@adobe/aio-commerce-lib-app 1.0.2 → 1.2.0

package/dist/cjs/{router-DCw7oEQ9.cjs → router-KeQRduO3.cjs}

@@ -1,4 +1,18 @@
-const require_schemas = require('./schemas-CZ6c8Id9.cjs');
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+const require_schemas = require('./schemas-nkIxa8sL.cjs');
 let _adobe_aio_commerce_lib_core_responses = require("@adobe/aio-commerce-lib-core/responses");
 let _adobe_aio_lib_core_logging = require("@adobe/aio-lib-core-logging");
 _adobe_aio_lib_core_logging = require_schemas.__toESM(_adobe_aio_lib_core_logging);

package/dist/cjs/{schemas-CZ6c8Id9.cjs → schemas-nkIxa8sL.cjs}

@@ -1,3 +1,17 @@
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
 //#region \0rolldown/runtime.js
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -35,6 +49,20 @@ const ALPHANUMERIC_OR_HYPHEN_REGEX = {
 	uppercase: /^[A-Z0-9-]+$/
 };
 /**
+* A schema for a number value.
+* @param name The name of the field this schema refers to.
+*/
+function numberValueSchema(name) {
+	return valibot.number(`Expected a number value for '${name}'`);
+}
+/**
+* A schema for a positive number value (including zero).
+* @param name The name of the field this schema refers to.
+*/
+function positiveNumberValueSchema(name) {
+	return valibot.pipe(numberValueSchema(name), valibot.minValue(0, `The value of ${name} must be a non-negative number`));
+}
+/**
 * A schema for a string value.
 * @param name The name of the field this schema refers to.
 */
@@ -90,6 +118,12 @@ Object.defineProperty(exports, 'nonEmptyStringValueSchema', {
     return nonEmptyStringValueSchema;
   }
 });
+Object.defineProperty(exports, 'positiveNumberValueSchema', {
+  enumerable: true,
+  get: function () {
+    return positiveNumberValueSchema;
+  }
+});
 Object.defineProperty(exports, 'stringValueSchema', {
   enumerable: true,
   get: function () {

package/dist/cjs/{validate-Btzn9ilZ.cjs → validate-CeUCT_7k.cjs}

@@ -1,5 +1,19 @@
-const require_schemas = require('./schemas-CZ6c8Id9.cjs');
-const require_installation = require('./installation-CLbceU9F.cjs');
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+const require_schemas = require('./schemas-nkIxa8sL.cjs');
+const require_webhooks = require('./webhooks-CLtDxwMa.cjs');
 let _adobe_aio_commerce_lib_core_error = require("@adobe/aio-commerce-lib-core/error");
 let valibot = require("valibot");
 valibot = require_schemas.__toESM(valibot);
@@ -23,6 +37,7 @@ function hasBusinessConfigSchema(config) {
 
 //#endregion
 //#region source/config/schema/metadata.ts
+const MAX_ID_LENGTH = 100;
 const MAX_DESCRIPTION_LENGTH = 255;
 const MAX_DISPLAY_NAME_LENGTH = 50;
 const NUMERIC_IDENTIFIER = "(0|[1-9]\\d*)";
@@ -32,10 +47,10 @@ function nonEmptyString(fieldName) {
 }
 /** The schema for the metadata of the application. */
 const MetadataSchema = valibot.object({
-	id: require_schemas.alphaNumericOrHyphenSchema("application id (metadata.id)"),
+	id: valibot.pipe(require_schemas.alphaNumericOrHyphenSchema("application id (metadata.id)"), valibot.maxLength(MAX_ID_LENGTH, `The application id must not be longer than ${MAX_ID_LENGTH} characters`)),
 	displayName: valibot.pipe(nonEmptyString("application display name"), valibot.maxLength(MAX_DISPLAY_NAME_LENGTH, `The application display name must not be longer than ${MAX_DISPLAY_NAME_LENGTH} characters`)),
 	description: valibot.pipe(nonEmptyString("metadata description"), valibot.maxLength(MAX_DESCRIPTION_LENGTH, `The metadata description must not be longer than ${MAX_DESCRIPTION_LENGTH} characters`)),
-	version: valibot.pipe(nonEmptyString("version"), valibot.regex(SEMVER_REGEX, "The version must follow semantic versioning (semver) format"))
+	version: valibot.pipe(nonEmptyString("version"), valibot.regex(SEMVER_REGEX, "The version must follow semantic versioning (semver) format: Major.Minor.Patch (e.g., '1.0.0', '2.3.1')"))
 });
 /**
 * Check if config has metadata.
@@ -52,8 +67,10 @@ function hasMetadata(config) {
 const CommerceAppConfigSchema = valibot.looseObject({
 	metadata: MetadataSchema,
 	businessConfig: valibot.optional(_adobe_aio_commerce_lib_config.SchemaBusinessConfig),
-	eventing: valibot.optional(require_installation.EventingSchema),
-	installation: valibot.optional(require_installation.InstallationSchema)
+	eventing: valibot.optional(require_webhooks.EventingSchema),
+	adminUiSdk: valibot.optional(require_webhooks.AdminUiSdkSchema),
+	installation: valibot.optional(require_webhooks.InstallationSchema),
+	webhooks: valibot.optional(require_webhooks.WebhooksSchema)
 });
 
 //#endregion
@@ -62,29 +79,33 @@ const CommerceAppConfigSchema = valibot.looseObject({
 const CommerceAppConfigSchemas = {
 	metadata: MetadataSchema,
 	businessConfig: _adobe_aio_commerce_lib_config.SchemaBusinessConfig,
-	eventing: require_installation.EventingSchema,
-	installation: require_installation.InstallationSchema,
+	eventing: require_webhooks.EventingSchema,
+	installation: require_webhooks.InstallationSchema,
+	webhooks: require_webhooks.WebhooksSchema,
 	"businessConfig.schema": valibot.unwrap(_adobe_aio_commerce_lib_config.SchemaBusinessConfig.entries.schema),
-	"eventing.commerce": valibot.unwrap(require_installation.EventingSchema.entries.commerce),
-	"eventing.external": valibot.unwrap(require_installation.EventingSchema.entries.external),
-	"installation.customInstallationSteps": valibot.unwrap(require_installation.InstallationSchema.entries.customInstallationSteps)
+	"eventing.commerce": valibot.unwrap(require_webhooks.EventingSchema.entries.commerce),
+	"eventing.external": valibot.unwrap(require_webhooks.EventingSchema.entries.external),
+	"installation.customInstallationSteps": valibot.unwrap(require_webhooks.InstallationSchema.entries.customInstallationSteps),
+	adminUiSdk: require_webhooks.AdminUiSdkSchema
 };
 /**
 * Get the config domains that are present in the config.
 * @param config - The configuration to check.
 */
 function getConfigDomains(config) {
-	const withCommerceEvents = require_installation.hasCommerceEvents(config);
-	const withExternalEvents = require_installation.hasExternalEvents(config);
+	const withCommerceEvents = require_webhooks.hasCommerceEvents(config);
+	const withExternalEvents = require_webhooks.hasExternalEvents(config);
 	const domains = {
 		metadata: hasMetadata(config),
 		businessConfig: hasBusinessConfig(config),
 		eventing: withCommerceEvents || withExternalEvents,
-		installation: require_installation.hasCustomInstallation(config),
+		installation: require_webhooks.hasCustomInstallation(config),
+		webhooks: require_webhooks.hasWebhooks(config),
+		adminUiSdk: require_webhooks.hasAdminUiSdk(config),
 		"businessConfig.schema": hasBusinessConfigSchema(config),
 		"eventing.commerce": withCommerceEvents,
 		"eventing.external": withExternalEvents,
-		"installation.customInstallationSteps": require_installation.hasCustomInstallationSteps(config)
+		"installation.customInstallationSteps": require_webhooks.hasCustomInstallationSteps(config)
 	};
 	const domainsList = Object.entries(domains).filter(([_, value]) => value).map(([key]) => key);
 	return new Set(domainsList);

package/dist/cjs/{installation-CLbceU9F.cjs → webhooks-CLtDxwMa.cjs}

@@ -1,7 +1,42 @@
-const require_schemas = require('./schemas-CZ6c8Id9.cjs');
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+const require_schemas = require('./schemas-nkIxa8sL.cjs');
 let valibot = require("valibot");
 valibot = require_schemas.__toESM(valibot);
 
+//#region source/config/schema/admin-ui-sdk.ts
+/**
+* Schema for the Admin UI SDK registration parameters (for the `adminUiSdk.registration` config section).
+* @see https://developer.adobe.com/commerce/extensibility/admin-ui-sdk/extension-points/ for more details.
+*/
+const AdminUiSdkRegistrationSchema = valibot.object({ menuItems: valibot.array(valibot.object({
+	id: valibot.string(),
+	title: valibot.optional(valibot.string()),
+	parent: valibot.optional(valibot.string()),
+	sortOrder: valibot.optional(valibot.number()),
+	sandbox: valibot.optional(valibot.string()),
+	isSection: valibot.optional(valibot.boolean())
+})) });
+/** Schema for Admin UI SDK configuration. */
+const AdminUiSdkSchema = valibot.object({ registration: AdminUiSdkRegistrationSchema });
+/** Check if config has Admin UI SDK registration configuration. */
+function hasAdminUiSdk(config) {
+	return config.adminUiSdk !== void 0 && config.adminUiSdk.registration !== void 0;
+}
+
+//#endregion
 //#region source/config/schema/eventing.ts
 const MAX_DESCRIPTION_LENGTH$1 = 255;
 const MAX_LABEL_LENGTH = 100;
@@ -199,6 +234,90 @@ function hasCustomInstallationSteps(config) {
 }
 
 //#endregion
+//#region source/config/schema/webhooks.ts
+/** Schema for webhook field configuration (name and optional source). */
+const WebhookFieldSchema = valibot.object({
+	name: require_schemas.nonEmptyStringValueSchema("field name"),
+	source: valibot.optional(require_schemas.stringValueSchema("field source"))
+});
+/** Schema for webhook rule configuration (field, operator, value). */
+const WebhookRuleSchema = valibot.object({
+	field: require_schemas.nonEmptyStringValueSchema("rule field"),
+	operator: require_schemas.nonEmptyStringValueSchema("rule operator"),
+	value: require_schemas.nonEmptyStringValueSchema("rule value")
+});
+/** Schema for webhook header configuration (name, value). */
+const WebhookHeaderSchema = valibot.object({
+	name: require_schemas.nonEmptyStringValueSchema("header name"),
+	value: require_schemas.nonEmptyStringValueSchema("header value")
+});
+/** batch_name and hook_name must contain only letters, numbers, and underscores. */
+const WEBHOOK_IDENTIFIER_REGEX = /^[a-zA-Z0-9_]+$/;
+/** Category for conflict detection: validation, append, or modification. */
+const CATEGORIES = [
+	"validation",
+	"append",
+	"modification"
+];
+const CategorySchema = valibot.picklist(CATEGORIES, `Webhook category must be one of: ${CATEGORIES.join(", ")}`);
+/** Schema for the nested webhook payload without url — used when runtimeAction resolves the URL at runtime. */
+const WebhookDefinitionBaseSchema = valibot.object({
+	webhook_method: require_schemas.nonEmptyStringValueSchema("webhook_method"),
+	webhook_type: require_schemas.nonEmptyStringValueSchema("webhook_type"),
+	batch_name: valibot.pipe(require_schemas.nonEmptyStringValueSchema("batch_name"), valibot.regex(WEBHOOK_IDENTIFIER_REGEX, "batch_name must contain only letters, numbers, and underscores")),
+	batch_order: valibot.optional(require_schemas.positiveNumberValueSchema("batch_order")),
+	hook_name: valibot.pipe(require_schemas.nonEmptyStringValueSchema("hook_name"), valibot.regex(WEBHOOK_IDENTIFIER_REGEX, "hook_name must contain only letters, numbers, and underscores")),
+	priority: valibot.optional(require_schemas.positiveNumberValueSchema("priority")),
+	required: valibot.optional(require_schemas.booleanValueSchema("required")),
+	soft_timeout: valibot.optional(require_schemas.positiveNumberValueSchema("soft_timeout")),
+	timeout: valibot.optional(require_schemas.positiveNumberValueSchema("timeout")),
+	method: require_schemas.nonEmptyStringValueSchema("HTTP method"),
+	fallback_error_message: valibot.optional(require_schemas.stringValueSchema("fallback_error_message")),
+	ttl: valibot.optional(require_schemas.positiveNumberValueSchema("ttl")),
+	fields: valibot.optional(valibot.array(WebhookFieldSchema, "Expected an array of webhook field objects")),
+	rules: valibot.optional(valibot.array(WebhookRuleSchema, "Expected an array of webhook rule objects")),
+	headers: valibot.optional(valibot.array(WebhookHeaderSchema, "Expected an array of webhook header objects"))
+});
+/** Schema for the nested webhook payload with a required url. */
+const WebhookDefinitionWithUrlSchema = valibot.object({
+	...WebhookDefinitionBaseSchema.entries,
+	url: valibot.pipe(require_schemas.stringValueSchema("webhook URL"), valibot.url("The 'url' field must be a valid absolute URL (e.g., 'https://example.com/webhook')"))
+});
+/** Schema for a webhook entry that resolves its URL from a runtime action. */
+const WebhookEntryWithRuntimeActionSchema = valibot.object({
+	label: require_schemas.nonEmptyStringValueSchema("webhook label"),
+	description: require_schemas.nonEmptyStringValueSchema("webhook description"),
+	category: valibot.optional(CategorySchema),
+	runtimeAction: require_schemas.nonEmptyStringValueSchema("runtimeAction"),
+	requireAdobeAuth: valibot.optional(require_schemas.booleanValueSchema("requireAdobeAuth")),
+	webhook: WebhookDefinitionBaseSchema
+});
+/** Schema for a webhook entry that provides an explicit URL. */
+const WebhookEntryWithUrlSchema = valibot.object({
+	label: require_schemas.nonEmptyStringValueSchema("webhook label"),
+	description: require_schemas.nonEmptyStringValueSchema("webhook description"),
+	category: valibot.optional(CategorySchema),
+	webhook: WebhookDefinitionWithUrlSchema
+});
+/** Schema for a single webhook entry — either runtimeAction (no url) or explicit url (no runtimeAction). */
+const WebhookEntrySchema = valibot.union([WebhookEntryWithRuntimeActionSchema, WebhookEntryWithUrlSchema], "Each webhook entry must define either a 'runtimeAction' (to resolve the URL from a runtime action) or an explicit 'url' inside the 'webhook' object, but not both");
+/** Schema for the optional webhooks array (when present, must have at least one item). */
+const WebhooksSchema = valibot.optional(valibot.pipe(valibot.array(WebhookEntrySchema, "Expected an array of webhook entries"), valibot.minLength(1, "webhooks array must contain at least one webhook when present")));
+/**
+* Check if config has webhooks (non-empty array).
+* @param config - The configuration to check.
+*/
+function hasWebhooks(config) {
+	return Array.isArray(config?.webhooks) && config.webhooks.length > 0;
+}
+
+//#endregion
+Object.defineProperty(exports, 'AdminUiSdkSchema', {
+  enumerable: true,
+  get: function () {
+    return AdminUiSdkSchema;
+  }
+});
 Object.defineProperty(exports, 'EventingSchema', {
   enumerable: true,
   get: function () {
@@ -211,6 +330,18 @@ Object.defineProperty(exports, 'InstallationSchema', {
     return InstallationSchema;
   }
 });
+Object.defineProperty(exports, 'WebhooksSchema', {
+  enumerable: true,
+  get: function () {
+    return WebhooksSchema;
+  }
+});
+Object.defineProperty(exports, 'hasAdminUiSdk', {
+  enumerable: true,
+  get: function () {
+    return hasAdminUiSdk;
+  }
+});
 Object.defineProperty(exports, 'hasCommerceEvents', {
   enumerable: true,
   get: function () {
@@ -240,4 +371,10 @@ Object.defineProperty(exports, 'hasExternalEvents', {
   get: function () {
     return hasExternalEvents;
   }
+});
+Object.defineProperty(exports, 'hasWebhooks', {
+  enumerable: true,
+  get: function () {
+    return hasWebhooks;
+  }
 });

package/dist/es/actions/app-config.d.mts

@@ -1,5 +1,19 @@
-import { n as CommerceAppConfigOutputModel } from "../app-BAiyvNo2.mjs";
-import * as _adobe_aio_commerce_lib_core_responses0 from "@adobe/aio-commerce-lib-core/responses";
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+import { n as CommerceAppConfigOutputModel } from "../app-DJr-mN9d.mjs";
+import * as _$_adobe_aio_commerce_lib_core_responses0 from "@adobe/aio-commerce-lib-core/responses";
 import { RuntimeActionParams } from "@adobe/aio-commerce-lib-core/params";
 
 //#region source/actions/app-config.d.ts
@@ -10,6 +24,6 @@ type RuntimeActionFactoryArgs = {
 /** Factory to create the route handler for the `app-config` action. */
 declare const appConfigRuntimeAction: ({
   appConfig
-}: RuntimeActionFactoryArgs) => (params: RuntimeActionParams) => Promise<_adobe_aio_commerce_lib_core_responses0.ActionResponse>;
+}: RuntimeActionFactoryArgs) => (params: RuntimeActionParams) => Promise<_$_adobe_aio_commerce_lib_core_responses0.ActionResponse>;
 //#endregion
 export { appConfigRuntimeAction };

package/dist/es/actions/app-config.mjs

@@ -1,10 +1,24 @@
-import { n as logger, t as HttpActionRouter } from "../router-CJ4VWoCt.mjs";
-import { t as validateCommerceAppConfig } from "../validate-DKnju9-R.mjs";
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+import { n as logger, t as HttpActionRouter } from "../router-BxaxEEu3.mjs";
+import { t as validateCommerceAppConfig } from "../validate-CqJdGzyZ.mjs";
 import { ok } from "@adobe/aio-commerce-lib-core/responses";
 
 //#region source/actions/app-config.ts
 /** Router for the app config actions. */
-const router = new HttpActionRouter().use(logger({ name: () => "get-app-config" }));
+const router = new HttpActionRouter().use(logger({ name: () => "app-config" }));
 /** GET / - Get app config */
 router.get("/", { handler: async (_req, { logger, rawParams }) => {
 	logger.debug("Validating app config...");

package/dist/es/actions/config.d.mts

@@ -1,4 +1,18 @@
-import * as _adobe_aio_commerce_lib_core_responses0 from "@adobe/aio-commerce-lib-core/responses";
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+import * as _$_adobe_aio_commerce_lib_core_responses0 from "@adobe/aio-commerce-lib-core/responses";
 import { BusinessConfigSchema } from "@adobe/aio-commerce-lib-config";
 import { RuntimeActionParams } from "@adobe/aio-commerce-lib-core/params";
 
@@ -10,6 +24,6 @@ type ConfigActionFactoryArgs = {
 /** Factory to create the route handler for the `config` action. */
 declare const configRuntimeAction: ({
   configSchema
-}: ConfigActionFactoryArgs) => (params: RuntimeActionParams) => Promise<_adobe_aio_commerce_lib_core_responses0.ActionResponse>;
+}: ConfigActionFactoryArgs) => (params: RuntimeActionParams) => Promise<_$_adobe_aio_commerce_lib_core_responses0.ActionResponse>;
 //#endregion
 export { configRuntimeAction };

package/dist/es/actions/config.mjs

@@ -1,6 +1,20 @@
-import { n as logger, t as HttpActionRouter } from "../router-CJ4VWoCt.mjs";
-import { n as validateCommerceAppConfigDomain } from "../validate-DKnju9-R.mjs";
-import { r as nonEmptyStringValueSchema } from "../schemas-B8yIv0_b.mjs";
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+import { n as logger, t as HttpActionRouter } from "../router-BxaxEEu3.mjs";
+import { n as validateCommerceAppConfigDomain } from "../validate-CqJdGzyZ.mjs";
+import { r as nonEmptyStringValueSchema } from "../schemas-CVXHgUhv.mjs";
 import { ok } from "@adobe/aio-commerce-lib-core/responses";
 import * as v from "valibot";
 import { byScopeId, getConfiguration, initialize, setConfiguration } from "@adobe/aio-commerce-lib-config";

package/dist/es/actions/installation.d.mts

@@ -1,6 +1,20 @@
-import { n as CommerceAppConfigOutputModel } from "../app-BAiyvNo2.mjs";
-import { P as InstallationContext } from "../runner-BD-lItnK.mjs";
-import * as _adobe_aio_commerce_lib_core_responses0 from "@adobe/aio-commerce-lib-core/responses";
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+import { n as CommerceAppConfigOutputModel } from "../app-DJr-mN9d.mjs";
+import { V as InstallationContext } from "../index-BmYXe7kp.mjs";
+import * as _$_adobe_aio_commerce_lib_core_responses0 from "@adobe/aio-commerce-lib-core/responses";
 import { RuntimeActionParams } from "@adobe/aio-commerce-lib-core/params";
 
 //#region source/actions/installation.d.ts
@@ -14,6 +28,6 @@ type RuntimeActionFactoryArgs = {
 declare const installationRuntimeAction: ({
   appConfig,
   customScriptsLoader
-}: RuntimeActionFactoryArgs) => (params: RuntimeActionParams) => Promise<_adobe_aio_commerce_lib_core_responses0.ActionResponse>;
+}: RuntimeActionFactoryArgs) => (params: RuntimeActionParams) => Promise<_$_adobe_aio_commerce_lib_core_responses0.ActionResponse>;
 //#endregion
 export { installationRuntimeAction };

package/dist/es/actions/installation.mjs

@@ -1,6 +1,20 @@
-import { n as logger, t as HttpActionRouter } from "../router-CJ4VWoCt.mjs";
-import { r as nonEmptyStringValueSchema } from "../schemas-B8yIv0_b.mjs";
-import { a as isFailedState, i as isCompletedState, n as runInstallation, o as isInProgressState, s as isSucceededState, t as createInitialInstallationState } from "../runner-vwAhjD5r.mjs";
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+import { n as logger, t as HttpActionRouter } from "../router-BxaxEEu3.mjs";
+import { r as nonEmptyStringValueSchema } from "../schemas-CVXHgUhv.mjs";
+import { a as isCompletedState, c as isSucceededState, n as runInstallation, o as isFailedState, r as runValidation, s as isInProgressState, t as createInitialInstallationState } from "../management-DSexEPTW.mjs";
 import { accepted, badRequest, conflict, internalServerError, noContent, ok } from "@adobe/aio-commerce-lib-core/responses";
 import * as v from "valibot";
 import { object, string } from "valibot";
@@ -244,6 +258,14 @@ const AppDataSchema = v.object({
 //#endregion
 //#region source/actions/installation.ts
 const DEFAULT_ACTION_NAME = "app-management/installation";
+/** Request body schema shared by POST / and POST /validation. */
+const InstallationRequestBodySchema = object({
+	appData: AppDataSchema,
+	commerceBaseUrl: string(),
+	commerceEnv: string(),
+	ioEventsUrl: string(),
+	ioEventsEnv: string()
+});
 /** Creates an installation state store using lib-core combined storage. */
 function createInstallationStore() {
 	return createCombinedStore({
@@ -311,13 +333,7 @@ router.get("/", { handler: async (_req, { logger }) => {
 * 3. If not found or failed: create plan, invoke execution async, return 202 Accepted
 */
 router.post("/", {
-	body: object({
-		appData: AppDataSchema,
-		commerceBaseUrl: string(),
-		commerceEnv: string(),
-		ioEventsUrl: string(),
-		ioEventsEnv: string()
-	}),
+	body: InstallationRequestBodySchema,
 	handler: async (req, { logger, rawParams }) => {
 		logger.debug("Starting installation...");
 		const store = await createInstallationStore();
@@ -399,6 +415,44 @@ router.post("/execution", { handler: async (_req, { logger, rawParams }) => {
 	return ok({ body: result });
 } });
 /**
+* POST /installation/validation - Pre-installation validation
+*
+* Synchronously validates the step tree before installation begins.
+* Accepts the same request body as POST / (installation start) so the
+* frontend can reuse the same parameters without any extra mapping.
+*
+* Flow:
+* 1. Build a ValidationContext from the request parameters
+* 2. Call runValidation() — traverses the step tree and collects issues
+* 3. Return the structured ValidationResult immediately (no async invoke)
+*/
+router.post("/validation", {
+	body: InstallationRequestBodySchema,
+	handler: async (req, { logger, rawParams }) => {
+		logger.debug("Running pre-installation validation...");
+		const appConfig = rawParams.appConfig;
+		if (!appConfig) return internalServerError("Could not find or parse the app.commerce.manifest.json file, is it present and valid?");
+		const { appData, ...params } = {
+			...rawParams,
+			appData: req.body.appData,
+			AIO_EVENTS_API_BASE_URL: req.body.ioEventsUrl,
+			AIO_COMMERCE_AUTH_IMS_ENVIRONMENT: req.body.ioEventsEnv,
+			AIO_COMMERCE_API_BASE_URL: req.body.commerceBaseUrl,
+			AIO_COMMERCE_API_FLAVOR: req.body.commerceEnv
+		};
+		const result = await runValidation({
+			validationContext: {
+				appData,
+				params,
+				logger
+			},
+			config: appConfig
+		});
+		logger.debug(`Validation complete — valid: ${result.valid}, errors: ${result.summary.errors}, warnings: ${result.summary.warnings}`);
+		return ok({ body: result });
+	}
+});
+/**
 * DELETE / - Clear installation state
 *
 * This endpoint allows clearing the installation state.

package/dist/es/actions/scope-tree.d.mts

@@ -1,8 +1,22 @@
-import * as _adobe_aio_commerce_lib_core_responses0 from "@adobe/aio-commerce-lib-core/responses";
-import * as _adobe_aio_commerce_lib_core_params0 from "@adobe/aio-commerce-lib-core/params";
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+import * as _$_adobe_aio_commerce_lib_core_responses0 from "@adobe/aio-commerce-lib-core/responses";
+import * as _$_adobe_aio_commerce_lib_core_params0 from "@adobe/aio-commerce-lib-core/params";
 
 //#region source/actions/scope-tree.d.ts
 /** The handler method for the `scope-tree` action. */
-declare const scopeTreeRuntimeAction: (args: _adobe_aio_commerce_lib_core_params0.RuntimeActionParams) => Promise<_adobe_aio_commerce_lib_core_responses0.ActionResponse>;
+declare const scopeTreeRuntimeAction: (args: _$_adobe_aio_commerce_lib_core_params0.RuntimeActionParams) => Promise<_$_adobe_aio_commerce_lib_core_responses0.ActionResponse>;
 //#endregion
 export { scopeTreeRuntimeAction };

package/dist/es/actions/scope-tree.mjs

@@ -1,6 +1,20 @@
-import { n as logger, t as HttpActionRouter } from "../router-CJ4VWoCt.mjs";
-import { r as nonEmptyStringValueSchema } from "../schemas-B8yIv0_b.mjs";
-import { t as inspect } from "../logging-CzmXDzxI.mjs";
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+import { n as logger, t as HttpActionRouter } from "../router-BxaxEEu3.mjs";
+import { r as nonEmptyStringValueSchema } from "../schemas-CVXHgUhv.mjs";
+import { t as inspect } from "../logging-XIUXDK5T.mjs";
 import { internalServerError, nonAuthoritativeInformation, ok } from "@adobe/aio-commerce-lib-core/responses";
 import * as v from "valibot";
 import { getScopeTree, setCustomScopeTree, syncCommerceScopes, unsyncCommerceScopes } from "@adobe/aio-commerce-lib-config";