From e8501f500a7c90f84aeacf00380df7163e5cec60 Mon Sep 17 00:00:00 2001
From: Aly Raffauf <aly@aly.codes>
Date: Fri, 17 Jul 2026 22:41:05 -0400
Subject: [PATCH] atproto/auth: extend default scopes with new collections,
 blobs, and rpcs

---
 atproto/auth.go | 41 +++++++++++++++++++++++++++++++++++++----
 1 file changed, 37 insertions(+), 4 deletions(-)

diff --git a/atproto/auth.go b/atproto/auth.go
index e9f3def..3e54836 100644
--- a/atproto/auth.go
+++ b/atproto/auth.go
@@ -20,22 +20,55 @@ var ErrNotAuthenticated = errors.New("not authenticated")
 // required for uploading PR patch blobs to the PDS.
 var DefaultScopes = []string{
 	"atproto",
+
+	// Record collections.
 	"repo:sh.tangled.actor.profile",
-	"repo:sh.tangled.repo.issue.comment",
-	"repo:sh.tangled.repo.issue.state",
-	"repo:sh.tangled.repo.pull.comment",
-	"repo:sh.tangled.repo.pull.status",
+	"repo:sh.tangled.feed.comment",
+	"repo:sh.tangled.feed.reaction",
 	"repo:sh.tangled.feed.star",
 	"repo:sh.tangled.graph.follow",
 	"repo:sh.tangled.graph.vouch",
+	"repo:sh.tangled.knot",
+	"repo:sh.tangled.knot.member",
+	"repo:sh.tangled.label.definition",
+	"repo:sh.tangled.label.op",
 	"repo:sh.tangled.publicKey",
 	"repo:sh.tangled.repo",
+	"repo:sh.tangled.repo.artifact",
+	"repo:sh.tangled.repo.collaborator",
 	"repo:sh.tangled.repo.issue",
+	"repo:sh.tangled.repo.issue.comment",
+	"repo:sh.tangled.repo.issue.state",
 	"repo:sh.tangled.repo.pull",
+	"repo:sh.tangled.repo.pull.comment",
+	"repo:sh.tangled.repo.pull.status",
+	"repo:sh.tangled.spindle",
+	"repo:sh.tangled.spindle.member",
+	"repo:sh.tangled.string",
+
+	// Blob uploads: gzipped git patches plus image/video media.
 	"blob:application/gzip",
+	"blob:image/*",
+	"blob:video/*",
+
+	// RPC procedures, addressed to any service ("aud=*").
+	"rpc:sh.tangled.ci.cancelPipeline?aud=*",
+	"rpc:sh.tangled.ci.triggerPipeline?aud=*",
+	"rpc:sh.tangled.knot.addMember?aud=*",
+	"rpc:sh.tangled.knot.removeMember?aud=*",
+	"rpc:sh.tangled.repo.addCollaborator?aud=*",
+	"rpc:sh.tangled.repo.addSecret?aud=*",
 	"rpc:sh.tangled.repo.create?aud=*",
 	"rpc:sh.tangled.repo.delete?aud=*",
+	"rpc:sh.tangled.repo.deleteBranch?aud=*",
+	"rpc:sh.tangled.repo.forkStatus?aud=*",
+	"rpc:sh.tangled.repo.forkSync?aud=*",
+	"rpc:sh.tangled.repo.hiddenRef?aud=*",
+	"rpc:sh.tangled.repo.listSecrets?aud=*",
 	"rpc:sh.tangled.repo.merge?aud=*",
+	"rpc:sh.tangled.repo.mergeCheck?aud=*",
+	"rpc:sh.tangled.repo.removeCollaborator?aud=*",
+	"rpc:sh.tangled.repo.removeSecret?aud=*",
 	"rpc:sh.tangled.repo.setDefaultBranch?aud=*",
 }
 
-- 
2.51.2