update

docs/client-api.md

@@ -11,7 +11,9 @@ credentials.
 {
   "code": "TAPM-ABCDE-FGHIJ",
   "host_fingerprint": "sha256-of-the-host-machine-id",
-  "hostname": "pve01"
+  "hostname": "pve01",
+  "requested_action": "install-rmm",
+  "requested_package": ""
 }
 ```
 
@@ -29,6 +31,11 @@ Successful response:
       "sha256": "64-lowercase-hexadecimal-characters",
       "download_url": "https://tapm.scity.us/api/v1/packages/sentinelone-linux"
     }
+  ],
+  "actions": [
+    "install-rmm",
+    "install-acronis",
+    "install-screenconnect"
   ]
 }
 ```
@@ -36,6 +43,16 @@ Successful response:
 The first exchange enrolls that host against the authorization. Reusing the
 same code and host fingerprint does not consume another host slot. A different
 fingerprint consumes one slot until the configured limit is reached.
+When `requested_action` or `requested_package` is present, the broker validates
+that entitlement before enrolling the host. Older clients may omit both fields,
+but current clients should always identify what they intend to use.
+
+An installer must proceed only when its required package slug or action slug is
+present in this response. The current action slugs are:
+
+- `install-rmm`
+- `install-acronis`
+- `install-screenconnect`
 
 ## Download a package