Lexicon Garden

space.highport.manage.connectSpace

Connect a space so bard reads and publishes the authority's site and tile records from it. Authority only, and the delegation token must be the authority's own. Bard exchanges the token for a credential under its own key, registers for notifications, bootstraps the authority's repo, and records the space. Idempotent.

Repository @lexicons.highport.space did:plc:ciygg5hma4q7ah2kxaszkyob namespace authority
Details · procedure
Kindprocedure
Authoritymanage.highport.space
Indexed

Showing version bafyreihcyc2qtgtjgcuevf2gooxkodbhq24haqz5eu6czfsiyyx7en2su4. Show the latest

Compare Edit in builder → Fork →

Procedure

procedure · POST

Input

application/json

delegationToken

requiredstring

A delegation token minted by the authority for this space; spent immediately and never stored.

space

requiredstring · at-uri

The space, at://{authority}/space/space.highport.sites.space/{skey}.

Output

application/json

Errors

NotSpaceAuthority

Only the space's authority may connect it.

GrantIssuerMismatch

The delegation token's issuer is not the calling identity.

GrantExpired

The delegation token is past its lifetime.

GrantRefused

The space host refused the exchange.

AppNotAllowed

The space's app access does not admit bard; the space is recorded and will sync once it does.

SpaceQuotaExceeded

This identity has reached its connected-space limit.

SpacesDisabled

Space support is disabled on this deployment.

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • space.highport.manage.grantSpaceAccess

    procedure

    Give bard a delegation token so it can keep reading a space. Any member can call this with a token they issued. Bard trades it for a credential, renews its notification registration when due, and catches up on anything it missed.

  • social.colibri.beta.actor.grantSpaceAccess

    procedure

    Hands the AppView access to one of the requesting user's personal spaces. The client mints a delegation token on its own PDS for the space and passes it here, because a delegation token is single-use and short-lived and the AppView has no OAuth session of its own. The AppView exchanges the token for a space credential and syncs the space.

  • space.highport.manage.syncSpace

    procedure

    Pull the authority's repo in a space now, instead of waiting for a write notification. Authority only.

  • space.highport.manage.getSpace

    query

    What bard knows about a connected space: its sync state, when bard's credential expires, and its counts. Available to the space's authority and to viewers (identities with a grant inside the viewer window).

  • zone.stratos.space.getSpaceCredential

    procedure

    Issue a space credential (JWT) for a space the caller is a member of. The credential is multi-use until it expires and is bound to the caller's DPoP key (cnf.jkt, RFC 9449): it must be presented under the DPoP auth scheme with a per-request proof signed by that key. It is signed by the space authority's signing key so any repo host can verify it without contacting the authority. Identity is resolved from a delegation token when provided (a standalone DPoP proof in the DPoP header supplies the ke