Lexicon Garden

app.tempomusic.staff.disableInviteCodes

Disable one or more PDS invite codes (TEM-502). Requires the caller to have the `superAdmin` role. Codes are provided as suffix-only strings; the handler re-prepends the env prefix stored under `APPVIEW_PDS_INVITE_CODE_PREFIX` before calling `com.atproto.admin.disableInviteCodes`. On success, writes one `inviteCodeDisabled` audit row per code (payload = SHA-256 hash of the suffix, never the plain code).

Repository @lexicons.tempomusic.fan did:plc:pxsuqmultto34oks44m2lgxm namespace authority
Details · procedure
Kindprocedure
Authoritystaff.tempomusic.app
Indexed
Compare Edit in builder → Fork →

Procedure

procedure · POST

Input

application/json

codes

requiredarray

Suffix-only invite codes to disable. The env prefix is re-prepended by the handler before the PDS call.

  • minLength: 1
itemsstring
  • maxLength: 128

Output

application/json

Errors

Forbidden

The caller is not a super-admin.

InvalidRequest

`codes` is empty.

PdsUnavailable

The PDS returned a transient failure — nothing is audited locally, retry.

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • com.atproto.admin.disableInviteCodes

    procedure

    Disable some set of codes and/or all codes associated with a set of users.

  • app.tempomusic.staff.listInviteCodes

    query

    List PDS invite codes on-demand via the PDS (`com.atproto.admin.getInviteCodes`). No local mirror — the source of truth is the PDS. Requires the caller to have the `superAdmin` role. Codes are returned as suffix-only strings (the env prefix stored under `APPVIEW_PDS_INVITE_CODE_PREFIX` has been stripped). Optional `createdBy` filter narrows the listing to codes emitted by a specific staff DID (applied server-side by the AppView — the admin endpoint has no such parameter); when omitted every code

  • app.tempomusic.staff.createInviteCode

    procedure

    Generate a batch of single-use PDS invite codes (TEM-502). Requires the caller to have the `superAdmin` role. Each call requests `quantity` codes from the PDS (`com.atproto.server.createInviteCode` with `useCount=1`), writes one `inviteCodeCreated` audit row per successfully-created code (payload = SHA-256 hash of the suffix + `use_count`, never the plain code), and returns the suffix-only codes. When the PDS returns a transient failure mid-batch the handler stops iterating and returns the succe

  • com.atproto.admin.disableAccountInvites

    procedure

    Disable an account from receiving new invite codes, but does not invalidate existing codes.

  • app.tempomusic.staff.revokeStaffRole

    procedure

    Mark a moderator row as revoked. The DID can no longer pass the moderator gate (latency = the moderator-cache TTL, default 30s). Requires the caller to have the `superAdmin` role. A super-admin cannot revoke themselves. Writes a `moderatorRevoked` audit row only when an active row was actually revoked. Idempotent: revoking a DID that is not currently an active moderator returns 200 with `revoked: false` and no audit row.