space.highport.manage.grantSpaceAccess
{
"$type": "com.atproto.lexicon.schema",
"defs": {
"main": {
"description": "Hand bard a delegation token so it can keep reading a space. Any member may grant; the calling identity must be the token's issuer. Bard exchanges it under its own key, stores the credential, renews the notification registration when due, drains a queued receipt, and runs a head check if the space had lapsed.",
"errors": [
{
"description": "Bard is not connected to that space; call connectSpace first.",
"name": "SpaceNotFound"
},
{
"description": "The delegation token's issuer is not the calling identity.",
"name": "GrantIssuerMismatch"
},
{
"description": "The delegation token is past its lifetime.",
"name": "GrantExpired"
},
{
"description": "The space host refused the exchange.",
"name": "GrantRefused"
},
{
"description": "The space's app access does not admit bard.",
"name": "AppNotAllowed"
},
{
"description": "Space support is disabled on this deployment.",
"name": "SpacesDisabled"
}
],
"input": {
"encoding": "application/json",
"schema": {
"properties": {
"delegationToken": {
"description": "A delegation token minted by the calling identity for this space; spent immediately and never stored.",
"type": "string"
},
"space": {
"format": "at-uri",
"type": "string"
}
},
"required": [
"space",
"delegationToken"
],
"type": "object"
}
},
"output": {
"encoding": "application/json",
"schema": {
"properties": {
"accessExpiresAt": {
"description": "When the credential bard now holds expires.",
"format": "datetime",
"type": "string"
},
"drained": {
"description": "Queued notification receipts turned into sync jobs by this grant.",
"type": "integer"
},
"registrationExpiresAt": {
"description": "When bard's notification registration at the space host expires.",
"format": "datetime",
"type": "string"
}
},
"required": [
"accessExpiresAt",
"drained"
],
"type": "object"
}
},
"type": "procedure"
}
},
"id": "space.highport.manage.grantSpaceAccess",
"lexicon": 1
}
Metadata
- DID
-
did:plc:ciygg5hma4q7ah2kxaszkyob - CID
-
bafyreidbvvlptqgvhunon524yanqeftaac6uvtdkdbw33epxpbczzhozde - Indexed At
- 2026-09-01 13:04 UTC
- AT-URI
-
at://did:plc:ciygg5hma4q7ah2kxaszkyob/com.atproto.lexicon.schema/space.highport.manage.grantSpaceAccess
Version History (2 versions)
Similar Lexicons
Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.
-
space.highport.manage.connectSpace procedure
Connect a space so bard can read and publish the authority's site and tile records from it. Only the authority can call this, with a delegation token it issued. Bard trades the token for a credential, registers for noti…
-
Hands the AppView access to one of the requesting user's personal spaces. The client mints a delegation token on its own PDS for the space and passes it here, because a delegation token is single-use and short-lived and…
-
zone.stratos.space.getSpaceCredential procedure
Issue a space credential (JWT) for a space the caller is a member of. The credential is multi-use until it expires and is bound to the caller's DPoP key (cnf.jkt, RFC 9449): it must be presented under the DPoP auth sche…
-
What bard knows about a connected space: its sync state, when bard's credential expires, and its counts. Available to the space's authority and to viewers (identities with a grant inside the viewer window).