Sbom Service API Reference

FieldValue
Source specsbom-service/openapi/version-stream.v1.json
OpenAPI version3.1.1
API version1.0.0
Operations4
Path filterAll paths

Operations

POST /api/v1/sbom/version-stream/consumers/{consumerId}

Registers/resets a cross-database consumer of sbom.versions, or reports its validated durable epoch/sequence position so it participates in the producer retention floor.

PropertyValue
Operation IDRegisterSbomVersionStreamConsumer
TagsStellaOps.SbomService
AuthRequired
Request bodyapplication/json

Parameters:

NameInRequiredDescription
consumerIdpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json
400Bad Requestapplication/json
401Unauthorized-
403Forbidden-
409Conflictapplication/json

DELETE /api/v1/sbom/version-stream/consumers/{consumerId}

Removes a cross-database consumer from the sbom.versions retention floor.

PropertyValue
Operation IDUnregisterSbomVersionStreamConsumer
TagsStellaOps.SbomService
AuthRequired
Request body-

Parameters:

NameInRequiredDescription
consumerIdpathyes

Responses:

StatusDescriptionContent types
204No Content-
400Bad Requestapplication/json
401Unauthorized-
403Forbidden-
404Not Foundapplication/json

GET /api/v1/sbom/version-stream/events

Returns ordered P6 sbom.versions envelopes after afterSeq with the current epoch, head, retention horizon, and an explicit bootstrap signal for epoch or retention gaps.

PropertyValue
Operation IDReadSbomVersionStream
TagsStellaOps.SbomService
AuthRequired
Request body-

Parameters:

NameInRequiredDescription
afterSeqqueryno
limitqueryno
streamEpochqueryno

Responses:

StatusDescriptionContent types
200OKapplication/json
400Bad Requestapplication/json
401Unauthorized-
403Forbidden-

GET /api/v1/sbom/version-stream/snapshot

Returns a bounded UUID-keyset page of live ledger versions at a fixed P6 epoch/head fence. Continue with nextAfterVersionId plus the same streamEpoch/headSeq; rows missing an exact document digest, carrying null/empty/untrimmed closed-wire text, using an empty version/chain UUID, or carrying a nonpositive sequence are counted and withheld.

PropertyValue
Operation IDReadSbomVersionSnapshot
TagsStellaOps.SbomService
AuthRequired
Request body-

Parameters:

NameInRequiredDescription
afterVersionIdqueryno
headSeqqueryno
limitqueryno
streamEpochqueryno

Responses:

StatusDescriptionContent types
200OKapplication/json
400Bad Requestapplication/json
401Unauthorized-
403Forbidden-
409Conflictapplication/json