letsfg 2026.5.68 → 2026.5.70

package/README.md

@@ -151,14 +151,14 @@ print(booking["confirmation"], booking["pay_link"])
 
 ### How you pay
 
-**10% now, the rest to the hotel later.** At booking we charge 10% of the price
+**5% now, the rest to the hotel later.** At booking we charge 5% of the price
 to your card as a reservation fee. The remaining balance is paid **directly to
 the supplier** through a `pay_link` we return — we never hold it.
 
 `balance_due_by` is the supplier's own auto-cancellation date, not a date we
 invent. Miss it and the room is released.
 
-The 10% is **non-refundable**. Cancelling before `balance_due_by` costs nothing
+The 5% is **non-refundable**. Cancelling before `balance_due_by` costs nothing
 else; after it, the hotel's own cancellation ladder applies and can reach 100%.
 That ladder ships in the booking's `terms`, so you can always see the cost before
 you cancel.
@@ -184,7 +184,7 @@ is not metered, only the search call itself.
   hotel signup.
 - **Only free-cancellation, pay-later rates are sold.** Those are the rates where
   the balance can safely be settled with the supplier after booking, which is
-  what makes 10%-now/rest-later work at all. You will see fewer results than a
+  what makes 5%-now/rest-later work at all. You will see fewer results than a
   metasearch shows you. Every one of them can actually be booked.
 - **Booking is asynchronous.** `book_hotel` returns a `booking_job_id`, not a
   booking — the real thing takes minutes. Poll `hotel_booking(job_id)` until

package/dist/{chunk-QLCIHPPX.mjs → chunk-SYNHNDEL.mjs}

@@ -1641,10 +1641,17 @@ var LetsFG = class {
   }
   /**
    * Resolve a city/airport name to IATA codes.
+   *
+   * Developer API key only. There is no location endpoint on the PFS Bearer
+   * lane — the same dead end `unlock()` documents below. This used to send
+   * PFS callers to `/api/locations?q=`, a route that has never existed on
+   * letsfg.co (verified 2026-08-16: 404, text/html), so they got a JSON parse
+   * error off the 404 page instead of an answer. Pass an IATA code directly
+   * on the PFS lane; a city code expands to every airport in that city.
    */
   async resolveLocation(query) {
-    this.requireAuth();
-    const path = this.usingPFS ? `/api/locations?q=${encodeURIComponent(query)}` : `/developers/api/v1/flights/locations/${encodeURIComponent(query)}`;
+    this.requireApiKey();
+    const path = `/developers/api/v1/flights/locations/${encodeURIComponent(query)}`;
     const data = await this.getWithAuth(path);
     return Array.isArray(data) ? data : data.locations || [];
   }
@@ -1709,7 +1716,7 @@ var LetsFG = class {
   //
   // Only free-cancellation, pay-later rates are sold. Those are the rates where
   // the guest's balance can safely be settled with the supplier after booking,
-  // which is what makes 10%-now/rest-later work. The result set is smaller than
+  // which is what makes 5%-now/rest-later work. The result set is smaller than
   // a metasearch's, and every row in it can actually be booked.
   /**
    * Resolve a place name to the city id that searchHotels() needs.
@@ -1732,7 +1739,7 @@ var LetsFG = class {
    * — so this gets its own generous timeout rather than the client default.
    *
    * Each offer carries `price` (what the guest pays), `reservation_fee_now`
-   * (the 10% taken at booking), `balance_to_supplier`, `balance_due_by` and
+   * (the 5% taken at booking), `balance_to_supplier`, `balance_due_by` and
    * `free_cancellation_until`. There is no wholesale figure to quote by mistake.
    *
    * Keep `session_id` and the chosen offer's `combination_id_v2`: together they
@@ -1758,7 +1765,7 @@ var LetsFG = class {
    * Start a booking. Returns a job immediately — it does NOT book inline.
    *
    * A booking takes minutes: the rate is re-blocked at the supplier, every
-   * price and date rail is checked, the 10% reservation fee is charged to your
+   * price and date rail is checked, the 5% reservation fee is charged to your
    * card, and only then is the room committed. No proxy holds a connection that
    * long, so this returns at once and you poll hotelBooking() for the outcome.
    * Use bookHotelAndWait() if you would rather block.
@@ -1840,7 +1847,7 @@ var LetsFG = class {
    *
    * Free until `balance_due_by`; after that the hotel's own cancellation ladder
    * applies and can reach 100%. The ladder ships in the booking's `terms`, so
-   * you can see the cost before calling this. The 10% reservation fee is NOT
+   * you can see the cost before calling this. The 5% reservation fee is NOT
    * refunded.
    *
    * This drives a browser at the supplier and takes over a minute. If it times

package/dist/cli.js

@@ -537,10 +537,17 @@ var LetsFG = class {
   }
   /**
    * Resolve a city/airport name to IATA codes.
+   *
+   * Developer API key only. There is no location endpoint on the PFS Bearer
+   * lane — the same dead end `unlock()` documents below. This used to send
+   * PFS callers to `/api/locations?q=`, a route that has never existed on
+   * letsfg.co (verified 2026-08-16: 404, text/html), so they got a JSON parse
+   * error off the 404 page instead of an answer. Pass an IATA code directly
+   * on the PFS lane; a city code expands to every airport in that city.
    */
   async resolveLocation(query) {
-    this.requireAuth();
-    const path = this.usingPFS ? `/api/locations?q=${encodeURIComponent(query)}` : `/developers/api/v1/flights/locations/${encodeURIComponent(query)}`;
+    this.requireApiKey();
+    const path = `/developers/api/v1/flights/locations/${encodeURIComponent(query)}`;
     const data = await this.getWithAuth(path);
     return Array.isArray(data) ? data : data.locations || [];
   }
@@ -605,7 +612,7 @@ var LetsFG = class {
   //
   // Only free-cancellation, pay-later rates are sold. Those are the rates where
   // the guest's balance can safely be settled with the supplier after booking,
-  // which is what makes 10%-now/rest-later work. The result set is smaller than
+  // which is what makes 5%-now/rest-later work. The result set is smaller than
   // a metasearch's, and every row in it can actually be booked.
   /**
    * Resolve a place name to the city id that searchHotels() needs.
@@ -628,7 +635,7 @@ var LetsFG = class {
    * — so this gets its own generous timeout rather than the client default.
    *
    * Each offer carries `price` (what the guest pays), `reservation_fee_now`
-   * (the 10% taken at booking), `balance_to_supplier`, `balance_due_by` and
+   * (the 5% taken at booking), `balance_to_supplier`, `balance_due_by` and
    * `free_cancellation_until`. There is no wholesale figure to quote by mistake.
    *
    * Keep `session_id` and the chosen offer's `combination_id_v2`: together they
@@ -654,7 +661,7 @@ var LetsFG = class {
    * Start a booking. Returns a job immediately — it does NOT book inline.
    *
    * A booking takes minutes: the rate is re-blocked at the supplier, every
-   * price and date rail is checked, the 10% reservation fee is charged to your
+   * price and date rail is checked, the 5% reservation fee is charged to your
    * card, and only then is the room committed. No proxy holds a connection that
    * long, so this returns at once and you poll hotelBooking() for the outcome.
    * Use bookHotelAndWait() if you would rather block.
@@ -736,7 +743,7 @@ var LetsFG = class {
    *
    * Free until `balance_due_by`; after that the hotel's own cancellation ladder
    * applies and can reach 100%. The ladder ships in the booking's `terms`, so
-   * you can see the cost before calling this. The 10% reservation fee is NOT
+   * you can see the cost before calling this. The 5% reservation fee is NOT
    * refunded.
    *
    * This drives a browser at the supplier and takes over a minute. If it times

package/dist/cli.mjs

@@ -3,7 +3,7 @@ import {
   LetsFG,
   LetsFGError,
   offerSummary
-} from "./chunk-QLCIHPPX.mjs";
+} from "./chunk-SYNHNDEL.mjs";
 import {
   BearerTokenError,
   getBearerToken,

package/dist/index.d.mts

@@ -485,6 +485,13 @@ declare class LetsFG {
     private searchPFS;
     /**
      * Resolve a city/airport name to IATA codes.
+     *
+     * Developer API key only. There is no location endpoint on the PFS Bearer
+     * lane — the same dead end `unlock()` documents below. This used to send
+     * PFS callers to `/api/locations?q=`, a route that has never existed on
+     * letsfg.co (verified 2026-08-16: 404, text/html), so they got a JSON parse
+     * error off the 404 page instead of an answer. Pass an IATA code directly
+     * on the PFS lane; a city code expands to every airport in that city.
      */
     resolveLocation(query: string): Promise<Array<Record<string, unknown>>>;
     /**
@@ -520,7 +527,7 @@ declare class LetsFG {
      * — so this gets its own generous timeout rather than the client default.
      *
      * Each offer carries `price` (what the guest pays), `reservation_fee_now`
-     * (the 10% taken at booking), `balance_to_supplier`, `balance_due_by` and
+     * (the 5% taken at booking), `balance_to_supplier`, `balance_due_by` and
      * `free_cancellation_until`. There is no wholesale figure to quote by mistake.
      *
      * Keep `session_id` and the chosen offer's `combination_id_v2`: together they
@@ -543,7 +550,7 @@ declare class LetsFG {
      * Start a booking. Returns a job immediately — it does NOT book inline.
      *
      * A booking takes minutes: the rate is re-blocked at the supplier, every
-     * price and date rail is checked, the 10% reservation fee is charged to your
+     * price and date rail is checked, the 5% reservation fee is charged to your
      * card, and only then is the room committed. No proxy holds a connection that
      * long, so this returns at once and you poll hotelBooking() for the outcome.
      * Use bookHotelAndWait() if you would rather block.
@@ -606,7 +613,7 @@ declare class LetsFG {
      *
      * Free until `balance_due_by`; after that the hotel's own cancellation ladder
      * applies and can reach 100%. The ladder ships in the booking's `terms`, so
-     * you can see the cost before calling this. The 10% reservation fee is NOT
+     * you can see the cost before calling this. The 5% reservation fee is NOT
      * refunded.
      *
      * This drives a browser at the supplier and takes over a minute. If it times

package/dist/index.d.ts

@@ -485,6 +485,13 @@ declare class LetsFG {
     private searchPFS;
     /**
      * Resolve a city/airport name to IATA codes.
+     *
+     * Developer API key only. There is no location endpoint on the PFS Bearer
+     * lane — the same dead end `unlock()` documents below. This used to send
+     * PFS callers to `/api/locations?q=`, a route that has never existed on
+     * letsfg.co (verified 2026-08-16: 404, text/html), so they got a JSON parse
+     * error off the 404 page instead of an answer. Pass an IATA code directly
+     * on the PFS lane; a city code expands to every airport in that city.
      */
     resolveLocation(query: string): Promise<Array<Record<string, unknown>>>;
     /**
@@ -520,7 +527,7 @@ declare class LetsFG {
      * — so this gets its own generous timeout rather than the client default.
      *
      * Each offer carries `price` (what the guest pays), `reservation_fee_now`
-     * (the 10% taken at booking), `balance_to_supplier`, `balance_due_by` and
+     * (the 5% taken at booking), `balance_to_supplier`, `balance_due_by` and
      * `free_cancellation_until`. There is no wholesale figure to quote by mistake.
      *
      * Keep `session_id` and the chosen offer's `combination_id_v2`: together they
@@ -543,7 +550,7 @@ declare class LetsFG {
      * Start a booking. Returns a job immediately — it does NOT book inline.
      *
      * A booking takes minutes: the rate is re-blocked at the supplier, every
-     * price and date rail is checked, the 10% reservation fee is charged to your
+     * price and date rail is checked, the 5% reservation fee is charged to your
      * card, and only then is the room committed. No proxy holds a connection that
      * long, so this returns at once and you poll hotelBooking() for the outcome.
      * Use bookHotelAndWait() if you would rather block.
@@ -606,7 +613,7 @@ declare class LetsFG {
      *
      * Free until `balance_due_by`; after that the hotel's own cancellation ladder
      * applies and can reach 100%. The ladder ships in the booking's `terms`, so
-     * you can see the cost before calling this. The 10% reservation fee is NOT
+     * you can see the cost before calling this. The 5% reservation fee is NOT
      * refunded.
      *
      * This drives a browser at the supplier and takes over a minute. If it times

package/dist/index.js

@@ -1689,10 +1689,17 @@ var LetsFG = class {
   }
   /**
    * Resolve a city/airport name to IATA codes.
+   *
+   * Developer API key only. There is no location endpoint on the PFS Bearer
+   * lane — the same dead end `unlock()` documents below. This used to send
+   * PFS callers to `/api/locations?q=`, a route that has never existed on
+   * letsfg.co (verified 2026-08-16: 404, text/html), so they got a JSON parse
+   * error off the 404 page instead of an answer. Pass an IATA code directly
+   * on the PFS lane; a city code expands to every airport in that city.
    */
   async resolveLocation(query) {
-    this.requireAuth();
-    const path = this.usingPFS ? `/api/locations?q=${encodeURIComponent(query)}` : `/developers/api/v1/flights/locations/${encodeURIComponent(query)}`;
+    this.requireApiKey();
+    const path = `/developers/api/v1/flights/locations/${encodeURIComponent(query)}`;
     const data = await this.getWithAuth(path);
     return Array.isArray(data) ? data : data.locations || [];
   }
@@ -1757,7 +1764,7 @@ var LetsFG = class {
   //
   // Only free-cancellation, pay-later rates are sold. Those are the rates where
   // the guest's balance can safely be settled with the supplier after booking,
-  // which is what makes 10%-now/rest-later work. The result set is smaller than
+  // which is what makes 5%-now/rest-later work. The result set is smaller than
   // a metasearch's, and every row in it can actually be booked.
   /**
    * Resolve a place name to the city id that searchHotels() needs.
@@ -1780,7 +1787,7 @@ var LetsFG = class {
    * — so this gets its own generous timeout rather than the client default.
    *
    * Each offer carries `price` (what the guest pays), `reservation_fee_now`
-   * (the 10% taken at booking), `balance_to_supplier`, `balance_due_by` and
+   * (the 5% taken at booking), `balance_to_supplier`, `balance_due_by` and
    * `free_cancellation_until`. There is no wholesale figure to quote by mistake.
    *
    * Keep `session_id` and the chosen offer's `combination_id_v2`: together they
@@ -1806,7 +1813,7 @@ var LetsFG = class {
    * Start a booking. Returns a job immediately — it does NOT book inline.
    *
    * A booking takes minutes: the rate is re-blocked at the supplier, every
-   * price and date rail is checked, the 10% reservation fee is charged to your
+   * price and date rail is checked, the 5% reservation fee is charged to your
    * card, and only then is the room committed. No proxy holds a connection that
    * long, so this returns at once and you poll hotelBooking() for the outcome.
    * Use bookHotelAndWait() if you would rather block.
@@ -1888,7 +1895,7 @@ var LetsFG = class {
    *
    * Free until `balance_due_by`; after that the hotel's own cancellation ladder
    * applies and can reach 100%. The ladder ships in the booking's `terms`, so
-   * you can see the cost before calling this. The 10% reservation fee is NOT
+   * you can see the cost before calling this. The 5% reservation fee is NOT
    * refunded.
    *
    * This drives a browser at the supplier and takes over a minute. If it times

package/dist/index.mjs

@@ -22,7 +22,7 @@ import {
   offerSummary,
   rankOffers,
   selectDiverseTop
-} from "./chunk-QLCIHPPX.mjs";
+} from "./chunk-SYNHNDEL.mjs";
 export {
   AuthenticationError,
   BoostedTravel,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "letsfg",
-  "version": "2026.5.68",
+  "version": "2026.5.70",
   "description": "Flights and hotels for AI agents. Server-side engine covers hundreds of airlines; hotels are real bookable inventory with free cancellation and pay-later terms. Includes open-source ranking engine.",
   "main": "dist/index.js",
   "module": "dist/index.mjs",