@vuoma/sdk 0.2.0 → 0.2.2

package/README.md

@@ -10,11 +10,11 @@ Install the public package in your own application; access to Vuoma's private
 repository is not required:
 
 ```sh
-npm install @vuoma/sdk@0.2.0
+npm install @vuoma/sdk@0.2.2
 ```
 
-Use SvelteKit and SvelteKit UI with `@vuoma/web` for website account components
-and same-origin server sessions. Use `@vuoma/native-ui` for React Native account and booking UI and this SDK as
+Use SvelteKit and SvelteKit UI with `@vuoma/svelte` for website account components
+and same-origin server sessions. Use `@vuoma/react-native-ui` for React Native account and booking UI and this SDK as
 its framework-neutral API transport. The complete `@vuoma/react-native` studio
 app core remains a private workspace; independent apps do not depend on it.
 The public setup guide is at `/developers` and `/o/<organization_slug>/developers`
@@ -42,6 +42,11 @@ The organization slug is public routing configuration, built into each studio ap
 Sign-in authenticates a person for that studio. Private calls require their bearer
 token; the server verifies the live session, studio membership and permissions.
 Public schedule and catalog reads need no registration or app key.
+Use `getCatalog({ includeUnavailable: true })` to show published memberships and
+prices before online checkout is enabled. `purchases_available` remains the
+checkout-readiness signal; a displayed offer never authorizes a purchase. This
+option is explicit so existing clients retain their established empty-catalog
+response while checkout is unavailable.
 Schedule timestamps are normalized to
 UTC, and ranges must be positive and at most 63 days. The response preserves
 `schedule.has_more`; when it is true, split the requested range and fetch each
@@ -102,7 +107,8 @@ the response text and against a supplied Content-Length header.
 ## Signup, activation and password reset
 
 Email confirmation and password creation stay within the host UI; the person
-reads the six-digit code in their email app. No access token, cookie or API key
+reads the complete code in their email app. The client accepts the supported
+six- and eight-digit codes and preserves leading zeroes. No access token, cookie or API key
 is sent by these methods. For new or automatically resolved accounts, collect a
 display name. Choose `auto` to let verified email ownership resolve a new profile,
 an imported profile or an existing studio account; `activate` performs the same

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vuoma/sdk",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "Framework-neutral client for Vuoma public organization and member account APIs",
   "type": "module",
   "private": false,

package/src/index.d.ts

@@ -161,7 +161,7 @@ export interface VuomaClient {
     getBookingCatalog(options?: RequestOptions): Promise<MemberBookingCatalog>
     /** One half-open range, up to 14 days. Split when has_more is true. */
     getAppointmentAvailability(options: RequestOptions & { from: string; to: string }): Promise<MemberPublicAvailability>
-    getCatalog(options?: RequestOptions & { includeCreditPurchases?: boolean }): Promise<MemberPublicCatalog>
+    getCatalog(options?: RequestOptions & { includeCreditPurchases?: boolean; includeUnavailable?: boolean }): Promise<MemberPublicCatalog>
   }
   readonly auth: {
     requestAccountCode(options: MemberAccountCodeRequest): Promise<{ ok: true; mode: 'signup' | 'recovery'; requires_email_code: true }>

package/src/index.js

@@ -103,8 +103,7 @@ function catalog(value) {
   envelope(value)
   if (!timestamp(value.generated_at) || typeof value.purchases_available !== "boolean" ||
     !object(value.catalog) || !Array.isArray(value.catalog.offers) || value.catalog.offers.length > 100 ||
-    value.catalog.offers.some(offer => !object(offer) || !uuid(offer.id) || typeof offer.name !== "string" || !Array.isArray(offer.prices) || offer.prices.some(price => !object(price))) ||
-    (!value.purchases_available && value.catalog.offers.length)) throw invalidResponse()
+    value.catalog.offers.some(offer => !object(offer) || !uuid(offer.id) || typeof offer.name !== "string" || !Array.isArray(offer.prices) || offer.prices.some(price => !object(price)))) throw invalidResponse()
   return value
 }
 
@@ -256,8 +255,10 @@ export function createVuomaClient(options) {
         const range = availabilityRange({ from, to })
         return checked(await request(`${memberRoot}/availability`, { query: range, signal }), value => validAvailability(value, range))
       },
-      async getCatalog({ includeCreditPurchases = false, signal } = {}) {
-        return catalog(await request(`${memberRoot}/catalog`, { signal, query: includeCreditPurchases ? { include_credit_purchases: "true" } : undefined }))
+      async getCatalog({ includeCreditPurchases = false, includeUnavailable = false, signal } = {}) {
+        const query = { ...(includeCreditPurchases ? { include_credit_purchases: "true" } : {}),
+          ...(includeUnavailable ? { include_unavailable: "true" } : {}) }
+        return catalog(await request(`${memberRoot}/catalog`, { signal, query }))
       },
     }),
     auth: Object.freeze({

package/src/member-contracts.js

@@ -90,7 +90,7 @@ export function accountInput({ mode, email, signupIntent }) {
   if (mode === 'signup') check(['new', 'migrate', 'auto', 'activate'].includes(signupIntent), 'Choose a signup intent explicitly.')
 }
 export function displayName(value) { check(text(value, 160, 1) && Boolean(value.trim()) && !/[\u0000-\u001f\u007f]/u.test(value), 'Provide a display name.'); return value }
-export function emailCode(value) { check(typeof value === 'string' && /^\d{6}$/u.test(value.trim()), 'Provide the six-digit email code.'); return value.trim() }
+export function emailCode(value) { check(typeof value === 'string' && /^(?:\d{6}|\d{8})$/u.test(value.trim()), 'Provide the email code from your message.'); return value.trim() }
 export function validCapability(value) { return typeof value === 'string' && /^[A-Za-z0-9_-]{43}$/u.test(value) }
 export function accountResolution(value) {
   check(object(value) && ['existing_account', 'existing_profile', 'new_profile'].includes(value.kind) && text(value.display_name, 160, 1) && Boolean(value.display_name.trim()) && !/[\u0000-\u001f\u007f]/u.test(value.display_name) && text(value.masked_email, 320) && /^[^@\s*]\*{3}@[^@\s*]\*{3}(?:\.[a-z0-9.-]+)?$/iu.test(value.masked_email) && (value.masked_phone === null || /^\*{3} \*{3} [0-9]{4}$/u.test(value.masked_phone ?? '')))