@adobe/aio-commerce-lib-app 2.0.0-beta-20260820174436 → 2.0.0

package/dist/es/{validate-8AXMGEwr.mjs → validate-NzW1FQwL.mjs}

@@ -13,8 +13,8 @@
  */
 
 import { t as alphaNumericOrHyphenSchema } from "./schemas-hRovglBF.mjs";
-import { a as hasCustomInstallationSteps, d as hasAdminUi, i as hasCustomInstallation, l as hasExternalEvents, n as hasWebhooks, o as EventingSchema, r as InstallationSchema, s as hasCommerceEvents, t as WebhooksSchema, u as AdminUiSchema } from "./webhooks-BQ8kSN2Z.mjs";
-import { SchemaBusinessConfig } from "@adobe/aio-commerce-lib-config";
+import { a as hasCustomInstallationSteps, d as hasAdminUi, i as hasCustomInstallation, l as hasExternalEvents, n as hasWebhooks, o as EventingSchema, r as InstallationSchema, s as hasCommerceEvents, t as WebhooksSchema, u as AdminUiSchema } from "./webhooks-CHZ1SXxw.mjs";
+import { RecordedSchemaBusinessConfig, SchemaBusinessConfig } from "@adobe/aio-commerce-lib-config";
 import { CommerceSdkValidationError } from "@adobe/aio-commerce-lib-core/error";
 import * as v from "valibot";
 
@@ -49,7 +49,7 @@ const MetadataSchema = v.object({
 	description: v.pipe(nonEmptyString("metadata description"), v.maxLength(MAX_DESCRIPTION_LENGTH, `The metadata description must not be longer than ${MAX_DESCRIPTION_LENGTH} characters`)),
 	displayName: v.pipe(nonEmptyString("application display name"), v.maxLength(MAX_DISPLAY_NAME_LENGTH, `The application display name must not be longer than ${MAX_DISPLAY_NAME_LENGTH} characters`)),
 	id: v.pipe(alphaNumericOrHyphenSchema("application id (metadata.id)"), v.maxLength(MAX_ID_LENGTH, `The application id must not be longer than ${MAX_ID_LENGTH} characters`)),
-	upgradeMode: v.optional(v.picklist(["auto", "manual"]), "auto"),
+	upgradeMode: v.optional(v.picklist(["auto", "manual"]), "manual"),
 	version: v.pipe(nonEmptyString("version"), v.regex(SEMVER_REGEX, "The version must follow semantic versioning (semver) format: Major.Minor.Patch (e.g., '1.0.0', '2.3.1')"))
 });
 /**
@@ -119,6 +119,16 @@ const CommerceAppConfigSchema = v.looseObject({
 	webhooks: v.optional(WebhooksSchema)
 });
 /**
+* The schema used to validate a commerce app config recovered from a
+* persisted lifecycle snapshot (installation/upgrade baseline), where
+* `businessConfig.schema` `dynamicList` fields may have lost their
+* `options`/`default` functions to a JSON round trip through storage.
+*/
+const RecordedCommerceAppConfigSchema = v.looseObject({
+	...CommerceAppConfigSchema.entries,
+	businessConfig: v.optional(RecordedSchemaBusinessConfig)
+});
+/**
 * Returns true if the given config domains require installation, false otherwise.
 * @param domains - The config domains to check.
 */
@@ -168,6 +178,21 @@ function validateCommerceAppConfig(config) {
 	return validatedConfig.output;
 }
 /**
+* Validates a commerce app config recovered from a persisted lifecycle
+* snapshot (installation/upgrade baseline) against the schema.
+*
+* @param config - The configuration object to validate.
+* @returns The validated and typed configuration output model.
+*
+* @throws {CommerceSdkValidationError} If the configuration is invalid, with
+* detailed validation issues included.
+*/
+function validateRecordedCommerceAppConfig(config) {
+	const validatedConfig = v.safeParse(RecordedCommerceAppConfigSchema, config);
+	if (!validatedConfig.success) throw new CommerceSdkValidationError("Invalid commerce app config", { issues: validatedConfig.issues });
+	return validatedConfig.output;
+}
+/**
 * Validates a specific domain configuration within the commerce app config.
 *
 * This function validates only a specific domain's configuration rather than
@@ -219,4 +244,4 @@ function validateCommerceAppConfigDomain(config, domain) {
 }
 
 //#endregion
-export { getConfigDomains as a, hasBusinessConfig as c, CommerceAppConfigSchemas as i, hasBusinessConfigSchema as l, validateCommerceAppConfigDomain as n, hasConfigDomain as o, requiresInstallationFromDomains as r, hasMetadata as s, validateCommerceAppConfig as t };
+export { CommerceAppConfigSchemas as a, hasMetadata as c, requiresInstallationFromDomains as i, hasBusinessConfig as l, validateCommerceAppConfigDomain as n, getConfigDomains as o, validateRecordedCommerceAppConfig as r, hasConfigDomain as s, validateCommerceAppConfig as t, hasBusinessConfigSchema as u };

package/dist/es/{webhooks-BQ8kSN2Z.mjs → webhooks-CHZ1SXxw.mjs}

@@ -14,10 +14,20 @@
 
 import { a as stringValueSchema, i as positiveNumberValueSchema, n as booleanValueSchema, r as nonEmptyStringValueSchema, t as alphaNumericOrHyphenSchema } from "./schemas-hRovglBF.mjs";
 import * as v from "valibot";
+import { sanitizeSegment } from "@adobe/aio-commerce-lib-admin-ui/api";
 import { COMMERCE_MENUS } from "@adobe/aio-commerce-lib-admin-ui/menu";
 import { CommerceEnvArraySchema } from "@adobe/aio-commerce-lib-core/commerce";
 
 //#region source/config/schema/admin-ui.ts
+/**
+* Whether the given items have distinct ids once Commerce sanitizes them into resource ids.
+* Catches ids that differ only by case or by a character that sanitizes to `_`. Used by the
+* component fields whose ids are otherwise unconstrained (grid columns, mass actions, view buttons).
+*/
+function hasUniqueSanitizedIds(items) {
+	const ids = items.map((item) => sanitizeSegment(item.id));
+	return new Set(ids).size === ids.length;
+}
 const SANDBOX_PERMISSION_VALUES = [
 	"allow-downloads",
 	"allow-modals",
@@ -55,7 +65,7 @@ const GridColumnSchema = v.strictObject({
 	type: ColumnTypeSchema
 });
 const GridColumnsSchema = v.object({
-	columns: v.pipe(v.array(GridColumnSchema), v.minLength(1, "At least one grid column is required")),
+	columns: v.pipe(v.array(GridColumnSchema), v.minLength(1, "At least one grid column is required"), v.check((items) => hasUniqueSanitizedIds(items), "Grid column ids must be unique after Commerce id sanitization.")),
 	description: nonEmptyStringValueSchema("grid columns description"),
 	label: nonEmptyStringValueSchema("grid columns label"),
 	runtimeAction: nonEmptyStringValueSchema("runtime action")
@@ -120,11 +130,11 @@ const OrderViewButtonSchema = v.variant("type", [v.strictObject({
 	timeout: v.optional(positiveNumberValueSchema("timeout")),
 	type: v.literal("worker")
 })]);
-const MassActionsSchema = v.pipe(v.array(MassActionSchema), v.check((items) => new Set(items.map((item) => item.id)).size === items.length, "Mass action ids must be unique."));
+const MassActionsSchema = v.pipe(v.array(MassActionSchema), v.check((items) => hasUniqueSanitizedIds(items), "Mass action ids must be unique after Commerce id sanitization."));
 const AdminUiOrderSchema = v.object({
 	gridColumns: v.optional(GridColumnsSchema),
 	massActions: v.optional(MassActionsSchema),
-	viewButtons: v.optional(v.pipe(v.array(OrderViewButtonSchema), v.check((items) => new Set(items.map((item) => item.id)).size === items.length, "Order view button ids must be unique.")))
+	viewButtons: v.optional(v.pipe(v.array(OrderViewButtonSchema), v.check((items) => hasUniqueSanitizedIds(items), "Order view button ids must be unique after Commerce id sanitization.")))
 });
 const AdminUiProductSchema = v.object({
 	gridColumns: v.optional(GridColumnsSchema),
@@ -149,26 +159,71 @@ const MenuSchema = v.object({
 	parentMenu: v.optional(v.picklist(COMMERCE_MENUS, "parentMenu must be a known Commerce Admin menu ID")),
 	sandboxPermissions: v.optional(SandboxPermissionsSchema)
 });
+const AclResourceIdSchema = v.pipe(nonEmptyStringValueSchema("acl resource ID"), v.regex(/^[a-z0-9_]+$/, "ACL resource ID may contain only lowercase letters, digits, and \"_\""));
+const ACL_LABEL_MIN_LENGTH = 3;
+const ACL_LABEL_MAX_LENGTH = 50;
+const AclResourceLabelSchema = v.pipe(nonEmptyStringValueSchema("acl resource label"), v.minLength(ACL_LABEL_MIN_LENGTH, `acl resource label must be at least ${ACL_LABEL_MIN_LENGTH} characters`), v.maxLength(ACL_LABEL_MAX_LENGTH, `acl resource label must be at most ${ACL_LABEL_MAX_LENGTH} characters`));
+/** A single custom ACL resource leaf. Leaves never nest — this is what keeps grouping one level deep. */
+const AclResourceLeafSchema = v.strictObject({
+	id: AclResourceIdSchema,
+	label: AclResourceLabelSchema
+});
+/** A top-level acl entry: a leaf, or a group carrying leaf children (exactly one level of nesting). */
+const AclResourceEntrySchema = v.strictObject({
+	children: v.optional(v.pipe(v.array(AclResourceLeafSchema), v.minLength(1, "An ACL resource group must contain at least one child"), v.check((items) => new Set(items.map((i) => i.id)).size === items.length, "Child ACL resource ids must be unique within a group."))),
+	id: AclResourceIdSchema,
+	label: AclResourceLabelSchema
+});
+/**
+* The Commerce ACL resource ids an `acl` config resolves to, relative to the app root: every
+* top-level entry and group node contributes its own id, and every group child contributes the
+* `<group>_<child>` id Commerce builds by joining segments with "_". Comparing these catches ids
+* that look distinct but collapse to the same Commerce resource (e.g. a leaf `reports_export` vs a
+* group `reports` with a child `export`). Ids are already canonical (see {@link AclResourceIdSchema}).
+*/
+function aclResourceIdentities(entries) {
+	const ids = [];
+	for (const entry of entries) {
+		ids.push(entry.id);
+		for (const child of entry.children ?? []) ids.push(`${entry.id}_${child.id}`);
+	}
+	return ids;
+}
+const AdminUiAclSchema = v.pipe(v.array(AclResourceEntrySchema), v.minLength(1, "At least one ACL resource is required when acl is defined"), v.check((items) => new Set(items.map((i) => i.id)).size === items.length, "Top-level ACL resource ids must be unique."), v.check((items) => {
+	const ids = aclResourceIdentities(items);
+	return new Set(ids).size === ids.length;
+}, "Custom ACL resource ids must stay unique after Commerce derivation: a top-level resource id must not equal a group's \"<group>_<child>\" combination."));
 /**
 * Schema for the `adminUi` config section.
-* Supports grid column extensions, mass actions, order view buttons, and menu on `commerce/backend-ui/2`.
+* Supports grid column extensions, mass actions, order view buttons, menu, and custom ACL resources on `commerce/backend-ui/2`.
 */
 const AdminUiSchema = v.object({
+	acl: v.optional(AdminUiAclSchema),
 	customer: v.optional(AdminUiCustomerSchema),
 	menu: v.optional(MenuSchema),
 	order: v.optional(AdminUiOrderSchema),
 	product: v.optional(AdminUiProductSchema)
 });
 /**
-* Check whether the config declares at least one Admin UI component (menu, grid
-* columns, mass actions, or view buttons). A component-less `adminUi` block is
-* treated as absent — it registers nothing.
+* Check whether the config declares an Admin UI component that requires the
+* `commerce/backend-ui/2` extension point — a menu, grid columns, mass actions,
+* or view buttons. Custom ACL resources are deliberately excluded: they reach
+* Commerce through the `extensibility/1` app-config payload, not backend-ui/2,
+* so an acl-only config needs no backend-ui/2 registration.
 */
-function hasAdminUi(config) {
+function hasBackendUiV2Components(config) {
 	const { adminUi } = config;
 	if (!adminUi) return false;
 	return Boolean(adminUi.menu || adminUi.order?.gridColumns || adminUi.order?.massActions?.length || adminUi.order?.viewButtons?.length || adminUi.product?.gridColumns || adminUi.product?.massActions?.length || adminUi.customer?.gridColumns || adminUi.customer?.massActions?.length);
 }
+/**
+* Check whether the config declares at least one Admin UI component (menu, grid
+* columns, mass actions, view buttons, or custom ACL resources). A component-less `adminUi` block is
+* treated as absent — it registers nothing.
+*/
+function hasAdminUi(config) {
+	return hasBackendUiV2Components(config) || Boolean(config.adminUi?.acl?.length);
+}
 
 //#endregion
 //#region source/config/schema/eventing.ts
@@ -472,4 +527,4 @@ function hasWebhooks(config) {
 }
 
 //#endregion
-export { hasCustomInstallationSteps as a, hasEventing as c, hasAdminUi as d, hasCustomInstallation as i, hasExternalEvents as l, hasWebhooks as n, EventingSchema as o, InstallationSchema as r, hasCommerceEvents as s, WebhooksSchema as t, AdminUiSchema as u };
+export { hasCustomInstallationSteps as a, hasEventing as c, hasAdminUi as d, hasBackendUiV2Components as f, hasCustomInstallation as i, hasExternalEvents as l, hasWebhooks as n, EventingSchema as o, InstallationSchema as r, hasCommerceEvents as s, WebhooksSchema as t, AdminUiSchema as u };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adobe/aio-commerce-lib-app",
-  "version": "2.0.0-beta-20260820174436",
+  "version": "2.0.0",
   "private": false,
   "description": "App configuration management library for Adobe Commerce applications",
   "keywords": [
@@ -92,6 +92,13 @@
     "README.md"
   ],
   "dependencies": {
+    "@adobe/aio-commerce-lib-admin-ui": "1.1.0",
+    "@adobe/aio-commerce-lib-api": "1.4.0",
+    "@adobe/aio-commerce-lib-auth": "1.1.3",
+    "@adobe/aio-commerce-lib-config": "1.8.0",
+    "@adobe/aio-commerce-lib-core": "1.2.0",
+    "@adobe/aio-commerce-lib-events": "1.4.0",
+    "@adobe/aio-commerce-lib-webhooks": "1.2.2",
     "@adobe/aio-lib-core-config": "^5.0.1",
     "@adobe/aio-lib-core-logging": "^3.0.2",
     "@adobe/aio-lib-files": "^4.1.2",
@@ -113,31 +120,24 @@
     "semver": "^7.8.5",
     "type-fest": "^5.0.0",
     "valibot": "^1.1.0",
-    "yaml": "^2.8.1",
-    "@adobe/aio-commerce-lib-admin-ui": "1.1.0-beta-20260820174436",
-    "@adobe/aio-commerce-lib-api": "1.3.1",
-    "@adobe/aio-commerce-lib-auth": "1.1.3",
-    "@adobe/aio-commerce-lib-config": "1.6.1",
-    "@adobe/aio-commerce-lib-core": "1.2.0",
-    "@adobe/aio-commerce-lib-events": "1.4.0-beta-20260820174436",
-    "@adobe/aio-commerce-lib-webhooks": "1.2.1"
+    "yaml": "^2.8.1"
   },
   "devDependencies": {
     "@adobe/aio-lib-files": "^4.1.2",
-    "@pnpm/lockfile.fs": "^1100.1.7",
-    "@react-spectrum/s2": "^1.5.1",
-    "@types/react": "^19.2.17",
-    "msw": "^2.11.1",
-    "openapi-format": "1.33.6",
-    "react": "^19.2.7",
-    "typescript": "^6.0.0",
     "@aio-commerce-sdk/common-utils": "0.2.6",
     "@aio-commerce-sdk/config-tsdown": "1.0.1",
-    "@aio-commerce-sdk/config-typescript": "1.0.0",
     "@aio-commerce-sdk/config-typedoc": "1.0.0",
+    "@aio-commerce-sdk/config-typescript": "1.0.0",
     "@aio-commerce-sdk/config-vitest": "1.0.0",
     "@aio-commerce-sdk/scripting-utils": "0.3.5",
-    "@aio-commerce-sdk/scripts": "0.1.1"
+    "@aio-commerce-sdk/scripts": "0.1.1",
+    "@pnpm/lockfile.fs": "^1100.1.7",
+    "@react-spectrum/s2": "^1.5.1",
+    "@types/react": "^19.2.17",
+    "msw": "^2.11.1",
+    "openapi-format": "1.33.7",
+    "react": "^19.2.7",
+    "typescript": "^6.0.0"
   },
   "peerDependencies": {
     "@tsconfig/bases": "^1.0.26",
@@ -187,6 +187,6 @@
     "test:watch": "vitest --coverage",
     "typecheck": "tsc --noEmit && pnpm run typecheck:templates && echo '✅ No type errors found.'",
     "typecheck:templates": "tsc -p source/commands/generate/actions/templates/admin-ui/tsconfig.json",
-    "version": "pnpx tsx scripts/sync-openapi-version.ts"
+    "version": "pnpm exec tsx scripts/sync-openapi-version.ts && pnpm run format:openapi"
   }
 }