app.tempomusic.staff.listInviteCodes
List PDS invite codes on-demand via the PDS (`com.atproto.admin.getInviteCodes`). No local mirror — the source of truth is the PDS. Requires the caller to have the `superAdmin` role. Codes are returned as suffix-only strings (the env prefix stored under `APPVIEW_PDS_INVITE_CODE_PREFIX` has been stripped). Optional `createdBy` filter narrows the listing to codes emitted by a specific staff DID (applied server-side by the AppView — the admin endpoint has no such parameter); when omitted every code is returned.
Details · query
| Kind | query |
|---|---|
| Authority | staff.tempomusic.app |
| Indexed |
Query
query · GETParameters
query stringcreatedBy
string · didOptional DID filter. When set, only codes generated by that staff account are returned.
Output
application/jsonErrors
Forbidden
The caller is not a super-admin.
PdsUnavailable
The PDS returned a transient failure — the query never lands locally, retry.
Similar lexicons
semantic matchLexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.
-
app.tempomusic.staff.createInviteCode
procedureGenerate a batch of single-use PDS invite codes (TEM-502). Requires the caller to have the `superAdmin` role. Each call requests `quantity` codes from the PDS (`com.atproto.server.createInviteCode` with `useCount=1`), writes one `inviteCodeCreated` audit row per successfully-created code (payload = SHA-256 hash of the suffix + `use_count`, never the plain code), and returns the suffix-only codes. When the PDS returns a transient failure mid-batch the handler stops iterating and returns the succe
-
app.tempomusic.staff.disableInviteCodes
procedureDisable one or more PDS invite codes (TEM-502). Requires the caller to have the `superAdmin` role. Codes are provided as suffix-only strings; the handler re-prepends the env prefix stored under `APPVIEW_PDS_INVITE_CODE_PREFIX` before calling `com.atproto.admin.disableInviteCodes`. On success, writes one `inviteCodeDisabled` audit row per code (payload = SHA-256 hash of the suffix, never the plain code).
-
Get an admin view of invite codes.
-
Get all invite codes for the current account. Requires auth.
-
Every customer invite, newest first: the address it went to, whether it is pending, expired or redeemed, and by which account. Staff only.