Lexicon Garden

space.highport.manage.connectSpace

Connect a space so bard can read and publish the authority's site and tile records from it. Only the authority can call this, with a delegation token it issued. Bard trades the token for a credential, registers for notifications, and pulls the authority's repo. Safe to repeat.

Repository @lexicons.highport.space did:plc:ciygg5hma4q7ah2kxaszkyob namespace authority
Details · procedure
Kindprocedure
Authoritymanage.highport.space
Indexed
Compare Edit in builder → Fork →

Procedure

procedure · POST

Input

application/json

delegationToken

requiredstring

A delegation token the authority minted for this space. Used once and never stored.

space

requiredstring · at-uri

The space, at://{authority}/space/space.highport.sites.space/{skey}.

Output

application/json

Errors

NotSpaceAuthority

Only the space's authority may connect it.

GrantIssuerMismatch

The delegation token was not issued by the caller.

GrantExpired

The delegation token has expired.

GrantRefused

The space host refused the exchange.

AppNotAllowed

The space does not allow bard access yet. The space is recorded and will sync once it does.

SpaceQuotaExceeded

This identity has reached its limit of connected spaces.

SpacesDisabled

Space support is disabled on this deployment.

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • space.highport.manage.grantSpaceAccess

    procedure

    Give bard a delegation token so it can keep reading a space. Any member can call this with a token they issued. Bard trades it for a credential, renews its notification registration when due, and catches up on anything it missed.

  • social.colibri.beta.actor.grantSpaceAccess

    procedure

    Hands the AppView access to one of the requesting user's personal spaces. The client mints a delegation token on its own PDS for the space and passes it here, because a delegation token is single-use and short-lived and the AppView has no OAuth session of its own. The AppView exchanges the token for a space credential and syncs the space.

  • space.highport.manage.syncSpace

    procedure

    Pull the authority's repo in a space now, instead of waiting for a write notification. Authority only.

  • space.highport.manage.getSpace

    query

    What bard knows about a connected space: its sync state, when bard's credential expires, and its counts. Available to the space's authority and to viewers (identities with a grant inside the viewer window).

  • zone.stratos.space.getSpaceCredential

    procedure

    Issue a space credential (JWT) for a space the caller is a member of. The credential is multi-use until it expires and is bound to the caller's DPoP key (cnf.jkt, RFC 9449): it must be presented under the DPoP auth scheme with a per-request proof signed by that key. It is signed by the space authority's signing key so any repo host can verify it without contacting the authority. Identity is resolved from a delegation token when provided (a standalone DPoP proof in the DPoP header supplies the ke