Uploads a ZIP produced by air-gap export, verifies the DSSE envelope, and recreates the bundle (origin RECEIVED) via OPEN → UPLOAD → CLOSE. Create and the optional path-mapping copy are synchronous. A copy failure fails the request instead of returning success.

Multipart form: required file part (raw ZIP) and optional options part (JSON object, max 1048576 bytes). An omitted, blank, or {} options part defaults to mode=path_mapping. The options part is parsed as JSON regardless of its declared Content-Type (typically text/plain).

options.mode: path_mapping (default) or unpromoted. For path_mapping, path_mappings is optional. When supplied, each artifact is copied using the given input regex and output path template. When omitted, each artifact is restored to the repository it was originally exported from. On Edge, only mode=path_mapping is allowed, project must be default, and path_mappings may not target repositories outside the default project.

Security: Requires Admin. Requires Write permission on the target Release Bundle path. Allowed on Edge.