
visibilityrequired	string	`internal` (staff tooling, key-only repository) or `public` (the public repository).one of "internal", "public"
reviewedByrequired	string, or null
revokedByrequired	string, or null
createdAtrequired	string, date-time

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
statusrequired
Type
string
Description
one of "staging", "published"
reviewStaterequired
Type
string
Description
one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
assetsrequired
Type
array of RegistryAppAsset
Description
platformrequired
Type
string
Description
Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired
Type
string
Description
archrequired
Type
string
Description
formatrequired
Type
string
Description
mediaTyperequired
Type
string
Description
digestrequired
Type
string
Description
sizerequired
Type
integer
Description
uploadedrequired
Type
boolean
Description
outcomerequired
Type
string, or null
Description
one of "valid", "invalid"
findingsrequired
Type
array of RegistryAppFinding
Description
notesrequired
Type
array of RegistryAppFinding
Description
identityrequired
Type
string, or null
Description
factsrequired
Type
map of one of string, number, boolean, any, or null, any, or null
Description
{key}
Type
one of string, number, boolean, any, or null, any, or null
Description
notesrequired
Type
string, or null
Description
requirementsrequired
Type
map of RegistryAppRequirement
Description
{key}
Type
RegistryAppRequirement
Description
channelsrequired
Type
array of string
Description
reviewReasonrequired
Type
string, or null
Description
reviewedAtrequired
Type
string, date-time, or null
Description
revokeCoderequired
Type
string, or null
Description
Why a release was withdrawn.one of "security", "broken", "withdrawn"
revokeReasonrequired
Type
string, or null
Description
revokedAtrequired
Type
string, date-time, or null
Description
firstGenerationrequired
Type
integer, or null
Description
visibilityrequired
Type
string
Description
internal (staff tooling, key-only repository) or public (the public repository).one of "internal", "public"
reviewedByrequired
Type
string, or null
Description
revokedByrequired
Type
string, or null
Description
createdAtrequired
Type
string, date-time
Description

RegistryAppReleaseDecision

RegistryAppReleaseDecision
Field	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
statusrequired	string	one of "staging", "published"
reviewStaterequired	string	one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
assetsrequired	array of RegistryAppAsset
platformrequired	string	Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired	string
archrequired	string
formatrequired	string
mediaTyperequired	string
digestrequired	string
sizerequired	integer
uploadedrequired	boolean
outcomerequired	string, or null	one of "valid", "invalid"
findingsrequired	array of RegistryAppFinding
notesrequired	array of RegistryAppFinding
identityrequired	string, or null
factsrequired	map of one of string, number, boolean, any, or null, any, or null
{key}	one of string, number, boolean, any, or null, any, or null
notesrequired	string, or null
requirementsrequired	map of RegistryAppRequirement
{key}	RegistryAppRequirement
channelsrequired	array of string
reviewReasonrequired	string, or null
reviewedAtrequired	string, date-time, or null
revokeCoderequired	string, or null	Why a release was withdrawn.one of "security", "broken", "withdrawn"
revokeReasonrequired	string, or null
revokedAtrequired	string, date-time, or null
firstGenerationrequired	integer, or null
visibilityrequired	string	`internal` (staff tooling, key-only repository) or `public` (the public repository).one of "internal", "public"
reviewedByrequired	string, or null
revokedByrequired	string, or null
createdAtrequired	string, date-time
publicationrequired	one of object, object, any, or null

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
statusrequired
Type
string
Description
one of "staging", "published"
reviewStaterequired
Type
string
Description
one of "staging", "invalid", "pending", "approved", "rejected", "revoked"
assetsrequired
Type
array of RegistryAppAsset
Description
platformrequired
Type
string
Description
Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired
Type
string
Description
archrequired
Type
string
Description
formatrequired
Type
string
Description
mediaTyperequired
Type
string
Description
digestrequired
Type
string
Description
sizerequired
Type
integer
Description
uploadedrequired
Type
boolean
Description
outcomerequired
Type
string, or null
Description
one of "valid", "invalid"
findingsrequired
Type
array of RegistryAppFinding
Description
notesrequired
Type
array of RegistryAppFinding
Description
identityrequired
Type
string, or null
Description
factsrequired
Type
map of one of string, number, boolean, any, or null, any, or null
Description
{key}
Type
one of string, number, boolean, any, or null, any, or null
Description
notesrequired
Type
string, or null
Description
requirementsrequired
Type
map of RegistryAppRequirement
Description
{key}
Type
RegistryAppRequirement
Description
channelsrequired
Type
array of string
Description
reviewReasonrequired
Type
string, or null
Description
reviewedAtrequired
Type
string, date-time, or null
Description
revokeCoderequired
Type
string, or null
Description
Why a release was withdrawn.one of "security", "broken", "withdrawn"
revokeReasonrequired
Type
string, or null
Description
revokedAtrequired
Type
string, date-time, or null
Description
firstGenerationrequired
Type
integer, or null
Description
visibilityrequired
Type
string
Description
internal (staff tooling, key-only repository) or public (the public repository).one of "internal", "public"
reviewedByrequired
Type
string, or null
Description
revokedByrequired
Type
string, or null
Description
createdAtrequired
Type
string, date-time
Description
publicationrequired
Type
one of object, object, any, or null
Description

RegistryAppReleaseUpdate

RegistryAppReleaseUpdate
Field	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
reviewStaterequired	string	one of "approved", "rejected", "revoked"
reasonrequired	string	1 to 160 characters · matches ^[\x20-\x7e]+$
revokeCode	string	Why a release was withdrawn.one of "security", "broken", "withdrawn"

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
reviewStaterequired
Type
string
Description
one of "approved", "rejected", "revoked"
reasonrequired
Type
string
Description
1 to 160 characters · matches ^[\x20-\x7e]+$
revokeCode
Type
string
Description
Why a release was withdrawn.one of "security", "broken", "withdrawn"

RegistryAppChannelUpdate

RegistryAppChannelUpdate
Field	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
channelrequired	string	one of "stable", "beta", "canary"
versionrequired	string, or null	Package version, or an OCI tag.1 to 128 characters
reasonrequired	string	1 to 160 characters · matches ^[\x20-\x7e]+$
allowDowngrade	boolean

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
channelrequired
Type
string
Description
one of "stable", "beta", "canary"
versionrequired
Type
string, or null
Description
Package version, or an OCI tag.1 to 128 characters
reasonrequired
Type
string
Description
1 to 160 characters · matches ^[\x20-\x7e]+$
allowDowngrade
Type
boolean
Description

RegistryAppSnapshot

RegistryAppSnapshot
Field	Type	Description
repositoryrequired	string	one of "public", "internal"
generationrequired	integer
staterequired	string	one of "writing", "current", "superseded", "abandoned"
kindrequired	string	one of "publish", "refresh"
keysVersionrequired	integer
keyIdrequired	string
signedAtrequired	string, date-time
expiresAtrequired	string, date-time
payloadSha256required	string, or null
sizerequired	integer, or null
releaseCountrequired	integer
publishedByrequired	string

repositoryrequired
Type
string
Description
one of "public", "internal"
generationrequired
Type
integer
Description
staterequired
Type
string
Description
one of "writing", "current", "superseded", "abandoned"
kindrequired
Type
string
Description
one of "publish", "refresh"
keysVersionrequired
Type
integer
Description
keyIdrequired
Type
string
Description
signedAtrequired
Type
string, date-time
Description
expiresAtrequired
Type
string, date-time
Description
payloadSha256required
Type
string, or null
Description
sizerequired
Type
integer, or null
Description
releaseCountrequired
Type
integer
Description
publishedByrequired
Type
string
Description

RegistryAppSnapshotPreview

RegistryAppSnapshotPreview
Field	Type	Description
repositoryrequired	string	one of "public", "internal"
currentGenerationrequired	integer, or null
addedrequired	array of object
packagerequired	string
versionrequired	string
removedrequired	array of object
packagerequired	string
versionrequired	string
revokedrequired	array of object
packagerequired	string
versionrequired	string
channelsChangedrequired	array of object
packagerequired	string
channelrequired	string
fromrequired	string, or null
torequired	string, or null
applicationCountrequired	integer
releaseCountrequired	integer
unchangedrequired	boolean

repositoryrequired
Type
string
Description
one of "public", "internal"
currentGenerationrequired
Type
integer, or null
Description
addedrequired
Type
array of object
Description
packagerequired
Type
string
Description
versionrequired
Type
string
Description
removedrequired
Type
array of object
Description
packagerequired
Type
string
Description
versionrequired
Type
string
Description
revokedrequired
Type
array of object
Description
packagerequired
Type
string
Description
versionrequired
Type
string
Description
channelsChangedrequired
Type
array of object
Description
packagerequired
Type
string
Description
channelrequired
Type
string
Description
fromrequired
Type
string, or null
Description
torequired
Type
string, or null
Description
applicationCountrequired
Type
integer
Description
releaseCountrequired
Type
integer
Description
unchangedrequired
Type
boolean
Description

RegistryAppSnapshotPublish

RegistryAppSnapshotPublish
Field	Type	Description
repositoryrequired	string	one of "public", "internal"
expectGenerationrequired	integer, or null	at least 1

repositoryrequired
Type
string
Description
one of "public", "internal"
expectGenerationrequired
Type
integer, or null
Description
at least 1

RegistryAppKeysStatus

RegistryAppKeysStatus
Field	Type	Description
rootKeyIdsrequired	array of string
keysVersionrequired	integer, or null
expiresAtrequired	string, date-time, or null
onlineKeyIdsrequired	array of string
signingKeyIdrequired	string, or null
signingKeyListedrequired	boolean

rootKeyIdsrequired
Type
array of string
Description
keysVersionrequired
Type
integer, or null
Description
expiresAtrequired
Type
string, date-time, or null
Description
onlineKeyIdsrequired
Type
array of string
Description
signingKeyIdrequired
Type
string, or null
Description
signingKeyListedrequired
Type
boolean
Description

RegistryAppKeysUpdate

RegistryAppKeysUpdate
Field	Type	Description
enveloperequired	string	1 to 65536 characters

enveloperequired
Type
string
Description
1 to 65536 characters

RegistryCatalogueApplication

RegistryCatalogueApplication
Field	Type	Description
namerequired	string
appIdrequired	string, or null
displayNamerequired	string
summaryrequired	string, or null
homepageUrlrequired	string, or null
docsUrlrequired	string, or null
channelsrequired	map of string
{key}	string
platformsrequired	array of object
platformrequired	string	Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired	string
archrequired	string
formatrequired	string
labelrequired	string

namerequired
Type
string
Description
appIdrequired
Type
string, or null
Description
displayNamerequired
Type
string
Description
summaryrequired
Type
string, or null
Description
homepageUrlrequired
Type
string, or null
Description
docsUrlrequired
Type
string, or null
Description
channelsrequired
Type
map of string
Description
{key}
Type
string
Description
platformsrequired
Type
array of object
Description
platformrequired
Type
string
Description
Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired
Type
string
Description
archrequired
Type
string
Description
formatrequired
Type
string
Description
labelrequired
Type
string
Description

RegistryCatalogueRelease

RegistryCatalogueRelease
Field	Type	Description
versionrequired	string
publishedAtrequired	string, date-time, or null
notesrequired	string, or null
channelsrequired	array of string
revokedrequired	object, or null
coderequired	string	Why a release was withdrawn.one of "security", "broken", "withdrawn"
reasonrequired	string
revokedAtrequired	string, date-time
assetsrequired	array of object
platformrequired	string	Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired	string
archrequired	string
formatrequired	string
labelrequired	string
sizerequired	integer
sha256required	string
minOsVersionrequired	string, or null
requirementNotesrequired	string, or null
identityrequired	string, or null
filenamerequired	string
downloadUrlrequired	string, or null
signedInrequired	object, or null
generationrequired	integer
snapshotUrlrequired	string

versionrequired
Type
string
Description
publishedAtrequired
Type
string, date-time, or null
Description
notesrequired
Type
string, or null
Description
channelsrequired
Type
array of string
Description
revokedrequired
Type
object, or null
Description
coderequired
Type
string
Description
Why a release was withdrawn.one of "security", "broken", "withdrawn"
reasonrequired
Type
string
Description
revokedAtrequired
Type
string, date-time
Description
assetsrequired
Type
array of object
Description
platformrequired
Type
string
Description
Platform key: operating system, architecture and installer format.one of "windows-x86_64-msix", "windows-x86_64-exe", "debian-amd64-deb", "android-arm64-v8a-apk"
osrequired
Type
string
Description
archrequired
Type
string
Description
formatrequired
Type
string
Description
labelrequired
Type
string
Description
sizerequired
Type
integer
Description
sha256required
Type
string
Description
minOsVersionrequired
Type
string, or null
Description
requirementNotesrequired
Type
string, or null
Description
identityrequired
Type
string, or null
Description
filenamerequired
Type
string
Description
downloadUrlrequired
Type
string, or null
Description
signedInrequired
Type
object, or null
Description
generationrequired
Type
integer
Description
snapshotUrlrequired
Type
string
Description

RegistryPackage

RegistryPackage
Field	Type	Description
idrequired	string
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
scoperequired	string, or null	npm scope the package belongs to, where it has one.
visibilityrequired	string	Who may consume the package. Every v1 package is internal.one of "internal"
ownerrequired	string	The RSX principal that owns the package.1 to 128 characters
descriptionrequired	string, or null	What the package is, shown wherever the registry is browsed.
latestrequired	string, or null	Highest published version, or null when nothing is published yet.
versionCountrequired	integer
createdAtrequired	string, date-time
updatedAtrequired	string, date-time

idrequired
Type
string
Description
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
scoperequired
Type
string, or null
Description
npm scope the package belongs to, where it has one.
visibilityrequired
Type
string
Description
Who may consume the package. Every v1 package is internal.one of "internal"
ownerrequired
Type
string
Description
The RSX principal that owns the package.1 to 128 characters
descriptionrequired
Type
string, or null
Description
What the package is, shown wherever the registry is browsed.
latestrequired
Type
string, or null
Description
Highest published version, or null when nothing is published yet.
versionCountrequired
Type
integer
Description
createdAtrequired
Type
string, date-time
Description
updatedAtrequired
Type
string, date-time
Description

RegistryArtefact

RegistryArtefact
Field	Type	Description
idrequired	string
platformrequired	string, or null	Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired	string	Media type of the stored bytes.1 to 255 characters
digestrequired	string	SHA-256 content digest, as stored.
sizerequired	integer
storedrequired	boolean	Whether the bytes have arrived and matched the declared digest.
createdAtrequired	string, date-time

idrequired
Type
string
Description
platformrequired
Type
string, or null
Description
Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired
Type
string
Description
Media type of the stored bytes.1 to 255 characters
digestrequired
Type
string
Description
SHA-256 content digest, as stored.
sizerequired
Type
integer
Description
storedrequired
Type
boolean
Description
Whether the bytes have arrived and matched the declared digest.
createdAtrequired
Type
string, date-time
Description

RegistryVersion

RegistryVersion
Field	Type	Description
idrequired	string
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
statusrequired	string	Whether every declared artefact has arrived and been verified.one of "staging", "published"
digestrequired	string, or null	Digest of the release's primary artefact.
sizerequired	integer, or null	Total size of the release's artefacts in bytes.
artefactsrequired	array of RegistryArtefact
idrequired	string
platformrequired	string, or null	Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired	string	Media type of the stored bytes.1 to 255 characters
digestrequired	string	SHA-256 content digest, as stored.
sizerequired	integer
storedrequired	boolean	Whether the bytes have arrived and matched the declared digest.
createdAtrequired	string, date-time
createdAtrequired	string, date-time
publishedAtrequired	string, date-time, or null	When the last declared artefact arrived. Null while publication is incomplete.

idrequired
Type
string
Description
protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
statusrequired
Type
string
Description
Whether every declared artefact has arrived and been verified.one of "staging", "published"
digestrequired
Type
string, or null
Description
Digest of the release's primary artefact.
sizerequired
Type
integer, or null
Description
Total size of the release's artefacts in bytes.
artefactsrequired
Type
array of RegistryArtefact
Description
idrequired
Type
string
Description
platformrequired
Type
string, or null
Description
Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired
Type
string
Description
Media type of the stored bytes.1 to 255 characters
digestrequired
Type
string
Description
SHA-256 content digest, as stored.
sizerequired
Type
integer
Description
storedrequired
Type
boolean
Description
Whether the bytes have arrived and matched the declared digest.
createdAtrequired
Type
string, date-time
Description
createdAtrequired
Type
string, date-time
Description
publishedAtrequired
Type
string, date-time, or null
Description
When the last declared artefact arrived. Null while publication is incomplete.

RegistryResolvedManifest

RegistryResolvedManifest
Field	Type	Description
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
referencerequired	string
digestrequired	string
mediaTyperequired	string	Media type of the stored bytes.1 to 255 characters
sizerequired	integer
imagerequired	string

namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
referencerequired
Type
string
Description
digestrequired
Type
string
Description
mediaTyperequired
Type
string
Description
Media type of the stored bytes.1 to 255 characters
sizerequired
Type
integer
Description
imagerequired
Type
string
Description

RegistryBinaryArtefact

RegistryBinaryArtefact
Field	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
platformrequired	string, or null	Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired	string	Media type of the stored bytes.1 to 255 characters
digestrequired	string
sizerequired	integer
downloadrequired	string	Path to fetch the bytes from, using the same API key.

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
platformrequired
Type
string, or null
Description
Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired
Type
string
Description
Media type of the stored bytes.1 to 255 characters
digestrequired
Type
string
Description
sizerequired
Type
integer
Description
downloadrequired
Type
string
Description
Path to fetch the bytes from, using the same API key.

RegistryAuditEvent

RegistryAuditEvent
Field	Type	Description
idrequired	string
actorrequired	string
actionrequired	string	Dotted and past tense, matching the platform's other trails.1 to 64 characters
targetTyperequired	string	What the event was about.one of "package", "version", "snapshot", "keys"
targetIdrequired	string
targetLabelrequired	string, or null
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
atrequired	string, date-time
detailrequired	string, or null

idrequired
Type
string
Description
actorrequired
Type
string
Description
actionrequired
Type
string
Description
Dotted and past tense, matching the platform's other trails.1 to 64 characters
targetTyperequired
Type
string
Description
What the event was about.one of "package", "version", "snapshot", "keys"
targetIdrequired
Type
string
Description
targetLabelrequired
Type
string, or null
Description
protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
atrequired
Type
string, date-time
Description
detailrequired
Type
string, or null
Description

RegistryAppReleaseDetails

RegistryAppReleaseDetails
Field	Type	Description
packagerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
notes	string, or null	up to 20000 characters
requirements	object
windows-x86_64-msix	RegistryAppRequirement
windows-x86_64-exe	RegistryAppRequirement
debian-amd64-deb	RegistryAppRequirement
android-arm64-v8a-apk	RegistryAppRequirement

packagerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
notes
Type
string, or null
Description
up to 20000 characters
requirements
Type
object
Description
windows-x86_64-msix
Type
RegistryAppRequirement
Description
windows-x86_64-exe
Type
RegistryAppRequirement
Description
debian-amd64-deb
Type
RegistryAppRequirement
Description
android-arm64-v8a-apk
Type
RegistryAppRequirement
Description

RegistryAddPackage

RegistryAddPackage
Field	Type	Description
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
description	string	up to 512 characters

protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
description
Type
string
Description
up to 512 characters

RegistryUpdatePackage

RegistryUpdatePackage
Field	Type	Description
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
description	string, or null	up to 512 characters
owner	string	Transfer ownership. The current owner only.1 to 128 characters

protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
description
Type
string, or null
Description
up to 512 characters
owner
Type
string
Description
Transfer ownership. The current owner only.1 to 128 characters

RegistryRemovePackage

RegistryRemovePackage
Field	Type	Description
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters

protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters

RegistryArtefactDeclaration

RegistryArtefactDeclaration
Field	Type	Description
platform	string	Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired	string	Media type of the stored bytes.1 to 255 characters
digestrequired	string	SHA-256 content digest of the artefact bytes.
sizerequired	integer	Size of the artefact in bytes.at least 0

platform
Type
string
Description
Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired
Type
string
Description
Media type of the stored bytes.1 to 255 characters
digestrequired
Type
string
Description
SHA-256 content digest of the artefact bytes.
sizerequired
Type
integer
Description
Size of the artefact in bytes.at least 0

RegistryAddVersion

RegistryAddVersion
Field	Type	Description
protocolrequired	string	Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired	string	Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired	string	Package version, or an OCI tag.1 to 128 characters
artefactsrequired	array of RegistryArtefactDeclaration	1 to 64 items
platform	string	Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired	string	Media type of the stored bytes.1 to 255 characters
digestrequired	string	SHA-256 content digest of the artefact bytes.
sizerequired	integer	Size of the artefact in bytes.at least 0

protocolrequired
Type
string
Description
Distribution protocol the package is published under.one of "npm", "cargo", "binary", "oci", "native", "app"
namerequired
Type
string
Description
Package name, in the naming rules of its own ecosystem.1 to 255 characters
versionrequired
Type
string
Description
Package version, or an OCI tag.1 to 128 characters
artefactsrequired
Type
array of RegistryArtefactDeclaration
Description
1 to 64 items
platform
Type
string
Description
Platform identifier, for a release that ships more than one artefact.1 to 64 characters · matches ^[a-z0-9][a-z0-9._-]*$
mediaTyperequired
Type
string
Description
Media type of the stored bytes.1 to 255 characters
digestrequired
Type
string
Description
SHA-256 content digest of the artefact bytes.
sizerequired
Type
integer
Description
Size of the artefact in bytes.at least 0