d0fc0114da66
Resolve the current mablnet worker manifest for the calling Host's channel
Returns the signed release manifest the calling Host should run, after applying the channel's staged-rollout decision for this Host. The manifest body is an opaque, Ed25519-signed document (see manifest-format.md in link/mablnet/docs); the api stores and returns it without altering field values, so the consumer's JCS re-canonicalisation still verifies — see link/mablnet/docs/deployment/release-pipeline-api.md § Opaque signed documents. Rollout resolution (which version this Host receives) is computed server-side from the per-channel rollout state plus a stable per-Host bucket — see § Manifest resolution. Conditional refetch: callers send their last-known ETag as If-None-Match; the server returns 304 Not Modified (no body) when the resolved manifest is unchanged. The current ETag is mirrored in both the ETag header and the mabl-specific x-mabl-entity-version header.
Query parameters
Release channel to resolve against. The well-known channels are latest (newest main build — dev/non-prod) and stable (tag-promoted release — prod); ephemeral branch:<name> channels are also accepted. An operator-declared channel alias (see PUT /link/mablnet/channels/{channel}/alias) is followed transparently — e.g. a request for dev resolves to latest when that alias is set — so an older client sending a renamed channel keeps working.
Stable per-Host identifier used to bucket this Host within the channel's staged rollout. When omitted, the workspace id from the API key is used, which moves a whole workspace's Hosts together. See design doc § Bucketing identity.
Workspace owning the calling Host's tunnel. With label, identifies the Link Label (tenant) whose operator-set worker_release_override is applied before the channel's staged rollout — a tenant pin can redirect the channel and/or pin an exact version. Omit (or omit label) for callers with no tenant pin. See design doc § Per-tenant pin.
Link Label (tunnel name) the calling Host belongs to. Paired with workspace_id to resolve the tenant whose worker_release_override is consulted.
Headers
Last ETag the caller observed; server returns 304 when the resolved manifest is unchanged.
Response
Resolved manifest in body; current ETag in headers.