developers.letbuyy.store

Build apps, themes, and automations on the real LetBuyy platform.

The developer portal is a docs-first workbench for the current `/v1` gateway, app OAuth, lifecycle webhooks, JSON-contract themes, and partner dashboard contracts.

POST /v1/app-store/apps/:id/oauth/authorize
{
  "store_id": "site_uuid",
  "redirect_uri": "https://partner.example/oauth/callback",
  "scopes": ["read_products"],
  "state": "opaque-csrf-state",
  "webhook_url": "https://partner.example/webhooks/letbuyy"
}

API reference

Curated from the Hono gateway routes, schemas, auth middleware, and query-cost rate limiter.

Open

OAuth and webhooks

Authorization-code install, token exchange, app bridge tokens, HMAC signatures, and compliance webhook topics.

Open

Theme and app SDK starts

JSON-contract theme bundles, app manifests, extensions, scopes, app blocks, and honest SDK/CLI gaps.

Open

Dashboard shell

Developer apps, themes, API keys, installs, analytics, and earnings surfaced as real contracts or backend skips.

Open
Contract status

Truth source, not aspirational docs

Every page in this portal is backed by the tracked gateway, webhook service, auth-core, app-engine, or theme-engine source. Missing data and tooling are visible as skips.

Gateway

/v1 Hono API

OAuth

Authorization code + token exchange

Webhooks

HMAC signed app lifecycle events

services/api-gateway/src/index.tsservices/api-gateway/src/routes/app-store.tsservices/api-gateway/src/routes/themes.tsservices/api-gateway/src/middleware/rateLimit.tsservices/webhook-service/src/app-lifecycle-dispatch.tspackages/auth-core/src/index.tspackages/app-engine/src/index.tspackages/theme-engine/src/theme-bundle.ts
Build path

Ship against stable contracts first

The active path is marketplace app registration, scoped install OAuth, lifecycle webhooks, theme package upload, and dashboard visibility. SDK and backend gaps are marked before they surprise a partner.

Live contract

App installation

Authorize a published marketplace app, persist an active installation, mint a short-lived authorization code, then exchange it for a scoped app access token.

SKIP - NEEDS SDK/CLI

Local scaffolding CLI

No active `@letbuyy/cli`, app SDK package, theme CLI, or `create-letbuyy` package exists yet. The portal documents the contract and keeps CLI commands planned.