totem-management

What problem does it solve?

Prevents incorrect or unauthorized associations of physical totems to organizations and events by enforcing subscription, revocation, and temporal constraints so that check-in devices only operate when properly authorized.

Core Features & Use Cases

• Link Validation: Enforces that a totem can only link to an organization if the organization has an active, non-revoked subscription covering the current time window.
• Event Association: Ensures a totem is linked to events only via an organization subscription and not directly, preventing bypass of billing or access controls.
• Anti-Pattern Prevention: Detects and blocks direct linking without subscription and ignores links where revokedAt is set or time window constraints fail.
• Use Case: When provisioning a totem at an event, validate the organization's subscription, ensure the totem is not revoked, and confirm the current timestamp falls within the allowed window before enabling check-in flows.

Quick Start

Validate whether totem TOTEM_ID may link to event EVENT_ID under organization ORG_ID by checking active subscription, revokedAt, and the applicable time window.