@go-labs-sg/rsvp 1.1.0 → 1.3.0

package/README.md

@@ -377,7 +377,11 @@ including tax. Omitted tax remains compatible with legacy no-tax configuration.
 Read `payment event get` back with the same scope to verify the saved policy.
 
 `payment mine get` exposes the attempt's saved tax quote and subtotal/tax/final
-total. `payment event list` exposes each attempt's original `quote` plus
+total, plus `capturedAttempt`: the selected attempt when it is captured;
+otherwise the latest captured attempt, including refunded ones. `payment mine receipt get` (`eventSlug`, optional `formSlug`,
+`paymentAttemptId`) reads the provider's current hosted receipt link for the
+caller's own captured attempt; links expire, so read it when needed rather than
+storing it. `payment event list` exposes each attempt's original `quote` plus
 `refundBreakdown` (cumulative refunded subtotal, tax and total). Pending refunds
 are not confirmed refunded amounts. These are payment breakdowns, not statutory
 tax invoices. Organizers choose applicable settings; configuration does not
@@ -908,8 +912,34 @@ configuration version. Configurable copy is
 `definition.communications.participant.seatChange: {enabled, subject, body}`;
 merge into the complete named draft, preview, save with its revision, read back,
 then publish only with separate approval. Existing responses use their saved
-published version. Both default disabled/blank; missing copy never falls back to
-confirmation copy. No event-specific copy is supplied or enabled by this change.
+published version **unless** the event explicitly opts into the current automatic
+policy. Both default disabled/blank; missing copy never falls back to confirmation
+copy.
+
+An event can opt into automatic notices using current event metadata
+`seatChangeNotification: {automatic: true, enabled: true, subject, body}` through
+that same revision-checked `REGISTRATION_RULES` update. It covers historical form
+versions without rewriting responses or sending anything retroactively. Successful
+draft publishes and direct organizer moves/swaps then atomically queue one notice
+per affected registration even when the client checkbox is false or omitted.
+Non-seating edits, drafts, no-ops and rejected saves do not queue notices. Existing
+notification permissions, deduplication and stale-version delivery checks remain.
+Omitting `automatic` from a settings update preserves its saved value; explicitly
+send `automatic: false` to turn it off.
+
+Because event policy may send automatically, registration updates containing
+`seats`, all swaps and all draft publishes now require `--allow-email` (or the
+existing interactive effects confirmation). This conservative CLI guard also
+applies to events without automatic notices; approval does not itself turn on
+notifications. Profile/menu-only updates and draft save/discard retain their
+previous effects.
+
+Optional `registrationEmail` and `registrationMasterList` presentation settings
+are also written through `REGISTRATION_RULES`; omitted settings are preserved.
+See `examples/amgen-rsvp-copy/registration-presentation-patch.json` and its README
+for a reviewed activation fragment, output-key semantics, receipt/header behavior
+and the separate deployment/configuration/live-send approval gates. No event
+settings are activated by installing the code or reading this example.
 
 ## Audience tiers
 

package/dist/index.js

@@ -7565,6 +7565,45 @@ var magicLinkSignInInputSchema = object({
   email: email2({ error: "Enter a valid email address" }).trim(),
   callbackURL: string2().min(1).optional()
 });
+// ../../utils/src/rich-text.ts
+var richTextJsonShape = object({
+  json: custom(),
+  html: string2()
+});
+var htmlEntityMap = {
+  amp: "&",
+  apos: "'",
+  cent: "\xA2",
+  copy: "\xA9",
+  emsp: " ",
+  ensp: " ",
+  gt: ">",
+  lt: "<",
+  nbsp: " ",
+  ndash: "\u2013",
+  quot: '"',
+  reg: "\xAE",
+  thinsp: " "
+};
+var decodeHtmlEntity = (entity) => {
+  const fromCodePoint = (codePoint) => Number.isInteger(codePoint) && codePoint >= 0 && codePoint <= 1114111 ? String.fromCodePoint(codePoint) : " ";
+  const normalizedEntity = entity.toLowerCase();
+  if (normalizedEntity.startsWith("#x")) {
+    const codePoint = Number.parseInt(normalizedEntity.slice(2), 16);
+    return fromCodePoint(codePoint);
+  }
+  if (normalizedEntity.startsWith("#")) {
+    const codePoint = Number.parseInt(normalizedEntity.slice(1), 10);
+    return fromCodePoint(codePoint);
+  }
+  return htmlEntityMap[normalizedEntity] ?? `&${entity};`;
+};
+var stripHtmlToText = (html) => html.replace(/<style[\s\S]*?<\/style>/gi, " ").replace(/<script[\s\S]*?<\/script>/gi, " ").replace(/<!--[\s\S]*?-->/g, " ").replace(/<[^>]+>/g, " ").replace(/&(#\d+|#x[\da-f]+|[a-z][a-z0-9]+);/gi, (_, entity) => decodeHtmlEntity(entity)).replace(/[\u200B-\u200D\uFEFF]/g, "").replace(/\s+/g, " ").trim();
+var extractTextFromRichText = (richText, fallback = "Untitled") => {
+  const text = stripHtmlToText(richText?.html ?? "");
+  return text || fallback;
+};
+
 // ../validators/src/flow.ts
 var eventFlowDateAnswerSchema = exports_iso.date();
 var eventFlowDateTimeAnswerSchema = exports_iso.datetime({
@@ -7697,6 +7736,7 @@ var customFieldValidationSchema = object({
 });
 var customFieldBaseShape = {
   helpText: string2().trim().max(500).optional(),
+  hideLabel: boolean2().optional(),
   label: string2().trim().min(1).max(240),
   outputKey: flowIdentifierSchema,
   required: boolean2().default(false),
@@ -7903,9 +7943,16 @@ var defaultEventSeatChangeNotification = {
 };
 var eventSeatChangeNotificationSchema = object({
   body: string2().trim().max(1e4).default(""),
+  automatic: boolean2().optional(),
   enabled: boolean2().default(false),
   subject: string2().trim().max(240).default("")
 }).superRefine((notification, ctx) => {
+  if (notification.automatic && !notification.enabled)
+    ctx.addIssue({
+      code: "custom",
+      message: "Automatic seat-change notifications must be enabled.",
+      path: ["enabled"]
+    });
   if (notification.enabled && !notification.subject) {
     ctx.addIssue({
       code: "custom",
@@ -7921,6 +7968,68 @@ var eventSeatChangeNotificationSchema = object({
     });
   }
 });
+var getEventFlowConfirmationBodyText = (richText) => {
+  const text = (node) => {
+    if (node.type === "text")
+      return node.text ?? "";
+    if (node.type === "hardBreak")
+      return `
+`;
+    const content = (node.content ?? []).map(text).join("");
+    return ["paragraph", "heading", "listItem"].includes(node.type ?? "") ? `${content}
+` : content;
+  };
+  return text(richText.json).trim();
+};
+var confirmationBodyRichTextSchema = unknown().superRefine((value, ctx) => {
+  const ancestors = new Set;
+  const withinDepth = (nested, depth) => {
+    if (depth > 32)
+      return false;
+    if (typeof nested !== "object" || nested === null)
+      return true;
+    if (ancestors.has(nested))
+      return false;
+    ancestors.add(nested);
+    const valid = Object.values(nested).every((child) => withinDepth(child, depth + 1));
+    ancestors.delete(nested);
+    return valid;
+  };
+  let valid = withinDepth(value, 0);
+  try {
+    valid = valid && new TextEncoder().encode(JSON.stringify(value)).byteLength <= 250000;
+  } catch {
+    valid = false;
+  }
+  if (!valid)
+    ctx.addIssue({
+      code: "custom",
+      message: "Confirmation body is too large or nested too deeply"
+    });
+}).pipe(richTextJsonShape).superRefine((value, ctx) => {
+  const validNode = (node) => {
+    if (!node || typeof node !== "object" || !("type" in node) || typeof node.type !== "string")
+      return false;
+    if ("text" in node && typeof node.text !== "string")
+      return false;
+    if ("marks" in node && (!Array.isArray(node.marks) || !node.marks.every((mark) => mark && typeof mark === "object" && typeof mark.type === "string")))
+      return false;
+    return !("content" in node) || Array.isArray(node.content) && node.content.every(validNode);
+  };
+  if (!validNode(value.json) || value.json.type !== "doc") {
+    ctx.addIssue({
+      code: "custom",
+      message: "Confirmation body must be an editor document"
+    });
+    return;
+  }
+  const length = getEventFlowConfirmationBodyText(value).length;
+  if (length === 0 || length > 1e4)
+    ctx.addIssue({
+      code: "custom",
+      message: "Confirmation body must contain 1\u201310,000 characters"
+    });
+});
 var participantConfirmationSchema = object({
   enabled: boolean2(),
   includeResponseDetails: boolean2().default(false),
@@ -7929,6 +8038,7 @@ var participantConfirmationSchema = object({
   supportEmail: email2(),
   templates: array(object({
     body: string2().trim().min(1).max(1e4),
+    bodyRichText: confirmationBodyRichTextSchema.optional(),
     outcomeId: eventFlowEntityIdSchema,
     subject: string2().trim().min(1).max(240)
   })).max(50)
@@ -9942,44 +10052,28 @@ var PUBLIC_EVENT_VALIDATED_FONT_FAMILIES = [
   "Zilla Slab Highlight"
 ];
 
-// ../../utils/src/rich-text.ts
-var richTextJsonShape = object({
-  json: custom(),
-  html: string2()
+// ../validators/src/registration-email-presentation.ts
+var registrationEmailPresentationSchema = strictObject({
+  layout: _enum(["DEFAULT", "GROUPED"]).default("DEFAULT"),
+  senderName: string2().trim().min(1).max(120).regex(/^[^<>\r\n]+$/).optional(),
+  introText: string2().trim().min(1).max(1e4).optional(),
+  menuDetailOutputKeys: array(string2().trim().min(1).max(120)).max(100).default([]),
+  submittedConsentOutputKeys: array(string2().trim().min(1).max(120)).max(100).default([]),
+  seatingDisclaimer: string2().trim().min(1).max(2000).optional(),
+  useResubmissionFooter: boolean2().default(false),
+  supportEmail: email2().optional(),
+  showLuckyDrawId: boolean2().optional()
 });
-var htmlEntityMap = {
-  amp: "&",
-  apos: "'",
-  cent: "\xA2",
-  copy: "\xA9",
-  emsp: " ",
-  ensp: " ",
-  gt: ">",
-  lt: "<",
-  nbsp: " ",
-  ndash: "\u2013",
-  quot: '"',
-  reg: "\xAE",
-  thinsp: " "
-};
-var decodeHtmlEntity = (entity) => {
-  const fromCodePoint = (codePoint) => Number.isInteger(codePoint) && codePoint >= 0 && codePoint <= 1114111 ? String.fromCodePoint(codePoint) : " ";
-  const normalizedEntity = entity.toLowerCase();
-  if (normalizedEntity.startsWith("#x")) {
-    const codePoint = Number.parseInt(normalizedEntity.slice(2), 16);
-    return fromCodePoint(codePoint);
-  }
-  if (normalizedEntity.startsWith("#")) {
-    const codePoint = Number.parseInt(normalizedEntity.slice(1), 10);
-    return fromCodePoint(codePoint);
-  }
-  return htmlEntityMap[normalizedEntity] ?? `&${entity};`;
-};
-var stripHtmlToText = (html) => html.replace(/<style[\s\S]*?<\/style>/gi, " ").replace(/<script[\s\S]*?<\/script>/gi, " ").replace(/<!--[\s\S]*?-->/g, " ").replace(/<[^>]+>/g, " ").replace(/&(#\d+|#x[\da-f]+|[a-z][a-z0-9]+);/gi, (_, entity) => decodeHtmlEntity(entity)).replace(/[\u200B-\u200D\uFEFF]/g, "").replace(/\s+/g, " ").trim();
-var extractTextFromRichText = (richText, fallback = "Untitled") => {
-  const text = stripHtmlToText(richText?.html ?? "");
-  return text || fallback;
-};
+
+// ../validators/src/registration-master-list-presentation.ts
+var outputKeysSchema = array(string2().min(1).max(160).regex(/^[A-Za-z][A-Za-z0-9_.:-]*$/)).max(100).refine((keys) => new Set(keys).size === keys.length, {
+  message: "Output keys must be unique"
+});
+var eventRegistrationMasterListSchema = object({
+  omittedOutputKeys: outputKeysSchema.default([]),
+  finalOutputKeys: outputKeysSchema.default([]),
+  showEligibilityCutoffInHeading: boolean2().default(false)
+}).strict().refine((config) => !config.finalOutputKeys.some((key) => config.omittedOutputKeys.includes(key)), { message: "Omitted output keys cannot also be final output keys" });
 
 // ../validators/src/event.ts
 var eventStatusSchema = _enum(EventStatus);
@@ -10078,10 +10172,13 @@ var eventCheckInQrReleaseSchema = discriminatedUnion("mode", [
 var eventPublicPageSchema = object({
   accessNotice: string2().trim().min(1).max(500).optional(),
   deadlineLabel: string2().trim().min(1).max(60).optional(),
+  paymentRedirectMessage: string2().trim().min(1).max(500).optional(),
+  paymentRedirectTitle: string2().trim().min(1).max(120).optional(),
   registrationDescription: string2().trim().min(1).max(500).optional(),
   registrationActionLabel: string2().trim().min(1).max(100).optional(),
   registrationTitle: string2().trim().min(1).max(120).optional(),
   responseUpdateNotice: string2().trim().min(1).max(300).optional(),
+  scheduleNote: string2().trim().min(1).max(300).optional(),
   showAccessNotice: boolean2().optional(),
   showDeadlineNotice: boolean2().optional(),
   showResponseUpdateNotice: boolean2().optional()
@@ -10139,6 +10236,44 @@ var requiredEventDetailsRichTextSchema = (label, maxLength) => eventDetailsRichT
     });
   }
 });
+var maxEventDescriptionLength = 2000;
+var isJsonRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var getEventDescriptionPlainText = (richText) => {
+  const lines = [];
+  let line = "";
+  const flush = () => {
+    const text = line.replace(/[\u200B-\u200D\uFEFF]/g, "").replace(/\s+/g, " ").trim();
+    if (text)
+      lines.push(text);
+    line = "";
+  };
+  const visit = (node, depth) => {
+    if (!isJsonRecord(node) || depth > 32)
+      return;
+    if (node.type === "text") {
+      if (typeof node.text === "string")
+        line += node.text;
+      return;
+    }
+    if (node.type === "hardBreak") {
+      flush();
+      return;
+    }
+    const children = Array.isArray(node.content) ? node.content : [];
+    const isTextBlock = children.some((child) => isJsonRecord(child) && (child.type === "text" || child.type === "hardBreak"));
+    if (!isTextBlock)
+      flush();
+    for (const child of children)
+      visit(child, depth + 1);
+    flush();
+  };
+  visit(richText?.json, 0);
+  return lines.join(`
+`);
+};
+var eventDescriptionRichTextSchema = eventDetailsRichTextSchema.refine((value) => getEventDescriptionPlainText(value).length <= maxEventDescriptionLength, {
+  message: `Description must be ${maxEventDescriptionLength} characters or fewer`
+});
 var eventDetailsPageSchema = object({
   titleRichText: requiredEventDetailsRichTextSchema("a page title", 180),
   subtitleRichText: eventDetailsRichTextSchema.nullable().optional(),
@@ -10402,7 +10537,8 @@ var updateRetentionSetupStepInputSchema = setupStepScopeSchema.extend({
 var updateEventDetailsInputSchema = setupStepScopeSchema.extend({
   section: literal("DETAILS"),
   name: createEventInputSchema.shape.name,
-  description: string2().trim().max(2000).nullable(),
+  description: string2().trim().max(maxEventDescriptionLength).nullable(),
+  descriptionRichText: eventDescriptionRichTextSchema.nullable().optional(),
   venueName: string2().trim().max(220).nullable(),
   slug: eventSlugSchema,
   timeZone: eventTimeZoneSchema,
@@ -10432,6 +10568,8 @@ var updateEventRegistrationRulesInputSchema = setupStepScopeSchema.extend({
   capacityLimit: eventCapacityLimitSchema.nullable(),
   guestPolicy: guestPolicySchema,
   seatChangeNotification: eventSeatChangeNotificationSchema.optional(),
+  registrationEmail: registrationEmailPresentationSchema.optional(),
+  registrationMasterList: eventRegistrationMasterListSchema.optional(),
   waitlistEnabled: boolean2(),
   waitlistOfferTtlMinutes: number2().int().min(5).max(10080)
 }).refine((value) => !value.rsvpOpensAt || !value.rsvpClosesAt || value.rsvpOpensAt < value.rsvpClosesAt, {
@@ -11318,6 +11456,9 @@ var createPaymentCheckoutInputSchema = object({
   idempotencyKey: uuid2()
 });
 var getMyPaymentInputSchema = object({ eventSlug: eventSlugSchema });
+var getMyPaymentReceiptInputSchema = getMyPaymentInputSchema.extend({
+  paymentAttemptId: string2().min(1)
+});
 var listEventPaymentsInputSchema = eventScopeSchema4.extend({
   cursor: string2().min(1).optional(),
   limit: number2().int().min(1).max(100).default(50)
@@ -12297,13 +12438,14 @@ Object.assign(commands, {
   "event seating occupants list": payloadCommand((api, input) => api.event.getLiveSeatingOccupants.query(input), "List permitted occupants by seatMapId, tableId, department, categoryValue and query; follow nextCursor (--payload JSON).", ["sensitive-data"]),
   "people registration edit get": payloadCommand((api, input) => api.event.getRegistrationForEdit.query(input), "Get current revision, permitted attendees, eligible seats and notification readiness; mode RESTORE loads seat maps and previous seats for a cancelled registration (--payload JSON).", ["sensitive-data"]),
   "people registration update": {
-    ...payloadCommand((api, input) => api.event.updateRegistration.mutate(input), "Save organizer edits with expectedVersion and reason; seating requires full-party seats and configured holds. Optional seatChangeNotice queues a seat-change notice atomically with a seat-only save (--payload JSON).", ["sensitive-data", "state-change"], "registrationId"),
+    ...payloadCommand((api, input) => api.event.updateRegistration.mutate(input), "Save organizer edits with expectedVersion and reason; seating requires full-party seats, configured holds and --allow-email because event policy may automatically queue notices. Optional seatChangeNotice queues a notice with a seat-only save (--payload JSON).", ["sensitive-data", "state-change"], "registrationId"),
     conditionalEffects: [
-      { effect: "email", whenPayloadField: "seatChangeNotice" }
+      { effect: "email", whenPayloadField: "seatChangeNotice" },
+      { effect: "email", whenPayloadField: "seats" }
     ]
   },
   "event seating swap": {
-    ...payloadCommand((api, input) => api.event.swapAttendeeSeats.mutate(input), "Swap the seats of two seated attendees in one save, given each attendee's current seatId and a reason. Optional seatChangeNotice queues a seat-change notice for each registration involved (--payload JSON).", ["sensitive-data", "state-change"]),
+    ...payloadCommand((api, input) => api.event.swapAttendeeSeats.mutate(input), "Swap the seats of two seated attendees in one save, given each attendee's current seatId and a reason. Requires --allow-email because event policy may automatically queue one notice per affected registration; optional seatChangeNotice also requests notices (--payload JSON).", ["sensitive-data", "state-change", "email"]),
     conditionalEffects: [
       { effect: "email", whenPayloadField: "seatChangeNotice" }
     ]
@@ -12321,7 +12463,7 @@ Object.assign(commands, {
   "event mine list": payloadCommand((api, input) => api.event.listMyEvents.query(input), "List the caller's events (--payload JSON)."),
   "event reminder list": payloadCommand((api, input) => api.event.listReminderSegments.query(input), "List reminder segments (--payload JSON).", ["sensitive-data"]),
   "event rsvp submit": payloadCommand((api, input) => api.event.submitRsvp.mutate(input), "Submit the caller's registration (--payload JSON).", ["sensitive-data", "state-change"]),
-  "event setup step update": payloadCommand((api, input) => api.event.updateSetupStep.mutate(input), "Update one event setup step (--payload JSON).", ["state-change"]),
+  "event setup step update": payloadCommand((api, input) => api.event.updateSetupStep.mutate(input), "Update one revision-checked event setup step (--payload JSON). REGISTRATION_RULES accepts registrationEmail presentation, registrationMasterList output-key ordering/omissions and seatChangeNotification automatic policy; omitted settings are preserved.", ["state-change"]),
   "event page update": payloadCommand((api, input) => api.event.updateSetupStep.mutate({
     ...input,
     section: "DETAILS_PAGE"
@@ -12334,6 +12476,7 @@ Object.assign(commands, {
 Object.assign(commands, {
   "payment event get": payloadCommand((api, input) => api.payment.getEventPayment.query(input), "Get event payment configuration (--payload JSON).", ["financial-write"]),
   "payment mine get": payloadCommand((api, input) => api.payment.getMyPayment.query(input), "Get the caller's payment with its saved subtotal, tax and final total breakdown (--payload JSON).", ["financial-write", "sensitive-data"]),
+  "payment mine receipt get": payloadCommand((api, input) => api.payment.getMyPaymentReceipt.query(input), "Get the provider's current hosted receipt link for the caller's captured payment attempt; receiptUrl is null when unavailable (--payload JSON).", ["financial-write", "sensitive-data"]),
   "payment event list": payloadCommand((api, input) => api.payment.listEventPayments.query(input), "List event payments with original quote and cumulative refunded subtotal/tax/total, including verified external refunds (--payload JSON).", ["financial-write", "sensitive-data"]),
   "payment exception list": payloadCommand((api, input) => api.payment.listPaymentExceptions.query(input), "List payment exceptions (--payload JSON).", ["financial-write", "sensitive-data"]),
   "payment exception resolve": payloadCommand((api, input) => api.payment.resolvePaymentException.mutate(input), "Resolve a payment exception (--payload JSON).", ["financial-write", "sensitive-data", "state-change"]),
@@ -12402,7 +12545,7 @@ Object.assign(commands, {
   },
   "event seating draft publish": {
     scope: "event",
-    effects: ["state-change"],
+    effects: ["state-change", "email"],
     targetKey: "eventId",
     conditionalEffects: [
       { effect: "email", whenPayloadField: "sendSeatChangeEmail" }
@@ -12414,7 +12557,7 @@ Object.assign(commands, {
     },
     validateInput: (input) => validateSeatingDraftInput(publishSeatingDraftInputSchema, input),
     operation: (api, input) => api.event.publishSeatingDraft.mutate(publishSeatingDraftInputSchema.parse(input)),
-    summary: "Atomically publish all draft changes with expectedVersion, UUID requestId and reason. Email defaults off; retries reuse the requestId and intent. Realtime-enabled free targets need per-registration seatHolds (--payload JSON)."
+    summary: "Atomically publish all draft changes with expectedVersion, UUID requestId and reason. Requires --allow-email: event policy can automatically send notices even when sendSeatChangeEmail is false. Retries reuse requestId and intent. Realtime-enabled free targets need per-registration seatHolds (--payload JSON)."
   }
 });
 var getCommandManifest = () => ({

package/examples/amgen-rsvp-copy/README.md

@@ -76,3 +76,75 @@ rsvp event setup update \
 ```
 
 This command is documented for later use and was not executed for this task.
+
+## Receipt, master-list and automatic seat-change presentation (#1657)
+
+`registration-presentation-patch.json` is a **configuration fragment**, not an
+executable mutation payload. It contains reusable event settings with Amgen copy
+and confirmed output keys. No staff-exclusion filter is needed or included.
+
+After the compatible API/web/CLI release and **separate approval**, refresh the
+test event first. Build a `REGISTRATION_RULES` input for
+`rsvp event setup step update` with its current `organizationId`, `eventId`,
+`version: configurationVersion`, `rsvpOpensAt`, `rsvpClosesAt`, `dietaryClosesAt`,
+`capacityLimit`, `guestPolicy`, `waitlistEnabled` and
+`waitlistOfferTtlMinutes`. Merge the fragment's three top-level keys into that
+input; retain every other current setting. Do not send the fragment to the
+full `event setup update` endpoint. Review the exact payload before writing,
+read the same event back afterwards, and verify each key. Repeat independently
+for the official event only after test-event acceptance and approval. Do not
+reuse cached version numbers, event IDs or schedules. No commands in this
+section have been executed.
+
+- **Receipt:** `registrationEmail` groups check-in, Table Seating, Menu Selection
+  and other responses. The current presentation can update old receipts without
+  changing their saved form, outcome or answers. Accepted `indemnityAccepted`
+  displays “Submitted”; false/missing values do not become accepted. Saved
+  `confirmation.showLuckyDrawId: false` remains authoritative; the event may
+  additionally hide IDs, but cannot reveal IDs a saved form hid. The display name
+  becomes “ASM DND Registration” while retaining the configured verified sender
+  address/domain. The one footer derives the event's current registration URL
+  and named form slug at delivery, so the test event cannot point to the official
+  form by copying an example URL. This fragment replaces the old free-text body
+  with one short introduction, avoiding duplicate acknowledgement/footer copy.
+- **Export:** `registrationMasterList.omittedOutputKeys: ["menu:diet"]` omits only
+  the derived Vegetarian/non-vegetarian classification. The actual employee/guest
+  menus and dietary answers remain. `finalOutputKeys: ["indemnityAccepted"]`
+  moves consent after operational columns. The cutoff heading uses the event's
+  existing lucky-draw cutoff/timezone; this fragment does **not** change it. The
+  cached approved cutoff is 27 November 2026, 8pm Asia/Singapore; verify it afresh.
+- **Automatic notices:** event metadata `seatChangeNotification.automatic: true`
+  deliberately enables the current policy for historical form versions too.
+  It does not migrate stored forms, responses, or seating. Draft publish and
+  direct committed organizer move/swap queue one minimal notice per affected
+  registration in the same transaction, regardless of a manual checkbox. The
+  current registration email and committed seats are re-read at delivery. A
+  failed/denied operation, no-op or non-seating edit does not queue a notice;
+  retries do not queue another notice for the same committed request. Existing
+  stale-version delivery suppression remains. Enabling this policy **does not
+  enqueue or resend anything retroactively**.
+
+The fragment's seat-change copy and subject are a proposed activation payload;
+review them before a live write. The support address `events@getout.sg` is
+confirmed. Sender/recipient/contact and active policy must be verified with a
+controlled test send only after separate email approval. Queue acceptance is
+not provider delivery.
+
+`confirmation.resend` permission is still required when an automatic notice
+would be queued. A seating edit without that permission fails atomically rather
+than silently skipping the notice. Registration-settings clients that omit the
+new `automatic` property retain the stored value; explicitly set `automatic:
+false` when turning the policy off. An automatic policy cannot be disabled merely
+by saving `enabled: false` without explicitly clearing `automatic`.
+
+CLI safety remains separate from the automatic policy: direct registration
+updates containing `seats`, all swaps, and all seating-draft publishes require
+`--allow-email` (or the existing interactive effects confirmation), even when
+`sendSeatChangeEmail` is false or omitted. This conservative guard also applies
+to events without automatic notices; the flag grants approval but does not
+itself enable sending. Non-seating profile/menu updates and saving or discarding
+a draft do not acquire an email effect.
+
+Production deployment, event configuration writes, live submissions/reseating,
+export jobs, resends and any real provider send require explicit approval and
+readback. Local HTML/XLSX and synthetic browser checks are not live acceptance.

package/examples/amgen-rsvp-copy/registration-presentation-patch.json

@@ -0,0 +1,29 @@
+{
+	"registrationEmail": {
+		"layout": "GROUPED",
+		"senderName": "ASM DND Registration",
+		"introText": "Thank you for your response.",
+		"menuDetailOutputKeys": [
+			"hasDietaryRestrictions",
+			"dietaryRestrictions",
+			"guestHasDietaryRestrictions",
+			"guestDietaryRestrictions"
+		],
+		"submittedConsentOutputKeys": ["indemnityAccepted"],
+		"seatingDisclaimer": "Table seating is subject to changes based on the discretion of the organisation committee, due to seating capacity and to accommodate all guests.",
+		"useResubmissionFooter": true,
+		"supportEmail": "events@getout.sg",
+		"showLuckyDrawId": false
+	},
+	"registrationMasterList": {
+		"omittedOutputKeys": ["menu:diet"],
+		"finalOutputKeys": ["indemnityAccepted"],
+		"showEligibilityCutoffInHeading": true
+	},
+	"seatChangeNotification": {
+		"automatic": true,
+		"enabled": true,
+		"subject": "ASM Dinner and Dance 2026 — seating updated",
+		"body": "Your table seating for ASM Dinner and Dance 2026 has been updated. Please refer to your current seat assignments below.\n\nTable seating is subject to changes based on the discretion of the organisation committee, due to seating capacity and to accommodate all guests.\n\nFor further queries, please contact events@getout.sg."
+	}
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@go-labs-sg/rsvp",
-  "version": "1.1.0",
+  "version": "1.3.0",
   "description": "RSVP CLI for authorized event operations.",
   "type": "module",
   "main": "./dist/index.js",