woltapi 0.4.0__tar.gz → 0.5.0__tar.gz

{woltapi-0.4.0/src/woltapi.egg-info → woltapi-0.5.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: woltapi
-Version: 0.4.0
+Version: 0.5.0
 Summary: A small synchronous client for observed Wolt ordering flows.
 License-Expression: AGPL-3.0-only
 Project-URL: Repository, https://github.com/skorokithakis/woltapi
@@ -298,14 +298,16 @@ Item, option, and value IDs come from the assortment dictionary. For
 current menu.
 
 Wolt also stores one basket per restaurant on its servers. These are the
-baskets you see in the Wolt app. The library can read and replace them:
+baskets you see in the Wolt app. The library can read, replace, and delete
+them:
 
 | Call | What it does |
 | --- | --- |
 | `client.save_basket_items(assortment, venue=..., items=...)` | Replaces the whole server basket for that restaurant. Needs only the menu, a venue context, and items. This does not place an order. |
 | `client.save_basket(selection)` | Also replaces the whole server basket, but takes a full `OrderSelection`. |
 | `client.get_basket_count()` | The number of baskets stored on the server. |
-| `client.get_baskets_page(latitude, longitude)` | The full baskets page as a dictionary. It can contain personal data; do not log it raw. |
+| `client.get_baskets_page(latitude, longitude)` | Lists the saved baskets, as one page of the raw dictionary. It can contain personal data; do not log it raw. |
+| `client.delete_baskets(basket_ids)` | Deletes the listed server baskets. |
 | `client.get_venue_checkout_context(slug)` | The `VenueCheckoutContext` for a restaurant, read from its static page. |
 
 There are two ways to save. `save_basket_items()` needs no saved address and no
@@ -315,8 +317,56 @@ after `list_delivery_targets()` and `get_payment_methods()` on the same client,
 so it needs a saved delivery address and an enabled card. That cost is worth
 paying only when you go on to request a checkout quote with the same selection.
 
-Deleting a server basket is not supported. There is also no call that adds or
-removes a single item: every save replaces the whole basket.
+There is no call that adds or removes a single item: every save replaces the
+whole basket.
+
+#### Delete a saved basket
+
+`delete_baskets()` takes a list of basket IDs and deletes all of them in one
+call. You get a basket ID from `get_baskets_page()`, or from the `SavedBasket`
+that `save_basket()` and `save_basket_items()` return.
+
+An empty list is rejected, because Wolt's behaviour in that case has never been
+observed. So check the list before you send it, as both examples below do.
+
+To delete every saved basket:
+
+```python
+page = client.get_baskets_page(60.17, 24.94)
+ids = [entry["id"] for entry in page["baskets"]]
+if ids:
+    client.delete_baskets(ids)
+```
+
+To delete the basket for one restaurant:
+
+```python
+page = client.get_baskets_page(60.17, 24.94)
+ids = [
+    entry["id"] for entry in page["baskets"]
+    if entry["venue"]["slug"] == "<restaurant slug>"
+]
+if ids:
+    client.delete_baskets(ids)
+```
+
+Every saved basket has items in it, because a basket only exists once you put
+something in one. There is no empty saved basket to skip.
+
+Wolt sends nothing back, so the call cannot tell you whether the baskets were
+really there or whether anything was deleted. If you need to be sure, read
+`get_basket_count()` or `get_baskets_page()` again afterwards.
+
+Two limits of `get_baskets_page()` matter when you delete in bulk:
+
+- It reads one page. The response carries a `start_after_time` cursor, which
+  suggests Wolt can split a long list, and the library does not follow that
+  cursor. Compare `len(page["baskets"])` with `get_basket_count()` to see
+  whether you have the whole list.
+- It requires coordinates, and it is not known whether they only drive the
+  delivery estimates shown in the app or actually restrict which baskets come
+  back. If a basket you expect is missing, try coordinates near that
+  restaurant.
 
 #### Change a saved basket
 

{woltapi-0.4.0 → woltapi-0.5.0}/README.md

@@ -280,14 +280,16 @@ Item, option, and value IDs come from the assortment dictionary. For
 current menu.
 
 Wolt also stores one basket per restaurant on its servers. These are the
-baskets you see in the Wolt app. The library can read and replace them:
+baskets you see in the Wolt app. The library can read, replace, and delete
+them:
 
 | Call | What it does |
 | --- | --- |
 | `client.save_basket_items(assortment, venue=..., items=...)` | Replaces the whole server basket for that restaurant. Needs only the menu, a venue context, and items. This does not place an order. |
 | `client.save_basket(selection)` | Also replaces the whole server basket, but takes a full `OrderSelection`. |
 | `client.get_basket_count()` | The number of baskets stored on the server. |
-| `client.get_baskets_page(latitude, longitude)` | The full baskets page as a dictionary. It can contain personal data; do not log it raw. |
+| `client.get_baskets_page(latitude, longitude)` | Lists the saved baskets, as one page of the raw dictionary. It can contain personal data; do not log it raw. |
+| `client.delete_baskets(basket_ids)` | Deletes the listed server baskets. |
 | `client.get_venue_checkout_context(slug)` | The `VenueCheckoutContext` for a restaurant, read from its static page. |
 
 There are two ways to save. `save_basket_items()` needs no saved address and no
@@ -297,8 +299,56 @@ after `list_delivery_targets()` and `get_payment_methods()` on the same client,
 so it needs a saved delivery address and an enabled card. That cost is worth
 paying only when you go on to request a checkout quote with the same selection.
 
-Deleting a server basket is not supported. There is also no call that adds or
-removes a single item: every save replaces the whole basket.
+There is no call that adds or removes a single item: every save replaces the
+whole basket.
+
+#### Delete a saved basket
+
+`delete_baskets()` takes a list of basket IDs and deletes all of them in one
+call. You get a basket ID from `get_baskets_page()`, or from the `SavedBasket`
+that `save_basket()` and `save_basket_items()` return.
+
+An empty list is rejected, because Wolt's behaviour in that case has never been
+observed. So check the list before you send it, as both examples below do.
+
+To delete every saved basket:
+
+```python
+page = client.get_baskets_page(60.17, 24.94)
+ids = [entry["id"] for entry in page["baskets"]]
+if ids:
+    client.delete_baskets(ids)
+```
+
+To delete the basket for one restaurant:
+
+```python
+page = client.get_baskets_page(60.17, 24.94)
+ids = [
+    entry["id"] for entry in page["baskets"]
+    if entry["venue"]["slug"] == "<restaurant slug>"
+]
+if ids:
+    client.delete_baskets(ids)
+```
+
+Every saved basket has items in it, because a basket only exists once you put
+something in one. There is no empty saved basket to skip.
+
+Wolt sends nothing back, so the call cannot tell you whether the baskets were
+really there or whether anything was deleted. If you need to be sure, read
+`get_basket_count()` or `get_baskets_page()` again afterwards.
+
+Two limits of `get_baskets_page()` matter when you delete in bulk:
+
+- It reads one page. The response carries a `start_after_time` cursor, which
+  suggests Wolt can split a long list, and the library does not follow that
+  cursor. Compare `len(page["baskets"])` with `get_basket_count()` to see
+  whether you have the whole list.
+- It requires coordinates, and it is not known whether they only drive the
+  delivery estimates shown in the app or actually restrict which baskets come
+  back. If a basket you expect is missing, try coordinates near that
+  restaurant.
 
 #### Change a saved basket
 

woltapi-0.5.0/examples/verify_saved_basket_rebuild.py

@@ -0,0 +1,108 @@
+#!/usr/bin/env python3
+"""Verify saved baskets can be rebuilt from their current assortments.
+
+Read-only: this script only reads saved baskets and assortments. Its output is
+restricted to venue slugs, item counts, and integer cent totals.
+"""
+
+import argparse
+import math
+import re
+from collections.abc import Mapping
+from pathlib import Path
+
+from browse import TokenFileError, check_token_file, refresh_credentials
+
+from woltapi import Basket, WoltApiError, WoltClient
+
+
+class VerificationInputError(ValueError):
+    """A local saved-basket shape problem safe to report to the owner."""
+
+
+def venue_slug(saved_basket):
+    """Return the saved basket's public venue slug without exposing other fields."""
+    if not isinstance(saved_basket, Mapping):
+        raise VerificationInputError("Saved basket is not an object.")
+    venue = saved_basket.get("venue")
+    if not isinstance(venue, Mapping):
+        raise VerificationInputError("Saved basket venue is not an object.")
+    slug = venue.get("slug")
+    if not isinstance(slug, str) or re.fullmatch(r"[a-z0-9][a-z0-9-]*", slug) is None:
+        raise VerificationInputError("Saved basket venue has no usable slug.")
+    return slug
+
+
+def failure_line(slug, error):
+    """Format only local static error messages, never response-derived data."""
+    if isinstance(error, VerificationInputError):
+        message = str(error)
+    else:
+        message = "Details omitted."
+    return f"FAIL venue={slug}: {type(error).__name__}: {message}"
+
+
+def verify_baskets(client, args):
+    """Read, rebuild, and report each saved basket; return whether all passed."""
+    try:
+        page = client.get_baskets_page(args.latitude, args.longitude)
+        baskets = page.get("baskets") if isinstance(page, Mapping) else None
+        if not isinstance(baskets, list):
+            raise VerificationInputError("Saved baskets page has no baskets list.")
+    except (VerificationInputError, WoltApiError, TypeError, ValueError) as exc:
+        print(failure_line("unknown", exc))
+        return False
+
+    if not baskets:
+        # Keep the zero-basket note in the same privacy-safe output format.
+        print("PASS venue=no-saved-baskets items=0 total=0")
+        return True
+
+    passed = True
+    for saved_basket in baskets:
+        slug = "unknown"
+        try:
+            slug = venue_slug(saved_basket)
+            assortment = client.get_assortment(slug)
+            basket = Basket.from_saved_basket(assortment, saved_basket, args.language)
+            selections = basket.item_selections()
+            item_count = sum(selection.count for selection in selections)
+            total = sum(selection.basket_price for selection in selections)
+            print(f"PASS venue={slug} items={item_count} total={total}")
+        except (VerificationInputError, WoltApiError, TypeError, ValueError) as exc:
+            print(failure_line(slug, exc))
+            passed = False
+    return passed
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument("--latitude", type=float, required=True)
+    parser.add_argument("--longitude", type=float, required=True)
+    parser.add_argument("--token-file", type=Path, required=True)
+    parser.add_argument("--language", default="en")
+    args = parser.parse_args()
+    if not (
+        math.isfinite(args.latitude)
+        and -90 <= args.latitude <= 90
+        and math.isfinite(args.longitude)
+        and -180 <= args.longitude <= 180
+    ):
+        parser.error("Provide finite latitude [-90, 90] and longitude [-180, 180].")
+    check_token_file(parser, args.token_file)
+    try:
+        client = WoltClient(refresh_credentials(args.language, args.token_file))
+        return 0 if verify_baskets(client, args) else 1
+    except TokenFileError:
+        print("FAIL venue=unknown: TokenFileError: Could not save the refresh token.")
+        return 1
+    except (EOFError, KeyboardInterrupt) as exc:
+        print(f"FAIL venue=unknown: {type(exc).__name__}: Cancelled.")
+        return 1
+    except (OSError, UnicodeError, ValueError, WoltApiError) as exc:
+        print(failure_line("unknown", exc))
+        return 1
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

{woltapi-0.4.0 → woltapi-0.5.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "woltapi"
-version = "0.4.0"
+version = "0.5.0"
 description = "A small synchronous client for observed Wolt ordering flows."
 readme = "README.md"
 requires-python = ">=3.10"

{woltapi-0.4.0 → woltapi-0.5.0}/src/woltapi/basket.py

@@ -265,6 +265,10 @@ def _index_by_id(value: Any) -> dict[str, Mapping[str, Any]]:
 
 
 def _translated_name(value: Any, language: str) -> str:
+    # Catalog/read endpoints return strings; only restaurant-api purchase payloads
+    # (/v2/purchases, /v1/post-checkout-config) use list-of-{lang, value} names.
+    if _is_nonempty_text(value):
+        return value
     if not _is_array(value):
         raise SelectionError("The selected item is missing translated names.")
     for translation in value:
@@ -274,7 +278,12 @@ def _translated_name(value: Any, language: str) -> str:
         name = translation.get("value")
         if translation_language == language and _is_nonempty_text(name):
             return name
-    raise SelectionError("The selected item has no name for the basket language.")
+    for translation in value:
+        if isinstance(translation, Mapping) and _is_nonempty_text(
+            name := translation.get("value")
+        ):
+            return name
+    raise SelectionError("The selected item has no usable name.")
 
 
 def _required_fields(

{woltapi-0.4.0 → woltapi-0.5.0}/src/woltapi/client.py

@@ -149,6 +149,22 @@ class WoltClient:
             query={"lat": latitude, "lon": longitude},
         )
 
+    def delete_baskets(self, basket_ids: Sequence[str]) -> None:
+        """Delete server baskets without confirmation from the response.
+
+        The response carries no result, so a caller who wants to confirm must
+        re-read get_basket_count() or get_baskets_page().
+        """
+
+        basket_ids = _basket_ids(basket_ids)
+        self._transport.request(
+            ServiceHost.CONSUMER,
+            "POST",
+            "/order-xp/v1/baskets/bulk/delete",
+            json_body={"ids": basket_ids},
+            expect_response_body=False,
+        )
+
     def get_venue_static(self, venue_slug: str) -> dict[str, Any]:
         """Read the static venue page for a slug."""
 
@@ -546,6 +562,14 @@ def _required_text(value: object, name: str) -> str:
     return value
 
 
+def _basket_ids(value: object) -> list[str]:
+    if not isinstance(value, Sequence) or isinstance(value, (str, bytes)):
+        raise TypeError("basket_ids must be a sequence.")
+    if not value:
+        raise ValueError("basket_ids must not be empty.")
+    return [_required_text(basket_id, "basket ID") for basket_id in value]
+
+
 def _path_segment(value: object, name: str) -> str:
     return quote(_required_text(value, name), safe="")
 

{woltapi-0.4.0 → woltapi-0.5.0}/src/woltapi/purchase.py

@@ -937,6 +937,7 @@ def _purchase_option_summary(option: Mapping[str, Any]) -> PurchaseOptionSummary
 
 
 def _purchase_name_summaries(names: Any, label: str) -> tuple[PurchaseNameSummary, ...]:
+    # This list shape is correct for /v2/purchases; do not accept strings (verified by capture).
     if not _is_array(names) or not names:
         raise PurchasePreparationError(f"{label} are incomplete.")
     summaries: list[PurchaseNameSummary] = []

{woltapi-0.4.0 → woltapi-0.5.0}/src/woltapi/transport.py

@@ -74,6 +74,7 @@ class WoltTransport:
         *,
         query: Mapping[str, Any] | None = None,
         json_body: Mapping[str, Any] | None = None,
+        expect_response_body: bool = True,
     ) -> dict[str, Any]:
         """Make one JSON request to a fixed host without retries or redirects."""
 
@@ -87,6 +88,8 @@ class WoltTransport:
             raise TypeError("query must be a mapping when provided.")
         if json_body is not None and not isinstance(json_body, Mapping):
             raise TypeError("json_body must be a mapping when provided.")
+        if not isinstance(expect_response_body, bool):
+            raise TypeError("expect_response_body must be a bool.")
 
         data = _encode_json(json_body, service) if json_body is not None else None
         headers = _request_headers(
@@ -116,6 +119,8 @@ class WoltTransport:
 
         if not 200 <= status_code < 300:
             raise HTTPStatusError(service.value, status_code)
+        if not expect_response_body:
+            return {}
         return _decode_json_object(response_body, service)
 
 

{woltapi-0.4.0 → woltapi-0.5.0/src/woltapi.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: woltapi
-Version: 0.4.0
+Version: 0.5.0
 Summary: A small synchronous client for observed Wolt ordering flows.
 License-Expression: AGPL-3.0-only
 Project-URL: Repository, https://github.com/skorokithakis/woltapi
@@ -298,14 +298,16 @@ Item, option, and value IDs come from the assortment dictionary. For
 current menu.
 
 Wolt also stores one basket per restaurant on its servers. These are the
-baskets you see in the Wolt app. The library can read and replace them:
+baskets you see in the Wolt app. The library can read, replace, and delete
+them:
 
 | Call | What it does |
 | --- | --- |
 | `client.save_basket_items(assortment, venue=..., items=...)` | Replaces the whole server basket for that restaurant. Needs only the menu, a venue context, and items. This does not place an order. |
 | `client.save_basket(selection)` | Also replaces the whole server basket, but takes a full `OrderSelection`. |
 | `client.get_basket_count()` | The number of baskets stored on the server. |
-| `client.get_baskets_page(latitude, longitude)` | The full baskets page as a dictionary. It can contain personal data; do not log it raw. |
+| `client.get_baskets_page(latitude, longitude)` | Lists the saved baskets, as one page of the raw dictionary. It can contain personal data; do not log it raw. |
+| `client.delete_baskets(basket_ids)` | Deletes the listed server baskets. |
 | `client.get_venue_checkout_context(slug)` | The `VenueCheckoutContext` for a restaurant, read from its static page. |
 
 There are two ways to save. `save_basket_items()` needs no saved address and no
@@ -315,8 +317,56 @@ after `list_delivery_targets()` and `get_payment_methods()` on the same client,
 so it needs a saved delivery address and an enabled card. That cost is worth
 paying only when you go on to request a checkout quote with the same selection.
 
-Deleting a server basket is not supported. There is also no call that adds or
-removes a single item: every save replaces the whole basket.
+There is no call that adds or removes a single item: every save replaces the
+whole basket.
+
+#### Delete a saved basket
+
+`delete_baskets()` takes a list of basket IDs and deletes all of them in one
+call. You get a basket ID from `get_baskets_page()`, or from the `SavedBasket`
+that `save_basket()` and `save_basket_items()` return.
+
+An empty list is rejected, because Wolt's behaviour in that case has never been
+observed. So check the list before you send it, as both examples below do.
+
+To delete every saved basket:
+
+```python
+page = client.get_baskets_page(60.17, 24.94)
+ids = [entry["id"] for entry in page["baskets"]]
+if ids:
+    client.delete_baskets(ids)
+```
+
+To delete the basket for one restaurant:
+
+```python
+page = client.get_baskets_page(60.17, 24.94)
+ids = [
+    entry["id"] for entry in page["baskets"]
+    if entry["venue"]["slug"] == "<restaurant slug>"
+]
+if ids:
+    client.delete_baskets(ids)
+```
+
+Every saved basket has items in it, because a basket only exists once you put
+something in one. There is no empty saved basket to skip.
+
+Wolt sends nothing back, so the call cannot tell you whether the baskets were
+really there or whether anything was deleted. If you need to be sure, read
+`get_basket_count()` or `get_baskets_page()` again afterwards.
+
+Two limits of `get_baskets_page()` matter when you delete in bulk:
+
+- It reads one page. The response carries a `start_after_time` cursor, which
+  suggests Wolt can split a long list, and the library does not follow that
+  cursor. Compare `len(page["baskets"])` with `get_basket_count()` to see
+  whether you have the whole list.
+- It requires coordinates, and it is not known whether they only drive the
+  delivery estimates shown in the app or actually restrict which baskets come
+  back. If a basket you expect is missing, try coordinates near that
+  restaurant.
 
 #### Change a saved basket
 

{woltapi-0.4.0 → woltapi-0.5.0}/src/woltapi.egg-info/SOURCES.txt

@@ -6,6 +6,7 @@ pyproject.toml
 examples/browse.py
 examples/check_session.py
 examples/order.py
+examples/verify_saved_basket_rebuild.py
 src/woltapi/__init__.py
 src/woltapi/auth.py
 src/woltapi/basket.py
@@ -30,4 +31,5 @@ tests/test_check_session.py
 tests/test_client.py
 tests/test_order_example.py
 tests/test_purchase.py
-tests/test_selection.py
+tests/test_selection.py
+tests/test_verify_saved_basket_rebuild_example.py

{woltapi-0.4.0 → woltapi-0.5.0}/tests/test_basket.py

@@ -81,11 +81,25 @@ def assortment() -> dict[str, Any]:
                 "vat_percentage_decimal": "14.0",
                 "options": [],
             },
+            {
+                "id": "item-waffle",
+                "name": "Βέλγικη Βάφλα",
+                "price": 525,
+                "checksum": "checksum-waffle",
+                "allowed_delivery_methods": ["homedelivery"],
+                "restrictions": [],
+                "alcohol_permille": 0,
+                "product_hierarchy_tags": ["food", "dessert"],
+                "vat_percentage": 14,
+                "vat_percentage_decimal": "14.0",
+                "options": [],
+            },
         ],
         "categories": [
             {"id": "pizza", "item_ids": ["item-1"]},
             {"id": "salad", "item_ids": ["item-2"]},
             {"id": "other", "item_ids": ["item-removed"]},
+            {"id": "dessert", "item_ids": ["item-waffle"]},
         ],
         "options": [
             {
@@ -234,7 +248,6 @@ def test_basket_mutation_rejects_duplicates_and_contents_are_detached() -> None:
         lambda data: data["categories"][0]["item_ids"].clear(),
         lambda data: data["items"][0].update(price=1.5),
         lambda data: data["options"][0]["values"][0].update(price=True),
-        lambda data: data["items"][0].update(name=[{"lang": "fi", "value": "Pizza"}]),
     ],
 )
 def test_basket_rejects_missing_catalog_fields_invalid_prices_and_names(change) -> None:
@@ -246,6 +259,25 @@ def test_basket_rejects_missing_catalog_fields_invalid_prices_and_names(change)
         basket.add_item("item-1", options=[topping("pizza-toppings", "cheese")])
 
 
+def test_basket_falls_back_to_first_list_name_without_language_match() -> None:
+    data = assortment()
+    data["items"][0]["name"] = [{"lang": "fi", "value": "Pizza"}]
+
+    basket = Basket(data, "en")
+    basket.add_item("item-1")
+
+    assert basket.item_selections()[0].basket_name == "Pizza"
+
+
+def test_basket_rejects_unusable_name_shape() -> None:
+    data = assortment()
+    data["items"][0]["name"] = {"value": "Pizza"}
+
+    basket = Basket(data, "en")
+    with pytest.raises(SelectionError):
+        basket.add_item("item-1")
+
+
 def test_basket_copies_assortment_and_option_input() -> None:
     data = assortment()
     selected = [topping("pizza-toppings", "cheese")]
@@ -275,6 +307,19 @@ def test_basket_from_saved_basket_rebuilds_catalog_prices_and_options() -> None:
     assert basket.item_selections()[0].substitution_allowed is True
 
 
+def test_basket_uses_plain_string_catalog_names_when_adding_and_rebuilding() -> None:
+    basket = Basket(assortment(), "en")
+    basket.add_item("item-waffle")
+
+    assert basket.item_selections()[0].basket_name == "Βέλγικη Βάφλα"
+
+    saved = saved_basket()
+    saved["items"][0].update(id="item-waffle", options=[])
+    rebuilt = Basket.from_saved_basket(assortment(), saved, "en")
+
+    assert rebuilt.item_selections()[0].basket_name == "Βέλγικη Βάφλα"
+
+
 def test_basket_from_saved_basket_skips_unchosen_option_configurations() -> None:
     saved = saved_basket()
     saved["items"][0]["options"].append({"id": "pizza-toppings", "values": []})

{woltapi-0.4.0 → woltapi-0.5.0}/tests/test_client.py

@@ -17,6 +17,7 @@ from woltapi import (
     WoltClient,
     WoltTransport,
 )
+from woltapi.services import ServiceHost
 
 
 class FakeResponse:
@@ -261,6 +262,52 @@ class WoltClientTests(unittest.TestCase):
             self.assertEqual(headers["x-consumer-session"], "consumer-secret")
             self.assertNotIn("x-restaurant-session", headers)
 
+    def test_delete_baskets_posts_ids_and_accepts_null_response(self) -> None:
+        client, opener = make_client(FakeResponse(None))
+
+        result = client.delete_baskets(["basket-1", "basket-2"])
+
+        self.assertIsNone(result)
+        self.assertEqual(len(opener.requests), 1)
+        request = opener.requests[0]
+        self.assertEqual(request.method, "POST")
+        self.assertEqual(urlsplit(request.full_url).netloc, "consumer-api.wolt.com")
+        self.assertEqual(
+            urlsplit(request.full_url).path,
+            "/order-xp/v1/baskets/bulk/delete",
+        )
+        headers = _headers(request)
+        self.assertEqual(headers["x-consumer-session"], "consumer-secret")
+        self.assertEqual(
+            json.loads(request.data.decode("utf-8")), {"ids": ["basket-1", "basket-2"]}
+        )
+
+    def test_transport_rejects_null_body_when_response_is_expected(self) -> None:
+        client, _ = make_client(FakeResponse(None))
+
+        with self.assertRaises(ResponseShapeError):
+            client._transport.request(
+                ServiceHost.CONSUMER, "POST", "/order-xp/v1/baskets/bulk/delete"
+            )
+
+    def test_delete_baskets_validates_ids_before_request(self) -> None:
+        for basket_ids, error_type in (
+            ([], ValueError),
+            ("basket-1", TypeError),
+            (None, TypeError),
+            (1, TypeError),
+            (b"basket-1", TypeError),
+            ([1], ValueError),
+            (["  "], ValueError),
+        ):
+            with self.subTest(basket_ids=basket_ids):
+                client, opener = make_client()
+
+                with self.assertRaises(error_type):
+                    client.delete_baskets(basket_ids)  # type: ignore[arg-type]
+
+                self.assertEqual(opener.requests, [])
+
     def test_get_basket_count_rejects_non_integer_counts(self) -> None:
         for payload in ({}, {"count": True}, {"count": "1"}):
             with self.subTest(payload=payload):

woltapi-0.5.0/tests/test_verify_saved_basket_rebuild_example.py

@@ -0,0 +1,103 @@
+import argparse
+import runpy
+from pathlib import Path
+from urllib.parse import urlsplit
+
+import pytest
+
+from tests.test_basket import assortment, saved_basket
+from tests.test_client import FakeResponse, make_client
+from woltapi import SelectionError
+
+
+def load_example(monkeypatch):
+    examples = Path(__file__).resolve().parents[1] / "examples"
+    monkeypatch.syspath_prepend(str(examples))
+    return runpy.run_path(str(examples / "verify_saved_basket_rebuild.py"))
+
+
+def test_verify_baskets_rebuilds_with_read_only_requests(monkeypatch, capsys):
+    example = load_example(monkeypatch)
+    client, opener = make_client(
+        FakeResponse({"baskets": [saved_basket()]}), FakeResponse(assortment())
+    )
+    args = argparse.Namespace(latitude=60.17, longitude=24.94, language="en")
+
+    assert example["verify_baskets"](client, args) is True
+
+    assert capsys.readouterr().out == "PASS venue=pizza-place items=2 total=1630\n"
+    assert [
+        (request.get_method(), urlsplit(request.full_url).path)
+        for request in opener.requests
+    ] == [
+        ("GET", "/order-xp/web/v1/pages/baskets"),
+        (
+            "GET",
+            "/consumer-api/consumer-assortment/v1/venues/slug/pizza-place/assortment",
+        ),
+    ]
+
+
+def test_verify_baskets_reports_zero_baskets_without_extra_requests(
+    monkeypatch, capsys
+):
+    example = load_example(monkeypatch)
+    client, opener = make_client(FakeResponse({"baskets": []}))
+    args = argparse.Namespace(latitude=60.17, longitude=24.94, language="en")
+
+    assert example["verify_baskets"](client, args) is True
+
+    assert capsys.readouterr().out == "PASS venue=no-saved-baskets items=0 total=0\n"
+    assert len(opener.requests) == 1
+
+
+def test_verify_baskets_omits_private_malformed_page_data(monkeypatch, capsys):
+    example = load_example(monkeypatch)
+    client, _ = make_client(FakeResponse({"baskets": "PRIVATE BASKET DATA"}))
+    args = argparse.Namespace(latitude=60.17, longitude=24.94, language="en")
+
+    assert example["verify_baskets"](client, args) is False
+
+    output = capsys.readouterr().out
+    assert output == (
+        "FAIL venue=unknown: VerificationInputError: "
+        "Saved baskets page has no baskets list.\n"
+    )
+    assert "PRIVATE" not in output
+
+
+def test_verify_baskets_omits_private_library_error_message(monkeypatch, capsys):
+    example = load_example(monkeypatch)
+    args = argparse.Namespace(latitude=60.17, longitude=24.94, language="en")
+
+    class FailingClient:
+        def get_baskets_page(self, latitude, longitude):
+            return {"baskets": [saved_basket()]}
+
+        def get_assortment(self, slug):
+            raise SelectionError("PRIVATE LIBRARY ERROR")
+
+    assert example["verify_baskets"](FailingClient(), args) is False
+
+    output = capsys.readouterr().out
+    assert output == "FAIL venue=pizza-place: SelectionError: Details omitted.\n"
+    assert "PRIVATE" not in output
+
+
+@pytest.mark.parametrize(
+    "slug", ["pizza place", "pizza\x00place", "Pizza-place", "pizza_place"]
+)
+def test_verify_baskets_rejects_invalid_venue_slug(monkeypatch, capsys, slug):
+    example = load_example(monkeypatch)
+    basket = saved_basket()
+    basket["venue"]["slug"] = slug
+    client, opener = make_client(FakeResponse({"baskets": [basket]}))
+    args = argparse.Namespace(latitude=60.17, longitude=24.94, language="en")
+
+    assert example["verify_baskets"](client, args) is False
+
+    assert capsys.readouterr().out == (
+        "FAIL venue=unknown: VerificationInputError: "
+        "Saved basket venue has no usable slug.\n"
+    )
+    assert len(opener.requests) == 1