{
"id": "town.muni.arbiter.createAppPasswordArbiter",
"defs": {
"main": {
"type": "procedure",
"input": {
"schema": {
"type": "object",
"required": [
"arbiterDid",
"appPassword"
],
"properties": {
"arbiterDid": {
"type": "string",
"format": "did",
"description": "The DID of the account to import."
},
"appPassword": {
"type": "string",
"description": "App password for the PDS account."
}
}
},
"encoding": "application/json"
},
"errors": [
{
"name": "ErrPermissionDenied",
"description": "The requesting user is not allowed to import an arbiter."
},
{
"name": "ErrArbiterAlreadyExists",
"description": "An arbiter for this DID already exists on this server."
},
{
"name": "ErrProvisioningFailed",
"description": "Login or initial record writes failed."
}
],
"output": {
"schema": {
"type": "object",
"required": [
"ok"
],
"properties": {
"ok": {
"type": "boolean"
}
}
},
"encoding": "application/json"
},
"description": "Import an existing account as a stewarded arbiter.\n\nThe caller provides an app password proving control of the account.\nThe server stores the credentials and writes the service + recovery records\nfrom the account's session. No policy is written: the arbiter stays offline\n(fail-closed) until the recovery admin installs the first policy via\n`town.muni.arbiter.resetPolicy`."
}
},
"$type": "com.atproto.lexicon.schema",
"lexicon": 1
}