---
'@pdsjs/git': patch
---

Private repositories follow the spaces alpha of 2026-10-22: the helper asks for
a credential with `credentialKid` and its delegation token in the body,
presents it as `Atproto-Space-Credential` under the `atproto-space-credential`
signature, and verifies every credential read of a record against the MAC the
repo host answers its key share with, using the owner's `#atproto_kem` key. A
helper pointed at its own PLC directory (`ATPROTO_GIT_PLC_URL`) resolves those
keys there.