mirror of
https://tangled.org/evan.jarrett.net/at-container-registry
synced 2026-11-08 12:28:45 +00:00
com.atproto.simplespace.checkUserAccess moves from the appview to the hold, which answers from its own crew list: the owner, the hold, its captain and its crew may read, nobody else writes. A private repository space's read policy names <holdDid>#atproto_space_host; the appview sets it on create, re-points an existing space through updateSpace on the flip path and at boot, and no longer serves the callback or names itself. The io.atcr.repo.private URI helpers move to pkg/space so both sides share them. Any number of appviews now stay out of the credential path. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>