@drttix/drt-sdk 1.3.4 → 1.4.0

package/src/custom/custom-request.txt

@@ -260,14 +260,16 @@ export const getResponseBody = async (response: Response): Promise<any> => {
 			const contentType = response.headers.get("Content-Type");
 			if (contentType) {
 				const jsonTypes = ["application/json", "application/problem+json"];
-				const isJSON = jsonTypes.some((type) =>
-					contentType.toLowerCase().startsWith(type)
-				);
+				const lc = contentType.toLowerCase();
+				const isJSON = jsonTypes.some((type) => lc.startsWith(type));
 				if (isJSON) {
 					return await response.json();
-				} else {
-					return await response.text();
 				}
+				// Return Blob for PDF / binary responses
+				if (lc.startsWith('application/pdf') || lc.startsWith('application/octet-stream')) {
+					return await response.blob();
+				}
+				return await response.text();
 			}
 		} catch (error) {
 			console.error(error);
@@ -315,7 +317,37 @@ export const catchErrorCodes = (
 	}
 };
 
-let globalCookieHeader: string | undefined;
+// Cookies are cached per request "identity" rather than in one shared slot.
+// Shopper calls carry shopperguid/accountid in options.headers (resolved
+// per-call by resolveShopperHeaders()), so each shopper gets its own cookie
+// jar instead of one shopper's session leaking into another's requests when
+// a single SDK instance serves many shoppers concurrently (shopperScope:
+// 'per-request'). Portal/scanner calls carry no such header and fall back to
+// the single default slot, matching prior behavior.
+const DEFAULT_COOKIE_KEY = "__default__";
+const MAX_COOKIE_ENTRIES = 10_000;
+const cookiesByKey = new Map<string, string>();
+
+const getCookieKey = (options: ApiRequestOptions): string => {
+	const shopperguid = options.headers?.["shopperguid"];
+	const accountid = options.headers?.["accountid"];
+	if (isStringWithValue(shopperguid)) {
+		return `${shopperguid}:${isStringWithValue(accountid) ? accountid : ""}`;
+	}
+	return DEFAULT_COOKIE_KEY;
+};
+
+const storeCookie = (key: string, value: string): void => {
+	if (!cookiesByKey.has(key) && cookiesByKey.size >= MAX_COOKIE_ENTRIES) {
+		// Evict the oldest entry (Map preserves insertion order) to bound memory
+		// on a long-running, many-shopper backend process.
+		const oldestKey = cookiesByKey.keys().next().value;
+		if (oldestKey !== undefined) {
+			cookiesByKey.delete(oldestKey);
+		}
+	}
+	cookiesByKey.set(key, value);
+};
 
 /**
  * Wraps sendRequest to capture cookies on login
@@ -330,6 +362,7 @@ export const request = <T>(
 			const url = getUrl(config, options);
 			const formData = getFormData(options);
 			const body = getRequestBody(options);
+			const cookieKey = getCookieKey(options);
 
 			// Before making headers, possibly attach cookie if we have it
 			const baseHeaders = await getHeaders(config, options);
@@ -338,9 +371,10 @@ export const request = <T>(
 			baseHeaders.forEach((value, key) => {
 				headerObj[key] = value;
 			});
-			if (globalCookieHeader) {
+			const storedCookie = cookiesByKey.get(cookieKey);
+			if (storedCookie) {
 				// Attach stored cookie
-				headerObj["Cookie"] = globalCookieHeader;
+				headerObj["Cookie"] = storedCookie;
 			}
 			const headers = new Headers(headerObj);
 
@@ -359,7 +393,7 @@ export const request = <T>(
 				const setCookie = response.headers.get("set-cookie");
 				if (setCookie) {
 					// Overwrite or append as needed
-					globalCookieHeader = setCookie;
+					storeCookie(cookieKey, setCookie);
 				}
 
 				const responseBody = await getResponseBody(response);

package/src/functions/sdkConfig.ts

@@ -3,14 +3,34 @@ import { OpenAPI as ShopperAPI } from '../generated/shopper/core/OpenAPI';
 import { OpenAPI as ScannerAPI } from '../generated/scanner/core/OpenAPI';
 import { OpenAPI as PortalAPI } from '../generated/portal/core/OpenAPI';
 
+export type ShopperScope = 'singleton' | 'per-request';
+
 export interface SDKConfig {
-    shopperGuid: string;
-    accountId: string;
     apiKey: string;
+    /**
+     * Required when shopperScope is 'singleton' (the default). Optional when
+     * shopperScope is 'per-request' — in that mode these act only as a fallback
+     * default, and every shopper call may override them via a trailing
+     * `{ shopperGuid, accountId }` context argument.
+     */
+    shopperGuid?: string;
+    accountId?: string;
+    /**
+     * 'singleton' (default): shopperGuid/accountId are fixed for the lifetime of
+     * the process, exactly like today.
+     *
+     * 'per-request': shopperGuid/accountId become optional at init() time, and
+     * every shopper service method accepts an optional trailing context argument
+     * ({ shopperGuid, accountId }) so a single SDK instance can serve requests
+     * for many shoppers/accounts concurrently — the intended shape for a backend
+     * that proxies calls on behalf of arbitrary shoppers.
+     */
+    shopperScope?: ShopperScope;
 }
 
 let isInitialized = false;
 let currentConfig: SDKConfig | null = null;
+let currentShopperScope: ShopperScope = 'singleton';
 
 /**
  * Initialize the DRT SDK with credentials.
@@ -23,7 +43,7 @@ let currentConfig: SDKConfig | null = null;
  * ```javascript
  * import { DRT } from '@drttix/drt-sdk';
  *
- * // Initialize once
+ * // Initialize once (default: singleton shopper scope)
  * DRT.init({
  *   shopperGuid: 'your-shopper-guid',
  *   accountId: 'your-account-id',
@@ -33,26 +53,50 @@ let currentConfig: SDKConfig | null = null;
  * // Now make calls without passing credentials
  * const theme = await DRT.shopper.account.getTheme();
  * ```
+ *
+ * @example
+ * ```javascript
+ * // Backend serving many shoppers/accounts from a single SDK instance
+ * DRT.init({ apiKey: 'your-api-key', shopperScope: 'per-request' });
+ *
+ * // Pass shopperGuid/accountId per call instead
+ * await DRT.shopper.product.addProduct(body, {
+ *   shopperGuid: req.shopperGuid,
+ *   accountId: req.accountId,
+ * });
+ * ```
  */
 export function init(config: SDKConfig): void {
-    if (!config.shopperGuid || !config.accountId || !config.apiKey) {
+    if (!config.apiKey) {
+        throw new Error('DRT SDK init requires apiKey');
+    }
+
+    const shopperScope = config.shopperScope ?? 'singleton';
+
+    if (shopperScope === 'singleton' && (!config.shopperGuid || !config.accountId)) {
         throw new Error(
-            'DRT SDK init requires shopperGuid, accountId, and apiKey',
+            'DRT SDK init requires shopperGuid and accountId (or pass shopperScope: "per-request" to supply them per shopper call instead)',
         );
     }
 
     currentConfig = config;
+    currentShopperScope = shopperScope;
 
-    const headers = {
-        shopperguid: config.shopperGuid,
-        accountid: config.accountId,
-        apikey: config.apiKey,
-    };
+    // Portal and scanner are always singleton-scoped: one fixed set of
+    // credentials for every call, applied globally via OpenAPI.HEADERS.
+    const sharedHeaders: Record<string, string> = { apikey: config.apiKey };
+    if (config.shopperGuid && config.accountId) {
+        sharedHeaders.shopperguid = config.shopperGuid;
+        sharedHeaders.accountid = config.accountId;
+    }
+    ScannerAPI.HEADERS = sharedHeaders;
+    PortalAPI.HEADERS = sharedHeaders;
 
-    // Set headers on all API clients
-    ShopperAPI.HEADERS = headers;
-    ScannerAPI.HEADERS = headers;
-    PortalAPI.HEADERS = headers;
+    // Shopper credentials are resolved per-call by resolveShopperHeaders()
+    // (see generated shopper services), so no global header is set here —
+    // that's what lets shopperScope: 'per-request' override per call without
+    // a global value silently taking precedence.
+    ShopperAPI.HEADERS = undefined;
 
     isInitialized = true;
 }
@@ -71,11 +115,19 @@ export function getConfig(): SDKConfig | null {
     return currentConfig;
 }
 
+/**
+ * Get the shopperScope the SDK was initialized with ('singleton' if not yet initialized).
+ */
+export function getShopperScope(): ShopperScope {
+    return currentShopperScope;
+}
+
 /**
  * Reset the SDK configuration.
  */
 export function reset(): void {
     currentConfig = null;
+    currentShopperScope = 'singleton';
     isInitialized = false;
     ShopperAPI.HEADERS = undefined;
     ScannerAPI.HEADERS = undefined;
@@ -83,50 +135,35 @@ export function reset(): void {
 }
 
 /**
- * Get credentials from config, throwing if not initialized.
- * Used internally by wrapped services.
+ * Resolves the shopperguid/accountid/apikey headers for a single shopper API call.
+ *
+ * Used internally by every generated shopper service method. `context`, when
+ * provided, overrides the shopperGuid/accountId set at DRT.init() — this is
+ * what makes shopperScope: 'per-request' work. apiKey always comes from
+ * DRT.init(), since it identifies the calling backend, not the shopper.
  */
-export function getCredentials(): {
-    shopperGuid: string;
-    accountId: string;
-    apiKey: string;
-} {
+export function resolveShopperHeaders(context?: {
+    shopperGuid?: string;
+    accountId?: string;
+}): Record<string, string> {
     if (!currentConfig) {
         throw new Error('DRT SDK not initialized. Call DRT.init() first.');
     }
+
+    const shopperGuid = context?.shopperGuid ?? currentConfig.shopperGuid;
+    const accountId = context?.accountId ?? currentConfig.accountId;
+
+    if (!shopperGuid || !accountId) {
+        throw new Error(
+            currentShopperScope === 'per-request'
+                ? 'No shopperGuid/accountId available for this call. DRT SDK was initialized with shopperScope: "per-request" without defaults — pass { shopperGuid, accountId } as the last argument to this call.'
+                : 'DRT SDK not initialized with shopperGuid/accountId. Call DRT.init() first.',
+        );
+    }
+
     return {
-        shopperGuid: currentConfig.shopperGuid,
-        accountId: currentConfig.accountId,
-        apiKey: currentConfig.apiKey,
+        shopperguid: shopperGuid,
+        accountid: accountId,
+        apikey: currentConfig.apiKey,
     };
 }
-
-/**
- * Creates a proxy that auto-injects credentials for service methods.
- * Methods that take (shopperguid, accountid, apikey, ...rest) as first 3 params
- * will have those auto-filled from the SDK config.
- */
-export function createAutoCredentialsProxy<T extends object>(service: T): T {
-    return new Proxy(service, {
-        get(target, prop) {
-            const value = (target as any)[prop];
-            if (typeof value === 'function') {
-                return (...args: any[]) => {
-                    // If SDK is initialized, prepend credentials
-                    if (isInitialized && currentConfig) {
-                        return value.call(
-                            target,
-                            currentConfig.shopperGuid,
-                            currentConfig.accountId,
-                            currentConfig.apiKey,
-                            ...args,
-                        );
-                    }
-                    // Otherwise call with original args
-                    return value.apply(target, args);
-                };
-            }
-            return value;
-        },
-    });
-}

package/src/generated/portal/core/OpenAPI.ts

@@ -21,7 +21,7 @@ export type OpenAPIConfig = {
 
 export const OpenAPI: OpenAPIConfig = {
     BASE: '',
-    VERSION: '20260622.4',
+    VERSION: '20260629.2',
     WITH_CREDENTIALS: false,
     CREDENTIALS: 'include',
     TOKEN: undefined,

package/src/generated/portal/core/request.ts

@@ -260,14 +260,16 @@ export const getResponseBody = async (response: Response): Promise<any> => {
 			const contentType = response.headers.get("Content-Type");
 			if (contentType) {
 				const jsonTypes = ["application/json", "application/problem+json"];
-				const isJSON = jsonTypes.some((type) =>
-					contentType.toLowerCase().startsWith(type)
-				);
+				const lc = contentType.toLowerCase();
+				const isJSON = jsonTypes.some((type) => lc.startsWith(type));
 				if (isJSON) {
 					return await response.json();
-				} else {
-					return await response.text();
 				}
+				// Return Blob for PDF / binary responses
+				if (lc.startsWith('application/pdf') || lc.startsWith('application/octet-stream')) {
+					return await response.blob();
+				}
+				return await response.text();
 			}
 		} catch (error) {
 			console.error(error);
@@ -315,7 +317,37 @@ export const catchErrorCodes = (
 	}
 };
 
-let globalCookieHeader: string | undefined;
+// Cookies are cached per request "identity" rather than in one shared slot.
+// Shopper calls carry shopperguid/accountid in options.headers (resolved
+// per-call by resolveShopperHeaders()), so each shopper gets its own cookie
+// jar instead of one shopper's session leaking into another's requests when
+// a single SDK instance serves many shoppers concurrently (shopperScope:
+// 'per-request'). Portal/scanner calls carry no such header and fall back to
+// the single default slot, matching prior behavior.
+const DEFAULT_COOKIE_KEY = "__default__";
+const MAX_COOKIE_ENTRIES = 10_000;
+const cookiesByKey = new Map<string, string>();
+
+const getCookieKey = (options: ApiRequestOptions): string => {
+	const shopperguid = options.headers?.["shopperguid"];
+	const accountid = options.headers?.["accountid"];
+	if (isStringWithValue(shopperguid)) {
+		return `${shopperguid}:${isStringWithValue(accountid) ? accountid : ""}`;
+	}
+	return DEFAULT_COOKIE_KEY;
+};
+
+const storeCookie = (key: string, value: string): void => {
+	if (!cookiesByKey.has(key) && cookiesByKey.size >= MAX_COOKIE_ENTRIES) {
+		// Evict the oldest entry (Map preserves insertion order) to bound memory
+		// on a long-running, many-shopper backend process.
+		const oldestKey = cookiesByKey.keys().next().value;
+		if (oldestKey !== undefined) {
+			cookiesByKey.delete(oldestKey);
+		}
+	}
+	cookiesByKey.set(key, value);
+};
 
 /**
  * Wraps sendRequest to capture cookies on login
@@ -330,6 +362,7 @@ export const request = <T>(
 			const url = getUrl(config, options);
 			const formData = getFormData(options);
 			const body = getRequestBody(options);
+			const cookieKey = getCookieKey(options);
 
 			// Before making headers, possibly attach cookie if we have it
 			const baseHeaders = await getHeaders(config, options);
@@ -338,9 +371,10 @@ export const request = <T>(
 			baseHeaders.forEach((value, key) => {
 				headerObj[key] = value;
 			});
-			if (globalCookieHeader) {
+			const storedCookie = cookiesByKey.get(cookieKey);
+			if (storedCookie) {
 				// Attach stored cookie
-				headerObj["Cookie"] = globalCookieHeader;
+				headerObj["Cookie"] = storedCookie;
 			}
 			const headers = new Headers(headerObj);
 
@@ -359,7 +393,7 @@ export const request = <T>(
 				const setCookie = response.headers.get("set-cookie");
 				if (setCookie) {
 					// Overwrite or append as needed
-					globalCookieHeader = setCookie;
+					storeCookie(cookieKey, setCookie);
 				}
 
 				const responseBody = await getResponseBody(response);

package/src/generated/scanner/core/OpenAPI.ts

@@ -21,7 +21,7 @@ export type OpenAPIConfig = {
 
 export const OpenAPI: OpenAPIConfig = {
     BASE: 'https://api.drttix.com/scanner-v3',
-    VERSION: '20260307.1',
+    VERSION: '20260625.1',
     WITH_CREDENTIALS: false,
     CREDENTIALS: 'include',
     TOKEN: undefined,

package/src/generated/scanner/core/request.ts

@@ -260,14 +260,16 @@ export const getResponseBody = async (response: Response): Promise<any> => {
 			const contentType = response.headers.get("Content-Type");
 			if (contentType) {
 				const jsonTypes = ["application/json", "application/problem+json"];
-				const isJSON = jsonTypes.some((type) =>
-					contentType.toLowerCase().startsWith(type)
-				);
+				const lc = contentType.toLowerCase();
+				const isJSON = jsonTypes.some((type) => lc.startsWith(type));
 				if (isJSON) {
 					return await response.json();
-				} else {
-					return await response.text();
 				}
+				// Return Blob for PDF / binary responses
+				if (lc.startsWith('application/pdf') || lc.startsWith('application/octet-stream')) {
+					return await response.blob();
+				}
+				return await response.text();
 			}
 		} catch (error) {
 			console.error(error);
@@ -315,7 +317,37 @@ export const catchErrorCodes = (
 	}
 };
 
-let globalCookieHeader: string | undefined;
+// Cookies are cached per request "identity" rather than in one shared slot.
+// Shopper calls carry shopperguid/accountid in options.headers (resolved
+// per-call by resolveShopperHeaders()), so each shopper gets its own cookie
+// jar instead of one shopper's session leaking into another's requests when
+// a single SDK instance serves many shoppers concurrently (shopperScope:
+// 'per-request'). Portal/scanner calls carry no such header and fall back to
+// the single default slot, matching prior behavior.
+const DEFAULT_COOKIE_KEY = "__default__";
+const MAX_COOKIE_ENTRIES = 10_000;
+const cookiesByKey = new Map<string, string>();
+
+const getCookieKey = (options: ApiRequestOptions): string => {
+	const shopperguid = options.headers?.["shopperguid"];
+	const accountid = options.headers?.["accountid"];
+	if (isStringWithValue(shopperguid)) {
+		return `${shopperguid}:${isStringWithValue(accountid) ? accountid : ""}`;
+	}
+	return DEFAULT_COOKIE_KEY;
+};
+
+const storeCookie = (key: string, value: string): void => {
+	if (!cookiesByKey.has(key) && cookiesByKey.size >= MAX_COOKIE_ENTRIES) {
+		// Evict the oldest entry (Map preserves insertion order) to bound memory
+		// on a long-running, many-shopper backend process.
+		const oldestKey = cookiesByKey.keys().next().value;
+		if (oldestKey !== undefined) {
+			cookiesByKey.delete(oldestKey);
+		}
+	}
+	cookiesByKey.set(key, value);
+};
 
 /**
  * Wraps sendRequest to capture cookies on login
@@ -330,6 +362,7 @@ export const request = <T>(
 			const url = getUrl(config, options);
 			const formData = getFormData(options);
 			const body = getRequestBody(options);
+			const cookieKey = getCookieKey(options);
 
 			// Before making headers, possibly attach cookie if we have it
 			const baseHeaders = await getHeaders(config, options);
@@ -338,9 +371,10 @@ export const request = <T>(
 			baseHeaders.forEach((value, key) => {
 				headerObj[key] = value;
 			});
-			if (globalCookieHeader) {
+			const storedCookie = cookiesByKey.get(cookieKey);
+			if (storedCookie) {
 				// Attach stored cookie
-				headerObj["Cookie"] = globalCookieHeader;
+				headerObj["Cookie"] = storedCookie;
 			}
 			const headers = new Headers(headerObj);
 
@@ -359,7 +393,7 @@ export const request = <T>(
 				const setCookie = response.headers.get("set-cookie");
 				if (setCookie) {
 					// Overwrite or append as needed
-					globalCookieHeader = setCookie;
+					storeCookie(cookieKey, setCookie);
 				}
 
 				const responseBody = await getResponseBody(response);

package/src/generated/scanner/index.ts

@@ -16,6 +16,7 @@ export type { EventSkin } from './models/EventSkin';
 export type { MobileReceiptResponse } from './models/MobileReceiptResponse';
 export type { OrderDetails } from './models/OrderDetails';
 export type { OrderProduct } from './models/OrderProduct';
+export type { OrderScan } from './models/OrderScan';
 export type { OrderSeat } from './models/OrderSeat';
 export type { OrderSummary } from './models/OrderSummary';
 export type { Product } from './models/Product';

package/src/generated/scanner/models/OrderScan.ts

@@ -0,0 +1,14 @@
+/* generated using openapi-typescript-codegen -- do not edit */
+/* istanbul ignore file */
+/* tslint:disable */
+/* eslint-disable */
+import type { TicketScan } from './TicketScan';
+export type OrderScan = {
+    valid: boolean;
+    message: string;
+    oid: number;
+    scannedCount: number;
+    remainingTickets: number;
+    tickets: Array<TicketScan>;
+};
+

package/src/generated/scanner/models/TicketScan.ts

@@ -20,5 +20,6 @@ export type TicketScan = {
     seat: number | null;
     tsScanned: number;
     dateScanned: string | null;
+    remainingTickets: number | null;
 };
 

package/src/generated/scanner/services/ScanningService.ts

@@ -5,6 +5,7 @@
 import type { EventResponse } from '../models/EventResponse';
 import type { MobileReceiptResponse } from '../models/MobileReceiptResponse';
 import type { OrderDetails } from '../models/OrderDetails';
+import type { OrderScan } from '../models/OrderScan';
 import type { ProductQR } from '../models/ProductQR';
 import type { ProductScan } from '../models/ProductScan';
 import type { ReceiptResponse } from '../models/ReceiptResponse';
@@ -276,6 +277,43 @@ export class ScanningService {
             },
         });
     }
+    /**
+     * Used to scan every remaining ticket in an order
+     * Scans all unscanned tickets in an order and returns an OrderScan object summarizing the results
+     * @param c Show code
+     * @param devicename The name of the device issuing the request
+     * @param requestBody The order to scan, identified by orderId
+     * @param lang Language for error messages to be returned in
+     * @returns OrderScan Scans the order and returns the scan information.
+     * @throws ApiError
+     */
+    public static appControllerScanEntireOrder(
+        c: string,
+        devicename: string,
+        requestBody: {
+            orderId?: {
+                oid?: number;
+            };
+        },
+        lang?: string,
+    ): CancelablePromise<OrderScan> {
+        return __request(OpenAPI, {
+            method: 'POST',
+            url: '/order',
+            query: {
+                'c': c,
+                'devicename': devicename,
+                'lang': lang,
+            },
+            body: requestBody,
+            mediaType: 'application/json',
+            errors: {
+                400: `Bad Request error with error details.`,
+                404: `Not found error with error details.`,
+                500: `Internal Server Error, please contact developers.`,
+            },
+        });
+    }
     /**
      * Used to get a show by its showCode
      * Returns details for a single event.

package/src/generated/scanner/types.ts

@@ -10,6 +10,7 @@ export type { EventSkin } from './models/EventSkin';
 export type { MobileReceiptResponse } from './models/MobileReceiptResponse';
 export type { OrderDetails } from './models/OrderDetails';
 export type { OrderProduct } from './models/OrderProduct';
+export type { OrderScan } from './models/OrderScan';
 export type { OrderSeat } from './models/OrderSeat';
 export type { OrderSummary } from './models/OrderSummary';
 export type { Product } from './models/Product';

package/src/generated/shopper/core/OpenAPI.ts

@@ -21,7 +21,7 @@ export type OpenAPIConfig = {
 
 export const OpenAPI: OpenAPIConfig = {
     BASE: 'https://api.drttix.com/shopper',
-    VERSION: '20260622.1',
+    VERSION: '20260629.1',
     WITH_CREDENTIALS: false,
     CREDENTIALS: 'include',
     TOKEN: undefined,