@adobe/aio-commerce-lib-app 1.5.0 → 1.7.0

package/CHANGELOG.md

@@ -1,5 +1,54 @@
 # @adobe/aio-commerce-lib-app
 
+## 1.7.0
+
+### Minor Changes
+
+- [#481](https://github.com/adobe/aio-commerce-sdk/pull/481) [`cffcc6a`](https://github.com/adobe/aio-commerce-sdk/commit/cffcc6af58c734486de4447c1f1eaa7a4784a4e2) Thanks [@iivvaannxx](https://github.com/iivvaannxx)! - Introduce a new `GET /openapi.json` for `lib-app` in `app-config`.
+
+- [#471](https://github.com/adobe/aio-commerce-sdk/pull/471) [`82adf80`](https://github.com/adobe/aio-commerce-sdk/commit/82adf8002e693166fe0d285f9b901750dbad2f5e) Thanks [@obarcelonap](https://github.com/obarcelonap)! - Default generated actions to `nodejs:24`, the latest App Builder Runtime version with prewarm support.
+
+### Patch Changes
+
+- [#489](https://github.com/adobe/aio-commerce-sdk/pull/489) [`d227e47`](https://github.com/adobe/aio-commerce-sdk/commit/d227e475ec0b513ca06e4e7950497b2a20ee4674) Thanks [@oshmyheliuk](https://github.com/oshmyheliuk)! - Refactor Admin UI SDK extension registration and unregistration to use `@adobe/aio-commerce-lib-admin-ui` client instead of raw HTTP calls.
+
+- [#481](https://github.com/adobe/aio-commerce-sdk/pull/481) [`cffcc6a`](https://github.com/adobe/aio-commerce-sdk/commit/cffcc6af58c734486de4447c1f1eaa7a4784a4e2) Thanks [@iivvaannxx](https://github.com/iivvaannxx)! - Fix `scopes` body validation in the scope tree action to use the proper recursive `CustomScopeInput` schema instead of `v.any()`.
+
+- [#495](https://github.com/adobe/aio-commerce-sdk/pull/495) [`c8d8c3a`](https://github.com/adobe/aio-commerce-sdk/commit/c8d8c3a1f1279493d12bd1403e5fd71f18ee9dc1) Thanks [@iivvaannxx](https://github.com/iivvaannxx)! - Fix an issue where developers could not define custom installation scripts via `module.exports` when using CJS.
+
+- [#481](https://github.com/adobe/aio-commerce-sdk/pull/481) [`cffcc6a`](https://github.com/adobe/aio-commerce-sdk/commit/cffcc6af58c734486de4447c1f1eaa7a4784a4e2) Thanks [@iivvaannxx](https://github.com/iivvaannxx)! - Return `400` instead of `500` when a custom scope tree fails validation (reserved or duplicate scope codes, invalid fields).
+
+- Updated dependencies [[`f6aec01`](https://github.com/adobe/aio-commerce-sdk/commit/f6aec01a22ed185fe130170751353fae881c0f2d), [`9b41376`](https://github.com/adobe/aio-commerce-sdk/commit/9b413761fd857a2e75c3f5210efb83ce2b1b4b6e), [`d227e47`](https://github.com/adobe/aio-commerce-sdk/commit/d227e475ec0b513ca06e4e7950497b2a20ee4674)]:
+  - @adobe/aio-commerce-lib-webhooks@1.1.2
+  - @adobe/aio-commerce-lib-config@1.5.1
+  - @adobe/aio-commerce-lib-admin-ui@0.1.0
+
+## 1.6.0
+
+### Minor Changes
+
+- [#438](https://github.com/adobe/aio-commerce-sdk/pull/438) [`fbc70ea`](https://github.com/adobe/aio-commerce-sdk/commit/fbc70ea680e5f0f7da10fc1771e5327806aad4bc) Thanks [@iivvaannxx](https://github.com/iivvaannxx)! - Support `dynamicList` business configuration fields. The generated `config` and `app-config` actions will now resolve list options at request time.
+
+- [#469](https://github.com/adobe/aio-commerce-sdk/pull/469) [`ad3d980`](https://github.com/adobe/aio-commerce-sdk/commit/ad3d980f0370e21c61f34426ab2638fb682e008d) Thanks [@aligent-lturner](https://github.com/aligent-lturner)! - Preserve a manually-set `runtime` on generated actions. Codegen no longer overwrites the `runtime` field in `ext.config.yaml`, so you can pin a different Node runtime (e.g. `nodejs:24`) and it survives regeneration.
+
+### Patch Changes
+
+- [#470](https://github.com/adobe/aio-commerce-sdk/pull/470) [`ec2d426`](https://github.com/adobe/aio-commerce-sdk/commit/ec2d4262166bde68a434025667f38609313ad712) Thanks [@iivvaannxx](https://github.com/iivvaannxx)! - Fix CJS interop for ESM-only dependencies (`camelcase`, `ky`) on Node.js 22+
+
+- [#456](https://github.com/adobe/aio-commerce-sdk/pull/456) [`dac5c04`](https://github.com/adobe/aio-commerce-sdk/commit/dac5c04bbb33cf4e42de819b21fb4a5bc932a586) Thanks [@oshmyheliuk](https://github.com/oshmyheliuk)! - Add validation on unique event provider label.
+
+- [#456](https://github.com/adobe/aio-commerce-sdk/pull/456) [`dac5c04`](https://github.com/adobe/aio-commerce-sdk/commit/dac5c04bbb33cf4e42de819b21fb4a5bc932a586) Thanks [@oshmyheliuk](https://github.com/oshmyheliuk)! - Fix only one I/O Events registration being created when multiple event providers share the same runtime action.
+
+- [#457](https://github.com/adobe/aio-commerce-sdk/pull/457) [`6bc80bc`](https://github.com/adobe/aio-commerce-sdk/commit/6bc80bcf6fb28219998c2f0f7ff0f66f5f4457c0) Thanks [@obarcelonap](https://github.com/obarcelonap)! - Fix event subscription rules not being forwarded to Commerce when installing an app
+
+- Updated dependencies [[`ec2d426`](https://github.com/adobe/aio-commerce-sdk/commit/ec2d4262166bde68a434025667f38609313ad712), [`705b3b8`](https://github.com/adobe/aio-commerce-sdk/commit/705b3b89b2bb0f1cee421434be4bc92b71ddc0a9), [`fb28949`](https://github.com/adobe/aio-commerce-sdk/commit/fb2894915c6fa411ed24f3501a7fc600e4eb88ee), [`fbc70ea`](https://github.com/adobe/aio-commerce-sdk/commit/fbc70ea680e5f0f7da10fc1771e5327806aad4bc)]:
+  - @adobe/aio-commerce-lib-api@1.2.1
+  - @adobe/aio-commerce-lib-core@1.1.1
+  - @adobe/aio-commerce-lib-config@1.5.0
+  - @adobe/aio-commerce-lib-events@1.2.1
+  - @adobe/aio-commerce-lib-webhooks@1.1.1
+  - @adobe/aio-commerce-lib-auth@1.1.1
+
 ## 1.5.0
 
 ### Minor Changes

package/dist/cjs/actions/app-config/index.cjs

@@ -0,0 +1,202 @@
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_chunk = require('../../chunk-Cozy-1ZF.cjs');
+const require_validate = require('../../validate-oAOpyFyb.cjs');
+const require_router = require('../../router-BOR7T6qR.cjs');
+let _adobe_aio_commerce_lib_config = require("@adobe/aio-commerce-lib-config");
+let valibot = require("valibot");
+valibot = require_chunk.__toESM(valibot, 1);
+let _adobe_aio_commerce_lib_core_responses = require("@adobe/aio-commerce-lib-core/responses");
+let crypto = require("crypto");
+
+//#region source/actions/app-config/openapi.ts
+/**
+* Loads the committed OpenAPI spec via dynamic import so it
+* lands in its own chunk and is not parsed on every cold start.
+*/
+const importOpenApi = () => Promise.resolve().then(() => require("../../openapi-Cux6K4ZD.cjs"));
+/** Matches component schema `$ref` strings, capturing the schema name. */
+const SCHEMA_REF_PATTERN = /"#\/components\/schemas\/(\w+)"/g;
+/**
+* Collects the names of every component schema referenced via `$ref` in a value
+* Scans the serialized JSON, so it catches refs at any depth.
+*
+* @param value - Any part of the spec to scan.
+*/
+function collectSchemaRefs(value) {
+	return [...(JSON.stringify(value) ?? "").matchAll(SCHEMA_REF_PATTERN)].map((match) => match[1]);
+}
+/**
+* Deletes component schemas not reachable from the remaining paths, in place.
+*
+* Follows `$ref`s transitively from `spec.paths`; the visited set handles
+* recursive schemas (e.g. `ScopeNode`).
+*
+* @param spec - The spec to prune, after paths have been stripped.
+*/
+function pruneUnusedSchemas(spec) {
+	const schemas = spec.components.schemas;
+	const reachable = new Set(collectSchemaRefs(spec.paths));
+	const pending = [...reachable];
+	while (pending.length > 0) {
+		const name = pending.pop();
+		if (name === void 0) continue;
+		for (const ref of collectSchemaRefs(schemas[name])) if (!reachable.has(ref)) {
+			reachable.add(ref);
+			pending.push(ref);
+		}
+	}
+	for (const name of Object.keys(schemas)) if (!reachable.has(name)) delete schemas[name];
+}
+/**
+* Removes top-level tags no longer referenced by any remaining path operation, in place.
+* @param spec - The spec to prune, after paths have been stripped.
+*/
+function pruneUnusedTags(spec) {
+	const usedTags = /* @__PURE__ */ new Set();
+	for (const pathItem of Object.values(spec.paths)) for (const operation of Object.values(pathItem)) for (const tag of operation.tags ?? []) usedTags.add(tag);
+	for (let i = spec.tags.length - 1; i >= 0; i--) if (!usedTags.has(spec.tags[i].name)) spec.tags.splice(i, 1);
+}
+/**
+* Computes a short hash identifying the spec served for the given config domains.
+* Changes whenever the served spec would: with the OpenAPI spec version (`info.version`),
+* the package version, or the domains that drive pruning.
+*
+* @param domains - The active config domains.
+*/
+function getOpenApiCacheKey(domains) {
+	const input = `1.7.0:${[...domains].sort().join(",")}:1.0.0`;
+	return (0, crypto.createHash)("sha256").update(input).digest("hex").slice(0, 8);
+}
+/** Returns the server URL to be set in the OpenAPI spec, based on the current namespace. */
+function getServerUrl() {
+	return `https://${process.env.__OW_NAMESPACE}.adobeioruntime.net/api/v1/web/app-management`;
+}
+/**
+* Builds the OpenAPI spec served by `GET /openapi.json`, tailored to the app's
+* capabilities: unused paths are stripped, along with the schemas they leave
+* unreferenced.
+*
+* Works on a fresh copy so the shared module import is never mutated. The
+* committed `docs/openapi.json` always describes the full surface.
+*
+* @param domains - The active config domains that drive path trimming.
+* @param logger - Logger used to report which paths get stripped.
+*/
+async function buildOpenApiSpec(domains, logger) {
+	const { default: openAPISpec } = await importOpenApi();
+	const spec = structuredClone(openAPISpec);
+	const stripPath = (path) => {
+		if (spec.paths[path]) {
+			logger.debug(`Stripping OpenAPI spec path: ${path}`);
+			delete spec.paths[path];
+		}
+	};
+	if (!domains.has("businessConfig.schema")) {
+		logger.debug("Application doesn't define business configuration, stripping references...");
+		stripPath("/config");
+		stripPath("/scope-tree");
+		stripPath("/scope-tree/commerce");
+	}
+	if (!domains.has("adminUiSdk")) {
+		logger.debug("Application doesn't define Admin UI SDK registration, stripping references...");
+		stripPath("/registration");
+	}
+	if (!require_validate.requiresInstallationFromDomains(domains)) {
+		logger.debug("Application doesn't require installation, stripping references...");
+		stripPath("/installation");
+		stripPath("/installation/validation");
+		stripPath("/installation/uninstallation");
+	}
+	pruneUnusedSchemas(spec);
+	pruneUnusedTags(spec);
+	spec.servers[0].url = getServerUrl();
+	return spec;
+}
+
+//#endregion
+//#region source/actions/app-config/router.ts
+/**
+* App Config action router.
+*
+* Routes:
+* - GET /               Retrieve the Commerce App configuration.
+* - GET /openapi.json   Returns the OpenAPI spec for all SDK actions
+*/
+const router = new require_router.HttpActionRouter().use(require_router.logger({ name: () => "app-config" }));
+/** GET / - Get app config */
+router.get("/", { handler: async (_req, { logger, rawParams }) => {
+	const rawAppConfig = rawParams.appConfig;
+	if (!rawAppConfig) return (0, _adobe_aio_commerce_lib_core_responses.internalServerError)("The app config is missing. Does the action receive it as a parameter?");
+	let appConfig = rawAppConfig;
+	if (require_validate.hasBusinessConfigSchema(rawAppConfig)) {
+		logger.debug("Resolving business config schema...");
+		const schema = await (0, _adobe_aio_commerce_lib_config.resolveBusinessConfigSchema)(rawAppConfig.businessConfig.schema, rawParams);
+		appConfig = {
+			...rawAppConfig,
+			businessConfig: {
+				...rawAppConfig.businessConfig,
+				schema
+			}
+		};
+	}
+	logger.debug("Validating app config...");
+	const config = require_validate.validateCommerceAppConfig(appConfig);
+	logger.debug("Successfully validated the app config");
+	const domains = require_validate.getConfigDomains(rawParams.appConfig);
+	const openApiSpecUrl = `${getServerUrl()}/app-config/openapi.json?ck=${getOpenApiCacheKey(domains)}`;
+	return (0, _adobe_aio_commerce_lib_core_responses.ok)({ body: {
+		...config,
+		openApiSpecUrl
+	} });
+} });
+/**
+* GET /openapi.json - Returns the OpenAPI spec for all SDK actions
+* @internal - Do not add to OpenAPI Spec.
+*/
+router.get("/openapi.json", {
+	query: valibot.object({ ck: valibot.optional(valibot.string()) }),
+	handler: async (req, { logger, rawParams }) => {
+		const { ck } = req.query;
+		const domains = require_validate.getConfigDomains(rawParams.appConfig);
+		if (ck && getOpenApiCacheKey(domains) === ck) {
+			logger.debug(`Received request for OpenAPI spec with cache key query param: ${ck}`);
+			return (0, _adobe_aio_commerce_lib_core_responses.ok)({
+				body: await buildOpenApiSpec(domains, logger),
+				headers: { "Cache-Control": "public, max-age=31536000, immutable" }
+			});
+		}
+		return (0, _adobe_aio_commerce_lib_core_responses.ok)({ body: await buildOpenApiSpec(domains, logger) });
+	}
+});
+
+//#endregion
+//#region source/actions/app-config/index.ts
+/**
+* Factory to create the route handler for the `app-config` action.
+* @param args - The arguments required to create the runtime action.
+*/
+const appConfigRuntimeAction = (args) => async (params) => {
+	const handler = router.handler();
+	const { appConfig } = args;
+	return await handler({
+		...params,
+		appConfig
+	});
+};
+
+//#endregion
+exports.appConfigRuntimeAction = appConfigRuntimeAction;

package/dist/cjs/actions/{app-config.d.cts → app-config/index.d.cts}

@@ -12,18 +12,20 @@
  * governing permissions and limitations under the License.
  */
 
-import { n as CommerceAppConfigOutputModel } from "../app-C6kImBl7.cjs";
-import * as _$_adobe_aio_commerce_lib_core_responses0 from "@adobe/aio-commerce-lib-core/responses";
+import { n as CommerceAppConfig } from "../../app-DrYHK-z1.cjs";
 import { RuntimeActionParams } from "@adobe/aio-commerce-lib-core/params";
 
-//#region source/actions/app-config.d.ts
-/** Arguments for the runtime action factory. */
+//#region source/actions/app-config/router.d.ts
+/** The arguments required to create the runtime action for the app-config action. */
 type RuntimeActionFactoryArgs = {
-  appConfig: CommerceAppConfigOutputModel;
+  appConfig: CommerceAppConfig;
 };
-/** Factory to create the route handler for the `app-config` action. */
-declare const appConfigRuntimeAction: ({
-  appConfig
-}: RuntimeActionFactoryArgs) => (params: RuntimeActionParams) => Promise<_$_adobe_aio_commerce_lib_core_responses0.ActionResponse>;
+//#endregion
+//#region source/actions/app-config/index.d.ts
+/**
+ * Factory to create the route handler for the `app-config` action.
+ * @param args - The arguments required to create the runtime action.
+ */
+declare const appConfigRuntimeAction: (args: RuntimeActionFactoryArgs) => (params: RuntimeActionParams) => Promise<import("@adobe/aio-commerce-lib-core/responses").ActionResponse>;
 //#endregion
 export { appConfigRuntimeAction };

package/dist/cjs/actions/{config.cjs → config/index.cjs}

@@ -13,23 +13,52 @@
  */
 
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_chunk = require('../chunk-DS2yp5vX.cjs');
-const require_router = require('../router-CFErodHU.cjs');
-const require_schemas = require('../schemas-CukVpc19.cjs');
-const require_validate = require('../validate-b_bI4mDb.cjs');
-let _adobe_aio_commerce_lib_core_responses = require("@adobe/aio-commerce-lib-core/responses");
+const require_chunk = require('../../chunk-Cozy-1ZF.cjs');
+const require_schemas = require('../../schemas-FngDuIeo.cjs');
+const require_router = require('../../router-BOR7T6qR.cjs');
+let _adobe_aio_commerce_lib_config = require("@adobe/aio-commerce-lib-config");
 let valibot = require("valibot");
 valibot = require_chunk.__toESM(valibot, 1);
-let _adobe_aio_commerce_lib_config = require("@adobe/aio-commerce-lib-config");
+let _adobe_aio_commerce_lib_core_responses = require("@adobe/aio-commerce-lib-core/responses");
 
-//#region source/actions/config.ts
-const MASKED_PASSWORD_VALUE = "*****";
+//#region source/actions/config/schema.ts
+const AcceptedConfigurationValuesSchema = valibot.union([
+	valibot.boolean(),
+	valibot.string(),
+	valibot.array(valibot.string())
+]);
 /** The set of valid Commerce environments a configuration field can be scoped to. */
 const COMMERCE_ENVS = ["paas", "saas"];
+/** Query parameters for GET / */
+const GetConfigurationQuerySchema = valibot.object({
+	scopeId: require_schemas.nonEmptyStringValueSchema("scopeId"),
+	commerceEnv: valibot.optional(valibot.picklist(COMMERCE_ENVS))
+});
+/** Request body for PUT / */
+const PutConfigBodySchema = valibot.object({
+	scopeId: require_schemas.nonEmptyStringValueSchema("scopeId"),
+	config: valibot.array(valibot.object({
+		name: require_schemas.nonEmptyStringValueSchema("config[i].name"),
+		value: valibot.union([valibot.string(), valibot.array(valibot.string())])
+	}))
+});
+/** Request body for PATCH / */
+const PatchConfigBodySchema = valibot.object({
+	scopeId: require_schemas.nonEmptyStringValueSchema("scopeId"),
+	config: valibot.array(valibot.object({
+		name: require_schemas.nonEmptyStringValueSchema("config[i].name"),
+		value: valibot.nullable(AcceptedConfigurationValuesSchema)
+	}))
+});
+
+//#endregion
+//#region source/actions/config/router.ts
+const MASKED_PASSWORD_VALUE = "*****";
 /**
 * Filters a business configuration schema to the fields applicable to the
 * given Commerce environment. Fields without an `env` property apply to all
 * environments and are always included.
+*
 * @param schema - The business configuration schema to filter.
 * @param env - The Commerce environment to filter by.
 */
@@ -38,9 +67,9 @@ function filterSchemaByEnv(schema, env) {
 }
 /**
 * Filters password fields from the configuration values.
+*
 * @param schema - The schema to use to filter the values.
 * @param values - The values to filter.
-* @returns The filtered values.
 */
 function filterPasswordFields(schema, values) {
 	return values.map((item) => {
@@ -51,51 +80,55 @@ function filterPasswordFields(schema, values) {
 		return item;
 	});
 }
-const router = new require_router.HttpActionRouter().use(require_router.logger());
+/**
+* Config action router.
+*
+* Routes:
+* - GET /     Get current configuration values for a given scope
+* - POST /    Set configuration (overrides all values for the scope) (deprecated)
+* - PATCH /   Partially update configuration (only updates provided fields, allows unsetting)
+*/
+const router = new require_router.HttpActionRouter().use(require_router.logger({ name: () => "config" }));
 /** GET / - Retrieve configuration */
 router.get("/", {
-	query: valibot.object({
-		scopeId: require_schemas.nonEmptyStringValueSchema("scopeId"),
-		commerceEnv: valibot.optional(valibot.picklist(COMMERCE_ENVS))
-	}),
+	query: GetConfigurationQuerySchema,
 	handler: async (req, ctx) => {
 		const { logger, rawParams } = ctx;
-		const configSchema = rawParams.configSchema;
-		logger.debug("Validating configuration schema...");
-		const validatedSchema = require_validate.validateCommerceAppConfigDomain(configSchema, "businessConfig.schema");
+		const { configSchema: rawConfigSchema } = rawParams;
 		const env = req.query.commerceEnv;
-		const filteredSchema = env ? filterSchemaByEnv(validatedSchema, env) : validatedSchema;
-		(0, _adobe_aio_commerce_lib_config.initialize)({ schema: filteredSchema });
+		const envFilteredSchema = env ? filterSchemaByEnv(rawConfigSchema, env) : rawConfigSchema;
+		logger.debug("Initializing configuration");
+		const { configSchema } = await (0, _adobe_aio_commerce_lib_config.initialize)({
+			schema: envFilteredSchema,
+			params: rawParams
+		});
 		const { scopeId } = req.query;
 		logger.debug(`Retrieving configuration with scope id: ${scopeId}`);
 		const appConfiguration = await (0, _adobe_aio_commerce_lib_config.getConfiguration)((0, _adobe_aio_commerce_lib_config.byScopeId)(scopeId), { encryptionKey: rawParams.AIO_COMMERCE_CONFIG_ENCRYPTION_KEY });
 		logger.debug("Masking password values...");
-		appConfiguration.config = filterPasswordFields(filteredSchema, appConfiguration.config);
+		appConfiguration.config = filterPasswordFields(configSchema, appConfiguration.config);
 		return (0, _adobe_aio_commerce_lib_core_responses.ok)({ body: {
-			schema: filteredSchema,
+			schema: configSchema,
 			values: appConfiguration
 		} });
 	}
 });
 /**
 * PUT / - Set configuration (deprecated)
+*
 * @deprecated Use PATCH instead. This endpoint overwrites all values for the scope
 * and does not support partial updates or unset semantics.
 */
 router.put("/", {
-	body: valibot.object({
-		scopeId: require_schemas.nonEmptyStringValueSchema("scopeId"),
-		config: valibot.array(valibot.object({
-			name: require_schemas.nonEmptyStringValueSchema("config.name"),
-			value: valibot.union([valibot.string(), valibot.array(valibot.string())])
-		}))
-	}),
+	body: PutConfigBodySchema,
 	handler: async (req, ctx) => {
 		const { logger, rawParams } = ctx;
-		const { configSchema } = rawParams;
 		logger.debug(`Setting configuration with scope id: ${req.body.scopeId}`);
 		const { scopeId, config } = req.body;
-		(0, _adobe_aio_commerce_lib_config.initialize)({ schema: require_validate.validateCommerceAppConfigDomain(configSchema, "businessConfig.schema") });
+		const { configSchema } = await (0, _adobe_aio_commerce_lib_config.initialize)({
+			schema: rawParams.configSchema,
+			params: rawParams
+		});
 		const result = await (0, _adobe_aio_commerce_lib_config.setConfiguration)({ config: config.filter((item) => item.value !== MASKED_PASSWORD_VALUE) }, (0, _adobe_aio_commerce_lib_config.byScopeId)(scopeId), { encryptionKey: rawParams.AIO_COMMERCE_CONFIG_ENCRYPTION_KEY });
 		result.config = filterPasswordFields(configSchema, result.config);
 		return (0, _adobe_aio_commerce_lib_core_responses.ok)({
@@ -109,23 +142,15 @@ router.put("/", {
 });
 /** PATCH / - Partially update configuration */
 router.patch("/", {
-	body: valibot.object({
-		scopeId: require_schemas.nonEmptyStringValueSchema("scopeId"),
-		config: valibot.array(valibot.object({
-			name: require_schemas.nonEmptyStringValueSchema("config.name"),
-			value: valibot.nullable(valibot.union([
-				valibot.boolean(),
-				valibot.string(),
-				valibot.array(valibot.string())
-			]))
-		}))
-	}),
+	body: PatchConfigBodySchema,
 	handler: async (req, ctx) => {
 		const { logger, rawParams } = ctx;
-		const { configSchema } = rawParams;
 		logger.debug(`Patching configuration with scope id: ${req.body.scopeId}`);
 		const { scopeId, config } = req.body;
-		(0, _adobe_aio_commerce_lib_config.initialize)({ schema: require_validate.validateCommerceAppConfigDomain(configSchema, "businessConfig.schema") });
+		const { configSchema } = await (0, _adobe_aio_commerce_lib_config.initialize)({
+			schema: rawParams.configSchema,
+			params: rawParams
+		});
 		const result = await (0, _adobe_aio_commerce_lib_config.setConfiguration)({ config }, (0, _adobe_aio_commerce_lib_config.byScopeId)(scopeId), { encryptionKey: rawParams.AIO_COMMERCE_CONFIG_ENCRYPTION_KEY });
 		result.config = filterPasswordFields(configSchema, result.config);
 		return (0, _adobe_aio_commerce_lib_core_responses.ok)({
@@ -134,9 +159,17 @@ router.patch("/", {
 		});
 	}
 });
-/** Factory to create the route handler for the `config` action. */
-const configRuntimeAction = ({ configSchema }) => async (params) => {
-	return await router.handler()({
+
+//#endregion
+//#region source/actions/config/index.ts
+/**
+* Factory to create the route handler for the `config` action.
+* @param args - The arguments required to create the runtime action.
+*/
+const configRuntimeAction = (args) => async (params) => {
+	const handler = router.handler();
+	const { configSchema } = args;
+	return await handler({
 		...params,
 		configSchema
 	});

package/dist/{es/actions/config.d.mts → cjs/actions/config/index.d.cts}

@@ -12,18 +12,20 @@
  * governing permissions and limitations under the License.
  */
 
-import * as _$_adobe_aio_commerce_lib_core_responses0 from "@adobe/aio-commerce-lib-core/responses";
-import { BusinessConfigSchema } from "@adobe/aio-commerce-lib-config";
 import { RuntimeActionParams } from "@adobe/aio-commerce-lib-core/params";
+import { BusinessConfigSchema } from "@adobe/aio-commerce-lib-config";
 
-//#region source/actions/config.d.ts
-/** The arguments for the config action factory. */
+//#region source/actions/config/router.d.ts
+/** The arguments required to create the runtime action for the config action. */
 type ConfigActionFactoryArgs = {
   configSchema: BusinessConfigSchema;
 };
-/** Factory to create the route handler for the `config` action. */
-declare const configRuntimeAction: ({
-  configSchema
-}: ConfigActionFactoryArgs) => (params: RuntimeActionParams) => Promise<_$_adobe_aio_commerce_lib_core_responses0.ActionResponse>;
+//#endregion
+//#region source/actions/config/index.d.ts
+/**
+ * Factory to create the route handler for the `config` action.
+ * @param args - The arguments required to create the runtime action.
+ */
+declare const configRuntimeAction: (args: ConfigActionFactoryArgs) => (params: RuntimeActionParams) => Promise<import("@adobe/aio-commerce-lib-core/responses").ActionResponse>;
 //#endregion
 export { configRuntimeAction };