@go-labs-sg/gosh 1.2.0 → 1.4.0

package/README.md

@@ -246,16 +246,29 @@ and missions stay editable after play starts: each edit re-syncs every started
 team's saved progress in the same transaction. Played stations keep their
 progress and order, while unplayed stations follow the new route. An edit that
 would remove the station a team is in the middle of fails with a conflict and
-changes nothing. A started team's group assignment, team creation, play mode
-and progression settings stay locked. A group shares its ordered station route,
-while each team keeps independent progress through that route.
+changes nothing. A started team's group assignment, play mode and progression
+settings stay locked. A group shares its ordered station route, while each team
+keeps independent progress through that route.
+
+Late teams can join a live group-routed event. `team create` must then include
+a `groupId`, so the team starts on that group's route behind its release gate
+(a held or scheduled group stays closed to it). Restoring an archived team
+while group routing is live works only if the team never played and still has
+a group. Without group routing, team creation still locks once play starts.
+
+```bash
+gosh team create \
+  --input '{"eventId":"event-id","name":"Walk-in team","groupId":"group-id"}' \
+  --target event-id \
+  --allow-state-change
+```
 
 Configure gameplay, then manage the event's routing groups and their complete
 station lists:
 
 ```bash
 gosh event set-gameplay \
-  --input '{"eventId":"event-id","progression":"SEQUENTIAL","groupRoutingEnabled":true,"allowMissionSkipping":true}' \
+  --input '{"eventId":"event-id","progression":"SEQUENTIAL","groupRoutingEnabled":true,"allowMissionSkipping":true,"allowStationSkipping":false}' \
   --target event-id \
   --allow-state-change
 
@@ -368,6 +381,46 @@ finish time are kept, and a finished station accepts the reopened mission
 until it is resolved. Pending submissions must be reviewed first, and a
 reopened mission that still holds earlier points cannot be skipped.
 
+#### Skipping a station
+
+When the event's `allowStationSkipping` gameplay setting is on, a player who
+can submit for their team can skip their current station. Check-in is not
+required, so a team that cannot pass geolock can still move on:
+
+```bash
+gosh player station skip \
+  --input '{"eventId":"event-id","stationId":"station-2"}' \
+  --target station-2 \
+  --allow-state-change
+```
+
+A host with `reviewSubmissions` can skip a team's (`teamId`) or individual
+player's (`eventPlayerId`) current station, or one open mission on it, while
+the event is live. This works whatever the player setting is. Check the route
+first, then pass an optional reason:
+
+```bash
+gosh route progress --input '{"eventId":"event-id","teamId":"team-1"}'
+
+gosh route skip-station \
+  --input '{"eventId":"event-id","teamId":"team-1","stationId":"station-2","reason":"Location closed"}' \
+  --target team-1 \
+  --allow-state-change
+
+gosh route skip-mission \
+  --input '{"eventId":"event-id","teamId":"team-1","missionId":"mission-3","reason":"Prop missing"}' \
+  --target team-1 \
+  --allow-state-change
+```
+
+Only the current station can be skipped, so route order stays intact. Its
+open missions score zero, the station completes (a stop nobody started records
+zero time), and the next stop unlocks immediately; skipping the last stop
+finishes the route. A station with a reopened mission that still holds earlier
+points cannot be skipped until it is resubmitted or reviewed. Who skipped and
+why appears in `route progress`, the activity log, and the results export's
+`skips.csv`.
+
 When reviewing, pass the submission's `updatedAt` from the review queue as
 `expectedUpdatedAt`. If the team resubmitted after you read it, the review is
 refused with `CONFLICT` instead of scoring the new answer blind:
@@ -379,6 +432,44 @@ gosh submission review \
   --allow-state-change
 ```
 
+### RSVP check-in teams
+
+An RSVP form can create a GOSH team on its first successful check-in. RSVP
+signs the request; GOSH creates the team from the registration's emails (the
+first email is the captain, the rest are members), picks the least-loaded
+route group that still has room, and returns the route. This also works
+while the event is live, so a newly checked-in team can start playing.
+
+The binding is off by default. Set the signing secret in the GOSH environment
+as `GOSH_RSVP_CHECK_IN_WEBHOOK_SECRETS=<keyId>:whsec_...` (comma separated
+during rotation). The secret is never stored in the binding.
+
+```bash
+gosh rsvp-check-in binding set \
+  --input '{"eventId":"event-id","sourceOrganizationId":"rsvp-org-id","sourceEventId":"rsvp-event-id","sourceFormId":"rsvp-form-id","keyId":"farm-2026","enabled":true,"groups":[{"groupId":"group-a","teamCapacity":125},{"groupId":"group-b","teamCapacity":125},{"groupId":"group-c","teamCapacity":125},{"groupId":"group-d","teamCapacity":125}],"totalTeamCapacity":500,"maxRosterSize":2}' \
+  --target event-id \
+  --allow-state-change
+gosh rsvp-check-in binding get --input '{"eventId":"event-id"}'
+gosh rsvp-check-in links list --input '{"eventId":"event-id","filter":"REVIEW"}'
+```
+
+- Group load counts every non-archived team in the group, including teams
+  assigned by hand. While the binding is enabled, `routing-group assign-team`
+  and restoring an archived team are refused if they would exceed a group's
+  capacity or the total limit.
+- Groups with equal load are filled in the order listed in `groups`.
+- When every route is full, GOSH creates no team and RSVP shows
+  `CAPACITY_FULL`. The attendee stays checked in.
+- Email addresses are matched case-insensitively. Repeated addresses are
+  counted once. An invalid address, a suspended account, a player removed
+  from the event, or a player already on another team rejects the whole
+  team, and nothing is created.
+- New accounts are not marked verified, and GOSH sends no email. Players sign
+  in later with the normal email code.
+- Undoing the last RSVP check-in keeps the team and route but flags the team
+  for review. Clear the flag with `gosh rsvp-check-in review resolve`. A later
+  check-in reuses the same team.
+
 ### Artwork requirements (no login required)
 
 Read the bundled upload policy before preparing station, mission, or branding artwork:
@@ -462,6 +553,14 @@ gosh submission watch --input '{"organizationId":"acme","eventId":"event-id"}'
 
 Global admins can list users, change global roles, and ban or unban accounts under `gosh admin users …`. Banning an account atomically revokes its active browser and CLI sessions.
 
+Global admins can read every post-event experience review across organizations under `gosh admin reviews …`. `list` returns newest-first `{ items, pageInfo }` cursor pages (`limit` 1 to 100, default 25; pass `pageInfo.nextCursor` back as `cursor`), `count` returns the total, average rating and 5 to 1 star distribution, `filter-options` lists the organizations and events that have reviews, and `export` returns every matching row (up to 10,000). All four accept the same optional filters: `rating` (1 to 5), `organizationId`, `eventId`, `comment` (`with` or `without`) and `q` (comment, participant or event search):
+
+```bash
+gosh admin reviews list --input '{"rating":1,"limit":50}'
+gosh admin reviews count --input '{"comment":"with"}'
+gosh admin reviews export --input '{"organizationId":"org-id"}'
+```
+
 ## Mutation safety
 
 Mutations require `--target` to exactly match an identifier in `--input` (such as an `eventId`, `stationId`, slug, or name), binding the confirmation to the payload. In non-interactive automation, every applicable effect flag is also required:

package/command-manifest.json

@@ -921,6 +921,15 @@
 		"requiresAuth": true,
 		"summary": "List teams and their current members."
 	},
+	{
+		"effects": [],
+		"input": "json",
+		"operation": "query",
+		"path": ["route", "progress"],
+		"procedure": "team.getRouteProgress",
+		"requiresAuth": true,
+		"summary": "Show a team's (teamId) or individual player's (eventPlayerId) sequential route: stops, mission statuses, and who skipped what and why."
+	},
 	{
 		"effects": [],
 		"input": "json",
@@ -1239,9 +1248,47 @@
 		"path": ["routing-group", "assign-team"],
 		"procedure": "team.assignTeamRoutingGroup",
 		"requiresAuth": true,
-		"summary": "Assign a team to a routing group, or clear its assignment with groupId null, before play starts.",
+		"summary": "Assign a team to a routing group, or clear its assignment with groupId null, before play starts. Groups covered by an enabled RSVP check-in binding reject moves that exceed their team capacity.",
 		"targetKeys": ["teamId"]
 	},
+	{
+		"effects": [],
+		"input": "json",
+		"operation": "query",
+		"path": ["rsvp-check-in", "binding", "get"],
+		"procedure": "team.getRsvpCheckInBinding",
+		"requiresAuth": true,
+		"summary": "Show the RSVP check-in team binding for an event: source RSVP organization/event/form, key ID, enabled flag, ordered routing groups with team capacity and current load, total limit and roster size limit. Secrets are never stored or shown. Requires editSetup."
+	},
+	{
+		"effects": ["state-change"],
+		"input": "json",
+		"operation": "mutation",
+		"path": ["rsvp-check-in", "binding", "set"],
+		"procedure": "team.upsertRsvpCheckInBinding",
+		"requiresAuth": true,
+		"summary": "Create or replace the RSVP check-in team binding: {eventId, sourceOrganizationId, sourceEventId, sourceFormId, keyId, enabled, groups:[{groupId, teamCapacity}] in tie-break order, totalTeamCapacity, maxRosterSize}. Disabled by default; the signing secret is set in the GOSH_RSVP_CHECK_IN_WEBHOOK_SECRETS environment variable under keyId. Requires launchEvent.",
+		"targetKeys": ["eventId", "sourceFormId"]
+	},
+	{
+		"effects": [],
+		"input": "json",
+		"operation": "query",
+		"path": ["rsvp-check-in", "links", "list"],
+		"procedure": "team.listRsvpCheckInLinks",
+		"requiresAuth": true,
+		"summary": "List RSVP registrations linked to check-in teams with route, applied revision, review flag and rejection code. filter ALL, REVIEW (undone check-ins) or REJECTED. Requires editSetup."
+	},
+	{
+		"effects": ["state-change"],
+		"input": "json",
+		"operation": "mutation",
+		"path": ["rsvp-check-in", "review", "resolve"],
+		"procedure": "team.resolveRsvpCheckInReview",
+		"requiresAuth": true,
+		"summary": "Clear the review flag on an RSVP check-in team after crew follow-up. The team and its route are unchanged. Requires editSetup.",
+		"targetKeys": ["linkId"]
+	},
 	{
 		"effects": [],
 		"input": "json",
@@ -1622,6 +1669,26 @@
 			"name"
 		]
 	},
+	{
+		"effects": ["state-change"],
+		"input": "json",
+		"operation": "mutation",
+		"path": ["route", "skip-station"],
+		"procedure": "team.skipStation",
+		"requiresAuth": true,
+		"summary": "Skip a team's (teamId) or individual player's (eventPlayerId) current station on a fixed-order route while the event is live, with an optional reason. Its open missions score zero and the next stop unlocks; works whatever the player skipping setting is.",
+		"targetKeys": ["teamId", "eventPlayerId", "stationId"]
+	},
+	{
+		"effects": ["state-change"],
+		"input": "json",
+		"operation": "mutation",
+		"path": ["route", "skip-mission"],
+		"procedure": "team.skipMission",
+		"requiresAuth": true,
+		"summary": "Skip one open mission at a team's (teamId) or individual player's (eventPlayerId) current station for zero points, with an optional reason. Completes the station when it was the last open mission.",
+		"targetKeys": ["teamId", "eventPlayerId", "missionId"]
+	},
 	{
 		"effects": ["state-change"],
 		"input": "json",
@@ -1868,6 +1935,16 @@
 			"name"
 		]
 	},
+	{
+		"effects": ["state-change"],
+		"input": "json",
+		"operation": "mutation",
+		"path": ["event", "update-survey"],
+		"procedure": "event.updateSurveySettings",
+		"requiresAuth": true,
+		"summary": "Set the player survey: built-in, external link, or off, plus its copy and Google review prompt.",
+		"targetKeys": ["eventId"]
+	},
 	{
 		"effects": ["state-change"],
 		"input": "json",
@@ -1964,6 +2041,79 @@
 			"name"
 		]
 	},
+	{
+		"effects": ["state-change"],
+		"input": "json",
+		"operation": "mutation",
+		"path": ["station", "update-check-in"],
+		"procedure": "event.updateStationCheckIn",
+		"requiresAuth": true,
+		"summary": "Set how players unlock a station: open, location, QR, or both.",
+		"targetKeys": [
+			"id",
+			"memberId",
+			"invitationId",
+			"broadcastId",
+			"rewardId",
+			"submissionId",
+			"participantId",
+			"participantIds",
+			"missionId",
+			"stationId",
+			"teamId",
+			"templateId",
+			"eventId",
+			"organizationId",
+			"userId",
+			"key",
+			"uploadId",
+			"email",
+			"joinCode",
+			"slug",
+			"name"
+		]
+	},
+	{
+		"effects": [],
+		"input": "json",
+		"operation": "query",
+		"path": ["station", "qr-codes"],
+		"procedure": "event.getStationQrCodes",
+		"requiresAuth": true,
+		"summary": "List printable QR codes and manual codes for QR-enabled stations."
+	},
+	{
+		"effects": ["state-change"],
+		"input": "json",
+		"operation": "mutation",
+		"path": ["station", "regenerate-qr"],
+		"procedure": "event.regenerateStationQr",
+		"requiresAuth": true,
+		"summary": "Regenerate a station QR. Earlier prints stop working.",
+		"targetKeys": [
+			"id",
+			"memberId",
+			"invitationId",
+			"broadcastId",
+			"rewardId",
+			"submissionId",
+			"participantId",
+			"participantIds",
+			"missionId",
+			"stationId",
+			"teamId",
+			"templateId",
+			"eventId",
+			"organizationId",
+			"userId",
+			"key",
+			"uploadId",
+			"email",
+			"joinCode",
+			"slug",
+			"name"
+		]
+	},
 	{
 		"effects": ["state-change"],
 		"input": "json",
@@ -2288,6 +2438,38 @@
 			"name"
 		]
 	},
+	{
+		"effects": ["state-change"],
+		"input": "json",
+		"operation": "mutation",
+		"path": ["player", "station-qr-check-in"],
+		"procedure": "event.createStationQrCheckInProof",
+		"requiresAuth": true,
+		"summary": "Check in to a station with its scanned QR or manual code.",
+		"targetKeys": [
+			"id",
+			"memberId",
+			"invitationId",
+			"broadcastId",
+			"rewardId",
+			"submissionId",
+			"participantId",
+			"participantIds",
+			"missionId",
+			"stationId",
+			"teamId",
+			"templateId",
+			"eventId",
+			"organizationId",
+			"userId",
+			"key",
+			"uploadId",
+			"email",
+			"joinCode",
+			"slug",
+			"name"
+		]
+	},
 	{
 		"effects": ["state-change"],
 		"input": "json",
@@ -2308,6 +2490,16 @@
 		"summary": "Permanently skip one unresolved mission for zero points when enabled; retain other points and elapsed station time.",
 		"targetKeys": ["missionId"]
 	},
+	{
+		"effects": ["state-change"],
+		"input": "json",
+		"operation": "mutation",
+		"path": ["player", "station", "skip"],
+		"procedure": "event.skipStation",
+		"requiresAuth": true,
+		"summary": "Skip your current sequential station for zero points when the event allows station skipping. No check-in is needed; its missions cannot be played later.",
+		"targetKeys": ["stationId"]
+	},
 	{
 		"effects": ["state-change"],
 		"input": "json",
@@ -2977,6 +3169,42 @@
 			"name"
 		]
 	},
+	{
+		"effects": [],
+		"input": "json",
+		"operation": "query",
+		"path": ["admin", "reviews", "list"],
+		"procedure": "review.listAdmin",
+		"requiresAuth": true,
+		"summary": "List experience reviews across all events as a global admin. Input: optional rating, organizationId, eventId, comment (with|without), q, plus limit, cursor and direction; returns { items, pageInfo }."
+	},
+	{
+		"effects": [],
+		"input": "json",
+		"operation": "query",
+		"path": ["admin", "reviews", "count"],
+		"procedure": "review.getAdminSummary",
+		"requiresAuth": true,
+		"summary": "Count experience reviews for the given filters, with average rating and 5 to 1 star distribution."
+	},
+	{
+		"effects": [],
+		"input": "none",
+		"operation": "query",
+		"path": ["admin", "reviews", "filter-options"],
+		"procedure": "review.listAdminFilterOptions",
+		"requiresAuth": true,
+		"summary": "List organizations and events that have experience reviews."
+	},
+	{
+		"effects": [],
+		"input": "json",
+		"operation": "query",
+		"path": ["admin", "reviews", "export"],
+		"procedure": "review.exportAdmin",
+		"requiresAuth": true,
+		"summary": "Export every experience review matching the filters as rows (capped at 10,000)."
+	},
 	{
 		"path": ["assets", "requirements"],
 		"operation": "local",

package/command-reference.md

@@ -370,6 +370,14 @@ List teams and their current members.
 - Input: `--input '<json>'` required
 - Effects: read-only
 
+## `gosh route progress`
+
+Show a team's (teamId) or individual player's (eventPlayerId) sequential route: stops, mission statuses, and who skipped what and why.
+
+- Authentication: browser-authenticated CLI session required
+- Input: `--input '<json>'` required
+- Effects: read-only
+
 ## `gosh team station-routes`
 
 List each team's linked stations and team-specific route order.
@@ -500,7 +508,39 @@ Replace a group's complete station route in the supplied order before play start
 
 ## `gosh routing-group assign-team`
 
-Assign a team to a routing group, or clear its assignment with groupId null, before play starts.
+Assign a team to a routing group, or clear its assignment with groupId null, before play starts. Groups covered by an enabled RSVP check-in binding reject moves that exceed their team capacity.
+
+- Authentication: browser-authenticated CLI session required
+- Input: `--input '<json>'` required
+- Effects: state-change
+
+## `gosh rsvp-check-in binding get`
+
+Show the RSVP check-in team binding for an event: source RSVP organization/event/form, key ID, enabled flag, ordered routing groups with team capacity and current load, total limit and roster size limit. Secrets are never stored or shown. Requires editSetup.
+
+- Authentication: browser-authenticated CLI session required
+- Input: `--input '<json>'` required
+- Effects: read-only
+
+## `gosh rsvp-check-in binding set`
+
+Create or replace the RSVP check-in team binding: {eventId, sourceOrganizationId, sourceEventId, sourceFormId, keyId, enabled, groups:[{groupId, teamCapacity}] in tie-break order, totalTeamCapacity, maxRosterSize}. Disabled by default; the signing secret is set in the GOSH_RSVP_CHECK_IN_WEBHOOK_SECRETS environment variable under keyId. Requires launchEvent.
+
+- Authentication: browser-authenticated CLI session required
+- Input: `--input '<json>'` required
+- Effects: state-change
+
+## `gosh rsvp-check-in links list`
+
+List RSVP registrations linked to check-in teams with route, applied revision, review flag and rejection code. filter ALL, REVIEW (undone check-ins) or REJECTED. Requires editSetup.
+
+- Authentication: browser-authenticated CLI session required
+- Input: `--input '<json>'` required
+- Effects: read-only
+
+## `gosh rsvp-check-in review resolve`
+
+Clear the review flag on an RSVP check-in team after crew follow-up. The team and its route are unchanged. Requires editSetup.
 
 - Authentication: browser-authenticated CLI session required
 - Input: `--input '<json>'` required
@@ -618,6 +658,22 @@ Review a mission submission.
 - Input: `--input '<json>'` required
 - Effects: state-change
 
+## `gosh route skip-station`
+
+Skip a team's (teamId) or individual player's (eventPlayerId) current station on a fixed-order route while the event is live, with an optional reason. Its open missions score zero and the next stop unlocks; works whatever the player skipping setting is.
+
+- Authentication: browser-authenticated CLI session required
+- Input: `--input '<json>'` required
+- Effects: state-change
+
+## `gosh route skip-mission`
+
+Skip one open mission at a team's (teamId) or individual player's (eventPlayerId) current station for zero points, with an optional reason. Completes the station when it was the last open mission.
+
+- Authentication: browser-authenticated CLI session required
+- Input: `--input '<json>'` required
+- Effects: state-change
+
 ## `gosh mission reopen`
 
 Reopen a submitted or skipped mission for one team (teamId) or player (eventPlayerId) on a fixed-order route. Earlier points count until they resubmit; then only the new submission counts. Finish times are kept.
@@ -754,6 +810,14 @@ Update event branding.
 - Input: `--input '<json>'` required
 - Effects: state-change
 
+## `gosh event update-survey`
+
+Set the player survey: built-in, external link, or off, plus its copy and Google review prompt.
+
+- Authentication: browser-authenticated CLI session required
+- Input: `--input '<json>'` required
+- Effects: state-change
+
 ## `gosh station update-availability`
 
 Update station availability.
@@ -778,6 +842,30 @@ Update station location and geofence settings.
 - Input: `--input '<json>'` required
 - Effects: state-change
 
+## `gosh station update-check-in`
+
+Set how players unlock a station: open, location, QR, or both.
+
+- Authentication: browser-authenticated CLI session required
+- Input: `--input '<json>'` required
+- Effects: state-change
+
+## `gosh station qr-codes`
+
+List printable QR codes and manual codes for QR-enabled stations.
+
+- Authentication: browser-authenticated CLI session required
+- Input: `--input '<json>'` required
+- Effects: read-only
+
+## `gosh station regenerate-qr`
+
+Regenerate a station QR. Earlier prints stop working.
+
+- Authentication: browser-authenticated CLI session required
+- Input: `--input '<json>'` required
+- Effects: state-change
+
 ## `gosh event save-as-template`
 
 Save an event as a template.
@@ -922,6 +1010,14 @@ Create an expiring station check-in proof.
 - Input: `--input '<json>'` required
 - Effects: state-change
 
+## `gosh player station-qr-check-in`
+
+Check in to a station with its scanned QR or manual code.
+
+- Authentication: browser-authenticated CLI session required
+- Input: `--input '<json>'` required
+- Effects: state-change
+
 ## `gosh player station start`
 
 Start the current sequential station's shared mission timer and reveal its missions; required check-in still applies.
@@ -938,6 +1034,14 @@ Permanently skip one unresolved mission for zero points when enabled; retain oth
 - Input: `--input '<json>'` required
 - Effects: state-change
 
+## `gosh player station skip`
+
+Skip your current sequential station for zero points when the event allows station skipping. No check-in is needed; its missions cannot be played later.
+
+- Authentication: browser-authenticated CLI session required
+- Input: `--input '<json>'` required
+- Effects: state-change
+
 ## `gosh player mission submit`
 
 Submit a mission response and return revealMessage, including already-completed submissions.
@@ -1180,6 +1284,38 @@ Unban a user.
 - Input: `--input '<json>'` required
 - Effects: state-change
 
+## `gosh admin reviews list`
+
+List experience reviews across all events as a global admin. Input: optional rating, organizationId, eventId, comment (with|without), q, plus limit, cursor and direction; returns { items, pageInfo }.
+
+- Authentication: browser-authenticated CLI session required
+- Input: `--input '<json>'` required
+- Effects: read-only
+
+## `gosh admin reviews count`
+
+Count experience reviews for the given filters, with average rating and 5 to 1 star distribution.
+
+- Authentication: browser-authenticated CLI session required
+- Input: `--input '<json>'` required
+- Effects: read-only
+
+## `gosh admin reviews filter-options`
+
+List organizations and events that have experience reviews.
+
+- Authentication: browser-authenticated CLI session required
+- Input: none
+- Effects: read-only
+
+## `gosh admin reviews export`
+
+Export every experience review matching the filters as rows (capped at 10,000).
+
+- Authentication: browser-authenticated CLI session required
+- Input: `--input '<json>'` required
+- Effects: read-only
+
 ## `gosh assets requirements`
 
 Show upload limits and separate artwork recommendations without login or network access.

package/dist/index.js

@@ -7452,6 +7452,10 @@ var typedOperations = {
     kind: "query",
     invoke: (client, input) => client.team.list.query(input)
   },
+  "team.getRouteProgress": {
+    kind: "query",
+    invoke: (client, input) => client.team.getRouteProgress.query(input)
+  },
   "team.getStationRoutes": {
     kind: "query",
     invoke: (client, input) => client.team.getStationRoutes.query(input)
@@ -7520,6 +7524,22 @@ var typedOperations = {
     kind: "mutation",
     invoke: (client, input) => client.team.assignTeamRoutingGroup.mutate(input)
   },
+  "team.getRsvpCheckInBinding": {
+    kind: "query",
+    invoke: (client, input) => client.team.getRsvpCheckInBinding.query(input)
+  },
+  "team.upsertRsvpCheckInBinding": {
+    kind: "mutation",
+    invoke: (client, input) => client.team.upsertRsvpCheckInBinding.mutate(input)
+  },
+  "team.listRsvpCheckInLinks": {
+    kind: "query",
+    invoke: (client, input) => client.team.listRsvpCheckInLinks.query(input)
+  },
+  "team.resolveRsvpCheckInReview": {
+    kind: "mutation",
+    invoke: (client, input) => client.team.resolveRsvpCheckInReview.mutate(input)
+  },
   "template.list": {
     kind: "query",
     invoke: (client, input) => client.template.list.query(input)
@@ -7576,6 +7596,14 @@ var typedOperations = {
     kind: "mutation",
     invoke: (client, input) => client.event.reviewSubmission.mutate(input)
   },
+  "team.skipStation": {
+    kind: "mutation",
+    invoke: (client, input) => client.team.skipStation.mutate(input)
+  },
+  "team.skipMission": {
+    kind: "mutation",
+    invoke: (client, input) => client.team.skipMission.mutate(input)
+  },
   "event.reopenMission": {
     kind: "mutation",
     invoke: (client, input) => client.event.reopenMission.mutate(input)
@@ -7644,6 +7672,10 @@ var typedOperations = {
     kind: "mutation",
     invoke: (client, input) => client.event.updateBranding.mutate(input)
   },
+  "event.updateSurveySettings": {
+    kind: "mutation",
+    invoke: (client, input) => client.event.updateSurveySettings.mutate(input)
+  },
   "event.updateStationAvailability": {
     kind: "mutation",
     invoke: (client, input) => client.event.updateStationAvailability.mutate(input)
@@ -7656,6 +7688,18 @@ var typedOperations = {
     kind: "mutation",
     invoke: (client, input) => client.event.updateStationLocation.mutate(input)
   },
+  "event.updateStationCheckIn": {
+    kind: "mutation",
+    invoke: (client, input) => client.event.updateStationCheckIn.mutate(input)
+  },
+  "event.getStationQrCodes": {
+    kind: "query",
+    invoke: (client, input) => client.event.getStationQrCodes.query(input)
+  },
+  "event.regenerateStationQr": {
+    kind: "mutation",
+    invoke: (client, input) => client.event.regenerateStationQr.mutate(input)
+  },
   "event.saveAsTemplate": {
     kind: "mutation",
     invoke: (client, input) => client.event.saveAsTemplate.mutate(input)
@@ -7728,6 +7772,10 @@ var typedOperations = {
     kind: "mutation",
     invoke: (client, input) => client.event.createStationCheckInProof.mutate(input)
   },
+  "event.createStationQrCheckInProof": {
+    kind: "mutation",
+    invoke: (client, input) => client.event.createStationQrCheckInProof.mutate(input)
+  },
   "event.startStation": {
     kind: "mutation",
     invoke: (client, input) => client.event.startStation.mutate(input)
@@ -7736,6 +7784,10 @@ var typedOperations = {
     kind: "mutation",
     invoke: (client, input) => client.event.skipMission.mutate(input)
   },
+  "event.skipStation": {
+    kind: "mutation",
+    invoke: (client, input) => client.event.skipStation.mutate(input)
+  },
   "event.submitMission": {
     kind: "mutation",
     invoke: (client, input) => client.event.submitMission.mutate(input)
@@ -7863,6 +7915,22 @@ var typedOperations = {
   "user.unban": {
     kind: "mutation",
     invoke: (client, input) => client.user.unban.mutate(input)
+  },
+  "review.listAdmin": {
+    kind: "query",
+    invoke: (client, input) => client.review.listAdmin.query(input)
+  },
+  "review.getAdminSummary": {
+    kind: "query",
+    invoke: (client, input) => client.review.getAdminSummary.query(input)
+  },
+  "review.listAdminFilterOptions": {
+    kind: "query",
+    invoke: (client, input) => client.review.listAdminFilterOptions.query(input)
+  },
+  "review.exportAdmin": {
+    kind: "query",
+    invoke: (client, input) => client.review.exportAdmin.query(input)
   }
 };
 
@@ -7918,13 +7986,19 @@ var defaultMutationTargetKeys = [
 var mutationTargetKeys = {
   "team.updateRoutingGroupRelease": ["groupId", "eventId"],
   "team.setGameplaySettings": ["eventId"],
+  "event.updateSurveySettings": ["eventId"],
   "team.createRoutingGroup": ["eventId"],
   "team.renameRoutingGroup": ["groupId"],
   "team.deleteRoutingGroup": ["groupId"],
   "team.setRoutingGroupStations": ["groupId"],
   "team.assignTeamRoutingGroup": ["teamId"],
+  "team.upsertRsvpCheckInBinding": ["eventId", "sourceFormId"],
+  "team.resolveRsvpCheckInReview": ["linkId"],
   "event.startStation": ["stationId"],
   "event.skipMission": ["missionId"],
+  "event.skipStation": ["stationId"],
+  "team.skipStation": ["teamId", "eventPlayerId", "stationId"],
+  "team.skipMission": ["teamId", "eventPlayerId", "missionId"],
   "event.reopenMission": ["teamId", "eventPlayerId", "missionId"],
   "event.create": ["organizationId", "name"],
   "event.createFromTemplate": ["organizationId", "templateId"],
@@ -8022,6 +8096,7 @@ var commands = [
   mutation(["mission", "archive"], "event.archiveMission", "Archive a mission.", ["state-change", "delete"]),
   mutation(["mission", "reorder"], "event.reorderMissions", "Reorder missions within a station.", ["state-change"]),
   query(["team", "list"], "team.list", "List teams and their current members."),
+  query(["route", "progress"], "team.getRouteProgress", "Show a team's (teamId) or individual player's (eventPlayerId) sequential route: stops, mission statuses, and who skipped what and why."),
   query(["team", "station-routes"], "team.getStationRoutes", "List each team's linked stations and team-specific route order."),
   mutation(["team", "create"], "team.create", "Create a team.", [
     "state-change"
@@ -8042,7 +8117,11 @@ var commands = [
   mutation(["routing-group", "rename"], "team.renameRoutingGroup", "Rename an event's routing group before play starts.", ["state-change"]),
   mutation(["routing-group", "delete"], "team.deleteRoutingGroup", "Delete an unassigned routing group before play starts.", ["state-change", "delete"]),
   mutation(["routing-group", "set-stations"], "team.setRoutingGroupStations", "Replace a group's complete station route in the supplied order before play starts.", ["state-change"]),
-  mutation(["routing-group", "assign-team"], "team.assignTeamRoutingGroup", "Assign a team to a routing group, or clear its assignment with groupId null, before play starts.", ["state-change"]),
+  mutation(["routing-group", "assign-team"], "team.assignTeamRoutingGroup", "Assign a team to a routing group, or clear its assignment with groupId null, before play starts. Groups covered by an enabled RSVP check-in binding reject moves that exceed their team capacity.", ["state-change"]),
+  query(["rsvp-check-in", "binding", "get"], "team.getRsvpCheckInBinding", "Show the RSVP check-in team binding for an event: source RSVP organization/event/form, key ID, enabled flag, ordered routing groups with team capacity and current load, total limit and roster size limit. Secrets are never stored or shown. Requires editSetup."),
+  mutation(["rsvp-check-in", "binding", "set"], "team.upsertRsvpCheckInBinding", "Create or replace the RSVP check-in team binding: {eventId, sourceOrganizationId, sourceEventId, sourceFormId, keyId, enabled, groups:[{groupId, teamCapacity}] in tie-break order, totalTeamCapacity, maxRosterSize}. Disabled by default; the signing secret is set in the GOSH_RSVP_CHECK_IN_WEBHOOK_SECRETS environment variable under keyId. Requires launchEvent.", ["state-change"]),
+  query(["rsvp-check-in", "links", "list"], "team.listRsvpCheckInLinks", "List RSVP registrations linked to check-in teams with route, applied revision, review flag and rejection code. filter ALL, REVIEW (undone check-ins) or REJECTED. Requires editSetup."),
+  mutation(["rsvp-check-in", "review", "resolve"], "team.resolveRsvpCheckInReview", "Clear the review flag on an RSVP check-in team after crew follow-up. The team and its route are unchanged. Requires editSetup.", ["state-change"]),
   query(["template", "list"], "template.list", "List templates visible in an organization; global admins can include every organization."),
   query(["template", "get"], "template.getById", "Get a template visible in the requested organization; global admins can get any template."),
   mutation(["template", "create"], "template.create", "Create an organization template, including shared stations with optional per-team route order.", ["state-change"]),
@@ -8060,6 +8139,8 @@ var commands = [
   mutation(["reward", "update"], "event.updateReward", "Update an event reward.", ["state-change"]),
   mutation(["score", "adjust"], "event.createScoreAdjustment", "Create a manual score adjustment.", ["state-change"]),
   mutation(["submission", "review"], "event.reviewSubmission", "Review a mission submission.", ["state-change"]),
+  mutation(["route", "skip-station"], "team.skipStation", "Skip a team's (teamId) or individual player's (eventPlayerId) current station on a fixed-order route while the event is live, with an optional reason. Its open missions score zero and the next stop unlocks; works whatever the player skipping setting is.", ["state-change"]),
+  mutation(["route", "skip-mission"], "team.skipMission", "Skip one open mission at a team's (teamId) or individual player's (eventPlayerId) current station for zero points, with an optional reason. Completes the station when it was the last open mission.", ["state-change"]),
   mutation(["mission", "reopen"], "event.reopenMission", "Reopen a submitted or skipped mission for one team (teamId) or player (eventPlayerId) on a fixed-order route. Earlier points count until they resubmit; then only the new submission counts. Finish times are kept.", ["state-change"]),
   mutation(["results-share", "regenerate"], "event.regenerateResultsPortalShare", "Create a new results portal share token.", ["state-change"]),
   mutation(["results-share", "revoke"], "event.revokeResultsPortalShare", "Revoke the current results portal share token.", ["state-change", "delete"]),
@@ -8077,9 +8158,13 @@ var commands = [
   query(["results-share", "get"], "event.getResultsPortalShare", "Get the current results portal share."),
   mutation(["event", "update-access"], "event.updateAccess", "Update event access rules.", ["state-change"]),
   mutation(["event", "update-branding"], "event.updateBranding", "Update event branding.", ["state-change"]),
+  mutation(["event", "update-survey"], "event.updateSurveySettings", "Set the player survey: built-in, external link, or off, plus its copy and Google review prompt.", ["state-change"]),
   mutation(["station", "update-availability"], "event.updateStationAvailability", "Update station availability.", ["state-change"]),
   mutation(["station", "update-image"], "event.updateStationImage", "Update a station image.", ["state-change"]),
   mutation(["station", "update-location"], "event.updateStationLocation", "Update station location and geofence settings.", ["state-change"]),
+  mutation(["station", "update-check-in"], "event.updateStationCheckIn", "Set how players unlock a station: open, location, QR, or both.", ["state-change"]),
+  query(["station", "qr-codes"], "event.getStationQrCodes", "List printable QR codes and manual codes for QR-enabled stations."),
+  mutation(["station", "regenerate-qr"], "event.regenerateStationQr", "Regenerate a station QR. Earlier prints stop working.", ["state-change"]),
   mutation(["event", "save-as-template"], "event.saveAsTemplate", "Save an event as a template.", ["state-change"]),
   query(["player", "event"], "event.getJoinDetails", "Get the current player's event details."),
   query(["player", "leaderboard", "page"], "event.getPaginatedPlayerLeaderboard", "Get a page of the player leaderboard."),
@@ -8100,8 +8185,10 @@ var commands = [
   mutation(["player", "display-name", "update"], "event.updatePlayerDisplayName", "Update the player's display name.", ["state-change"]),
   mutation(["player", "resolve-join-code"], "event.resolveJoinCode", "Resolve an event or team join code.", []),
   mutation(["player", "station-check-in"], "event.createStationCheckInProof", "Create an expiring station check-in proof.", ["state-change"]),
+  mutation(["player", "station-qr-check-in"], "event.createStationQrCheckInProof", "Check in to a station with its scanned QR or manual code.", ["state-change"]),
   mutation(["player", "station", "start"], "event.startStation", "Start the current sequential station's shared mission timer and reveal its missions; required check-in still applies.", ["state-change"]),
   mutation(["player", "mission", "skip"], "event.skipMission", "Permanently skip one unresolved mission for zero points when enabled; retain other points and elapsed station time.", ["state-change"]),
+  mutation(["player", "station", "skip"], "event.skipStation", "Skip your current sequential station for zero points when the event allows station skipping. No check-in is needed; its missions cannot be played later.", ["state-change"]),
   mutation(["player", "mission", "submit"], "event.submitMission", "Submit a mission response and return revealMessage, including already-completed submissions.", ["state-change"]),
   query(["public", "event-login"], "event.getPublicLoginDetails", "Get public event login details.", { requiresAuth: false }),
   query(["public", "results"], "event.getResultsPortal", "Get a shared public results portal.", { requiresAuth: false }),
@@ -8133,7 +8220,11 @@ var commands = [
   mutation(["admin", "users", "ban"], "user.ban", "Ban a user and revoke their sessions and API keys.", ["state-change", "delete"]),
   mutation(["admin", "users", "unban"], "user.unban", "Unban a user.", [
     "state-change"
-  ])
+  ]),
+  query(["admin", "reviews", "list"], "review.listAdmin", "List experience reviews across all events as a global admin. Input: optional rating, organizationId, eventId, comment (with|without), q, plus limit, cursor and direction; returns { items, pageInfo }."),
+  query(["admin", "reviews", "count"], "review.getAdminSummary", "Count experience reviews for the given filters, with average rating and 5 to 1 star distribution."),
+  query(["admin", "reviews", "filter-options"], "review.listAdminFilterOptions", "List organizations and events that have experience reviews.", { input: "none" }),
+  query(["admin", "reviews", "export"], "review.exportAdmin", "Export every experience review matching the filters as rows (capped at 10,000).")
 ];
 var commandManifest = commands.map((command) => ({
   effects: command.effects,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@go-labs-sg/gosh",
-  "version": "1.2.0",
+  "version": "1.4.0",
   "description": "GOSH CLI for organizers and AI agents — manage organizations, events, teams, stations, missions, templates, and live operations through the GOSH API.",
   "type": "module",
   "main": "./dist/index.js",