Operators · v1.2.2
People, roles, and allow/deny.
Each operator signs in as themselves with a one-time invite link; their role (not a shared switch) decides what they may draft, request, or approve. Operators never receive the Fanvue creator OAuth session — only the owner connects Fanvue. Denied actions fail closed even when the token has the scope. Stores are local gitignored files.
Single-user mode (legacy)
OwnerNo operator users yet, so the legacy activeRole applies. Invite yourself as owner below (or set OPERATOR_OWNER_EMAIL) to switch to per-person sessions.
People
owner only- No operators yet.
Fanvue scope packs (platform ceiling)
Configure these in Fanvue App Builder and Vercel OAUTH_SCOPES. Unknown scopes are rejected at startup.
- read:self
- read:chat
- write:chat
- read:fan
- read:creator
- write:creator
- read:media
- write:media
- read:post
- write:post
- read:insights
- read:tracking_links
- write:tracking_links
- read:agency
- write:agency
- read:experience
- write:experience
Edit local ACL
gitignored JSONNote: write:creator and write:agency stay out of non-owner defaults. Custom never gains approve.