town.muni.arbiter.createArbiter

{
  "id": "town.muni.arbiter.createArbiter",
  "defs": {
    "main": {
      "type": "procedure",
      "errors": [
        {
          "name": "ErrPermissionDenied",
          "description": "The requesting user is not allowed to create an arbiter."
        },
        {
          "name": "ErrProvisioningFailed",
          "description": "Account creation or initial record writes failed."
        }
      ],
      "output": {
        "schema": {
          "type": "object",
          "required": [
            "did"
          ],
          "properties": {
            "did": {
              "type": "string",
              "format": "did",
              "description": "The DID of the newly created stewarded account."
            }
          }
        },
        "encoding": "application/json"
      },
      "description": "Provision a brand-new stewarded PDS account.\n\nThe caller authenticates via serviceAuth (aud = arbiter-server DID,\nlxm = town.muni.arbiter.createArbiter). The server creates a new account\non the configured default PDS using an invite code + random password,\nstores the credentials, and writes the service + recovery records from the\nnew account's session. No policy is written: the arbiter stays offline\n(fail-closed) until the recovery admin installs the first policy via\n`town.muni.arbiter.resetPolicy`."
    }
  },
  "$type": "com.atproto.lexicon.schema",
  "lexicon": 1
}