@salesforce/b2c-tooling-sdk 1.10.0 → 1.11.0

package/dist/cjs/cli/oauth-command.js

@@ -1,311 +0,0 @@
-/*
- * Copyright (c) 2025, Salesforce, Inc.
- * SPDX-License-Identifier: Apache-2
- * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
- */
-import { Flags } from '@oclif/core';
-import { BaseCommand } from './base-command.js';
-import { loadConfig, extractOAuthFlags, ALL_AUTH_METHODS } from './config.js';
-import { OAuthStrategy } from '../auth/oauth.js';
-import { ImplicitOAuthStrategy } from '../auth/oauth-implicit.js';
-import { StatefulOAuthStrategy } from '../auth/stateful-oauth-strategy.js';
-import { JwtOAuthStrategy } from '../auth/oauth-jwt.js';
-import { getStoredSession, isStatefulTokenValid } from '../auth/stateful-store.js';
-import { t } from '../i18n/index.js';
-import { DEFAULT_ACCOUNT_MANAGER_HOST } from '../defaults.js';
-import { normalizeTenantId, toOrganizationId } from '../clients/custom-apis.js';
-/**
- * Default OAuth authentication methods array used by getOAuthStrategy.
- * Extracted from getOAuthStrategy() to ensure getDefaultAuthMethods() returns the same array.
- *
- * Priority order:
- * 1. client-credentials (requires clientId + clientSecret)
- * 2. jwt (requires clientId + jwtCertPath + jwtKeyPath)
- * 3. implicit (requires clientId, browser-based)
- */
-const DEFAULT_OAUTH_AUTH_METHODS = ['client-credentials', 'jwt', 'implicit'];
-/**
- * Base command for operations requiring OAuth authentication.
- * Use this for platform-level operations like ODS, APIs.
- *
- * Environment variables:
- * - SFCC_CLIENT_ID: OAuth client ID
- * - SFCC_CLIENT_SECRET: OAuth client secret
- *
- * For B2C instance specific operations, use InstanceCommand instead.
- */
-export class OAuthCommand extends BaseCommand {
-    _rawArgv;
-    constructor(argv, config) {
-        super(argv, config);
-        this._rawArgv = [...argv];
-    }
-    static baseFlags = {
-        ...BaseCommand.baseFlags,
-        'client-id': Flags.string({
-            description: 'Client ID for OAuth',
-            env: 'SFCC_CLIENT_ID',
-            default: async () => process.env.SFCC_OAUTH_CLIENT_ID || undefined,
-            helpGroup: 'AUTH',
-        }),
-        'client-secret': Flags.string({
-            description: 'Client Secret for OAuth',
-            env: 'SFCC_CLIENT_SECRET',
-            default: async () => process.env.SFCC_OAUTH_CLIENT_SECRET || undefined,
-            helpGroup: 'AUTH',
-        }),
-        'auth-scope': Flags.string({
-            description: 'OAuth scopes to request (comma-separated)',
-            env: 'SFCC_OAUTH_SCOPES',
-            multiple: true,
-            multipleNonGreedy: true,
-            delimiter: ',',
-            helpGroup: 'AUTH',
-        }),
-        'short-code': Flags.string({
-            description: 'SCAPI short code',
-            env: 'SFCC_SHORTCODE',
-            helpGroup: 'AUTH',
-        }),
-        'tenant-id': Flags.string({
-            description: 'Organization/tenant ID',
-            env: 'SFCC_TENANT_ID',
-            helpGroup: 'AUTH',
-            aliases: ['tenant'],
-        }),
-        'auth-methods': Flags.string({
-            description: 'Allowed auth methods in priority order (comma-separated)',
-            env: 'SFCC_AUTH_METHODS',
-            multiple: true,
-            multipleNonGreedy: true,
-            delimiter: ',',
-            options: ALL_AUTH_METHODS,
-            helpGroup: 'AUTH',
-            exclusive: ['user-auth'],
-        }),
-        'user-auth': Flags.boolean({
-            description: 'Use browser-based user authentication (implicit OAuth flow)',
-            default: false,
-            exclusive: ['auth-methods'],
-            helpGroup: 'AUTH',
-        }),
-        'account-manager-host': Flags.string({
-            description: `Account Manager hostname for OAuth (default: ${DEFAULT_ACCOUNT_MANAGER_HOST})`,
-            env: 'SFCC_ACCOUNT_MANAGER_HOST',
-            default: async () => process.env.SFCC_LOGIN_URL || undefined,
-            helpGroup: 'AUTH',
-        }),
-        'jwt-cert': Flags.string({
-            description: 'Path to JWT certificate file (cert.pem) for JWT Bearer authentication',
-            env: 'SFCC_JWT_CERT',
-            helpGroup: 'AUTH',
-        }),
-        'jwt-key': Flags.string({
-            description: 'Path to JWT private key file (key.pem) for JWT Bearer authentication',
-            env: 'SFCC_JWT_KEY',
-            helpGroup: 'AUTH',
-        }),
-        'jwt-passphrase': Flags.string({
-            description: 'Passphrase for encrypted JWT private key',
-            env: 'SFCC_JWT_PASSPHRASE',
-            helpGroup: 'AUTH',
-        }),
-    };
-    async loadConfiguration() {
-        return loadConfig(extractOAuthFlags(this.flags), this.getBaseConfigOptions());
-    }
-    /**
-     * Gets the configured Account Manager host.
-     */
-    get accountManagerHost() {
-        return this.resolvedConfig.values.accountManagerHost ?? DEFAULT_ACCOUNT_MANAGER_HOST;
-    }
-    /**
-     * Gets the default authentication methods in priority order.
-     * This method is used by getOAuthStrategy() when no auth methods are specified in config.
-     * Subclasses can override this to change the default priority — for example,
-     * commands that talk to endpoints requiring a real user identity should
-     * return `['implicit']` so that user-auth is preferred when the user has
-     * not explicitly chosen an auth method.
-     *
-     * Explicit user input via `--auth-methods`, `--client-secret`, `--jwt-cert`,
-     * etc. always wins over the default; this method only changes what happens
-     * when the user has not specified anything.
-     *
-     * @returns Array of auth methods in priority order (first is highest priority)
-     */
-    getDefaultAuthMethods() {
-        return DEFAULT_OAUTH_AUTH_METHODS;
-    }
-    /**
-     * Returns a default client ID for implicit OAuth flows when no client ID is configured.
-     * Returns undefined by default. Subclasses (AmCommand, OdsCommand, etc.) override this
-     * to return DEFAULT_PUBLIC_CLIENT_ID for platform-level commands that support public client tokens.
-     */
-    getDefaultClientId() {
-        return undefined;
-    }
-    /**
-     * Gets an OAuth auth strategy based on allowed auth methods and available credentials.
-     *
-     * Iterates through allowed methods (in priority order) and returns the first
-     * strategy for which the required credentials are available.
-     *
-     * For the implicit flow, falls back to getDefaultClientId() when no client ID
-     * is explicitly configured.
-     *
-     * @throws Error if no allowed method has the required credentials configured
-     */
-    getOAuthStrategy() {
-        const config = this.resolvedConfig.values;
-        const accountManagerHost = this.accountManagerHost;
-        const requiredScopes = config.scopes ?? [];
-        const statefulSession = getStoredSession();
-        const explicitAuthFlags = this.detectExplicitAuthFlags();
-        const configuredClientId = config.clientId;
-        const validSession = statefulSession !== null && isStatefulTokenValid(statefulSession, requiredScopes, undefined, configuredClientId);
-        // Use stateful auth only when the session is valid and no explicit auth flags override it
-        if (validSession && explicitAuthFlags.length === 0) {
-            this.logger.debug('[Auth] Using stateful session');
-            return new StatefulOAuthStrategy(statefulSession, {
-                accountManagerHost,
-                scopes: requiredScopes,
-            });
-        }
-        // Warn when an invalid stored session exists or explicit auth flags override a valid one
-        if (statefulSession) {
-            if (validSession && explicitAuthFlags.length > 0) {
-                this.warn(t('warning.statefulTokenOverridden', '[StatefulAuth] Valid token found in stored session. ' +
-                    `However, switching to stateless auth due to presence of ${explicitAuthFlags.join(', ')}. ` +
-                    'Remove these flags to use the stored session.'));
-            }
-            else if (!validSession) {
-                const renewable = statefulSession.renewBase !== null && statefulSession.renewBase !== undefined;
-                this.warn(t(renewable ? 'warning.statefulTokenExpired' : 'warning.statefulTokenExpiredNoRenew', '[StatefulAuth] [sfcc-ci compatibility] Stored token is expired or invalid for the given request. ' +
-                    (renewable
-                        ? 'Run `b2c auth client renew` to refresh it. '
-                        : 'Run `b2c auth client` or `b2c auth login` to re-authenticate. ') +
-                    'Falling back to stateless auth.'));
-            }
-        }
-        // Fall back to stateless auth
-        const allowedMethods = config.authMethods || this.getDefaultAuthMethods();
-        const defaultClientId = this.getDefaultClientId();
-        for (const method of allowedMethods) {
-            switch (method) {
-                case 'client-credentials':
-                    if (config.clientId && config.clientSecret) {
-                        return new OAuthStrategy({
-                            clientId: config.clientId,
-                            clientSecret: config.clientSecret,
-                            scopes: config.scopes,
-                            accountManagerHost,
-                        });
-                    }
-                    break;
-                case 'jwt':
-                    // JWT Bearer authentication - requires client ID and cert/key pair
-                    if (config.clientId && config.jwtCertPath && config.jwtKeyPath) {
-                        try {
-                            this.logger.debug('[Auth] Using JWT Bearer authentication');
-                            return new JwtOAuthStrategy({
-                                clientId: config.clientId,
-                                certPath: config.jwtCertPath,
-                                keyPath: config.jwtKeyPath,
-                                passphrase: config.jwtPassphrase,
-                                accountManagerHost,
-                                scopes: config.scopes,
-                            });
-                        }
-                        catch (error) {
-                            // JWT config is present but invalid (corrupted files, wrong passphrase, etc.)
-                            // Log warning and fall through to next auth method
-                            const message = error instanceof Error ? error.message : String(error);
-                            this.logger.warn(`[Auth] JWT authentication configured but invalid: ${message}. Trying next auth method.`);
-                        }
-                    }
-                    break;
-                case 'implicit': {
-                    const effectiveClientId = config.clientId ?? defaultClientId;
-                    if (effectiveClientId) {
-                        if (!config.clientId && defaultClientId) {
-                            this.logger.debug('Using default B2C CLI public client for authentication');
-                        }
-                        return new ImplicitOAuthStrategy({
-                            clientId: effectiveClientId,
-                            scopes: config.scopes,
-                            accountManagerHost,
-                        });
-                    }
-                    break;
-                }
-                // 'basic' and 'api-key' are not applicable for OAuth strategies
-                // They would be handled by different command bases (e.g., InstanceCommand, MRTCommand)
-            }
-        }
-        // Build helpful error message based on what methods were allowed
-        const methodsStr = allowedMethods.join(', ');
-        throw new Error(t('error.noValidAuthMethod', `No valid auth method available. Allowed methods: [${methodsStr}]. ` +
-            `Ensure required credentials are configured for at least one method.`));
-    }
-    /**
-     * Detects explicit CLI flags that indicate intent to use stateless auth.
-     * Only flags that mandate a specific auth flow are considered:
-     * - --client-secret: indicates client-credentials flow
-     * - --jwt-cert / --jwt-key: indicates JWT Bearer flow
-     * - --user-auth: indicates browser-based implicit flow
-     * - --auth-methods: explicit auth method selection
-     *
-     * Contextual flags (--client-id, --auth-scope, --short-code, --tenant-id,
-     * --account-manager-host) are NOT included because they are handled by
-     * isStatefulTokenValid (clientId/scope matching) or don't affect auth flow.
-     */
-    detectExplicitAuthFlags() {
-        const rawArgs = this._rawArgv;
-        const statelessFlags = ['--client-secret', '--jwt-cert', '--jwt-key', '--user-auth', '--auth-methods'];
-        return statelessFlags.filter((flag) => rawArgs.some((arg) => arg === flag || arg.startsWith(`${flag}=`)));
-    }
-    /**
-     * Check if OAuth credentials are available.
-     * Returns true if clientId is configured (with or without clientSecret),
-     * or if a default client ID is available for implicit flows.
-     */
-    hasOAuthCredentials() {
-        return (this.resolvedConfig.hasOAuthConfig() || this.getDefaultClientId() !== undefined || getStoredSession() !== null);
-    }
-    /**
-     * Check if full OAuth credentials (client credentials flow) are available.
-     * Returns true only if both clientId and clientSecret are configured.
-     */
-    hasFullOAuthCredentials() {
-        const config = this.resolvedConfig.values;
-        return Boolean(config.clientId && config.clientSecret);
-    }
-    /**
-     * Validates that OAuth credentials are configured, errors if not.
-     * Only clientId is required (implicit flow can be used without clientSecret).
-     */
-    requireOAuthCredentials() {
-        if (!this.hasOAuthCredentials()) {
-            this.error(t('error.oauthClientIdRequired', 'OAuth client ID required. Provide --client-id or set SFCC_CLIENT_ID.'));
-        }
-    }
-    /**
-     * Get the tenant ID from resolved config, throwing if not available.
-     * @throws Error if tenant ID is not provided through any source
-     */
-    requireTenantId() {
-        const tenantId = this.resolvedConfig.values.tenantId;
-        if (!tenantId) {
-            this.error(t('error.tenantIdRequired', 'tenant-id is required. Provide via --tenant-id flag, SFCC_TENANT_ID env var, or tenant-id in dw.json.'));
-        }
-        return normalizeTenantId(tenantId);
-    }
-    /**
-     * Organization ID (`f_ecom_*`) for API path parameters from the resolved tenant.
-     */
-    getOrganizationId() {
-        return toOrganizationId(this.requireTenantId());
-    }
-}
-//# sourceMappingURL=oauth-command.js.map

package/dist/cjs/cli/oauth-command.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth-command.js","sourceRoot":"","sources":["../../../src/cli/oauth-command.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAU,KAAK,EAAC,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAC,WAAW,EAAC,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAC,UAAU,EAAE,iBAAiB,EAAE,gBAAgB,EAAC,MAAM,aAAa,CAAC;AAG5E,OAAO,EAAC,aAAa,EAAC,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAC,qBAAqB,EAAC,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAC,qBAAqB,EAAC,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAC,gBAAgB,EAAC,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAC,gBAAgB,EAAE,oBAAoB,EAAC,MAAM,2BAA2B,CAAC;AACjF,OAAO,EAAC,CAAC,EAAC,MAAM,kBAAkB,CAAC;AACnC,OAAO,EAAC,4BAA4B,EAAC,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAC,iBAAiB,EAAE,gBAAgB,EAAC,MAAM,2BAA2B,CAAC;AAE9E;;;;;;;;GAQG;AACH,MAAM,0BAA0B,GAAiB,CAAC,oBAAoB,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;AAE3F;;;;;;;;;GASG;AACH,MAAM,OAAgB,YAAuC,SAAQ,WAAc;IAChE,QAAQ,CAAW;IAEpC,YAAY,IAAc,EAAE,MAAgD;QAC1E,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,CAAC,SAAS,GAAG;QACjB,GAAG,WAAW,CAAC,SAAS;QACxB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC;YACxB,WAAW,EAAE,qBAAqB;YAClC,GAAG,EAAE,gBAAgB;YACrB,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,SAAS;YAClE,SAAS,EAAE,MAAM;SAClB,CAAC;QACF,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC;YAC5B,WAAW,EAAE,yBAAyB;YACtC,GAAG,EAAE,oBAAoB;YACzB,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,SAAS;YACtE,SAAS,EAAE,MAAM;SAClB,CAAC;QACF,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC;YACzB,WAAW,EAAE,2CAA2C;YACxD,GAAG,EAAE,mBAAmB;YACxB,QAAQ,EAAE,IAAI;YACd,iBAAiB,EAAE,IAAI;YACvB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,MAAM;SAClB,CAAC;QACF,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC;YACzB,WAAW,EAAE,kBAAkB;YAC/B,GAAG,EAAE,gBAAgB;YACrB,SAAS,EAAE,MAAM;SAClB,CAAC;QACF,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC;YACxB,WAAW,EAAE,wBAAwB;YACrC,GAAG,EAAE,gBAAgB;YACrB,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,CAAC,QAAQ,CAAC;SACpB,CAAC;QACF,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC;YAC3B,WAAW,EAAE,0DAA0D;YACvE,GAAG,EAAE,mBAAmB;YACxB,QAAQ,EAAE,IAAI;YACd,iBAAiB,EAAE,IAAI;YACvB,SAAS,EAAE,GAAG;YACd,OAAO,EAAE,gBAAgB;YACzB,SAAS,EAAE,MAAM;YACjB,SAAS,EAAE,CAAC,WAAW,CAAC;SACzB,CAAC;QACF,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC;YACzB,WAAW,EAAE,6DAA6D;YAC1E,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,CAAC,cAAc,CAAC;YAC3B,SAAS,EAAE,MAAM;SAClB,CAAC;QACF,sBAAsB,EAAE,KAAK,CAAC,MAAM,CAAC;YACnC,WAAW,EAAE,gDAAgD,4BAA4B,GAAG;YAC5F,GAAG,EAAE,2BAA2B;YAChC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,SAAS;YAC5D,SAAS,EAAE,MAAM;SAClB,CAAC;QACF,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC;YACvB,WAAW,EAAE,uEAAuE;YACpF,GAAG,EAAE,eAAe;YACpB,SAAS,EAAE,MAAM;SAClB,CAAC;QACF,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC;YACtB,WAAW,EAAE,sEAAsE;YACnF,GAAG,EAAE,cAAc;YACnB,SAAS,EAAE,MAAM;SAClB,CAAC;QACF,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC;YAC7B,WAAW,EAAE,0CAA0C;YACvD,GAAG,EAAE,qBAAqB;YAC1B,SAAS,EAAE,MAAM;SAClB,CAAC;KACH,CAAC;IAEiB,KAAK,CAAC,iBAAiB;QACxC,OAAO,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAgC,CAAC,EAAE,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC3G,CAAC;IAED;;OAEG;IACH,IAAc,kBAAkB;QAC9B,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,kBAAkB,IAAI,4BAA4B,CAAC;IACvF,CAAC;IAED;;;;;;;;;;;;;OAaG;IACO,qBAAqB;QAC7B,OAAO,0BAA0B,CAAC;IACpC,CAAC;IAED;;;;OAIG;IACO,kBAAkB;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;;OAUG;IACO,gBAAgB;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;QAC1C,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;QACnD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QAE3C,MAAM,eAAe,GAAG,gBAAgB,EAAE,CAAC;QAC3C,MAAM,iBAAiB,GAAG,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACzD,MAAM,kBAAkB,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC3C,MAAM,YAAY,GAChB,eAAe,KAAK,IAAI,IAAI,oBAAoB,CAAC,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;QAEnH,0FAA0F;QAC1F,IAAI,YAAY,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,OAAO,IAAI,qBAAqB,CAAC,eAAe,EAAE;gBAChD,kBAAkB;gBAClB,MAAM,EAAE,cAAc;aACvB,CAAC,CAAC;QACL,CAAC;QAED,yFAAyF;QACzF,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,YAAY,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjD,IAAI,CAAC,IAAI,CACP,CAAC,CACC,iCAAiC,EACjC,sDAAsD;oBACpD,2DAA2D,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBAC3F,+CAA+C,CAClD,CACF,CAAC;YACJ,CAAC;iBAAM,IAAI,CAAC,YAAY,EAAE,CAAC;gBACzB,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,KAAK,IAAI,IAAI,eAAe,CAAC,SAAS,KAAK,SAAS,CAAC;gBAChG,IAAI,CAAC,IAAI,CACP,CAAC,CACC,SAAS,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,qCAAqC,EAClF,mGAAmG;oBACjG,CAAC,SAAS;wBACR,CAAC,CAAC,6CAA6C;wBAC/C,CAAC,CAAC,gEAAgE,CAAC;oBACrE,iCAAiC,CACpC,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC1E,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAElD,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,oBAAoB;oBACvB,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;wBAC3C,OAAO,IAAI,aAAa,CAAC;4BACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;4BACzB,YAAY,EAAE,MAAM,CAAC,YAAY;4BACjC,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,kBAAkB;yBACnB,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBAER,KAAK,KAAK;oBACR,mEAAmE;oBACnE,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;wBAC/D,IAAI,CAAC;4BACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;4BAC5D,OAAO,IAAI,gBAAgB,CAAC;gCAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gCACzB,QAAQ,EAAE,MAAM,CAAC,WAAW;gCAC5B,OAAO,EAAE,MAAM,CAAC,UAAU;gCAC1B,UAAU,EAAE,MAAM,CAAC,aAAa;gCAChC,kBAAkB;gCAClB,MAAM,EAAE,MAAM,CAAC,MAAM;6BACtB,CAAC,CAAC;wBACL,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,8EAA8E;4BAC9E,mDAAmD;4BACnD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;4BACvE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,qDAAqD,OAAO,4BAA4B,CACzF,CAAC;wBACJ,CAAC;oBACH,CAAC;oBACD,MAAM;gBAER,KAAK,UAAU,CAAC,CAAC,CAAC;oBAChB,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,IAAI,eAAe,CAAC;oBAC7D,IAAI,iBAAiB,EAAE,CAAC;wBACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,eAAe,EAAE,CAAC;4BACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;wBAC9E,CAAC;wBACD,OAAO,IAAI,qBAAqB,CAAC;4BAC/B,QAAQ,EAAE,iBAAiB;4BAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,kBAAkB;yBACnB,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,gEAAgE;gBAChE,uFAAuF;YACzF,CAAC;QACH,CAAC;QAED,iEAAiE;QACjE,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,CAAC,CACC,yBAAyB,EACzB,qDAAqD,UAAU,KAAK;YAClE,qEAAqE,CACxE,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACK,uBAAuB;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,MAAM,cAAc,GAAG,CAAC,iBAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;QACvG,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5G,CAAC;IAED;;;;OAIG;IACO,mBAAmB;QAC3B,OAAO,CACL,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,kBAAkB,EAAE,KAAK,SAAS,IAAI,gBAAgB,EAAE,KAAK,IAAI,CAC/G,CAAC;IACJ,CAAC;IAED;;;OAGG;IACO,uBAAuB;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;QAC1C,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC;IACzD,CAAC;IAED;;;OAGG;IACO,uBAAuB;QAC/B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CACR,CAAC,CAAC,6BAA6B,EAAE,sEAAsE,CAAC,CACzG,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACO,eAAe;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC;QAErD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,KAAK,CACR,CAAC,CACC,wBAAwB,EACxB,uGAAuG,CACxG,CACF,CAAC;QACJ,CAAC;QACD,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACO,iBAAiB;QACzB,OAAO,gBAAgB,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;IAClD,CAAC"}

package/dist/cjs/cli/ods-command.d.ts

@@ -1,97 +0,0 @@
-import { Command } from '@oclif/core';
-import { OAuthCommand } from './oauth-command.js';
-import type { ResolvedB2CConfig } from '../config/index.js';
-import { type OdsClient } from '../clients/ods.js';
-/**
- * Base command for ODS (On-Demand Sandbox) operations.
- * Use this for commands that interact with the Developer Sandbox API
- * (sandbox creation, deletion, start/stop, realm info, etc.)
- *
- * Environment variables:
- * - SFCC_SANDBOX_API_HOST: ODS API hostname
- * - Plus all from OAuthCommand (SFCC_CLIENT_ID, SFCC_CLIENT_SECRET)
- *
- * Provides:
- * - Host configuration flag with env var support
- * - Typed ODS API client via `this.odsClient`
- *
- * @example
- * export default class MySandboxCommand extends OdsCommand<typeof MySandboxCommand> {
- *   async run(): Promise<void> {
- *     const { data } = await this.odsClient.GET('/me', {});
- *     console.log('User:', data?.data?.user?.name);
- *   }
- * }
- */
-export declare abstract class OdsCommand<T extends typeof Command> extends OAuthCommand<T> {
-    protected getDefaultClientId(): string;
-    static baseFlags: {
-        'sandbox-api-host': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'client-id': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
-        'client-secret': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
-        'auth-scope': import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'short-code': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'tenant-id': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'auth-methods': import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'user-auth': import("@oclif/core/interfaces").BooleanFlag<boolean>;
-        'account-manager-host': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
-        'jwt-cert': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'jwt-key': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'jwt-passphrase': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'log-level': import("@oclif/core/interfaces").OptionFlag<"trace" | "debug" | "info" | "warn" | "error" | "silent" | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        debug: import("@oclif/core/interfaces").BooleanFlag<boolean>;
-        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
-        jsonl: import("@oclif/core/interfaces").BooleanFlag<boolean>;
-        lang: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        instance: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'project-directory': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
-        'extra-query': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'extra-body': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'extra-headers': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-    };
-    protected loadConfiguration(): Promise<ResolvedB2CConfig>;
-    private _odsClient?;
-    /**
-     * Gets the ODS API client for this command.
-     *
-     * The client is lazily created using the configured host and OAuth credentials.
-     * It provides typed methods for all ODS API operations.
-     *
-     * @example
-     * // Get user info
-     * const { data } = await this.odsClient.GET('/me', {});
-     *
-     * // List sandboxes
-     * const { data } = await this.odsClient.GET('/sandboxes', {});
-     *
-     * // Create a sandbox operation
-     * const { data } = await this.odsClient.POST('/sandboxes/{sandboxId}/operations', {
-     *   params: { path: { sandboxId: 'uuid' } },
-     *   body: { operation: 'start' }
-     * });
-     */
-    protected get odsClient(): OdsClient;
-    /**
-     * Gets the configured ODS API host.
-     */
-    protected get odsHost(): string;
-    /**
-     * Resolves a sandbox identifier to a UUID.
-     *
-     * Supports both UUID format and friendly format (realm-instance, e.g., "abcd-123" or "abcd_123").
-     * If given a UUID, returns it directly. If given a friendly format, queries the API to find
-     * the matching sandbox and logs the resolution.
-     *
-     * @param identifier - Sandbox identifier (UUID or friendly format)
-     * @returns The sandbox UUID
-     * @throws Error if the sandbox cannot be found (friendly ID not resolved)
-     *
-     * @example
-     * ```typescript
-     * // In a command's run() method:
-     * const sandboxId = await this.resolveSandboxId(this.args.sandboxId);
-     * ```
-     */
-    protected resolveSandboxId(identifier: string): Promise<string>;
-}

package/dist/cjs/cli/ods-command.js

@@ -1,136 +0,0 @@
-/*
- * Copyright (c) 2025, Salesforce, Inc.
- * SPDX-License-Identifier: Apache-2
- * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
- */
-import { Flags } from '@oclif/core';
-import { OAuthCommand } from './oauth-command.js';
-import { loadConfig, extractOdsFlags } from './config.js';
-import { createOdsClient } from '../clients/ods.js';
-import { DEFAULT_ODS_HOST, getDefaultPublicClientId } from '../defaults.js';
-import { isUuid, parseFriendlySandboxId, SandboxNotFoundError } from '../operations/ods/sandbox-lookup.js';
-/**
- * Base command for ODS (On-Demand Sandbox) operations.
- * Use this for commands that interact with the Developer Sandbox API
- * (sandbox creation, deletion, start/stop, realm info, etc.)
- *
- * Environment variables:
- * - SFCC_SANDBOX_API_HOST: ODS API hostname
- * - Plus all from OAuthCommand (SFCC_CLIENT_ID, SFCC_CLIENT_SECRET)
- *
- * Provides:
- * - Host configuration flag with env var support
- * - Typed ODS API client via `this.odsClient`
- *
- * @example
- * export default class MySandboxCommand extends OdsCommand<typeof MySandboxCommand> {
- *   async run(): Promise<void> {
- *     const { data } = await this.odsClient.GET('/me', {});
- *     console.log('User:', data?.data?.user?.name);
- *   }
- * }
- */
-export class OdsCommand extends OAuthCommand {
-    getDefaultClientId() {
-        return getDefaultPublicClientId(this.accountManagerHost);
-    }
-    static baseFlags = {
-        ...OAuthCommand.baseFlags,
-        'sandbox-api-host': Flags.string({
-            description: `ODS API hostname (default: ${DEFAULT_ODS_HOST})`,
-            env: 'SFCC_SANDBOX_API_HOST',
-            // helpGroup: 'ODS',
-        }),
-    };
-    async loadConfiguration() {
-        return loadConfig(extractOdsFlags(this.flags), this.getBaseConfigOptions());
-    }
-    _odsClient;
-    /**
-     * Gets the ODS API client for this command.
-     *
-     * The client is lazily created using the configured host and OAuth credentials.
-     * It provides typed methods for all ODS API operations.
-     *
-     * @example
-     * // Get user info
-     * const { data } = await this.odsClient.GET('/me', {});
-     *
-     * // List sandboxes
-     * const { data } = await this.odsClient.GET('/sandboxes', {});
-     *
-     * // Create a sandbox operation
-     * const { data } = await this.odsClient.POST('/sandboxes/{sandboxId}/operations', {
-     *   params: { path: { sandboxId: 'uuid' } },
-     *   body: { operation: 'start' }
-     * });
-     */
-    get odsClient() {
-        if (!this._odsClient) {
-            this.requireOAuthCredentials();
-            const authStrategy = this.getOAuthStrategy();
-            this._odsClient = createOdsClient({
-                host: this.odsHost,
-                extraParams: this.getExtraParams(),
-            }, authStrategy);
-        }
-        return this._odsClient;
-    }
-    /**
-     * Gets the configured ODS API host.
-     */
-    get odsHost() {
-        return this.resolvedConfig?.values.sandboxApiHost ?? DEFAULT_ODS_HOST;
-    }
-    /**
-     * Resolves a sandbox identifier to a UUID.
-     *
-     * Supports both UUID format and friendly format (realm-instance, e.g., "abcd-123" or "abcd_123").
-     * If given a UUID, returns it directly. If given a friendly format, queries the API to find
-     * the matching sandbox and logs the resolution.
-     *
-     * @param identifier - Sandbox identifier (UUID or friendly format)
-     * @returns The sandbox UUID
-     * @throws Error if the sandbox cannot be found (friendly ID not resolved)
-     *
-     * @example
-     * ```typescript
-     * // In a command's run() method:
-     * const sandboxId = await this.resolveSandboxId(this.args.sandboxId);
-     * ```
-     */
-    async resolveSandboxId(identifier) {
-        // If already a UUID, return directly
-        if (isUuid(identifier)) {
-            return identifier;
-        }
-        // Try to parse as friendly ID
-        const parsed = parseFriendlySandboxId(identifier);
-        if (!parsed) {
-            // Not a UUID and not a friendly ID - pass through as-is
-            // (let the API return an appropriate error)
-            return identifier;
-        }
-        // Log that we're looking up the sandbox
-        this.log(`Looking up sandbox ${identifier}...`);
-        // Query sandboxes filtered by realm
-        const { data, error } = await this.odsClient.GET('/sandboxes', {
-            params: {
-                query: {
-                    filter_params: `realm=${parsed.realm}`,
-                },
-            },
-        });
-        if (error || !data?.data) {
-            this.error(new SandboxNotFoundError(identifier, parsed.realm, parsed.instance).message);
-        }
-        // Find sandbox with matching instance
-        const sandbox = data.data.find((s) => s.instance?.toLowerCase() === parsed.instance);
-        if (!sandbox?.id) {
-            this.error(new SandboxNotFoundError(identifier, parsed.realm, parsed.instance).message);
-        }
-        this.log(`Resolved ${identifier} to sandbox ${sandbox.id}`);
-        return sandbox.id;
-    }
-}
-//# sourceMappingURL=ods-command.js.map

package/dist/cjs/cli/ods-command.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ods-command.js","sourceRoot":"","sources":["../../../src/cli/ods-command.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAU,KAAK,EAAC,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAC,YAAY,EAAC,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAC,UAAU,EAAE,eAAe,EAAC,MAAM,aAAa,CAAC;AAExD,OAAO,EAAC,eAAe,EAAiB,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAC,gBAAgB,EAAE,wBAAwB,EAAC,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAC,MAAM,EAAE,sBAAsB,EAAE,oBAAoB,EAAC,MAAM,qCAAqC,CAAC;AAEzG;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAgB,UAAqC,SAAQ,YAAe;IAC7D,kBAAkB;QACnC,OAAO,wBAAwB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,CAAC,SAAS,GAAG;QACjB,GAAG,YAAY,CAAC,SAAS;QACzB,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC;YAC/B,WAAW,EAAE,8BAA8B,gBAAgB,GAAG;YAC9D,GAAG,EAAE,uBAAuB;YAC5B,oBAAoB;SACrB,CAAC;KACH,CAAC;IAEiB,KAAK,CAAC,iBAAiB;QACxC,OAAO,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,KAAgC,CAAC,EAAE,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACzG,CAAC;IAEO,UAAU,CAAa;IAE/B;;;;;;;;;;;;;;;;;;OAkBG;IACH,IAAc,SAAS;QACrB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC7C,IAAI,CAAC,UAAU,GAAG,eAAe,CAC/B;gBACE,IAAI,EAAE,IAAI,CAAC,OAAO;gBAClB,WAAW,EAAE,IAAI,CAAC,cAAc,EAAE;aACnC,EACD,YAAY,CACb,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,IAAc,OAAO;QACnB,OAAO,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,gBAAgB,CAAC;IACxE,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACO,KAAK,CAAC,gBAAgB,CAAC,UAAkB;QACjD,qCAAqC;QACrC,IAAI,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YACvB,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,8BAA8B;QAC9B,MAAM,MAAM,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,wDAAwD;YACxD,4CAA4C;YAC5C,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC,GAAG,CAAC,sBAAsB,UAAU,KAAK,CAAC,CAAC;QAEhD,oCAAoC;QACpC,MAAM,EAAC,IAAI,EAAE,KAAK,EAAC,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,EAAE;YAC3D,MAAM,EAAE;gBACN,KAAK,EAAE;oBACL,aAAa,EAAE,SAAS,MAAM,CAAC,KAAK,EAAE;iBACvC;aACF;SACF,CAAC,CAAC;QAEH,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,CAAC,IAAI,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC;QAC1F,CAAC;QAED,sCAAsC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC;QAErF,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC;YACjB,IAAI,CAAC,KAAK,CAAC,IAAI,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC;QAC1F,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,YAAY,UAAU,eAAe,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5D,OAAO,OAAO,CAAC,EAAE,CAAC;IACpB,CAAC"}