@peektravel/app-utilities 0.9.0 → 0.9.2

package/dist/index.d.cts

@@ -1,3 +1,24 @@
+/**
+ * A platform's tiny map of **API endpoint key → relative path** (the "slug"
+ * inserted between the install's base API URL and the endpoint's own path).
+ *
+ * The base API URL is the install's app endpoint with no routing segment — the
+ * install webhook's `apiUrl` (with any slug stripped back off), or
+ * `baseUrl/appId` when built from the deprecated defaults. Each service class
+ * resolves *its own* slug through this lookup, so two services on the same
+ * platform can route through different slugs. Adding a new API — even one on a
+ * different slug than its siblings — is a single entry here.
+ *
+ * An empty-string path means the endpoint sits directly on the base with no
+ * slug (e.g. the legacy Peek v1 GraphQL gateway, which has no extendable slug).
+ */
+declare class ApiEndpoints<Key extends string = string> {
+    private readonly paths;
+    constructor(paths: Readonly<Record<Key, string>>);
+    /** The relative path (slug) for `endpoint`, appended to the base API URL. */
+    pathFor(endpoint: Key): string;
+}
+
 /**
  * Minimal structured logger interface the package can write diagnostics to.
  *
@@ -20,19 +41,13 @@ interface GraphQLBody<T> {
 }
 interface GraphQLClientOptions {
     /**
-     * The install's app endpoint URL (the install webhook's `apiUrl`). When set it
-     * is the **sole request URL** — every GraphQL call POSTs to it unmodified, and
-     * `baseUrl`/`appId`/`endpointPathPrefix`/`endpointName` are ignored for URL
-     * construction. Takes precedence over `baseUrl`.
+     * The install's **base API URL** (no trailing slash, no routing slug). Every
+     * GraphQL call POSTs to `baseApiUrl/<slug>`, where the slug comes from
+     * {@link endpoints} for the request's endpoint name.
      */
-    apiUrl?: string;
-    /**
-     * Base URL of the backoffice GraphQL gateway (no trailing slash). Used only
-     * when `apiUrl` is not set; the URL is `baseUrl/appId/[prefix/]endpointName`.
-     */
-    baseUrl?: string;
-    /** Peek app ID, used in the endpoint path (legacy `baseUrl` mode only). */
-    appId?: string;
+    baseApiUrl: string;
+    /** Maps an endpoint name to the relative slug appended to {@link baseApiUrl}. */
+    endpoints: ApiEndpoints;
     /** API gateway key sent as the `pk-api-key` header. Omitted from headers when absent (v2 mode). */
     gatewayKey?: string;
     /** Supplies a valid bearer token for each request. */
@@ -43,11 +58,6 @@ interface GraphQLClientOptions {
     logger: Logger;
     /** `fetch` implementation to use. */
     fetchFn: typeof fetch;
-    /**
-     * Optional fixed path segment inserted between `appId` and the endpoint name.
-     * Used in v2 mode: `baseUrl/appId/endpointPathPrefix/endpointName`.
-     */
-    endpointPathPrefix?: string;
 }
 declare class GraphQLClient {
     private readonly options;
@@ -904,6 +914,16 @@ interface CreateBookingInput {
      * Default: `false`.
      */
     requireRequiredQuestions?: boolean;
+    /**
+     * When `true`, a `customQuestionAnswers` entry whose `questionIdOrText` is a
+     * `cq_…` id is accepted even if that id is **not** among the activity's custom
+     * questions — the check that a question id must match the activity's list is
+     * skipped, and the answer is sent as-is (as a text answer). Entries given by
+     * question **name** are unaffected: they still must match a question, so the
+     * activity's questions are fetched only when a by-name answer (or
+     * `requireRequiredQuestions`) needs them. Default: `false`.
+     */
+    acceptAllCustomQuestionIds?: boolean;
     /** Suppress the customer confirmation email. Default: false. */
     skipCustomerEmail?: boolean;
     /** Clone the quote from an existing order. */
@@ -1285,7 +1305,9 @@ declare class BookingService {
      * Resolves the input's custom-question answers into the quote's
      * `questionAnswers` payload (each tagged with a fresh `refid`), or `null` when
      * none were supplied. Fetches the activity's custom questions to validate
-     * against; throws on the first unmatched/ambiguous/invalid answer.
+     * against; throws on the first unmatched/ambiguous/invalid answer. When
+     * `acceptAllCustomQuestionIds` is set the fetch is skipped if every answer is
+     * given by id (a by-name answer still needs the list to resolve).
      */
     private buildQuestionAnswers;
     private markCreatedBookingPaid;
@@ -1671,13 +1693,17 @@ interface BaseAccessServiceConfig {
     /** JWT issuer — the app name / app ID. */
     issuer: string;
     /**
-     * The install's **app endpoint URL** — persist the install webhook's `apiUrl`
-     * and pass it here. When set it is used **as given**: for Peek it is the sole
-     * request URL (every call POSTs to it); for CNG/ACME it is the base and the
-     * REST path is appended. No app-id/gateway segment is inserted, so `appId` is
-     * not required. This is the forward-looking way to target an install — prefer
-     * it over `baseUrl`/`appId`, which are deprecated (the hardcoded base-URL
-     * fallbacks will be removed and a URL will become required in a future release).
+     * The install's **base API URL** — persist the install webhook's `apiUrl` and
+     * pass it here. It is the app endpoint with no per-platform routing slug; each
+     * service class appends its own slug (e.g. `peek_backoffice_api-v1`, via that
+     * platform's endpoint lookup) when it makes a call, so different services can
+     * route through different slugs. If the URL you pass still carries this
+     * platform's slug it is stripped back off to recover the base; a URL carrying a
+     * *different* platform's slug makes the constructor throw. No app-id/gateway
+     * segment is inserted, so `appId` is not required. This is the forward-looking
+     * way to target an install — prefer it over `baseUrl`/`appId`, which are
+     * deprecated (the hardcoded base-URL fallbacks will be removed and a URL will
+     * become required in a future release).
      */
     apiUrl?: string;
     /**
@@ -1808,6 +1834,31 @@ interface Review {
     /** Free-text review. May be null. */
     comment: string | null;
 }
+/**
+ * Aggregate review statistics for a single activity (product), as returned by
+ * {@link ReviewService.getAllReviewSummaries}. Carries no per-review detail or
+ * PII — just the rating distribution and average.
+ */
+interface ProductReviewSummary {
+    /** Activity (product) id the summary is for. */
+    productId: string;
+    /** Activity (product) name. */
+    productName: string;
+    /** Average star rating as a decimal, or `null` when there are no ratings. */
+    avgRating: number | null;
+    /** Total number of reviews. */
+    countTotal: number;
+    /** Number of 1-star reviews. */
+    countOneStar: number;
+    /** Number of 2-star reviews. */
+    countTwoStar: number;
+    /** Number of 3-star reviews. */
+    countThreeStar: number;
+    /** Number of 4-star reviews. */
+    countFourStar: number;
+    /** Number of 5-star reviews. */
+    countFiveStar: number;
+}
 
 /**
  * Reads activity reviews from the gateway, which returns them newest-first
@@ -1848,6 +1899,22 @@ declare class ReviewService {
      * ```
      */
     getReviews(productId: string, reviewCount?: number, reviewOffset?: number): Promise<Review[]>;
+    /**
+     * Returns an aggregate review summary for **every** activity — its average
+     * rating and the count of reviews at each star level. This reads the same
+     * activity list as `getAllProducts`; it carries no per-review detail or PII, so
+     * it is unaffected by `fullCustomerAccess`. An activity with no reviews comes
+     * back with a `null` `avgRating` and zero counts.
+     *
+     * @example
+     * ```ts
+     * const summaries = await peek.getReviewService().getAllReviewSummaries();
+     * for (const s of summaries) {
+     *   console.log(s.productName, s.avgRating, s.countTotal);
+     * }
+     * ```
+     */
+    getAllReviewSummaries(): Promise<ProductReviewSummary[]>;
     private validate;
 }
 
@@ -2266,21 +2333,13 @@ declare class PeekAccessService {
 
 interface RestClientOptions$1 {
     /**
-     * The install's app endpoint URL (the install webhook's `apiUrl`). When set it
-     * is the **base URL** and only the REST path is appended (`apiUrl/path`) —
-     * `baseUrl`/`appId`/`extendableSlug` are ignored. Takes precedence over
-     * `baseUrl`.
-     */
-    apiUrl?: string;
-    /**
-     * Base URL of the backoffice gateway (no trailing slash). Used only when
-     * `apiUrl` is not set; the URL is `baseUrl/appId/extendableSlug/path`.
+     * The install's **base API URL** (no trailing slash, no routing slug). Each
+     * request builds `baseApiUrl/<slug>/<path>`, where the slug comes from
+     * {@link endpoints} for the request's endpoint key.
      */
-    baseUrl?: string;
-    /** App ID, used in the endpoint path (legacy `baseUrl` mode only). */
-    appId?: string;
-    /** Fixed extendable slug inserted between `appId` and the REST path (legacy mode). */
-    extendableSlug?: string;
+    baseApiUrl: string;
+    /** Maps an endpoint key to the relative slug appended to {@link baseApiUrl}. */
+    endpoints: ApiEndpoints;
     /** Supplies a valid bearer token for each request. */
     getToken: () => string;
     /** Backoff delays (ms) applied on successive HTTP 429 responses. */
@@ -2303,7 +2362,7 @@ declare class RestClient$1 {
      * @throws {CngPermissionError} on HTTP 403 (app missing a permission)
      * @throws {CngApiError} on any other non-2xx response
      */
-    get<T>(path: string): Promise<T>;
+    get<T>(endpoint: string, path: string): Promise<T>;
     private endpoint;
     private buildHeaders;
 }
@@ -2411,21 +2470,13 @@ declare class CngAccessService {
 
 interface RestClientOptions {
     /**
-     * The install's app endpoint URL (the install webhook's `apiUrl`). When set it
-     * is the **base URL** and only the REST path is appended (`apiUrl/path`) —
-     * `baseUrl`/`appId`/`extendableSlug` are ignored. Takes precedence over
-     * `baseUrl`.
-     */
-    apiUrl?: string;
-    /**
-     * Base URL of the backoffice gateway (no trailing slash). Used only when
-     * `apiUrl` is not set; the URL is `baseUrl/appId/extendableSlug/path`.
+     * The install's **base API URL** (no trailing slash, no routing slug). Each
+     * request builds `baseApiUrl/<slug>/<path>`, where the slug comes from
+     * {@link endpoints} for the request's endpoint key.
      */
-    baseUrl?: string;
-    /** App ID, used in the endpoint path (legacy `baseUrl` mode only). */
-    appId?: string;
-    /** Fixed extendable slug inserted between `appId` and the REST path (legacy mode). */
-    extendableSlug?: string;
+    baseApiUrl: string;
+    /** Maps an endpoint key to the relative slug appended to {@link baseApiUrl}. */
+    endpoints: ApiEndpoints;
     /** Supplies a valid bearer token for each request. */
     getToken: () => string;
     /** Backoff delays (ms) applied on successive HTTP 429 responses. */
@@ -2447,7 +2498,7 @@ declare class RestClient {
      * @throws {RateLimitError} on HTTP 429 after retries are exhausted
      * @throws {AcmeApiError} on any other non-2xx response
      */
-    get<T>(path: string): Promise<T>;
+    get<T>(endpoint: string, path: string): Promise<T>;
     private endpoint;
     private buildHeaders;
 }
@@ -2565,7 +2616,12 @@ declare class AcmeAccessService {
 interface InstallAccessTarget {
     /** Which platform serves the install (the install webhook's `platform`). */
     platform: PeekPlatform | null;
-    /** The install's app endpoint URL (the install webhook's `apiUrl`), used as given. */
+    /**
+     * The install's base API URL (the install webhook's `apiUrl`). The chosen
+     * access service's service classes append their own backoffice slug when they
+     * call; a URL already carrying this platform's slug is stripped back to the
+     * base, and one carrying a different platform's slug throws.
+     */
     apiUrl: string;
     /** The install id (the install webhook's `installId`) — becomes the JWT subject. */
     installId: string;
@@ -2987,4 +3043,4 @@ declare class AcmeApiError extends Error {
     constructor(statusCode: number, body: unknown, message?: string);
 }
 
-export { ACTIVITY_PRODUCT_TYPE, ADD_ON_PRODUCT_TYPE, type AccessOptions, type AccountUser, AccountUserService, type AccountUserServiceOptions, AcmeAccessService, type AcmeAccessServiceConfig, type AcmeActivity, type AcmeActivityTicket, AcmeApiError, AcmeProductService, type Activity, type ActivityOverrides, type ActivityTicket, type AddAddonInput, AdminAccountRequiredError, type Agent, type AssignGuideResult, type AssignedActivity, type AssignedResource, type Availability, AvailabilityService, type AvailabilityTime, type AvailabilityTimesQuery, type Booking, type BookingAddon, type BookingAddonMoney, type BookingAddonOption, type BookingAddons, type BookingAddonsMutationResult, type BookingPaymentsOnFile, type BookingReadOptions, type BookingSearchBy, BookingService, type BookingServiceOptions, type BookingTimeRangeSearch, type CancelBookingResult, type Channel, type ClearOverridesInput, CngAccessService, type CngAccessServiceConfig, CngApiError, CngPermissionError, CngProductService, type CreateBookingGuest, type CreateBookingInput, type CreateBookingTicket, type CreateEngineInput, type CreatePromoCodeInput, type CreatedBooking, type CreatedPricingEngine, type CreatedPromoCode, type CustomQuestion, type CustomQuestionAnswer, type CustomQuestionAnswerInput, type CustomQuestionOption, type DailyNote, DailyNoteService, type Duration, type Guest, type GuestMetadata, type Guide, type GuideAssignment, INSTALL_STATUSES, type InstallAccessConfig, type InstallAccessService, type InstallAccessTarget, type InstallStatus, type InstallWebhook, type InstallWebhookAccount, type InstallWebhookClaims, type InvoiceLinkResult, type Logger, type MakePaymentInput, type MakePaymentResult, type Membership, type MembershipPurchaseInput, MembershipService, type NoteMode, type Payment, type PaymentSource, PeekAccessService, type PeekAccessServiceConfig, type PeekAuthTokenClaims, type PeekAuthTokenUser, PeekGraphQLError, PeekHttpError, type PeekPlatform, PiiAccessDisabledError, type Price, type PricingActivityContext, type PricingEngine, type PricingMoney, type PricingNamedRef, type PricingOverride, type PricingOverrideFilter, PricingService, type Product, type ProductMeetingLocation, ProductService, type ProductServiceOptions, type ProductTicket, type PromoCode, type PromoCodeFixedAmount, PromoCodeService, type PromoCodeServiceOptions, type PurchasedMembership, RENTAL_PRODUCT_TYPE, RateLimitError, type RefundInput, type RefundResult, ResellerService, type ResolvedOverride, type ResolvedPricingOverride, type ResolvedResourceOption, type Resource, type ResourceOptionOverride, type ResourceOptionQuantity, type ResourcePool, type ResourcePoolAccountUser, type ResourcePoolAssignment, type ResourcePoolMode, ResourcePoolService, type Review, ReviewService, type Ticket, type Timeslot, type TimeslotFilter, TimeslotService, type UpdateEngineInput, type UpdateTimeslotResult, type UpsertOverridesInput, type UpsertOverridesResult, type Waiver, createAccessServiceForInstall, noopLogger, parseBookingWebhook, parseInstallWebhook, parseWaiverWebhook, verifyInstallWebhook };
+export { ACTIVITY_PRODUCT_TYPE, ADD_ON_PRODUCT_TYPE, type AccessOptions, type AccountUser, AccountUserService, type AccountUserServiceOptions, AcmeAccessService, type AcmeAccessServiceConfig, type AcmeActivity, type AcmeActivityTicket, AcmeApiError, AcmeProductService, type Activity, type ActivityOverrides, type ActivityTicket, type AddAddonInput, AdminAccountRequiredError, type Agent, type AssignGuideResult, type AssignedActivity, type AssignedResource, type Availability, AvailabilityService, type AvailabilityTime, type AvailabilityTimesQuery, type Booking, type BookingAddon, type BookingAddonMoney, type BookingAddonOption, type BookingAddons, type BookingAddonsMutationResult, type BookingPaymentsOnFile, type BookingReadOptions, type BookingSearchBy, BookingService, type BookingServiceOptions, type BookingTimeRangeSearch, type CancelBookingResult, type Channel, type ClearOverridesInput, CngAccessService, type CngAccessServiceConfig, CngApiError, CngPermissionError, CngProductService, type CreateBookingGuest, type CreateBookingInput, type CreateBookingTicket, type CreateEngineInput, type CreatePromoCodeInput, type CreatedBooking, type CreatedPricingEngine, type CreatedPromoCode, type CustomQuestion, type CustomQuestionAnswer, type CustomQuestionAnswerInput, type CustomQuestionOption, type DailyNote, DailyNoteService, type Duration, type Guest, type GuestMetadata, type Guide, type GuideAssignment, INSTALL_STATUSES, type InstallAccessConfig, type InstallAccessService, type InstallAccessTarget, type InstallStatus, type InstallWebhook, type InstallWebhookAccount, type InstallWebhookClaims, type InvoiceLinkResult, type Logger, type MakePaymentInput, type MakePaymentResult, type Membership, type MembershipPurchaseInput, MembershipService, type NoteMode, type Payment, type PaymentSource, PeekAccessService, type PeekAccessServiceConfig, type PeekAuthTokenClaims, type PeekAuthTokenUser, PeekGraphQLError, PeekHttpError, type PeekPlatform, PiiAccessDisabledError, type Price, type PricingActivityContext, type PricingEngine, type PricingMoney, type PricingNamedRef, type PricingOverride, type PricingOverrideFilter, PricingService, type Product, type ProductMeetingLocation, type ProductReviewSummary, ProductService, type ProductServiceOptions, type ProductTicket, type PromoCode, type PromoCodeFixedAmount, PromoCodeService, type PromoCodeServiceOptions, type PurchasedMembership, RENTAL_PRODUCT_TYPE, RateLimitError, type RefundInput, type RefundResult, ResellerService, type ResolvedOverride, type ResolvedPricingOverride, type ResolvedResourceOption, type Resource, type ResourceOptionOverride, type ResourceOptionQuantity, type ResourcePool, type ResourcePoolAccountUser, type ResourcePoolAssignment, type ResourcePoolMode, ResourcePoolService, type Review, ReviewService, type Ticket, type Timeslot, type TimeslotFilter, TimeslotService, type UpdateEngineInput, type UpdateTimeslotResult, type UpsertOverridesInput, type UpsertOverridesResult, type Waiver, createAccessServiceForInstall, noopLogger, parseBookingWebhook, parseInstallWebhook, parseWaiverWebhook, verifyInstallWebhook };

package/dist/index.d.ts

@@ -1,3 +1,24 @@
+/**
+ * A platform's tiny map of **API endpoint key → relative path** (the "slug"
+ * inserted between the install's base API URL and the endpoint's own path).
+ *
+ * The base API URL is the install's app endpoint with no routing segment — the
+ * install webhook's `apiUrl` (with any slug stripped back off), or
+ * `baseUrl/appId` when built from the deprecated defaults. Each service class
+ * resolves *its own* slug through this lookup, so two services on the same
+ * platform can route through different slugs. Adding a new API — even one on a
+ * different slug than its siblings — is a single entry here.
+ *
+ * An empty-string path means the endpoint sits directly on the base with no
+ * slug (e.g. the legacy Peek v1 GraphQL gateway, which has no extendable slug).
+ */
+declare class ApiEndpoints<Key extends string = string> {
+    private readonly paths;
+    constructor(paths: Readonly<Record<Key, string>>);
+    /** The relative path (slug) for `endpoint`, appended to the base API URL. */
+    pathFor(endpoint: Key): string;
+}
+
 /**
  * Minimal structured logger interface the package can write diagnostics to.
  *
@@ -20,19 +41,13 @@ interface GraphQLBody<T> {
 }
 interface GraphQLClientOptions {
     /**
-     * The install's app endpoint URL (the install webhook's `apiUrl`). When set it
-     * is the **sole request URL** — every GraphQL call POSTs to it unmodified, and
-     * `baseUrl`/`appId`/`endpointPathPrefix`/`endpointName` are ignored for URL
-     * construction. Takes precedence over `baseUrl`.
+     * The install's **base API URL** (no trailing slash, no routing slug). Every
+     * GraphQL call POSTs to `baseApiUrl/<slug>`, where the slug comes from
+     * {@link endpoints} for the request's endpoint name.
      */
-    apiUrl?: string;
-    /**
-     * Base URL of the backoffice GraphQL gateway (no trailing slash). Used only
-     * when `apiUrl` is not set; the URL is `baseUrl/appId/[prefix/]endpointName`.
-     */
-    baseUrl?: string;
-    /** Peek app ID, used in the endpoint path (legacy `baseUrl` mode only). */
-    appId?: string;
+    baseApiUrl: string;
+    /** Maps an endpoint name to the relative slug appended to {@link baseApiUrl}. */
+    endpoints: ApiEndpoints;
     /** API gateway key sent as the `pk-api-key` header. Omitted from headers when absent (v2 mode). */
     gatewayKey?: string;
     /** Supplies a valid bearer token for each request. */
@@ -43,11 +58,6 @@ interface GraphQLClientOptions {
     logger: Logger;
     /** `fetch` implementation to use. */
     fetchFn: typeof fetch;
-    /**
-     * Optional fixed path segment inserted between `appId` and the endpoint name.
-     * Used in v2 mode: `baseUrl/appId/endpointPathPrefix/endpointName`.
-     */
-    endpointPathPrefix?: string;
 }
 declare class GraphQLClient {
     private readonly options;
@@ -904,6 +914,16 @@ interface CreateBookingInput {
      * Default: `false`.
      */
     requireRequiredQuestions?: boolean;
+    /**
+     * When `true`, a `customQuestionAnswers` entry whose `questionIdOrText` is a
+     * `cq_…` id is accepted even if that id is **not** among the activity's custom
+     * questions — the check that a question id must match the activity's list is
+     * skipped, and the answer is sent as-is (as a text answer). Entries given by
+     * question **name** are unaffected: they still must match a question, so the
+     * activity's questions are fetched only when a by-name answer (or
+     * `requireRequiredQuestions`) needs them. Default: `false`.
+     */
+    acceptAllCustomQuestionIds?: boolean;
     /** Suppress the customer confirmation email. Default: false. */
     skipCustomerEmail?: boolean;
     /** Clone the quote from an existing order. */
@@ -1285,7 +1305,9 @@ declare class BookingService {
      * Resolves the input's custom-question answers into the quote's
      * `questionAnswers` payload (each tagged with a fresh `refid`), or `null` when
      * none were supplied. Fetches the activity's custom questions to validate
-     * against; throws on the first unmatched/ambiguous/invalid answer.
+     * against; throws on the first unmatched/ambiguous/invalid answer. When
+     * `acceptAllCustomQuestionIds` is set the fetch is skipped if every answer is
+     * given by id (a by-name answer still needs the list to resolve).
      */
     private buildQuestionAnswers;
     private markCreatedBookingPaid;
@@ -1671,13 +1693,17 @@ interface BaseAccessServiceConfig {
     /** JWT issuer — the app name / app ID. */
     issuer: string;
     /**
-     * The install's **app endpoint URL** — persist the install webhook's `apiUrl`
-     * and pass it here. When set it is used **as given**: for Peek it is the sole
-     * request URL (every call POSTs to it); for CNG/ACME it is the base and the
-     * REST path is appended. No app-id/gateway segment is inserted, so `appId` is
-     * not required. This is the forward-looking way to target an install — prefer
-     * it over `baseUrl`/`appId`, which are deprecated (the hardcoded base-URL
-     * fallbacks will be removed and a URL will become required in a future release).
+     * The install's **base API URL** — persist the install webhook's `apiUrl` and
+     * pass it here. It is the app endpoint with no per-platform routing slug; each
+     * service class appends its own slug (e.g. `peek_backoffice_api-v1`, via that
+     * platform's endpoint lookup) when it makes a call, so different services can
+     * route through different slugs. If the URL you pass still carries this
+     * platform's slug it is stripped back off to recover the base; a URL carrying a
+     * *different* platform's slug makes the constructor throw. No app-id/gateway
+     * segment is inserted, so `appId` is not required. This is the forward-looking
+     * way to target an install — prefer it over `baseUrl`/`appId`, which are
+     * deprecated (the hardcoded base-URL fallbacks will be removed and a URL will
+     * become required in a future release).
      */
     apiUrl?: string;
     /**
@@ -1808,6 +1834,31 @@ interface Review {
     /** Free-text review. May be null. */
     comment: string | null;
 }
+/**
+ * Aggregate review statistics for a single activity (product), as returned by
+ * {@link ReviewService.getAllReviewSummaries}. Carries no per-review detail or
+ * PII — just the rating distribution and average.
+ */
+interface ProductReviewSummary {
+    /** Activity (product) id the summary is for. */
+    productId: string;
+    /** Activity (product) name. */
+    productName: string;
+    /** Average star rating as a decimal, or `null` when there are no ratings. */
+    avgRating: number | null;
+    /** Total number of reviews. */
+    countTotal: number;
+    /** Number of 1-star reviews. */
+    countOneStar: number;
+    /** Number of 2-star reviews. */
+    countTwoStar: number;
+    /** Number of 3-star reviews. */
+    countThreeStar: number;
+    /** Number of 4-star reviews. */
+    countFourStar: number;
+    /** Number of 5-star reviews. */
+    countFiveStar: number;
+}
 
 /**
  * Reads activity reviews from the gateway, which returns them newest-first
@@ -1848,6 +1899,22 @@ declare class ReviewService {
      * ```
      */
     getReviews(productId: string, reviewCount?: number, reviewOffset?: number): Promise<Review[]>;
+    /**
+     * Returns an aggregate review summary for **every** activity — its average
+     * rating and the count of reviews at each star level. This reads the same
+     * activity list as `getAllProducts`; it carries no per-review detail or PII, so
+     * it is unaffected by `fullCustomerAccess`. An activity with no reviews comes
+     * back with a `null` `avgRating` and zero counts.
+     *
+     * @example
+     * ```ts
+     * const summaries = await peek.getReviewService().getAllReviewSummaries();
+     * for (const s of summaries) {
+     *   console.log(s.productName, s.avgRating, s.countTotal);
+     * }
+     * ```
+     */
+    getAllReviewSummaries(): Promise<ProductReviewSummary[]>;
     private validate;
 }
 
@@ -2266,21 +2333,13 @@ declare class PeekAccessService {
 
 interface RestClientOptions$1 {
     /**
-     * The install's app endpoint URL (the install webhook's `apiUrl`). When set it
-     * is the **base URL** and only the REST path is appended (`apiUrl/path`) —
-     * `baseUrl`/`appId`/`extendableSlug` are ignored. Takes precedence over
-     * `baseUrl`.
-     */
-    apiUrl?: string;
-    /**
-     * Base URL of the backoffice gateway (no trailing slash). Used only when
-     * `apiUrl` is not set; the URL is `baseUrl/appId/extendableSlug/path`.
+     * The install's **base API URL** (no trailing slash, no routing slug). Each
+     * request builds `baseApiUrl/<slug>/<path>`, where the slug comes from
+     * {@link endpoints} for the request's endpoint key.
      */
-    baseUrl?: string;
-    /** App ID, used in the endpoint path (legacy `baseUrl` mode only). */
-    appId?: string;
-    /** Fixed extendable slug inserted between `appId` and the REST path (legacy mode). */
-    extendableSlug?: string;
+    baseApiUrl: string;
+    /** Maps an endpoint key to the relative slug appended to {@link baseApiUrl}. */
+    endpoints: ApiEndpoints;
     /** Supplies a valid bearer token for each request. */
     getToken: () => string;
     /** Backoff delays (ms) applied on successive HTTP 429 responses. */
@@ -2303,7 +2362,7 @@ declare class RestClient$1 {
      * @throws {CngPermissionError} on HTTP 403 (app missing a permission)
      * @throws {CngApiError} on any other non-2xx response
      */
-    get<T>(path: string): Promise<T>;
+    get<T>(endpoint: string, path: string): Promise<T>;
     private endpoint;
     private buildHeaders;
 }
@@ -2411,21 +2470,13 @@ declare class CngAccessService {
 
 interface RestClientOptions {
     /**
-     * The install's app endpoint URL (the install webhook's `apiUrl`). When set it
-     * is the **base URL** and only the REST path is appended (`apiUrl/path`) —
-     * `baseUrl`/`appId`/`extendableSlug` are ignored. Takes precedence over
-     * `baseUrl`.
-     */
-    apiUrl?: string;
-    /**
-     * Base URL of the backoffice gateway (no trailing slash). Used only when
-     * `apiUrl` is not set; the URL is `baseUrl/appId/extendableSlug/path`.
+     * The install's **base API URL** (no trailing slash, no routing slug). Each
+     * request builds `baseApiUrl/<slug>/<path>`, where the slug comes from
+     * {@link endpoints} for the request's endpoint key.
      */
-    baseUrl?: string;
-    /** App ID, used in the endpoint path (legacy `baseUrl` mode only). */
-    appId?: string;
-    /** Fixed extendable slug inserted between `appId` and the REST path (legacy mode). */
-    extendableSlug?: string;
+    baseApiUrl: string;
+    /** Maps an endpoint key to the relative slug appended to {@link baseApiUrl}. */
+    endpoints: ApiEndpoints;
     /** Supplies a valid bearer token for each request. */
     getToken: () => string;
     /** Backoff delays (ms) applied on successive HTTP 429 responses. */
@@ -2447,7 +2498,7 @@ declare class RestClient {
      * @throws {RateLimitError} on HTTP 429 after retries are exhausted
      * @throws {AcmeApiError} on any other non-2xx response
      */
-    get<T>(path: string): Promise<T>;
+    get<T>(endpoint: string, path: string): Promise<T>;
     private endpoint;
     private buildHeaders;
 }
@@ -2565,7 +2616,12 @@ declare class AcmeAccessService {
 interface InstallAccessTarget {
     /** Which platform serves the install (the install webhook's `platform`). */
     platform: PeekPlatform | null;
-    /** The install's app endpoint URL (the install webhook's `apiUrl`), used as given. */
+    /**
+     * The install's base API URL (the install webhook's `apiUrl`). The chosen
+     * access service's service classes append their own backoffice slug when they
+     * call; a URL already carrying this platform's slug is stripped back to the
+     * base, and one carrying a different platform's slug throws.
+     */
     apiUrl: string;
     /** The install id (the install webhook's `installId`) — becomes the JWT subject. */
     installId: string;
@@ -2987,4 +3043,4 @@ declare class AcmeApiError extends Error {
     constructor(statusCode: number, body: unknown, message?: string);
 }
 
-export { ACTIVITY_PRODUCT_TYPE, ADD_ON_PRODUCT_TYPE, type AccessOptions, type AccountUser, AccountUserService, type AccountUserServiceOptions, AcmeAccessService, type AcmeAccessServiceConfig, type AcmeActivity, type AcmeActivityTicket, AcmeApiError, AcmeProductService, type Activity, type ActivityOverrides, type ActivityTicket, type AddAddonInput, AdminAccountRequiredError, type Agent, type AssignGuideResult, type AssignedActivity, type AssignedResource, type Availability, AvailabilityService, type AvailabilityTime, type AvailabilityTimesQuery, type Booking, type BookingAddon, type BookingAddonMoney, type BookingAddonOption, type BookingAddons, type BookingAddonsMutationResult, type BookingPaymentsOnFile, type BookingReadOptions, type BookingSearchBy, BookingService, type BookingServiceOptions, type BookingTimeRangeSearch, type CancelBookingResult, type Channel, type ClearOverridesInput, CngAccessService, type CngAccessServiceConfig, CngApiError, CngPermissionError, CngProductService, type CreateBookingGuest, type CreateBookingInput, type CreateBookingTicket, type CreateEngineInput, type CreatePromoCodeInput, type CreatedBooking, type CreatedPricingEngine, type CreatedPromoCode, type CustomQuestion, type CustomQuestionAnswer, type CustomQuestionAnswerInput, type CustomQuestionOption, type DailyNote, DailyNoteService, type Duration, type Guest, type GuestMetadata, type Guide, type GuideAssignment, INSTALL_STATUSES, type InstallAccessConfig, type InstallAccessService, type InstallAccessTarget, type InstallStatus, type InstallWebhook, type InstallWebhookAccount, type InstallWebhookClaims, type InvoiceLinkResult, type Logger, type MakePaymentInput, type MakePaymentResult, type Membership, type MembershipPurchaseInput, MembershipService, type NoteMode, type Payment, type PaymentSource, PeekAccessService, type PeekAccessServiceConfig, type PeekAuthTokenClaims, type PeekAuthTokenUser, PeekGraphQLError, PeekHttpError, type PeekPlatform, PiiAccessDisabledError, type Price, type PricingActivityContext, type PricingEngine, type PricingMoney, type PricingNamedRef, type PricingOverride, type PricingOverrideFilter, PricingService, type Product, type ProductMeetingLocation, ProductService, type ProductServiceOptions, type ProductTicket, type PromoCode, type PromoCodeFixedAmount, PromoCodeService, type PromoCodeServiceOptions, type PurchasedMembership, RENTAL_PRODUCT_TYPE, RateLimitError, type RefundInput, type RefundResult, ResellerService, type ResolvedOverride, type ResolvedPricingOverride, type ResolvedResourceOption, type Resource, type ResourceOptionOverride, type ResourceOptionQuantity, type ResourcePool, type ResourcePoolAccountUser, type ResourcePoolAssignment, type ResourcePoolMode, ResourcePoolService, type Review, ReviewService, type Ticket, type Timeslot, type TimeslotFilter, TimeslotService, type UpdateEngineInput, type UpdateTimeslotResult, type UpsertOverridesInput, type UpsertOverridesResult, type Waiver, createAccessServiceForInstall, noopLogger, parseBookingWebhook, parseInstallWebhook, parseWaiverWebhook, verifyInstallWebhook };
+export { ACTIVITY_PRODUCT_TYPE, ADD_ON_PRODUCT_TYPE, type AccessOptions, type AccountUser, AccountUserService, type AccountUserServiceOptions, AcmeAccessService, type AcmeAccessServiceConfig, type AcmeActivity, type AcmeActivityTicket, AcmeApiError, AcmeProductService, type Activity, type ActivityOverrides, type ActivityTicket, type AddAddonInput, AdminAccountRequiredError, type Agent, type AssignGuideResult, type AssignedActivity, type AssignedResource, type Availability, AvailabilityService, type AvailabilityTime, type AvailabilityTimesQuery, type Booking, type BookingAddon, type BookingAddonMoney, type BookingAddonOption, type BookingAddons, type BookingAddonsMutationResult, type BookingPaymentsOnFile, type BookingReadOptions, type BookingSearchBy, BookingService, type BookingServiceOptions, type BookingTimeRangeSearch, type CancelBookingResult, type Channel, type ClearOverridesInput, CngAccessService, type CngAccessServiceConfig, CngApiError, CngPermissionError, CngProductService, type CreateBookingGuest, type CreateBookingInput, type CreateBookingTicket, type CreateEngineInput, type CreatePromoCodeInput, type CreatedBooking, type CreatedPricingEngine, type CreatedPromoCode, type CustomQuestion, type CustomQuestionAnswer, type CustomQuestionAnswerInput, type CustomQuestionOption, type DailyNote, DailyNoteService, type Duration, type Guest, type GuestMetadata, type Guide, type GuideAssignment, INSTALL_STATUSES, type InstallAccessConfig, type InstallAccessService, type InstallAccessTarget, type InstallStatus, type InstallWebhook, type InstallWebhookAccount, type InstallWebhookClaims, type InvoiceLinkResult, type Logger, type MakePaymentInput, type MakePaymentResult, type Membership, type MembershipPurchaseInput, MembershipService, type NoteMode, type Payment, type PaymentSource, PeekAccessService, type PeekAccessServiceConfig, type PeekAuthTokenClaims, type PeekAuthTokenUser, PeekGraphQLError, PeekHttpError, type PeekPlatform, PiiAccessDisabledError, type Price, type PricingActivityContext, type PricingEngine, type PricingMoney, type PricingNamedRef, type PricingOverride, type PricingOverrideFilter, PricingService, type Product, type ProductMeetingLocation, type ProductReviewSummary, ProductService, type ProductServiceOptions, type ProductTicket, type PromoCode, type PromoCodeFixedAmount, PromoCodeService, type PromoCodeServiceOptions, type PurchasedMembership, RENTAL_PRODUCT_TYPE, RateLimitError, type RefundInput, type RefundResult, ResellerService, type ResolvedOverride, type ResolvedPricingOverride, type ResolvedResourceOption, type Resource, type ResourceOptionOverride, type ResourceOptionQuantity, type ResourcePool, type ResourcePoolAccountUser, type ResourcePoolAssignment, type ResourcePoolMode, ResourcePoolService, type Review, ReviewService, type Ticket, type Timeslot, type TimeslotFilter, TimeslotService, type UpdateEngineInput, type UpdateTimeslotResult, type UpsertOverridesInput, type UpsertOverridesResult, type Waiver, createAccessServiceForInstall, noopLogger, parseBookingWebhook, parseInstallWebhook, parseWaiverWebhook, verifyInstallWebhook };