Lexicon Garden

space.highport.manage.reserveDomain

Reserve a name directly under a delegation-enabled base for another identity. The name answers /.well-known/atproto-did with the subject before the subject has published anything, and the subject may then publish a site there. The caller must be the base's registered identity. An unproven claim on the name, held by any identity, is replaced. Reserving a name again for the subject that already holds it is answered with the reservation as it stands, writes nothing, and does not count against maxNames, so a retry is safe. A reservation has no expiry: it is held for as long as the base is.

Repository @lexicons.highport.space did:plc:ciygg5hma4q7ah2kxaszkyob namespace authority
Details · procedure
Kindprocedure
Authoritymanage.highport.space
Indexed

Showing version bafyreibzjqnehgxdmtrkmmn3ih2gcj5l3u2wafnzk63rc4acimqek4c3cy. Show the latest

Compare Edit in builder → Fork →

Procedure

procedure · POST

Input

application/json

genesisOp

unknown

Optional proof for a did:plc subject: its signed genesis operation, as submitted to a PLC directory. Verified offline, without resolving anything. The call is refused with InvalidSubject unless the operation is a genesis operation (prev is null) that hashes to the subject, is signed by one of its own rotation keys, and lists at://<hostname> in alsoKnownAs. A subject that is not a did:plc cannot carry one.

hostname

requiredstring

A name exactly one label under a delegation-enabled base the caller owns.

  • maxLength: 253

subject

requiredstring · did

The identity the name is reserved for. Without genesisOp it is checked for syntax only: it need not resolve, and its DID document need not name the hostname yet.

Output

application/json

hostname

requiredstring

subject

requiredstring · did

Errors

InvalidDomain

Not a syntactically valid, non-reserved domain.

DomainDenied

The hostname or the subject is on the operator denylist.

NotBaseOwner

The name is not under a delegation-enabled base whose verified or active registration belongs to the caller.

DomainTaken

The name is held and cannot be reserved: a proven registration of it exists, including one the base owner made the ordinary way, a live reservation for a different subject, or a suspended one; an unproven claim on it is itself a base carrying a delegation or a certificate grant; or it is released but still carries a delegation or a grant, such as one whose wildcard is still being retired. Release it, or wait for the retirement, first.

DelegationNotVerified

The base's wildcard has not been shown to route to this service: its delegation probe has not passed yet, or the base's routing has lapsed. The message names the probe hostname and the *.<base> record to publish or restore. The name being reserved is never resolved.

InvalidSubject

The subject is not a well-formed did:plc or did:web, or is a did:web rooted at the hostname being reserved, or a genesisOp was given that does not prove the subject. The message says which rule failed.

DelegatedNameTooDeep

The name is more than one label under the base. A wildcard covers exactly one label, so a deeper name could never complete a handshake.

DelegationQuotaExceeded

The base already holds its maxNames reservations. Never returned for a name the subject already holds.

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • space.highport.manage.register

    procedure

    Register a domain to the caller, or to a space the caller is the authority of, and get the DNS records needed to prove ownership and route traffic.

  • space.highport.manage.enableDelegation

    procedure

    Make a registered domain a delegation base, so its owner can reserve names directly under it for other identities. Returns the wildcard record that routes those names. The caller must own the base, and it must be verified or active.

  • space.highport.manage.listReservations

    query

    Names reserved under one of the caller's delegation bases, with who each is reserved for and whether it routes. The base's probe is not included.

  • space.highport.manage.releaseReservation

    procedure

    Release a name reserved under one of the caller's delegation bases. Bard stops answering for it and stops authorizing it for TLS, and any site the subject published there stops serving.

  • space.highport.manage.disableDelegation

    procedure

    Stop a base handing out names: remove its probe and clear its delegation state. Refused while any reservation remains; release each one with releaseReservation. A certificate grant on the base is left in place.