@adobe/aio-commerce-lib-app 2.1.0-beta-20260930143021 → 2.1.0-beta-20261001090733

package/CHANGELOG.md

@@ -1,6 +1,6 @@
 # @adobe/aio-commerce-lib-app
 
-## 2.1.0-beta-20260930143021
+## 2.1.0-beta-20261001090733
 
 ### Minor Changes
 
@@ -8,6 +8,8 @@
 
 - [#702](https://github.com/adobe/aio-commerce-sdk/pull/702) [`e6604ab`](https://github.com/adobe/aio-commerce-sdk/commit/e6604ab023e5f929e6e0279a36e06ec4c17f0906) Thanks [@oshmyheliuk](https://github.com/oshmyheliuk)! - The association action now returns the app's IMS client ID in its response.
 
+- [#712](https://github.com/adobe/aio-commerce-sdk/pull/712) [`d78221e`](https://github.com/adobe/aio-commerce-sdk/commit/d78221e01894d2209b7864aca6a5fbfab93c7192) Thanks [@obarcelonap](https://github.com/obarcelonap)! - Generated `association` and `installation` actions now receive OAuth Server-to-Server credentials through the `include-ims-credentials` annotation instead of `AIO_COMMERCE_AUTH_IMS_*` inputs. Re-run `generate actions` to add the annotation and drop the legacy inputs from existing projects. The `AIO_COMMERCE_AUTH_IMS_*` fields of `LifecycleContext["params"]` are deprecated; custom installation scripts should use `resolveImsAuthParams(context.params)` from `@adobe/aio-commerce-lib-auth` instead.
+
 - [#699](https://github.com/adobe/aio-commerce-sdk/pull/699) [`53f1f8b`](https://github.com/adobe/aio-commerce-sdk/commit/53f1f8be4428862015294f1edc2816972e501a9e) Thanks [@mariam21arauj](https://github.com/mariam21arauj)! - Add a `newsletter` entity to the v2 `adminUi` config so apps can declare Newsletter Subscriber grid columns and mass actions on `commerce/backend-ui/2`.
 
 ### Patch Changes
@@ -21,13 +23,13 @@
 - [#688](https://github.com/adobe/aio-commerce-sdk/pull/688) [`b27c143`](https://github.com/adobe/aio-commerce-sdk/commit/b27c143b3d4c62de5a43a7184c55942b50e34618) Thanks [@gpl-php](https://github.com/gpl-php)! - Create Commerce event subscriptions sequentially to prevent concurrent configuration writes from dropping events during App Management installation.
 
 - [#689](https://github.com/adobe/aio-commerce-sdk/pull/689) [`194db8d`](https://github.com/adobe/aio-commerce-sdk/commit/194db8d382edf49f7976ea9aeffad54acb8e3da1) Thanks [@obarcelonap](https://github.com/obarcelonap)! - Commerce Eventing setup now provides a default technical account when your app authenticates with OAuth Server-to-Server credentials that don't have one, such as those provided via the `include-ims-credentials` annotation, so Commerce can still consume the workspace configuration. The pre-build hook also warns that manually wired `AIO_COMMERCE_AUTH_IMS_*` credentials are deprecated.
-- Updated dependencies [[`264539a`](https://github.com/adobe/aio-commerce-sdk/commit/264539a13371b11b637eb01fd1c0aa185f4349cc), [`cda4f20`](https://github.com/adobe/aio-commerce-sdk/commit/cda4f206c9cd1877046f5a2196fa60478d35dfb9), [`194db8d`](https://github.com/adobe/aio-commerce-sdk/commit/194db8d382edf49f7976ea9aeffad54acb8e3da1), [`53f1f8b`](https://github.com/adobe/aio-commerce-sdk/commit/53f1f8be4428862015294f1edc2816972e501a9e)]:
-  - @adobe/aio-commerce-lib-admin-ui@1.2.0-beta-20260930143021
-  - @adobe/aio-commerce-lib-config@1.8.1-beta-20260930143021
-  - @adobe/aio-commerce-lib-auth@1.2.0-beta-20260930143021
-  - @adobe/aio-commerce-lib-api@1.4.1-beta-20260930143021
-  - @adobe/aio-commerce-lib-events@1.4.1-beta-20260930143021
-  - @adobe/aio-commerce-lib-webhooks@1.2.3-beta-20260930143021
+- Updated dependencies [[`264539a`](https://github.com/adobe/aio-commerce-sdk/commit/264539a13371b11b637eb01fd1c0aa185f4349cc), [`cda4f20`](https://github.com/adobe/aio-commerce-sdk/commit/cda4f206c9cd1877046f5a2196fa60478d35dfb9), [`d78221e`](https://github.com/adobe/aio-commerce-sdk/commit/d78221e01894d2209b7864aca6a5fbfab93c7192), [`194db8d`](https://github.com/adobe/aio-commerce-sdk/commit/194db8d382edf49f7976ea9aeffad54acb8e3da1), [`53f1f8b`](https://github.com/adobe/aio-commerce-sdk/commit/53f1f8be4428862015294f1edc2816972e501a9e)]:
+  - @adobe/aio-commerce-lib-admin-ui@1.2.0-beta-20261001090733
+  - @adobe/aio-commerce-lib-config@1.8.1-beta-20261001090733
+  - @adobe/aio-commerce-lib-api@1.4.1-beta-20261001090733
+  - @adobe/aio-commerce-lib-auth@1.2.0-beta-20261001090733
+  - @adobe/aio-commerce-lib-events@1.4.1-beta-20261001090733
+  - @adobe/aio-commerce-lib-webhooks@1.2.3-beta-20261001090733
 
 ## 2.0.0
 

package/dist/cjs/actions/app-config/index.cjs

@@ -80,7 +80,7 @@ function pruneUnusedTags(spec) {
 * @param domains - The active config domains.
 */
 function getOpenApiCacheKey(domains) {
-	const input = `2.1.0-beta-20260930143021:${[...domains].sort().join(",")}:3.1.0`;
+	const input = `2.1.0-beta-20261001090733:${[...domains].sort().join(",")}:3.1.0`;
 	return (0, crypto.createHash)("sha256").update(input).digest("hex").slice(0, 8);
 }
 /** Returns the server URL to be set in the OpenAPI spec, based on the current namespace. */

package/dist/cjs/actions/installation/index.cjs

@@ -17,8 +17,8 @@ const require_rolldown_runtime = require('../../rolldown-runtime-CDQd2xEI.cjs');
 const require_repository = require('../../repository-CbceYZqc.cjs');
 const require_schemas = require('../../schemas-3e49M8zz.cjs');
 const require_validate = require('../../validate-DvewC1jV.cjs');
-const require_common = require('../../common-BnycrLCr.cjs');
-const require_management = require('../../management-CH-HSD9M.cjs');
+const require_common = require('../../common-BJqizndF.cjs');
+const require_management = require('../../management-Dg4Mtag5.cjs');
 const require_router = require('../../router-CxDTb6r1.cjs');
 let valibot = require("valibot");
 valibot = require_rolldown_runtime.__toESM(valibot, 1);

package/dist/cjs/actions/installation/index.d.cts

@@ -14,7 +14,7 @@
 
 import "../../index-DWEigxhy.cjs";
 import { n as CommerceAppConfig, r as CommerceAppConfigOutputModel } from "../../app-f9arYxnr.cjs";
-import { J as LifecycleContext } from "../../index-CF8b5k54.cjs";
+import { J as LifecycleContext } from "../../index-DA6KSlYt.cjs";
 import { RuntimeActionParams } from "@adobe/aio-commerce-lib-core/params";
 import "@adobe/aio-commerce-lib-core/responses";
 //#region source/actions/installation/common.d.ts

package/dist/cjs/commands/index.cjs

@@ -18,7 +18,7 @@ const require_error = require('../error-D-N0PKSl.cjs');
 const require_index_node = require('../index.node-Blr0OCOE.cjs');
 const require_webhooks = require('../webhooks-zgRbVnDA.cjs');
 const require_validate = require('../validate-DvewC1jV.cjs');
-const require_common = require('../common-BnycrLCr.cjs');
+const require_common = require('../common-BJqizndF.cjs');
 const require_logging = require('../logging-Br3xfBNe.cjs');
 let _adobe_aio_commerce_lib_config = require("@adobe/aio-commerce-lib-config");
 let _adobe_aio_commerce_lib_core_error = require("@adobe/aio-commerce-lib-core/error");
@@ -107,17 +107,6 @@ const __filename$1 = (0, url.fileURLToPath)(require("url").pathToFileURL(__filen
 const __dirname$1 = (0, path.dirname)(__filename$1);
 /** The path to the action templates directory, sibling to this file. */
 const TEMPLATES_DIR = (0, path.join)(__dirname$1, "templates");
-/** The list of Commerce variables that are required for the runtime actions. */
-const COMMERCE_VARIABLES = [
-	"AIO_COMMERCE_AUTH_IMS_CLIENT_ID",
-	"AIO_COMMERCE_AUTH_IMS_CLIENT_SECRETS",
-	"AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_ID",
-	"AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_EMAIL",
-	"AIO_COMMERCE_AUTH_IMS_ORG_ID",
-	"AIO_COMMERCE_AUTH_IMS_SCOPES"
-];
-/** The inputs for the generated runtime actions. */
-const COMMERCE_ACTION_INPUTS = Object.fromEntries(COMMERCE_VARIABLES.map((variable) => [variable, `$${variable}`]));
 const CUSTOM_IMPORTS_PLACEHOLDER = "// {{CUSTOM_SCRIPTS_IMPORTS}}";
 const CUSTOM_SCRIPTS_MAP_PLACEHOLDER = "// {{CUSTOM_SCRIPTS_MAP}}";
 const CUSTOM_SCRIPTS_LOADER_PLACEHOLDER = "// {{CUSTOM_SCRIPTS_LOADER}}";
@@ -378,7 +367,7 @@ const LEADING_DOT_SLASH_PATTERN$1 = /^\.\//u;
 const WEB_SOURCE_DEPENDENCIES = [
 	{
 		name: "@adobe/aio-commerce-lib-admin-ui",
-		version: "^1.2.0-beta-20260930143021"
+		version: "^1.2.0-beta-20261001090733"
 	},
 	{
 		name: "react",
@@ -625,7 +614,8 @@ function createActionDefinition(actionName, config = {}, options = {}) {
 		...options,
 		annotations: {
 			final: true,
-			"require-adobe-auth": true
+			"require-adobe-auth": true,
+			...config.requiresImsCredentials && { "include-ims-credentials": true }
 		},
 		function: `${GENERATED_ACTIONS_PATH}/${actionName}.js`,
 		runtime: "nodejs:24",
@@ -638,12 +628,6 @@ function createActionDefinition(actionName, config = {}, options = {}) {
 	return def;
 }
 /**
-* Inputs shared by the runtime actions that talk to the Commerce App Management
-* Service. `LOG_LEVEL` is declared once at the package level, so it's omitted
-* here to avoid duplicating it on every action.
-*/
-const RUNTIME_ACTION_INPUTS = COMMERCE_ACTION_INPUTS;
-/**
 * Gets the runtime actions to be generated from the ext.config.yaml configuration.
 * @param extConfig - The ext.config.yaml configuration.
 * @param dir - Directory containing the runtime action templates.
@@ -674,7 +658,7 @@ function buildAppManagementExtConfig(appConfig) {
 		runtimeManifest: { packages: { [PACKAGE_NAME]: {
 			actions: {
 				"app-config": createActionDefinition("app-config"),
-				association: createActionDefinition("association", {}, { inputs: RUNTIME_ACTION_INPUTS })
+				association: createActionDefinition("association", { requiresImsCredentials: true })
 			},
 			inputs: { LOG_LEVEL: "$LOG_LEVEL" },
 			license: "Apache-2.0"
@@ -685,10 +669,10 @@ function buildAppManagementExtConfig(appConfig) {
 		impl: `${PACKAGE_NAME}/installation`,
 		type: "action"
 	});
-	extConfig.runtimeManifest.packages[PACKAGE_NAME].actions.installation = createActionDefinition("installation", { requiresEncryptionKey: hasPasswordFieldsInSchema }, {
-		inputs: RUNTIME_ACTION_INPUTS,
-		limits: { timeout: 6e5 }
-	});
+	extConfig.runtimeManifest.packages[PACKAGE_NAME].actions.installation = createActionDefinition("installation", {
+		requiresEncryptionKey: hasPasswordFieldsInSchema,
+		requiresImsCredentials: true
+	}, { limits: { timeout: 6e5 } });
 	return extConfig;
 }
 /** Builds the ext.config.yaml configuration for the business configuration extension. */
@@ -1144,6 +1128,39 @@ async function readExtConfig(extensionPointId, projectRoot) {
 		].join("\n"), { cause: error });
 	}
 }
+/** Inputs superseded by the `include-ims-credentials` action annotation. */
+const LEGACY_IMS_CREDENTIAL_INPUTS = [
+	"AIO_COMMERCE_AUTH_IMS_CLIENT_ID",
+	"AIO_COMMERCE_AUTH_IMS_CLIENT_SECRETS",
+	"AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_ID",
+	"AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_EMAIL",
+	"AIO_COMMERCE_AUTH_IMS_ORG_ID",
+	"AIO_COMMERCE_AUTH_IMS_SCOPES"
+];
+/**
+* Removes the legacy `AIO_COMMERCE_AUTH_IMS_*` inputs from the existing
+* `ext.config.yaml` document for every action annotated with `include-ims-credentials`.
+* @param extConfigDoc - The existing `ext.config.yaml` document, mutated in place.
+* @param extConfig - The generated extension config.
+*/
+function removeLegacyImsInputs(extConfigDoc, extConfig) {
+	const packages = Object.entries(extConfig.runtimeManifest?.packages ?? {});
+	for (const [packageName, { actions = {} }] of packages) for (const [actionName, action] of Object.entries(actions)) {
+		if (action.annotations?.["include-ims-credentials"] !== true) continue;
+		const inputsPath = [
+			"runtimeManifest",
+			"packages",
+			packageName,
+			"actions",
+			actionName,
+			"inputs"
+		];
+		for (const input of LEGACY_IMS_CREDENTIAL_INPUTS) {
+			const inputPath = [...inputsPath, input];
+			if (extConfigDoc.hasIn(inputPath)) extConfigDoc.deleteIn(inputPath);
+		}
+	}
+}
 /**
 * Updates an extension point's ext.config.yaml with generated configuration.
 * @param appConfig - App configuration used to build the extension config.
@@ -1167,6 +1184,7 @@ async function updateExtConfig(appConfig, extensionPointId, projectRoot) {
 			break;
 		default: throw new Error(`Unsupported extension point: ${extensionPointId}`);
 	}
+	removeLegacyImsInputs(extConfigDoc, extConfig);
 	await createOrUpdateExtConfig(extConfigPath, extConfig, extConfigDoc);
 	return extConfig;
 }
@@ -2092,7 +2110,7 @@ async function ensureAppConfig(domains, config, projectRoot) {
 */
 function installDependencies(packageManager, domains, projectRoot) {
 	const packages = [];
-	if (domains.has("businessConfig.schema")) packages.push(`@adobe/aio-commerce-lib-config@^1.8.1-beta-20260930143021`);
+	if (domains.has("businessConfig.schema")) packages.push(`@adobe/aio-commerce-lib-config@^1.8.1-beta-20261001090733`);
 	if (packages.length === 0) {
 		consola.consola.info("No additional domain dependencies to install.");
 		return;
@@ -2128,7 +2146,7 @@ async function ensureInstallYaml(domains, config, projectRoot) {
 
 //#endregion
 //#region source/commands/init/main.ts
-const REQUIRED_DEPENDENCIES = ["@adobe/aio-commerce-sdk", `@adobe/aio-commerce-lib-app@2.1.0-beta-20260930143021`];
+const REQUIRED_DEPENDENCIES = ["@adobe/aio-commerce-sdk", `@adobe/aio-commerce-lib-app@2.1.0-beta-20261001090733`];
 /**
 * Initializes a Commerce App project.
 * @param flags - Non-interactive initialization answers.

package/dist/cjs/{common-BnycrLCr.cjs → common-BJqizndF.cjs}

@@ -12,8 +12,9 @@
  * governing permissions and limitations under the License.
  */
 
-const require_management = require('./management-CH-HSD9M.cjs');
+const require_management = require('./management-Dg4Mtag5.cjs');
 let _adobe_aio_lib_state = require("@adobe/aio-lib-state");
+let _adobe_aio_commerce_lib_auth = require("@adobe/aio-commerce-lib-auth");
 let _adobe_aio_commerce_lib_core_headers = require("@adobe/aio-commerce-lib-core/headers");
 let _adobe_aio_commerce_lib_core_responses = require("@adobe/aio-commerce-lib-core/responses");
 let _adobe_aio_lib_files = require("@adobe/aio-lib-files");
@@ -415,6 +416,25 @@ function buildWorkflowParams(body, rawParams) {
 	};
 }
 /**
+* Returns the deprecated `AIO_COMMERCE_AUTH_IMS_*` params resolved from the
+* given runtime params, or an empty object if no IMS credentials can be resolved.
+*/
+function getLegacyImsParams(params) {
+	try {
+		const { clientId, clientSecrets, imsOrgId, scopes, technicalAccountEmail, technicalAccountId } = (0, _adobe_aio_commerce_lib_auth.resolveImsAuthParams)(params);
+		return Object.fromEntries(Object.entries({
+			AIO_COMMERCE_AUTH_IMS_CLIENT_ID: clientId,
+			AIO_COMMERCE_AUTH_IMS_CLIENT_SECRETS: clientSecrets,
+			AIO_COMMERCE_AUTH_IMS_ORG_ID: imsOrgId,
+			AIO_COMMERCE_AUTH_IMS_SCOPES: scopes,
+			AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_EMAIL: technicalAccountEmail,
+			AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_ID: technicalAccountId
+		}).filter(([, value]) => value !== void 0));
+	} catch {
+		return {};
+	}
+}
+/**
 * Builds a LifecycleContext from merged workflow params.
 * Shared by installation, uninstallation, and upgrade execution.
 */
@@ -423,7 +443,10 @@ function buildLifecycleContext(params, appConfig, logFn) {
 		appData: params.appData,
 		customScripts: params.customScriptsLoader?.(appConfig, logFn) ?? {},
 		logger: logFn,
-		params
+		params: {
+			...getLegacyImsParams(params),
+			...params
+		}
 	};
 }
 /**

package/dist/cjs/{index-CF8b5k54.d.cts → index-DA6KSlYt.d.cts}

@@ -144,14 +144,26 @@ type ValidationIssue = {
 type LifecycleContext = {
   /** The credentials of the app being managed. */
   appData: AppData;
-  /** The raw action parameters from the App Builder runtime action. */
+  /**
+   * The raw action parameters from the App Builder runtime action.
+   *
+   * The `AIO_COMMERCE_AUTH_IMS_*` fields are deprecated: generated actions receive
+   * OAuth Server-to-Server credentials via the `include-ims-credentials` annotation.
+   * Use `resolveImsAuthParams(context.params)` from `@adobe/aio-commerce-lib-auth` instead.
+   */
   params: RuntimeActionParams & {
-    AIO_COMMERCE_AUTH_IMS_CLIENT_ID: string;
-    AIO_COMMERCE_AUTH_IMS_CLIENT_SECRETS: string | string[];
-    AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_ID: string;
-    AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_EMAIL: string;
-    AIO_COMMERCE_AUTH_IMS_ORG_ID: string;
-    AIO_COMMERCE_AUTH_IMS_SCOPES: string | string[];
+    /** @deprecated Use `resolveImsAuthParams(context.params).clientId` instead. */
+    AIO_COMMERCE_AUTH_IMS_CLIENT_ID?: string;
+    /** @deprecated Use `resolveImsAuthParams(context.params).clientSecrets` instead. */
+    AIO_COMMERCE_AUTH_IMS_CLIENT_SECRETS?: string | string[];
+    /** @deprecated Use `resolveImsAuthParams(context.params).technicalAccountId` instead. */
+    AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_ID?: string;
+    /** @deprecated Use `resolveImsAuthParams(context.params).technicalAccountEmail` instead. */
+    AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_EMAIL?: string;
+    /** @deprecated Use `resolveImsAuthParams(context.params).imsOrgId` instead. */
+    AIO_COMMERCE_AUTH_IMS_ORG_ID?: string;
+    /** @deprecated Use `resolveImsAuthParams(context.params).scopes` instead. */
+    AIO_COMMERCE_AUTH_IMS_SCOPES?: string | string[];
   };
   /** Logger instance for workflow logging. */
   logger: ReturnType<typeof AioLogger>;

package/dist/cjs/management/index.cjs

@@ -13,7 +13,7 @@
  */
 
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_management = require('../management-CH-HSD9M.cjs');
+const require_management = require('../management-Dg4Mtag5.cjs');
 
 exports.createInitialInstallationState = require_management.createInitialInstallationState;
 exports.createInitialUninstallationState = require_management.createInitialUninstallationState;

package/dist/cjs/management/index.d.cts

@@ -12,5 +12,5 @@
  * governing permissions and limitations under the License.
  */
 
-import { $ as ValidationContext, A as createRetryState, B as WorkflowHooks, C as defineCustomInstallationStep, D as ValidationSummary, E as ValidationResult, F as executePlannedWorkflow, G as InferStepOutput, H as BranchStep, I as StepEvent, J as LifecycleContext, K as LeafStep, L as StepFailedEvent, M as executeWorkflow, N as planWorkflow, O as validateStepTree, P as createInitialPlanExecutionState, Q as StepMetaInfo, R as StepStartedEvent, S as CustomInstallationStepHandler, T as ValidateStepTreeOptions, U as BranchStepOptions, V as AnyStep, W as ExecutionContext, X as StepContextFactory, Y as Step, Z as StepMeta, _ as createInitialUninstallationState, _t as isFailedState, a as InstallationError, at as isBranchStep, b as runValidation, c as InstallationStatus, ct as FailedWorkflowState, d as CreateInitialUninstallationStateOptions, dt as SucceededWorkflowState, et as ValidationExecutionContext, f as InstallationHooks, ft as WorkflowData, g as createInitialInstallationState, gt as isCompletedState, h as RunValidationOptions, ht as WorkflowStateMetadata, i as InstallationData, it as defineLeafStep, j as executeUninstallWorkflow, k as createInitialState, l as SucceededInstallationState, lt as InProgressWorkflowState, m as RunUninstallationOptions, mt as WorkflowRunState, n as InProgressInstallationState, nt as ValidationIssueSeverity, o as InstallationRetryMetadata, ot as isLeafStep, p as RunInstallationOptions, pt as WorkflowError, q as LeafStepOptions, r as InstallationContext, rt as defineBranchStep, s as InstallationState, st as ExecutionStatus, t as FailedInstallationState, tt as ValidationIssue, u as CreateInitialInstallationStateOptions, ut as StepStatus, v as runInstallation, vt as isInProgressState, w as StepValidationResult, x as CustomInstallationStepDefinition, y as runUninstallation, yt as isSucceededState, z as StepSucceededEvent } from "../index-CF8b5k54.cjs";
+import { $ as ValidationContext, A as createRetryState, B as WorkflowHooks, C as defineCustomInstallationStep, D as ValidationSummary, E as ValidationResult, F as executePlannedWorkflow, G as InferStepOutput, H as BranchStep, I as StepEvent, J as LifecycleContext, K as LeafStep, L as StepFailedEvent, M as executeWorkflow, N as planWorkflow, O as validateStepTree, P as createInitialPlanExecutionState, Q as StepMetaInfo, R as StepStartedEvent, S as CustomInstallationStepHandler, T as ValidateStepTreeOptions, U as BranchStepOptions, V as AnyStep, W as ExecutionContext, X as StepContextFactory, Y as Step, Z as StepMeta, _ as createInitialUninstallationState, _t as isFailedState, a as InstallationError, at as isBranchStep, b as runValidation, c as InstallationStatus, ct as FailedWorkflowState, d as CreateInitialUninstallationStateOptions, dt as SucceededWorkflowState, et as ValidationExecutionContext, f as InstallationHooks, ft as WorkflowData, g as createInitialInstallationState, gt as isCompletedState, h as RunValidationOptions, ht as WorkflowStateMetadata, i as InstallationData, it as defineLeafStep, j as executeUninstallWorkflow, k as createInitialState, l as SucceededInstallationState, lt as InProgressWorkflowState, m as RunUninstallationOptions, mt as WorkflowRunState, n as InProgressInstallationState, nt as ValidationIssueSeverity, o as InstallationRetryMetadata, ot as isLeafStep, p as RunInstallationOptions, pt as WorkflowError, q as LeafStepOptions, r as InstallationContext, rt as defineBranchStep, s as InstallationState, st as ExecutionStatus, t as FailedInstallationState, tt as ValidationIssue, u as CreateInitialInstallationStateOptions, ut as StepStatus, v as runInstallation, vt as isInProgressState, w as StepValidationResult, x as CustomInstallationStepDefinition, y as runUninstallation, yt as isSucceededState, z as StepSucceededEvent } from "../index-DA6KSlYt.cjs";
 export { type AnyStep, type BranchStep, type BranchStepOptions, type CreateInitialInstallationStateOptions, type CreateInitialUninstallationStateOptions, type CustomInstallationStepDefinition, type CustomInstallationStepHandler, type ExecutionContext, type ExecutionStatus, type FailedInstallationState, type FailedWorkflowState, type InProgressInstallationState, type InProgressWorkflowState, type InferStepOutput, type InstallationContext, type InstallationData, type InstallationError, type InstallationHooks, type InstallationRetryMetadata, type InstallationState, type InstallationStatus, type LeafStep, type LeafStepOptions, type LifecycleContext, type RunInstallationOptions, type RunUninstallationOptions, type RunValidationOptions, type Step, type StepContextFactory, type StepEvent, type StepFailedEvent, type StepMeta, type StepMetaInfo, type StepStartedEvent, type StepStatus, type StepSucceededEvent, type StepValidationResult, type SucceededInstallationState, type SucceededWorkflowState, type ValidateStepTreeOptions, type ValidationContext, type ValidationExecutionContext, type ValidationIssue, type ValidationIssueSeverity, type ValidationResult, type ValidationSummary, type WorkflowData, type WorkflowError, type WorkflowHooks, type WorkflowRunState, type WorkflowStateMetadata, createInitialInstallationState, type createInitialPlanExecutionState, type createInitialState, createInitialUninstallationState, type createRetryState, type defineBranchStep, defineCustomInstallationStep, type defineLeafStep, type executePlannedWorkflow, type executeUninstallWorkflow, type executeWorkflow, type isBranchStep, isCompletedState, isFailedState, isInProgressState, type isLeafStep, isSucceededState, type planWorkflow, runInstallation, runUninstallation, runValidation, type validateStepTree };

package/dist/cjs/{management-CH-HSD9M.cjs → management-Dg4Mtag5.cjs}

@@ -1328,7 +1328,7 @@ async function putRegistration(providerData, type, runtimeAction, events, metada
 	const registration = findDeployedRegistration(providerData, runtimeAction, existingData, context);
 	const name = require_utils.getRegistrationName(providerData, runtimeAction);
 	const payload = {
-		clientId: params.AIO_COMMERCE_AUTH_IMS_CLIENT_ID,
+		clientId: (0, _adobe_aio_commerce_lib_auth.resolveImsAuthParams)(params).clientId,
 		consumerOrgId: appData.consumerOrgId,
 		deliveryType: "webhook",
 		description: require_utils.getRegistrationDescription(providerData, events, runtimeAction),
@@ -1478,7 +1478,7 @@ async function reconcileChangedSubscriptions(providerId, targetEvents, baselineE
 }
 /** Finds a deployed registration by its current or legacy name. */
 function findDeployedRegistration(providerData, runtimeAction, existingData, context) {
-	const clientId = context.params.AIO_COMMERCE_AUTH_IMS_CLIENT_ID;
+	const { clientId } = (0, _adobe_aio_commerce_lib_auth.resolveImsAuthParams)(context.params);
 	return require_utils.findExistingRegistrations(existingData.registrations, clientId, require_utils.getRegistrationName(providerData, runtimeAction)) ?? require_utils.findExistingRegistrations(existingData.registrations, clientId, require_utils.getLegacyRegistrationName(providerData, runtimeAction));
 }
 
@@ -1588,7 +1588,7 @@ async function createIoEventRegistration(params) {
 	const description = require_utils.getRegistrationDescription(provider, events, runtimeAction);
 	const payload = {
 		...appCredentials,
-		clientId: runtimeParams.AIO_COMMERCE_AUTH_IMS_CLIENT_ID,
+		clientId: (0, _adobe_aio_commerce_lib_auth.resolveImsAuthParams)(runtimeParams).clientId,
 		deliveryType: "webhook",
 		description,
 		enabled: true,
@@ -1613,7 +1613,7 @@ async function createOrGetIoEventRegistration(params, registrations) {
 	const { context, provider, runtimeAction } = params;
 	const { logger, params: runtimeParams } = context;
 	const name = require_utils.getRegistrationName(provider, runtimeAction);
-	const existing = require_utils.findExistingRegistrations(registrations, runtimeParams.AIO_COMMERCE_AUTH_IMS_CLIENT_ID, name);
+	const existing = require_utils.findExistingRegistrations(registrations, (0, _adobe_aio_commerce_lib_auth.resolveImsAuthParams)(runtimeParams).clientId, name);
 	if (existing) {
 		logger.info(`Registration "${name}" already exists for provider "${provider.label}" with ID '${existing.id}', skipping creation.`);
 		return existing;
@@ -1824,7 +1824,8 @@ async function deleteIoEventRegistrations(providerData, provider, events, regist
 	const actionEventsMap = require_utils.groupEventsByRuntimeActions(events);
 	const runtimeActions = Array.from(actionEventsMap.keys());
 	const registrationNames = /* @__PURE__ */ new Set([...runtimeActions.map((runtimeAction) => require_utils.getRegistrationName(providerData, runtimeAction)), ...runtimeActions.map((runtimeAction) => require_utils.getLegacyRegistrationName(providerData, runtimeAction))]);
-	const providerRegistrations = registrations.filter((reg) => reg.client_id === runtimeParams.AIO_COMMERCE_AUTH_IMS_CLIENT_ID && registrationNames.has(reg.name));
+	const { clientId } = (0, _adobe_aio_commerce_lib_auth.resolveImsAuthParams)(runtimeParams);
+	const providerRegistrations = registrations.filter((reg) => reg.client_id === clientId && registrationNames.has(reg.name));
 	if (providerRegistrations.length === 0) {
 		logger.info(`No I/O Events registrations found for provider "${provider.label}" (instance ID: "${providerData.instance_id}").`);
 		return;

package/dist/es/actions/app-config/index.mjs

@@ -77,7 +77,7 @@ function pruneUnusedTags(spec) {
 * @param domains - The active config domains.
 */
 function getOpenApiCacheKey(domains) {
-	const input = `2.1.0-beta-20260930143021:${[...domains].sort().join(",")}:3.1.0`;
+	const input = `2.1.0-beta-20261001090733:${[...domains].sort().join(",")}:3.1.0`;
 	return createHash("sha256").update(input).digest("hex").slice(0, 8);
 }
 /** Returns the server URL to be set in the OpenAPI spec, based on the current namespace. */

package/dist/es/actions/installation/index.d.mts

@@ -14,7 +14,7 @@
 
 import "../../index-CgsSXApi.mjs";
 import { n as CommerceAppConfig, r as CommerceAppConfigOutputModel } from "../../app-f9arYxnr.mjs";
-import { J as LifecycleContext } from "../../index-FwlXfpWU.mjs";
+import { J as LifecycleContext } from "../../index-DsrWoPFr.mjs";
 import "@adobe/aio-commerce-lib-core/responses";
 import { RuntimeActionParams } from "@adobe/aio-commerce-lib-core/params";
 //#region source/actions/installation/common.d.ts

package/dist/es/actions/installation/index.mjs

@@ -15,8 +15,8 @@
 import { n as getAssociationData } from "../../repository-BGmy0YeZ.mjs";
 import { r as nonEmptyStringValueSchema } from "../../schemas-hRovglBF.mjs";
 import { r as validateRecordedCommerceAppConfig, t as validateCommerceAppConfig } from "../../validate-Dtz14mqi.mjs";
-import { _ as CURRENT_STATE_KEY, a as buildWorkflowParams, b as requireCurrentAttempt, c as createLifecyclePersistence, d as getExecutedCustomInstallationSteps, f as getStorageKey, g as getCurrentLifecycleBaseline, h as createOrchestrationStateStore, i as buildLifecycleContext, l as createLifecycleRuntime, m as readStateFromStore, o as createInstallationHooks, p as isPostAppDeployInvocation, s as createInstallationStore, t as DEFAULT_ACTION_NAME, u as createUninstallationStore, v as normalizeExpiredAttempt, x as requireState, y as readOrInitializeState } from "../../common-BxivnrmA.mjs";
-import { C as callHook, S as isLeafStep, _ as isStepConfigured, a as runValidation, b as setAtPath, d as isSucceededState, f as createRetryState, g as getAtPath, h as createWorkflowError, i as runUninstallation, l as isFailedState, m as createSucceededState, n as createInitialUninstallationState, p as createFailedState, r as runInstallation, t as createInitialInstallationState, u as isInProgressState, v as nowIsoString, x as isBranchStep, y as pathsEqual } from "../../management-CNf5hM8-.mjs";
+import { _ as CURRENT_STATE_KEY, a as buildWorkflowParams, b as requireCurrentAttempt, c as createLifecyclePersistence, d as getExecutedCustomInstallationSteps, f as getStorageKey, g as getCurrentLifecycleBaseline, h as createOrchestrationStateStore, i as buildLifecycleContext, l as createLifecycleRuntime, m as readStateFromStore, o as createInstallationHooks, p as isPostAppDeployInvocation, s as createInstallationStore, t as DEFAULT_ACTION_NAME, u as createUninstallationStore, v as normalizeExpiredAttempt, x as requireState, y as readOrInitializeState } from "../../common-D2pT4aXg.mjs";
+import { C as callHook, S as isLeafStep, _ as isStepConfigured, a as runValidation, b as setAtPath, d as isSucceededState, f as createRetryState, g as getAtPath, h as createWorkflowError, i as runUninstallation, l as isFailedState, m as createSucceededState, n as createInitialUninstallationState, p as createFailedState, r as runInstallation, t as createInitialInstallationState, u as isInProgressState, v as nowIsoString, x as isBranchStep, y as pathsEqual } from "../../management-CQP_5T_i.mjs";
 import { n as logger, t as HttpActionRouter } from "../../router-BshIPAR1.mjs";
 import * as v from "valibot";
 import { CommerceEnvSchema } from "@adobe/aio-commerce-lib-core/commerce";

package/dist/es/commands/index.mjs

@@ -17,7 +17,7 @@ import { t as stringifyError } from "../error-_RMwtrUA.mjs";
 import { _ as makeOutputDirFor, a as resolveCommerceAppConfig, c as getExecCommand, d as getPackageExecutionCommand, f as getProjectInstallCommand, g as loadPackageJson, h as isESM, i as readCommerceAppConfig, l as getInstallCommand, m as getRunScriptCommand, n as isTypeScriptConfig, o as appendCommand, p as getProjectRootDirectory, r as parseCommerceAppConfig, s as detectPackageManager, t as hasNamedCommerceAppConfigExports, u as getPackageDependencyInstallPlan, v as mergePackageJsonDependencies, y as readPackageJson } from "../index.node-Ba-Fbybm.mjs";
 import { a as hasCustomInstallationSteps, d as ADMIN_UI_MASS_ACTION_ENTITIES, m as hasBackendUiV2Components, u as ADMIN_UI_GRID_COLUMN_ENTITIES } from "../webhooks-24rGz8lk.mjs";
 import { o as getConfigDomains, t as validateCommerceAppConfig, u as hasBusinessConfigSchema } from "../validate-Dtz14mqi.mjs";
-import { n as INSTALLATION_INVOCATION_SOURCE_HEADER, r as POST_APP_DEPLOY_INVOCATION_SOURCE } from "../common-BxivnrmA.mjs";
+import { n as INSTALLATION_INVOCATION_SOURCE_HEADER, r as POST_APP_DEPLOY_INVOCATION_SOURCE } from "../common-D2pT4aXg.mjs";
 import { t as inspect } from "../logging-CXesop3u.mjs";
 import { hasDynamicSchema } from "@adobe/aio-commerce-lib-config";
 import { CommerceSdkValidationError } from "@adobe/aio-commerce-lib-core/error";
@@ -98,17 +98,6 @@ const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
 /** The path to the action templates directory, sibling to this file. */
 const TEMPLATES_DIR = join(__dirname, "templates");
-/** The list of Commerce variables that are required for the runtime actions. */
-const COMMERCE_VARIABLES = [
-	"AIO_COMMERCE_AUTH_IMS_CLIENT_ID",
-	"AIO_COMMERCE_AUTH_IMS_CLIENT_SECRETS",
-	"AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_ID",
-	"AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_EMAIL",
-	"AIO_COMMERCE_AUTH_IMS_ORG_ID",
-	"AIO_COMMERCE_AUTH_IMS_SCOPES"
-];
-/** The inputs for the generated runtime actions. */
-const COMMERCE_ACTION_INPUTS = Object.fromEntries(COMMERCE_VARIABLES.map((variable) => [variable, `$${variable}`]));
 const CUSTOM_IMPORTS_PLACEHOLDER = "// {{CUSTOM_SCRIPTS_IMPORTS}}";
 const CUSTOM_SCRIPTS_MAP_PLACEHOLDER = "// {{CUSTOM_SCRIPTS_MAP}}";
 const CUSTOM_SCRIPTS_LOADER_PLACEHOLDER = "// {{CUSTOM_SCRIPTS_LOADER}}";
@@ -369,7 +358,7 @@ const LEADING_DOT_SLASH_PATTERN$1 = /^\.\//u;
 const WEB_SOURCE_DEPENDENCIES = [
 	{
 		name: "@adobe/aio-commerce-lib-admin-ui",
-		version: "^1.2.0-beta-20260930143021"
+		version: "^1.2.0-beta-20261001090733"
 	},
 	{
 		name: "react",
@@ -616,7 +605,8 @@ function createActionDefinition(actionName, config = {}, options = {}) {
 		...options,
 		annotations: {
 			final: true,
-			"require-adobe-auth": true
+			"require-adobe-auth": true,
+			...config.requiresImsCredentials && { "include-ims-credentials": true }
 		},
 		function: `${GENERATED_ACTIONS_PATH}/${actionName}.js`,
 		runtime: "nodejs:24",
@@ -629,12 +619,6 @@ function createActionDefinition(actionName, config = {}, options = {}) {
 	return def;
 }
 /**
-* Inputs shared by the runtime actions that talk to the Commerce App Management
-* Service. `LOG_LEVEL` is declared once at the package level, so it's omitted
-* here to avoid duplicating it on every action.
-*/
-const RUNTIME_ACTION_INPUTS = COMMERCE_ACTION_INPUTS;
-/**
 * Gets the runtime actions to be generated from the ext.config.yaml configuration.
 * @param extConfig - The ext.config.yaml configuration.
 * @param dir - Directory containing the runtime action templates.
@@ -665,7 +649,7 @@ function buildAppManagementExtConfig(appConfig) {
 		runtimeManifest: { packages: { [PACKAGE_NAME]: {
 			actions: {
 				"app-config": createActionDefinition("app-config"),
-				association: createActionDefinition("association", {}, { inputs: RUNTIME_ACTION_INPUTS })
+				association: createActionDefinition("association", { requiresImsCredentials: true })
 			},
 			inputs: { LOG_LEVEL: "$LOG_LEVEL" },
 			license: "Apache-2.0"
@@ -676,10 +660,10 @@ function buildAppManagementExtConfig(appConfig) {
 		impl: `${PACKAGE_NAME}/installation`,
 		type: "action"
 	});
-	extConfig.runtimeManifest.packages[PACKAGE_NAME].actions.installation = createActionDefinition("installation", { requiresEncryptionKey: hasPasswordFieldsInSchema }, {
-		inputs: RUNTIME_ACTION_INPUTS,
-		limits: { timeout: 6e5 }
-	});
+	extConfig.runtimeManifest.packages[PACKAGE_NAME].actions.installation = createActionDefinition("installation", {
+		requiresEncryptionKey: hasPasswordFieldsInSchema,
+		requiresImsCredentials: true
+	}, { limits: { timeout: 6e5 } });
 	return extConfig;
 }
 /** Builds the ext.config.yaml configuration for the business configuration extension. */
@@ -1135,6 +1119,39 @@ async function readExtConfig(extensionPointId, projectRoot) {
 		].join("\n"), { cause: error });
 	}
 }
+/** Inputs superseded by the `include-ims-credentials` action annotation. */
+const LEGACY_IMS_CREDENTIAL_INPUTS = [
+	"AIO_COMMERCE_AUTH_IMS_CLIENT_ID",
+	"AIO_COMMERCE_AUTH_IMS_CLIENT_SECRETS",
+	"AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_ID",
+	"AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_EMAIL",
+	"AIO_COMMERCE_AUTH_IMS_ORG_ID",
+	"AIO_COMMERCE_AUTH_IMS_SCOPES"
+];
+/**
+* Removes the legacy `AIO_COMMERCE_AUTH_IMS_*` inputs from the existing
+* `ext.config.yaml` document for every action annotated with `include-ims-credentials`.
+* @param extConfigDoc - The existing `ext.config.yaml` document, mutated in place.
+* @param extConfig - The generated extension config.
+*/
+function removeLegacyImsInputs(extConfigDoc, extConfig) {
+	const packages = Object.entries(extConfig.runtimeManifest?.packages ?? {});
+	for (const [packageName, { actions = {} }] of packages) for (const [actionName, action] of Object.entries(actions)) {
+		if (action.annotations?.["include-ims-credentials"] !== true) continue;
+		const inputsPath = [
+			"runtimeManifest",
+			"packages",
+			packageName,
+			"actions",
+			actionName,
+			"inputs"
+		];
+		for (const input of LEGACY_IMS_CREDENTIAL_INPUTS) {
+			const inputPath = [...inputsPath, input];
+			if (extConfigDoc.hasIn(inputPath)) extConfigDoc.deleteIn(inputPath);
+		}
+	}
+}
 /**
 * Updates an extension point's ext.config.yaml with generated configuration.
 * @param appConfig - App configuration used to build the extension config.
@@ -1158,6 +1175,7 @@ async function updateExtConfig(appConfig, extensionPointId, projectRoot) {
 			break;
 		default: throw new Error(`Unsupported extension point: ${extensionPointId}`);
 	}
+	removeLegacyImsInputs(extConfigDoc, extConfig);
 	await createOrUpdateExtConfig(extConfigPath, extConfig, extConfigDoc);
 	return extConfig;
 }
@@ -2083,7 +2101,7 @@ async function ensureAppConfig(domains, config, projectRoot) {
 */
 function installDependencies(packageManager, domains, projectRoot) {
 	const packages = [];
-	if (domains.has("businessConfig.schema")) packages.push(`@adobe/aio-commerce-lib-config@^1.8.1-beta-20260930143021`);
+	if (domains.has("businessConfig.schema")) packages.push(`@adobe/aio-commerce-lib-config@^1.8.1-beta-20261001090733`);
 	if (packages.length === 0) {
 		consola.info("No additional domain dependencies to install.");
 		return;
@@ -2119,7 +2137,7 @@ async function ensureInstallYaml(domains, config, projectRoot) {
 
 //#endregion
 //#region source/commands/init/main.ts
-const REQUIRED_DEPENDENCIES = ["@adobe/aio-commerce-sdk", `@adobe/aio-commerce-lib-app@2.1.0-beta-20260930143021`];
+const REQUIRED_DEPENDENCIES = ["@adobe/aio-commerce-sdk", `@adobe/aio-commerce-lib-app@2.1.0-beta-20261001090733`];
 /**
 * Initializes a Commerce App project.
 * @param flags - Non-interactive initialization answers.

package/dist/es/{common-BxivnrmA.mjs → common-D2pT4aXg.mjs}

@@ -12,8 +12,9 @@
  * governing permissions and limitations under the License.
  */
 
-import { c as isCompletedState, d as isSucceededState, o as createRootInstallationStep } from "./management-CNf5hM8-.mjs";
+import { c as isCompletedState, d as isSucceededState, o as createRootInstallationStep } from "./management-CQP_5T_i.mjs";
 import { init } from "@adobe/aio-lib-state";
+import { resolveImsAuthParams } from "@adobe/aio-commerce-lib-auth";
 import { getHeader } from "@adobe/aio-commerce-lib-core/headers";
 import { noContent, ok } from "@adobe/aio-commerce-lib-core/responses";
 import { init as init$1 } from "@adobe/aio-lib-files";
@@ -415,6 +416,25 @@ function buildWorkflowParams(body, rawParams) {
 	};
 }
 /**
+* Returns the deprecated `AIO_COMMERCE_AUTH_IMS_*` params resolved from the
+* given runtime params, or an empty object if no IMS credentials can be resolved.
+*/
+function getLegacyImsParams(params) {
+	try {
+		const { clientId, clientSecrets, imsOrgId, scopes, technicalAccountEmail, technicalAccountId } = resolveImsAuthParams(params);
+		return Object.fromEntries(Object.entries({
+			AIO_COMMERCE_AUTH_IMS_CLIENT_ID: clientId,
+			AIO_COMMERCE_AUTH_IMS_CLIENT_SECRETS: clientSecrets,
+			AIO_COMMERCE_AUTH_IMS_ORG_ID: imsOrgId,
+			AIO_COMMERCE_AUTH_IMS_SCOPES: scopes,
+			AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_EMAIL: technicalAccountEmail,
+			AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_ID: technicalAccountId
+		}).filter(([, value]) => value !== void 0));
+	} catch {
+		return {};
+	}
+}
+/**
 * Builds a LifecycleContext from merged workflow params.
 * Shared by installation, uninstallation, and upgrade execution.
 */
@@ -423,7 +443,10 @@ function buildLifecycleContext(params, appConfig, logFn) {
 		appData: params.appData,
 		customScripts: params.customScriptsLoader?.(appConfig, logFn) ?? {},
 		logger: logFn,
-		params
+		params: {
+			...getLegacyImsParams(params),
+			...params
+		}
 	};
 }
 /**

package/dist/es/{index-FwlXfpWU.d.mts → index-DsrWoPFr.d.mts}

@@ -144,14 +144,26 @@ type ValidationIssue = {
 type LifecycleContext = {
   /** The credentials of the app being managed. */
   appData: AppData;
-  /** The raw action parameters from the App Builder runtime action. */
+  /**
+   * The raw action parameters from the App Builder runtime action.
+   *
+   * The `AIO_COMMERCE_AUTH_IMS_*` fields are deprecated: generated actions receive
+   * OAuth Server-to-Server credentials via the `include-ims-credentials` annotation.
+   * Use `resolveImsAuthParams(context.params)` from `@adobe/aio-commerce-lib-auth` instead.
+   */
   params: RuntimeActionParams & {
-    AIO_COMMERCE_AUTH_IMS_CLIENT_ID: string;
-    AIO_COMMERCE_AUTH_IMS_CLIENT_SECRETS: string | string[];
-    AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_ID: string;
-    AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_EMAIL: string;
-    AIO_COMMERCE_AUTH_IMS_ORG_ID: string;
-    AIO_COMMERCE_AUTH_IMS_SCOPES: string | string[];
+    /** @deprecated Use `resolveImsAuthParams(context.params).clientId` instead. */
+    AIO_COMMERCE_AUTH_IMS_CLIENT_ID?: string;
+    /** @deprecated Use `resolveImsAuthParams(context.params).clientSecrets` instead. */
+    AIO_COMMERCE_AUTH_IMS_CLIENT_SECRETS?: string | string[];
+    /** @deprecated Use `resolveImsAuthParams(context.params).technicalAccountId` instead. */
+    AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_ID?: string;
+    /** @deprecated Use `resolveImsAuthParams(context.params).technicalAccountEmail` instead. */
+    AIO_COMMERCE_AUTH_IMS_TECHNICAL_ACCOUNT_EMAIL?: string;
+    /** @deprecated Use `resolveImsAuthParams(context.params).imsOrgId` instead. */
+    AIO_COMMERCE_AUTH_IMS_ORG_ID?: string;
+    /** @deprecated Use `resolveImsAuthParams(context.params).scopes` instead. */
+    AIO_COMMERCE_AUTH_IMS_SCOPES?: string | string[];
   };
   /** Logger instance for workflow logging. */
   logger: ReturnType<typeof AioLogger>;

package/dist/es/management/index.d.mts

@@ -12,5 +12,5 @@
  * governing permissions and limitations under the License.
  */
 
-import { $ as ValidationContext, A as createRetryState, B as WorkflowHooks, C as defineCustomInstallationStep, D as ValidationSummary, E as ValidationResult, F as executePlannedWorkflow, G as InferStepOutput, H as BranchStep, I as StepEvent, J as LifecycleContext, K as LeafStep, L as StepFailedEvent, M as executeWorkflow, N as planWorkflow, O as validateStepTree, P as createInitialPlanExecutionState, Q as StepMetaInfo, R as StepStartedEvent, S as CustomInstallationStepHandler, T as ValidateStepTreeOptions, U as BranchStepOptions, V as AnyStep, W as ExecutionContext, X as StepContextFactory, Y as Step, Z as StepMeta, _ as createInitialUninstallationState, _t as isFailedState, a as InstallationError, at as isBranchStep, b as runValidation, c as InstallationStatus, ct as FailedWorkflowState, d as CreateInitialUninstallationStateOptions, dt as SucceededWorkflowState, et as ValidationExecutionContext, f as InstallationHooks, ft as WorkflowData, g as createInitialInstallationState, gt as isCompletedState, h as RunValidationOptions, ht as WorkflowStateMetadata, i as InstallationData, it as defineLeafStep, j as executeUninstallWorkflow, k as createInitialState, l as SucceededInstallationState, lt as InProgressWorkflowState, m as RunUninstallationOptions, mt as WorkflowRunState, n as InProgressInstallationState, nt as ValidationIssueSeverity, o as InstallationRetryMetadata, ot as isLeafStep, p as RunInstallationOptions, pt as WorkflowError, q as LeafStepOptions, r as InstallationContext, rt as defineBranchStep, s as InstallationState, st as ExecutionStatus, t as FailedInstallationState, tt as ValidationIssue, u as CreateInitialInstallationStateOptions, ut as StepStatus, v as runInstallation, vt as isInProgressState, w as StepValidationResult, x as CustomInstallationStepDefinition, y as runUninstallation, yt as isSucceededState, z as StepSucceededEvent } from "../index-FwlXfpWU.mjs";
+import { $ as ValidationContext, A as createRetryState, B as WorkflowHooks, C as defineCustomInstallationStep, D as ValidationSummary, E as ValidationResult, F as executePlannedWorkflow, G as InferStepOutput, H as BranchStep, I as StepEvent, J as LifecycleContext, K as LeafStep, L as StepFailedEvent, M as executeWorkflow, N as planWorkflow, O as validateStepTree, P as createInitialPlanExecutionState, Q as StepMetaInfo, R as StepStartedEvent, S as CustomInstallationStepHandler, T as ValidateStepTreeOptions, U as BranchStepOptions, V as AnyStep, W as ExecutionContext, X as StepContextFactory, Y as Step, Z as StepMeta, _ as createInitialUninstallationState, _t as isFailedState, a as InstallationError, at as isBranchStep, b as runValidation, c as InstallationStatus, ct as FailedWorkflowState, d as CreateInitialUninstallationStateOptions, dt as SucceededWorkflowState, et as ValidationExecutionContext, f as InstallationHooks, ft as WorkflowData, g as createInitialInstallationState, gt as isCompletedState, h as RunValidationOptions, ht as WorkflowStateMetadata, i as InstallationData, it as defineLeafStep, j as executeUninstallWorkflow, k as createInitialState, l as SucceededInstallationState, lt as InProgressWorkflowState, m as RunUninstallationOptions, mt as WorkflowRunState, n as InProgressInstallationState, nt as ValidationIssueSeverity, o as InstallationRetryMetadata, ot as isLeafStep, p as RunInstallationOptions, pt as WorkflowError, q as LeafStepOptions, r as InstallationContext, rt as defineBranchStep, s as InstallationState, st as ExecutionStatus, t as FailedInstallationState, tt as ValidationIssue, u as CreateInitialInstallationStateOptions, ut as StepStatus, v as runInstallation, vt as isInProgressState, w as StepValidationResult, x as CustomInstallationStepDefinition, y as runUninstallation, yt as isSucceededState, z as StepSucceededEvent } from "../index-DsrWoPFr.mjs";
 export { type AnyStep, type BranchStep, type BranchStepOptions, type CreateInitialInstallationStateOptions, type CreateInitialUninstallationStateOptions, type CustomInstallationStepDefinition, type CustomInstallationStepHandler, type ExecutionContext, type ExecutionStatus, type FailedInstallationState, type FailedWorkflowState, type InProgressInstallationState, type InProgressWorkflowState, type InferStepOutput, type InstallationContext, type InstallationData, type InstallationError, type InstallationHooks, type InstallationRetryMetadata, type InstallationState, type InstallationStatus, type LeafStep, type LeafStepOptions, type LifecycleContext, type RunInstallationOptions, type RunUninstallationOptions, type RunValidationOptions, type Step, type StepContextFactory, type StepEvent, type StepFailedEvent, type StepMeta, type StepMetaInfo, type StepStartedEvent, type StepStatus, type StepSucceededEvent, type StepValidationResult, type SucceededInstallationState, type SucceededWorkflowState, type ValidateStepTreeOptions, type ValidationContext, type ValidationExecutionContext, type ValidationIssue, type ValidationIssueSeverity, type ValidationResult, type ValidationSummary, type WorkflowData, type WorkflowError, type WorkflowHooks, type WorkflowRunState, type WorkflowStateMetadata, createInitialInstallationState, type createInitialPlanExecutionState, type createInitialState, createInitialUninstallationState, type createRetryState, type defineBranchStep, defineCustomInstallationStep, type defineLeafStep, type executePlannedWorkflow, type executeUninstallWorkflow, type executeWorkflow, type isBranchStep, isCompletedState, isFailedState, isInProgressState, type isLeafStep, isSucceededState, type planWorkflow, runInstallation, runUninstallation, runValidation, type validateStepTree };

package/dist/es/management/index.mjs

@@ -12,6 +12,6 @@
  * governing permissions and limitations under the License.
  */
 
-import { a as runValidation, c as isCompletedState, d as isSucceededState, i as runUninstallation, l as isFailedState, n as createInitialUninstallationState, r as runInstallation, s as defineCustomInstallationStep, t as createInitialInstallationState, u as isInProgressState } from "../management-CNf5hM8-.mjs";
+import { a as runValidation, c as isCompletedState, d as isSucceededState, i as runUninstallation, l as isFailedState, n as createInitialUninstallationState, r as runInstallation, s as defineCustomInstallationStep, t as createInitialInstallationState, u as isInProgressState } from "../management-CQP_5T_i.mjs";
 
 export { createInitialInstallationState, createInitialUninstallationState, defineCustomInstallationStep, isCompletedState, isFailedState, isInProgressState, isSucceededState, runInstallation, runUninstallation, runValidation };

package/dist/es/{management-CNf5hM8-.mjs → management-CQP_5T_i.mjs}

@@ -1324,7 +1324,7 @@ async function putRegistration(providerData, type, runtimeAction, events, metada
 	const registration = findDeployedRegistration(providerData, runtimeAction, existingData, context);
 	const name = getRegistrationName(providerData, runtimeAction);
 	const payload = {
-		clientId: params.AIO_COMMERCE_AUTH_IMS_CLIENT_ID,
+		clientId: resolveImsAuthParams(params).clientId,
 		consumerOrgId: appData.consumerOrgId,
 		deliveryType: "webhook",
 		description: getRegistrationDescription(providerData, events, runtimeAction),
@@ -1474,7 +1474,7 @@ async function reconcileChangedSubscriptions(providerId, targetEvents, baselineE
 }
 /** Finds a deployed registration by its current or legacy name. */
 function findDeployedRegistration(providerData, runtimeAction, existingData, context) {
-	const clientId = context.params.AIO_COMMERCE_AUTH_IMS_CLIENT_ID;
+	const { clientId } = resolveImsAuthParams(context.params);
 	return findExistingRegistrations(existingData.registrations, clientId, getRegistrationName(providerData, runtimeAction)) ?? findExistingRegistrations(existingData.registrations, clientId, getLegacyRegistrationName(providerData, runtimeAction));
 }
 
@@ -1584,7 +1584,7 @@ async function createIoEventRegistration(params) {
 	const description = getRegistrationDescription(provider, events, runtimeAction);
 	const payload = {
 		...appCredentials,
-		clientId: runtimeParams.AIO_COMMERCE_AUTH_IMS_CLIENT_ID,
+		clientId: resolveImsAuthParams(runtimeParams).clientId,
 		deliveryType: "webhook",
 		description,
 		enabled: true,
@@ -1609,7 +1609,7 @@ async function createOrGetIoEventRegistration(params, registrations) {
 	const { context, provider, runtimeAction } = params;
 	const { logger, params: runtimeParams } = context;
 	const name = getRegistrationName(provider, runtimeAction);
-	const existing = findExistingRegistrations(registrations, runtimeParams.AIO_COMMERCE_AUTH_IMS_CLIENT_ID, name);
+	const existing = findExistingRegistrations(registrations, resolveImsAuthParams(runtimeParams).clientId, name);
 	if (existing) {
 		logger.info(`Registration "${name}" already exists for provider "${provider.label}" with ID '${existing.id}', skipping creation.`);
 		return existing;
@@ -1820,7 +1820,8 @@ async function deleteIoEventRegistrations(providerData, provider, events, regist
 	const actionEventsMap = groupEventsByRuntimeActions(events);
 	const runtimeActions = Array.from(actionEventsMap.keys());
 	const registrationNames = /* @__PURE__ */ new Set([...runtimeActions.map((runtimeAction) => getRegistrationName(providerData, runtimeAction)), ...runtimeActions.map((runtimeAction) => getLegacyRegistrationName(providerData, runtimeAction))]);
-	const providerRegistrations = registrations.filter((reg) => reg.client_id === runtimeParams.AIO_COMMERCE_AUTH_IMS_CLIENT_ID && registrationNames.has(reg.name));
+	const { clientId } = resolveImsAuthParams(runtimeParams);
+	const providerRegistrations = registrations.filter((reg) => reg.client_id === clientId && registrationNames.has(reg.name));
 	if (providerRegistrations.length === 0) {
 		logger.info(`No I/O Events registrations found for provider "${provider.label}" (instance ID: "${providerData.instance_id}").`);
 		return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adobe/aio-commerce-lib-app",
-  "version": "2.1.0-beta-20260930143021",
+  "version": "2.1.0-beta-20261001090733",
   "private": false,
   "description": "App configuration management library for Adobe Commerce applications",
   "keywords": [
@@ -92,13 +92,13 @@
     "README.md"
   ],
   "dependencies": {
-    "@adobe/aio-commerce-lib-admin-ui": "1.2.0-beta-20260930143021",
-    "@adobe/aio-commerce-lib-api": "1.4.1-beta-20260930143021",
-    "@adobe/aio-commerce-lib-auth": "1.2.0-beta-20260930143021",
-    "@adobe/aio-commerce-lib-config": "1.8.1-beta-20260930143021",
+    "@adobe/aio-commerce-lib-admin-ui": "1.2.0-beta-20261001090733",
+    "@adobe/aio-commerce-lib-api": "1.4.1-beta-20261001090733",
+    "@adobe/aio-commerce-lib-auth": "1.2.0-beta-20261001090733",
+    "@adobe/aio-commerce-lib-config": "1.8.1-beta-20261001090733",
     "@adobe/aio-commerce-lib-core": "1.2.0",
-    "@adobe/aio-commerce-lib-events": "1.4.1-beta-20260930143021",
-    "@adobe/aio-commerce-lib-webhooks": "1.2.3-beta-20260930143021",
+    "@adobe/aio-commerce-lib-events": "1.4.1-beta-20261001090733",
+    "@adobe/aio-commerce-lib-webhooks": "1.2.3-beta-20261001090733",
     "@adobe/aio-lib-core-config": "^5.0.1",
     "@adobe/aio-lib-core-logging": "^3.0.2",
     "@adobe/aio-lib-files": "^4.1.2",