@commercetools/cli-topic-integration-layer 0.2.1 → 0.3.1

package/dist/lib/tooling/session.d.ts

@@ -0,0 +1,36 @@
+/** Which identity the explorer's proxy runs operations as. */
+export type SessionGrant = {
+    kind: "anonymous";
+} | {
+    kind: "password";
+    email: string;
+    password: string;
+};
+/**
+ * An explicit presentment selection, as a storefront's locale/currency switcher
+ * would send it. Every field is optional and independently defaulted by the
+ * integration layer from the project config, so `{ currency: "EUR" }` alone is
+ * valid — it changes the currency and leaves locale and country at the project's.
+ */
+export interface Presentment {
+    locale?: string;
+    currency?: string;
+    country?: string;
+}
+/** A minted session, plus human labels for the startup banner. */
+export interface MintedSession {
+    token: string;
+    /** e.g. `anonymous` or `customer alice@example.com` — printed, never logged elsewhere. */
+    describe: string;
+    /** e.g. `de-DE / EUR / DE` or `project defaults` — what prices will be shown in. */
+    presentment: string;
+}
+/**
+ * Mint an integration-layer session bearer at `POST <authUrl>/<project>/session`.
+ *
+ * `authUrl` is the identity edge (the storefront pod), NOT the extensions edge that
+ * serves the manage-surface routes — in the deployed topology those are different
+ * hosts (`auth.…` vs `extensions.…`), which is why the explorer resolves them
+ * separately.
+ */
+export declare function mintSession(authUrl: string, projectKey: string, grant: SessionGrant, presentment?: Presentment): Promise<MintedSession>;

package/dist/lib/tooling/session.js

@@ -0,0 +1,99 @@
+// Session bearers for the local explorer's proxy.
+//
+// The explorer runs operations against the DEPLOYED edge, so it needs the same
+// credential a storefront would carry: an integration-layer session bearer, minted
+// through the ordinary `POST /<project>/session` endpoint.
+//
+// There is deliberately NO privileged/debug path here. The two grants below are the
+// two a real storefront uses — anonymous, and a customer logging in with their own
+// email and password. The retired operator console had an `x-il-act-as`
+// impersonation bar that ran under the project's service-account credentials; that
+// is exactly what this does not reimplement. If you want to explore as a customer,
+// you log in as that customer.
+//
+// PRESENTMENT (locale / currency / country) rides the same mint call. The GraphQL
+// boundary reads all three straight off the session and FAILS the request if any is
+// missing — there is no `?? "en-US"` downstream — so a session is only ever minted
+// with them resolved. Mint is the one place they can be chosen: the integration
+// layer applies its own project-configured defaults when we send none, exactly as
+// it does for a storefront that has no locale switcher. Passing them here is
+// therefore the storefront's own flow, not a debug override.
+/**
+ * Mint an integration-layer session bearer at `POST <authUrl>/<project>/session`.
+ *
+ * `authUrl` is the identity edge (the storefront pod), NOT the extensions edge that
+ * serves the manage-surface routes — in the deployed topology those are different
+ * hosts (`auth.…` vs `extensions.…`), which is why the explorer resolves them
+ * separately.
+ */
+export async function mintSession(authUrl, projectKey, grant, presentment = {}) {
+    const base = authUrl.replace(/\/+$/, "");
+    const url = `${base}/${encodeURIComponent(projectKey)}/session`;
+    const identity = grant.kind === "anonymous"
+        ? { grant_type: "anonymous" }
+        : { grant_type: "password", email: grant.email, password: grant.password };
+    // Currency and country are upper-cased to the canonical form the session will
+    // hold (the integration layer upper-cases them too, so `--currency eur` already
+    // worked) — done here so the banner reports the value the session actually got
+    // rather than echoing back what was typed. Locale keeps its case: `de-DE` is not
+    // `DE-DE`.
+    const chosen = {
+        locale: presentment.locale,
+        currency: presentment.currency?.toUpperCase(),
+        country: presentment.country?.toUpperCase(),
+    };
+    // Only send what was actually chosen: an absent key means "use the project's
+    // default", which is a different instruction to sending an empty string.
+    const body = {
+        ...identity,
+        ...(chosen.locale === undefined ? {} : { locale: chosen.locale }),
+        ...(chosen.currency === undefined ? {} : { currency: chosen.currency }),
+        ...(chosen.country === undefined ? {} : { country: chosen.country }),
+    };
+    const res = await fetch(url, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify(body),
+    });
+    const text = await res.text();
+    if (!res.ok) {
+        // Surface the integration layer's own error (an OAuth-shaped
+        // `{ error, error_description }`) rather than a bare status — a bad password
+        // and an unreachable edge should not read the same.
+        let detail = text;
+        try {
+            const parsed = JSON.parse(text);
+            detail = parsed.error_description ?? parsed.error ?? text;
+        }
+        catch {
+            // not JSON — use the raw body
+        }
+        const who = grant.kind === "anonymous" ? "an anonymous session" : `a session for ${grant.email}`;
+        throw new Error(`could not mint ${who} (${res.status}) at ${url}: ${detail}`);
+    }
+    const token = JSON.parse(text).token;
+    if (!token)
+        throw new Error(`session response from ${url} had no \`token\``);
+    return {
+        token,
+        describe: grant.kind === "anonymous" ? "anonymous" : `customer ${grant.email}`,
+        presentment: describePresentment(chosen),
+    };
+}
+/**
+ * What the banner says prices will be shown in. Reports what was REQUESTED, marking
+ * the rest as the project's — the mint response carries the token only, so claiming
+ * a concrete value we did not choose would mean decoding the session JWT and
+ * depending on its internal shape.
+ */
+function describePresentment(p) {
+    const parts = [
+        p.locale ?? "project locale",
+        p.currency ?? "project currency",
+        p.country ?? "project country",
+    ];
+    if (!p.locale && !p.currency && !p.country)
+        return "project defaults";
+    return parts.join(" / ");
+}
+//# sourceMappingURL=session.js.map

package/dist/lib/tooling/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../src/lib/tooling/session.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,+EAA+E;AAC/E,mFAAmF;AACnF,2DAA2D;AAC3D,EAAE;AACF,oFAAoF;AACpF,mFAAmF;AACnF,wEAAwE;AACxE,mFAAmF;AACnF,mFAAmF;AACnF,+BAA+B;AAC/B,EAAE;AACF,kFAAkF;AAClF,oFAAoF;AACpF,mFAAmF;AACnF,gFAAgF;AAChF,kFAAkF;AAClF,6EAA6E;AAC7E,6DAA6D;AA4B7D;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAe,EACf,UAAkB,EAClB,KAAmB,EACnB,cAA2B,EAAE;IAE7B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,kBAAkB,CAAC,UAAU,CAAC,UAAU,CAAC;IAChE,MAAM,QAAQ,GACZ,KAAK,CAAC,IAAI,KAAK,WAAW;QACxB,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE;QAC7B,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC/E,8EAA8E;IAC9E,gFAAgF;IAChF,+EAA+E;IAC/E,iFAAiF;IACjF,WAAW;IACX,MAAM,MAAM,GAAgB;QAC1B,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,WAAW,EAAE;QAC7C,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE;KAC5C,CAAC;IACF,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,IAAI,GAAG;QACX,GAAG,QAAQ;QACX,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACjE,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;KACrE,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,6DAA6D;QAC7D,6EAA6E;QAC7E,oDAAoD;QACpD,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmD,CAAC;YAClF,MAAM,GAAG,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,iBAAiB,KAAK,CAAC,KAAK,EAAE,CAAC;QACjG,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,KAAK,GAAG,CAAC,MAAM,QAAQ,GAAG,KAAK,MAAM,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,KAAK,GAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAwB,CAAC,KAAK,CAAC;IAC7D,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,mBAAmB,CAAC,CAAC;IAE7E,OAAO;QACL,KAAK;QACL,QAAQ,EAAE,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,KAAK,EAAE;QAC9E,WAAW,EAAE,mBAAmB,CAAC,MAAM,CAAC;KACzC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,CAAc;IACzC,MAAM,KAAK,GAAG;QACZ,CAAC,CAAC,MAAM,IAAI,gBAAgB;QAC5B,CAAC,CAAC,QAAQ,IAAI,kBAAkB;QAChC,CAAC,CAAC,OAAO,IAAI,iBAAiB;KAC/B,CAAC;IACF,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,kBAAkB,CAAC;IACtE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@commercetools/cli-topic-integration-layer",
-  "version": "0.2.1",
+  "version": "0.3.1",
   "description": "commercetools CLI plugin: integration-layer topic",
   "license": "MIT",
   "type": "module",
@@ -14,28 +14,20 @@
     "access": "public",
     "registry": "https://registry.npmjs.org/"
   },
-  "scripts": {
-    "clean": "rimraf dist",
-    "build": "pnpm clean && tsc -p tsconfig.build.json",
-    "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.test.json",
-    "test": "vitest run --disable-console-intercept"
-  },
   "dependencies": {
+    "@commercetools/cli-plugin-auth": ">=0.0.6",
     "@apollo/composition": "^2.14.1",
     "@apollo/gateway": "^2.14.1",
     "@apollo/subgraph": "^2.14.1",
     "@envelop/apollo-federation": "^8.1.1",
+    "@graphql-tools/merge": "^9.2.2",
     "@oclif/core": "4.2.10",
     "esbuild": "^0.28.0",
     "graphql": "^16.9.0",
     "graphql-yoga": "^5.21.2",
     "typescript": "^5.7.2"
   },
-  "peerDependencies": {
-    "@commercetools/cli-plugin-auth": ">=0.0.6"
-  },
   "devDependencies": {
-    "@commercetools/cli-plugin-auth": "0.0.6",
     "@commercetools/platform-sdk": "8.25.0",
     "@oclif/test": "^4.1.12",
     "@types/node": "^22.10.2",
@@ -45,5 +37,11 @@
   "oclif": {
     "topicSeparator": " ",
     "commands": "./dist/commands"
+  },
+  "scripts": {
+    "clean": "rimraf dist",
+    "build": "pnpm clean && tsc -p tsconfig.build.json",
+    "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.test.json",
+    "test": "vitest run --disable-console-intercept"
   }
-}
+}