@domandigital/gbp 0.3.1 → 0.4.0

package/dist/index.d.cts

@@ -1,3 +1,44 @@
+/**
+ * One place that decides how long to wait for Google and when to try again.
+ *
+ * Every request gets a deadline, because a stalled response would otherwise
+ * hold a Next.js render or build until the platform kills it. Rate limits
+ * (429) and transient server errors (500, 502, 503, 504) get a small, bounded
+ * number of retries with full-jitter backoff. Google documents the 429 for
+ * quota (developers.google.com/my-business/content/limits); whether the
+ * Business Profile API sends `Retry-After` is not documented, so it is honoured
+ * when present and not relied on.
+ *
+ * Nothing else is retried: a 400, 403 or 404 needs a person to change
+ * something, and repeating the request only delays the error that says so.
+ */
+interface GbpRequestOptions {
+    /** Deadline for each attempt, in ms. Default 8000. */
+    timeoutMs?: number;
+    /** Attempts per request, counting the first. Default 3. */
+    maxAttempts?: number;
+    /** Base of the exponential backoff, in ms. Default 250. */
+    baseDelayMs?: number;
+    /** Cap on a single backoff, in ms. Default 5000. */
+    maxDelayMs?: number;
+    /** Longest `Retry-After` this will sleep through, in ms. Longer, and the error is returned instead. Default 30000. */
+    maxRetryAfterMs?: number;
+    /** Cancels everything, including a wait between attempts. */
+    signal?: AbortSignal;
+}
+declare const DEFAULT_REQUEST_POLICY: {
+    readonly timeoutMs: 8000;
+    readonly maxAttempts: 3;
+    readonly baseDelayMs: 250;
+    readonly maxDelayMs: 5000;
+    readonly maxRetryAfterMs: 30000;
+};
+/**
+ * `Retry-After` as milliseconds: either delay-seconds or an HTTP-date (RFC
+ * 9110 section 10.2.3). `null` when absent or unreadable.
+ */
+declare function parseRetryAfter(value: string | null | undefined, nowMs?: number): number | null;
+
 /**
  * Google user OAuth (refresh-token) auth -- for APIs that reject service
  * accounts, notably the Business Profile API (all scopes) and Search Console
@@ -9,17 +50,39 @@
  * GBP_REFRESH_TOKEN values are set in the deploying app's environment -- not
  * a code-level distinction. Each app/deployment configures its own.
  *
+ * The access token is cached per process until a minute before it expires.
+ * Concurrent callers that miss the cache share one refresh rather than each
+ * starting their own. A caller that is told the token is no longer good (a
+ * 401 from the API) invalidates exactly that token and forces one refresh;
+ * see `invalidateAccessToken`.
+ *
  * Env: GBP_CLIENT_ID, GBP_CLIENT_SECRET, GBP_REFRESH_TOKEN.
  */
+
 /** True when the OAuth client + refresh token are present. */
 declare function hasGoogleOAuthCredentials(): boolean;
+interface AccessTokenOptions {
+    /** Ignore the cache and refresh now, e.g. after the API rejected the cached token. */
+    forceRefresh?: boolean;
+    /** Deadline and retry policy for the token request. */
+    request?: GbpRequestOptions;
+}
+/**
+ * Drop the cached token, but only if it is still the one the caller used. A
+ * request that was rejected with an old token must not throw away a newer one
+ * another request has already fetched.
+ */
+declare function invalidateAccessToken(accessToken: string): void;
 /**
  * Exchange the stored refresh token for a short-lived access token. Returns
  * `null` when credentials aren't configured so callers can degrade
  * gracefully. The token's actual scopes are whatever the refresh token was
  * granted with -- not scoped per call.
+ *
+ * Throws `GbpAuthError`. On `invalid_grant` the cache is cleared and
+ * `reauthorizationRequired` is true: retrying cannot fix it.
  */
-declare function getGoogleOAuthAccessToken(): Promise<string | null>;
+declare function getGoogleOAuthAccessToken(options?: AccessTokenOptions): Promise<string | null>;
 
 /**
  * Google Business Profile -- fetch the business's own reviews, including the
@@ -43,10 +106,28 @@ declare function getGoogleOAuthAccessToken(): Promise<string | null>;
  * Env: GBP_CLIENT_ID, GBP_CLIENT_SECRET, GBP_REFRESH_TOKEN,
  * GOOGLE_BUSINESS_ACCOUNT_ID, GOOGLE_BUSINESS_LOCATION_ID.
  */
+
+/** 50 pages of 50 is 2,500 reviews: far past any client's profile, well short of a runaway loop. */
+declare const DEFAULT_MAX_PAGES = 50;
+/** Google's moderation state for an owner reply. Replies from before moderation existed carry none. */
+type ReviewReplyState = "PENDING" | "REJECTED" | "APPROVED";
 interface ReviewReply {
     text: string;
     /** ISO 8601, when the reply was last posted/edited. */
     updatedAt: string;
+    /** Moderation state, when Google reports one. */
+    state?: ReviewReplyState;
+    /** Why Google rejected the reply. Only set when `state` is `"REJECTED"`. New values may appear. */
+    policyViolation?: string;
+}
+/** A photo or video the reviewer attached. */
+interface ReviewMedia {
+    /** The photo, or the video's thumbnail. */
+    thumbnailUrl: string;
+    /** The reviewer's own label for it, if any. */
+    label?: string;
+    /** Set for a video. */
+    videoUrl?: string;
 }
 interface BusinessReview {
     id: string;
@@ -56,16 +137,61 @@ interface BusinessReview {
     comment: string;
     createdAt: string;
     reply?: ReviewReply;
+    /** Photos and videos attached to the review, in Google's order. */
+    media?: ReviewMedia[];
+    /** Google's URL for replying to this review, for an owner-facing surface. */
+    replyUrl?: string;
 }
 interface BusinessReviewsResult {
+    /**
+     * Google's average for every review on the profile, rating-only ones
+     * included. `null` when Google did not report one (or the package is
+     * unconfigured): never computed from the returned list.
+     */
     averageRating: number | null;
-    totalReviewCount: number;
+    /**
+     * Google's count of every review on the profile. `null` when Google did not
+     * report one: never the length of the returned (filtered, limited) list,
+     * which would publish a wrong number into anything built from it.
+     */
+    totalReviewCount: number | null;
     reviews: BusinessReview[];
 }
 /** True when account + location + OAuth credentials are all configured. */
 declare function isBusinessProfileConfigured(): boolean;
+interface RawReview {
+    reviewId: string;
+    reviewer?: {
+        displayName?: string;
+        profilePhotoUrl?: string;
+    };
+    starRating?: string;
+    comment?: string;
+    createTime?: string;
+    reviewReply?: {
+        comment?: string;
+        updateTime?: string;
+        reviewReplyState?: string;
+        policyViolation?: string;
+    };
+    reviewMediaItems?: {
+        thumbnailUrl?: string;
+        thumbnailLabel?: string;
+        videoUrl?: string;
+    }[];
+    reviewReplyUrl?: string;
+}
+interface ReviewsPage {
+    reviews: RawReview[];
+    averageRating?: number;
+    totalReviewCount?: number;
+    nextPageToken?: string;
+}
+type ReviewOrder = "shuffle" | "api";
 interface GetBusinessReviewsOptions {
-    /** Max reviews to return (default: all of them, paginated). */
+    /** Max reviews to return (default: all of them, paginated). Counts usable
+     * reviews only -- see `filterMinStars` -- so this is "give me N reviews you
+     * can show", not "give me N raw API results". */
     limit?: number;
     /**
      * When set, only reviews at or above this star rating are returned -- for
@@ -80,12 +206,102 @@ interface GetBusinessReviewsOptions {
         revalidate?: number;
         tags?: string[];
     };
+    /**
+     * `"shuffle"` (default): randomizes the returned order, applied after
+     * `limit`. `"api"`: preserves the Business Profile API's own ordering
+     * (`updateTime desc`, most recent first).
+     */
+    order?: ReviewOrder;
+    /**
+     * Keep owner replies Google has not approved (`PENDING` or `REJECTED`).
+     * Default `false`: a public page shows only replies Google shows, so a
+     * rejected reply never appears on the site as if it were live. Set `true`
+     * for an owner-facing surface, where `reply.state` and
+     * `reply.policyViolation` say what happened.
+     */
+    includeUnapprovedReplies?: boolean;
+    /** Stop after this many pages rather than loop without end. Default 50. */
+    maxPages?: number;
+    /** Deadline and retry policy for every request this call makes. */
+    request?: GbpRequestOptions;
 }
+/** Validate a page of the reviews.list response. A malformed review is skipped; a malformed page throws. */
+declare function parseListReviewsResponse(body: unknown): ReviewsPage;
 /**
  * Fetch reviews for the configured location, paginating through all pages
  * (GBP caps each page at 50). Returns empty results (never throws on missing
  * config) so UI can render unconditionally.
+ *
+ * Every request has a deadline and retries 429 and transient 5xx a bounded
+ * number of times. A 401 means the cached access token is no longer good: it
+ * is dropped, refreshed once, and the same page is asked for again. A second
+ * 401 throws. Throws `GbpApiError`, `GbpAuthError`, `GbpTimeoutError` or
+ * `GbpPaginationError`; catch and degrade in the calling route.
  */
 declare function getBusinessReviews(options?: GetBusinessReviewsOptions): Promise<BusinessReviewsResult>;
 
-export { type BusinessReview, type BusinessReviewsResult, type GetBusinessReviewsOptions, type ReviewReply, getBusinessReviews, getGoogleOAuthAccessToken, hasGoogleOAuthCredentials, isBusinessProfileConfigured };
+/**
+ * Typed failures, so a site can tell "reauthorise the Google account" from
+ * "Google is having a bad minute" from "our code looped", and log the
+ * difference without ever logging a credential.
+ *
+ * No message here carries a client id, client secret, refresh token, access
+ * token or review text. Bodies from Google are cut to a short, bounded
+ * excerpt.
+ */
+/** Base class: `instanceof GbpError` catches every failure this package throws. */
+declare class GbpError extends Error {
+    constructor(message: string);
+}
+type GbpAuthErrorCode = "invalid_grant" | "invalid_client" | "token_request_failed";
+/**
+ * The refresh-token exchange failed. `reauthorizationRequired` is true for
+ * `invalid_grant`: Google's documented remedy is to "authenticate the user
+ * again", and no amount of retrying fixes it. Common causes: the user revoked
+ * access, the token went unused for six months, the OAuth app is still in
+ * "Testing" status (refresh tokens expire after 7 days), or the account passed
+ * 100 live refresh tokens for this client and the oldest was dropped.
+ */
+declare class GbpAuthError extends GbpError {
+    readonly code: GbpAuthErrorCode;
+    readonly reauthorizationRequired: boolean;
+    readonly status: number;
+    readonly description?: string;
+    constructor(code: GbpAuthErrorCode, status: number, description?: string);
+}
+/** A Business Profile API call returned an error status after its retry budget. */
+declare class GbpApiError extends GbpError {
+    readonly operation: string;
+    readonly status: number;
+    readonly retryable: boolean;
+    readonly attempts: number;
+    /** Set when Google asked for a longer wait than this package will sleep through. */
+    readonly retryAfterMs?: number;
+    constructor(options: {
+        operation: string;
+        status: number;
+        retryable: boolean;
+        attempts: number;
+        body?: string;
+        retryAfterMs?: number;
+    });
+}
+/** One attempt took longer than its deadline. Distinct from a caller's own abort. */
+declare class GbpTimeoutError extends GbpError {
+    readonly operation: string;
+    readonly timeoutMs: number;
+    constructor(operation: string, timeoutMs: number);
+}
+/**
+ * Pagination stopped for a reason that means something upstream is wrong:
+ * Google handed back a page token it had already given, or the page budget
+ * ran out. Thrown rather than returning a partial list, which would look like
+ * a complete one.
+ */
+declare class GbpPaginationError extends GbpError {
+    readonly reason: "repeated_token" | "page_limit";
+    readonly pagesFetched: number;
+    constructor(reason: "repeated_token" | "page_limit", pagesFetched: number);
+}
+
+export { type AccessTokenOptions, type BusinessReview, type BusinessReviewsResult, DEFAULT_MAX_PAGES, DEFAULT_REQUEST_POLICY, GbpApiError, GbpAuthError, type GbpAuthErrorCode, GbpError, GbpPaginationError, type GbpRequestOptions, GbpTimeoutError, type GetBusinessReviewsOptions, type ReviewMedia, type ReviewOrder, type ReviewReply, type ReviewReplyState, getBusinessReviews, getGoogleOAuthAccessToken, hasGoogleOAuthCredentials, invalidateAccessToken, isBusinessProfileConfigured, parseListReviewsResponse, parseRetryAfter };

package/dist/index.d.ts

@@ -1,3 +1,44 @@
+/**
+ * One place that decides how long to wait for Google and when to try again.
+ *
+ * Every request gets a deadline, because a stalled response would otherwise
+ * hold a Next.js render or build until the platform kills it. Rate limits
+ * (429) and transient server errors (500, 502, 503, 504) get a small, bounded
+ * number of retries with full-jitter backoff. Google documents the 429 for
+ * quota (developers.google.com/my-business/content/limits); whether the
+ * Business Profile API sends `Retry-After` is not documented, so it is honoured
+ * when present and not relied on.
+ *
+ * Nothing else is retried: a 400, 403 or 404 needs a person to change
+ * something, and repeating the request only delays the error that says so.
+ */
+interface GbpRequestOptions {
+    /** Deadline for each attempt, in ms. Default 8000. */
+    timeoutMs?: number;
+    /** Attempts per request, counting the first. Default 3. */
+    maxAttempts?: number;
+    /** Base of the exponential backoff, in ms. Default 250. */
+    baseDelayMs?: number;
+    /** Cap on a single backoff, in ms. Default 5000. */
+    maxDelayMs?: number;
+    /** Longest `Retry-After` this will sleep through, in ms. Longer, and the error is returned instead. Default 30000. */
+    maxRetryAfterMs?: number;
+    /** Cancels everything, including a wait between attempts. */
+    signal?: AbortSignal;
+}
+declare const DEFAULT_REQUEST_POLICY: {
+    readonly timeoutMs: 8000;
+    readonly maxAttempts: 3;
+    readonly baseDelayMs: 250;
+    readonly maxDelayMs: 5000;
+    readonly maxRetryAfterMs: 30000;
+};
+/**
+ * `Retry-After` as milliseconds: either delay-seconds or an HTTP-date (RFC
+ * 9110 section 10.2.3). `null` when absent or unreadable.
+ */
+declare function parseRetryAfter(value: string | null | undefined, nowMs?: number): number | null;
+
 /**
  * Google user OAuth (refresh-token) auth -- for APIs that reject service
  * accounts, notably the Business Profile API (all scopes) and Search Console
@@ -9,17 +50,39 @@
  * GBP_REFRESH_TOKEN values are set in the deploying app's environment -- not
  * a code-level distinction. Each app/deployment configures its own.
  *
+ * The access token is cached per process until a minute before it expires.
+ * Concurrent callers that miss the cache share one refresh rather than each
+ * starting their own. A caller that is told the token is no longer good (a
+ * 401 from the API) invalidates exactly that token and forces one refresh;
+ * see `invalidateAccessToken`.
+ *
  * Env: GBP_CLIENT_ID, GBP_CLIENT_SECRET, GBP_REFRESH_TOKEN.
  */
+
 /** True when the OAuth client + refresh token are present. */
 declare function hasGoogleOAuthCredentials(): boolean;
+interface AccessTokenOptions {
+    /** Ignore the cache and refresh now, e.g. after the API rejected the cached token. */
+    forceRefresh?: boolean;
+    /** Deadline and retry policy for the token request. */
+    request?: GbpRequestOptions;
+}
+/**
+ * Drop the cached token, but only if it is still the one the caller used. A
+ * request that was rejected with an old token must not throw away a newer one
+ * another request has already fetched.
+ */
+declare function invalidateAccessToken(accessToken: string): void;
 /**
  * Exchange the stored refresh token for a short-lived access token. Returns
  * `null` when credentials aren't configured so callers can degrade
  * gracefully. The token's actual scopes are whatever the refresh token was
  * granted with -- not scoped per call.
+ *
+ * Throws `GbpAuthError`. On `invalid_grant` the cache is cleared and
+ * `reauthorizationRequired` is true: retrying cannot fix it.
  */
-declare function getGoogleOAuthAccessToken(): Promise<string | null>;
+declare function getGoogleOAuthAccessToken(options?: AccessTokenOptions): Promise<string | null>;
 
 /**
  * Google Business Profile -- fetch the business's own reviews, including the
@@ -43,10 +106,28 @@ declare function getGoogleOAuthAccessToken(): Promise<string | null>;
  * Env: GBP_CLIENT_ID, GBP_CLIENT_SECRET, GBP_REFRESH_TOKEN,
  * GOOGLE_BUSINESS_ACCOUNT_ID, GOOGLE_BUSINESS_LOCATION_ID.
  */
+
+/** 50 pages of 50 is 2,500 reviews: far past any client's profile, well short of a runaway loop. */
+declare const DEFAULT_MAX_PAGES = 50;
+/** Google's moderation state for an owner reply. Replies from before moderation existed carry none. */
+type ReviewReplyState = "PENDING" | "REJECTED" | "APPROVED";
 interface ReviewReply {
     text: string;
     /** ISO 8601, when the reply was last posted/edited. */
     updatedAt: string;
+    /** Moderation state, when Google reports one. */
+    state?: ReviewReplyState;
+    /** Why Google rejected the reply. Only set when `state` is `"REJECTED"`. New values may appear. */
+    policyViolation?: string;
+}
+/** A photo or video the reviewer attached. */
+interface ReviewMedia {
+    /** The photo, or the video's thumbnail. */
+    thumbnailUrl: string;
+    /** The reviewer's own label for it, if any. */
+    label?: string;
+    /** Set for a video. */
+    videoUrl?: string;
 }
 interface BusinessReview {
     id: string;
@@ -56,16 +137,61 @@ interface BusinessReview {
     comment: string;
     createdAt: string;
     reply?: ReviewReply;
+    /** Photos and videos attached to the review, in Google's order. */
+    media?: ReviewMedia[];
+    /** Google's URL for replying to this review, for an owner-facing surface. */
+    replyUrl?: string;
 }
 interface BusinessReviewsResult {
+    /**
+     * Google's average for every review on the profile, rating-only ones
+     * included. `null` when Google did not report one (or the package is
+     * unconfigured): never computed from the returned list.
+     */
     averageRating: number | null;
-    totalReviewCount: number;
+    /**
+     * Google's count of every review on the profile. `null` when Google did not
+     * report one: never the length of the returned (filtered, limited) list,
+     * which would publish a wrong number into anything built from it.
+     */
+    totalReviewCount: number | null;
     reviews: BusinessReview[];
 }
 /** True when account + location + OAuth credentials are all configured. */
 declare function isBusinessProfileConfigured(): boolean;
+interface RawReview {
+    reviewId: string;
+    reviewer?: {
+        displayName?: string;
+        profilePhotoUrl?: string;
+    };
+    starRating?: string;
+    comment?: string;
+    createTime?: string;
+    reviewReply?: {
+        comment?: string;
+        updateTime?: string;
+        reviewReplyState?: string;
+        policyViolation?: string;
+    };
+    reviewMediaItems?: {
+        thumbnailUrl?: string;
+        thumbnailLabel?: string;
+        videoUrl?: string;
+    }[];
+    reviewReplyUrl?: string;
+}
+interface ReviewsPage {
+    reviews: RawReview[];
+    averageRating?: number;
+    totalReviewCount?: number;
+    nextPageToken?: string;
+}
+type ReviewOrder = "shuffle" | "api";
 interface GetBusinessReviewsOptions {
-    /** Max reviews to return (default: all of them, paginated). */
+    /** Max reviews to return (default: all of them, paginated). Counts usable
+     * reviews only -- see `filterMinStars` -- so this is "give me N reviews you
+     * can show", not "give me N raw API results". */
     limit?: number;
     /**
      * When set, only reviews at or above this star rating are returned -- for
@@ -80,12 +206,102 @@ interface GetBusinessReviewsOptions {
         revalidate?: number;
         tags?: string[];
     };
+    /**
+     * `"shuffle"` (default): randomizes the returned order, applied after
+     * `limit`. `"api"`: preserves the Business Profile API's own ordering
+     * (`updateTime desc`, most recent first).
+     */
+    order?: ReviewOrder;
+    /**
+     * Keep owner replies Google has not approved (`PENDING` or `REJECTED`).
+     * Default `false`: a public page shows only replies Google shows, so a
+     * rejected reply never appears on the site as if it were live. Set `true`
+     * for an owner-facing surface, where `reply.state` and
+     * `reply.policyViolation` say what happened.
+     */
+    includeUnapprovedReplies?: boolean;
+    /** Stop after this many pages rather than loop without end. Default 50. */
+    maxPages?: number;
+    /** Deadline and retry policy for every request this call makes. */
+    request?: GbpRequestOptions;
 }
+/** Validate a page of the reviews.list response. A malformed review is skipped; a malformed page throws. */
+declare function parseListReviewsResponse(body: unknown): ReviewsPage;
 /**
  * Fetch reviews for the configured location, paginating through all pages
  * (GBP caps each page at 50). Returns empty results (never throws on missing
  * config) so UI can render unconditionally.
+ *
+ * Every request has a deadline and retries 429 and transient 5xx a bounded
+ * number of times. A 401 means the cached access token is no longer good: it
+ * is dropped, refreshed once, and the same page is asked for again. A second
+ * 401 throws. Throws `GbpApiError`, `GbpAuthError`, `GbpTimeoutError` or
+ * `GbpPaginationError`; catch and degrade in the calling route.
  */
 declare function getBusinessReviews(options?: GetBusinessReviewsOptions): Promise<BusinessReviewsResult>;
 
-export { type BusinessReview, type BusinessReviewsResult, type GetBusinessReviewsOptions, type ReviewReply, getBusinessReviews, getGoogleOAuthAccessToken, hasGoogleOAuthCredentials, isBusinessProfileConfigured };
+/**
+ * Typed failures, so a site can tell "reauthorise the Google account" from
+ * "Google is having a bad minute" from "our code looped", and log the
+ * difference without ever logging a credential.
+ *
+ * No message here carries a client id, client secret, refresh token, access
+ * token or review text. Bodies from Google are cut to a short, bounded
+ * excerpt.
+ */
+/** Base class: `instanceof GbpError` catches every failure this package throws. */
+declare class GbpError extends Error {
+    constructor(message: string);
+}
+type GbpAuthErrorCode = "invalid_grant" | "invalid_client" | "token_request_failed";
+/**
+ * The refresh-token exchange failed. `reauthorizationRequired` is true for
+ * `invalid_grant`: Google's documented remedy is to "authenticate the user
+ * again", and no amount of retrying fixes it. Common causes: the user revoked
+ * access, the token went unused for six months, the OAuth app is still in
+ * "Testing" status (refresh tokens expire after 7 days), or the account passed
+ * 100 live refresh tokens for this client and the oldest was dropped.
+ */
+declare class GbpAuthError extends GbpError {
+    readonly code: GbpAuthErrorCode;
+    readonly reauthorizationRequired: boolean;
+    readonly status: number;
+    readonly description?: string;
+    constructor(code: GbpAuthErrorCode, status: number, description?: string);
+}
+/** A Business Profile API call returned an error status after its retry budget. */
+declare class GbpApiError extends GbpError {
+    readonly operation: string;
+    readonly status: number;
+    readonly retryable: boolean;
+    readonly attempts: number;
+    /** Set when Google asked for a longer wait than this package will sleep through. */
+    readonly retryAfterMs?: number;
+    constructor(options: {
+        operation: string;
+        status: number;
+        retryable: boolean;
+        attempts: number;
+        body?: string;
+        retryAfterMs?: number;
+    });
+}
+/** One attempt took longer than its deadline. Distinct from a caller's own abort. */
+declare class GbpTimeoutError extends GbpError {
+    readonly operation: string;
+    readonly timeoutMs: number;
+    constructor(operation: string, timeoutMs: number);
+}
+/**
+ * Pagination stopped for a reason that means something upstream is wrong:
+ * Google handed back a page token it had already given, or the page budget
+ * ran out. Thrown rather than returning a partial list, which would look like
+ * a complete one.
+ */
+declare class GbpPaginationError extends GbpError {
+    readonly reason: "repeated_token" | "page_limit";
+    readonly pagesFetched: number;
+    constructor(reason: "repeated_token" | "page_limit", pagesFetched: number);
+}
+
+export { type AccessTokenOptions, type BusinessReview, type BusinessReviewsResult, DEFAULT_MAX_PAGES, DEFAULT_REQUEST_POLICY, GbpApiError, GbpAuthError, type GbpAuthErrorCode, GbpError, GbpPaginationError, type GbpRequestOptions, GbpTimeoutError, type GetBusinessReviewsOptions, type ReviewMedia, type ReviewOrder, type ReviewReply, type ReviewReplyState, getBusinessReviews, getGoogleOAuthAccessToken, hasGoogleOAuthCredentials, invalidateAccessToken, isBusinessProfileConfigured, parseListReviewsResponse, parseRetryAfter };