@v-office/website-sdk 2.3.0 → 2.3.2

package/dist/cli.mjs

@@ -15,7 +15,7 @@ var CLICheckFailed = class extends Error {
 const toCLIError = (message, cause) => cause instanceof Error ? new CLICheckFailed(`${message}: ${cause.message}`, { cause }) : new CLICheckFailed(message, { cause });
 //#endregion
 //#region package.json
-var version = "2.3.0";
+var version = "2.3.2";
 //#endregion
 //#region src/cli/output.ts
 const toJson = (value) => Effect.try({

package/dist/instructions/CHANGELOG.md

@@ -4,6 +4,7 @@ This file is the versioned changelog index for the website SDK instructions.
 
 ## Versions
 
+- `versions/2.3.0/CHANGELOG.md`: `@v-office/website-sdk` 2.3.0 release notes.
 - `versions/2.1.0/CHANGELOG.md`: `@v-office/website-sdk` 2.1.0 release notes.
 - `versions/2.0.0/CHANGELOG.md`: `@v-office/website-sdk` 2.0.0 release notes.
 

package/dist/instructions/versions/2.3.0/CHANGELOG.md

@@ -0,0 +1,52 @@
+# Changelog: 2.3.0
+
+Release date: 2026-07-13
+
+This release improves validation, search, rentals, quote handling, booking reliability, and CLI behavior across the v9 and v10 website SDK backends.
+
+## Added
+
+- Added v10 rental reviews to the existing optional `RentalGetRentalsOutput` `reviews` shape, including review items, aggregate ratings, classifications, and category ratings.
+- Added v9 quote support for forwarding `occupancy.childrenAges` to the backend.
+- Added explicit `UnavailableAdditionalService` and `UnavailableCancellationPolicy` quote selection outcomes.
+- Added runtime validation for quote dates, period ordering, destination country codes, and other `QuoteQuoteInput` fields.
+
+## Changed
+
+- `@v-office/sdk-core` was upgraded to 1.4.0.
+- v9 `rentalScope.propertyId` is now validated when `createWebsiteSDK` is called and must be an integer vOffice property ID when provided.
+- Contact validation now requires `address.countryCode`, validates it as a two-letter uppercase country code, and limits email addresses to 255 characters.
+- v9 search accepts `pets` and `petsCount` as Boolean-style flags or non-negative integers; positive values for both remain invalid.
+- `childrenAges` determines the v9 search child count when `children` is absent and is reported in `unusedFilterKeys` because v9 search cannot apply the ages themselves.
+- Quote selection now keeps an available cancellation policy selected by default and prevents newly selecting unavailable services or policies.
+- The CLI now validates config-file values, rejects blank required environment variables, reports concise expected failures, derives `--version` from the package version, and disposes its SDK after each command.
+- The CLI booking command now quotes and books with the same SDK instance.
+- Package publishing is configured for restricted access.
+
+## Fixed
+
+- Fixed v9 and v10 availability calculation dates so they do not start before today.
+- Fixed v9 rental images when rentals only contain room images or heuristic image metadata.
+- Fixed v9 quote section classification so included and other lines are mutually exclusive and `ADD_NO_SHOW` lines remain included.
+- Fixed v9 quote throttling so the rate limiter is shared by calls made through one SDK instance.
+- Fixed v9 travel-insurance language parameters to use backend language codes.
+- Fixed v9 OpenAPI response handling for JSON content types with parameters and bounded large HTML/text error bodies.
+- Fixed v10 search pagination to request enough backend rows, report `hasNextPage` correctly, and reject pagination beyond 1,000 results.
+- Fixed v10 integer filters so partially numeric values such as `2abc` are not accepted, and allowed `pets=false` and `pets=0`.
+- Fixed fallback filter categories so missing categories use the localized `OTHER` label.
+- Fixed v10 multi-rate resolution, no-multi-rate cancellation policies, unavailable option handling, and quote section grouping.
+- Fixed v10 booking so invalid backend booking responses fail instead of returning an empty booking number.
+- Fixed contact email validation for valid local parts and repeated-dot rejection.
+- Fixed currency formatting for currencies whose standard fraction digits are not two.
+- Fixed payment form submission to preserve the native form receiver and fail explicitly when form submission or an option kind is unsupported.
+- Added a 30-second timeout and clearer HTTP failure details for GraphQL requests.
+
+## Migration Impact
+
+- No SDK construction or flat config-shape migration is required from 2.1.0.
+- Validate v9 `rentalScope.propertyId` values before creating the SDK.
+- Ensure contact forms always submit `address.countryCode` and surface the updated validation issues.
+- Ensure quote inputs contain real `YYYY-MM-DD` dates, an end date after the start date, and uppercase destination country codes.
+- Add quote selection handling for `UnavailableAdditionalService` and `UnavailableCancellationPolicy`.
+- Treat rental `reviews` as optional and render them when present.
+- Review CLI config files for missing or blank required values.

package/dist/instructions/versions/2.3.0/MIGRATION.md

@@ -0,0 +1,135 @@
+# Migration: 2.1.0 to 2.3.0
+
+This guide covers upgrading `@v-office/website-sdk` from 2.1.0 to 2.3.0.
+
+2.3.0 keeps `createWebsiteSDK({ config, options })`, the flat `WebsiteSDKConfig`, and separate `WebsiteSDKOptions`. Most changes are validation and reliability improvements.
+
+## What To Review
+
+### v9 Rental Scope
+
+For v9, `options.rentalScope.propertyId` must be an integer vOffice property ID when provided:
+
+```ts
+const sdk = createWebsiteSDK({
+  config,
+  options: defineWebsiteSDKOptions({
+    rentalScope: {
+      propertyId: "123",
+    },
+  }),
+});
+```
+
+Blank or non-numeric values now cause SDK creation to fail with a `CoreSDKError` using `operation: "v9.config"`. Previously, invalid values could silently disable the scope.
+
+Migration: validate stored property IDs before passing them to `createWebsiteSDK`. Omit `propertyId` when no v9 property scope is required.
+
+### Contact
+
+`address.countryCode` is now required by contact validation. It must be a two-letter uppercase country code such as `DE`. Email addresses are limited to 255 characters.
+
+Migration: ensure every contact form supplies `address.countryCode` and continues to display field-level issues from `CoreSDKError.cause.issues`.
+
+### Quote Input
+
+Quote inputs now receive stricter runtime validation:
+
+- `period.start` and `period.end` must be real calendar dates in `YYYY-MM-DD` format.
+- `period.end` must be after `period.start`.
+- `destinationCountryCode`, when provided, must be a two-letter uppercase country code.
+- Occupancy counts must be non-negative integers.
+
+v9 quotes now forward optional child ages:
+
+```ts
+const result = await sdk.live.quote.quote({
+  locale: "de-DE",
+  rentalId: "123",
+  period: {
+    start: "2026-08-01",
+    end: "2026-08-08",
+  },
+  occupancy: {
+    adults: 2,
+    children: 2,
+    childrenAges: [4, 8],
+    babies: 0,
+    pets: 0,
+  },
+  destinationCountryCode: "DE",
+});
+```
+
+Migration: validate user-entered dates and country codes before requesting a quote.
+
+### Quote Selection
+
+Unavailable additional services and cancellation policies can no longer be newly selected. Selection results can now contain:
+
+- `UnavailableAdditionalService`
+- `UnavailableCancellationPolicy`
+
+Migration: handle these outcomes alongside the existing quote selection errors and disable options whose `available` field is `false`. Existing unavailable selections may remain on a quote, but their quantity cannot be increased.
+
+When the backend does not configure multi-rates, v10 cancellation policies are now retained instead of making an otherwise valid quote unavailable. Multi-rate matching and default policy selection are also more deterministic.
+
+### Search
+
+v9 search now accepts these pet forms:
+
+```text
+pets
+pets=true
+pets=false
+pets=2
+petsCount=2
+```
+
+Use either a positive `pets` value or a positive `petsCount` value, not both. Duplicate or invalid values fail validation.
+
+For v9, `childrenAges` can determine the child count when `children` is absent, but the ages themselves cannot be sent to the search backend. The result therefore includes `"childrenAges"` in `unusedFilterKeys`.
+
+v10 search now enforces a maximum pagination range of 1,000 results and reports `hasNextPage` using the complete requested range. Integer filters no longer accept partially numeric strings, and `pets=false` / `pets=0` are valid ways to disable the mapped pets filter.
+
+### Rentals and Availability
+
+v10 `sdk.static.rentals.getRentals` can now populate the existing optional `reviews` property:
+
+```ts
+for (const rental of await sdk.static.rentals.getRentals({ locale: "de-DE" })) {
+  if (rental.reviews !== undefined) {
+    console.log(rental.reviews.summary, rental.reviews.items);
+  }
+}
+```
+
+Keep review rendering optional because rentals without public feedback omit the field.
+
+v9 rental output now preserves room images and heuristic image metadata even when `voffice_images` is empty. Availability output for both backends now clamps its first calculation date to today when backend data starts in the past.
+
+### CLI
+
+CLI config files are now decoded and validated before SDK creation. Required URLs, keys, and tokens must be non-blank strings, and v9 `rentalDataAttributes` entries must also be non-blank strings. Required environment variables containing only whitespace are treated as missing.
+
+Expected CLI failures now print concise messages. SDK creation and operations are wrapped consistently, SDK instances are disposed after commands, and `website-sdk --version` follows the installed package version.
+
+Migration: run the CLI once with each config file used in deployment and fix any newly reported validation errors.
+
+### Payment Submission
+
+`form_post` payment options now fail explicitly if the browser does not provide native form submission. Unknown runtime payment option kinds also fail with `CoreSDKError` instead of being ignored.
+
+No API change is required. Keep payment submission error handling in place and only call it in a browser environment.
+
+## Recommended Steps
+
+1. Upgrade to `@v-office/website-sdk` 2.3.0.
+2. Validate v9 `rentalScope.propertyId` values.
+3. Require an uppercase `address.countryCode` in contact forms.
+4. Validate quote dates, period ordering, occupancy counts, and destination country codes.
+5. Handle unavailable quote selection outcomes and disable unavailable options.
+6. Render optional v10 rental reviews where desired.
+7. Review search handling for pet flags, `childrenAges`, strict integer filters, and the 1,000-result pagination limit.
+8. Validate CLI config files and environment variables.
+9. Run focused smoke tests for rentals, search, availability, quote selection, booking, contact, and payment submission.

package/instructions/CHANGELOG.md

@@ -4,6 +4,7 @@ This file is the versioned changelog index for the website SDK instructions.
 
 ## Versions
 
+- `versions/2.3.0/CHANGELOG.md`: `@v-office/website-sdk` 2.3.0 release notes.
 - `versions/2.1.0/CHANGELOG.md`: `@v-office/website-sdk` 2.1.0 release notes.
 - `versions/2.0.0/CHANGELOG.md`: `@v-office/website-sdk` 2.0.0 release notes.
 

package/instructions/versions/2.3.0/CHANGELOG.md

@@ -0,0 +1,52 @@
+# Changelog: 2.3.0
+
+Release date: 2026-07-13
+
+This release improves validation, search, rentals, quote handling, booking reliability, and CLI behavior across the v9 and v10 website SDK backends.
+
+## Added
+
+- Added v10 rental reviews to the existing optional `RentalGetRentalsOutput` `reviews` shape, including review items, aggregate ratings, classifications, and category ratings.
+- Added v9 quote support for forwarding `occupancy.childrenAges` to the backend.
+- Added explicit `UnavailableAdditionalService` and `UnavailableCancellationPolicy` quote selection outcomes.
+- Added runtime validation for quote dates, period ordering, destination country codes, and other `QuoteQuoteInput` fields.
+
+## Changed
+
+- `@v-office/sdk-core` was upgraded to 1.4.0.
+- v9 `rentalScope.propertyId` is now validated when `createWebsiteSDK` is called and must be an integer vOffice property ID when provided.
+- Contact validation now requires `address.countryCode`, validates it as a two-letter uppercase country code, and limits email addresses to 255 characters.
+- v9 search accepts `pets` and `petsCount` as Boolean-style flags or non-negative integers; positive values for both remain invalid.
+- `childrenAges` determines the v9 search child count when `children` is absent and is reported in `unusedFilterKeys` because v9 search cannot apply the ages themselves.
+- Quote selection now keeps an available cancellation policy selected by default and prevents newly selecting unavailable services or policies.
+- The CLI now validates config-file values, rejects blank required environment variables, reports concise expected failures, derives `--version` from the package version, and disposes its SDK after each command.
+- The CLI booking command now quotes and books with the same SDK instance.
+- Package publishing is configured for restricted access.
+
+## Fixed
+
+- Fixed v9 and v10 availability calculation dates so they do not start before today.
+- Fixed v9 rental images when rentals only contain room images or heuristic image metadata.
+- Fixed v9 quote section classification so included and other lines are mutually exclusive and `ADD_NO_SHOW` lines remain included.
+- Fixed v9 quote throttling so the rate limiter is shared by calls made through one SDK instance.
+- Fixed v9 travel-insurance language parameters to use backend language codes.
+- Fixed v9 OpenAPI response handling for JSON content types with parameters and bounded large HTML/text error bodies.
+- Fixed v10 search pagination to request enough backend rows, report `hasNextPage` correctly, and reject pagination beyond 1,000 results.
+- Fixed v10 integer filters so partially numeric values such as `2abc` are not accepted, and allowed `pets=false` and `pets=0`.
+- Fixed fallback filter categories so missing categories use the localized `OTHER` label.
+- Fixed v10 multi-rate resolution, no-multi-rate cancellation policies, unavailable option handling, and quote section grouping.
+- Fixed v10 booking so invalid backend booking responses fail instead of returning an empty booking number.
+- Fixed contact email validation for valid local parts and repeated-dot rejection.
+- Fixed currency formatting for currencies whose standard fraction digits are not two.
+- Fixed payment form submission to preserve the native form receiver and fail explicitly when form submission or an option kind is unsupported.
+- Added a 30-second timeout and clearer HTTP failure details for GraphQL requests.
+
+## Migration Impact
+
+- No SDK construction or flat config-shape migration is required from 2.1.0.
+- Validate v9 `rentalScope.propertyId` values before creating the SDK.
+- Ensure contact forms always submit `address.countryCode` and surface the updated validation issues.
+- Ensure quote inputs contain real `YYYY-MM-DD` dates, an end date after the start date, and uppercase destination country codes.
+- Add quote selection handling for `UnavailableAdditionalService` and `UnavailableCancellationPolicy`.
+- Treat rental `reviews` as optional and render them when present.
+- Review CLI config files for missing or blank required values.

package/instructions/versions/2.3.0/MIGRATION.md

@@ -0,0 +1,135 @@
+# Migration: 2.1.0 to 2.3.0
+
+This guide covers upgrading `@v-office/website-sdk` from 2.1.0 to 2.3.0.
+
+2.3.0 keeps `createWebsiteSDK({ config, options })`, the flat `WebsiteSDKConfig`, and separate `WebsiteSDKOptions`. Most changes are validation and reliability improvements.
+
+## What To Review
+
+### v9 Rental Scope
+
+For v9, `options.rentalScope.propertyId` must be an integer vOffice property ID when provided:
+
+```ts
+const sdk = createWebsiteSDK({
+  config,
+  options: defineWebsiteSDKOptions({
+    rentalScope: {
+      propertyId: "123",
+    },
+  }),
+});
+```
+
+Blank or non-numeric values now cause SDK creation to fail with a `CoreSDKError` using `operation: "v9.config"`. Previously, invalid values could silently disable the scope.
+
+Migration: validate stored property IDs before passing them to `createWebsiteSDK`. Omit `propertyId` when no v9 property scope is required.
+
+### Contact
+
+`address.countryCode` is now required by contact validation. It must be a two-letter uppercase country code such as `DE`. Email addresses are limited to 255 characters.
+
+Migration: ensure every contact form supplies `address.countryCode` and continues to display field-level issues from `CoreSDKError.cause.issues`.
+
+### Quote Input
+
+Quote inputs now receive stricter runtime validation:
+
+- `period.start` and `period.end` must be real calendar dates in `YYYY-MM-DD` format.
+- `period.end` must be after `period.start`.
+- `destinationCountryCode`, when provided, must be a two-letter uppercase country code.
+- Occupancy counts must be non-negative integers.
+
+v9 quotes now forward optional child ages:
+
+```ts
+const result = await sdk.live.quote.quote({
+  locale: "de-DE",
+  rentalId: "123",
+  period: {
+    start: "2026-08-01",
+    end: "2026-08-08",
+  },
+  occupancy: {
+    adults: 2,
+    children: 2,
+    childrenAges: [4, 8],
+    babies: 0,
+    pets: 0,
+  },
+  destinationCountryCode: "DE",
+});
+```
+
+Migration: validate user-entered dates and country codes before requesting a quote.
+
+### Quote Selection
+
+Unavailable additional services and cancellation policies can no longer be newly selected. Selection results can now contain:
+
+- `UnavailableAdditionalService`
+- `UnavailableCancellationPolicy`
+
+Migration: handle these outcomes alongside the existing quote selection errors and disable options whose `available` field is `false`. Existing unavailable selections may remain on a quote, but their quantity cannot be increased.
+
+When the backend does not configure multi-rates, v10 cancellation policies are now retained instead of making an otherwise valid quote unavailable. Multi-rate matching and default policy selection are also more deterministic.
+
+### Search
+
+v9 search now accepts these pet forms:
+
+```text
+pets
+pets=true
+pets=false
+pets=2
+petsCount=2
+```
+
+Use either a positive `pets` value or a positive `petsCount` value, not both. Duplicate or invalid values fail validation.
+
+For v9, `childrenAges` can determine the child count when `children` is absent, but the ages themselves cannot be sent to the search backend. The result therefore includes `"childrenAges"` in `unusedFilterKeys`.
+
+v10 search now enforces a maximum pagination range of 1,000 results and reports `hasNextPage` using the complete requested range. Integer filters no longer accept partially numeric strings, and `pets=false` / `pets=0` are valid ways to disable the mapped pets filter.
+
+### Rentals and Availability
+
+v10 `sdk.static.rentals.getRentals` can now populate the existing optional `reviews` property:
+
+```ts
+for (const rental of await sdk.static.rentals.getRentals({ locale: "de-DE" })) {
+  if (rental.reviews !== undefined) {
+    console.log(rental.reviews.summary, rental.reviews.items);
+  }
+}
+```
+
+Keep review rendering optional because rentals without public feedback omit the field.
+
+v9 rental output now preserves room images and heuristic image metadata even when `voffice_images` is empty. Availability output for both backends now clamps its first calculation date to today when backend data starts in the past.
+
+### CLI
+
+CLI config files are now decoded and validated before SDK creation. Required URLs, keys, and tokens must be non-blank strings, and v9 `rentalDataAttributes` entries must also be non-blank strings. Required environment variables containing only whitespace are treated as missing.
+
+Expected CLI failures now print concise messages. SDK creation and operations are wrapped consistently, SDK instances are disposed after commands, and `website-sdk --version` follows the installed package version.
+
+Migration: run the CLI once with each config file used in deployment and fix any newly reported validation errors.
+
+### Payment Submission
+
+`form_post` payment options now fail explicitly if the browser does not provide native form submission. Unknown runtime payment option kinds also fail with `CoreSDKError` instead of being ignored.
+
+No API change is required. Keep payment submission error handling in place and only call it in a browser environment.
+
+## Recommended Steps
+
+1. Upgrade to `@v-office/website-sdk` 2.3.0.
+2. Validate v9 `rentalScope.propertyId` values.
+3. Require an uppercase `address.countryCode` in contact forms.
+4. Validate quote dates, period ordering, occupancy counts, and destination country codes.
+5. Handle unavailable quote selection outcomes and disable unavailable options.
+6. Render optional v10 rental reviews where desired.
+7. Review search handling for pet flags, `childrenAges`, strict integer filters, and the 1,000-result pagination limit.
+8. Validate CLI config files and environment variables.
+9. Run focused smoke tests for rentals, search, availability, quote selection, booking, contact, and payment submission.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@v-office/website-sdk",
-  "version": "2.3.0",
+  "version": "2.3.2",
   "description": "Website-facing SDK facade backed by @v-office/sdk-core",
   "bin": {
     "website-sdk": "./dist/cli.mjs"
@@ -37,11 +37,11 @@
     "./package.json": "./package.json"
   },
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "dependencies": {
     "@graphql-typed-document-node/core": "3.2.0",
-    "@v-office/sdk-core": "^1.4.0",
+    "@v-office/sdk-core": "^1.4.1",
     "effect": "4.0.0-beta.85",
     "graphql": "16.14.2",
     "yaml": "^2.9.0"