ti2 1.0.107 → 1.0.108-beta.0

package/api.yml

@@ -151,6 +151,10 @@ components:
         payload:
           type: object
           example: random lorem
+    integrationCredentials:
+      description: Optional external-session credentials forwarded by the client
+      type: object
+      additionalProperties: true
     UserApp:
       description: A user + App configuration
       type: object
@@ -385,6 +389,9 @@ components:
           required: false
           description: Product Name wildcard match
           example: '*bus*'
+        credentials:
+          required: false
+          $ref: '#/components/schemas/integrationCredentials'
     bookingsProductSearchReturn:
       type: object
       additionalProperties: true
@@ -454,6 +461,9 @@ components:
         shellOnly:
           type: boolean
           description: Optional itinerary-assist flag to create/update booking header only without adding a service line
+        credentials:
+          required: false
+          $ref: '#/components/schemas/integrationCredentials'
     settingsBody:
       type: object
       required: true
@@ -1410,6 +1420,40 @@ paths:
                       $ref: '#/components/schemas/desk'
   /affiliate/{appKey}/{userId}/agents:
     get:
+      deprecated: true
+      security:
+        - bearerAuth: ['admin', 'user']
+      tags:
+        - bookings
+      summary: Gets all agents for this affiliate
+      operationId: getAffiliateAgents
+      parameters:
+        - name: appKey
+          in: path
+          description: name of the app to get the agents for (defaults to first token found)
+          required: true
+          example: 'fareharbor'
+          schema:
+            type: string
+        - name: userId
+          in: path
+          description: the user/company that the appKey belongs to
+          required: true
+          schema:
+            type: string
+      responses:
+        '200':
+          description: agents
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  agents:
+                    type: array
+                    items:
+                      $ref: '#/components/schemas/agent'
+    post:
       security:
         - bearerAuth: ['admin', 'user']
       tags:
@@ -1430,6 +1474,13 @@ paths:
           required: true
           schema:
             type: string
+      requestBody:
+        description: Optional request metadata
+        required: false
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/AnyValue'
       responses:
         '200':
           description: agents
@@ -1444,6 +1495,7 @@ paths:
                       $ref: '#/components/schemas/agent'
   /affiliate/{appKey}/{userId}/{hint}/agents:
     get:
+      deprecated: true
       security:
         - bearerAuth: ['admin', 'user']
       tags:
@@ -1483,6 +1535,53 @@ paths:
                     type: array
                     items:
                       $ref: '#/components/schemas/agent'
+    post:
+      security:
+        - bearerAuth: ['admin', 'user']
+      tags:
+        - bookings
+      summary: Gets all agents for this affiliate
+      operationId: getAffiliateAgents
+      parameters:
+        - name: appKey
+          in: path
+          description: name of the app to get the agents for the token using the hint
+          required: true
+          example: 'fareharbor'
+          schema:
+            type: string
+        - name: userId
+          in: path
+          description: the user/company that the appKey belongs to
+          required: true
+          schema:
+            type: string
+        - name: hint
+          in: path
+          description: a specific token hint to be used
+          required: true
+          example: 'fareharbor-helloworld'
+          schema:
+            type: string
+      requestBody:
+        description: Optional request metadata
+        required: false
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/AnyValue'
+      responses:
+        '200':
+          description: agents
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  agents:
+                    type: array
+                    items:
+                      $ref: '#/components/schemas/agent'
   /{appKey}/{userId}/pickup-points:
     get:
       security:
@@ -2256,6 +2355,38 @@ paths:
                 $ref: '#/components/schemas/AnyValue'
   /bookings/{appKey}/{userId}/custom-fields:
     get:
+      deprecated: true
+      security:
+        - bearerAuth: ['admin', 'user']
+      tags:
+        - bookings
+      summary: Gets all custom fields for creating a booking
+      operationId: getCreateBookingFields
+      parameters:
+        - name: appKey
+          in: path
+          description: name of the app to get the resource for (defaults to first token found)
+          required: true
+          example: 'fareharbor'
+          schema:
+            type: string
+        - name: userId
+          in: path
+          description: the user/company that the appKey belongs to
+          required: true
+          schema:
+            type: string
+      responses:
+        '200':
+          description: fields
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  fields:
+                    type: array
+    post:
       security:
         - bearerAuth: ['admin', 'user']
       tags:
@@ -2276,6 +2407,13 @@ paths:
           required: true
           schema:
             type: string
+      requestBody:
+        description: Optional field context and credentials
+        required: false
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/AnyValue'
       responses:
         '200':
           description: fields
@@ -2288,6 +2426,7 @@ paths:
                     type: array
   /bookings/{appKey}/{userId}/{hint}/custom-fields:
     get:
+      deprecated: true
       security:
         - bearerAuth: ['admin', 'user']
       tags:
@@ -2325,6 +2464,51 @@ paths:
                 properties:
                   fields:
                     type: array
+    post:
+      security:
+        - bearerAuth: ['admin', 'user']
+      tags:
+        - bookings
+      summary: Gets all custom fields for creating a booking
+      operationId: getCreateBookingFields
+      parameters:
+        - name: appKey
+          in: path
+          description: name of the app to get the resource for the token using the hint
+          required: true
+          example: 'xola'
+          schema:
+            type: string
+        - name: userId
+          in: path
+          description: the user/company that the appKey belongs to
+          required: true
+          schema:
+            type: string
+        - name: hint
+          in: path
+          description: a specific token hint to be used
+          required: true
+          example: 'xola-helloworld'
+          schema:
+            type: string
+      requestBody:
+        description: Optional field context and credentials
+        required: false
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/AnyValue'
+      responses:
+        '200':
+          description: fields
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  fields:
+                    type: array
   
   /allotment/{appKey}/{userId}:
     get:

package/controllers/__tests__/allotments.js

@@ -1,4 +1,4 @@
-/* globals beforeAll describe it expect jest */
+/* globals beforeAll beforeEach describe it expect jest */
 const axios = require('axios');
 const MockAdapter = require('axios-mock-adapter');
 const chance = require('chance').Chance();
@@ -28,6 +28,9 @@ describe('allotment', () => {
   let doApiPost;
   let plugins;
   let userToken;
+  beforeEach(() => {
+    jest.clearAllMocks();
+  });
   beforeAll(async () => {
     ({
       doApiGet,
@@ -72,6 +75,8 @@ describe('allotment', () => {
     const call = plugins[0].queryAllotment.mock.calls[0][0];
     expect(call.payload).toEqual(payload);
     expect(call.token).toEqual(token);
+    expect(call.userId).toEqual(userId);
+    expect(call.hint).toBeUndefined();
   });
   it('should be able to get some allotments with a hint', async () => {
     const { allotments } = await doApiGet({
@@ -84,6 +89,8 @@ describe('allotment', () => {
     const call = plugins[0].queryAllotment.mock.calls[0][0];
     expect(call.payload).toEqual(payload);
     expect(call.token).toEqual(token);
+    expect(call.userId).toEqual(userId);
+    expect(call.hint).toEqual(newIntegration.tokenHint);
   });
   it('should be able to receive an axios error', async () => {
     // Temporarily silence console.error for this test since we're expecting an error

package/controllers/__tests__/bookings.js

@@ -170,6 +170,52 @@ describe('user: bookings controller', () => {
     expect(plugins[0].createBooking.mock.calls[0][0].payload).toEqual(payload);
     expect(plugins[0].createBooking.mock.calls[0][0].token).toEqual(token);
   });
+  it('should forward inline credentials directly to create booking', async () => {
+    const payload = {
+      id: chance.guid(),
+      credentials: {
+        sessionValue: 'abc123',
+      },
+    };
+    await doApiPost({
+      url: `/bookings/${appKey}/${userId}/testingToken/booking`,
+      token: userToken,
+      payload,
+    });
+    expect(plugins[0].createBooking).toHaveBeenCalled();
+    expect(plugins[0].createBooking.mock.calls[0][0].payload).toEqual(payload);
+  });
+  it('should support POST affiliate agents with inline credentials', async () => {
+    const payload = {
+      credentials: {
+        sessionValue: 'agent-credential',
+      },
+    };
+    const { agents } = await doApiPost({
+      url: `/affiliate/${appKey}/${userId}/testingToken/agents`,
+      token: userToken,
+      payload,
+    });
+    expect(Array.isArray(agents)).toBeTruthy();
+    expect(plugins[0].getAffiliateAgents).toHaveBeenCalledTimes(1);
+    expect(plugins[0].getAffiliateAgents.mock.calls[0][0].payload).toEqual(payload);
+  });
+  it('should support POST custom-fields with inline credentials', async () => {
+    const payload = {
+      productId: 'prod-1',
+      credentials: {
+        sessionValue: 'fields-credential',
+      },
+    };
+    const response = await doApiPost({
+      url: `/bookings/${appKey}/${userId}/testingToken/custom-fields`,
+      token: userToken,
+      payload,
+    });
+    expect(response.customFields).toEqual([]);
+    expect(plugins[0].getCreateItineraryFields).toHaveBeenCalledTimes(1);
+    expect(plugins[0].getCreateItineraryFields.mock.calls[0][0].payload).toEqual(payload);
+  });
   it('should return 422 when stored app token is corrupted on bookings endpoint', async () => {
     const consoleErrorSpy = jest.spyOn(console, 'error').mockImplementation(() => {});
     const [originalRows] = await sqldb.query(
@@ -301,5 +347,25 @@ describe('user: bookings controller', () => {
       expect(products).toHaveLength(1);
       expect(products[0].productName).toBe('Cached Product');
     });
+
+    it('should forward inline credentials directly to product search', async () => {
+      const payload = {
+        credentials: {
+          sessionValue: 'product-credential',
+        },
+      };
+
+      await doApiPost({
+        url: `/products/${appKey}/${userId}/testingToken/search`,
+        token: userToken,
+        payload,
+      });
+
+      expect(plugins[0].searchProducts).toHaveBeenCalledTimes(1);
+      expect(plugins[0].searchProducts.mock.calls[0][0].payload).toEqual({
+        ...payload,
+        forceRefresh: false,
+      });
+    });
   });
 });

package/controllers/allotment.js

@@ -19,7 +19,7 @@ const queryAllotment = plugins => async (req, res, next) => {
       where: {
         userId,
         integrationId: appKey,
-        ...(hint ? { hint } : {}),
+        ...(hint && { hint }),
       },
     });
     assert(userAppKeys, 'could not find the app key');
@@ -29,6 +29,8 @@ const queryAllotment = plugins => async (req, res, next) => {
       axios,
       token,
       payload: query,
+      userId,
+      hint,
       requestId: req.requestId,
     });
     return res.json(results);

package/controllers/bookings.js

@@ -28,6 +28,21 @@ const typeDefsAndQueries = {
   itineraryBookingQuery,
 };
 
+const getAppAndToken = async ({ plugins, appKey, userId, hint }) => {
+  const app = plugins.find(({ name }) => name === appKey);
+  assert(app, 'could not find the app ' + appKey);
+  const userAppKeys = await UserAppKey.findOne({
+    where: {
+      userId,
+      integrationId: appKey,
+      ...(hint && { hint }),
+    },
+  });
+  assert(userAppKeys, 'could not find the app key');
+  const token = await userAppKeys.token;
+  return { app, token };
+};
+
 const bookingsSearch = plugins => async (req, res, next) => {
   const {
     axios,
@@ -35,16 +50,7 @@ const bookingsSearch = plugins => async (req, res, next) => {
     body,
   } = req;
   try {
-    const app = plugins.find(({ name }) => name === appKey);
-    const userAppKeys = await UserAppKey.findOne({
-      where: {
-        userId,
-        integrationId: appKey,
-        ...(hint ? { hint } : {}),
-      },
-    });
-    assert(userAppKeys, 'could not find the app key');
-    const token = await userAppKeys.token;
+    const { app, token } = await getAppAndToken({ plugins, appKey, userId, hint });
     assert(app.searchItineraries || app.searchHotelBooking || app.searchBooking, `searchItineraries or searchHotelBooking or searchBooking is not available for ${appKey}`);
     const search = (app.searchHotelBooking || app.searchBooking || app.searchItineraries).bind(app);
     const results = await search({
@@ -52,6 +58,8 @@ const bookingsSearch = plugins => async (req, res, next) => {
       token,
       payload: body,
       typeDefsAndQueries,
+      userId,
+      hint,
       requestId: req.requestId,
     });
     return res.json(results);
@@ -67,22 +75,14 @@ const bookingsCancel = plugins => async (req, res, next) => {
     body,
   } = req;
   try {
-    const app = plugins.find(({ name }) => name === appKey);
-    // const app = load(appKey);
-    const userAppKeys = (await UserAppKey.findOne({
-      where: {
-        userId,
-        integrationId: appKey,
-        ...(hint ? { hint } : {}),
-      },
-    }));
-    assert(userAppKeys, 'could not find the app key');
-    const token = await userAppKeys.token;
+    const { app, token } = await getAppAndToken({ plugins, appKey, userId, hint });
     const results = await app.cancelBooking({
       axios,
       token,
       payload: body,
       typeDefsAndQueries,
+      userId,
+      hint,
       requestId: req.requestId,
     });
     return res.json(results);
@@ -140,16 +140,12 @@ const $bookingsProductSearch = plugins => async ({
 
   // Payload for the plugin function (func) - pass forceRefresh so plugins can trigger background cache rebuilds
   const payloadForPlugin = { ...R.omit(['forceRefresh'], originalRequestBody), forceRefresh };
+  const payloadForBackgroundJob = R.omit(['credentials'], payloadForPlugin);
 
-  const app = plugins.find(({ name }) => name === appKey);
+  const { app, token } = await getAppAndToken({ plugins, appKey, userId, hint });
   assert(userId, 'userId is required');
   assert(appKey, 'appKey is required');
   assert(app.searchProducts || app.searchProductsForItinerary, `searchProducts or searchProductsForItinerary is not available for ${appKey}`);
-  const userAppKeys = (await UserAppKey.findOne({
-    where: { userId, integrationId: appKey, ...(hint ? { hint } : {}) },
-  }));
-  assert(userAppKeys, 'could not find the app key');
-  const token = await userAppKeys.token;
   const func = (app.searchProducts || app.searchProductsForItinerary).bind(app);
 
   const cacheKey = hash({ userId, hint, operationId: 'bookingsProductSearch' });
@@ -170,7 +166,13 @@ const $bookingsProductSearch = plugins => async ({
     let pluginResults;
     try {
       pluginResults = await func({
-        axios, token, payload: payloadForPlugin, typeDefsAndQueries, requestId, userId,
+        axios,
+        token,
+        payload: payloadForPlugin,
+        typeDefsAndQueries,
+        requestId,
+        userId,
+        hint,
       });
 
       // This function is responsible for caching if it fetched good results.
@@ -244,7 +246,7 @@ const $bookingsProductSearch = plugins => async ({
         pluginName: appKey,
         method: app.searchProducts ? 'searchProducts' : 'searchProductsForItinerary',
         token,
-        payload: { payload: payloadForPlugin, userId },
+        payload: { payload: payloadForBackgroundJob, userId, hint },
         postProcess: {
           controller: 'bookings',
           action: '$updateProductSearchCache',
@@ -294,23 +296,15 @@ const getProductPackages = plugins => async (req, res, next) => {
     body: payload,
   } = req;
   try {
-    const app = plugins.find(({ name }) => name === appKey);
-    // const app = load(appKey);
-    const userAppKeys = (await UserAppKey.findOne({
-      where: {
-        userId,
-        integrationId: appKey,
-        ...(hint ? { hint } : {}),
-      },
-    }));
-    assert(userAppKeys, 'could not find the app key');
+    const { app, token } = await getAppAndToken({ plugins, appKey, userId, hint });
     assert(app.getProductPackages, `getProductPackages is not available for ${appKey}`);
-    const token = await userAppKeys.token;
     const results = await app.getProductPackages({
       axios,
       token,
       payload,
       typeDefsAndQueries,
+      userId,
+      hint,
       requestId: req.requestId,
     });
     return res.json(results);
@@ -326,23 +320,15 @@ const bookingsAvailabilitySearch = plugins => async (req, res, next) => {
     body: payload,
   } = req;
   try {
-    const app = plugins.find(({ name }) => name === appKey);
-    // const app = load(appKey);
-    const userAppKeys = (await UserAppKey.findOne({
-      where: {
-        userId,
-        integrationId: appKey,
-        ...(hint ? { hint } : {}),
-      },
-    }));
-    assert(userAppKeys, 'could not find the app key');
-    const token = await userAppKeys.token;
+    const { app, token } = await getAppAndToken({ plugins, appKey, userId, hint });
     const func = (app.searchAvailability || app.searchAvailabilityForItinerary).bind(app);
     const results = await func({
       axios,
       token,
       payload,
       typeDefsAndQueries,
+      userId,
+      hint,
       requestId: req.requestId,
     });
     return res.json(results);
@@ -359,23 +345,15 @@ const $bookingsAvailabilityCalendar = plugins => async ({
   payload,
   requestId,
 }) => {
-  const app = plugins.find(({ name }) => name === appKey);
-  // const app = load(appKey);
-  const userAppKeys = (await UserAppKey.findOne({
-    where: {
-      userId,
-      integrationId: appKey,
-      ...(hint ? { hint } : {}),
-    },
-  }));
-  assert(userAppKeys, 'could not find the app key');
+  const { app, token } = await getAppAndToken({ plugins, appKey, userId, hint });
   assert(app.availabilityCalendar, `availabilityCalendar is not available for ${appKey}`);
-  const token = await userAppKeys.token;
   return app.availabilityCalendar({
     axios,
     token,
     payload,
     typeDefsAndQueries,
+    userId,
+    hint,
     requestId,
   });
 };
@@ -406,22 +384,14 @@ const searchQuote = plugins => async (req, res, next) => {
     body: payload,
   } = req;
   try {
-    const app = plugins.find(({ name }) => name === appKey);
-    // const app = load(appKey);
-    const userAppKeys = (await UserAppKey.findOne({
-      where: {
-        userId,
-        integrationId: appKey,
-        ...(hint ? { hint } : {}),
-      },
-    }));
-    assert(userAppKeys, 'could not find the app key');
-    const token = await userAppKeys.token;
+    const { app, token } = await getAppAndToken({ plugins, appKey, userId, hint });
     const results = await app.searchQuote({
       axios,
       token,
       payload,
       typeDefsAndQueries,
+      userId,
+      hint,
       requestId: req.requestId,
     });
     return res.json(results);
@@ -437,17 +407,7 @@ const createBooking = plugins => async (req, res, next) => {
     body: payload,
   } = req;
   try {
-    const app = plugins.find(({ name }) => name === appKey);
-    // const app = load(appKey);
-    const userAppKeys = (await UserAppKey.findOne({
-      where: {
-        userId,
-        integrationId: appKey,
-        ...(hint ? { hint } : {}),
-      },
-    }));
-    assert(userAppKeys, 'could not find the app key');
-    const token = await userAppKeys.token;
+    const { app, token } = await getAppAndToken({ plugins, appKey, userId, hint });
     const func = (app.createBooking || app.addServiceToItinerary).bind(app);
     let results;
     if (payload.mock) {
@@ -458,10 +418,12 @@ const createBooking = plugins => async (req, res, next) => {
         token,
         payload,
         typeDefsAndQueries,
+        userId,
+        hint,
         requestId: req.requestId,
       });
     }
-    console.log(`emitting bookingsCreateBooking event for ${appKey}, user ${userId}, hint ${hint}, results: ${JSON.stringify(results)}`);
+    console.debug(`emitting bookingsCreateBooking event for ${appKey}, user ${userId}, hint ${hint}, results: ${JSON.stringify(results)}`);
     app.events.emit('bookingsCreateBooking', {
       userId,
       hint,
@@ -483,22 +445,14 @@ const getAffiliateAgents = plugins => async (req, res, next) => {
     body: payload,
   } = req;
   try {
-    const app = plugins.find(({ name }) => name === appKey);
-    // const app = load(appKey);
-    const userAppKeys = (await UserAppKey.findOne({
-      where: {
-        userId,
-        integrationId: appKey,
-        ...(hint ? { hint } : {}),
-      },
-    }));
-    assert(userAppKeys, 'could not find the app key');
-    const token = await userAppKeys.token;
+    const { app, token } = await getAppAndToken({ plugins, appKey, userId, hint });
     assert(app.getAffiliateAgents, `getAffiliateAgents is not available for ${appKey}`);
     const results = await app.getAffiliateAgents({
       axios,
       token,
       payload,
+      userId,
+      hint,
       requestId: req.requestId,
     });
     return res.json(results);
@@ -514,22 +468,14 @@ const getAffiliateDesks = plugins => async (req, res, next) => {
     body: payload,
   } = req;
   try {
-    const app = plugins.find(({ name }) => name === appKey);
-    // const app = load(appKey);
-    const userAppKeys = (await UserAppKey.findOne({
-      where: {
-        userId,
-        integrationId: appKey,
-        ...(hint ? { hint } : {}),
-      },
-    }));
-    assert(userAppKeys, 'could not find the app key');
-    const token = await userAppKeys.token;
+    const { app, token } = await getAppAndToken({ plugins, appKey, userId, hint });
     assert(app.getAffiliateDesks, `getAffiliateDesks is not available for ${appKey}`);
     const results = await app.getAffiliateDesks({
       axios,
       token,
       payload,
+      userId,
+      hint,
       requestId: req.requestId,
     });
     return res.json(results);
@@ -545,23 +491,16 @@ const getPickupPoints = plugins => async (req, res, next) => {
     body: payload,
   } = req;
   try {
-    const app = plugins.find(({ name }) => name === appKey);
-    // const app = load(appKey);
-    const userAppKeys = (await UserAppKey.findOne({
-      where: {
-        userId,
-        integrationId: appKey,
-        ...(hint ? { hint } : {}),
-      },
-    }));
-    assert(userAppKeys, 'could not find the app key');
-    const token = await userAppKeys.token;
+    const { app, token } = await getAppAndToken({ plugins, appKey, userId, hint });
     assert(app.getPickupPoints, `getPickupPoints is not available for ${appKey}`);
     const results = await app.getPickupPoints({
       axios,
       token,
       payload,
       typeDefsAndQueries,
+      userId,
+      hint,
+      requestId: req.requestId,
     });
     return res.json(results);
   } catch (err) {
@@ -577,17 +516,7 @@ const getCreateBookingFields = plugins => async (req, res, next) => {
     body: payload,
   } = req;
   try {
-    const app = plugins.find(({ name }) => name === appKey);
-    // const app = load(appKey);
-    const userAppKeys = (await UserAppKey.findOne({
-      where: {
-        userId,
-        integrationId: appKey,
-        ...(hint ? { hint } : {}),
-      },
-    }));
-    assert(userAppKeys, 'could not find the app key');
-    const token = await userAppKeys.token;
+    const { app, token } = await getAppAndToken({ plugins, appKey, userId, hint });
     assert(app.getCreateBookingFields || app.getCreateItineraryFields, `getCreateBookingFields or getCreateItineraryFields is not available for ${appKey}`);
     const func = (app.getCreateItineraryFields || app.getCreateBookingFields).bind(app);
     const results = await func({
@@ -596,6 +525,9 @@ const getCreateBookingFields = plugins => async (req, res, next) => {
       payload,
       query,
       typeDefsAndQueries,
+      userId,
+      hint,
+      requestId: req.requestId,
     });
     return res.json(results);
   } catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ti2",
-  "version": "1.0.107",
+  "version": "1.0.108-beta.0",
   "description": "Tourist Industry Exchange (TI2)",
   "main": "index.js",
   "scripts": {

package/test/plugin.js

@@ -75,6 +75,7 @@ class Plugin {
     });
     this.searchQuote = jestPlugin.fn(() => ({ quote: [{ id: chance.guid() }] }));
     this.createBooking = jestPlugin.fn(() => {});
+    this.getAffiliateAgents = jestPlugin.fn(() => ({ agents: [] }));
     this.searchItineraries = jestPlugin.fn(() => ({ bookings: [] }));
     this.searchProductsForItinerary = jestPlugin.fn(() => ({ products: [] }));
     this.searchAvailabilityForItinerary = jestPlugin.fn(({

package/.windsurfrules

@@ -1,9 +0,0 @@
-This is a Node.js project using Sequelize for database operations and Express.js for the web server.
-The API is defined in api.yml using OpenAPI 3.0.2
-The database is defined in models/index.js
-The models are defined in models/
-to run tests you have to run them on the ti2 named docker container, and consider this codebase is part of node_modules/ti2 path for example : 
-`` $ docker exec ti2 bash -c "cd /ti2 && npx jest lib/__tests__/callback.js --forceExit"``
-When writing / editing tests, make use of test/utils.js and review their implementation to understand how to mock the environment.
-Do not make any changes until you 95% confident of the changes you want to make, ask follow up questions until you have that confidence.
-when sending jobs to the background worker using the queue, asssume a worker is always runing to execute it but is on a different instance thread, so to review / wait for jobs we have to use the wokrer/queue.js listJobs fn to check for it

package/CLAUDE.md

@@ -1,159 +0,0 @@
-# CLAUDE.md
-
-This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
-
-## Project Overview
-
-Ti2 (Tourism Information Interchange) is an open-source integration framework for the tourism industry. It provides standardized functions for bookings, content, and rates management through a plugin-based architecture.
-
-## Critical Development Rules
-
-1. **Docker Container Execution**: ALL commands must be run inside the `ti2` Docker container
-   - The codebase is located at `/ti2` path inside the container
-   - This project is part of `node_modules/ti2` in the container environment
-   - **NEVER run npm, node, or npx commands on the host machine**
-   - Always use: `docker exec ti2 bash -c "cd /ti2 && <command>"`
-   - Example for npm install: `docker exec ti2 bash -c "cd /ti2 && npm install <package>"`
-
-2. **Testing Rules**:
-   - Tests MUST be run inside the Docker container
-   - Example: `docker exec ti2 bash -c "cd /ti2 && npx jest lib/__tests__/callback.js --forceExit"`
-   - Use `test/utils.js` for mocking the environment
-   - Review test utility implementations before writing/editing tests
-
-3. **Background Jobs**:
-   - Jobs sent to the queue run on a separate worker thread/instance
-   - Use `worker/queue.js` `listJobs` function to check job status
-   - Workers are always assumed to be running
-
-4. **Code Confidence**: Do not make changes until 95% confident. Ask follow-up questions if uncertain.
-
-## Common Development Commands
-
-```bash
-# Run tests (inside Docker container)
-docker exec ti2 bash -c "cd /ti2 && npm test"
-docker exec ti2 bash -c "cd /ti2 && npx jest [test-file] --forceExit"
-
-# Run specific test file
-docker exec ti2 bash -c "cd /ti2 && npx jest controllers/__tests__/bookings.js --forceExit"
-
-# Database migrations
-docker exec ti2 bash -c "cd /ti2 && npm run sequelize db:migrate"
-
-# Generate documentation
-docker exec ti2 bash -c "cd /ti2 && npm run doc"
-```
-
-## Architecture
-
-### Core Components
-
-1. **Main Entry Point** (`index.js`):
-   - Initializes Express server on port 10010 (default)
-   - Sets up Swagger documentation at `/api-docs`
-   - Handles plugin instantiation and middleware
-   - Implements caching mechanism
-   - Manages background job processing via `worker/queue.js`
-
-2. **API Definition** (`api.yml`):
-   - OpenAPI 3.0.0 specification
-   - Defines all endpoints and schemas
-   - JWT Bearer authentication
-
-3. **Plugin System**:
-   - Two types: Integration Plugins (connect systems) and App Plugins (value-added tools)
-   - Plugins are instantiated with cache, axios, events, and configuration
-   - Plugin schemas are merged with main API schema
-   - Each plugin gets its own routes under `/apps/{pluginName}`
-
-4. **Controllers** (`controllers/`):
-   - `app.js`: Core application controller
-   - `bookings.js`: Booking operations (searchProducts, createBooking, etc.)
-   - `admin.js`: Administrative functions
-   - `user.js`: User management
-   - `ping.js`: Health check endpoints
-   - `allotment.js`: Allotment management
-
-5. **Database Models** (`models/`):
-   - Sequelize ORM with MySQL
-   - Key models: Integration, User, UserAppKey, CronJobs, ApiCronJobs
-   - Migrations in `migrations/` directory
-
-6. **Worker System** (`worker/`):
-   - Bull queue for background job processing
-   - Redis-backed job queue
-   - Supports plugin jobs, API jobs, and callback jobs
-   - Multi-worker support with throng
-
-7. **Authentication** (`auth/authHandler.js`):
-   - JWT-based authentication
-   - Bearer token scheme
-
-### Key Features
-
-- **Caching**: Redis-based caching with configurable TTL
-- **Event System**: EventEmitter2 for plugin communication
-- **Background Jobs**: Async job processing with Bull/Redis
-- **Cron Jobs**: Scheduled task execution
-- **Multi-tenancy**: Support for multiple integrations/plugins
-
-### Plugin Development
-
-Plugins must implement standard methods:
-- `validateToken`: Token validation
-- `tokenTemplate`: Token configuration template
-- Booking methods: `searchProducts`, `searchAvailability`, `createBooking`, `cancelBooking`
-- Content methods: `getProducts`, `getProduct`, `createProduct`, `updateProduct`
-
-### Testing Strategy
-
-- Jest testing framework
-- Test fixtures in `__fixtures__/`
-- Mock plugins in `__mocks__/`
-- Use `test/utils.js` for creating test environments
-- Tests organized by controller in `controllers/__tests__/`
-
-## Database
-
-- Sequelize ORM with MySQL/MariaDB
-- Connection managed through `models/db.js`
-- Migrations handled via sequelize-cli
-- Models auto-loaded from `models/` directory
-
-## Environment Variables
-
-Key variables:
-- `PORT`: Server port (default: 10010)
-- `REDIS_URL`: Redis connection (default: redis://redis:6379)
-- `jwtSecret`: JWT signing secret
-- `adminKey`: Admin authentication key
-- `WEB_CONCURRENCY`: Number of workers
-- `MAX_JOBS_PER_WORKER`: Job concurrency per worker
-- `SSL_INSECURE_ALLOWED_DOMAINS`: Pipe-separated list of domains where SSL certificate verification is skipped (e.g., `localhost|staging.example.com|192.168.1.100`)
-
-Plugin-specific variables follow pattern: `ti2_{pluginName}_{setting}`
-
-### SSL Configuration
-
-The `SSL_INSECURE_ALLOWED_DOMAINS` environment variable allows you to specify domains where SSL certificate verification should be skipped. This is useful for:
-- Development environments with self-signed certificates
-- Testing against staging servers with invalid certificates
-- Local development with HTTPS
-
-Example usage:
-```bash
-# Skip SSL verification for specific domains
-export SSL_INSECURE_ALLOWED_DOMAINS="localhost|staging.api.com|192.168.1.100"
-
-# Multiple domains separated by pipe
-export SSL_INSECURE_ALLOWED_DOMAINS="dev.example.com|test.example.com"
-```
-
-**Important Implementation Notes**:
-- SSL configuration is ONLY applied to plugin axios instances (for external API calls) and worker axios instances
-- Internal communication (callbacks, per-request axios) do NOT use SSL configuration  
-- SSL configuration uses a per-request interceptor approach for better isolation
-- The configuration checks domains dynamically on each request
-
-**Warning**: Only use this in development/testing environments. Never skip SSL verification in production for security reasons.