totem-management

Validate totem linking permissions against subscriptions, revocation, and time windows.

Updated Feb 16, 2026
One-click install
npx skills add https://github.com/Fivents/one-id --skill totem-management
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: totem-management
Source: https://github.com/Fivents/one-id/tree/main/.claude/skills/totem-management
Command: npx skills add https://github.com/Fivents/one-id --skill totem-management

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Prevents incorrect or unauthorized associations of physical totems to organizations and events by enforcing subscription, revocation, and temporal constraints so that check-in devices only operate when properly authorized.

Core Features & Use Cases

  • Link Validation: Enforces that a totem can only link to an organization if the organization has an active, non-revoked subscription covering the current time window.
  • Event Association: Ensures a totem is linked to events only via an organization subscription and not directly, preventing bypass of billing or access controls.
  • Anti-Pattern Prevention: Detects and blocks direct linking without subscription and ignores links where revokedAt is set or time window constraints fail.
  • Use Case: When provisioning a totem at an event, validate the organization's subscription, ensure the totem is not revoked, and confirm the current timestamp falls within the allowed window before enabling check-in flows.

Quick Start

Validate whether totem TOTEM_ID may link to event EVENT_ID under organization ORG_ID by checking active subscription, revokedAt, and the applicable time window.

Frequently Asked Questions about totem-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate totem linking permissions for event check-in?

Totem linking requires an active, non-revoked organization subscription covering the current time window. The totem must link to events via the organization, preventing direct linking and bypassing billing or access controls.

Can I link a totem directly to an event without an organization subscription?

No, a totem must link to events only via an active organization subscription. Direct linking without a subscription is detected and blocked as an anti-pattern to prevent bypassing billing or access controls.

What happens if a totem subscription is revoked before an event?

If a totem subscription is revoked, link validation ignores the link request because the revokedAt status fails the permission check, ensuring the device cannot operate for event check-in.

How do temporal constraints affect totem lifecycle management?

Temporal constraints restrict totem operation to configured time windows. Validation checks adherence to these windows, blocking link creation if the current timestamp falls outside the allowed period.

Does totem management support multimodal check-in scenarios?

Yes, totem management supports multimodal check-in scenarios such as face, QR, or code entry by validating linking permissions, subscription status, and temporal windows before allowing access.