Public license routes (add-on)

Ask whether a license key is good, the way a customer's own software does, and get back the status, the product, the seat counts, the two dates, the key's metadata and covers, every product and package slug the key is good for. This route is public and unauthenticated, because it answers software running on a customer's machine and the key itself is the credential. Suspended, revoked and expired are answers rather than errors: the body carries valid: false and names the status, and only active sets valid: true. Two things do refuse: a key nobody bought is 404 license_not_found, and a key that does not cover the product product names is 409 product_mismatch. Keys are matched on their letters and digits alone, so any spacing, case or separators work. Nothing about the entitlement changes, though the key's last-checked time is stamped.

Ask whether a key covers a release that came out at a given moment, which is the question an updater asks before it downloads. This route is public and unauthenticated; the key is the credential. released_at is the unix timestamp of the release being asked about, not today's date, and leaving it out answers 422 released_at_required. The boundary is inclusive, so a release put out on the last day of the window is covered. The updates window and the licence term are separate: after the window closes the key still validates as active and the software still runs, and only this check starts saying no. A key that is not usable at all is not entitled either.

Ask which store-hosted build a key is entitled to, with its version, its changelog, and each file's size, download address and sha256: checksum. This route is public and unauthenticated; the key is the credential. Use it when all that is known is the key; use check_updates when a release date is already in hand. A lapsed updates window is a 200 rather than a refusal: the key still owns what shipped inside its window, so release is the newest build it is entitled to, and release is null only when there is genuinely nothing. status and updates_until come back either way. Unpublished releases are never listed. The download addresses carry no key, and fetching the bytes is not offered as a tool.

Take a seat on a license key for one installation. key and instance are required, and instance is whatever uniquely and stably identifies the installation to you: a machine id, the site URL, a container id. It is lower-cased and whitespace-collapsed, so one machine reporting itself two ways does not cost two seats. label is free text shown to the merchant and the customer, and is never matched on.

Give a seat back. key and instance are both required, and the answer is {deactivated, seats}. Idempotent by design: releasing an instance that holds no seat answers 200 with deactivated: false rather than an error, because an uninstaller retrying after a dropped connection has to be told the seat is free.

The license file itself, with Content-Disposition: attachment and the content type the merchant chose. Takes key and n for which file, 0 by default. Files are generated from the product template and this key rather than read off disk, so a certificate downloaded a year later reflects the licence as it stands then. No file at that position is a 404 with file_not_found.