@peektravel/app-utilities 0.7.2 → 0.7.3

package/dist/index.d.cts

@@ -1833,20 +1833,34 @@ declare const PEEK_PLATFORMS: readonly ["peek", "cng", "acme"];
  * claim is the single thing that identifies which platform a request came from.
  */
 type PeekPlatform = (typeof PEEK_PLATFORMS)[number];
-/** User context embedded in a Peek auth token. */
+/**
+ * User context embedded in a Peek auth token.
+ *
+ * Every field is nullable: the token is untrusted even after its signature
+ * verifies, so a claim may be absent, `null`, or a sentinel (`""`, `"null"`)
+ * that this package normalizes to `null`. Never assume a field is populated —
+ * always null-check.
+ */
 interface PeekAuthTokenUser {
-    /** User's email address. */
-    email: string;
-    /** User's Peek account ID */
-    id: string;
-    /** Whether the user has admin privileges. */
-    isAdmin: boolean;
-    /** User's locale (e.g. `"en"`). */
-    locale: string;
-    /** User's display name. */
-    name: string;
-    /** Which platform embedded the app for this session. */
-    platform: PeekPlatform;
+    /** User's email address, or `null` if the token omits it. */
+    email: string | null;
+    /**
+     * The user's own Peek user ID — it identifies the signed-in person, **not**
+     * the account or partner they belong to. Use it only to key the user; never
+     * treat it as an account/partner id. `null` when the token omits it.
+     */
+    id: string | null;
+    /** Whether the user has admin privileges, or `null` if the token omits it. */
+    isAdmin: boolean | null;
+    /** User's locale (e.g. `"en"`), or `null` if the token omits it. */
+    locale: string | null;
+    /** User's display name, or `null` if the token omits it. */
+    name: string | null;
+    /**
+     * Which platform embedded the app for this session, or `null` when the token
+     * omits it or reports one this version of the package doesn't recognize.
+     */
+    platform: PeekPlatform | null;
 }
 /** Claims returned by {@link PeekAccessService.verifyPeekAuthToken}. */
 interface PeekAuthTokenClaims {
@@ -1854,8 +1868,11 @@ interface PeekAuthTokenClaims {
     installId: string;
     /** App display version at time of issuance. */
     displayVersion: string;
-    /** Authenticated user context. */
-    user: PeekAuthTokenUser;
+    /**
+     * Authenticated user context, or `null` when the token carries no `user`
+     * block. Do not assume a session token always names a user.
+     */
+    user: PeekAuthTokenUser | null;
 }
 /** The Peek account an install belongs to, as reported on an install webhook. */
 interface InstallWebhookAccount {
@@ -1965,13 +1982,15 @@ declare class PeekAccessService {
      *   malformed
      * - `TokenExpiredError` — past `exp`
      * - `NotBeforeError` — before `nbf`
-     * - `InvalidPeekTokenError` — signature valid but the `user` block is missing
-     *   its `id`
+     *
+     * Claim *extraction* is defensive: once the signature verifies, a token with
+     * no `user` block yields `claims.user === null`, and any individual user field
+     * that is absent or a sentinel (`""`, `"null"`) is normalized to `null`. This
+     * method never throws on a shape problem — only on a verification failure.
      *
      * @throws {JsonWebTokenError} signature invalid or token malformed
      * @throws {TokenExpiredError} token has expired
      * @throws {NotBeforeError} token not yet valid
-     * @throws {InvalidPeekTokenError} verified token has no `user.id`
      */
     verifyPeekAuthToken(token: string): PeekAuthTokenClaims;
     /**
@@ -2777,19 +2796,6 @@ declare class PeekHttpError extends Error {
     readonly body: unknown;
     constructor(statusCode: number, url: string, body: unknown, message?: string);
 }
-/**
- * Thrown when an `app_registry_v2` token passes signature/issuer/audience
- * verification but its `user` block is missing a required `id`. The signature is
- * authentic, so this signals a structurally malformed token from the app
- * registry rather than a forged one — distinct from the `jsonwebtoken`
- * `JsonWebTokenError` family. The offending field is preserved on
- * {@link InvalidPeekTokenError.field}.
- */
-declare class InvalidPeekTokenError extends Error {
-    /** The token field that was missing or empty (e.g. `"user.id"`). */
-    readonly field: string;
-    constructor(field: string);
-}
 /**
  * Thrown when a payment or booking-modification operation is called on an
  * access service that was constructed without `fullCustomerAccess` (PII access
@@ -2830,4 +2836,4 @@ declare class AcmeApiError extends Error {
     constructor(statusCode: number, body: unknown, message?: string);
 }
 
-export { ACTIVITY_PRODUCT_TYPE, ADD_ON_PRODUCT_TYPE, type AccessOptions, type AccountUser, AccountUserService, type AccountUserServiceOptions, AcmeAccessService, type AcmeAccessServiceConfig, type AcmeActivity, type AcmeActivityTicket, AcmeApiError, AcmeProductService, type Activity, type ActivityOverrides, type ActivityTicket, type AddAddonInput, AdminAccountRequiredError, type Agent, type AssignGuideResult, type AssignedActivity, type AssignedResource, type Availability, AvailabilityService, type AvailabilityTime, type AvailabilityTimesQuery, type Booking, type BookingAddon, type BookingAddonMoney, type BookingAddonOption, type BookingAddons, type BookingAddonsMutationResult, type BookingPaymentsOnFile, type BookingReadOptions, type BookingSearchBy, BookingService, type BookingServiceOptions, type BookingTimeRangeSearch, type CancelBookingResult, type Channel, type ClearOverridesInput, CngAccessService, type CngAccessServiceConfig, CngApiError, CngProductService, type CreateBookingGuest, type CreateBookingInput, type CreateBookingTicket, type CreateEngineInput, type CreatePromoCodeInput, type CreatedBooking, type CreatedPricingEngine, type CreatedPromoCode, type CustomQuestionAnswer, type DailyNote, DailyNoteService, type Duration, type Guest, type GuestMetadata, type Guide, type GuideAssignment, INSTALL_STATUSES, type InstallAccessConfig, type InstallAccessService, type InstallAccessTarget, type InstallStatus, type InstallWebhook, type InstallWebhookAccount, type InstallWebhookClaims, InvalidPeekTokenError, type InvoiceLinkResult, type Logger, type MakePaymentInput, type MakePaymentResult, type Membership, type MembershipPurchaseInput, MembershipService, type NoteMode, type Payment, type PaymentSource, PeekAccessService, type PeekAccessServiceConfig, type PeekAuthTokenClaims, type PeekAuthTokenUser, PeekGraphQLError, PeekHttpError, type PeekPlatform, PiiAccessDisabledError, type Price, type PricingActivityContext, type PricingEngine, type PricingMoney, type PricingNamedRef, type PricingOverride, type PricingOverrideFilter, PricingService, type Product, type ProductMeetingLocation, ProductService, type ProductServiceOptions, type ProductTicket, type PromoCode, type PromoCodeFixedAmount, PromoCodeService, type PromoCodeServiceOptions, type PurchasedMembership, RENTAL_PRODUCT_TYPE, RateLimitError, type RefundInput, type RefundResult, ResellerService, type ResolvedOverride, type ResolvedPricingOverride, type ResolvedResourceOption, type Resource, type ResourceOptionOverride, type ResourceOptionQuantity, type ResourcePool, type ResourcePoolAccountUser, type ResourcePoolAssignment, type ResourcePoolMode, ResourcePoolService, type Review, ReviewService, type Ticket, type Timeslot, type TimeslotFilter, TimeslotService, type UpdateEngineInput, type UpdateTimeslotResult, type UpsertOverridesInput, type UpsertOverridesResult, type Waiver, createAccessServiceForInstall, noopLogger, parseBookingWebhook, parseInstallWebhook, parseWaiverWebhook, verifyInstallWebhook };
+export { ACTIVITY_PRODUCT_TYPE, ADD_ON_PRODUCT_TYPE, type AccessOptions, type AccountUser, AccountUserService, type AccountUserServiceOptions, AcmeAccessService, type AcmeAccessServiceConfig, type AcmeActivity, type AcmeActivityTicket, AcmeApiError, AcmeProductService, type Activity, type ActivityOverrides, type ActivityTicket, type AddAddonInput, AdminAccountRequiredError, type Agent, type AssignGuideResult, type AssignedActivity, type AssignedResource, type Availability, AvailabilityService, type AvailabilityTime, type AvailabilityTimesQuery, type Booking, type BookingAddon, type BookingAddonMoney, type BookingAddonOption, type BookingAddons, type BookingAddonsMutationResult, type BookingPaymentsOnFile, type BookingReadOptions, type BookingSearchBy, BookingService, type BookingServiceOptions, type BookingTimeRangeSearch, type CancelBookingResult, type Channel, type ClearOverridesInput, CngAccessService, type CngAccessServiceConfig, CngApiError, CngProductService, type CreateBookingGuest, type CreateBookingInput, type CreateBookingTicket, type CreateEngineInput, type CreatePromoCodeInput, type CreatedBooking, type CreatedPricingEngine, type CreatedPromoCode, type CustomQuestionAnswer, type DailyNote, DailyNoteService, type Duration, type Guest, type GuestMetadata, type Guide, type GuideAssignment, INSTALL_STATUSES, type InstallAccessConfig, type InstallAccessService, type InstallAccessTarget, type InstallStatus, type InstallWebhook, type InstallWebhookAccount, type InstallWebhookClaims, type InvoiceLinkResult, type Logger, type MakePaymentInput, type MakePaymentResult, type Membership, type MembershipPurchaseInput, MembershipService, type NoteMode, type Payment, type PaymentSource, PeekAccessService, type PeekAccessServiceConfig, type PeekAuthTokenClaims, type PeekAuthTokenUser, PeekGraphQLError, PeekHttpError, type PeekPlatform, PiiAccessDisabledError, type Price, type PricingActivityContext, type PricingEngine, type PricingMoney, type PricingNamedRef, type PricingOverride, type PricingOverrideFilter, PricingService, type Product, type ProductMeetingLocation, ProductService, type ProductServiceOptions, type ProductTicket, type PromoCode, type PromoCodeFixedAmount, PromoCodeService, type PromoCodeServiceOptions, type PurchasedMembership, RENTAL_PRODUCT_TYPE, RateLimitError, type RefundInput, type RefundResult, ResellerService, type ResolvedOverride, type ResolvedPricingOverride, type ResolvedResourceOption, type Resource, type ResourceOptionOverride, type ResourceOptionQuantity, type ResourcePool, type ResourcePoolAccountUser, type ResourcePoolAssignment, type ResourcePoolMode, ResourcePoolService, type Review, ReviewService, type Ticket, type Timeslot, type TimeslotFilter, TimeslotService, type UpdateEngineInput, type UpdateTimeslotResult, type UpsertOverridesInput, type UpsertOverridesResult, type Waiver, createAccessServiceForInstall, noopLogger, parseBookingWebhook, parseInstallWebhook, parseWaiverWebhook, verifyInstallWebhook };

package/dist/index.d.ts

@@ -1833,20 +1833,34 @@ declare const PEEK_PLATFORMS: readonly ["peek", "cng", "acme"];
  * claim is the single thing that identifies which platform a request came from.
  */
 type PeekPlatform = (typeof PEEK_PLATFORMS)[number];
-/** User context embedded in a Peek auth token. */
+/**
+ * User context embedded in a Peek auth token.
+ *
+ * Every field is nullable: the token is untrusted even after its signature
+ * verifies, so a claim may be absent, `null`, or a sentinel (`""`, `"null"`)
+ * that this package normalizes to `null`. Never assume a field is populated —
+ * always null-check.
+ */
 interface PeekAuthTokenUser {
-    /** User's email address. */
-    email: string;
-    /** User's Peek account ID */
-    id: string;
-    /** Whether the user has admin privileges. */
-    isAdmin: boolean;
-    /** User's locale (e.g. `"en"`). */
-    locale: string;
-    /** User's display name. */
-    name: string;
-    /** Which platform embedded the app for this session. */
-    platform: PeekPlatform;
+    /** User's email address, or `null` if the token omits it. */
+    email: string | null;
+    /**
+     * The user's own Peek user ID — it identifies the signed-in person, **not**
+     * the account or partner they belong to. Use it only to key the user; never
+     * treat it as an account/partner id. `null` when the token omits it.
+     */
+    id: string | null;
+    /** Whether the user has admin privileges, or `null` if the token omits it. */
+    isAdmin: boolean | null;
+    /** User's locale (e.g. `"en"`), or `null` if the token omits it. */
+    locale: string | null;
+    /** User's display name, or `null` if the token omits it. */
+    name: string | null;
+    /**
+     * Which platform embedded the app for this session, or `null` when the token
+     * omits it or reports one this version of the package doesn't recognize.
+     */
+    platform: PeekPlatform | null;
 }
 /** Claims returned by {@link PeekAccessService.verifyPeekAuthToken}. */
 interface PeekAuthTokenClaims {
@@ -1854,8 +1868,11 @@ interface PeekAuthTokenClaims {
     installId: string;
     /** App display version at time of issuance. */
     displayVersion: string;
-    /** Authenticated user context. */
-    user: PeekAuthTokenUser;
+    /**
+     * Authenticated user context, or `null` when the token carries no `user`
+     * block. Do not assume a session token always names a user.
+     */
+    user: PeekAuthTokenUser | null;
 }
 /** The Peek account an install belongs to, as reported on an install webhook. */
 interface InstallWebhookAccount {
@@ -1965,13 +1982,15 @@ declare class PeekAccessService {
      *   malformed
      * - `TokenExpiredError` — past `exp`
      * - `NotBeforeError` — before `nbf`
-     * - `InvalidPeekTokenError` — signature valid but the `user` block is missing
-     *   its `id`
+     *
+     * Claim *extraction* is defensive: once the signature verifies, a token with
+     * no `user` block yields `claims.user === null`, and any individual user field
+     * that is absent or a sentinel (`""`, `"null"`) is normalized to `null`. This
+     * method never throws on a shape problem — only on a verification failure.
      *
      * @throws {JsonWebTokenError} signature invalid or token malformed
      * @throws {TokenExpiredError} token has expired
      * @throws {NotBeforeError} token not yet valid
-     * @throws {InvalidPeekTokenError} verified token has no `user.id`
      */
     verifyPeekAuthToken(token: string): PeekAuthTokenClaims;
     /**
@@ -2777,19 +2796,6 @@ declare class PeekHttpError extends Error {
     readonly body: unknown;
     constructor(statusCode: number, url: string, body: unknown, message?: string);
 }
-/**
- * Thrown when an `app_registry_v2` token passes signature/issuer/audience
- * verification but its `user` block is missing a required `id`. The signature is
- * authentic, so this signals a structurally malformed token from the app
- * registry rather than a forged one — distinct from the `jsonwebtoken`
- * `JsonWebTokenError` family. The offending field is preserved on
- * {@link InvalidPeekTokenError.field}.
- */
-declare class InvalidPeekTokenError extends Error {
-    /** The token field that was missing or empty (e.g. `"user.id"`). */
-    readonly field: string;
-    constructor(field: string);
-}
 /**
  * Thrown when a payment or booking-modification operation is called on an
  * access service that was constructed without `fullCustomerAccess` (PII access
@@ -2830,4 +2836,4 @@ declare class AcmeApiError extends Error {
     constructor(statusCode: number, body: unknown, message?: string);
 }
 
-export { ACTIVITY_PRODUCT_TYPE, ADD_ON_PRODUCT_TYPE, type AccessOptions, type AccountUser, AccountUserService, type AccountUserServiceOptions, AcmeAccessService, type AcmeAccessServiceConfig, type AcmeActivity, type AcmeActivityTicket, AcmeApiError, AcmeProductService, type Activity, type ActivityOverrides, type ActivityTicket, type AddAddonInput, AdminAccountRequiredError, type Agent, type AssignGuideResult, type AssignedActivity, type AssignedResource, type Availability, AvailabilityService, type AvailabilityTime, type AvailabilityTimesQuery, type Booking, type BookingAddon, type BookingAddonMoney, type BookingAddonOption, type BookingAddons, type BookingAddonsMutationResult, type BookingPaymentsOnFile, type BookingReadOptions, type BookingSearchBy, BookingService, type BookingServiceOptions, type BookingTimeRangeSearch, type CancelBookingResult, type Channel, type ClearOverridesInput, CngAccessService, type CngAccessServiceConfig, CngApiError, CngProductService, type CreateBookingGuest, type CreateBookingInput, type CreateBookingTicket, type CreateEngineInput, type CreatePromoCodeInput, type CreatedBooking, type CreatedPricingEngine, type CreatedPromoCode, type CustomQuestionAnswer, type DailyNote, DailyNoteService, type Duration, type Guest, type GuestMetadata, type Guide, type GuideAssignment, INSTALL_STATUSES, type InstallAccessConfig, type InstallAccessService, type InstallAccessTarget, type InstallStatus, type InstallWebhook, type InstallWebhookAccount, type InstallWebhookClaims, InvalidPeekTokenError, type InvoiceLinkResult, type Logger, type MakePaymentInput, type MakePaymentResult, type Membership, type MembershipPurchaseInput, MembershipService, type NoteMode, type Payment, type PaymentSource, PeekAccessService, type PeekAccessServiceConfig, type PeekAuthTokenClaims, type PeekAuthTokenUser, PeekGraphQLError, PeekHttpError, type PeekPlatform, PiiAccessDisabledError, type Price, type PricingActivityContext, type PricingEngine, type PricingMoney, type PricingNamedRef, type PricingOverride, type PricingOverrideFilter, PricingService, type Product, type ProductMeetingLocation, ProductService, type ProductServiceOptions, type ProductTicket, type PromoCode, type PromoCodeFixedAmount, PromoCodeService, type PromoCodeServiceOptions, type PurchasedMembership, RENTAL_PRODUCT_TYPE, RateLimitError, type RefundInput, type RefundResult, ResellerService, type ResolvedOverride, type ResolvedPricingOverride, type ResolvedResourceOption, type Resource, type ResourceOptionOverride, type ResourceOptionQuantity, type ResourcePool, type ResourcePoolAccountUser, type ResourcePoolAssignment, type ResourcePoolMode, ResourcePoolService, type Review, ReviewService, type Ticket, type Timeslot, type TimeslotFilter, TimeslotService, type UpdateEngineInput, type UpdateTimeslotResult, type UpsertOverridesInput, type UpsertOverridesResult, type Waiver, createAccessServiceForInstall, noopLogger, parseBookingWebhook, parseInstallWebhook, parseWaiverWebhook, verifyInstallWebhook };
+export { ACTIVITY_PRODUCT_TYPE, ADD_ON_PRODUCT_TYPE, type AccessOptions, type AccountUser, AccountUserService, type AccountUserServiceOptions, AcmeAccessService, type AcmeAccessServiceConfig, type AcmeActivity, type AcmeActivityTicket, AcmeApiError, AcmeProductService, type Activity, type ActivityOverrides, type ActivityTicket, type AddAddonInput, AdminAccountRequiredError, type Agent, type AssignGuideResult, type AssignedActivity, type AssignedResource, type Availability, AvailabilityService, type AvailabilityTime, type AvailabilityTimesQuery, type Booking, type BookingAddon, type BookingAddonMoney, type BookingAddonOption, type BookingAddons, type BookingAddonsMutationResult, type BookingPaymentsOnFile, type BookingReadOptions, type BookingSearchBy, BookingService, type BookingServiceOptions, type BookingTimeRangeSearch, type CancelBookingResult, type Channel, type ClearOverridesInput, CngAccessService, type CngAccessServiceConfig, CngApiError, CngProductService, type CreateBookingGuest, type CreateBookingInput, type CreateBookingTicket, type CreateEngineInput, type CreatePromoCodeInput, type CreatedBooking, type CreatedPricingEngine, type CreatedPromoCode, type CustomQuestionAnswer, type DailyNote, DailyNoteService, type Duration, type Guest, type GuestMetadata, type Guide, type GuideAssignment, INSTALL_STATUSES, type InstallAccessConfig, type InstallAccessService, type InstallAccessTarget, type InstallStatus, type InstallWebhook, type InstallWebhookAccount, type InstallWebhookClaims, type InvoiceLinkResult, type Logger, type MakePaymentInput, type MakePaymentResult, type Membership, type MembershipPurchaseInput, MembershipService, type NoteMode, type Payment, type PaymentSource, PeekAccessService, type PeekAccessServiceConfig, type PeekAuthTokenClaims, type PeekAuthTokenUser, PeekGraphQLError, PeekHttpError, type PeekPlatform, PiiAccessDisabledError, type Price, type PricingActivityContext, type PricingEngine, type PricingMoney, type PricingNamedRef, type PricingOverride, type PricingOverrideFilter, PricingService, type Product, type ProductMeetingLocation, ProductService, type ProductServiceOptions, type ProductTicket, type PromoCode, type PromoCodeFixedAmount, PromoCodeService, type PromoCodeServiceOptions, type PurchasedMembership, RENTAL_PRODUCT_TYPE, RateLimitError, type RefundInput, type RefundResult, ResellerService, type ResolvedOverride, type ResolvedPricingOverride, type ResolvedResourceOption, type Resource, type ResourceOptionOverride, type ResourceOptionQuantity, type ResourcePool, type ResourcePoolAccountUser, type ResourcePoolAssignment, type ResourcePoolMode, ResourcePoolService, type Review, ReviewService, type Ticket, type Timeslot, type TimeslotFilter, TimeslotService, type UpdateEngineInput, type UpdateTimeslotResult, type UpsertOverridesInput, type UpsertOverridesResult, type Waiver, createAccessServiceForInstall, noopLogger, parseBookingWebhook, parseInstallWebhook, parseWaiverWebhook, verifyInstallWebhook };

package/dist/index.js

@@ -225,15 +225,6 @@ var PeekHttpError = class extends Error {
     this.body = body;
   }
 };
-var InvalidPeekTokenError = class extends Error {
-  /** The token field that was missing or empty (e.g. `"user.id"`). */
-  field;
-  constructor(field) {
-    super(`Peek token is missing required field "${field}"`);
-    this.name = "InvalidPeekTokenError";
-    this.field = field;
-  }
-};
 var PiiAccessDisabledError = class extends Error {
   /** The name of the operation that was blocked (e.g. `"makePayment"`). */
   operation;
@@ -2038,6 +2029,11 @@ var GraphQLClient = class {
     return headers;
   }
 };
+
+// src/models/peek/auth-token.ts
+var PEEK_PLATFORMS = ["peek", "cng", "acme"];
+
+// src/internal/peek/peek-auth-token.ts
 var PEEK_TOKEN_ISSUER = "app_registry_v2";
 var PEEK_TOKEN_AUDIENCE = "Joken";
 var BEARER_PREFIX = "bearer ";
@@ -2045,6 +2041,16 @@ function stripBearer(token) {
   const trimmed = token.trim();
   return trimmed.toLowerCase().startsWith(BEARER_PREFIX) ? trimmed.slice(BEARER_PREFIX.length).trim() : trimmed;
 }
+var NULLISH_STRINGS = /* @__PURE__ */ new Set(["", "null"]);
+function cleanTokenString(value) {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return NULLISH_STRINGS.has(trimmed.toLowerCase()) ? null : trimmed;
+}
+function cleanTokenPlatform(value) {
+  const cleaned = cleanTokenString(value);
+  return cleaned !== null && PEEK_PLATFORMS.includes(cleaned) ? cleaned : null;
+}
 function verifyPeekJwt(token, secret) {
   return jwt.verify(stripBearer(token), secret, {
     issuer: PEEK_TOKEN_ISSUER,
@@ -2052,16 +2058,14 @@ function verifyPeekJwt(token, secret) {
   });
 }
 function mapPeekTokenUser(u) {
-  if (!u.id) {
-    throw new InvalidPeekTokenError("user.id");
-  }
+  if (!u) return null;
   return {
-    email: u.email,
-    id: u.id,
-    isAdmin: u.is_admin,
-    locale: u.locale,
-    name: u.name,
-    platform: u.platform
+    email: cleanTokenString(u.email),
+    id: cleanTokenString(u.id),
+    isAdmin: typeof u.is_admin === "boolean" ? u.is_admin : null,
+    locale: cleanTokenString(u.locale),
+    name: cleanTokenString(u.name),
+    platform: cleanTokenPlatform(u.platform)
   };
 }
 
@@ -3581,13 +3585,15 @@ var PeekAccessService = class {
    *   malformed
    * - `TokenExpiredError` — past `exp`
    * - `NotBeforeError` — before `nbf`
-   * - `InvalidPeekTokenError` — signature valid but the `user` block is missing
-   *   its `id`
+   *
+   * Claim *extraction* is defensive: once the signature verifies, a token with
+   * no `user` block yields `claims.user === null`, and any individual user field
+   * that is absent or a sentinel (`""`, `"null"`) is normalized to `null`. This
+   * method never throws on a shape problem — only on a verification failure.
    *
    * @throws {JsonWebTokenError} signature invalid or token malformed
    * @throws {TokenExpiredError} token has expired
    * @throws {NotBeforeError} token not yet valid
-   * @throws {InvalidPeekTokenError} verified token has no `user.id`
    */
   verifyPeekAuthToken(token) {
     const payload = verifyPeekJwt(token, this.jwtSecret);
@@ -4281,9 +4287,6 @@ function extractWaiverNode(payload) {
   return record;
 }
 
-// src/models/peek/auth-token.ts
-var PEEK_PLATFORMS = ["peek", "cng", "acme"];
-
 // src/models/peek/install.ts
 var INSTALL_STATUSES = [
   "installed",
@@ -4332,8 +4335,8 @@ function parseInstallWebhook(token, body, secret) {
   };
 }
 function resolveInstallUser(bodyUser, tokenUser) {
-  if (bodyUser?.id) return mapPeekTokenUser(bodyUser);
-  return tokenUser ? mapPeekTokenUser(tokenUser) : null;
+  if (cleanTokenString(bodyUser?.id) !== null) return mapPeekTokenUser(bodyUser);
+  return mapPeekTokenUser(tokenUser);
 }
 function verifyInstallWebhook(token, secret) {
   const payload = verifyPeekJwt(token, secret);
@@ -4342,10 +4345,10 @@ function verifyInstallWebhook(token, secret) {
     account: { id: payload.account?.id ?? "" },
     status: payload.status ?? "",
     displayVersion: payload.display_version ?? "",
-    user: payload.user ? mapPeekTokenUser(payload.user) : null
+    user: mapPeekTokenUser(payload.user)
   };
 }
 
-export { ACTIVITY_PRODUCT_TYPE, ADD_ON_PRODUCT_TYPE, AccountUserService, AcmeAccessService, AcmeApiError, AcmeProductService, AdminAccountRequiredError, AvailabilityService, BookingService, CngAccessService, CngApiError, CngProductService, DailyNoteService, INSTALL_STATUSES, InvalidPeekTokenError, MembershipService, PeekAccessService, PeekGraphQLError, PeekHttpError, PiiAccessDisabledError, PricingService, ProductService, PromoCodeService, RENTAL_PRODUCT_TYPE, RateLimitError, ResellerService, ResourcePoolService, ReviewService, TimeslotService, createAccessServiceForInstall, noopLogger, parseBookingWebhook, parseInstallWebhook, parseWaiverWebhook, verifyInstallWebhook };
+export { ACTIVITY_PRODUCT_TYPE, ADD_ON_PRODUCT_TYPE, AccountUserService, AcmeAccessService, AcmeApiError, AcmeProductService, AdminAccountRequiredError, AvailabilityService, BookingService, CngAccessService, CngApiError, CngProductService, DailyNoteService, INSTALL_STATUSES, MembershipService, PeekAccessService, PeekGraphQLError, PeekHttpError, PiiAccessDisabledError, PricingService, ProductService, PromoCodeService, RENTAL_PRODUCT_TYPE, RateLimitError, ResellerService, ResourcePoolService, ReviewService, TimeslotService, createAccessServiceForInstall, noopLogger, parseBookingWebhook, parseInstallWebhook, parseWaiverWebhook, verifyInstallWebhook };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map