Submit an owner-scoped native host operation

POST

/service-endpoint-host

const url = 'https://auth.example.invalid/service-endpoint-host';
const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: '{"idpToken":"example","request":{"v":1,"kind":"service-endpoint-host","requestId":"example","operation":"proposal-read","input":{"proposalId":"example","endpoint":"example","instanceId":"example","operationId":"example","owner":"example","cursor":"example","limit":1}}}'
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request POST \
  --url https://auth.example.invalid/service-endpoint-host \
  --header 'Content-Type: application/json' \
  --data '{ "idpToken": "example", "request": { "v": 1, "kind": "service-endpoint-host", "requestId": "example", "operation": "proposal-read", "input": { "proposalId": "example", "endpoint": "example", "instanceId": "example", "operationId": "example", "owner": "example", "cursor": "example", "limit": 1 } } }'

Only enabled with service endpoints; otherwise 404 before method/media/Origin guards. JSON idpToken derives owner and native granter. Caller-supplied granter is rejected. Operator-only operations are refused publicly (403). Native host outcomes, including denied/held/pending/refused, are returned with HTTP 200; inspect state. denied is a point-in-time no-binding observation, while held alone does not prove execution or authority. Native parser failures are 400, unexpected engine failures 500 or 503. Successful engine replies use Cache-Control: no-store. Origin is refused. instance-read returns only the proved owner’s selector, and instance-list returns only that owner’s native assignments with cursor pagination. Missing and foreign instance reads both answer absent. proposal-list remains unsupported.

Request Body^required

UTF-8 JSON; maximum 65536 bytes. An Authorization header does not replace the JSON proof.

application/json

Never provide request.granter. The route derives it from idpToken. name-bind, quarantine-restored, admission-open, and revoke causes other than owner-request are loopback operator actions and return 403 publicly; they are excluded from the accepted operation enum.

object

idpToken

required

string

>= 1 characters

request

required

Transport envelope only. Nested native fields and operation-specific constraints are defined by ServiceHostRequest (HTTP omits granter) in the linked source; this schema is not a complete native command contract.

object

required

Allowed value: 1

kind

required

Allowed value: service-endpoint-host

requestId

required

string

/^[0-9a-f]{32}$/

operation

required

string

Allowed values: proposal-read proposal-list instance-read instance-list operation-read name-read decide revoke caller-policy-read caller-policy-list caller-grant caller-revoke

input

required

Transport envelope only. Nested native fields and operation-specific constraints are defined by ServiceHostInputs[operation] in the linked source; this schema is not a complete native command contract.

object

proposalId

string

endpoint

string

instanceId

string

operationId

string

owner

string | null

cursor

string | null

limit

integer

Responses

200

Successful response.

application/json

Transport envelope only. Nested native fields and operation-specific constraints are defined by ServiceHostResult in the linked source; this schema is not a complete native command contract.

object

required

Allowed value: 1

kind

required

Allowed value: service-endpoint-host

operation

required

string

Allowed values: proposal-read proposal-list instance-read instance-list operation-read name-read decide revoke caller-policy-read caller-policy-list caller-grant caller-revoke

requestId

required

string

>= 1 characters

space

required

string

>= 1 characters

accountPublicKey

required

string

>= 1 characters

state

required

string

Allowed values: present absent page approved refused retired granted revoked pending held denied

reason

string

Example

{
  "v": 1,
  "kind": "service-endpoint-host",
  "operation": "proposal-read",
  "state": "present"
}

400

JSON error. Route guards run before proof evaluation; parser failures are 400 and byte overflow is 413. An unexpected failure is 400 unless a route handles it separately.

application/json

object

error

required

string

code

string

outcome

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

403

JSON error. Route guards run before proof evaluation; parser failures are 400 and byte overflow is 413. An unexpected failure is 400 unless a route handles it separately.

application/json

object

error

required

string

code

string

outcome

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

404

JSON error. Route guards run before proof evaluation; parser failures are 400 and byte overflow is 413. An unexpected failure is 400 unless a route handles it separately.

application/json

object

error

required

string

code

string

outcome

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

405

JSON error. Route guards run before proof evaluation; parser failures are 400 and byte overflow is 413. An unexpected failure is 400 unless a route handles it separately.

application/json

object

error

required

string

code

string

outcome

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

413

JSON error. Route guards run before proof evaluation; parser failures are 400 and byte overflow is 413. An unexpected failure is 400 unless a route handles it separately.

application/json

object

error

required

string

code

string

outcome

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

415

JSON error. Route guards run before proof evaluation; parser failures are 400 and byte overflow is 413. An unexpected failure is 400 unless a route handles it separately.

application/json

object

error

required

string

code

string

outcome

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

429

JSON error. Route guards run before proof evaluation; parser failures are 400 and byte overflow is 413. An unexpected failure is 400 unless a route handles it separately.

application/json

object

error

required

string

code

string

outcome

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

500

JSON error. Route guards run before proof evaluation; parser failures are 400 and byte overflow is 413. An unexpected failure is 400 unless a route handles it separately.

application/json

object

error

required

string

code

string

outcome

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

503

Public admission cap (64 in flight), 10 second request deadline, or a route-specific unavailable read/effect. A service authority 503 may follow a binding; retain the request identity.

application/json

object

error

required

string

code

string

outcome

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

Submit an owner-scoped native host operation

Request Bodyrequired

Responses

200

Example

400

Example

403

Example

404

Example

405

Example

413

Example

415

Example

429

Example

500

Example

503

Example

Request Body^required