Outcome
Resolve the granted active workspace and read identity projections with current space and processing counts.
Before you start
- Verify the authenticated identity, exact environment and pinned approved organization context before preparing an action.
- The published application permission is workspace:read. Discover a granted Spaces workspace and bind that exact resource. Supplied identifiers do not grant access.
Discover the target
topolo whoami --json
topolo actions get app_topolo_spaces.workspace.bootstrap --detail --json
topolo resources topolo-spaces --json
topolo workspaces list topolo-spaces --json
- Select the exact granted workspace id as SPACES_WORKSPACE_ID. Fixture ids authorize no live operation.
Request
GET /api/bootstrap
Save action input as payload.json. Inspect the plan for the exact path, query and body. Set SPACES_WORKSPACE_ID from granted resource discovery.
Inspect and test this action in the signed action console, then perform the verification below.
Input fields
Supply an empty input object; credential and resource context are separate.
View the complete input schema in the action console. The same schema is available through CLI and MCP action discovery.
Effects
- Resolves an authorized workspace and reads totalSpaces, readySpaces and processingJobs; it does not provision or rename a workspace.
- Returns user and organization projections from Auth with metrics, without returning a canonical workspace record or creating the local mirror.
Interpret the response
The response does not discover a new resource id. Retain exact input/context identifiers; nullable or absence responses are not canonical identifier discovery.
Confirm identity and organization projections and numeric metrics; resolve the exact workspace id using granted resource discovery. Use Auth workspace actions for canonical lifecycle operations; metrics do not establish renderer or processing availability.
The success schema was checked against captured handler responses. Delegated Auth identity and canonical widget context fields can vary; exact Spaces envelopes and all thirteen SQL export table sets are source-reviewed against the migrated local schema. Error responses can be plain text; the original refusal body is retained. Error examples retain their actual refusal shapes.
View the complete success schema in the action console. The worked examples below retain complete raw captured Worker responses. CLI responses have a transport envelope and can be bounded unless --detail is requested; action discovery supplies the exact schema.
Worked examples
Real isolated local D1/R2 and source handlers with synthetic Auth/workspace discovery, queue transport, notification delivery and metering. Arbitrary fixture SOG bytes demonstrate handler state only, not valid Gaussian data, renderer quality, deployed processing or live effects. Annotation rows are seeded directly into isolated fixture storage because no annotation mutation is published. Refused examples demonstrate boundaries and must not be executed as successful workflows.
Successful request
Actual local Worker response; all four migrated D1 databases and R2 are real. Auth identity/workspace discovery, queue transport, notification delivery and metering are simulated or disabled. Captured scenario: minimal.
Input · payload.json:
{}
CLI:
topolo actions validate app_topolo_spaces.workspace.bootstrap --data @payload.json --json
topolo actions plan app_topolo_spaces.workspace.bootstrap --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --json
topolo actions call app_topolo_spaces.workspace.bootstrap --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --detail --json
MCP tool and arguments:
{
"tool": "topolo_read_action",
"arguments": {
"actionId": "app_topolo_spaces.workspace.bootstrap",
"input": {},
"resourceType": "workspace",
"resourceId": "<identifier returned by granted resource discovery>"
}
}
Captured local response · HTTP 200:
{
"user": {
"id": "usr_spaces_fixture",
"email": "reviewer@example.com",
"role": "admin",
"orgId": "org_spaces_fixture",
"permissions": [
"*"
]
},
"organization": {
"id": "org_spaces_fixture",
"slug": "spaces-fixture",
"name": "Synthetic Spaces organization"
},
"metrics": {
"totalSpaces": 0,
"readySpaces": 0,
"processingJobs": 0
}
}
HTTP 200. Confirm identity and organization projections and numeric metrics; resolve the exact workspace id using granted resource discovery. Use Auth workspace actions for canonical lifecycle operations; metrics do not establish renderer or processing availability.
Another supported request
Actual local Worker response; all four migrated D1 databases and R2 are real. Auth identity/workspace discovery, queue transport, notification delivery and metering are simulated or disabled. Captured scenario: minimal.
Input · payload.json:
{}
CLI:
topolo actions validate app_topolo_spaces.workspace.bootstrap --data @payload.json --json
topolo actions plan app_topolo_spaces.workspace.bootstrap --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --json
topolo actions call app_topolo_spaces.workspace.bootstrap --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --detail --json
MCP tool and arguments:
{
"tool": "topolo_read_action",
"arguments": {
"actionId": "app_topolo_spaces.workspace.bootstrap",
"input": {},
"resourceType": "workspace",
"resourceId": "<identifier returned by granted resource discovery>"
}
}
Captured local response · HTTP 200:
{
"user": {
"id": "usr_spaces_fixture",
"email": "reviewer@example.com",
"role": "admin",
"orgId": "org_spaces_fixture",
"permissions": [
"*"
]
},
"organization": {
"id": "org_spaces_fixture",
"slug": "spaces-fixture",
"name": "Synthetic Spaces organization"
},
"metrics": {
"totalSpaces": 1,
"readySpaces": 0,
"processingJobs": 0
}
}
HTTP 200. Confirm identity and organization projections and numeric metrics; resolve the exact workspace id using granted resource discovery. Use Auth workspace actions for canonical lifecycle operations; metrics do not establish renderer or processing availability.
Another supported request
Actual local Worker response; all four migrated D1 databases and R2 are real. Auth identity/workspace discovery, queue transport, notification delivery and metering are simulated or disabled. Captured scenario: workflow.
Input · payload.json:
{}
CLI:
topolo actions validate app_topolo_spaces.workspace.bootstrap --data @payload.json --json
topolo actions plan app_topolo_spaces.workspace.bootstrap --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --json
topolo actions call app_topolo_spaces.workspace.bootstrap --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --detail --json
MCP tool and arguments:
{
"tool": "topolo_read_action",
"arguments": {
"actionId": "app_topolo_spaces.workspace.bootstrap",
"input": {},
"resourceType": "workspace",
"resourceId": "<identifier returned by granted resource discovery>"
}
}
Captured local response · HTTP 200:
{
"user": {
"id": "usr_spaces_fixture",
"email": "reviewer@example.com",
"role": "admin",
"orgId": "org_spaces_fixture",
"permissions": [
"*"
]
},
"organization": {
"id": "org_spaces_fixture",
"slug": "spaces-fixture",
"name": "Synthetic Spaces organization"
},
"metrics": {
"totalSpaces": 0,
"readySpaces": 0,
"processingJobs": 0
}
}
HTTP 200. Confirm identity and organization projections and numeric metrics; resolve the exact workspace id using granted resource discovery. Use Auth workspace actions for canonical lifecycle operations; metrics do not establish renderer or processing availability.
Another supported request
Actual local Worker response; all four migrated D1 databases and R2 are real. Auth identity/workspace discovery, queue transport, notification delivery and metering are simulated or disabled. Captured scenario: workflow.
Input · payload.json:
{}
CLI:
topolo actions validate app_topolo_spaces.workspace.bootstrap --data @payload.json --json
topolo actions plan app_topolo_spaces.workspace.bootstrap --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --json
topolo actions call app_topolo_spaces.workspace.bootstrap --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --detail --json
MCP tool and arguments:
{
"tool": "topolo_read_action",
"arguments": {
"actionId": "app_topolo_spaces.workspace.bootstrap",
"input": {},
"resourceType": "workspace",
"resourceId": "<identifier returned by granted resource discovery>"
}
}
Captured local response · HTTP 200:
{
"user": {
"id": "usr_spaces_fixture",
"email": "reviewer@example.com",
"role": "admin",
"orgId": "org_spaces_fixture",
"permissions": [
"*"
]
},
"organization": {
"id": "org_spaces_fixture",
"slug": "spaces-fixture",
"name": "Synthetic Spaces organization"
},
"metrics": {
"totalSpaces": 1,
"readySpaces": 0,
"processingJobs": 0
}
}
HTTP 200. Confirm identity and organization projections and numeric metrics; resolve the exact workspace id using granted resource discovery. Use Auth workspace actions for canonical lifecycle operations; metrics do not establish renderer or processing availability.
Another supported request
Actual local Worker response; all four migrated D1 databases and R2 are real. Auth identity/workspace discovery, queue transport, notification delivery and metering are simulated or disabled. Captured scenario: privacy.
Input · payload.json:
{}
CLI:
topolo actions validate app_topolo_spaces.workspace.bootstrap --data @payload.json --json
topolo actions plan app_topolo_spaces.workspace.bootstrap --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --json
topolo actions call app_topolo_spaces.workspace.bootstrap --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --detail --json
MCP tool and arguments:
{
"tool": "topolo_read_action",
"arguments": {
"actionId": "app_topolo_spaces.workspace.bootstrap",
"input": {},
"resourceType": "workspace",
"resourceId": "<identifier returned by granted resource discovery>"
}
}
Captured local response · HTTP 200:
{
"user": {
"id": "usr_spaces_fixture",
"email": "reviewer@example.com",
"role": "admin",
"orgId": "org_spaces_fixture",
"permissions": [
"*"
]
},
"organization": {
"id": "org_spaces_fixture",
"slug": "spaces-fixture",
"name": "Synthetic Spaces organization"
},
"metrics": {
"totalSpaces": 0,
"readySpaces": 0,
"processingJobs": 0
}
}
HTTP 200. Confirm identity and organization projections and numeric metrics; resolve the exact workspace id using granted resource discovery. Use Auth workspace actions for canonical lifecycle operations; metrics do not establish renderer or processing availability.
Another supported request
Actual local Worker response; all four migrated D1 databases and R2 are real. Auth identity/workspace discovery, queue transport, notification delivery and metering are simulated or disabled. Captured scenario: privacy.
Input · payload.json:
{}
CLI:
topolo actions validate app_topolo_spaces.workspace.bootstrap --data @payload.json --json
topolo actions plan app_topolo_spaces.workspace.bootstrap --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --json
topolo actions call app_topolo_spaces.workspace.bootstrap --resource-type workspace --resource-id "$SPACES_WORKSPACE_ID" --data @payload.json --detail --json
MCP tool and arguments:
{
"tool": "topolo_read_action",
"arguments": {
"actionId": "app_topolo_spaces.workspace.bootstrap",
"input": {},
"resourceType": "workspace",
"resourceId": "<identifier returned by granted resource discovery>"
}
}
Captured local response · HTTP 200:
{
"user": {
"id": "usr_spaces_fixture",
"email": "reviewer@example.com",
"role": "admin",
"orgId": "org_spaces_fixture",
"permissions": [
"*"
]
},
"organization": {
"id": "org_spaces_fixture",
"slug": "spaces-fixture",
"name": "Synthetic Spaces organization"
},
"metrics": {
"totalSpaces": 1,
"readySpaces": 0,
"processingJobs": 0
}
}
HTTP 200. Confirm identity and organization projections and numeric metrics; resolve the exact workspace id using granted resource discovery. Use Auth workspace actions for canonical lifecycle operations; metrics do not establish renderer or processing availability.
Verify the result
- Confirm identity and organization projections and numeric metrics; resolve the exact workspace id using granted resource discovery.
- Use Auth workspace actions for canonical lifecycle operations; metrics do not establish renderer or processing availability.
Errors and recovery
organization_context_required(HTTP 403): Stop and authenticate into the approved owning organization. Preserve the actual denial; a resource id does not grant organization access.workspace_required(HTTP 400): Discover the exact granted canonical workspace through resource/workspace discovery; bootstrap does not return a workspace record.
A plain-text server refusal is surfaced by CLI/MCP as http_error with its HTTP status and requestId; its text is not a structured service error.code. Auth, action-input validation and platform resource resolution can refuse a request before its handler. Retain the exact error, request id and context; requesting another context is not a legitimate way to bypass a refusal.
Recovery boundary
This read does not change service state. Discover the workspace through the platform rather than deriving an id from bootstrap.
Related actions
- List spaces: Read the latest one hundred space records in the selected workspace.
- Get Spaces widget: Read workspace-scoped inventory, ready-space and active-processing-job counts in the canonical widget envelope.
Evidence
Real isolated local D1/R2 and source handlers with synthetic Auth/workspace discovery, queue transport, notification delivery and metering. Arbitrary fixture SOG bytes demonstrate handler state only, not valid Gaussian data, renderer quality, deployed processing or live effects. Annotation rows are seeded directly into isolated fixture storage because no annotation mutation is published. Capture digests and test scenarios are retained in the source fixture records.