App detail · Frame (c) · route /apps/:appId/settings

Settings & attributes

Edit the app's display, visibility, routing/entry and configuration attributes. The slug and built-in flag are immutable; the editor renders them read-only rather than pretending they are editable and 4xx-ing on save. Saves are a single PUT of the manifest.

Overview Settings & attributes Installations

Display name

Shown in the app menu and on cards. Changing this does not change the slug.

Slug

Immutable — the app's permanent identifier. Rejected by PUT if changed.

Icon

Drop an SVG/PNG, or choose a file · 512×512 recommended

Visibility

Governs who sees the app. Real access is enforced by Permit, not this flag.

Entry / remote URL

Module-federation remoteEntry, iframe URL, or standalone URL depending on integration.

Route / mount path

Configuration attributes

Unsaved changes

Contract. Save is PUT /api/v1/app-registry/apps/{slug} replacing the AppManifest; requires the apps:write scope. Slug and builtin are immutable — rendered read-only, and the server rejects a changed slug. Attributes are the manifest's config keys (menuLabel, chrome.menu, mode, …) edited as key/value rows. A validation failure returns 422 rendered inline on the offending field (never a toast that loses the form); a concurrent-edit 409 and a 403 denial are contract — see frame (f). A caller without apps:write sees this whole form read-only with no Save affordance.