@peektravel/app-utilities 0.9.0 → 0.9.2

package/README.md

@@ -317,9 +317,12 @@ event data**; the fields it shares with the token (`installId` / `accountId` /
 the body omits them. The token authenticates the whole delivery, so the body is
 trusted within a verified request. This webhook is the only source of
 `accountId`, `timezone`, and `apiUrl` in the package, since no GraphQL read
-returns them — **persist them per install**. `apiUrl` is the install's app
-endpoint: use it **as given** (don't reconstruct it from `appId`) — pass it as the
-access service's `apiUrl`, or hand the whole install to
+returns them — **persist them per install**. `apiUrl` is the install's **base API
+URL**: pass it straight through (don't reconstruct it from `appId`) as the access
+service's `apiUrl` — each service class appends its own backoffice slug (e.g.
+`peek_backoffice_api-v1`) when it makes a call, stripping the slug back off if the
+URL you pass already carries it and throwing if it carries a different platform's
+slug — or hand the whole install to
 `createAccessServiceForInstall(install, { jwtSecret, issuer })`, which picks the
 service by `platform` and wires the endpoint for you. Every event is a **full
 snapshot** — an `update_installed` carries the same fields as the original

package/dist/index.cjs

@@ -23,9 +23,29 @@ function _interopNamespace(e) {
 
 var jwt__namespace = /*#__PURE__*/_interopNamespace(jwt);
 
+// src/internal/api-endpoints.ts
+var ApiEndpoints = class {
+  constructor(paths) {
+    this.paths = paths;
+  }
+  paths;
+  /** The relative path (slug) for `endpoint`, appended to the base API URL. */
+  pathFor(endpoint) {
+    return this.paths[endpoint];
+  }
+};
+function joinUrl(...parts) {
+  return parts.filter((part) => part.length > 0).join("/");
+}
+
 // src/internal/peek/gateway-endpoints.ts
 var SALES_ENDPOINT = "sales";
 var V2_EXTENDABLE_SLUG = "peek_backoffice_api-v1";
+function peekApiEndpoints(useRegistrySlug) {
+  return new ApiEndpoints({
+    [SALES_ENDPOINT]: useRegistrySlug ? V2_EXTENDABLE_SLUG : SALES_ENDPOINT
+  });
+}
 
 // src/internal/peek/account-users/account-user-converter.ts
 var ACTIVE_STATUS = "ACTIVE";
@@ -1092,6 +1112,9 @@ var QUESTION_TYPE_SELECT_ONE = "SELECT_ONE";
 var QUESTION_TYPE_LOCATION = "LOCATION";
 var QUESTION_ID_REGEX = /^cq_[a-z0-9]+$/;
 var OPTION_ID_REGEX = /^cqao_[a-z0-9]+$/;
+function isCustomQuestionId(idOrText) {
+  return QUESTION_ID_REGEX.test(idOrText);
+}
 var CHECKBOX_TRUE = /* @__PURE__ */ new Set(["yes", "true"]);
 var CHECKBOX_VALID = /* @__PURE__ */ new Set(["yes", "no", "true", "false"]);
 var CHECKBOX_TEXT_TRUE = "Yes";
@@ -1109,10 +1132,13 @@ var errMissingRequired = (text, id) => `Custom question "${text}" (${id}) is req
 function normalize(value) {
   return value.toLowerCase().replace(/[^a-z0-9]/g, "");
 }
-function resolveQuestion(idOrText, questions) {
+function resolveQuestion(idOrText, questions, acceptAllIds) {
   if (QUESTION_ID_REGEX.test(idOrText)) {
     const byId = questions.find((question) => question.id === idOrText);
-    if (!byId) throw new Error(errUnknownQuestionId(idOrText));
+    if (!byId) {
+      if (acceptAllIds) return null;
+      throw new Error(errUnknownQuestionId(idOrText));
+    }
     return byId;
   }
   const target = normalize(idOrText);
@@ -1137,8 +1163,11 @@ function resolveOption(value, question) {
   if (matches.length > 1) throw new Error(errAmbiguousOption(value, question.id));
   return matches[0];
 }
-function resolveOne(answer, questions) {
-  const question = resolveQuestion(answer.questionIdOrText, questions);
+function resolveOne(answer, questions, acceptAllIds) {
+  const question = resolveQuestion(answer.questionIdOrText, questions, acceptAllIds);
+  if (!question) {
+    return { questionId: answer.questionIdOrText, questionAnswerText: answer.value };
+  }
   if (question.perGuest) {
     throw new Error(errPerGuestUnsupported(question.id));
   }
@@ -1171,7 +1200,8 @@ function resolveOne(answer, questions) {
   }
 }
 function resolveCustomQuestionAnswers(answers, questions, options) {
-  const resolved = answers.map((answer) => resolveOne(answer, questions));
+  const acceptAllIds = options?.acceptAllIds ?? false;
+  const resolved = answers.map((answer) => resolveOne(answer, questions, acceptAllIds));
   if (options?.requireRequired) {
     assertRequiredAnswered(resolved, questions);
   }
@@ -1779,19 +1809,22 @@ ${note}`;
    * Resolves the input's custom-question answers into the quote's
    * `questionAnswers` payload (each tagged with a fresh `refid`), or `null` when
    * none were supplied. Fetches the activity's custom questions to validate
-   * against; throws on the first unmatched/ambiguous/invalid answer.
+   * against; throws on the first unmatched/ambiguous/invalid answer. When
+   * `acceptAllCustomQuestionIds` is set the fetch is skipped if every answer is
+   * given by id (a by-name answer still needs the list to resolve).
    */
   async buildQuestionAnswers(input) {
     const answers = input.customQuestionAnswers ?? [];
     const requireRequired = input.requireRequiredQuestions ?? false;
+    const acceptAllIds = input.acceptAllCustomQuestionIds ?? false;
     if (answers.length === 0 && !requireRequired) {
       return null;
     }
-    const questions = await this.deps.productService.getCustomQuestions(
-      input.activityId
-    );
+    const needsQuestions = !acceptAllIds || requireRequired || answers.some((answer) => !isCustomQuestionId(answer.questionIdOrText));
+    const questions = needsQuestions ? await this.deps.productService.getCustomQuestions(input.activityId) : [];
     const resolved = resolveCustomQuestionAnswers(answers, questions, {
-      requireRequired
+      requireRequired,
+      acceptAllIds
     });
     if (resolved.length === 0) {
       return null;
@@ -2099,6 +2132,21 @@ function requireNonEmpty(value, name, serviceName) {
     throw new Error(`${serviceName}: "${name}" is required`);
   }
 }
+var EXTENDABLE_SLUG_RE = /^([a-z0-9]+)[-_]backoffice[-_]api[-_]v1$/i;
+function resolveBaseApiUrl(apiUrl, platformSlug, serviceName) {
+  const trimmed = apiUrl.replace(/\/+$/, "");
+  const lastSegment = trimmed.slice(trimmed.lastIndexOf("/") + 1);
+  const found = EXTENDABLE_SLUG_RE.exec(lastSegment);
+  if (!found) return trimmed;
+  const foundPlatform = found[1].toLowerCase();
+  const expectedPlatform = EXTENDABLE_SLUG_RE.exec(platformSlug)[1].toLowerCase();
+  if (foundPlatform !== expectedPlatform) {
+    throw new Error(
+      `${serviceName}: "apiUrl" carries a "${foundPlatform}" backoffice slug but this service targets "${expectedPlatform}" \u2014 pass the install's ${expectedPlatform} app endpoint`
+    );
+  }
+  return trimmed.slice(0, trimmed.lastIndexOf("/"));
+}
 function createTokenManager(config) {
   return new TokenManager({
     secret: config.jwtSecret,
@@ -2149,7 +2197,7 @@ async function requestWithRetry(http, url, init, label, onResponse) {
 // src/internal/sdk-headers.ts
 var SDK_HEADER_NAME = "x-peek-sdk";
 var SDK_PLATFORM = "js";
-var SDK_VERSION = "0.9.0";
+var SDK_VERSION = "0.9.2";
 var SDK_HEADER_VALUE = `${SDK_PLATFORM}-${SDK_VERSION}`;
 
 // src/internal/peek/graphql-client.ts
@@ -2197,10 +2245,8 @@ var GraphQLClient = class {
     );
   }
   endpoint(endpointName) {
-    const { apiUrl, baseUrl, appId, endpointPathPrefix } = this.options;
-    if (apiUrl) return apiUrl;
-    const prefix = endpointPathPrefix ? `${endpointPathPrefix}/` : "";
-    return `${baseUrl}/${appId}/${prefix}${endpointName}`;
+    const { baseApiUrl, endpoints } = this.options;
+    return joinUrl(baseApiUrl, endpoints.pathFor(endpointName));
   }
   buildHeaders() {
     const headers = {
@@ -2576,6 +2622,23 @@ function fromReviewNode(node) {
     comment: node.comment ?? null
   };
 }
+function fromActivityReviewSummaryNode(node) {
+  const meta = node.reviewMeta;
+  return {
+    productId: node.id,
+    productName: node.name,
+    avgRating: meta?.avgRating ?? null,
+    countTotal: meta?.count ?? 0,
+    countOneStar: meta?.oneStar ?? 0,
+    countTwoStar: meta?.twoStar ?? 0,
+    countThreeStar: meta?.threeStar ?? 0,
+    countFourStar: meta?.fourStar ?? 0,
+    countFiveStar: meta?.fiveStar ?? 0
+  };
+}
+function fromActivityReviewSummaryNodes(nodes) {
+  return nodes.map(fromActivityReviewSummaryNode);
+}
 
 // src/internal/peek/reviews/review-cursor.ts
 function encodeCursor(offset, pageSize) {
@@ -2611,6 +2674,23 @@ function buildReviewsQuery(fullCustomerAccess) {
   }
 `;
 }
+var REVIEW_SUMMARIES_QUERY = `
+  query ReviewSummaries {
+    activities {
+      id
+      name
+      reviewMeta {
+        avgRating
+        count
+        fiveStar
+        fourStar
+        threeStar
+        twoStar
+        oneStar
+      }
+    }
+  }
+`;
 function buildReviewsVariables(params) {
   return {
     first: params.first,
@@ -2670,6 +2750,29 @@ var ReviewService = class {
     const edges = body.data?.reviews?.edges ?? [];
     return edges.map((edge) => fromReviewNode(edge.node));
   }
+  /**
+   * Returns an aggregate review summary for **every** activity — its average
+   * rating and the count of reviews at each star level. This reads the same
+   * activity list as `getAllProducts`; it carries no per-review detail or PII, so
+   * it is unaffected by `fullCustomerAccess`. An activity with no reviews comes
+   * back with a `null` `avgRating` and zero counts.
+   *
+   * @example
+   * ```ts
+   * const summaries = await peek.getReviewService().getAllReviewSummaries();
+   * for (const s of summaries) {
+   *   console.log(s.productName, s.avgRating, s.countTotal);
+   * }
+   * ```
+   */
+  async getAllReviewSummaries() {
+    const body = await this.client.request(
+      SALES_ENDPOINT,
+      REVIEW_SUMMARIES_QUERY,
+      {}
+    );
+    return fromActivityReviewSummaryNodes(body.data?.activities ?? []);
+  }
   validate(productId, reviewCount, reviewOffset) {
     if (!productId) {
       throw new Error(ERROR_PRODUCT_ID_REQUIRED);
@@ -3823,17 +3926,17 @@ var PeekAccessService = class {
     this.jwtSecret = config.jwtSecret;
     const logger = config.logger ?? noopLogger;
     const tokens = createTokenManager(config);
+    const useRegistrySlug = hasApiUrl || isV2;
     const defaultBaseUrl = isV2 ? DEFAULT_V2_BASE_URL : DEFAULT_BASE_URL;
+    const baseApiUrl = hasApiUrl ? resolveBaseApiUrl(config.apiUrl, V2_EXTENDABLE_SLUG, "PeekAccessService") : `${config.baseUrl ?? defaultBaseUrl}/${config.appId}`;
     this.client = new GraphQLClient({
-      apiUrl: config.apiUrl,
-      baseUrl: hasApiUrl ? void 0 : config.baseUrl ?? defaultBaseUrl,
-      appId: hasApiUrl ? void 0 : config.appId,
+      baseApiUrl,
+      endpoints: peekApiEndpoints(useRegistrySlug),
       gatewayKey: config.gatewayKey,
       getToken: () => tokens.getToken(),
       retryDelaysMs: config.retryDelaysMs ?? DEFAULT_RETRY_DELAYS_MS,
       logger,
-      fetchFn: config.fetch ?? globalThis.fetch,
-      endpointPathPrefix: !hasApiUrl && isV2 ? V2_EXTENDABLE_SLUG : void 0
+      fetchFn: config.fetch ?? globalThis.fetch
     });
     this.productServiceOptions = {
       itemOptionsPageSize: config.itemOptionsPageSize
@@ -4187,7 +4290,11 @@ var PeekAccessService = class {
 
 // src/internal/cng/endpoints.ts
 var CNG_EXTENDABLE_SLUG = "cng_backoffice_api-v1";
+var CNG_PRODUCTS_ENDPOINT = "products";
 var PRODUCTS_PATH = "api/v2/app-registry/products?active=1";
+var CNG_API_ENDPOINTS = new ApiEndpoints({
+  [CNG_PRODUCTS_ENDPOINT]: CNG_EXTENDABLE_SLUG
+});
 
 // src/models/cng/product.ts
 var ACTIVITY_PRODUCT_TYPE2 = "ACTIVITY";
@@ -4221,7 +4328,10 @@ var CngProductService = class {
    * ```
    */
   async getAllActivities() {
-    const body = await this.client.get(PRODUCTS_PATH);
+    const body = await this.client.get(
+      CNG_PRODUCTS_ENDPOINT,
+      PRODUCTS_PATH
+    );
     return fromProductNodes(body?.data ?? []);
   }
 };
@@ -4243,9 +4353,9 @@ var RestClient = class {
    * @throws {CngPermissionError} on HTTP 403 (app missing a permission)
    * @throws {CngApiError} on any other non-2xx response
    */
-  async get(path) {
+  async get(endpoint, path) {
     const { logger } = this.options;
-    const url = this.endpoint(path);
+    const url = this.endpoint(endpoint, path);
     logger.info("Making CNG request", { url, path });
     return requestWithRetry(
       this.options,
@@ -4267,10 +4377,9 @@ var RestClient = class {
       }
     );
   }
-  endpoint(path) {
-    const { apiUrl, baseUrl, appId, extendableSlug } = this.options;
-    if (apiUrl) return `${apiUrl}/${path}`;
-    return `${baseUrl}/${appId}/${extendableSlug}/${path}`;
+  endpoint(endpoint, path) {
+    const { baseApiUrl, endpoints } = this.options;
+    return joinUrl(baseApiUrl, endpoints.pathFor(endpoint), path);
   }
   buildHeaders() {
     return {
@@ -4300,11 +4409,10 @@ var CngAccessService = class {
     if (!hasApiUrl) requireNonEmpty(config.appId ?? "", "appId", "CngAccessService");
     const logger = config.logger ?? noopLogger;
     const tokens = createTokenManager(config);
+    const baseApiUrl = hasApiUrl ? resolveBaseApiUrl(config.apiUrl, CNG_EXTENDABLE_SLUG, "CngAccessService") : `${config.baseUrl ?? DEFAULT_BASE_URL2}/${config.appId}`;
     this.client = new RestClient({
-      apiUrl: config.apiUrl,
-      baseUrl: hasApiUrl ? void 0 : config.baseUrl ?? DEFAULT_BASE_URL2,
-      appId: hasApiUrl ? void 0 : config.appId,
-      extendableSlug: CNG_EXTENDABLE_SLUG,
+      baseApiUrl,
+      endpoints: CNG_API_ENDPOINTS,
       getToken: () => tokens.getToken(),
       retryDelaysMs: config.retryDelaysMs ?? DEFAULT_RETRY_DELAYS_MS,
       logger,
@@ -4329,7 +4437,11 @@ var CngAccessService = class {
 
 // src/internal/acme/endpoints.ts
 var ACME_EXTENDABLE_SLUG = "acme_backoffice_api-v1";
+var ACME_TEMPLATES_ENDPOINT = "templates";
 var TEMPLATES_PATH = "v2/b2b/event/templates/names?pageSize=-1&page=1";
+var ACME_API_ENDPOINTS = new ApiEndpoints({
+  [ACME_TEMPLATES_ENDPOINT]: ACME_EXTENDABLE_SLUG
+});
 
 // src/models/acme/product.ts
 var ACME_ACTIVITY_TYPE = "standard";
@@ -4367,6 +4479,7 @@ var AcmeProductService = class {
    */
   async getAllActivities() {
     const body = await this.client.get(
+      ACME_TEMPLATES_ENDPOINT,
       TEMPLATES_PATH
     );
     const nodes = Array.isArray(body) ? body : body?.list ?? [];
@@ -4389,9 +4502,9 @@ var RestClient2 = class {
    * @throws {RateLimitError} on HTTP 429 after retries are exhausted
    * @throws {AcmeApiError} on any other non-2xx response
    */
-  async get(path) {
+  async get(endpoint, path) {
     const { logger } = this.options;
-    const url = this.endpoint(path);
+    const url = this.endpoint(endpoint, path);
     logger.info("Making ACME request", { url, path });
     return requestWithRetry(
       this.options,
@@ -4408,10 +4521,9 @@ var RestClient2 = class {
       }
     );
   }
-  endpoint(path) {
-    const { apiUrl, baseUrl, appId, extendableSlug } = this.options;
-    if (apiUrl) return `${apiUrl}/${path}`;
-    return `${baseUrl}/${appId}/${extendableSlug}/${path}`;
+  endpoint(endpoint, path) {
+    const { baseApiUrl, endpoints } = this.options;
+    return joinUrl(baseApiUrl, endpoints.pathFor(endpoint), path);
   }
   buildHeaders() {
     return {
@@ -4435,11 +4547,10 @@ var AcmeAccessService = class {
     if (!hasApiUrl) requireNonEmpty(config.appId ?? "", "appId", "AcmeAccessService");
     const logger = config.logger ?? noopLogger;
     const tokens = createTokenManager(config);
+    const baseApiUrl = hasApiUrl ? resolveBaseApiUrl(config.apiUrl, ACME_EXTENDABLE_SLUG, "AcmeAccessService") : `${config.baseUrl ?? DEFAULT_BASE_URL3}/${config.appId}`;
     this.client = new RestClient2({
-      apiUrl: config.apiUrl,
-      baseUrl: hasApiUrl ? void 0 : config.baseUrl ?? DEFAULT_BASE_URL3,
-      appId: hasApiUrl ? void 0 : config.appId,
-      extendableSlug: ACME_EXTENDABLE_SLUG,
+      baseApiUrl,
+      endpoints: ACME_API_ENDPOINTS,
       getToken: () => tokens.getToken(),
       retryDelaysMs: config.retryDelaysMs ?? DEFAULT_RETRY_DELAYS_MS,
       logger,