space.roomy.authComplete

{
  "detail": "For spaces that you have permission to manage: full access to the space's Roomy, Semble, and Bluesky data.",
  "permissions": [
    {
      "aud": "*",
      "lxm": [
        "space.roomy.authComplete.arbiter.proxy"
      ],
      "resource": "rpc",
      "type": "permission"
    }
  ],
  "title": "Full Roomy, Bluesky, & Semble Access for Managed Accounts",
  "type": "permission-set",
  "x-town-muni-arbiter": {
    "policy": "# Scope policy\n#   input.method     \"GET\" | \"POST\" — the inner request's HTTP method\n#   input.nsid       the inner request's XRPC method NSID\n#   input.parameters query parameters object, or null\n#   input.body       JSON body value, null, or { \"$bytes\": \"<base64>\" }\n#   input.encoding   the inner request's content-type, or null\n\npackage arbiter\n\ndefault allow := false\n\ncosmik_prefix := \"network.cosmik.\"\n\nallow if startswith(input.nsid, \"space.roomy.\")\nallow if startswith(input.nsid, cosmik_prefix)\nallow if input.nsid == \"com.atproto.repo.uploadBlob\"\nallow if input.nsid == \"com.atproto.identity.updateHandle\"\n\nis_record_creation if input.nsid == \"com.atproto.repo.putRecord\"\nis_record_creation if input.nsid == \"com.atproto.repo.createRecord\"\n\nallow if {\n  is_record_creation\n  startswith(input.body.collection, cosmik_prefix)\n}\n\nallow if {\n  input.nsid == \"com.atproto.repo.putRecord\"\n  input.body.collection == \"app.bsky.actor.profile\"\n}\nallow if {\n  input.nsid == \"com.atproto.repo.putRecord\"\n  input.body.collection == \"space.roomy.service\"\n}"
  }
}