@seatlayer/js 0.36.0 → 0.36.2

package/dist/index.cjs

@@ -59,6 +59,8 @@ __export(index_exports, {
   createBuyerAccessContext: () => createBuyerAccessContext,
   createControllerSink: () => createControllerSink,
   dropReviewRows: () => dropReviewRows,
+  isPublicChannelId: () => isPublicChannelId,
+  markerLetter: () => markerLetter,
   markerOf: () => markerOf,
   mutationCount: () => mutationCount,
   needsMoveConfirmation: () => needsMoveConfirmation,
@@ -5989,8 +5991,11 @@ function attachPickerFrame(iframe, opts = {}) {
 var import_core3 = require("@seatlayer/core");
 
 // src/channelPlan.ts
-var PUBLIC_CHANNEL_ID = "";
+var PUBLIC_CHANNEL_ID = "public";
 var PUBLIC_CHANNEL_NAME = "Public sale";
+function isPublicChannelId(id) {
+  return id == null || id === "" || id === PUBLIC_CHANNEL_ID;
+}
 var CHANNEL_COLORS = [
   "#a78bfa",
   "#2dd4bf",
@@ -6005,27 +6010,35 @@ var CHANNEL_COLORS = [
 ];
 var PUBLIC_CHANNEL_COLOR = "#f4b740";
 var LETTERS = "ABCDEFGHJKLMNPQRSTUVWXYZ";
+function markerLetter(raw, fallback) {
+  const text = (raw ?? "").trim();
+  const letter = /\p{L}/u.exec(text)?.[0] ?? text[0] ?? "";
+  return (letter || fallback).toUpperCase().slice(0, 1);
+}
 function suggestMarker(name, taken) {
-  const used = new Set([...taken].map((m) => m.trim().toUpperCase()).filter(Boolean));
-  const first = (name.trim()[0] ?? "").toUpperCase();
+  const used = new Set([...taken].map((m) => markerLetter(m, "")).filter(Boolean));
+  const first = markerLetter(name, "");
   const letter = LETTERS.includes(first) && !used.has(first) ? first : [...LETTERS].find((candidate) => !used.has(candidate)) ?? (first || "X");
   return { letter, color: CHANNEL_COLORS[used.size % CHANNEL_COLORS.length] };
 }
 function markerOf(channel, index = 0) {
-  if (channel.id === PUBLIC_CHANNEL_ID) {
-    return { letter: (channel.marker || "P").slice(0, 2).toUpperCase(), color: channel.color || PUBLIC_CHANNEL_COLOR };
+  if (isPublicChannelId(channel.id)) {
+    return {
+      letter: markerLetter(channel.marker, "P"),
+      color: channel.color || PUBLIC_CHANNEL_COLOR
+    };
   }
-  const letter = (channel.marker || channel.name.trim()[0] || "?").slice(0, 2).toUpperCase();
+  const letter = markerLetter(channel.marker || channel.name, "?");
   return { letter, color: channel.color || CHANNEL_COLORS[index % CHANNEL_COLORS.length] };
 }
 function selectionSources(labels, allocation, list) {
   const counts = /* @__PURE__ */ new Map();
   for (const label of labels) {
-    const channelId = allocation.get(label) ?? PUBLIC_CHANNEL_ID;
+    const channelId = normalizeChannelId(allocation.get(label));
     counts.set(channelId, (counts.get(channelId) ?? 0) + 1);
   }
   const order = [
-    { id: PUBLIC_CHANNEL_ID, name: list?.publicSale.name ?? PUBLIC_CHANNEL_NAME },
+    { id: PUBLIC_CHANNEL_ID, name: list?.publicSale?.name ?? PUBLIC_CHANNEL_NAME },
     ...(list?.channels ?? []).map((channel) => ({ id: channel.id, name: channel.name }))
   ];
   const rows = [];
@@ -6035,10 +6048,17 @@ function selectionSources(labels, allocation, list) {
     counts.delete(entry.id);
   }
   for (const [channelId, count] of counts) {
-    rows.push({ channelId, name: channelId ? "Another channel" : PUBLIC_CHANNEL_NAME, count });
+    rows.push({
+      channelId,
+      name: isPublicChannelId(channelId) ? PUBLIC_CHANNEL_NAME : "Another channel",
+      count
+    });
   }
   return rows;
 }
+function normalizeChannelId(id) {
+  return isPublicChannelId(id) ? PUBLIC_CHANNEL_ID : id;
+}
 var SKIP_SAMPLE = 12;
 function skipBucket(labels) {
   return {
@@ -6048,7 +6068,8 @@ function skipBucket(labels) {
   };
 }
 function planAssignment(input) {
-  const { labels, targetChannelId, allocation, statusOf, nameOf } = input;
+  const { labels, allocation, statusOf, nameOf } = input;
+  const targetChannelId = normalizeChannelId(input.targetChannelId);
   const seen = /* @__PURE__ */ new Set();
   let fromPublic = 0;
   let alreadyIn = 0;
@@ -6064,7 +6085,7 @@ function planAssignment(input) {
       missing.push(label);
       continue;
     }
-    const current = allocation.get(label) ?? PUBLIC_CHANNEL_ID;
+    const current = normalizeChannelId(allocation.get(label));
     if (current === targetChannelId) {
       alreadyIn += 1;
       continue;
@@ -6247,12 +6268,38 @@ var ManageApi = class {
   pub(path) {
     return fetch(`${this.base}${path}`, { credentials: "omit" }).then((r) => parse(r));
   }
-  // ---- realtime read (public, no token) ----
+  // ---- realtime read ----
+  /** The chart geometry. Genuinely public — it is the same map buyers see. */
   chart(key) {
     return this.pub(`/pub/events/${encodeURIComponent(key)}/chart`);
   }
+  /**
+   * The ORGANIZER's seat map: physical state, token-authed.
+   *
+   * This used to read `/pub/events/:key/objects` with no credential, which
+   * answers with the BUYER projection — every unit the caller may not buy
+   * collapses to a neutral `blocked`. An anonymous caller may buy only Public
+   * sale inventory, so the cockpit rendered every channel-allocated seat as
+   * blocked and then computed its KPIs, sell-through and (worse) its
+   * block/unblock target sets from that. `/v1/events/:key/objects` returns the
+   * unprojected snapshot the control-room read model already trusts.
+   */
   objects(key) {
-    return this.pub(`/pub/events/${encodeURIComponent(key)}/objects`);
+    return this.auth(`/v1/events/${encodeURIComponent(key)}/objects`);
+  }
+  /**
+   * Exchange the manage token for a one-use organizer socket ticket.
+   *
+   * A browser `WebSocket` cannot send an Authorization header, so the socket's
+   * scope is established here, over ordinary HTTPS. Without it the DO treats a
+   * manager socket as an anonymous public buyer and projects its deltas — so a
+   * hold inside a private allocation is structurally suppressed and the map
+   * drifts away from the truth `objects()` just established.
+   *
+   * Tickets are single-redemption and expire in ~30s: mint one per connect.
+   */
+  subscribeTicket(key) {
+    return this.auth(`/v1/events/${encodeURIComponent(key)}/subscribe-tickets`, { method: "POST" });
   }
   socketUrl(key) {
     return `${this.base.replace(/^http/, "ws")}/pub/events/${encodeURIComponent(key)}/subscribe?surface=manager`;
@@ -6749,7 +6796,7 @@ var ChannelsMode = class {
         limit: 1e3
       });
       for (const row of res.allocations) {
-        if (row.channelId && row.channelId !== PUBLIC_CHANNEL_ID) next.set(row.label, row.channelId);
+        if (!isPublicChannelId(row.channelId)) next.set(row.label, row.channelId);
       }
       this.assignmentVersion = res.assignmentVersion;
       if (!res.nextAfterLabel) break;
@@ -6759,8 +6806,13 @@ var ChannelsMode = class {
   }
   // ---- lookups --------------------------------------------------------------
   channelById(id) {
-    if (id === PUBLIC_CHANNEL_ID) {
-      return { id, name: this.list?.publicSale.name ?? PUBLIC_CHANNEL_NAME, marker: "P", color: null };
+    if (isPublicChannelId(id)) {
+      return {
+        id: PUBLIC_CHANNEL_ID,
+        name: this.list?.publicSale?.name ?? PUBLIC_CHANNEL_NAME,
+        marker: "P",
+        color: null
+      };
     }
     const found = this.list?.channels.find((channel) => channel.id === id);
     return found ? { id, name: found.name, marker: found.marker, color: found.color } : null;
@@ -6981,7 +7033,10 @@ var ChannelsMode = class {
     this.setBanner(true, names);
     try {
       this.previewProjection = await this.host.api.channelPreview(this.host.eventKey, audience, {
-        includePublic: this.previewIncludePublic
+        // Naming Public sale as the audience IS asking for public inventory; the
+        // route filters the 'public' sentinel out of `channelIds`, so without
+        // this the request would resolve to an empty scope and 422.
+        includePublic: this.previewIncludePublic || audience.some(isPublicChannelId)
       });
       this.previewSupported = true;
     } catch (err) {
@@ -7182,7 +7237,7 @@ var ChannelsMode = class {
     const counts = this.previewProjection?.counts;
     const summary = counts?.eligible != null && this.previewProjection?.available !== false ? `<div class="slm-ch-alert warn"><span>\u2139</span><span>${counts.eligible.toLocaleString()} seats are buyable
           through this access.${this.previewProjection?.includePublic === false ? " Public sale seats are <b>not</b> included in this grant." : ""}</span></div>` : "";
-    const includePublic = current === PUBLIC_CHANNEL_ID ? "" : `
+    const includePublic = isPublicChannelId(current) ? "" : `
       <label class="slm-note" style="display:flex;gap:8px;align-items:center;margin:10px 0">
         <input type="checkbox" data-ch-includepublic ${this.previewIncludePublic ? "checked" : ""} />
         Also include Public sale seats in this grant
@@ -7394,7 +7449,7 @@ var ChannelsMode = class {
     this.lastFocus = null;
   }
   renderCreateDialog(state) {
-    const taken = (this.list?.channels ?? []).map((channel) => channel.marker ?? channel.name[0] ?? "");
+    const taken = (this.list?.channels ?? []).map((channel) => markerLetter(channel.marker || channel.name, ""));
     const suggestion = suggestMarker("", taken);
     this.renderScrim(`
       <h3 id="slm-ch-dlg-title">Create channel</h3>
@@ -7452,7 +7507,8 @@ var ChannelsMode = class {
     try {
       const res = await this.host.api.createChannel(this.host.eventKey, {
         name: trimmed,
-        marker: letter || null,
+        // The column is free text; we only ever store what the chip can draw.
+        marker: markerLetter(letter, "") || null,
         color: color || null,
         externalRef: externalRef.trim() || null
       });
@@ -7521,7 +7577,9 @@ var ChannelsMode = class {
     this.renderDialog();
     try {
       const result = await this.host.api.applyChannelAssignment(this.host.eventKey, {
-        targetChannelId: this.targetChannelId || null,
+        // `null` is the wire spelling of "back to public sale" every worker
+        // accepts, including ones that predate the 'public' sentinel.
+        targetChannelId: isPublicChannelId(this.targetChannelId) ? null : this.targetChannelId,
         labels,
         assignmentVersion: this.assignmentVersion
       });
@@ -8199,7 +8257,7 @@ var SeatManager = class {
       if (controlRoom?.activity) this.seedFeed(controlRoom.activity);
       else this.api.log(this.key, { limit: 24 }).then((page) => this.seedFeed(page.entries)).catch(() => {
       });
-      this.connect();
+      void this.connect();
       this.startFeedClock();
       this.ready = true;
       await this.resolveChannelCapabilities();
@@ -8623,11 +8681,33 @@ var SeatManager = class {
     });
   }
   // ---- realtime -------------------------------------------------------------
-  connect() {
+  /**
+   * Open the cockpit's realtime socket AS THE ORGANIZER.
+   *
+   * The scope has to be established before the upgrade, because a browser
+   * `WebSocket` cannot send an Authorization header: the manage token is traded
+   * over HTTPS for a one-use ticket which rides in `Sec-WebSocket-Protocol`.
+   * Without it the server treats this socket as an anonymous public buyer and
+   * projects its deltas, so any change inside a private channel allocation is
+   * structurally suppressed and the map silently drifts.
+   *
+   * If the mint fails (an expired token, a worker that predates the route) we
+   * still connect unticketed rather than going dark — the public-sale stream is
+   * worth having, and every `resnapshot()` re-establishes physical truth from
+   * the authenticated HTTP read.
+   */
+  async connect() {
+    if (this.closed) return;
+    let protocols;
+    try {
+      protocols = (await this.api.subscribeTicket(this.key)).protocols;
+    } catch {
+      protocols = void 0;
+    }
     if (this.closed) return;
     let ws;
     try {
-      ws = new WebSocket(this.api.socketUrl(this.key));
+      ws = protocols ? new WebSocket(this.api.socketUrl(this.key), protocols) : new WebSocket(this.api.socketUrl(this.key));
     } catch {
       this.scheduleReconnect();
       return;
@@ -8657,7 +8737,7 @@ var SeatManager = class {
     const delay = Math.min(1e3 * 2 ** Math.min(this.attempt++, 5), 15e3);
     this.reconnectTimer = setTimeout(() => {
       this.reconnectTimer = null;
-      this.connect();
+      void this.connect();
     }, delay);
   }
   onMessage(e) {
@@ -8687,7 +8767,7 @@ var SeatManager = class {
     }
     if (m.type === "hidden") return;
     if (m.seats && typeof m.seats === "object") {
-      this.applySnapshot(m.seats);
+      this.applySnapshot(m.seats, typeof m.default === "string" ? m.default : void 0);
     } else if (Array.isArray(m.changes)) {
       const ids = [];
       const groups = /* @__PURE__ */ new Map();
@@ -8727,10 +8807,23 @@ var SeatManager = class {
     } catch {
     }
   }
-  applySnapshot(seats) {
+  /**
+   * Replace the whole seat model.
+   *
+   * `fallback` is the compact frame's modal status: those snapshots list only
+   * the seats that DIFFER from it, so every other known label takes it. Without
+   * this the omitted majority would silently fall back to `free` — fine when
+   * the mode really is free, wrong the moment it is not.
+   */
+  applySnapshot(seats, fallback) {
+    const known = (st) => ["free", "held", "booked", "blocked"].includes(st) ? st : "free";
     const next = /* @__PURE__ */ new Map();
+    if (fallback !== void 0) {
+      const base = known(fallback);
+      for (const label of this.labelToId.keys()) next.set(label, base);
+    }
     for (const [label, st] of Object.entries(seats)) {
-      next.set(label, ["free", "held", "booked", "blocked"].includes(st) ? st : "free");
+      next.set(label, known(st));
     }
     this.status = next;
     this.lastSyncedAt = Date.now();
@@ -9951,6 +10044,8 @@ var SeatManager = class {
   createBuyerAccessContext,
   createControllerSink,
   dropReviewRows,
+  isPublicChannelId,
+  markerLetter,
   markerOf,
   mutationCount,
   needsMoveConfirmation,