At this level
social.colibri · 15- social.colibri.approval record
- social.colibri.category record A category belongs to a community and contains multiple channels on Colibri.
- social.colibri.channel record A channel that belongs to a category on Colibri.
- social.colibri.community record A community, or "server", is where users join to interact with each other on Colibri. Singleton record on the community DID's repo.
- social.colibri.member record A community-side member record granting a user roles within the community. Lives on the community repo and is written when an admission is finalized.
- social.colibri.membership record A declaration that a user would like to be part of a certain community.
- social.colibri.message record A message sent in a channel on Colibri.
- social.colibri.moderation record A moderation event scoped to the community that owns this repo. Acts as an append-only audit log; current state is derived from the action history per subject.
- social.colibri.permissionAccount permission-set
- social.colibri.permissionCommunity permission-set
- social.colibri.permissionMessaging permission-set
- social.colibri.permissionNotification permission-set
- social.colibri.permissionPush permission-set
- social.colibri.reaction record A reaction on a Colibri message.
- social.colibri.role record A named bundle of permissions assignable to community members. Lives on the community repo.
- social.colibri.actor.data record The main actor data used in Colibri
- social.colibri.actor.defs defs The profile and presence data for a Colibri actor.
- social.colibri.actor.deleteAccount procedure Deletes everything the AppView holds for the authenticated user.
- social.colibri.actor.getData query Resolves an identifier (DID or handle) to its hydrated Colibri actor data.
- social.colibri.actor.getDeletionStatus query Reports whether the authenticated user's Colibri data can be deleted, and how much data deletion would remove.
- social.colibri.actor.getNotificationPreference query Returns the authenticated user's notification level, defaulting to 'all' when they haven't set one.
- social.colibri.actor.listCommunities query Lists the communities the authenticated user is a member of, in their preferred sidebar order.
- social.colibri.actor.listMutes query Lists the subjects the authenticated user has muted.
- social.colibri.actor.plate record A Colibri name plate used to decorate member rows.
- social.colibri.actor.profile record A Colibri-specific user profile. Singleton record on the user's own repo, kept separate from app.bsky.actor.profile so Colibri never needs write access to the Bluesky record.
- social.colibri.actor.setState procedure Sets the authenticated user's online presence state.
- social.colibri.beta.actor.block record A blocked user. One record per block, so unblocking is a delete. The block is private: it stops notifications from the blocked user and collapses their messages for the blocker only, and the blocked user is never told.
- social.colibri.beta.actor.clientPreferences record Client settings that follow the user across devices. Every field is optional and a client applies its own default for an absent one.
- social.colibri.beta.actor.composerState record Emoji usage, skin tone and recent GIFs, kept apart from social.colibri.beta.actor.clientPreferences because it changes with every message.
- social.colibri.beta.actor.defs defs Something the user is doing right now, read from another service they publish to. A client renders it beside their presence.
- social.colibri.beta.actor.deleteAccount procedure Erases the requesting user's Colibri data held by this AppView. This does not touch the user's repos, which only they control.
- social.colibri.beta.actor.getDeletionStatus query Gets what would happen if the requesting user deleted their account.
- social.colibri.beta.actor.getPreferences query Gets the requesting user's own settings, as the AppView currently holds them.
- social.colibri.beta.actor.getProfile query Gets a user's profile.
- social.colibri.beta.actor.grantSpaceAccess procedure Hands the AppView access to one of the requesting user's personal spaces. The client mints a delegation token on its own PDS for the space and passes it here, because a delegation token is single-use and short-lived and the AppView has no OAuth session of its own. The AppView exchanges the token for a space credential and syncs the space.
- social.colibri.beta.actor.listCommunities query Gets the requesting user's communities, in their preferred order.
- social.colibri.beta.actor.mute record A muted subject. One record per mute, so unmuting is a delete rather than a rewrite of a list.
- social.colibri.beta.actor.preferences space A user's own Colibri settings, mutes, blocks and read state.
- social.colibri.beta.actor.profile record A Colibri profile. A public record on the user's own repo, kept separate from app.bsky.actor.profile so Colibri never needs write access to the Bluesky record.
- social.colibri.beta.actor.putBlocks procedure Pushes the requesting user's block list to the AppView, so it takes effect immediately instead of waiting for a sync notification. The client writes the underlying block records to its own personal space first, then calls this. The list replaces the AppView's whole copy.
- social.colibri.beta.actor.putMutes procedure Pushes the requesting user's mute list and list of left threads to the AppView, so they take effect immediately instead of waiting for a sync notification. The client writes the underlying mute records to its own personal space first, then calls this. Each list the request carries replaces the AppView's whole copy of that list.
- social.colibri.beta.actor.putSettings procedure Pushes the requesting user's social.colibri.beta.actor.settings record to the AppView, so it takes effect immediately instead of waiting for a sync notification. The client writes the record to its own personal space first, then calls this. An absent field leaves the current value unchanged.
- social.colibri.beta.actor.putSpaceModeration procedure Pushes one of the requesting user's social.colibri.beta.actor.spaceModeration records to the AppView, so it takes effect immediately instead of waiting for a sync notification. The client writes or deletes the record in its own personal space first, then calls this.
- social.colibri.beta.actor.putSpaceNotification procedure Pushes one of the requesting user's social.colibri.beta.actor.spaceNotification records to the AppView, so it takes effect immediately instead of waiting for a sync notification. The client writes or deletes the record in its own personal space first, then calls this.
- social.colibri.beta.actor.setStatus procedure Sets the requesting user's off-protocol presence. An absent field leaves the current value unchanged.
- social.colibri.beta.actor.settings record A user's Colibri settings.
- social.colibri.beta.actor.spaceModeration record Moderation view options for one community, overriding the ones in social.colibri.beta.actor.clientPreferences. The record key is the community's DID. Deleting the record returns the community to the global options.
- social.colibri.beta.actor.spaceNotification record A notification level for one community, overriding the level in social.colibri.beta.actor.settings. The record key is the community's DID. Deleting the record returns the community to the global level.
- social.colibri.beta.blob.get query Serves a blob from a permissioned space through the AppView, which holds the space credential the client does not. Every byte is verified against the CID before it is served, and the content type is sniffed rather than trusted. Supports HTTP range requests.
- social.colibri.beta.bridge.addReaction procedure Adds a reaction from someone on another service to a message in a linked channel. The community writes the reaction, attributed to that person.
- social.colibri.beta.bridge.createPairing procedure Starts pairing a bridge with a community. Called by the bridge, which shows the returned code to an admin on the other service. A Colibri admin then redeems the code, which proves both sides agreed.
- social.colibri.beta.bridge.createThread procedure Opens a thread beside a linked channel for someone on another service. The community writes the thread, attributed to that person.
- social.colibri.beta.bridge.defs defs Who wrote a record on another service. The community writes every bridged record, and the AppView honours this attribution only on records the community itself wrote.
- social.colibri.beta.bridge.deleteMessage procedure Deletes a message the calling bridge posted.
- social.colibri.beta.bridge.deleteThread procedure Deletes a thread the calling bridge opened, along with its space.
- social.colibri.beta.bridge.editMessage procedure Replaces the text of a message the calling bridge posted.
- social.colibri.beta.bridge.getConfiguration query Lists every registration held by the calling bridge, with its linked channels. A bridge calls this at startup and whenever a registration change reaches it.
- social.colibri.beta.bridge.getPairing query Describes a pending pairing code so an admin can see which bridge they are about to connect.
- social.colibri.beta.bridge.hideMessage procedure Hides a Colibri member's message after a moderator removed its copy on the other service. The community applies a hidden label to the message. Works only when an admin has turned on moderation mirroring for the registration.
- social.colibri.beta.bridge.importMessages procedure Imports earlier messages from someone on another service into a linked channel or a thread beside it, after an admin asked for a history import. The community writes each message at its original time, and clients see them only when they load history.
- social.colibri.beta.bridge.leave procedure Disconnects the calling bridge from a community and deletes its registration, for when the remote space removed the bridge. Messages it already relayed stay.
- social.colibri.beta.bridge.listRegistrations query Lists the bridges connected to a community.
- social.colibri.beta.bridge.listRemoteRooms query Lists the rooms a bridge reported on the other service, for linking them to channels.
- social.colibri.beta.bridge.postMessage procedure Posts a message from someone on another service into a linked channel. The community writes the message, attributed to that person.
- social.colibri.beta.bridge.putRemoteRooms procedure Replaces the list of rooms the calling bridge can see on the other service, offered to admins when linking channels.
- social.colibri.beta.bridge.redeemPairing procedure Connects a bridge to a community by redeeming its pairing code. Writes a registration with no linked channels.
- social.colibri.beta.bridge.registration record A bridge the community has paired with. Lives in the community's configuration space, so every member can see which bridges are connected and which channels they relay. Written only by the community.
- social.colibri.beta.bridge.removeReaction procedure Removes a reaction the calling bridge added.
- social.colibri.beta.bridge.replaceAvatar procedure Swaps the avatar on every message and thread attributed to one remote author of this registration, so the previous avatar blob is no longer referenced.
- social.colibri.beta.bridge.reportBackfill procedure Reports how far a history import has got, so admins can follow it.
- social.colibri.beta.bridge.revoke procedure Disconnects a bridge from a community and deletes its registration. Messages it already relayed stay.
- social.colibri.beta.bridge.update procedure Changes which channels a bridge relays, or pauses and resumes it. Omitted fields stay as they are.
- social.colibri.beta.bridge.updateThread procedure Renames a thread the calling bridge opened.
- social.colibri.beta.bridge.uploadBlob procedure Uploads a file to the community's repo for use in a bridged message or as a bridged author's avatar.
- social.colibri.beta.category record A named group of channels within a community.
- social.colibri.beta.category.create procedure Creates a category in a community.
- social.colibri.channel.create procedure Creates a channel in a category of a community.
- social.colibri.channel.defs defs A file attached to a message.
- social.colibri.channel.delete procedure Deletes a channel.
- social.colibri.channel.getChannelView query Returns the initial view of a channel: recent messages, the read cursor, and unseen notifications.
- social.colibri.channel.getReadCursor query Returns the authenticated user's read cursor for a channel.
- social.colibri.channel.listMessages query Lists messages in a channel, newest first, paginated.
- social.colibri.channel.listReactions query Lists the aggregated reactions on a message.
- social.colibri.channel.listUnreadStatus query Lists the unread status of every channel in a community for the authenticated user.
- social.colibri.channel.read record A read cursor for a Colibri channel, indicating the last read message by a user.
- social.colibri.channel.update procedure Updates a channel's settings.
- social.colibri.community.approveMembership procedure not from the namespace authority Approves a pending membership application, minting the member record.
- social.colibri.community.banUser procedure not from the namespace authority Bans a user from a community.
- social.colibri.community.blockMessage procedure not from the namespace authority Hides (moderates) a message within a community.
- social.colibri.community.create procedure not from the namespace authority Creates a community, bootstrapping its DID repo with a default category, channel, owner role, and member record.
- social.colibri.community.createInvitation procedure not from the namespace authority Creates an invitation code for a community.
- social.colibri.community.defs defs not from the namespace authority A pending or dismissed membership application.
- social.colibri.community.delete procedure not from the namespace authority Deletes a community.
- social.colibri.community.deleteInvitation procedure not from the namespace authority Deletes an invitation code.
- social.colibri.community.dismissApplication procedure not from the namespace authority Dismisses a membership application without approving it.
- social.colibri.community.getData query not from the namespace authority Returns the full state of a community: metadata, categories, channels, roles, and members.
- social.colibri.community.getInvitation query not from the namespace authority Resolves an invitation code to its community, hydrated with the community's public details for the invite accept screen.
- social.colibri.community.kick procedure not from the namespace authority Kicks a member from a community by member record.
- social.colibri.community.kickUser procedure not from the namespace authority Kicks a user from a community by DID or handle.
- social.colibri.community.leave procedure not from the namespace authority Leaves a community, removing the authenticated user's membership.
- social.colibri.community.listApplications query not from the namespace authority Lists pending and dismissed membership applications for a community.
- social.colibri.community.listBannedUsers query not from the namespace authority Lists the banned users of a community.
- social.colibri.community.listCategories query not from the namespace authority Lists the categories of a community.
- social.colibri.community.listChannels query not from the namespace authority Lists the channels of a community.
- social.colibri.community.listInvitations procedure not from the namespace authority Lists the active invitations of a community.
- social.colibri.community.listMembers query not from the namespace authority Lists the members of a community.
- social.colibri.community.listRoles query not from the namespace authority Lists the roles of a community.
- social.colibri.community.migrate procedure not from the namespace authority Migrates a source record into a fresh community, cloning its structure and importing its members. The 'kind' discriminator selects the migration; today only legacy communities are supported, but the endpoint is designed to host future migrations. Provisioning mirrors community.create (managed when no PDS credentials are supplied, bring-your-own otherwise).
- social.colibri.community.registerCredentials procedure not from the namespace authority Registers bring-your-own PDS credentials for a community DID.
- social.colibri.community.reorderCategories procedure not from the namespace authority Reorders the categories within a community.
- social.colibri.community.reorderChannels procedure not from the namespace authority Reorders the channels within a category.
- social.colibri.community.setMemberRoles procedure not from the namespace authority Replaces the set of roles assigned to a member.
- social.colibri.community.suppressMessageEmbeds procedure not from the namespace authority Suppresses link previews on a message within a community by writing a suppressEmbeds moderation record. Does not touch the author's own suppression, which only the author may change.
- social.colibri.community.unbanUser procedure not from the namespace authority Lifts a ban on a user.
- social.colibri.community.undismissApplication procedure not from the namespace authority Restores a previously dismissed membership application.
- social.colibri.community.unsuppressMessageEmbeds procedure not from the namespace authority Restores link previews a moderator previously suppressed. Cannot restore previews the author suppressed themselves.
- social.colibri.community.update procedure not from the namespace authority Updates a community's metadata and optionally its picture and banner.
- social.colibri.embed.defs defs not from the namespace authority An image referenced by link metadata.
- social.colibri.embed.getImage query not from the namespace authority Proxies and returns an external image, guarding against SSRF.
- social.colibri.embed.getMetadata query not from the namespace authority Fetches Open Graph-style link preview metadata for a URL.
- social.colibri.embed.gifCategories query not from the namespace authority Lists GIF categories for the picker.
- social.colibri.embed.searchGifs query not from the namespace authority Searches GIFs by query.
- social.colibri.embed.trendingGifs query not from the namespace authority Returns trending GIFs.
- social.colibri.labeler.attestation record not from the namespace authority Published by a labeler to attest that a subject account proved control of an account on an external funding platform. This is what lets the labeler issue supporter badges without a maintainer in the loop, and it stands in for a private mapping table: the attestation is public, auditable, and replicated like any other record. The record key is the subject DID, so one subject resolves with a single `getRecord`. Holding an attestation is not itself a badge, the labeler still issues ordinary `com.at
- social.colibri.labeler.linkExternalAccount procedure not from the namespace authority Starts linking the calling account to an account on an external funding platform, so the labeler can issue supporter badges automatically. Returns the platform's authorization URL, which the client opens in a browser. The caller's identity comes from service auth (aud = the labeler's did with the `#atproto_labeler` fragment, lxm = this method), and the returned URL carries a signed, short-lived state token binding the flow to that DID. On success the labeler publishes a `social.colibri.labeler.a
- social.colibri.labeler.service record not from the namespace authority Declares that this account operates a Colibri labeler and describes the badges it issues. The Colibri equivalent of `app.bsky.labeler.service`. Labels themselves stay standard `com.atproto.label` labels, served from the `#atproto_labeler` service endpoint in this account's DID document.
- social.colibri.labeler.unlinkExternalAccount procedure not from the namespace authority Removes the link between the calling account and an external funding platform. Deletes the `social.colibri.labeler.attestation` record and negates any badge the link was the basis for. Authorized the same way as `social.colibri.labeler.linkExternalAccount`, so an account can only unlink itself.
- social.colibri.notification.defs defs not from the namespace authority The message a notification refers to.
- social.colibri.notification.getUnreadCount query not from the namespace authority Returns the count of unread notifications.
- social.colibri.notification.getUnseen query not from the namespace authority Returns unseen notifications for a specific channel.
- social.colibri.notification.listNotifications query not from the namespace authority Lists the authenticated user's notifications, paginated.
- social.colibri.notification.registerPush procedure not from the namespace authority Registers a push subscription (Web Push or FCM) for the authenticated user.
- social.colibri.notification.unregisterPush procedure not from the namespace authority Removes a push subscription.
- social.colibri.notification.updateSeen procedure not from the namespace authority Marks all notifications up to a timestamp as seen.
- social.colibri.notification.updateSeenForMessage procedure not from the namespace authority Marks notifications for a specific message as seen.
- social.colibri.sync.sendHum procedure not from the namespace authority Informs this AppView of an off-protocol event that occurred on a peer AppView. Requires inter-service auth: a JWT signed by the caller's AppView signing key, aud = this AppView's did:web, lxm = social.colibri.sync.sendHum. The receiver drops the Hum unless the JWT issuer equals both the envelope `origin` and the `subject`'s declared presenceService.
- social.colibri.sync.subscribeEvents subscription not from the namespace authority Opens a WebSocket stream that transmits relevant events for the authenticated user.
- social.colibri.sync.subscribeHums subscription not from the namespace authority Egress-only WebSocket stream of Hums this AppView is relaying. Peers subscribe to receive off-protocol events for shared communities, optionally narrowing to declared `communities` (repeated query param). Requires inter-service auth (subprotocol-carried, as with subscribeEvents). Clients cannot send messages on this stream.
- social.colibri.voice.moderate procedure not from the namespace authority Moderates a member's participation in a voice channel: server-mute, server-deafen, or force-disconnect. Requires the `voice.moderate` community permission and the caller must outrank the target. Server-mute/deafen are enforced by the SFU and persist for the room's lifetime, disconnect is transient (the target may rejoin).
- social.colibri.voice.signal subscription not from the namespace authority Opens a WebSocket to the community hub AppView's embedded voice SFU (mediasoup) for a single voice channel. Bidirectional signaling: the client sends transport/produce/consume requests and the server replies and pushes producer and active-speaker events. Media itself flows over WebRTC (SRTP), not this socket. Requires service auth (aud = the community hub AppView's did:web, lxm = social.colibri.voice.signal), carried via the Sec-WebSocket-Protocol subprotocol as with subscribeEvents.