@go-labs-sg/rsvp 0.5.0 → 0.6.1

package/README.md

@@ -61,6 +61,10 @@ Global administrators can update another account's global role from the web user
 
 ## Command safety
 
+Argument-parsing errors use a safe command label and never echo option values,
+including roster JSON passed through `--payload`. Surrounding shell history and
+automation can still record arguments independently of the CLI's error output.
+
 Use `rsvp help` for the command catalogue. Every response is a JSON envelope on stdout; errors and diagnostics go to stderr. `rsvp manifest` emits the machine-readable command reference for tooling.
 
 For a read-only registration-journey diagnosis, inspect the event, draft,
@@ -73,6 +77,25 @@ rsvp event flow versions list --organization-id org_123 --event-id evt_123
 rsvp event flow resources get --organization-id org_123 --event-id evt_123
 ```
 
+Create an immutable menu version with an explicit mutation acknowledgement. The
+target is the event ID in the payload:
+
+```sh
+rsvp event flow menu version create \
+  --allow-state-change \
+  --target evt_123 \
+  --payload '{"organizationId":"org_123","eventId":"evt_123","menu":{"mode":"NEW","key":"dinner","name":"Dinner"},"choices":[{"key":"standard","label":"Standard meal","dietaryTags":[]}]}'
+```
+
+To version an existing menu, use `"menu":{"mode":"EXISTING","menuId":"..."}`
+in the payload and keep the event ID as `--target`.
+
+Reference the returned `version.id` from the draft's `MENU_SELECTION` blocks,
+then save with `event flow draft save`, `--allow-state-change`, and the event ID
+as `--target`. Include the latest draft revision as `expectedRevision`; nested
+resource IDs such as a seating block's `seatMapId` are not approval targets for
+this command. Saving the draft does not publish the registration flow.
+
 Commands returning invitee, registration, roster, report, audit, export, payment, or user data require `--ack-sensitive-data`. Mutations require their exact effect gates and a `--target` matching the affected resource in the payload. Depending on the operation, gates include:
 
 - `--allow-state-change`

package/dist/index.js

@@ -19216,10 +19216,18 @@ var commands = {
     scope: "event",
     summary: "List the menus, consent documents, images, and seat maps available to the registration flow."
   },
+  "event flow menu version create": {
+    effects: ["state-change"],
+    operation: (api2, input2) => api2.eventFlow.createMenuVersion.mutate(input2),
+    payloadOnly: true,
+    targetKey: "eventId",
+    summary: "Create an immutable event menu version (--payload JSON)."
+  },
   "event flow draft save": {
     effects: ["state-change"],
     operation: (api2, input2) => api2.eventFlow.saveDraft.mutate(input2),
     payloadOnly: true,
+    targetKey: "eventId",
     summary: "Save a revision-checked registration flow draft (--payload JSON)."
   },
   "event flow published get": {
@@ -19759,15 +19767,27 @@ var collectValuesForKey = (value, targetKey) => {
     return collectValuesForKey(nested, targetKey);
   });
 };
-var collectTargets = (input2) => {
-  for (const targetKey of targetKeys) {
-    const values = collectValuesForKey(input2, targetKey);
+var collectDirectTargetValues = (input2, targetKey) => {
+  if (!input2)
+    return [];
+  const value = input2[targetKey];
+  if (Array.isArray(value))
+    return value.map(String);
+  if (["string", "number"].includes(typeof value))
+    return [String(value)];
+  return [];
+};
+var collectTargets = (input2, targetKey) => {
+  if (targetKey)
+    return collectDirectTargetValues(input2, targetKey);
+  for (const targetKey2 of targetKeys) {
+    const values = collectValuesForKey(input2, targetKey2);
     if (values.length > 0)
       return values;
   }
   return [];
 };
-var requireEffects = async (effects, flags, confirm, input2) => {
+var requireEffects = async (effects, flags, confirm, input2, targetKey) => {
   if (effects.length === 0)
     return;
   const missing = effects.filter((effect) => {
@@ -19776,7 +19796,7 @@ var requireEffects = async (effects, flags, confirm, input2) => {
   });
   const targetRequired = effects.some((effect) => effect !== "sensitive-data");
   const target = getStringFlag(flags, "--target");
-  const candidates = targetRequired ? collectTargets(input2) : [];
+  const candidates = targetRequired ? collectTargets(input2, targetKey) : [];
   const targetMatches = !targetRequired || target !== undefined && candidates.includes(target);
   if (missing.length === 0 && targetMatches)
     return;
@@ -19791,13 +19811,26 @@ var requireEffects = async (effects, flags, confirm, input2) => {
   ];
   throw new CliUsageError(`Command requires ${requirements.join(" and ")} in non-interactive use.${candidates.length > 0 ? ` Expected target: ${candidates.join(" or ")}.` : ""}`);
 };
+var knownCommandNames = new Set([
+  "help",
+  "manifest",
+  "version",
+  "health",
+  "auth login",
+  "auth status",
+  "auth logout",
+  "auth whoami",
+  ...Object.keys(commands)
+]);
 var runRsvpCli = async (argv, dependencies) => {
-  let command = argv.filter((argument) => !argument.startsWith("--")).join(" ");
-  if (!command)
-    command = "help";
+  let command = "unknown";
   try {
     const parsed = parseArgs(argv);
-    command = parsed.positionals.join(" ") || "help";
+    const requestedCommand = parsed.positionals.join(" ") || "help";
+    if (!knownCommandNames.has(requestedCommand)) {
+      throw new CliUsageError("Unknown command. Run 'rsvp help' to list commands.");
+    }
+    command = requestedCommand;
     if (command === "help") {
       output2(dependencies.io, command, getCommandManifest());
       return 0;
@@ -19915,7 +19948,7 @@ Waiting for approval\u2026
     if (!definition)
       throw new CliUsageError("Unknown command. Run 'rsvp help' to list commands.");
     const input2 = getInput(parsed.flags, definition.payloadOnly, definition.scope);
-    await requireEffects(definition.effects, parsed.flags, dependencies.confirm, input2);
+    await requireEffects(definition.effects, parsed.flags, dependencies.confirm, input2, definition.targetKey);
     const accessToken = !dependencies.apiClient && !definition.public ? await getAuthenticatedAccessToken({
       apiBaseUrl,
       store: getCredentialStore()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@go-labs-sg/rsvp",
-  "version": "0.5.0",
+  "version": "0.6.1",
   "description": "RSVP CLI for authorized event operations.",
   "type": "module",
   "exports": {},