space.roomy.authComplete
Schema Diff
+2 -2
1
1
{
2
2
"$type": "com.atproto.lexicon.schema",
3
3
"defs": {
4
4
"main": {
5
-
"detail": "Full access to the Roomy, Semble, and Bluesky data for spaces that you have permission to manage.",
5
+
"detail": "For spaces that you have permission to manage: full access to the space's Roomy, Semble, and Bluesky data.",
6
6
"permissions": [
7
7
{
8
8
"aud": "*",
9
9
"lxm": [
10
10
"space.roomy.authComplete.arbiter.proxy"
11
11
],
12
12
"resource": "rpc",
13
13
"type": "permission"
14
14
}
15
15
],
16
16
"title": "Full Roomy, Bluesky, & Semble Access for Managed Accounts",
17
17
"type": "permission-set",
18
18
"x-town-muni-arbiter": {
19
-
"policy": "# Scope policy — a pure boolean gate over the request core, evaluated\n# BEFORE the community policy pipeline. The request proceeds only when this\n# evaluates to boolean `true`; anything else (false, undefined, an error)\n# denies the request.\n#\n# Input (scope policies see the request core only — no caller/arbiter DIDs,\n# no endpoints, and no host functions):\n# input.method \"GET\" | \"POST\" — the inner request's HTTP method\n# input.nsid the inner request's XRPC method NSID\n# input.parameters query parameters object, or null\n# input.body JSON body value, null, or { \"$bytes\": \"<base64>\" }\n# input.encoding the inner request's content-type, or null\n\npackage arbiter\n\ndefault allow := false\n\nallow if startswith(input.nsid, \"space.roomy\")\nallow if startswith(input.nsid, \"network.cosmic\")\nallow if input.nsid == \"com.atproto.repo.uploadBlob\"\n# allow if {\n# input.nsid == \"com.atproto.repo.putRecord\"\n# input.body.collection == \"app.bsky.actor.profile\"\n#}"
19
+
"policy": "# Scope policy\n# input.method \"GET\" | \"POST\" — the inner request's HTTP method\n# input.nsid the inner request's XRPC method NSID\n# input.parameters query parameters object, or null\n# input.body JSON body value, null, or { \"$bytes\": \"<base64>\" }\n# input.encoding the inner request's content-type, or null\n\npackage arbiter\n\ndefault allow := false\n\ncosmik_prefix := \"network.cosmik.\"\n\nallow if startswith(input.nsid, \"space.roomy.\")\nallow if startswith(input.nsid, cosmik_prefix)\nallow if input.nsid == \"com.atproto.repo.uploadBlob\"\nallow if input.nsid == \"com.atproto.identity.updateHandle\"\n\nis_record_creation if input.nsid == \"com.atproto.repo.putRecord\"\nis_record_creation if input.nsid == \"com.atproto.repo.createRecord\"\n\nallow if {\n is_record_creation\n startswith(input.body.collection, cosmik_prefix)\n}\n\nallow if {\n input.nsid == \"com.atproto.repo.putRecord\"\n input.body.collection == \"app.bsky.actor.profile\"\n}\nallow if {\n input.nsid == \"com.atproto.repo.putRecord\"\n input.body.collection == \"space.roomy.service\"\n}"
20
20
}
21
21
}
22
22
},
23
23
"id": "space.roomy.authComplete",
24
24
"lexicon": 1
25
25
}