spree_cm_commissioner 2.12.9 → 2.13.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 574f5215f2246c2cc433d99ab73113be56a4c82b509758548c1d0951c894caef
-  data.tar.gz: 0fec7f50315d67e24a41779dafd38467c5c7648180c4b54b3ec1d05f1cc7f1a6
+  metadata.gz: 709925b9130644b3e39ef1bb01415692019bc72643176593877c42f1a710ff0f
+  data.tar.gz: a336bae1ac6555051a4d6c718d8cce7bb1fcbed67b8bea0a2accb5b96cb8ae1b
 SHA512:
-  metadata.gz: 700f502becf735bfb55744ef153508ecfdb14f0f89f6a9a0b2063739c9739a0cbcfaab2d6b7f992858b0c601e212330a90d927a5c8c9b07621b96ef41071b35a
-  data.tar.gz: 31e2cc185129609a659dc3257a343d62ff9dc5b491ab8120a8e4b3daf2b9f77f8d3aca445f7a128b6e2f30bfad4504a5d2dfb0d2a6980ddcb9a33f8eb41551cf
+  metadata.gz: '0769de948ff5436227d88a348a051a7992956deca52f0a165c4cfa885750b9d672c9192482070d922b52921ded1b080a08c004eb6d33206ae67638ee4eec3a61'
+  data.tar.gz: '09affaee452bf8a04579f43999a2beb71282b0d369109085fa59b63a8851d0c6fb80ad67b9ffc3930542ab6fe9e6b9c500c17b243380b5d33440225e30d8cc02'

data/Gemfile.lock

@@ -34,7 +34,7 @@ GIT
 PATH
   remote: .
   specs:
-    spree_cm_commissioner (2.12.9)
+    spree_cm_commissioner (2.13.1)
       activerecord-multi-tenant
       activerecord_json_validator (~> 2.1, >= 2.1.3)
       aws-sdk-cloudfront

data/app/controllers/spree/admin/orders/customer_details_controller_decorator.rb

@@ -15,11 +15,13 @@ module Spree
         def assign_customer
           user = tenant_user_scope.find_by(id: params[:user_id])
 
-          if user
-            @order.associate_user!(user)
-            flash[:success] = Spree.t('admin.orders.customer_details.customer_assigned', email: user.email)
-          else
+          if user.nil?
             flash[:error] = Spree.t(:user_not_found)
+          elsif user.id == @order.user_id
+            flash[:notice] = Spree.t('admin.orders.customer_details.user_already_assigned', email: user.email)
+          else
+            @order.associate_user!(user)
+            flash[:success] = Spree.t('admin.orders.customer_details.user_assigned', email: user.email)
           end
 
           redirect_to spree.edit_admin_order_customer_path(@order)

data/app/controllers/spree/admin/system/waiting_room_sessions_controller.rb

@@ -2,6 +2,9 @@ module Spree
   module Admin
     module System
       class WaitingRoomSessionsController < Spree::Admin::BaseController
+        GUESTS_PER_PAGE_OPTIONS = [25, 50, 100, 200, 500, 1000].freeze
+        GUESTS_DEFAULT_PER_PAGE = 50
+
         def index
           @filter = params[:filter] if params[:filter] == 'load_test'
 
@@ -21,6 +24,114 @@ module Spree
 
           redirect_back fallback_location: admin_system_waiting_room_sessions_path
         end
+
+        # Only resolves date/doc_id for the form + the frame's src URL. The actual Firestore
+        # read happens in #guests_status, once the browser loads that src -- never here, or every
+        # full-page load would pay for a read whose result is thrown away unrendered.
+        def guests
+          @date = params[:date].presence || Time.zone.today.strftime('%Y-%m-%d')
+          @doc_id = params[:doc_id].presence
+          @per_page = guests_per_page
+          @in_queue_only = guests_in_queue_only?
+        end
+
+        # GET .../waiting_room_sessions/guests_status -- the poll target, mirroring
+        # SeatLockable#seat_lock_status: a standalone endpoint the async-operation-status
+        # Stimulus controller reloads every 10s, kept separate from `guests` so the initial
+        # full-page load never has to guess whether it's being polled.
+        def guests_status
+          date = params[:date].presence || Time.zone.today.strftime('%Y-%m-%d')
+          doc_id = params[:doc_id].presence
+          in_queue_only = guests_in_queue_only?
+          error = nil
+
+          guests =
+            if doc_id
+              # A direct doc-id lookup always finds the doc regardless of status -- an admin
+              # searching a specific id almost certainly wants to know its state (including
+              # Admitted/Left), not have it hidden by the same filter that shapes the plain list.
+              result = SpreeCmCommissioner::WaitingRoom::Guests::Find.call(date: date, doc_id: doc_id)
+              error = result.error.to_s unless result.success?
+              [result.value&.[](:guest)].compact
+            else
+              # Cached for the same span as the client's poll interval so N concurrently open admin
+              # tabs (each polling every 10s) collapse into one Firestore read per date per 10s,
+              # instead of one per open tab. Keyed by filter too -- "in queue" and "all" are
+              # different Firestore queries, not a client-side slice of the same result.
+              #
+              # A failed fetch (e.g. a missing Firestore composite index for in_queue_only's
+              # where+order combination) is never cached: caching `[]` would make the next 10s
+              # poll -- and the one after that -- believe the queue is empty instead of retrying.
+              cache_key = "admin/waiting_room_guests/#{date}/#{in_queue_only}"
+              docs = Rails.cache.read(cache_key)
+
+              if docs.nil?
+                result = SpreeCmCommissioner::WaitingRoom::Guests::List.call(date: date, in_queue_only: in_queue_only)
+                if result.success?
+                  docs = result.value[:guests]
+                  Rails.cache.write(cache_key, docs, expires_in: 10.seconds)
+                else
+                  error = result.error.to_s
+                  docs = []
+                end
+              end
+
+              Kaminari.paginate_array(docs).page(params[:page]).per(guests_per_page)
+            end
+
+          render partial: 'guests_table',
+                 locals: { guests: guests, doc_id_search: doc_id.present?, date: date, frontier_position: frontier_position, error: error },
+                 layout: false
+        end
+
+        # GET .../waiting_room_sessions/guest -- the click target for a row's "Raw" button. Not
+        # part of the cached list/poll cycle: a lone extra Firestore read only when an admin
+        # actually wants the full document, instead of shipping every field of every row (up to
+        # MAX_DOCS of them) in the guests_status response whether anyone looks at it or not.
+        def guest
+          # This is the one place in the tab meant to show the truth of this instant, not a
+          # 10s-old cached snapshot -- an admin opens it specifically to check a guest's current
+          # state. expires_now stops the browser from ever serving a previous click's response
+          # back for the same doc_id (e.g. reopening the same row after its state changed).
+          expires_now
+
+          date = params[:date].presence || Time.zone.today.strftime('%Y-%m-%d')
+          doc_id = params[:doc_id]
+          result = SpreeCmCommissioner::WaitingRoom::Guests::Find.call(date: date, doc_id: doc_id)
+          error = result.error.to_s unless result.success?
+
+          render partial: 'guest_raw', locals: { guest: result.value&.[](:guest), error: error }, layout: false
+        end
+
+        private
+
+        # Same shape as Spree's own admin index actions (e.g. Admin::OrdersController#index:
+        # `.per(params[:per_page] || Spree::Backend::Config[:admin_orders_per_page])`) -- an
+        # unlisted value still works (typed straight into the URL, same as any stock Spree index),
+        # GUESTS_PER_PAGE_OPTIONS only bounds what the dropdown itself offers.
+        def guests_per_page
+          requested = params[:per_page].to_i
+          requested.positive? ? requested : GUESTS_DEFAULT_PER_PAGE
+        end
+
+        # Defaults on: hiding Admitted/Left is the useful everyday view, and it's also what keeps
+        # the MAX_DOCS cap from being spent on already-resolved history on a day with heavy
+        # traffic (see WaitingRoom::Guests::List). ?status=all is the explicit escape hatch for
+        # historical/debugging lookups that need to see resolved guests too.
+        def guests_in_queue_only?
+          params[:status] != 'all'
+        end
+
+        # Same 10s window as the guest list itself: this is one extra doc read per render, and the
+        # "people ahead" figure it feeds only changes as often as Positions::Stamp ticks (10s),
+        # so caching it any shorter would just be re-fetching a value that hasn't moved.
+        def frontier_position
+          Rails.cache.fetch('admin/waiting_room_frontier_position', expires_in: 10.seconds) do
+            fetcher = SpreeCmCommissioner::WaitingRoomLobbyMetadataFetcher.new
+            fetcher.load_document_data
+            fetcher.frontier_position
+          end
+        end
       end
     end
   end

data/app/controllers/spree/api/v2/platform/resource_controller_decorator.rb

@@ -0,0 +1,48 @@
+module Spree
+  module Api
+    module V2
+      module Platform
+        # Single reusable entry point for tenant-scoping any Platform API resource: pass
+        # `?tenant_id=X` on the request and the collection is narrowed to that tenant, without each
+        # controller having to wire up its own filter/param handling.
+        #
+        # Tri-state on the param itself:
+        #   - absent: no scoping applied, collection flows through unrestricted (existing callers,
+        #     eg. the products/users pickers in checkouts and private sales, are unaffected).
+        #   - "0": scope to records with no tenant (tenant_id IS NULL) - most vendors today aren't
+        #     attached to a tenant, so this is the common case for tenant-scoped search.
+        #   - any other value: scope to that exact tenant_id.
+        #
+        # Default assumes the model owns a `tenant_id` column directly (true for Spree::User,
+        # Spree::Vendor, SpreeCmCommissioner::HomepageSection - see their `multi_tenant :tenant`
+        # declarations). A model related to tenant only indirectly should override
+        # `scope_by_tenant` in its own controller decorator.
+        module ResourceControllerDecorator
+          def scope
+            base_scope = super
+
+            # Keep the existing behavior when no tenant_id param is passed,
+            # so that existing controllers are unaffected.
+            return base_scope if params[:tenant_id].nil?
+
+            scope_by_tenant(base_scope, params[:tenant_id])
+          end
+
+          private
+
+          def scope_by_tenant(scope, tenant_id)
+            return scope unless scope.klass.column_names.include?('tenant_id')
+
+            if tenant_id.to_s == '0'
+              scope.where(tenant_id: nil)
+            else
+              scope.where(tenant_id: tenant_id)
+            end
+          end
+        end
+      end
+    end
+  end
+end
+
+Spree::Api::V2::Platform::ResourceController.prepend(Spree::Api::V2::Platform::ResourceControllerDecorator)

data/app/helpers/spree/admin/system/waiting_room_sessions_helper.rb

@@ -0,0 +1,50 @@
+module Spree
+  module Admin
+    module System
+      # Shared badge/derived-value logic for the Guests tab (_guests_table.html.erb's Queue and
+      # Heartbeat columns, _guest_raw.html.erb's modal) -- kept in one place so both never drift
+      # into disagreeing about what "Admitted" or "Stale ping" means for the same document.
+      module WaitingRoomSessionsHelper
+        # Mutually exclusive lifecycle stage, in the order a guest actually moves through them.
+        # Left is checked first because Heartbeat::Sweep can mark left_at on a doc that was still
+        # mid-call (call_dispatched_at set but never granted) -- left always wins once set.
+        def guest_queue_status(guest)
+          if guest[:left_at]
+            ['Left queue', 'badge-secondary']
+          elsif guest[:allow_to_enter_room_at]
+            %w[Admitted badge-success]
+          elsif guest[:call_dispatched_at]
+            ['Being called', 'badge-info']
+          else
+            %w[Waiting badge-primary]
+          end
+        end
+
+        # Only meaningful before a guest is resolved: once left_at or allow_to_enter_room_at is
+        # set, Heartbeat::Sweep's query (allow_to_enter_room_at == nil, left_at == nil) no longer
+        # looks at this doc's last_ping_at at all, so showing a ping state past that point would
+        # describe a check the server itself has stopped making.
+        def guest_heartbeat_status(guest)
+          return nil if guest[:left_at] || guest[:allow_to_enter_room_at]
+
+          last_ping_at = guest[:last_ping_at]
+          return ['Never pinged', 'badge-secondary'] if last_ping_at.nil?
+
+          stale = last_ping_at < SpreeCmCommissioner::WaitingRoom::Heartbeat::Sweep::HEARTBEAT_TTL_SECONDS.seconds.ago
+          stale ? ['Stale ping', 'badge-warning'] : ['Active ping', 'badge-success']
+        end
+
+        # Same formula the app itself shows the guest (see waiting_room_provider.dart's
+        # _peopleAheadOfYou): position minus the lobby's live frontier_position, floored at 1 so a
+        # guest at the very front never reads "0 ahead" (session presence, not this count, is what
+        # actually admits them). Nil until Positions::Stamp assigns this guest a position at all.
+        def guest_people_ahead(guest, frontier_position)
+          position = guest[:position]
+          return nil if position.nil?
+
+          [position - frontier_position.to_i, 1].max
+        end
+      end
+    end
+  end
+end

data/app/models/spree_cm_commissioner/line_item_decorator.rb

@@ -37,7 +37,7 @@ module SpreeCmCommissioner
       base.validate :ensure_all_guests_have_blocks, if: :required_seat_selection?
 
       base.whitelisted_ransackable_associations |= %w[guests order]
-      base.whitelisted_ransackable_attributes |= %w[number to_date from_date vendor_id]
+      base.whitelisted_ransackable_attributes |= %w[number to_date from_date vendor_id event_id]
 
       base.delegate :delivery_required?, :high_demand,
                     to: :variant

data/app/models/spree_cm_commissioner/pricing_actions/create_route_adjustments.rb

@@ -34,8 +34,8 @@ module SpreeCmCommissioner
         seen = {}
 
         line_item_contexts.each_with_object([]) do |line_item_context, result|
-          line_item_context.guest_contexts.select { |gc| guest_context_eligible?(gc, line_item_context) }.each_with_index do |guest_context, index|
-            key = guest_context.saved_guest_id.present? ? [guest_context.saved_guest_id, index] : guest_context.id
+          line_item_context.guest_contexts.select { |gc| guest_context_eligible?(gc, line_item_context) }.each do |guest_context|
+            key = guest_context.saved_guest_id.presence || guest_context.id
             next if seen[key]
 
             seen[key] = true

data/app/models/spree_cm_commissioner/voting_contestant.rb

@@ -34,7 +34,7 @@ module SpreeCmCommissioner
 
     # Republish the parent session's Firestore document whenever anything the show screen renders
     # changes, so a reveal reaches every device without a pull-to-refresh.
-    FIRESTORE_PUBLISHED_COLUMNS = %w[visible vote_number position eliminated].freeze
+    FIRESTORE_PUBLISHED_COLUMNS = %w[visible vote_number position eliminated confirmed_rank].freeze
 
     after_commit :publish_session_to_firestore, on: %i[create update destroy]
 

data/app/overrides/spree/admin/orders/_order_actions/actions.html.erb.deface

@@ -13,7 +13,7 @@
 <% end %>
 
 <% if can?(:fire, order) && order.can_cancel? %>
-  <% cancel_label = Spree.t(:cancel, scope: 'admin.order.events', default: Spree.t(:cancel)) %>
+  <% cancel_label = Spree.t(:cancel) %>
   <%= button_link_to cancel_label,
         '#',
         icon: 'cancel.svg',
@@ -24,7 +24,7 @@
     <div class="modal-dialog" role="document">
       <div class="modal-content">
         <div class="modal-header">
-          <h5 class="modal-title mr-auto" id="cancelModalLabel-<%= order.number %>"><%= Spree.t(:order_sure_want_to, event: cancel_label) %></h5>
+          <h5 class="mr-auto modal-title" id="cancelModalLabel-<%= order.number %>"><%= Spree.t(:order_sure_want_to, event: cancel_label) %></h5>
           <button type="button" class="close" data-dismiss="modal" aria-label="<%= Spree.t(:close) %>">
             <span aria-hidden="true">&times;</span>
           </button>
@@ -32,12 +32,12 @@
 
         <%= form_with model: order, url: spree.cancel_admin_order_url(order), method: :put do |f| %>
           <div class="modal-body">
-            <div class="form-group text-left text-start">
+            <div class="text-left form-group text-start">
               <%= f.label :internal_note, raw(Spree.t(:reason) + required_span_tag), class: 'd-block text-left text-start' %>
               <%= f.text_area :internal_note, rows: 3, class: 'form-control', placeholder: Spree.t(:enter_internal_note, default: 'Enter reason here...'), required: true %>
             </div>
           </div>
-          <div class="modal-footer d-flex justify-end">
+          <div class="justify-end modal-footer d-flex">
             <button type="button" class="btn btn-primary" data-dismiss="modal"><%= Spree.t(:close) %></button>
             <%= f.submit Spree.t(:confirm), class: 'btn btn-danger' %>
           </div>

data/app/overrides/spree/admin/orders/_search/taxon_search_field.html.erb.deface

@@ -0,0 +1,8 @@
+<!-- insert_before "[data-hook='admin_orders_index_search'] .row:nth-child(5) .col-12.col-lg-4:nth-child(3)" -->
+
+<div class="col-12 col-lg-4">
+  <div class="form-group">
+    <%= label_tag :q_line_items_event_id_eq, "Event" %>
+    <%= f.select :line_items_event_id_eq, Spree::Taxon.events.pluck(:name, :id), { include_blank: true }, class: 'select2-clear js-filterable' %>
+  </div>
+</div>

data/app/overrides/spree/admin/orders/customer_details/edit/reassign_customer_search.html.erb.deface

@@ -1,6 +1,5 @@
 <!-- replace "#select-customer" -->
 
-<% unless @order.completed? && @order.user.present? %>
   <%= turbo_frame_tag 'customer_reassign' do %>
     <div class="mb-3 card" data-hook>
       <div class="card-header">
@@ -28,14 +27,15 @@
 
         <% if @customer_search_query.present? %>
           <% if @customer_search_result %>
+            <% replacing_user = @order.user.present? %>
             <div class="flex-wrap gap-2 mt-2 mb-0 alert alert-success d-flex justify-content-between align-items-center">
               <span><%= Spree.t('admin.orders.customer_details.customer_found', email: @customer_search_result.email) %></span>
-              <%= button_to Spree.t('admin.orders.customer_details.assign'),
+              <%= button_to replacing_user ? Spree.t('admin.orders.customer_details.replace_user') : Spree.t('admin.orders.customer_details.assign_user'),
                 spree.assign_customer_admin_order_customer_path(@order),
                 method: :patch,
                 params: { user_id: @customer_search_result.id },
-                class: 'btn btn-primary btn-sm',
-                form: { data: { turbo_frame: '_top' } } %>
+                class: "btn btn-sm #{replacing_user ? 'btn-danger' : 'btn-primary'}",
+                form: { data: { turbo_frame: '_top', turbo_confirm: (Spree.t('admin.orders.customer_details.replace_user_confirm', email: @order.user.email) if replacing_user) } } %>
             </div>
           <% else %>
             <div class="mt-2 mb-0 alert alert-warning">
@@ -46,4 +46,3 @@
       </div>
     </div>
   <% end %>
-<% end %>

data/app/overrides/spree/admin/taxons/_form/preview_checkbox.html.erb.deface

@@ -1,7 +1,11 @@
 <!-- insert_before "erb[loud]:contains('field_container :hide_from_nav')" -->
 
+<% if @taxon.depth == 1 %>
+
 <%= f.field_container :preview, class: ['custom-control', 'custom-checkbox', 'my-4'] do %>
   <%= f.check_box :preview, class: 'custom-control-input' %>
   <%= f.label :preview, 'Preview (internal team only)', class: 'custom-control-label' %>
   <%= f.error_message_on :preview %>
 <% end %>
+
+<% end %>

data/app/overrides/spree/admin/taxons/_form/vendor.html.erb.deface

@@ -3,11 +3,19 @@
 <% if @taxon.depth == 1 %>
   <div>
     <%= f.field_container :vendor_id do %>
-      <%= label_tag :vendor_id, Spree.t(:vendor) %>
+      <label class="d-flex">
+        <span class="mr-2"><%= Spree.t(:vendor) %></span>
+        <% if f.object.vendor_id.present? %>
+          <%= link_to_with_icon 'arrow-right-circle.svg', Spree.t(' '), spree.edit_admin_vendor_path(f.object.vendor_id), class: "d-flex align-items-center" do %>
+            <i class="bi bi-arrow-right-circle me-1"></i>
+          <% end %>
+        <% else %>
+          <span class="text-muted"><%= Spree.t(:no_vendor_assigned) %></span>
+        <% end %>
+      </label>
       <%= f.select :vendor_id, Spree::Vendor.order(:name).pluck(:name, :id),
                     { include_blank: true }, { class: 'select2-clear js-filterable' } %>
       <%= f.error_message_on :vendor_id, class: 'error-message' %>
     <% end %>
   </div>
 <% end %>
-

data/app/overrides/spree/admin/users/_tabs/tabs.html.erb.deface

@@ -45,7 +45,7 @@
   </li>
   <li class="nav-item">
     <%= link_to_with_icon 'calendar-event.svg',
-      Spree.t(:user_events),
+      Spree.t(:crews),
       admin_user_events_path(user_id: @user.id),
       class: "nav-link #{'active' if current == :user_events }" %>
   </li>

data/app/services/spree_cm_commissioner/waiting_room/admission/call_guests.rb

@@ -128,9 +128,12 @@ module SpreeCmCommissioner
           previous_guests + eligible_guests_in(records_path, remaining_slots)
         end
 
-        # This query requires a composite index (allow_to_enter_room_at ==, left_at ==,
-        # call_dispatched_at ==, position !=, queued_at order); create it in Firebase beforehand, same
-        # as the plain index #fetch_long_waiting_guests already needed.
+        # This query requires a composite index (allow_to_enter_room_at ==, call_dispatched_at ==,
+        # left_at ==, queued_at order, position !=); create it in Firebase beforehand, same as the
+        # plain index #fetch_long_waiting_guests already needed. The `!=` field goes LAST, after the
+        # orderBy field, not right after the equality fields the way a `<`/`>` range filter would --
+        # Firestore's own generated index link is the source of truth here, not the field order
+        # `!=` filters read like in the query itself.
         #
         # left_at == nil excludes a guest who already left the queue (leaveQueue()/markLeft(), same
         # write Positions::Stamp#lowest_unresolved_position_in and #sweep_abandoned both already

data/app/services/spree_cm_commissioner/waiting_room/guests/find.rb

@@ -0,0 +1,37 @@
+module SpreeCmCommissioner
+  module WaitingRoom
+    module Guests
+      # Single-doc lookup by id, for the admin "Guests" tab's search box. Deliberately a direct
+      # `get` rather than filtering List's result: a doc can exist outside List's queued_at-ordered
+      # MAX_DOCS window (or the request predates that cache), and a single-doc read costs the same
+      # whichever way it's found.
+      class Find
+        prepend ::Spree::ServiceModule::Base
+        include SpreeCmCommissioner::FirestoreConnection
+
+        def call(date:, doc_id:, firestore: nil)
+          @firestore = firestore if firestore.present?
+
+          guest = firestore_available? ? fetch(date, doc_id) : nil
+
+          success(guest: guest)
+        rescue StandardError => e
+          failure(nil, e.message)
+        end
+
+        private
+
+        def fetch(date, doc_id)
+          snapshot = firestore.col(records_path(date)).doc(doc_id).get
+          return nil unless snapshot.exists?
+
+          snapshot.data.merge(doc_id: snapshot.document_id)
+        end
+
+        def records_path(date)
+          "waiting_guests/#{date}/records"
+        end
+      end
+    end
+  end
+end

data/app/services/spree_cm_commissioner/waiting_room/guests/list.rb

@@ -0,0 +1,59 @@
+module SpreeCmCommissioner
+  module WaitingRoom
+    module Guests
+      # Raw read of a waiting-guest partition for the admin "Guests" tab — the only place in the
+      # codebase that lists the actual `waiting_guests/{date}/records` documents rather than
+      # deriving lobby-level aggregates from them (contrast Heartbeat::Sweep/Positions::Stamp/
+      # Admission::CallGuests, which only ever query for docs matching specific eligibility
+      # criteria, never dump the partition itself).
+      class List
+        prepend ::Spree::ServiceModule::Base
+        include SpreeCmCommissioner::FirestoreConnection
+
+        # Same ceiling the admin UI paginates over; keeps one read bounded regardless of how many
+        # guests are actually queued.
+        MAX_DOCS = 5000
+
+        # in_queue_only: true filters at the Firestore query level (not after fetching) to the
+        # same "not yet resolved" criteria Admission::CallGuests uses, and defaults on — without
+        # it, a partition with more than MAX_DOCS total docs for the day fills the cap with the
+        # OLDEST docs by queued_at, which past a certain volume are entirely already-resolved
+        # (Admitted/Left) guests, silently hiding everyone still actually waiting behind them.
+        def call(date:, in_queue_only: true, firestore: nil)
+          @firestore = firestore if firestore.present?
+
+          guests = firestore_available? ? fetch(date, in_queue_only) : []
+
+          success(guests: guests)
+        rescue StandardError => e
+          failure(nil, e.message)
+        end
+
+        private
+
+        # Ordered by queued_at (arrival order), not `position` — a not-yet-stamped doc has
+        # `position: nil` and would sort inconsistently, hiding guests who just joined the queue.
+        #
+        # in_queue_only's composite index (allow_to_enter_room_at ==, left_at ==, queued_at order)
+        # is tracked in firebase/firestore.indexes.json — a different, narrower shape than the one
+        # CallGuests needs (which also filters call_dispatched_at), so it isn't covered by that one
+        # already existing. Still needs `firebase deploy --only firestore:indexes` run against each
+        # project (see firebase/README.md) before this filter works live: adding it to the tracked
+        # file doesn't deploy it by itself.
+        def fetch(date, in_queue_only)
+          query = firestore.col(records_path(date))
+          query = query.where('allow_to_enter_room_at', '==', nil).where('left_at', '==', nil) if in_queue_only
+
+          query.order('queued_at', 'asc')
+               .limit(MAX_DOCS)
+               .get
+               .map { |snapshot| snapshot.data.merge(doc_id: snapshot.document_id) }
+        end
+
+        def records_path(date)
+          "waiting_guests/#{date}/records"
+        end
+      end
+    end
+  end
+end

data/app/services/spree_cm_commissioner/waiting_room_lobby_metadata_fetcher.rb

@@ -1,18 +1,22 @@
-require 'google/cloud/firestore'
-
 module SpreeCmCommissioner
   # Reads the lobby document (waiting_rooms/lobby) — the read-side counterpart to
   # WaitingRoom::PublishLobbyPath. Kept separate from WaitingRoomSystemMetadataFetcher,
   # which owns the unrelated metadata/system document.
   class WaitingRoomLobbyMetadataFetcher
+    include SpreeCmCommissioner::FirestoreConnection
+
     attr_reader :document_data
 
     def initialize(firestore: nil)
       @firestore = firestore if firestore.present?
     end
 
+    # Environments without the credential (dev, test, CI) get an empty document instead of a
+    # NoMethodError on a nil service_account -- every accessor below already treats a missing key
+    # in document_data as "unknown" (nil/false), so an empty hash here is a real, valid state, not
+    # a special case each of them has to know about.
     def load_document_data
-      @document_data = document.get.data || {}
+      @document_data = firestore_available? ? (document.get.data || {}) : {}
     end
 
     # firebase metadata
@@ -32,16 +36,14 @@ module SpreeCmCommissioner
       document_data[:available_slots]
     end
 
-    def document
-      @document ||= firestore.col('waiting_rooms').doc('lobby')
-    end
-
-    def firestore
-      @firestore ||= Google::Cloud::Firestore.new(project_id: service_account[:project_id], credentials: service_account)
+    # written by Positions::Stamp -- every position up to and including this one is resolved
+    # (granted or left). "N people ahead of you" for a stamped guest = their position minus this.
+    def frontier_position
+      document_data[:frontier_position]
     end
 
-    def service_account
-      @service_account ||= Rails.application.credentials.cloud_firestore_service_account
+    def document
+      @document ||= firestore.col('waiting_rooms').doc('lobby')
     end
   end
 end

data/app/views/spree/admin/shared/_taxon_tabs.html.erb

@@ -33,7 +33,7 @@
   <%# user event only show for event %>
   <%= content_tag :li, class: 'nav-item' do %>
     <%= link_to_with_icon 'user.svg',
-      Spree.t(:user_events),
+      Spree.t(:crews),
       admin_user_events_path(params: {taxon_id: @taxon.id, taxonomy_id: @taxonomy}),
       class: "nav-link #{'active' if current == :user_events}" %>
   <% end if can?(:manage, SpreeCmCommissioner::UserTaxon) && @taxon.event? && @taxon.depth == 1 %>

data/app/views/spree/admin/system/waiting_room_sessions/_guest_raw.html.erb

@@ -0,0 +1,70 @@
+<%# Rendered only when a row's "Raw" button is clicked (see _guests_table.html.erb) -- the full
+    document, every field, is never present in the guests_status response until an admin actually
+    asks for one row's worth of it. Targets the ONE shared modal frame (guests.html.erb's
+    #guest_raw_modal_frame), not a per-doc id: only one modal is ever open at a time, so each click
+    just replaces whatever the frame last held. %>
+<%= turbo_frame_tag 'guest_raw_modal_frame' do %>
+  <% if guest %>
+    <%# Same helper _guests_table.html.erb's Queue/Heartbeat columns use -- one definition of what
+        "Admitted" or "Stale ping" means, so the table and this modal never disagree about it. %>
+    <% queue_label, queue_badge = guest_queue_status(guest) %>
+    <% heartbeat = guest_heartbeat_status(guest) %>
+
+    <div class="mb-3 d-flex align-items-center flex-wrap">
+      <span class="mr-2 text-muted small text-uppercase" style="letter-spacing: .04em;">Queue</span>
+      <span class="mr-3 badge <%= queue_badge %>"><%= queue_label %></span>
+
+      <% if heartbeat %>
+        <% heartbeat_label, heartbeat_badge = heartbeat %>
+        <span class="mr-2 text-muted small text-uppercase" style="letter-spacing: .04em;">Heartbeat</span>
+        <span class="badge <%= heartbeat_badge %>"><%= heartbeat_label %></span>
+      <% end %>
+    </div>
+
+    <% session = guest[:session] %>
+    <% if session %>
+      <% session_expired_at = session[:expired_at] %>
+      <% session_state, session_badge =
+           if session_expired_at.nil?
+             ['Unknown', 'badge-secondary']
+           elsif session_expired_at > Time.zone.now
+             ['Active', 'badge-success']
+           else
+             ['Expired', 'badge-danger']
+           end %>
+
+      <div class="mb-3 p-3 border rounded">
+        <div class="mb-2 d-flex align-items-center flex-wrap">
+          <span class="mr-2 text-muted small text-uppercase" style="letter-spacing: .04em;">Session</span>
+          <span class="badge <%= session_badge %>"><%= session_state %></span>
+        </div>
+
+        <table class="mb-0 table table-sm table-borderless">
+          <tbody>
+            <tr>
+              <td class="text-muted" style="width: 120px;">ID</td>
+              <td><code><%= session[:id] || '—' %></code></td>
+            </tr>
+            <tr>
+              <td class="text-muted">Created</td>
+              <td><%= session[:created_at]&.strftime('%Y-%m-%d %H:%M:%S') || '—' %></td>
+            </tr>
+            <tr>
+              <td class="text-muted">Expires</td>
+              <td><%= session_expired_at&.strftime('%Y-%m-%d %H:%M:%S') || '—' %></td>
+            </tr>
+          </tbody>
+        </table>
+      </div>
+    <% else %>
+      <div class="mb-3 text-muted small">No session issued yet.</div>
+    <% end %>
+
+    <div class="mb-2 text-muted small text-uppercase" style="letter-spacing: .04em;">Raw document</div>
+    <pre class="p-2 mb-0 text-left rounded bg-light" style="max-height: 400px; overflow: auto;"><%= JSON.pretty_generate(guest) %></pre>
+  <% elsif error.present? %>
+    <div class="alert alert-danger mb-0">Could not load this document: <%= error %></div>
+  <% else %>
+    <span class="text-muted small">Document not found (may have been resolved or swept since the list loaded).</span>
+  <% end %>
+<% end %>

data/app/views/spree/admin/system/waiting_room_sessions/_guests_pagination.html.erb

@@ -0,0 +1,36 @@
+<%# Mirrors Spree's own spree/admin/shared/_index_table_options partial (pagination left,
+    per-page select right) so this page behaves the same as every other admin index.
+    Doesn't reuse that partial's global `.js-per-page-select` JS (ransack.es6 in
+    spree_backend), though: that handler is bound once on the page-wide `spree:load` event,
+    which has already fired by the time Turbo lazy-loads this frame's content -- the select
+    doesn't exist yet when the binding runs, so it silently never receives the listener and
+    picking a value does nothing. `onchange` on the element itself has no such timing
+    dependency. Submits to the full #guests page -- the same place the date chips and doc-ID
+    search above already navigate to -- rather than straight to #guests_status, so every
+    control on this page reloads the same way instead of some doing a full page load and one
+    doing a frame-scoped partial swap.
+
+    Placed above the table, not below: with up to MAX_DOCS rows on a page, scrolling to the
+    bottom just to change page or page size is the exact friction this is meant to avoid. %>
+<div class="row index-pagination-row mb-2">
+  <div class="col-12 col-sm-9 text-center text-sm-left">
+    <%= paginate guests, theme: 'admin-twitter-bootstrap-4' %>
+  </div>
+  <div class="col-12 col-sm-3 text-center text-sm-left">
+    <%# data-turbo-frame="_top": this form sits inside the polling turbo-frame, and #guests'
+        response contains that same frame id -- without this, Turbo would treat the submit
+        as a frame-scoped swap (URL bar and the rest of the page left untouched) rather than
+        the real full-page reload wanted here. %>
+    <%= form_tag guests_admin_system_waiting_room_sessions_path(date: date, doc_id: params[:doc_id], status: params[:status]),
+          method: :get, data: { turbo_frame: '_top' },
+          class: 'form-inline justify-content-center justify-content-sm-end' do %>
+      <%= select_tag :per_page,
+            options_for_select(
+              Spree::Admin::System::WaitingRoomSessionsController::GUESTS_PER_PAGE_OPTIONS,
+              params[:per_page].presence&.to_i || Spree::Admin::System::WaitingRoomSessionsController::GUESTS_DEFAULT_PER_PAGE
+            ),
+            class: 'w-auto form-control custom-select custom-select-sm',
+            onchange: 'this.form.requestSubmit()' %>
+    <% end %>
+  </div>
+</div>

data/app/views/spree/admin/system/waiting_room_sessions/_guests_table.html.erb

@@ -0,0 +1,86 @@
+<%# Rendered by both #guests (as the frame's lazy-loaded src target) and #guests_status (every poll).
+    Wraps the SAME frame id `guests.html.erb` gave a `src` to, but WITHOUT a src attribute here --
+    Turbo refuses a response whose matching frame still carries the URL it was just fetched from
+    ("has a source URL which references itself"), so the src stays only on the DOM element Turbo
+    already has, set once on initial load. See async_operation_status_controller.js and
+    shared_console/setup/inventory_items/_seat_lock_status.html.erb for the same split. %>
+<%= turbo_frame_tag 'async_operation_status_frame' do %>
+  <%# The poller lives on this inner element, never on the frame itself: frame.reload() replaces
+      the frame's children and leaves its own attributes alone, so a flag on the frame would never
+      change and the poll would never stop. Each reload disconnects this controller (clearing its
+      timer) and connects a fresh one -- which is what keeps a doc-id search result from being
+      polled at all, since `in-progress` is always "true" here rather than driven by a real
+      terminal state (there's no "done" for a live guest list -- it always keeps refreshing while
+      this tab is open). %>
+    <div data-controller="async-operation-status"
+         data-async-operation-status-in-progress-value="true"
+         data-async-operation-status-interval-value="10000">
+      <% if error.present? %>
+        <div class="alert alert-danger mb-3">
+          Could not load guests: <%= error %>
+        </div>
+      <% end %>
+
+      <%= render 'guests_pagination', guests: guests, date: date unless doc_id_search %>
+
+      <%# A fixed, curated set of columns -- not one per field in the document. Queue/Heartbeat
+          already summarize left_at/call_dispatched_at/allow_to_enter_room_at/last_ping_at, and
+          anything else (including the session map) is one Raw click away, so there's no dynamic
+          per-doc column list to keep in sync here. %>
+      <div class="table-responsive">
+        <table class="table table-sm table-hover mb-0">
+          <thead class="text-muted">
+            <tr>
+              <th>doc_id</th>
+              <th>queued_at</th>
+              <th>people_ahead_of_you</th>
+              <th>position</th>
+              <th>Queue</th>
+              <th>Heartbeat</th>
+              <th>Raw</th>
+            </tr>
+          </thead>
+          <tbody>
+            <% guests.each do |guest| %>
+              <% queue_label, queue_badge = guest_queue_status(guest) %>
+              <% heartbeat = guest_heartbeat_status(guest) %>
+              <tr>
+                <td class="align-top"><code><%= guest[:doc_id] %></code></td>
+                <td class="align-top"><%= guest[:queued_at]&.strftime('%Y-%m-%d %H:%M:%S') || '—' %></td>
+                <td class="align-top"><%= guest_people_ahead(guest, frontier_position) || '—' %></td>
+                <td class="align-top"><%= guest[:position] || '—' %></td>
+                <td class="align-top"><span class="badge <%= queue_badge %>"><%= queue_label %></span></td>
+                <td class="align-top">
+                  <% if heartbeat %>
+                    <% heartbeat_label, heartbeat_badge = heartbeat %>
+                    <span class="badge <%= heartbeat_badge %>"><%= heartbeat_label %></span>
+                  <% else %>
+                    &mdash;
+                  <% end %>
+                </td>
+
+                <%# Nothing is fetched or rendered for this row until clicked: showGuestRawModal
+                    (defined once in guests.html.erb) points the shared modal's frame at this URL
+                    and opens the modal. A <button>, not a link -- this row sits inside the polling
+                    turbo-frame, and an <a> here would get captured by Turbo's own frame-scoped
+                    navigation before this row's markup is even a link click away from mattering. %>
+                <td class="align-top">
+                  <%= button_tag 'View', type: 'button',
+                        onclick: "showGuestRawModal('#{escape_javascript(guest_admin_system_waiting_room_sessions_path(date: date, doc_id: guest[:doc_id]))}')",
+                        class: 'btn btn-outline-secondary btn-sm' %>
+                </td>
+              </tr>
+            <% end %>
+
+            <% if guests.empty? %>
+              <tr>
+                <td colspan="7" class="text-center text-muted py-4">
+                  <%= doc_id_search ? 'No guest document found with that ID for this date.' : 'No guest documents for this date.' %>
+                </td>
+              </tr>
+            <% end %>
+          </tbody>
+        </table>
+      </div>
+    </div>
+<% end %>

data/app/views/spree/admin/system/waiting_room_sessions/_tabs.html.erb

@@ -0,0 +1,10 @@
+<ul class="nav nav-tabs mb-3">
+  <li class="nav-item">
+    <%= link_to 'Sessions', admin_system_waiting_room_sessions_path,
+          class: "nav-link #{'active' if current == :sessions}" %>
+  </li>
+  <li class="nav-item">
+    <%= link_to 'Guests', guests_admin_system_waiting_room_sessions_path,
+          class: "nav-link #{'active' if current == :guests}" %>
+  </li>
+</ul>

data/app/views/spree/admin/system/waiting_room_sessions/guests.html.erb

@@ -0,0 +1,141 @@
+<%= render 'spree/admin/shared/system_tabs', current: :waiting_room %>
+<%= render 'tabs', current: :guests %>
+
+<div class="mb-3 card">
+  <div class="card-header">
+    <h5 class="mb-0">Firestore waiting-room guests</h5>
+  </div>
+
+  <div class="card-body">
+    <% today = Time.zone.today.strftime('%Y-%m-%d') %>
+    <% yesterday = Time.zone.yesterday.strftime('%Y-%m-%d') %>
+    <%# nil (omitted from the URL), not 'in_queue' -- keeps the common-case URL clean, and matches
+        the controller's own `params[:status] != 'all'` default-on check. %>
+    <% status_param = @in_queue_only ? nil : 'all' %>
+
+    <%# Only today/yesterday get chip buttons -- the common case by far, and a free-text date
+        input invites typos a date picker would need extra JS to avoid. `date` is still a plain
+        query param the controller happily accepts for any value, so any other date stays one
+        URL edit away without needing UI for it. %>
+    <div class="mr-3 form-group d-inline-block">
+      <label class="mb-0 mr-2">Date</label>
+      <div class="btn-group btn-group-sm" role="group">
+        <%= link_to 'Today', guests_admin_system_waiting_room_sessions_path(date: today, doc_id: @doc_id, per_page: @per_page, status: status_param),
+              class: "btn btn-outline-secondary #{'active' if @date == today}" %>
+        <%= link_to 'Yesterday', guests_admin_system_waiting_room_sessions_path(date: yesterday, doc_id: @doc_id, per_page: @per_page, status: status_param),
+              class: "btn btn-outline-secondary #{'active' if @date == yesterday}" %>
+      </div>
+      <% unless [today, yesterday].include?(@date) %>
+        <span class="ml-2 text-muted small">Viewing <code><%= @date %></code> (set via URL)</span>
+      <% end %>
+    </div>
+
+    <%# In queue only (default) hides Admitted/Left -- it's the everyday view, and it's also what
+        keeps WaitingRoom::Guests::List::MAX_DOCS from being spent on already-resolved history on
+        a busy day (see that class). All is the explicit opt-in for historical/debugging lookups. %>
+    <div class="mr-3 form-group d-inline-block">
+      <label class="mb-0 mr-2">Status</label>
+      <div class="btn-group btn-group-sm" role="group">
+        <%= link_to 'In queue', guests_admin_system_waiting_room_sessions_path(date: @date, doc_id: @doc_id, per_page: @per_page),
+              class: "btn btn-outline-secondary #{'active' if @in_queue_only}" %>
+        <%= link_to 'All', guests_admin_system_waiting_room_sessions_path(date: @date, doc_id: @doc_id, per_page: @per_page, status: 'all'),
+              class: "btn btn-outline-secondary #{'active' unless @in_queue_only}" %>
+      </div>
+    </div>
+
+    <%= form_tag guests_admin_system_waiting_room_sessions_path, method: :get, class: 'form-inline mb-3' do %>
+      <%= hidden_field_tag :date, @date, id: nil %>
+      <%= hidden_field_tag :status, status_param, id: nil %>
+
+      <div class="mr-3 form-group">
+        <%= label_tag :doc_id, 'Doc ID', class: 'mr-2 mb-0' %>
+        <%= text_field_tag :doc_id, @doc_id, class: 'form-control form-control-sm', placeholder: 'search by exact doc id' %>
+      </div>
+
+      <%= hidden_field_tag :per_page, @per_page, id: nil %>
+
+      <%= button_tag 'Search', type: :submit, class: 'btn btn-outline-secondary btn-sm mr-2' %>
+
+      <% if @doc_id.present? %>
+        <%= link_to 'Clear search', guests_admin_system_waiting_room_sessions_path(date: @date, per_page: @per_page, status: status_param), class: 'btn btn-link btn-sm' %>
+      <% end %>
+    <% end %>
+
+    <p class="mb-3 text-muted small">
+      Raw documents under <code>waiting_guests/<%= @date %>/records</code>, up to
+      <%= SpreeCmCommissioner::WaitingRoom::Guests::List::MAX_DOCS %> most-recently-queued<%= ' still in queue' if @in_queue_only %>.
+      This list refreshes automatically every 10 seconds.
+    </p>
+
+    <%# `src` is set HERE, once, on initial load -- the polled response (#guests_status, via
+        _guests_table.html.erb) re-renders this same frame id WITHOUT src, so this attribute
+        stays put across every reload() call the async-operation-status controller makes. %>
+    <%= turbo_frame_tag 'async_operation_status_frame',
+          src: guests_status_admin_system_waiting_room_sessions_path(date: @date, doc_id: @doc_id, page: params[:page], per_page: @per_page, status: status_param) do %>
+      <div class="py-4 d-flex justify-content-center">
+        <span class="spinner-border spinner-border-sm text-muted" role="status"></span>
+      </div>
+    <% end %>
+  </div>
+</div>
+
+<%# One shared modal for every row's "Raw" button (see _guests_table.html.erb), not one per row --
+    up to MAX_DOCS of those would mean pre-building MAX_DOCS empty modals whether anyone opens one
+    or not. Its frame has no `src`: nothing is fetched until a click points it at a URL below. Lives
+    outside the polling frame above so a 10s refresh never touches it while it's open.
+
+    `display: none` toggled directly in JS below, not via Bootstrap's .fade/.show classes and
+    `$(...).modal('show')` -- this app's bundle doesn't have Bootstrap's jQuery modal plugin
+    loaded (`$.fn.modal` is undefined here), so this styles and shows/hides itself with no
+    dependency on which JS bundle happens to be on the page. %>
+<div id="guest_raw_modal" role="dialog" aria-labelledby="guest_raw_modal_label" aria-hidden="true"
+     style="display: none; position: fixed; top: 0; left: 0; width: 100%; height: 100%; z-index: 1050; background: rgba(0, 0, 0, 0.5);"
+     onclick="if (event.target === this) closeGuestRawModal();">
+  <div class="modal-dialog modal-lg" role="document" style="margin-top: 5vh;">
+    <div class="modal-content">
+      <div class="modal-header">
+        <h5 class="modal-title" id="guest_raw_modal_label">Guest document</h5>
+        <button type="button" class="close" aria-label="Close" onclick="closeGuestRawModal()">
+          <span aria-hidden="true">&times;</span>
+        </button>
+      </div>
+      <div class="modal-body">
+        <%= turbo_frame_tag 'guest_raw_modal_frame' do %>
+          <div class="text-muted small">Loading&hellip;</div>
+        <% end %>
+      </div>
+    </div>
+  </div>
+</div>
+
+<script>
+  // Called via a plain onclick on each row's "View" button (see _guests_table.html.erb) -- not an
+  // <a>. Turbo intercepts every <a> click inside a turbo-frame by default and tries to load the
+  // response into the nearest enclosing frame, which for a row is the polling
+  // async_operation_status_frame above; that frame's id has no match in the raw-document response,
+  // so Turbo would quietly clobber the table instead of opening anything. A <button> has no
+  // navigation for Turbo to intercept, so this function is just left to run.
+  function showGuestRawModal(url) {
+    // A turbo-frame keeps its old content visible while a new `src` loads (that's what lets
+    // polling elsewhere on this page swap without a blank flash) -- here that means the PREVIOUS
+    // row's document would stay on screen, unchanged, until the new fetch resolves. Clearing it
+    // first makes each click show its own row, never a stale one.
+    var frame = document.getElementById('guest_raw_modal_frame');
+    frame.innerHTML = '<div class="text-muted small">Loading&hellip;</div>';
+
+    // Cache-busted so reopening the SAME row's modal always issues a fresh request instead of
+    // Turbo/the browser reusing an identical prior GET for this exact URL -- this endpoint exists
+    // to show the guest's current Firestore state, not whatever it was on the last click.
+    frame.src = url + (url.indexOf('?') === -1 ? '?' : '&') + '_=' + Date.now();
+
+    document.getElementById('guest_raw_modal').style.display = 'block';
+  }
+
+  function closeGuestRawModal() {
+    document.getElementById('guest_raw_modal').style.display = 'none';
+  }
+
+  document.addEventListener('keydown', function(event) {
+    if (event.key === 'Escape') closeGuestRawModal();
+  });
+</script>

data/app/views/spree/admin/system/waiting_room_sessions/index.html.erb

@@ -1,6 +1,5 @@
 <%= render 'spree/admin/shared/system_tabs', current: :waiting_room %>
-
-<%= link_to_with_icon 'arrow-left.svg', "Back to Waiting Room", admin_system_waiting_room_path, class: 'btn btn-outline-secondary btn-sm mb-3' %>
+<%= render 'tabs', current: :sessions %>
 
 <div class="card mb-3">
   <div class="card-header d-flex justify-content-between align-items-center flex-wrap">

data/app/views/spree/admin/user_events/_new_user.html.erb

@@ -19,7 +19,8 @@
                                       { include_hidden: true },
                                         data: { autocomplete_url_value: 'users_api_v2',
                                                 autocomplete_return_attr_value: 'email',
-                                                autocomplete_search_query_value: 'email_i_cont',
+                                                autocomplete_search_query_value: 'email_or_normalized_login_or_phone_number_i_cont',
+                                                autocomplete_additional_url_params_value: "tenant_id=#{@taxon.vendor&.tenant_id || 0}",
                                                 minimum_input_length: 3 } %>
             <%= f.error_message_on :user_id %>
           <% end %>

data/app/views/spree/admin/user_events/_users.html.erb

@@ -11,7 +11,7 @@
 <% end %>
 
 <% content_for :page_actions do %>
-  <%= button_link_to Spree.t(:add_new_user_events), new_admin_user_event_path(params: {taxon_id: @taxon.id}), class: "btn-success", icon: 'add.svg', id: 'admin_new_user_events_link' %>
+  <%= button_link_to Spree.t(:add_new_crews), new_admin_user_event_path(params: {taxon_id: @taxon.id}), class: "btn-success", icon: 'add.svg', id: 'admin_new_user_events_link' %>
 <% end if can? :create,  SpreeCmCommissioner::UserTaxon %>
 
 <%= render partial: 'spree/admin/shared/taxon_tabs', locals: { current: :user_events } %>

data/config/locales/en.yml

@@ -660,8 +660,11 @@ en:
           customer_found: "Found %{email}."
           customer_not_found: 'No customer found for "%{query}" in this tenant.'
           clear_search: "Clear search"
-          assign: "Assign"
-          customer_assigned: "Order reassigned to %{email}."
+          assign_user: "Assign User"
+          replace_user: "Replace User"
+          replace_user_confirm: "This order is currently assigned to %{email}. Replace them with the user found above?"
+          user_assigned: "Order reassigned to %{email}."
+          user_already_assigned: "This order is already assigned to %{email}."
     event:
       check_in:
         success: "Guest check-in in successfully"

data/config/locales/km.yml

@@ -433,8 +433,11 @@ km:
           customer_found: "រកឃើញ %{email}។"
           customer_not_found: 'រកមិនឃើញអតិថិជនសម្រាប់ "%{query}" ក្នុង tenant នេះទេ។'
           clear_search: "សម្អាតការស្វែងរក"
-          assign: "ផ្តល់ជូន"
-          customer_assigned: "លំដាប់នេះត្រូវបានផ្លាស់ប្តូរទៅ %{email}។"
+          assign_user: "ផ្តល់ជូនអ្នកប្រើប្រាស់"
+          replace_user: "ជំនួសអ្នកប្រើប្រាស់"
+          replace_user_confirm: "លំដាប់នេះកំពុងភ្ជាប់ជាមួយ %{email} រួចហើយ។ តើជំនួសដោយអ្នកប្រើប្រាស់ដែលរកឃើញខាងលើមែនទេ?"
+          user_assigned: "លំដាប់នេះត្រូវបានផ្លាស់ប្តូរទៅ %{email}។"
+          user_already_assigned: "លំដាប់នេះបានភ្ជាប់ជាមួយ %{email} រួចហើយ។"
     event:
       check_in:
         success: "Guest check-in in successfully"

data/config/routes.rb

@@ -24,6 +24,9 @@ Spree::Core::Engine.add_routes do
       resources :waiting_room_sessions, controller: :waiting_room_sessions, only: [:index] do
         collection do
           post :kill
+          get :guests
+          get :guests_status
+          get :guest
         end
       end
 

data/lib/spree_cm_commissioner/version.rb

@@ -1,5 +1,5 @@
 module SpreeCmCommissioner
-  VERSION = '2.12.9'.freeze
+  VERSION = '2.13.1'.freeze
 
   module_function
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: spree_cm_commissioner
 version: !ruby/object:Gem::Version
-  version: 2.12.9
+  version: 2.13.1
 platform: ruby
 authors:
 - You
@@ -961,6 +961,7 @@ files:
 - app/controllers/spree/api/v2/platform/homepage_section_relatable_options_controller.rb
 - app/controllers/spree/api/v2/platform/option_types_controller_decorator.rb
 - app/controllers/spree/api/v2/platform/places_controller.rb
+- app/controllers/spree/api/v2/platform/resource_controller_decorator.rb
 - app/controllers/spree/api/v2/platform/seat_number_layouts_controller.rb
 - app/controllers/spree/api/v2/platform/taxons_controller_decorator.rb
 - app/controllers/spree/api/v2/resource_controller_decorator.rb
@@ -1226,6 +1227,7 @@ files:
 - app/finders/spree_cm_commissioner/variants/find_by_option_value_ids.rb
 - app/helpers/spree/admin/base_helper_decorator.rb
 - app/helpers/spree/admin/google_wallets_helper.rb
+- app/helpers/spree/admin/system/waiting_room_sessions_helper.rb
 - app/helpers/spree/base_helper_decorator.rb
 - app/helpers/spree/billing/navigation_helper_decorator.rb
 - app/helpers/spree/billing/sortable_tree_helper.rb
@@ -1833,6 +1835,7 @@ files:
 - app/overrides/spree/admin/orders/_search/line_item_number_search_field.html.erb.deface
 - app/overrides/spree/admin/orders/_search/payment_method_search_field.html.erb.deface
 - app/overrides/spree/admin/orders/_search/payment_number_search_field.html.erb.deface
+- app/overrides/spree/admin/orders/_search/taxon_search_field.html.erb.deface
 - app/overrides/spree/admin/orders/_search/vendor_search_field.html.erb.deface
 - app/overrides/spree/admin/orders/customer_details/_form/phone_number_field.html.erb.deface
 - app/overrides/spree/admin/orders/customer_details/_form/view_profile_link.html.erb.deface
@@ -2481,6 +2484,8 @@ files:
 - app/services/spree_cm_commissioner/waiting_room/admission/call_guests_chunk.rb
 - app/services/spree_cm_commissioner/waiting_room/advance_queue.rb
 - app/services/spree_cm_commissioner/waiting_room/bypass_eligibility.rb
+- app/services/spree_cm_commissioner/waiting_room/guests/find.rb
+- app/services/spree_cm_commissioner/waiting_room/guests/list.rb
 - app/services/spree_cm_commissioner/waiting_room/heartbeat/sweep.rb
 - app/services/spree_cm_commissioner/waiting_room/positions/stamp.rb
 - app/services/spree_cm_commissioner/waiting_room/publish_lobby_path.rb
@@ -2706,6 +2711,11 @@ files:
 - app/views/spree/admin/system/maintenance_tasks/_search.html.erb
 - app/views/spree/admin/system/maintenance_tasks/index.html.erb
 - app/views/spree/admin/system/waiting_room/show.html.erb
+- app/views/spree/admin/system/waiting_room_sessions/_guest_raw.html.erb
+- app/views/spree/admin/system/waiting_room_sessions/_guests_pagination.html.erb
+- app/views/spree/admin/system/waiting_room_sessions/_guests_table.html.erb
+- app/views/spree/admin/system/waiting_room_sessions/_tabs.html.erb
+- app/views/spree/admin/system/waiting_room_sessions/guests.html.erb
 - app/views/spree/admin/system/waiting_room_sessions/index.html.erb
 - app/views/spree/admin/taxon_childrens/index.html.erb
 - app/views/spree/admin/taxon_vendors/_form.html.erb