Registry API
Profiles
Publish and read home profiles: named lists of exact-pinned package refs.
Profiles use the same public-read model as packages: list, search and detail reads of public, approved profiles work without a token. Publishing needs one.
Operations
| Request | What it does |
|---|---|
| GET /api/profiles | List and search profiles |
| POST /api/profiles | Publish a profile version |
| GET /api/profiles/{name} | Get an unscoped profile |
| GET /api/profiles/{name}/{version} | Get one version of an unscoped profile |
| GET /api/profiles/{scope}/{name} | Get a scoped profile |
| GET /api/profiles/{scope}/{name}/{version} | Get one version of a scoped profile |
Operations are exactly those in the committed OpenAPI document (packages/workloom-api/openapi.json), which matches the route definitions; this site checks its list against both. Paths are under the API host. Public, approved packages and profiles can be read without a token; everything else needs one.