@go-labs-sg/rsvp 1.3.0 → 1.4.0

package/README.md

@@ -108,7 +108,7 @@ rsvp event seating draft preview --organization-id org_123 --event-id evt_123 \
   --expected-version 1 --ack-sensitive-data
 rsvp event seating draft publish --organization-id org_123 --event-id evt_123 \
   --expected-version 1 --request-id 123e4567-e89b-42d3-a456-426614174000 \
-  --reason 'Seat the confirmed guest' --allow-state-change --target evt_123
+  --reason 'Seat the confirmed guest' --allow-state-change --allow-email --target evt_123
 ```
 
 Save and Publish require the latest `expectedVersion`. A successful Publish applies
@@ -116,12 +116,37 @@ all changed guests atomically and clears only that version of your draft. Resolv
 preview issues before publishing; conflicts leave all bookings and the draft intact.
 For an unknown outcome, retry the same UUID `requestId`, version, reason and email
 choice: the durable receipt returns the previous counts without sending again or
-clearing a newer draft. A different intent needs a new request ID. Email defaults
-off. To opt in, use `--allow-email` and a full JSON payload including organizationId,
-eventId, expectedVersion, requestId, reason and `sendSeatChangeEmail: true`. Do not
-combine `--payload` with command-local version/reason/request flags;
-the server additionally requires notice permission and enabled recipient policy.
-Preview counts recipient registrations, not guests. On realtime-enabled servers,
+clearing a newer draft. A different intent needs a new request ID. Preserve the
+exact `seatChangeEmailRegistrationIds` set on retry (order is immaterial); changing
+it, including changing between omitted and `[]`, rejects reuse of the request ID.
+
+Preview returns `noticeRecipients`: one row per affected registration, with a
+registration ID, a grant-scoped name, `eligible`, and an `ineligibleReason` when
+unavailable. No email addresses are exposed by this seating response. Review both
+eligible and ineligible rows before choosing who receives mail; several moving
+party members still produce only one recipient registration.
+
+Use `seatChangeEmailRegistrationIds` in a full `--payload` to choose the exact
+eligible affected registrations. Leave a registration out to publish its seat
+changes without email. `[]` explicitly sends no email, **including when the event
+has automatic seat-change notifications**. Selecting an unaffected registration,
+an ineligible recipient or duplicate IDs is rejected before publishing. The API
+rechecks permissions and eligibility under the publish transaction, not just in
+preview. Sending requires notice permission. An explicit empty array does not.
+
+```sh
+rsvp event seating draft publish --allow-state-change --allow-email --target evt_123 \
+  --payload '{"organizationId":"org_123","eventId":"evt_123","expectedVersion":1,"requestId":"123e4567-e89b-42d3-a456-426614174000","reason":"Seat the confirmed party","sendSeatChangeEmail":true,"seatChangeEmailRegistrationIds":["reg_123"]}'
+```
+
+Do not combine `--payload` with command-local version/reason/request flags. If the
+recipient field is omitted, existing behavior remains: `sendSeatChangeEmail: true`
+requests all affected registrations, otherwise the automatic event policy still
+applies. Every draft publish conservatively requires CLI `--allow-email` (or the
+interactive effects confirmation), even for explicit `[]`; it approves an effect
+but does not enable sending. Use the matching server/client revision for explicit
+recipient choices; older servers reject the new field rather than silently
+ignoring it. Preview counts recipient registrations, not guests. On realtime-enabled servers,
 free new targets require validated per-registration holds at Publish, supplied as
 `seatHolds: [{registrationId, holds: [{seatMapId, clientId, holdToken}]}]` in the
 payload. Acquire these through the existing organizer hold-token flow; Stage never
@@ -537,6 +562,56 @@ it for the active registration/edit definition. Deploy the updated server before
 saving these settings because older validators discard unsupported fields.
 No database schema migration or attendee backfill is required.
 
+## Confirmation email layout, name, QR codes and attachments
+
+In the form builder's **Flow settings → Confirmation email layout**, or through
+`definition.communications.participant.email` with `event flow draft save`,
+customise the participant confirmation email for every outcome of the form:
+
+```json
+{
+  "communications": {
+    "participant": {
+      "email": {
+        "heading": "Hello {{name}}!",
+        "eventLine": null,
+        "confirmationButtonLabel": "View my Quest pass",
+        "supportFooter": "Questions? Email quest@example.com",
+        "showEventDetails": false,
+        "includeCheckInQrCodes": true,
+        "attachments": []
+      }
+    }
+  }
+}
+```
+
+- `{{name}}` works in template `subject`, `body`, `bodyRichText` and every
+  text field above. It uses the primary attendee's name, then the invitee's
+  name, and falls back to `there`.
+- `heading`, `eventLine`, `confirmationButtonLabel` and `supportFooter`: omit to
+  keep the built-in text, `null` to hide that part, or a string to replace it.
+  A custom or hidden `supportFooter` also replaces the resubmission footer.
+- `showEventDetails` (default `true`) controls the When/Where lines.
+- `includeCheckInQrCodes` (default `false`) embeds each attendee's check-in QR
+  image once the event's check-in QR codes are released; before release the
+  email keeps the release message.
+- `attachments`: up to 5 PDF, PNG or JPEG files, 10 MB each and 15 MB total.
+  Create an upload with `event flow confirmation attachment upload create`
+  (`organizationId`, `eventId`, `filename`, `contentType`, `byteSize`), `PUT`
+  the file unchanged to the returned `uploadUrl` with its `Content-Type`, then
+  add the returned `attachment` object to the list. Preview/publish reject keys
+  not uploaded for the same event, and publish verifies each uploaded object's
+  type and size.
+
+Merge these fields into the complete current definition and publish as for
+other form settings. Omitting `email` keeps existing emails unchanged. Deploy
+the updated server before saving these settings. No database migration is
+required.
+
+`event flow preview` sends the definition as a POST body so large formatted
+emails no longer exceed URL limits; it requires a server with this change.
+
 ## Administrator registration for an invitee
 
 Organizers can register someone on their behalf at any time, including after

package/dist/index.js

@@ -7195,7 +7195,8 @@ var logoutCliSession = async ({
 // src/api-client.ts
 import {
   createTRPCProxyClient,
-  httpBatchLink
+  httpBatchLink,
+  splitLink
 } from "@trpc/client";
 import SuperJSON from "superjson";
 
@@ -7213,18 +7214,28 @@ var normalizeApiBaseUrl = (value) => {
 var getApiBaseUrl = (override) => normalizeApiBaseUrl(override ?? process.env.RSVP_API_URL ?? DEFAULT_RSVP_API_BASE_URL);
 
 // src/api-client.ts
-var createRsvpClient = (apiBaseUrl = getApiBaseUrl(), accessToken) => createTRPCProxyClient({
-  links: [
-    httpBatchLink({
-      headers: () => accessToken ? {
-        authorization: `Bearer ${accessToken}`,
-        "x-trpc-source": "rsvp-cli"
-      } : { "x-trpc-source": "rsvp-cli" },
-      transformer: SuperJSON,
-      url: `${apiBaseUrl}/api/trpc`
-    })
-  ]
-});
+var POST_QUERY_PATHS = new Set([
+  "eventFlow.preview"
+]);
+var createRsvpClient = (apiBaseUrl = getApiBaseUrl(), accessToken) => {
+  const linkOptions = {
+    headers: () => accessToken ? {
+      authorization: `Bearer ${accessToken}`,
+      "x-trpc-source": "rsvp-cli"
+    } : { "x-trpc-source": "rsvp-cli" },
+    transformer: SuperJSON,
+    url: `${apiBaseUrl}/api/trpc`
+  };
+  return createTRPCProxyClient({
+    links: [
+      splitLink({
+        condition: (op) => POST_QUERY_PATHS.has(op.path),
+        true: httpBatchLink({ ...linkOptions, methodOverride: "POST" }),
+        false: httpBatchLink(linkOptions)
+      })
+    ]
+  });
+};
 
 // ../validators/src/assign-guests.ts
 var assignGuestFiltersInputSchema = object({
@@ -8030,7 +8041,53 @@ var confirmationBodyRichTextSchema = unknown().superRefine((value, ctx) => {
       message: "Confirmation body must contain 1\u201310,000 characters"
     });
 });
+var eventFlowConfirmationAttachmentContentTypes = [
+  "application/pdf",
+  "image/jpeg",
+  "image/png"
+];
+var maxEventFlowConfirmationAttachmentCount = 5;
+var maxEventFlowConfirmationAttachmentSize = 10 * 1024 * 1024;
+var maxEventFlowConfirmationAttachmentTotalSize = 15 * 1024 * 1024;
+var eventFlowConfirmationAttachmentFilenameSchema = string2().trim().min(1).max(120).regex(/^[^\\/:*?"<>|\r\n\t]+$/, "Attachment file names cannot contain path or control characters");
+var eventFlowConfirmationAttachmentSchema = strictObject({
+  byteSize: number2().int().positive().max(maxEventFlowConfirmationAttachmentSize),
+  contentType: _enum(eventFlowConfirmationAttachmentContentTypes),
+  filename: eventFlowConfirmationAttachmentFilenameSchema,
+  key: string2().trim().min(1).max(300)
+});
+var editableEmailCopySchema = (maxLength) => string2().trim().min(1).max(maxLength).nullable().optional();
+var eventFlowParticipantConfirmationEmailSchema = strictObject({
+  attachments: array(eventFlowConfirmationAttachmentSchema).max(maxEventFlowConfirmationAttachmentCount).default([]),
+  confirmationButtonLabel: editableEmailCopySchema(60),
+  eventLine: editableEmailCopySchema(500),
+  heading: editableEmailCopySchema(120),
+  includeCheckInQrCodes: boolean2().default(false),
+  showEventDetails: boolean2().default(true),
+  supportFooter: editableEmailCopySchema(1000)
+}).superRefine((email, ctx) => {
+  const totalSize = email.attachments.reduce((total, attachment) => total + attachment.byteSize, 0);
+  if (totalSize > maxEventFlowConfirmationAttachmentTotalSize) {
+    ctx.addIssue({
+      code: "custom",
+      message: "Confirmation attachments must total 15 MB or less",
+      path: ["attachments"]
+    });
+  }
+  const keys = new Set;
+  for (const [index, attachment] of email.attachments.entries()) {
+    if (keys.has(attachment.key)) {
+      ctx.addIssue({
+        code: "custom",
+        message: "Each confirmation attachment can be added only once",
+        path: ["attachments", index, "key"]
+      });
+    }
+    keys.add(attachment.key);
+  }
+});
 var participantConfirmationSchema = object({
+  email: eventFlowParticipantConfirmationEmailSchema.optional(),
   enabled: boolean2(),
   includeResponseDetails: boolean2().default(false),
   replyTo: email2().optional(),
@@ -10390,7 +10447,10 @@ var eventTablePaginationSchema = object({
 var listEventInviteesInputSchema = organizationEventByIdInputSchema.extend({
   ...eventTablePaginationSchema.shape,
   audienceTierId: string2().min(1).nullable().optional(),
-  status: _enum(InviteeStatus).optional()
+  status: _enum(InviteeStatus).optional(),
+  statuses: array(_enum(InviteeStatus)).min(1).max(7).optional(),
+  cursor: string2().min(1).max(64).optional(),
+  direction: _enum(["NEXT", "PREVIOUS"]).default("NEXT")
 });
 var listEventRegistrationsInputSchema = organizationEventByIdInputSchema.extend({
   archive: _enum(["ACTIVE", "ARCHIVED", "ALL"]).default("ACTIVE"),
@@ -10865,6 +10925,11 @@ var createEventFlowImageAssetUploadInputSchema = organizationEventByIdInputSchem
   byteSize: number2().int().positive().max(maxEventFlowImageAssetSize),
   mimeType: eventFlowImageAssetMimeTypeSchema
 });
+var createEventFlowConfirmationAttachmentUploadInputSchema = organizationEventByIdInputSchema.extend({
+  byteSize: number2().int().positive().max(maxEventFlowConfirmationAttachmentSize),
+  contentType: _enum(eventFlowConfirmationAttachmentContentTypes),
+  filename: eventFlowConfirmationAttachmentFilenameSchema
+});
 var finalizeEventFlowImageAssetInputSchema = organizationEventByIdInputSchema.extend({
   assetId: eventFlowImageAssetIdSchema
 });
@@ -10968,6 +11033,10 @@ var createEventFlowConsentVersionInputSchema = organizationEventByIdInputSchema.
 var setEventFlowGroupPasscodeInputSchema = organizationEventFlowInputSchema.extend({
   passcode: string2().trim().min(8).max(160)
 });
+var getEventFlowSeatCategoryColorsInputSchema = eventBySlugInputSchema.extend({
+  flowVersionId: flowVersionIdSchema,
+  seatMapId: flowVersionIdSchema
+}).strict();
 var issueEventFlowSeatHoldTokenInputSchema = eventBySlugInputSchema.extend({
   clientId: uuid2(),
   flowVersionId: flowVersionIdSchema,
@@ -11961,6 +12030,9 @@ var publishSeatingDraftInputSchema = seatingDraftScopeSchema.extend({
   requestId: uuid2(),
   reason: string2().trim().min(1).max(500),
   sendSeatChangeEmail: boolean2().default(false),
+  seatChangeEmailRegistrationIds: array(string2().min(1)).max(100).refine((ids) => new Set(ids).size === ids.length, {
+    message: "Each recipient registration may appear only once."
+  }).optional(),
   seatHolds: array(object({
     registrationId: string2().min(1),
     holds: array(object({
@@ -12048,7 +12120,7 @@ var commands = {
     effects: [],
     operation: (api, input) => api.eventFlow.preview.query(input),
     payloadOnly: true,
-    summary: "Validate and preview an event flow, including date-limit messages (--payload JSON)."
+    summary: "Validate and preview an event flow, including date-limit messages; the definition is sent as a POST body (--payload JSON)."
   },
   "event flow draft get": {
     effects: [],
@@ -12403,6 +12475,7 @@ Object.assign(commands, {
   "audit list": payloadCommand((api, input) => api.audit.listEventActivity.query(input), "List event audit activity (--payload JSON).", ["sensitive-data"]),
   "event check-in qr": payloadCommand((api, input) => api.event.checkInByQr.mutate(input), "Check in using a QR token (--payload JSON).", ["state-change"]),
   "event flow image upload create": payloadCommand((api, input) => api.eventFlow.createImageAssetUpload.mutate(input), "Create an event-local registration-flow image upload URL (--payload JSON).", ["external-write", "state-change"], "eventId"),
+  "event flow confirmation attachment upload create": payloadCommand((api, input) => api.eventFlow.createConfirmationAttachmentUpload.mutate(input), "Create a confirmation-email attachment upload URL for a PDF, PNG or JPEG up to 10 MB (filename, contentType, byteSize); PUT the file there, then add the returned attachment to communications.participant.email.attachments (--payload JSON).", ["external-write", "state-change"], "eventId"),
   "event flow image finalize": payloadCommand((api, input) => api.eventFlow.finalizeImageAsset.mutate(input), "Finalize an event-local registration-flow image after the external upload (--payload JSON).", ["state-change"], "assetId"),
   "event logo upload create": payloadCommand((api, input) => api.event.createLogoUpload.mutate(input), "Create an event-logo upload URL (--payload JSON).", ["external-write", "state-change"], "eventId"),
   "event logo update": payloadCommand((api, input) => api.event.updateLogo.mutate(input), "Set or clear the event logo (--payload JSON).", ["state-change"], "eventId"),
@@ -12541,7 +12614,7 @@ Object.assign(commands, {
       "--expected-version": { key: "expectedVersion", type: "number" }
     },
     operation: (api, input) => api.event.getSeatingDraftPreview.query(getSeatingDraftPreviewInputSchema.parse(input)),
-    summary: "Check a saved draft against fresh live seats, grants and notification policy; --expected-version is required."
+    summary: "Check fresh seats, grants and notification policy. Returns noticeRecipients: one eligible/ineligible row per affected registration with grant-scoped names, never email addresses; --expected-version is required."
   },
   "event seating draft publish": {
     scope: "event",
@@ -12557,7 +12630,7 @@ Object.assign(commands, {
     },
     validateInput: (input) => validateSeatingDraftInput(publishSeatingDraftInputSchema, input),
     operation: (api, input) => api.event.publishSeatingDraft.mutate(publishSeatingDraftInputSchema.parse(input)),
-    summary: "Atomically publish all draft changes with expectedVersion, UUID requestId and reason. Requires --allow-email: event policy can automatically send notices even when sendSeatChangeEmail is false. Retries reuse requestId and intent. Realtime-enabled free targets need per-registration seatHolds (--payload JSON)."
+    summary: "Atomically publish with expectedVersion, UUID requestId and reason. Optional seatChangeEmailRegistrationIds in --payload chooses exact affected eligible registration recipients; [] sends none, including automatic policy. Omit to retain sendSeatChangeEmail/event-policy behavior. Requires --allow-email. Retry the same requestId and exact recipient set. Realtime free targets need per-registration seatHolds."
   }
 });
 var getCommandManifest = () => ({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@go-labs-sg/rsvp",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "description": "RSVP CLI for authorized event operations.",
   "type": "module",
   "main": "./dist/index.js",