@peektravel/app-utilities 0.2.10 → 0.3.0

package/dist/index.cjs

@@ -25,11 +25,11 @@ var jwt__namespace = /*#__PURE__*/_interopNamespace(jwt);
 
 // src/peek-access-service.ts
 
-// src/internal/gateway-endpoints.ts
+// src/internal/peek/gateway-endpoints.ts
 var SALES_ENDPOINT = "sales";
 var V2_EXTENDABLE_SLUG = "peek_backoffice_api-v1";
 
-// src/internal/account-users/account-user-converter.ts
+// src/internal/peek/account-users/account-user-converter.ts
 var ACTIVE_STATUS = "ACTIVE";
 function fromAccountUserNode(node) {
   if (!node || node.status !== ACTIVE_STATUS) {
@@ -57,7 +57,7 @@ function fromAccountUserNodes(nodes) {
   return users;
 }
 
-// src/internal/account-users/account-user-queries.ts
+// src/internal/peek/account-users/account-user-queries.ts
 var USER_QUERY = `
   query Sales($first: Int, $after: String) {
     accountUsers(first: $first, after: $after) {
@@ -103,7 +103,7 @@ var USER_BY_FILTER_QUERY = `
   }
 `;
 
-// src/internal/account-users/account-user-service.ts
+// src/internal/peek/account-users/account-user-service.ts
 var DEFAULT_PAGE_SIZE = 50;
 var AccountUserService = class {
   constructor(client, options = {}) {
@@ -157,7 +157,7 @@ var AccountUserService = class {
   }
 };
 
-// src/internal/availability/availability-queries.ts
+// src/internal/peek/availability/availability-queries.ts
 var AVAILABILITY_TIMES_QUERY = `
   query Sales($activityId: ID!, $resourceOptionQuantities: [ResourceOptionQuantityData!]!, $date: Date!) {
     availabilityTimes(activityId: $activityId, resourceOptionQuantities: $resourceOptionQuantities, date: $date) {
@@ -182,7 +182,7 @@ var AVAILABILITY_TIMES_QUERY = `
   }
 `;
 
-// src/internal/availability/availability-service.ts
+// src/internal/peek/availability/availability-service.ts
 var AvailabilityService = class {
   constructor(client) {
     this.client = client;
@@ -203,12 +203,12 @@ var AvailabilityService = class {
   }
 };
 
-// src/models/product.ts
+// src/models/peek/product.ts
 var ACTIVITY_PRODUCT_TYPE = "ACTIVITY";
 var RENTAL_PRODUCT_TYPE = "RENTAL";
 var ADD_ON_PRODUCT_TYPE = "ADD-ON";
 
-// src/internal/bookings/booking-queries.ts
+// src/internal/peek/bookings/booking-queries.ts
 var SEARCH_BY_PURCHASE_DATE = "purchaseDate";
 var SEARCH_BY_ACTIVITY_DATE = "activityDate";
 function normalizeBookingId(bookingId) {
@@ -569,7 +569,7 @@ function buildBookingsVariables(params) {
   };
 }
 
-// src/internal/bookings/booking-converter.ts
+// src/internal/peek/bookings/booking-converter.ts
 var UNKNOWN = "unknown";
 var PEEK_PRO_DEEP_LINK_BASE = "http://pro-app.peek.com/-/order";
 var SOURCE_SOURCE_MAP = {
@@ -800,7 +800,7 @@ function mapPrice(priceData) {
   };
 }
 
-// src/internal/bookings/booking-guest-converter.ts
+// src/internal/peek/bookings/booking-guest-converter.ts
 function fromBookingGuestsResponse(response) {
   const firstEdge = (response?.sales?.edges ?? [])[0];
   if (!firstEdge) {
@@ -821,7 +821,7 @@ function fromBookingGuestsResponse(response) {
   return guests;
 }
 
-// src/internal/bookings/payments-on-file-converter.ts
+// src/internal/peek/bookings/payments-on-file-converter.ts
 function fromPaymentsOnFileResponse(response, bookingId) {
   const firstEdge = (response?.sales?.edges ?? [])[0];
   if (!firstEdge) {
@@ -863,7 +863,7 @@ function dateOnly(iso) {
   return iso.split("T")[0] ?? iso;
 }
 
-// src/internal/bookings/addon-queries.ts
+// src/internal/peek/bookings/addon-queries.ts
 var RESERVATION_STATUS_CONFIRMED = "CONFIRMED";
 var ADDON_OPTION_STATUS_CANCELED = "CANCELED";
 var SALES_ADDONS_PAGE_SIZE = 100;
@@ -907,7 +907,7 @@ function buildSalesAddonsVariables(searchString) {
   };
 }
 
-// src/internal/bookings/addon-converter.ts
+// src/internal/peek/bookings/addon-converter.ts
 var ERROR_INCONSISTENT_ADDON_ITEM_ID = "Add-on group contains options with mismatched item IDs";
 function parseSaleNode(node) {
   const bookingId = node.id || "";
@@ -969,7 +969,7 @@ function toBookingAddon(item) {
   return { addonId, addonName, total: item.total, addonOptions };
 }
 
-// src/internal/bookings/booking-service.ts
+// src/internal/peek/bookings/booking-service.ts
 var DEFAULT_PAGE_SIZE2 = 50;
 var DEFAULT_CANCEL_NOTE = "Canceled";
 var DEFAULT_CUSTOMER_MESSAGE = "Charge initiated via API";
@@ -1719,7 +1719,7 @@ function buildCancellation(items, addonOptionId, quantity) {
   return { bookingQuotes, canceledCount };
 }
 
-// src/internal/daily-notes/daily-note-converter.ts
+// src/internal/peek/daily-notes/daily-note-converter.ts
 function toDailyNote(response) {
   const union = response?.dailyNote;
   if (!union) {
@@ -1740,7 +1740,7 @@ function cleanNote(note) {
   return { note: note.note };
 }
 
-// src/internal/daily-notes/daily-note-queries.ts
+// src/internal/peek/daily-notes/daily-note-queries.ts
 var GLOBAL_NOTE_TYPE = "DASHBOARD";
 var DAILY_NOTE_TODAY_QUERY = `
   query dailyNote($type: GlobalNoteType!) {
@@ -1771,7 +1771,7 @@ function buildUpsertDailyNoteVariables(note) {
   return { input: { type: GLOBAL_NOTE_TYPE, note } };
 }
 
-// src/internal/daily-notes/daily-note-service.ts
+// src/internal/peek/daily-notes/daily-note-service.ts
 var DailyNoteService = class {
   constructor(client) {
     this.client = client;
@@ -1794,6 +1794,53 @@ var DailyNoteService = class {
     return fromUpsertResponse(body.data);
   }
 };
+var TokenManager = class {
+  constructor(options) {
+    this.options = options;
+  }
+  options;
+  cached;
+  /**
+   * Returns a valid bearer token, reusing the cached one until it is within
+   * `leewaySeconds` of expiring, at which point a fresh token is minted.
+   */
+  getToken() {
+    const now = Date.now();
+    if (this.cached && now < this.cached.expiresAtMs) {
+      return this.cached.token;
+    }
+    const { secret, issuer, installId, ttlSeconds, leewaySeconds } = this.options;
+    const token = jwt__namespace.sign({}, secret, {
+      expiresIn: ttlSeconds,
+      issuer,
+      subject: installId
+    });
+    this.cached = {
+      token,
+      expiresAtMs: now + (ttlSeconds - leewaySeconds) * 1e3
+    };
+    return token;
+  }
+};
+
+// src/access-service-config.ts
+var DEFAULT_TOKEN_TTL_SECONDS = 3600;
+var DEFAULT_TOKEN_REFRESH_LEEWAY_SECONDS = 60;
+var DEFAULT_RETRY_DELAYS_MS = [1e3, 2e3, 4e3];
+function requireNonEmpty(value, name, serviceName) {
+  if (!value) {
+    throw new Error(`${serviceName}: "${name}" is required`);
+  }
+}
+function createTokenManager(config) {
+  return new TokenManager({
+    secret: config.jwtSecret,
+    issuer: config.issuer,
+    installId: config.installId,
+    ttlSeconds: config.tokenTtlSeconds ?? DEFAULT_TOKEN_TTL_SECONDS,
+    leewaySeconds: config.tokenRefreshLeewaySeconds ?? DEFAULT_TOKEN_REFRESH_LEEWAY_SECONDS
+  });
+}
 
 // src/errors.ts
 var AdminAccountRequiredError = class extends Error {
@@ -1821,11 +1868,49 @@ var PeekGraphQLError = class extends Error {
     this.graphqlErrors = graphqlErrors;
   }
 };
+var CngApiError = class extends Error {
+  /** The HTTP status that triggered this error. */
+  statusCode;
+  /** The raw response body (parsed JSON when possible, otherwise text). */
+  body;
+  constructor(statusCode, body, message) {
+    super(message ?? `CNG request failed with HTTP ${statusCode}`);
+    this.name = "CngApiError";
+    this.statusCode = statusCode;
+    this.body = body;
+  }
+};
 
-// src/internal/graphql-client.ts
+// src/internal/http-transport.ts
 var RATE_LIMIT_STATUS = 429;
 var ADMIN_ACCOUNT_REQUIRED_STATUS = 418;
 var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+async function requestWithRetry(http, url, init, label, onResponse) {
+  const { retryDelaysMs, logger, fetchFn } = http;
+  for (let attempt = 0; attempt <= retryDelaysMs.length; attempt++) {
+    const response = await fetchFn(url, init);
+    if (response.status === ADMIN_ACCOUNT_REQUIRED_STATUS) {
+      logger.warn(`Admin account required for ${label} (HTTP 418)`, { url });
+      throw new AdminAccountRequiredError();
+    }
+    if (response.status === RATE_LIMIT_STATUS) {
+      const delay = retryDelaysMs[attempt];
+      if (delay !== void 0) {
+        logger.warn(
+          `Rate limited on ${label}, retrying in ${delay}ms (attempt ${attempt + 1}/${retryDelaysMs.length})`
+        );
+        await sleep(delay);
+        continue;
+      }
+      logger.error(`Rate limit exceeded for ${label}`, { url });
+      throw new RateLimitError();
+    }
+    return onResponse(response);
+  }
+  throw new RateLimitError();
+}
+
+// src/internal/peek/graphql-client.ts
 var GraphQLClient = class {
   constructor(options) {
     this.options = options;
@@ -1833,50 +1918,39 @@ var GraphQLClient = class {
   options;
   /**
    * Executes a GraphQL query against the named endpoint and returns the raw
-   * response body. Retries on HTTP 429 per the configured backoff.
+   * response body. Retries on HTTP 429 per the configured backoff (via the
+   * shared {@link requestWithRetry} loop).
    */
   async request(endpointName, query, variables) {
-    const { retryDelaysMs, logger, fetchFn } = this.options;
+    const { logger } = this.options;
     const url = this.endpoint(endpointName);
     const collapsedQuery = query.replace(/\s+/g, " ").trim();
     logger.info("Making GraphQL request", { url, endpointName });
-    for (let attempt = 0; attempt <= retryDelaysMs.length; attempt++) {
-      const response = await fetchFn(url, {
+    return requestWithRetry(
+      this.options,
+      url,
+      {
         method: "POST",
         headers: this.buildHeaders(),
         body: JSON.stringify({ query: collapsedQuery, variables })
-      });
-      if (response.status === ADMIN_ACCOUNT_REQUIRED_STATUS) {
-        logger.warn(`Admin account required for ${endpointName} (HTTP 418)`, { url });
-        throw new AdminAccountRequiredError();
-      }
-      if (response.status === RATE_LIMIT_STATUS) {
-        const delay = retryDelaysMs[attempt];
-        if (delay !== void 0) {
-          logger.warn(
-            `Rate limited on ${endpointName}, retrying in ${delay}ms (attempt ${attempt + 1}/${retryDelaysMs.length})`
-          );
-          await sleep(delay);
-          continue;
+      },
+      endpointName,
+      async (response) => {
+        const body = await response.json();
+        if (body.errors) {
+          logger.error(`GraphQL errors for ${endpointName}`, {
+            url,
+            graphqlErrors: JSON.stringify(body.errors)
+          });
+          throw new PeekGraphQLError(body.errors);
         }
-        logger.error(`Rate limit exceeded for ${endpointName}`, { url });
-        throw new RateLimitError();
-      }
-      const body = await response.json();
-      if (body.errors) {
-        logger.error(`GraphQL errors for ${endpointName}`, {
-          url,
-          graphqlErrors: JSON.stringify(body.errors)
-        });
-        throw new PeekGraphQLError(body.errors);
-      }
-      if (!response.ok) {
-        logger.error(`GraphQL request failed with HTTP ${response.status}`, { url });
-        throw new Error(`GraphQL request failed with HTTP ${response.status}`);
+        if (!response.ok) {
+          logger.error(`GraphQL request failed with HTTP ${response.status}`, { url });
+          throw new Error(`GraphQL request failed with HTTP ${response.status}`);
+        }
+        return body;
       }
-      return body;
-    }
-    throw new RateLimitError();
+    );
   }
   endpoint(endpointName) {
     const { baseUrl, appId, endpointPathPrefix } = this.options;
@@ -1895,7 +1969,7 @@ var GraphQLClient = class {
   }
 };
 
-// src/internal/memberships/membership-converter.ts
+// src/internal/peek/memberships/membership-converter.ts
 function fromMembershipsResponse(response) {
   return (response?.memberships ?? []).flatMap(
     (membership) => (membership.membershipVariants ?? []).map((variant) => ({
@@ -1910,7 +1984,7 @@ function fromMembershipsResponse(response) {
   );
 }
 
-// src/internal/memberships/membership-queries.ts
+// src/internal/peek/memberships/membership-queries.ts
 var MEMBERSHIPS_QUERY = `
   query Sales {
     memberships {
@@ -1955,7 +2029,7 @@ var CREATE_MEMBERSHIP_ORDER_FROM_QUOTE_MUTATION = `
   }
 `;
 
-// src/internal/memberships/membership-service.ts
+// src/internal/peek/memberships/membership-service.ts
 var QUOTE_STATUS_CONFIRMED = "CONFIRMED";
 var DEFAULT_BALANCE_AMOUNT = "0.00";
 var DEFAULT_BALANCE_CURRENCY = "USD";
@@ -2061,7 +2135,7 @@ function validatePurchaseInput(input) {
   }
 }
 
-// src/internal/resellers/channel-converter.ts
+// src/internal/peek/resellers/channel-converter.ts
 function fromChannelsResponse(response) {
   return (response?.channels ?? []).map(fromChannelNode);
 }
@@ -2082,7 +2156,7 @@ function fromChannelNode(node) {
   };
 }
 
-// src/internal/resellers/channel-queries.ts
+// src/internal/peek/resellers/channel-queries.ts
 var CHANNELS_QUERY = `
   query Sales($first: Int) {
     channels {
@@ -2106,7 +2180,7 @@ var CHANNELS_QUERY = `
   }
 `;
 
-// src/internal/resellers/reseller-service.ts
+// src/internal/peek/resellers/reseller-service.ts
 var DEFAULT_AGENTS_PER_CHANNEL = 10;
 var ResellerService = class {
   constructor(client) {
@@ -2125,7 +2199,7 @@ var ResellerService = class {
   }
 };
 
-// src/internal/resource-pools/resource-pool-converter.ts
+// src/internal/peek/resource-pools/resource-pool-converter.ts
 function fromResourcePoolsResponse(response) {
   return (response?.resourcePools ?? []).map(fromResourcePoolNode);
 }
@@ -2153,7 +2227,7 @@ function fromAccountUser(accountUser) {
   };
 }
 
-// src/internal/resource-pools/resource-pool-queries.ts
+// src/internal/peek/resource-pools/resource-pool-queries.ts
 var RESOURCE_POOLS_QUERY = `
   query Sales($filter: ResourcePoolsFilter) {
     resourcePools(filter: $filter) {
@@ -2174,7 +2248,7 @@ var RESOURCE_POOLS_QUERY = `
   }
 `;
 
-// src/internal/resource-pools/resource-pool-service.ts
+// src/internal/peek/resource-pools/resource-pool-service.ts
 var DEFAULT_MODE = "ALL";
 var ResourcePoolService = class {
   constructor(client) {
@@ -2194,7 +2268,7 @@ var ResourcePoolService = class {
   }
 };
 
-// src/internal/reviews/review-converter.ts
+// src/internal/peek/reviews/review-converter.ts
 var ISO_DATE_LENGTH = 10;
 function toDateOnly(isoDateTime) {
   return isoDateTime.slice(0, ISO_DATE_LENGTH);
@@ -2218,13 +2292,13 @@ function fromReviewNode(node) {
   };
 }
 
-// src/internal/reviews/review-cursor.ts
+// src/internal/peek/reviews/review-cursor.ts
 function encodeCursor(offset, pageSize) {
   const start = Math.max(0, offset - pageSize + 1);
   return Buffer.from(`range:${start}..${offset},${offset}`).toString("base64");
 }
 
-// src/internal/reviews/review-queries.ts
+// src/internal/peek/reviews/review-queries.ts
 var REVIEWS_QUERY = `
   query Reviews($first: Int, $filter: ReviewFilter, $after: String) {
     reviews(first: $first, filter: $filter, after: $after) {
@@ -2259,7 +2333,7 @@ function buildReviewsVariables(params) {
   };
 }
 
-// src/internal/reviews/review-service.ts
+// src/internal/peek/reviews/review-service.ts
 var DEFAULT_REVIEW_COUNT = 50;
 var MIN_REVIEW_COUNT = 1;
 var MAX_REVIEW_COUNT = 50;
@@ -2320,7 +2394,7 @@ var ReviewService = class {
   }
 };
 
-// src/internal/timeslots/timeslot-converter.ts
+// src/internal/peek/timeslots/timeslot-converter.ts
 function fromTimeslotNodes(nodes, productId) {
   if (!Array.isArray(nodes) || nodes.length === 0) {
     return [];
@@ -2378,7 +2452,7 @@ function mapAssignedResources(allocations) {
   });
 }
 
-// src/internal/timeslots/guide-matcher.ts
+// src/internal/peek/timeslots/guide-matcher.ts
 function matchGuideToResourcePool(guideId, guideResourcePools, accountUsers) {
   const directIdMatch = guideResourcePools.find((pool) => pool.id === guideId);
   if (directIdMatch) {
@@ -2412,7 +2486,7 @@ function matchGuideToResourcePool(guideId, guideResourcePools, accountUsers) {
   return null;
 }
 
-// src/internal/timeslots/resource-allocation-queries.ts
+// src/internal/peek/timeslots/resource-allocation-queries.ts
 var RESOURCE_ALLOCATION_BULK_REQUEST_MUTATION = `
   mutation ResourceAllocationBulkRequest($input: ResourceAllocationBulkRequestInput!) {
     resourceAllocationBulkRequest(input: $input) {
@@ -2431,7 +2505,7 @@ function buildResourceAllocationVariables(timeslotIds, resourcePoolIds, status)
   return { input: { timeslotIds, resourcePoolIds, status } };
 }
 
-// src/internal/timeslots/timeslot-queries.ts
+// src/internal/peek/timeslots/timeslot-queries.ts
 var TIMESLOTS_QUERY = `
   query Sales($params: TimeslotsFilter!) {
     timeslots(filter: $params) {
@@ -2534,7 +2608,7 @@ function buildTimeslotVariables(productId, date, filter) {
   return { params };
 }
 
-// src/internal/timeslots/timeslot-service.ts
+// src/internal/peek/timeslots/timeslot-service.ts
 var GUIDE_CATEGORY = "guide";
 var ERROR_MISSING_TIMESLOTS_OR_GUIDES = "At least one timeslot and one guide are required";
 var ERROR_INVALID_ACTION = "Invalid action. Must be either assign or unassign";
@@ -2651,7 +2725,7 @@ function normalizeDate(date) {
   return date.split("T")[0] ?? date;
 }
 
-// src/internal/products/product-converter.ts
+// src/internal/peek/products/product-converter.ts
 var ADD_ON_COLOR = "#FFFFFF";
 function fromActivities(activities) {
   return activities.map(fromActivity);
@@ -2690,7 +2764,7 @@ function fromItemOptionNodes(nodes) {
   return Array.from(grouped.values());
 }
 
-// src/internal/products/product-queries.ts
+// src/internal/peek/products/product-queries.ts
 var PRODUCTS_QUERY = `
   query Sales {
     activities {
@@ -2730,7 +2804,7 @@ var ITEM_OPTIONS_QUERY = `
   }
 `;
 
-// src/internal/products/product-service.ts
+// src/internal/peek/products/product-service.ts
 var DEFAULT_ITEM_OPTIONS_PAGE_SIZE = 50;
 var ProductService = class {
   constructor(client, options = {}) {
@@ -2807,7 +2881,7 @@ var ProductService = class {
   }
 };
 
-// src/internal/promo-codes/promo-code-queries.ts
+// src/internal/peek/promo-codes/promo-code-queries.ts
 var PROMO_CODES_QUERY = `
   query Sales($first: Int, $after: String) {
     promoCodes(first: $first, after: $after) {
@@ -2846,7 +2920,7 @@ var CREATE_PROMO_CODE_MUTATION = `
   }
 `;
 
-// src/internal/promo-codes/promo-code-service.ts
+// src/internal/peek/promo-codes/promo-code-service.ts
 var DEFAULT_PAGE_SIZE3 = 50;
 var DEFAULT_CURRENCY = "USD";
 var CURRENCY_PATTERN = /^[A-Z]{3}$/;
@@ -2925,34 +2999,6 @@ var PromoCodeService = class {
     return { id: result.id, name: result.name };
   }
 };
-var TokenManager = class {
-  constructor(options) {
-    this.options = options;
-  }
-  options;
-  cached;
-  /**
-   * Returns a valid bearer token, reusing the cached one until it is within
-   * `leewaySeconds` of expiring, at which point a fresh token is minted.
-   */
-  getToken() {
-    const now = Date.now();
-    if (this.cached && now < this.cached.expiresAtMs) {
-      return this.cached.token;
-    }
-    const { secret, issuer, installId, ttlSeconds, leewaySeconds } = this.options;
-    const token = jwt__namespace.sign({}, secret, {
-      expiresIn: ttlSeconds,
-      issuer,
-      subject: installId
-    });
-    this.cached = {
-      token,
-      expiresAtMs: now + (ttlSeconds - leewaySeconds) * 1e3
-    };
-    return token;
-  }
-};
 
 // src/logger.ts
 var noopLogger = {
@@ -2967,9 +3013,6 @@ var noopLogger = {
 // src/peek-access-service.ts
 var DEFAULT_BASE_URL = "https://apps.peekapis.com/backoffice-gql";
 var DEFAULT_V2_BASE_URL = "https://app-registry.peeklabs.com/installations-api";
-var DEFAULT_TOKEN_TTL_SECONDS = 3600;
-var DEFAULT_TOKEN_REFRESH_LEEWAY_SECONDS = 60;
-var DEFAULT_RETRY_DELAYS_MS = [1e3, 2e3, 4e3];
 var PEEK_TOKEN_ISSUER = "app_registry_v2";
 var PeekAccessService = class {
   client;
@@ -2988,20 +3031,14 @@ var PeekAccessService = class {
   reviewService;
   constructor(config) {
     const isV2 = config.mode === "v2";
-    requireNonEmpty(config.installId, "installId");
-    requireNonEmpty(config.jwtSecret, "jwtSecret");
-    requireNonEmpty(config.issuer, "issuer");
-    requireNonEmpty(config.appId, "appId");
-    if (!isV2) requireNonEmpty(config.gatewayKey ?? "", "gatewayKey");
+    requireNonEmpty(config.installId, "installId", "PeekAccessService");
+    requireNonEmpty(config.jwtSecret, "jwtSecret", "PeekAccessService");
+    requireNonEmpty(config.issuer, "issuer", "PeekAccessService");
+    requireNonEmpty(config.appId, "appId", "PeekAccessService");
+    if (!isV2) requireNonEmpty(config.gatewayKey ?? "", "gatewayKey", "PeekAccessService");
     this.jwtSecret = config.jwtSecret;
     const logger = config.logger ?? noopLogger;
-    const tokens = new TokenManager({
-      secret: config.jwtSecret,
-      issuer: config.issuer,
-      installId: config.installId,
-      ttlSeconds: config.tokenTtlSeconds ?? DEFAULT_TOKEN_TTL_SECONDS,
-      leewaySeconds: config.tokenRefreshLeewaySeconds ?? DEFAULT_TOKEN_REFRESH_LEEWAY_SECONDS
-    });
+    const tokens = createTokenManager(config);
     const defaultBaseUrl = isV2 ? DEFAULT_V2_BASE_URL : DEFAULT_BASE_URL;
     this.client = new GraphQLClient({
       baseUrl: config.baseUrl ?? defaultBaseUrl,
@@ -3327,13 +3364,148 @@ var PeekAccessService = class {
     return this.getReviewService().getReviews(productId, reviewCount, reviewOffset);
   }
 };
-function requireNonEmpty(value, name) {
-  if (!value) {
-    throw new Error(`PeekAccessService: "${name}" is required`);
-  }
+
+// src/internal/cng/endpoints.ts
+var CNG_EXTENDABLE_SLUG = "cng_backoffice_api-v1";
+var PRODUCTS_PATH = "api/v2/commerce-config/products";
+
+// src/models/cng/product.ts
+var ACTIVITY_PRODUCT_TYPE2 = "ACTIVITY";
+
+// src/internal/cng/products/product-converter.ts
+function fromProductNodes(nodes) {
+  return nodes.map(fromProductNode);
+}
+function fromProductNode(node) {
+  return {
+    productId: node.id || "",
+    name: node.name || "",
+    type: node.product_type || ACTIVITY_PRODUCT_TYPE2,
+    color: node.color_hex || "",
+    tickets: (node.tickets ?? []).map((ticket) => ({
+      id: ticket.id,
+      name: ticket.name
+    }))
+  };
 }
 
-// src/internal/bookings/booking-webhook.ts
+// src/internal/cng/products/product-service.ts
+var CngProductService = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  /**
+   * Returns every activity as a single flat list.
+   *
+   * @example
+   * ```ts
+   * const activities = await cng.getProductService().getAllActivities();
+   * ```
+   */
+  async getAllActivities() {
+    const body = await this.client.get(
+      PRODUCTS_PATH
+    );
+    const nodes = Array.isArray(body) ? body : body?.products ?? [];
+    return fromProductNodes(nodes ?? []);
+  }
+};
+
+// src/internal/cng/rest-client.ts
+var RestClient = class {
+  constructor(options) {
+    this.options = options;
+  }
+  options;
+  /**
+   * Issues a GET against the named REST path and returns the parsed JSON body.
+   * Retries on HTTP 429 per the configured backoff (via the shared
+   * {@link requestWithRetry} loop).
+   *
+   * @throws {AdminAccountRequiredError} on HTTP 418
+   * @throws {RateLimitError} on HTTP 429 after retries are exhausted
+   * @throws {CngApiError} on any other non-2xx response
+   */
+  async get(path) {
+    const { logger } = this.options;
+    const url = this.endpoint(path);
+    logger.info("Making CNG request", { url, path });
+    return requestWithRetry(
+      this.options,
+      url,
+      { method: "GET", headers: this.buildHeaders() },
+      path,
+      async (response) => {
+        const body = await this.parseBody(response);
+        if (!response.ok) {
+          logger.error(`CNG request failed with HTTP ${response.status}`, { url });
+          throw new CngApiError(response.status, body);
+        }
+        return body;
+      }
+    );
+  }
+  /** Reads the response body as JSON, falling back to raw text when unparseable. */
+  async parseBody(response) {
+    const text = await response.text();
+    try {
+      return JSON.parse(text);
+    } catch {
+      return text;
+    }
+  }
+  endpoint(path) {
+    const { baseUrl, appId, extendableSlug } = this.options;
+    return `${baseUrl}/${appId}/${extendableSlug}/${path}`;
+  }
+  buildHeaders() {
+    return {
+      "X-Peek-Auth": `Bearer ${this.options.getToken()}`,
+      "Content-Type": "application/json"
+    };
+  }
+};
+
+// src/cng-access-service.ts
+var DEFAULT_BASE_URL2 = "https://app-registry.peeklabs.com/installations-api";
+var CngAccessService = class {
+  client;
+  productService;
+  constructor(config) {
+    requireNonEmpty(config.installId, "installId", "CngAccessService");
+    requireNonEmpty(config.jwtSecret, "jwtSecret", "CngAccessService");
+    requireNonEmpty(config.issuer, "issuer", "CngAccessService");
+    requireNonEmpty(config.appId, "appId", "CngAccessService");
+    const logger = config.logger ?? noopLogger;
+    const tokens = createTokenManager(config);
+    this.client = new RestClient({
+      baseUrl: config.baseUrl ?? DEFAULT_BASE_URL2,
+      appId: config.appId,
+      extendableSlug: CNG_EXTENDABLE_SLUG,
+      getToken: () => tokens.getToken(),
+      retryDelaysMs: config.retryDelaysMs ?? DEFAULT_RETRY_DELAYS_MS,
+      logger,
+      fetchFn: config.fetch ?? globalThis.fetch
+    });
+  }
+  /**
+   * Returns the {@link CngProductService} for this install, bound to the shared
+   * authenticated transport. The instance is created lazily and reused.
+   */
+  getProductService() {
+    if (!this.productService) {
+      this.productService = new CngProductService(this.client);
+    }
+    return this.productService;
+  }
+  /** All activities. Delegates to {@link CngProductService.getAllActivities}. */
+  getAllActivities() {
+    return this.getProductService().getAllActivities();
+  }
+};
+
+// src/internal/peek/bookings/booking-webhook.ts
 var PAYLOAD_BOOKING_KEY = "booking";
 var VALUE_OPEN_TOKEN = "value {";
 var PRICE_BREAKDOWN_KEYS = [
@@ -3383,7 +3555,7 @@ function hasPriceBreakdown(node) {
   return PRICE_BREAKDOWN_KEYS.some((key) => key in value);
 }
 
-// src/internal/waivers/waiver-webhook.ts
+// src/internal/peek/waivers/waiver-webhook.ts
 var PAYLOAD_WAIVER_KEY = "waiver";
 function parseWaiverWebhook(payload) {
   return fromWaiverNode(extractWaiverNode(payload));
@@ -3424,6 +3596,9 @@ exports.AccountUserService = AccountUserService;
 exports.AdminAccountRequiredError = AdminAccountRequiredError;
 exports.AvailabilityService = AvailabilityService;
 exports.BookingService = BookingService;
+exports.CngAccessService = CngAccessService;
+exports.CngApiError = CngApiError;
+exports.CngProductService = CngProductService;
 exports.DailyNoteService = DailyNoteService;
 exports.MembershipService = MembershipService;
 exports.PeekAccessService = PeekAccessService;