Bind a completed upload session to a content record

POST 
/content/:id/attach-upload

Final step of the chunked upload pipeline. Stamps the session's storage_key, storage_provider, size_bytes and sha256 onto the content row and marks the session consumed, in one transaction. Idempotent for the same (session, content) pair. A private APK is rejected here unless its package name, version code, signing fingerprint and app label were already written via PUT /api/v1/content/{id}; a boot animation is rejected unless its bytes pass the archive checks Android's loader enforces silently on device; a boot logo is rejected unless it is a structurally valid MTK logo image; a row flagged is_wallpaper is rejected unless its bytes are a PNG, JPEG or WebP image.

Request

Responses

200

Bound; already_bound is true on an idempotent re-bind

400

Malformed UUID, bad body, missing private-APK metadata, or bytes the flagged content type cannot use

401

Enterprise ID not found in context

403

Content or session not found in this enterprise (never 404, so existence cannot be probed across tenants)

409

Session already bound to a different content row

412

Upload session has not completed; call POST /api/v1/uploads/{id}/complete first

500

Failed to attach upload to content

503

Upload service is not wired on this deployment