Deploy a bundle — fetch, verify, promote

Developing

POST

/ui-extensions/registry/{id}/deploy

Last modified:2026-08-19 13:50:03

OperationId:deployUiExtensionVersion

One idempotent call that publishes a build. The API fetches remote_entry_url, and: (1) IDENTICAL BYTES to the current pin → {unchanged: true}, nothing written — safe to call on every CI deploy. (2) Otherwise the bundle is verified (size caps, obfuscation signals, content rules, chunk SRI, CORS for cross-origin); rejected records the verdict and changes nothing live. (3) approved/flagged promotes: the SRI pin, the verdict snapshot, the active version pointer and the display version move together. version is API-owned — omitted, the patch component advances; supplied, it must be GREATER than current (major bumps / initial format). promoted: true means the write was ACCEPTED (replication is asynchronous); send synchronous: yes IN THE BODY to poll until it is observable and receive landed — where false means 'not yet observed', not 'failed'. Never send integrity_hash: the platform computes the pin from the bytes it fetched. Rate-limited per extension (10/min).

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Path Params

Body Params application/jsonRequired

Examples

Responses

🟢200OK

application/json

Verdict (or unchanged).

Bodyapplication/json

🟠400Bad Request

🟠401Unauthorized

🟠403Forbidden

🟠404Record Not Found

🟠409

🟠429

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/ui-extensions/registry//deploy' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{
    "remote_entry_url": "http://example.com",
    "source_map_url": "http://example.com",
    "version": "string",
    "synchronous": "yes"
}'

Response Example

200 - Example 1

{
    "version_id": "string",
    "version": "string",
    "status": "approved",
    "has_chunk_sri": "yes",
    "promoted": true,
    "unchanged": true,
    "landed": true,
    "report": {}
}

Modified at 2026-08-19 13:50:03

Re-judge stored versions against the current ruleset

Get Inboxes in Domain