{
"id": "town.muni.arbiter.proxy",
"defs": {
"main": {
"type": "procedure",
"input": {
"schema": {
"type": "object",
"required": [
"arbiterDid",
"target",
"method",
"nsid"
],
"properties": {
"body": {
"type": "unknown",
"description": "Optional body for the inner request. A JSON value is proxied as JSON; the AT Protocol binary marker { \"$bytes\": <base64> } proxies raw bytes (e.g. a blob upload)."
},
"nsid": {
"type": "string",
"description": "The inner XRPC request NSID."
},
"method": {
"type": "string",
"description": "HTTP method for the inner XRPC request (GET, POST, etc)."
},
"target": {
"type": "string",
"description": "The destination DID#service for the proxied request (e.g. did:plc:xyz#atproto_pds)."
},
"encoding": {
"type": "string",
"description": "Optional content-type (encoding) for the inner request body (e.g. image/png). Defaults to application/json."
},
"arbiterDid": {
"type": "string",
"format": "did",
"description": "The stewarded account's DID to act on behalf of."
},
"parameters": {
"type": "unknown",
"description": "Optional query parameters for the inner request."
}
}
},
"encoding": "application/json"
},
"errors": [
{
"name": "ErrPermissionDenied",
"description": "The requesting user is not allowed to proxy through this arbiter."
}
],
"output": {
"schema": {
"type": "object",
"properties": {},
"description": "The body of the inner XRPC response."
},
"encoding": "application/json"
},
"description": "Proxied XRPC request through an arbiter's policy.\n\nThe caller authenticates via serviceAuth (aud = arbiter-server DID,\nlxm = town.muni.arbiter.proxy). The body specifies the arbiter DID to act\non behalf of, the target DID#service to reach, and the inner XRPC\nrequest (method, nsid, parameters, body) to evaluate. The server drives\nthe arbiter's Rego policy and proxies the inner request to the target\nauthenticated as the stewarded account.\n\nThe `nsid` here is the *inner* request NSID, distinct from this\nprocedure's own NSID."
}
},
"$type": "com.atproto.lexicon.schema",
"lexicon": 1
}