At this level
space.highport.manage ยท 31- space.highport.manage.connectSpace procedure Connect a space so bard can read and publish the authority's site and tile records from it. Only the authority can call this, with a delegation token it issued. Bard trades the token for a credential, registers for notifications, and pulls the authority's repo. Safe to repeat.
- space.highport.manage.disableDelegation procedure Stop a base handing out names: remove its probe and clear its delegation state. Refused while any reservation remains; release each one with releaseReservation. A certificate grant on the base is left in place.
- space.highport.manage.disconnectSpace procedure Forget a space: release its domains, purge them after the usual grace period, discard the credential and key, and stop renewing. Authority only.
- space.highport.manage.enableDelegation procedure Make a registered domain a delegation base, so its owner can reserve names directly under it for other identities. Returns the wildcard record that routes those names. The caller must own the base, and it must be verified or active.
- space.highport.manage.getConsumption query The caller's bandwidth allowance for a period: granted, used, remaining, which entitlements contributed, and which domains may draw on it. One allowance covers both the caller's own sites and its visits to sender-pays sites.
- space.highport.manage.getDomain query Everything a client needs to onboard one domain: registration state, DNS records to publish, last verification result, and certificate state. This is the endpoint to poll.
- space.highport.manage.getIndexStatus query Per-blob progress of a publish. Give exactly one of uri or domain. The top level describes the active revision, or the prepared record if nothing is active yet. A newer record prepared while another is active appears under preparation.
- space.highport.manage.getMyActivity query The caller's own browsing across every domain it signed in to, so it can check what it was billed for. There is no way to read anyone else's.
- space.highport.manage.getSiteTraffic query Traffic to one of the caller's domains over a time range: hourly requests and bytes, the busiest paths, and status codes. Byte figures include a fixed per-response header estimate, since the edge logs only response bodies.
- space.highport.manage.getSpace query What bard knows about a connected space: its sync state, when bard's credential expires, and its counts. Available to the space's authority and to viewers (identities with a grant inside the viewer window).
- space.highport.manage.grantSpaceAccess procedure Give bard a delegation token so it can keep reading a space. Any member can call this with a token they issued. Bard trades it for a credential, renews its notification registration when due, and catches up on anything it missed.
- space.highport.manage.listDomainBilling query The payer policy of every domain the caller owns. A domain with nothing set reports the default: the owner pays, with no visitor cap.
- space.highport.manage.listDomains query The caller's registrations: domains it registered itself, and domains registered to spaces it is the authority of.
- space.highport.manage.listReservations query Names reserved under one of the caller's delegation bases, with who each is reserved for and whether it routes. The base's probe is not included.
- space.highport.manage.listSiteVisitors query Identities that signed in to one of the caller's domains, and what each spent there. Anonymous traffic is not listed, and no query links a visitor across domains.
- space.highport.manage.listSpaceEvents query Events in a space, as bard saw them. Pass the last seq returned as the cursor. Available to the authority and viewers.
- space.highport.manage.listSpaceSites query Domains registered to a space, with each one's state. Available to the authority and viewers.
- space.highport.manage.listSpaceTiles query Tiles bard has indexed from a space's authority. Space tiles are never listed publicly, so this is the only place to find them. Available to the authority and viewers.
- space.highport.manage.listSpaces query The caller's spaces: first those it is the authority of, then those it has granted bard access to within the viewer window.
- space.highport.manage.purge procedure Clear the domain's cached pointer and snapshot on every origin replica. There is no shared HTTP cache, so this is only an escape hatch for a suspected stale in-process cache; publishing never needs it. Rate-limited.
- space.highport.manage.register procedure Register a domain to the caller, or to a space the caller is the authority of, and get the DNS records needed to prove ownership and route traffic.
- space.highport.manage.reindex procedure Fetch the record from its repository again and reprocess it. Use this after a missed firehose event or a temporary blob fetch failure. For a space-form URI it pulls the authority's repo again, which needs a live credential. Rate-limited.
- space.highport.manage.releaseDomain procedure Release a domain: deactivate its site and stop authorizing it for TLS. Certificates already issued for it stay valid until they expire. If the domain is a base with a wildcard grant, the grant ends and the wildcard is revoked and deleted; no account can take the domain until that finishes. Stored blobs are left for garbage collection.
- space.highport.manage.releaseReservation procedure Release a name reserved under one of the caller's delegation bases. Bard stops answering for it and stops authorizing it for TLS, and any site the subject published there stops serving.
- space.highport.manage.reserveDomain procedure Reserve a name directly under a delegation base for another identity. The name answers /.well-known/atproto-did with the subject right away, and the subject can then publish a site there. The caller must own the base. Any unproven claim on the name is replaced. Repeating the call for the same subject returns the existing reservation and does not count against maxNames. Reservations last as long as the base.
- space.highport.manage.setCertificateMode procedure Choose how names under a proven base get certificates. wildcard lets this service get one wildcard certificate for the base over DNS-01, through the base's own challenge target, and returns the record that delegates it. per-name ends that grant. The caller must own the base, which must be verified or active. Delegation does not need to be enabled.
- space.highport.manage.setDelegationDefaultTile procedure Set or clear the tile served on every name reserved under a delegation base whose subject has not yet published a site. The tile is pinned by CID and takes no parameters, so a tile with a required parameter is refused. It never answers /.well-known/atproto-did, which keeps returning the DID the name is reserved for. The base owner pays for the traffic. The caller must own the base, which must have delegation enabled.
- space.highport.manage.setDomainBilling procedure Set whose allowance a domain's traffic uses. Changing payerPolicy revokes every visitor approval on the domain, since visitors agreed to the old arrangement. The owner always pays whatever nobody else covers.
- space.highport.manage.syncSpace procedure Pull the authority's repo in a space now, instead of waiting for a write notification. Authority only.
- space.highport.manage.validate procedure Validate a site or tile record before writing it and, for an authorized caller, prepare bard to serve it. Returns the AT-URI and CID the record will have, and the canonical record to write with putRecord at that key.
- space.highport.manage.verify procedure Check a domain's DNS now instead of waiting for the poller. Limited to once every thirty seconds per domain.