@peektravel/app-utilities 0.4.1 → 0.5.1

package/dist/index.cjs

@@ -203,6 +203,73 @@ var AvailabilityService = class {
   }
 };
 
+// src/access-options.ts
+function resolveAccessOptions(options) {
+  return { fullCustomerAccess: options?.fullCustomerAccess ?? false };
+}
+
+// src/errors.ts
+var AdminAccountRequiredError = class extends Error {
+  /** The HTTP status that triggered this error. */
+  statusCode = 418;
+  constructor(message = "Admin account required") {
+    super(message);
+    this.name = "AdminAccountRequiredError";
+  }
+};
+var RateLimitError = class extends Error {
+  /** The HTTP status that triggered this error. */
+  statusCode = 429;
+  constructor(message = "Rate limit exceeded") {
+    super(message);
+    this.name = "RateLimitError";
+  }
+};
+var PeekGraphQLError = class extends Error {
+  /** The raw `errors` array returned by the GraphQL endpoint. */
+  graphqlErrors;
+  constructor(graphqlErrors, message = "GraphQL request failed") {
+    super(message);
+    this.name = "PeekGraphQLError";
+    this.graphqlErrors = graphqlErrors;
+  }
+};
+var PiiAccessDisabledError = class extends Error {
+  /** The name of the operation that was blocked (e.g. `"makePayment"`). */
+  operation;
+  constructor(operation) {
+    super(
+      `"${operation}" is disabled because this access service was created without "fullCustomerAccess"; enable it to allow payment and booking-modification operations`
+    );
+    this.name = "PiiAccessDisabledError";
+    this.operation = operation;
+  }
+};
+var CngApiError = class extends Error {
+  /** The HTTP status that triggered this error. */
+  statusCode;
+  /** The raw response body (parsed JSON when possible, otherwise text). */
+  body;
+  constructor(statusCode, body, message) {
+    super(message ?? `CNG request failed with HTTP ${statusCode}`);
+    this.name = "CngApiError";
+    this.statusCode = statusCode;
+    this.body = body;
+  }
+};
+var AcmeApiError = class extends Error {
+  /** The HTTP status that triggered this error. */
+  statusCode;
+  /** The raw response body (parsed JSON when possible, otherwise text). */
+  body;
+  constructor(statusCode, body, message) {
+    super(message ?? `ACME request failed with HTTP ${statusCode}`);
+    this.name = "AcmeApiError";
+    this.statusCode = statusCode;
+    this.body = body;
+  }
+};
+
 // src/models/peek/product.ts
 var ACTIVITY_PRODUCT_TYPE = "ACTIVITY";
 var RENTAL_PRODUCT_TYPE = "RENTAL";
@@ -214,17 +281,8 @@ var SEARCH_BY_ACTIVITY_DATE = "activityDate";
 function normalizeBookingId(bookingId) {
   return bookingId.toLowerCase().replace(/-/g, "_");
 }
-var guestFields = `
-  id
-  name
-  country
-  dateOfBirth
-  email
-  isGdpr
-  isParticipant
-  optinSms
-  optinMarketing
-  phone
+var GUEST_IDENTITY_PII_FIELDS = "name country dateOfBirth email isGdpr";
+var GUEST_CONTACT_PII_FIELDS = `phone
   postalCode
   fieldResponses {
     id
@@ -234,9 +292,20 @@ var guestFields = `
         name
       }
     }
-  }
+  }`;
+function buildGuestFields(fullCustomerAccess) {
+  return `
+  id
+  ${fullCustomerAccess ? GUEST_IDENTITY_PII_FIELDS : ""}
+  isParticipant
+  optinSms
+  optinMarketing
+  ${fullCustomerAccess ? GUEST_CONTACT_PII_FIELDS : ""}
 `;
-var bookingGuestsFields = `
+}
+function buildBookingGuestsFields(fullCustomerAccess) {
+  const guestFields = buildGuestFields(fullCustomerAccess);
+  return `
   bookingGuests {
     ${guestFields}
   }
@@ -244,10 +313,9 @@ var bookingGuestsFields = `
     ${guestFields}
   }
 `;
-var bookingQueryFields = `
-  displayId
-  id
-  primaryGuest {
+}
+var bookingGuestsFields = buildBookingGuestsFields(true);
+var BOOKING_PRIMARY_GUEST_PII_FIELDS = `primaryGuest {
     name
     email
     phone
@@ -255,7 +323,26 @@ var bookingQueryFields = `
     optinSms
     isGdpr
     postalCode
+  }`;
+var BOOKING_QUESTION_ANSWERS_PII_FIELDS = `questionAnswers {
+    answer
+    questionText
+    questionLocationSnapshot {
+      latitude
+      longitude
+    }
   }
+  tickets {
+    questionAnswers {
+      answer
+      questionText
+    }
+  }`;
+function buildBookingQueryFields(fullCustomerAccess) {
+  return `
+  displayId
+  id
+  ${fullCustomerAccess ? BOOKING_PRIMARY_GUEST_PII_FIELDS : ""}
   activitySnapshot {
     type
     name
@@ -285,7 +372,7 @@ var bookingQueryFields = `
   endsAt
   endsAtUtc
   availabilityTimeId
-  bookingPortalUrl
+  ${fullCustomerAccess ? "bookingPortalUrl" : ""}
   operatorNotes
   value {
     total {
@@ -327,20 +414,7 @@ var bookingQueryFields = `
       }
     }
   }
-  questionAnswers {
-    answer
-    questionText
-    questionLocationSnapshot {
-      latitude
-      longitude
-    }
-  }
-  tickets {
-    questionAnswers {
-      answer
-      questionText
-    }
-  }
+  ${fullCustomerAccess ? BOOKING_QUESTION_ANSWERS_PII_FIELDS : ""}
   resourcePoolAssignments {
     quantity
     resourcePool {
@@ -358,6 +432,8 @@ var bookingQueryFields = `
     }
   }
 `;
+}
+var bookingQueryFields = buildBookingQueryFields(true);
 var PRICE_BREAKDOWN_FIELDS = `
   convenienceFee { amount formatted }
   deposit { amount formatted }
@@ -376,9 +452,10 @@ var TICKET_VALUE_FIELDS = `
     total { amount formatted }
   }
 `;
-function buildBookingsListingQuery(includeGuests, includePriceBreakdown) {
-  const guestsSection = includeGuests ? bookingGuestsFields : "";
-  const fields = includePriceBreakdown ? bookingQueryFields.replace("value {", `value { ${PRICE_BREAKDOWN_FIELDS}`).replace("ticketQuantities {", `ticketQuantities { ${TICKET_VALUE_FIELDS}`) : bookingQueryFields;
+function buildBookingsListingQuery(includeGuests, includePriceBreakdown, fullCustomerAccess = true) {
+  const guestsSection = includeGuests ? buildBookingGuestsFields(fullCustomerAccess) : "";
+  const baseFields = buildBookingQueryFields(fullCustomerAccess);
+  const fields = includePriceBreakdown ? baseFields.replace("value {", `value { ${PRICE_BREAKDOWN_FIELDS}`).replace("ticketQuantities {", `ticketQuantities { ${TICKET_VALUE_FIELDS}`) : baseFields;
   return `
     query Sales($after: String, $first: Int, $filter: SalesFilter!, $orderBy: SalesOrdering) {
       sales(after: $after, first: $first, filter: $filter, orderBy: $orderBy) {
@@ -395,7 +472,8 @@ function buildBookingsListingQuery(includeGuests, includePriceBreakdown) {
     }
   `;
 }
-var BOOKING_GUESTS_QUERY = `
+function buildBookingGuestsQuery(fullCustomerAccess) {
+  return `
   query Sales($after: String, $first: Int, $filter: SalesFilter!, $orderBy: SalesOrdering) {
     sales(after: $after, first: $first, filter: $filter, orderBy: $orderBy) {
       pageInfo { endCursor hasNextPage }
@@ -404,13 +482,14 @@ var BOOKING_GUESTS_QUERY = `
           ... on Booking {
             displayId
             id
-            ${bookingGuestsFields}
+            ${buildBookingGuestsFields(fullCustomerAccess)}
           }
         }
       }
     }
   }
 `;
+}
 var BOOKING_PAYMENTS_ON_FILE_QUERY = `
   query Sales($after: String, $first: Int, $filter: SalesFilter!, $orderBy: SalesOrdering) {
     sales(after: $after, first: $first, filter: $filter, orderBy: $orderBy) {
@@ -996,10 +1075,23 @@ var BookingService = class {
     this.client = client;
     this.deps = deps;
     this.pageSize = options.pageSize ?? DEFAULT_PAGE_SIZE2;
+    this.fullCustomerAccess = resolveAccessOptions(options.accessOptions).fullCustomerAccess;
   }
   client;
   deps;
   pageSize;
+  /** Whether customer PII is requested and payment operations are allowed. */
+  fullCustomerAccess;
+  /**
+   * Throws a {@link PiiAccessDisabledError} for `operation` when this service was
+   * created without `fullCustomerAccess` — used to gate payment and booking-modification
+   * operations that touch customer financial data.
+   */
+  assertPiiEnabled(operation) {
+    if (!this.fullCustomerAccess) {
+      throw new PiiAccessDisabledError(operation);
+    }
+  }
   /**
    * Returns a single booking by id, or null when not found. The `bookingId` is
    * normalized internally (lowercased, `-` → `_`), so `B-ABC123` and `b_abc123`
@@ -1021,7 +1113,7 @@ var BookingService = class {
     const includePriceBreakdown = options.includePriceBreakdown ?? false;
     const body = await this.client.request(
       SALES_ENDPOINT,
-      buildBookingsListingQuery(includeGuests, includePriceBreakdown),
+      buildBookingsListingQuery(includeGuests, includePriceBreakdown, this.fullCustomerAccess),
       buildBookingsVariables({
         pageSize: this.pageSize,
         after: null,
@@ -1039,7 +1131,7 @@ var BookingService = class {
     const includeGuests = input.includeGuests ?? false;
     const includePriceBreakdown = input.includePriceBreakdown ?? false;
     return this.fetchPaginated(
-      buildBookingsListingQuery(includeGuests, includePriceBreakdown),
+      buildBookingsListingQuery(includeGuests, includePriceBreakdown, this.fullCustomerAccess),
       {
         startDateTime: input.start,
         endDateTime: input.end,
@@ -1057,7 +1149,7 @@ var BookingService = class {
     const includeGuests = options.includeGuests ?? false;
     const includePriceBreakdown = options.includePriceBreakdown ?? false;
     return this.fetchPaginated(
-      buildBookingsListingQuery(includeGuests, includePriceBreakdown),
+      buildBookingsListingQuery(includeGuests, includePriceBreakdown, this.fullCustomerAccess),
       { timeslotId },
       includeGuests,
       includePriceBreakdown
@@ -1068,7 +1160,7 @@ var BookingService = class {
     assertBookingId(bookingId);
     const body = await this.client.request(
       SALES_ENDPOINT,
-      BOOKING_GUESTS_QUERY,
+      buildBookingGuestsQuery(this.fullCustomerAccess),
       buildBookingsVariables({
         pageSize: this.pageSize,
         after: null,
@@ -1079,6 +1171,7 @@ var BookingService = class {
   }
   /** Returns the payments on file for a booking, or null when not found. */
   async getPaymentsOnFile(bookingId) {
+    this.assertPiiEnabled("getPaymentsOnFile");
     assertBookingId(bookingId);
     const normalized = normalizeBookingId(bookingId);
     const body = await this.client.request(
@@ -1163,6 +1256,7 @@ ${note}`;
    * charge fails.
    */
   async makePayment(input) {
+    this.assertPiiEnabled("makePayment");
     this.validatePaymentInput(input);
     const normalized = normalizeBookingId(input.bookingId);
     const onFile = await this.getPaymentsOnFile(normalized);
@@ -1205,6 +1299,7 @@ ${note}`;
    * payments-on-file, then applies the refund.
    */
   async refund(input) {
+    this.assertPiiEnabled("refund");
     this.validateRefundInput(input);
     const normalized = normalizeBookingId(input.bookingId);
     const onFile = await this.getPaymentsOnFile(normalized);
@@ -1245,6 +1340,7 @@ ${note}`;
   }
   /** Creates an invoice link for a booking's order. */
   async createInvoiceLink(bookingId) {
+    this.assertPiiEnabled("createInvoiceLink");
     assertBookingId(bookingId);
     const normalized = normalizeBookingId(bookingId);
     const booking = await this.getById(normalized);
@@ -1300,6 +1396,7 @@ ${note}`;
    * the underlying quote/order mutations fail.
    */
   async addAddon(bookingId, input) {
+    this.assertPiiEnabled("addAddon");
     assertBookingId(bookingId);
     const addonOptionId = (input?.addonOptionId || input?.addonId || "").trim();
     if (!addonOptionId) {
@@ -1353,6 +1450,7 @@ ${note}`;
    * variables. Returns the booking's add-ons after the change.
    */
   async removeAddon(bookingId, input) {
+    this.assertPiiEnabled("removeAddon");
     assertBookingId(bookingId);
     const addonOptionId = (input?.addonOptionId || input?.addonId || "").trim();
     if (!addonOptionId) {
@@ -1842,57 +1940,6 @@ function createTokenManager(config) {
   });
 }
 
-// src/errors.ts
-var AdminAccountRequiredError = class extends Error {
-  /** The HTTP status that triggered this error. */
-  statusCode = 418;
-  constructor(message = "Admin account required") {
-    super(message);
-    this.name = "AdminAccountRequiredError";
-  }
-};
-var RateLimitError = class extends Error {
-  /** The HTTP status that triggered this error. */
-  statusCode = 429;
-  constructor(message = "Rate limit exceeded") {
-    super(message);
-    this.name = "RateLimitError";
-  }
-};
-var PeekGraphQLError = class extends Error {
-  /** The raw `errors` array returned by the GraphQL endpoint. */
-  graphqlErrors;
-  constructor(graphqlErrors, message = "GraphQL request failed") {
-    super(message);
-    this.name = "PeekGraphQLError";
-    this.graphqlErrors = graphqlErrors;
-  }
-};
-var CngApiError = class extends Error {
-  /** The HTTP status that triggered this error. */
-  statusCode;
-  /** The raw response body (parsed JSON when possible, otherwise text). */
-  body;
-  constructor(statusCode, body, message) {
-    super(message ?? `CNG request failed with HTTP ${statusCode}`);
-    this.name = "CngApiError";
-    this.statusCode = statusCode;
-    this.body = body;
-  }
-};
-var AcmeApiError = class extends Error {
-  /** The HTTP status that triggered this error. */
-  statusCode;
-  /** The raw response body (parsed JSON when possible, otherwise text). */
-  body;
-  constructor(statusCode, body, message) {
-    super(message ?? `ACME request failed with HTTP ${statusCode}`);
-    this.name = "AcmeApiError";
-    this.statusCode = statusCode;
-    this.body = body;
-  }
-};
-
 // src/internal/http-transport.ts
 var RATE_LIMIT_STATUS = 429;
 var ADMIN_ACCOUNT_REQUIRED_STATUS = 418;
@@ -2311,7 +2358,8 @@ function encodeCursor(offset, pageSize) {
 }
 
 // src/internal/peek/reviews/review-queries.ts
-var REVIEWS_QUERY = `
+function buildReviewsQuery(fullCustomerAccess) {
+  return `
   query Reviews($first: Int, $filter: ReviewFilter, $after: String) {
     reviews(first: $first, filter: $filter, after: $after) {
       edges {
@@ -2325,8 +2373,7 @@ var REVIEWS_QUERY = `
             name
           }
           id
-          name
-          email
+          ${fullCustomerAccess ? "name\n          email" : ""}
           rating
           comment
           reviewedAt
@@ -2337,6 +2384,7 @@ var REVIEWS_QUERY = `
     }
   }
 `;
+}
 function buildReviewsVariables(params) {
   return {
     first: params.first,
@@ -2353,10 +2401,13 @@ var ERROR_PRODUCT_ID_REQUIRED = "productId is required";
 var ERROR_INVALID_REVIEW_COUNT = `reviewCount must be an integer between ${MIN_REVIEW_COUNT} and ${MAX_REVIEW_COUNT}`;
 var ERROR_INVALID_REVIEW_OFFSET = "reviewOffset must be a non-negative integer";
 var ReviewService = class {
-  constructor(client) {
+  constructor(client, accessOptions) {
     this.client = client;
+    this.fullCustomerAccess = resolveAccessOptions(accessOptions).fullCustomerAccess;
   }
   client;
+  /** Whether reviewer PII (name/email) is requested. */
+  fullCustomerAccess;
   /**
    * Returns up to `reviewCount` reviews for an activity in **descending order
    * by review date (newest first)**, skipping the `reviewOffset` newest reviews
@@ -2387,7 +2438,7 @@ var ReviewService = class {
     const after = reviewOffset > 0 ? encodeCursor(reviewOffset - 1, reviewCount) : null;
     const body = await this.client.request(
       SALES_ENDPOINT,
-      REVIEWS_QUERY,
+      buildReviewsQuery(this.fullCustomerAccess),
       buildReviewsVariables({ activityId: productId, first: reviewCount, after })
     );
     const edges = body.data?.reviews?.edges ?? [];
@@ -2749,6 +2800,7 @@ function fromActivity(activity) {
     name: activity.name,
     type: activity.type,
     color: activity.colorHex || "",
+    currency: activity.currency || "",
     tickets: (activity.resourceOptions ?? []).map((option) => ({
       id: option.id,
       name: option.name
@@ -2767,6 +2819,7 @@ function fromItemOptionNodes(nodes) {
         name: node.item.name,
         type: ADD_ON_PRODUCT_TYPE,
         color: ADD_ON_COLOR,
+        currency: "",
         tickets: []
       };
       grouped.set(itemId, product);
@@ -2786,6 +2839,7 @@ var PRODUCTS_QUERY = `
       deletedAt
       type
       colorHex
+      currency
       resourceOptions {
         id
         name
@@ -3012,6 +3066,325 @@ var PromoCodeService = class {
   }
 };
 
+// src/internal/peek/pricing/pricing-queries.ts
+var CREATE_PRICING_ENGINE_MUTATION = `
+  mutation CreatePricingEngine($input: CreatePricingEngineInput!) {
+    createPricingEngine(input: $input) {
+      __typename
+      ... on CreatePricingEngineSuccess {
+        engine {
+          id
+        }
+      }
+      ... on InvalidDataError {
+        message
+      }
+    }
+  }
+`;
+var UPDATE_PRICING_ENGINE_MUTATION = `
+  mutation UpdatePricingEngine($input: UpdatePricingEngineInput!) {
+    updatePricingEngine(input: $input) {
+      __typename
+      ... on UpdatePricingEngineSuccess {
+        engine {
+          id
+          name
+        }
+      }
+      ... on InvalidDataError {
+        message
+      }
+      ... on NotFoundError {
+        id
+        message
+      }
+    }
+  }
+`;
+var DELETE_PRICING_ENGINE_MUTATION = `
+  mutation DeletePricingEngine($id: ID!) {
+    deletePricingEngine(id: $id) {
+      __typename
+      ... on DeletePricingEngineSuccess {
+        engine {
+          id
+          name
+        }
+      }
+      ... on NotFoundError {
+        id
+        message
+      }
+    }
+  }
+`;
+var UPSERT_PRICING_OVERRIDES_MUTATION = `
+  mutation UpsertPricingOverridesActivityContexts($input: UpsertPricingOverridesActivityContextsInput!) {
+    upsertPricingOverridesActivityContexts(input: $input) {
+      __typename
+      ... on UpsertPricingOverridesActivityContextsSuccess {
+        activityContexts {
+          date
+          activity {
+            id
+            name
+          }
+          engine {
+            id
+            name
+          }
+          overrides {
+            order
+            resourceOptions {
+              resourceOption {
+                id
+                name
+              }
+              override {
+                ... on PricingOverridesActivityContextResourceOptionPriceOverride {
+                  price {
+                    amount
+                    currency
+                  }
+                }
+                ... on PricingOverridesActivityContextResourceOptionPercentageAdjustmentOverride {
+                  percentageAdjustment
+                }
+              }
+            }
+            filters {
+              __typename
+              ... on PricingOverridesActivityContextStartTimeRangeFilter {
+                startTimeRange
+              }
+              ... on PricingOverridesActivityContextSpotsTakenFilter {
+                minSpots
+                maxSpots
+              }
+            }
+          }
+        }
+      }
+      ... on InvalidDataError {
+        message
+      }
+    }
+  }
+`;
+var SPOTS_TAKEN_FILTER_TYPENAME = "PricingOverridesActivityContextSpotsTakenFilter";
+function buildCreateEngineInput(input) {
+  const activityIds = input.activityIds ?? [];
+  return activityIds.length > 0 ? { name: input.name, filters: [{ activityIds }] } : { name: input.name };
+}
+function buildUpdateEngineInput(input) {
+  const activityIds = input.activityIds ?? [];
+  return {
+    id: input.engineId,
+    name: input.name,
+    filters: activityIds.length > 0 ? [{ activityIds }] : []
+  };
+}
+function buildUpsertInput(input) {
+  return {
+    engineId: input.engineId,
+    dateRange: input.dateRange,
+    activities: input.activities.map((activity) => ({
+      activityId: activity.activityId,
+      overrides: activity.overrides.map((override) => ({
+        order: override.order,
+        resourceOptions: override.resourceOptions.map(
+          (option) => option.mode === "fixed" ? { id: option.id, price: option.price } : { id: option.id, percentageAdjustment: option.percentageAdjustment }
+        ),
+        filters: override.filters
+      }))
+    }))
+  };
+}
+function buildClearInput(input) {
+  return {
+    engineId: input.engineId,
+    dateRange: input.dateRange,
+    activities: input.activityIds.map((activityId) => ({
+      activityId,
+      overrides: []
+    }))
+  };
+}
+
+// src/internal/peek/pricing/pricing-converter.ts
+function fromActivityContexts(contexts) {
+  return contexts.map(fromActivityContext);
+}
+function fromActivityContext(context) {
+  return {
+    date: context.date,
+    activity: { id: context.activity.id, name: context.activity.name },
+    engine: { id: context.engine.id, name: context.engine.name },
+    overrides: context.overrides.map(fromOverride)
+  };
+}
+function fromOverride(override) {
+  return {
+    order: override.order,
+    resourceOptions: override.resourceOptions.map(fromResourceOption),
+    filters: override.filters.map(fromFilter)
+  };
+}
+function fromResourceOption(option) {
+  return {
+    resourceOption: {
+      id: option.resourceOption.id,
+      name: option.resourceOption.name
+    },
+    override: fromResolvedOverride(option.override)
+  };
+}
+function fromResolvedOverride(override) {
+  return "price" in override ? { mode: "fixed", price: override.price } : { mode: "percentage", percentageAdjustment: override.percentageAdjustment };
+}
+function fromFilter(filter) {
+  if (filter.__typename === SPOTS_TAKEN_FILTER_TYPENAME) {
+    const spotsTaken = {};
+    if (filter.minSpots !== null) spotsTaken.minSpots = filter.minSpots;
+    if (filter.maxSpots !== null) spotsTaken.maxSpots = filter.maxSpots;
+    return { spotsTaken };
+  }
+  return { startTimeRange: filter.startTimeRange };
+}
+
+// src/internal/peek/pricing/pricing-service.ts
+var CURRENCY_PATTERN2 = /^[A-Z]{3}$/;
+var PERCENTAGE_FLOOR = -100;
+var ERROR_NAME_REQUIRED = "name is required";
+var ERROR_ENGINE_ID_REQUIRED = "engineId is required";
+var ERROR_DATE_RANGE_REQUIRED = "dateRange is required";
+var ERROR_ACTIVITIES_REQUIRED = "activities is required";
+var ERROR_ACTIVITY_ID_REQUIRED = "activityId is required";
+var ERROR_TICKET_ID_REQUIRED = "resource-option id is required";
+var ERROR_CURRENCY_FORMAT = "currency must be 3 uppercase letters";
+var ERROR_AMOUNT_NUMBER = "price amount must be a valid number";
+var ERROR_PERCENTAGE_NUMBER = "percentageAdjustment must be a valid number";
+var ERROR_PERCENTAGE_FLOOR = "percentageAdjustment must be greater than -100";
+var ERROR_NO_DATA = "pricing mutation returned no data";
+var PricingService = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  /**
+   * Creates a pricing engine. Store the returned id and reuse it on every
+   * subsequent override upsert. Throws on an InvalidDataError from Peek.
+   */
+  async createEngine(input) {
+    if (!input.name) throw new Error(ERROR_NAME_REQUIRED);
+    const body = await this.client.request(
+      SALES_ENDPOINT,
+      CREATE_PRICING_ENGINE_MUTATION,
+      { input: buildCreateEngineInput(input) }
+    );
+    const result = body.data?.createPricingEngine;
+    if (!result) throw new Error(ERROR_NO_DATA);
+    if (result.__typename !== "CreatePricingEngineSuccess") {
+      throw new Error(result.message);
+    }
+    return { id: result.engine.id };
+  }
+  /**
+   * Updates a pricing engine's name and/or activity scope. Throws on an
+   * InvalidDataError or NotFoundError from Peek.
+   */
+  async updateEngine(input) {
+    if (!input.engineId) throw new Error(ERROR_ENGINE_ID_REQUIRED);
+    if (!input.name) throw new Error(ERROR_NAME_REQUIRED);
+    const body = await this.client.request(
+      SALES_ENDPOINT,
+      UPDATE_PRICING_ENGINE_MUTATION,
+      { input: buildUpdateEngineInput(input) }
+    );
+    const result = body.data?.updatePricingEngine;
+    if (!result) throw new Error(ERROR_NO_DATA);
+    if (result.__typename !== "UpdatePricingEngineSuccess") {
+      throw new Error(result.message);
+    }
+    return { id: result.engine.id, name: result.engine.name };
+  }
+  /**
+   * Deletes a pricing engine. Idempotent — resolves whether the engine existed
+   * or was already gone (Peek's NotFoundError is treated as success).
+   */
+  async deleteEngine(engineId) {
+    if (!engineId) throw new Error(ERROR_ENGINE_ID_REQUIRED);
+    await this.client.request(
+      SALES_ENDPOINT,
+      DELETE_PRICING_ENGINE_MUTATION,
+      { id: engineId }
+    );
+  }
+  /**
+   * Upserts pricing overrides for the engine and date range in `input`. Returns
+   * the resolved contexts Peek stored. Throws on an InvalidDataError from Peek.
+   */
+  async upsertOverrides(input) {
+    this.validateUpsertInput(input);
+    return this.sendUpsert(buildUpsertInput(input));
+  }
+  /**
+   * Clears all overrides for the given activities across a date range. This is
+   * an upsert with empty overrides — never clear by omitting an activity.
+   */
+  async clearOverrides(input) {
+    if (!input.engineId) throw new Error(ERROR_ENGINE_ID_REQUIRED);
+    if (!input.dateRange) throw new Error(ERROR_DATE_RANGE_REQUIRED);
+    if (!Array.isArray(input.activityIds)) throw new Error(ERROR_ACTIVITIES_REQUIRED);
+    for (const activityId of input.activityIds) {
+      if (!activityId) throw new Error(ERROR_ACTIVITY_ID_REQUIRED);
+    }
+    return this.sendUpsert(buildClearInput(input));
+  }
+  async sendUpsert(rawInput) {
+    const body = await this.client.request(
+      SALES_ENDPOINT,
+      UPSERT_PRICING_OVERRIDES_MUTATION,
+      { input: rawInput }
+    );
+    const result = body.data?.upsertPricingOverridesActivityContexts;
+    if (!result) throw new Error(ERROR_NO_DATA);
+    if (result.__typename !== "UpsertPricingOverridesActivityContextsSuccess") {
+      throw new Error(result.message);
+    }
+    return { activityContexts: fromActivityContexts(result.activityContexts) };
+  }
+  validateUpsertInput(input) {
+    if (!input.engineId) throw new Error(ERROR_ENGINE_ID_REQUIRED);
+    if (!input.dateRange) throw new Error(ERROR_DATE_RANGE_REQUIRED);
+    if (!Array.isArray(input.activities)) throw new Error(ERROR_ACTIVITIES_REQUIRED);
+    for (const activity of input.activities) {
+      if (!activity.activityId) throw new Error(ERROR_ACTIVITY_ID_REQUIRED);
+      for (const override of activity.overrides) {
+        for (const option of override.resourceOptions) {
+          this.validateResourceOption(option);
+        }
+      }
+    }
+  }
+  validateResourceOption(option) {
+    if (!option.id) throw new Error(ERROR_TICKET_ID_REQUIRED);
+    if (option.mode === "fixed") {
+      if (!CURRENCY_PATTERN2.test(option.price.currency)) {
+        throw new Error(ERROR_CURRENCY_FORMAT);
+      }
+      if (Number.isNaN(Number.parseFloat(option.price.amount))) {
+        throw new Error(ERROR_AMOUNT_NUMBER);
+      }
+      return;
+    }
+    const percentage = Number.parseFloat(option.percentageAdjustment);
+    if (Number.isNaN(percentage)) throw new Error(ERROR_PERCENTAGE_NUMBER);
+    if (percentage <= PERCENTAGE_FLOOR) throw new Error(ERROR_PERCENTAGE_FLOOR);
+  }
+};
+
 // src/logger.ts
 var noopLogger = {
   info() {
@@ -3029,6 +3402,7 @@ var PEEK_TOKEN_ISSUER = "app_registry_v2";
 var PeekAccessService = class {
   client;
   productServiceOptions;
+  accessOptions;
   jwtSecret;
   productService;
   accountUserService;
@@ -3036,6 +3410,7 @@ var PeekAccessService = class {
   timeslotService;
   resellerService;
   promoCodeService;
+  pricingService;
   dailyNoteService;
   availabilityService;
   membershipService;
@@ -3065,6 +3440,7 @@ var PeekAccessService = class {
     this.productServiceOptions = {
       itemOptionsPageSize: config.itemOptionsPageSize
     };
+    this.accessOptions = resolveAccessOptions(config.accessOptions);
   }
   /**
    * Verifies a Peek auth token issued by the app registry and returns the
@@ -3169,6 +3545,16 @@ var PeekAccessService = class {
     }
     return this.promoCodeService;
   }
+  /**
+   * Returns the {@link PricingService} for this install, bound to the shared
+   * authenticated transport. The instance is created lazily and reused.
+   */
+  getPricingService() {
+    if (!this.pricingService) {
+      this.pricingService = new PricingService(this.client);
+    }
+    return this.pricingService;
+  }
   /**
    * Returns the {@link DailyNoteService} for this install, bound to the shared
    * authenticated transport. The instance is created lazily and reused.
@@ -3205,9 +3591,11 @@ var PeekAccessService = class {
    */
   getBookingService() {
     if (!this.bookingService) {
-      this.bookingService = new BookingService(this.client, {
-        productService: this.getProductService()
-      });
+      this.bookingService = new BookingService(
+        this.client,
+        { productService: this.getProductService() },
+        { accessOptions: this.accessOptions }
+      );
     }
     return this.bookingService;
   }
@@ -3217,7 +3605,7 @@ var PeekAccessService = class {
    */
   getReviewService() {
     if (!this.reviewService) {
-      this.reviewService = new ReviewService(this.client);
+      this.reviewService = new ReviewService(this.client, this.accessOptions);
     }
     return this.reviewService;
   }
@@ -3287,6 +3675,27 @@ var PeekAccessService = class {
   createPromoCode(input) {
     return this.getPromoCodeService().create(input);
   }
+  // ─── Pricing short-forms ──────────────────────────────────────────────────
+  /** Create a pricing engine. Delegates to {@link PricingService.createEngine}. */
+  createPricingEngine(input) {
+    return this.getPricingService().createEngine(input);
+  }
+  /** Update a pricing engine. Delegates to {@link PricingService.updateEngine}. */
+  updatePricingEngine(input) {
+    return this.getPricingService().updateEngine(input);
+  }
+  /** Delete a pricing engine (idempotent). Delegates to {@link PricingService.deleteEngine}. */
+  deletePricingEngine(engineId) {
+    return this.getPricingService().deleteEngine(engineId);
+  }
+  /** Upsert pricing overrides. Delegates to {@link PricingService.upsertOverrides}. */
+  upsertPricingOverrides(input) {
+    return this.getPricingService().upsertOverrides(input);
+  }
+  /** Clear pricing overrides for a set of activities. Delegates to {@link PricingService.clearOverrides}. */
+  clearPricingOverrides(input) {
+    return this.getPricingService().clearOverrides(input);
+  }
   // ─── Daily-note short-forms ───────────────────────────────────────────────
   /** Today's daily note. Delegates to {@link DailyNoteService.getToday}. */
   getDailyNoteToday() {
@@ -3710,8 +4119,13 @@ function hasPriceBreakdown(node) {
 
 // src/internal/peek/waivers/waiver-webhook.ts
 var PAYLOAD_WAIVER_KEY = "waiver";
-function parseWaiverWebhook(payload) {
-  return fromWaiverNode(extractWaiverNode(payload));
+function parseWaiverWebhook(payload, options) {
+  const waiver = fromWaiverNode(extractWaiverNode(payload));
+  if (!resolveAccessOptions(options).fullCustomerAccess) {
+    waiver.guestName = null;
+    waiver.fileUrl = "";
+  }
+  return waiver;
 }
 function fromWaiverNode(node) {
   const data = node ?? {};
@@ -3759,6 +4173,8 @@ exports.DailyNoteService = DailyNoteService;
 exports.MembershipService = MembershipService;
 exports.PeekAccessService = PeekAccessService;
 exports.PeekGraphQLError = PeekGraphQLError;
+exports.PiiAccessDisabledError = PiiAccessDisabledError;
+exports.PricingService = PricingService;
 exports.ProductService = ProductService;
 exports.PromoCodeService = PromoCodeService;
 exports.RENTAL_PRODUCT_TYPE = RENTAL_PRODUCT_TYPE;