Set space visibility

Make a runtime-backed space available by unlisted link, or set it private and disable existing links.

Outcome

Make a runtime-backed space available by unlisted link, or set it private and disable existing links.

Before you start

Verify the authenticated identity, exact environment and pinned approved organization context before preparing an action.
The published application permission is spaces:publish. Discover a granted Spaces workspace and bind that exact resource. Supplied identifiers do not grant access.
Authorize the documented storage, publication, invitation, notification, metering, privacy or archival effects before CLI --confirm or MCP confirm:true.

Discover the target

topolo whoami --json
topolo actions get app_topolo_spaces.spaces.publish --detail --json
topolo resources topolo-spaces --json
topolo workspaces list topolo-spaces --json

Select the exact granted workspace id as SPACES_WORKSPACE_ID. Fixture ids authorize no live operation.
Discover the exact spaceId from spaces.list or a retained creation response in this workspace.

Request

POST /api/spaces/{spaceId}/publish

Save action input as payload.json. Inspect the plan for the exact path, query and body. Set SPACES_WORKSPACE_ID from granted resource discovery.

Inspect and test this action in the signed action console, then perform the verification below.

Input fields

Field	Required	Type	Constraints
`spaceId`	Required	string	Exact space id discovered from spaces.list or a creation response in this granted workspace.; {"minLength":1}
`visibility`	Optional	string	private or unlisted. Omission means private and disables links; unlisted publicly exposes the capture to anyone holding its enabled link.; {"enum":["private","unlisted"]}

View the complete input schema in the action console. The same schema is available through CLI and MCP action discovery.

Effects

Omitted visibility means private, which disables every stored public link and returns publicUrl:null.
Unlisted requires active_runtime_asset_id. A refusal still records a failed publish attempt and notification outbox row. Success updates core visibility, then creates or reuses an enabled slug and records a new attempt/outbox row.
Core and collaboration writes are not one cross-database transaction. Repeating an unlisted request can reuse its active URL but creates another attempt and notification. Private followed by unlisted creates a new slug. Anyone with the enabled unlisted URL can access the public viewer; this is public exposure of the capture.

Interpret the response

The response does not discover a new resource id. Retain exact input/context identifiers; nullable or absence responses are not canonical identifier discovery.

For private, verify publicUrl:null, private visibility and all publicLinks disabled through spaces.get. For unlisted, retain the exact returned slug/relative URL, verify enabled link metadata and test the public viewer with valid capture bytes. A successful link response does not prove rendering or notification delivery.

The success schema was checked against captured handler responses. Delegated Auth identity and canonical widget context fields can vary; exact Spaces envelopes and all thirteen SQL export table sets are source-reviewed against the migrated local schema. Error responses can be plain text; the original refusal body is retained. Error examples retain their actual refusal shapes.

View the complete success schema in the action console. The worked examples below retain complete raw captured Worker responses. CLI responses have a transport envelope and can be bounded unless --detail is requested; action discovery supplies the exact schema.

Worked examples

Real isolated local D1/R2 and source handlers with synthetic Auth/workspace discovery, queue transport, notification delivery and metering. Arbitrary fixture SOG bytes demonstrate handler state only, not valid Gaussian data, renderer quality, deployed processing or live effects. Annotation rows are seeded directly into isolated fixture storage because no annotation mutation is published. Refused examples demonstrate boundaries and must not be executed as successful workflows.

Refused request · HTTP 400

Actual local Worker response; all four migrated D1 databases and R2 are real. Auth identity/workspace discovery, queue transport, notification delivery and metering are simulated or disabled. Captured scenario: minimal.

Input · payload.json:

{
  "spaceId": "space_9338e6fc-cc93-421e-a783-6c8062088e0c",
  "visibility": "unlisted"
}

CLI:

topolo actions validate app_topolo_spaces.spaces.publish --data @payload.json --json
topolo actions plan app_topolo_spaces.spaces.publish --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --json

Captured local response · HTTP 400:

{
  "error": "runtime_asset_required"
}

HTTP 400. The handler refused this request. Resolve its exact cause before retrying; input validation can reject an invalid fixture before it reaches the handler.

Successful request

Input · payload.json:

{
  "spaceId": "space_9338e6fc-cc93-421e-a783-6c8062088e0c",
  "visibility": "unlisted"
}

CLI:

topolo actions validate app_topolo_spaces.spaces.publish --data @payload.json --json
topolo actions plan app_topolo_spaces.spaces.publish --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --json
topolo actions call app_topolo_spaces.spaces.publish --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --confirm --detail --json

MCP tool and arguments:

{
  "tool": "topolo_call_action",
  "arguments": {
    "actionId": "app_topolo_spaces.spaces.publish",
    "input": {
      "spaceId": "space_9338e6fc-cc93-421e-a783-6c8062088e0c",
      "visibility": "unlisted"
    },
    "resourceType": "workspace",
    "resourceId": "<identifier returned by granted resource discovery>",
    "confirm": true
  }
}

Captured local response · HTTP 200:

{
  "visibility": "unlisted",
  "publicUrl": "/public/minimal-reviewed-title-92826b37",
  "slug": "minimal-reviewed-title-92826b37"
}

HTTP 200. For private, verify publicUrl:null, private visibility and all publicLinks disabled through spaces.get. For unlisted, retain the exact returned slug/relative URL, verify enabled link metadata and test the public viewer with valid capture bytes. A successful link response does not prove rendering or notification delivery.

Another supported request

Input · payload.json:

{
  "spaceId": "space_9338e6fc-cc93-421e-a783-6c8062088e0c"
}

CLI:

topolo actions validate app_topolo_spaces.spaces.publish --data @payload.json --json
topolo actions plan app_topolo_spaces.spaces.publish --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --json
topolo actions call app_topolo_spaces.spaces.publish --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --confirm --detail --json

MCP tool and arguments:

{
  "tool": "topolo_call_action",
  "arguments": {
    "actionId": "app_topolo_spaces.spaces.publish",
    "input": {
      "spaceId": "space_9338e6fc-cc93-421e-a783-6c8062088e0c"
    },
    "resourceType": "workspace",
    "resourceId": "<identifier returned by granted resource discovery>",
    "confirm": true
  }
}

Captured local response · HTTP 200:

{
  "visibility": "private",
  "publicUrl": null
}

Refused request · HTTP 400

Input · payload.json:

{
  "spaceId": "space_bfe6af37-3588-406b-b103-7675eb527e82",
  "visibility": "unlisted"
}

CLI:

topolo actions validate app_topolo_spaces.spaces.publish --data @payload.json --json
topolo actions plan app_topolo_spaces.spaces.publish --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --json

Captured local response · HTTP 400:

{
  "error": "runtime_asset_required"
}

HTTP 400. The handler refused this request. Resolve its exact cause before retrying; input validation can reject an invalid fixture before it reaches the handler.

Another supported request

Input · payload.json:

{
  "spaceId": "space_bfe6af37-3588-406b-b103-7675eb527e82",
  "visibility": "unlisted"
}

CLI:

topolo actions validate app_topolo_spaces.spaces.publish --data @payload.json --json
topolo actions plan app_topolo_spaces.spaces.publish --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --json
topolo actions call app_topolo_spaces.spaces.publish --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --confirm --detail --json

MCP tool and arguments:

{
  "tool": "topolo_call_action",
  "arguments": {
    "actionId": "app_topolo_spaces.spaces.publish",
    "input": {
      "spaceId": "space_bfe6af37-3588-406b-b103-7675eb527e82",
      "visibility": "unlisted"
    },
    "resourceType": "workspace",
    "resourceId": "<identifier returned by granted resource discovery>",
    "confirm": true
  }
}

Captured local response · HTTP 200:

{
  "visibility": "unlisted",
  "publicUrl": "/public/workflow-reviewed-title-3aaa2d8c",
  "slug": "workflow-reviewed-title-3aaa2d8c"
}

Another supported request

Input · payload.json:

{
  "spaceId": "space_bfe6af37-3588-406b-b103-7675eb527e82"
}

CLI:

topolo actions validate app_topolo_spaces.spaces.publish --data @payload.json --json
topolo actions plan app_topolo_spaces.spaces.publish --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --json
topolo actions call app_topolo_spaces.spaces.publish --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --confirm --detail --json

MCP tool and arguments:

{
  "tool": "topolo_call_action",
  "arguments": {
    "actionId": "app_topolo_spaces.spaces.publish",
    "input": {
      "spaceId": "space_bfe6af37-3588-406b-b103-7675eb527e82"
    },
    "resourceType": "workspace",
    "resourceId": "<identifier returned by granted resource discovery>",
    "confirm": true
  }
}

Captured local response · HTTP 200:

{
  "visibility": "private",
  "publicUrl": null
}

Refused request · HTTP 400

Input · payload.json:

{
  "spaceId": "space_858bda7b-397a-4784-979e-609961a9a16e",
  "visibility": "unlisted"
}

CLI:

topolo actions validate app_topolo_spaces.spaces.publish --data @payload.json --json
topolo actions plan app_topolo_spaces.spaces.publish --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --json

Captured local response · HTTP 400:

{
  "error": "runtime_asset_required"
}

HTTP 400. The handler refused this request. Resolve its exact cause before retrying; input validation can reject an invalid fixture before it reaches the handler.

Another supported request

Input · payload.json:

{
  "spaceId": "space_858bda7b-397a-4784-979e-609961a9a16e",
  "visibility": "unlisted"
}

CLI:

topolo actions validate app_topolo_spaces.spaces.publish --data @payload.json --json
topolo actions plan app_topolo_spaces.spaces.publish --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --json
topolo actions call app_topolo_spaces.spaces.publish --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --confirm --detail --json

MCP tool and arguments:

{
  "tool": "topolo_call_action",
  "arguments": {
    "actionId": "app_topolo_spaces.spaces.publish",
    "input": {
      "spaceId": "space_858bda7b-397a-4784-979e-609961a9a16e",
      "visibility": "unlisted"
    },
    "resourceType": "workspace",
    "resourceId": "<identifier returned by granted resource discovery>",
    "confirm": true
  }
}

Captured local response · HTTP 200:

{
  "visibility": "unlisted",
  "publicUrl": "/public/privacy-reviewed-title-c6cc618a",
  "slug": "privacy-reviewed-title-c6cc618a"
}

Another supported request

Input · payload.json:

{
  "spaceId": "space_858bda7b-397a-4784-979e-609961a9a16e"
}

CLI:

topolo actions validate app_topolo_spaces.spaces.publish --data @payload.json --json
topolo actions plan app_topolo_spaces.spaces.publish --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --json
topolo actions call app_topolo_spaces.spaces.publish --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --confirm --detail --json

MCP tool and arguments:

{
  "tool": "topolo_call_action",
  "arguments": {
    "actionId": "app_topolo_spaces.spaces.publish",
    "input": {
      "spaceId": "space_858bda7b-397a-4784-979e-609961a9a16e"
    },
    "resourceType": "workspace",
    "resourceId": "<identifier returned by granted resource discovery>",
    "confirm": true
  }
}

Captured local response · HTTP 200:

{
  "visibility": "private",
  "publicUrl": null
}

Refused request · HTTP 400

Input · payload.json:

{
  "spaceId": "space_ec15138f-dd1a-4a27-8374-a275d902cda8",
  "visibility": "unlisted"
}

CLI:

topolo actions validate app_topolo_spaces.spaces.publish --data @payload.json --json
topolo actions plan app_topolo_spaces.spaces.publish --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --json

Captured local response · HTTP 400:

{
  "error": "runtime_asset_required"
}

HTTP 400. The handler refused this request. Resolve its exact cause before retrying; input validation can reject an invalid fixture before it reaches the handler.

Verify the result

For private, verify publicUrl:null, private visibility and all publicLinks disabled through spaces.get.
For unlisted, retain the exact returned slug/relative URL, verify enabled link metadata and test the public viewer with valid capture bytes. A successful link response does not prove rendering or notification delivery.

Errors and recovery

runtime_asset_required (HTTP 400): Finish the authenticated PUT and assets.process, then inspect spaces.get for active_runtime_asset_id before requesting an unlisted URL. PLY/ZIP waiting_processor is not completion. This failed attempt can still record a notification.
organization_context_required (HTTP 403): Stop and authenticate into the approved owning organization. Preserve the actual denial; a resource id does not grant organization access.
workspace_required (HTTP 400): Discover the exact granted canonical workspace through resource/workspace discovery; bootstrap does not return a workspace record.

A plain-text server refusal is surfaced by CLI/MCP as http_error with its HTTP status and requestId; its text is not a structured service error.code. Auth, action-input validation and platform resource resolution can refuse a request before its handler. Retain the exact error, request id and context; requesting another context is not a legitimate way to bypass a refusal.

Recovery boundary

A separately authorized spaces.publish with visibility private disables current unlisted links. It cannot revoke separately downloaded copies or undo already delivered notifications; verify private visibility and disabled link metadata.

Get space: Read one space with its stored asset, annotation, public-link and processing-job records.

Evidence

Real isolated local D1/R2 and source handlers with synthetic Auth/workspace discovery, queue transport, notification delivery and metering. Arbitrary fixture SOG bytes demonstrate handler state only, not valid Gaussian data, renderer quality, deployed processing or live effects. Annotation rows are seeded directly into isolated fixture storage because no annotation mutation is published. Capture digests and test scenarios are retained in the source fixture records.

Set space visibility

Outcome

Before you start

Discover the target

Request

Input fields

Effects

Interpret the response

Worked examples

Refused request · HTTP 400

Successful request

Another supported request

Refused request · HTTP 400

Another supported request

Another supported request

Refused request · HTTP 400

Another supported request

Another supported request

Refused request · HTTP 400

Verify the result

Errors and recovery

Recovery boundary

Related actions

Evidence