For AI agents: the complete documentation index is available at https://payhon.github.io/AppKernia/en-US/llms.txt, the full documentation bundle is available at https://payhon.github.io/AppKernia/en-US/llms-full.txt, and this page is available as Markdown at https://payhon.github.io/AppKernia/en-US/api/admin-core.md.
AppKernia

Admin core resource API

Use the OpenAPI YAML for exact schemas, permission codes, and status codes.

ResourceCore routesPurpose
Users/users, /users/{id}Query, create, update, enable/disable, unlock, reset, roles, sessions
Tenants/tenants, /tenants/{id}/membersTenant profile and member lifecycle
Organization/org/units, /org/positionsTree moves, positions, assignments
Roles/roles/{id}/permissions, /menusSeparate permissions, menus, and data scopes
Sessions/online-sessionsQuery and revoke authorized sessions

List and detail operations apply tenant and data-scope filters in the server and SQL layer.

App-scoped resources include /apps, /apps/{app_id}/users, App content, notices/messages, and mobile releases. State transitions use explicit command routes; clients do not write persistent status directly.

Platform areaPrefixSecurity focus
Files/filesRandom object keys, upload sessions, scan status, tenant isolation
Notifications/notification-templates, /notification-deliveriesTemplate variables, encrypted targets, retry classification
Jobs/job-handlers, /job-schedulesCompile-time handlers only, no arbitrary code
Configuration/configsEncrypted secrets, no plaintext in list responses
Dictionaries/dict-types, /dictionaries/{code}Backend-enforced extension policy
API clients/api-clientsSecret shown once, hash stored
Webhooks/webhooksHMAC, replay defense, SSRF-safe URLs
Audit/audit/operations, /audit/logins, /audit/security-eventsField redaction and immutable evidence
Operations/ops/health, /ops/runtime-summaryRuntime status and compile-time module catalog

GET /internal/v1/health/live checks the process. GET /internal/v1/health/ready returns 503 when a required dependency is unavailable.