@go-labs-sg/rsvp 0.2.0 → 0.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +14 -2
  2. package/dist/index.js +6439 -2187
  3. package/package.json +1 -2
package/README.md CHANGED
@@ -49,18 +49,30 @@ rsvp auth status
49
49
  rsvp auth whoami
50
50
  ```
51
51
 
52
- `rsvp auth login` opens RSVP in the system browser. Sign in through RSVP's normal Google-backed web flow if needed, verify that the displayed device and code match the terminal, then click **Authorize CLI**. Existing browser sessions skip another Google login but never skip explicit CLI approval.
52
+ `rsvp auth login` opens RSVP in the system browser. Sign in through RSVP's normal email one-time-password flow if needed, verify that the displayed device code matches the terminal, then click **Authorize CLI**. Existing browser sessions skip another email-code prompt but never skip explicit CLI approval.
53
53
 
54
54
  RSVP CLI access is limited to global administrators. The server rechecks the account's current global role and ban state when issuing, refreshing, and authenticating CLI credentials, so removing the admin role immediately blocks further CLI access.
55
55
 
56
- The CLI polls automatically and stores only RSVP-issued credentials through `Bun.secrets`. It does not store Google credentials and has no API-key or environment-variable fallback. Use `rsvp auth logout` to revoke the remote session and remove its local credential. For SSH or containers, pass `--no-browser` and open the printed URL on another device.
56
+ The CLI polls automatically and stores only RSVP-issued credentials through `Bun.secrets`. It does not store browser or email-OTP credentials and has no API-key or environment-variable fallback. Use `rsvp auth logout` to revoke the remote session and remove its local credential. For SSH or containers, pass `--no-browser` and open the printed URL on another device.
57
57
 
58
58
  The default API is `https://rsvp.getout.events`. Override it with `RSVP_API_URL` or `--api-url`; non-local overrides must use HTTPS.
59
59
 
60
+ Global administrators can update another account's global role from the web user manager or with `rsvp user role update --allow-state-change --target <user-id> --payload '{"userId":"<user-id>","role":"admin"}'`. Administrators cannot remove their own global admin role.
61
+
60
62
  ## Command safety
61
63
 
62
64
  Use `rsvp help` for the command catalogue. Every response is a JSON envelope on stdout; errors and diagnostics go to stderr. `rsvp manifest` emits the machine-readable command reference for tooling.
63
65
 
66
+ For a read-only registration-journey diagnosis, inspect the event, draft,
67
+ published versions, and event-owned resources together:
68
+
69
+ ```sh
70
+ rsvp event get --organization-id org_123 --event-id evt_123
71
+ rsvp event flow draft get --organization-id org_123 --event-id evt_123
72
+ rsvp event flow versions list --organization-id org_123 --event-id evt_123
73
+ rsvp event flow resources get --organization-id org_123 --event-id evt_123
74
+ ```
75
+
64
76
  Commands returning invitee, registration, roster, report, audit, export, payment, or user data require `--ack-sensitive-data`. Mutations require their exact effect gates and a `--target` matching the affected resource in the payload. Depending on the operation, gates include:
65
77
 
66
78
  - `--allow-state-change`