@peektravel/app-utilities 0.7.2 → 0.7.4

package/README.md

@@ -124,10 +124,12 @@ Two kinds of failures surface as exceptions:
 - `PiiAccessDisabledError` — a payment / booking-modification operation was
   called on an access service created without `fullCustomerAccess` (see [Access options
   / PII](#access-options--pii)). Carries `.operation` (the blocked method name).
-- `InvalidPeekTokenError` — `verifyPeekAuthToken` (or `parseInstallWebhook` /
-  `verifyInstallWebhook`)
-  received a token whose signature is valid but whose `user` block has no `id`.
-  Carries `.field` (`"user.id"`). Thrown alongside the `jsonwebtoken` errors.
+
+Once a token's signature verifies, claim *extraction* never throws: the whole
+`user` block may be absent (`claims.user === null`) and every field inside it is
+independently nullable, with a sentinel value (`""` or `"null"`) normalized to
+`null`. `user.id` is the signed-in person's own id — not an account or partner
+id — so its absence is not an error.
 
 **Plain `Error` validation/precondition failures** thrown by the service layer
 *before* any network call — e.g. an empty config field, a `bookingId` that
@@ -306,8 +308,7 @@ signed `app_registry_v2` JWT plus a JSON body. Peek sends the token in the
 `x-peek-auth` header — pass that value straight in (`token` accepts it with or
 without a `Bearer ` prefix). It validates the HMAC signature,
 expiry, issuer, and `"Joken"` audience (the same checks as `verifyPeekAuthToken`,
-throwing the underlying `jsonwebtoken` error — or `InvalidPeekTokenError` when a
-present `user` block has no `id`), then returns one flat, JSON-safe
+throwing the underlying `jsonwebtoken` error), then returns one flat, JSON-safe
 `InstallWebhook`: `installId`, `accountId` (**also called the partner ID**),
 `accountName`, `platform`, `isTest`, `timezone`, `apiUrl`, `status`, `rawStatus`,
 `displayVersion`, and a **nullable** `user`. The **JSON body is the source of the
@@ -373,6 +374,23 @@ attribute. Exported classes/types and helpers (`iconSvg`, `registerIcon`,
 `portal`, `position`, `toast`) are available from `@peektravel/app-utilities/ui`
 for subclassing or typing.
 
+### Lazy registration & avoiding a flash of raw text
+
+Registration is a side effect and **idempotent** — importing `/ui` twice (or from
+two bundles) never throws. If you register lazily (a dynamic `import()`), two
+things keep un-upgraded elements from flashing as their raw text: `odyssey.css`
+ships a `:not(:defined) { visibility: hidden }` guard (load the CSS eagerly for it
+to apply before first paint), and `whenOdysseyReady()` resolves once every
+imported element has upgraded, so you can gate your first render on it:
+
+```ts
+import { whenOdysseyReady } from '@peektravel/app-utilities/ui';
+await whenOdysseyReady();
+```
+
+A failed dynamic import still rejects at the `import()` call site — handle load
+failures there.
+
 ### Using the components from React 19
 
 React 19 sets JSX props on a custom element as DOM **properties**

package/dist/index.cjs

@@ -247,15 +247,6 @@ var PeekHttpError = class extends Error {
     this.body = body;
   }
 };
-var InvalidPeekTokenError = class extends Error {
-  /** The token field that was missing or empty (e.g. `"user.id"`). */
-  field;
-  constructor(field) {
-    super(`Peek token is missing required field "${field}"`);
-    this.name = "InvalidPeekTokenError";
-    this.field = field;
-  }
-};
 var PiiAccessDisabledError = class extends Error {
   /** The name of the operation that was blocked (e.g. `"makePayment"`). */
   operation;
@@ -2060,6 +2051,11 @@ var GraphQLClient = class {
     return headers;
   }
 };
+
+// src/models/peek/auth-token.ts
+var PEEK_PLATFORMS = ["peek", "cng", "acme"];
+
+// src/internal/peek/peek-auth-token.ts
 var PEEK_TOKEN_ISSUER = "app_registry_v2";
 var PEEK_TOKEN_AUDIENCE = "Joken";
 var BEARER_PREFIX = "bearer ";
@@ -2067,6 +2063,16 @@ function stripBearer(token) {
   const trimmed = token.trim();
   return trimmed.toLowerCase().startsWith(BEARER_PREFIX) ? trimmed.slice(BEARER_PREFIX.length).trim() : trimmed;
 }
+var NULLISH_STRINGS = /* @__PURE__ */ new Set(["", "null"]);
+function cleanTokenString(value) {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return NULLISH_STRINGS.has(trimmed.toLowerCase()) ? null : trimmed;
+}
+function cleanTokenPlatform(value) {
+  const cleaned = cleanTokenString(value);
+  return cleaned !== null && PEEK_PLATFORMS.includes(cleaned) ? cleaned : null;
+}
 function verifyPeekJwt(token, secret) {
   return jwt__namespace.verify(stripBearer(token), secret, {
     issuer: PEEK_TOKEN_ISSUER,
@@ -2074,16 +2080,14 @@ function verifyPeekJwt(token, secret) {
   });
 }
 function mapPeekTokenUser(u) {
-  if (!u.id) {
-    throw new InvalidPeekTokenError("user.id");
-  }
+  if (!u) return null;
   return {
-    email: u.email,
-    id: u.id,
-    isAdmin: u.is_admin,
-    locale: u.locale,
-    name: u.name,
-    platform: u.platform
+    email: cleanTokenString(u.email),
+    id: cleanTokenString(u.id),
+    isAdmin: typeof u.is_admin === "boolean" ? u.is_admin : null,
+    locale: cleanTokenString(u.locale),
+    name: cleanTokenString(u.name),
+    platform: cleanTokenPlatform(u.platform)
   };
 }
 
@@ -3603,13 +3607,15 @@ var PeekAccessService = class {
    *   malformed
    * - `TokenExpiredError` — past `exp`
    * - `NotBeforeError` — before `nbf`
-   * - `InvalidPeekTokenError` — signature valid but the `user` block is missing
-   *   its `id`
+   *
+   * Claim *extraction* is defensive: once the signature verifies, a token with
+   * no `user` block yields `claims.user === null`, and any individual user field
+   * that is absent or a sentinel (`""`, `"null"`) is normalized to `null`. This
+   * method never throws on a shape problem — only on a verification failure.
    *
    * @throws {JsonWebTokenError} signature invalid or token malformed
    * @throws {TokenExpiredError} token has expired
    * @throws {NotBeforeError} token not yet valid
-   * @throws {InvalidPeekTokenError} verified token has no `user.id`
    */
   verifyPeekAuthToken(token) {
     const payload = verifyPeekJwt(token, this.jwtSecret);
@@ -4303,9 +4309,6 @@ function extractWaiverNode(payload) {
   return record;
 }
 
-// src/models/peek/auth-token.ts
-var PEEK_PLATFORMS = ["peek", "cng", "acme"];
-
 // src/models/peek/install.ts
 var INSTALL_STATUSES = [
   "installed",
@@ -4354,8 +4357,8 @@ function parseInstallWebhook(token, body, secret) {
   };
 }
 function resolveInstallUser(bodyUser, tokenUser) {
-  if (bodyUser?.id) return mapPeekTokenUser(bodyUser);
-  return tokenUser ? mapPeekTokenUser(tokenUser) : null;
+  if (cleanTokenString(bodyUser?.id) !== null) return mapPeekTokenUser(bodyUser);
+  return mapPeekTokenUser(tokenUser);
 }
 function verifyInstallWebhook(token, secret) {
   const payload = verifyPeekJwt(token, secret);
@@ -4364,7 +4367,7 @@ function verifyInstallWebhook(token, secret) {
     account: { id: payload.account?.id ?? "" },
     status: payload.status ?? "",
     displayVersion: payload.display_version ?? "",
-    user: payload.user ? mapPeekTokenUser(payload.user) : null
+    user: mapPeekTokenUser(payload.user)
   };
 }
 
@@ -4382,7 +4385,6 @@ exports.CngApiError = CngApiError;
 exports.CngProductService = CngProductService;
 exports.DailyNoteService = DailyNoteService;
 exports.INSTALL_STATUSES = INSTALL_STATUSES;
-exports.InvalidPeekTokenError = InvalidPeekTokenError;
 exports.MembershipService = MembershipService;
 exports.PeekAccessService = PeekAccessService;
 exports.PeekGraphQLError = PeekGraphQLError;