At this level
cards.sunshine ยท 12- cards.sunshine.authAdmin permission-set
- cards.sunshine.authReview permission-set
- cards.sunshine.authScan permission-set not from the namespace authority
- cards.sunshine.card record A Sunshine Card's public details. The record key is the card's UID.
- cards.sunshine.cardAdmin record not from the namespace authority A card's secrets, kept in its creator's deck. The record key is the card's UID, as 14 upper-case hex characters.
- cards.sunshine.deck space A creator's private deck of Sunshine Cards, holding each card's keys and the drafts of sets they're proposing.
- cards.sunshine.draft record A proposed set of Sunshine Cards, kept in its creator's deck for chosen reviewers to see before any card is made. The deck's owner always sees all of it.
- cards.sunshine.getDraft query Shows a draft set to someone asked to review it. Called through the viewer's PDS (service auth). The viewer sees the cards meant for them; the rest are just their positions. A draft the viewer may see none of answers DraftNotFound, as a missing one does.
- cards.sunshine.listScans query Lists the scans of a Sunshine Card that this instance has signed, most recent (highest counter) first. A scan its scanner has since deleted is still listed.
- cards.sunshine.scan record not from the namespace authority Proof that this repo's owner scanned a Sunshine Card, signed by the instance that checked the tap. The record key is <creator DID>:<UID>:<counter>.
- cards.sunshine.set record A set of Sunshine Cards, in order, like 'Autumn Market 2026'. A set may include other accounts' cards. Listing a card exposes its record key, which today is its tag's UID.
- cards.sunshine.verify procedure Checks a tap of a Sunshine Card. Called through the scanner's PDS (service auth), it also returns a signed scan record for the caller to write into the scanner's repo.