Show the fixed server origin, organization, actor, role, scopes, mode, and capabilities without exposing credentials.

Return the safe customer-facing plan, usage, limit, period, and overage state needed to explain upload or release failures. Provider IDs are excluded.

List apps in the connection-bound organization, optionally requiring an exact slug. Never guesses an app when the slug is absent.

Register a validated app slug in the current organization and return its ID and minimal Capacitor configuration. Does not edit local files.

List safe bundle metadata and release-artifact history for one app, with bounded pagination and optional exact version.

Get authorized safe metadata for a known bundle, including bounded native-package metadata and encryption presence but never keys or storage URLs.

Delete a bundle only when it is absent from all release history. The exact app and bundle IDs are required and the operation is audited.

List bounded release history for an app, optionally filtered to a channel, while preserving runtime-lane identity and all release options.

Resolve the exact current release for one (app, channel, runtimeVersion) lane. Returns null rather than selecting another lane.

Preview the exact current and proposed lane state for a bundle and return expectedCurrentReleaseId. Makes no change.

Publish a reviewed bundle to an exact lane. Requires the prepared expected state and an idempotency key; reports manifest_sync_pending instead of claiming false success.

Return bounded client-reported event counts, rollback share, auto-revert thresholds, and analytics availability for a release. Counts are events, not unique devices, installations, or adoption.

List a bounded filtered rollout timeline. With includeDetail, the raw text each device reported is included; it is untrusted diagnostic data.

List bounded organization audit activity for an owner or admin. Operational organization keys and member-role users cannot read it.

Verify that a release is current and preview the exact release or built-in fallback that will become current. Makes no change.

Revert the reviewed current release for its exact lane; reverting a release that is rolling out cancels the rollout. Requires expected state and an idempotency key and reports pending manifest synchronization truthfully.

Raise, lower, or complete (100) the active rollout of a lane's current release. Requires the reviewed current percentage and an idempotency key. To cancel a rollout, revert the release instead.

Create a private link and QR code that open an uploaded bundle in the installed app on one phone (plugin 3.2+ with preview links enabled) until the tester exits or the link expires. Nothing is released and no other device is affected. Share the returned url.

Revoke a preview link. Phones on it return to their normal release on their next update check.

Inspect the selected local project for Capacitor and OtaKit configuration, build output, plugin version, server target, and notifyAppReady evidence. Does not return source contents.

Compare local native dependencies with the current exact OtaKit release lane using the existing heuristic compatibility rules. Returns unknowns explicitly.

Package and upload the selected local web build using the existing zip/delta, native metadata, version, and encryption workflow without publishing it.

Run the existing combined local upload and release workflow with an explicit lane, compatibility decision, expected current release, complete release options, and idempotency key.