Campus public platform API

This file is generated from crates/campus-sdk/platform_operations.json. The registry is the review boundary for stable developer-facing Campus primitives. Product-owned contracts remain in MCP and are intentionally absent.

Operation	CampusSDK facade	Plane	Authority	Confirmation	Meaning
access.grant	campus.access.grant	service	installation	none	Authorize a Campus user for this app.
access.list	campus.access.list	service	installation	none	List users authorized for this app.
access.revoke	campus.access.revoke	service	installation	none	Revoke a user's access to this app.
account.current	campus.account.current	shell	account.profile.read:*	none	Read the current public account identity.
account.identity	campus.account.identity	service	installation	none	Read the authenticated account identity bound to this installation.
activity.snapshot	campus.activity.snapshot	service	commerce.campus.read:*	none	Read this account's runtime activity and Campus billing history.
apps.create	campus.apps.create	shell	apps.create:self	trusted-shell	Create a user-owned application workspace.
apps.fork	campus.apps.fork	shell	apps.create:target-app	trusted-shell	Fork an app interface into a user-owned workspace.
apps.get	campus.apps.get	shell	apps.catalog.read:*	none	Resolve an app by ID or name.
apps.install	campus.apps.install	shell	apps.install:target-app	trusted-shell	Install an app with reviewed grants.
apps.list	campus.apps.list	shell	apps.catalog.read:*	none	List apps visible to this account.
apps.open	campus.apps.open	shell	apps.lifecycle:target-app	none	Open an installed app.
apps.pause	campus.apps.pause	shell	apps.lifecycle:target-app	none	Pause an installed workload.
apps.purchase	campus.apps.purchase	shell	apps.install:target-app	financial-intent	Purchase and install a Store app through the trusted payment flow.
apps.search	campus.apps.search	shell	apps.catalog.read:*	none	Search the public app catalog.
apps.start	campus.apps.start	shell	apps.lifecycle:target-app	none	Start an installed workload.
apps.stop	campus.apps.stop	shell	apps.lifecycle:target-app	none	Stop an installed workload.
apps.uninstall	campus.apps.uninstall	shell	apps.uninstall:target-app	trusted-shell	Uninstall an app while preserving data unless explicitly deleted.
apps.warm	campus.apps.warm	shell	apps.lifecycle:target-app	none	Warm an installed workload.
backend.acquireLease	campus.backend.acquireLease	service	installation	none	Keep admitted workload work alive for a bounded duration.
backend.fetch	campus.backend.fetch	workload	installation	none	Call this installation's private workload.
backend.openEventStream	campus.backend.openEventStream	workload	installation	none	Open a private workload event stream.
backend.openSocket	campus.backend.openSocket	workload	installation	none	Open a private workload WebSocket.
crypto.key	campus.crypto.key	shell	keyring.namespaces.use:namespace	none	Open a scoped browser key handle.
deliveries.acknowledge	campus.deliveries.acknowledge	service	deliveries.receive:channel	none	Acknowledge one addressed opaque envelope.
deliveries.cancel	campus.deliveries.cancel	service	deliveries.send:recipient-app:channel	none	Cancel one pending addressed opaque envelope.
deliveries.get	campus.deliveries.get	service	deliveries.receive:channel	none	Open one addressed opaque envelope for this exact installation.
deliveries.list	campus.deliveries.list	service	deliveries.receive:channel	none	List addressed opaque envelopes for this exact installation.
deliveries.send	campus.deliveries.send	service	deliveries.send:recipient-app:channel	none	Send a bounded opaque envelope to an exact account and app recipient.
distribution.publish	campus.distribution.publish	service	commerce.products.manage:*	trusted-shell	Build, package, price, and publish an immutable app release.
distribution.publishRelease	campus.distribution.publishRelease	service	commerce.products.manage:*	trusted-shell	Build and publish the next immutable release of an existing app product.
distribution.sources	campus.distribution.sources	service	commerce.products.manage:*	none	List user-owned apps eligible for distribution.
distribution.withdraw	campus.distribution.withdraw	service	commerce.products.manage:*	trusted-shell	Withdraw a product from new Store purchases without breaking installations.
domains.attachDns	campus.domains.attachDns	service	public-domains.manage:*	none	Record the provider DNS identity for a public domain binding.
domains.bind	campus.domains.bind	service	public-domains.manage:*	none	Bind an external hostname to an app with an approved public route.
domains.finalize	campus.domains.finalize	service	public-domains.manage:*	none	Finalize removal after provider DNS cleanup.
domains.refresh	campus.domains.refresh	service	public-domains.manage:*	none	Refresh provider and TLS status for a public domain binding.
domains.snapshot	campus.domains.snapshot	service	public-domains.manage:*	none	List account-owned public domain bindings and provider status.
domains.unbind	campus.domains.unbind	service	public-domains.manage:*	none	Begin removing an account-owned public domain binding.
files.create	campus.files.create	service	files.user.manage:self	none	Create a logical user file.
files.list	campus.files.list	service	files.user.manage:self	none	List logical user files.
files.read	campus.files.read	service	files.user.manage:self	none	Read an authorized logical user file.
files.write	campus.files.write	service	files.user.manage:self	none	Write an authorized logical user file.
intelligence.request	campus.intelligence.request	service	intelligence.use:model	none	Run inference within the installation's model and budget grants.
kv	campus.kv	shell	app-data.sync:namespace	none	Open isolated synchronized key-value storage.
mcp.call	campus.mcp.call	service	mcp.tools.call:qualified-tool	contract	Call a permission-filtered Campus MCP tool.
mcp.serveBrowser	campus.mcp.serveBrowser	shell	mcp.tools.serve:owner-tool	none	Serve an approved browser-owned MCP tool.
notifications.list	campus.notifications.list	service	notifications.read:topic	none	List authorized account notifications.
notifications.publish	campus.notifications.publish	service	notifications.publish:topic	none	Publish an account notification on an authorized topic.
payments.propose	campus.payments.propose	shell	wallet.payment.propose:address	financial-intent	Propose one exact payment for trusted approval.
permissions.request	campus.permissions.request	shell	installation	trusted-shell	Request a bounded change to this installation's grants.
permissions.revoke	campus.permissions.revoke	shell	installation	trusted-shell	Revoke one of this installation's grants.
ready	campus.ready	shell	installation	none	Report that the app interface is ready.
rendezvous.close	campus.rendezvous.close	service	rendezvous.use:namespace	none	Close a coordination session for both admitted peers.
rendezvous.create	campus.rendezvous.create	service	rendezvous.use:namespace	none	Create a TTL-bound coordination session with an exact account and app peer.
rendezvous.get	campus.rendezvous.get	service	rendezvous.use:namespace	none	Read one admitted TTL-bound coordination session.
rendezvous.list	campus.rendezvous.list	service	rendezvous.use:namespace	none	List TTL-bound coordination sessions for this exact installation.
rendezvous.messages	campus.rendezvous.messages	service	rendezvous.use:namespace	none	Read ordered opaque frames from a coordination session.
rendezvous.send	campus.rendezvous.send	service	rendezvous.use:namespace	none	Append one bounded opaque frame to a coordination session.
schedules.create	campus.schedules.create	shell	schedules.manage:*	trusted-shell	Create a schedule for an eligible app tool.
search.index	campus.search.index	service	search.index:self	none	Replace this app's private search entries.
search.query	campus.search.query	shell	search.query:*	none	Query the account search index.
settings.snapshot	campus.settings.snapshot	shell	settings.account-ui	none	Read account settings from a nondelegable settings surface.
shell.dismiss	campus.shell.dismiss	shell	installation	none	Dismiss the current bounded app surface.
speech.start	campus.speech.start	shell	media.transcription.use:self	browser-permission	Start microphone transcription in the visible app surface.