At this level
us.off-the-clock.subspace ยท 7- us.off-the-clock.subspace.leave procedure not from the namespace authority Remove the caller's own entry from a subspace and cascade to its subspaces. Idempotent. Auth: service auth from the member.
- us.off-the-clock.subspace.listMembers query not from the namespace authority List a subspace's member entries. Auth: OAuth as the authority with a covering read_self grant, or service auth from a subspace admin.
- us.off-the-clock.subspace.listSubspaces query not from the namespace authority List every subspace whose parent is the given space. Auth: OAuth as the authority with a covering read_self grant on the parent's type.
- us.off-the-clock.subspace.member record not from the namespace authority The published member entries of one account, keyed by the member's DID, across every subspace that publishes its members to the space holding this record. Written by the authority's host to the authority's own repo. Authoritative only in the authority's repo.
- us.off-the-clock.subspace.policy object not from the namespace authority Space policy for a tree of spaces under one authority. A root omits parent and admits members directly; a space with a parent admits only members of its parent.
- us.off-the-clock.subspace.putMember procedure not from the namespace authority Add a member to a subspace or replace their read, write and admin values. Auth: OAuth as the authority with manage=update, or service auth from a subspace admin.
- us.off-the-clock.subspace.removeMember procedure not from the namespace authority Remove a member from a subspace and cascade to its subspaces. Idempotent. Auth: OAuth as the authority with manage=update, or service auth from a subspace admin.