@salesforce/b2c-tooling-sdk 0.0.1 → 0.0.3

package/dist/esm/config/mapping.js

@@ -0,0 +1,212 @@
+import { B2CInstance } from '../instance/index.js';
+/**
+ * Maps dw.json fields to normalized config format.
+ *
+ * This is the SINGLE place where dw.json field mapping happens.
+ * Handles multiple field name variants for backward compatibility:
+ * - WebDAV hostname: `webdav-hostname`, `secureHostname`, `secure-server`
+ * - Short code: `shortCode`, `short-code`, `scapi-shortcode`
+ *
+ * @param json - The raw dw.json config
+ * @returns Normalized configuration
+ *
+ * @example
+ * ```typescript
+ * import { mapDwJsonToNormalizedConfig } from '@salesforce/b2c-tooling-sdk/config';
+ *
+ * const dwJson = { hostname: 'example.com', 'code-version': 'v1' };
+ * const config = mapDwJsonToNormalizedConfig(dwJson);
+ * // { hostname: 'example.com', codeVersion: 'v1' }
+ * ```
+ */
+export function mapDwJsonToNormalizedConfig(json) {
+    return {
+        hostname: json.hostname,
+        // Support multiple field names for webdav hostname (priority order)
+        webdavHostname: json['webdav-hostname'] || json.secureHostname || json['secure-server'],
+        codeVersion: json['code-version'],
+        username: json.username,
+        password: json.password,
+        clientId: json['client-id'],
+        clientSecret: json['client-secret'],
+        scopes: json['oauth-scopes'],
+        // Support multiple field names for short code (priority order)
+        shortCode: json.shortCode || json['short-code'] || json['scapi-shortcode'],
+        instanceName: json.name,
+        authMethods: json['auth-methods'],
+        accountManagerHost: json['account-manager-host'],
+        mrtProject: json.mrtProject,
+        mrtEnvironment: json.mrtEnvironment,
+    };
+}
+/**
+ * Merges configurations with hostname mismatch protection.
+ *
+ * Applies the precedence rule: overrides > base.
+ * If hostname protection is enabled and the override hostname differs from
+ * the base hostname, the entire base config is ignored to prevent
+ * credential leakage between different instances.
+ *
+ * @param overrides - Higher-priority config values (e.g., from CLI flags/env)
+ * @param base - Lower-priority config values (e.g., from dw.json)
+ * @param options - Merge options
+ * @returns Merged config with warnings
+ *
+ * @example
+ * ```typescript
+ * import { mergeConfigsWithProtection } from '@salesforce/b2c-tooling-sdk/config';
+ *
+ * const { config, warnings } = mergeConfigsWithProtection(
+ *   { hostname: 'staging.example.com' },
+ *   { hostname: 'prod.example.com', clientId: 'abc' },
+ *   { hostnameProtection: true }
+ * );
+ * // config = { hostname: 'staging.example.com' }
+ * // warnings = [{ code: 'HOSTNAME_MISMATCH', ... }]
+ * ```
+ */
+export function mergeConfigsWithProtection(overrides, base, options = {}) {
+    const warnings = [];
+    const hostnameProtection = options.hostnameProtection !== false;
+    // Check for hostname mismatch
+    const hostnameExplicitlyProvided = Boolean(overrides.hostname);
+    const hostnameMismatch = hostnameExplicitlyProvided && Boolean(base.hostname) && overrides.hostname !== base.hostname;
+    if (hostnameMismatch && hostnameProtection) {
+        warnings.push({
+            code: 'HOSTNAME_MISMATCH',
+            message: `Hostname override "${overrides.hostname}" differs from config file "${base.hostname}". Config file values ignored.`,
+            details: {
+                providedHostname: overrides.hostname,
+                configHostname: base.hostname,
+            },
+        });
+        // Return only overrides, ignore base entirely
+        return {
+            config: { ...overrides },
+            warnings,
+            hostnameMismatch: true,
+        };
+    }
+    // Normal merge - overrides win, use ?? for proper undefined handling
+    return {
+        config: {
+            hostname: overrides.hostname ?? base.hostname,
+            webdavHostname: overrides.webdavHostname ?? base.webdavHostname,
+            codeVersion: overrides.codeVersion ?? base.codeVersion,
+            username: overrides.username ?? base.username,
+            password: overrides.password ?? base.password,
+            clientId: overrides.clientId ?? base.clientId,
+            clientSecret: overrides.clientSecret ?? base.clientSecret,
+            scopes: overrides.scopes ?? base.scopes,
+            authMethods: overrides.authMethods ?? base.authMethods,
+            accountManagerHost: overrides.accountManagerHost ?? base.accountManagerHost,
+            shortCode: overrides.shortCode ?? base.shortCode,
+            instanceName: overrides.instanceName ?? base.instanceName,
+            mrtProject: overrides.mrtProject ?? base.mrtProject,
+            mrtEnvironment: overrides.mrtEnvironment ?? base.mrtEnvironment,
+            mrtApiKey: overrides.mrtApiKey ?? base.mrtApiKey,
+            mrtOrigin: overrides.mrtOrigin ?? base.mrtOrigin,
+        },
+        warnings,
+        hostnameMismatch: false,
+    };
+}
+/**
+ * Gets the list of fields that have values in a config.
+ *
+ * Used for tracking which sources contributed which fields during
+ * configuration resolution.
+ *
+ * @param config - The configuration to inspect
+ * @returns Array of field names that have non-empty values
+ *
+ * @example
+ * ```typescript
+ * const config = { hostname: 'example.com', clientId: 'abc' };
+ * const fields = getPopulatedFields(config);
+ * // ['hostname', 'clientId']
+ * ```
+ */
+export function getPopulatedFields(config) {
+    const fields = [];
+    for (const [key, value] of Object.entries(config)) {
+        if (value !== undefined && value !== null && value !== '') {
+            fields.push(key);
+        }
+    }
+    return fields;
+}
+/**
+ * Builds an AuthConfig from a NormalizedConfig.
+ *
+ * This is the single source of truth for converting normalized config
+ * to the AuthConfig format expected by B2CInstance.
+ *
+ * @param config - The normalized configuration
+ * @returns AuthConfig for B2CInstance
+ *
+ * @example
+ * ```typescript
+ * const config = {
+ *   clientId: 'my-client-id',
+ *   clientSecret: 'my-secret',
+ *   username: 'admin',
+ *   password: 'pass',
+ * };
+ * const authConfig = buildAuthConfigFromNormalized(config);
+ * // { oauth: { clientId: '...', clientSecret: '...' }, basic: { username: '...', password: '...' } }
+ * ```
+ */
+export function buildAuthConfigFromNormalized(config) {
+    const authConfig = {
+        authMethods: config.authMethods,
+    };
+    if (config.username && config.password) {
+        authConfig.basic = {
+            username: config.username,
+            password: config.password,
+        };
+    }
+    if (config.clientId) {
+        authConfig.oauth = {
+            clientId: config.clientId,
+            clientSecret: config.clientSecret,
+            scopes: config.scopes,
+            accountManagerHost: config.accountManagerHost,
+        };
+    }
+    return authConfig;
+}
+/**
+ * Creates a B2CInstance from a NormalizedConfig.
+ *
+ * This utility provides a single source of truth for instance creation
+ * from resolved configuration. It is used by both ConfigResolver.createInstance()
+ * and CLI commands (e.g., InstanceCommand).
+ *
+ * @param config - The normalized configuration (must include hostname)
+ * @returns Configured B2CInstance
+ * @throws Error if hostname is not available in config
+ *
+ * @example
+ * ```typescript
+ * import { createInstanceFromConfig } from '@salesforce/b2c-tooling-sdk/config';
+ *
+ * const config = { hostname: 'example.demandware.net', clientId: 'abc' };
+ * const instance = createInstanceFromConfig(config);
+ * await instance.webdav.mkcol('Cartridges/v1');
+ * ```
+ */
+export function createInstanceFromConfig(config) {
+    if (!config.hostname) {
+        throw new Error('Hostname is required. Set in dw.json or provide via overrides.');
+    }
+    const instanceConfig = {
+        hostname: config.hostname,
+        codeVersion: config.codeVersion,
+        webdavHostname: config.webdavHostname,
+    };
+    const authConfig = buildAuthConfigFromNormalized(config);
+    return new B2CInstance(instanceConfig, authConfig);
+}
+//# sourceMappingURL=mapping.js.map

package/dist/esm/config/mapping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mapping.js","sourceRoot":"","sources":["../../../src/config/mapping.ts"],"names":[],"mappings":"AAcA,OAAO,EAAC,WAAW,EAAsB,MAAM,sBAAsB,CAAC;AAItE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAkB;IAC5D,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,oEAAoE;QACpE,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,eAAe,CAAC;QACvF,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;QACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;QAC3B,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC;QACnC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC;QAC5B,+DAA+D;QAC/D,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC;QAC1E,YAAY,EAAE,IAAI,CAAC,IAAI;QACvB,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;QACjC,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;QAChD,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC;AACJ,CAAC;AA2BD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,0BAA0B,CACxC,SAAoC,EACpC,IAAsB,EACtB,UAA8B,EAAE;IAEhC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,KAAK,KAAK,CAAC;IAEhE,8BAA8B;IAC9B,MAAM,0BAA0B,GAAG,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC/D,MAAM,gBAAgB,GAAG,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC;IAEtH,IAAI,gBAAgB,IAAI,kBAAkB,EAAE,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,sBAAsB,SAAS,CAAC,QAAQ,+BAA+B,IAAI,CAAC,QAAQ,gCAAgC;YAC7H,OAAO,EAAE;gBACP,gBAAgB,EAAE,SAAS,CAAC,QAAQ;gBACpC,cAAc,EAAE,IAAI,CAAC,QAAQ;aAC9B;SACF,CAAC,CAAC;QAEH,8CAA8C;QAC9C,OAAO;YACL,MAAM,EAAE,EAAC,GAAG,SAAS,EAAqB;YAC1C,QAAQ;YACR,gBAAgB,EAAE,IAAI;SACvB,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,OAAO;QACL,MAAM,EAAE;YACN,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;YAC7C,cAAc,EAAE,SAAS,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc;YAC/D,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW;YACtD,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;YAC7C,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;YAC7C,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;YAC7C,YAAY,EAAE,SAAS,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY;YACzD,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM;YACvC,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW;YACtD,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,IAAI,IAAI,CAAC,kBAAkB;YAC3E,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS;YAChD,YAAY,EAAE,SAAS,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY;YACzD,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU;YACnD,cAAc,EAAE,SAAS,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc;YAC/D,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS;YAChD,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS;SACjD;QACD,QAAQ;QACR,gBAAgB,EAAE,KAAK;KACxB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAwB;IACzD,MAAM,MAAM,GAA+B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,GAA6B,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,6BAA6B,CAAC,MAAwB;IACpE,MAAM,UAAU,GAAe;QAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC;IAEF,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,UAAU,CAAC,KAAK,GAAG;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,UAAU,CAAC,KAAK,GAAG;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;SAC9C,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAwB;IAC/D,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,cAAc,GAAmB;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,cAAc,EAAE,MAAM,CAAC,cAAc;KACtC,CAAC;IAEF,MAAM,UAAU,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC;IAEzD,OAAO,IAAI,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;AACrD,CAAC"}

package/dist/esm/config/resolved-config.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Resolved configuration implementation.
+ *
+ * @module config/resolved-config
+ */
+import type { AuthStrategy } from '../auth/types.js';
+import type { B2CInstance } from '../instance/index.js';
+import { MrtClient } from '../platform/mrt.js';
+import type { NormalizedConfig, ConfigWarning, ConfigSourceInfo, ResolvedB2CConfig, CreateOAuthOptions, CreateMrtClientOptions } from './types.js';
+/**
+ * Implementation of ResolvedB2CConfig.
+ *
+ * Provides validation methods and factory methods for creating SDK objects
+ * from resolved configuration.
+ */
+export declare class ResolvedConfigImpl implements ResolvedB2CConfig {
+    readonly values: NormalizedConfig;
+    readonly warnings: ConfigWarning[];
+    readonly sources: ConfigSourceInfo[];
+    constructor(values: NormalizedConfig, warnings: ConfigWarning[], sources: ConfigSourceInfo[]);
+    hasB2CInstanceConfig(): boolean;
+    hasMrtConfig(): boolean;
+    hasOAuthConfig(): boolean;
+    hasBasicAuthConfig(): boolean;
+    createB2CInstance(): B2CInstance;
+    createBasicAuth(): AuthStrategy;
+    createOAuth(options?: CreateOAuthOptions): AuthStrategy;
+    createMrtAuth(): AuthStrategy;
+    createWebDavAuth(): AuthStrategy;
+    createMrtClient(options?: CreateMrtClientOptions): MrtClient;
+}

package/dist/esm/config/resolved-config.js

@@ -0,0 +1,84 @@
+import { BasicAuthStrategy } from '../auth/basic.js';
+import { ApiKeyStrategy } from '../auth/api-key.js';
+import { resolveAuthStrategy } from '../auth/resolve.js';
+import { MrtClient } from '../platform/mrt.js';
+import { createInstanceFromConfig } from './mapping.js';
+/**
+ * Implementation of ResolvedB2CConfig.
+ *
+ * Provides validation methods and factory methods for creating SDK objects
+ * from resolved configuration.
+ */
+export class ResolvedConfigImpl {
+    values;
+    warnings;
+    sources;
+    constructor(values, warnings, sources) {
+        this.values = values;
+        this.warnings = warnings;
+        this.sources = sources;
+    }
+    // Validation methods
+    hasB2CInstanceConfig() {
+        return Boolean(this.values.hostname);
+    }
+    hasMrtConfig() {
+        return Boolean(this.values.mrtApiKey);
+    }
+    hasOAuthConfig() {
+        return Boolean(this.values.clientId);
+    }
+    hasBasicAuthConfig() {
+        return Boolean(this.values.username && this.values.password);
+    }
+    // Factory methods
+    createB2CInstance() {
+        if (!this.hasB2CInstanceConfig()) {
+            throw new Error('B2C instance requires hostname');
+        }
+        return createInstanceFromConfig(this.values);
+    }
+    createBasicAuth() {
+        if (!this.hasBasicAuthConfig()) {
+            throw new Error('Basic auth requires username and password');
+        }
+        return new BasicAuthStrategy(this.values.username, this.values.password);
+    }
+    createOAuth(options) {
+        if (!this.hasOAuthConfig()) {
+            throw new Error('OAuth requires clientId');
+        }
+        const credentials = {
+            clientId: this.values.clientId,
+            clientSecret: this.values.clientSecret,
+            scopes: this.values.scopes,
+            accountManagerHost: this.values.accountManagerHost,
+        };
+        return resolveAuthStrategy(credentials, { allowedMethods: options?.allowedMethods });
+    }
+    createMrtAuth() {
+        if (!this.hasMrtConfig()) {
+            throw new Error('MRT auth requires mrtApiKey');
+        }
+        return new ApiKeyStrategy(this.values.mrtApiKey, 'Authorization');
+    }
+    createWebDavAuth() {
+        // Prefer basic auth if available (simpler, no token refresh)
+        if (this.hasBasicAuthConfig()) {
+            return this.createBasicAuth();
+        }
+        // Fall back to OAuth
+        if (this.hasOAuthConfig()) {
+            return this.createOAuth();
+        }
+        throw new Error('WebDAV auth requires basic auth (username/password) or OAuth (clientId)');
+    }
+    createMrtClient(options) {
+        return new MrtClient({
+            org: options?.org ?? '',
+            project: options?.project ?? this.values.mrtProject ?? '',
+            env: options?.env ?? this.values.mrtEnvironment ?? '',
+        }, this.createMrtAuth());
+    }
+}
+//# sourceMappingURL=resolved-config.js.map

package/dist/esm/config/resolved-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolved-config.js","sourceRoot":"","sources":["../../../src/config/resolved-config.ts"],"names":[],"mappings":"AAWA,OAAO,EAAC,iBAAiB,EAAC,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAC,cAAc,EAAC,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAC,mBAAmB,EAAC,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAAC,SAAS,EAAC,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAC,wBAAwB,EAAC,MAAM,cAAc,CAAC;AAUtD;;;;;GAKG;AACH,MAAM,OAAO,kBAAkB;IAElB;IACA;IACA;IAHX,YACW,MAAwB,EACxB,QAAyB,EACzB,OAA2B;QAF3B,WAAM,GAAN,MAAM,CAAkB;QACxB,aAAQ,GAAR,QAAQ,CAAiB;QACzB,YAAO,GAAP,OAAO,CAAoB;IACnC,CAAC;IAEJ,qBAAqB;IAErB,oBAAoB;QAClB,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,YAAY;QACV,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAED,cAAc;QACZ,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,kBAAkB;QAChB,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/D,CAAC;IAED,kBAAkB;IAElB,iBAAiB;QACf,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IAED,eAAe;QACb,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAS,CAAC,CAAC;IAC7E,CAAC;IAED,WAAW,CAAC,OAA4B;QACtC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,WAAW,GAAoB;YACnC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACtC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC1B,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;SACnD,CAAC;QACF,OAAO,mBAAmB,CAAC,WAAW,EAAE,EAAC,cAAc,EAAE,OAAO,EAAE,cAAc,EAAC,CAAC,CAAC;IACrF,CAAC;IAED,aAAa;QACX,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,SAAU,EAAE,eAAe,CAAC,CAAC;IACrE,CAAC;IAED,gBAAgB;QACd,6DAA6D;QAC7D,IAAI,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,eAAe,EAAE,CAAC;QAChC,CAAC;QACD,qBAAqB;QACrB,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IAED,eAAe,CAAC,OAAgC;QAC9C,OAAO,IAAI,SAAS,CAClB;YACE,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE;YACvB,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE;YACzD,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE;SACtD,EACD,IAAI,CAAC,aAAa,EAAE,CACrB,CAAC;IACJ,CAAC;CACF"}

package/dist/esm/config/resolver.d.ts

@@ -0,0 +1,190 @@
+/**
+ * Configuration resolution.
+ *
+ * This module provides the ConfigResolver class, the preferred high-level API
+ * for loading B2C Commerce configuration from multiple sources.
+ *
+ * @module config/resolver
+ */
+import type { AuthCredentials } from '../auth/types.js';
+import type { B2CInstance } from '../instance/index.js';
+import type { ConfigSource, ConfigResolutionResult, NormalizedConfig, ResolveConfigOptions, ResolvedB2CConfig } from './types.js';
+/**
+ * Resolves configuration from multiple sources with consistent behavior.
+ *
+ * ConfigResolver is the preferred high-level API for loading B2C configuration.
+ * It provides:
+ * - Consistent hostname mismatch protection across SDK and CLI
+ * - Extensibility via the ConfigSource interface
+ * - Convenience methods for creating B2CInstance and auth credentials
+ *
+ * ## Resolution Priority
+ *
+ * Configuration is resolved with the following precedence (highest to lowest):
+ * 1. Explicit overrides (passed to resolve methods)
+ * 2. Sources in order (dw.json, ~/.mobify by default)
+ *
+ * ## Usage
+ *
+ * ```typescript
+ * import { createConfigResolver } from '@salesforce/b2c-tooling-sdk/config';
+ *
+ * const resolver = createConfigResolver();
+ *
+ * // Simple resolution
+ * const { config, warnings } = resolver.resolve({
+ *   hostname: process.env.SFCC_SERVER,
+ *   clientId: process.env.SFCC_CLIENT_ID,
+ * });
+ *
+ * // Create B2CInstance directly
+ * const instance = resolver.createInstance({ hostname: '...' });
+ *
+ * // Get auth credentials for use with resolveAuthStrategy
+ * const credentials = resolver.createAuthCredentials({ clientId: '...' });
+ * ```
+ *
+ * ## Custom Sources
+ *
+ * You can provide custom configuration sources:
+ *
+ * ```typescript
+ * import { ConfigResolver } from '@salesforce/b2c-tooling-sdk/config';
+ *
+ * class MySource implements ConfigSource {
+ *   name = 'my-source';
+ *   load(options) { return { hostname: 'custom.example.com' }; }
+ * }
+ *
+ * const resolver = new ConfigResolver([new MySource()]);
+ * ```
+ */
+export declare class ConfigResolver {
+    private sources;
+    /**
+     * Creates a new ConfigResolver.
+     *
+     * @param sources - Custom configuration sources. If not provided, uses default sources (dw.json, ~/.mobify).
+     */
+    constructor(sources?: ConfigSource[]);
+    /**
+     * Resolves configuration from all sources.
+     *
+     * @param overrides - Explicit values that take highest priority
+     * @param options - Resolution options
+     * @returns Resolution result with config, warnings, and source info
+     *
+     * @example
+     * ```typescript
+     * const { config, warnings, sources } = resolver.resolve(
+     *   { hostname: process.env.SFCC_SERVER },
+     *   { instance: 'staging' }
+     * );
+     *
+     * if (warnings.length > 0) {
+     *   console.warn('Config warnings:', warnings);
+     * }
+     * ```
+     */
+    resolve(overrides?: Partial<NormalizedConfig>, options?: ResolveConfigOptions): ConfigResolutionResult;
+    /**
+     * Creates a B2CInstance from resolved configuration.
+     *
+     * This is a convenience method that combines configuration resolution
+     * with B2CInstance creation.
+     *
+     * @param overrides - Explicit values that take highest priority
+     * @param options - Resolution options
+     * @returns Configured B2CInstance
+     * @throws Error if hostname is not available in resolved config
+     *
+     * @example
+     * ```typescript
+     * const instance = resolver.createInstance({
+     *   clientId: process.env.SFCC_CLIENT_ID,
+     *   clientSecret: process.env.SFCC_CLIENT_SECRET,
+     * });
+     *
+     * await instance.webdav.put('path/file.txt', content);
+     * ```
+     */
+    createInstance(overrides?: Partial<NormalizedConfig>, options?: ResolveConfigOptions): B2CInstance;
+    /**
+     * Creates auth credentials from resolved configuration.
+     *
+     * The returned credentials can be used with `resolveAuthStrategy()`
+     * to automatically select the best authentication method.
+     *
+     * @param overrides - Explicit values that take highest priority
+     * @param options - Resolution options
+     * @returns Auth credentials suitable for resolveAuthStrategy()
+     *
+     * @example
+     * ```typescript
+     * import { resolveAuthStrategy } from '@salesforce/b2c-tooling-sdk';
+     *
+     * const credentials = resolver.createAuthCredentials({
+     *   clientId: process.env.SFCC_CLIENT_ID,
+     * });
+     *
+     * const strategy = resolveAuthStrategy(credentials);
+     * ```
+     */
+    createAuthCredentials(overrides?: Partial<NormalizedConfig>, options?: ResolveConfigOptions): AuthCredentials;
+}
+/**
+ * Creates a ConfigResolver with default sources (dw.json, ~/.mobify).
+ *
+ * This is the recommended way to create a ConfigResolver for most use cases.
+ *
+ * @returns ConfigResolver with default configuration sources
+ *
+ * @example
+ * ```typescript
+ * import { createConfigResolver } from '@salesforce/b2c-tooling-sdk/config';
+ *
+ * const resolver = createConfigResolver();
+ * const { config } = resolver.resolve({ hostname: 'example.com' });
+ * ```
+ */
+export declare function createConfigResolver(): ConfigResolver;
+/**
+ * Resolves configuration from multiple sources and returns a rich config object.
+ *
+ * This is the preferred high-level API for configuration resolution. It returns
+ * a {@link ResolvedB2CConfig} object with validation methods and factory methods
+ * for creating SDK objects.
+ *
+ * ## Resolution Priority
+ *
+ * 1. Explicit overrides (passed as first argument)
+ * 2. Default sources (dw.json, ~/.mobify)
+ * 3. Custom sources (via options.sources)
+ *
+ * ## Example
+ *
+ * ```typescript
+ * import { resolveConfig } from '@salesforce/b2c-tooling-sdk/config';
+ *
+ * const config = resolveConfig({
+ *   hostname: process.env.SFCC_SERVER,
+ *   clientId: process.env.SFCC_CLIENT_ID,
+ *   mrtApiKey: process.env.MRT_API_KEY,
+ * });
+ *
+ * // Check what's available and create objects
+ * if (config.hasB2CInstanceConfig()) {
+ *   const instance = config.createB2CInstance();
+ *   await instance.webdav.propfind('Cartridges');
+ * }
+ *
+ * if (config.hasMrtConfig()) {
+ *   const mrtClient = config.createMrtClient({ project: 'my-project' });
+ * }
+ * ```
+ *
+ * @param overrides - Explicit configuration values (highest priority)
+ * @param options - Resolution options
+ * @returns Resolved configuration with factory methods
+ */
+export declare function resolveConfig(overrides?: Partial<NormalizedConfig>, options?: ResolveConfigOptions): ResolvedB2CConfig;