@peektravel/app-utilities 0.2.10 → 0.3.1

package/dist/index.d.cts

@@ -44,7 +44,8 @@ declare class GraphQLClient {
     constructor(options: GraphQLClientOptions);
     /**
      * Executes a GraphQL query against the named endpoint and returns the raw
-     * response body. Retries on HTTP 429 per the configured backoff.
+     * response body. Retries on HTTP 429 per the configured backoff (via the
+     * shared {@link requestWithRetry} loop).
      */
     request<T>(endpointName: string, query: string, variables: object): Promise<GraphQLBody<T>>;
     private endpoint;
@@ -1193,6 +1194,40 @@ declare class DailyNoteService {
     update(note: string): Promise<DailyNote | null>;
 }
 
+/**
+ * Config shared by every access service in this package (Peek, CNG, …).
+ *
+ * Each gateway's access service extends {@link BaseAccessServiceConfig} with its
+ * own extras (e.g. Peek adds `gatewayKey`/`mode`), so the only real difference
+ * between accessors is the transport they build and the services they expose.
+ * The shared defaults and the token-manager builder live here too, so that
+ * plumbing is written once.
+ */
+
+/** Fields common to every access service's config. */
+interface BaseAccessServiceConfig {
+    /** Install ID. Becomes the JWT subject. */
+    installId: string;
+    /** HMAC secret used to sign the JWT. */
+    jwtSecret: string;
+    /** JWT issuer — the app name / app ID. */
+    issuer: string;
+    /** App ID, used in the gateway endpoint path. */
+    appId: string;
+    /** Override the gateway base URL. Default: per-service. */
+    baseUrl?: string;
+    /** JWT lifetime in seconds. Default: 3600. */
+    tokenTtlSeconds?: number;
+    /** Re-mint the cached token this many seconds before expiry. Default: 60. */
+    tokenRefreshLeewaySeconds?: number;
+    /** Backoff delays (ms) for HTTP 429 retries. Default: [1000, 2000, 4000]. */
+    retryDelaysMs?: number[];
+    /** Optional logger. Default: no-op (silent). */
+    logger?: Logger;
+    /** Custom `fetch` implementation. Default: the global `fetch`. */
+    fetch?: typeof fetch;
+}
+
 declare class MembershipService {
     private readonly client;
     constructor(client: GraphQLClient);
@@ -1391,6 +1426,13 @@ declare class PromoCodeService {
     create(input: CreatePromoCodeInput): Promise<CreatedPromoCode>;
 }
 
+/**
+ * Platform that embedded the app for this session. Verification is
+ * brand-agnostic — one peek-auth JWT is minted for every platform — so this
+ * claim is the single thing that identifies which platform a request came from.
+ * New platforms extend this union.
+ */
+type PeekPlatform = "peek" | "cng" | "acme";
 /** User context embedded in a Peek auth token. */
 interface PeekAuthTokenUser {
     /** User's email address. */
@@ -1403,6 +1445,8 @@ interface PeekAuthTokenUser {
     locale: string;
     /** User's display name. */
     name: string;
+    /** Which platform embedded the app for this session. */
+    platform: PeekPlatform;
 }
 /** Claims returned by {@link PeekAccessService.verifyPeekAuthToken}. */
 interface PeekAuthTokenClaims {
@@ -1414,16 +1458,12 @@ interface PeekAuthTokenClaims {
     user: PeekAuthTokenUser;
 }
 
-/** Configuration for a {@link PeekAccessService} instance. */
-interface PeekAccessServiceConfig {
-    /** Peek install ID. Becomes the JWT subject. */
-    installId: string;
-    /** HMAC secret used to sign the JWT (the Peek internal secret). */
-    jwtSecret: string;
-    /** JWT issuer — the app name. */
-    issuer: string;
-    /** Peek app ID, used in the gateway endpoint path. */
-    appId: string;
+/**
+ * Configuration for a {@link PeekAccessService} instance. Extends the shared
+ * {@link BaseAccessServiceConfig} (install/auth/transport fields) with the
+ * Peek-specific extras below.
+ */
+interface PeekAccessServiceConfig extends BaseAccessServiceConfig {
     /** API gateway key, sent as the `pk-api-key` header. Required in v1 mode; not used in v2. */
     gatewayKey?: string;
     /**
@@ -1433,18 +1473,6 @@ interface PeekAccessServiceConfig {
      * GraphQL gateway.
      */
     mode?: "v2";
-    /** Override the gateway base URL. Default: Peek production gateway (v1) or app-registry sandbox (v2). */
-    baseUrl?: string;
-    /** JWT lifetime in seconds. Default: 3600. */
-    tokenTtlSeconds?: number;
-    /** Re-mint the cached token this many seconds before expiry. Default: 60. */
-    tokenRefreshLeewaySeconds?: number;
-    /** Backoff delays (ms) for HTTP 429 retries. Default: [1000, 2000, 4000]. */
-    retryDelaysMs?: number[];
-    /** Optional logger. Default: no-op (silent). */
-    logger?: Logger;
-    /** Custom `fetch` implementation. Default: the global `fetch`. */
-    fetch?: typeof fetch;
     /** Page size for cursor-paginated item options. Default: 50. */
     itemOptionsPageSize?: number;
 }
@@ -1640,6 +1668,135 @@ declare class PeekAccessService {
     getReviews(productId: string, reviewCount?: number, reviewOffset?: number): Promise<Review[]>;
 }
 
+interface RestClientOptions {
+    /** Base URL of the backoffice gateway (no trailing slash). */
+    baseUrl: string;
+    /** App ID, used in the endpoint path. */
+    appId: string;
+    /** Fixed extendable slug inserted between `appId` and the REST path. */
+    extendableSlug: string;
+    /** Supplies a valid bearer token for each request. */
+    getToken: () => string;
+    /** Backoff delays (ms) applied on successive HTTP 429 responses. */
+    retryDelaysMs: number[];
+    /** Diagnostics sink. */
+    logger: Logger;
+    /** `fetch` implementation to use. */
+    fetchFn: typeof fetch;
+}
+declare class RestClient {
+    private readonly options;
+    constructor(options: RestClientOptions);
+    /**
+     * Issues a GET against the named REST path and returns the parsed JSON body.
+     * Retries on HTTP 429 per the configured backoff (via the shared
+     * {@link requestWithRetry} loop).
+     *
+     * @throws {AdminAccountRequiredError} on HTTP 418
+     * @throws {RateLimitError} on HTTP 429 after retries are exhausted
+     * @throws {CngApiError} on any other non-2xx response
+     */
+    get<T>(path: string): Promise<T>;
+    /** Reads the response body as JSON, falling back to raw text when unparseable. */
+    private parseBody;
+    private endpoint;
+    private buildHeaders;
+}
+
+/**
+ * The clean, transport-agnostic data model for a CNG product.
+ *
+ * The CNG sibling of `../peek/product.ts`. Kept as a separate model because the
+ * CNG gateway is a distinct backoffice, but the shape deliberately mirrors the
+ * Peek `Product` so consumers can treat both brands uniformly. The raw CNG REST
+ * response types and the conversion logic live inside the package and are never
+ * exposed here.
+ */
+/**
+ * A bookable activity in a CNG account.
+ *
+ * `CngAccessService.getAllActivities()` returns these as a flat list.
+ *
+ * NOTE: field mapping is a best-guess placeholder until the real
+ * `commerce-config/products` response shape is confirmed — see
+ * `internal/cng/products/product-queries.ts`.
+ */
+interface Activity {
+    /** Stable unique identifier for the activity. */
+    productId: string;
+    /** Human-readable display name. */
+    name: string;
+    /** Product type reported by CNG (e.g. `"ACTIVITY"`). */
+    type: string;
+    /**
+     * Display color as a hex string (e.g. `"#1A2B3C"`). Empty string when no
+     * color is set.
+     */
+    color: string;
+    /** The bookable sub-options (tickets) of this activity. */
+    tickets: ActivityTicket[];
+}
+/** A single bookable sub-option (ticket) of an {@link Activity}. */
+interface ActivityTicket {
+    /** Unique identifier of the ticket. */
+    id: string;
+    /** Human-readable name of the ticket. */
+    name: string;
+}
+
+declare class CngProductService {
+    private readonly client;
+    constructor(client: RestClient);
+    /**
+     * Returns every activity as a single flat list.
+     *
+     * @example
+     * ```ts
+     * const activities = await cng.getProductService().getAllActivities();
+     * ```
+     */
+    getAllActivities(): Promise<Activity[]>;
+}
+
+/**
+ * Configuration for a {@link CngAccessService} instance. CNG adds no fields
+ * beyond {@link BaseAccessServiceConfig} — it authenticates on the app JWT
+ * alone (no `pk-api-key`, so no `gatewayKey`).
+ */
+type CngAccessServiceConfig = BaseAccessServiceConfig;
+/**
+ * Authenticated root entry point to the CNG backoffice REST gateway.
+ *
+ * @example
+ * ```ts
+ * import { CngAccessService, type Activity } from "@peektravel/app-utilities";
+ *
+ * const cng = new CngAccessService({
+ *   installId: "install-123",
+ *   jwtSecret: process.env.PEEK_APP_SECRET!,
+ *   issuer: process.env.PEEK_APP_ID!,
+ *   appId: process.env.PEEK_APP_ID!,
+ * });
+ *
+ * const activities: Activity[] = await cng.getAllActivities();
+ * ```
+ *
+ * @throws {Error} from the constructor when any required config field
+ * (`installId`, `jwtSecret`, `issuer`, `appId`) is empty.
+ */
+declare class CngAccessService {
+    private readonly client;
+    private productService?;
+    constructor(config: CngAccessServiceConfig);
+    /**
+     * Returns the {@link CngProductService} for this install, bound to the shared
+     * authenticated transport. The instance is created lazily and reused.
+     */
+    getProductService(): CngProductService;
+    /** All activities. Delegates to {@link CngProductService.getAllActivities}. */
+    getAllActivities(): Promise<Activity[]>;
+}
+
 /**
  * Public webhook surface for bookings.
  *
@@ -1722,8 +1879,11 @@ declare function parseWaiverWebhook(payload: unknown): Waiver;
 
 /**
  * Typed errors thrown by the package. Each mirrors a failure mode of the Peek
- * GraphQL gateway so callers can branch on the error type rather than parsing
- * messages.
+ * GraphQL gateway (or the CNG REST gateway) so callers can branch on the error
+ * type rather than parsing messages.
+ *
+ * `AdminAccountRequiredError` and `RateLimitError` are shared by both gateways.
+ * `PeekGraphQLError` is Peek-only; `CngApiError` is CNG-only.
  */
 /**
  * Thrown when the gateway responds with HTTP 418, indicating the install is not
@@ -1752,5 +1912,18 @@ declare class PeekGraphQLError extends Error {
     readonly graphqlErrors: unknown[];
     constructor(graphqlErrors: unknown[], message?: string);
 }
+/**
+ * Thrown when the CNG REST gateway returns a non-2xx response that is not one
+ * of the specifically-handled statuses (418/429). The offending status is
+ * preserved on {@link CngApiError.statusCode}, and the raw response body (parsed
+ * JSON when possible, otherwise the raw text) on {@link CngApiError.body}.
+ */
+declare class CngApiError extends Error {
+    /** The HTTP status that triggered this error. */
+    readonly statusCode: number;
+    /** The raw response body (parsed JSON when possible, otherwise text). */
+    readonly body: unknown;
+    constructor(statusCode: number, body: unknown, message?: string);
+}
 
-export { ACTIVITY_PRODUCT_TYPE, ADD_ON_PRODUCT_TYPE, type AccountUser, AccountUserService, type AccountUserServiceOptions, type AddAddonInput, AdminAccountRequiredError, type Agent, type AssignGuideResult, type AssignedActivity, type AssignedResource, type Availability, AvailabilityService, type AvailabilityTime, type AvailabilityTimesQuery, type Booking, type BookingAddon, type BookingAddonMoney, type BookingAddonOption, type BookingAddons, type BookingAddonsMutationResult, type BookingPaymentsOnFile, type BookingReadOptions, type BookingSearchBy, BookingService, type BookingServiceOptions, type BookingTimeRangeSearch, type CancelBookingResult, type Channel, type CreateBookingGuest, type CreateBookingInput, type CreateBookingTicket, type CreatePromoCodeInput, type CreatedBooking, type CreatedPromoCode, type CustomQuestionAnswer, type DailyNote, DailyNoteService, type Duration, type Guest, type GuestMetadata, type Guide, type GuideAssignment, type InvoiceLinkResult, type Logger, type MakePaymentInput, type MakePaymentResult, type Membership, type MembershipPurchaseInput, MembershipService, type NoteMode, type Payment, type PaymentSource, PeekAccessService, type PeekAccessServiceConfig, type PeekAuthTokenClaims, type PeekAuthTokenUser, PeekGraphQLError, type Price, type Product, ProductService, type ProductServiceOptions, type ProductTicket, type PromoCode, type PromoCodeFixedAmount, PromoCodeService, type PromoCodeServiceOptions, type PurchasedMembership, RENTAL_PRODUCT_TYPE, RateLimitError, type RefundInput, type RefundResult, ResellerService, type Resource, type ResourceOptionQuantity, type ResourcePool, type ResourcePoolAccountUser, type ResourcePoolAssignment, type ResourcePoolMode, ResourcePoolService, type Review, ReviewService, type Ticket, type Timeslot, type TimeslotFilter, TimeslotService, type UpdateTimeslotResult, type Waiver, noopLogger, parseBookingWebhook, parseWaiverWebhook };
+export { ACTIVITY_PRODUCT_TYPE, ADD_ON_PRODUCT_TYPE, type AccountUser, AccountUserService, type AccountUserServiceOptions, type Activity, type ActivityTicket, type AddAddonInput, AdminAccountRequiredError, type Agent, type AssignGuideResult, type AssignedActivity, type AssignedResource, type Availability, AvailabilityService, type AvailabilityTime, type AvailabilityTimesQuery, type Booking, type BookingAddon, type BookingAddonMoney, type BookingAddonOption, type BookingAddons, type BookingAddonsMutationResult, type BookingPaymentsOnFile, type BookingReadOptions, type BookingSearchBy, BookingService, type BookingServiceOptions, type BookingTimeRangeSearch, type CancelBookingResult, type Channel, CngAccessService, type CngAccessServiceConfig, CngApiError, CngProductService, type CreateBookingGuest, type CreateBookingInput, type CreateBookingTicket, type CreatePromoCodeInput, type CreatedBooking, type CreatedPromoCode, type CustomQuestionAnswer, type DailyNote, DailyNoteService, type Duration, type Guest, type GuestMetadata, type Guide, type GuideAssignment, type InvoiceLinkResult, type Logger, type MakePaymentInput, type MakePaymentResult, type Membership, type MembershipPurchaseInput, MembershipService, type NoteMode, type Payment, type PaymentSource, PeekAccessService, type PeekAccessServiceConfig, type PeekAuthTokenClaims, type PeekAuthTokenUser, PeekGraphQLError, type PeekPlatform, type Price, type Product, ProductService, type ProductServiceOptions, type ProductTicket, type PromoCode, type PromoCodeFixedAmount, PromoCodeService, type PromoCodeServiceOptions, type PurchasedMembership, RENTAL_PRODUCT_TYPE, RateLimitError, type RefundInput, type RefundResult, ResellerService, type Resource, type ResourceOptionQuantity, type ResourcePool, type ResourcePoolAccountUser, type ResourcePoolAssignment, type ResourcePoolMode, ResourcePoolService, type Review, ReviewService, type Ticket, type Timeslot, type TimeslotFilter, TimeslotService, type UpdateTimeslotResult, type Waiver, noopLogger, parseBookingWebhook, parseWaiverWebhook };

package/dist/index.d.ts

@@ -44,7 +44,8 @@ declare class GraphQLClient {
     constructor(options: GraphQLClientOptions);
     /**
      * Executes a GraphQL query against the named endpoint and returns the raw
-     * response body. Retries on HTTP 429 per the configured backoff.
+     * response body. Retries on HTTP 429 per the configured backoff (via the
+     * shared {@link requestWithRetry} loop).
      */
     request<T>(endpointName: string, query: string, variables: object): Promise<GraphQLBody<T>>;
     private endpoint;
@@ -1193,6 +1194,40 @@ declare class DailyNoteService {
     update(note: string): Promise<DailyNote | null>;
 }
 
+/**
+ * Config shared by every access service in this package (Peek, CNG, …).
+ *
+ * Each gateway's access service extends {@link BaseAccessServiceConfig} with its
+ * own extras (e.g. Peek adds `gatewayKey`/`mode`), so the only real difference
+ * between accessors is the transport they build and the services they expose.
+ * The shared defaults and the token-manager builder live here too, so that
+ * plumbing is written once.
+ */
+
+/** Fields common to every access service's config. */
+interface BaseAccessServiceConfig {
+    /** Install ID. Becomes the JWT subject. */
+    installId: string;
+    /** HMAC secret used to sign the JWT. */
+    jwtSecret: string;
+    /** JWT issuer — the app name / app ID. */
+    issuer: string;
+    /** App ID, used in the gateway endpoint path. */
+    appId: string;
+    /** Override the gateway base URL. Default: per-service. */
+    baseUrl?: string;
+    /** JWT lifetime in seconds. Default: 3600. */
+    tokenTtlSeconds?: number;
+    /** Re-mint the cached token this many seconds before expiry. Default: 60. */
+    tokenRefreshLeewaySeconds?: number;
+    /** Backoff delays (ms) for HTTP 429 retries. Default: [1000, 2000, 4000]. */
+    retryDelaysMs?: number[];
+    /** Optional logger. Default: no-op (silent). */
+    logger?: Logger;
+    /** Custom `fetch` implementation. Default: the global `fetch`. */
+    fetch?: typeof fetch;
+}
+
 declare class MembershipService {
     private readonly client;
     constructor(client: GraphQLClient);
@@ -1391,6 +1426,13 @@ declare class PromoCodeService {
     create(input: CreatePromoCodeInput): Promise<CreatedPromoCode>;
 }
 
+/**
+ * Platform that embedded the app for this session. Verification is
+ * brand-agnostic — one peek-auth JWT is minted for every platform — so this
+ * claim is the single thing that identifies which platform a request came from.
+ * New platforms extend this union.
+ */
+type PeekPlatform = "peek" | "cng" | "acme";
 /** User context embedded in a Peek auth token. */
 interface PeekAuthTokenUser {
     /** User's email address. */
@@ -1403,6 +1445,8 @@ interface PeekAuthTokenUser {
     locale: string;
     /** User's display name. */
     name: string;
+    /** Which platform embedded the app for this session. */
+    platform: PeekPlatform;
 }
 /** Claims returned by {@link PeekAccessService.verifyPeekAuthToken}. */
 interface PeekAuthTokenClaims {
@@ -1414,16 +1458,12 @@ interface PeekAuthTokenClaims {
     user: PeekAuthTokenUser;
 }
 
-/** Configuration for a {@link PeekAccessService} instance. */
-interface PeekAccessServiceConfig {
-    /** Peek install ID. Becomes the JWT subject. */
-    installId: string;
-    /** HMAC secret used to sign the JWT (the Peek internal secret). */
-    jwtSecret: string;
-    /** JWT issuer — the app name. */
-    issuer: string;
-    /** Peek app ID, used in the gateway endpoint path. */
-    appId: string;
+/**
+ * Configuration for a {@link PeekAccessService} instance. Extends the shared
+ * {@link BaseAccessServiceConfig} (install/auth/transport fields) with the
+ * Peek-specific extras below.
+ */
+interface PeekAccessServiceConfig extends BaseAccessServiceConfig {
     /** API gateway key, sent as the `pk-api-key` header. Required in v1 mode; not used in v2. */
     gatewayKey?: string;
     /**
@@ -1433,18 +1473,6 @@ interface PeekAccessServiceConfig {
      * GraphQL gateway.
      */
     mode?: "v2";
-    /** Override the gateway base URL. Default: Peek production gateway (v1) or app-registry sandbox (v2). */
-    baseUrl?: string;
-    /** JWT lifetime in seconds. Default: 3600. */
-    tokenTtlSeconds?: number;
-    /** Re-mint the cached token this many seconds before expiry. Default: 60. */
-    tokenRefreshLeewaySeconds?: number;
-    /** Backoff delays (ms) for HTTP 429 retries. Default: [1000, 2000, 4000]. */
-    retryDelaysMs?: number[];
-    /** Optional logger. Default: no-op (silent). */
-    logger?: Logger;
-    /** Custom `fetch` implementation. Default: the global `fetch`. */
-    fetch?: typeof fetch;
     /** Page size for cursor-paginated item options. Default: 50. */
     itemOptionsPageSize?: number;
 }
@@ -1640,6 +1668,135 @@ declare class PeekAccessService {
     getReviews(productId: string, reviewCount?: number, reviewOffset?: number): Promise<Review[]>;
 }
 
+interface RestClientOptions {
+    /** Base URL of the backoffice gateway (no trailing slash). */
+    baseUrl: string;
+    /** App ID, used in the endpoint path. */
+    appId: string;
+    /** Fixed extendable slug inserted between `appId` and the REST path. */
+    extendableSlug: string;
+    /** Supplies a valid bearer token for each request. */
+    getToken: () => string;
+    /** Backoff delays (ms) applied on successive HTTP 429 responses. */
+    retryDelaysMs: number[];
+    /** Diagnostics sink. */
+    logger: Logger;
+    /** `fetch` implementation to use. */
+    fetchFn: typeof fetch;
+}
+declare class RestClient {
+    private readonly options;
+    constructor(options: RestClientOptions);
+    /**
+     * Issues a GET against the named REST path and returns the parsed JSON body.
+     * Retries on HTTP 429 per the configured backoff (via the shared
+     * {@link requestWithRetry} loop).
+     *
+     * @throws {AdminAccountRequiredError} on HTTP 418
+     * @throws {RateLimitError} on HTTP 429 after retries are exhausted
+     * @throws {CngApiError} on any other non-2xx response
+     */
+    get<T>(path: string): Promise<T>;
+    /** Reads the response body as JSON, falling back to raw text when unparseable. */
+    private parseBody;
+    private endpoint;
+    private buildHeaders;
+}
+
+/**
+ * The clean, transport-agnostic data model for a CNG product.
+ *
+ * The CNG sibling of `../peek/product.ts`. Kept as a separate model because the
+ * CNG gateway is a distinct backoffice, but the shape deliberately mirrors the
+ * Peek `Product` so consumers can treat both brands uniformly. The raw CNG REST
+ * response types and the conversion logic live inside the package and are never
+ * exposed here.
+ */
+/**
+ * A bookable activity in a CNG account.
+ *
+ * `CngAccessService.getAllActivities()` returns these as a flat list.
+ *
+ * NOTE: field mapping is a best-guess placeholder until the real
+ * `commerce-config/products` response shape is confirmed — see
+ * `internal/cng/products/product-queries.ts`.
+ */
+interface Activity {
+    /** Stable unique identifier for the activity. */
+    productId: string;
+    /** Human-readable display name. */
+    name: string;
+    /** Product type reported by CNG (e.g. `"ACTIVITY"`). */
+    type: string;
+    /**
+     * Display color as a hex string (e.g. `"#1A2B3C"`). Empty string when no
+     * color is set.
+     */
+    color: string;
+    /** The bookable sub-options (tickets) of this activity. */
+    tickets: ActivityTicket[];
+}
+/** A single bookable sub-option (ticket) of an {@link Activity}. */
+interface ActivityTicket {
+    /** Unique identifier of the ticket. */
+    id: string;
+    /** Human-readable name of the ticket. */
+    name: string;
+}
+
+declare class CngProductService {
+    private readonly client;
+    constructor(client: RestClient);
+    /**
+     * Returns every activity as a single flat list.
+     *
+     * @example
+     * ```ts
+     * const activities = await cng.getProductService().getAllActivities();
+     * ```
+     */
+    getAllActivities(): Promise<Activity[]>;
+}
+
+/**
+ * Configuration for a {@link CngAccessService} instance. CNG adds no fields
+ * beyond {@link BaseAccessServiceConfig} — it authenticates on the app JWT
+ * alone (no `pk-api-key`, so no `gatewayKey`).
+ */
+type CngAccessServiceConfig = BaseAccessServiceConfig;
+/**
+ * Authenticated root entry point to the CNG backoffice REST gateway.
+ *
+ * @example
+ * ```ts
+ * import { CngAccessService, type Activity } from "@peektravel/app-utilities";
+ *
+ * const cng = new CngAccessService({
+ *   installId: "install-123",
+ *   jwtSecret: process.env.PEEK_APP_SECRET!,
+ *   issuer: process.env.PEEK_APP_ID!,
+ *   appId: process.env.PEEK_APP_ID!,
+ * });
+ *
+ * const activities: Activity[] = await cng.getAllActivities();
+ * ```
+ *
+ * @throws {Error} from the constructor when any required config field
+ * (`installId`, `jwtSecret`, `issuer`, `appId`) is empty.
+ */
+declare class CngAccessService {
+    private readonly client;
+    private productService?;
+    constructor(config: CngAccessServiceConfig);
+    /**
+     * Returns the {@link CngProductService} for this install, bound to the shared
+     * authenticated transport. The instance is created lazily and reused.
+     */
+    getProductService(): CngProductService;
+    /** All activities. Delegates to {@link CngProductService.getAllActivities}. */
+    getAllActivities(): Promise<Activity[]>;
+}
+
 /**
  * Public webhook surface for bookings.
  *
@@ -1722,8 +1879,11 @@ declare function parseWaiverWebhook(payload: unknown): Waiver;
 
 /**
  * Typed errors thrown by the package. Each mirrors a failure mode of the Peek
- * GraphQL gateway so callers can branch on the error type rather than parsing
- * messages.
+ * GraphQL gateway (or the CNG REST gateway) so callers can branch on the error
+ * type rather than parsing messages.
+ *
+ * `AdminAccountRequiredError` and `RateLimitError` are shared by both gateways.
+ * `PeekGraphQLError` is Peek-only; `CngApiError` is CNG-only.
  */
 /**
  * Thrown when the gateway responds with HTTP 418, indicating the install is not
@@ -1752,5 +1912,18 @@ declare class PeekGraphQLError extends Error {
     readonly graphqlErrors: unknown[];
     constructor(graphqlErrors: unknown[], message?: string);
 }
+/**
+ * Thrown when the CNG REST gateway returns a non-2xx response that is not one
+ * of the specifically-handled statuses (418/429). The offending status is
+ * preserved on {@link CngApiError.statusCode}, and the raw response body (parsed
+ * JSON when possible, otherwise the raw text) on {@link CngApiError.body}.
+ */
+declare class CngApiError extends Error {
+    /** The HTTP status that triggered this error. */
+    readonly statusCode: number;
+    /** The raw response body (parsed JSON when possible, otherwise text). */
+    readonly body: unknown;
+    constructor(statusCode: number, body: unknown, message?: string);
+}
 
-export { ACTIVITY_PRODUCT_TYPE, ADD_ON_PRODUCT_TYPE, type AccountUser, AccountUserService, type AccountUserServiceOptions, type AddAddonInput, AdminAccountRequiredError, type Agent, type AssignGuideResult, type AssignedActivity, type AssignedResource, type Availability, AvailabilityService, type AvailabilityTime, type AvailabilityTimesQuery, type Booking, type BookingAddon, type BookingAddonMoney, type BookingAddonOption, type BookingAddons, type BookingAddonsMutationResult, type BookingPaymentsOnFile, type BookingReadOptions, type BookingSearchBy, BookingService, type BookingServiceOptions, type BookingTimeRangeSearch, type CancelBookingResult, type Channel, type CreateBookingGuest, type CreateBookingInput, type CreateBookingTicket, type CreatePromoCodeInput, type CreatedBooking, type CreatedPromoCode, type CustomQuestionAnswer, type DailyNote, DailyNoteService, type Duration, type Guest, type GuestMetadata, type Guide, type GuideAssignment, type InvoiceLinkResult, type Logger, type MakePaymentInput, type MakePaymentResult, type Membership, type MembershipPurchaseInput, MembershipService, type NoteMode, type Payment, type PaymentSource, PeekAccessService, type PeekAccessServiceConfig, type PeekAuthTokenClaims, type PeekAuthTokenUser, PeekGraphQLError, type Price, type Product, ProductService, type ProductServiceOptions, type ProductTicket, type PromoCode, type PromoCodeFixedAmount, PromoCodeService, type PromoCodeServiceOptions, type PurchasedMembership, RENTAL_PRODUCT_TYPE, RateLimitError, type RefundInput, type RefundResult, ResellerService, type Resource, type ResourceOptionQuantity, type ResourcePool, type ResourcePoolAccountUser, type ResourcePoolAssignment, type ResourcePoolMode, ResourcePoolService, type Review, ReviewService, type Ticket, type Timeslot, type TimeslotFilter, TimeslotService, type UpdateTimeslotResult, type Waiver, noopLogger, parseBookingWebhook, parseWaiverWebhook };
+export { ACTIVITY_PRODUCT_TYPE, ADD_ON_PRODUCT_TYPE, type AccountUser, AccountUserService, type AccountUserServiceOptions, type Activity, type ActivityTicket, type AddAddonInput, AdminAccountRequiredError, type Agent, type AssignGuideResult, type AssignedActivity, type AssignedResource, type Availability, AvailabilityService, type AvailabilityTime, type AvailabilityTimesQuery, type Booking, type BookingAddon, type BookingAddonMoney, type BookingAddonOption, type BookingAddons, type BookingAddonsMutationResult, type BookingPaymentsOnFile, type BookingReadOptions, type BookingSearchBy, BookingService, type BookingServiceOptions, type BookingTimeRangeSearch, type CancelBookingResult, type Channel, CngAccessService, type CngAccessServiceConfig, CngApiError, CngProductService, type CreateBookingGuest, type CreateBookingInput, type CreateBookingTicket, type CreatePromoCodeInput, type CreatedBooking, type CreatedPromoCode, type CustomQuestionAnswer, type DailyNote, DailyNoteService, type Duration, type Guest, type GuestMetadata, type Guide, type GuideAssignment, type InvoiceLinkResult, type Logger, type MakePaymentInput, type MakePaymentResult, type Membership, type MembershipPurchaseInput, MembershipService, type NoteMode, type Payment, type PaymentSource, PeekAccessService, type PeekAccessServiceConfig, type PeekAuthTokenClaims, type PeekAuthTokenUser, PeekGraphQLError, type PeekPlatform, type Price, type Product, ProductService, type ProductServiceOptions, type ProductTicket, type PromoCode, type PromoCodeFixedAmount, PromoCodeService, type PromoCodeServiceOptions, type PurchasedMembership, RENTAL_PRODUCT_TYPE, RateLimitError, type RefundInput, type RefundResult, ResellerService, type Resource, type ResourceOptionQuantity, type ResourcePool, type ResourcePoolAccountUser, type ResourcePoolAssignment, type ResourcePoolMode, ResourcePoolService, type Review, ReviewService, type Ticket, type Timeslot, type TimeslotFilter, TimeslotService, type UpdateTimeslotResult, type Waiver, noopLogger, parseBookingWebhook, parseWaiverWebhook };