@salesforce/b2c-tooling-sdk 1.10.0 → 1.11.1

package/dist/cjs/slas/pkce.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pkce.js","sourceRoot":"","sources":["../../../src/slas/pkce.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;GAIG;AACH,OAAO,EAAC,WAAW,EAAE,UAAU,EAAC,MAAM,aAAa,CAAC;AAEpD;;GAEG;AACH,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACnE,CAAC"}

package/dist/cjs/slas/token.d.ts

@@ -1,24 +0,0 @@
-import type { SlasTokenConfig, SlasTokenResponse, SlasRegisteredLoginConfig } from './types.js';
-/**
- * Retrieves a guest shopper access token from SLAS.
- *
- * - **Private client** (slasClientSecret set): Uses `client_credentials` grant.
- * - **Public client** (no secret): Uses PKCE authorization code flow with `hint=guest`.
- *
- * @param config - SLAS token configuration
- * @returns The token response including access_token and refresh_token
- */
-export declare function getGuestToken(config: SlasTokenConfig): Promise<SlasTokenResponse>;
-/**
- * Retrieves a registered customer access token from SLAS.
- *
- * Uses the `/oauth2/login` endpoint with shopper credentials, then exchanges
- * the authorization code for an access token.
- *
- * - **Public client**: Uses PKCE for code exchange.
- * - **Private client**: Uses client credentials (Basic auth) for code exchange.
- *
- * @param config - SLAS token configuration including shopper credentials
- * @returns The token response including access_token and refresh_token
- */
-export declare function getRegisteredToken(config: SlasRegisteredLoginConfig): Promise<SlasTokenResponse>;

package/dist/cjs/slas/token.js

@@ -1,261 +0,0 @@
-/*
- * Copyright (c) 2025, Salesforce, Inc.
- * SPDX-License-Identifier: Apache-2
- * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
- */
-/**
- * SLAS shopper token retrieval.
- *
- * Supports guest and registered customer flows for both public (PKCE) and
- * private (client_credentials) SLAS clients.
- *
- * @module slas/token
- */
-import { getLogger } from '../logging/logger.js';
-import { generateCodeChallenge, generateCodeVerifier } from './pkce.js';
-/**
- * Builds the SLAS shopper auth base URL.
- */
-function buildBaseUrl(shortCode, organizationId) {
-    return `https://${shortCode}.api.commercecloud.salesforce.com/shopper/auth/v1/organizations/${organizationId}`;
-}
-/**
- * Parses an authorization code and usid from a redirect Location header.
- *
- * @throws Error if the redirect does not contain the expected code parameter
- */
-function parseRedirectCode(locationHeader) {
-    const url = new URL(locationHeader, 'http://localhost');
-    const code = url.searchParams.get('code');
-    const usid = url.searchParams.get('usid') ?? '';
-    if (!code) {
-        throw new Error(`SLAS redirect did not contain authorization code. Location: ${locationHeader}`);
-    }
-    return { code, usid };
-}
-/**
- * Checks a SLAS response for errors and throws with details.
- */
-async function checkResponse(response, context) {
-    if (response.ok)
-        return;
-    let detail = '';
-    try {
-        const body = await response.text();
-        detail = body ? ` — ${body}` : '';
-    }
-    catch {
-        // ignore body parse errors
-    }
-    throw new Error(`SLAS ${context} failed (HTTP ${response.status})${detail}`);
-}
-/**
- * Helper to collect response headers as a plain object for logging.
- */
-function serializeHeaders(response) {
-    const headers = {};
-    response.headers.forEach((value, key) => {
-        headers[key] = value;
-    });
-    return headers;
-}
-/**
- * Performs a logged fetch request following the Auth logging conventions.
- * Returns the response (caller must check status).
- */
-async function loggedFetch(url, init) {
-    const logger = getLogger();
-    const method = init.method ?? 'GET';
-    logger.debug({ method, url }, `[SLAS REQ] ${method} ${url}`);
-    logger.trace({ method, url, headers: init.headers, body: init.body?.toString() }, `[SLAS REQ BODY] ${method} ${url}`);
-    const startTime = Date.now();
-    const response = await fetch(url, init);
-    const duration = Date.now() - startTime;
-    logger.debug({ method, url, status: response.status, duration }, `[SLAS RESP] ${method} ${url} ${response.status} ${duration}ms`);
-    return { response, duration };
-}
-/**
- * Retrieves a guest shopper access token from SLAS.
- *
- * - **Private client** (slasClientSecret set): Uses `client_credentials` grant.
- * - **Public client** (no secret): Uses PKCE authorization code flow with `hint=guest`.
- *
- * @param config - SLAS token configuration
- * @returns The token response including access_token and refresh_token
- */
-export async function getGuestToken(config) {
-    const logger = getLogger();
-    if (config.slasClientSecret) {
-        return getPrivateClientGuestToken(config);
-    }
-    logger.debug({ clientId: config.slasClientId }, '[SLAS] Using public client PKCE guest flow');
-    const baseUrl = buildBaseUrl(config.shortCode, config.organizationId);
-    const verifier = generateCodeVerifier();
-    const challenge = generateCodeChallenge(verifier);
-    // Step 1: Authorize — get authorization code via 303 redirect
-    const authorizeParams = new URLSearchParams({
-        client_id: config.slasClientId,
-        response_type: 'code',
-        redirect_uri: config.redirectUri,
-        hint: 'guest',
-        code_challenge: challenge,
-    });
-    const authorizeUrl = `${baseUrl}/oauth2/authorize?${authorizeParams.toString()}`;
-    const { response: authorizeResponse } = await loggedFetch(authorizeUrl, { redirect: 'manual' });
-    if (authorizeResponse.status !== 303) {
-        const respHeaders = serializeHeaders(authorizeResponse);
-        logger.trace({ headers: respHeaders }, `[SLAS RESP BODY] GET ${authorizeUrl}`);
-        await checkResponse(authorizeResponse, 'authorize');
-        throw new Error(`Expected 303 redirect from SLAS authorize, got ${authorizeResponse.status}`);
-    }
-    const location = authorizeResponse.headers.get('location');
-    if (!location) {
-        throw new Error('SLAS authorize response missing Location header');
-    }
-    const { code, usid } = parseRedirectCode(location);
-    logger.debug({ usid }, '[SLAS] Got authorization code');
-    // Step 2: Exchange code for token
-    const tokenBody = new URLSearchParams({
-        grant_type: 'authorization_code_pkce',
-        client_id: config.slasClientId,
-        code,
-        code_verifier: verifier,
-        redirect_uri: config.redirectUri,
-        channel_id: config.siteId,
-        usid,
-    });
-    const tokenUrl = `${baseUrl}/oauth2/token`;
-    const { response: tokenResponse } = await loggedFetch(tokenUrl, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-        body: tokenBody,
-    });
-    await checkResponse(tokenResponse, 'token exchange (authorization_code_pkce)');
-    const data = (await tokenResponse.json());
-    const respHeaders = serializeHeaders(tokenResponse);
-    logger.trace({ headers: respHeaders, body: data }, `[SLAS RESP BODY] POST ${tokenUrl}`);
-    return data;
-}
-/**
- * Private client guest token via client_credentials grant.
- */
-async function getPrivateClientGuestToken(config) {
-    const logger = getLogger();
-    logger.debug({ clientId: config.slasClientId }, '[SLAS] Using private client client_credentials guest flow');
-    const baseUrl = buildBaseUrl(config.shortCode, config.organizationId);
-    const basicAuth = Buffer.from(`${config.slasClientId}:${config.slasClientSecret}`).toString('base64');
-    const tokenBody = new URLSearchParams({
-        grant_type: 'client_credentials',
-        channel_id: config.siteId,
-    });
-    const tokenUrl = `${baseUrl}/oauth2/token`;
-    const { response: tokenResponse } = await loggedFetch(tokenUrl, {
-        method: 'POST',
-        headers: {
-            'Content-Type': 'application/x-www-form-urlencoded',
-            Authorization: `Basic ${basicAuth}`,
-        },
-        body: tokenBody,
-    });
-    await checkResponse(tokenResponse, 'token (client_credentials)');
-    const data = (await tokenResponse.json());
-    const respHeaders = serializeHeaders(tokenResponse);
-    logger.trace({ headers: respHeaders, body: data }, `[SLAS RESP BODY] POST ${tokenUrl}`);
-    return data;
-}
-/**
- * Retrieves a registered customer access token from SLAS.
- *
- * Uses the `/oauth2/login` endpoint with shopper credentials, then exchanges
- * the authorization code for an access token.
- *
- * - **Public client**: Uses PKCE for code exchange.
- * - **Private client**: Uses client credentials (Basic auth) for code exchange.
- *
- * @param config - SLAS token configuration including shopper credentials
- * @returns The token response including access_token and refresh_token
- */
-export async function getRegisteredToken(config) {
-    const logger = getLogger();
-    const baseUrl = buildBaseUrl(config.shortCode, config.organizationId);
-    const isPrivate = Boolean(config.slasClientSecret);
-    logger.debug({ clientId: config.slasClientId, isPrivate }, '[SLAS] Using registered customer login flow');
-    const verifier = generateCodeVerifier();
-    const challenge = generateCodeChallenge(verifier);
-    // Step 1: Login with shopper credentials
-    const shopperAuth = Buffer.from(`${config.shopperLogin}:${config.shopperPassword}`).toString('base64');
-    const loginBody = new URLSearchParams({
-        client_id: config.slasClientId,
-        channel_id: config.siteId,
-        code_challenge: challenge,
-        redirect_uri: config.redirectUri,
-    });
-    const loginUrl = `${baseUrl}/oauth2/login`;
-    const { response: loginResponse } = await loggedFetch(loginUrl, {
-        method: 'POST',
-        headers: {
-            'Content-Type': 'application/x-www-form-urlencoded',
-            Authorization: `Basic ${shopperAuth}`,
-        },
-        body: loginBody,
-        redirect: 'manual',
-    });
-    if (loginResponse.status !== 303) {
-        const respHeaders = serializeHeaders(loginResponse);
-        logger.trace({ headers: respHeaders }, `[SLAS RESP BODY] POST ${loginUrl}`);
-        await checkResponse(loginResponse, 'login');
-        throw new Error(`Expected 303 redirect from SLAS login, got ${loginResponse.status}`);
-    }
-    const location = loginResponse.headers.get('location');
-    if (!location) {
-        throw new Error('SLAS login response missing Location header');
-    }
-    const { code, usid } = parseRedirectCode(location);
-    logger.debug({ usid }, '[SLAS] Got authorization code from login');
-    // Step 2: Exchange code for token
-    const tokenUrl = `${baseUrl}/oauth2/token`;
-    if (isPrivate) {
-        const basicAuth = Buffer.from(`${config.slasClientId}:${config.slasClientSecret}`).toString('base64');
-        const tokenBody = new URLSearchParams({
-            grant_type: 'authorization_code',
-            code,
-            redirect_uri: config.redirectUri,
-            channel_id: config.siteId,
-            usid,
-        });
-        const { response: tokenResponse } = await loggedFetch(tokenUrl, {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/x-www-form-urlencoded',
-                Authorization: `Basic ${basicAuth}`,
-            },
-            body: tokenBody,
-        });
-        await checkResponse(tokenResponse, 'token exchange (authorization_code)');
-        const data = (await tokenResponse.json());
-        const respHeaders = serializeHeaders(tokenResponse);
-        logger.trace({ headers: respHeaders, body: data }, `[SLAS RESP BODY] POST ${tokenUrl}`);
-        return data;
-    }
-    // Public client — use PKCE
-    const tokenBody = new URLSearchParams({
-        grant_type: 'authorization_code_pkce',
-        client_id: config.slasClientId,
-        code,
-        code_verifier: verifier,
-        redirect_uri: config.redirectUri,
-        channel_id: config.siteId,
-        usid,
-    });
-    const { response: tokenResponse } = await loggedFetch(tokenUrl, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-        body: tokenBody,
-    });
-    await checkResponse(tokenResponse, 'token exchange (authorization_code_pkce)');
-    const data = (await tokenResponse.json());
-    const respHeaders = serializeHeaders(tokenResponse);
-    logger.trace({ headers: respHeaders, body: data }, `[SLAS RESP BODY] POST ${tokenUrl}`);
-    return data;
-}
-//# sourceMappingURL=token.js.map

package/dist/cjs/slas/token.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../src/slas/token.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;;GAOG;AACH,OAAO,EAAC,SAAS,EAAC,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAC,qBAAqB,EAAE,oBAAoB,EAAC,MAAM,WAAW,CAAC;AAGtE;;GAEG;AACH,SAAS,YAAY,CAAC,SAAiB,EAAE,cAAsB;IAC7D,OAAO,WAAW,SAAS,mEAAmE,cAAc,EAAE,CAAC;AACjH,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,cAAsB;IAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAEhD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,+DAA+D,cAAc,EAAE,CAAC,CAAC;IACnG,CAAC;IAED,OAAO,EAAC,IAAI,EAAE,IAAI,EAAC,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,aAAa,CAAC,QAAkB,EAAE,OAAe;IAC9D,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO;IAExB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,QAAQ,OAAO,iBAAiB,QAAQ,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,QAAkB;IAC1C,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,IAAiB;IACvD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;IAEpC,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAC,EAAE,cAAc,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAC,EAAE,mBAAmB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;IAEpH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAExC,MAAM,CAAC,KAAK,CACV,EAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAC,EAChD,eAAe,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,IAAI,CAChE,CAAC;IAEF,OAAO,EAAC,QAAQ,EAAE,QAAQ,EAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAuB;IACzD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,OAAO,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,EAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAC,EAAE,4CAA4C,CAAC,CAAC;IAE5F,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAElD,8DAA8D;IAC9D,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC;QAC1C,SAAS,EAAE,MAAM,CAAC,YAAY;QAC9B,aAAa,EAAE,MAAM;QACrB,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,IAAI,EAAE,OAAO;QACb,cAAc,EAAE,SAAS;KAC1B,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,GAAG,OAAO,qBAAqB,eAAe,CAAC,QAAQ,EAAE,EAAE,CAAC;IAEjF,MAAM,EAAC,QAAQ,EAAE,iBAAiB,EAAC,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE,EAAC,QAAQ,EAAE,QAAQ,EAAC,CAAC,CAAC;IAE5F,IAAI,iBAAiB,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,EAAC,OAAO,EAAE,WAAW,EAAC,EAAE,wBAAwB,YAAY,EAAE,CAAC,CAAC;QAC7E,MAAM,aAAa,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,kDAAkD,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,EAAC,IAAI,EAAE,IAAI,EAAC,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,CAAC,EAAC,IAAI,EAAC,EAAE,+BAA+B,CAAC,CAAC;IAEtD,kCAAkC;IAClC,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;QACpC,UAAU,EAAE,yBAAyB;QACrC,SAAS,EAAE,MAAM,CAAC,YAAY;QAC9B,IAAI;QACJ,aAAa,EAAE,QAAQ;QACvB,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,UAAU,EAAE,MAAM,CAAC,MAAM;QACzB,IAAI;KACL,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,GAAG,OAAO,eAAe,CAAC;IAC3C,MAAM,EAAC,QAAQ,EAAE,aAAa,EAAC,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE;QAC5D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAC,cAAc,EAAE,mCAAmC,EAAC;QAC9D,IAAI,EAAE,SAAS;KAChB,CAAC,CAAC;IAEH,MAAM,aAAa,CAAC,aAAa,EAAE,0CAA0C,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAsB,CAAC;IAC/D,MAAM,WAAW,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,EAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAC,EAAE,yBAAyB,QAAQ,EAAE,CAAC,CAAC;IAEtF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,0BAA0B,CAAC,MAAuB;IAC/D,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,CAAC,KAAK,CAAC,EAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAC,EAAE,2DAA2D,CAAC,CAAC;IAE3G,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEtG,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;QACpC,UAAU,EAAE,oBAAoB;QAChC,UAAU,EAAE,MAAM,CAAC,MAAM;KAC1B,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,GAAG,OAAO,eAAe,CAAC;IAC3C,MAAM,EAAC,QAAQ,EAAE,aAAa,EAAC,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE;QAC5D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,aAAa,EAAE,SAAS,SAAS,EAAE;SACpC;QACD,IAAI,EAAE,SAAS;KAChB,CAAC,CAAC;IAEH,MAAM,aAAa,CAAC,aAAa,EAAE,4BAA4B,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAsB,CAAC;IAC/D,MAAM,WAAW,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,EAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAC,EAAE,yBAAyB,QAAQ,EAAE,CAAC,CAAC;IAEtF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAiC;IACxE,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAEnD,MAAM,CAAC,KAAK,CAAC,EAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAE,SAAS,EAAC,EAAE,6CAA6C,CAAC,CAAC;IAExG,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAElD,yCAAyC;IACzC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEvG,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;QACpC,SAAS,EAAE,MAAM,CAAC,YAAY;QAC9B,UAAU,EAAE,MAAM,CAAC,MAAM;QACzB,cAAc,EAAE,SAAS;QACzB,YAAY,EAAE,MAAM,CAAC,WAAW;KACjC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,GAAG,OAAO,eAAe,CAAC;IAC3C,MAAM,EAAC,QAAQ,EAAE,aAAa,EAAC,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE;QAC5D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,aAAa,EAAE,SAAS,WAAW,EAAE;SACtC;QACD,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC;IAEH,IAAI,aAAa,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACjC,MAAM,WAAW,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,EAAC,OAAO,EAAE,WAAW,EAAC,EAAE,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QAC1E,MAAM,aAAa,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,8CAA8C,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,EAAC,IAAI,EAAE,IAAI,EAAC,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,CAAC,EAAC,IAAI,EAAC,EAAE,0CAA0C,CAAC,CAAC;IAEjE,kCAAkC;IAClC,MAAM,QAAQ,GAAG,GAAG,OAAO,eAAe,CAAC;IAE3C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtG,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;YACpC,UAAU,EAAE,oBAAoB;YAChC,IAAI;YACJ,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,UAAU,EAAE,MAAM,CAAC,MAAM;YACzB,IAAI;SACL,CAAC,CAAC;QAEH,MAAM,EAAC,QAAQ,EAAE,aAAa,EAAC,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE;YAC5D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,aAAa,EAAE,SAAS,SAAS,EAAE;aACpC;YACD,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;QAEH,MAAM,aAAa,CAAC,aAAa,EAAE,qCAAqC,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAsB,CAAC;QAC/D,MAAM,WAAW,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,EAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAC,EAAE,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QAEtF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2BAA2B;IAC3B,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;QACpC,UAAU,EAAE,yBAAyB;QACrC,SAAS,EAAE,MAAM,CAAC,YAAY;QAC9B,IAAI;QACJ,aAAa,EAAE,QAAQ;QACvB,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,UAAU,EAAE,MAAM,CAAC,MAAM;QACzB,IAAI;KACL,CAAC,CAAC;IAEH,MAAM,EAAC,QAAQ,EAAE,aAAa,EAAC,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE;QAC5D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAC,cAAc,EAAE,mCAAmC,EAAC;QAC9D,IAAI,EAAE,SAAS;KAChB,CAAC,CAAC;IAEH,MAAM,aAAa,CAAC,aAAa,EAAE,0CAA0C,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAsB,CAAC;IAC/D,MAAM,WAAW,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,EAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAC,EAAE,yBAAyB,QAAQ,EAAE,CAAC,CAAC;IAEtF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cjs/slas/types.d.ts

@@ -1,43 +0,0 @@
-/**
- * Types for SLAS Shopper Login token retrieval.
- *
- * @module slas/types
- */
-/**
- * Response from SLAS token endpoints.
- */
-export interface SlasTokenResponse {
-    access_token: string;
-    refresh_token: string;
-    expires_in: number;
-    token_type: string;
-    usid: string;
-    customer_id: string;
-    id_token?: string;
-}
-/**
- * Configuration for SLAS shopper token retrieval.
- */
-export interface SlasTokenConfig {
-    /** SCAPI short code */
-    shortCode: string;
-    /** Organization ID in f_ecom_xxxx_yyy format */
-    organizationId: string;
-    /** SLAS client ID */
-    slasClientId: string;
-    /** SLAS client secret (undefined = public client) */
-    slasClientSecret?: string;
-    /** B2C Commerce site/channel ID */
-    siteId: string;
-    /** OAuth redirect URI */
-    redirectUri: string;
-}
-/**
- * Configuration for registered customer login.
- */
-export interface SlasRegisteredLoginConfig extends SlasTokenConfig {
-    /** Shopper login/username */
-    shopperLogin: string;
-    /** Shopper password */
-    shopperPassword: string;
-}

package/dist/cjs/slas/types.js

@@ -1,7 +0,0 @@
-/*
- * Copyright (c) 2025, Salesforce, Inc.
- * SPDX-License-Identifier: Apache-2
- * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
- */
-export {};
-//# sourceMappingURL=types.js.map

package/dist/cjs/slas/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/slas/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/cjs/telemetry/index.d.ts

@@ -1,34 +0,0 @@
-/**
- * Internal telemetry module for the B2C CLI and MCP server. Not part of the
- * public SDK surface — intentionally excluded from generated API documentation.
- * External consumers should not rely on this module's API stability.
- *
- * @module telemetry
- * @internal
- */
-export type { TelemetryAttributes, TelemetryEventProperties, TelemetryOptions } from './types.js';
-export { Telemetry } from './telemetry.js';
-import { Telemetry } from './telemetry.js';
-import type { TelemetryOptions } from './types.js';
-/**
- * Factory function to create a Telemetry instance.
- *
- * @param options - Telemetry configuration options
- * @returns A new Telemetry instance
- *
- * @example
- * ```typescript
- * import { createTelemetry } from '@salesforce/b2c-tooling-sdk/telemetry';
- *
- * const telemetry = createTelemetry({
- *   project: 'my-mcp-server',
- *   appInsightsKey: process.env.APP_INSIGHTS_KEY,
- *   version: '1.0.0',
- *   initialAttributes: { environment: 'production' },
- * });
- *
- * await telemetry.start();
- * telemetry.sendEvent('SERVER_STATUS', { status: 'started' });
- * ```
- */
-export declare function createTelemetry(options: TelemetryOptions): Telemetry;

package/dist/cjs/telemetry/index.js

@@ -1,32 +0,0 @@
-/*
- * Copyright (c) 2025, Salesforce, Inc.
- * SPDX-License-Identifier: Apache-2
- * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
- */
-export { Telemetry } from './telemetry.js';
-import { Telemetry } from './telemetry.js';
-/**
- * Factory function to create a Telemetry instance.
- *
- * @param options - Telemetry configuration options
- * @returns A new Telemetry instance
- *
- * @example
- * ```typescript
- * import { createTelemetry } from '@salesforce/b2c-tooling-sdk/telemetry';
- *
- * const telemetry = createTelemetry({
- *   project: 'my-mcp-server',
- *   appInsightsKey: process.env.APP_INSIGHTS_KEY,
- *   version: '1.0.0',
- *   initialAttributes: { environment: 'production' },
- * });
- *
- * await telemetry.start();
- * telemetry.sendEvent('SERVER_STATUS', { status: 'started' });
- * ```
- */
-export function createTelemetry(options) {
-    return new Telemetry(options);
-}
-//# sourceMappingURL=index.js.map

package/dist/cjs/telemetry/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/telemetry/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAYH,OAAO,EAAC,SAAS,EAAC,MAAM,gBAAgB,CAAC;AAEzC,OAAO,EAAC,SAAS,EAAC,MAAM,gBAAgB,CAAC;AAGzC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,eAAe,CAAC,OAAyB;IACvD,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC"}

package/dist/cjs/telemetry/telemetry.d.ts

@@ -1,88 +0,0 @@
-import type { TelemetryAttributes, TelemetryOptions } from './types.js';
-/**
- * Telemetry client for sending events to Application Insights.
- *
- * @example
- * ```typescript
- * const telemetry = new Telemetry({
- *   project: 'my-app',
- *   appInsightsKey: 'InstrumentationKey=...',
- *   version: '1.0.0',
- *   dataDir: '/path/to/data',
- * });
- *
- * await telemetry.start();
- * telemetry.sendEvent('USER_ACTION', { action: 'click' });
- * telemetry.stop();
- * ```
- */
-export declare class Telemetry {
-    private attributes;
-    private cliId;
-    private project;
-    private client;
-    private sessionId;
-    private started;
-    private version;
-    private appInsightsKey;
-    private traceLog;
-    /**
-     * Check if telemetry is disabled via environment variables.
-     * Supports both SF_DISABLE_TELEMETRY (sf CLI standard) and SFCC_DISABLE_TELEMETRY.
-     */
-    static isDisabled(): boolean;
-    /**
-     * Get the connection string for telemetry, respecting disable flags and env overrides.
-     * @param projectDefault - Default connection string from project config (e.g., package.json)
-     * @returns Connection string to use, or undefined if telemetry should be disabled
-     */
-    static getConnectionString(projectDefault?: string): string | undefined;
-    constructor(options: TelemetryOptions);
-    /**
-     * Add additional attributes to include with all future events.
-     */
-    addAttributes(attributes: TelemetryAttributes): void;
-    /**
-     * Send a telemetry event. Events are buffered until you call {@link flush} or
-     * {@link stop}. Use this for batching; use {@link sendEventAndFlush} when you
-     * need one event sent before continuing.
-     *
-     * @param eventName - Name of the event (e.g., 'SERVER_STATUS', 'TOOL_CALLED')
-     * @param attributes - Event-specific attributes (only string/number/boolean are sent)
-     */
-    sendEvent(eventName: string, attributes?: TelemetryAttributes): void;
-    /**
-     * Send a telemetry event and flush immediately. Use this when you need the event
-     * delivered before continuing (e.g. after a tool call or server lifecycle event),
-     * so you don't have to remember to call {@link flush}. For batching multiple
-     * events and flushing once, use {@link sendEvent} and then {@link flush}.
-     *
-     * @param eventName - Name of the event (e.g., 'SERVER_STATUS', 'TOOL_CALLED')
-     * @param attributes - Event-specific attributes (only string/number/boolean are sent)
-     */
-    sendEventAndFlush(eventName: string, attributes?: TelemetryAttributes): Promise<void>;
-    /**
-     * Send an exception to telemetry.
-     *
-     * @param error - The error to report
-     * @param attributes - Additional attributes to include with the exception
-     */
-    sendException(error: Error, attributes?: TelemetryAttributes): void;
-    /**
-     * Start the telemetry reporter.
-     * Must be called before sending events.
-     */
-    start(): Promise<void>;
-    /**
-     * Flush pending telemetry events without stopping the client.
-     * Use this for long-running processes that need to ensure events are sent periodically.
-     */
-    flush(): Promise<void>;
-    /**
-     * Stop the telemetry client and flush any pending events.
-     * Includes a delay to allow async HTTP requests to complete.
-     */
-    stop(): Promise<void>;
-    private buildEventProperties;
-    private createClient;
-}