@peektravel/app-utilities 0.8.1 → 0.8.2

package/dist/index.cjs

@@ -207,6 +207,13 @@ function resolveAccessOptions(options) {
 }
 
 // src/errors.ts
+var FORBIDDEN_STATUS = 403;
+var PERMISSION_MESSAGE_PREFIX = "CNG request forbidden: the app is missing the required permission";
+var PERMISSION_MESSAGE_UNKNOWN = "CNG request forbidden: the app is missing a required permission";
+function buildPermissionMessage(permissions) {
+  if (permissions.length === 0) return PERMISSION_MESSAGE_UNKNOWN;
+  return `${PERMISSION_MESSAGE_PREFIX}${permissions.length > 1 ? "s" : ""}: ${permissions.join(", ")}`;
+}
 var AdminAccountRequiredError = class extends Error {
   /** The HTTP status that triggered this error. */
   statusCode = 418;
@@ -270,6 +277,23 @@ var CngApiError = class extends Error {
     this.body = body;
   }
 };
+var CngPermissionError = class extends Error {
+  /** The HTTP status that triggered this error. */
+  statusCode = FORBIDDEN_STATUS;
+  /**
+   * The permissions the gateway reported as missing, e.g. `["products:read"]`.
+   * Empty when the response body did not name any.
+   */
+  permissions;
+  /** The raw response body (parsed JSON when possible, otherwise text). */
+  body;
+  constructor(permissions, body, message) {
+    super(message ?? buildPermissionMessage(permissions));
+    this.name = "CngPermissionError";
+    this.permissions = permissions;
+    this.body = body;
+  }
+};
 var AcmeApiError = class extends Error {
   /** The HTTP status that triggered this error. */
   statusCode;
@@ -4156,7 +4180,7 @@ var PeekAccessService = class {
 
 // src/internal/cng/endpoints.ts
 var CNG_EXTENDABLE_SLUG = "cng_backoffice_api-v1";
-var PRODUCTS_PATH = "api/v2/commerce-config/products";
+var PRODUCTS_PATH = "api/v2/app-registry/products?active=1";
 
 // src/models/cng/product.ts
 var ACTIVITY_PRODUCT_TYPE2 = "ACTIVITY";
@@ -4167,14 +4191,11 @@ function fromProductNodes(nodes) {
 }
 function fromProductNode(node) {
   return {
-    productId: node.id || "",
+    productId: node.id == null ? "" : String(node.id),
     name: node.name || "",
-    type: node.product_type || ACTIVITY_PRODUCT_TYPE2,
-    color: node.color_hex || "",
-    tickets: (node.tickets ?? []).map((ticket) => ({
-      id: ticket.id,
-      name: ticket.name
-    }))
+    type: ACTIVITY_PRODUCT_TYPE2,
+    color: node.access_control_color_hex || "",
+    tickets: []
   };
 }
 
@@ -4193,15 +4214,13 @@ var CngProductService = class {
    * ```
    */
   async getAllActivities() {
-    const body = await this.client.get(
-      PRODUCTS_PATH
-    );
-    const nodes = Array.isArray(body) ? body : body?.products ?? [];
-    return fromProductNodes(nodes ?? []);
+    const body = await this.client.get(PRODUCTS_PATH);
+    return fromProductNodes(body?.data ?? []);
   }
 };
 
 // src/internal/cng/rest-client.ts
+var PERMISSION_SEPARATOR = ": ";
 var RestClient = class {
   constructor(options) {
     this.options = options;
@@ -4214,6 +4233,7 @@ var RestClient = class {
    *
    * @throws {AdminAccountRequiredError} on HTTP 418
    * @throws {RateLimitError} on HTTP 429 after retries are exhausted
+   * @throws {CngPermissionError} on HTTP 403 (app missing a permission)
    * @throws {CngApiError} on any other non-2xx response
    */
   async get(path) {
@@ -4227,6 +4247,11 @@ var RestClient = class {
       path,
       async (response) => {
         const body = await parseBody(response);
+        if (response.status === FORBIDDEN_STATUS) {
+          const permissions = extractMissingPermissions(body);
+          logger.warn(`Missing permission for ${path} (HTTP 403)`, { url, permissions });
+          throw new CngPermissionError(permissions, body);
+        }
         if (!response.ok) {
           logger.error(`CNG request failed with HTTP ${response.status}`, { url });
           throw new CngApiError(response.status, body);
@@ -4247,6 +4272,12 @@ var RestClient = class {
     };
   }
 };
+function extractMissingPermissions(body) {
+  if (typeof body !== "object" || body === null) return [];
+  const raw = body.errors?.permission;
+  if (!Array.isArray(raw)) return [];
+  return raw.filter((entry) => typeof entry === "string").map((entry) => entry.split(PERMISSION_SEPARATOR).pop().trim()).filter((permission) => permission.length > 0);
+}
 
 // src/cng-access-service.ts
 var DEFAULT_BASE_URL2 = "https://app-registry.peeklabs.com/installations-api";
@@ -4602,6 +4633,7 @@ exports.AvailabilityService = AvailabilityService;
 exports.BookingService = BookingService;
 exports.CngAccessService = CngAccessService;
 exports.CngApiError = CngApiError;
+exports.CngPermissionError = CngPermissionError;
 exports.CngProductService = CngProductService;
 exports.DailyNoteService = DailyNoteService;
 exports.INSTALL_STATUSES = INSTALL_STATUSES;