@peektravel/app-utilities 0.8.2 → 0.9.1

package/dist/index.js

@@ -1,9 +1,29 @@
 import { randomUUID } from 'crypto';
 import * as jwt from 'jsonwebtoken';
 
+// src/internal/api-endpoints.ts
+var ApiEndpoints = class {
+  constructor(paths) {
+    this.paths = paths;
+  }
+  paths;
+  /** The relative path (slug) for `endpoint`, appended to the base API URL. */
+  pathFor(endpoint) {
+    return this.paths[endpoint];
+  }
+};
+function joinUrl(...parts) {
+  return parts.filter((part) => part.length > 0).join("/");
+}
+
 // src/internal/peek/gateway-endpoints.ts
 var SALES_ENDPOINT = "sales";
 var V2_EXTENDABLE_SLUG = "peek_backoffice_api-v1";
+function peekApiEndpoints(useRegistrySlug) {
+  return new ApiEndpoints({
+    [SALES_ENDPOINT]: useRegistrySlug ? V2_EXTENDABLE_SLUG : SALES_ENDPOINT
+  });
+}
 
 // src/internal/peek/account-users/account-user-converter.ts
 var ACTIVE_STATUS = "ACTIVE";
@@ -2077,6 +2097,21 @@ function requireNonEmpty(value, name, serviceName) {
     throw new Error(`${serviceName}: "${name}" is required`);
   }
 }
+var EXTENDABLE_SLUG_RE = /^([a-z0-9]+)[-_]backoffice[-_]api[-_]v1$/i;
+function resolveBaseApiUrl(apiUrl, platformSlug, serviceName) {
+  const trimmed = apiUrl.replace(/\/+$/, "");
+  const lastSegment = trimmed.slice(trimmed.lastIndexOf("/") + 1);
+  const found = EXTENDABLE_SLUG_RE.exec(lastSegment);
+  if (!found) return trimmed;
+  const foundPlatform = found[1].toLowerCase();
+  const expectedPlatform = EXTENDABLE_SLUG_RE.exec(platformSlug)[1].toLowerCase();
+  if (foundPlatform !== expectedPlatform) {
+    throw new Error(
+      `${serviceName}: "apiUrl" carries a "${foundPlatform}" backoffice slug but this service targets "${expectedPlatform}" \u2014 pass the install's ${expectedPlatform} app endpoint`
+    );
+  }
+  return trimmed.slice(0, trimmed.lastIndexOf("/"));
+}
 function createTokenManager(config) {
   return new TokenManager({
     secret: config.jwtSecret,
@@ -2124,6 +2159,12 @@ async function requestWithRetry(http, url, init, label, onResponse) {
   throw new RateLimitError();
 }
 
+// src/internal/sdk-headers.ts
+var SDK_HEADER_NAME = "x-peek-sdk";
+var SDK_PLATFORM = "js";
+var SDK_VERSION = "0.9.1";
+var SDK_HEADER_VALUE = `${SDK_PLATFORM}-${SDK_VERSION}`;
+
 // src/internal/peek/graphql-client.ts
 var isObject = (value) => typeof value === "object" && value !== null;
 var GraphQLClient = class {
@@ -2169,15 +2210,14 @@ var GraphQLClient = class {
     );
   }
   endpoint(endpointName) {
-    const { apiUrl, baseUrl, appId, endpointPathPrefix } = this.options;
-    if (apiUrl) return apiUrl;
-    const prefix = endpointPathPrefix ? `${endpointPathPrefix}/` : "";
-    return `${baseUrl}/${appId}/${prefix}${endpointName}`;
+    const { baseApiUrl, endpoints } = this.options;
+    return joinUrl(baseApiUrl, endpoints.pathFor(endpointName));
   }
   buildHeaders() {
     const headers = {
       "X-Peek-Auth": `Bearer ${this.options.getToken()}`,
-      "Content-Type": "application/json"
+      "Content-Type": "application/json",
+      [SDK_HEADER_NAME]: SDK_HEADER_VALUE
     };
     if (this.options.gatewayKey) {
       headers["pk-api-key"] = this.options.gatewayKey;
@@ -3794,17 +3834,17 @@ var PeekAccessService = class {
     this.jwtSecret = config.jwtSecret;
     const logger = config.logger ?? noopLogger;
     const tokens = createTokenManager(config);
+    const useRegistrySlug = hasApiUrl || isV2;
     const defaultBaseUrl = isV2 ? DEFAULT_V2_BASE_URL : DEFAULT_BASE_URL;
+    const baseApiUrl = hasApiUrl ? resolveBaseApiUrl(config.apiUrl, V2_EXTENDABLE_SLUG, "PeekAccessService") : `${config.baseUrl ?? defaultBaseUrl}/${config.appId}`;
     this.client = new GraphQLClient({
-      apiUrl: config.apiUrl,
-      baseUrl: hasApiUrl ? void 0 : config.baseUrl ?? defaultBaseUrl,
-      appId: hasApiUrl ? void 0 : config.appId,
+      baseApiUrl,
+      endpoints: peekApiEndpoints(useRegistrySlug),
       gatewayKey: config.gatewayKey,
       getToken: () => tokens.getToken(),
       retryDelaysMs: config.retryDelaysMs ?? DEFAULT_RETRY_DELAYS_MS,
       logger,
-      fetchFn: config.fetch ?? globalThis.fetch,
-      endpointPathPrefix: !hasApiUrl && isV2 ? V2_EXTENDABLE_SLUG : void 0
+      fetchFn: config.fetch ?? globalThis.fetch
     });
     this.productServiceOptions = {
       itemOptionsPageSize: config.itemOptionsPageSize
@@ -3975,182 +4015,182 @@ var PeekAccessService = class {
     return this.reviewService;
   }
   // ─── Product short-forms ─────────────────────────────────────────────────
-  /** All products (activities + add-ons). Delegates to {@link ProductService.getAllProducts}. */
+  /** All products (activities + add-ons). @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link ProductService.getAllProducts}. */
   getAllProducts() {
     return this.getProductService().getAllProducts();
   }
-  /** All activity products (excludes add-ons). Delegates to {@link ProductService.getAllActivities}. */
+  /** All activity products (excludes add-ons). @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link ProductService.getAllActivities}. */
   getAllActivities() {
     return this.getProductService().getAllActivities();
   }
-  /** All rental products. Delegates to {@link ProductService.getAllRentals}. */
+  /** All rental products. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link ProductService.getAllRentals}. */
   getAllRentals() {
     return this.getProductService().getAllRentals();
   }
-  /** All add-on products. Delegates to {@link ProductService.getAllAddons}. */
+  /** All add-on products. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link ProductService.getAllAddons}. */
   getAllAddons() {
     return this.getProductService().getAllAddons();
   }
-  /** An activity's custom questions. Delegates to {@link ProductService.getCustomQuestions}. */
+  /** An activity's custom questions. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link ProductService.getCustomQuestions}. */
   getCustomQuestions(productId) {
     return this.getProductService().getCustomQuestions(productId);
   }
   // ─── Account-user short-forms ─────────────────────────────────────────────
-  /** All active account users. Delegates to {@link AccountUserService.getAll}. */
+  /** All active account users. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link AccountUserService.getAll}. */
   getAllAccountUsers() {
     return this.getAccountUserService().getAll();
   }
-  /** Account user by id, or null. Delegates to {@link AccountUserService.getById}. */
+  /** Account user by id, or null. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link AccountUserService.getById}. */
   getAccountUserById(userId) {
     return this.getAccountUserService().getById(userId);
   }
   // ─── Resource-pool short-forms ────────────────────────────────────────────
-  /** All resource pools. Delegates to {@link ResourcePoolService.getAll}. */
+  /** All resource pools. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link ResourcePoolService.getAll}. */
   getAllResourcePools(mode) {
     return this.getResourcePoolService().getAll(mode);
   }
   // ─── Timeslot short-forms ─────────────────────────────────────────────────
-  /** Timeslots for an activity on a given date. Delegates to {@link TimeslotService.getForDay}. */
+  /** Timeslots for an activity on a given date. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link TimeslotService.getForDay}. */
   getTimeslotsForDay(productId, date, filter) {
     return this.getTimeslotService().getForDay(productId, date, filter);
   }
-  /** Single timeslot by id. Delegates to {@link TimeslotService.getById}. */
+  /** Single timeslot by id. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link TimeslotService.getById}. */
   getTimeslotById(timeslotId) {
     return this.getTimeslotService().getById(timeslotId);
   }
-  /** Set timeslot status. Delegates to {@link TimeslotService.setAvailability}. */
+  /** Set timeslot status. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link TimeslotService.setAvailability}. */
   setTimeslotAvailability(timeslotId, status) {
     return this.getTimeslotService().setAvailability(timeslotId, status);
   }
-  /** Set timeslot manifest notes. Delegates to {@link TimeslotService.setNotes}. */
+  /** Set timeslot manifest notes. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link TimeslotService.setNotes}. */
   setTimeslotNotes(timeslotId, manifestNotes) {
     return this.getTimeslotService().setNotes(timeslotId, manifestNotes);
   }
-  /** Assign or unassign guides on timeslots. Delegates to {@link TimeslotService.assignGuide}. */
+  /** Assign or unassign guides on timeslots. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link TimeslotService.assignGuide}. */
   assignTimeslotGuide(assignment) {
     return this.getTimeslotService().assignGuide(assignment);
   }
   // ─── Reseller short-forms ─────────────────────────────────────────────────
-  /** All reseller channels. Delegates to {@link ResellerService.getAllChannels}. */
+  /** All reseller channels. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link ResellerService.getAllChannels}. */
   getAllChannels(agentsPerChannel) {
     return this.getResellerService().getAllChannels(agentsPerChannel);
   }
   // ─── Promo-code short-forms ───────────────────────────────────────────────
-  /** All promo codes. Delegates to {@link PromoCodeService.getAll}. */
+  /** All promo codes. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link PromoCodeService.getAll}. */
   getAllPromoCodes() {
     return this.getPromoCodeService().getAll();
   }
-  /** Create a promo code. Delegates to {@link PromoCodeService.create}. */
+  /** Create a promo code. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link PromoCodeService.create}. */
   createPromoCode(input) {
     return this.getPromoCodeService().create(input);
   }
   // ─── Pricing short-forms ──────────────────────────────────────────────────
-  /** Create a pricing engine. Delegates to {@link PricingService.createEngine}. */
+  /** Create a pricing engine. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link PricingService.createEngine}. */
   createPricingEngine(input) {
     return this.getPricingService().createEngine(input);
   }
-  /** Update a pricing engine. Delegates to {@link PricingService.updateEngine}. */
+  /** Update a pricing engine. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link PricingService.updateEngine}. */
   updatePricingEngine(input) {
     return this.getPricingService().updateEngine(input);
   }
-  /** Delete a pricing engine (idempotent). Delegates to {@link PricingService.deleteEngine}. */
+  /** Delete a pricing engine (idempotent). @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link PricingService.deleteEngine}. */
   deletePricingEngine(engineId) {
     return this.getPricingService().deleteEngine(engineId);
   }
-  /** Upsert pricing overrides. Delegates to {@link PricingService.upsertOverrides}. */
+  /** Upsert pricing overrides. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link PricingService.upsertOverrides}. */
   upsertPricingOverrides(input) {
     return this.getPricingService().upsertOverrides(input);
   }
-  /** Clear pricing overrides for a set of activities. Delegates to {@link PricingService.clearOverrides}. */
+  /** Clear pricing overrides for a set of activities. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link PricingService.clearOverrides}. */
   clearPricingOverrides(input) {
     return this.getPricingService().clearOverrides(input);
   }
   // ─── Daily-note short-forms ───────────────────────────────────────────────
-  /** Today's daily note. Delegates to {@link DailyNoteService.getToday}. */
+  /** Today's daily note. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link DailyNoteService.getToday}. */
   getDailyNoteToday() {
     return this.getDailyNoteService().getToday();
   }
-  /** Update today's daily note. Delegates to {@link DailyNoteService.update}. */
+  /** Update today's daily note. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link DailyNoteService.update}. */
   updateDailyNote(note) {
     return this.getDailyNoteService().update(note);
   }
   // ─── Availability short-forms ─────────────────────────────────────────────
-  /** Availability times for an activity. Delegates to {@link AvailabilityService.getAvailabilityTimes}. */
+  /** Availability times for an activity. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link AvailabilityService.getAvailabilityTimes}. */
   getAvailabilityTimes(query) {
     return this.getAvailabilityService().getAvailabilityTimes(query);
   }
   // ─── Membership short-forms ───────────────────────────────────────────────
-  /** All memberships. Delegates to {@link MembershipService.getAll}. */
+  /** All memberships. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link MembershipService.getAll}. */
   getAllMemberships() {
     return this.getMembershipService().getAll();
   }
-  /** Purchase a membership. Delegates to {@link MembershipService.purchase}. */
+  /** Purchase a membership. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link MembershipService.purchase}. */
   purchaseMembership(input) {
     return this.getMembershipService().purchase(input);
   }
   // ─── Booking short-forms ──────────────────────────────────────────────────
-  /** Booking by id. Delegates to {@link BookingService.getById}. */
+  /** Booking by id. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link BookingService.getById}. */
   getBookingById(bookingId, options) {
     return this.getBookingService().getById(bookingId, options);
   }
-  /** Bookings by time range. Delegates to {@link BookingService.searchByTimeRange}. */
+  /** Bookings by time range. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link BookingService.searchByTimeRange}. */
   searchBookingsByTimeRange(input) {
     return this.getBookingService().searchByTimeRange(input);
   }
-  /** Bookings on a timeslot. Delegates to {@link BookingService.searchByTimeslot}. */
+  /** Bookings on a timeslot. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link BookingService.searchByTimeslot}. */
   searchBookingsByTimeslot(timeslotId, options) {
     return this.getBookingService().searchByTimeslot(timeslotId, options);
   }
-  /** Guests on a booking. Delegates to {@link BookingService.getGuests}. */
+  /** Guests on a booking. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link BookingService.getGuests}. */
   getBookingGuests(bookingId) {
     return this.getBookingService().getGuests(bookingId);
   }
-  /** Payments on file for a booking. Delegates to {@link BookingService.getPaymentsOnFile}. */
+  /** Payments on file for a booking. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link BookingService.getPaymentsOnFile}. */
   getBookingPaymentsOnFile(bookingId) {
     return this.getBookingService().getPaymentsOnFile(bookingId);
   }
-  /** Append or overwrite operator notes. Delegates to {@link BookingService.appendNote}. */
+  /** Append or overwrite operator notes. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link BookingService.appendNote}. */
   appendBookingNote(bookingId, note, mode) {
     return this.getBookingService().appendNote(bookingId, note, mode);
   }
-  /** Set booking check-in status. Delegates to {@link BookingService.setCheckinStatus}. */
+  /** Set booking check-in status. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link BookingService.setCheckinStatus}. */
   setBookingCheckinStatus(bookingId, checkedIn) {
     return this.getBookingService().setCheckinStatus(bookingId, checkedIn);
   }
-  /** Cancel a booking. Delegates to {@link BookingService.cancel}. */
+  /** Cancel a booking. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link BookingService.cancel}. */
   cancelBooking(bookingId, notes) {
     return this.getBookingService().cancel(bookingId, notes);
   }
-  /** Charge a booking. Delegates to {@link BookingService.makePayment}. */
+  /** Charge a booking. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link BookingService.makePayment}. */
   makeBookingPayment(input) {
     return this.getBookingService().makePayment(input);
   }
-  /** Refund a booking payment. Delegates to {@link BookingService.refund}. */
+  /** Refund a booking payment. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link BookingService.refund}. */
   refundBooking(input) {
     return this.getBookingService().refund(input);
   }
-  /** Create an invoice link. Delegates to {@link BookingService.createInvoiceLink}. */
+  /** Create an invoice link. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link BookingService.createInvoiceLink}. */
   createBookingInvoiceLink(bookingId) {
     return this.getBookingService().createInvoiceLink(bookingId);
   }
-  /** List add-ons on a booking. Delegates to {@link BookingService.listAddons}. */
+  /** List add-ons on a booking. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link BookingService.listAddons}. */
   listBookingAddons(bookingId) {
     return this.getBookingService().listAddons(bookingId);
   }
-  /** Add an add-on to a booking. Delegates to {@link BookingService.addAddon}. */
+  /** Add an add-on to a booking. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link BookingService.addAddon}. */
   addBookingAddon(bookingId, input) {
     return this.getBookingService().addAddon(bookingId, input);
   }
-  /** Remove an add-on from a booking. Delegates to {@link BookingService.removeAddon}. */
+  /** Remove an add-on from a booking. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link BookingService.removeAddon}. */
   removeBookingAddon(bookingId, input) {
     return this.getBookingService().removeAddon(bookingId, input);
   }
-  /** Create a booking. Delegates to {@link BookingService.create}. */
+  /** Create a booking. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link BookingService.create}. */
   createBooking(input) {
     return this.getBookingService().create(input);
   }
   // ─── Review short-forms ───────────────────────────────────────────────────
-  /** Reviews for an activity. Delegates to {@link ReviewService.getReviews}. */
+  /** Reviews for an activity. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link ReviewService.getReviews}. */
   getReviews(productId, reviewCount, reviewOffset) {
     return this.getReviewService().getReviews(productId, reviewCount, reviewOffset);
   }
@@ -4158,7 +4198,11 @@ var PeekAccessService = class {
 
 // src/internal/cng/endpoints.ts
 var CNG_EXTENDABLE_SLUG = "cng_backoffice_api-v1";
+var CNG_PRODUCTS_ENDPOINT = "products";
 var PRODUCTS_PATH = "api/v2/app-registry/products?active=1";
+var CNG_API_ENDPOINTS = new ApiEndpoints({
+  [CNG_PRODUCTS_ENDPOINT]: CNG_EXTENDABLE_SLUG
+});
 
 // src/models/cng/product.ts
 var ACTIVITY_PRODUCT_TYPE2 = "ACTIVITY";
@@ -4192,7 +4236,10 @@ var CngProductService = class {
    * ```
    */
   async getAllActivities() {
-    const body = await this.client.get(PRODUCTS_PATH);
+    const body = await this.client.get(
+      CNG_PRODUCTS_ENDPOINT,
+      PRODUCTS_PATH
+    );
     return fromProductNodes(body?.data ?? []);
   }
 };
@@ -4214,9 +4261,9 @@ var RestClient = class {
    * @throws {CngPermissionError} on HTTP 403 (app missing a permission)
    * @throws {CngApiError} on any other non-2xx response
    */
-  async get(path) {
+  async get(endpoint, path) {
     const { logger } = this.options;
-    const url = this.endpoint(path);
+    const url = this.endpoint(endpoint, path);
     logger.info("Making CNG request", { url, path });
     return requestWithRetry(
       this.options,
@@ -4238,15 +4285,15 @@ var RestClient = class {
       }
     );
   }
-  endpoint(path) {
-    const { apiUrl, baseUrl, appId, extendableSlug } = this.options;
-    if (apiUrl) return `${apiUrl}/${path}`;
-    return `${baseUrl}/${appId}/${extendableSlug}/${path}`;
+  endpoint(endpoint, path) {
+    const { baseApiUrl, endpoints } = this.options;
+    return joinUrl(baseApiUrl, endpoints.pathFor(endpoint), path);
   }
   buildHeaders() {
     return {
       "X-Peek-Auth": `Bearer ${this.options.getToken()}`,
-      "Content-Type": "application/json"
+      "Content-Type": "application/json",
+      [SDK_HEADER_NAME]: SDK_HEADER_VALUE
     };
   }
 };
@@ -4270,11 +4317,10 @@ var CngAccessService = class {
     if (!hasApiUrl) requireNonEmpty(config.appId ?? "", "appId", "CngAccessService");
     const logger = config.logger ?? noopLogger;
     const tokens = createTokenManager(config);
+    const baseApiUrl = hasApiUrl ? resolveBaseApiUrl(config.apiUrl, CNG_EXTENDABLE_SLUG, "CngAccessService") : `${config.baseUrl ?? DEFAULT_BASE_URL2}/${config.appId}`;
     this.client = new RestClient({
-      apiUrl: config.apiUrl,
-      baseUrl: hasApiUrl ? void 0 : config.baseUrl ?? DEFAULT_BASE_URL2,
-      appId: hasApiUrl ? void 0 : config.appId,
-      extendableSlug: CNG_EXTENDABLE_SLUG,
+      baseApiUrl,
+      endpoints: CNG_API_ENDPOINTS,
       getToken: () => tokens.getToken(),
       retryDelaysMs: config.retryDelaysMs ?? DEFAULT_RETRY_DELAYS_MS,
       logger,
@@ -4291,7 +4337,7 @@ var CngAccessService = class {
     }
     return this.productService;
   }
-  /** All activities. Delegates to {@link CngProductService.getAllActivities}. */
+  /** All activities. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link CngProductService.getAllActivities}. */
   getAllActivities() {
     return this.getProductService().getAllActivities();
   }
@@ -4299,7 +4345,11 @@ var CngAccessService = class {
 
 // src/internal/acme/endpoints.ts
 var ACME_EXTENDABLE_SLUG = "acme_backoffice_api-v1";
+var ACME_TEMPLATES_ENDPOINT = "templates";
 var TEMPLATES_PATH = "v2/b2b/event/templates/names?pageSize=-1&page=1";
+var ACME_API_ENDPOINTS = new ApiEndpoints({
+  [ACME_TEMPLATES_ENDPOINT]: ACME_EXTENDABLE_SLUG
+});
 
 // src/models/acme/product.ts
 var ACME_ACTIVITY_TYPE = "standard";
@@ -4337,6 +4387,7 @@ var AcmeProductService = class {
    */
   async getAllActivities() {
     const body = await this.client.get(
+      ACME_TEMPLATES_ENDPOINT,
       TEMPLATES_PATH
     );
     const nodes = Array.isArray(body) ? body : body?.list ?? [];
@@ -4359,9 +4410,9 @@ var RestClient2 = class {
    * @throws {RateLimitError} on HTTP 429 after retries are exhausted
    * @throws {AcmeApiError} on any other non-2xx response
    */
-  async get(path) {
+  async get(endpoint, path) {
     const { logger } = this.options;
-    const url = this.endpoint(path);
+    const url = this.endpoint(endpoint, path);
     logger.info("Making ACME request", { url, path });
     return requestWithRetry(
       this.options,
@@ -4378,15 +4429,15 @@ var RestClient2 = class {
       }
     );
   }
-  endpoint(path) {
-    const { apiUrl, baseUrl, appId, extendableSlug } = this.options;
-    if (apiUrl) return `${apiUrl}/${path}`;
-    return `${baseUrl}/${appId}/${extendableSlug}/${path}`;
+  endpoint(endpoint, path) {
+    const { baseApiUrl, endpoints } = this.options;
+    return joinUrl(baseApiUrl, endpoints.pathFor(endpoint), path);
   }
   buildHeaders() {
     return {
       "X-Peek-Auth": `Bearer ${this.options.getToken()}`,
-      "Content-Type": "application/json"
+      "Content-Type": "application/json",
+      [SDK_HEADER_NAME]: SDK_HEADER_VALUE
     };
   }
 };
@@ -4404,11 +4455,10 @@ var AcmeAccessService = class {
     if (!hasApiUrl) requireNonEmpty(config.appId ?? "", "appId", "AcmeAccessService");
     const logger = config.logger ?? noopLogger;
     const tokens = createTokenManager(config);
+    const baseApiUrl = hasApiUrl ? resolveBaseApiUrl(config.apiUrl, ACME_EXTENDABLE_SLUG, "AcmeAccessService") : `${config.baseUrl ?? DEFAULT_BASE_URL3}/${config.appId}`;
     this.client = new RestClient2({
-      apiUrl: config.apiUrl,
-      baseUrl: hasApiUrl ? void 0 : config.baseUrl ?? DEFAULT_BASE_URL3,
-      appId: hasApiUrl ? void 0 : config.appId,
-      extendableSlug: ACME_EXTENDABLE_SLUG,
+      baseApiUrl,
+      endpoints: ACME_API_ENDPOINTS,
       getToken: () => tokens.getToken(),
       retryDelaysMs: config.retryDelaysMs ?? DEFAULT_RETRY_DELAYS_MS,
       logger,
@@ -4425,7 +4475,7 @@ var AcmeAccessService = class {
     }
     return this.productService;
   }
-  /** All activities. Delegates to {@link AcmeProductService.getAllActivities}. */
+  /** All activities. @deprecated The access service exposes only its resource-service accessors; call the service directly instead. See {@link AcmeProductService.getAllActivities}. */
   getAllActivities() {
     return this.getProductService().getAllActivities();
   }