Skip to main content
POST
cURL

Authorizations

Authorization
string
header
required

Better Auth OAuth 2.1 authorization-code/device grants. Access tokens are exact-resource bound; the Portal BFF verifies them and delegates a downscoped internal bearer.

Body

application/json

Build request, explicit stage input, or a complete portable Build envelope depending on the endpoint.

Response

Portable chain-specific Build or commit result

version
any
required
status
enum<string>
required
Available options:
staged,
simulated
actions
array
required
origin
object
required

App, skills, and Catalog operations that assembled the actions.

expiresAt
integer
required

Unix timestamp after which commit is rejected.

digest
string
required
Pattern: ^sha256:[0-9a-f]{64}$
attestation
string
required

Server authentication of the Build, its owner, and app scope.

simulation
object
summary
any
Last modified on September 24, 2026