@peektravel/app-utilities 0.8.0 → 0.8.2

package/dist/index.cjs

@@ -207,6 +207,13 @@ function resolveAccessOptions(options) {
 }
 
 // src/errors.ts
+var FORBIDDEN_STATUS = 403;
+var PERMISSION_MESSAGE_PREFIX = "CNG request forbidden: the app is missing the required permission";
+var PERMISSION_MESSAGE_UNKNOWN = "CNG request forbidden: the app is missing a required permission";
+function buildPermissionMessage(permissions) {
+  if (permissions.length === 0) return PERMISSION_MESSAGE_UNKNOWN;
+  return `${PERMISSION_MESSAGE_PREFIX}${permissions.length > 1 ? "s" : ""}: ${permissions.join(", ")}`;
+}
 var AdminAccountRequiredError = class extends Error {
   /** The HTTP status that triggered this error. */
   statusCode = 418;
@@ -270,6 +277,23 @@ var CngApiError = class extends Error {
     this.body = body;
   }
 };
+var CngPermissionError = class extends Error {
+  /** The HTTP status that triggered this error. */
+  statusCode = FORBIDDEN_STATUS;
+  /**
+   * The permissions the gateway reported as missing, e.g. `["products:read"]`.
+   * Empty when the response body did not name any.
+   */
+  permissions;
+  /** The raw response body (parsed JSON when possible, otherwise text). */
+  body;
+  constructor(permissions, body, message) {
+    super(message ?? buildPermissionMessage(permissions));
+    this.name = "CngPermissionError";
+    this.permissions = permissions;
+    this.body = body;
+  }
+};
 var AcmeApiError = class extends Error {
   /** The HTTP status that triggered this error. */
   statusCode;
@@ -1081,6 +1105,7 @@ var errInvalidCheckbox = (v, id) => `Checkbox answer for question "${id}" must b
 var errUnknownOptionId = (v, id) => `No option matches id "${v}" for question "${id}"`;
 var errNoOptionMatch = (v, id) => `No option matches "${v}" for question "${id}"`;
 var errAmbiguousOption = (v, id) => `Option "${v}" matches more than one option for question "${id}"`;
+var errMissingRequired = (text, id) => `Custom question "${text}" (${id}) is required but was not answered`;
 function normalize(value) {
   return value.toLowerCase().replace(/[^a-z0-9]/g, "");
 }
@@ -1145,8 +1170,20 @@ function resolveOne(answer, questions) {
       throw new Error(errUnsupportedType(question.questionType, question.id));
   }
 }
-function resolveCustomQuestionAnswers(answers, questions) {
-  return answers.map((answer) => resolveOne(answer, questions));
+function resolveCustomQuestionAnswers(answers, questions, options) {
+  const resolved = answers.map((answer) => resolveOne(answer, questions));
+  if (options?.requireRequired) {
+    assertRequiredAnswered(resolved, questions);
+  }
+  return resolved;
+}
+function assertRequiredAnswered(resolved, questions) {
+  const answered = new Set(resolved.map((answer) => answer.questionId));
+  for (const question of questions) {
+    if (question.isRequired && !question.perGuest && !answered.has(question.id)) {
+      throw new Error(errMissingRequired(question.questionText, question.id));
+    }
+  }
 }
 
 // src/internal/peek/bookings/booking-service.ts
@@ -1663,8 +1700,9 @@ ${note}`;
    *
    * @throws {Error} when `activityId`, `availabilityTimeId`, a ticket
    * `resourceOptionId`/positive `quantity`, or the guest `name` is missing; when
-   * `markAsPaid` is set without an `idempotencyKey`; or when the quote/order
-   * mutations fail.
+   * `markAsPaid` is set without an `idempotencyKey`; when
+   * `requireRequiredQuestions` is set and a required custom question is left
+   * unanswered; or when the quote/order mutations fail.
    */
   async create(input) {
     validateCreateInput(input);
@@ -1744,15 +1782,22 @@ ${note}`;
    * against; throws on the first unmatched/ambiguous/invalid answer.
    */
   async buildQuestionAnswers(input) {
-    const answers = input.customQuestionAnswers;
-    if (!answers || answers.length === 0) {
+    const answers = input.customQuestionAnswers ?? [];
+    const requireRequired = input.requireRequiredQuestions ?? false;
+    if (answers.length === 0 && !requireRequired) {
       return null;
     }
     const questions = await this.deps.productService.getCustomQuestions(
       input.activityId
     );
-    return resolveCustomQuestionAnswers(answers, questions).map((resolved) => ({
-      ...resolved,
+    const resolved = resolveCustomQuestionAnswers(answers, questions, {
+      requireRequired
+    });
+    if (resolved.length === 0) {
+      return null;
+    }
+    return resolved.map((answer) => ({
+      ...answer,
       refid: crypto.randomUUID()
     }));
   }
@@ -4135,7 +4180,7 @@ var PeekAccessService = class {
 
 // src/internal/cng/endpoints.ts
 var CNG_EXTENDABLE_SLUG = "cng_backoffice_api-v1";
-var PRODUCTS_PATH = "api/v2/commerce-config/products";
+var PRODUCTS_PATH = "api/v2/app-registry/products?active=1";
 
 // src/models/cng/product.ts
 var ACTIVITY_PRODUCT_TYPE2 = "ACTIVITY";
@@ -4146,14 +4191,11 @@ function fromProductNodes(nodes) {
 }
 function fromProductNode(node) {
   return {
-    productId: node.id || "",
+    productId: node.id == null ? "" : String(node.id),
     name: node.name || "",
-    type: node.product_type || ACTIVITY_PRODUCT_TYPE2,
-    color: node.color_hex || "",
-    tickets: (node.tickets ?? []).map((ticket) => ({
-      id: ticket.id,
-      name: ticket.name
-    }))
+    type: ACTIVITY_PRODUCT_TYPE2,
+    color: node.access_control_color_hex || "",
+    tickets: []
   };
 }
 
@@ -4172,15 +4214,13 @@ var CngProductService = class {
    * ```
    */
   async getAllActivities() {
-    const body = await this.client.get(
-      PRODUCTS_PATH
-    );
-    const nodes = Array.isArray(body) ? body : body?.products ?? [];
-    return fromProductNodes(nodes ?? []);
+    const body = await this.client.get(PRODUCTS_PATH);
+    return fromProductNodes(body?.data ?? []);
   }
 };
 
 // src/internal/cng/rest-client.ts
+var PERMISSION_SEPARATOR = ": ";
 var RestClient = class {
   constructor(options) {
     this.options = options;
@@ -4193,6 +4233,7 @@ var RestClient = class {
    *
    * @throws {AdminAccountRequiredError} on HTTP 418
    * @throws {RateLimitError} on HTTP 429 after retries are exhausted
+   * @throws {CngPermissionError} on HTTP 403 (app missing a permission)
    * @throws {CngApiError} on any other non-2xx response
    */
   async get(path) {
@@ -4206,6 +4247,11 @@ var RestClient = class {
       path,
       async (response) => {
         const body = await parseBody(response);
+        if (response.status === FORBIDDEN_STATUS) {
+          const permissions = extractMissingPermissions(body);
+          logger.warn(`Missing permission for ${path} (HTTP 403)`, { url, permissions });
+          throw new CngPermissionError(permissions, body);
+        }
         if (!response.ok) {
           logger.error(`CNG request failed with HTTP ${response.status}`, { url });
           throw new CngApiError(response.status, body);
@@ -4226,6 +4272,12 @@ var RestClient = class {
     };
   }
 };
+function extractMissingPermissions(body) {
+  if (typeof body !== "object" || body === null) return [];
+  const raw = body.errors?.permission;
+  if (!Array.isArray(raw)) return [];
+  return raw.filter((entry) => typeof entry === "string").map((entry) => entry.split(PERMISSION_SEPARATOR).pop().trim()).filter((permission) => permission.length > 0);
+}
 
 // src/cng-access-service.ts
 var DEFAULT_BASE_URL2 = "https://app-registry.peeklabs.com/installations-api";
@@ -4581,6 +4633,7 @@ exports.AvailabilityService = AvailabilityService;
 exports.BookingService = BookingService;
 exports.CngAccessService = CngAccessService;
 exports.CngApiError = CngApiError;
+exports.CngPermissionError = CngPermissionError;
 exports.CngProductService = CngProductService;
 exports.DailyNoteService = DailyNoteService;
 exports.INSTALL_STATUSES = INSTALL_STATUSES;