@commercetools-frontend/mc-scripts 24.9.0 → 24.10.0

package/dist/{deployment-previews-set-9e95bfa1.esm.js → deployment-previews-set-178cacbc.esm.js}

@@ -5,10 +5,8 @@ import _findInstanceProperty from '@babel/runtime-corejs3/core-js-stable/instanc
 import chalk from 'chalk';
 import prompts from 'prompts';
 import { processConfig } from '@commercetools-frontend/application-config';
-import { C as CredentialsStorage } from './credentials-storage-a0da40e8.esm.js';
-import { f as fetchCustomApplication, g as updateCustomApplicationDeploymentPreview, h as createCustomApplicationDeploymentPreview } from './graphql-requests-bdc3f4b6.esm.js';
-import '@commercetools/http-user-agent';
-import './package-ecec051f.esm.js';
+import { C as CredentialsStorage } from './credentials-storage-4464313c.esm.js';
+import { f as fetchCustomApplication, g as updateCustomApplicationDeploymentPreview, h as createCustomApplicationDeploymentPreview } from './graphql-requests-6043a20b.esm.js';
 import '@babel/runtime-corejs3/helpers/classCallCheck';
 import '@babel/runtime-corejs3/helpers/createClass';
 import '@babel/runtime-corejs3/core-js-stable/json/stringify';
@@ -29,6 +27,8 @@ import '@babel/runtime-corejs3/core-js-stable/instance/some';
 import 'graphql';
 import 'graphql-request';
 import '@commercetools-frontend/constants';
+import '@commercetools/http-user-agent';
+import './package-6a5c0475.esm.js';
 
 const credentialsStorage = new CredentialsStorage();
 const validateUrl = function () {

package/dist/{deployment-previews-set-485f4cf4.cjs.prod.js → deployment-previews-set-93927f50.cjs.prod.js}

@@ -7,10 +7,8 @@ var _findInstanceProperty = require('@babel/runtime-corejs3/core-js-stable/insta
 var chalk = require('chalk');
 var prompts = require('prompts');
 var applicationConfig = require('@commercetools-frontend/application-config');
-var credentialsStorage$1 = require('./credentials-storage-382cbd6c.cjs.prod.js');
-var graphqlRequests = require('./graphql-requests-2aa18200.cjs.prod.js');
-require('@commercetools/http-user-agent');
-require('./package-0b5fe01d.cjs.prod.js');
+var credentialsStorage$1 = require('./credentials-storage-0b89aa0e.cjs.prod.js');
+var graphqlRequests = require('./graphql-requests-c5ecf40e.cjs.prod.js');
 require('@babel/runtime-corejs3/helpers/classCallCheck');
 require('@babel/runtime-corejs3/helpers/createClass');
 require('@babel/runtime-corejs3/core-js-stable/json/stringify');
@@ -31,6 +29,8 @@ require('@babel/runtime-corejs3/core-js-stable/instance/some');
 require('graphql');
 require('graphql-request');
 require('@commercetools-frontend/constants');
+require('@commercetools/http-user-agent');
+require('./package-c32ced1c.cjs.prod.js');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { 'default': e }; }
 

package/dist/{deployment-previews-set-9e920f80.cjs.dev.js → deployment-previews-set-b9ebe08f.cjs.dev.js}

@@ -7,10 +7,8 @@ var _findInstanceProperty = require('@babel/runtime-corejs3/core-js-stable/insta
 var chalk = require('chalk');
 var prompts = require('prompts');
 var applicationConfig = require('@commercetools-frontend/application-config');
-var credentialsStorage$1 = require('./credentials-storage-0959d001.cjs.dev.js');
-var graphqlRequests = require('./graphql-requests-d4d32da7.cjs.dev.js');
-require('@commercetools/http-user-agent');
-require('./package-fd9ca992.cjs.dev.js');
+var credentialsStorage$1 = require('./credentials-storage-cbb5c559.cjs.dev.js');
+var graphqlRequests = require('./graphql-requests-5527b635.cjs.dev.js');
 require('@babel/runtime-corejs3/helpers/classCallCheck');
 require('@babel/runtime-corejs3/helpers/createClass');
 require('@babel/runtime-corejs3/core-js-stable/json/stringify');
@@ -31,6 +29,8 @@ require('@babel/runtime-corejs3/core-js-stable/instance/some');
 require('graphql');
 require('graphql-request');
 require('@commercetools-frontend/constants');
+require('@commercetools/http-user-agent');
+require('./package-0d7eef40.cjs.dev.js');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { 'default': e }; }
 

package/dist/{graphql-requests-2aa18200.cjs.prod.js → graphql-requests-5527b635.cjs.dev.js}

@@ -14,7 +14,9 @@ var chalk = require('chalk');
 var graphql = require('graphql');
 var graphqlRequest = require('graphql-request');
 var constants = require('@commercetools-frontend/constants');
-var credentialsStorage$1 = require('./credentials-storage-382cbd6c.cjs.prod.js');
+var credentialsStorage$1 = require('./credentials-storage-cbb5c559.cjs.dev.js');
+var createHttpUserAgent = require('@commercetools/http-user-agent');
+var _package = require('./package-0d7eef40.cjs.dev.js');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { 'default': e }; }
 
@@ -28,6 +30,16 @@ var _Object$defineProperties__default = /*#__PURE__*/_interopDefault(_Object$def
 var _Object$defineProperty__default = /*#__PURE__*/_interopDefault(_Object$defineProperty);
 var _someInstanceProperty__default = /*#__PURE__*/_interopDefault(_someInstanceProperty);
 var chalk__default = /*#__PURE__*/_interopDefault(chalk);
+var createHttpUserAgent__default = /*#__PURE__*/_interopDefault(createHttpUserAgent);
+
+const userAgent = createHttpUserAgent__default["default"]({
+  name: 'graphql-request',
+  libraryName: 'mc-scripts',
+  libraryVersion: _package.pkgJson.version,
+  contactUrl: 'https://git.io/fjuyC',
+  // points to the appkit repo issues
+  contactEmail: 'support@commercetools.com'
+});
 
 function ownKeys(e, r) { var t = _Object$keys__default["default"](e); if (_Object$getOwnPropertySymbols__default["default"]) { var o = _Object$getOwnPropertySymbols__default["default"](e); r && (o = _filterInstanceProperty__default["default"](o).call(o, function (r) { return _Object$getOwnPropertyDescriptor__default["default"](e, r).enumerable; })), t.push.apply(t, o); } return t; }
 function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var _context2, _context3; var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? _forEachInstanceProperty__default["default"](_context2 = ownKeys(Object(t), !0)).call(_context2, function (r) { _defineProperty(e, r, t[r]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](e, _Object$getOwnPropertyDescriptors__default["default"](t)) : _forEachInstanceProperty__default["default"](_context3 = ownKeys(Object(t))).call(_context3, function (r) { _Object$defineProperty__default["default"](e, r, _Object$getOwnPropertyDescriptor__default["default"](t, r)); }); } return e; }
@@ -43,18 +55,15 @@ var UpdateCustomViewFromCli = { kind: "Document", definitions: [{ kind: "Operati
 const credentialsStorage = new credentialsStorage$1.CredentialsStorage();
 async function requestWithTokenRetry(document, requestOptions) {
   let retryCount = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : 0;
-  const shouldUseExperimentalIdentityAuthFlow = process.env.ENABLE_EXPERIMENTAL_IDENTITY_AUTH_FLOW === 'true';
   const token = credentialsStorage.getToken(requestOptions.mcApiUrl);
-  const tokenHeader = shouldUseExperimentalIdentityAuthFlow ? {
+  const tokenHeader = {
     [constants.SUPPORTED_HEADERS.AUTHORIZATION]: `Bearer ${token}`
-  } : {
-    'x-mc-cli-access-token': token
   };
   const client = new graphqlRequest.GraphQLClient(`${requestOptions.mcApiUrl}/graphql`, {
     headers: _objectSpread(_objectSpread({
       Accept: 'application/json',
       'Content-Type': 'application/json',
-      'x-user-agent': credentialsStorage$1.userAgent
+      'x-user-agent': userAgent
     }, token ? tokenHeader : {}), requestOptions.headers)
   });
   try {

package/dist/{graphql-requests-bdc3f4b6.esm.js → graphql-requests-6043a20b.esm.js}

@@ -12,7 +12,18 @@ import chalk from 'chalk';
 import { print } from 'graphql';
 import { GraphQLClient, ClientError } from 'graphql-request';
 import { GRAPHQL_TARGETS, SUPPORTED_HEADERS } from '@commercetools-frontend/constants';
-import { C as CredentialsStorage, u as userAgent } from './credentials-storage-a0da40e8.esm.js';
+import { C as CredentialsStorage } from './credentials-storage-4464313c.esm.js';
+import createHttpUserAgent from '@commercetools/http-user-agent';
+import { p as pkgJson } from './package-6a5c0475.esm.js';
+
+const userAgent = createHttpUserAgent({
+  name: 'graphql-request',
+  libraryName: 'mc-scripts',
+  libraryVersion: pkgJson.version,
+  contactUrl: 'https://git.io/fjuyC',
+  // points to the appkit repo issues
+  contactEmail: 'support@commercetools.com'
+});
 
 function ownKeys(e, r) { var t = _Object$keys(e); if (_Object$getOwnPropertySymbols) { var o = _Object$getOwnPropertySymbols(e); r && (o = _filterInstanceProperty(o).call(o, function (r) { return _Object$getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
 function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var _context2, _context3; var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? _forEachInstanceProperty(_context2 = ownKeys(Object(t), !0)).call(_context2, function (r) { _defineProperty(e, r, t[r]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(e, _Object$getOwnPropertyDescriptors(t)) : _forEachInstanceProperty(_context3 = ownKeys(Object(t))).call(_context3, function (r) { _Object$defineProperty(e, r, _Object$getOwnPropertyDescriptor(t, r)); }); } return e; }
@@ -28,12 +39,9 @@ var UpdateCustomViewFromCli = { kind: "Document", definitions: [{ kind: "Operati
 const credentialsStorage = new CredentialsStorage();
 async function requestWithTokenRetry(document, requestOptions) {
   let retryCount = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : 0;
-  const shouldUseExperimentalIdentityAuthFlow = process.env.ENABLE_EXPERIMENTAL_IDENTITY_AUTH_FLOW === 'true';
   const token = credentialsStorage.getToken(requestOptions.mcApiUrl);
-  const tokenHeader = shouldUseExperimentalIdentityAuthFlow ? {
+  const tokenHeader = {
     [SUPPORTED_HEADERS.AUTHORIZATION]: `Bearer ${token}`
-  } : {
-    'x-mc-cli-access-token': token
   };
   const client = new GraphQLClient(`${requestOptions.mcApiUrl}/graphql`, {
     headers: _objectSpread(_objectSpread({

package/dist/{graphql-requests-d4d32da7.cjs.dev.js → graphql-requests-c5ecf40e.cjs.prod.js}

@@ -14,7 +14,9 @@ var chalk = require('chalk');
 var graphql = require('graphql');
 var graphqlRequest = require('graphql-request');
 var constants = require('@commercetools-frontend/constants');
-var credentialsStorage$1 = require('./credentials-storage-0959d001.cjs.dev.js');
+var credentialsStorage$1 = require('./credentials-storage-0b89aa0e.cjs.prod.js');
+var createHttpUserAgent = require('@commercetools/http-user-agent');
+var _package = require('./package-c32ced1c.cjs.prod.js');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { 'default': e }; }
 
@@ -28,6 +30,16 @@ var _Object$defineProperties__default = /*#__PURE__*/_interopDefault(_Object$def
 var _Object$defineProperty__default = /*#__PURE__*/_interopDefault(_Object$defineProperty);
 var _someInstanceProperty__default = /*#__PURE__*/_interopDefault(_someInstanceProperty);
 var chalk__default = /*#__PURE__*/_interopDefault(chalk);
+var createHttpUserAgent__default = /*#__PURE__*/_interopDefault(createHttpUserAgent);
+
+const userAgent = createHttpUserAgent__default["default"]({
+  name: 'graphql-request',
+  libraryName: 'mc-scripts',
+  libraryVersion: _package.pkgJson.version,
+  contactUrl: 'https://git.io/fjuyC',
+  // points to the appkit repo issues
+  contactEmail: 'support@commercetools.com'
+});
 
 function ownKeys(e, r) { var t = _Object$keys__default["default"](e); if (_Object$getOwnPropertySymbols__default["default"]) { var o = _Object$getOwnPropertySymbols__default["default"](e); r && (o = _filterInstanceProperty__default["default"](o).call(o, function (r) { return _Object$getOwnPropertyDescriptor__default["default"](e, r).enumerable; })), t.push.apply(t, o); } return t; }
 function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var _context2, _context3; var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? _forEachInstanceProperty__default["default"](_context2 = ownKeys(Object(t), !0)).call(_context2, function (r) { _defineProperty(e, r, t[r]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](e, _Object$getOwnPropertyDescriptors__default["default"](t)) : _forEachInstanceProperty__default["default"](_context3 = ownKeys(Object(t))).call(_context3, function (r) { _Object$defineProperty__default["default"](e, r, _Object$getOwnPropertyDescriptor__default["default"](t, r)); }); } return e; }
@@ -43,18 +55,15 @@ var UpdateCustomViewFromCli = { kind: "Document", definitions: [{ kind: "Operati
 const credentialsStorage = new credentialsStorage$1.CredentialsStorage();
 async function requestWithTokenRetry(document, requestOptions) {
   let retryCount = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : 0;
-  const shouldUseExperimentalIdentityAuthFlow = process.env.ENABLE_EXPERIMENTAL_IDENTITY_AUTH_FLOW === 'true';
   const token = credentialsStorage.getToken(requestOptions.mcApiUrl);
-  const tokenHeader = shouldUseExperimentalIdentityAuthFlow ? {
+  const tokenHeader = {
     [constants.SUPPORTED_HEADERS.AUTHORIZATION]: `Bearer ${token}`
-  } : {
-    'x-mc-cli-access-token': token
   };
   const client = new graphqlRequest.GraphQLClient(`${requestOptions.mcApiUrl}/graphql`, {
     headers: _objectSpread(_objectSpread({
       Accept: 'application/json',
       'Content-Type': 'application/json',
-      'x-user-agent': credentialsStorage$1.userAgent
+      'x-user-agent': userAgent
     }, token ? tokenHeader : {}), requestOptions.headers)
   });
   try {

package/dist/login-2c875e0b.esm.js

@@ -0,0 +1,214 @@
+import _Promise from '@babel/runtime-corejs3/core-js-stable/promise';
+import _mapInstanceProperty from '@babel/runtime-corejs3/core-js-stable/instance/map';
+import _startsWithInstanceProperty from '@babel/runtime-corejs3/core-js-stable/instance/starts-with';
+import _trimInstanceProperty from '@babel/runtime-corejs3/core-js-stable/instance/trim';
+import _forEachInstanceProperty from '@babel/runtime-corejs3/core-js-stable/instance/for-each';
+import _URL from '@babel/runtime-corejs3/core-js-stable/url';
+import crypto from 'node:crypto';
+import process, { exit } from 'node:process';
+import chalk from 'chalk';
+import { processConfig } from '@commercetools-frontend/application-config';
+import { p as pkgJson } from './package-6a5c0475.esm.js';
+import http from 'node:http';
+import jwtDecode from 'jwt-decode';
+import { C as CredentialsStorage } from './credentials-storage-4464313c.esm.js';
+import '@babel/runtime-corejs3/helpers/classCallCheck';
+import '@babel/runtime-corejs3/helpers/createClass';
+import '@babel/runtime-corejs3/core-js-stable/json/stringify';
+import '@babel/runtime-corejs3/core-js-stable/date/now';
+import 'node:fs';
+import 'node:os';
+import 'node:path';
+import './does-file-exist-32618334.esm.js';
+
+function createAuthCallbackServer(options) {
+  const server = http.createServer(async (request, response) => {
+    try {
+      if (request.url?.includes(`/${options.clientIdentifier}/oidc/callback`)) {
+        const incomingUrl = new _URL(request.url, 'http://localhost');
+        const sessionToken = incomingUrl.searchParams.get('sessionToken');
+        const requestedState = incomingUrl.searchParams.get('state');
+        if (!sessionToken) {
+          throw new Error('Invalid authentication flow (missing sessionToken)');
+        }
+        const decodedSessionToken = jwtDecode(sessionToken);
+        if (decodedSessionToken?.nonce !== options.nonce) {
+          throw new Error('Invalid authentication flow (nonce mismatch)');
+        }
+        if (requestedState !== options.state) {
+          throw new Error('Invalid authentication flow (state mismatch)');
+        }
+        options.onSuccess({
+          token: sessionToken,
+          expiresAt: decodedSessionToken.exp
+        });
+        response.setHeader('content-type', 'text/html');
+        response.end('Success!');
+        server.close(() => {
+          exit();
+        });
+      }
+    } catch (error) {
+      response.setHeader('content-type', 'text/html');
+      if (error instanceof Error) {
+        console.error(error.message);
+        response.end(error.message);
+      } else {
+        console.error(error);
+        response.end(`Invalid authentication flow.`);
+      }
+      server.close(() => {
+        exit();
+      });
+    }
+  });
+  return server;
+}
+
+const credentialsStorage = new CredentialsStorage();
+const port = 3001;
+const clientIdentifier = `mc-scripts-${pkgJson.version}`;
+const isServerError = error => {
+  return error instanceof Error && 'code' in error;
+};
+const startServer = server => new _Promise((resolve, reject) => {
+  server.listen(port, 'localhost').on('listening', resolve).on('error', error => {
+    if (isServerError(error) && error.code === 'EADDRINUSE') {
+      return reject(new Error(`The address "localhost:${port}" is already in use. Are you running a Merchant Center application in other process? Please stop that and try again.`, {
+        cause: error
+      }));
+    }
+    return reject(new Error('Problem starting server', {
+      cause: error
+    }));
+  }).on('close', () => {
+    process.exit();
+  });
+});
+const resolveMcApiUrl = async options => {
+  if (options.mcApiUrl) {
+    return options.mcApiUrl;
+  }
+
+  // We first check whether the user has set the MC_API_URL environment variable
+  if (process.env.MC_API_URL) {
+    return process.env.MC_API_URL;
+  }
+
+  // If not, we parse the configuration and check if it's defined over there
+  const applicationConfig = await processConfig();
+  const mcApiUrl = applicationConfig.env.mcApiUrl;
+  return mcApiUrl;
+};
+const resolveProjectKey = async options => {
+  if (options.projectKey) {
+    return options.projectKey;
+  }
+
+  // We first check whether the user has set the CTP_PROJECT_KEY environment variable
+  if (process.env.CTP_PROJECT_KEY) {
+    return process.env.CTP_PROJECT_KEY;
+  }
+  try {
+    const applicationConfig = await processConfig();
+    return applicationConfig.env.__DEVELOPMENT__?.oidc?.initialProjectKey;
+  } catch (error) {
+    // It's ok if there's not application config file or if it does not contain the initialProjectKey
+    return;
+  }
+};
+const mapOAuthScopesToClaims = scopes => {
+  return _mapInstanceProperty(scopes).call(scopes, scope => {
+    if (_startsWithInstanceProperty(scope).call(scope, 'view_')) {
+      return `view:${scope}`;
+    }
+    if (_startsWithInstanceProperty(scope).call(scope, 'manage_')) {
+      return `manage:${scope}`;
+    }
+    return scope;
+  });
+};
+const mapAdditionalOAuthScopesToClaims = (name, scopes) => {
+  return _mapInstanceProperty(scopes).call(scopes, scope => {
+    if (_startsWithInstanceProperty(scope).call(scope, 'view_')) {
+      return `view/${name}:${scope}`;
+    }
+    if (_startsWithInstanceProperty(scope).call(scope, 'manage_')) {
+      return `manage/${name}:${scope}`;
+    }
+    return scope;
+  });
+};
+const resolveOAuthScopes = async options => {
+  if (options.oauthScope) {
+    return mapOAuthScopesToClaims(options.oauthScope);
+  }
+
+  // We first check whether the user has set the CTP_OAUTH_SCOPES environment variable
+  if (process.env.CTP_OAUTH_SCOPES) {
+    return mapOAuthScopesToClaims(process.env.CTP_OAUTH_SCOPES?.split(',').map(scope => _trimInstanceProperty(scope).call(scope)) ?? []);
+  }
+  try {
+    const applicationConfig = await processConfig();
+    const configuredOAuthScopes = applicationConfig.env.__DEVELOPMENT__?.oidc?.oAuthScopes;
+    const configuredAdditionalOAuthScopes = applicationConfig.env.__DEVELOPMENT__?.oidc?.additionalOAuthScopes;
+    return [...mapOAuthScopesToClaims(configuredOAuthScopes?.view ?? []), ...mapOAuthScopesToClaims(configuredOAuthScopes?.manage ?? []), ...(configuredAdditionalOAuthScopes?.flatMap(scope => mapAdditionalOAuthScopesToClaims(scope.name, scope.view)) ?? []), ...(configuredAdditionalOAuthScopes?.flatMap(scope => mapAdditionalOAuthScopesToClaims(scope.name, scope.manage)) ?? [])];
+  } catch (error) {
+    // It's ok if there's not application config file or if it does not contain the initialProjectKey
+    return [];
+  }
+};
+const generateRandomHash = function () {
+  let length = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : 16;
+  return crypto.randomBytes(length).toString('hex');
+};
+async function run(options) {
+  const mcApiUrl = await resolveMcApiUrl(options);
+  if (!mcApiUrl) {
+    throw new Error('No Merchant Center API URL found. Aborting.');
+  }
+  console.log(`Using Merchant Center environment "${chalk.green(mcApiUrl)}".`);
+  console.log();
+  if (!options.force && credentialsStorage.isSessionValid(mcApiUrl)) {
+    console.log(`You already have a valid session.`);
+    return;
+  }
+  const projectKey = await resolveProjectKey(options);
+  const oauthScopes = await resolveOAuthScopes(options);
+  const scopes = ['openid'];
+  if (projectKey) {
+    scopes.push(`project_key:${projectKey}`);
+    _forEachInstanceProperty(oauthScopes).call(oauthScopes, scope => {
+      scopes.push(scope);
+    });
+  }
+  const state = generateRandomHash();
+  const nonce = generateRandomHash();
+  const authUrl = new _URL('/login/authorize', mcApiUrl);
+  authUrl.searchParams.set('response_type', 'id_token');
+  authUrl.searchParams.set('response_mode', 'query');
+  authUrl.searchParams.set('client_id', `__local:${clientIdentifier}`);
+  authUrl.searchParams.set('scope', scopes.join(' '));
+  authUrl.searchParams.set('state', state);
+  authUrl.searchParams.set('nonce', nonce);
+  const server = createAuthCallbackServer({
+    clientIdentifier,
+    state,
+    nonce,
+    onSuccess: tokenContext => {
+      credentialsStorage.setToken(mcApiUrl, tokenContext);
+      console.log();
+      console.log(chalk.green(`Login successful.`));
+      console.log();
+    }
+  });
+  await startServer(server);
+  console.log(`Initiating the OIDC authentication flow, opening the login page in your browser...`);
+  console.log(`  ${authUrl}`);
+  console.log();
+  const open = await import('open');
+  await open.default(authUrl.toString());
+  console.log('Waiting for the OIDC authentication to complete...');
+}
+
+export { run as default };

package/dist/login-73e9f04f.cjs.prod.js

@@ -0,0 +1,248 @@
+'use strict';
+
+var _Promise = require('@babel/runtime-corejs3/core-js-stable/promise');
+var _mapInstanceProperty = require('@babel/runtime-corejs3/core-js-stable/instance/map');
+var _startsWithInstanceProperty = require('@babel/runtime-corejs3/core-js-stable/instance/starts-with');
+var _trimInstanceProperty = require('@babel/runtime-corejs3/core-js-stable/instance/trim');
+var _forEachInstanceProperty = require('@babel/runtime-corejs3/core-js-stable/instance/for-each');
+var _URL = require('@babel/runtime-corejs3/core-js-stable/url');
+var crypto = require('node:crypto');
+var process = require('node:process');
+var chalk = require('chalk');
+var applicationConfig = require('@commercetools-frontend/application-config');
+var _package = require('./package-c32ced1c.cjs.prod.js');
+var http = require('node:http');
+var jwtDecode = require('jwt-decode');
+var credentialsStorage$1 = require('./credentials-storage-0b89aa0e.cjs.prod.js');
+require('@babel/runtime-corejs3/helpers/classCallCheck');
+require('@babel/runtime-corejs3/helpers/createClass');
+require('@babel/runtime-corejs3/core-js-stable/json/stringify');
+require('@babel/runtime-corejs3/core-js-stable/date/now');
+require('node:fs');
+require('node:os');
+require('node:path');
+require('./does-file-exist-be53305d.cjs.prod.js');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { 'default': e }; }
+
+function _interopNamespace(e) {
+  if (e && e.__esModule) return e;
+  var n = Object.create(null);
+  if (e) {
+    Object.keys(e).forEach(function (k) {
+      if (k !== 'default') {
+        var d = Object.getOwnPropertyDescriptor(e, k);
+        Object.defineProperty(n, k, d.get ? d : {
+          enumerable: true,
+          get: function () { return e[k]; }
+        });
+      }
+    });
+  }
+  n["default"] = e;
+  return Object.freeze(n);
+}
+
+var _Promise__default = /*#__PURE__*/_interopDefault(_Promise);
+var _mapInstanceProperty__default = /*#__PURE__*/_interopDefault(_mapInstanceProperty);
+var _startsWithInstanceProperty__default = /*#__PURE__*/_interopDefault(_startsWithInstanceProperty);
+var _trimInstanceProperty__default = /*#__PURE__*/_interopDefault(_trimInstanceProperty);
+var _forEachInstanceProperty__default = /*#__PURE__*/_interopDefault(_forEachInstanceProperty);
+var _URL__default = /*#__PURE__*/_interopDefault(_URL);
+var crypto__default = /*#__PURE__*/_interopDefault(crypto);
+var process__default = /*#__PURE__*/_interopDefault(process);
+var chalk__default = /*#__PURE__*/_interopDefault(chalk);
+var http__default = /*#__PURE__*/_interopDefault(http);
+var jwtDecode__default = /*#__PURE__*/_interopDefault(jwtDecode);
+
+function createAuthCallbackServer(options) {
+  const server = http__default["default"].createServer(async (request, response) => {
+    try {
+      if (request.url?.includes(`/${options.clientIdentifier}/oidc/callback`)) {
+        const incomingUrl = new _URL__default["default"](request.url, 'http://localhost');
+        const sessionToken = incomingUrl.searchParams.get('sessionToken');
+        const requestedState = incomingUrl.searchParams.get('state');
+        if (!sessionToken) {
+          throw new Error('Invalid authentication flow (missing sessionToken)');
+        }
+        const decodedSessionToken = jwtDecode__default["default"](sessionToken);
+        if (decodedSessionToken?.nonce !== options.nonce) {
+          throw new Error('Invalid authentication flow (nonce mismatch)');
+        }
+        if (requestedState !== options.state) {
+          throw new Error('Invalid authentication flow (state mismatch)');
+        }
+        options.onSuccess({
+          token: sessionToken,
+          expiresAt: decodedSessionToken.exp
+        });
+        response.setHeader('content-type', 'text/html');
+        response.end('Success!');
+        server.close(() => {
+          process.exit();
+        });
+      }
+    } catch (error) {
+      response.setHeader('content-type', 'text/html');
+      if (error instanceof Error) {
+        console.error(error.message);
+        response.end(error.message);
+      } else {
+        console.error(error);
+        response.end(`Invalid authentication flow.`);
+      }
+      server.close(() => {
+        process.exit();
+      });
+    }
+  });
+  return server;
+}
+
+const credentialsStorage = new credentialsStorage$1.CredentialsStorage();
+const port = 3001;
+const clientIdentifier = `mc-scripts-${_package.pkgJson.version}`;
+const isServerError = error => {
+  return error instanceof Error && 'code' in error;
+};
+const startServer = server => new _Promise__default["default"]((resolve, reject) => {
+  server.listen(port, 'localhost').on('listening', resolve).on('error', error => {
+    if (isServerError(error) && error.code === 'EADDRINUSE') {
+      return reject(new Error(`The address "localhost:${port}" is already in use. Are you running a Merchant Center application in other process? Please stop that and try again.`, {
+        cause: error
+      }));
+    }
+    return reject(new Error('Problem starting server', {
+      cause: error
+    }));
+  }).on('close', () => {
+    process__default["default"].exit();
+  });
+});
+const resolveMcApiUrl = async options => {
+  if (options.mcApiUrl) {
+    return options.mcApiUrl;
+  }
+
+  // We first check whether the user has set the MC_API_URL environment variable
+  if (process__default["default"].env.MC_API_URL) {
+    return process__default["default"].env.MC_API_URL;
+  }
+
+  // If not, we parse the configuration and check if it's defined over there
+  const applicationConfig$1 = await applicationConfig.processConfig();
+  const mcApiUrl = applicationConfig$1.env.mcApiUrl;
+  return mcApiUrl;
+};
+const resolveProjectKey = async options => {
+  if (options.projectKey) {
+    return options.projectKey;
+  }
+
+  // We first check whether the user has set the CTP_PROJECT_KEY environment variable
+  if (process__default["default"].env.CTP_PROJECT_KEY) {
+    return process__default["default"].env.CTP_PROJECT_KEY;
+  }
+  try {
+    const applicationConfig$1 = await applicationConfig.processConfig();
+    return applicationConfig$1.env.__DEVELOPMENT__?.oidc?.initialProjectKey;
+  } catch (error) {
+    // It's ok if there's not application config file or if it does not contain the initialProjectKey
+    return;
+  }
+};
+const mapOAuthScopesToClaims = scopes => {
+  return _mapInstanceProperty__default["default"](scopes).call(scopes, scope => {
+    if (_startsWithInstanceProperty__default["default"](scope).call(scope, 'view_')) {
+      return `view:${scope}`;
+    }
+    if (_startsWithInstanceProperty__default["default"](scope).call(scope, 'manage_')) {
+      return `manage:${scope}`;
+    }
+    return scope;
+  });
+};
+const mapAdditionalOAuthScopesToClaims = (name, scopes) => {
+  return _mapInstanceProperty__default["default"](scopes).call(scopes, scope => {
+    if (_startsWithInstanceProperty__default["default"](scope).call(scope, 'view_')) {
+      return `view/${name}:${scope}`;
+    }
+    if (_startsWithInstanceProperty__default["default"](scope).call(scope, 'manage_')) {
+      return `manage/${name}:${scope}`;
+    }
+    return scope;
+  });
+};
+const resolveOAuthScopes = async options => {
+  if (options.oauthScope) {
+    return mapOAuthScopesToClaims(options.oauthScope);
+  }
+
+  // We first check whether the user has set the CTP_OAUTH_SCOPES environment variable
+  if (process__default["default"].env.CTP_OAUTH_SCOPES) {
+    return mapOAuthScopesToClaims(process__default["default"].env.CTP_OAUTH_SCOPES?.split(',').map(scope => _trimInstanceProperty__default["default"](scope).call(scope)) ?? []);
+  }
+  try {
+    const applicationConfig$1 = await applicationConfig.processConfig();
+    const configuredOAuthScopes = applicationConfig$1.env.__DEVELOPMENT__?.oidc?.oAuthScopes;
+    const configuredAdditionalOAuthScopes = applicationConfig$1.env.__DEVELOPMENT__?.oidc?.additionalOAuthScopes;
+    return [...mapOAuthScopesToClaims(configuredOAuthScopes?.view ?? []), ...mapOAuthScopesToClaims(configuredOAuthScopes?.manage ?? []), ...(configuredAdditionalOAuthScopes?.flatMap(scope => mapAdditionalOAuthScopesToClaims(scope.name, scope.view)) ?? []), ...(configuredAdditionalOAuthScopes?.flatMap(scope => mapAdditionalOAuthScopesToClaims(scope.name, scope.manage)) ?? [])];
+  } catch (error) {
+    // It's ok if there's not application config file or if it does not contain the initialProjectKey
+    return [];
+  }
+};
+const generateRandomHash = function () {
+  let length = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : 16;
+  return crypto__default["default"].randomBytes(length).toString('hex');
+};
+async function run(options) {
+  const mcApiUrl = await resolveMcApiUrl(options);
+  if (!mcApiUrl) {
+    throw new Error('No Merchant Center API URL found. Aborting.');
+  }
+  console.log(`Using Merchant Center environment "${chalk__default["default"].green(mcApiUrl)}".`);
+  console.log();
+  if (!options.force && credentialsStorage.isSessionValid(mcApiUrl)) {
+    console.log(`You already have a valid session.`);
+    return;
+  }
+  const projectKey = await resolveProjectKey(options);
+  const oauthScopes = await resolveOAuthScopes(options);
+  const scopes = ['openid'];
+  if (projectKey) {
+    scopes.push(`project_key:${projectKey}`);
+    _forEachInstanceProperty__default["default"](oauthScopes).call(oauthScopes, scope => {
+      scopes.push(scope);
+    });
+  }
+  const state = generateRandomHash();
+  const nonce = generateRandomHash();
+  const authUrl = new _URL__default["default"]('/login/authorize', mcApiUrl);
+  authUrl.searchParams.set('response_type', 'id_token');
+  authUrl.searchParams.set('response_mode', 'query');
+  authUrl.searchParams.set('client_id', `__local:${clientIdentifier}`);
+  authUrl.searchParams.set('scope', scopes.join(' '));
+  authUrl.searchParams.set('state', state);
+  authUrl.searchParams.set('nonce', nonce);
+  const server = createAuthCallbackServer({
+    clientIdentifier,
+    state,
+    nonce,
+    onSuccess: tokenContext => {
+      credentialsStorage.setToken(mcApiUrl, tokenContext);
+      console.log();
+      console.log(chalk__default["default"].green(`Login successful.`));
+      console.log();
+    }
+  });
+  await startServer(server);
+  console.log(`Initiating the OIDC authentication flow, opening the login page in your browser...`);
+  console.log(`  ${authUrl}`);
+  console.log();
+  const open = await Promise.resolve().then(function () { return /*#__PURE__*/_interopNamespace(require('open')); });
+  await open.default(authUrl.toString());
+  console.log('Waiting for the OIDC authentication to complete...');
+}
+
+exports["default"] = run;