@peektravel/app-utilities 0.9.0 → 0.9.1

package/dist/index.d.cts

@@ -1,3 +1,24 @@
+/**
+ * A platform's tiny map of **API endpoint key → relative path** (the "slug"
+ * inserted between the install's base API URL and the endpoint's own path).
+ *
+ * The base API URL is the install's app endpoint with no routing segment — the
+ * install webhook's `apiUrl` (with any slug stripped back off), or
+ * `baseUrl/appId` when built from the deprecated defaults. Each service class
+ * resolves *its own* slug through this lookup, so two services on the same
+ * platform can route through different slugs. Adding a new API — even one on a
+ * different slug than its siblings — is a single entry here.
+ *
+ * An empty-string path means the endpoint sits directly on the base with no
+ * slug (e.g. the legacy Peek v1 GraphQL gateway, which has no extendable slug).
+ */
+declare class ApiEndpoints<Key extends string = string> {
+    private readonly paths;
+    constructor(paths: Readonly<Record<Key, string>>);
+    /** The relative path (slug) for `endpoint`, appended to the base API URL. */
+    pathFor(endpoint: Key): string;
+}
+
 /**
  * Minimal structured logger interface the package can write diagnostics to.
  *
@@ -20,19 +41,13 @@ interface GraphQLBody<T> {
 }
 interface GraphQLClientOptions {
     /**
-     * The install's app endpoint URL (the install webhook's `apiUrl`). When set it
-     * is the **sole request URL** — every GraphQL call POSTs to it unmodified, and
-     * `baseUrl`/`appId`/`endpointPathPrefix`/`endpointName` are ignored for URL
-     * construction. Takes precedence over `baseUrl`.
+     * The install's **base API URL** (no trailing slash, no routing slug). Every
+     * GraphQL call POSTs to `baseApiUrl/<slug>`, where the slug comes from
+     * {@link endpoints} for the request's endpoint name.
      */
-    apiUrl?: string;
-    /**
-     * Base URL of the backoffice GraphQL gateway (no trailing slash). Used only
-     * when `apiUrl` is not set; the URL is `baseUrl/appId/[prefix/]endpointName`.
-     */
-    baseUrl?: string;
-    /** Peek app ID, used in the endpoint path (legacy `baseUrl` mode only). */
-    appId?: string;
+    baseApiUrl: string;
+    /** Maps an endpoint name to the relative slug appended to {@link baseApiUrl}. */
+    endpoints: ApiEndpoints;
     /** API gateway key sent as the `pk-api-key` header. Omitted from headers when absent (v2 mode). */
     gatewayKey?: string;
     /** Supplies a valid bearer token for each request. */
@@ -43,11 +58,6 @@ interface GraphQLClientOptions {
     logger: Logger;
     /** `fetch` implementation to use. */
     fetchFn: typeof fetch;
-    /**
-     * Optional fixed path segment inserted between `appId` and the endpoint name.
-     * Used in v2 mode: `baseUrl/appId/endpointPathPrefix/endpointName`.
-     */
-    endpointPathPrefix?: string;
 }
 declare class GraphQLClient {
     private readonly options;
@@ -1671,13 +1681,17 @@ interface BaseAccessServiceConfig {
     /** JWT issuer — the app name / app ID. */
     issuer: string;
     /**
-     * The install's **app endpoint URL** — persist the install webhook's `apiUrl`
-     * and pass it here. When set it is used **as given**: for Peek it is the sole
-     * request URL (every call POSTs to it); for CNG/ACME it is the base and the
-     * REST path is appended. No app-id/gateway segment is inserted, so `appId` is
-     * not required. This is the forward-looking way to target an install — prefer
-     * it over `baseUrl`/`appId`, which are deprecated (the hardcoded base-URL
-     * fallbacks will be removed and a URL will become required in a future release).
+     * The install's **base API URL** — persist the install webhook's `apiUrl` and
+     * pass it here. It is the app endpoint with no per-platform routing slug; each
+     * service class appends its own slug (e.g. `peek_backoffice_api-v1`, via that
+     * platform's endpoint lookup) when it makes a call, so different services can
+     * route through different slugs. If the URL you pass still carries this
+     * platform's slug it is stripped back off to recover the base; a URL carrying a
+     * *different* platform's slug makes the constructor throw. No app-id/gateway
+     * segment is inserted, so `appId` is not required. This is the forward-looking
+     * way to target an install — prefer it over `baseUrl`/`appId`, which are
+     * deprecated (the hardcoded base-URL fallbacks will be removed and a URL will
+     * become required in a future release).
      */
     apiUrl?: string;
     /**
@@ -2266,21 +2280,13 @@ declare class PeekAccessService {
 
 interface RestClientOptions$1 {
     /**
-     * The install's app endpoint URL (the install webhook's `apiUrl`). When set it
-     * is the **base URL** and only the REST path is appended (`apiUrl/path`) —
-     * `baseUrl`/`appId`/`extendableSlug` are ignored. Takes precedence over
-     * `baseUrl`.
+     * The install's **base API URL** (no trailing slash, no routing slug). Each
+     * request builds `baseApiUrl/<slug>/<path>`, where the slug comes from
+     * {@link endpoints} for the request's endpoint key.
      */
-    apiUrl?: string;
-    /**
-     * Base URL of the backoffice gateway (no trailing slash). Used only when
-     * `apiUrl` is not set; the URL is `baseUrl/appId/extendableSlug/path`.
-     */
-    baseUrl?: string;
-    /** App ID, used in the endpoint path (legacy `baseUrl` mode only). */
-    appId?: string;
-    /** Fixed extendable slug inserted between `appId` and the REST path (legacy mode). */
-    extendableSlug?: string;
+    baseApiUrl: string;
+    /** Maps an endpoint key to the relative slug appended to {@link baseApiUrl}. */
+    endpoints: ApiEndpoints;
     /** Supplies a valid bearer token for each request. */
     getToken: () => string;
     /** Backoff delays (ms) applied on successive HTTP 429 responses. */
@@ -2303,7 +2309,7 @@ declare class RestClient$1 {
      * @throws {CngPermissionError} on HTTP 403 (app missing a permission)
      * @throws {CngApiError} on any other non-2xx response
      */
-    get<T>(path: string): Promise<T>;
+    get<T>(endpoint: string, path: string): Promise<T>;
     private endpoint;
     private buildHeaders;
 }
@@ -2411,21 +2417,13 @@ declare class CngAccessService {
 
 interface RestClientOptions {
     /**
-     * The install's app endpoint URL (the install webhook's `apiUrl`). When set it
-     * is the **base URL** and only the REST path is appended (`apiUrl/path`) —
-     * `baseUrl`/`appId`/`extendableSlug` are ignored. Takes precedence over
-     * `baseUrl`.
-     */
-    apiUrl?: string;
-    /**
-     * Base URL of the backoffice gateway (no trailing slash). Used only when
-     * `apiUrl` is not set; the URL is `baseUrl/appId/extendableSlug/path`.
+     * The install's **base API URL** (no trailing slash, no routing slug). Each
+     * request builds `baseApiUrl/<slug>/<path>`, where the slug comes from
+     * {@link endpoints} for the request's endpoint key.
      */
-    baseUrl?: string;
-    /** App ID, used in the endpoint path (legacy `baseUrl` mode only). */
-    appId?: string;
-    /** Fixed extendable slug inserted between `appId` and the REST path (legacy mode). */
-    extendableSlug?: string;
+    baseApiUrl: string;
+    /** Maps an endpoint key to the relative slug appended to {@link baseApiUrl}. */
+    endpoints: ApiEndpoints;
     /** Supplies a valid bearer token for each request. */
     getToken: () => string;
     /** Backoff delays (ms) applied on successive HTTP 429 responses. */
@@ -2447,7 +2445,7 @@ declare class RestClient {
      * @throws {RateLimitError} on HTTP 429 after retries are exhausted
      * @throws {AcmeApiError} on any other non-2xx response
      */
-    get<T>(path: string): Promise<T>;
+    get<T>(endpoint: string, path: string): Promise<T>;
     private endpoint;
     private buildHeaders;
 }
@@ -2565,7 +2563,12 @@ declare class AcmeAccessService {
 interface InstallAccessTarget {
     /** Which platform serves the install (the install webhook's `platform`). */
     platform: PeekPlatform | null;
-    /** The install's app endpoint URL (the install webhook's `apiUrl`), used as given. */
+    /**
+     * The install's base API URL (the install webhook's `apiUrl`). The chosen
+     * access service's service classes append their own backoffice slug when they
+     * call; a URL already carrying this platform's slug is stripped back to the
+     * base, and one carrying a different platform's slug throws.
+     */
     apiUrl: string;
     /** The install id (the install webhook's `installId`) — becomes the JWT subject. */
     installId: string;

package/dist/index.d.ts

@@ -1,3 +1,24 @@
+/**
+ * A platform's tiny map of **API endpoint key → relative path** (the "slug"
+ * inserted between the install's base API URL and the endpoint's own path).
+ *
+ * The base API URL is the install's app endpoint with no routing segment — the
+ * install webhook's `apiUrl` (with any slug stripped back off), or
+ * `baseUrl/appId` when built from the deprecated defaults. Each service class
+ * resolves *its own* slug through this lookup, so two services on the same
+ * platform can route through different slugs. Adding a new API — even one on a
+ * different slug than its siblings — is a single entry here.
+ *
+ * An empty-string path means the endpoint sits directly on the base with no
+ * slug (e.g. the legacy Peek v1 GraphQL gateway, which has no extendable slug).
+ */
+declare class ApiEndpoints<Key extends string = string> {
+    private readonly paths;
+    constructor(paths: Readonly<Record<Key, string>>);
+    /** The relative path (slug) for `endpoint`, appended to the base API URL. */
+    pathFor(endpoint: Key): string;
+}
+
 /**
  * Minimal structured logger interface the package can write diagnostics to.
  *
@@ -20,19 +41,13 @@ interface GraphQLBody<T> {
 }
 interface GraphQLClientOptions {
     /**
-     * The install's app endpoint URL (the install webhook's `apiUrl`). When set it
-     * is the **sole request URL** — every GraphQL call POSTs to it unmodified, and
-     * `baseUrl`/`appId`/`endpointPathPrefix`/`endpointName` are ignored for URL
-     * construction. Takes precedence over `baseUrl`.
+     * The install's **base API URL** (no trailing slash, no routing slug). Every
+     * GraphQL call POSTs to `baseApiUrl/<slug>`, where the slug comes from
+     * {@link endpoints} for the request's endpoint name.
      */
-    apiUrl?: string;
-    /**
-     * Base URL of the backoffice GraphQL gateway (no trailing slash). Used only
-     * when `apiUrl` is not set; the URL is `baseUrl/appId/[prefix/]endpointName`.
-     */
-    baseUrl?: string;
-    /** Peek app ID, used in the endpoint path (legacy `baseUrl` mode only). */
-    appId?: string;
+    baseApiUrl: string;
+    /** Maps an endpoint name to the relative slug appended to {@link baseApiUrl}. */
+    endpoints: ApiEndpoints;
     /** API gateway key sent as the `pk-api-key` header. Omitted from headers when absent (v2 mode). */
     gatewayKey?: string;
     /** Supplies a valid bearer token for each request. */
@@ -43,11 +58,6 @@ interface GraphQLClientOptions {
     logger: Logger;
     /** `fetch` implementation to use. */
     fetchFn: typeof fetch;
-    /**
-     * Optional fixed path segment inserted between `appId` and the endpoint name.
-     * Used in v2 mode: `baseUrl/appId/endpointPathPrefix/endpointName`.
-     */
-    endpointPathPrefix?: string;
 }
 declare class GraphQLClient {
     private readonly options;
@@ -1671,13 +1681,17 @@ interface BaseAccessServiceConfig {
     /** JWT issuer — the app name / app ID. */
     issuer: string;
     /**
-     * The install's **app endpoint URL** — persist the install webhook's `apiUrl`
-     * and pass it here. When set it is used **as given**: for Peek it is the sole
-     * request URL (every call POSTs to it); for CNG/ACME it is the base and the
-     * REST path is appended. No app-id/gateway segment is inserted, so `appId` is
-     * not required. This is the forward-looking way to target an install — prefer
-     * it over `baseUrl`/`appId`, which are deprecated (the hardcoded base-URL
-     * fallbacks will be removed and a URL will become required in a future release).
+     * The install's **base API URL** — persist the install webhook's `apiUrl` and
+     * pass it here. It is the app endpoint with no per-platform routing slug; each
+     * service class appends its own slug (e.g. `peek_backoffice_api-v1`, via that
+     * platform's endpoint lookup) when it makes a call, so different services can
+     * route through different slugs. If the URL you pass still carries this
+     * platform's slug it is stripped back off to recover the base; a URL carrying a
+     * *different* platform's slug makes the constructor throw. No app-id/gateway
+     * segment is inserted, so `appId` is not required. This is the forward-looking
+     * way to target an install — prefer it over `baseUrl`/`appId`, which are
+     * deprecated (the hardcoded base-URL fallbacks will be removed and a URL will
+     * become required in a future release).
      */
     apiUrl?: string;
     /**
@@ -2266,21 +2280,13 @@ declare class PeekAccessService {
 
 interface RestClientOptions$1 {
     /**
-     * The install's app endpoint URL (the install webhook's `apiUrl`). When set it
-     * is the **base URL** and only the REST path is appended (`apiUrl/path`) —
-     * `baseUrl`/`appId`/`extendableSlug` are ignored. Takes precedence over
-     * `baseUrl`.
+     * The install's **base API URL** (no trailing slash, no routing slug). Each
+     * request builds `baseApiUrl/<slug>/<path>`, where the slug comes from
+     * {@link endpoints} for the request's endpoint key.
      */
-    apiUrl?: string;
-    /**
-     * Base URL of the backoffice gateway (no trailing slash). Used only when
-     * `apiUrl` is not set; the URL is `baseUrl/appId/extendableSlug/path`.
-     */
-    baseUrl?: string;
-    /** App ID, used in the endpoint path (legacy `baseUrl` mode only). */
-    appId?: string;
-    /** Fixed extendable slug inserted between `appId` and the REST path (legacy mode). */
-    extendableSlug?: string;
+    baseApiUrl: string;
+    /** Maps an endpoint key to the relative slug appended to {@link baseApiUrl}. */
+    endpoints: ApiEndpoints;
     /** Supplies a valid bearer token for each request. */
     getToken: () => string;
     /** Backoff delays (ms) applied on successive HTTP 429 responses. */
@@ -2303,7 +2309,7 @@ declare class RestClient$1 {
      * @throws {CngPermissionError} on HTTP 403 (app missing a permission)
      * @throws {CngApiError} on any other non-2xx response
      */
-    get<T>(path: string): Promise<T>;
+    get<T>(endpoint: string, path: string): Promise<T>;
     private endpoint;
     private buildHeaders;
 }
@@ -2411,21 +2417,13 @@ declare class CngAccessService {
 
 interface RestClientOptions {
     /**
-     * The install's app endpoint URL (the install webhook's `apiUrl`). When set it
-     * is the **base URL** and only the REST path is appended (`apiUrl/path`) —
-     * `baseUrl`/`appId`/`extendableSlug` are ignored. Takes precedence over
-     * `baseUrl`.
-     */
-    apiUrl?: string;
-    /**
-     * Base URL of the backoffice gateway (no trailing slash). Used only when
-     * `apiUrl` is not set; the URL is `baseUrl/appId/extendableSlug/path`.
+     * The install's **base API URL** (no trailing slash, no routing slug). Each
+     * request builds `baseApiUrl/<slug>/<path>`, where the slug comes from
+     * {@link endpoints} for the request's endpoint key.
      */
-    baseUrl?: string;
-    /** App ID, used in the endpoint path (legacy `baseUrl` mode only). */
-    appId?: string;
-    /** Fixed extendable slug inserted between `appId` and the REST path (legacy mode). */
-    extendableSlug?: string;
+    baseApiUrl: string;
+    /** Maps an endpoint key to the relative slug appended to {@link baseApiUrl}. */
+    endpoints: ApiEndpoints;
     /** Supplies a valid bearer token for each request. */
     getToken: () => string;
     /** Backoff delays (ms) applied on successive HTTP 429 responses. */
@@ -2447,7 +2445,7 @@ declare class RestClient {
      * @throws {RateLimitError} on HTTP 429 after retries are exhausted
      * @throws {AcmeApiError} on any other non-2xx response
      */
-    get<T>(path: string): Promise<T>;
+    get<T>(endpoint: string, path: string): Promise<T>;
     private endpoint;
     private buildHeaders;
 }
@@ -2565,7 +2563,12 @@ declare class AcmeAccessService {
 interface InstallAccessTarget {
     /** Which platform serves the install (the install webhook's `platform`). */
     platform: PeekPlatform | null;
-    /** The install's app endpoint URL (the install webhook's `apiUrl`), used as given. */
+    /**
+     * The install's base API URL (the install webhook's `apiUrl`). The chosen
+     * access service's service classes append their own backoffice slug when they
+     * call; a URL already carrying this platform's slug is stripped back to the
+     * base, and one carrying a different platform's slug throws.
+     */
     apiUrl: string;
     /** The install id (the install webhook's `installId`) — becomes the JWT subject. */
     installId: string;

package/dist/index.js

@@ -1,9 +1,29 @@
 import { randomUUID } from 'crypto';
 import * as jwt from 'jsonwebtoken';
 
+// src/internal/api-endpoints.ts
+var ApiEndpoints = class {
+  constructor(paths) {
+    this.paths = paths;
+  }
+  paths;
+  /** The relative path (slug) for `endpoint`, appended to the base API URL. */
+  pathFor(endpoint) {
+    return this.paths[endpoint];
+  }
+};
+function joinUrl(...parts) {
+  return parts.filter((part) => part.length > 0).join("/");
+}
+
 // src/internal/peek/gateway-endpoints.ts
 var SALES_ENDPOINT = "sales";
 var V2_EXTENDABLE_SLUG = "peek_backoffice_api-v1";
+function peekApiEndpoints(useRegistrySlug) {
+  return new ApiEndpoints({
+    [SALES_ENDPOINT]: useRegistrySlug ? V2_EXTENDABLE_SLUG : SALES_ENDPOINT
+  });
+}
 
 // src/internal/peek/account-users/account-user-converter.ts
 var ACTIVE_STATUS = "ACTIVE";
@@ -2077,6 +2097,21 @@ function requireNonEmpty(value, name, serviceName) {
     throw new Error(`${serviceName}: "${name}" is required`);
   }
 }
+var EXTENDABLE_SLUG_RE = /^([a-z0-9]+)[-_]backoffice[-_]api[-_]v1$/i;
+function resolveBaseApiUrl(apiUrl, platformSlug, serviceName) {
+  const trimmed = apiUrl.replace(/\/+$/, "");
+  const lastSegment = trimmed.slice(trimmed.lastIndexOf("/") + 1);
+  const found = EXTENDABLE_SLUG_RE.exec(lastSegment);
+  if (!found) return trimmed;
+  const foundPlatform = found[1].toLowerCase();
+  const expectedPlatform = EXTENDABLE_SLUG_RE.exec(platformSlug)[1].toLowerCase();
+  if (foundPlatform !== expectedPlatform) {
+    throw new Error(
+      `${serviceName}: "apiUrl" carries a "${foundPlatform}" backoffice slug but this service targets "${expectedPlatform}" \u2014 pass the install's ${expectedPlatform} app endpoint`
+    );
+  }
+  return trimmed.slice(0, trimmed.lastIndexOf("/"));
+}
 function createTokenManager(config) {
   return new TokenManager({
     secret: config.jwtSecret,
@@ -2127,7 +2162,7 @@ async function requestWithRetry(http, url, init, label, onResponse) {
 // src/internal/sdk-headers.ts
 var SDK_HEADER_NAME = "x-peek-sdk";
 var SDK_PLATFORM = "js";
-var SDK_VERSION = "0.9.0";
+var SDK_VERSION = "0.9.1";
 var SDK_HEADER_VALUE = `${SDK_PLATFORM}-${SDK_VERSION}`;
 
 // src/internal/peek/graphql-client.ts
@@ -2175,10 +2210,8 @@ var GraphQLClient = class {
     );
   }
   endpoint(endpointName) {
-    const { apiUrl, baseUrl, appId, endpointPathPrefix } = this.options;
-    if (apiUrl) return apiUrl;
-    const prefix = endpointPathPrefix ? `${endpointPathPrefix}/` : "";
-    return `${baseUrl}/${appId}/${prefix}${endpointName}`;
+    const { baseApiUrl, endpoints } = this.options;
+    return joinUrl(baseApiUrl, endpoints.pathFor(endpointName));
   }
   buildHeaders() {
     const headers = {
@@ -3801,17 +3834,17 @@ var PeekAccessService = class {
     this.jwtSecret = config.jwtSecret;
     const logger = config.logger ?? noopLogger;
     const tokens = createTokenManager(config);
+    const useRegistrySlug = hasApiUrl || isV2;
     const defaultBaseUrl = isV2 ? DEFAULT_V2_BASE_URL : DEFAULT_BASE_URL;
+    const baseApiUrl = hasApiUrl ? resolveBaseApiUrl(config.apiUrl, V2_EXTENDABLE_SLUG, "PeekAccessService") : `${config.baseUrl ?? defaultBaseUrl}/${config.appId}`;
     this.client = new GraphQLClient({
-      apiUrl: config.apiUrl,
-      baseUrl: hasApiUrl ? void 0 : config.baseUrl ?? defaultBaseUrl,
-      appId: hasApiUrl ? void 0 : config.appId,
+      baseApiUrl,
+      endpoints: peekApiEndpoints(useRegistrySlug),
       gatewayKey: config.gatewayKey,
       getToken: () => tokens.getToken(),
       retryDelaysMs: config.retryDelaysMs ?? DEFAULT_RETRY_DELAYS_MS,
       logger,
-      fetchFn: config.fetch ?? globalThis.fetch,
-      endpointPathPrefix: !hasApiUrl && isV2 ? V2_EXTENDABLE_SLUG : void 0
+      fetchFn: config.fetch ?? globalThis.fetch
     });
     this.productServiceOptions = {
       itemOptionsPageSize: config.itemOptionsPageSize
@@ -4165,7 +4198,11 @@ var PeekAccessService = class {
 
 // src/internal/cng/endpoints.ts
 var CNG_EXTENDABLE_SLUG = "cng_backoffice_api-v1";
+var CNG_PRODUCTS_ENDPOINT = "products";
 var PRODUCTS_PATH = "api/v2/app-registry/products?active=1";
+var CNG_API_ENDPOINTS = new ApiEndpoints({
+  [CNG_PRODUCTS_ENDPOINT]: CNG_EXTENDABLE_SLUG
+});
 
 // src/models/cng/product.ts
 var ACTIVITY_PRODUCT_TYPE2 = "ACTIVITY";
@@ -4199,7 +4236,10 @@ var CngProductService = class {
    * ```
    */
   async getAllActivities() {
-    const body = await this.client.get(PRODUCTS_PATH);
+    const body = await this.client.get(
+      CNG_PRODUCTS_ENDPOINT,
+      PRODUCTS_PATH
+    );
     return fromProductNodes(body?.data ?? []);
   }
 };
@@ -4221,9 +4261,9 @@ var RestClient = class {
    * @throws {CngPermissionError} on HTTP 403 (app missing a permission)
    * @throws {CngApiError} on any other non-2xx response
    */
-  async get(path) {
+  async get(endpoint, path) {
     const { logger } = this.options;
-    const url = this.endpoint(path);
+    const url = this.endpoint(endpoint, path);
     logger.info("Making CNG request", { url, path });
     return requestWithRetry(
       this.options,
@@ -4245,10 +4285,9 @@ var RestClient = class {
       }
     );
   }
-  endpoint(path) {
-    const { apiUrl, baseUrl, appId, extendableSlug } = this.options;
-    if (apiUrl) return `${apiUrl}/${path}`;
-    return `${baseUrl}/${appId}/${extendableSlug}/${path}`;
+  endpoint(endpoint, path) {
+    const { baseApiUrl, endpoints } = this.options;
+    return joinUrl(baseApiUrl, endpoints.pathFor(endpoint), path);
   }
   buildHeaders() {
     return {
@@ -4278,11 +4317,10 @@ var CngAccessService = class {
     if (!hasApiUrl) requireNonEmpty(config.appId ?? "", "appId", "CngAccessService");
     const logger = config.logger ?? noopLogger;
     const tokens = createTokenManager(config);
+    const baseApiUrl = hasApiUrl ? resolveBaseApiUrl(config.apiUrl, CNG_EXTENDABLE_SLUG, "CngAccessService") : `${config.baseUrl ?? DEFAULT_BASE_URL2}/${config.appId}`;
     this.client = new RestClient({
-      apiUrl: config.apiUrl,
-      baseUrl: hasApiUrl ? void 0 : config.baseUrl ?? DEFAULT_BASE_URL2,
-      appId: hasApiUrl ? void 0 : config.appId,
-      extendableSlug: CNG_EXTENDABLE_SLUG,
+      baseApiUrl,
+      endpoints: CNG_API_ENDPOINTS,
       getToken: () => tokens.getToken(),
       retryDelaysMs: config.retryDelaysMs ?? DEFAULT_RETRY_DELAYS_MS,
       logger,
@@ -4307,7 +4345,11 @@ var CngAccessService = class {
 
 // src/internal/acme/endpoints.ts
 var ACME_EXTENDABLE_SLUG = "acme_backoffice_api-v1";
+var ACME_TEMPLATES_ENDPOINT = "templates";
 var TEMPLATES_PATH = "v2/b2b/event/templates/names?pageSize=-1&page=1";
+var ACME_API_ENDPOINTS = new ApiEndpoints({
+  [ACME_TEMPLATES_ENDPOINT]: ACME_EXTENDABLE_SLUG
+});
 
 // src/models/acme/product.ts
 var ACME_ACTIVITY_TYPE = "standard";
@@ -4345,6 +4387,7 @@ var AcmeProductService = class {
    */
   async getAllActivities() {
     const body = await this.client.get(
+      ACME_TEMPLATES_ENDPOINT,
       TEMPLATES_PATH
     );
     const nodes = Array.isArray(body) ? body : body?.list ?? [];
@@ -4367,9 +4410,9 @@ var RestClient2 = class {
    * @throws {RateLimitError} on HTTP 429 after retries are exhausted
    * @throws {AcmeApiError} on any other non-2xx response
    */
-  async get(path) {
+  async get(endpoint, path) {
     const { logger } = this.options;
-    const url = this.endpoint(path);
+    const url = this.endpoint(endpoint, path);
     logger.info("Making ACME request", { url, path });
     return requestWithRetry(
       this.options,
@@ -4386,10 +4429,9 @@ var RestClient2 = class {
       }
     );
   }
-  endpoint(path) {
-    const { apiUrl, baseUrl, appId, extendableSlug } = this.options;
-    if (apiUrl) return `${apiUrl}/${path}`;
-    return `${baseUrl}/${appId}/${extendableSlug}/${path}`;
+  endpoint(endpoint, path) {
+    const { baseApiUrl, endpoints } = this.options;
+    return joinUrl(baseApiUrl, endpoints.pathFor(endpoint), path);
   }
   buildHeaders() {
     return {
@@ -4413,11 +4455,10 @@ var AcmeAccessService = class {
     if (!hasApiUrl) requireNonEmpty(config.appId ?? "", "appId", "AcmeAccessService");
     const logger = config.logger ?? noopLogger;
     const tokens = createTokenManager(config);
+    const baseApiUrl = hasApiUrl ? resolveBaseApiUrl(config.apiUrl, ACME_EXTENDABLE_SLUG, "AcmeAccessService") : `${config.baseUrl ?? DEFAULT_BASE_URL3}/${config.appId}`;
     this.client = new RestClient2({
-      apiUrl: config.apiUrl,
-      baseUrl: hasApiUrl ? void 0 : config.baseUrl ?? DEFAULT_BASE_URL3,
-      appId: hasApiUrl ? void 0 : config.appId,
-      extendableSlug: ACME_EXTENDABLE_SLUG,
+      baseApiUrl,
+      endpoints: ACME_API_ENDPOINTS,
       getToken: () => tokens.getToken(),
       retryDelaysMs: config.retryDelaysMs ?? DEFAULT_RETRY_DELAYS_MS,
       logger,