Upload a managed deployment source bundle

Streams one gzipped tar of authored source. The body is verified against the declared SHA-256 digest and rejected before storage on any traversal, link, device, duplicate-path, file-count or size violation. Identity is organization + environment + content hash, so re-uploading identical bytes returns the existing manifest.

Authentication

AuthorizationBearer

API key or Clerk session token

Query parameters

environmentenumRequired

Allowed values:

languageenumRequired

Allowed values:

digeststringRequiredformat: "^[0-9a-f]{64}$"

Request

This endpoint expects binary data of type application/gzip.

Response

Source manifest registered

compressedBytesinteger

dependencyLockenum

Allowed values:

environmentenum

Allowed values:

expandedBytesinteger

fileCountinteger

reusedboolean

sourceAssetIdstring

sourceHashstring

Errors

400

Bad Request Error

401

Unauthorized Error

402

Payment Required Error

403

Forbidden Error

404

Not Found Error

409

Conflict Error

412

Precondition Failed Error

422

Unprocessable Entity Error

429

Too Many Requests Error

500

Internal Server Error

503

Service Unavailable Error