@go-labs-sg/rsvp 1.3.0 → 1.5.0

package/README.md

@@ -108,7 +108,7 @@ rsvp event seating draft preview --organization-id org_123 --event-id evt_123 \
   --expected-version 1 --ack-sensitive-data
 rsvp event seating draft publish --organization-id org_123 --event-id evt_123 \
   --expected-version 1 --request-id 123e4567-e89b-42d3-a456-426614174000 \
-  --reason 'Seat the confirmed guest' --allow-state-change --target evt_123
+  --reason 'Seat the confirmed guest' --allow-state-change --allow-email --target evt_123
 ```
 
 Save and Publish require the latest `expectedVersion`. A successful Publish applies
@@ -116,12 +116,37 @@ all changed guests atomically and clears only that version of your draft. Resolv
 preview issues before publishing; conflicts leave all bookings and the draft intact.
 For an unknown outcome, retry the same UUID `requestId`, version, reason and email
 choice: the durable receipt returns the previous counts without sending again or
-clearing a newer draft. A different intent needs a new request ID. Email defaults
-off. To opt in, use `--allow-email` and a full JSON payload including organizationId,
-eventId, expectedVersion, requestId, reason and `sendSeatChangeEmail: true`. Do not
-combine `--payload` with command-local version/reason/request flags;
-the server additionally requires notice permission and enabled recipient policy.
-Preview counts recipient registrations, not guests. On realtime-enabled servers,
+clearing a newer draft. A different intent needs a new request ID. Preserve the
+exact `seatChangeEmailRegistrationIds` set on retry (order is immaterial); changing
+it, including changing between omitted and `[]`, rejects reuse of the request ID.
+
+Preview returns `noticeRecipients`: one row per affected registration, with a
+registration ID, a grant-scoped name, `eligible`, and an `ineligibleReason` when
+unavailable. No email addresses are exposed by this seating response. Review both
+eligible and ineligible rows before choosing who receives mail; several moving
+party members still produce only one recipient registration.
+
+Use `seatChangeEmailRegistrationIds` in a full `--payload` to choose the exact
+eligible affected registrations. Leave a registration out to publish its seat
+changes without email. `[]` explicitly sends no email, **including when the event
+has automatic seat-change notifications**. Selecting an unaffected registration,
+an ineligible recipient or duplicate IDs is rejected before publishing. The API
+rechecks permissions and eligibility under the publish transaction, not just in
+preview. Sending requires notice permission. An explicit empty array does not.
+
+```sh
+rsvp event seating draft publish --allow-state-change --allow-email --target evt_123 \
+  --payload '{"organizationId":"org_123","eventId":"evt_123","expectedVersion":1,"requestId":"123e4567-e89b-42d3-a456-426614174000","reason":"Seat the confirmed party","sendSeatChangeEmail":true,"seatChangeEmailRegistrationIds":["reg_123"]}'
+```
+
+Do not combine `--payload` with command-local version/reason/request flags. If the
+recipient field is omitted, existing behavior remains: `sendSeatChangeEmail: true`
+requests all affected registrations, otherwise the automatic event policy still
+applies. Every draft publish conservatively requires CLI `--allow-email` (or the
+interactive effects confirmation), even for explicit `[]`; it approves an effect
+but does not enable sending. Use the matching server/client revision for explicit
+recipient choices; older servers reject the new field rather than silently
+ignoring it. Preview counts recipient registrations, not guests. On realtime-enabled servers,
 free new targets require validated per-registration holds at Publish, supplied as
 `seatHolds: [{registrationId, holds: [{seatMapId, clientId, holdToken}]}]` in the
 payload. Acquire these through the existing organizer hold-token flow; Stage never
@@ -237,6 +262,14 @@ Replace illustrative IDs and revisions with current readback values. Deploy API
 policy enforcement before clients; an old API does not understand this field.
 No authentication, consent flags, command names, or credential protocol changes.
 
+### Registration-flow choice labels
+
+`SINGLE_SELECT`, `VISUAL_SINGLE_SELECT` and `MULTI_SELECT` choices accept a
+trimmed `label` of 1–500 characters, so a required single-choice `MULTI_SELECT`
+can show a full-sentence declaration beside its tick box. Choice `value` stays a
+stable machine value of 1–160 characters. Older APIs reject labels over 160
+characters; deploy the API before saving longer labels.
+
 ### Registration-flow date-limit messages
 
 `DATE` and `DATETIME` custom fields accept optional
@@ -537,6 +570,56 @@ it for the active registration/edit definition. Deploy the updated server before
 saving these settings because older validators discard unsupported fields.
 No database schema migration or attendee backfill is required.
 
+## Confirmation email layout, name, QR codes and attachments
+
+In the form builder's **Flow settings → Confirmation email layout**, or through
+`definition.communications.participant.email` with `event flow draft save`,
+customise the participant confirmation email for every outcome of the form:
+
+```json
+{
+  "communications": {
+    "participant": {
+      "email": {
+        "heading": "Hello {{name}}!",
+        "eventLine": null,
+        "confirmationButtonLabel": "View my Quest pass",
+        "supportFooter": "Questions? Email quest@example.com",
+        "showEventDetails": false,
+        "includeCheckInQrCodes": true,
+        "attachments": []
+      }
+    }
+  }
+}
+```
+
+- `{{name}}` works in template `subject`, `body`, `bodyRichText` and every
+  text field above. It uses the primary attendee's name, then the invitee's
+  name, and falls back to `there`.
+- `heading`, `eventLine`, `confirmationButtonLabel` and `supportFooter`: omit to
+  keep the built-in text, `null` to hide that part, or a string to replace it.
+  A custom or hidden `supportFooter` also replaces the resubmission footer.
+- `showEventDetails` (default `true`) controls the When/Where lines.
+- `includeCheckInQrCodes` (default `false`) embeds each attendee's check-in QR
+  image once the event's check-in QR codes are released; before release the
+  email keeps the release message.
+- `attachments`: up to 5 PDF, PNG or JPEG files, 10 MB each and 15 MB total.
+  Create an upload with `event flow confirmation attachment upload create`
+  (`organizationId`, `eventId`, `filename`, `contentType`, `byteSize`), `PUT`
+  the file unchanged to the returned `uploadUrl` with its `Content-Type`, then
+  add the returned `attachment` object to the list. Preview/publish reject keys
+  not uploaded for the same event, and publish verifies each uploaded object's
+  type and size.
+
+Merge these fields into the complete current definition and publish as for
+other form settings. Omitting `email` keeps existing emails unchanged. Deploy
+the updated server before saving these settings. No database migration is
+required.
+
+`event flow preview` sends the definition as a POST body so large formatted
+emails no longer exceed URL limits; it requires a server with this change.
+
 ## Administrator registration for an invitee
 
 Organizers can register someone on their behalf at any time, including after
@@ -836,6 +919,49 @@ rsvp people registration update \
   --payload '{"organizationId":"org_123","eventId":"evt_123","registrationId":"reg_123","expectedVersion":4,"reason":"Moved to finance table","seats":[{"registrationAttendeeId":"att_1","seatId":"seat_9"},{"registrationAttendeeId":"att_2","seatId":"seat_2"}],"seatChangeNotice":{"idempotencyKey":"4d68a320-013d-43c7-bfcc-d1126827d8c5"}}'
 ```
 
+### Archive or cancel registrations
+
+`people registration archive` and `people registration cancel` forward the same
+permissioned, audited `event.bulkManageRegistrations` operation as the web app.
+Both require server-side `rsvp.manage` permission and `--allow-state-change`;
+`--target` must match the payload's **event ID**, not a registration ID.
+
+Supply `organizationId`, `eventId`, an audit `reason` (3–500 characters after
+trimming), and 1–100 unique `registrations`, each with `id` and its current
+positive-integer `expectedVersion`. Get revisions from `people registration list`
+or `people registration edit get`. The command sets `action` to `ARCHIVE` or
+`CANCEL` when omitted; explicitly supplying any other action is rejected. Missing
+or invalid fields, duplicate IDs and oversized batches fail before dispatch.
+Stale revisions are checked by the server; refresh and review before retrying.
+
+```sh
+rsvp people registration archive \
+  --allow-state-change --target evt_123 \
+  --payload '{"organizationId":"org_123","eventId":"evt_123","reason":"Remove refunded test registrations","registrations":[{"id":"reg_123","expectedVersion":6},{"id":"reg_456","expectedVersion":2}]}'
+
+rsvp people registration cancel \
+  --allow-state-change --target evt_123 \
+  --payload '{"organizationId":"org_123","eventId":"evt_123","reason":"Participant withdrew","registrations":[{"id":"reg_789","expectedVersion":3}]}'
+```
+
+- **Archive** sets `archivedAt` and removes the registrations from default lists
+  and exports. It also cancels active registrations through the normal release
+  path; this is not merely hiding an attending registration.
+- **Cancel** cancels active registrations without changing `archivedAt`. Cancelled
+  registrations remain visible unless already archived.
+- Both release consumed event capacity, active seat bookings and holds, cancel
+  session selections and waiting/offered waitlist entries, and run the existing
+  event/session waitlist maintenance. Released places may generate waitlist
+  offers and **emails to other participants**; neither command sends a
+  cancellation email to the affected registrants. No `--allow-email` flag is
+  required by these commands' existing `state-change` contract.
+- Neither command automatically refunds a payment or deletes records. Payment,
+  refund and audit history are retained. Pending checkouts linked to a provider,
+  processing payments and payments requiring review must be reconciled first;
+  unlinked pending payment attempts are cancelled by the existing server logic.
+- Use **Unarchive** below for archive visibility/fresh-response recovery, or
+  **Restore** for attending recovery. Unarchive does not undo cancellation.
+
 ### Unarchive for a fresh response versus attending Restore
 
 `people registration unarchive` forwards the permissioned, audited
@@ -936,6 +1062,25 @@ previous effects.
 
 Optional `registrationEmail` and `registrationMasterList` presentation settings
 are also written through `REGISTRATION_RULES`; omitted settings are preserved.
+
+### Registration email sender
+
+Confirmation and seat-change emails send from the server default
+(`RSVP_EMAIL_FROM`) unless the event sets a sender in `registrationEmail`:
+
+- `senderName` changes only the display name.
+- `senderLocalPart` and `senderDomain` (set both or neither) change the address,
+  for example `"senderLocalPart": "nelbd", "senderDomain": "getout.sg"` sends
+  from `"NELBD Quest" <nelbd@getout.sg>`. `senderDomain` must be a Resend domain
+  that is verified with sending enabled when the update is saved; list them with
+  `rsvp event email sender-domains`. Invalid local parts, a missing half of the
+  pair or an unverified domain are rejected.
+
+`registrationEmail` replaces the whole presentation object, so read the current
+event first and resend every key you want to keep. Reply-to and support email
+are unchanged. If a saved domain is later unverified in Resend, those emails
+fail and are recorded as failed deliveries; they never fall back silently to a
+different sender. Fix the domain or remove the address fields to resume.
 See `examples/amgen-rsvp-copy/registration-presentation-patch.json` and its README
 for a reviewed activation fragment, output-key semantics, receipt/header behavior
 and the separate deployment/configuration/live-send approval gates. No event

package/dist/index.js

@@ -7195,7 +7195,8 @@ var logoutCliSession = async ({
 // src/api-client.ts
 import {
   createTRPCProxyClient,
-  httpBatchLink
+  httpBatchLink,
+  splitLink
 } from "@trpc/client";
 import SuperJSON from "superjson";
 
@@ -7213,18 +7214,28 @@ var normalizeApiBaseUrl = (value) => {
 var getApiBaseUrl = (override) => normalizeApiBaseUrl(override ?? process.env.RSVP_API_URL ?? DEFAULT_RSVP_API_BASE_URL);
 
 // src/api-client.ts
-var createRsvpClient = (apiBaseUrl = getApiBaseUrl(), accessToken) => createTRPCProxyClient({
-  links: [
-    httpBatchLink({
-      headers: () => accessToken ? {
-        authorization: `Bearer ${accessToken}`,
-        "x-trpc-source": "rsvp-cli"
-      } : { "x-trpc-source": "rsvp-cli" },
-      transformer: SuperJSON,
-      url: `${apiBaseUrl}/api/trpc`
-    })
-  ]
-});
+var POST_QUERY_PATHS = new Set([
+  "eventFlow.preview"
+]);
+var createRsvpClient = (apiBaseUrl = getApiBaseUrl(), accessToken) => {
+  const linkOptions = {
+    headers: () => accessToken ? {
+      authorization: `Bearer ${accessToken}`,
+      "x-trpc-source": "rsvp-cli"
+    } : { "x-trpc-source": "rsvp-cli" },
+    transformer: SuperJSON,
+    url: `${apiBaseUrl}/api/trpc`
+  };
+  return createTRPCProxyClient({
+    links: [
+      splitLink({
+        condition: (op) => POST_QUERY_PATHS.has(op.path),
+        true: httpBatchLink({ ...linkOptions, methodOverride: "POST" }),
+        false: httpBatchLink(linkOptions)
+      })
+    ]
+  });
+};
 
 // ../validators/src/assign-guests.ts
 var assignGuestFiltersInputSchema = object({
@@ -7715,11 +7726,13 @@ var flowBlockBaseShape = {
   title: string2().trim().min(1).max(240).optional(),
   visibleWhen: eventFlowConditionGroupSchema.optional()
 };
+var maxEventFlowChoiceLabelLength = 500;
+var maxEventFlowChoiceValueLength = 160;
 var customFieldChoiceSchema = object({
   assetId: eventFlowEntityIdSchema.optional(),
   description: string2().trim().max(500).optional(),
-  label: string2().trim().min(1).max(160),
-  value: string2().trim().min(1).max(160)
+  label: string2().trim().min(1).max(maxEventFlowChoiceLabelLength),
+  value: string2().trim().min(1).max(maxEventFlowChoiceValueLength)
 });
 var maxEventFlowDateBoundMessageLength = 500;
 var eventFlowDateBoundMessageSchema = string2().trim().min(1).max(maxEventFlowDateBoundMessageLength);
@@ -8030,7 +8043,53 @@ var confirmationBodyRichTextSchema = unknown().superRefine((value, ctx) => {
       message: "Confirmation body must contain 1\u201310,000 characters"
     });
 });
+var eventFlowConfirmationAttachmentContentTypes = [
+  "application/pdf",
+  "image/jpeg",
+  "image/png"
+];
+var maxEventFlowConfirmationAttachmentCount = 5;
+var maxEventFlowConfirmationAttachmentSize = 10 * 1024 * 1024;
+var maxEventFlowConfirmationAttachmentTotalSize = 15 * 1024 * 1024;
+var eventFlowConfirmationAttachmentFilenameSchema = string2().trim().min(1).max(120).regex(/^[^\\/:*?"<>|\r\n\t]+$/, "Attachment file names cannot contain path or control characters");
+var eventFlowConfirmationAttachmentSchema = strictObject({
+  byteSize: number2().int().positive().max(maxEventFlowConfirmationAttachmentSize),
+  contentType: _enum(eventFlowConfirmationAttachmentContentTypes),
+  filename: eventFlowConfirmationAttachmentFilenameSchema,
+  key: string2().trim().min(1).max(300)
+});
+var editableEmailCopySchema = (maxLength) => string2().trim().min(1).max(maxLength).nullable().optional();
+var eventFlowParticipantConfirmationEmailSchema = strictObject({
+  attachments: array(eventFlowConfirmationAttachmentSchema).max(maxEventFlowConfirmationAttachmentCount).default([]),
+  confirmationButtonLabel: editableEmailCopySchema(60),
+  eventLine: editableEmailCopySchema(500),
+  heading: editableEmailCopySchema(120),
+  includeCheckInQrCodes: boolean2().default(false),
+  showEventDetails: boolean2().default(true),
+  supportFooter: editableEmailCopySchema(1000)
+}).superRefine((email, ctx) => {
+  const totalSize = email.attachments.reduce((total, attachment) => total + attachment.byteSize, 0);
+  if (totalSize > maxEventFlowConfirmationAttachmentTotalSize) {
+    ctx.addIssue({
+      code: "custom",
+      message: "Confirmation attachments must total 15 MB or less",
+      path: ["attachments"]
+    });
+  }
+  const keys = new Set;
+  for (const [index, attachment] of email.attachments.entries()) {
+    if (keys.has(attachment.key)) {
+      ctx.addIssue({
+        code: "custom",
+        message: "Each confirmation attachment can be added only once",
+        path: ["attachments", index, "key"]
+      });
+    }
+    keys.add(attachment.key);
+  }
+});
 var participantConfirmationSchema = object({
+  email: eventFlowParticipantConfirmationEmailSchema.optional(),
   enabled: boolean2(),
   includeResponseDetails: boolean2().default(false),
   replyTo: email2().optional(),
@@ -10052,10 +10111,17 @@ var PUBLIC_EVENT_VALIDATED_FONT_FAMILIES = [
   "Zilla Slab Highlight"
 ];
 
+// ../validators/src/email-sender.ts
+var emailSenderLocalPartSchema = string2().trim().max(64, "Sender address must be 64 characters or fewer").regex(/^(?!.*\.\.)[a-z\d](?:[a-z\d._+-]{0,62}[a-z\d])?$/i, "Enter a valid sender address before @");
+var emailSenderDomainSchema = string2().trim().toLowerCase().regex(/^(?:[a-z\d](?:[a-z\d-]{0,61}[a-z\d])?\.)+[a-z]{2,63}$/, "Select a valid sending domain");
+var EMAIL_SENDER_PAIR_MESSAGE = "Choose a sender address and domain together";
+
 // ../validators/src/registration-email-presentation.ts
 var registrationEmailPresentationSchema = strictObject({
   layout: _enum(["DEFAULT", "GROUPED"]).default("DEFAULT"),
   senderName: string2().trim().min(1).max(120).regex(/^[^<>\r\n]+$/).optional(),
+  senderLocalPart: emailSenderLocalPartSchema.optional(),
+  senderDomain: emailSenderDomainSchema.optional(),
   introText: string2().trim().min(1).max(1e4).optional(),
   menuDetailOutputKeys: array(string2().trim().min(1).max(120)).max(100).default([]),
   submittedConsentOutputKeys: array(string2().trim().min(1).max(120)).max(100).default([]),
@@ -10063,6 +10129,13 @@ var registrationEmailPresentationSchema = strictObject({
   useResubmissionFooter: boolean2().default(false),
   supportEmail: email2().optional(),
   showLuckyDrawId: boolean2().optional()
+}).superRefine((value, ctx) => {
+  if (Boolean(value.senderLocalPart) !== Boolean(value.senderDomain))
+    ctx.addIssue({
+      code: "custom",
+      message: EMAIL_SENDER_PAIR_MESSAGE,
+      path: [value.senderDomain ? "senderLocalPart" : "senderDomain"]
+    });
 });
 
 // ../validators/src/registration-master-list-presentation.ts
@@ -10390,7 +10463,10 @@ var eventTablePaginationSchema = object({
 var listEventInviteesInputSchema = organizationEventByIdInputSchema.extend({
   ...eventTablePaginationSchema.shape,
   audienceTierId: string2().min(1).nullable().optional(),
-  status: _enum(InviteeStatus).optional()
+  status: _enum(InviteeStatus).optional(),
+  statuses: array(_enum(InviteeStatus)).min(1).max(7).optional(),
+  cursor: string2().min(1).max(64).optional(),
+  direction: _enum(["NEXT", "PREVIOUS"]).default("NEXT")
 });
 var listEventRegistrationsInputSchema = organizationEventByIdInputSchema.extend({
   archive: _enum(["ACTIVE", "ARCHIVED", "ALL"]).default("ACTIVE"),
@@ -10674,8 +10750,8 @@ var emailCampaignDraftFieldsSchema = object({
   audienceMode: _enum(["SEGMENT", "SELECTED"]).optional(),
   selectedInviteeIds: array(string2().min(1)).max(1e4).optional(),
   fromName: string2().trim().max(120, "From name must be 120 characters or fewer").regex(/^[^\r\n<>]*$/, "From name contains unsupported characters").optional(),
-  fromSubDomain: string2().trim().max(64, "Sender address must be 64 characters or fewer").regex(/^(?!.*\.\.)[a-z\d](?:[a-z\d._+-]{0,62}[a-z\d])?$/i, "Enter a valid sender address before @").optional(),
-  fromDomain: string2().trim().toLowerCase().regex(/^(?:[a-z\d](?:[a-z\d-]{0,61}[a-z\d])?\.)+[a-z]{2,63}$/, "Select a valid sending domain").optional(),
+  fromSubDomain: emailSenderLocalPartSchema.optional(),
+  fromDomain: emailSenderDomainSchema.optional(),
   html: string2().trim().min(1, "Email body is required").max(1e5, "Email body is too long"),
   name: string2().trim().min(1, "Campaign name is required").max(160, "Campaign name must be 160 characters or fewer"),
   previewText: string2().trim().max(240, "Preview text must be 240 characters or fewer").optional(),
@@ -10693,7 +10769,7 @@ var validateSelectedCampaignAudience = (input, ctx) => {
     ctx.addIssue({
       code: "custom",
       path: [input.fromDomain ? "fromSubDomain" : "fromDomain"],
-      message: "Choose a sender address and domain together"
+      message: EMAIL_SENDER_PAIR_MESSAGE
     });
 };
 var createEmailCampaignInputSchema = organizationEventByIdInputSchema.extend(emailCampaignDraftFieldsSchema.shape).superRefine(validateSelectedCampaignAudience);
@@ -10865,6 +10941,11 @@ var createEventFlowImageAssetUploadInputSchema = organizationEventByIdInputSchem
   byteSize: number2().int().positive().max(maxEventFlowImageAssetSize),
   mimeType: eventFlowImageAssetMimeTypeSchema
 });
+var createEventFlowConfirmationAttachmentUploadInputSchema = organizationEventByIdInputSchema.extend({
+  byteSize: number2().int().positive().max(maxEventFlowConfirmationAttachmentSize),
+  contentType: _enum(eventFlowConfirmationAttachmentContentTypes),
+  filename: eventFlowConfirmationAttachmentFilenameSchema
+});
 var finalizeEventFlowImageAssetInputSchema = organizationEventByIdInputSchema.extend({
   assetId: eventFlowImageAssetIdSchema
 });
@@ -10968,6 +11049,10 @@ var createEventFlowConsentVersionInputSchema = organizationEventByIdInputSchema.
 var setEventFlowGroupPasscodeInputSchema = organizationEventFlowInputSchema.extend({
   passcode: string2().trim().min(8).max(160)
 });
+var getEventFlowSeatCategoryColorsInputSchema = eventBySlugInputSchema.extend({
+  flowVersionId: flowVersionIdSchema,
+  seatMapId: flowVersionIdSchema
+}).strict();
 var issueEventFlowSeatHoldTokenInputSchema = eventBySlugInputSchema.extend({
   clientId: uuid2(),
   flowVersionId: flowVersionIdSchema,
@@ -11961,6 +12046,9 @@ var publishSeatingDraftInputSchema = seatingDraftScopeSchema.extend({
   requestId: uuid2(),
   reason: string2().trim().min(1).max(500),
   sendSeatChangeEmail: boolean2().default(false),
+  seatChangeEmailRegistrationIds: array(string2().min(1)).max(100).refine((ids) => new Set(ids).size === ids.length, {
+    message: "Each recipient registration may appear only once."
+  }).optional(),
   seatHolds: array(object({
     registrationId: string2().min(1),
     holds: array(object({
@@ -12048,7 +12136,7 @@ var commands = {
     effects: [],
     operation: (api, input) => api.eventFlow.preview.query(input),
     payloadOnly: true,
-    summary: "Validate and preview an event flow, including date-limit messages (--payload JSON)."
+    summary: "Validate and preview an event flow, including date-limit messages; the definition is sent as a POST body (--payload JSON)."
   },
   "event flow draft get": {
     effects: [],
@@ -12321,18 +12409,21 @@ var commands = {
     summary: "Update a user's global role (--payload JSON)."
   }
 };
-var unarchiveRegistrationsInputSchema = bulkManageRegistrationsInputSchema.safeExtend({
-  action: bulkManageRegistrationsInputSchema.shape.action.extract([
-    "RESTORE"
-  ])
-});
-var parseUnarchiveRegistrationsInput = (input) => {
+var parseRegistrationManagementInput = (input, expectedAction) => {
+  const inputSchema = bulkManageRegistrationsInputSchema.safeExtend({
+    action: bulkManageRegistrationsInputSchema.shape.action.extract([
+      expectedAction
+    ])
+  });
   const action = input ? Reflect.get(input, "action") : undefined;
-  const parsed = unarchiveRegistrationsInputSchema.safeParse(input ? { ...input, action: action === undefined ? "RESTORE" : action } : input);
+  const parsed = inputSchema.safeParse(input ? { ...input, action: action === undefined ? expectedAction : action } : input);
   if (!parsed.success)
     throw new CliUsageError(parsed.error.issues.map((issue) => `${issue.path.join(".")}: ${issue.message}`).join("; "));
   return parsed.data;
 };
+var parseArchiveRegistrationsInput = (input) => parseRegistrationManagementInput(input, "ARCHIVE");
+var parseCancelRegistrationsInput = (input) => parseRegistrationManagementInput(input, "CANCEL");
+var parseUnarchiveRegistrationsInput = (input) => parseRegistrationManagementInput(input, "RESTORE");
 var payloadCommand = (operation, summary, effects = [], targetKey) => ({
   effects,
   operation,
@@ -12403,6 +12494,7 @@ Object.assign(commands, {
   "audit list": payloadCommand((api, input) => api.audit.listEventActivity.query(input), "List event audit activity (--payload JSON).", ["sensitive-data"]),
   "event check-in qr": payloadCommand((api, input) => api.event.checkInByQr.mutate(input), "Check in using a QR token (--payload JSON).", ["state-change"]),
   "event flow image upload create": payloadCommand((api, input) => api.eventFlow.createImageAssetUpload.mutate(input), "Create an event-local registration-flow image upload URL (--payload JSON).", ["external-write", "state-change"], "eventId"),
+  "event flow confirmation attachment upload create": payloadCommand((api, input) => api.eventFlow.createConfirmationAttachmentUpload.mutate(input), "Create a confirmation-email attachment upload URL for a PDF, PNG or JPEG up to 10 MB (filename, contentType, byteSize); PUT the file there, then add the returned attachment to communications.participant.email.attachments (--payload JSON).", ["external-write", "state-change"], "eventId"),
   "event flow image finalize": payloadCommand((api, input) => api.eventFlow.finalizeImageAsset.mutate(input), "Finalize an event-local registration-flow image after the external upload (--payload JSON).", ["state-change"], "assetId"),
   "event logo upload create": payloadCommand((api, input) => api.event.createLogoUpload.mutate(input), "Create an event-logo upload URL (--payload JSON).", ["external-write", "state-change"], "eventId"),
   "event logo update": payloadCommand((api, input) => api.event.updateLogo.mutate(input), "Set or clear the event logo (--payload JSON).", ["state-change"], "eventId"),
@@ -12418,6 +12510,7 @@ Object.assign(commands, {
   "event seating table delete": payloadCommand((api, input) => api.event.deleteSeatTable.mutate(input), "Delete a seating table (--payload JSON).", ["delete", "state-change"]),
   "event seating layout update": payloadCommand((api, input) => api.event.updateSeatTableLayout.mutate(input), "Update the seating layout and floor plan (--payload JSON).", ["state-change"], "eventId"),
   "event seating table update": payloadCommand((api, input) => api.event.updateSeatTable.mutate(input), "Update a seating table (--payload JSON).", ["delete", "state-change"], "tableId"),
+  "event email sender-domains": eventScopeQueryCommand((api, input) => api.event.getEmailSenderDomains.query(input), "List verified Resend sending domains for campaign and registration email sender addresses."),
   "event audience-tier list": eventScopeQueryCommand((api, input) => api.event.listAudienceTiers.query(input), "List event audience tiers and assignment counts."),
   "event audience-tier create": payloadCommand((api, input) => api.event.createAudienceTier.mutate(input), "Create an event audience tier (--payload JSON).", ["state-change"], "eventId"),
   "event audience-tier update": payloadCommand((api, input) => api.event.updateAudienceTier.mutate(input), "Update an event audience tier (--payload JSON).", ["state-change"], "tierId"),
@@ -12450,6 +12543,14 @@ Object.assign(commands, {
       { effect: "email", whenPayloadField: "seatChangeNotice" }
     ]
   },
+  "people registration archive": {
+    ...payloadCommand((api, input) => api.event.bulkManageRegistrations.mutate(parseArchiveRegistrationsInput(input)), "Archive up to 100 unique registrations with expectedVersion and reason (3\u2013500 characters); action defaults to ARCHIVE and other actions are rejected. Requires rsvp.manage; target the eventId. Cancels active registrations, releases capacity, seats and holds, cancels session selections and waitlist entries/offers, and hides archived rows from default lists/exports. Unresolved checkouts must be reconciled first; no automatic refund. Not a delete: payment, refund and audit history remain. No cancellation email; released places may trigger waitlist-offer emails (--payload JSON).", ["state-change"], "eventId"),
+    validateInput: parseArchiveRegistrationsInput
+  },
+  "people registration cancel": {
+    ...payloadCommand((api, input) => api.event.bulkManageRegistrations.mutate(parseCancelRegistrationsInput(input)), "Cancel up to 100 unique registrations with expectedVersion and reason (3\u2013500 characters); action defaults to CANCEL and other actions are rejected. Requires rsvp.manage; target the eventId. Cancels active registrations, releases capacity, seats and holds, and cancels session selections and waitlist entries/offers without changing archive visibility. Unresolved checkouts must be reconciled first; no automatic refund. Not a delete: payment, refund and audit history remain. No cancellation email; released places may trigger waitlist-offer emails (--payload JSON).", ["state-change"], "eventId"),
+    validateInput: parseCancelRegistrationsInput
+  },
   "people registration unarchive": {
     ...payloadCommand((api, input) => api.event.bulkManageRegistrations.mutate(parseUnarchiveRegistrationsInput(input)), "Unarchive up to 100 unique registrations with expectedVersion and reason; action defaults to RESTORE and other actions are rejected. Target the eventId. Eligible cancelled nonattending invitees can submit afresh; historical registration, payment and QR are not reinstated. Fresh submissions use normal checks and new payment/credentials; attending recovery uses people registration restore (--payload JSON).", ["state-change"], "eventId"),
     validateInput: parseUnarchiveRegistrationsInput
@@ -12463,7 +12564,7 @@ Object.assign(commands, {
   "event mine list": payloadCommand((api, input) => api.event.listMyEvents.query(input), "List the caller's events (--payload JSON)."),
   "event reminder list": payloadCommand((api, input) => api.event.listReminderSegments.query(input), "List reminder segments (--payload JSON).", ["sensitive-data"]),
   "event rsvp submit": payloadCommand((api, input) => api.event.submitRsvp.mutate(input), "Submit the caller's registration (--payload JSON).", ["sensitive-data", "state-change"]),
-  "event setup step update": payloadCommand((api, input) => api.event.updateSetupStep.mutate(input), "Update one revision-checked event setup step (--payload JSON). REGISTRATION_RULES accepts registrationEmail presentation, registrationMasterList output-key ordering/omissions and seatChangeNotification automatic policy; omitted settings are preserved.", ["state-change"]),
+  "event setup step update": payloadCommand((api, input) => api.event.updateSetupStep.mutate(input), "Update one revision-checked event setup step (--payload JSON). REGISTRATION_RULES accepts registrationEmail presentation (including senderName and a senderLocalPart+senderDomain address on a verified Resend sending domain), registrationMasterList output-key ordering/omissions and seatChangeNotification automatic policy; omitted settings are preserved.", ["state-change"]),
   "event page update": payloadCommand((api, input) => api.event.updateSetupStep.mutate({
     ...input,
     section: "DETAILS_PAGE"
@@ -12541,7 +12642,7 @@ Object.assign(commands, {
       "--expected-version": { key: "expectedVersion", type: "number" }
     },
     operation: (api, input) => api.event.getSeatingDraftPreview.query(getSeatingDraftPreviewInputSchema.parse(input)),
-    summary: "Check a saved draft against fresh live seats, grants and notification policy; --expected-version is required."
+    summary: "Check fresh seats, grants and notification policy. Returns noticeRecipients: one eligible/ineligible row per affected registration with grant-scoped names, never email addresses; --expected-version is required."
   },
   "event seating draft publish": {
     scope: "event",
@@ -12557,7 +12658,7 @@ Object.assign(commands, {
     },
     validateInput: (input) => validateSeatingDraftInput(publishSeatingDraftInputSchema, input),
     operation: (api, input) => api.event.publishSeatingDraft.mutate(publishSeatingDraftInputSchema.parse(input)),
-    summary: "Atomically publish all draft changes with expectedVersion, UUID requestId and reason. Requires --allow-email: event policy can automatically send notices even when sendSeatChangeEmail is false. Retries reuse requestId and intent. Realtime-enabled free targets need per-registration seatHolds (--payload JSON)."
+    summary: "Atomically publish with expectedVersion, UUID requestId and reason. Optional seatChangeEmailRegistrationIds in --payload chooses exact affected eligible registration recipients; [] sends none, including automatic policy. Omit to retain sendSeatChangeEmail/event-policy behavior. Requires --allow-email. Retry the same requestId and exact recipient set. Realtime free targets need per-registration seatHolds."
   }
 });
 var getCommandManifest = () => ({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@go-labs-sg/rsvp",
-  "version": "1.3.0",
+  "version": "1.5.0",
   "description": "RSVP CLI for authorized event operations.",
   "type": "module",
   "main": "./dist/index.js",