At this level
us.off-the-clock · 31- us.off-the-clock.browseSpaces query The space directory (D50): the spaces with a profile, in record-key order, oldest first, for members who read the default pair's content space. Nothing of a space's records is in it, only what its admins wrote about it.
- us.off-the-clock.community space A community content space: members' posts, their likes, reposts and postgates, calendar events and RSVPs, community profiles, the space's policy and members' acceptances of it, the community's profiles of its spaces (in the root), bookmarks with their previews, the thumbnails and originals behind posts', listings' and reviews' images, members' listings, polls with their votes, members' reviews, the space's publication with members' documents, and the content warnings members write beside their o
- us.off-the-clock.defs defs What a bookmark's card shows of its page: from the member's own us.off-the-clock.bookmark.preview under the bookmark's key while it is no older than the bookmark's current version (source record), else from the AppView's own cached fetch (source appview). Absent when neither has one.
- us.off-the-clock.draft record An unfinished post, event, listing or review, kept in the member's personal space until they post it (D43). The drafted record is carried as written so far and is validated only when it is posted.
- us.off-the-clock.getAuthorRecords query A member's records in one community space, newest first.
- us.off-the-clock.getFeed query A feed by record key: its generator's skeleton, hydrated by collection. Needs the viewer's service-auth token for the feed generator in x-atproto-feed-authorization.
- us.off-the-clock.getLabelSettings query The viewer's own setting for each content label; a label never set is conceal (D91).
- us.off-the-clock.getMembership query Community-wide membership, read from the subspace model: the member entries and policies the community's PDS publishes, which decide what this service shows; the PDS itself decides access (D77). A trusted service may ask about any DID; a viewer only about themselves. A non-member is an answer, not an error.
- us.off-the-clock.getPolicy query A content space's current policy, for its members whether or not they have accepted it, with a signed URL of its body and the viewer's acceptance.
- us.off-the-clock.getProfile query A member's community profile from the general space, or their handle alone.
- us.off-the-clock.getRecord query One record in a community space the viewer can read: a post with its thread, a poll, document, listing or review with its view and the thread of its replies, an event with its RSVPs, or any other record. A deleted post, document, listing or review with replies or a deleted event with RSVPs the viewer may see answers its tombstone with them.
- us.off-the-clock.listCalendarFeeds query The viewer's two calendar feeds for one space they read, all and mine, created on first call. Each URL is a capability: anyone holding it reads that feed's events.
- us.off-the-clock.listFeeds query A pair's feeds, the one its space record names first and the rest by name. A pair the viewer cannot read is refused.
- us.off-the-clock.listListings query The listings of one content space the viewer may read, newest first, optionally only free ones or only priced ones (LST-12).
- us.off-the-clock.listMutes query The viewer's own mutes, newest first. Only the viewer can list them.
- us.off-the-clock.listNotifications query The viewer's notifications, grouped by kind and subject within a day, newest group first.
- us.off-the-clock.listPins query The counting pins of one space the viewer reads, in the order they were pinned, one per subject, with subjects the viewer cannot see left out; at most ten.
- us.off-the-clock.listSpaceMembers query The members holding a pair's content space, its admins first and then by handle, as basic profile views from the cached profiles. Members of the pair only, and its admins only when the list is hidden.
- us.off-the-clock.listSpaceRecords query The visible records of one collection in one community space, newest first or by start time from now.
- us.off-the-clock.listSpaces query The registered pairs whose content space the viewer can read, the default pair first, with their names, default feeds and member counts.
- us.off-the-clock.listing record Something a member offers the members of a content space, for free or for a price, with up to ten photos (D97). Members respond by replying to it, so a listing heads a thread. The author marks it claimed or available by rewriting it at the same key; it stays listed until its author deletes it. Off the Clock takes no payment: the price is information, and members arrange payment and pickup between themselves.
- us.off-the-clock.management space The community's management space: feed, label, space, pin, space settings and automod rule records that admins write, and the content warnings written beside the community's labels. Who reads and writes it is the subspace policy's member list, which the community's PDS keeps and publishes as us.off-the-clock.subspace.member records; only the community identity, its admins and the community's services can read it.
- us.off-the-clock.muteActor procedure Mutes an identity for the viewer alone: views built for the viewer mark the identity's actor views viewer.muted, and the identity's activity creates no notification for the viewer. Muting again keeps the first mute's time. The mute is private to the viewer and covers every space.
- us.off-the-clock.personal space A member's personal data: one space keyed self in the member's own repository, under their own authority, a personalspace that only its owner reads and writes. It holds the member's drafts now, and later personal data joins it under the same consent. No service follows it (D77).
- us.off-the-clock.putLabelSettings procedure Sets the viewer's own settings for the content labels it names, leaving the others as they were (D91).
- us.off-the-clock.review record What a member thought of something, with a rating from 1 to 10, in a content space (D99). Members respond by replying to it, so a review heads a thread. The author edits it, rating included, by rewriting it at the same key; it sorts by createdAt, so an edit keeps its place.
- us.off-the-clock.searchMembers query Members of the community whose handle or display name starts with q. Answers members only, to members only.
- us.off-the-clock.searchRecords query Posts, events, bookmarks, polls, documents, listings and reviews of one content space the viewer reads, matching every part of a query and every other condition given: an H3 cell, a radius around a point and a bookmark's domain. The query's words and phrases rank the results and its other parts filter them; the parts read are answered in read. Only records the viewer may see are answered, never another space's. SearchUnavailable is answered for mode=semantic before any other parameter is read, s
- us.off-the-clock.setCalendarFeed procedure Rotates, disables or enables one of the viewer's calendar feeds in a space they read. Rotating gives the feed a new URL and the old one stops answering.
- us.off-the-clock.unmuteActor procedure Removes the viewer's mute of an identity; succeeds also when there was none.
- us.off-the-clock.updateSeen procedure Marks the viewer's notifications read up to seenAt.
- us.off-the-clock.admin.defs defs What one rule did in a run (AUT-16).
- us.off-the-clock.admin.evaluateFeed procedure Dry-runs a feed configuration over the newest candidates in a pair's content space, without publishing it. The AppView asks the feed generator under its own service auth. Effective admins, the community identity and the pair's own admins.
- us.off-the-clock.admin.getBlob query One blob and the records that reference it. Effective admins and the community identity only.
- us.off-the-clock.admin.getMember query One DID's membership and the records behind it. Effective admins and the community identity only.
- us.off-the-clock.admin.getPolicyStatus query Who has accepted a pair's current policy. Effective admins, the community identity and the pair's team. The counts and the pending list leave the community identity out.
- us.off-the-clock.admin.getSpace query One registered pair, with its content space's record counts by collection. Effective admins and the community identity only.
- us.off-the-clock.admin.listAutomodRules query A pair's effective automod rules in the order they run (D95). Effective admins, the community identity and the pair's own admins.
- us.off-the-clock.admin.listBlobs query Every blob a record in a community space references. Effective admins and the community identity only.
- us.off-the-clock.admin.listFeeds query A pair's effective feeds with their configurations, by record key, the one its space record names marked default. Effective admins, the community identity and the pair's own admins.
- us.off-the-clock.admin.listLabels query The labels that count, newest first. Effective admins and the community identity only.
- us.off-the-clock.admin.listMembers query Every DID with an entry in any followed space, with its entries. Effective admins and the community identity only. With space, the DIDs with an entry on either half of that pair and only those entries, for the pair's own team too.
- us.off-the-clock.admin.listRecords query A community space's records, newest first, hidden ones included. Effective admins and the community identity only.
- us.off-the-clock.admin.listSpaces query The self management space and every registered pair, the default pair first and the rest by name. A pair's admin who is not an effective admin sees only the pairs they administer, and no self management space.
- us.off-the-clock.admin.testAutomod procedure Runs a pair's automod rules, or draft rules in their place, over a sample record as a new version, writing and queuing nothing (D95). The AppView asks the feed generator under its own service auth. Effective admins, the community identity and the pair's own admins.
- us.off-the-clock.community.feed record What a feed selects, in a pair's management space and over that pair's content space alone. Shares its record key with the us.off-the-clock.feed.generator that names it. configuration is a JSON Logic expression evaluated per candidate record; a truthy result includes it.
- us.off-the-clock.community.label record A label an admin applies. uri targets a record (every version, or one with cid); cid alone targets a blob; subject targets an account.
- us.off-the-clock.community.pin record A pin a pair's admin writes in the pair's management space: the subject, a post or an event in the pair's content space, is shown above the feed on the space's default view. Pins are listed in record-key order; deleting the record unpins.
- us.off-the-clock.community.policy record A space's policy, which members accept before they read or write anything else there. Authored by the community identity in the content space it governs; records by anyone else are ignored. The record with the newest key is the current policy, identified by its URI and CID; an update is a new record, and removing the policy deletes every one.
- us.off-the-clock.community.policyAcceptance record A member's acceptance of a space's policy, in the same content space. The member has accepted the current policy while their newest acceptance there names its URI and CID; older acceptances stay as the record of what they agreed to and when.
- us.off-the-clock.community.profile record A member's profile within the community, written to the default pair's content space (D18, D34).
- us.off-the-clock.community.space record A space pair's name and default feed. Its record key is the pair's TID; effective admins write it, in the self management space (D34). The default pair is the root, so no record names it (D82).
- us.off-the-clock.community.spaceProfile record A space's public face in the space directory (D50): the community identity's record in the default pair's content space, keyed by the space's own key (its pair's TID), so a space has at most one. A space is listed exactly when its profile exists; deleting it unlists the space. Records by anyone else, elsewhere, or under a key that is not a registered pair's are ignored.
- us.off-the-clock.community.spaceSettings record A pair's settings, in the pair's management space. Only the community identity's record counts. A space always takes posts; contentTypes names the further kinds of records it takes, and a pair with no settings record takes every kind.
- us.off-the-clock.embed.audio object A voice recording or other audio, with its waveform as an image.
- us.off-the-clock.embed.defs defs
- us.off-the-clock.embed.imageSet record The thumbnails and originals behind a post's images, kept beside the post by the member's own client: under the post's record key, in the same space and repository. The post names each image's view; an entry here names that view by CID and carries a smaller thumbnail and the file as uploaded. An entry counts only for an image of its post with that CID, and the record counts for nothing without its post (D70).
- us.off-the-clock.embed.mixed object Media beside a link card in one post.
- us.off-the-clock.embed.video object app.bsky.embed.video's fields plus the poster the member chose, which Bluesky's video embed has no place for.
- us.off-the-clock.polls.getPoll query One poll of a content space the viewer reads, with its results counted now: each member's newest vote cast between opensAt and closesAt by a member the viewer may see.
- us.off-the-clock.polls.poll record A question a member asks a content space, with two to ten options that members answer with us.off-the-clock.polls.vote records. Each option is named by a key that stays the same when the poll is edited, so votes follow the option they were cast for. Posts may reply to a poll, so a poll heads a thread.
- us.off-the-clock.polls.pollView object A us.off-the-clock.polls.poll with its results: a row per option key, then a row per distinct typed answer under an option that takes input. There is no anonymous voting: the rows name their voters.
- us.off-the-clock.polls.threadViewPoll object A poll as a thread's node: the head of the thread getRecord answers for a poll, with its replies, and the top of a reply's parent chain. It has no parent, since a poll replies to nothing; app.bsky.feed.defs#threadViewPost holds a post view only.
- us.off-the-clock.polls.vote record A member's answer to a us.off-the-clock.polls.poll in the same space. The member's newest vote counts; one with no entries is an abstention. Votes are records in the space, so every member who reads it can see who voted and how. A client may add createdAt, the time it cast the vote; the AppView trusts it up to five minutes before it indexes the vote and never after.
- us.off-the-clock.push.getPushSettings query Whether this AppView sends Web Push, its VAPID public key, and the viewer's devices and push preferences (D63).
- us.off-the-clock.push.putPushPreferences procedure Replaces the viewer's push preferences: each kind named is on or off, every other takes its default, and the spaces listed are muted. They apply to every device.
- us.off-the-clock.push.registerPushSubscription procedure Registers this browser's push subscription to the viewer. An endpoint registered by someone else moves to the viewer: one browser has one recipient.
- us.off-the-clock.push.unregisterPushSubscription procedure Removes one of the viewer's subscriptions, named by its endpoint or by the id getPushSettings gave it. Anyone else's is left alone.
- us.off-the-clock.subspace.leave procedure not from the namespace authority Remove the caller's own entry from a subspace and cascade to its subspaces. Idempotent. Auth: service auth from the member.
- us.off-the-clock.subspace.listMembers query not from the namespace authority List a subspace's member entries. Auth: OAuth as the authority with a covering read_self grant, or service auth from a subspace admin.
- us.off-the-clock.subspace.listSubspaces query not from the namespace authority List every subspace whose parent is the given space. Auth: OAuth as the authority with a covering read_self grant on the parent's type.
- us.off-the-clock.subspace.member record not from the namespace authority The published member entries of one account, keyed by the member's DID, across every subspace that publishes its members to the space holding this record. Written by the authority's host to the authority's own repo. Authoritative only in the authority's repo.
- us.off-the-clock.subspace.policy object not from the namespace authority Space policy for a tree of spaces under one authority. A root omits parent and admits members directly; a space with a parent admits only members of its parent.
- us.off-the-clock.subspace.putMember procedure not from the namespace authority Add a member to a subspace or replace their read, write and admin values. Auth: OAuth as the authority with manage=update, or service auth from a subspace admin.
- us.off-the-clock.subspace.removeMember procedure not from the namespace authority Remove a member from a subspace and cascade to its subspaces. Idempotent. Auth: OAuth as the authority with manage=update, or service auth from a subspace admin.