@go-labs-sg/rsvp 0.16.0 → 0.17.0

package/README.md

@@ -368,6 +368,106 @@ rsvp event seating table update \
   --payload '{"organizationId":"org_123","eventId":"evt_123","tableId":"table_123","label":"Table 1"}'
 ```
 
+## Live seating and seat-change notifications
+
+Deploy the matching API and worker before using these commands from an updated
+CLI. They retain browser authentication, event permissions and sensitive-field
+grants; the CLI does not implement separate seating rules.
+
+```sh
+rsvp event seating live get --ack-sensitive-data \
+  --payload '{"organizationId":"org_123","eventId":"evt_123"}'
+rsvp event seating occupants list --ack-sensitive-data \
+  --payload '{"organizationId":"org_123","eventId":"evt_123","seatMapId":"map_123","categoryValue":"finance","limit":25,"cursor":0}'
+rsvp people registration edit get --ack-sensitive-data \
+  --payload '{"organizationId":"org_123","eventId":"evt_123","registrationId":"reg_123"}'
+```
+
+Occupants supports optional `tableId`, `department`, `categoryValue` and `query`
+filters. `categoryValue` is the canonical (trimmed, case-normalized) value
+returned by the occupant response's category legend; it is not an arbitrary
+field lookup. Follow `nextCursor` until null; counts and department/category
+context contain only permitted data. The API projects all active occupants of the
+selected map in batches before filtering; small pages are not database-level
+filtered pagination.
+
+### Imported-field seating categories
+
+Category coloring is optional and disabled by default. An authorized organizer
+can read the eligible imported fields and their actual event values, then save one
+selected field and a unique six-digit hex color for each canonical value. The
+server includes unregistered invitees when it discovers the imported values;
+guests inherit the host's imported value. It excludes identity, contact, system,
+nested and multi-value data, and enforces sensitive-field grants before it returns
+field keys, values, legends, filters or seat colors.
+
+```sh
+rsvp event seating category config get --ack-sensitive-data \
+  --payload '{"organizationId":"org_123","eventId":"evt_123"}'
+
+rsvp event seating category config update \
+  --ack-sensitive-data --allow-state-change --target evt_123 \
+  --payload '{"organizationId":"org_123","eventId":"evt_123","configurationVersion":3,"config":{"enabled":true,"fieldKey":"department","seed":"chosen-once","colors":[{"value":"finance","color":"#155e75"},{"value":"operations","color":"#7c2d12"}]}}'
+```
+
+The get command is sensitive-data acknowledged. The update command additionally
+requires explicit state-change confirmation and a target matching `eventId`; it
+forwards `configurationVersion` for optimistic concurrency and the complete
+configuration payload unchanged. It never assigns colors, interprets imported
+values, or bypasses authorization in the CLI.
+
+When categories are enabled, the API preserves saved mappings while new imported
+values arrive and assigns only unused colors. Distinct groups never share a color;
+there is an explicit capacity error instead of palette reuse or truncation. An
+explicit auto-assign-all save is the only intentional re-randomization. Blank,
+missing, unreadable and unauthorized values stay neutral. Disable the setting to
+return ordinary seating status colors while retaining the selected field and
+stable mappings. Clearing the selected field explicitly resets its mappings. Deploy matching web, API and CLI releases, then
+perform separate live acceptance before enabling it for an event.
+
+`people registration update` forwards the organizer-edit API. Supply the current
+`expectedVersion`, audit `reason`, and complete `seats` array preserving unchanged
+party assignments. Realtime-enabled changes additionally require valid exact-seat
+holds through the existing realtime protocol; the CLI does not acquire holds.
+Use `--ack-sensitive-data --allow-state-change --target <registration-id>`.
+Saving does not send email unless the payload opts in. Re-read the revision
+after conflicts.
+
+To notify for a seat-only move, add `seatChangeNotice` to the same save. The
+notice is queued in the move's database transaction, so the move and notice
+request commit together or not at all; this additionally requires
+`--allow-email`. It is rejected alongside identity, contact or response edits.
+
+```sh
+rsvp people registration update \
+  --ack-sensitive-data --allow-state-change --allow-email --target reg_123 \
+  --payload '{"organizationId":"org_123","eventId":"evt_123","registrationId":"reg_123","expectedVersion":4,"reason":"Moved to finance table","seats":[{"registrationAttendeeId":"att_1","seatId":"seat_9"},{"registrationAttendeeId":"att_2","seatId":"seat_2"}],"seatChangeNotice":{"idempotencyKey":"4d68a320-013d-43c7-bfcc-d1126827d8c5"}}'
+```
+
+A separate manual notice for an already committed revision remains available:
+
+```sh
+rsvp people registration confirmation resend \
+  --allow-email --allow-state-change --target reg_123 \
+  --payload '{"organizationId":"org_123","eventId":"evt_123","registrationId":"reg_123","purpose":"SEAT_CHANGE","expectedRegistrationVersion":5,"idempotencyKey":"4d68a320-013d-43c7-bfcc-d1126827d8c5"}'
+```
+
+Replace the sample UUID with a new UUID for a new request; reuse that same UUID
+for retries of that request. Omitted `purpose` remains `CONFIRMATION`; seat-change
+requests require the committed `expectedRegistrationVersion`. Queue acceptance
+is not delivery. Stale revisions, unavailable copy and current permissions are
+checked by the server, and delivery rechecks the current recipient and active
+seats without including names, private answers or QR codes.
+
+Legacy copy is `seatChangeNotification: {enabled, subject, body}` in the
+`REGISTRATION_RULES` payload for `event setup step update`, with the current
+configuration version. Configurable copy is
+`definition.communications.participant.seatChange: {enabled, subject, body}`;
+merge into the complete named draft, preview, save with its revision, read back,
+then publish only with separate approval. Existing responses use their saved
+published version. Both default disabled/blank; missing copy never falls back to
+confirmation copy. No event-specific copy is supplied or enabled by this change.
+
 ## Audience tiers
 
 Audience tiers control which invitees can use a seat or table. List the tiers and their current invitee, table, and seat counts with:

package/dist/index.js

@@ -6654,6 +6654,18 @@ Object.assign(commands, {
   "event reminder counts": payloadCommand((api, input) => api.event.getReminderSegmentCounts.query(input), "Get reminder segment counts (--payload JSON).", ["sensitive-data"]),
   "event rsvp manifest": payloadCommand((api, input) => api.event.getRsvpManifest.query(input), "Get the caller's registration manifest (--payload JSON).", ["sensitive-data"]),
   "event seating availability": payloadCommand((api, input) => api.event.getSeatAvailability.query(input), "Get seat availability (--payload JSON)."),
+  "event seating live get": payloadCommand((api, input) => api.event.getLiveSeating.query(input), "Get the selected live seating map (--payload JSON).", ["sensitive-data"]),
+  "event seating category config get": payloadCommand((api, input) => api.event.getSeatingCategoryConfig.query(input), "Get authorized imported-field seating category settings (--payload JSON).", ["sensitive-data"]),
+  "event seating category config update": payloadCommand((api, input) => api.event.updateSeatingCategoryConfig.mutate(input), "Save imported-field seating category settings with configurationVersion (--payload JSON).", ["sensitive-data", "state-change"], "eventId"),
+  "event seating occupants list": payloadCommand((api, input) => api.event.getLiveSeatingOccupants.query(input), "List permitted occupants by seatMapId, tableId, department, categoryValue and query; follow nextCursor (--payload JSON).", ["sensitive-data"]),
+  "people registration edit get": payloadCommand((api, input) => api.event.getRegistrationForEdit.query(input), "Get current revision, permitted attendees, eligible seats and notification readiness (--payload JSON).", ["sensitive-data"]),
+  "people registration update": {
+    ...payloadCommand((api, input) => api.event.updateRegistration.mutate(input), "Save organizer edits with expectedVersion and reason; seating requires full-party seats and configured holds. Optional seatChangeNotice queues a seat-change notice atomically with a seat-only save (--payload JSON).", ["sensitive-data", "state-change"], "registrationId"),
+    conditionalEffects: [
+      { effect: "email", whenPayloadField: "seatChangeNotice" }
+    ]
+  },
+  "people registration confirmation resend": payloadCommand((api, input) => api.event.resendRegistrationConfirmation.mutate(input), "Queue CONFIRMATION (default) or SEAT_CHANGE with expectedRegistrationVersion and idempotencyKey; retries reuse that key (--payload JSON).", ["email", "state-change"], "registrationId"),
   "event realtime-token issue": payloadCommand((api, input) => api.event.issueRealtimeToken.mutate(input), "Issue a realtime token (--payload JSON).", ["sensitive-data", "state-change"]),
   "event mine list": payloadCommand((api, input) => api.event.listMyEvents.query(input), "List the caller's events (--payload JSON)."),
   "event reminder list": payloadCommand((api, input) => api.event.listReminderSegments.query(input), "List reminder segments (--payload JSON).", ["sensitive-data"]),
@@ -6727,6 +6739,7 @@ var getCommandManifest = () => ({
       summary: "Show the CLI version and configured API base URL."
     },
     ...Object.entries(commands).map(([path, command]) => ({
+      ...command.conditionalEffects ? { conditionalEffects: command.conditionalEffects } : {},
       effects: command.effects,
       path,
       summary: command.summary
@@ -6968,6 +6981,7 @@ var collectTargets = (input, targetKey) => {
   }
   return [];
 };
+var getConditionalEffects = (definition, input) => (definition.conditionalEffects ?? []).flatMap(({ effect, whenPayloadField }) => input && Object.hasOwn(input, whenPayloadField) && Reflect.get(input, whenPayloadField) != null ? [effect] : []);
 var requireEffects = async (effects, flags, confirm, input, targetKey) => {
   if (effects.length === 0)
     return;
@@ -7131,7 +7145,12 @@ Waiting for approval\u2026
     if (!definition)
       throw new CliUsageError("Unknown command. Run 'rsvp help' to list commands.");
     const input = getInput(parsed.flags, definition.payloadOnly, definition.scope);
-    await requireEffects(definition.effects, parsed.flags, dependencies.confirm, input, definition.targetKey);
+    await requireEffects([
+      ...new Set([
+        ...definition.effects,
+        ...getConditionalEffects(definition, input)
+      ])
+    ], parsed.flags, dependencies.confirm, input, definition.targetKey);
     const accessToken = !dependencies.apiClient && !definition.public ? await getAuthenticatedAccessToken({
       apiBaseUrl,
       store: getCredentialStore()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@go-labs-sg/rsvp",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "description": "RSVP CLI for authorized event operations.",
   "type": "module",
   "main": "./dist/index.js",