@adobe/aio-commerce-lib-app 1.0.1 → 1.1.0

package/dist/cjs/{installation-CLbceU9F.cjs → webhooks-CbZpv9y_.cjs}

@@ -1,4 +1,18 @@
-const require_schemas = require('./schemas-CZ6c8Id9.cjs');
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+const require_schemas = require('./schemas-nkIxa8sL.cjs');
 let valibot = require("valibot");
 valibot = require_schemas.__toESM(valibot);
 
@@ -198,6 +212,84 @@ function hasCustomInstallationSteps(config) {
 	return Array.isArray(config?.installation?.customInstallationSteps) && config.installation.customInstallationSteps.length > 0;
 }
 
+//#endregion
+//#region source/config/schema/webhooks.ts
+/** Schema for webhook field configuration (name and optional source). */
+const WebhookFieldSchema = valibot.object({
+	name: require_schemas.nonEmptyStringValueSchema("field name"),
+	source: valibot.optional(require_schemas.stringValueSchema("field source"))
+});
+/** Schema for webhook rule configuration (field, operator, value). */
+const WebhookRuleSchema = valibot.object({
+	field: require_schemas.nonEmptyStringValueSchema("rule field"),
+	operator: require_schemas.nonEmptyStringValueSchema("rule operator"),
+	value: require_schemas.nonEmptyStringValueSchema("rule value")
+});
+/** Schema for webhook header configuration (name, value). */
+const WebhookHeaderSchema = valibot.object({
+	name: require_schemas.nonEmptyStringValueSchema("header name"),
+	value: require_schemas.nonEmptyStringValueSchema("header value")
+});
+/** batch_name and hook_name must contain only letters, numbers, and underscores. */
+const WEBHOOK_IDENTIFIER_REGEX = /^[a-zA-Z0-9_]+$/;
+/** Category for conflict detection: validation, append, or modification. */
+const CATEGORIES = [
+	"validation",
+	"append",
+	"modification"
+];
+const CategorySchema = valibot.picklist(CATEGORIES, `Webhook category must be one of: ${CATEGORIES.join(", ")}`);
+/** Schema for the nested webhook payload without url — used when runtimeAction resolves the URL at runtime. */
+const WebhookDefinitionBaseSchema = valibot.object({
+	webhook_method: require_schemas.nonEmptyStringValueSchema("webhook_method"),
+	webhook_type: require_schemas.nonEmptyStringValueSchema("webhook_type"),
+	batch_name: valibot.pipe(require_schemas.nonEmptyStringValueSchema("batch_name"), valibot.regex(WEBHOOK_IDENTIFIER_REGEX, "batch_name must contain only letters, numbers, and underscores")),
+	batch_order: valibot.optional(require_schemas.positiveNumberValueSchema("batch_order")),
+	hook_name: valibot.pipe(require_schemas.nonEmptyStringValueSchema("hook_name"), valibot.regex(WEBHOOK_IDENTIFIER_REGEX, "hook_name must contain only letters, numbers, and underscores")),
+	priority: valibot.optional(require_schemas.positiveNumberValueSchema("priority")),
+	required: valibot.optional(require_schemas.booleanValueSchema("required")),
+	soft_timeout: valibot.optional(require_schemas.positiveNumberValueSchema("soft_timeout")),
+	timeout: valibot.optional(require_schemas.positiveNumberValueSchema("timeout")),
+	method: require_schemas.nonEmptyStringValueSchema("HTTP method"),
+	fallback_error_message: valibot.optional(require_schemas.stringValueSchema("fallback_error_message")),
+	ttl: valibot.optional(require_schemas.positiveNumberValueSchema("ttl")),
+	fields: valibot.optional(valibot.array(WebhookFieldSchema, "Expected an array of webhook field objects")),
+	rules: valibot.optional(valibot.array(WebhookRuleSchema, "Expected an array of webhook rule objects")),
+	headers: valibot.optional(valibot.array(WebhookHeaderSchema, "Expected an array of webhook header objects"))
+});
+/** Schema for the nested webhook payload with a required url. */
+const WebhookDefinitionWithUrlSchema = valibot.object({
+	...WebhookDefinitionBaseSchema.entries,
+	url: valibot.pipe(require_schemas.stringValueSchema("webhook URL"), valibot.url("The 'url' field must be a valid absolute URL (e.g., 'https://example.com/webhook')"))
+});
+/** Schema for a webhook entry that resolves its URL from a runtime action. */
+const WebhookEntryWithRuntimeActionSchema = valibot.object({
+	label: require_schemas.nonEmptyStringValueSchema("webhook label"),
+	description: require_schemas.nonEmptyStringValueSchema("webhook description"),
+	category: valibot.optional(CategorySchema),
+	runtimeAction: require_schemas.nonEmptyStringValueSchema("runtimeAction"),
+	requireAdobeAuth: valibot.optional(require_schemas.booleanValueSchema("requireAdobeAuth")),
+	webhook: WebhookDefinitionBaseSchema
+});
+/** Schema for a webhook entry that provides an explicit URL. */
+const WebhookEntryWithUrlSchema = valibot.object({
+	label: require_schemas.nonEmptyStringValueSchema("webhook label"),
+	description: require_schemas.nonEmptyStringValueSchema("webhook description"),
+	category: valibot.optional(CategorySchema),
+	webhook: WebhookDefinitionWithUrlSchema
+});
+/** Schema for a single webhook entry — either runtimeAction (no url) or explicit url (no runtimeAction). */
+const WebhookEntrySchema = valibot.union([WebhookEntryWithRuntimeActionSchema, WebhookEntryWithUrlSchema], "Each webhook entry must define either a 'runtimeAction' (to resolve the URL from a runtime action) or an explicit 'url' inside the 'webhook' object, but not both");
+/** Schema for the optional webhooks array (when present, must have at least one item). */
+const WebhooksSchema = valibot.optional(valibot.pipe(valibot.array(WebhookEntrySchema, "Expected an array of webhook entries"), valibot.minLength(1, "webhooks array must contain at least one webhook when present")));
+/**
+* Check if config has webhooks (non-empty array).
+* @param config - The configuration to check.
+*/
+function hasWebhooks(config) {
+	return Array.isArray(config?.webhooks) && config.webhooks.length > 0;
+}
+
 //#endregion
 Object.defineProperty(exports, 'EventingSchema', {
   enumerable: true,
@@ -211,6 +303,12 @@ Object.defineProperty(exports, 'InstallationSchema', {
     return InstallationSchema;
   }
 });
+Object.defineProperty(exports, 'WebhooksSchema', {
+  enumerable: true,
+  get: function () {
+    return WebhooksSchema;
+  }
+});
 Object.defineProperty(exports, 'hasCommerceEvents', {
   enumerable: true,
   get: function () {
@@ -240,4 +338,10 @@ Object.defineProperty(exports, 'hasExternalEvents', {
   get: function () {
     return hasExternalEvents;
   }
+});
+Object.defineProperty(exports, 'hasWebhooks', {
+  enumerable: true,
+  get: function () {
+    return hasWebhooks;
+  }
 });

package/dist/es/actions/app-config.d.mts

@@ -1,4 +1,18 @@
-import { n as CommerceAppConfigOutputModel } from "../app-BAiyvNo2.mjs";
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+import { n as CommerceAppConfigOutputModel } from "../app-Ct7Y0NP8.mjs";
 import * as _adobe_aio_commerce_lib_core_responses0 from "@adobe/aio-commerce-lib-core/responses";
 import { RuntimeActionParams } from "@adobe/aio-commerce-lib-core/params";
 

package/dist/es/actions/app-config.mjs

@@ -1,10 +1,24 @@
-import { n as logger, t as HttpActionRouter } from "../router-CJ4VWoCt.mjs";
-import { t as validateCommerceAppConfig } from "../validate-DKnju9-R.mjs";
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+import { n as logger, t as HttpActionRouter } from "../router-BxaxEEu3.mjs";
+import { t as validateCommerceAppConfig } from "../validate-qRpfubPo.mjs";
 import { ok } from "@adobe/aio-commerce-lib-core/responses";
 
 //#region source/actions/app-config.ts
 /** Router for the app config actions. */
-const router = new HttpActionRouter().use(logger({ name: () => "get-app-config" }));
+const router = new HttpActionRouter().use(logger({ name: () => "app-config" }));
 /** GET / - Get app config */
 router.get("/", { handler: async (_req, { logger, rawParams }) => {
 	logger.debug("Validating app config...");

package/dist/es/actions/config.d.mts

@@ -1,3 +1,17 @@
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
 import * as _adobe_aio_commerce_lib_core_responses0 from "@adobe/aio-commerce-lib-core/responses";
 import { BusinessConfigSchema } from "@adobe/aio-commerce-lib-config";
 import { RuntimeActionParams } from "@adobe/aio-commerce-lib-core/params";

package/dist/es/actions/config.mjs

@@ -1,6 +1,20 @@
-import { n as logger, t as HttpActionRouter } from "../router-CJ4VWoCt.mjs";
-import { n as validateCommerceAppConfigDomain } from "../validate-DKnju9-R.mjs";
-import { r as nonEmptyStringValueSchema } from "../schemas-B8yIv0_b.mjs";
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+import { n as logger, t as HttpActionRouter } from "../router-BxaxEEu3.mjs";
+import { n as validateCommerceAppConfigDomain } from "../validate-qRpfubPo.mjs";
+import { r as nonEmptyStringValueSchema } from "../schemas-BvPxQwgQ.mjs";
 import { ok } from "@adobe/aio-commerce-lib-core/responses";
 import * as v from "valibot";
 import { byScopeId, getConfiguration, initialize, setConfiguration } from "@adobe/aio-commerce-lib-config";

package/dist/es/actions/installation.d.mts

@@ -1,5 +1,19 @@
-import { n as CommerceAppConfigOutputModel } from "../app-BAiyvNo2.mjs";
-import { P as InstallationContext } from "../runner-BD-lItnK.mjs";
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+import { n as CommerceAppConfigOutputModel } from "../app-Ct7Y0NP8.mjs";
+import { V as InstallationContext } from "../index-D33OCH0D.mjs";
 import * as _adobe_aio_commerce_lib_core_responses0 from "@adobe/aio-commerce-lib-core/responses";
 import { RuntimeActionParams } from "@adobe/aio-commerce-lib-core/params";
 

package/dist/es/actions/installation.mjs

@@ -1,6 +1,20 @@
-import { n as logger, t as HttpActionRouter } from "../router-CJ4VWoCt.mjs";
-import { r as nonEmptyStringValueSchema } from "../schemas-B8yIv0_b.mjs";
-import { a as isFailedState, i as isCompletedState, n as runInstallation, o as isInProgressState, s as isSucceededState, t as createInitialInstallationState } from "../runner-vwAhjD5r.mjs";
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+import { n as logger, t as HttpActionRouter } from "../router-BxaxEEu3.mjs";
+import { r as nonEmptyStringValueSchema } from "../schemas-BvPxQwgQ.mjs";
+import { a as isCompletedState, c as isSucceededState, n as runInstallation, o as isFailedState, r as runValidation, s as isInProgressState, t as createInitialInstallationState } from "../management-CIoVWirU.mjs";
 import { accepted, badRequest, conflict, internalServerError, noContent, ok } from "@adobe/aio-commerce-lib-core/responses";
 import * as v from "valibot";
 import { object, string } from "valibot";
@@ -244,6 +258,14 @@ const AppDataSchema = v.object({
 //#endregion
 //#region source/actions/installation.ts
 const DEFAULT_ACTION_NAME = "app-management/installation";
+/** Request body schema shared by POST / and POST /validation. */
+const InstallationRequestBodySchema = object({
+	appData: AppDataSchema,
+	commerceBaseUrl: string(),
+	commerceEnv: string(),
+	ioEventsUrl: string(),
+	ioEventsEnv: string()
+});
 /** Creates an installation state store using lib-core combined storage. */
 function createInstallationStore() {
 	return createCombinedStore({
@@ -311,13 +333,7 @@ router.get("/", { handler: async (_req, { logger }) => {
 * 3. If not found or failed: create plan, invoke execution async, return 202 Accepted
 */
 router.post("/", {
-	body: object({
-		appData: AppDataSchema,
-		commerceBaseUrl: string(),
-		commerceEnv: string(),
-		ioEventsUrl: string(),
-		ioEventsEnv: string()
-	}),
+	body: InstallationRequestBodySchema,
 	handler: async (req, { logger, rawParams }) => {
 		logger.debug("Starting installation...");
 		const store = await createInstallationStore();
@@ -399,6 +415,44 @@ router.post("/execution", { handler: async (_req, { logger, rawParams }) => {
 	return ok({ body: result });
 } });
 /**
+* POST /installation/validation - Pre-installation validation
+*
+* Synchronously validates the step tree before installation begins.
+* Accepts the same request body as POST / (installation start) so the
+* frontend can reuse the same parameters without any extra mapping.
+*
+* Flow:
+* 1. Build a ValidationContext from the request parameters
+* 2. Call runValidation() — traverses the step tree and collects issues
+* 3. Return the structured ValidationResult immediately (no async invoke)
+*/
+router.post("/validation", {
+	body: InstallationRequestBodySchema,
+	handler: async (req, { logger, rawParams }) => {
+		logger.debug("Running pre-installation validation...");
+		const appConfig = rawParams.appConfig;
+		if (!appConfig) return internalServerError("Could not find or parse the app.commerce.manifest.json file, is it present and valid?");
+		const { appData, ...params } = {
+			...rawParams,
+			appData: req.body.appData,
+			AIO_EVENTS_API_BASE_URL: req.body.ioEventsUrl,
+			AIO_COMMERCE_AUTH_IMS_ENVIRONMENT: req.body.ioEventsEnv,
+			AIO_COMMERCE_API_BASE_URL: req.body.commerceBaseUrl,
+			AIO_COMMERCE_API_FLAVOR: req.body.commerceEnv
+		};
+		const result = await runValidation({
+			validationContext: {
+				appData,
+				params,
+				logger
+			},
+			config: appConfig
+		});
+		logger.debug(`Validation complete — valid: ${result.valid}, errors: ${result.summary.errors}, warnings: ${result.summary.warnings}`);
+		return ok({ body: result });
+	}
+});
+/**
 * DELETE / - Clear installation state
 *
 * This endpoint allows clearing the installation state.

package/dist/es/actions/scope-tree.d.mts

@@ -1,3 +1,17 @@
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
 import * as _adobe_aio_commerce_lib_core_responses0 from "@adobe/aio-commerce-lib-core/responses";
 import * as _adobe_aio_commerce_lib_core_params0 from "@adobe/aio-commerce-lib-core/params";
 

package/dist/es/actions/scope-tree.mjs

@@ -1,6 +1,20 @@
-import { n as logger, t as HttpActionRouter } from "../router-CJ4VWoCt.mjs";
-import { r as nonEmptyStringValueSchema } from "../schemas-B8yIv0_b.mjs";
-import { t as inspect } from "../logging-CzmXDzxI.mjs";
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+import { n as logger, t as HttpActionRouter } from "../router-BxaxEEu3.mjs";
+import { r as nonEmptyStringValueSchema } from "../schemas-BvPxQwgQ.mjs";
+import { t as inspect } from "../logging-XIUXDK5T.mjs";
 import { internalServerError, nonAuthoritativeInformation, ok } from "@adobe/aio-commerce-lib-core/responses";
 import * as v from "valibot";
 import { getScopeTree, setCustomScopeTree, syncCommerceScopes, unsyncCommerceScopes } from "@adobe/aio-commerce-lib-config";

package/dist/es/{app-BAiyvNo2.d.mts → app-Ct7Y0NP8.d.mts}

@@ -1,3 +1,17 @@
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
 import * as v from "valibot";
 
 //#region source/config/schema/app.d.ts
@@ -7,7 +21,7 @@ declare const CommerceAppConfigSchema: v.LooseObjectSchema<{
     readonly id: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.RegexAction<string, `Only alphanumeric characters and hyphens are allowed in string value of "${string}"${string}`>]>;
     readonly displayName: v.SchemaWithPipe<readonly [v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string for the ${string}`>, v.NonEmptyAction<string, `The ${string} must not be empty`>]>, v.MaxLengthAction<string, 50, "The application display name must not be longer than 50 characters">]>;
     readonly description: v.SchemaWithPipe<readonly [v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string for the ${string}`>, v.NonEmptyAction<string, `The ${string} must not be empty`>]>, v.MaxLengthAction<string, 255, "The metadata description must not be longer than 255 characters">]>;
-    readonly version: v.SchemaWithPipe<readonly [v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string for the ${string}`>, v.NonEmptyAction<string, `The ${string} must not be empty`>]>, v.RegexAction<string, "The version must follow semantic versioning (semver) format">]>;
+    readonly version: v.SchemaWithPipe<readonly [v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string for the ${string}`>, v.NonEmptyAction<string, `The ${string} must not be empty`>]>, v.RegexAction<string, "The version must follow semantic versioning (semver) format: Major.Minor.Patch (e.g., '1.0.0', '2.3.1')">]>;
   }, undefined>;
   readonly businessConfig: v.OptionalSchema<v.ObjectSchema<{
     readonly schema: v.OptionalSchema<v.SchemaWithPipe<readonly [v.ArraySchema<v.VariantSchema<"type", [v.VariantSchema<"selectionMode", [v.ObjectSchema<{
@@ -172,6 +186,137 @@ declare const CommerceAppConfigSchema: v.LooseObjectSchema<{
       description: string;
     }[] | undefined, "Duplicate step names detected in custom installation steps. Each step must have a unique name.">]>;
   }, undefined>, undefined>;
+  readonly webhooks: v.OptionalSchema<v.OptionalSchema<v.SchemaWithPipe<readonly [v.ArraySchema<v.UnionSchema<[v.ObjectSchema<{
+    readonly label: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+    readonly description: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+    readonly category: v.OptionalSchema<v.PicklistSchema<readonly ["validation", "append", "modification"], `Webhook category must be one of: ${string}`>, undefined>;
+    readonly runtimeAction: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+    readonly requireAdobeAuth: v.OptionalSchema<v.BooleanSchema<`Expected a boolean value for '${string}'`>, undefined>;
+    readonly webhook: v.ObjectSchema<{
+      readonly webhook_method: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+      readonly webhook_type: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+      readonly batch_name: v.SchemaWithPipe<readonly [v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>, v.RegexAction<string, "batch_name must contain only letters, numbers, and underscores">]>;
+      readonly batch_order: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<`Expected a number value for '${string}'`>, v.MinValueAction<number, 0, `The value of ${string} must be a non-negative number`>]>, undefined>;
+      readonly hook_name: v.SchemaWithPipe<readonly [v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>, v.RegexAction<string, "hook_name must contain only letters, numbers, and underscores">]>;
+      readonly priority: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<`Expected a number value for '${string}'`>, v.MinValueAction<number, 0, `The value of ${string} must be a non-negative number`>]>, undefined>;
+      readonly required: v.OptionalSchema<v.BooleanSchema<`Expected a boolean value for '${string}'`>, undefined>;
+      readonly soft_timeout: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<`Expected a number value for '${string}'`>, v.MinValueAction<number, 0, `The value of ${string} must be a non-negative number`>]>, undefined>;
+      readonly timeout: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<`Expected a number value for '${string}'`>, v.MinValueAction<number, 0, `The value of ${string} must be a non-negative number`>]>, undefined>;
+      readonly method: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+      readonly fallback_error_message: v.OptionalSchema<v.StringSchema<`Expected a string value for '${string}'`>, undefined>;
+      readonly ttl: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<`Expected a number value for '${string}'`>, v.MinValueAction<number, 0, `The value of ${string} must be a non-negative number`>]>, undefined>;
+      readonly fields: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+        readonly name: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+        readonly source: v.OptionalSchema<v.StringSchema<`Expected a string value for '${string}'`>, undefined>;
+      }, undefined>, "Expected an array of webhook field objects">, undefined>;
+      readonly rules: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+        readonly field: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+        readonly operator: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+        readonly value: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+      }, undefined>, "Expected an array of webhook rule objects">, undefined>;
+      readonly headers: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+        readonly name: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+        readonly value: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+      }, undefined>, "Expected an array of webhook header objects">, undefined>;
+    }, undefined>;
+  }, undefined>, v.ObjectSchema<{
+    readonly label: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+    readonly description: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+    readonly category: v.OptionalSchema<v.PicklistSchema<readonly ["validation", "append", "modification"], `Webhook category must be one of: ${string}`>, undefined>;
+    readonly webhook: v.ObjectSchema<{
+      readonly url: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.UrlAction<string, "The 'url' field must be a valid absolute URL (e.g., 'https://example.com/webhook')">]>;
+      readonly webhook_method: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+      readonly webhook_type: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+      readonly batch_name: v.SchemaWithPipe<readonly [v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>, v.RegexAction<string, "batch_name must contain only letters, numbers, and underscores">]>;
+      readonly batch_order: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<`Expected a number value for '${string}'`>, v.MinValueAction<number, 0, `The value of ${string} must be a non-negative number`>]>, undefined>;
+      readonly hook_name: v.SchemaWithPipe<readonly [v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>, v.RegexAction<string, "hook_name must contain only letters, numbers, and underscores">]>;
+      readonly priority: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<`Expected a number value for '${string}'`>, v.MinValueAction<number, 0, `The value of ${string} must be a non-negative number`>]>, undefined>;
+      readonly required: v.OptionalSchema<v.BooleanSchema<`Expected a boolean value for '${string}'`>, undefined>;
+      readonly soft_timeout: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<`Expected a number value for '${string}'`>, v.MinValueAction<number, 0, `The value of ${string} must be a non-negative number`>]>, undefined>;
+      readonly timeout: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<`Expected a number value for '${string}'`>, v.MinValueAction<number, 0, `The value of ${string} must be a non-negative number`>]>, undefined>;
+      readonly method: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+      readonly fallback_error_message: v.OptionalSchema<v.StringSchema<`Expected a string value for '${string}'`>, undefined>;
+      readonly ttl: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<`Expected a number value for '${string}'`>, v.MinValueAction<number, 0, `The value of ${string} must be a non-negative number`>]>, undefined>;
+      readonly fields: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+        readonly name: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+        readonly source: v.OptionalSchema<v.StringSchema<`Expected a string value for '${string}'`>, undefined>;
+      }, undefined>, "Expected an array of webhook field objects">, undefined>;
+      readonly rules: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+        readonly field: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+        readonly operator: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+        readonly value: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+      }, undefined>, "Expected an array of webhook rule objects">, undefined>;
+      readonly headers: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+        readonly name: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+        readonly value: v.SchemaWithPipe<readonly [v.StringSchema<`Expected a string value for '${string}'`>, v.NonEmptyAction<string, `The value of "${string}" must not be empty`>]>;
+      }, undefined>, "Expected an array of webhook header objects">, undefined>;
+    }, undefined>;
+  }, undefined>], "Each webhook entry must define either a 'runtimeAction' (to resolve the URL from a runtime action) or an explicit 'url' inside the 'webhook' object, but not both">, "Expected an array of webhook entries">, v.MinLengthAction<({
+    label: string;
+    description: string;
+    category?: "validation" | "append" | "modification" | undefined;
+    runtimeAction: string;
+    requireAdobeAuth?: boolean | undefined;
+    webhook: {
+      webhook_method: string;
+      webhook_type: string;
+      batch_name: string;
+      batch_order?: number | undefined;
+      hook_name: string;
+      priority?: number | undefined;
+      required?: boolean | undefined;
+      soft_timeout?: number | undefined;
+      timeout?: number | undefined;
+      method: string;
+      fallback_error_message?: string | undefined;
+      ttl?: number | undefined;
+      fields?: {
+        name: string;
+        source?: string | undefined;
+      }[] | undefined;
+      rules?: {
+        field: string;
+        operator: string;
+        value: string;
+      }[] | undefined;
+      headers?: {
+        name: string;
+        value: string;
+      }[] | undefined;
+    };
+  } | {
+    label: string;
+    description: string;
+    category?: "validation" | "append" | "modification" | undefined;
+    webhook: {
+      url: string;
+      webhook_method: string;
+      webhook_type: string;
+      batch_name: string;
+      batch_order?: number | undefined;
+      hook_name: string;
+      priority?: number | undefined;
+      required?: boolean | undefined;
+      soft_timeout?: number | undefined;
+      timeout?: number | undefined;
+      method: string;
+      fallback_error_message?: string | undefined;
+      ttl?: number | undefined;
+      fields?: {
+        name: string;
+        source?: string | undefined;
+      }[] | undefined;
+      rules?: {
+        field: string;
+        operator: string;
+        value: string;
+      }[] | undefined;
+      headers?: {
+        name: string;
+        value: string;
+      }[] | undefined;
+    };
+  })[], 1, "webhooks array must contain at least one webhook when present">]>, undefined>, undefined>;
 }, undefined>;
 /** The input shape of the commerce app config schema. */
 type CommerceAppConfig = v.InferInput<typeof CommerceAppConfigSchema>;

package/dist/es/commands/index.d.mts

@@ -1 +1,15 @@
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
 export { };

package/dist/es/commands/index.mjs

@@ -1,9 +1,23 @@
 #!/usr/bin/env node
-import { c as hasBusinessConfigSchema, i as getConfigDomains, t as validateCommerceAppConfig } from "../validate-DKnju9-R.mjs";
-import { r as hasCustomInstallationSteps } from "../installation-BTL9X7iv.mjs";
-import { a as findNearestPackageJson, c as isESM, i as detectPackageManager, l as makeOutputDirFor, n as readCommerceAppConfig, o as getExecCommand, s as getProjectRootDirectory, t as parseCommerceAppConfig, u as readPackageJson } from "../parser-CQZTVG6i.mjs";
-import { t as stringifyError } from "../error-CMV3IjBz.mjs";
-import { t as inspect } from "../logging-CzmXDzxI.mjs";
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+import { c as hasBusinessConfigSchema, i as getConfigDomains, t as validateCommerceAppConfig } from "../validate-qRpfubPo.mjs";
+import { a as hasCustomInstallationSteps } from "../webhooks-NgM6k3_r.mjs";
+import { a as findNearestPackageJson, c as isESM, i as detectPackageManager, l as makeOutputDirFor, n as readCommerceAppConfig, o as getExecCommand, s as getProjectRootDirectory, t as parseCommerceAppConfig, u as readPackageJson } from "../config-BbrkH0Xt.mjs";
+import { t as stringifyError } from "../error-DHlYzkbb.mjs";
+import { t as inspect } from "../logging-XIUXDK5T.mjs";
 import { CommerceSdkValidationError } from "@adobe/aio-commerce-lib-core/error";
 import path, { basename, dirname, join, relative, resolve } from "path";
 import { existsSync, readFileSync, writeFileSync } from "fs";
@@ -260,7 +274,6 @@ async function loadAppManifest() {
 //#region source/commands/generate/actions/config.ts
 /** The list of Commerce variables that are required for the runtime actions */
 const COMMERCE_VARIABLES = [
-	"AIO_COMMERCE_API_BASE_URL",
 	"AIO_COMMERCE_AUTH_IMS_CLIENT_ID",
 	"AIO_COMMERCE_AUTH_IMS_CLIENT_SECRETS",
 	"AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_ID",
@@ -300,7 +313,7 @@ function createActionDefinition(actionName, config = {}, options = {}) {
 * @param extConfig - The ext.config.yaml configuration.
 */
 function getRuntimeActions(extConfig, dir) {
-	return Object.entries(extConfig.runtimeManifest?.packages?.[PACKAGE_NAME]?.actions ?? {}).map(([name, _]) => ({
+	return Object.entries(extConfig.runtimeManifest?.packages?.["app-management"]?.actions ?? {}).map(([name, _]) => ({
 		name,
 		templateFile: join(dir, `${name}.js.template`)
 	}));
@@ -841,7 +854,7 @@ async function ensureCommerceAppConfig(cwd = process.cwd()) {
 		throw new Error(`${COMMERCE_APP_CONFIG_FILE} is invalid`, { cause: error });
 	}
 	consola$1.warn(`${COMMERCE_APP_CONFIG_FILE} not found.`);
-	if (!await consola$1.prompt(`Do you want to create a ${COMMERCE_APP_CONFIG_FILE} file? (y/n)`, {
+	if (!await consola$1.prompt(`Do you want to create a ${"app.commerce.config"} file? (y/n)`, {
 		type: "confirm",
 		initial: true,
 		default: false